Grouper Users - Open Discussion List

["Hyzer, Chris" <>]

Stephen,

 

Sorry you are having issues here.  Lets get this working.

 

Yes, it needs to be in grouper-loader.properties.  You will need the grouper-loader.base.properties there too.

 

All LDAP connection configs are in one place which is in that file.

 

Please set the log4j setting mentioned on the wiki and look in the logs and see whats going on.

 

log4j.logger.edu.internet2.middleware.grouper.ws.security.WsGrouperLdapAuthentication = DEBUG

 

Also make sure any web.xml security settings toward bottom are removed.

 

Also make sure you aren’t expecting to be prompted for authn, and that you pre-emptively send that header in the WS call.

 

Ok?

 

Thanks

Chris

 

 

From: Stephen A Sazama [mailto:]
Sent: Thursday, April 27, 2017 12:12 PM
To: Nathan Baihly <>
Cc: Hyzer, Chris <>;
Subject: Re: [grouper-users] Grouper WS ldap authentication

 

Hi Chris,

 

We do have basic auth working in our deployed grouper environments (the local issue might be something with the Maven tomcat plugin). We mainly thought it was strange that the grouper-ws LDAP authn documentation suggested editing grouper-loader.properties since grouper-ws isn't interacting with the loader in any way. Does grouper-ws read loader.properties to get the LDAP host url?

 

When we tried making the change to LDAP with our basic HTTP authn in our development environment, it just said invalid login and didn't give any of the expected debug log messages. We may need to tweak our log4j setup some more to pick it up.

 

Thanks,

Stephen

 

On Wed, Apr 26, 2017 at 11:23 AM, Nathan Baihly <> wrote:

I didn't try getting that to work because I was focused on getting LDAP basic working. I tried to get it working by going off of the Grouper WS Authentication page. I tried putting the tomcat-users.xml file in my tomcat conf dir, and it doesn't seem like I can log in as any of the users listed or ones I created. 

For the LDAP basic authentication I followed the Grouper WS Authentication page and made the changes to grouper-loader.properties, I created a grouper-ws.properties file based off of what was in that page, adding in the information for our ldap. 

 

my run config for grouper-ws is: clean tomcat7:run-war -Dgrouper.home=C:/Users/nbaihly/umd-grouper -Dedu.umd.tomcat.confdir=C:/Users/nbaihly/umd-grouper/conf 

 

On Wed, Apr 12, 2017 at 10:18 AM, Hyzer, Chris <> wrote:

Can you get basic auth without ldap working (user/pass).

 

Can you list your steps that you did in detail and let us know what exactly isn’t work or what error messages you get.

 

Thanks

Chris

 

From: [mailto:] On Behalf Of Nathan Baihly
Sent: Monday, April 10, 2017 1:16 PM
To:
Subject: [grouper-users] Grouper WS ldap authentication

 

Hello,

 

I'm running Grouper 2.2.2 and I am trying to setup HTTP basic authentication with ldap following the instructions here: https://spaces.internet2.edu/display/Grouper/Grouper+WS+Authentication

 

I haven't had any success, and it doesn't seem like Grouper WS is using the grouper-loader.properties file that is mentioned there. I was wondering if the documentation on this page is accurate for Grouper 2.2 or not. Also are there specific run parameters that I might be missing? I am trying this for my run config: clean tomcat7:run-war -Dgrouper.home=C:/Users/nbaihly/umd-grouper -Dedu.umd.tomcat.confdir=C:/Users/nbaihly/umd-grouper/conf 

Thanks!

 

--

Nathan Baihly
(240) 818-5250