Skip to Content.
Sympa Menu

grouper-users - [grouper-users] RE: LDAP auth and the wheel group?

Subject: Grouper Users - Open Discussion List

List archive

[grouper-users] RE: LDAP auth and the wheel group?


Chronological Thread 
  • From: Michael White <>
  • To: Chris Hyzer <>, "" <>
  • Subject: [grouper-users] RE: LDAP auth and the wheel group?
  • Date: Wed, 21 Jan 2015 11:11:01 +0000
  • Accept-language: en-US, en-GB
  • Acceptlanguage: en-US, en-GB

> the dir you entered is the dir where you downloaded and built the UI, not
> the dir where the webapp runs from, which is
> either in the tomcat webapps dir, or is linked from a tomcat config to
> another dir.

Thanks Chris! That was the nugget of information that I was missing (and is
obvious when the penny drops!) - once I'd pointed it at the right place
everything went according to plan and the UI upgrade (and also, subsequently,
the Web Services upgrade) completed successfully :-)

It just goes to show - "Never underestimate the power of stating the obvious"
;-)

Thanks again, much appreciated.

Cheers,

Mike

Michael White
eLearning Liaison and Development (eLD)
Information Services
S8, Library
University of Stirling
Stirling SCOTLAND
FK9 4LA
Email:


Tel: +44 (0) 1786 466877
Fax: +44 (0) 1786 466880
http://www.stir.ac.uk/is/staff/about/teams/aldt/#eld


