Skip to Content.
Sympa Menu

grouper-users - [grouper-users] RE: LDAP auth and the wheel group?

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] RE: LDAP auth and the wheel group?


Chronological Thread 
  • From: Michael White <>
  • To: Chris Hyzer <>, "" <>
  • Subject: [grouper-users] RE: LDAP auth and the wheel group?
  • Date: Tue, 20 Jan 2015 11:55:24 +0000
  • Accept-language: en-US, en-GB
  • Acceptlanguage: en-US, en-GB

Hi Chris,

> Can you please try upgrading to 2.2.1 including patches and let me know if
> you still have the problem?

I've been trying to run the upgrader this morning but have hit a wall . . .

The API upgrade appears to have passed without incident, but when I try and
upgrade the UI, I'm hitting a problem with the installer not being able to
find the UI properties files:

--------------------------------------------------------------------------------------------
grouper@grouperdev:/opt/grouper/tmp/grouperUpgrade_v2_2_1#
java -jar grouperInstaller.jar
Do you want to 'install' a new installation of grouper, 'upgrade' an existing
installation
or 'patch' an existing installation
(enter: 'install', 'upgrade', 'patch' or blank for the default) [install]:
upgrade
You should backup your files and database before you start. Press <enter> to
continue.

##################################
Gather upgrade information

Enter in a Grouper temp directory to download tarballs (note: better if no
spaces or special chars) [/opt/grouper/tmp/grouperUpgrade_v2_2_1]:
What do you want to upgrade? api, ui, ws, or psp? [api]: ui
Are there any running processes using this installation? tomcats? loader?
psp? etc? (t|f)? [f]:

Where is the grouper UI installed? /opt/grouper/grouper.ui-2.2.0/
Cant find Grouper UI properties files or libs, looked in the directory,
/classes/ , /conf/ , /WEB-INF/classes/ , /lib/ , /WEB-INF/lib/ ,
/lib/grouper/ , /dist/lib/
Where is the grouper UI installed?
--------------------------------------------------------------------------------------------

- but, visually at least, the ui conf files appear to be there:

root@grouperdev:/opt/grouper/grouper.ui-2.2.0/conf#
ls -l
total 100
drwxr-xr-x 2 grouper grouper 4096 Aug 5 10:27 attributeDefNamePicker
drwxr-xr-x 3 grouper grouper 4096 Dec 18 10:38 grouperText
-rw-r--r-- 1 grouper grouper 34888 Aug 5 10:27 grouper-ui.base.properties
-rw-rw-rw- 1 grouper grouper 846 Dec 18 09:56 grouper-ui.properties
drwxr-xr-x 2 grouper grouper 4096 Dec 18 09:58 logs
drwxr-xr-x 2 grouper grouper 4096 Aug 5 10:27 membershipLiteName
-rw-r--r-- 1 grouper grouper 6071 Aug 5 10:27
Owasp.CsrfGuard.overlay.properties
-rw-r--r-- 1 grouper grouper 26494 Aug 5 10:27 Owasp.CsrfGuard.properties
drwxr-xr-x 4 grouper grouper 4096 Aug 5 10:27 resources
drwxr-xr-x 2 grouper grouper 4096 Aug 5 10:27 subjectPicker


I've tried a few things in an effort to get around this, but no joy as it all
looks fine to me so I'm stabbing in the dark a bit . . .

Any thoughts on why I might be getting stuck here, and, perhaps more
importantly, how I can get past this point?

Cheers,

Mike

Michael White
eLearning Liaison and Development (eLD)
Information Services
S8, Library
University of Stirling
Stirling SCOTLAND
FK9 4LA
Email:


Tel: +44 (0) 1786 466877
Fax: +44 (0) 1786 466880
http://www.stir.ac.uk/is/staff/about/teams/aldt/#eld


> -----Original Message-----
> From: Chris Hyzer
> [mailto:]
> Sent: 20 January 2015 06:35
> To: Michael White;
>
> Subject: RE: LDAP auth and the wheel group?
>
> Can you please try upgrading to 2.2.1 including patches and let me know if
> you still have the problem? You should be able to do this with the grouper
> upgrader.
>
> Thanks,
> Chris
>
> -----Original Message-----
> From:
>
> [
> ]
> On Behalf Of Michael White
> Sent: Monday, January 19, 2015 11:31 AM
> To:
>
> Subject: [grouper-users] LDAP auth and the wheel group?
>
> Hi,
>
> I'm still in the early stages of playing and learning with Grouper v2.2.0.
> I've got
> a basic folder/group hierarchy set up, subjects coming from AD, and a number
> of groups being successfully populated via the Loader :-).
>
> I'm now trying to switch to using our AD for authentication by switching to
> a
> JNDIRealm in Tomcat's server.xml - of course this means that I can no longer
> log on using the GrouperSystem account, so I've been trying to enable my AD
> account to be an admin account in Grouper by adding it to my "wheel" group .
> . .
>
> I've added:
>
> groups.wheel.use = true
>
> - to "grouper.properties", and I note:
>
> groups.wheel.group = etc:sysadmingroup
>
> - in "grouper.base.properties".
>
> I created "etc:sysadmingroup" (as the Grouper System user) and added myself
> to it, however this doesn't appear to be working as hoped/expected.
>
> If I log on using my AD username, authentication appears to work and I
> arrive
> at the Grouper (new) UI and I'm correctly identified as me in the "Logged in
> as" line, but in the "Browse Folders" panel, it just shows "Error", which is
> reflected in the logs (appropriate snippet attached).
>
> If I switch to the old UI, I can browse the folder hierarchy, but I can
> only see
> groups that I have been granted explicit permissions for (i.e. still not
> behaving
> as an admin user).
>
> Have I misunderstood how this is supposed to work? or am I missing
> something obvious (or done something stupid!)?
>
> Any thoughts, observations, or pointers would be most welcome as I'm not
> sure what to try next.
>
> Cheers,
>
> Mike
>
> Michael White
> eLearning Liaison and Development (eLD)
> Information Services
> S8, Library
> University of Stirling
> Stirling SCOTLAND
> FK9 4LA
> Email:
>
> Tel: +44 (0) 1786 466877
> Fax: +44 (0) 1786 466880
> http://www.stir.ac.uk/is/staff/about/teams/aldt/#eld
>
>
>
> --
> The University of Stirling has been ranked in the top 12 of UK universities
> for
> graduate employment*.
> 94% of our 2012 graduates were in work and/or further study within six
> months of graduation.
> *The Telegraph
> The University of Stirling is a charity registered in Scotland, number SC
> 011159.


--
The University of Stirling has been ranked in the top 12 of UK universities
for graduate employment*.
94% of our 2012 graduates were in work and/or further study within six months
of graduation.
*The Telegraph
The University of Stirling is a charity registered in Scotland, number SC
011159.




Archive powered by MHonArc 2.6.16.

Top of Page