You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@continuum.apache.org by "Richard Gomes (JIRA)" <ji...@codehaus.org> on 2009/01/05 01:03:19 UTC

[jira] Created: (CONTINUUM-2031) continuum :: redback :: security.properties not overriding properly application.xml

continuum :: redback :: security.properties not overriding properly application.xml 
------------------------------------------------------------------------------------

                 Key: CONTINUUM-2031
                 URL: http://jira.codehaus.org/browse/CONTINUUM-2031
             Project: Continuum
          Issue Type: Bug
    Affects Versions: 1.2.2
         Environment: apache-tomcat-6.0.18
Maven version: 2.0.9
Java version: 1.6.0_03
OS name: "linux" version: "2.6.18-6-amd64" arch: "amd64" Family: "unix"

            Reporter: Richard Gomes


in webapps/continuum/WEB-INF/classes/META-INF/plexus/application.xml I 'hardcoded' my user.base.dn as ou=People,dc=jquantlib,dc=org, as shown below:

<component>
      <role>org.codehaus.plexus.redback.common.ldap.UserMapper</role>
      <role-hint>ldap</role-hint>
      <implementation>org.codehaus.plexus.redback.common.ldap.LdapUserMapper</implementation>
      <configuration>
        <email-attribute>email</email-attribute>
        <full-name-attribute>givenName</full-name-attribute>
        <password-attribute>userPassword</password-attribute>
        <user-id-attribute>cn</user-id-attribute>
        <user-base-dn>ou=People,dc=jquantlib,dc=org</user-base-dn>
        <user-object-class>inetOrgPerson</user-object-class>
      </configuration>
      <requirements>
        <requirement>
          <role>org.codehaus.plexus.redback.configuration.UserConfiguration</role>
        </requirement>
      </requirements>
    </component>



I was obliged to do it in this file and repackage the .WAR file because the value specified is not properly loaded.
For instance, if I defined

user.manager.impl=ldap
ldap.bind.authenticator.enabled=true
redback.default.admin=admin
redback.default.guest=guest
security.policy.password.expiration.enabled=false
user.manager.impl=cached
ldap.bind.authenticator.enabled=true

ldap.config.hostname=localhost
ldap.config.port=389
ldap.config.base.dn=dc=jquantlib,dc=org
ldap.config.context.factory=com.sun.jndi.ldap.LdapCtxFactory
ldap.config.bind.dn=cn=admin,dc=jquantlib,dc=org
ldap.config.password=secret
#ldap.config.authentication.method=

ldap.config.mapper.attribute.email=mail
ldap.config.mapper.attribute.fullname=givenName
ldap.config.mapper.attribute.password=userPassword
ldap.config.mapper.attribute.user.id=cn
#ldap.config.mapper.attribute.user.base.dn=ou=People,dc=jquantlib,dc=org
ldap.config.mapper.attribute.user.object.class=inetOrgPerson
#ldap.config.mapper.attribute.user.filter=


As a matter of test, I changed user.base.dn as show below:
ldap.config.mapper.attribute.user.base.dn=ou=Test,dc=jquantlib,dc=org


In continnum.log it shows like this:
INFO  ldapController  - Searching for users with filter: '(&(objectClass=inetOrgPerson)(cn=guest))' from base dn: ou=Test

If I comment out that line...
#ldap.config.mapper.attribute.user.base.dn=ou=Test,dc=jquantlib,dc=org

it show like this in the logfile:
INFO  ldapController  - Searching for users with filter: '(&(objectClass=inetOrgPerson)(cn=guest))' from base dn: ou=People,dc=jquantlib,dc=org

It means that "ou=Test,dc=jquantlib,dc=org" was wrongly read as "ou=Test"

Thanks

Richard Gomes
http://www.jquantlib.org/index.php/User:RichardGomes


-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Commented: (CONTINUUM-2031) continuum :: redback :: security.properties not overriding properly application.xml

Posted by "Patric Lichtsteiner (JIRA)" <ji...@codehaus.org>.
    [ http://jira.codehaus.org/browse/CONTINUUM-2031?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=170794#action_170794 ] 

