Skip to Content.
Sympa Menu

grouper-users - [grouper-users] RE: LDAP auth and the wheel group?

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] RE: LDAP auth and the wheel group?


Chronological Thread 
  • From: Chris Hyzer <>
  • To: Michael White <>, "" <>
  • Subject: [grouper-users] RE: LDAP auth and the wheel group?
  • Date: Tue, 20 Jan 2015 21:44:14 +0000
  • Accept-language: en-US

the dir you entered is the dir where you downloaded and built the UI, not the
dir where the webapp runs from, which is either in the tomcat webapps dir, or
is linked from a tomcat config to another dir. That dir should have WEB-INF
inside of it. Do you know where that dir is?

Thanks,
Chris

-----Original Message-----
From: Michael White
[mailto:]

Sent: Tuesday, January 20, 2015 6:55 AM
To: Chris Hyzer;

Subject: RE: LDAP auth and the wheel group?

Hi Chris,

> Can you please try upgrading to 2.2.1 including patches and let me know if
> you still have the problem?

I've been trying to run the upgrader this morning but have hit a wall . . .

The API upgrade appears to have passed without incident, but when I try and
upgrade the UI, I'm hitting a problem with the installer not being able to
find the UI properties files:

--------------------------------------------------------------------------------------------
grouper@grouperdev:/opt/grouper/tmp/grouperUpgrade_v2_2_1#
java -jar grouperInstaller.jar Do you want to 'install' a new installation
of grouper, 'upgrade' an existing installation
or 'patch' an existing installation
(enter: 'install', 'upgrade', 'patch' or blank for the default) [install]:
upgrade You should backup your files and database before you start. Press
<enter> to continue.

##################################
Gather upgrade information

Enter in a Grouper temp directory to download tarballs (note: better if no
spaces or special chars) [/opt/grouper/tmp/grouperUpgrade_v2_2_1]:
What do you want to upgrade? api, ui, ws, or psp? [api]: ui Are there any
running processes using this installation? tomcats? loader? psp? etc?
(t|f)? [f]:

Where is the grouper UI installed? /opt/grouper/grouper.ui-2.2.0/ Cant find
Grouper UI properties files or libs, looked in the directory, /classes/ ,
/conf/ , /WEB-INF/classes/ , /lib/ , /WEB-INF/lib/ , /lib/grouper/ ,
/dist/lib/ Where is the grouper UI installed?
--------------------------------------------------------------------------------------------

- but, visually at least, the ui conf files appear to be there:

root@grouperdev:/opt/grouper/grouper.ui-2.2.0/conf#
ls -l total 100 drwxr-xr-x 2 grouper grouper 4096 Aug 5 10:27
attributeDefNamePicker drwxr-xr-x 3 grouper grouper 4096 Dec 18 10:38
grouperText
-rw-r--r-- 1 grouper grouper 34888 Aug 5 10:27 grouper-ui.base.properties
-rw-rw-rw- 1 grouper grouper 846 Dec 18 09:56 grouper-ui.properties
drwxr-xr-x 2 grouper grouper 4096 Dec 18 09:58 logs drwxr-xr-x 2 grouper
grouper 4096 Aug 5 10:27 membershipLiteName
-rw-r--r-- 1 grouper grouper 6071 Aug 5 10:27
Owasp.CsrfGuard.overlay.properties
-rw-r--r-- 1 grouper grouper 26494 Aug 5 10:27 Owasp.CsrfGuard.properties
drwxr-xr-x 4 grouper grouper 4096 Aug 5 10:27 resources drwxr-xr-x 2
grouper grouper 4096 Aug 5 10:27 subjectPicker


I've tried a few things in an effort to get around this, but no joy as it all
looks fine to me so I'm stabbing in the dark a bit . . .

Any thoughts on why I might be getting stuck here, and, perhaps more
importantly, how I can get past this point?

Cheers,

Mike

Michael White
eLearning Liaison and Development (eLD)
Information Services
S8, Library
University of Stirling
Stirling SCOTLAND
FK9 4LA
Email:

Tel: +44 (0) 1786 466877
Fax: +44 (0) 1786 466880
http://www.stir.ac.uk/is/staff/about/teams/aldt/#eld


> -----Original Message-----
> From: Chris Hyzer
> [mailto:]
> Sent: 20 January 2015 06:35
> To: Michael White;
>
> Subject: RE: LDAP auth and the wheel group?
>
> Can you please try upgrading to 2.2.1 including patches and let me
> know if you still have the problem? You should be able to do this
> with the grouper upgrader.
>
> Thanks,
> Chris
>
> -----Original Message-----
> From:
>
> [
> ]
> On Behalf Of Michael White
> Sent: Monday, January 19, 2015 11:31 AM
> To:
>
> Subject: [grouper-users] LDAP auth and the wheel group?
>
> Hi,
>
> I'm still in the early stages of playing and learning with Grouper
> v2.2.0. I've got a basic folder/group hierarchy set up, subjects
> coming from AD, and a number of groups being successfully populated via the
> Loader :-).
>
> I'm now trying to switch to using our AD for authentication by
> switching to a JNDIRealm in Tomcat's server.xml - of course this means
> that I can no longer log on using the GrouperSystem account, so I've
> been trying to enable my AD account to be an admin account in Grouper by
> adding it to my "wheel" group .
> . .
>
> I've added:
>
> groups.wheel.use = true
>
> - to "grouper.properties", and I note:
>
> groups.wheel.group = etc:sysadmingroup
>
> - in "grouper.base.properties".
>
> I created "etc:sysadmingroup" (as the Grouper System user) and added
> myself to it, however this doesn't appear to be working as hoped/expected.
>
> If I log on using my AD username, authentication appears to work and I
> arrive at the Grouper (new) UI and I'm correctly identified as me in
> the "Logged in as" line, but in the "Browse Folders" panel, it just
> shows "Error", which is reflected in the logs (appropriate snippet
> attached).
>
> If I switch to the old UI, I can browse the folder hierarchy, but I
> can only see groups that I have been granted explicit permissions for
> (i.e. still not behaving as an admin user).
>
> Have I misunderstood how this is supposed to work? or am I missing
> something obvious (or done something stupid!)?
>
> Any thoughts, observations, or pointers would be most welcome as I'm
> not sure what to try next.
>
> Cheers,
>
> Mike
>
> Michael White
> eLearning Liaison and Development (eLD) Information Services S8,
> Library University of Stirling Stirling SCOTLAND
> FK9 4LA
> Email:
>
> Tel: +44 (0) 1786 466877
> Fax: +44 (0) 1786 466880
> http://www.stir.ac.uk/is/staff/about/teams/aldt/#eld
>
>
>
> --
> The University of Stirling has been ranked in the top 12 of UK
> universities for graduate employment*.
> 94% of our 2012 graduates were in work and/or further study within six
> months of graduation.
> *The Telegraph
> The University of Stirling is a charity registered in Scotland, number
> SC 011159.


--
The University of Stirling has been ranked in the top 12 of UK universities
for graduate employment*.
94% of our 2012 graduates were in work and/or further study within six months
of graduation.
*The Telegraph
The University of Stirling is a charity registered in Scotland, number SC
011159.




Archive powered by MHonArc 2.6.16.

Top of Page