NotificationListener subscribe Authorization
Hello, i found an unwanted behavoir related to the WebDav notifications and authorization. The problem is that the SUBSCRIBE method is called twice. The first time without the Authorization: header, and only when a HTTP/1.1 401 Unauthorized response was received then the Authorization: header is inserted to the request. The same thing happens for every POLL and UNSUBSCRIBE method too. Is this a normal behavoir? Does somebody know what do i have to change to have the Authorization header included the first time into the requests? Thank you. I am using the following code fragment to create a subscribtion: success = true; HttpURL rootUrl = davManager.getCurrentURL(); UsernamePasswordCredentials credentials = new UsernamePasswordCredentials(rootUrl.getUser(), rootUrl.getPassword()); listener = new NotificationListener(, 0, davManager.getRepositoryHost(), davManager.getRepositoryPort(), Protocol.getProtocol(http), credentials, davManager.getProjectRootPath(), pollInterval, false); success = listener.subscribe(Update/newmember, , DepthSupport.DEPTH_INFINITY, pollInterval, 100, newMemberSubscriber, credentials); success = success?listener.subscribe(Delete, , DepthSupport.DEPTH_INFINITY, pollInterval, 100, deleteSubscriber, credentials):false; - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
RE: NotificationListener subscribe Authorization
Hello Zoltán, That's correct behaviour as per HTTP Specification :) Don't worry about the second call, since the first did not succeed. Problems can occur if you try to call a PUT http method of more than MB, since the PUT method would take forever to be uploaded the first time, fail, and take a second eternity to execute properly with the authorization header. My advice is to make a HEAD http method (small footprint) on the remote resource to make sure you have the connection authenticated b4 you make a 'big' method call. Best regards, Miguel Figueiredo -Original Message- From: Zoltán Lörincz [mailto:[EMAIL PROTECTED] Sent: terça-feira, 11 de Janeiro de 2005 8:22 To: Slide Users Mailing List Subject: NotificationListener subscribe Authorization Hello, i found an unwanted behavoir related to the WebDav notifications and authorization. The problem is that the SUBSCRIBE method is called twice. The first time without the Authorization: header, and only when a HTTP/1.1 401 Unauthorized response was received then the Authorization: header is inserted to the request. The same thing happens for every POLL and UNSUBSCRIBE method too. Is this a normal behavoir? Does somebody know what do i have to change to have the Authorization header included the first time into the requests? Thank you. I am using the following code fragment to create a subscribtion: success = true; HttpURL rootUrl = davManager.getCurrentURL(); UsernamePasswordCredentials credentials = new UsernamePasswordCredentials(rootUrl.getUser(), rootUrl.getPassword()); listener = new NotificationListener(, 0, davManager.getRepositoryHost(), davManager.getRepositoryPort(), Protocol.getProtocol(http), credentials, davManager.getProjectRootPath(), pollInterval, false); success = listener.subscribe(Update/newmember, , DepthSupport.DEPTH_INFINITY, pollInterval, 100, newMemberSubscriber, credentials); success = success?listener.subscribe(Delete, , DepthSupport.DEPTH_INFINITY, pollInterval, 100, deleteSubscriber, credentials):false; - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: problem configuring simple example JAAS Authentication
The JAAS authentication for me is working happily.
However, I wish to remove the custom authentication within the slide
login module and replace it with my own authentication.
At the moment a fixed username and password 'jaas' jaas'
I would like to know how to do this, as I believe ther is a complication
associated with auto creating users, that when I authenticate, I need to
tell slide to auto create a user and role for mt foreign authenticated user.
What parts do I need to retain in the login module and what parts can I
remove ?
Regards
Paul.
Oliver Zeigermann wrote:
Hi Paul,
if the original JAAS authentication did work for you this does not
seem to be a Slide related problem. I have no idea what parts of the
Sun tutorial you used or what you even want ot achieve. The
information you provide does not give me a clue either.
