Grouper Users - Open Discussion List

[Mathieu HETRU <>]

For ajaxError i have found this errors in my grouper.log of my ui :

> grouper-ui;grouper_error.log;dev;nothing;2023-06-13T18:00:55,112:
>           [ajp-nio-0.0.0.0-8009-exec-6] ERROR
>           GrouperUiFilter.doFilter(1329) - [] - UI error
>           edu.internet2.middleware.subject.SourceUnavailableException:
>           Ldap Exception: Cannot invoke "String.toLowerCase()" because
>           the return value of
>           "org.ldaptive.ConnectionConfig.getLdapUrl()" is null,
>           Problem with ldap conection: 0,
>           Error querying ldap server id: 0, searchDn: ou=accounts,
>           filter: '(& (uid=1940) (objectclass=person))', returning
>           attributes: uid, cn, displayname, sn, supanncivilite,
>           edupersonprimaryaffiliation, mail,
>           supannentiteaffectationprincipale, udlaccountcodetype,
>           edupersonprincipalname,
>           Cant find subject from login id: 1940
>               at
> edu.internet2.middleware.subject.provider.LdapSourceAdapter.getLdapResultsHelper(LdapSourceAdapter.java:606)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.subject.provider.LdapSourceAdapter.getLdapResults(LdapSourceAdapter.java:495)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.subject.provider.LdapSourceAdapter.getLdapUnique(LdapSourceAdapter.java:627)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.subject.provider.LdapSourceAdapter.getSubject(LdapSourceAdapter.java:236)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.subject.provider.BaseSourceAdapter.getSubjectByIdOrIdentifier(BaseSourceAdapter.java:520)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.subj.cache.SubjectSourceCache.getSubjectByIdOrIdentifierFromCacheOrSource(SubjectSourceCache.java:1702)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.subj.SourcesXmlResolver$4.callLogic(SourcesXmlResolver.java:580)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.subj.SourcesXmlResolver$4.callLogic(SourcesXmlResolver.java:576)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.subj.SourcesXmlResolver$LogLabelCallable.call(SourcesXmlResolver.java:182)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.subj.SourcesXmlResolver.executeCallables(SourcesXmlResolver.java:243)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.subj.SourcesXmlResolver.findByIdOrIdentifier(SourcesXmlResolver.java:586)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.subj.CachingResolver.findByIdOrIdentifier(CachingResolver.java:486)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.subj.ValidatingResolver.findByIdOrIdentifier(ValidatingResolver.java:258)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.SubjectFinder.findByIdOrIdentifier(SubjectFinder.java:419)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.SubjectFinder.findByIdOrIdentifier(SubjectFinder.java:404)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.ui.GrouperUiFilter.retrieveSubjectLoggedInHelper(GrouperUiFilter.java:385)
>           ~[grouper-ui-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.ui.GrouperUiFilter.retrieveSubjectLoggedIn(GrouperUiFilter.java:319)
>           ~[grouper-ui-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.ui.GrouperUiFilter.doFilter(GrouperUiFilter.java:1310)
>           [grouper-ui-4.1.7.jar:4.1.7]
>               at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:181)
>           [catalina.jar:8.5.87]
>               at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:156)
>           [catalina.jar:8.5.87]
>               at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:167)
>           [catalina.jar:8.5.87]
>               at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:90)
>           [catalina.jar:8.5.87]
>               at
> org.jasig.cas.client.tomcat.v85.SingleSignOutValve.invoke(SingleSignOutValve.java:75)
>           [cas-client-integration-tomcat-v85-3.6.4.jar:3.6.4]
>               at
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:609)
>           [catalina.jar:8.5.87]
>               at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:130)
>           [catalina.jar:8.5.87]
>               at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:93)
>           [catalina.jar:8.5.87]
>               at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
>           [catalina.jar:8.5.87]
>               at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
>           [catalina.jar:8.5.87]
>               at
>           org.apache.coyote.ajp.AjpProcessor.service(AjpProcessor.java:526)
>           [tomcat-coyote.jar:8.5.87]
>               at
> org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
>           [tomcat-coyote.jar:8.5.87]
>               at
> org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:932)
>           [tomcat-coyote.jar:8.5.87]
>               at
> org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1695)
>           [tomcat-coyote.jar:8.5.87]
>               at
> org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
>           [tomcat-coyote.jar:8.5.87]
>               at
> org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1191)
>           [tomcat-util.jar:8.5.87]
>               at
> org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:659)
>           [tomcat-util.jar:8.5.87]
>               at
> org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
>           [tomcat-util.jar:8.5.87]
>               at java.lang.Thread.run(Thread.java:833) [?:?]
>           Caused by: java.lang.NullPointerException: Cannot invoke
>           "String.toLowerCase()" because the return value of
>           "org.ldaptive.ConnectionConfig.getLdapUrl()" is null,
>           Problem with ldap conection: 0,
>           Error querying ldap server id: 0, searchDn: ou=accounts,
>           filter: '(& (uid=1940) (objectclass=person))', returning
>           attributes: uid, cn, displayname, sn, supanncivilite,
>           edupersonprimaryaffiliation, mail,
>           supannentiteaffectationprincipale, udlaccountcodetype,
>           edupersonprincipalname
>               at
> org.ldaptive.provider.jndi.JndiProvider.getJndiConnectionFactory(JndiProvider.java:173)
>           ~[ldaptive-1.2.4.jar:?]
>               at
> org.ldaptive.provider.jndi.JndiProvider.getConnectionFactory(JndiProvider.java:90)
>           ~[ldaptive-1.2.4.jar:?]
>               at
> org.ldaptive.DefaultConnectionFactory.getConnection(DefaultConnectionFactory.java:127)
>           ~[ldaptive-1.2.4.jar:?]
>               at
> org.ldaptive.pool.AbstractConnectionPool.createConnection(AbstractConnectionPool.java:451)
>           ~[ldaptive-1.2.4.jar:?]
>               at
> org.ldaptive.pool.AbstractConnectionPool.createAvailableConnection(AbstractConnectionPool.java:494)
>           ~[ldaptive-1.2.4.jar:?]
>               at
> org.ldaptive.pool.AbstractConnectionPool.grow(AbstractConnectionPool.java:344)
>           ~[ldaptive-1.2.4.jar:?]
>               at
> org.ldaptive.pool.AbstractConnectionPool.initialize(AbstractConnectionPool.java:253)
>           ~[ldaptive-1.2.4.jar:?]
>               at
> edu.internet2.middleware.grouper.ldap.ldaptive.LdaptiveSessionImpl.blockingLdapPool(LdaptiveSessionImpl.java:331)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.ldap.ldaptive.LdaptiveSessionImpl.callbackLdapSession(LdaptiveSessionImpl.java:458)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.grouper.ldap.ldaptive.LdaptiveSessionImpl.list(LdaptiveSessionImpl.java:621)
>           ~[grouper-4.1.7.jar:4.1.7]
>               at
> edu.internet2.middleware.subject.provider.LdapSourceAdapter.getLdapResultsHelper(LdapSourceAdapter.java:603)
>           ~[grouper-4.1.7.jar:4.1.7]
>               ... 36 more

