Grouper Users - Open Discussion List

[Richard James <>]

Thanks Gary, that has worked perfectly :)

I amended the web.xml file to have the security constraints from the CAS 
web.xml file instead of the default security constraints. So we are now able 
to authenticate against Shib and go directly into the Lite UI using the login 
link or from the "manage members lite" link within the Admin UI.

Many thanks for your help with this.

Cheers

Richard

>-----Original Message-----
>From: GW Brown, Information Systems and Computing
>[mailto:]
>Sent: 04 February 2010 15:20
>To: Richard James; 
>
>Subject: Re: [grouper-users] Re: Lite UI Authentication
>
>Hi Richard,
>
>Glad the Admin UI is working.
>
>Another thing the CAS contribution does is 'remove' the default security
>constraints from web.xml. It does this by replacing them with:
>
>  <security-constraint>
>    <web-resource-collection>
>      <web-resource-name>UI</web-resource-name>
>      <url-pattern>/grouperUi/app/*</url-pattern>
>    </web-resource-collection>
>       <user-data-constraint>NONE</user-data-constraint>
>  </security-constraint>
>
>  <security-constraint>
>    <web-resource-collection>
>      <web-resource-name>UI</web-resource-name>
>      <url-pattern>/grouperUi/appHtml/*</url-pattern>
>    </web-resource-collection>
>       <user-data-constraint>NONE</user-data-constraint>
>
>  </security-constraint>
>
>The 403 error may indicate that part of the Lite UI machinery is trying
>to
>load a local file through http and falling foul of the default security
>constraint. Hopefully changing / removing the constraints will solve the
>problem.
>
>Gary
>
>--On 04 February 2010 09:36 -0500 
>
> wrote:
>
>> Hi,
>>
>> Thanks for pointing that out Gary, that has solved the problem with
>the
>> Admin UI, we can now successfully authenticate straight through to the
>UI
>> as required.
>>
>> For the Lite UI, I have had a look at the grouper error log for any
>> entries when trying to access the Lite UI, the only error we seem to
>> catch from groupers perspective is;
>>
>> 2010-02-04 14:17:51,471: [TP-Processor6] ERROR
>> PopulateErrorAction.execute(70) - Caught '403' for
>> /grouper/grouperUi/appHtml/grouper.html
>>
>> I have set the logging to catch everything at the moment. We have been
>> looking around the code ourselves to try and work out why its behaving
>> like it is, but so far a bit of a loss.
>>
>> Thanks
>>
>> Richard
>
>
>
>----------------------
>GW Brown, Information Systems and Computing
>