Oliver
On Tue, 04 Jan 2005 15:11:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
I am having a slight problem configuring a simple JAAS authentication
using slide 2.1rc1 ( tomcat binary ) and the example code from the JAAS
tutorial
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html
I have downloaded and build the example code from above and jar'd that
up and placed it in common/lib
I have modified the jaas.conf to be
slide_login {
sample.module.SampleLoginModule required
namespace=slide;
};
And through some debug i have added to the sample login module I can see
that the login method takes the credentials and returns true.
However i still get
HTTP Status 403 - Access to the requested resource has been denied
*type* Status report
*message* _Access to the requested resource has been denied_
*description* _Access to the specified resource (Access to the requested
resource has been denied) has been forbidden._
Apache Tomcat/5.0.28
I have read from the lists that maybe i need to set :
auto-create-userstrue/auto-create-users
auto-create-users-roleuser/auto-create-users-role
Which I have done but I still get the same error.
Is there another setting I am missing to get this simple sample JAAS
authentication working with Slide.
Regards
Paul.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: problem configuring simple example JAAS Authentication
Now this is a question I understand. I guess you are right. I was able
to switch on user auto creation by adding
auto-create-userstrue/auto-create-users
auto-create-users-roleorg.apache.slide.structure.SubjectNode/auto-create-users-role
to the configuration section of Domain.xml
Oliver
On Tue, 11 Jan 2005 11:25:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
The JAAS authentication for me is working happily.
However, I wish to remove the custom authentication within the slide
login module and replace it with my own authentication.
At the moment a fixed username and password 'jaas' jaas'
I would like to know how to do this, as I believe ther is a complication
associated with auto creating users, that when I authenticate, I need to
tell slide to auto create a user and role for mt foreign authenticated user.
What parts do I need to retain in the login module and what parts can I
remove ?
Regards
Paul.
Oliver Zeigermann wrote:
Hi Paul,
if the original JAAS authentication did work for you this does not
seem to be a Slide related problem. I have no idea what parts of the
Sun tutorial you used or what you even want ot achieve. The
information you provide does not give me a clue either.
Oliver
On Tue, 04 Jan 2005 15:11:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
I am having a slight problem configuring a simple JAAS authentication
using slide 2.1rc1 ( tomcat binary ) and the example code from the JAAS
tutorial
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html
I have downloaded and build the example code from above and jar'd that
up and placed it in common/lib
I have modified the jaas.conf to be
slide_login {
sample.module.SampleLoginModule required
namespace=slide;
};
And through some debug i have added to the sample login module I can see
that the login method takes the credentials and returns true.
However i still get
HTTP Status 403 - Access to the requested resource has been denied
*type* Status report
*message* _Access to the requested resource has been denied_
*description* _Access to the specified resource (Access to the requested
resource has been denied) has been forbidden._
Apache Tomcat/5.0.28
I have read from the lists that maybe i need to set :
auto-create-userstrue/auto-create-users
auto-create-users-roleuser/auto-create-users-role
Which I have done but I still get the same error.
Is there another setting I am missing to get this simple sample JAAS
authentication working with Slide.
