When authorizing using headers and an active directory account, roles are not assigned (tried it using cURL). Using a local GeoServer account it works fine, cURL returns the response from getCapabilities. Using an AD-account It seems as though the login is successful in the GeoServer log: 2017-05-08 16:37:32,839 TRACE [geoserver.security] - logged in as USER But in the Tomcat logs I encounter the following message: 08-May-2017 16:37:32.854 SEVERE [http-nio-8080-exec-1] org.apache.catalina.core.StandardWrapperValve.invoke Servlet.service() for servlet [dispatcher] in context with path [/geoserver] threw exception at org.geoserver.security.filter.GeoServerCredentialsFromRequestHeaderFilter.doAuthenticate(GeoServerCredentialsFromRequestHeaderFilter.java:165) java.lang.ClassCastException: org.springframework.security.core.authority.SimpleGrantedAuthority cannot be cast to org.geoserver.security.impl.GeoServerRole Full Tomcat log is attached. |