Hi john, Thanks for the info. I see messages_en.properties & cas-theme-default.properties resides in WEB-INF/classes. Any suggestions
Thanks Shyam On Tue, Oct 14, 2014 at 9:17 PM, John Gasper <[email protected]> wrote: > I've see nthe Theme error before, but I don't remember the exact cause. > The first thing off the top of my head is that there is a missing > messages_en.properties file or a missing cas-theme-default.properties from > the WEB-INF/classes/. > > If the insufficient privileges error isn't because the account changing > the password doesn't have enough privileges then I'm not sure what else it > could be. > > > > On 10/13/14 9:58 PM, shyam soundar wrote: > > Hi John, > > Thanks for your suggestion. What about other 2 issues i have mentioned. > > 2014-10-13 10:32:41,383 WARN [org.springframework.context. > support.ResourceBundleMessageSource] - <ResourceBundle [theme] not found > for MessageSource: Can't find bundle for base name theme, locale en_US> > 2014-10-13 10:32:41,383 WARN > [org.springframework.context.support.ResourceBundleMessageSource] - > <ResourceBundle [theme] not found for MessageSource: Can't find bundle for > base name theme, locale en_US> > *2014-10-13 10:32:41,383 ERROR [org.springframework.web.* > *servlet.tags.ThemeTag] - <Theme 'theme': No message found under code > 'standard.custom.css.file' for locale 'en_US'.> > javax.servlet.jsp.**JspTagException: > Theme 'theme': No message found under code 'standard.custom.css.file' for > locale 'en_US'.* > > *While changing password* > > 2014-10-13 10:35:34,358 ERROR [net.unicon.cas. > passwordmanager.flow.ProcessChangePasswordAction] - <Unknown exception > changing user's password.> > org.springframework.ldap.NoPermissionException: [LDAP: error code 50 - > 00000005: SecErr: DSID-031A1169, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 > ^@]; nested exception is javax.naming.NoPermissionException: [LDAP: error > code 50 - 00000005: SecErr: DSID-031A1169, problem 4003 > (INSUFF_ACCESS_RIGHTS), data 0 > > Thanks > Shyam > > > On Mon, Oct 13, 2014 at 8:24 PM, John Gasper <[email protected]> wrote: > >> The PKIX error is SSL related. "unable to find valid certification path >> to requested target" tells us it can't find a valid certificate chain for >> the presented cert. Most likely you are connecting to LDAP via SSL and the >> cert isn't trusted by Java. You'll need to add the root cert in to Java's >> cacerts file. There's lots of resources available via Google to help you >> with that. >> >> --- >> *John Gasper* >> IAM Consultant >> Unicon, Inc. >> PGP/GPG Key: 0xbafee3ef >> >> On 10/13/14 4:13 AM, shyam soundar wrote: >> >> >> Hi, >> >> I am playing with cas-password-manager & facing some issues related to >> ldap & theme. >> >> *Ref: https://github.com/Unicon/cas-password-manager >> <https://github.com/Unicon/cas-password-manager>* >> >> *Please find the error log below* >> >> >> at java.lang.Thread.run(Thread.java:701) >> Caused by: sun.security.validator.ValidatorException: PKIX path building >> failed: sun.security.provider.certpath.SunCertPathBuilderException: unable >> to find valid certification path to requested target >> at >> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:324) >> at >> sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:224) >> at sun.security.validator.Validator.validate(Validator.java:235) >> at >> sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:147) >> at >> sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:230) >> at >> sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:270) >> at >> sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1147) >> ... 48 more >> Caused by: sun.security.provider.certpath.SunCertPathBuilderException: >> unable to find valid certification path to requested target >> at >> sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:197) >> at >> java.security.cert.CertPathBuilder.build(CertPathBuilder.java:255) >> at >> sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:319) >> ... 54 more >> 2014-10-13 10:32:41,383 WARN >> [org.springframework.context.support.ResourceBundleMessageSource] - >> <ResourceBundle [theme] not found for MessageSource: Can't find bundle for >> base name theme, locale en_US> >> 2014-10-13 10:32:41,383 WARN >> [org.springframework.context.support.ResourceBundleMessageSource] - >> <ResourceBundle [theme] not found for MessageSource: Can't find bundle for >> base name theme, locale en_US> >> 2014-10-13 10:32:41,383 ERROR >> [org.springframework.web.servlet.tags.ThemeTag] - <Theme 'theme': No >> message found under code 'standard.custom.css.file' for locale 'en_US'.> >> javax.servlet.jsp.JspTagException: Theme 'theme': No message found under >> code 'standard.custom.css.file' for locale 'en_US'. >> >> *While changing password* >> >> 2014-10-13 10:35:34,358 ERROR >> [net.unicon.cas.passwordmanager.flow.ProcessChangePasswordAction] - >> <Unknown exception changing user's password.> >> org.springframework.ldap.NoPermissionException: [LDAP: error code 50 - >> 00000005: SecErr: DSID-031A1169, problem 4003 (INSUFF_ACCESS_RIGHTS), data 0 >> ^@]; nested exception is javax.naming.NoPermissionException: [LDAP: error >> code 50 - 00000005: SecErr: DSID-031A1169, problem 4003 >> (INSUFF_ACCESS_RIGHTS), data 0 >> >> Can any one help me on this >> >> Thanks >> Shyam >> >> >> -- >> You are currently subscribed to [email protected] as: >> [email protected] >> To unsubscribe, change settings or access archives, see >> http://www.ja-sig.org/wiki/display/JSG/cas-user >> >> >> -- >> You are currently subscribed to [email protected] as: >> [email protected] >> To unsubscribe, change settings or access archives, see >> http://www.ja-sig.org/wiki/display/JSG/cas-user >> >> > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > > -- > You are currently subscribed to [email protected] as: > [email protected] > To unsubscribe, change settings or access archives, see > http://www.ja-sig.org/wiki/display/JSG/cas-user > > -- You are currently subscribed to [email protected] as: [email protected] To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/cas-user