Regards
Paul.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Slide search performance issues
Hello again, First let me thank those who responded to my previous question regarding performance issues. Your responses were a great help! After we implemented the changes needed to improve performance when adding files we ran into another problem almost instantly. This time around it is search that is slow. The questions are located at the end of this e-mail, so anyone wishing to skip the introduction can scroll down ... The application we are developing will add or modify thousands of files every day, this will lead to a system that in a relative short time will have hundreds of thousands of files. All files are versioned using delta-v versioning and we add a few properties of our own, apart from the properties added by Slide. The files are stored in a file system and all other data, such as properties, are stored in a MySQL database (version 4.1). During the development phase all tests are performed on a normal desktop pc running Windows 2000. The computer is equipped with an AMD 64 3200+ CPU and 1 GB of RAM. The search operation we are running (for this particular test) looks for files with the property value 1.xml in the property filename, which is one of our custom properties (that property should contain the real file name while the property displayname should contain a more obscure name). The search query string would look something like this: D:searchrequest xmlns:D =DAV: D:basicsearch D:select D:propD:filename//D:prop /D:select D:from D:scope D:href/D:href /D:scope /D:from D:where D:and D:eq D:propD:filename//D:prop D:literal1.xml/D:literal /D:eq /D:and /D:where /D:basicsearch /D:searchrequest When doing the search above on a system that contains 100 files it takes about 200 ms. When the system contains 1000 files it takes about 4 seconds and with 1 files it takes about 220 seconds. The final test we did was with 4 files, this test resulted in an OutOfMemoryException. We haven't done any tweaking of parameters as far as searching goes. We haven't looked into how the xml-based query above is translated to a SQL-query but we suspect that part of the problem lie there. Another part of the problem is the design of the MySQL database. The table PROPERTIES has a column named PROPERTY_VALUE which holds the value of any given property, in our example above the value would be 1.xml. That column is not indexed even though I believe that it should be in order to speed up database queries. I know it could be a problem to index that column as the values of properties can be large at times. I guess the best thing would be to design the database in a better way, this is something we will give some thought. Going back to the problem at hand, the fact that the column isn't indexed even makes direct queries to the MySQL database slow. I have done some simple queries that don't check for user access rights, etc, and with 1 files those queries take 25-30 seconds. I'm by no means a database expert so it is possible that my queries are poorly constructed. I also did some further testing on this. The column PROPERTY_VALUE was changed to be of the type VARCHAR(255) and it was also included as an index. This increased performance on my SQL-query to 0.02 seconds. So my conclusion is that an index would be good. However, this change does nothing to increase performance when using Slide. To see what happens when using Slide I turned on query logging in MySQL. Doing the same search as before on 1 files yielded a log file of 55 MB. Each one of the 1 files generated 18 different select-queries!! 18!!! There simply must be a better way to do this! As I mentioned before we haven't looked at the actual code that generates these queries but I guess we will start now. My guess is that these files should be looked at: org.apache.slide.webdav.method.SearchMethod org.apache.slide.store.impl.rdbms.StandardRDBMSAdapter org.apache.slide.store.impl.rdbms.MySqlRDBMSAdapter org.apache.slide.store.impl.rdbms.MySql41RDBMSAdapter and most of the files in package org.apache.slide.store.impl.rdbms.expression. Any more classes we should look at? During our quest for knowledge in this area we found several references to Lucene. We are, however, reluctant to use something that is under development in our application. Is there a roadmap or prognosis on when Lucene could be ready? Could Lucene be helpful for us? I hope that the description given above is helpful, but now it is time for our questions. We can't be the first to use Slide to store hundreds of thousands of files and still wanting to search the properties, so how has this issue been handled by others? Have you used different databases? Have you modified the search queries or search methods? Are there any parameters in Domain.xml or similar files that can be added and/or modified to increase performance? Any help at all would be welcome, even if it is
How to backup/restore the repository?
Hi AFAIK, I see nothing about the backup / restore of the repository in the documentation, the wiki or the FAQ. Therefore, I deduce that the backup / restore is a repository concern, i.e. use the tool of the selected repository : Filesystem, MySQL, etc. If yes, the next question is : Is slide support hot backup / restore (without stop slide)? Laurent Trillaud - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: problem configuring simple example JAAS Authentication
Thanks for the reply.
The problem I am having is that from the resources I see available to
give me information on how to write my own login module ( for which I am
using http://forum.java.sun.com/thread.jspa?threadID=233317tstart=75 to
guide me ), all I need to do is replace the Slide login module with my
own ( which I have done with a hardcoded authentication )
Add the auto create users/role to the Domain.xml
and the JAAS stuff should log me in ok.
However, I believe I am being authenticated, as the username and
password dialog pops up, but I am not authorised to look at the contents
of the slide repository. That is, when I point my browser to
127.0.0.1:8080/slide/files after entering the username and password i get :
HTTP Status 403 - Access to the requested resource has been denied
As described ( unclearly !!! ) below.