But in my subject.properties i have this setting :

> subjectApi.source.UDL.param.PROVIDER_URL.value
>           = ldap://ldap-dev.univ-lille.fr:389/dc=univ-lille,dc=fr
      Why i got a null value for
      org.ldaptive.ConnectionConfig.getLdapUrl() ?

Anyone have an idea to resolve my pb ?

Thanks !

Best Regards,

Mathieu HETRU
Responsable du bureau Appui Technique au SI (ATSI)
Service Intégration et Exploitation du Système d'Information (SIESI)

Direction Opérationnelle Système d’Information-Multimédia-Audiovisuel (DOSIMA)
Direction Générale Déléguée au Numérique (DGDNum)

Université de Lille
Campus Cité Scientifique
Bâtiment M3 - Bureau 107
59655 Villeneuve d'Ascq CEDEX

Tél. :+33 (0)3 62 26 83 81 (numéro interne : 68381)

| www.univ-lille.fr

Le 13/06/2023 à 19:58, Mathieu HETRU a écrit :

Thanks but with it set GROUPER_UI_GROUPER_AUTH=false i continue to get the basic auth window with GrouperSystem.

I have found to disable it with setting this in grouper.hibernate.properties :

> grouper.is.ui.basicAuthn=false

But i continue to get a blank window with this url : /grouper/grouperExternal/public/UiV2Public.index?operation=UiV2Public.postIndex&function=UiV2Public.error&code=ajaxError

:-/

Best Regards,

Mathieu HETRU
Responsable du bureau Appui Technique au SI (ATSI)
Service Intégration et Exploitation du Système d'Information (SIESI)

Direction Opérationnelle Système d’Information-Multimédia-Audiovisuel (DOSIMA)
Direction Générale Déléguée au Numérique (DGDNum)

Université de Lille
Campus Cité Scientifique
Bâtiment M3 - Bureau 107
59655 Villeneuve d'Ascq CEDEX

Tél. :+33 (0)3 62 26 83 81 (numéro interne : 68381)

| www.univ-lille.fr

Le 13/06/2023 à 19:42, Murphy, Kellen J. (wfx6yz) a écrit :

          Mathieu,
        
          
        
         You can disable BASIC auth by
          setting GROUPER_UI_GROUPER_AUTH=false as an environment
          variable within the container. It's set to true with the
          "quickstart" option, see: https://spaces.at.internet2.edu/display/Grouper/Grouper+container+documentation+for+v2.5#Groupercontainerdocumentationforv2.5-GrouperContainerparams
         
        
         I'm not sure on the AJAX
          error, perhaps someone else can help with that. FWIW, this
          list is also pretty quiet compared to the Grouper Slack. To
          get access to that, you can email 
          with a request and someone will add you. People tend to pay
          closer attention and ask more questions there 🙂

Kellen Murphy
Identity Architecture & Solutions Engineer E
T +1 (434) 243-7248 University of Virginia
Information Technology Services (ITS)
Michie South
Emmet Street
P.O. Box 400217
Charlottesville, VA 22901 its.virginia.edu

 

---

From: <> on behalf of Mathieu HETRU <>
Sent: Tuesday, June 13, 2023 1:27 PM
To: <>
Subject: [grouper-users] grouper 4.1.7 after cas sso i got ajaxError

 

Hello,

i have set sso cas on my grouper 4.1.7

but when i connect with my browser i am redirected on my cas server it is ok but after when i got on grouper i got the authentication basic GrouperSystem window :

how can i disable it ?

and if i connect with GrouperSystem

after i got a blank window with an ajaxError on this url : /grouper/grouperExternal/public/UiV2Public.index?operation=UiV2Public.postIndex&function=UiV2Public.error&code=ajaxError

Anyone have an idea to resolve my pb ?

Thanks !

Best Regards,

--



Mathieu HETRU
Responsable du bureau Appui Technique au SI (ATSI)
Service Intégration et Exploitation du Système d'Information (SIESI)

Direction Opérationnelle Système d’Information-Multimédia-Audiovisuel (DOSIMA)
Direction Générale Déléguée au Numérique (DGDNum)

Université de Lille
Campus Cité Scientifique
Bâtiment M3 - Bureau 107
59655 Villeneuve d'Ascq CEDEX

Tél. :+33 (0)3 62 26 83 81 (numéro interne : 68381)

| www.univ-lille.fr