Re: Problem with permissions - no permission to view main but other pages...

Tue, 11 Mar 2008 03:42:15 -0700 

Hi again,

Is this probably the same problem as in:
https://issues.apache.org/jira/browse/JSPWIKI-140?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel

I've still got no clue where the problem can be...
Does no one have the same problem?

Greetings
Conny


Conny Burko schrieb:

Hi

I've just installed the JSPWiki 2.6 with Tomcat 6.0.14.
All the "old" contents from the JSPWiki 2.4 are there and everything seems to be all right.
But when I try login there there is the problem, that I cannot access the main Page, although my login was successfull.
2008-03-10 12:07:54,809 [TP-Processor1] INFO com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Remote user changed to cbu 2008-03-10 12:07:54,809 [TP-Processor1] INFO com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User principal changed to cbu 2008-03-10 12:07:54,812 [TP-Processor1] INFO SecurityLog JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - WikiSecurityEvent.LOGIN_AUTHENTICATED [EMAIL PROTECTED], princpal=org.apache.catalina.realm.GenericPrincipal cbu, [EMAIL PROTECTED] 2008-03-10 12:07:54,813 [TP-Processor1] WARN com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User profile 'cbu' not found. This is normal for container-auth users who haven't set up a profile yet. 2008-03-10 12:07:54,814 [TP-Processor1] INFO JSPWiki JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Successfully authenticated user cbu (container auth) 2008-03-10 12:07:54,815 [TP-Processor1] INFO JSPWiki JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Redirecting user to https://192.168.1.107/JSPWiki/Wiki.jsp?page=Main 2008-03-10 12:07:54,829 [TP-Processor1] INFO com.ecyrd.jspwiki.WikiContext JSPWiki:/JSPWiki/Wiki.jsp JSPWiki:https://192.168.1.107/JSPWiki/Wiki.jsp - User cbu has no access - forbidden (permission=("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Main","view"))
When I try to login via onother page (.../JSPWiki/Login.jsp?redirect=KnowHow) the login is ok and the page ask for is shown. 
But I'm still not able to go to the "Main" Page.

There is this errorpage displayed:
---------------------------


     Forbidden

*Sorry, but you are not allowed to do that.*
Usually we block access to something because you do not have the correct privileges (/e.g./, read, edit, comment) for the page you are looking for. In this particular case, it is likely that you are not listed in the page's access control list or that your privileges aren't high enough (you want to edit, but ACL only allows 'read').
It is also possible that JSPWiki cannot find its security policy, or that the policy is not configured correctly. Either of these cases would cause JSPWiki to block access, too. 

Better luck next time. <https://192.168.1.107/JSPWiki/>

---------------------------

My jspwiki.policy is this:

grant principal com.ecyrd.jspwiki.auth.authorize.Role "All" {
permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:Main", "view"; permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "editPreferences"; permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "editProfile"; permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "login"; 
};

grant principal com.ecyrd.jspwiki.auth.authorize.Role "Authenticated" {
permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", "view,modify,rename"; permission com.ecyrd.jspwiki.auth.permissions.GroupPermission "*:*", "view"; permission com.ecyrd.jspwiki.auth.permissions.GroupPermission "*:<groupmember>", "edit"; permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "createPages,createGroups"; 
};

grant principal com.ecyrd.jspwiki.auth.GroupPrincipal "Admin" {
permission com.ecyrd.jspwiki.auth.permissions.AllPermission "*";
};
grant principal com.ecyrd.jspwiki.auth.authorize.Role "JspWikiAdmin" {
permission com.ecyrd.jspwiki.auth.permissions.AllPermission "*";
};


I
Can anyone see what is wrong with my configuration?
Any help is welcome!!!!