Patric Lichtsteiner commented on CONTINUUM-2031:
------------------------------------------------

Same issue with 1.2.3

> continuum :: redback :: security.properties not overriding properly application.xml 
> ------------------------------------------------------------------------------------
>
>                 Key: CONTINUUM-2031
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-2031
>             Project: Continuum
>          Issue Type: Bug
>    Affects Versions: 1.2.2
>         Environment: apache-tomcat-6.0.18
> Maven version: 2.0.9
> Java version: 1.6.0_03
> OS name: "linux" version: "2.6.18-6-amd64" arch: "amd64" Family: "unix"
>            Reporter: Richard Gomes
>
> in webapps/continuum/WEB-INF/classes/META-INF/plexus/application.xml I 'hardcoded' my user.base.dn as ou=People,dc=jquantlib,dc=org, as shown below:
> <component>
>       <role>org.codehaus.plexus.redback.common.ldap.UserMapper</role>
>       <role-hint>ldap</role-hint>
>       <implementation>org.codehaus.plexus.redback.common.ldap.LdapUserMapper</implementation>
>       <configuration>
>         <email-attribute>email</email-attribute>
>         <full-name-attribute>givenName</full-name-attribute>
>         <password-attribute>userPassword</password-attribute>
>         <user-id-attribute>cn</user-id-attribute>
>         <user-base-dn>ou=People,dc=jquantlib,dc=org</user-base-dn>
>         <user-object-class>inetOrgPerson</user-object-class>
>       </configuration>
>       <requirements>
>         <requirement>
>           <role>org.codehaus.plexus.redback.configuration.UserConfiguration</role>
>         </requirement>
>       </requirements>
>     </component>
> I was obliged to do it in this file and repackage the .WAR file because the value specified is not properly loaded.
> For instance, if I defined
> user.manager.impl=ldap
> ldap.bind.authenticator.enabled=true
> redback.default.admin=admin
> redback.default.guest=guest
> security.policy.password.expiration.enabled=false
> user.manager.impl=cached
> ldap.bind.authenticator.enabled=true
> ldap.config.hostname=localhost
> ldap.config.port=389
> ldap.config.base.dn=dc=jquantlib,dc=org
> ldap.config.context.factory=com.sun.jndi.ldap.LdapCtxFactory
> ldap.config.bind.dn=cn=admin,dc=jquantlib,dc=org
> ldap.config.password=secret
> #ldap.config.authentication.method=
> ldap.config.mapper.attribute.email=mail
> ldap.config.mapper.attribute.fullname=givenName
> ldap.config.mapper.attribute.password=userPassword
> ldap.config.mapper.attribute.user.id=cn
> #ldap.config.mapper.attribute.user.base.dn=ou=People,dc=jquantlib,dc=org
> ldap.config.mapper.attribute.user.object.class=inetOrgPerson
> #ldap.config.mapper.attribute.user.filter=
> As a matter of test, I changed user.base.dn as show below:
> ldap.config.mapper.attribute.user.base.dn=ou=Test,dc=jquantlib,dc=org
> In continnum.log it shows like this:
> INFO  ldapController  - Searching for users with filter: '(&(objectClass=inetOrgPerson)(cn=guest))' from base dn: ou=Test
> If I comment out that line...
> #ldap.config.mapper.attribute.user.base.dn=ou=Test,dc=jquantlib,dc=org
> it show like this in the logfile:
> INFO  ldapController  - Searching for users with filter: '(&(objectClass=inetOrgPerson)(cn=guest))' from base dn: ou=People,dc=jquantlib,dc=org
> It means that "ou=Test,dc=jquantlib,dc=org" was wrongly read as "ou=Test"
> Thanks
> Richard Gomes
> http://www.jquantlib.org/index.php/User:RichardGomes

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Closed: (CONTINUUM-2031) continuum :: redback :: security.properties not overriding properly application.xml

Posted by "Brett Porter (JIRA)" <ji...@codehaus.org>.
     [ http://jira.codehaus.org/browse/CONTINUUM-2031?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brett Porter closed CONTINUUM-2031.
-----------------------------------