> -----Original Message-----
> From: Chris Hyzer
> [mailto:]
> Sent: 20 January 2015 21:44
> To: Michael White;
>
> Subject: RE: LDAP auth and the wheel group?
>
> the dir you entered is the dir where you downloaded and built the UI, not
> the
> dir where the webapp runs from, which is either in the tomcat webapps dir,
> or is linked from a tomcat config to another dir. That dir should have
> WEB-INF
> inside of it. Do you know where that dir is?
>
> Thanks,
> Chris
>
> -----Original Message-----
> From: Michael White
> [mailto:]
> Sent: Tuesday, January 20, 2015 6:55 AM
> To: Chris Hyzer;
>
> Subject: RE: LDAP auth and the wheel group?
>
> Hi Chris,
>
> > Can you please try upgrading to 2.2.1 including patches and let me know if
> you still have the problem?
>
> I've been trying to run the upgrader this morning but have hit a wall . . .
>
> The API upgrade appears to have passed without incident, but when I try and
> upgrade the UI, I'm hitting a problem with the installer not being able to
> find
> the UI properties files:
>
> --------------------------------------------------------------------------------------------
> grouper@grouperdev:/opt/grouper/tmp/grouperUpgrade_v2_2_1#
> java -jar
> grouperInstaller.jar Do you want to 'install' a new installation of grouper,
> 'upgrade' an existing installation
> or 'patch' an existing installation
> (enter: 'install', 'upgrade', 'patch' or blank for the default)
> [install]: upgrade
> You should backup your files and database before you start. Press <enter>
> to
> continue.
>
> ##################################
> Gather upgrade information
>
> Enter in a Grouper temp directory to download tarballs (note: better if no
> spaces or special chars) [/opt/grouper/tmp/grouperUpgrade_v2_2_1]:
> What do you want to upgrade? api, ui, ws, or psp? [api]: ui Are there any
> running processes using this installation? tomcats? loader? psp? etc?
> (t|f)?
> [f]:
>
> Where is the grouper UI installed? /opt/grouper/grouper.ui-2.2.0/ Cant find
> Grouper UI properties files or libs, looked in the directory, /classes/ ,
> /conf/ ,
> /WEB-INF/classes/ , /lib/ , /WEB-INF/lib/ , /lib/grouper/ , /dist/lib/
> Where is
> the grouper UI installed?
> --------------------------------------------------------------------------------------------
>
> - but, visually at least, the ui conf files appear to be there:
>
> root@grouperdev:/opt/grouper/grouper.ui-2.2.0/conf#
> ls -l total 100 drwxr-
> xr-x 2 grouper grouper 4096 Aug 5 10:27 attributeDefNamePicker drwxr-xr-
> x 3 grouper grouper 4096 Dec 18 10:38 grouperText
> -rw-r--r-- 1 grouper grouper 34888 Aug 5 10:27 grouper-ui.base.properties
> -rw-rw-rw- 1 grouper grouper 846 Dec 18 09:56 grouper-ui.properties
> drwxr-xr-x 2 grouper grouper 4096 Dec 18 09:58 logs drwxr-xr-x 2 grouper
> grouper 4096 Aug 5 10:27 membershipLiteName
> -rw-r--r-- 1 grouper grouper 6071 Aug 5 10:27
> Owasp.CsrfGuard.overlay.properties
> -rw-r--r-- 1 grouper grouper 26494 Aug 5 10:27 Owasp.CsrfGuard.properties
> drwxr-xr-x 4 grouper grouper 4096 Aug 5 10:27 resources drwxr-xr-x 2
> grouper grouper 4096 Aug 5 10:27 subjectPicker
>
>
> I've tried a few things in an effort to get around this, but no joy as it
> all looks
> fine to me so I'm stabbing in the dark a bit . . .
>
> Any thoughts on why I might be getting stuck here, and, perhaps more
> importantly, how I can get past this point?
>
> Cheers,
>
> Mike
>
> Michael White
> eLearning Liaison and Development (eLD)
> Information Services
> S8, Library
> University of Stirling
> Stirling SCOTLAND
> FK9 4LA
> Email:
>
> Tel: +44 (0) 1786 466877
> Fax: +44 (0) 1786 466880
> http://www.stir.ac.uk/is/staff/about/teams/aldt/#eld
>
>
> > -----Original Message-----
> > From: Chris Hyzer
> > [mailto:]
> > Sent: 20 January 2015 06:35
> > To: Michael White;
> >
> > Subject: RE: LDAP auth and the wheel group?
> >
> > Can you please try upgrading to 2.2.1 including patches and let me
> > know if you still have the problem? You should be able to do this
> > with the grouper upgrader.
> >
> > Thanks,
> > Chris
> >
> > -----Original Message-----
> > From:
> >
> > [
> > ]
> > On Behalf Of Michael White
> > Sent: Monday, January 19, 2015 11:31 AM
> > To:
> >
> > Subject: [grouper-users] LDAP auth and the wheel group?
> >
> > Hi,
> >
> > I'm still in the early stages of playing and learning with Grouper
> > v2.2.0. I've got a basic folder/group hierarchy set up, subjects
> > coming from AD, and a number of groups being successfully populated via
> the Loader :-).
> >
> > I'm now trying to switch to using our AD for authentication by
> > switching to a JNDIRealm in Tomcat's server.xml - of course this means
> > that I can no longer log on using the GrouperSystem account, so I've
> > been trying to enable my AD account to be an admin account in Grouper by
> adding it to my "wheel" group .
> > . .
> >
> > I've added:
> >
> > groups.wheel.use = true
> >
> > - to "grouper.properties", and I note:
> >
> > groups.wheel.group = etc:sysadmingroup
> >
> > - in "grouper.base.properties".
> >
> > I created "etc:sysadmingroup" (as the Grouper System user) and added
> > myself to it, however this doesn't appear to be working as hoped/expected.
> >
> > If I log on using my AD username, authentication appears to work and I
> > arrive at the Grouper (new) UI and I'm correctly identified as me in
> > the "Logged in as" line, but in the "Browse Folders" panel, it just
> > shows "Error", which is reflected in the logs (appropriate snippet
> > attached).
> >
> > If I switch to the old UI, I can browse the folder hierarchy, but I
> > can only see groups that I have been granted explicit permissions for
> > (i.e. still not behaving as an admin user).
> >
> > Have I misunderstood how this is supposed to work? or am I missing
> > something obvious (or done something stupid!)?
> >
> > Any thoughts, observations, or pointers would be most welcome as I'm
> > not sure what to try next.
> >
> > Cheers,
> >
> > Mike
> >
> > Michael White
> > eLearning Liaison and Development (eLD) Information Services S8,
> > Library University of Stirling Stirling SCOTLAND
> > FK9 4LA
> > Email:
> >
> > Tel: +44 (0) 1786 466877
> > Fax: +44 (0) 1786 466880
> > http://www.stir.ac.uk/is/staff/about/teams/aldt/#eld
> >
> >
> >
> > --
> > The University of Stirling has been ranked in the top 12 of UK
> > universities for graduate employment*.
> > 94% of our 2012 graduates were in work and/or further study within six
> > months of graduation.
> > *The Telegraph
> > The University of Stirling is a charity registered in Scotland, number
> > SC 011159.
>
>
> --
> The University of Stirling has been ranked in the top 12 of UK universities
> for
> graduate employment*.
> 94% of our 2012 graduates were in work and/or further study within six
> months of graduation.
> *The Telegraph
> The University of Stirling is a charity registered in Scotland, number SC
> 011159.


--
The University of Stirling has been ranked in the top 12 of UK universities
for graduate employment*.
94% of our 2012 graduates were in work and/or further study within six months
of graduation.
*The Telegraph
The University of Stirling is a charity registered in Scotland, number SC
011159.




Archive powered by MHonArc 2.6.16.

Top of Page