Greetings & Thanks

Conny


---------------------------------------------------------
-- HERE SOME ADDITIONAL INFORMATION ---
---------------------------------------------------------
Here is the complete Code of the JSPWiki.log when the server is started and the first requests are made.
2008-03-10 12:05:19,182 [main] INFO com.ecyrd.jspwiki.WikiEngine - ******************************************* 2008-03-10 12:05:19,186 [main] INFO com.ecyrd.jspwiki.WikiEngine - JSPWiki 2.6.0 starting. Whee! 2008-03-10 12:05:19,195 [main] INFO com.ecyrd.jspwiki.WikiEngine - Servlet container: Apache Tomcat/6.0.14 2008-03-10 12:05:19,255 [main] INFO com.ecyrd.jspwiki.WikiEngine - JSPWiki working directory is '/nC-Wiki/work' 2008-03-10 12:05:19,798 [main] INFO com.ecyrd.jspwiki.providers.AbstractFileProvider - Wikipages are read from '/nC-Wiki/content' 2008-03-10 12:05:19,834 [main] INFO com.ecyrd.jspwiki.plugin.PluginManager - Registering plugins 2008-03-10 12:05:19,915 [main] INFO com.ecyrd.jspwiki.diff.DifferenceManager - Using difference provider: TraditionalDiffProvider 2008-03-10 12:05:20,062 [main] INFO com.ecyrd.jspwiki.search.LuceneSearchProvider - Lucene enabled, cache will be in: /nC-Wiki/work/lucene 2008-03-10 12:05:20,295 [main] INFO com.ecyrd.jspwiki.ui.EditorManager - Registering editor modules 2008-03-10 12:05:20,433 [JSPWiki Lucene Indexer] INFO com.ecyrd.jspwiki.search.LuceneSearchProvider - Files found in Lucene directory, not reindexing. 2008-03-10 12:05:20,482 [main] INFO com.ecyrd.jspwiki.auth.AuthenticationManager - Checking JAAS configuration... 2008-03-10 12:05:20,482 [main] INFO com.ecyrd.jspwiki.auth.AuthenticationManager - JAAS not configured. Installing default configuration: file:/usr/share/apache-tomcat-6.0.14/webapps/JSPWiki/WEB-INF/jspwiki.jaas. You can set the java.security.auth.login.config system property to point to your jspwiki.jaas file, or add the entries from jspwiki.jaas to your own JAAS configuration file. 2008-03-10 12:05:20,581 [main] INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - Examining jndi:/forum26/JSPWiki/WEB-INF/web.xml 2008-03-10 12:05:20,808 [main] INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - JSPWiki is using container-managed authentication. 2008-03-10 12:05:20,808 [main] INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - JSPWiki determined the web container manages these roles: [com.ecyrd.jspwiki.auth.authorize.Role: nC Alle] [com.ecyrd.jspwiki.auth.authorize.Role: JspWikiAdmin] [com.ecyrd.jspwiki.auth.authorize.Role: Authenticated] 2008-03-10 12:05:20,808 [main] INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - Authorizer WebContainerAuthorizer initialized successfully. 2008-03-10 12:05:20,939 [main] INFO com.ecyrd.jspwiki.auth.AuthorizationManager - Initialized default security policy: /usr/share/apache-tomcat-6.0.14/webapps/JSPWiki/WEB-INF/jspwiki.policy 2008-03-10 12:05:20,940 [main] INFO com.ecyrd.jspwiki.auth.authorize.GroupManager - Attempting to load group database class com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase 2008-03-10 12:05:20,945 [main] INFO com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase - XML group database at /nC-Wiki/groupdatabase.xml 2008-03-10 12:05:21,093 [main] INFO com.ecyrd.jspwiki.auth.authorize.GroupManager - Group database initialized. 2008-03-10 12:05:21,104 [main] INFO com.ecyrd.jspwiki.auth.authorize.GroupManager - Authorizer GroupManager initialized successfully; loaded 5 group(s). 