Grouper Users - Open Discussion List

[Chris Hyzer <>]

In this case I believe you need to edit the web.core.xml and ant dist will 
pull it.  what shib grouper doc did you use, is it listed as a step there?

We could have the configurator do some work in this area as well...  

Thanks,
Chris

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Imholz, John J.
Sent: Thursday, September 10, 2015 1:47 PM
To: 

Subject: [grouper-users] RE: New UI install - 403

Never mind.

But,  can we have a way for "ant dist" in grouper UI to exclude the security 
section (when using Shib.)

Maybe I'm "doing it wrong" but that would have saved some time.

jji

-----Original Message-----
From: 

 
[mailto:]
 On Behalf Of Imholz, John J.
Sent: Thursday, September 10, 2015 1:12 PM
To: 

Subject: [grouper-users] New UI install - 403



Using shibboleth, I'm getting a HTTP 403 when accessing the UI.

Nothing interesting in the error or event logs.

I know REMOTE_USER = 900001976, and gsh.sh shows that I'm in the 
etc:sysadmingroup:

gsh 0% GrouperSession.startRootSession();
edu.internet2.middleware.grouper.GrouperSession: 
82ac602c0e03428b9647b20147d364cf,'GrouperSystem','application'
gsh 1% subj = findSubject("900001976")
subject: id='900001976' type='person' source='AD' name='Imholz, John J.'
gsh 2% sess = GrouperSession.start(subj)
edu.internet2.middleware.grouper.GrouperSession: 
7e2809ffd95942d89dd4688c7e4272b2,'900001976','person'
gsh 3% member = MemberFinder.findBySubject(sess, subj)
member: id='900001976' type='person' source='AD' 
uuid='fa8907745ed84c63b13e4c5f4fe39279'
gsh 4% member.getGroups()
group: name='etc:sysadmingroup' displayName='etc:SysAdmin Group' 
uuid='c1c8bd976a9543858711cad6aacc8a9a'

grouper.properties has: groups.wheel.use = true and groups.wheel.group = 
etc:sysadmingroup

Any suggestions to figure this out?

jji