incubator-jspwiki-user mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Conny Burko <conny.bu...@gmx.de>
Subject Re: Problem with permissions - no permission to view main but other pages...
Date Tue, 11 Mar 2008 10:41:11 GMT
Hi again,

Is this probably the same problem as in:
https://issues.apache.org/jira/browse/JSPWIKI-140?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel

I've still got no clue where the problem can be...
Does no one have the same problem?

Greetings
Conny


Conny Burko schrieb:
> Hi
>
> I've just installed the JSPWiki 2.6 with Tomcat 6.0.14.
> All the "old" contents from the JSPWiki 2.4 are there and everything 
> seems to be all right.
>
> But when I try login there there is the problem, that I cannot access 
> the main Page, although my login was successfull.
>
> 2008-03-10 12:07:54,809 [TP-Processor1] INFO 
> com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Remote user changed 
> to cbu
> 2008-03-10 12:07:54,809 [TP-Processor1] INFO 
> com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User principal 
> changed to cbu
> 2008-03-10 12:07:54,812 [TP-Processor1] INFO SecurityLog 
> JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - 
> WikiSecurityEvent.LOGIN_AUTHENTICATED 
> [source=com.ecyrd.jspwiki.auth.AuthenticationManager@ecd92c, 
> princpal=org.apache.catalina.realm.GenericPrincipal cbu, 
> target=com.ecyrd.jspwiki.WikiSession@177e6b4]
> 2008-03-10 12:07:54,813 [TP-Processor1] WARN 
> com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User profile 'cbu' 
> not found. This is normal for container-auth users who haven't set up 
> a profile yet.
> 2008-03-10 12:07:54,814 [TP-Processor1] INFO JSPWiki 
> JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Successfully 
> authenticated user cbu (container auth)
> 2008-03-10 12:07:54,815 [TP-Processor1] INFO JSPWiki 
> JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Redirecting user to 
> https://192.168.1.107/JSPWiki/Wiki.jsp?page=Main
> 2008-03-10 12:07:54,829 [TP-Processor1] INFO 
> com.ecyrd.jspwiki.WikiContext JSPWiki:/JSPWiki/Wiki.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Wiki.jsp - User cbu has no 
> access - forbidden 
> (permission=("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Main","view"))

