Grouper Users - Open Discussion List

[John Gasper <>]

The Grouper UI doesn¹t handle authentication directly. It uses the
REMOTE_USER header to determine the user. You¹ll need to setup Shib or CAS
authentication, or config Tomcat to authenticate against an LDAP or a flat
file.

-- 
John Gasper
IAM Consultant
Unicon, Inc.
PGP/GPG Key: 0xbafee3ef






On 9/10/15, 10:11 AM, "Imholz, John J."
<
 on behalf of 
>
 wrote:

>Using shibboleth, I'm getting a HTTP 403 when accessing the UI.
>
>Nothing interesting in the error or event logs.
>
>I know REMOTE_USER = 900001976, and gsh.sh shows that I'm in the
>etc:sysadmingroup:
>
>gsh 0% GrouperSession.startRootSession();
>edu.internet2.middleware.grouper.GrouperSession:
>82ac602c0e03428b9647b20147d364cf,'GrouperSystem','application'
>gsh 1% subj = findSubject("900001976")
>subject: id='900001976' type='person' source='AD' name='Imholz, John J.'
>gsh 2% sess = GrouperSession.start(subj)
>edu.internet2.middleware.grouper.GrouperSession:
>7e2809ffd95942d89dd4688c7e4272b2,'900001976','person'
>gsh 3% member = MemberFinder.findBySubject(sess, subj)
>member: id='900001976' type='person' source='AD'
>uuid='fa8907745ed84c63b13e4c5f4fe39279'
>gsh 4% member.getGroups()
>group: name='etc:sysadmingroup' displayName='etc:SysAdmin Group'
>uuid='c1c8bd976a9543858711cad6aacc8a9a'
>
>grouper.properties has: groups.wheel.use = true and groups.wheel.group =
>etc:sysadmingroup
>
>Any suggestions to figure this out?
>
>jji
>
>
>