If you could point to where I am going wrong, or could look, or if this is
a bug I would be greatful.
Cheers
Paul.
Oliver Zeigermann wrote:
Now this is a question I understand. I guess you are right. I was able
to switch on user auto creation by adding
auto-create-userstrue/auto-create-users
auto-create-users-roleorg.apache.slide.structure.SubjectNode/auto-create-users-role
to the configuration section of Domain.xml
Oliver
On Tue, 11 Jan 2005 11:25:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
The JAAS authentication for me is working happily.
However, I wish to remove the custom authentication within the slide
login module and replace it with my own authentication.
At the moment a fixed username and password 'jaas' jaas'
I would like to know how to do this, as I believe ther is a complication
associated with auto creating users, that when I authenticate, I need to
tell slide to auto create a user and role for mt foreign authenticated user.
What parts do I need to retain in the login module and what parts can I
remove ?
Regards
Paul.
Oliver Zeigermann wrote:
Hi Paul,
if the original JAAS authentication did work for you this does not
seem to be a Slide related problem. I have no idea what parts of the
Sun tutorial you used or what you even want ot achieve. The
information you provide does not give me a clue either.
Oliver
On Tue, 04 Jan 2005 15:11:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
I am having a slight problem configuring a simple JAAS authentication
using slide 2.1rc1 ( tomcat binary ) and the example code from the JAAS
tutorial
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html
I have downloaded and build the example code from above and jar'd that
up and placed it in common/lib
I have modified the jaas.conf to be
slide_login {
sample.module.SampleLoginModule required
namespace=slide;
};
And through some debug i have added to the sample login module I can see
that the login method takes the credentials and returns true.
However i still get
HTTP Status 403 - Access to the requested resource has been denied
*type* Status report
*message* _Access to the requested resource has been denied_
*description* _Access to the specified resource (Access to the requested
resource has been denied) has been forbidden._
Apache Tomcat/5.0.28
I have read from the lists that maybe i need to set :
auto-create-userstrue/auto-create-users
auto-create-users-roleuser/auto-create-users-role
Which I have done but I still get the same error.
Is there another setting I am missing to get this simple sample JAAS
authentication working with Slide.
Regards
Paul.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: How to backup/restore the repository?
No, there's no such a tool. But it's in my todo list ;-) A tool like that is needed not only for safekeeping but also to be able to migrate from one store type to another, or from one slide version to another if the internal schema changed. Although I haven't even started working on it, one thing for sure, either the slide client library (most probably) or a client working at the slide API level will be used, which means it will have to be an online backup. This brings me some questions, how to assure consistency during a hot backup?, for example if files are added/removed in the middle of the process. Carlos Laurent Trillaud wrote: Hi AFAIK, I see nothing about the backup / restore of the repository in the documentation, the wiki or the FAQ. Therefore, I deduce that the backup / restore is a repository concern, i.e. use the tool of the selected repository : Filesystem, MySQL, etc. If yes, the next question is : Is slide support hot backup / restore (without stop slide)? Laurent Trillaud - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: problem configuring simple example JAAS Authentication
I see. You will either have to grant the rights to anyone or have a
user store that displays the appropriate rights like James has done in
the JNDI user store, I guess. If so and you are authenticated, but not
authorized, your problem has got nothing to do with JAAS.
Oliver
On Tue, 11 Jan 2005 17:20:41 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
Thanks for the reply.
The problem I am having is that from the resources I see available to
give me information on how to write my own login module ( for which I am
using http://forum.java.sun.com/thread.jspa?threadID=233317tstart=75 to
guide me ), all I need to do is replace the Slide login module with my
own ( which I have done with a hardcoded authentication )
Add the auto create users/role to the Domain.xml
and the JAAS stuff should log me in ok.