>
>
>
> When I try to login via onother page 
> (.../JSPWiki/Login.jsp?redirect=KnowHow) the login is ok and the page 
> ask for is shown.
> But I'm still not able to go to the "Main" Page.
>
> There is this errorpage displayed:
> ---------------------------
>
>
>      Forbidden
>
> *Sorry, but you are not allowed to do that.*
>
> Usually we block access to something because you do not have the 
> correct privileges (/e.g./, read, edit, comment) for the page you are 
> looking for. In this particular case, it is likely that you are not 
> listed in the page's access control list or that your privileges 
> aren't high enough (you want to edit, but ACL only allows 'read').
>
> It is also possible that JSPWiki cannot find its security policy, or 
> that the policy is not configured correctly. Either of these cases 
> would cause JSPWiki to block access, too.
>
> Better luck next time. <https://192.168.1.107/JSPWiki/>
>
> ---------------------------
>
> My jspwiki.policy is this:
>
> grant principal com.ecyrd.jspwiki.auth.authorize.Role "All" {
> permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:Main", 
> "view";
> permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
> "editPreferences";
> permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
> "editProfile";
> permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
> "login";
> };
>
> grant principal com.ecyrd.jspwiki.auth.authorize.Role "Authenticated" {
> permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", 
> "view,modify,rename";
> permission com.ecyrd.jspwiki.auth.permissions.GroupPermission "*:*", 
> "view";
> permission com.ecyrd.jspwiki.auth.permissions.GroupPermission 
> "*:<groupmember>", "edit";
> permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
> "createPages,createGroups";
> };
>
> grant principal com.ecyrd.jspwiki.auth.GroupPrincipal "Admin" {
> permission com.ecyrd.jspwiki.auth.permissions.AllPermission "*";
> };
> grant principal com.ecyrd.jspwiki.auth.authorize.Role "JspWikiAdmin" {
> permission com.ecyrd.jspwiki.auth.permissions.AllPermission "*";
> };
>
>
> I
> Can anyone see what is wrong with my configuration?
> Any help is welcome!!!!
>
> Greetings & Thanks
>
> Conny
>
>
> ---------------------------------------------------------
> -- HERE SOME ADDITIONAL INFORMATION ---
> ---------------------------------------------------------
>
>
> Here is the complete Code of the JSPWiki.log when the server is 
> started and the first requests are made.
>
> 2008-03-10 12:05:19,182 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
> *******************************************
> 2008-03-10 12:05:19,186 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
> JSPWiki 2.6.0 starting. Whee!
> 2008-03-10 12:05:19,195 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
> Servlet container: Apache Tomcat/6.0.14
> 2008-03-10 12:05:19,255 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
> JSPWiki working directory is '/nC-Wiki/work'
> 2008-03-10 12:05:19,798 [main] INFO 
> com.ecyrd.jspwiki.providers.AbstractFileProvider - Wikipages are read 
> from '/nC-Wiki/content'
> 2008-03-10 12:05:19,834 [main] INFO 
> com.ecyrd.jspwiki.plugin.PluginManager - Registering plugins
> 2008-03-10 12:05:19,915 [main] INFO 
> com.ecyrd.jspwiki.diff.DifferenceManager - Using difference provider: 
> TraditionalDiffProvider
> 2008-03-10 12:05:20,062 [main] INFO 
> com.ecyrd.jspwiki.search.LuceneSearchProvider - Lucene enabled, cache 
> will be in: /nC-Wiki/work/lucene
> 2008-03-10 12:05:20,295 [main] INFO com.ecyrd.jspwiki.ui.EditorManager 
> - Registering editor modules
> 2008-03-10 12:05:20,433 [JSPWiki Lucene Indexer] INFO 
> com.ecyrd.jspwiki.search.LuceneSearchProvider - Files found in Lucene 
> directory, not reindexing.
> 2008-03-10 12:05:20,482 [main] INFO 
> com.ecyrd.jspwiki.auth.AuthenticationManager - Checking JAAS 
> configuration...
> 2008-03-10 12:05:20,482 [main] INFO 
> com.ecyrd.jspwiki.auth.AuthenticationManager - JAAS not configured. 
> Installing default configuration: 
> file:/usr/share/apache-tomcat-6.0.14/webapps/JSPWiki/WEB-INF/jspwiki.jaas. 
> You can set the java.security.auth.login.config system property to 
> point to your jspwiki.jaas file, or add the entries from jspwiki.jaas 
> to your own JAAS configuration file.
> 2008-03-10 12:05:20,581 [main] INFO 
> com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - Examining 
> jndi:/forum26/JSPWiki/WEB-INF/web.xml
> 2008-03-10 12:05:20,808 [main] INFO 
> com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - JSPWiki is 
> using container-managed authentication.
> 2008-03-10 12:05:20,808 [main] INFO 
> com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - JSPWiki 
> determined the web container manages these roles: 
> [com.ecyrd.jspwiki.auth.authorize.Role: nC Alle] 
> [com.ecyrd.jspwiki.auth.authorize.Role: JspWikiAdmin] 
> [com.ecyrd.jspwiki.auth.authorize.Role: Authenticated]
> 2008-03-10 12:05:20,808 [main] INFO 
> com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - Authorizer 
> WebContainerAuthorizer initialized successfully.
> 2008-03-10 12:05:20,939 [main] INFO 
> com.ecyrd.jspwiki.auth.AuthorizationManager - Initialized default 
> security policy: 