2008-03-10 12:05:21,149 [main] INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Using JDK 1.5 Platform MBeanServer 2008-03-10 12:05:21,528 [main] INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - com.sun.jmx.mbeanserver.JmxMBeanServer 2008-03-10 12:05:21,528 [main] INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - DefaultDomain 2008-03-10 12:05:21,551 [main] INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean Core bean 2008-03-10 12:05:21,554 [main] INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean User administration 2008-03-10 12:05:21,564 [main] INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean Search manager 2008-03-10 12:05:21,566 [main] INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean Plugins 2008-03-10 12:05:21,567 [main] INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean WikiWizard 2008-03-10 12:05:21,570 [main] INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean Plain editor 2008-03-10 12:05:21,576 [main] INFO com.ecyrd.jspwiki.WikiEngine - Cannot find property file for filters (this is okay, expected to find it as: '/WEB-INF/filters.xml') 2008-03-10 12:05:21,620 [main] INFO com.ecyrd.jspwiki.render.RenderingManager - Rendering content with com.ecyrd.jspwiki.render.XHTMLRenderer. 2008-03-10 12:05:27,945 [main] INFO com.ecyrd.jspwiki.ReferenceManager - Starting cross reference scan of WikiPages 2008-03-10 12:05:28,265 [main] INFO com.ecyrd.jspwiki.auth.UserManager - Attempting to load user database class com.ecyrd.jspwiki.auth.user.XMLUserDatabase 2008-03-10 12:05:28,273 [main] INFO com.ecyrd.jspwiki.auth.user.AbstractUserDatabase - XML user database at /nC-Wiki/userdatabase.xml 2008-03-10 12:05:28,317 [main] INFO com.ecyrd.jspwiki.auth.UserManager - UserDatabase initialized. 2008-03-10 12:05:30,568 [main] INFO com.ecyrd.jspwiki.ReferenceManager - Cross reference scan done in 0:00:02.623 2008-03-10 12:05:30,602 [main] INFO com.ecyrd.jspwiki.WikiEngine - WikiEngine configured. 2008-03-10 12:05:30,603 [main] INFO com.ecyrd.jspwiki.WikiEngine - Root path for this Wiki is: '/usr/share/apache-tomcat-6.0.14/webapps/JSPWiki/' 2008-03-10 12:05:30,609 [main] INFO com.ecyrd.jspwiki.WikiServlet - WikiServlet initialized. 2008-03-10 12:07:54,809 [TP-Processor1] INFO com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Remote user changed to cbu 2008-03-10 12:07:54,809 [TP-Processor1] INFO com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User principal changed to cbu 2008-03-10 12:07:54,812 [TP-Processor1] INFO SecurityLog JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - WikiSecurityEvent.LOGIN_AUTHENTICATED [EMAIL PROTECTED], princpal=org.apache.catalina.realm.GenericPrincipal cbu, [EMAIL PROTECTED] 2008-03-10 12:07:54,813 [TP-Processor1] WARN com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User profile 'cbu' not found. This is normal for container-auth users who haven't set up a profile yet. 2008-03-10 12:07:54,814 [TP-Processor1] INFO JSPWiki JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Successfully authenticated user cbu (container auth) 2008-03-10 12:07:54,815 [TP-Processor1] INFO JSPWiki JSPWiki:/JSPWiki/Login.jsp JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Redirecting user to https://192.168.1.107/JSPWiki/Wiki.jsp?page=Main 2008-03-10 12:07:54,829 [TP-Processor1] INFO com.ecyrd.jspwiki.WikiContext JSPWiki:/JSPWiki/Wiki.jsp JSPWiki:https://192.168.1.107/JSPWiki/Wiki.jsp - User cbu has no access - forbidden (permission=("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Main","view"))
---------------------------------------------------------------------------------------------
The catalina.out says something like this, but I don't know if this belongs to my error: 

SEVERE: Exception loading sessions from persistent storage
java.io.WriteAbortedException: writing aborted; java.io.NotSerializableException: com.ecyrd.jspwiki.auth.UserManager$JSONUserModule 
.....
Caused by: java.io.NotSerializableException: com.ecyrd.jspwiki.auth.UserManager$JSONUserModule 
....
Mar 10, 2008 12:05:19 PM org.apache.catalina.core.ApplicationContext log

Reply via email to