However, I believe I am being authenticated, as the username and
password dialog pops up, but I am not authorised to look at the contents
of the slide repository. That is, when I point my browser to
127.0.0.1:8080/slide/files after entering the username and password i get :
HTTP Status 403 - Access to the requested resource has been denied
As described ( unclearly !!! ) below.
If you could point to where I am going wrong, or could look, or if this is a
bug I would be greatful.
Cheers
Paul.
Oliver Zeigermann wrote:
Now this is a question I understand. I guess you are right. I was able
to switch on user auto creation by adding
auto-create-userstrue/auto-create-users
auto-create-users-roleorg.apache.slide.structure.SubjectNode/auto-create-users-role
to the configuration section of Domain.xml
Oliver
On Tue, 11 Jan 2005 11:25:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
The JAAS authentication for me is working happily.
However, I wish to remove the custom authentication within the slide
login module and replace it with my own authentication.
At the moment a fixed username and password 'jaas' jaas'
I would like to know how to do this, as I believe ther is a complication
associated with auto creating users, that when I authenticate, I need to
tell slide to auto create a user and role for mt foreign authenticated user.
What parts do I need to retain in the login module and what parts can I
remove ?
Regards
Paul.
Oliver Zeigermann wrote:
Hi Paul,
if the original JAAS authentication did work for you this does not
seem to be a Slide related problem. I have no idea what parts of the
Sun tutorial you used or what you even want ot achieve. The
information you provide does not give me a clue either.
Oliver
On Tue, 04 Jan 2005 15:11:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
I am having a slight problem configuring a simple JAAS authentication
using slide 2.1rc1 ( tomcat binary ) and the example code from the JAAS
tutorial
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html
I have downloaded and build the example code from above and jar'd that
up and placed it in common/lib
I have modified the jaas.conf to be
slide_login {
sample.module.SampleLoginModule required
namespace=slide;
};
And through some debug i have added to the sample login module I can see
that the login method takes the credentials and returns true.
However i still get
HTTP Status 403 - Access to the requested resource has been denied
*type* Status report
*message* _Access to the requested resource has been denied_
*description* _Access to the specified resource (Access to the requested
resource has been denied) has been forbidden._
Apache Tomcat/5.0.28
I have read from the lists that maybe i need to set :
auto-create-userstrue/auto-create-users
auto-create-users-roleuser/auto-create-users-role
Which I have done but I still get the same error.
Is there another setting I am missing to get this simple sample JAAS
authentication working with Slide.
Regards
Paul.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional
Re: How to backup/restore the repository?
Carlos It should be nice, but with the current release how can I do backup / restore? If I stop tomcat, backup the filesystem or the database and restart tomcat, is my backup integrity ok? Can I restore it, with the same way by stoping tomcat? Laurent Carlos Villegas a écrit : No, there's no such a tool. But it's in my todo list ;-) A tool like that is needed not only for safekeeping but also to be able to migrate from one store type to another, or from one slide version to another if the internal schema changed. Although I haven't even started working on it, one thing for sure, either the slide client library (most probably) or a client working at the slide API level will be used, which means it will have to be an online backup. This brings me some questions, how to assure consistency during a hot backup?, for example if files are added/removed in the middle of the process. Carlos Laurent Trillaud wrote: Hi AFAIK, I see nothing about the backup / restore of the repository in the documentation, the wiki or the FAQ. Therefore, I deduce that the backup / restore is a repository concern, i.e. use the tool of the selected repository : Filesystem, MySQL, etc. If yes, the next question is : Is slide support hot backup / restore (without stop slide)? Laurent Trillaud - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: problem configuring simple example JAAS Authentication
I cant believe this is the way it is, as does it not defeat the objective,
I thought the objective of JAAS is to allow external authentication. If
I need a preconfigured store, then thats not right.
Autocreate user autocreates a user with some authentication, so there
must be something wrong in the configuration, maybe the wrong user role
is being auto created that is not authorised to see stuff.
Who wrote this stuff ? Has anyone else written an non Slide JAAS module?