> /usr/share/apache-tomcat-6.0.14/webapps/JSPWiki/WEB-INF/jspwiki.policy
> 2008-03-10 12:05:20,940 [main] INFO 
> com.ecyrd.jspwiki.auth.authorize.GroupManager - Attempting to load 
> group database class com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase
> 2008-03-10 12:05:20,945 [main] INFO 
> com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase - XML group database 
> at /nC-Wiki/groupdatabase.xml
> 2008-03-10 12:05:21,093 [main] INFO 
> com.ecyrd.jspwiki.auth.authorize.GroupManager - Group database 
> initialized.
> 2008-03-10 12:05:21,104 [main] INFO 
> com.ecyrd.jspwiki.auth.authorize.GroupManager - Authorizer 
> GroupManager initialized successfully; loaded 5 group(s).
> 2008-03-10 12:05:21,149 [main] INFO 
> com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Using JDK 1.5 Platform 
> MBeanServer
> 2008-03-10 12:05:21,528 [main] INFO 
> com.ecyrd.jspwiki.ui.admin.AdminBeanManager - 
> com.sun.jmx.mbeanserver.JmxMBeanServer
> 2008-03-10 12:05:21,528 [main] INFO 
> com.ecyrd.jspwiki.ui.admin.AdminBeanManager - DefaultDomain
> 2008-03-10 12:05:21,551 [main] INFO 
> com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin 
> bean Core bean
> 2008-03-10 12:05:21,554 [main] INFO 
> com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin 
> bean User administration
> 2008-03-10 12:05:21,564 [main] INFO 
> com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin 
> bean Search manager
> 2008-03-10 12:05:21,566 [main] INFO 
> com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin 
> bean Plugins
> 2008-03-10 12:05:21,567 [main] INFO 
> com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin 
> bean WikiWizard
> 2008-03-10 12:05:21,570 [main] INFO 
> com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin 
> bean Plain editor
> 2008-03-10 12:05:21,576 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
> Cannot find property file for filters (this is okay, expected to find 
> it as: '/WEB-INF/filters.xml')
> 2008-03-10 12:05:21,620 [main] INFO 
> com.ecyrd.jspwiki.render.RenderingManager - Rendering content with 
> com.ecyrd.jspwiki.render.XHTMLRenderer.
> 2008-03-10 12:05:27,945 [main] INFO com.ecyrd.jspwiki.ReferenceManager 
> - Starting cross reference scan of WikiPages
> 2008-03-10 12:05:28,265 [main] INFO com.ecyrd.jspwiki.auth.UserManager 
> - Attempting to load user database class 
> com.ecyrd.jspwiki.auth.user.XMLUserDatabase
> 2008-03-10 12:05:28,273 [main] INFO 
> com.ecyrd.jspwiki.auth.user.AbstractUserDatabase - XML user database 
> at /nC-Wiki/userdatabase.xml
> 2008-03-10 12:05:28,317 [main] INFO com.ecyrd.jspwiki.auth.UserManager 
> - UserDatabase initialized.
> 2008-03-10 12:05:30,568 [main] INFO com.ecyrd.jspwiki.ReferenceManager 
> - Cross reference scan done in 0:00:02.623
> 2008-03-10 12:05:30,602 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
> WikiEngine configured.
> 2008-03-10 12:05:30,603 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
> Root path for this Wiki is: 
> '/usr/share/apache-tomcat-6.0.14/webapps/JSPWiki/'
> 2008-03-10 12:05:30,609 [main] INFO com.ecyrd.jspwiki.WikiServlet - 
> WikiServlet initialized.
> 2008-03-10 12:07:54,809 [TP-Processor1] INFO 
> com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Remote user changed 
> to cbu
> 2008-03-10 12:07:54,809 [TP-Processor1] INFO 
> com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User principal 
> changed to cbu
> 2008-03-10 12:07:54,812 [TP-Processor1] INFO SecurityLog 
> JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - 
> WikiSecurityEvent.LOGIN_AUTHENTICATED 
> [source=com.ecyrd.jspwiki.auth.AuthenticationManager@ecd92c, 
> princpal=org.apache.catalina.realm.GenericPrincipal cbu, 
> target=com.ecyrd.jspwiki.WikiSession@177e6b4]
> 2008-03-10 12:07:54,813 [TP-Processor1] WARN 
> com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User profile 'cbu' 
> not found. This is normal for container-auth users who haven't set up 
> a profile yet.
> 2008-03-10 12:07:54,814 [TP-Processor1] INFO JSPWiki 
> JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Successfully 
> authenticated user cbu (container auth)
> 2008-03-10 12:07:54,815 [TP-Processor1] INFO JSPWiki 
> JSPWiki:/JSPWiki/Login.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Redirecting user to 
> https://192.168.1.107/JSPWiki/Wiki.jsp?page=Main
> 2008-03-10 12:07:54,829 [TP-Processor1] INFO 
> com.ecyrd.jspwiki.WikiContext JSPWiki:/JSPWiki/Wiki.jsp 
> JSPWiki:https://192.168.1.107/JSPWiki/Wiki.jsp - User cbu has no 
> access - forbidden 
> (permission=("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Main","view"))

>
>
> ---------------------------------------------------------------------------------------------

>
>
> The catalina.out says something like this, but I don't know if this 
> belongs to my error:
>
> SEVERE: Exception loading sessions from persistent storage
> java.io.WriteAbortedException: writing aborted; 
> java.io.NotSerializableException: 
> com.ecyrd.jspwiki.auth.UserManager$JSONUserModule
> .....
> Caused by: java.io.NotSerializableException: 
> com.ecyrd.jspwiki.auth.UserManager$JSONUserModule
> ....
> Mar 10, 2008 12:05:19 PM org.apache.catalina.core.ApplicationContext log
>
>


Mime
View raw message