Grouper Users - Open Discussion List

[Robert Bradley <>]

On 11/11/14 20:24, Rahul Doshi wrote:
> I figured out the problem.  I copied all the config files from 2.2.0
> to 2.2.1 instead of just my customized config files.  As as result I
> was missing property jexl.cachesize from grouper.base.properties
> which was causing it to throw the jexl exception.
> 

I had the same problem with missing jexl.cachesize too, so thanks for
the update.  However, I now have a similar problem with the csrf token
generation part of the page.  The grouper_error.log file contains this
stack trace (apologies in advance for the line wrapping):

2014-11-12 09:40:06,468: [http-0%3A0%3A0%3A0%3A0%3A0%3A0%3A1-8080-2]
ERROR GrouperUiRestServlet.doGet(321) - < robert
678E31DC17A33AF15645FBC618D4E4F6-0002 - - - > - Problem calling
reflection from URL:
edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2Main.index

java.lang.RuntimeException: org.apache.jasper.JasperException: An
exception occurred processing JSP page
/WEB-INF/grouperUi2/index/../assetsJsp/commonBottom.jsp at line 3

1:
2: <%-- note this wont work for token per page --%>
3: <input type="hidden" name="<csrf:token-name/>"
value="<csrf:token-value />"/>
4:
5:
6: <%-- note: dojo and jquery script are included in commonHead so we
can call dojo things in the screen --%>


Stacktrace:,
Problem calling method index on
edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2Main
        at
edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiServiceLogicBase.showJsp(UiServiceLogicBase.java:39)
        at
edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiV2Main.index(UiV2Main.java:630)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
        at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:606)
        at
edu.internet2.middleware.grouper.util.GrouperUtil.invokeMethod(GrouperUtil.java:4002)
        at
edu.internet2.middleware.grouper.util.GrouperUtil.callMethod(GrouperUtil.java:3953)
        at
edu.internet2.middleware.grouper.j2ee.GrouperUiRestServlet.doGet(GrouperUiRestServlet.java:288)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:617)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at
edu.internet2.middleware.grouper.ui.ErrorFilter.doFilter(ErrorFilter.java:147)
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at
edu.internet2.middleware.grouper.ui.GrouperUiFilter.doFilter(GrouperUiFilter.java:1015)
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
        at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
        at
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:563)
        at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
        at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
        at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
        at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
        at
org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)
        at
org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:602)
        at 
org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
        at java.lang.Thread.run(Thread.java:745)
Caused by: org.apache.jasper.JasperException: An exception occurred
processing JSP page
/WEB-INF/grouperUi2/index/../assetsJsp/commonBottom.jsp at line 3

1:
2: <%-- note this wont work for token per page --%>
3: <input type="hidden" name="<csrf:token-name/>"
value="<csrf:token-value />"/>
4:
5:
6: <%-- note: dojo and jquery script are included in commonHead so we
can call dojo things in the screen --%>


Stacktrace:
        at
org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:521)
        at
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:430)
        at 
org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313)
        at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at
org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:646)
        at
org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:436)
        at
org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:374)
        at
org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:302)
        at
edu.internet2.middleware.grouper.grouperUi.serviceLogic.UiServiceLogicBase.showJsp(UiServiceLogicBase.java:37)
        ... 29 more
Caused by: java.lang.NullPointerException
        at org.owasp.csrfguard.CsrfGuard.getTokenValue(CsrfGuard.java:278)
        at 
org.owasp.csrfguard.tag.TokenValueTag.tokenValue(TokenValueTag.java:55)
        at 
org.owasp.csrfguard.tag.TokenValueTag.doStartTag(TokenValueTag.java:64)
        at
org.apache.jsp.WEB_002dINF.grouperUi2.index.index_jsp._jspx_meth_csrf_005ftoken_002dvalue_005f0(index_jsp.java:441)
        at
org.apache.jsp.WEB_002dINF.grouperUi2.index.index_jsp._jspService(index_jsp.java:284)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at
org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:388)
        ... 39 more

It would appear that I have messed something CsrfGuard-related up, but
the Owasp.CsrfGuard.*properties files appear to match the current Git
repository and 2.2.1 tarball, so I am at a loss to explain this for now.

-- 
Dr Robert Bradley
Identity and Access Management, IT Services, University of Oxford