Otherwise it seems a lot of effort has been made to create a module that
wont work in the correct | clean way.
Regards
Paul.
Oliver Zeigermann wrote:
I see. You will either have to grant the rights to anyone or have a
user store that displays the appropriate rights like James has done in
the JNDI user store, I guess. If so and you are authenticated, but not
authorized, your problem has got nothing to do with JAAS.
Oliver
On Tue, 11 Jan 2005 17:20:41 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
Thanks for the reply.
The problem I am having is that from the resources I see available to
give me information on how to write my own login module ( for which I am
using http://forum.java.sun.com/thread.jspa?threadID=233317tstart=75 to
guide me ), all I need to do is replace the Slide login module with my
own ( which I have done with a hardcoded authentication )
Add the auto create users/role to the Domain.xml
and the JAAS stuff should log me in ok.
However, I believe I am being authenticated, as the username and
password dialog pops up, but I am not authorised to look at the contents
of the slide repository. That is, when I point my browser to
127.0.0.1:8080/slide/files after entering the username and password i get :
HTTP Status 403 - Access to the requested resource has been denied
As described ( unclearly !!! ) below.
If you could point to where I am going wrong, or could look, or if this is a
bug I would be greatful.
Cheers
Paul.
Oliver Zeigermann wrote:
Now this is a question I understand. I guess you are right. I was able
to switch on user auto creation by adding
auto-create-userstrue/auto-create-users
auto-create-users-roleorg.apache.slide.structure.SubjectNode/auto-create-users-role
to the configuration section of Domain.xml
Oliver
On Tue, 11 Jan 2005 11:25:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
The JAAS authentication for me is working happily.
However, I wish to remove the custom authentication within the slide
login module and replace it with my own authentication.
At the moment a fixed username and password 'jaas' jaas'
I would like to know how to do this, as I believe ther is a complication
associated with auto creating users, that when I authenticate, I need to
tell slide to auto create a user and role for mt foreign authenticated user.
What parts do I need to retain in the login module and what parts can I
remove ?
Regards
Paul.
Oliver Zeigermann wrote:
Hi Paul,
if the original JAAS authentication did work for you this does not
seem to be a Slide related problem. I have no idea what parts of the
Sun tutorial you used or what you even want ot achieve. The
information you provide does not give me a clue either.
Oliver
On Tue, 04 Jan 2005 15:11:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
I am having a slight problem configuring a simple JAAS authentication
using slide 2.1rc1 ( tomcat binary ) and the example code from the JAAS
tutorial
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html
I have downloaded and build the example code from above and jar'd that
up and placed it in common/lib
I have modified the jaas.conf to be
slide_login {
sample.module.SampleLoginModule required
namespace=slide;
};
And through some debug i have added to the sample login module I can see
that the login method takes the credentials and returns true.
However i still get
HTTP Status 403 - Access to the requested resource has been denied
*type* Status report
*message* _Access to the requested resource has been denied_
*description* _Access to the specified resource (Access to the requested
resource has been denied) has been forbidden._
Apache Tomcat/5.0.28
I have read from the lists that maybe i need to set :
auto-create-userstrue/auto-create-users
auto-create-users-roleuser/auto-create-users-role
Which I have done but I still get the same error.
Is there another setting I am missing to get this simple sample JAAS
authentication working with Slide.
Regards
Paul.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Re: problem configuring simple example JAAS Authentication
WCK supports a different approach in that it does not use Slide access
rights at all, but checks them in the store level.
This is my last post on this subject.
Oliver
On Tue, 11 Jan 2005 18:00:15 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
I cant believe this is the way it is, as does it not defeat the objective,
I thought the objective of JAAS is to allow external authentication. If
I need a preconfigured store, then thats not right.
Autocreate user autocreates a user with some authentication, so there
must be something wrong in the configuration, maybe the wrong user role
is being auto created that is not authorised to see stuff.
Who wrote this stuff ? Has anyone else written an non Slide JAAS module?
Otherwise it seems a lot of effort has been made to create a module that
wont work in the correct | clean way.
Regards
Paul.
Oliver Zeigermann wrote:
I see. You will either have to grant the rights to anyone or have a
user store that displays the appropriate rights like James has done in
the JNDI user store, I guess. If so and you are authenticated, but not
authorized, your problem has got nothing to do with JAAS.
Oliver
On Tue, 11 Jan 2005 17:20:41 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
Thanks for the reply.
The problem I am having is that from the resources I see available to
give me information on how to write my own login module ( for which I am
using http://forum.java.sun.com/thread.jspa?threadID=233317tstart=75 to
guide me ), all I need to do is replace the Slide login module with my
own ( which I have done with a hardcoded authentication )
Add the auto create users/role to the Domain.xml
and the JAAS stuff should log me in ok.
However, I believe I am being authenticated, as the username and
password dialog pops up, but I am not authorised to look at the contents
of the slide repository. That is, when I point my browser to
127.0.0.1:8080/slide/files after entering the username and password i get :
HTTP Status 403 - Access to the requested resource has been denied
As described ( unclearly !!! ) below.
If you could point to where I am going wrong, or could look, or if this is
a bug I would be greatful.
Cheers
Paul.
Oliver Zeigermann wrote:
Now this is a question I understand. I guess you are right. I was able
to switch on user auto creation by adding
auto-create-userstrue/auto-create-users
auto-create-users-roleorg.apache.slide.structure.SubjectNode/auto-create-users-role
to the configuration section of Domain.xml
Oliver
On Tue, 11 Jan 2005 11:25:49 +0100, Paul Hussein [EMAIL PROTECTED] wrote:
The JAAS authentication for me is working happily.
However, I wish to remove the custom authentication within the slide
login module and replace it with my own authentication.
At the moment a fixed username and password 'jaas' jaas'
I would like to know how to do this, as I believe ther is a complication
associated with auto creating users, that when I authenticate, I need to
tell slide to auto create a user and role for mt foreign authenticated
user.
What parts do I need to retain in the login module and what parts can I
remove ?
Regards
Paul.
Oliver Zeigermann wrote:
Hi Paul,
if the original JAAS authentication did work for you this does not
seem to be a Slide related problem. I have no idea what parts of the
Sun tutorial you used or what you even want ot achieve. The
information you provide does not give me a clue either.
Oliver
On Tue, 04 Jan 2005 15:11:49 +0100, Paul Hussein [EMAIL PROTECTED]
wrote:
I am having a slight problem configuring a simple JAAS authentication
using slide 2.1rc1 ( tomcat binary ) and the example code from the JAAS
tutorial
http://java.sun.com/j2se/1.4.2/docs/guide/security/jaas/tutorials/GeneralAcnOnly.html
I have downloaded and build the example code from above and jar'd that
up and placed it in common/lib
I have modified the jaas.conf to be
slide_login {
sample.module.SampleLoginModule required
namespace=slide;
};
And through some debug i have added to the sample login module I can see
that the login method takes the credentials and returns true.
However i still get
HTTP Status 403 - Access to the requested resource has been denied
*type* Status report
*message* _Access to the requested resource has been denied_
*description* _Access to the specified resource (Access to the requested
resource has been denied) has been forbidden._
Apache Tomcat/5.0.28
I have read from the lists that maybe i need to set :
auto-create-userstrue/auto-create-users
auto-create-users-roleuser/auto-create-users-role
Which I have done but I still get the same error.
Is there another setting I am missing to
Re: [Fwd: Re: WCK Save As]
Oliver, yes you are correct. Thanks, Jeff Original Message Subject: Re: WCK Save As Date: Sat, 11 Dec 2004 19:11:57 +0100 From: Oliver Zeigermann [EMAIL PROTECTED] Reply-To: Slide Users Mailing List slide-user@jakarta.apache.org, [EMAIL PROTECTED] To: Slide Users Mailing List slide-user@jakarta.apache.org References: [EMAIL PROTECTED] It works with the reference implementation, so this should be a problem with your custom implementation. Oliver On Fri, 10 Dec 2004 14:01:43 -0800, Jeff Wagner [EMAIL PROTECTED] wrote: I'm using WCK to create a custom WebDAV store. I'm running into a problem when attempting to do a Save As from Word. I saw that a similiar problem was fixed for the Slide implementation: http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED]msgId=1434142 I'm curious if there is a work around for WCK. Any suggestions? Thanks, Jeff - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- Jeff Wagner Northrop Grumman Defense Mission System (619) 574-2243 [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: Large Files
Hi Chaitu, I'm using slide 2.0 to retrieve documents, and I was hoping it would be faster. Is it buffering the files in memory for retrievals as well? Is there anything in 2.1 that would improve speed? Are there any links about this? Thanks in Advance!! Thanks, Jeff From: Oliver Zeigermann [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: Slide Users Mailing List slide-user@jakarta.apache.org, [EMAIL PROTECTED] Subject: Re: Large Files Date: Mon, 10 Jan 2005 17:15:54 +0100 AFAIK there is a bug in Slide 2.0 that buffers all files in memory. In any case I highly recommend to upgrade to Slide 2.1. Oliver On Mon, 10 Jan 2005 21:43:35 +0530, chaitanya [EMAIL PROTECTED] wrote: thanks oliver, i gone through the URL u have given and i found that, currently what we are using is the slide2.0 do i need to shift to 2.1. Is there any restriction that, we cannot upload large size files in slide. thanks in advance. kind regards chaitu -Original Message- From: Oliver Zeigermann [mailto:[EMAIL PROTECTED] Sent: Monday, January 10, 2005 9:27 PM To: Slide Users Mailing List; [EMAIL PROTECTED] Subject: Re: Large Files I have recently discussed this in the dev list: http://nagoya.apache.org/eyebrowse/[EMAIL PROTECTED] .orgmsgNo=15276 1 GB did work for me, but with 2GB you might have reached the maximum file size of your file system. No idea what is the maximum size of a BLOB in the common databases, though Oliver On Mon, 10 Jan 2005 21:24:16 +0530, chaitanya [EMAIL PROTECTED] wrote: Ya iam also facing the same problem, it would be great if some one who has able to upload 2GB. Please let me know the configuration. kind regards chaitu -Original Message- From: George Wu [mailto:[EMAIL PROTECTED] Sent: Monday, January 10, 2005 9:21 PM To: slide-user@jakarta.apache.org Subject: Large Files Has anyone successfully used Slide to manage large files (~1GB) including uploading and downloading through WebDAV ? If so, please explain your Slide configuration. Thanks. - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
Re: How to backup/restore the repository?
Laurent Trillaud wrote: Carlos It should be nice, but with the current release how can I do backup / restore? If I stop tomcat, backup the filesystem or the database and restart tomcat, is my backup integrity ok? Can I restore it, with the same way by stoping tomcat? Laurent Yes, that works. If you're using a database store, backup your database with your database tools. If you're using the file store, backup the directories where it's configured to store the files. Or both if you're mixing store types. Carlos Carlos Villegas a écrit : No, there's no such a tool. But it's in my todo list ;-) A tool like that is needed not only for safekeeping but also to be able to migrate from one store type to another, or from one slide version to another if the internal schema changed. Although I haven't even started working on it, one thing for sure, either the slide client library (most probably) or a client working at the slide API level will be used, which means it will have to be an online backup. This brings me some questions, how to assure consistency during a hot backup?, for example if files are added/removed in the middle of the process. Carlos Laurent Trillaud wrote: Hi AFAIK, I see nothing about the backup / restore of the repository in the documentation, the wiki or the FAQ. Therefore, I deduce that the backup / restore is a repository concern, i.e. use the tool of the selected repository : Filesystem, MySQL, etc. If yes, the next question is : Is slide support hot backup / restore (without stop slide)? Laurent Trillaud - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] - To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
