grouper-users - [grouper-users] RE: LDAP issue

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] RE: LDAP issue

From: Chris Hyzer <>
To: "Klug, Lawrence" <>, "" <>
Subject: [grouper-users] RE: LDAP issue
Date: Fri, 16 Nov 2012 22:08:45 +0000
Accept-language: en-US

Enabled logging in the log4j.properties for:

edu.internet2.middleware.subject.provider.LdapSourceAdapter

Then you should see the filter in the logs

Thanks,

Chris

From: Klug, Lawrence [mailto:]
Sent: Friday, November 16, 2012 5:03 PM
To: Chris Hyzer;
Subject: RE: LDAP issue

Is there a way to get the actual LDAP query in the logs?

Thanks,

Lawrence

From: Chris Hyzer []
Sent: Friday, November 16, 2012 12:59 PM
To: Klug, Lawrence;
Subject: RE: LDAP issue

This is a subject API question right?

Grouper connects to LDAP with the credentials in the sources.xml, and runs the filter specified in the sources.xml for your ldap right? Does that help? J

Thanks,

Chris

From: On Behalf Of Klug, Lawrence
Sent: Friday, November 16, 2012 2:46 PM
To:
Subject: [grouper-users] LDAP issue

Hi,

Our LDAP admin created a new account for grouper and the new account generates an exception during login. The difference between the old account and the new one is the Access Control List, I’m told. He is asking what filter Grouper uses. How can I answer this, and what is the issue? It looks like access permissions to me.

Thanks,

Lawrence

2012-11-14 09:50:58,488: [TP-Processor7] ERROR GrouperUiFilter.initRequest(701) - - Cant find login subject: , ADMIN_UI

edu.internet2.middleware.subject.SubjectNotFoundException: subject not found:

at edu.internet2.middleware.grouper.subj.SourcesXmlResolver.thereCanOnlyBeOne(SourcesXmlResolver.java:489)

at edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findByIdOrIdentifier(SourcesXmlResolver.java:530)

at edu.internet2.middleware.grouper.subj.CachingResolver.findByIdOrIdentifier(CachingResolver.java:377)

at edu.internet2.middleware.grouper.subj.ValidatingResolver.findByIdOrIdentifier(ValidatingResolver.java:202)

at edu.internet2.middleware.grouper.SubjectFinder.findByIdOrIdentifier(SubjectFinder.java:160)

at edu.internet2.middleware.grouper.ui.GrouperUiFilter$1.callback(GrouperUiFilter.java:694)

at edu.internet2.middleware.grouper.GrouperSession.callbackGrouperSession(GrouperSession.java:801)

at edu.internet2.middleware.grouper.ui.GrouperUiFilter.initRequest(GrouperUiFilter.java:685)

at edu.internet2.middleware.grouper.ui.GrouperUiFilter.doFilter(GrouperUiFilter.java:777)

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)

at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298)

at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190)

at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291)

at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:776)

at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:705)

at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:898)

at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690)

at java.lang.Thread.run(Thread.java:662)

2012-11-14 09:50:58,488: [TP-Processor7] ERROR GrouperUiFilter.initRequest(736) - - error in init

java.lang.RuntimeException: Cant find login subject: , ADMIN_UI

at edu.internet2.middleware.grouper.ui.GrouperUiFilter.initRequest(GrouperUiFilter.java:702)