      Assignee: Brett Porter
    Resolution: Duplicate

fixed in 1.3.2 in the linked issues

> continuum :: redback :: security.properties not overriding properly application.xml 
> ------------------------------------------------------------------------------------
>
>                 Key: CONTINUUM-2031
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-2031
>             Project: Continuum
>          Issue Type: Bug
>    Affects Versions: 1.2.2
>         Environment: apache-tomcat-6.0.18
> Maven version: 2.0.9
> Java version: 1.6.0_03
> OS name: "linux" version: "2.6.18-6-amd64" arch: "amd64" Family: "unix"
>            Reporter: Richard Gomes
>            Assignee: Brett Porter
>
> in webapps/continuum/WEB-INF/classes/META-INF/plexus/application.xml I 'hardcoded' my user.base.dn as ou=People,dc=jquantlib,dc=org, as shown below:
> <component>
>       <role>org.codehaus.plexus.redback.common.ldap.UserMapper</role>
>       <role-hint>ldap</role-hint>
>       <implementation>org.codehaus.plexus.redback.common.ldap.LdapUserMapper</implementation>
>       <configuration>
>         <email-attribute>email</email-attribute>
>         <full-name-attribute>givenName</full-name-attribute>
>         <password-attribute>userPassword</password-attribute>
>         <user-id-attribute>cn</user-id-attribute>
>         <user-base-dn>ou=People,dc=jquantlib,dc=org</user-base-dn>
>         <user-object-class>inetOrgPerson</user-object-class>
>       </configuration>
>       <requirements>
>         <requirement>
>           <role>org.codehaus.plexus.redback.configuration.UserConfiguration</role>
>         </requirement>
>       </requirements>
>     </component>
> I was obliged to do it in this file and repackage the .WAR file because the value specified is not properly loaded.
> For instance, if I defined
> user.manager.impl=ldap
> ldap.bind.authenticator.enabled=true
> redback.default.admin=admin
> redback.default.guest=guest
> security.policy.password.expiration.enabled=false
> user.manager.impl=cached
> ldap.bind.authenticator.enabled=true
> ldap.config.hostname=localhost
> ldap.config.port=389
> ldap.config.base.dn=dc=jquantlib,dc=org
> ldap.config.context.factory=com.sun.jndi.ldap.LdapCtxFactory
> ldap.config.bind.dn=cn=admin,dc=jquantlib,dc=org
> ldap.config.password=secret
> #ldap.config.authentication.method=
> ldap.config.mapper.attribute.email=mail
> ldap.config.mapper.attribute.fullname=givenName
> ldap.config.mapper.attribute.password=userPassword
> ldap.config.mapper.attribute.user.id=cn
> #ldap.config.mapper.attribute.user.base.dn=ou=People,dc=jquantlib,dc=org
> ldap.config.mapper.attribute.user.object.class=inetOrgPerson
> #ldap.config.mapper.attribute.user.filter=
> As a matter of test, I changed user.base.dn as show below:
> ldap.config.mapper.attribute.user.base.dn=ou=Test,dc=jquantlib,dc=org
> In continnum.log it shows like this:
> INFO  ldapController  - Searching for users with filter: '(&(objectClass=inetOrgPerson)(cn=guest))' from base dn: ou=Test
> If I comment out that line...
> #ldap.config.mapper.attribute.user.base.dn=ou=Test,dc=jquantlib,dc=org
> it show like this in the logfile:
> INFO  ldapController  - Searching for users with filter: '(&(objectClass=inetOrgPerson)(cn=guest))' from base dn: ou=People,dc=jquantlib,dc=org
> It means that "ou=Test,dc=jquantlib,dc=org" was wrongly read as "ou=Test"
> Thanks
> Richard Gomes
> http://www.jquantlib.org/index.php/User:RichardGomes

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] Commented: (CONTINUUM-2031) continuum :: redback :: security.properties not overriding properly application.xml

Posted by "Tim Pinet (JIRA)" <ji...@codehaus.org>.
    [ http://jira.codehaus.org/browse/CONTINUUM-2031?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=242228#action_242228 ] 

Tim Pinet commented on CONTINUUM-2031:
--------------------------------------

I am still seeing this issue in v1.3.6 but it was only occurring for the ldap email property. In security.properties I set 

ldap.config.mapper.attribute.user.email=mail

But in application.xml the attribute was

<email-attribute>email</email-attribute>

I was confused as to why the user list was not populating E-mail addresses. I eventually changed application.xml to

<email-attribute>mail</email-attribute>

and now the user list displays email addresses. I still think that this one field in security.properties is not overriding application.xml properly.

