On 10/03/2011 05:28 PM, [email protected] wrote:
Hi everybody.
I'm trying and trying to authentificate with my own ldap. (I've changed the
names of the relationship between users and roles).
The conection to the ldap is correct. (I've seen connection and retrieving
of the user entity when debugging.)
Synchronisation with db seems correct, as you can see in these logs:
03.10.2011 17:00:02 DEBUG
[org.apache.jetspeed.security.spi.impl.DefaultJetspeedSecuritySynchronizer.synchronizeUserPrincipal
():156] Synchronizing UserPrincipal(partenaire)
03.10.2011 17:00:02 DEBUG
[org.apache.jetspeed.security.spi.impl.DefaultJetspeedSecuritySynchronizer.synchronizeEntity
():189] Synchronizing entity user id: partenaire
03.10.2011 17:00:02 DEBUG
[org.apache.jetspeed.security.spi.impl.DefaultJetspeedSecuritySynchronizer.synchronizeEntity
():189] Synchronizing entity role id: partenaires_admin
03.10.2011 17:00:02 DEBUG
[org.apache.jetspeed.security.spi.impl.DefaultJetspeedSecuritySynchronizer.synchronizeEntity
():375] Synchronized entity role id: partenaires_admin mapped attributes
...
03.10.2011 17:00:03 DEBUG
[org.apache.jetspeed.security.spi.impl.DefaultJetspeedSecuritySynchronizer.synchronizeEntity
():189] Synchronizing entity role id:
partenaires_moissonnage_gallica_partenaire
03.10.2011 17:00:03 DEBUG
[org.apache.jetspeed.security.spi.impl.DefaultJetspeedSecuritySynchronizer.synchronizeEntity
():375] Synchronized entity role id:
partenaires_moissonnage_gallica_partenaire mapped attributes
03.10.2011 17:00:03 WARN
[org.apache.jetspeed.decoration.DecorationFactoryImpl.getConfiguration
():287] Could not locate the decorator.properties configuration file for
decoration "clear". This decoration may not exist.
But after I have the following exception:
ATTENTION: Exception lors de l'authentification par login du nom
d'utilisateur partenaire
javax.security.auth.login.LoginException: A user member role association is
not
allowed.
at org.apache.jetspeed.security.impl.DefaultLoginModule.login
(DefaultLog
inModule.java:258)
This is a o.a.j.security.SecurityException.PRINCIPAL_ASSOCIATION_UNSUPPORTED
thrown from BaseJetspeedPrincipalManager#addPrincipal or #addAssociation method.
I suspect your changes in the user/role association mapping are not or no longer
aligned with the (Jetspeed generic, not LDAP specific) association handlers
configuration in security-managers.xml
It might help if you can provide a diff of your changes compared tot the default
jetspeed configuration files for these.
Ate
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke
(NativeMethodAccessorImpl.
java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke
(DelegatingMethodAcces
sorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke
(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000
(LoginContext.java:1
86)
at javax.security.auth.login.LoginContext$4.run
(LoginContext.java:683)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv
(LoginContext.java:6
80)
at javax.security.auth.login.LoginContext.login
(LoginContext.java:579)
at org.apache.catalina.realm.JAASRealm.authenticate
(JAASRealm.java:363)
at org.apache.catalina.authenticator.FormAuthenticator.authenticate
(Form
Authenticator.java:258)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke
(Authentica
torBase.java:417)
at org.apache.catalina.core.StandardHostValve.invoke
(StandardHostValve.j
ava:128)
at org.apache.catalina.valves.ErrorReportValve.invoke
(ErrorReportValve.j
ava:102)
at org.apache.catalina.core.StandardEngineValve.invoke
(StandardEngineVal
ve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service
(CoyoteAdapter.jav
a:286)
at org.apache.coyote.http11.Http11Processor.process
(Http11Processor.java
:845)
at org.apache.coyote.http11.Http11Protocol
$Http11ConnectionHandler.proce
ss(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run
(JIoEndpoint.java:44
7)
at java.lang.Thread.run(Thread.java:619)
I don't know what to do.
I've try to remove the jaas form my context file: same behavior.
Regards,
J.
Exposition Vogue : l'aventure d'une maison de disque - jusqu'au13 novembre
2011 - BnF - François-Mitterrand / Allée Julien Cain Avant d'imprimer, pensez à
l'environnement.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