> continuum :: redback :: security.properties not overriding properly application.xml 
> ------------------------------------------------------------------------------------
>
>                 Key: CONTINUUM-2031
>                 URL: http://jira.codehaus.org/browse/CONTINUUM-2031
>             Project: Continuum
>          Issue Type: Bug
>    Affects Versions: 1.2.2
>         Environment: apache-tomcat-6.0.18
> Maven version: 2.0.9
> Java version: 1.6.0_03
> OS name: "linux" version: "2.6.18-6-amd64" arch: "amd64" Family: "unix"
>            Reporter: Richard Gomes
>            Assignee: Brett Porter
>
> in webapps/continuum/WEB-INF/classes/META-INF/plexus/application.xml I 'hardcoded' my user.base.dn as ou=People,dc=jquantlib,dc=org, as shown below:
> <component>
>       <role>org.codehaus.plexus.redback.common.ldap.UserMapper</role>
>       <role-hint>ldap</role-hint>
>       <implementation>org.codehaus.plexus.redback.common.ldap.LdapUserMapper</implementation>
>       <configuration>
>         <email-attribute>email</email-attribute>
>         <full-name-attribute>givenName</full-name-attribute>
>         <password-attribute>userPassword</password-attribute>
>         <user-id-attribute>cn</user-id-attribute>
>         <user-base-dn>ou=People,dc=jquantlib,dc=org</user-base-dn>
>         <user-object-class>inetOrgPerson</user-object-class>
>       </configuration>
>       <requirements>
>         <requirement>
>           <role>org.codehaus.plexus.redback.configuration.UserConfiguration</role>
>         </requirement>
>       </requirements>
>     </component>
> I was obliged to do it in this file and repackage the .WAR file because the value specified is not properly loaded.
> For instance, if I defined
> user.manager.impl=ldap
> ldap.bind.authenticator.enabled=true
> redback.default.admin=admin
> redback.default.guest=guest
> security.policy.password.expiration.enabled=false
> user.manager.impl=cached
> ldap.bind.authenticator.enabled=true
> ldap.config.hostname=localhost
> ldap.config.port=389
> ldap.config.base.dn=dc=jquantlib,dc=org
> ldap.config.context.factory=com.sun.jndi.ldap.LdapCtxFactory
> ldap.config.bind.dn=cn=admin,dc=jquantlib,dc=org
> ldap.config.password=secret
> #ldap.config.authentication.method=
> ldap.config.mapper.attribute.email=mail
> ldap.config.mapper.attribute.fullname=givenName
> ldap.config.mapper.attribute.password=userPassword
> ldap.config.mapper.attribute.user.id=cn
> #ldap.config.mapper.attribute.user.base.dn=ou=People,dc=jquantlib,dc=org
> ldap.config.mapper.attribute.user.object.class=inetOrgPerson
> #ldap.config.mapper.attribute.user.filter=
> As a matter of test, I changed user.base.dn as show below:
> ldap.config.mapper.attribute.user.base.dn=ou=Test,dc=jquantlib,dc=org
> In continnum.log it shows like this:
> INFO  ldapController  - Searching for users with filter: '(&(objectClass=inetOrgPerson)(cn=guest))' from base dn: ou=Test
> If I comment out that line...
> #ldap.config.mapper.attribute.user.base.dn=ou=Test,dc=jquantlib,dc=org
> it show like this in the logfile:
> INFO  ldapController  - Searching for users with filter: '(&(objectClass=inetOrgPerson)(cn=guest))' from base dn: ou=People,dc=jquantlib,dc=org
> It means that "ou=Test,dc=jquantlib,dc=org" was wrongly read as "ou=Test"
> Thanks
> Richard Gomes
> http://www.jquantlib.org/index.php/User:RichardGomes

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira