You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@jspwiki.apache.org by Juan Pablo Santos Rodríguez <ju...@gmail.com> on 2013/08/28 19:15:38 UTC
issues unsubscribing user@jspwiki.a.o
Hi Shine,
(switchting subject to a more descriptive one)
Could you try with jspwiki-user-unsubscribe@incubator.apache.org? There are
chances you were subscribed to the incubator list, and unsubscribing isn't
looking in the old ML, which redirects to the new one. If that's the case,
would you mind pinging me off-list with the results?
In any case, seems like an infra issue, if problem persists we'll file an
issue in order to stop the annoyances
br,
juan pablo
On Wed, Aug 28, 2013 at 4:34 PM, Shine Prakash
<sh...@icasework.com>wrote:
> I end up getting the same message saying that I am not in the subscribed
> list. Painful!
>
>
> Regards,
> Shine Prakash
> Software Consultant
> iCasework Ltd.
> +44 (0) 207 624 4991
> www.icasework.com
> www.usefulfeedback.com
> www.managemyrequests.com
>
>
> ---------- Forwarded message ----------
> From: <us...@jspwiki.apache.org>
> Date: 28 August 2013 15:24
> Subject: Not subscribed to user@jspwiki.apache.org
> To: shine.prakash@icasework.com
>
>
> Hi! This is the ezmlm program. I'm managing the
> user@jspwiki.apache.org mailing list.
>
> I'm working for my owner, who can be reached
> at user-owner@jspwiki.apache.org.
>
> Acknowledgment: The address
>
> shine.prakash@icasework.com
>
> was not on the user mailing list when I received
> your request and is not a subscriber of this list.
>
> If you unsubscribe, but continue to receive mail, you're subscribed
> under a different address than you currently use. Please look at the
> header for:
>
> 'Return-Path: <us...@jspwiki.apache.org>'
>
> The unsubscribe address for this user would be:
> 'user-unsubscribe-user=host.dom@jspwiki.apache.org'.
> Just mail to that address, substituting user=host.dom for the real
> values, reply to the confirmation request, and you should receive a message
> that you're off the list.
>
> For some mail programs, you need to make the headers visible to
> see the return path:
>
> For Eudora 4.0, click on the "Blah blah ..." button.
> For PMMail, click on "Window->Show entire message/header".
>
> If this still doesn't work, I'm sorry to say that I can't help you.
> Please FORWARD a list message together with a note about what you're
> trying to achieve and a list of addresses that you might be subscribed
> under to my owner:
>
> user-owner@jspwiki.apache.org
>
> who will take care of it. My owner is a little bit slower than I am,
> so please be patient.
>
>
> --- Administrative commands for the user list ---
>
> I can handle administrative requests automatically. Please
> do not send them to the list address! Instead, send
> your message to the correct command address:
>
> To subscribe to the list, send a message to:
> <us...@jspwiki.apache.org>
>
> To remove your address from the list, send a message to:
> <us...@jspwiki.apache.org>
>
> Send mail to the following for info and FAQ for this list:
> <us...@jspwiki.apache.org>
> <us...@jspwiki.apache.org>
>
> Similar addresses exist for the digest list:
> <us...@jspwiki.apache.org>
> <us...@jspwiki.apache.org>
>
> To get messages 123 through 145 (a maximum of 100 per request), mail:
> <us...@jspwiki.apache.org>
>
> To get an index with subject and author for messages 123-456 , mail:
> <us...@jspwiki.apache.org>
>
> They are always returned as sets of 100, max 2000 per request,
> so you'll actually get 100-499.
>
> To receive all messages with the same subject as message 12345,
> send a short message to:
> <us...@jspwiki.apache.org>
>
> The messages should contain one line or word of text to avoid being
> treated as sp@m, but I will ignore their content.
> Only the ADDRESS you send to is important.
>
> You can start a subscription for an alternate address,
> for example "john@host.domain", just add a hyphen and your
> address (with '=' instead of '@') after the command word:
> <us...@jspwiki.apache.org>
>
> To stop subscription for this address, mail:
> <us...@jspwiki.apache.org>
>
> In both cases, I'll send a confirmation message to that address. When
> you receive it, simply reply to it to complete your subscription.
>
> If despite following these instructions, you do not get the
> desired results, please contact my owner at
> user-owner@jspwiki.apache.org. Please be patient, my owner is a
> lot slower than I am ;-)
>
> --- Enclosed is a copy of the request I received.
>
> Return-Path: <sh...@icasework.com>
> Received: (qmail 14894 invoked by uid 99); 28 Aug 2013 14:24:02 -0000
> Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013 14:24:02
> +0000
> X-ASF-Spam-Status: No, hits=-9.9 required=10.0
>
>
> tests=ASF_LIST_OPS,ASF_LIST_UNSUB_A,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,TVD_GET_STOCK,WEIRD_PORT
> X-Spam-Check-By: apache.org
> Received-SPF: unknown (athena.apache.org: error in processing during
> lookup
> of shine.prakash@icasework.com)
> Received: from [209.85.214.182] (HELO mail-ob0-f182.google.com)
> (209.85.214.182)
> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013 14:23:58
> +0000
> Received: by mail-ob0-f182.google.com with SMTP id wo10so6844227obc.27
> for <us...@jspwiki.apache.org>; Wed, 28 Aug 2013
> 07:23:37 -0700 (PDT)
> X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> d=google.com; s=20120113;
> h=x-gm-message-state:mime-version:in-reply-to:references:from:date
> :message-id:subject:to:content-type;
> bh=ixJFRcL2Q0jSLZM1ZNof9EtwHaH4KiesZ5zF3pHBSNc=;
>
> b=panDiGKtqYgtZ18nLf1tAGs8gK5G2cPtTRagm7ery4DYD+CsclNsSHvCCrK2T09SVp
>
> LZd44PN4rdaz0Ls0QwOii7OZRnKHpvFng9hDuK4BfkKcZJLo2AIO3suImsteLWtpe0Iv
>
> 7/JlUdt5dCc34Zh+rJh0sL6SBUtua0ncTbgRI/jZqK9kc1AjHXx53WZ4OH9mkC1Ew9v7
>
> BuKImYEJPm2pJ3i8u2rh9Z/O/cVdCqeDyIAvPaVti+8tANUUJkM45ih/Nw8f1sY5zDSs
>
> DwNgF+Mg/aTHh28OcIvxMvgGAsenjmOYBTripxJE0vDGqBZPPvK5MHd1g+Fn4Aarwx+u
> VKdA==
> X-Gm-Message-State:
>
> ALoCoQlb0bM1TZ7T17Vo4wJ7kkIUXadLEO5QNZMf4IbLcigK9cLv3Z3gSlSiemW/S2DnIHsWbRm7
> X-Received: by 10.182.44.134 with SMTP id e6mr6789662obm.14.1377699816993;
> Wed, 28 Aug 2013 07:23:36 -0700 (PDT)
> MIME-Version: 1.0
> Received: by 10.60.40.41 with HTTP; Wed, 28 Aug 2013 07:23:16 -0700 (PDT)
> X-Originating-IP: [81.139.83.190]
> In-Reply-To: <
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> References: <13...@jspwiki.apache.org> <
> OF0FCD1230.245CC751-ON86257BD3.00498BC2-86257BD3.00514276@ra.rockwell.com>
> <CA...@mail.gmail.com>
> <
> OF69EABD41.A8F0A0AE-ON86257BD4.005AD83C-86257BD4.005F10A8@ra.rockwell.com>
> <CA...@mail.gmail.com>
> <CA...@mail.gmail.com> <
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> From: Shine Prakash <sh...@icasework.com>
> Date: Wed, 28 Aug 2013 15:23:16 +0100
> Message-ID: <CAJ0cJdzsMizEpTnuOe8==9wEz-GeR=
> nD7sAiayAfNJ1fpvjcwA@mail.gmail.com>
> Subject: Re: ldaps authentication to jspwiki
> To: user-unsubscribe@jspwiki.apache.org
> Content-Type: multipart/alternative; boundary=001a11c3235a3321d104e502bcf1
> X-Virus-Checked: Checked by ClamAV on apache.org
>
>
> Regards,
> Shine Prakash
> Software Consultant
> iCasework Ltd.
> +44 (0) 207 624 4991
> www.icasework.com
> www.usefulfeedback.com
> www.managemyrequests.com
>
>
> On 28 August 2013 15:23, Shine Prakash <sh...@icasework.com>
> wrote:
>
> >
> > Thanks. I have tried.
> >
> > Regards,
> > Shine Prakash
> > Software Consultant
> > iCasework Ltd.
> > +44 (0) 207 624 4991
> > www.icasework.com
> > www.usefulfeedback.com
> > www.managemyrequests.com
> >
> >
> > On 28 August 2013 15:18, John Pimentel <jp...@ra.rockwell.com>
> wrote:
> >
> >> To remove your address from the list, send a message to:
> >> <us...@jspwiki.apache.org>
> >>
> >>
> >> Regards,
> >> John Pimentel
> >>
> >> [image: Description: Description: ralogo_web]
> >> *jpimentel@ra.rockwell.com* <jp...@ra.rockwell.com>
> >> Office (414) 382-3354
> >> *Mobile (262) 501-4785*<
> 2625014785@txt.att.net?subject=RA%20Text%204%20U>
> >>
> >>
> >>
> >>
> >> From: Shine Prakash <sh...@icasework.com>
> >> To: user@jspwiki.apache.org
> >> Date: 08/28/2013 03:35 AM
> >> Subject: Re: ldaps authentication to jspwiki
> >> ------------------------------
> >>
> >>
> >>
> >> HOW do I unsubscribe myself?
> >>
> >>
> >>
> >> On 27 August 2013 23:34, Jim Willeke <ji...@willeke.com> wrote:
> >>
> >> > You might try remove the:
> >> > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> >> >
> >> > and use (what I am using):
> >> >
> >> >
> userBase="ou=people,dc=mydomain,dc=com"
> >> > userSearch="(uid={0})"
> >> > userSubtree="true"
> >> >
> >> > We found the LDAP search to be much more flexible using this than the
> >> > pattern matching.
> >> > You should also be able to get some error from tomcat if it is
> failing.
> >> > You can turn on access logging:
> >> > http://tomcat.apache.org/tomcat-7.0-doc/config/host.html#Access_Logs
> >> >
> >> >
> >> > If you drop the LDAPS, You might also get a trace. (Not sure if SUN
> can
> >> > show the ldap requests) but tcdump (or wireshark) will.
> >> >
> >> >
> >> > --
> >> > -jim
> >> > Jim Willeke
> >> >
> >> >
> >> > On Tue, Aug 27, 2013 at 1:18 PM, John Pimentel <
> >> jpimentel@ra.rockwell.com
> >> > >wrote:
> >> >
> >> > >
> >> > > Hi Jim,
> >> > >
> >> > > Thanks for the response.
> >> > >
> >> > > We are using Sun LDAP. Let me give you an example from my user
> >> account.
> >> > > Under my group container
> >> > > cn=UN_CTM_AdminGroup,ou=Control-M,ou=group,dc=mydomain,dc=com
> >> > > I have a attribute called uniqueMember.
> >> > > The value for my account is as follows:
> >> > > uid=JPimen,ou=people,dc=mydomain,dc=com
> >> > >
> >> > > I of course substituted our actual domain for mydomain in this
> >> example,
> >> > but
> >> > > everything else is verbatim.
> >> > >
> >> > > So our groups are nmed by cn but the users are named by uid.
> >> > >
> >> > > Unfortunately our LDAP server will not accept anything other than
> >> ldaps
> >> > > connections, so I am stuck there.
> >> > >
> >> > > Also if you have any recommendation on how to enable security
> specific
> >> > > debug I would appreciate that.
> >> > >
> >> > > I found what appears to be a log level entry in my
> jspwiki.properties
> >> > file.
> >> > > I changed
> >> > > log4j.rootCategory=INFO,FileLog
> >> > > To read
> >> > > log4j.rootCategory=DEBUG,FileLog
> >> > >
> >> > > Now, I do see debug entries in the
> /web1/dyscq/tomcat/logs/jspwiki.log
> >> > > file, but no entries appear when I try (and fail) to log in.
> >> > >
> >> > > Thanks again for any ideas.
> >> > >
> >> > > Regards,
> >> > > John Pimentel
> >> > >
> >> > > (Embedded image moved to file: pic11833.gif)Description:
> Description:
> >> > > ralogo_web
> >> > > jpimentel@ra.rockwell.com
> >> > > Office (414) 382-3354
> >> > > Mobile (262) 501-4785
> >> > >
> >> > >
> >> > >
> >> > >
> >> > > From: Jim Willeke <ji...@willeke.com>
> >> > > To: user@jspwiki.apache.org
> >> > > Date: 08/27/2013 03:40 AM
> >> > > Subject: Re: ldaps authentication to jspwiki
> >> > >
> >> > >
> >> > >
> >> > > I would guess, as you show no information on your LDAP setup, this
> >> line
> >> > is
> >> > > wrong:
> >> > > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> >> > >
> >> > > Are your users named by uid or cn?
> >> > > You show roles as named by cn and since you show dc=,dc= I would
> guess
> >> > this
> >> > > is AD
> >> > >
> >> > > Also, try using LDAP vs LDAPS to help troubleshoot.
> >> > >
> >> > > -jim
> >> > >
> >> > > --
> >> > > -jim
> >> > > Jim Willeke
> >> > >
> >> > >
> >> > > On Mon, Aug 26, 2013 at 10:47 AM, John Pimentel
> >> > > <jp...@ra.rockwell.com>wrote:
> >> > >
> >> > > >
> >> > > > Greetings,
> >> > > >
> >> > > > I am having difficulties getting LDAPS authentication to work and
> I
> >> > think
> >> > > I
> >> > > > must be missing some fundamental configuration.
> >> > > >
> >> > > > My current state is that the Site loads and displays content
> >> properly,
> >> > > but
> >> > > > when I go to edit content or I select the log in page directly, my
> >> LDAP
> >> > > > credentials do not authenticate, and I am repeatedly presented
> with
> >> a
> >> > > login
> >> > > > page.
> >> > > >
> >> > > > I used the follwing information as my "How To" for this effort.
> >> > > >
> http://www.ecyrd.com/JSPWiki/wiki/WebContainerAuthenticationViaLDAP
> >> > > >
> >> > > > This article is very good but appears to be incomplete.
> >> > > >
> >> > > > I have done the following configuration to get ldaps to work:
> >> > > >
> >> > > > 1. I have a previously configured LDAP Server and I stored
> /trusted
> >> the
> >> > > > cert for this Sun LDAP server into the central java keystore using
> >> this
> >> > > > command:
> >> > > > /usr/lib64/jvm/jre/bin/keytool -import -alias sunldap
> >> > > > -file /web1/sst/dysc/content/CA-RA-v3.crt
> >> > > > -keystore /usr/lib64/jvm/jre/lib/security/cacerts
> >> > > >
> >> > > > 2. I have configured the realm and sorted out all the log errors
> >> using
> >> > > the
> >> > > > following realm in the server.xml file. I believe tomcat is
> >> > successfully
> >> > > > connecting to my LDAP server.
> >> > > >
> >> > > > <Realm className="org.apache.catalina.realm.JNDIRealm"
> >> > > > connectionURL="ldaps://mkedsintp.ds.mydomain.com:636
> "
> >> > > > connectionName="uid=[bind User
> >> > > > UID],ou=admin,dc=rmydomain,dc=com"
> >> > > > connectionPassword="[Password]"
> >> > > > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> >> > > > roleBase="ou=Control-M,ou=group,dc=mydomain,dc=com"
> >> > > > roleSubtree="true"
> >> > > > roleName="cn"
> >> > > > roleSearch="(uniqueMember={0})"
> >> > > > />
> >> > > >
> >> > > > 3. I uncommented the "CONTAINER-MANAGED AUTH" section
> >> > > > from /web1/dyscq/webapps/apps/wiki/WEB-INF/web.xml
> >> > > >
> >> > > > There is a section at the bottom that says "Update JSPWiki
> security
> >> > > policy"
> >> > > > If you would like to set permissions to LDAP groups, you can
> simply
> >> add
> >> > > > policy entries on authorize.Role. The following is an entry for
> >> > > wiki-admin
> >> > > > group (from LDAP).
> >> > > > grant principal com.ecyrd.jspwiki.auth.authorize.Role
> "wiki-admin" {
> >> > > > permission com.ecyrd.jspwiki.auth.permissions.AllPermission
> "*";
> >> > > > };
> >> > > >
> >> > > > I'm thinking it might go into web.xml, but I am not sure of that..
> >> > > >
> >> > > > this section of the xml looks like this:
> >> > > >
> >> > > > <security-constraint>
> >> > > > <web-resource-collection>
> >> > > > <web-resource-name>Authenticated
> area</web-resource-name>
> >> > > > <url-pattern>/Edit.jsp</url-pattern>
> >> > > > <url-pattern>/Comment.jsp</url-pattern>
> >> > > > <url-pattern>/Login.jsp</url-pattern>
> >> > > > <url-pattern>/NewGroup.jsp</url-pattern>
> >> > > > <url-pattern>/Rename.jsp</url-pattern>
> >> > > > <url-pattern>/Upload.jsp</url-pattern>
> >> > > > <http-method>DELETE</http-method>
> >> > > > <http-method>GET</http-method>
> >> > > > <http-method>HEAD</http-method>
> >> > > > <http-method>POST</http-method>
> >> > > > <http-method>PUT</http-method>
> >> > > > </web-resource-collection>
> >> > > >
> >> > > > <web-resource-collection>
> >> > > > <web-resource-name>Read-only Area</web-resource-name>
> >> > > > <url-pattern>/attach</url-pattern>
> >> > > > <http-method>DELETE</http-method>
> >> > > > <http-method>POST</http-method>
> >> > > > <http-method>PUT</http-method>
> >> > > > </web-resource-collection>
> >> > > >
> >> > > > <auth-constraint>
> >> > > > <role-name>Admin</role-name>
> >> > > > <role-name>Authenticated</role-name>
> >> > > > </auth-constraint>
> >> > > > <!-- > > > <user-data-constraint>
> >> > > > <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> >> > > > </user-data-constraint>
> >> > > > -->
> >> > > >
> >> > > > </security-constraint>
> >> > > >
> >> > > > <login-config>
> >> > > > <auth-method>FORM</auth-method>
> >> > > > <form-login-config>
> >> > > > <form-login-page>/LoginForm.jsp</form-login-page>
> >> > > > <form-error-page>/LoginForm.jsp</form-error-page>
> >> > > > </form-login-config>
> >> > > > </login-config>
> >> > > >
> >> > > > <security-role>
> >> > > > <description>
> >> > > > This logical role includes all authenticated users
> >> > > > </description>
> >> > > > <role-name>Authenticated</role-name>
> >> > > > </security-role>
> >> > > >
> >> > > > <security-role>
> >> > > > <description>
> >> > > > This logical role includes all administrative users
> >> > > > </description>
> >> > > > <role-name>Admin</role-name>
> >> > > > </security-role>
> >> > > >
> >> > > >
> >> > > > Regards,
> >> > > > John Pimentel
> >> > > >
> >> > > > (Embedded image moved to file: pic05844.gif)Description:
> >> Description:
> >> > > > ralogo_web
> >> > > > jpimentel@ra.rockwell.com
> >> > > > Office (414) 382-3354
> >> > > > Mobile (262) 501-4785
> >> > > >
> >> > > >
> >> > > >
> >> > > >
> >> > > > From: user-help@jspwiki.apache.org
> >> > > > To: jpimentel@ra.rockwell.com
> >> > > > Date: 08/26/2013 08:16 AM
> >> > > > Subject: WELCOME to user@jspwiki.apache.org
> >> > > >
> >> > > >
> >> > > >
> >> > > > Hi! This is the ezmlm program. I'm managing the
> >> > > > user@jspwiki.apache.org mailing list.
> >> > > >
> >> > > > I'm working for my owner, who can be reached
> >> > > > at user-owner@jspwiki.apache.org.
> >> > > >
> >> > > > Acknowledgment: I have added the address
> >> > > >
> >> > > > jpimentel@ra.rockwell.com
> >> > > >
> >> > > > to the user mailing list.
> >> > > >
> >> > > > Welcome to user@jspwiki.apache.org!
> >> > > >
> >> > > > Please save this message so that you know the address you are
> >> > > > subscribed under, in case you later want to unsubscribe or change
> >> your
> >> > > > subscription address.
> >> > > >
> >> > > >
> >> > > > --- Administrative commands for the user list ---
> >> > > >
> >> > > > I can handle administrative requests automatically. Please
> >> > > > do not send them to the list address! Instead, send
> >> > > > your message to the correct command address:
> >> > > >
> >> > > > To subscribe to the list, send a message to:
> >> > > > <us...@jspwiki.apache.org>
> >> > > >
> >> > > > To remove your address from the list, send a message to:
> >> > > > <us...@jspwiki.apache.org>
> >> > > >
> >> > > > Send mail to the following for info and FAQ for this list:
> >> > > > <us...@jspwiki.apache.org>
> >> > > > <us...@jspwiki.apache.org>
> >> > > >
> >> > > > Similar addresses exist for the digest list:
> >> > > > <us...@jspwiki.apache.org>
> >> > > > <us...@jspwiki.apache.org>
> >> > > >
> >> > > > To get messages 123 through 145 (a maximum of 100 per request),
> >> mail:
> >> > > > <us...@jspwiki.apache.org>
> >> > > >
> >> > > > To get an index with subject and author for messages 123-456 ,
> mail:
> >> > > > <us...@jspwiki.apache.org>
> >> > > >
> >> > > > They are always returned as sets of 100, max 2000 per request,
> >> > > > so you'll actually get 100-499.
> >> > > >
> >> > > > To receive all messages with the same subject as message 12345,
> >> > > > send a short message to:
> >> > > > <us...@jspwiki.apache.org>
> >> > > >
> >> > > > The messages should contain one line or word of text to avoid
> being
> >> > > > treated as sp@m, but I will ignore their content.
> >> > > > Only the ADDRESS you send to is important.
> >> > > >
> >> > > > You can start a subscription for an alternate address,
> >> > > > for example "john@host.domain", just add a hyphen and your
> >> > > > address (with '=' instead of '@') after the command word:
> >> > > > <us...@jspwiki.apache.org>
> >> > > >
> >> > > > To stop subscription for this address, mail:
> >> > > > <us...@jspwiki.apache.org>
> >> > > >
> >> > > > In both cases, I'll send a confirmation message to that address.
> >> When
> >> > > > you receive it, simply reply to it to complete your subscription.
> >> > > >
> >> > > > If despite following these instructions, you do not get the
> >> > > > desired results, please contact my owner at
> >> > > > user-owner@jspwiki.apache.org. Please be patient, my owner is a
> >> > > > lot slower than I am ;-)
> >> > > >
> >> > > > --- Enclosed is a copy of the request I received.
> >> > > >
> >> > > > Return-Path: <jp...@ra.rockwell.com>
> >> > > > Received: (qmail 84748 invoked by uid 99); 26 Aug 2013 13:16:04
> >> -0000
> >> > > > Received: from athena.apache.org (HELO athena.apache.org)
> >> > > (140.211.11.136)
> >> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug 2013
> >> 13:16:04
> >> > > > +0000
> >> > > > X-ASF-Spam-Status: No, hits=-0.0 required=5.0
> >> > > > tests=SPF_PASS
> >> > > > X-Spam-Check-By: apache.org
> >> > > > Received-SPF: pass (athena.apache.org: local policy)
> >> > > > Received: from [205.175.240.251] (HELO
> ramilwsmtp01.ra.rockwell.com
> >> )
> >> > > > (205.175.240.251)
> >> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug 2013
> >> 13:16:00
> >> > > > +0000
> >> > > > In-Reply-To: <13...@jspwiki.apache.org>
> >> > > > References: <13...@jspwiki.apache.org>
> >> > > > Subject: Re: confirm subscribe to user@jspwiki.apache.org
> >> > > > X-KeepSent: D7D57B0D:E2A05A18-86257BD3:0048D45A;
> >> > > > type=4; name=$KeepSent
> >> > > > To:
> >> > > > user-sc.1377522681.pagaldeamkeafdeakcap-jpimentel=
> >> > > > ra.rockwell.com@jspwiki.apache.org
> >> > > >
> >> > > > X-Mailer: Lotus Notes Release 8.5.2FP2 March 23, 2011
> >> > > > Message-ID:
> >> > > >
> >> > > <
> >> >
> >>
> OFD7D57B0D.E2A05A18-ON86257BD3.0048D45A-86257BD3.0048D84D@ra.rockwell.com
> >> > > > >
> >> > > > From: John Pimentel <jp...@ra.rockwell.com>
> >> > > > Date: Mon, 26 Aug 2013 08:15:38 -0500
> >> > > > X-MIMETrack: Serialize by Router on
> >> RAMilwSMTP01/Milwaukee/RA/Rockwell
> >> > at
> >> > > > 08/26/2013 08:15:59
> >> > > > AM
> >> > > > MIME-Version: 1.0
> >> > > > Content-type: multipart/mixed;
> >> > > >
> >> > > >
> Boundary="0__=09BBF140DFDB52CA8f9e8a93df938690918c09BBF140DFDB52CA"
> >> > > > Content-Disposition: inline
> >> > > > X-Virus-Checked: Checked by ClamAV on apache.org
> >> > > >
> >> > > >
> >> > >
> >> >
> >>
> >>
> >
>
Re: issues unsubscribing user@jspwiki.a.o
Posted by Juan Pablo Santos Rodríguez <ju...@gmail.com>.
Hi all,
just opened https://issues.apache.org/jira/browse/INFRA-6702 Hopefully this
issue will get fixed soon
br,
juan pablo
On Wed, Aug 28, 2013 at 8:50 PM, Robert McGovern <ro...@tarasis.net> wrote:
> Same for me.
>
> > On 28 Aug 2013, at 20:34, FRANK FITCH <fr...@oracle.com> wrote:
> >
> > sending unsubscribe email to
> jspwiki-user-unsubscribe@incubator.apache.org resulted in
> >
> > -------------------------------------------------------
> > Hi. This is the qmail-send program at apache.org.
> > I'm afraid I wasn't able to deliver your message to the following
> addresses.
> > This is a permanent error; I've given up. Sorry it didn't work out.
> >
> > <js...@incubator.apache.org>:
> > This mailing list has moved to user at jspwiki.apache.org.
> > -------------------------------------------------------
> >
> > Fair enough. user@jspwiki.apache.org doesn't like commands in the
> subject, doesn't like blank subjects, and passes other emails to the group.
> >
> > Well done, apache. Well done.
> >
> > -Frank
> >
> >> On 8/28/2013 11:24 AM, Claudia Frers wrote:
> >> sorry three attempts and no success in unsubscribing
> >>
> >>
> >> On Wed, Aug 28, 2013 at 7:47 PM, Juan Pablo Santos Rodríguez <
> >> juanpablo.santos@gmail.com> wrote:
> >>
> >>> Hi Claudia,
> >>>
> >>> sending an email to either user@jspwiki.apache.org (as per
> >>> http://jspwiki.apache.org/jspwiki/community/mailing_lists.html) or
> >>> jspwiki-user-unsubscribe@incubator.apache.org should be enough
> >>>
> >>>
> >>> br,
> >>> juan pablo
> >>>
> >>>
> >>> On Wed, Aug 28, 2013 at 7:43 PM, Claudia Frers <
> claudia.frers@gmail.com
> >>>> wrote:
> >>>
> >>>> Hi I am having similar unsubscribe issues as Shine. Clicking on the
> link
> >>>> did not help. What should i do?
> >>>>
> >>>>
> >>>> On Wed, Aug 28, 2013 at 7:15 PM, Juan Pablo Santos Rodríguez <
> >>>> juanpablo.santos@gmail.com> wrote:
> >>>>
> >>>>> Hi Shine,
> >>>>>
> >>>>> (switchting subject to a more descriptive one)
> >>>>>
> >>>>> Could you try with jspwiki-user-unsubscribe@incubator.apache.org?
> >>> There
> >>>>> are
> >>>>> chances you were subscribed to the incubator list, and unsubscribing
> >>>> isn't
> >>>>> looking in the old ML, which redirects to the new one. If that's the
> >>>> case,
> >>>>> would you mind pinging me off-list with the results?
> >>>>>
> >>>>> In any case, seems like an infra issue, if problem persists we'll
> file
> >>> an
> >>>>> issue in order to stop the annoyances
> >>>>>
> >>>>>
> >>>>> br,
> >>>>> juan pablo
> >>>>>
> >>>>>
> >>>>>
> >>>>> On Wed, Aug 28, 2013 at 4:34 PM, Shine Prakash
> >>>>> <sh...@icasework.com>wrote:
> >>>>>
> >>>>>> I end up getting the same message saying that I am not in the
> >>>> subscribed
> >>>>>> list. Painful!
> >>>>>>
> >>>>>>
> >>>>>> Regards,
> >>>>>> Shine Prakash
> >>>>>> Software Consultant
> >>>>>> iCasework Ltd.
> >>>>>> +44 (0) 207 624 4991
> >>>>>> www.icasework.com
> >>>>>> www.usefulfeedback.com
> >>>>>> www.managemyrequests.com
> >>>>>>
> >>>>>>
> >>>>>> ---------- Forwarded message ----------
> >>>>>> From: <us...@jspwiki.apache.org>
> >>>>>> Date: 28 August 2013 15:24
> >>>>>> Subject: Not subscribed to user@jspwiki.apache.org
> >>>>>> To: shine.prakash@icasework.com
> >>>>>>
> >>>>>>
> >>>>>> Hi! This is the ezmlm program. I'm managing the
> >>>>>> user@jspwiki.apache.org mailing list.
> >>>>>>
> >>>>>> I'm working for my owner, who can be reached
> >>>>>> at user-owner@jspwiki.apache.org.
> >>>>>>
> >>>>>> Acknowledgment: The address
> >>>>>>
> >>>>>> shine.prakash@icasework.com
> >>>>>>
> >>>>>> was not on the user mailing list when I received
> >>>>>> your request and is not a subscriber of this list.
> >>>>>>
> >>>>>> If you unsubscribe, but continue to receive mail, you're subscribed
> >>>>>> under a different address than you currently use. Please look at the
> >>>>>> header for:
> >>>>>>
> >>>>>> 'Return-Path: <us...@jspwiki.apache.org>'
> >>>>>>
> >>>>>> The unsubscribe address for this user would be:
> >>>>>> 'user-unsubscribe-user=host.dom@jspwiki.apache.org'.
> >>>>>> Just mail to that address, substituting user=host.dom for the real
> >>>>>> values, reply to the confirmation request, and you should receive a
> >>>>> message
> >>>>>> that you're off the list.
> >>>>>>
> >>>>>> For some mail programs, you need to make the headers visible to
> >>>>>> see the return path:
> >>>>>>
> >>>>>> For Eudora 4.0, click on the "Blah blah ..." button.
> >>>>>> For PMMail, click on "Window->Show entire message/header".
> >>>>>>
> >>>>>> If this still doesn't work, I'm sorry to say that I can't help you.
> >>>>>> Please FORWARD a list message together with a note about what you're
> >>>>>> trying to achieve and a list of addresses that you might be
> >>> subscribed
> >>>>>> under to my owner:
> >>>>>>
> >>>>>> user-owner@jspwiki.apache.org
> >>>>>>
> >>>>>> who will take care of it. My owner is a little bit slower than I am,
> >>>>>> so please be patient.
> >>>>>>
> >>>>>>
> >>>>>> --- Administrative commands for the user list ---
> >>>>>>
> >>>>>> I can handle administrative requests automatically. Please
> >>>>>> do not send them to the list address! Instead, send
> >>>>>> your message to the correct command address:
> >>>>>>
> >>>>>> To subscribe to the list, send a message to:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> To remove your address from the list, send a message to:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> Send mail to the following for info and FAQ for this list:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> Similar addresses exist for the digest list:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> To get messages 123 through 145 (a maximum of 100 per request),
> mail:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> To get an index with subject and author for messages 123-456 , mail:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> They are always returned as sets of 100, max 2000 per request,
> >>>>>> so you'll actually get 100-499.
> >>>>>>
> >>>>>> To receive all messages with the same subject as message 12345,
> >>>>>> send a short message to:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> The messages should contain one line or word of text to avoid being
> >>>>>> treated as sp@m, but I will ignore their content.
> >>>>>> Only the ADDRESS you send to is important.
> >>>>>>
> >>>>>> You can start a subscription for an alternate address,
> >>>>>> for example "john@host.domain", just add a hyphen and your
> >>>>>> address (with '=' instead of '@') after the command word:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> To stop subscription for this address, mail:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> In both cases, I'll send a confirmation message to that address.
> When
> >>>>>> you receive it, simply reply to it to complete your subscription.
> >>>>>>
> >>>>>> If despite following these instructions, you do not get the
> >>>>>> desired results, please contact my owner at
> >>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner is a
> >>>>>> lot slower than I am ;-)
> >>>>>>
> >>>>>> --- Enclosed is a copy of the request I received.
> >>>>>>
> >>>>>> Return-Path: <sh...@icasework.com>
> >>>>>> Received: (qmail 14894 invoked by uid 99); 28 Aug 2013 14:24:02
> -0000
> >>>>>> Received: from athena.apache.org (HELO athena.apache.org)
> >>>>> (140.211.11.136)
> >>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
> >>> 14:24:02
> >>>>>> +0000
> >>>>>> X-ASF-Spam-Status: No, hits=-9.9 required=10.0
> >>>
> tests=ASF_LIST_OPS,ASF_LIST_UNSUB_A,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,TVD_GET_STOCK,WEIRD_PORT
> >>>>>> X-Spam-Check-By: apache.org
> >>>>>> Received-SPF: unknown (athena.apache.org: error in processing
> during
> >>>>>> lookup
> >>>>>> of shine.prakash@icasework.com)
> >>>>>> Received: from [209.85.214.182] (HELO mail-ob0-f182.google.com)
> >>>>>> (209.85.214.182)
> >>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
> >>> 14:23:58
> >>>>>> +0000
> >>>>>> Received: by mail-ob0-f182.google.com with SMTP id
> >>> wo10so6844227obc.27
> >>>>>> for <us...@jspwiki.apache.org>; Wed, 28 Aug 2013
> >>>>>> 07:23:37 -0700 (PDT)
> >>>>>> X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> >>>>>> d=google.com; s=20120113;
> >>>>> h=x-gm-message-state:mime-version:in-reply-to:references:from:date
> >>>>>> :message-id:subject:to:content-type;
> >>>>>> bh=ixJFRcL2Q0jSLZM1ZNof9EtwHaH4KiesZ5zF3pHBSNc=;
> >>>>>>
> >>>>>> b=panDiGKtqYgtZ18nLf1tAGs8gK5G2cPtTRagm7ery4DYD+CsclNsSHvCCrK2T09SVp
> >>>>>>
> >>>>>>
> LZd44PN4rdaz0Ls0QwOii7OZRnKHpvFng9hDuK4BfkKcZJLo2AIO3suImsteLWtpe0Iv
> >>>>>>
> >>>>>>
> 7/JlUdt5dCc34Zh+rJh0sL6SBUtua0ncTbgRI/jZqK9kc1AjHXx53WZ4OH9mkC1Ew9v7
> >>>>>>
> >>>>>>
> BuKImYEJPm2pJ3i8u2rh9Z/O/cVdCqeDyIAvPaVti+8tANUUJkM45ih/Nw8f1sY5zDSs
> >>>>>>
> >>>>>>
> DwNgF+Mg/aTHh28OcIvxMvgGAsenjmOYBTripxJE0vDGqBZPPvK5MHd1g+Fn4Aarwx+u
> >>>>>> VKdA==
> >>>>>> X-Gm-Message-State:
> >>>
> ALoCoQlb0bM1TZ7T17Vo4wJ7kkIUXadLEO5QNZMf4IbLcigK9cLv3Z3gSlSiemW/S2DnIHsWbRm7
> >>>>>> X-Received: by 10.182.44.134 with SMTP id
> >>>>> e6mr6789662obm.14.1377699816993;
> >>>>>> Wed, 28 Aug 2013 07:23:36 -0700 (PDT)
> >>>>>> MIME-Version: 1.0
> >>>>>> Received: by 10.60.40.41 with HTTP; Wed, 28 Aug 2013 07:23:16 -0700
> >>>> (PDT)
> >>>>>> X-Originating-IP: [81.139.83.190]
> >>>>>> In-Reply-To: <
> >>>
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> >>>>>> References: <13...@jspwiki.apache.org> <
> >>>
> OF0FCD1230.245CC751-ON86257BD3.00498BC2-86257BD3.00514276@ra.rockwell.com>
> >>>>>> <
> CAB3ntOva5D5caVQGzm9+XE6gJ3n6+g-xX7+_WsMCK2Ds4ABs5g@mail.gmail.com
> >>>>
> >>>>>> <
> >>>
> OF69EABD41.A8F0A0AE-ON86257BD4.005AD83C-86257BD4.005F10A8@ra.rockwell.com>
> >>>>>> <
> CAB3ntOs-megCTRzddLxPCmL7Kvk2gpsp_io85+Se4tEFMgE0VQ@mail.gmail.com
> >>>>
> >>>>>> <CAJ0cJdxSfQQm8SLBreqYCew8T5BJ-=icjCX+kaZCWxt2UO5=
> og@mail.gmail.com
> >>>>
> >>>> <
> >>>
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> >>>>>> From: Shine Prakash <sh...@icasework.com>
> >>>>>> Date: Wed, 28 Aug 2013 15:23:16 +0100
> >>>>>> Message-ID: <CAJ0cJdzsMizEpTnuOe8==9wEz-GeR=
> >>>>>> nD7sAiayAfNJ1fpvjcwA@mail.gmail.com>
> >>>>>> Subject: Re: ldaps authentication to jspwiki
> >>>>>> To: user-unsubscribe@jspwiki.apache.org
> >>>>>> Content-Type: multipart/alternative;
> >>>>> boundary=001a11c3235a3321d104e502bcf1
> >>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
> >>>>>>
> >>>>>>
> >>>>>> Regards,
> >>>>>> Shine Prakash
> >>>>>> Software Consultant
> >>>>>> iCasework Ltd.
> >>>>>> +44 (0) 207 624 4991
> >>>>>> www.icasework.com
> >>>>>> www.usefulfeedback.com
> >>>>>> www.managemyrequests.com
> >>>>>>
> >>>>>>
> >>>>>> On 28 August 2013 15:23, Shine Prakash <shine.prakash@icasework.com
> >
> >>>>>> wrote:
> >>>>>>
> >>>>>>>
> >>>>>>> Thanks. I have tried.
> >>>>>>>
> >>>>>>> Regards,
> >>>>>>> Shine Prakash
> >>>>>>> Software Consultant
> >>>>>>> iCasework Ltd.
> >>>>>>> +44 (0) 207 624 4991
> >>>>>>> www.icasework.com
> >>>>>>> www.usefulfeedback.com
> >>>>>>> www.managemyrequests.com
> >>>>>>>
> >>>>>>>
> >>>>>>>> On 28 August 2013 15:18, John Pimentel <jpimentel@ra.rockwell.com
> >
> >>>>>>> wrote:
> >>>>>>>
> >>>>>>>> To remove your address from the list, send a message to:
> >>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> Regards,
> >>>>>>>> John Pimentel
> >>>>>>>>
> >>>>>>>> [image: Description: Description: ralogo_web]
> >>>>>>>> *jpimentel@ra.rockwell.com* <jp...@ra.rockwell.com>
> >>>>>>>> Office (414) 382-3354
> >>>>>>>> *Mobile (262) 501-4785*<
> >>>>>> 2625014785@txt.att.net?subject=RA%20Text%204%20U>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> From: Shine Prakash <sh...@icasework.com>
> >>>>>>>> To: user@jspwiki.apache.org
> >>>>>>>> Date: 08/28/2013 03:35 AM
> >>>>>>>> Subject: Re: ldaps authentication to jspwiki
> >>>>>>>> ------------------------------
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> HOW do I unsubscribe myself?
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>> On 27 August 2013 23:34, Jim Willeke <ji...@willeke.com> wrote:
> >>>>>>>>>
> >>>>>>>>> You might try remove the:
> >>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> >>>>>>>>>
> >>>>>>>>> and use (what I am using):
> >>>>>> userBase="ou=people,dc=mydomain,dc=com"
> >>>>>>>>> userSearch="(uid={0})"
> >>>>>>>>> userSubtree="true"
> >>>>>>>>>
> >>>>>>>>> We found the LDAP search to be much more flexible using this
> >>> than
> >>>>> the
> >>>>>>>>> pattern matching.
> >>>>>>>>> You should also be able to get some error from tomcat if it is
> >>>>>> failing.
> >>>>>>>>> You can turn on access logging:
> >>>>> http://tomcat.apache.org/tomcat-7.0-doc/config/host.html#Access_Logs
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> If you drop the LDAPS, You might also get a trace. (Not sure if
> >>>> SUN
> >>>>>> can
> >>>>>>>>> show the ldap requests) but tcdump (or wireshark) will.
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> --
> >>>>>>>>> -jim
> >>>>>>>>> Jim Willeke
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> On Tue, Aug 27, 2013 at 1:18 PM, John Pimentel <
> >>>>>>>> jpimentel@ra.rockwell.com
> >>>>>>>>>> wrote:
> >>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> Hi Jim,
> >>>>>>>>>>
> >>>>>>>>>> Thanks for the response.
> >>>>>>>>>>
> >>>>>>>>>> We are using Sun LDAP. Let me give you an example from my
> >>> user
> >>>>>>>> account.
> >>>>>>>>>> Under my group container
> >>>>>>>>>> cn=UN_CTM_AdminGroup,ou=Control-M,ou=group,dc=mydomain,dc=com
> >>>>>>>>>> I have a attribute called uniqueMember.
> >>>>>>>>>> The value for my account is as follows:
> >>>>>>>>>> uid=JPimen,ou=people,dc=mydomain,dc=com
> >>>>>>>>>>
> >>>>>>>>>> I of course substituted our actual domain for mydomain in this
> >>>>>>>> example,
> >>>>>>>>> but
> >>>>>>>>>> everything else is verbatim.
> >>>>>>>>>>
> >>>>>>>>>> So our groups are nmed by cn but the users are named by uid.
> >>>>>>>>>>
> >>>>>>>>>> Unfortunately our LDAP server will not accept anything other
> >>>> than
> >>>>>>>> ldaps
> >>>>>>>>>> connections, so I am stuck there.
> >>>>>>>>>>
> >>>>>>>>>> Also if you have any recommendation on how to enable security
> >>>>>> specific
> >>>>>>>>>> debug I would appreciate that.
> >>>>>>>>>>
> >>>>>>>>>> I found what appears to be a log level entry in my
> >>>>>> jspwiki.properties
> >>>>>>>>> file.
> >>>>>>>>>> I changed
> >>>>>>>>>> log4j.rootCategory=INFO,FileLog
> >>>>>>>>>> To read
> >>>>>>>>>> log4j.rootCategory=DEBUG,FileLog
> >>>>>>>>>>
> >>>>>>>>>> Now, I do see debug entries in the
> >>>>>> /web1/dyscq/tomcat/logs/jspwiki.log
> >>>>>>>>>> file, but no entries appear when I try (and fail) to log in.
> >>>>>>>>>>
> >>>>>>>>>> Thanks again for any ideas.
> >>>>>>>>>>
> >>>>>>>>>> Regards,
> >>>>>>>>>> John Pimentel
> >>>>>>>>>>
> >>>>>>>>>> (Embedded image moved to file: pic11833.gif)Description:
> >>>>>> Description:
> >>>>>>>>>> ralogo_web
> >>>>>>>>>> jpimentel@ra.rockwell.com
> >>>>>>>>>> Office (414) 382-3354
> >>>>>>>>>> Mobile (262) 501-4785
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> From: Jim Willeke <ji...@willeke.com>
> >>>>>>>>>> To: user@jspwiki.apache.org
> >>>>>>>>>> Date: 08/27/2013 03:40 AM
> >>>>>>>>>> Subject: Re: ldaps authentication to jspwiki
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> I would guess, as you show no information on your LDAP setup,
> >>>> this
> >>>>>>>> line
> >>>>>>>>> is
> >>>>>>>>>> wrong:
> >>>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> >>>>>>>>>>
> >>>>>>>>>> Are your users named by uid or cn?
> >>>>>>>>>> You show roles as named by cn and since you show dc=,dc= I
> >>> would
> >>>>>> guess
> >>>>>>>>> this
> >>>>>>>>>> is AD
> >>>>>>>>>>
> >>>>>>>>>> Also, try using LDAP vs LDAPS to help troubleshoot.
> >>>>>>>>>>
> >>>>>>>>>> -jim
> >>>>>>>>>>
> >>>>>>>>>> --
> >>>>>>>>>> -jim
> >>>>>>>>>> Jim Willeke
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> On Mon, Aug 26, 2013 at 10:47 AM, John Pimentel
> >>>>>>>>>> <jp...@ra.rockwell.com>wrote:
> >>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> Greetings,
> >>>>>>>>>>>
> >>>>>>>>>>> I am having difficulties getting LDAPS authentication to
> >>> work
> >>>>> and
> >>>>>> I
> >>>>>>>>> think
> >>>>>>>>>> I
> >>>>>>>>>>> must be missing some fundamental configuration.
> >>>>>>>>>>>
> >>>>>>>>>>> My current state is that the Site loads and displays content
> >>>>>>>> properly,
> >>>>>>>>>> but
> >>>>>>>>>>> when I go to edit content or I select the log in page
> >>>> directly,
> >>>>> my
> >>>>>>>> LDAP
> >>>>>>>>>>> credentials do not authenticate, and I am repeatedly
> >>> presented
> >>>>>> with
> >>>>>>>> a
> >>>>>>>>>> login
> >>>>>>>>>>> page.
> >>>>>>>>>>>
> >>>>>>>>>>> I used the follwing information as my "How To" for this
> >>>> effort.
> >>>>>> http://www.ecyrd.com/JSPWiki/wiki/WebContainerAuthenticationViaLDAP
> >>>>>>>>>>>
> >>>>>>>>>>> This article is very good but appears to be incomplete.
> >>>>>>>>>>>
> >>>>>>>>>>> I have done the following configuration to get ldaps to
> >>> work:
> >>>>>>>>>>>
> >>>>>>>>>>> 1. I have a previously configured LDAP Server and I stored
> >>>>>> /trusted
> >>>>>>>> the
> >>>>>>>>>>> cert for this Sun LDAP server into the central java keystore
> >>>>> using
> >>>>>>>> this
> >>>>>>>>>>> command:
> >>>>>>>>>>> /usr/lib64/jvm/jre/bin/keytool -import -alias sunldap
> >>>>>>>>>>> -file /web1/sst/dysc/content/CA-RA-v3.crt
> >>>>>>>>>>> -keystore /usr/lib64/jvm/jre/lib/security/cacerts
> >>>>>>>>>>>
> >>>>>>>>>>> 2. I have configured the realm and sorted out all the log
> >>>> errors
> >>>>>>>> using
> >>>>>>>>>> the
> >>>>>>>>>>> following realm in the server.xml file. I believe tomcat is
> >>>>>>>>> successfully
> >>>>>>>>>>> connecting to my LDAP server.
> >>>>>>>>>>>
> >>>>>>>>>>> <Realm className="org.apache.catalina.realm.JNDIRealm"
> >>>>>>>>>>> connectionURL="ldaps://
> >>>>> mkedsintp.ds.mydomain.com:636
> >>>>>> "
> >>>>>>>>>>> connectionName="uid=[bind User
> >>>>>>>>>>> UID],ou=admin,dc=rmydomain,dc=com"
> >>>>>>>>>>> connectionPassword="[Password]"
> >>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> >>>> roleBase="ou=Control-M,ou=group,dc=mydomain,dc=com"
> >>>>>>>>>>> roleSubtree="true"
> >>>>>>>>>>> roleName="cn"
> >>>>>>>>>>> roleSearch="(uniqueMember={0})"
> >>>>>>>>>>> />
> >>>>>>>>>>>
> >>>>>>>>>>> 3. I uncommented the "CONTAINER-MANAGED AUTH" section
> >>>>>>>>>>> from /web1/dyscq/webapps/apps/wiki/WEB-INF/web.xml
> >>>>>>>>>>>
> >>>>>>>>>>> There is a section at the bottom that says "Update JSPWiki
> >>>>>> security
> >>>>>>>>>> policy"
> >>>>>>>>>>> If you would like to set permissions to LDAP groups, you can
> >>>>>> simply
> >>>>>>>> add
> >>>>>>>>>>> policy entries on authorize.Role. The following is an entry
> >>>> for
> >>>>>>>>>> wiki-admin
> >>>>>>>>>>> group (from LDAP).
> >>>>>>>>>>> grant principal com.ecyrd.jspwiki.auth.authorize.Role
> >>>>>> "wiki-admin" {
> >>>>>>>>>>> permission
> >>>> com.ecyrd.jspwiki.auth.permissions.AllPermission
> >>>>>> "*";
> >>>>>>>>>>> };
> >>>>>>>>>>>
> >>>>>>>>>>> I'm thinking it might go into web.xml, but I am not sure of
> >>>>> that..
> >>>>>>>>>>>
> >>>>>>>>>>> this section of the xml looks like this:
> >>>>>>>>>>>
> >>>>>>>>>>> <security-constraint>
> >>>>>>>>>>> <web-resource-collection>
> >>>>>>>>>>> <web-resource-name>Authenticated
> >>>>>> area</web-resource-name>
> >>>>>>>>>>> <url-pattern>/Edit.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/Comment.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/Login.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/NewGroup.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/Rename.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/Upload.jsp</url-pattern>
> >>>>>>>>>>> <http-method>DELETE</http-method>
> >>>>>>>>>>> <http-method>GET</http-method>
> >>>>>>>>>>> <http-method>HEAD</http-method>
> >>>>>>>>>>> <http-method>POST</http-method>
> >>>>>>>>>>> <http-method>PUT</http-method>
> >>>>>>>>>>> </web-resource-collection>
> >>>>>>>>>>>
> >>>>>>>>>>> <web-resource-collection>
> >>>>>>>>>>> <web-resource-name>Read-only
> >>>> Area</web-resource-name>
> >>>>>>>>>>> <url-pattern>/attach</url-pattern>
> >>>>>>>>>>> <http-method>DELETE</http-method>
> >>>>>>>>>>> <http-method>POST</http-method>
> >>>>>>>>>>> <http-method>PUT</http-method>
> >>>>>>>>>>> </web-resource-collection>
> >>>>>>>>>>>
> >>>>>>>>>>> <auth-constraint>
> >>>>>>>>>>> <role-name>Admin</role-name>
> >>>>>>>>>>> <role-name>Authenticated</role-name>
> >>>>>>>>>>> </auth-constraint>
> >>>>>>>>>>> <!-- > > > <user-data-constraint>
> >>>>> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> >>>>>>>>>>> </user-data-constraint>
> >>>>>>>>>>> -->
> >>>>>>>>>>>
> >>>>>>>>>>> </security-constraint>
> >>>>>>>>>>>
> >>>>>>>>>>> <login-config>
> >>>>>>>>>>> <auth-method>FORM</auth-method>
> >>>>>>>>>>> <form-login-config>
> >>>>>>>>>>> <form-login-page>/LoginForm.jsp</form-login-page>
> >>>>>>>>>>> <form-error-page>/LoginForm.jsp</form-error-page>
> >>>>>>>>>>> </form-login-config>
> >>>>>>>>>>> </login-config>
> >>>>>>>>>>>
> >>>>>>>>>>> <security-role>
> >>>>>>>>>>> <description>
> >>>>>>>>>>> This logical role includes all authenticated
> >>> users
> >>>>>>>>>>> </description>
> >>>>>>>>>>> <role-name>Authenticated</role-name>
> >>>>>>>>>>> </security-role>
> >>>>>>>>>>>
> >>>>>>>>>>> <security-role>
> >>>>>>>>>>> <description>
> >>>>>>>>>>> This logical role includes all administrative
> >>> users
> >>>>>>>>>>> </description>
> >>>>>>>>>>> <role-name>Admin</role-name>
> >>>>>>>>>>> </security-role>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> Regards,
> >>>>>>>>>>> John Pimentel
> >>>>>>>>>>>
> >>>>>>>>>>> (Embedded image moved to file: pic05844.gif)Description:
> >>>>>>>> Description:
> >>>>>>>>>>> ralogo_web
> >>>>>>>>>>> jpimentel@ra.rockwell.com
> >>>>>>>>>>> Office (414) 382-3354
> >>>>>>>>>>> Mobile (262) 501-4785
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> From: user-help@jspwiki.apache.org
> >>>>>>>>>>> To: jpimentel@ra.rockwell.com
> >>>>>>>>>>> Date: 08/26/2013 08:16 AM
> >>>>>>>>>>> Subject: WELCOME to user@jspwiki.apache.org
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> Hi! This is the ezmlm program. I'm managing the
> >>>>>>>>>>> user@jspwiki.apache.org mailing list.
> >>>>>>>>>>>
> >>>>>>>>>>> I'm working for my owner, who can be reached
> >>>>>>>>>>> at user-owner@jspwiki.apache.org.
> >>>>>>>>>>>
> >>>>>>>>>>> Acknowledgment: I have added the address
> >>>>>>>>>>>
> >>>>>>>>>>> jpimentel@ra.rockwell.com
> >>>>>>>>>>>
> >>>>>>>>>>> to the user mailing list.
> >>>>>>>>>>>
> >>>>>>>>>>> Welcome to user@jspwiki.apache.org!
> >>>>>>>>>>>
> >>>>>>>>>>> Please save this message so that you know the address you
> >>> are
> >>>>>>>>>>> subscribed under, in case you later want to unsubscribe or
> >>>>> change
> >>>>>>>> your
> >>>>>>>>>>> subscription address.
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> --- Administrative commands for the user list ---
> >>>>>>>>>>>
> >>>>>>>>>>> I can handle administrative requests automatically. Please
> >>>>>>>>>>> do not send them to the list address! Instead, send
> >>>>>>>>>>> your message to the correct command address:
> >>>>>>>>>>>
> >>>>>>>>>>> To subscribe to the list, send a message to:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> To remove your address from the list, send a message to:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> Send mail to the following for info and FAQ for this list:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> Similar addresses exist for the digest list:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> To get messages 123 through 145 (a maximum of 100 per
> >>>> request),
> >>>>>>>> mail:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> To get an index with subject and author for messages
> >>> 123-456 ,
> >>>>>> mail:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> They are always returned as sets of 100, max 2000 per
> >>> request,
> >>>>>>>>>>> so you'll actually get 100-499.
> >>>>>>>>>>>
> >>>>>>>>>>> To receive all messages with the same subject as message
> >>>> 12345,
> >>>>>>>>>>> send a short message to:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> The messages should contain one line or word of text to
> >>> avoid
> >>>>>> being
> >>>>>>>>>>> treated as sp@m, but I will ignore their content.
> >>>>>>>>>>> Only the ADDRESS you send to is important.
> >>>>>>>>>>>
> >>>>>>>>>>> You can start a subscription for an alternate address,
> >>>>>>>>>>> for example "john@host.domain", just add a hyphen and your
> >>>>>>>>>>> address (with '=' instead of '@') after the command word:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> To stop subscription for this address, mail:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> In both cases, I'll send a confirmation message to that
> >>>> address.
> >>>>>>>> When
> >>>>>>>>>>> you receive it, simply reply to it to complete your
> >>>>> subscription.
> >>>>>>>>>>>
> >>>>>>>>>>> If despite following these instructions, you do not get the
> >>>>>>>>>>> desired results, please contact my owner at
> >>>>>>>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner
> >>>> is a
> >>>>>>>>>>> lot slower than I am ;-)
> >>>>>>>>>>>
> >>>>>>>>>>> --- Enclosed is a copy of the request I received.
> >>>>>>>>>>>
> >>>>>>>>>>> Return-Path: <jp...@ra.rockwell.com>
> >>>>>>>>>>> Received: (qmail 84748 invoked by uid 99); 26 Aug 2013
> >>>> 13:16:04
> >>>>>>>> -0000
> >>>>>>>>>>> Received: from athena.apache.org (HELO athena.apache.org)
> >>>>>>>>>> (140.211.11.136)
> >>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
> >>> 2013
> >>>>>>>> 13:16:04
> >>>>>>>>>>> +0000
> >>>>>>>>>>> X-ASF-Spam-Status: No, hits=-0.0 required=5.0
> >>>>>>>>>>> tests=SPF_PASS
> >>>>>>>>>>> X-Spam-Check-By: apache.org
> >>>>>>>>>>> Received-SPF: pass (athena.apache.org: local policy)
> >>>>>>>>>>> Received: from [205.175.240.251] (HELO
> >>>>>> ramilwsmtp01.ra.rockwell.com
> >>>>>>>> )
> >>>>>>>>>>> (205.175.240.251)
> >>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
> >>> 2013
> >>>>>>>> 13:16:00
> >>>>>>>>>>> +0000
> >>>>>>>>>>> In-Reply-To: <13...@jspwiki.apache.org>
> >>>>>>>>>>> References: <13...@jspwiki.apache.org>
> >>>>>>>>>>> Subject: Re: confirm subscribe to user@jspwiki.apache.org
> >>>>>>>>>>> X-KeepSent: D7D57B0D:E2A05A18-86257BD3:0048D45A;
> >>>>>>>>>>> type=4; name=$KeepSent
> >>>>>>>>>>> To:
> >>>>>>>>>>> user-sc.1377522681.pagaldeamkeafdeakcap-jpimentel=
> >>>>>>>>>>> ra.rockwell.com@jspwiki.apache.org
> >>>>>>>>>>>
> >>>>>>>>>>> X-Mailer: Lotus Notes Release 8.5.2FP2 March 23, 2011
> >>>>>>>>>>> Message-ID:
> >>>>>>>>>> <
> >>>
> OFD7D57B0D.E2A05A18-ON86257BD3.0048D45A-86257BD3.0048D84D@ra.rockwell.com
> >>>>>>>>>>> From: John Pimentel <jp...@ra.rockwell.com>
> >>>>>>>>>>> Date: Mon, 26 Aug 2013 08:15:38 -0500
> >>>>>>>>>>> X-MIMETrack: Serialize by Router on
> >>>>>>>> RAMilwSMTP01/Milwaukee/RA/Rockwell
> >>>>>>>>> at
> >>>>>>>>>>> 08/26/2013 08:15:59
> >>>>>>>>>>> AM
> >>>>>>>>>>> MIME-Version: 1.0
> >>>>>>>>>>> Content-type: multipart/mixed;
> >>>>>> Boundary="0__=09BBF140DFDB52CA8f9e8a93df938690918c09BBF140DFDB52CA"
> >>>>>>>>>>> Content-Disposition: inline
> >>>>>>>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
> >
>
Re: issues unsubscribing user@jspwiki.a.o
Posted by Juan Pablo Santos Rodríguez <ju...@gmail.com>.
Hi,
as per https://issues.apache.org/jira/browse/INFRA-6702, just note that the
unsubscribing procedure is a two step process:
first, you've to send an email to user-unsubscribe@jspwiki.apache.org , and
then send a reply to the confirmation e-mail
please, *don't* use the jspwiki's incubator former address for
unsubscribing, it's been moved to user@j.a.o
br,
juan pablo
On Wed, Aug 28, 2013 at 10:25 PM, Ramya K Grama <ra...@gmail.com>wrote:
> Same here!!
>
>
> On Wed, Aug 28, 2013 at 11:50 AM, Robert McGovern <ro...@tarasis.net> wrote:
>
> > Same for me.
> >
> > > On 28 Aug 2013, at 20:34, FRANK FITCH <fr...@oracle.com> wrote:
> > >
> > > sending unsubscribe email to
> > jspwiki-user-unsubscribe@incubator.apache.org resulted in
> > >
> > > -------------------------------------------------------
> > > Hi. This is the qmail-send program at apache.org.
> > > I'm afraid I wasn't able to deliver your message to the following
> > addresses.
> > > This is a permanent error; I've given up. Sorry it didn't work out.
> > >
> > > <js...@incubator.apache.org>:
> > > This mailing list has moved to user at jspwiki.apache.org.
> > > -------------------------------------------------------
> > >
> > > Fair enough. user@jspwiki.apache.org doesn't like commands in the
> > subject, doesn't like blank subjects, and passes other emails to the
> group.
> > >
> > > Well done, apache. Well done.
> > >
> > > -Frank
> > >
> > >> On 8/28/2013 11:24 AM, Claudia Frers wrote:
> > >> sorry three attempts and no success in unsubscribing
> > >>
> > >>
> > >> On Wed, Aug 28, 2013 at 7:47 PM, Juan Pablo Santos Rodríguez <
> > >> juanpablo.santos@gmail.com> wrote:
> > >>
> > >>> Hi Claudia,
> > >>>
> > >>> sending an email to either user@jspwiki.apache.org (as per
> > >>> http://jspwiki.apache.org/jspwiki/community/mailing_lists.html) or
> > >>> jspwiki-user-unsubscribe@incubator.apache.org should be enough
> > >>>
> > >>>
> > >>> br,
> > >>> juan pablo
> > >>>
> > >>>
> > >>> On Wed, Aug 28, 2013 at 7:43 PM, Claudia Frers <
> > claudia.frers@gmail.com
> > >>>> wrote:
> > >>>
> > >>>> Hi I am having similar unsubscribe issues as Shine. Clicking on the
> > link
> > >>>> did not help. What should i do?
> > >>>>
> > >>>>
> > >>>> On Wed, Aug 28, 2013 at 7:15 PM, Juan Pablo Santos Rodríguez <
> > >>>> juanpablo.santos@gmail.com> wrote:
> > >>>>
> > >>>>> Hi Shine,
> > >>>>>
> > >>>>> (switchting subject to a more descriptive one)
> > >>>>>
> > >>>>> Could you try with jspwiki-user-unsubscribe@incubator.apache.org?
> > >>> There
> > >>>>> are
> > >>>>> chances you were subscribed to the incubator list, and
> unsubscribing
> > >>>> isn't
> > >>>>> looking in the old ML, which redirects to the new one. If that's
> the
> > >>>> case,
> > >>>>> would you mind pinging me off-list with the results?
> > >>>>>
> > >>>>> In any case, seems like an infra issue, if problem persists we'll
> > file
> > >>> an
> > >>>>> issue in order to stop the annoyances
> > >>>>>
> > >>>>>
> > >>>>> br,
> > >>>>> juan pablo
> > >>>>>
> > >>>>>
> > >>>>>
> > >>>>> On Wed, Aug 28, 2013 at 4:34 PM, Shine Prakash
> > >>>>> <sh...@icasework.com>wrote:
> > >>>>>
> > >>>>>> I end up getting the same message saying that I am not in the
> > >>>> subscribed
> > >>>>>> list. Painful!
> > >>>>>>
> > >>>>>>
> > >>>>>> Regards,
> > >>>>>> Shine Prakash
> > >>>>>> Software Consultant
> > >>>>>> iCasework Ltd.
> > >>>>>> +44 (0) 207 624 4991
> > >>>>>> www.icasework.com
> > >>>>>> www.usefulfeedback.com
> > >>>>>> www.managemyrequests.com
> > >>>>>>
> > >>>>>>
> > >>>>>> ---------- Forwarded message ----------
> > >>>>>> From: <us...@jspwiki.apache.org>
> > >>>>>> Date: 28 August 2013 15:24
> > >>>>>> Subject: Not subscribed to user@jspwiki.apache.org
> > >>>>>> To: shine.prakash@icasework.com
> > >>>>>>
> > >>>>>>
> > >>>>>> Hi! This is the ezmlm program. I'm managing the
> > >>>>>> user@jspwiki.apache.org mailing list.
> > >>>>>>
> > >>>>>> I'm working for my owner, who can be reached
> > >>>>>> at user-owner@jspwiki.apache.org.
> > >>>>>>
> > >>>>>> Acknowledgment: The address
> > >>>>>>
> > >>>>>> shine.prakash@icasework.com
> > >>>>>>
> > >>>>>> was not on the user mailing list when I received
> > >>>>>> your request and is not a subscriber of this list.
> > >>>>>>
> > >>>>>> If you unsubscribe, but continue to receive mail, you're
> subscribed
> > >>>>>> under a different address than you currently use. Please look at
> the
> > >>>>>> header for:
> > >>>>>>
> > >>>>>> 'Return-Path: <user-return-1234-user=host.dom@jspwiki.apache.org
> >'
> > >>>>>>
> > >>>>>> The unsubscribe address for this user would be:
> > >>>>>> 'user-unsubscribe-user=host.dom@jspwiki.apache.org'.
> > >>>>>> Just mail to that address, substituting user=host.dom for the real
> > >>>>>> values, reply to the confirmation request, and you should receive
> a
> > >>>>> message
> > >>>>>> that you're off the list.
> > >>>>>>
> > >>>>>> For some mail programs, you need to make the headers visible to
> > >>>>>> see the return path:
> > >>>>>>
> > >>>>>> For Eudora 4.0, click on the "Blah blah ..." button.
> > >>>>>> For PMMail, click on "Window->Show entire message/header".
> > >>>>>>
> > >>>>>> If this still doesn't work, I'm sorry to say that I can't help
> you.
> > >>>>>> Please FORWARD a list message together with a note about what
> you're
> > >>>>>> trying to achieve and a list of addresses that you might be
> > >>> subscribed
> > >>>>>> under to my owner:
> > >>>>>>
> > >>>>>> user-owner@jspwiki.apache.org
> > >>>>>>
> > >>>>>> who will take care of it. My owner is a little bit slower than I
> am,
> > >>>>>> so please be patient.
> > >>>>>>
> > >>>>>>
> > >>>>>> --- Administrative commands for the user list ---
> > >>>>>>
> > >>>>>> I can handle administrative requests automatically. Please
> > >>>>>> do not send them to the list address! Instead, send
> > >>>>>> your message to the correct command address:
> > >>>>>>
> > >>>>>> To subscribe to the list, send a message to:
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>>
> > >>>>>> To remove your address from the list, send a message to:
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>>
> > >>>>>> Send mail to the following for info and FAQ for this list:
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>>
> > >>>>>> Similar addresses exist for the digest list:
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>>
> > >>>>>> To get messages 123 through 145 (a maximum of 100 per request),
> > mail:
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>>
> > >>>>>> To get an index with subject and author for messages 123-456 ,
> mail:
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>>
> > >>>>>> They are always returned as sets of 100, max 2000 per request,
> > >>>>>> so you'll actually get 100-499.
> > >>>>>>
> > >>>>>> To receive all messages with the same subject as message 12345,
> > >>>>>> send a short message to:
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>>
> > >>>>>> The messages should contain one line or word of text to avoid
> being
> > >>>>>> treated as sp@m, but I will ignore their content.
> > >>>>>> Only the ADDRESS you send to is important.
> > >>>>>>
> > >>>>>> You can start a subscription for an alternate address,
> > >>>>>> for example "john@host.domain", just add a hyphen and your
> > >>>>>> address (with '=' instead of '@') after the command word:
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>>
> > >>>>>> To stop subscription for this address, mail:
> > >>>>>> <us...@jspwiki.apache.org>
> > >>>>>>
> > >>>>>> In both cases, I'll send a confirmation message to that address.
> > When
> > >>>>>> you receive it, simply reply to it to complete your subscription.
> > >>>>>>
> > >>>>>> If despite following these instructions, you do not get the
> > >>>>>> desired results, please contact my owner at
> > >>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner is a
> > >>>>>> lot slower than I am ;-)
> > >>>>>>
> > >>>>>> --- Enclosed is a copy of the request I received.
> > >>>>>>
> > >>>>>> Return-Path: <sh...@icasework.com>
> > >>>>>> Received: (qmail 14894 invoked by uid 99); 28 Aug 2013 14:24:02
> > -0000
> > >>>>>> Received: from athena.apache.org (HELO athena.apache.org)
> > >>>>> (140.211.11.136)
> > >>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
> > >>> 14:24:02
> > >>>>>> +0000
> > >>>>>> X-ASF-Spam-Status: No, hits=-9.9 required=10.0
> > >>>
> >
> tests=ASF_LIST_OPS,ASF_LIST_UNSUB_A,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,TVD_GET_STOCK,WEIRD_PORT
> > >>>>>> X-Spam-Check-By: apache.org
> > >>>>>> Received-SPF: unknown (athena.apache.org: error in processing
> > during
> > >>>>>> lookup
> > >>>>>> of shine.prakash@icasework.com)
> > >>>>>> Received: from [209.85.214.182] (HELO mail-ob0-f182.google.com)
> > >>>>>> (209.85.214.182)
> > >>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
> > >>> 14:23:58
> > >>>>>> +0000
> > >>>>>> Received: by mail-ob0-f182.google.com with SMTP id
> > >>> wo10so6844227obc.27
> > >>>>>> for <us...@jspwiki.apache.org>; Wed, 28 Aug
> 2013
> > >>>>>> 07:23:37 -0700 (PDT)
> > >>>>>> X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> > >>>>>> d=google.com; s=20120113;
> > >>>>> h=x-gm-message-state:mime-version:in-reply-to:references:from:date
> > >>>>>> :message-id:subject:to:content-type;
> > >>>>>> bh=ixJFRcL2Q0jSLZM1ZNof9EtwHaH4KiesZ5zF3pHBSNc=;
> > >>>>>>
> > >>>>>>
> b=panDiGKtqYgtZ18nLf1tAGs8gK5G2cPtTRagm7ery4DYD+CsclNsSHvCCrK2T09SVp
> > >>>>>>
> > >>>>>>
> > LZd44PN4rdaz0Ls0QwOii7OZRnKHpvFng9hDuK4BfkKcZJLo2AIO3suImsteLWtpe0Iv
> > >>>>>>
> > >>>>>>
> > 7/JlUdt5dCc34Zh+rJh0sL6SBUtua0ncTbgRI/jZqK9kc1AjHXx53WZ4OH9mkC1Ew9v7
> > >>>>>>
> > >>>>>>
> > BuKImYEJPm2pJ3i8u2rh9Z/O/cVdCqeDyIAvPaVti+8tANUUJkM45ih/Nw8f1sY5zDSs
> > >>>>>>
> > >>>>>>
> > DwNgF+Mg/aTHh28OcIvxMvgGAsenjmOYBTripxJE0vDGqBZPPvK5MHd1g+Fn4Aarwx+u
> > >>>>>> VKdA==
> > >>>>>> X-Gm-Message-State:
> > >>>
> >
> ALoCoQlb0bM1TZ7T17Vo4wJ7kkIUXadLEO5QNZMf4IbLcigK9cLv3Z3gSlSiemW/S2DnIHsWbRm7
> > >>>>>> X-Received: by 10.182.44.134 with SMTP id
> > >>>>> e6mr6789662obm.14.1377699816993;
> > >>>>>> Wed, 28 Aug 2013 07:23:36 -0700 (PDT)
> > >>>>>> MIME-Version: 1.0
> > >>>>>> Received: by 10.60.40.41 with HTTP; Wed, 28 Aug 2013 07:23:16
> -0700
> > >>>> (PDT)
> > >>>>>> X-Originating-IP: [81.139.83.190]
> > >>>>>> In-Reply-To: <
> > >>>
> >
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> > >>>>>> References: <13...@jspwiki.apache.org> <
> > >>>
> >
> OF0FCD1230.245CC751-ON86257BD3.00498BC2-86257BD3.00514276@ra.rockwell.com>
> > >>>>>> <
> > CAB3ntOva5D5caVQGzm9+XE6gJ3n6+g-xX7+_WsMCK2Ds4ABs5g@mail.gmail.com
> > >>>>
> > >>>>>> <
> > >>>
> >
> OF69EABD41.A8F0A0AE-ON86257BD4.005AD83C-86257BD4.005F10A8@ra.rockwell.com>
> > >>>>>> <
> > CAB3ntOs-megCTRzddLxPCmL7Kvk2gpsp_io85+Se4tEFMgE0VQ@mail.gmail.com
> > >>>>
> > >>>>>> <CAJ0cJdxSfQQm8SLBreqYCew8T5BJ-=icjCX+kaZCWxt2UO5=
> > og@mail.gmail.com
> > >>>>
> > >>>> <
> > >>>
> >
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> > >>>>>> From: Shine Prakash <sh...@icasework.com>
> > >>>>>> Date: Wed, 28 Aug 2013 15:23:16 +0100
> > >>>>>> Message-ID: <CAJ0cJdzsMizEpTnuOe8==9wEz-GeR=
> > >>>>>> nD7sAiayAfNJ1fpvjcwA@mail.gmail.com>
> > >>>>>> Subject: Re: ldaps authentication to jspwiki
> > >>>>>> To: user-unsubscribe@jspwiki.apache.org
> > >>>>>> Content-Type: multipart/alternative;
> > >>>>> boundary=001a11c3235a3321d104e502bcf1
> > >>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
> > >>>>>>
> > >>>>>>
> > >>>>>> Regards,
> > >>>>>> Shine Prakash
> > >>>>>> Software Consultant
> > >>>>>> iCasework Ltd.
> > >>>>>> +44 (0) 207 624 4991
> > >>>>>> www.icasework.com
> > >>>>>> www.usefulfeedback.com
> > >>>>>> www.managemyrequests.com
> > >>>>>>
> > >>>>>>
> > >>>>>> On 28 August 2013 15:23, Shine Prakash <
> shine.prakash@icasework.com
> > >
> > >>>>>> wrote:
> > >>>>>>
> > >>>>>>>
> > >>>>>>> Thanks. I have tried.
> > >>>>>>>
> > >>>>>>> Regards,
> > >>>>>>> Shine Prakash
> > >>>>>>> Software Consultant
> > >>>>>>> iCasework Ltd.
> > >>>>>>> +44 (0) 207 624 4991
> > >>>>>>> www.icasework.com
> > >>>>>>> www.usefulfeedback.com
> > >>>>>>> www.managemyrequests.com
> > >>>>>>>
> > >>>>>>>
> > >>>>>>>> On 28 August 2013 15:18, John Pimentel <
> jpimentel@ra.rockwell.com
> > >
> > >>>>>>> wrote:
> > >>>>>>>
> > >>>>>>>> To remove your address from the list, send a message to:
> > >>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>> Regards,
> > >>>>>>>> John Pimentel
> > >>>>>>>>
> > >>>>>>>> [image: Description: Description: ralogo_web]
> > >>>>>>>> *jpimentel@ra.rockwell.com* <jp...@ra.rockwell.com>
> > >>>>>>>> Office (414) 382-3354
> > >>>>>>>> *Mobile (262) 501-4785*<
> > >>>>>> 2625014785@txt.att.net?subject=RA%20Text%204%20U>
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>> From: Shine Prakash <sh...@icasework.com>
> > >>>>>>>> To: user@jspwiki.apache.org
> > >>>>>>>> Date: 08/28/2013 03:35 AM
> > >>>>>>>> Subject: Re: ldaps authentication to jspwiki
> > >>>>>>>> ------------------------------
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>> HOW do I unsubscribe myself?
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>>
> > >>>>>>>>> On 27 August 2013 23:34, Jim Willeke <ji...@willeke.com> wrote:
> > >>>>>>>>>
> > >>>>>>>>> You might try remove the:
> > >>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > >>>>>>>>>
> > >>>>>>>>> and use (what I am using):
> > >>>>>> userBase="ou=people,dc=mydomain,dc=com"
> > >>>>>>>>> userSearch="(uid={0})"
> > >>>>>>>>> userSubtree="true"
> > >>>>>>>>>
> > >>>>>>>>> We found the LDAP search to be much more flexible using this
> > >>> than
> > >>>>> the
> > >>>>>>>>> pattern matching.
> > >>>>>>>>> You should also be able to get some error from tomcat if it is
> > >>>>>> failing.
> > >>>>>>>>> You can turn on access logging:
> > >>>>>
> http://tomcat.apache.org/tomcat-7.0-doc/config/host.html#Access_Logs
> > >>>>>>>>>
> > >>>>>>>>>
> > >>>>>>>>> If you drop the LDAPS, You might also get a trace. (Not sure if
> > >>>> SUN
> > >>>>>> can
> > >>>>>>>>> show the ldap requests) but tcdump (or wireshark) will.
> > >>>>>>>>>
> > >>>>>>>>>
> > >>>>>>>>> --
> > >>>>>>>>> -jim
> > >>>>>>>>> Jim Willeke
> > >>>>>>>>>
> > >>>>>>>>>
> > >>>>>>>>> On Tue, Aug 27, 2013 at 1:18 PM, John Pimentel <
> > >>>>>>>> jpimentel@ra.rockwell.com
> > >>>>>>>>>> wrote:
> > >>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>> Hi Jim,
> > >>>>>>>>>>
> > >>>>>>>>>> Thanks for the response.
> > >>>>>>>>>>
> > >>>>>>>>>> We are using Sun LDAP. Let me give you an example from my
> > >>> user
> > >>>>>>>> account.
> > >>>>>>>>>> Under my group container
> > >>>>>>>>>> cn=UN_CTM_AdminGroup,ou=Control-M,ou=group,dc=mydomain,dc=com
> > >>>>>>>>>> I have a attribute called uniqueMember.
> > >>>>>>>>>> The value for my account is as follows:
> > >>>>>>>>>> uid=JPimen,ou=people,dc=mydomain,dc=com
> > >>>>>>>>>>
> > >>>>>>>>>> I of course substituted our actual domain for mydomain in this
> > >>>>>>>> example,
> > >>>>>>>>> but
> > >>>>>>>>>> everything else is verbatim.
> > >>>>>>>>>>
> > >>>>>>>>>> So our groups are nmed by cn but the users are named by uid.
> > >>>>>>>>>>
> > >>>>>>>>>> Unfortunately our LDAP server will not accept anything other
> > >>>> than
> > >>>>>>>> ldaps
> > >>>>>>>>>> connections, so I am stuck there.
> > >>>>>>>>>>
> > >>>>>>>>>> Also if you have any recommendation on how to enable security
> > >>>>>> specific
> > >>>>>>>>>> debug I would appreciate that.
> > >>>>>>>>>>
> > >>>>>>>>>> I found what appears to be a log level entry in my
> > >>>>>> jspwiki.properties
> > >>>>>>>>> file.
> > >>>>>>>>>> I changed
> > >>>>>>>>>> log4j.rootCategory=INFO,FileLog
> > >>>>>>>>>> To read
> > >>>>>>>>>> log4j.rootCategory=DEBUG,FileLog
> > >>>>>>>>>>
> > >>>>>>>>>> Now, I do see debug entries in the
> > >>>>>> /web1/dyscq/tomcat/logs/jspwiki.log
> > >>>>>>>>>> file, but no entries appear when I try (and fail) to log in.
> > >>>>>>>>>>
> > >>>>>>>>>> Thanks again for any ideas.
> > >>>>>>>>>>
> > >>>>>>>>>> Regards,
> > >>>>>>>>>> John Pimentel
> > >>>>>>>>>>
> > >>>>>>>>>> (Embedded image moved to file: pic11833.gif)Description:
> > >>>>>> Description:
> > >>>>>>>>>> ralogo_web
> > >>>>>>>>>> jpimentel@ra.rockwell.com
> > >>>>>>>>>> Office (414) 382-3354
> > >>>>>>>>>> Mobile (262) 501-4785
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>> From: Jim Willeke <ji...@willeke.com>
> > >>>>>>>>>> To: user@jspwiki.apache.org
> > >>>>>>>>>> Date: 08/27/2013 03:40 AM
> > >>>>>>>>>> Subject: Re: ldaps authentication to jspwiki
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>> I would guess, as you show no information on your LDAP setup,
> > >>>> this
> > >>>>>>>> line
> > >>>>>>>>> is
> > >>>>>>>>>> wrong:
> > >>>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > >>>>>>>>>>
> > >>>>>>>>>> Are your users named by uid or cn?
> > >>>>>>>>>> You show roles as named by cn and since you show dc=,dc= I
> > >>> would
> > >>>>>> guess
> > >>>>>>>>> this
> > >>>>>>>>>> is AD
> > >>>>>>>>>>
> > >>>>>>>>>> Also, try using LDAP vs LDAPS to help troubleshoot.
> > >>>>>>>>>>
> > >>>>>>>>>> -jim
> > >>>>>>>>>>
> > >>>>>>>>>> --
> > >>>>>>>>>> -jim
> > >>>>>>>>>> Jim Willeke
> > >>>>>>>>>>
> > >>>>>>>>>>
> > >>>>>>>>>> On Mon, Aug 26, 2013 at 10:47 AM, John Pimentel
> > >>>>>>>>>> <jp...@ra.rockwell.com>wrote:
> > >>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>>> Greetings,
> > >>>>>>>>>>>
> > >>>>>>>>>>> I am having difficulties getting LDAPS authentication to
> > >>> work
> > >>>>> and
> > >>>>>> I
> > >>>>>>>>> think
> > >>>>>>>>>> I
> > >>>>>>>>>>> must be missing some fundamental configuration.
> > >>>>>>>>>>>
> > >>>>>>>>>>> My current state is that the Site loads and displays content
> > >>>>>>>> properly,
> > >>>>>>>>>> but
> > >>>>>>>>>>> when I go to edit content or I select the log in page
> > >>>> directly,
> > >>>>> my
> > >>>>>>>> LDAP
> > >>>>>>>>>>> credentials do not authenticate, and I am repeatedly
> > >>> presented
> > >>>>>> with
> > >>>>>>>> a
> > >>>>>>>>>> login
> > >>>>>>>>>>> page.
> > >>>>>>>>>>>
> > >>>>>>>>>>> I used the follwing information as my "How To" for this
> > >>>> effort.
> > >>>>>>
> http://www.ecyrd.com/JSPWiki/wiki/WebContainerAuthenticationViaLDAP
> > >>>>>>>>>>>
> > >>>>>>>>>>> This article is very good but appears to be incomplete.
> > >>>>>>>>>>>
> > >>>>>>>>>>> I have done the following configuration to get ldaps to
> > >>> work:
> > >>>>>>>>>>>
> > >>>>>>>>>>> 1. I have a previously configured LDAP Server and I stored
> > >>>>>> /trusted
> > >>>>>>>> the
> > >>>>>>>>>>> cert for this Sun LDAP server into the central java keystore
> > >>>>> using
> > >>>>>>>> this
> > >>>>>>>>>>> command:
> > >>>>>>>>>>> /usr/lib64/jvm/jre/bin/keytool -import -alias sunldap
> > >>>>>>>>>>> -file /web1/sst/dysc/content/CA-RA-v3.crt
> > >>>>>>>>>>> -keystore /usr/lib64/jvm/jre/lib/security/cacerts
> > >>>>>>>>>>>
> > >>>>>>>>>>> 2. I have configured the realm and sorted out all the log
> > >>>> errors
> > >>>>>>>> using
> > >>>>>>>>>> the
> > >>>>>>>>>>> following realm in the server.xml file. I believe tomcat is
> > >>>>>>>>> successfully
> > >>>>>>>>>>> connecting to my LDAP server.
> > >>>>>>>>>>>
> > >>>>>>>>>>> <Realm className="org.apache.catalina.realm.JNDIRealm"
> > >>>>>>>>>>> connectionURL="ldaps://
> > >>>>> mkedsintp.ds.mydomain.com:636
> > >>>>>> "
> > >>>>>>>>>>> connectionName="uid=[bind User
> > >>>>>>>>>>> UID],ou=admin,dc=rmydomain,dc=com"
> > >>>>>>>>>>> connectionPassword="[Password]"
> > >>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > >>>> roleBase="ou=Control-M,ou=group,dc=mydomain,dc=com"
> > >>>>>>>>>>> roleSubtree="true"
> > >>>>>>>>>>> roleName="cn"
> > >>>>>>>>>>> roleSearch="(uniqueMember={0})"
> > >>>>>>>>>>> />
> > >>>>>>>>>>>
> > >>>>>>>>>>> 3. I uncommented the "CONTAINER-MANAGED AUTH" section
> > >>>>>>>>>>> from /web1/dyscq/webapps/apps/wiki/WEB-INF/web.xml
> > >>>>>>>>>>>
> > >>>>>>>>>>> There is a section at the bottom that says "Update JSPWiki
> > >>>>>> security
> > >>>>>>>>>> policy"
> > >>>>>>>>>>> If you would like to set permissions to LDAP groups, you can
> > >>>>>> simply
> > >>>>>>>> add
> > >>>>>>>>>>> policy entries on authorize.Role. The following is an entry
> > >>>> for
> > >>>>>>>>>> wiki-admin
> > >>>>>>>>>>> group (from LDAP).
> > >>>>>>>>>>> grant principal com.ecyrd.jspwiki.auth.authorize.Role
> > >>>>>> "wiki-admin" {
> > >>>>>>>>>>> permission
> > >>>> com.ecyrd.jspwiki.auth.permissions.AllPermission
> > >>>>>> "*";
> > >>>>>>>>>>> };
> > >>>>>>>>>>>
> > >>>>>>>>>>> I'm thinking it might go into web.xml, but I am not sure of
> > >>>>> that..
> > >>>>>>>>>>>
> > >>>>>>>>>>> this section of the xml looks like this:
> > >>>>>>>>>>>
> > >>>>>>>>>>> <security-constraint>
> > >>>>>>>>>>> <web-resource-collection>
> > >>>>>>>>>>> <web-resource-name>Authenticated
> > >>>>>> area</web-resource-name>
> > >>>>>>>>>>> <url-pattern>/Edit.jsp</url-pattern>
> > >>>>>>>>>>> <url-pattern>/Comment.jsp</url-pattern>
> > >>>>>>>>>>> <url-pattern>/Login.jsp</url-pattern>
> > >>>>>>>>>>> <url-pattern>/NewGroup.jsp</url-pattern>
> > >>>>>>>>>>> <url-pattern>/Rename.jsp</url-pattern>
> > >>>>>>>>>>> <url-pattern>/Upload.jsp</url-pattern>
> > >>>>>>>>>>> <http-method>DELETE</http-method>
> > >>>>>>>>>>> <http-method>GET</http-method>
> > >>>>>>>>>>> <http-method>HEAD</http-method>
> > >>>>>>>>>>> <http-method>POST</http-method>
> > >>>>>>>>>>> <http-method>PUT</http-method>
> > >>>>>>>>>>> </web-resource-collection>
> > >>>>>>>>>>>
> > >>>>>>>>>>> <web-resource-collection>
> > >>>>>>>>>>> <web-resource-name>Read-only
> > >>>> Area</web-resource-name>
> > >>>>>>>>>>> <url-pattern>/attach</url-pattern>
> > >>>>>>>>>>> <http-method>DELETE</http-method>
> > >>>>>>>>>>> <http-method>POST</http-method>
> > >>>>>>>>>>> <http-method>PUT</http-method>
> > >>>>>>>>>>> </web-resource-collection>
> > >>>>>>>>>>>
> > >>>>>>>>>>> <auth-constraint>
> > >>>>>>>>>>> <role-name>Admin</role-name>
> > >>>>>>>>>>> <role-name>Authenticated</role-name>
> > >>>>>>>>>>> </auth-constraint>
> > >>>>>>>>>>> <!-- > > > <user-data-constraint>
> > >>>>> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> > >>>>>>>>>>> </user-data-constraint>
> > >>>>>>>>>>> -->
> > >>>>>>>>>>>
> > >>>>>>>>>>> </security-constraint>
> > >>>>>>>>>>>
> > >>>>>>>>>>> <login-config>
> > >>>>>>>>>>> <auth-method>FORM</auth-method>
> > >>>>>>>>>>> <form-login-config>
> > >>>>>>>>>>> <form-login-page>/LoginForm.jsp</form-login-page>
> > >>>>>>>>>>> <form-error-page>/LoginForm.jsp</form-error-page>
> > >>>>>>>>>>> </form-login-config>
> > >>>>>>>>>>> </login-config>
> > >>>>>>>>>>>
> > >>>>>>>>>>> <security-role>
> > >>>>>>>>>>> <description>
> > >>>>>>>>>>> This logical role includes all authenticated
> > >>> users
> > >>>>>>>>>>> </description>
> > >>>>>>>>>>> <role-name>Authenticated</role-name>
> > >>>>>>>>>>> </security-role>
> > >>>>>>>>>>>
> > >>>>>>>>>>> <security-role>
> > >>>>>>>>>>> <description>
> > >>>>>>>>>>> This logical role includes all administrative
> > >>> users
> > >>>>>>>>>>> </description>
> > >>>>>>>>>>> <role-name>Admin</role-name>
> > >>>>>>>>>>> </security-role>
> > >>>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>>> Regards,
> > >>>>>>>>>>> John Pimentel
> > >>>>>>>>>>>
> > >>>>>>>>>>> (Embedded image moved to file: pic05844.gif)Description:
> > >>>>>>>> Description:
> > >>>>>>>>>>> ralogo_web
> > >>>>>>>>>>> jpimentel@ra.rockwell.com
> > >>>>>>>>>>> Office (414) 382-3354
> > >>>>>>>>>>> Mobile (262) 501-4785
> > >>>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>>> From: user-help@jspwiki.apache.org
> > >>>>>>>>>>> To: jpimentel@ra.rockwell.com
> > >>>>>>>>>>> Date: 08/26/2013 08:16 AM
> > >>>>>>>>>>> Subject: WELCOME to user@jspwiki.apache.org
> > >>>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>>> Hi! This is the ezmlm program. I'm managing the
> > >>>>>>>>>>> user@jspwiki.apache.org mailing list.
> > >>>>>>>>>>>
> > >>>>>>>>>>> I'm working for my owner, who can be reached
> > >>>>>>>>>>> at user-owner@jspwiki.apache.org.
> > >>>>>>>>>>>
> > >>>>>>>>>>> Acknowledgment: I have added the address
> > >>>>>>>>>>>
> > >>>>>>>>>>> jpimentel@ra.rockwell.com
> > >>>>>>>>>>>
> > >>>>>>>>>>> to the user mailing list.
> > >>>>>>>>>>>
> > >>>>>>>>>>> Welcome to user@jspwiki.apache.org!
> > >>>>>>>>>>>
> > >>>>>>>>>>> Please save this message so that you know the address you
> > >>> are
> > >>>>>>>>>>> subscribed under, in case you later want to unsubscribe or
> > >>>>> change
> > >>>>>>>> your
> > >>>>>>>>>>> subscription address.
> > >>>>>>>>>>>
> > >>>>>>>>>>>
> > >>>>>>>>>>> --- Administrative commands for the user list ---
> > >>>>>>>>>>>
> > >>>>>>>>>>> I can handle administrative requests automatically. Please
> > >>>>>>>>>>> do not send them to the list address! Instead, send
> > >>>>>>>>>>> your message to the correct command address:
> > >>>>>>>>>>>
> > >>>>>>>>>>> To subscribe to the list, send a message to:
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>>
> > >>>>>>>>>>> To remove your address from the list, send a message to:
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>>
> > >>>>>>>>>>> Send mail to the following for info and FAQ for this list:
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>>
> > >>>>>>>>>>> Similar addresses exist for the digest list:
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>>
> > >>>>>>>>>>> To get messages 123 through 145 (a maximum of 100 per
> > >>>> request),
> > >>>>>>>> mail:
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>>
> > >>>>>>>>>>> To get an index with subject and author for messages
> > >>> 123-456 ,
> > >>>>>> mail:
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>>
> > >>>>>>>>>>> They are always returned as sets of 100, max 2000 per
> > >>> request,
> > >>>>>>>>>>> so you'll actually get 100-499.
> > >>>>>>>>>>>
> > >>>>>>>>>>> To receive all messages with the same subject as message
> > >>>> 12345,
> > >>>>>>>>>>> send a short message to:
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>>
> > >>>>>>>>>>> The messages should contain one line or word of text to
> > >>> avoid
> > >>>>>> being
> > >>>>>>>>>>> treated as sp@m, but I will ignore their content.
> > >>>>>>>>>>> Only the ADDRESS you send to is important.
> > >>>>>>>>>>>
> > >>>>>>>>>>> You can start a subscription for an alternate address,
> > >>>>>>>>>>> for example "john@host.domain", just add a hyphen and your
> > >>>>>>>>>>> address (with '=' instead of '@') after the command word:
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>>
> > >>>>>>>>>>> To stop subscription for this address, mail:
> > >>>>>>>>>>> <us...@jspwiki.apache.org>
> > >>>>>>>>>>>
> > >>>>>>>>>>> In both cases, I'll send a confirmation message to that
> > >>>> address.
> > >>>>>>>> When
> > >>>>>>>>>>> you receive it, simply reply to it to complete your
> > >>>>> subscription.
> > >>>>>>>>>>>
> > >>>>>>>>>>> If despite following these instructions, you do not get the
> > >>>>>>>>>>> desired results, please contact my owner at
> > >>>>>>>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner
> > >>>> is a
> > >>>>>>>>>>> lot slower than I am ;-)
> > >>>>>>>>>>>
> > >>>>>>>>>>> --- Enclosed is a copy of the request I received.
> > >>>>>>>>>>>
> > >>>>>>>>>>> Return-Path: <jp...@ra.rockwell.com>
> > >>>>>>>>>>> Received: (qmail 84748 invoked by uid 99); 26 Aug 2013
> > >>>> 13:16:04
> > >>>>>>>> -0000
> > >>>>>>>>>>> Received: from athena.apache.org (HELO athena.apache.org)
> > >>>>>>>>>> (140.211.11.136)
> > >>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
> > >>> 2013
> > >>>>>>>> 13:16:04
> > >>>>>>>>>>> +0000
> > >>>>>>>>>>> X-ASF-Spam-Status: No, hits=-0.0 required=5.0
> > >>>>>>>>>>> tests=SPF_PASS
> > >>>>>>>>>>> X-Spam-Check-By: apache.org
> > >>>>>>>>>>> Received-SPF: pass (athena.apache.org: local policy)
> > >>>>>>>>>>> Received: from [205.175.240.251] (HELO
> > >>>>>> ramilwsmtp01.ra.rockwell.com
> > >>>>>>>> )
> > >>>>>>>>>>> (205.175.240.251)
> > >>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
> > >>> 2013
> > >>>>>>>> 13:16:00
> > >>>>>>>>>>> +0000
> > >>>>>>>>>>> In-Reply-To: <13...@jspwiki.apache.org>
> > >>>>>>>>>>> References: <13...@jspwiki.apache.org>
> > >>>>>>>>>>> Subject: Re: confirm subscribe to user@jspwiki.apache.org
> > >>>>>>>>>>> X-KeepSent: D7D57B0D:E2A05A18-86257BD3:0048D45A;
> > >>>>>>>>>>> type=4; name=$KeepSent
> > >>>>>>>>>>> To:
> > >>>>>>>>>>> user-sc.1377522681.pagaldeamkeafdeakcap-jpimentel=
> > >>>>>>>>>>> ra.rockwell.com@jspwiki.apache.org
> > >>>>>>>>>>>
> > >>>>>>>>>>> X-Mailer: Lotus Notes Release 8.5.2FP2 March 23, 2011
> > >>>>>>>>>>> Message-ID:
> > >>>>>>>>>> <
> > >>>
> >
> OFD7D57B0D.E2A05A18-ON86257BD3.0048D45A-86257BD3.0048D84D@ra.rockwell.com
> > >>>>>>>>>>> From: John Pimentel <jp...@ra.rockwell.com>
> > >>>>>>>>>>> Date: Mon, 26 Aug 2013 08:15:38 -0500
> > >>>>>>>>>>> X-MIMETrack: Serialize by Router on
> > >>>>>>>> RAMilwSMTP01/Milwaukee/RA/Rockwell
> > >>>>>>>>> at
> > >>>>>>>>>>> 08/26/2013 08:15:59
> > >>>>>>>>>>> AM
> > >>>>>>>>>>> MIME-Version: 1.0
> > >>>>>>>>>>> Content-type: multipart/mixed;
> > >>>>>>
> Boundary="0__=09BBF140DFDB52CA8f9e8a93df938690918c09BBF140DFDB52CA"
> > >>>>>>>>>>> Content-Disposition: inline
> > >>>>>>>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
> > >
> >
>
Re: issues unsubscribing user@jspwiki.a.o
Posted by Ramya K Grama <ra...@gmail.com>.
Same here!!
On Wed, Aug 28, 2013 at 11:50 AM, Robert McGovern <ro...@tarasis.net> wrote:
> Same for me.
>
> > On 28 Aug 2013, at 20:34, FRANK FITCH <fr...@oracle.com> wrote:
> >
> > sending unsubscribe email to
> jspwiki-user-unsubscribe@incubator.apache.org resulted in
> >
> > -------------------------------------------------------
> > Hi. This is the qmail-send program at apache.org.
> > I'm afraid I wasn't able to deliver your message to the following
> addresses.
> > This is a permanent error; I've given up. Sorry it didn't work out.
> >
> > <js...@incubator.apache.org>:
> > This mailing list has moved to user at jspwiki.apache.org.
> > -------------------------------------------------------
> >
> > Fair enough. user@jspwiki.apache.org doesn't like commands in the
> subject, doesn't like blank subjects, and passes other emails to the group.
> >
> > Well done, apache. Well done.
> >
> > -Frank
> >
> >> On 8/28/2013 11:24 AM, Claudia Frers wrote:
> >> sorry three attempts and no success in unsubscribing
> >>
> >>
> >> On Wed, Aug 28, 2013 at 7:47 PM, Juan Pablo Santos Rodríguez <
> >> juanpablo.santos@gmail.com> wrote:
> >>
> >>> Hi Claudia,
> >>>
> >>> sending an email to either user@jspwiki.apache.org (as per
> >>> http://jspwiki.apache.org/jspwiki/community/mailing_lists.html) or
> >>> jspwiki-user-unsubscribe@incubator.apache.org should be enough
> >>>
> >>>
> >>> br,
> >>> juan pablo
> >>>
> >>>
> >>> On Wed, Aug 28, 2013 at 7:43 PM, Claudia Frers <
> claudia.frers@gmail.com
> >>>> wrote:
> >>>
> >>>> Hi I am having similar unsubscribe issues as Shine. Clicking on the
> link
> >>>> did not help. What should i do?
> >>>>
> >>>>
> >>>> On Wed, Aug 28, 2013 at 7:15 PM, Juan Pablo Santos Rodríguez <
> >>>> juanpablo.santos@gmail.com> wrote:
> >>>>
> >>>>> Hi Shine,
> >>>>>
> >>>>> (switchting subject to a more descriptive one)
> >>>>>
> >>>>> Could you try with jspwiki-user-unsubscribe@incubator.apache.org?
> >>> There
> >>>>> are
> >>>>> chances you were subscribed to the incubator list, and unsubscribing
> >>>> isn't
> >>>>> looking in the old ML, which redirects to the new one. If that's the
> >>>> case,
> >>>>> would you mind pinging me off-list with the results?
> >>>>>
> >>>>> In any case, seems like an infra issue, if problem persists we'll
> file
> >>> an
> >>>>> issue in order to stop the annoyances
> >>>>>
> >>>>>
> >>>>> br,
> >>>>> juan pablo
> >>>>>
> >>>>>
> >>>>>
> >>>>> On Wed, Aug 28, 2013 at 4:34 PM, Shine Prakash
> >>>>> <sh...@icasework.com>wrote:
> >>>>>
> >>>>>> I end up getting the same message saying that I am not in the
> >>>> subscribed
> >>>>>> list. Painful!
> >>>>>>
> >>>>>>
> >>>>>> Regards,
> >>>>>> Shine Prakash
> >>>>>> Software Consultant
> >>>>>> iCasework Ltd.
> >>>>>> +44 (0) 207 624 4991
> >>>>>> www.icasework.com
> >>>>>> www.usefulfeedback.com
> >>>>>> www.managemyrequests.com
> >>>>>>
> >>>>>>
> >>>>>> ---------- Forwarded message ----------
> >>>>>> From: <us...@jspwiki.apache.org>
> >>>>>> Date: 28 August 2013 15:24
> >>>>>> Subject: Not subscribed to user@jspwiki.apache.org
> >>>>>> To: shine.prakash@icasework.com
> >>>>>>
> >>>>>>
> >>>>>> Hi! This is the ezmlm program. I'm managing the
> >>>>>> user@jspwiki.apache.org mailing list.
> >>>>>>
> >>>>>> I'm working for my owner, who can be reached
> >>>>>> at user-owner@jspwiki.apache.org.
> >>>>>>
> >>>>>> Acknowledgment: The address
> >>>>>>
> >>>>>> shine.prakash@icasework.com
> >>>>>>
> >>>>>> was not on the user mailing list when I received
> >>>>>> your request and is not a subscriber of this list.
> >>>>>>
> >>>>>> If you unsubscribe, but continue to receive mail, you're subscribed
> >>>>>> under a different address than you currently use. Please look at the
> >>>>>> header for:
> >>>>>>
> >>>>>> 'Return-Path: <us...@jspwiki.apache.org>'
> >>>>>>
> >>>>>> The unsubscribe address for this user would be:
> >>>>>> 'user-unsubscribe-user=host.dom@jspwiki.apache.org'.
> >>>>>> Just mail to that address, substituting user=host.dom for the real
> >>>>>> values, reply to the confirmation request, and you should receive a
> >>>>> message
> >>>>>> that you're off the list.
> >>>>>>
> >>>>>> For some mail programs, you need to make the headers visible to
> >>>>>> see the return path:
> >>>>>>
> >>>>>> For Eudora 4.0, click on the "Blah blah ..." button.
> >>>>>> For PMMail, click on "Window->Show entire message/header".
> >>>>>>
> >>>>>> If this still doesn't work, I'm sorry to say that I can't help you.
> >>>>>> Please FORWARD a list message together with a note about what you're
> >>>>>> trying to achieve and a list of addresses that you might be
> >>> subscribed
> >>>>>> under to my owner:
> >>>>>>
> >>>>>> user-owner@jspwiki.apache.org
> >>>>>>
> >>>>>> who will take care of it. My owner is a little bit slower than I am,
> >>>>>> so please be patient.
> >>>>>>
> >>>>>>
> >>>>>> --- Administrative commands for the user list ---
> >>>>>>
> >>>>>> I can handle administrative requests automatically. Please
> >>>>>> do not send them to the list address! Instead, send
> >>>>>> your message to the correct command address:
> >>>>>>
> >>>>>> To subscribe to the list, send a message to:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> To remove your address from the list, send a message to:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> Send mail to the following for info and FAQ for this list:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> Similar addresses exist for the digest list:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> To get messages 123 through 145 (a maximum of 100 per request),
> mail:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> To get an index with subject and author for messages 123-456 , mail:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> They are always returned as sets of 100, max 2000 per request,
> >>>>>> so you'll actually get 100-499.
> >>>>>>
> >>>>>> To receive all messages with the same subject as message 12345,
> >>>>>> send a short message to:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> The messages should contain one line or word of text to avoid being
> >>>>>> treated as sp@m, but I will ignore their content.
> >>>>>> Only the ADDRESS you send to is important.
> >>>>>>
> >>>>>> You can start a subscription for an alternate address,
> >>>>>> for example "john@host.domain", just add a hyphen and your
> >>>>>> address (with '=' instead of '@') after the command word:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> To stop subscription for this address, mail:
> >>>>>> <us...@jspwiki.apache.org>
> >>>>>>
> >>>>>> In both cases, I'll send a confirmation message to that address.
> When
> >>>>>> you receive it, simply reply to it to complete your subscription.
> >>>>>>
> >>>>>> If despite following these instructions, you do not get the
> >>>>>> desired results, please contact my owner at
> >>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner is a
> >>>>>> lot slower than I am ;-)
> >>>>>>
> >>>>>> --- Enclosed is a copy of the request I received.
> >>>>>>
> >>>>>> Return-Path: <sh...@icasework.com>
> >>>>>> Received: (qmail 14894 invoked by uid 99); 28 Aug 2013 14:24:02
> -0000
> >>>>>> Received: from athena.apache.org (HELO athena.apache.org)
> >>>>> (140.211.11.136)
> >>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
> >>> 14:24:02
> >>>>>> +0000
> >>>>>> X-ASF-Spam-Status: No, hits=-9.9 required=10.0
> >>>
> tests=ASF_LIST_OPS,ASF_LIST_UNSUB_A,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,TVD_GET_STOCK,WEIRD_PORT
> >>>>>> X-Spam-Check-By: apache.org
> >>>>>> Received-SPF: unknown (athena.apache.org: error in processing
> during
> >>>>>> lookup
> >>>>>> of shine.prakash@icasework.com)
> >>>>>> Received: from [209.85.214.182] (HELO mail-ob0-f182.google.com)
> >>>>>> (209.85.214.182)
> >>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
> >>> 14:23:58
> >>>>>> +0000
> >>>>>> Received: by mail-ob0-f182.google.com with SMTP id
> >>> wo10so6844227obc.27
> >>>>>> for <us...@jspwiki.apache.org>; Wed, 28 Aug 2013
> >>>>>> 07:23:37 -0700 (PDT)
> >>>>>> X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> >>>>>> d=google.com; s=20120113;
> >>>>> h=x-gm-message-state:mime-version:in-reply-to:references:from:date
> >>>>>> :message-id:subject:to:content-type;
> >>>>>> bh=ixJFRcL2Q0jSLZM1ZNof9EtwHaH4KiesZ5zF3pHBSNc=;
> >>>>>>
> >>>>>> b=panDiGKtqYgtZ18nLf1tAGs8gK5G2cPtTRagm7ery4DYD+CsclNsSHvCCrK2T09SVp
> >>>>>>
> >>>>>>
> LZd44PN4rdaz0Ls0QwOii7OZRnKHpvFng9hDuK4BfkKcZJLo2AIO3suImsteLWtpe0Iv
> >>>>>>
> >>>>>>
> 7/JlUdt5dCc34Zh+rJh0sL6SBUtua0ncTbgRI/jZqK9kc1AjHXx53WZ4OH9mkC1Ew9v7
> >>>>>>
> >>>>>>
> BuKImYEJPm2pJ3i8u2rh9Z/O/cVdCqeDyIAvPaVti+8tANUUJkM45ih/Nw8f1sY5zDSs
> >>>>>>
> >>>>>>
> DwNgF+Mg/aTHh28OcIvxMvgGAsenjmOYBTripxJE0vDGqBZPPvK5MHd1g+Fn4Aarwx+u
> >>>>>> VKdA==
> >>>>>> X-Gm-Message-State:
> >>>
> ALoCoQlb0bM1TZ7T17Vo4wJ7kkIUXadLEO5QNZMf4IbLcigK9cLv3Z3gSlSiemW/S2DnIHsWbRm7
> >>>>>> X-Received: by 10.182.44.134 with SMTP id
> >>>>> e6mr6789662obm.14.1377699816993;
> >>>>>> Wed, 28 Aug 2013 07:23:36 -0700 (PDT)
> >>>>>> MIME-Version: 1.0
> >>>>>> Received: by 10.60.40.41 with HTTP; Wed, 28 Aug 2013 07:23:16 -0700
> >>>> (PDT)
> >>>>>> X-Originating-IP: [81.139.83.190]
> >>>>>> In-Reply-To: <
> >>>
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> >>>>>> References: <13...@jspwiki.apache.org> <
> >>>
> OF0FCD1230.245CC751-ON86257BD3.00498BC2-86257BD3.00514276@ra.rockwell.com>
> >>>>>> <
> CAB3ntOva5D5caVQGzm9+XE6gJ3n6+g-xX7+_WsMCK2Ds4ABs5g@mail.gmail.com
> >>>>
> >>>>>> <
> >>>
> OF69EABD41.A8F0A0AE-ON86257BD4.005AD83C-86257BD4.005F10A8@ra.rockwell.com>
> >>>>>> <
> CAB3ntOs-megCTRzddLxPCmL7Kvk2gpsp_io85+Se4tEFMgE0VQ@mail.gmail.com
> >>>>
> >>>>>> <CAJ0cJdxSfQQm8SLBreqYCew8T5BJ-=icjCX+kaZCWxt2UO5=
> og@mail.gmail.com
> >>>>
> >>>> <
> >>>
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> >>>>>> From: Shine Prakash <sh...@icasework.com>
> >>>>>> Date: Wed, 28 Aug 2013 15:23:16 +0100
> >>>>>> Message-ID: <CAJ0cJdzsMizEpTnuOe8==9wEz-GeR=
> >>>>>> nD7sAiayAfNJ1fpvjcwA@mail.gmail.com>
> >>>>>> Subject: Re: ldaps authentication to jspwiki
> >>>>>> To: user-unsubscribe@jspwiki.apache.org
> >>>>>> Content-Type: multipart/alternative;
> >>>>> boundary=001a11c3235a3321d104e502bcf1
> >>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
> >>>>>>
> >>>>>>
> >>>>>> Regards,
> >>>>>> Shine Prakash
> >>>>>> Software Consultant
> >>>>>> iCasework Ltd.
> >>>>>> +44 (0) 207 624 4991
> >>>>>> www.icasework.com
> >>>>>> www.usefulfeedback.com
> >>>>>> www.managemyrequests.com
> >>>>>>
> >>>>>>
> >>>>>> On 28 August 2013 15:23, Shine Prakash <shine.prakash@icasework.com
> >
> >>>>>> wrote:
> >>>>>>
> >>>>>>>
> >>>>>>> Thanks. I have tried.
> >>>>>>>
> >>>>>>> Regards,
> >>>>>>> Shine Prakash
> >>>>>>> Software Consultant
> >>>>>>> iCasework Ltd.
> >>>>>>> +44 (0) 207 624 4991
> >>>>>>> www.icasework.com
> >>>>>>> www.usefulfeedback.com
> >>>>>>> www.managemyrequests.com
> >>>>>>>
> >>>>>>>
> >>>>>>>> On 28 August 2013 15:18, John Pimentel <jpimentel@ra.rockwell.com
> >
> >>>>>>> wrote:
> >>>>>>>
> >>>>>>>> To remove your address from the list, send a message to:
> >>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> Regards,
> >>>>>>>> John Pimentel
> >>>>>>>>
> >>>>>>>> [image: Description: Description: ralogo_web]
> >>>>>>>> *jpimentel@ra.rockwell.com* <jp...@ra.rockwell.com>
> >>>>>>>> Office (414) 382-3354
> >>>>>>>> *Mobile (262) 501-4785*<
> >>>>>> 2625014785@txt.att.net?subject=RA%20Text%204%20U>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> From: Shine Prakash <sh...@icasework.com>
> >>>>>>>> To: user@jspwiki.apache.org
> >>>>>>>> Date: 08/28/2013 03:35 AM
> >>>>>>>> Subject: Re: ldaps authentication to jspwiki
> >>>>>>>> ------------------------------
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>> HOW do I unsubscribe myself?
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>
> >>>>>>>>> On 27 August 2013 23:34, Jim Willeke <ji...@willeke.com> wrote:
> >>>>>>>>>
> >>>>>>>>> You might try remove the:
> >>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> >>>>>>>>>
> >>>>>>>>> and use (what I am using):
> >>>>>> userBase="ou=people,dc=mydomain,dc=com"
> >>>>>>>>> userSearch="(uid={0})"
> >>>>>>>>> userSubtree="true"
> >>>>>>>>>
> >>>>>>>>> We found the LDAP search to be much more flexible using this
> >>> than
> >>>>> the
> >>>>>>>>> pattern matching.
> >>>>>>>>> You should also be able to get some error from tomcat if it is
> >>>>>> failing.
> >>>>>>>>> You can turn on access logging:
> >>>>> http://tomcat.apache.org/tomcat-7.0-doc/config/host.html#Access_Logs
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> If you drop the LDAPS, You might also get a trace. (Not sure if
> >>>> SUN
> >>>>>> can
> >>>>>>>>> show the ldap requests) but tcdump (or wireshark) will.
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> --
> >>>>>>>>> -jim
> >>>>>>>>> Jim Willeke
> >>>>>>>>>
> >>>>>>>>>
> >>>>>>>>> On Tue, Aug 27, 2013 at 1:18 PM, John Pimentel <
> >>>>>>>> jpimentel@ra.rockwell.com
> >>>>>>>>>> wrote:
> >>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> Hi Jim,
> >>>>>>>>>>
> >>>>>>>>>> Thanks for the response.
> >>>>>>>>>>
> >>>>>>>>>> We are using Sun LDAP. Let me give you an example from my
> >>> user
> >>>>>>>> account.
> >>>>>>>>>> Under my group container
> >>>>>>>>>> cn=UN_CTM_AdminGroup,ou=Control-M,ou=group,dc=mydomain,dc=com
> >>>>>>>>>> I have a attribute called uniqueMember.
> >>>>>>>>>> The value for my account is as follows:
> >>>>>>>>>> uid=JPimen,ou=people,dc=mydomain,dc=com
> >>>>>>>>>>
> >>>>>>>>>> I of course substituted our actual domain for mydomain in this
> >>>>>>>> example,
> >>>>>>>>> but
> >>>>>>>>>> everything else is verbatim.
> >>>>>>>>>>
> >>>>>>>>>> So our groups are nmed by cn but the users are named by uid.
> >>>>>>>>>>
> >>>>>>>>>> Unfortunately our LDAP server will not accept anything other
> >>>> than
> >>>>>>>> ldaps
> >>>>>>>>>> connections, so I am stuck there.
> >>>>>>>>>>
> >>>>>>>>>> Also if you have any recommendation on how to enable security
> >>>>>> specific
> >>>>>>>>>> debug I would appreciate that.
> >>>>>>>>>>
> >>>>>>>>>> I found what appears to be a log level entry in my
> >>>>>> jspwiki.properties
> >>>>>>>>> file.
> >>>>>>>>>> I changed
> >>>>>>>>>> log4j.rootCategory=INFO,FileLog
> >>>>>>>>>> To read
> >>>>>>>>>> log4j.rootCategory=DEBUG,FileLog
> >>>>>>>>>>
> >>>>>>>>>> Now, I do see debug entries in the
> >>>>>> /web1/dyscq/tomcat/logs/jspwiki.log
> >>>>>>>>>> file, but no entries appear when I try (and fail) to log in.
> >>>>>>>>>>
> >>>>>>>>>> Thanks again for any ideas.
> >>>>>>>>>>
> >>>>>>>>>> Regards,
> >>>>>>>>>> John Pimentel
> >>>>>>>>>>
> >>>>>>>>>> (Embedded image moved to file: pic11833.gif)Description:
> >>>>>> Description:
> >>>>>>>>>> ralogo_web
> >>>>>>>>>> jpimentel@ra.rockwell.com
> >>>>>>>>>> Office (414) 382-3354
> >>>>>>>>>> Mobile (262) 501-4785
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> From: Jim Willeke <ji...@willeke.com>
> >>>>>>>>>> To: user@jspwiki.apache.org
> >>>>>>>>>> Date: 08/27/2013 03:40 AM
> >>>>>>>>>> Subject: Re: ldaps authentication to jspwiki
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> I would guess, as you show no information on your LDAP setup,
> >>>> this
> >>>>>>>> line
> >>>>>>>>> is
> >>>>>>>>>> wrong:
> >>>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> >>>>>>>>>>
> >>>>>>>>>> Are your users named by uid or cn?
> >>>>>>>>>> You show roles as named by cn and since you show dc=,dc= I
> >>> would
> >>>>>> guess
> >>>>>>>>> this
> >>>>>>>>>> is AD
> >>>>>>>>>>
> >>>>>>>>>> Also, try using LDAP vs LDAPS to help troubleshoot.
> >>>>>>>>>>
> >>>>>>>>>> -jim
> >>>>>>>>>>
> >>>>>>>>>> --
> >>>>>>>>>> -jim
> >>>>>>>>>> Jim Willeke
> >>>>>>>>>>
> >>>>>>>>>>
> >>>>>>>>>> On Mon, Aug 26, 2013 at 10:47 AM, John Pimentel
> >>>>>>>>>> <jp...@ra.rockwell.com>wrote:
> >>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> Greetings,
> >>>>>>>>>>>
> >>>>>>>>>>> I am having difficulties getting LDAPS authentication to
> >>> work
> >>>>> and
> >>>>>> I
> >>>>>>>>> think
> >>>>>>>>>> I
> >>>>>>>>>>> must be missing some fundamental configuration.
> >>>>>>>>>>>
> >>>>>>>>>>> My current state is that the Site loads and displays content
> >>>>>>>> properly,
> >>>>>>>>>> but
> >>>>>>>>>>> when I go to edit content or I select the log in page
> >>>> directly,
> >>>>> my
> >>>>>>>> LDAP
> >>>>>>>>>>> credentials do not authenticate, and I am repeatedly
> >>> presented
> >>>>>> with
> >>>>>>>> a
> >>>>>>>>>> login
> >>>>>>>>>>> page.
> >>>>>>>>>>>
> >>>>>>>>>>> I used the follwing information as my "How To" for this
> >>>> effort.
> >>>>>> http://www.ecyrd.com/JSPWiki/wiki/WebContainerAuthenticationViaLDAP
> >>>>>>>>>>>
> >>>>>>>>>>> This article is very good but appears to be incomplete.
> >>>>>>>>>>>
> >>>>>>>>>>> I have done the following configuration to get ldaps to
> >>> work:
> >>>>>>>>>>>
> >>>>>>>>>>> 1. I have a previously configured LDAP Server and I stored
> >>>>>> /trusted
> >>>>>>>> the
> >>>>>>>>>>> cert for this Sun LDAP server into the central java keystore
> >>>>> using
> >>>>>>>> this
> >>>>>>>>>>> command:
> >>>>>>>>>>> /usr/lib64/jvm/jre/bin/keytool -import -alias sunldap
> >>>>>>>>>>> -file /web1/sst/dysc/content/CA-RA-v3.crt
> >>>>>>>>>>> -keystore /usr/lib64/jvm/jre/lib/security/cacerts
> >>>>>>>>>>>
> >>>>>>>>>>> 2. I have configured the realm and sorted out all the log
> >>>> errors
> >>>>>>>> using
> >>>>>>>>>> the
> >>>>>>>>>>> following realm in the server.xml file. I believe tomcat is
> >>>>>>>>> successfully
> >>>>>>>>>>> connecting to my LDAP server.
> >>>>>>>>>>>
> >>>>>>>>>>> <Realm className="org.apache.catalina.realm.JNDIRealm"
> >>>>>>>>>>> connectionURL="ldaps://
> >>>>> mkedsintp.ds.mydomain.com:636
> >>>>>> "
> >>>>>>>>>>> connectionName="uid=[bind User
> >>>>>>>>>>> UID],ou=admin,dc=rmydomain,dc=com"
> >>>>>>>>>>> connectionPassword="[Password]"
> >>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> >>>> roleBase="ou=Control-M,ou=group,dc=mydomain,dc=com"
> >>>>>>>>>>> roleSubtree="true"
> >>>>>>>>>>> roleName="cn"
> >>>>>>>>>>> roleSearch="(uniqueMember={0})"
> >>>>>>>>>>> />
> >>>>>>>>>>>
> >>>>>>>>>>> 3. I uncommented the "CONTAINER-MANAGED AUTH" section
> >>>>>>>>>>> from /web1/dyscq/webapps/apps/wiki/WEB-INF/web.xml
> >>>>>>>>>>>
> >>>>>>>>>>> There is a section at the bottom that says "Update JSPWiki
> >>>>>> security
> >>>>>>>>>> policy"
> >>>>>>>>>>> If you would like to set permissions to LDAP groups, you can
> >>>>>> simply
> >>>>>>>> add
> >>>>>>>>>>> policy entries on authorize.Role. The following is an entry
> >>>> for
> >>>>>>>>>> wiki-admin
> >>>>>>>>>>> group (from LDAP).
> >>>>>>>>>>> grant principal com.ecyrd.jspwiki.auth.authorize.Role
> >>>>>> "wiki-admin" {
> >>>>>>>>>>> permission
> >>>> com.ecyrd.jspwiki.auth.permissions.AllPermission
> >>>>>> "*";
> >>>>>>>>>>> };
> >>>>>>>>>>>
> >>>>>>>>>>> I'm thinking it might go into web.xml, but I am not sure of
> >>>>> that..
> >>>>>>>>>>>
> >>>>>>>>>>> this section of the xml looks like this:
> >>>>>>>>>>>
> >>>>>>>>>>> <security-constraint>
> >>>>>>>>>>> <web-resource-collection>
> >>>>>>>>>>> <web-resource-name>Authenticated
> >>>>>> area</web-resource-name>
> >>>>>>>>>>> <url-pattern>/Edit.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/Comment.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/Login.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/NewGroup.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/Rename.jsp</url-pattern>
> >>>>>>>>>>> <url-pattern>/Upload.jsp</url-pattern>
> >>>>>>>>>>> <http-method>DELETE</http-method>
> >>>>>>>>>>> <http-method>GET</http-method>
> >>>>>>>>>>> <http-method>HEAD</http-method>
> >>>>>>>>>>> <http-method>POST</http-method>
> >>>>>>>>>>> <http-method>PUT</http-method>
> >>>>>>>>>>> </web-resource-collection>
> >>>>>>>>>>>
> >>>>>>>>>>> <web-resource-collection>
> >>>>>>>>>>> <web-resource-name>Read-only
> >>>> Area</web-resource-name>
> >>>>>>>>>>> <url-pattern>/attach</url-pattern>
> >>>>>>>>>>> <http-method>DELETE</http-method>
> >>>>>>>>>>> <http-method>POST</http-method>
> >>>>>>>>>>> <http-method>PUT</http-method>
> >>>>>>>>>>> </web-resource-collection>
> >>>>>>>>>>>
> >>>>>>>>>>> <auth-constraint>
> >>>>>>>>>>> <role-name>Admin</role-name>
> >>>>>>>>>>> <role-name>Authenticated</role-name>
> >>>>>>>>>>> </auth-constraint>
> >>>>>>>>>>> <!-- > > > <user-data-constraint>
> >>>>> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> >>>>>>>>>>> </user-data-constraint>
> >>>>>>>>>>> -->
> >>>>>>>>>>>
> >>>>>>>>>>> </security-constraint>
> >>>>>>>>>>>
> >>>>>>>>>>> <login-config>
> >>>>>>>>>>> <auth-method>FORM</auth-method>
> >>>>>>>>>>> <form-login-config>
> >>>>>>>>>>> <form-login-page>/LoginForm.jsp</form-login-page>
> >>>>>>>>>>> <form-error-page>/LoginForm.jsp</form-error-page>
> >>>>>>>>>>> </form-login-config>
> >>>>>>>>>>> </login-config>
> >>>>>>>>>>>
> >>>>>>>>>>> <security-role>
> >>>>>>>>>>> <description>
> >>>>>>>>>>> This logical role includes all authenticated
> >>> users
> >>>>>>>>>>> </description>
> >>>>>>>>>>> <role-name>Authenticated</role-name>
> >>>>>>>>>>> </security-role>
> >>>>>>>>>>>
> >>>>>>>>>>> <security-role>
> >>>>>>>>>>> <description>
> >>>>>>>>>>> This logical role includes all administrative
> >>> users
> >>>>>>>>>>> </description>
> >>>>>>>>>>> <role-name>Admin</role-name>
> >>>>>>>>>>> </security-role>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> Regards,
> >>>>>>>>>>> John Pimentel
> >>>>>>>>>>>
> >>>>>>>>>>> (Embedded image moved to file: pic05844.gif)Description:
> >>>>>>>> Description:
> >>>>>>>>>>> ralogo_web
> >>>>>>>>>>> jpimentel@ra.rockwell.com
> >>>>>>>>>>> Office (414) 382-3354
> >>>>>>>>>>> Mobile (262) 501-4785
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> From: user-help@jspwiki.apache.org
> >>>>>>>>>>> To: jpimentel@ra.rockwell.com
> >>>>>>>>>>> Date: 08/26/2013 08:16 AM
> >>>>>>>>>>> Subject: WELCOME to user@jspwiki.apache.org
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> Hi! This is the ezmlm program. I'm managing the
> >>>>>>>>>>> user@jspwiki.apache.org mailing list.
> >>>>>>>>>>>
> >>>>>>>>>>> I'm working for my owner, who can be reached
> >>>>>>>>>>> at user-owner@jspwiki.apache.org.
> >>>>>>>>>>>
> >>>>>>>>>>> Acknowledgment: I have added the address
> >>>>>>>>>>>
> >>>>>>>>>>> jpimentel@ra.rockwell.com
> >>>>>>>>>>>
> >>>>>>>>>>> to the user mailing list.
> >>>>>>>>>>>
> >>>>>>>>>>> Welcome to user@jspwiki.apache.org!
> >>>>>>>>>>>
> >>>>>>>>>>> Please save this message so that you know the address you
> >>> are
> >>>>>>>>>>> subscribed under, in case you later want to unsubscribe or
> >>>>> change
> >>>>>>>> your
> >>>>>>>>>>> subscription address.
> >>>>>>>>>>>
> >>>>>>>>>>>
> >>>>>>>>>>> --- Administrative commands for the user list ---
> >>>>>>>>>>>
> >>>>>>>>>>> I can handle administrative requests automatically. Please
> >>>>>>>>>>> do not send them to the list address! Instead, send
> >>>>>>>>>>> your message to the correct command address:
> >>>>>>>>>>>
> >>>>>>>>>>> To subscribe to the list, send a message to:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> To remove your address from the list, send a message to:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> Send mail to the following for info and FAQ for this list:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> Similar addresses exist for the digest list:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> To get messages 123 through 145 (a maximum of 100 per
> >>>> request),
> >>>>>>>> mail:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> To get an index with subject and author for messages
> >>> 123-456 ,
> >>>>>> mail:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> They are always returned as sets of 100, max 2000 per
> >>> request,
> >>>>>>>>>>> so you'll actually get 100-499.
> >>>>>>>>>>>
> >>>>>>>>>>> To receive all messages with the same subject as message
> >>>> 12345,
> >>>>>>>>>>> send a short message to:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> The messages should contain one line or word of text to
> >>> avoid
> >>>>>> being
> >>>>>>>>>>> treated as sp@m, but I will ignore their content.
> >>>>>>>>>>> Only the ADDRESS you send to is important.
> >>>>>>>>>>>
> >>>>>>>>>>> You can start a subscription for an alternate address,
> >>>>>>>>>>> for example "john@host.domain", just add a hyphen and your
> >>>>>>>>>>> address (with '=' instead of '@') after the command word:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> To stop subscription for this address, mail:
> >>>>>>>>>>> <us...@jspwiki.apache.org>
> >>>>>>>>>>>
> >>>>>>>>>>> In both cases, I'll send a confirmation message to that
> >>>> address.
> >>>>>>>> When
> >>>>>>>>>>> you receive it, simply reply to it to complete your
> >>>>> subscription.
> >>>>>>>>>>>
> >>>>>>>>>>> If despite following these instructions, you do not get the
> >>>>>>>>>>> desired results, please contact my owner at
> >>>>>>>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner
> >>>> is a
> >>>>>>>>>>> lot slower than I am ;-)
> >>>>>>>>>>>
> >>>>>>>>>>> --- Enclosed is a copy of the request I received.
> >>>>>>>>>>>
> >>>>>>>>>>> Return-Path: <jp...@ra.rockwell.com>
> >>>>>>>>>>> Received: (qmail 84748 invoked by uid 99); 26 Aug 2013
> >>>> 13:16:04
> >>>>>>>> -0000
> >>>>>>>>>>> Received: from athena.apache.org (HELO athena.apache.org)
> >>>>>>>>>> (140.211.11.136)
> >>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
> >>> 2013
> >>>>>>>> 13:16:04
> >>>>>>>>>>> +0000
> >>>>>>>>>>> X-ASF-Spam-Status: No, hits=-0.0 required=5.0
> >>>>>>>>>>> tests=SPF_PASS
> >>>>>>>>>>> X-Spam-Check-By: apache.org
> >>>>>>>>>>> Received-SPF: pass (athena.apache.org: local policy)
> >>>>>>>>>>> Received: from [205.175.240.251] (HELO
> >>>>>> ramilwsmtp01.ra.rockwell.com
> >>>>>>>> )
> >>>>>>>>>>> (205.175.240.251)
> >>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
> >>> 2013
> >>>>>>>> 13:16:00
> >>>>>>>>>>> +0000
> >>>>>>>>>>> In-Reply-To: <13...@jspwiki.apache.org>
> >>>>>>>>>>> References: <13...@jspwiki.apache.org>
> >>>>>>>>>>> Subject: Re: confirm subscribe to user@jspwiki.apache.org
> >>>>>>>>>>> X-KeepSent: D7D57B0D:E2A05A18-86257BD3:0048D45A;
> >>>>>>>>>>> type=4; name=$KeepSent
> >>>>>>>>>>> To:
> >>>>>>>>>>> user-sc.1377522681.pagaldeamkeafdeakcap-jpimentel=
> >>>>>>>>>>> ra.rockwell.com@jspwiki.apache.org
> >>>>>>>>>>>
> >>>>>>>>>>> X-Mailer: Lotus Notes Release 8.5.2FP2 March 23, 2011
> >>>>>>>>>>> Message-ID:
> >>>>>>>>>> <
> >>>
> OFD7D57B0D.E2A05A18-ON86257BD3.0048D45A-86257BD3.0048D84D@ra.rockwell.com
> >>>>>>>>>>> From: John Pimentel <jp...@ra.rockwell.com>
> >>>>>>>>>>> Date: Mon, 26 Aug 2013 08:15:38 -0500
> >>>>>>>>>>> X-MIMETrack: Serialize by Router on
> >>>>>>>> RAMilwSMTP01/Milwaukee/RA/Rockwell
> >>>>>>>>> at
> >>>>>>>>>>> 08/26/2013 08:15:59
> >>>>>>>>>>> AM
> >>>>>>>>>>> MIME-Version: 1.0
> >>>>>>>>>>> Content-type: multipart/mixed;
> >>>>>> Boundary="0__=09BBF140DFDB52CA8f9e8a93df938690918c09BBF140DFDB52CA"
> >>>>>>>>>>> Content-Disposition: inline
> >>>>>>>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
> >
>
Re: issues unsubscribing user@jspwiki.a.o
Posted by Robert McGovern <ro...@tarasis.net>.
Same for me.
> On 28 Aug 2013, at 20:34, FRANK FITCH <fr...@oracle.com> wrote:
>
> sending unsubscribe email to jspwiki-user-unsubscribe@incubator.apache.org resulted in
>
> -------------------------------------------------------
> Hi. This is the qmail-send program at apache.org.
> I'm afraid I wasn't able to deliver your message to the following addresses.
> This is a permanent error; I've given up. Sorry it didn't work out.
>
> <js...@incubator.apache.org>:
> This mailing list has moved to user at jspwiki.apache.org.
> -------------------------------------------------------
>
> Fair enough. user@jspwiki.apache.org doesn't like commands in the subject, doesn't like blank subjects, and passes other emails to the group.
>
> Well done, apache. Well done.
>
> -Frank
>
>> On 8/28/2013 11:24 AM, Claudia Frers wrote:
>> sorry three attempts and no success in unsubscribing
>>
>>
>> On Wed, Aug 28, 2013 at 7:47 PM, Juan Pablo Santos Rodríguez <
>> juanpablo.santos@gmail.com> wrote:
>>
>>> Hi Claudia,
>>>
>>> sending an email to either user@jspwiki.apache.org (as per
>>> http://jspwiki.apache.org/jspwiki/community/mailing_lists.html) or
>>> jspwiki-user-unsubscribe@incubator.apache.org should be enough
>>>
>>>
>>> br,
>>> juan pablo
>>>
>>>
>>> On Wed, Aug 28, 2013 at 7:43 PM, Claudia Frers <claudia.frers@gmail.com
>>>> wrote:
>>>
>>>> Hi I am having similar unsubscribe issues as Shine. Clicking on the link
>>>> did not help. What should i do?
>>>>
>>>>
>>>> On Wed, Aug 28, 2013 at 7:15 PM, Juan Pablo Santos Rodríguez <
>>>> juanpablo.santos@gmail.com> wrote:
>>>>
>>>>> Hi Shine,
>>>>>
>>>>> (switchting subject to a more descriptive one)
>>>>>
>>>>> Could you try with jspwiki-user-unsubscribe@incubator.apache.org?
>>> There
>>>>> are
>>>>> chances you were subscribed to the incubator list, and unsubscribing
>>>> isn't
>>>>> looking in the old ML, which redirects to the new one. If that's the
>>>> case,
>>>>> would you mind pinging me off-list with the results?
>>>>>
>>>>> In any case, seems like an infra issue, if problem persists we'll file
>>> an
>>>>> issue in order to stop the annoyances
>>>>>
>>>>>
>>>>> br,
>>>>> juan pablo
>>>>>
>>>>>
>>>>>
>>>>> On Wed, Aug 28, 2013 at 4:34 PM, Shine Prakash
>>>>> <sh...@icasework.com>wrote:
>>>>>
>>>>>> I end up getting the same message saying that I am not in the
>>>> subscribed
>>>>>> list. Painful!
>>>>>>
>>>>>>
>>>>>> Regards,
>>>>>> Shine Prakash
>>>>>> Software Consultant
>>>>>> iCasework Ltd.
>>>>>> +44 (0) 207 624 4991
>>>>>> www.icasework.com
>>>>>> www.usefulfeedback.com
>>>>>> www.managemyrequests.com
>>>>>>
>>>>>>
>>>>>> ---------- Forwarded message ----------
>>>>>> From: <us...@jspwiki.apache.org>
>>>>>> Date: 28 August 2013 15:24
>>>>>> Subject: Not subscribed to user@jspwiki.apache.org
>>>>>> To: shine.prakash@icasework.com
>>>>>>
>>>>>>
>>>>>> Hi! This is the ezmlm program. I'm managing the
>>>>>> user@jspwiki.apache.org mailing list.
>>>>>>
>>>>>> I'm working for my owner, who can be reached
>>>>>> at user-owner@jspwiki.apache.org.
>>>>>>
>>>>>> Acknowledgment: The address
>>>>>>
>>>>>> shine.prakash@icasework.com
>>>>>>
>>>>>> was not on the user mailing list when I received
>>>>>> your request and is not a subscriber of this list.
>>>>>>
>>>>>> If you unsubscribe, but continue to receive mail, you're subscribed
>>>>>> under a different address than you currently use. Please look at the
>>>>>> header for:
>>>>>>
>>>>>> 'Return-Path: <us...@jspwiki.apache.org>'
>>>>>>
>>>>>> The unsubscribe address for this user would be:
>>>>>> 'user-unsubscribe-user=host.dom@jspwiki.apache.org'.
>>>>>> Just mail to that address, substituting user=host.dom for the real
>>>>>> values, reply to the confirmation request, and you should receive a
>>>>> message
>>>>>> that you're off the list.
>>>>>>
>>>>>> For some mail programs, you need to make the headers visible to
>>>>>> see the return path:
>>>>>>
>>>>>> For Eudora 4.0, click on the "Blah blah ..." button.
>>>>>> For PMMail, click on "Window->Show entire message/header".
>>>>>>
>>>>>> If this still doesn't work, I'm sorry to say that I can't help you.
>>>>>> Please FORWARD a list message together with a note about what you're
>>>>>> trying to achieve and a list of addresses that you might be
>>> subscribed
>>>>>> under to my owner:
>>>>>>
>>>>>> user-owner@jspwiki.apache.org
>>>>>>
>>>>>> who will take care of it. My owner is a little bit slower than I am,
>>>>>> so please be patient.
>>>>>>
>>>>>>
>>>>>> --- Administrative commands for the user list ---
>>>>>>
>>>>>> I can handle administrative requests automatically. Please
>>>>>> do not send them to the list address! Instead, send
>>>>>> your message to the correct command address:
>>>>>>
>>>>>> To subscribe to the list, send a message to:
>>>>>> <us...@jspwiki.apache.org>
>>>>>>
>>>>>> To remove your address from the list, send a message to:
>>>>>> <us...@jspwiki.apache.org>
>>>>>>
>>>>>> Send mail to the following for info and FAQ for this list:
>>>>>> <us...@jspwiki.apache.org>
>>>>>> <us...@jspwiki.apache.org>
>>>>>>
>>>>>> Similar addresses exist for the digest list:
>>>>>> <us...@jspwiki.apache.org>
>>>>>> <us...@jspwiki.apache.org>
>>>>>>
>>>>>> To get messages 123 through 145 (a maximum of 100 per request), mail:
>>>>>> <us...@jspwiki.apache.org>
>>>>>>
>>>>>> To get an index with subject and author for messages 123-456 , mail:
>>>>>> <us...@jspwiki.apache.org>
>>>>>>
>>>>>> They are always returned as sets of 100, max 2000 per request,
>>>>>> so you'll actually get 100-499.
>>>>>>
>>>>>> To receive all messages with the same subject as message 12345,
>>>>>> send a short message to:
>>>>>> <us...@jspwiki.apache.org>
>>>>>>
>>>>>> The messages should contain one line or word of text to avoid being
>>>>>> treated as sp@m, but I will ignore their content.
>>>>>> Only the ADDRESS you send to is important.
>>>>>>
>>>>>> You can start a subscription for an alternate address,
>>>>>> for example "john@host.domain", just add a hyphen and your
>>>>>> address (with '=' instead of '@') after the command word:
>>>>>> <us...@jspwiki.apache.org>
>>>>>>
>>>>>> To stop subscription for this address, mail:
>>>>>> <us...@jspwiki.apache.org>
>>>>>>
>>>>>> In both cases, I'll send a confirmation message to that address. When
>>>>>> you receive it, simply reply to it to complete your subscription.
>>>>>>
>>>>>> If despite following these instructions, you do not get the
>>>>>> desired results, please contact my owner at
>>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner is a
>>>>>> lot slower than I am ;-)
>>>>>>
>>>>>> --- Enclosed is a copy of the request I received.
>>>>>>
>>>>>> Return-Path: <sh...@icasework.com>
>>>>>> Received: (qmail 14894 invoked by uid 99); 28 Aug 2013 14:24:02 -0000
>>>>>> Received: from athena.apache.org (HELO athena.apache.org)
>>>>> (140.211.11.136)
>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
>>> 14:24:02
>>>>>> +0000
>>>>>> X-ASF-Spam-Status: No, hits=-9.9 required=10.0
>>> tests=ASF_LIST_OPS,ASF_LIST_UNSUB_A,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,TVD_GET_STOCK,WEIRD_PORT
>>>>>> X-Spam-Check-By: apache.org
>>>>>> Received-SPF: unknown (athena.apache.org: error in processing during
>>>>>> lookup
>>>>>> of shine.prakash@icasework.com)
>>>>>> Received: from [209.85.214.182] (HELO mail-ob0-f182.google.com)
>>>>>> (209.85.214.182)
>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
>>> 14:23:58
>>>>>> +0000
>>>>>> Received: by mail-ob0-f182.google.com with SMTP id
>>> wo10so6844227obc.27
>>>>>> for <us...@jspwiki.apache.org>; Wed, 28 Aug 2013
>>>>>> 07:23:37 -0700 (PDT)
>>>>>> X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
>>>>>> d=google.com; s=20120113;
>>>>> h=x-gm-message-state:mime-version:in-reply-to:references:from:date
>>>>>> :message-id:subject:to:content-type;
>>>>>> bh=ixJFRcL2Q0jSLZM1ZNof9EtwHaH4KiesZ5zF3pHBSNc=;
>>>>>>
>>>>>> b=panDiGKtqYgtZ18nLf1tAGs8gK5G2cPtTRagm7ery4DYD+CsclNsSHvCCrK2T09SVp
>>>>>>
>>>>>> LZd44PN4rdaz0Ls0QwOii7OZRnKHpvFng9hDuK4BfkKcZJLo2AIO3suImsteLWtpe0Iv
>>>>>>
>>>>>> 7/JlUdt5dCc34Zh+rJh0sL6SBUtua0ncTbgRI/jZqK9kc1AjHXx53WZ4OH9mkC1Ew9v7
>>>>>>
>>>>>> BuKImYEJPm2pJ3i8u2rh9Z/O/cVdCqeDyIAvPaVti+8tANUUJkM45ih/Nw8f1sY5zDSs
>>>>>>
>>>>>> DwNgF+Mg/aTHh28OcIvxMvgGAsenjmOYBTripxJE0vDGqBZPPvK5MHd1g+Fn4Aarwx+u
>>>>>> VKdA==
>>>>>> X-Gm-Message-State:
>>> ALoCoQlb0bM1TZ7T17Vo4wJ7kkIUXadLEO5QNZMf4IbLcigK9cLv3Z3gSlSiemW/S2DnIHsWbRm7
>>>>>> X-Received: by 10.182.44.134 with SMTP id
>>>>> e6mr6789662obm.14.1377699816993;
>>>>>> Wed, 28 Aug 2013 07:23:36 -0700 (PDT)
>>>>>> MIME-Version: 1.0
>>>>>> Received: by 10.60.40.41 with HTTP; Wed, 28 Aug 2013 07:23:16 -0700
>>>> (PDT)
>>>>>> X-Originating-IP: [81.139.83.190]
>>>>>> In-Reply-To: <
>>> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
>>>>>> References: <13...@jspwiki.apache.org> <
>>> OF0FCD1230.245CC751-ON86257BD3.00498BC2-86257BD3.00514276@ra.rockwell.com>
>>>>>> <CAB3ntOva5D5caVQGzm9+XE6gJ3n6+g-xX7+_WsMCK2Ds4ABs5g@mail.gmail.com
>>>>
>>>>>> <
>>> OF69EABD41.A8F0A0AE-ON86257BD4.005AD83C-86257BD4.005F10A8@ra.rockwell.com>
>>>>>> <CAB3ntOs-megCTRzddLxPCmL7Kvk2gpsp_io85+Se4tEFMgE0VQ@mail.gmail.com
>>>>
>>>>>> <CAJ0cJdxSfQQm8SLBreqYCew8T5BJ-=icjCX+kaZCWxt2UO5=og@mail.gmail.com
>>>>
>>>> <
>>> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
>>>>>> From: Shine Prakash <sh...@icasework.com>
>>>>>> Date: Wed, 28 Aug 2013 15:23:16 +0100
>>>>>> Message-ID: <CAJ0cJdzsMizEpTnuOe8==9wEz-GeR=
>>>>>> nD7sAiayAfNJ1fpvjcwA@mail.gmail.com>
>>>>>> Subject: Re: ldaps authentication to jspwiki
>>>>>> To: user-unsubscribe@jspwiki.apache.org
>>>>>> Content-Type: multipart/alternative;
>>>>> boundary=001a11c3235a3321d104e502bcf1
>>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
>>>>>>
>>>>>>
>>>>>> Regards,
>>>>>> Shine Prakash
>>>>>> Software Consultant
>>>>>> iCasework Ltd.
>>>>>> +44 (0) 207 624 4991
>>>>>> www.icasework.com
>>>>>> www.usefulfeedback.com
>>>>>> www.managemyrequests.com
>>>>>>
>>>>>>
>>>>>> On 28 August 2013 15:23, Shine Prakash <sh...@icasework.com>
>>>>>> wrote:
>>>>>>
>>>>>>>
>>>>>>> Thanks. I have tried.
>>>>>>>
>>>>>>> Regards,
>>>>>>> Shine Prakash
>>>>>>> Software Consultant
>>>>>>> iCasework Ltd.
>>>>>>> +44 (0) 207 624 4991
>>>>>>> www.icasework.com
>>>>>>> www.usefulfeedback.com
>>>>>>> www.managemyrequests.com
>>>>>>>
>>>>>>>
>>>>>>>> On 28 August 2013 15:18, John Pimentel <jp...@ra.rockwell.com>
>>>>>>> wrote:
>>>>>>>
>>>>>>>> To remove your address from the list, send a message to:
>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>
>>>>>>>>
>>>>>>>> Regards,
>>>>>>>> John Pimentel
>>>>>>>>
>>>>>>>> [image: Description: Description: ralogo_web]
>>>>>>>> *jpimentel@ra.rockwell.com* <jp...@ra.rockwell.com>
>>>>>>>> Office (414) 382-3354
>>>>>>>> *Mobile (262) 501-4785*<
>>>>>> 2625014785@txt.att.net?subject=RA%20Text%204%20U>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> From: Shine Prakash <sh...@icasework.com>
>>>>>>>> To: user@jspwiki.apache.org
>>>>>>>> Date: 08/28/2013 03:35 AM
>>>>>>>> Subject: Re: ldaps authentication to jspwiki
>>>>>>>> ------------------------------
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>> HOW do I unsubscribe myself?
>>>>>>>>
>>>>>>>>
>>>>>>>>
>>>>>>>>> On 27 August 2013 23:34, Jim Willeke <ji...@willeke.com> wrote:
>>>>>>>>>
>>>>>>>>> You might try remove the:
>>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
>>>>>>>>>
>>>>>>>>> and use (what I am using):
>>>>>> userBase="ou=people,dc=mydomain,dc=com"
>>>>>>>>> userSearch="(uid={0})"
>>>>>>>>> userSubtree="true"
>>>>>>>>>
>>>>>>>>> We found the LDAP search to be much more flexible using this
>>> than
>>>>> the
>>>>>>>>> pattern matching.
>>>>>>>>> You should also be able to get some error from tomcat if it is
>>>>>> failing.
>>>>>>>>> You can turn on access logging:
>>>>> http://tomcat.apache.org/tomcat-7.0-doc/config/host.html#Access_Logs
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> If you drop the LDAPS, You might also get a trace. (Not sure if
>>>> SUN
>>>>>> can
>>>>>>>>> show the ldap requests) but tcdump (or wireshark) will.
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> -jim
>>>>>>>>> Jim Willeke
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> On Tue, Aug 27, 2013 at 1:18 PM, John Pimentel <
>>>>>>>> jpimentel@ra.rockwell.com
>>>>>>>>>> wrote:
>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Hi Jim,
>>>>>>>>>>
>>>>>>>>>> Thanks for the response.
>>>>>>>>>>
>>>>>>>>>> We are using Sun LDAP. Let me give you an example from my
>>> user
>>>>>>>> account.
>>>>>>>>>> Under my group container
>>>>>>>>>> cn=UN_CTM_AdminGroup,ou=Control-M,ou=group,dc=mydomain,dc=com
>>>>>>>>>> I have a attribute called uniqueMember.
>>>>>>>>>> The value for my account is as follows:
>>>>>>>>>> uid=JPimen,ou=people,dc=mydomain,dc=com
>>>>>>>>>>
>>>>>>>>>> I of course substituted our actual domain for mydomain in this
>>>>>>>> example,
>>>>>>>>> but
>>>>>>>>>> everything else is verbatim.
>>>>>>>>>>
>>>>>>>>>> So our groups are nmed by cn but the users are named by uid.
>>>>>>>>>>
>>>>>>>>>> Unfortunately our LDAP server will not accept anything other
>>>> than
>>>>>>>> ldaps
>>>>>>>>>> connections, so I am stuck there.
>>>>>>>>>>
>>>>>>>>>> Also if you have any recommendation on how to enable security
>>>>>> specific
>>>>>>>>>> debug I would appreciate that.
>>>>>>>>>>
>>>>>>>>>> I found what appears to be a log level entry in my
>>>>>> jspwiki.properties
>>>>>>>>> file.
>>>>>>>>>> I changed
>>>>>>>>>> log4j.rootCategory=INFO,FileLog
>>>>>>>>>> To read
>>>>>>>>>> log4j.rootCategory=DEBUG,FileLog
>>>>>>>>>>
>>>>>>>>>> Now, I do see debug entries in the
>>>>>> /web1/dyscq/tomcat/logs/jspwiki.log
>>>>>>>>>> file, but no entries appear when I try (and fail) to log in.
>>>>>>>>>>
>>>>>>>>>> Thanks again for any ideas.
>>>>>>>>>>
>>>>>>>>>> Regards,
>>>>>>>>>> John Pimentel
>>>>>>>>>>
>>>>>>>>>> (Embedded image moved to file: pic11833.gif)Description:
>>>>>> Description:
>>>>>>>>>> ralogo_web
>>>>>>>>>> jpimentel@ra.rockwell.com
>>>>>>>>>> Office (414) 382-3354
>>>>>>>>>> Mobile (262) 501-4785
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> From: Jim Willeke <ji...@willeke.com>
>>>>>>>>>> To: user@jspwiki.apache.org
>>>>>>>>>> Date: 08/27/2013 03:40 AM
>>>>>>>>>> Subject: Re: ldaps authentication to jspwiki
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> I would guess, as you show no information on your LDAP setup,
>>>> this
>>>>>>>> line
>>>>>>>>> is
>>>>>>>>>> wrong:
>>>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
>>>>>>>>>>
>>>>>>>>>> Are your users named by uid or cn?
>>>>>>>>>> You show roles as named by cn and since you show dc=,dc= I
>>> would
>>>>>> guess
>>>>>>>>> this
>>>>>>>>>> is AD
>>>>>>>>>>
>>>>>>>>>> Also, try using LDAP vs LDAPS to help troubleshoot.
>>>>>>>>>>
>>>>>>>>>> -jim
>>>>>>>>>>
>>>>>>>>>> --
>>>>>>>>>> -jim
>>>>>>>>>> Jim Willeke
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> On Mon, Aug 26, 2013 at 10:47 AM, John Pimentel
>>>>>>>>>> <jp...@ra.rockwell.com>wrote:
>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> Greetings,
>>>>>>>>>>>
>>>>>>>>>>> I am having difficulties getting LDAPS authentication to
>>> work
>>>>> and
>>>>>> I
>>>>>>>>> think
>>>>>>>>>> I
>>>>>>>>>>> must be missing some fundamental configuration.
>>>>>>>>>>>
>>>>>>>>>>> My current state is that the Site loads and displays content
>>>>>>>> properly,
>>>>>>>>>> but
>>>>>>>>>>> when I go to edit content or I select the log in page
>>>> directly,
>>>>> my
>>>>>>>> LDAP
>>>>>>>>>>> credentials do not authenticate, and I am repeatedly
>>> presented
>>>>>> with
>>>>>>>> a
>>>>>>>>>> login
>>>>>>>>>>> page.
>>>>>>>>>>>
>>>>>>>>>>> I used the follwing information as my "How To" for this
>>>> effort.
>>>>>> http://www.ecyrd.com/JSPWiki/wiki/WebContainerAuthenticationViaLDAP
>>>>>>>>>>>
>>>>>>>>>>> This article is very good but appears to be incomplete.
>>>>>>>>>>>
>>>>>>>>>>> I have done the following configuration to get ldaps to
>>> work:
>>>>>>>>>>>
>>>>>>>>>>> 1. I have a previously configured LDAP Server and I stored
>>>>>> /trusted
>>>>>>>> the
>>>>>>>>>>> cert for this Sun LDAP server into the central java keystore
>>>>> using
>>>>>>>> this
>>>>>>>>>>> command:
>>>>>>>>>>> /usr/lib64/jvm/jre/bin/keytool -import -alias sunldap
>>>>>>>>>>> -file /web1/sst/dysc/content/CA-RA-v3.crt
>>>>>>>>>>> -keystore /usr/lib64/jvm/jre/lib/security/cacerts
>>>>>>>>>>>
>>>>>>>>>>> 2. I have configured the realm and sorted out all the log
>>>> errors
>>>>>>>> using
>>>>>>>>>> the
>>>>>>>>>>> following realm in the server.xml file. I believe tomcat is
>>>>>>>>> successfully
>>>>>>>>>>> connecting to my LDAP server.
>>>>>>>>>>>
>>>>>>>>>>> <Realm className="org.apache.catalina.realm.JNDIRealm"
>>>>>>>>>>> connectionURL="ldaps://
>>>>> mkedsintp.ds.mydomain.com:636
>>>>>> "
>>>>>>>>>>> connectionName="uid=[bind User
>>>>>>>>>>> UID],ou=admin,dc=rmydomain,dc=com"
>>>>>>>>>>> connectionPassword="[Password]"
>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
>>>> roleBase="ou=Control-M,ou=group,dc=mydomain,dc=com"
>>>>>>>>>>> roleSubtree="true"
>>>>>>>>>>> roleName="cn"
>>>>>>>>>>> roleSearch="(uniqueMember={0})"
>>>>>>>>>>> />
>>>>>>>>>>>
>>>>>>>>>>> 3. I uncommented the "CONTAINER-MANAGED AUTH" section
>>>>>>>>>>> from /web1/dyscq/webapps/apps/wiki/WEB-INF/web.xml
>>>>>>>>>>>
>>>>>>>>>>> There is a section at the bottom that says "Update JSPWiki
>>>>>> security
>>>>>>>>>> policy"
>>>>>>>>>>> If you would like to set permissions to LDAP groups, you can
>>>>>> simply
>>>>>>>> add
>>>>>>>>>>> policy entries on authorize.Role. The following is an entry
>>>> for
>>>>>>>>>> wiki-admin
>>>>>>>>>>> group (from LDAP).
>>>>>>>>>>> grant principal com.ecyrd.jspwiki.auth.authorize.Role
>>>>>> "wiki-admin" {
>>>>>>>>>>> permission
>>>> com.ecyrd.jspwiki.auth.permissions.AllPermission
>>>>>> "*";
>>>>>>>>>>> };
>>>>>>>>>>>
>>>>>>>>>>> I'm thinking it might go into web.xml, but I am not sure of
>>>>> that..
>>>>>>>>>>>
>>>>>>>>>>> this section of the xml looks like this:
>>>>>>>>>>>
>>>>>>>>>>> <security-constraint>
>>>>>>>>>>> <web-resource-collection>
>>>>>>>>>>> <web-resource-name>Authenticated
>>>>>> area</web-resource-name>
>>>>>>>>>>> <url-pattern>/Edit.jsp</url-pattern>
>>>>>>>>>>> <url-pattern>/Comment.jsp</url-pattern>
>>>>>>>>>>> <url-pattern>/Login.jsp</url-pattern>
>>>>>>>>>>> <url-pattern>/NewGroup.jsp</url-pattern>
>>>>>>>>>>> <url-pattern>/Rename.jsp</url-pattern>
>>>>>>>>>>> <url-pattern>/Upload.jsp</url-pattern>
>>>>>>>>>>> <http-method>DELETE</http-method>
>>>>>>>>>>> <http-method>GET</http-method>
>>>>>>>>>>> <http-method>HEAD</http-method>
>>>>>>>>>>> <http-method>POST</http-method>
>>>>>>>>>>> <http-method>PUT</http-method>
>>>>>>>>>>> </web-resource-collection>
>>>>>>>>>>>
>>>>>>>>>>> <web-resource-collection>
>>>>>>>>>>> <web-resource-name>Read-only
>>>> Area</web-resource-name>
>>>>>>>>>>> <url-pattern>/attach</url-pattern>
>>>>>>>>>>> <http-method>DELETE</http-method>
>>>>>>>>>>> <http-method>POST</http-method>
>>>>>>>>>>> <http-method>PUT</http-method>
>>>>>>>>>>> </web-resource-collection>
>>>>>>>>>>>
>>>>>>>>>>> <auth-constraint>
>>>>>>>>>>> <role-name>Admin</role-name>
>>>>>>>>>>> <role-name>Authenticated</role-name>
>>>>>>>>>>> </auth-constraint>
>>>>>>>>>>> <!-- > > > <user-data-constraint>
>>>>> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
>>>>>>>>>>> </user-data-constraint>
>>>>>>>>>>> -->
>>>>>>>>>>>
>>>>>>>>>>> </security-constraint>
>>>>>>>>>>>
>>>>>>>>>>> <login-config>
>>>>>>>>>>> <auth-method>FORM</auth-method>
>>>>>>>>>>> <form-login-config>
>>>>>>>>>>> <form-login-page>/LoginForm.jsp</form-login-page>
>>>>>>>>>>> <form-error-page>/LoginForm.jsp</form-error-page>
>>>>>>>>>>> </form-login-config>
>>>>>>>>>>> </login-config>
>>>>>>>>>>>
>>>>>>>>>>> <security-role>
>>>>>>>>>>> <description>
>>>>>>>>>>> This logical role includes all authenticated
>>> users
>>>>>>>>>>> </description>
>>>>>>>>>>> <role-name>Authenticated</role-name>
>>>>>>>>>>> </security-role>
>>>>>>>>>>>
>>>>>>>>>>> <security-role>
>>>>>>>>>>> <description>
>>>>>>>>>>> This logical role includes all administrative
>>> users
>>>>>>>>>>> </description>
>>>>>>>>>>> <role-name>Admin</role-name>
>>>>>>>>>>> </security-role>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> Regards,
>>>>>>>>>>> John Pimentel
>>>>>>>>>>>
>>>>>>>>>>> (Embedded image moved to file: pic05844.gif)Description:
>>>>>>>> Description:
>>>>>>>>>>> ralogo_web
>>>>>>>>>>> jpimentel@ra.rockwell.com
>>>>>>>>>>> Office (414) 382-3354
>>>>>>>>>>> Mobile (262) 501-4785
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> From: user-help@jspwiki.apache.org
>>>>>>>>>>> To: jpimentel@ra.rockwell.com
>>>>>>>>>>> Date: 08/26/2013 08:16 AM
>>>>>>>>>>> Subject: WELCOME to user@jspwiki.apache.org
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> Hi! This is the ezmlm program. I'm managing the
>>>>>>>>>>> user@jspwiki.apache.org mailing list.
>>>>>>>>>>>
>>>>>>>>>>> I'm working for my owner, who can be reached
>>>>>>>>>>> at user-owner@jspwiki.apache.org.
>>>>>>>>>>>
>>>>>>>>>>> Acknowledgment: I have added the address
>>>>>>>>>>>
>>>>>>>>>>> jpimentel@ra.rockwell.com
>>>>>>>>>>>
>>>>>>>>>>> to the user mailing list.
>>>>>>>>>>>
>>>>>>>>>>> Welcome to user@jspwiki.apache.org!
>>>>>>>>>>>
>>>>>>>>>>> Please save this message so that you know the address you
>>> are
>>>>>>>>>>> subscribed under, in case you later want to unsubscribe or
>>>>> change
>>>>>>>> your
>>>>>>>>>>> subscription address.
>>>>>>>>>>>
>>>>>>>>>>>
>>>>>>>>>>> --- Administrative commands for the user list ---
>>>>>>>>>>>
>>>>>>>>>>> I can handle administrative requests automatically. Please
>>>>>>>>>>> do not send them to the list address! Instead, send
>>>>>>>>>>> your message to the correct command address:
>>>>>>>>>>>
>>>>>>>>>>> To subscribe to the list, send a message to:
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>>
>>>>>>>>>>> To remove your address from the list, send a message to:
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>>
>>>>>>>>>>> Send mail to the following for info and FAQ for this list:
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>>
>>>>>>>>>>> Similar addresses exist for the digest list:
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>>
>>>>>>>>>>> To get messages 123 through 145 (a maximum of 100 per
>>>> request),
>>>>>>>> mail:
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>>
>>>>>>>>>>> To get an index with subject and author for messages
>>> 123-456 ,
>>>>>> mail:
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>>
>>>>>>>>>>> They are always returned as sets of 100, max 2000 per
>>> request,
>>>>>>>>>>> so you'll actually get 100-499.
>>>>>>>>>>>
>>>>>>>>>>> To receive all messages with the same subject as message
>>>> 12345,
>>>>>>>>>>> send a short message to:
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>>
>>>>>>>>>>> The messages should contain one line or word of text to
>>> avoid
>>>>>> being
>>>>>>>>>>> treated as sp@m, but I will ignore their content.
>>>>>>>>>>> Only the ADDRESS you send to is important.
>>>>>>>>>>>
>>>>>>>>>>> You can start a subscription for an alternate address,
>>>>>>>>>>> for example "john@host.domain", just add a hyphen and your
>>>>>>>>>>> address (with '=' instead of '@') after the command word:
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>>
>>>>>>>>>>> To stop subscription for this address, mail:
>>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>>
>>>>>>>>>>> In both cases, I'll send a confirmation message to that
>>>> address.
>>>>>>>> When
>>>>>>>>>>> you receive it, simply reply to it to complete your
>>>>> subscription.
>>>>>>>>>>>
>>>>>>>>>>> If despite following these instructions, you do not get the
>>>>>>>>>>> desired results, please contact my owner at
>>>>>>>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner
>>>> is a
>>>>>>>>>>> lot slower than I am ;-)
>>>>>>>>>>>
>>>>>>>>>>> --- Enclosed is a copy of the request I received.
>>>>>>>>>>>
>>>>>>>>>>> Return-Path: <jp...@ra.rockwell.com>
>>>>>>>>>>> Received: (qmail 84748 invoked by uid 99); 26 Aug 2013
>>>> 13:16:04
>>>>>>>> -0000
>>>>>>>>>>> Received: from athena.apache.org (HELO athena.apache.org)
>>>>>>>>>> (140.211.11.136)
>>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
>>> 2013
>>>>>>>> 13:16:04
>>>>>>>>>>> +0000
>>>>>>>>>>> X-ASF-Spam-Status: No, hits=-0.0 required=5.0
>>>>>>>>>>> tests=SPF_PASS
>>>>>>>>>>> X-Spam-Check-By: apache.org
>>>>>>>>>>> Received-SPF: pass (athena.apache.org: local policy)
>>>>>>>>>>> Received: from [205.175.240.251] (HELO
>>>>>> ramilwsmtp01.ra.rockwell.com
>>>>>>>> )
>>>>>>>>>>> (205.175.240.251)
>>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
>>> 2013
>>>>>>>> 13:16:00
>>>>>>>>>>> +0000
>>>>>>>>>>> In-Reply-To: <13...@jspwiki.apache.org>
>>>>>>>>>>> References: <13...@jspwiki.apache.org>
>>>>>>>>>>> Subject: Re: confirm subscribe to user@jspwiki.apache.org
>>>>>>>>>>> X-KeepSent: D7D57B0D:E2A05A18-86257BD3:0048D45A;
>>>>>>>>>>> type=4; name=$KeepSent
>>>>>>>>>>> To:
>>>>>>>>>>> user-sc.1377522681.pagaldeamkeafdeakcap-jpimentel=
>>>>>>>>>>> ra.rockwell.com@jspwiki.apache.org
>>>>>>>>>>>
>>>>>>>>>>> X-Mailer: Lotus Notes Release 8.5.2FP2 March 23, 2011
>>>>>>>>>>> Message-ID:
>>>>>>>>>> <
>>> OFD7D57B0D.E2A05A18-ON86257BD3.0048D45A-86257BD3.0048D84D@ra.rockwell.com
>>>>>>>>>>> From: John Pimentel <jp...@ra.rockwell.com>
>>>>>>>>>>> Date: Mon, 26 Aug 2013 08:15:38 -0500
>>>>>>>>>>> X-MIMETrack: Serialize by Router on
>>>>>>>> RAMilwSMTP01/Milwaukee/RA/Rockwell
>>>>>>>>> at
>>>>>>>>>>> 08/26/2013 08:15:59
>>>>>>>>>>> AM
>>>>>>>>>>> MIME-Version: 1.0
>>>>>>>>>>> Content-type: multipart/mixed;
>>>>>> Boundary="0__=09BBF140DFDB52CA8f9e8a93df938690918c09BBF140DFDB52CA"
>>>>>>>>>>> Content-Disposition: inline
>>>>>>>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
>
Re: issues unsubscribing user@jspwiki.a.o
Posted by FRANK FITCH <fr...@oracle.com>.
sending unsubscribe email to
jspwiki-user-unsubscribe@incubator.apache.org resulted in
-------------------------------------------------------
Hi. This is the qmail-send program at apache.org.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<js...@incubator.apache.org>:
This mailing list has moved to user at jspwiki.apache.org.
-------------------------------------------------------
Fair enough. user@jspwiki.apache.org doesn't like commands in the
subject, doesn't like blank subjects, and passes other emails to the group.
Well done, apache. Well done.
-Frank
On 8/28/2013 11:24 AM, Claudia Frers wrote:
> sorry three attempts and no success in unsubscribing
>
>
> On Wed, Aug 28, 2013 at 7:47 PM, Juan Pablo Santos Rodríguez <
> juanpablo.santos@gmail.com> wrote:
>
>> Hi Claudia,
>>
>> sending an email to either user@jspwiki.apache.org (as per
>> http://jspwiki.apache.org/jspwiki/community/mailing_lists.html) or
>> jspwiki-user-unsubscribe@incubator.apache.org should be enough
>>
>>
>> br,
>> juan pablo
>>
>>
>> On Wed, Aug 28, 2013 at 7:43 PM, Claudia Frers <claudia.frers@gmail.com
>>> wrote:
>>
>>> Hi I am having similar unsubscribe issues as Shine. Clicking on the link
>>> did not help. What should i do?
>>>
>>>
>>> On Wed, Aug 28, 2013 at 7:15 PM, Juan Pablo Santos Rodríguez <
>>> juanpablo.santos@gmail.com> wrote:
>>>
>>>> Hi Shine,
>>>>
>>>> (switchting subject to a more descriptive one)
>>>>
>>>> Could you try with jspwiki-user-unsubscribe@incubator.apache.org?
>> There
>>>> are
>>>> chances you were subscribed to the incubator list, and unsubscribing
>>> isn't
>>>> looking in the old ML, which redirects to the new one. If that's the
>>> case,
>>>> would you mind pinging me off-list with the results?
>>>>
>>>> In any case, seems like an infra issue, if problem persists we'll file
>> an
>>>> issue in order to stop the annoyances
>>>>
>>>>
>>>> br,
>>>> juan pablo
>>>>
>>>>
>>>>
>>>> On Wed, Aug 28, 2013 at 4:34 PM, Shine Prakash
>>>> <sh...@icasework.com>wrote:
>>>>
>>>>> I end up getting the same message saying that I am not in the
>>> subscribed
>>>>> list. Painful!
>>>>>
>>>>>
>>>>> Regards,
>>>>> Shine Prakash
>>>>> Software Consultant
>>>>> iCasework Ltd.
>>>>> +44 (0) 207 624 4991
>>>>> www.icasework.com
>>>>> www.usefulfeedback.com
>>>>> www.managemyrequests.com
>>>>>
>>>>>
>>>>> ---------- Forwarded message ----------
>>>>> From: <us...@jspwiki.apache.org>
>>>>> Date: 28 August 2013 15:24
>>>>> Subject: Not subscribed to user@jspwiki.apache.org
>>>>> To: shine.prakash@icasework.com
>>>>>
>>>>>
>>>>> Hi! This is the ezmlm program. I'm managing the
>>>>> user@jspwiki.apache.org mailing list.
>>>>>
>>>>> I'm working for my owner, who can be reached
>>>>> at user-owner@jspwiki.apache.org.
>>>>>
>>>>> Acknowledgment: The address
>>>>>
>>>>> shine.prakash@icasework.com
>>>>>
>>>>> was not on the user mailing list when I received
>>>>> your request and is not a subscriber of this list.
>>>>>
>>>>> If you unsubscribe, but continue to receive mail, you're subscribed
>>>>> under a different address than you currently use. Please look at the
>>>>> header for:
>>>>>
>>>>> 'Return-Path: <us...@jspwiki.apache.org>'
>>>>>
>>>>> The unsubscribe address for this user would be:
>>>>> 'user-unsubscribe-user=host.dom@jspwiki.apache.org'.
>>>>> Just mail to that address, substituting user=host.dom for the real
>>>>> values, reply to the confirmation request, and you should receive a
>>>> message
>>>>> that you're off the list.
>>>>>
>>>>> For some mail programs, you need to make the headers visible to
>>>>> see the return path:
>>>>>
>>>>> For Eudora 4.0, click on the "Blah blah ..." button.
>>>>> For PMMail, click on "Window->Show entire message/header".
>>>>>
>>>>> If this still doesn't work, I'm sorry to say that I can't help you.
>>>>> Please FORWARD a list message together with a note about what you're
>>>>> trying to achieve and a list of addresses that you might be
>> subscribed
>>>>> under to my owner:
>>>>>
>>>>> user-owner@jspwiki.apache.org
>>>>>
>>>>> who will take care of it. My owner is a little bit slower than I am,
>>>>> so please be patient.
>>>>>
>>>>>
>>>>> --- Administrative commands for the user list ---
>>>>>
>>>>> I can handle administrative requests automatically. Please
>>>>> do not send them to the list address! Instead, send
>>>>> your message to the correct command address:
>>>>>
>>>>> To subscribe to the list, send a message to:
>>>>> <us...@jspwiki.apache.org>
>>>>>
>>>>> To remove your address from the list, send a message to:
>>>>> <us...@jspwiki.apache.org>
>>>>>
>>>>> Send mail to the following for info and FAQ for this list:
>>>>> <us...@jspwiki.apache.org>
>>>>> <us...@jspwiki.apache.org>
>>>>>
>>>>> Similar addresses exist for the digest list:
>>>>> <us...@jspwiki.apache.org>
>>>>> <us...@jspwiki.apache.org>
>>>>>
>>>>> To get messages 123 through 145 (a maximum of 100 per request), mail:
>>>>> <us...@jspwiki.apache.org>
>>>>>
>>>>> To get an index with subject and author for messages 123-456 , mail:
>>>>> <us...@jspwiki.apache.org>
>>>>>
>>>>> They are always returned as sets of 100, max 2000 per request,
>>>>> so you'll actually get 100-499.
>>>>>
>>>>> To receive all messages with the same subject as message 12345,
>>>>> send a short message to:
>>>>> <us...@jspwiki.apache.org>
>>>>>
>>>>> The messages should contain one line or word of text to avoid being
>>>>> treated as sp@m, but I will ignore their content.
>>>>> Only the ADDRESS you send to is important.
>>>>>
>>>>> You can start a subscription for an alternate address,
>>>>> for example "john@host.domain", just add a hyphen and your
>>>>> address (with '=' instead of '@') after the command word:
>>>>> <us...@jspwiki.apache.org>
>>>>>
>>>>> To stop subscription for this address, mail:
>>>>> <us...@jspwiki.apache.org>
>>>>>
>>>>> In both cases, I'll send a confirmation message to that address. When
>>>>> you receive it, simply reply to it to complete your subscription.
>>>>>
>>>>> If despite following these instructions, you do not get the
>>>>> desired results, please contact my owner at
>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner is a
>>>>> lot slower than I am ;-)
>>>>>
>>>>> --- Enclosed is a copy of the request I received.
>>>>>
>>>>> Return-Path: <sh...@icasework.com>
>>>>> Received: (qmail 14894 invoked by uid 99); 28 Aug 2013 14:24:02 -0000
>>>>> Received: from athena.apache.org (HELO athena.apache.org)
>>>> (140.211.11.136)
>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
>> 14:24:02
>>>>> +0000
>>>>> X-ASF-Spam-Status: No, hits=-9.9 required=10.0
>>>>>
>>>>>
>>>>>
>>>>
>>>
>> tests=ASF_LIST_OPS,ASF_LIST_UNSUB_A,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,TVD_GET_STOCK,WEIRD_PORT
>>>>> X-Spam-Check-By: apache.org
>>>>> Received-SPF: unknown (athena.apache.org: error in processing during
>>>>> lookup
>>>>> of shine.prakash@icasework.com)
>>>>> Received: from [209.85.214.182] (HELO mail-ob0-f182.google.com)
>>>>> (209.85.214.182)
>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
>> 14:23:58
>>>>> +0000
>>>>> Received: by mail-ob0-f182.google.com with SMTP id
>> wo10so6844227obc.27
>>>>> for <us...@jspwiki.apache.org>; Wed, 28 Aug 2013
>>>>> 07:23:37 -0700 (PDT)
>>>>> X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
>>>>> d=google.com; s=20120113;
>>>>>
>>>> h=x-gm-message-state:mime-version:in-reply-to:references:from:date
>>>>> :message-id:subject:to:content-type;
>>>>> bh=ixJFRcL2Q0jSLZM1ZNof9EtwHaH4KiesZ5zF3pHBSNc=;
>>>>>
>>>>> b=panDiGKtqYgtZ18nLf1tAGs8gK5G2cPtTRagm7ery4DYD+CsclNsSHvCCrK2T09SVp
>>>>>
>>>>> LZd44PN4rdaz0Ls0QwOii7OZRnKHpvFng9hDuK4BfkKcZJLo2AIO3suImsteLWtpe0Iv
>>>>>
>>>>> 7/JlUdt5dCc34Zh+rJh0sL6SBUtua0ncTbgRI/jZqK9kc1AjHXx53WZ4OH9mkC1Ew9v7
>>>>>
>>>>> BuKImYEJPm2pJ3i8u2rh9Z/O/cVdCqeDyIAvPaVti+8tANUUJkM45ih/Nw8f1sY5zDSs
>>>>>
>>>>> DwNgF+Mg/aTHh28OcIvxMvgGAsenjmOYBTripxJE0vDGqBZPPvK5MHd1g+Fn4Aarwx+u
>>>>> VKdA==
>>>>> X-Gm-Message-State:
>>>>>
>>>>>
>>>>
>>>
>> ALoCoQlb0bM1TZ7T17Vo4wJ7kkIUXadLEO5QNZMf4IbLcigK9cLv3Z3gSlSiemW/S2DnIHsWbRm7
>>>>> X-Received: by 10.182.44.134 with SMTP id
>>>> e6mr6789662obm.14.1377699816993;
>>>>> Wed, 28 Aug 2013 07:23:36 -0700 (PDT)
>>>>> MIME-Version: 1.0
>>>>> Received: by 10.60.40.41 with HTTP; Wed, 28 Aug 2013 07:23:16 -0700
>>> (PDT)
>>>>> X-Originating-IP: [81.139.83.190]
>>>>> In-Reply-To: <
>>>>>
>>>>
>>>
>> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
>>>>> References: <13...@jspwiki.apache.org> <
>>>>>
>>>>
>>>
>> OF0FCD1230.245CC751-ON86257BD3.00498BC2-86257BD3.00514276@ra.rockwell.com>
>>>>> <CAB3ntOva5D5caVQGzm9+XE6gJ3n6+g-xX7+_WsMCK2Ds4ABs5g@mail.gmail.com
>>>
>>>>> <
>>>>>
>>>>
>>>
>> OF69EABD41.A8F0A0AE-ON86257BD4.005AD83C-86257BD4.005F10A8@ra.rockwell.com>
>>>>> <CAB3ntOs-megCTRzddLxPCmL7Kvk2gpsp_io85+Se4tEFMgE0VQ@mail.gmail.com
>>>
>>>>> <CAJ0cJdxSfQQm8SLBreqYCew8T5BJ-=icjCX+kaZCWxt2UO5=og@mail.gmail.com
>>>
>>> <
>>>>>
>>>>
>>>
>> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
>>>>> From: Shine Prakash <sh...@icasework.com>
>>>>> Date: Wed, 28 Aug 2013 15:23:16 +0100
>>>>> Message-ID: <CAJ0cJdzsMizEpTnuOe8==9wEz-GeR=
>>>>> nD7sAiayAfNJ1fpvjcwA@mail.gmail.com>
>>>>> Subject: Re: ldaps authentication to jspwiki
>>>>> To: user-unsubscribe@jspwiki.apache.org
>>>>> Content-Type: multipart/alternative;
>>>> boundary=001a11c3235a3321d104e502bcf1
>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
>>>>>
>>>>>
>>>>> Regards,
>>>>> Shine Prakash
>>>>> Software Consultant
>>>>> iCasework Ltd.
>>>>> +44 (0) 207 624 4991
>>>>> www.icasework.com
>>>>> www.usefulfeedback.com
>>>>> www.managemyrequests.com
>>>>>
>>>>>
>>>>> On 28 August 2013 15:23, Shine Prakash <sh...@icasework.com>
>>>>> wrote:
>>>>>
>>>>>>
>>>>>> Thanks. I have tried.
>>>>>>
>>>>>> Regards,
>>>>>> Shine Prakash
>>>>>> Software Consultant
>>>>>> iCasework Ltd.
>>>>>> +44 (0) 207 624 4991
>>>>>> www.icasework.com
>>>>>> www.usefulfeedback.com
>>>>>> www.managemyrequests.com
>>>>>>
>>>>>>
>>>>>> On 28 August 2013 15:18, John Pimentel <jp...@ra.rockwell.com>
>>>>> wrote:
>>>>>>
>>>>>>> To remove your address from the list, send a message to:
>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>
>>>>>>>
>>>>>>> Regards,
>>>>>>> John Pimentel
>>>>>>>
>>>>>>> [image: Description: Description: ralogo_web]
>>>>>>> *jpimentel@ra.rockwell.com* <jp...@ra.rockwell.com>
>>>>>>> Office (414) 382-3354
>>>>>>> *Mobile (262) 501-4785*<
>>>>> 2625014785@txt.att.net?subject=RA%20Text%204%20U>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> From: Shine Prakash <sh...@icasework.com>
>>>>>>> To: user@jspwiki.apache.org
>>>>>>> Date: 08/28/2013 03:35 AM
>>>>>>> Subject: Re: ldaps authentication to jspwiki
>>>>>>> ------------------------------
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> HOW do I unsubscribe myself?
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> On 27 August 2013 23:34, Jim Willeke <ji...@willeke.com> wrote:
>>>>>>>
>>>>>>>> You might try remove the:
>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
>>>>>>>>
>>>>>>>> and use (what I am using):
>>>>>>>>
>>>>>>>>
>>>>> userBase="ou=people,dc=mydomain,dc=com"
>>>>>>>> userSearch="(uid={0})"
>>>>>>>> userSubtree="true"
>>>>>>>>
>>>>>>>> We found the LDAP search to be much more flexible using this
>> than
>>>> the
>>>>>>>> pattern matching.
>>>>>>>> You should also be able to get some error from tomcat if it is
>>>>> failing.
>>>>>>>> You can turn on access logging:
>>>>>>>>
>>>> http://tomcat.apache.org/tomcat-7.0-doc/config/host.html#Access_Logs
>>>>>>>>
>>>>>>>>
>>>>>>>> If you drop the LDAPS, You might also get a trace. (Not sure if
>>> SUN
>>>>> can
>>>>>>>> show the ldap requests) but tcdump (or wireshark) will.
>>>>>>>>
>>>>>>>>
>>>>>>>> --
>>>>>>>> -jim
>>>>>>>> Jim Willeke
>>>>>>>>
>>>>>>>>
>>>>>>>> On Tue, Aug 27, 2013 at 1:18 PM, John Pimentel <
>>>>>>> jpimentel@ra.rockwell.com
>>>>>>>>> wrote:
>>>>>>>>
>>>>>>>>>
>>>>>>>>> Hi Jim,
>>>>>>>>>
>>>>>>>>> Thanks for the response.
>>>>>>>>>
>>>>>>>>> We are using Sun LDAP. Let me give you an example from my
>> user
>>>>>>> account.
>>>>>>>>> Under my group container
>>>>>>>>> cn=UN_CTM_AdminGroup,ou=Control-M,ou=group,dc=mydomain,dc=com
>>>>>>>>> I have a attribute called uniqueMember.
>>>>>>>>> The value for my account is as follows:
>>>>>>>>> uid=JPimen,ou=people,dc=mydomain,dc=com
>>>>>>>>>
>>>>>>>>> I of course substituted our actual domain for mydomain in this
>>>>>>> example,
>>>>>>>> but
>>>>>>>>> everything else is verbatim.
>>>>>>>>>
>>>>>>>>> So our groups are nmed by cn but the users are named by uid.
>>>>>>>>>
>>>>>>>>> Unfortunately our LDAP server will not accept anything other
>>> than
>>>>>>> ldaps
>>>>>>>>> connections, so I am stuck there.
>>>>>>>>>
>>>>>>>>> Also if you have any recommendation on how to enable security
>>>>> specific
>>>>>>>>> debug I would appreciate that.
>>>>>>>>>
>>>>>>>>> I found what appears to be a log level entry in my
>>>>> jspwiki.properties
>>>>>>>> file.
>>>>>>>>> I changed
>>>>>>>>> log4j.rootCategory=INFO,FileLog
>>>>>>>>> To read
>>>>>>>>> log4j.rootCategory=DEBUG,FileLog
>>>>>>>>>
>>>>>>>>> Now, I do see debug entries in the
>>>>> /web1/dyscq/tomcat/logs/jspwiki.log
>>>>>>>>> file, but no entries appear when I try (and fail) to log in.
>>>>>>>>>
>>>>>>>>> Thanks again for any ideas.
>>>>>>>>>
>>>>>>>>> Regards,
>>>>>>>>> John Pimentel
>>>>>>>>>
>>>>>>>>> (Embedded image moved to file: pic11833.gif)Description:
>>>>> Description:
>>>>>>>>> ralogo_web
>>>>>>>>> jpimentel@ra.rockwell.com
>>>>>>>>> Office (414) 382-3354
>>>>>>>>> Mobile (262) 501-4785
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> From: Jim Willeke <ji...@willeke.com>
>>>>>>>>> To: user@jspwiki.apache.org
>>>>>>>>> Date: 08/27/2013 03:40 AM
>>>>>>>>> Subject: Re: ldaps authentication to jspwiki
>>>>>>>>>
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> I would guess, as you show no information on your LDAP setup,
>>> this
>>>>>>> line
>>>>>>>> is
>>>>>>>>> wrong:
>>>>>>>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
>>>>>>>>>
>>>>>>>>> Are your users named by uid or cn?
>>>>>>>>> You show roles as named by cn and since you show dc=,dc= I
>> would
>>>>> guess
>>>>>>>> this
>>>>>>>>> is AD
>>>>>>>>>
>>>>>>>>> Also, try using LDAP vs LDAPS to help troubleshoot.
>>>>>>>>>
>>>>>>>>> -jim
>>>>>>>>>
>>>>>>>>> --
>>>>>>>>> -jim
>>>>>>>>> Jim Willeke
>>>>>>>>>
>>>>>>>>>
>>>>>>>>> On Mon, Aug 26, 2013 at 10:47 AM, John Pimentel
>>>>>>>>> <jp...@ra.rockwell.com>wrote:
>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Greetings,
>>>>>>>>>>
>>>>>>>>>> I am having difficulties getting LDAPS authentication to
>> work
>>>> and
>>>>> I
>>>>>>>> think
>>>>>>>>> I
>>>>>>>>>> must be missing some fundamental configuration.
>>>>>>>>>>
>>>>>>>>>> My current state is that the Site loads and displays content
>>>>>>> properly,
>>>>>>>>> but
>>>>>>>>>> when I go to edit content or I select the log in page
>>> directly,
>>>> my
>>>>>>> LDAP
>>>>>>>>>> credentials do not authenticate, and I am repeatedly
>> presented
>>>>> with
>>>>>>> a
>>>>>>>>> login
>>>>>>>>>> page.
>>>>>>>>>>
>>>>>>>>>> I used the follwing information as my "How To" for this
>>> effort.
>>>>>>>>>>
>>>>> http://www.ecyrd.com/JSPWiki/wiki/WebContainerAuthenticationViaLDAP
>>>>>>>>>>
>>>>>>>>>> This article is very good but appears to be incomplete.
>>>>>>>>>>
>>>>>>>>>> I have done the following configuration to get ldaps to
>> work:
>>>>>>>>>>
>>>>>>>>>> 1. I have a previously configured LDAP Server and I stored
>>>>> /trusted
>>>>>>> the
>>>>>>>>>> cert for this Sun LDAP server into the central java keystore
>>>> using
>>>>>>> this
>>>>>>>>>> command:
>>>>>>>>>> /usr/lib64/jvm/jre/bin/keytool -import -alias sunldap
>>>>>>>>>> -file /web1/sst/dysc/content/CA-RA-v3.crt
>>>>>>>>>> -keystore /usr/lib64/jvm/jre/lib/security/cacerts
>>>>>>>>>>
>>>>>>>>>> 2. I have configured the realm and sorted out all the log
>>> errors
>>>>>>> using
>>>>>>>>> the
>>>>>>>>>> following realm in the server.xml file. I believe tomcat is
>>>>>>>> successfully
>>>>>>>>>> connecting to my LDAP server.
>>>>>>>>>>
>>>>>>>>>> <Realm className="org.apache.catalina.realm.JNDIRealm"
>>>>>>>>>> connectionURL="ldaps://
>>>> mkedsintp.ds.mydomain.com:636
>>>>> "
>>>>>>>>>> connectionName="uid=[bind User
>>>>>>>>>> UID],ou=admin,dc=rmydomain,dc=com"
>>>>>>>>>> connectionPassword="[Password]"
>>>>>>>>>>
>>> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
>>>>>>>>>>
>>> roleBase="ou=Control-M,ou=group,dc=mydomain,dc=com"
>>>>>>>>>> roleSubtree="true"
>>>>>>>>>> roleName="cn"
>>>>>>>>>> roleSearch="(uniqueMember={0})"
>>>>>>>>>> />
>>>>>>>>>>
>>>>>>>>>> 3. I uncommented the "CONTAINER-MANAGED AUTH" section
>>>>>>>>>> from /web1/dyscq/webapps/apps/wiki/WEB-INF/web.xml
>>>>>>>>>>
>>>>>>>>>> There is a section at the bottom that says "Update JSPWiki
>>>>> security
>>>>>>>>> policy"
>>>>>>>>>> If you would like to set permissions to LDAP groups, you can
>>>>> simply
>>>>>>> add
>>>>>>>>>> policy entries on authorize.Role. The following is an entry
>>> for
>>>>>>>>> wiki-admin
>>>>>>>>>> group (from LDAP).
>>>>>>>>>> grant principal com.ecyrd.jspwiki.auth.authorize.Role
>>>>> "wiki-admin" {
>>>>>>>>>> permission
>>> com.ecyrd.jspwiki.auth.permissions.AllPermission
>>>>> "*";
>>>>>>>>>> };
>>>>>>>>>>
>>>>>>>>>> I'm thinking it might go into web.xml, but I am not sure of
>>>> that..
>>>>>>>>>>
>>>>>>>>>> this section of the xml looks like this:
>>>>>>>>>>
>>>>>>>>>> <security-constraint>
>>>>>>>>>> <web-resource-collection>
>>>>>>>>>> <web-resource-name>Authenticated
>>>>> area</web-resource-name>
>>>>>>>>>> <url-pattern>/Edit.jsp</url-pattern>
>>>>>>>>>> <url-pattern>/Comment.jsp</url-pattern>
>>>>>>>>>> <url-pattern>/Login.jsp</url-pattern>
>>>>>>>>>> <url-pattern>/NewGroup.jsp</url-pattern>
>>>>>>>>>> <url-pattern>/Rename.jsp</url-pattern>
>>>>>>>>>> <url-pattern>/Upload.jsp</url-pattern>
>>>>>>>>>> <http-method>DELETE</http-method>
>>>>>>>>>> <http-method>GET</http-method>
>>>>>>>>>> <http-method>HEAD</http-method>
>>>>>>>>>> <http-method>POST</http-method>
>>>>>>>>>> <http-method>PUT</http-method>
>>>>>>>>>> </web-resource-collection>
>>>>>>>>>>
>>>>>>>>>> <web-resource-collection>
>>>>>>>>>> <web-resource-name>Read-only
>>> Area</web-resource-name>
>>>>>>>>>> <url-pattern>/attach</url-pattern>
>>>>>>>>>> <http-method>DELETE</http-method>
>>>>>>>>>> <http-method>POST</http-method>
>>>>>>>>>> <http-method>PUT</http-method>
>>>>>>>>>> </web-resource-collection>
>>>>>>>>>>
>>>>>>>>>> <auth-constraint>
>>>>>>>>>> <role-name>Admin</role-name>
>>>>>>>>>> <role-name>Authenticated</role-name>
>>>>>>>>>> </auth-constraint>
>>>>>>>>>> <!-- > > > <user-data-constraint>
>>>>>>>>>>
>>>> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
>>>>>>>>>> </user-data-constraint>
>>>>>>>>>> -->
>>>>>>>>>>
>>>>>>>>>> </security-constraint>
>>>>>>>>>>
>>>>>>>>>> <login-config>
>>>>>>>>>> <auth-method>FORM</auth-method>
>>>>>>>>>> <form-login-config>
>>>>>>>>>> <form-login-page>/LoginForm.jsp</form-login-page>
>>>>>>>>>> <form-error-page>/LoginForm.jsp</form-error-page>
>>>>>>>>>> </form-login-config>
>>>>>>>>>> </login-config>
>>>>>>>>>>
>>>>>>>>>> <security-role>
>>>>>>>>>> <description>
>>>>>>>>>> This logical role includes all authenticated
>> users
>>>>>>>>>> </description>
>>>>>>>>>> <role-name>Authenticated</role-name>
>>>>>>>>>> </security-role>
>>>>>>>>>>
>>>>>>>>>> <security-role>
>>>>>>>>>> <description>
>>>>>>>>>> This logical role includes all administrative
>> users
>>>>>>>>>> </description>
>>>>>>>>>> <role-name>Admin</role-name>
>>>>>>>>>> </security-role>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Regards,
>>>>>>>>>> John Pimentel
>>>>>>>>>>
>>>>>>>>>> (Embedded image moved to file: pic05844.gif)Description:
>>>>>>> Description:
>>>>>>>>>> ralogo_web
>>>>>>>>>> jpimentel@ra.rockwell.com
>>>>>>>>>> Office (414) 382-3354
>>>>>>>>>> Mobile (262) 501-4785
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> From: user-help@jspwiki.apache.org
>>>>>>>>>> To: jpimentel@ra.rockwell.com
>>>>>>>>>> Date: 08/26/2013 08:16 AM
>>>>>>>>>> Subject: WELCOME to user@jspwiki.apache.org
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> Hi! This is the ezmlm program. I'm managing the
>>>>>>>>>> user@jspwiki.apache.org mailing list.
>>>>>>>>>>
>>>>>>>>>> I'm working for my owner, who can be reached
>>>>>>>>>> at user-owner@jspwiki.apache.org.
>>>>>>>>>>
>>>>>>>>>> Acknowledgment: I have added the address
>>>>>>>>>>
>>>>>>>>>> jpimentel@ra.rockwell.com
>>>>>>>>>>
>>>>>>>>>> to the user mailing list.
>>>>>>>>>>
>>>>>>>>>> Welcome to user@jspwiki.apache.org!
>>>>>>>>>>
>>>>>>>>>> Please save this message so that you know the address you
>> are
>>>>>>>>>> subscribed under, in case you later want to unsubscribe or
>>>> change
>>>>>>> your
>>>>>>>>>> subscription address.
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>> --- Administrative commands for the user list ---
>>>>>>>>>>
>>>>>>>>>> I can handle administrative requests automatically. Please
>>>>>>>>>> do not send them to the list address! Instead, send
>>>>>>>>>> your message to the correct command address:
>>>>>>>>>>
>>>>>>>>>> To subscribe to the list, send a message to:
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>
>>>>>>>>>> To remove your address from the list, send a message to:
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>
>>>>>>>>>> Send mail to the following for info and FAQ for this list:
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>
>>>>>>>>>> Similar addresses exist for the digest list:
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>
>>>>>>>>>> To get messages 123 through 145 (a maximum of 100 per
>>> request),
>>>>>>> mail:
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>
>>>>>>>>>> To get an index with subject and author for messages
>> 123-456 ,
>>>>> mail:
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>
>>>>>>>>>> They are always returned as sets of 100, max 2000 per
>> request,
>>>>>>>>>> so you'll actually get 100-499.
>>>>>>>>>>
>>>>>>>>>> To receive all messages with the same subject as message
>>> 12345,
>>>>>>>>>> send a short message to:
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>
>>>>>>>>>> The messages should contain one line or word of text to
>> avoid
>>>>> being
>>>>>>>>>> treated as sp@m, but I will ignore their content.
>>>>>>>>>> Only the ADDRESS you send to is important.
>>>>>>>>>>
>>>>>>>>>> You can start a subscription for an alternate address,
>>>>>>>>>> for example "john@host.domain", just add a hyphen and your
>>>>>>>>>> address (with '=' instead of '@') after the command word:
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>
>>>>>>>>>> To stop subscription for this address, mail:
>>>>>>>>>> <us...@jspwiki.apache.org>
>>>>>>>>>>
>>>>>>>>>> In both cases, I'll send a confirmation message to that
>>> address.
>>>>>>> When
>>>>>>>>>> you receive it, simply reply to it to complete your
>>>> subscription.
>>>>>>>>>>
>>>>>>>>>> If despite following these instructions, you do not get the
>>>>>>>>>> desired results, please contact my owner at
>>>>>>>>>> user-owner@jspwiki.apache.org. Please be patient, my owner
>>> is a
>>>>>>>>>> lot slower than I am ;-)
>>>>>>>>>>
>>>>>>>>>> --- Enclosed is a copy of the request I received.
>>>>>>>>>>
>>>>>>>>>> Return-Path: <jp...@ra.rockwell.com>
>>>>>>>>>> Received: (qmail 84748 invoked by uid 99); 26 Aug 2013
>>> 13:16:04
>>>>>>> -0000
>>>>>>>>>> Received: from athena.apache.org (HELO athena.apache.org)
>>>>>>>>> (140.211.11.136)
>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
>> 2013
>>>>>>> 13:16:04
>>>>>>>>>> +0000
>>>>>>>>>> X-ASF-Spam-Status: No, hits=-0.0 required=5.0
>>>>>>>>>> tests=SPF_PASS
>>>>>>>>>> X-Spam-Check-By: apache.org
>>>>>>>>>> Received-SPF: pass (athena.apache.org: local policy)
>>>>>>>>>> Received: from [205.175.240.251] (HELO
>>>>> ramilwsmtp01.ra.rockwell.com
>>>>>>> )
>>>>>>>>>> (205.175.240.251)
>>>>>>>>>> by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
>> 2013
>>>>>>> 13:16:00
>>>>>>>>>> +0000
>>>>>>>>>> In-Reply-To: <13...@jspwiki.apache.org>
>>>>>>>>>> References: <13...@jspwiki.apache.org>
>>>>>>>>>> Subject: Re: confirm subscribe to user@jspwiki.apache.org
>>>>>>>>>> X-KeepSent: D7D57B0D:E2A05A18-86257BD3:0048D45A;
>>>>>>>>>> type=4; name=$KeepSent
>>>>>>>>>> To:
>>>>>>>>>> user-sc.1377522681.pagaldeamkeafdeakcap-jpimentel=
>>>>>>>>>> ra.rockwell.com@jspwiki.apache.org
>>>>>>>>>>
>>>>>>>>>> X-Mailer: Lotus Notes Release 8.5.2FP2 March 23, 2011
>>>>>>>>>> Message-ID:
>>>>>>>>>>
>>>>>>>>> <
>>>>>>>>
>>>>>>>
>>>>>
>>>>
>>>
>> OFD7D57B0D.E2A05A18-ON86257BD3.0048D45A-86257BD3.0048D84D@ra.rockwell.com
>>>>>>>>>>>
>>>>>>>>>> From: John Pimentel <jp...@ra.rockwell.com>
>>>>>>>>>> Date: Mon, 26 Aug 2013 08:15:38 -0500
>>>>>>>>>> X-MIMETrack: Serialize by Router on
>>>>>>> RAMilwSMTP01/Milwaukee/RA/Rockwell
>>>>>>>> at
>>>>>>>>>> 08/26/2013 08:15:59
>>>>>>>>>> AM
>>>>>>>>>> MIME-Version: 1.0
>>>>>>>>>> Content-type: multipart/mixed;
>>>>>>>>>>
>>>>>>>>>>
>>>>> Boundary="0__=09BBF140DFDB52CA8f9e8a93df938690918c09BBF140DFDB52CA"
>>>>>>>>>> Content-Disposition: inline
>>>>>>>>>> X-Virus-Checked: Checked by ClamAV on apache.org
>>>>>>>>>>
>>>>>>>>>>
>>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>
>>>>>
>>>>
>>>
>>
>
Re: issues unsubscribing user@jspwiki.a.o
Posted by Claudia Frers <cl...@gmail.com>.
sorry three attempts and no success in unsubscribing
On Wed, Aug 28, 2013 at 7:47 PM, Juan Pablo Santos Rodríguez <
juanpablo.santos@gmail.com> wrote:
> Hi Claudia,
>
> sending an email to either user@jspwiki.apache.org (as per
> http://jspwiki.apache.org/jspwiki/community/mailing_lists.html) or
> jspwiki-user-unsubscribe@incubator.apache.org should be enough
>
>
> br,
> juan pablo
>
>
> On Wed, Aug 28, 2013 at 7:43 PM, Claudia Frers <claudia.frers@gmail.com
> >wrote:
>
> > Hi I am having similar unsubscribe issues as Shine. Clicking on the link
> > did not help. What should i do?
> >
> >
> > On Wed, Aug 28, 2013 at 7:15 PM, Juan Pablo Santos Rodríguez <
> > juanpablo.santos@gmail.com> wrote:
> >
> > > Hi Shine,
> > >
> > > (switchting subject to a more descriptive one)
> > >
> > > Could you try with jspwiki-user-unsubscribe@incubator.apache.org?
> There
> > > are
> > > chances you were subscribed to the incubator list, and unsubscribing
> > isn't
> > > looking in the old ML, which redirects to the new one. If that's the
> > case,
> > > would you mind pinging me off-list with the results?
> > >
> > > In any case, seems like an infra issue, if problem persists we'll file
> an
> > > issue in order to stop the annoyances
> > >
> > >
> > > br,
> > > juan pablo
> > >
> > >
> > >
> > > On Wed, Aug 28, 2013 at 4:34 PM, Shine Prakash
> > > <sh...@icasework.com>wrote:
> > >
> > > > I end up getting the same message saying that I am not in the
> > subscribed
> > > > list. Painful!
> > > >
> > > >
> > > > Regards,
> > > > Shine Prakash
> > > > Software Consultant
> > > > iCasework Ltd.
> > > > +44 (0) 207 624 4991
> > > > www.icasework.com
> > > > www.usefulfeedback.com
> > > > www.managemyrequests.com
> > > >
> > > >
> > > > ---------- Forwarded message ----------
> > > > From: <us...@jspwiki.apache.org>
> > > > Date: 28 August 2013 15:24
> > > > Subject: Not subscribed to user@jspwiki.apache.org
> > > > To: shine.prakash@icasework.com
> > > >
> > > >
> > > > Hi! This is the ezmlm program. I'm managing the
> > > > user@jspwiki.apache.org mailing list.
> > > >
> > > > I'm working for my owner, who can be reached
> > > > at user-owner@jspwiki.apache.org.
> > > >
> > > > Acknowledgment: The address
> > > >
> > > > shine.prakash@icasework.com
> > > >
> > > > was not on the user mailing list when I received
> > > > your request and is not a subscriber of this list.
> > > >
> > > > If you unsubscribe, but continue to receive mail, you're subscribed
> > > > under a different address than you currently use. Please look at the
> > > > header for:
> > > >
> > > > 'Return-Path: <us...@jspwiki.apache.org>'
> > > >
> > > > The unsubscribe address for this user would be:
> > > > 'user-unsubscribe-user=host.dom@jspwiki.apache.org'.
> > > > Just mail to that address, substituting user=host.dom for the real
> > > > values, reply to the confirmation request, and you should receive a
> > > message
> > > > that you're off the list.
> > > >
> > > > For some mail programs, you need to make the headers visible to
> > > > see the return path:
> > > >
> > > > For Eudora 4.0, click on the "Blah blah ..." button.
> > > > For PMMail, click on "Window->Show entire message/header".
> > > >
> > > > If this still doesn't work, I'm sorry to say that I can't help you.
> > > > Please FORWARD a list message together with a note about what you're
> > > > trying to achieve and a list of addresses that you might be
> subscribed
> > > > under to my owner:
> > > >
> > > > user-owner@jspwiki.apache.org
> > > >
> > > > who will take care of it. My owner is a little bit slower than I am,
> > > > so please be patient.
> > > >
> > > >
> > > > --- Administrative commands for the user list ---
> > > >
> > > > I can handle administrative requests automatically. Please
> > > > do not send them to the list address! Instead, send
> > > > your message to the correct command address:
> > > >
> > > > To subscribe to the list, send a message to:
> > > > <us...@jspwiki.apache.org>
> > > >
> > > > To remove your address from the list, send a message to:
> > > > <us...@jspwiki.apache.org>
> > > >
> > > > Send mail to the following for info and FAQ for this list:
> > > > <us...@jspwiki.apache.org>
> > > > <us...@jspwiki.apache.org>
> > > >
> > > > Similar addresses exist for the digest list:
> > > > <us...@jspwiki.apache.org>
> > > > <us...@jspwiki.apache.org>
> > > >
> > > > To get messages 123 through 145 (a maximum of 100 per request), mail:
> > > > <us...@jspwiki.apache.org>
> > > >
> > > > To get an index with subject and author for messages 123-456 , mail:
> > > > <us...@jspwiki.apache.org>
> > > >
> > > > They are always returned as sets of 100, max 2000 per request,
> > > > so you'll actually get 100-499.
> > > >
> > > > To receive all messages with the same subject as message 12345,
> > > > send a short message to:
> > > > <us...@jspwiki.apache.org>
> > > >
> > > > The messages should contain one line or word of text to avoid being
> > > > treated as sp@m, but I will ignore their content.
> > > > Only the ADDRESS you send to is important.
> > > >
> > > > You can start a subscription for an alternate address,
> > > > for example "john@host.domain", just add a hyphen and your
> > > > address (with '=' instead of '@') after the command word:
> > > > <us...@jspwiki.apache.org>
> > > >
> > > > To stop subscription for this address, mail:
> > > > <us...@jspwiki.apache.org>
> > > >
> > > > In both cases, I'll send a confirmation message to that address. When
> > > > you receive it, simply reply to it to complete your subscription.
> > > >
> > > > If despite following these instructions, you do not get the
> > > > desired results, please contact my owner at
> > > > user-owner@jspwiki.apache.org. Please be patient, my owner is a
> > > > lot slower than I am ;-)
> > > >
> > > > --- Enclosed is a copy of the request I received.
> > > >
> > > > Return-Path: <sh...@icasework.com>
> > > > Received: (qmail 14894 invoked by uid 99); 28 Aug 2013 14:24:02 -0000
> > > > Received: from athena.apache.org (HELO athena.apache.org)
> > > (140.211.11.136)
> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
> 14:24:02
> > > > +0000
> > > > X-ASF-Spam-Status: No, hits=-9.9 required=10.0
> > > >
> > > >
> > > >
> > >
> >
> tests=ASF_LIST_OPS,ASF_LIST_UNSUB_A,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,TVD_GET_STOCK,WEIRD_PORT
> > > > X-Spam-Check-By: apache.org
> > > > Received-SPF: unknown (athena.apache.org: error in processing during
> > > > lookup
> > > > of shine.prakash@icasework.com)
> > > > Received: from [209.85.214.182] (HELO mail-ob0-f182.google.com)
> > > > (209.85.214.182)
> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013
> 14:23:58
> > > > +0000
> > > > Received: by mail-ob0-f182.google.com with SMTP id
> wo10so6844227obc.27
> > > > for <us...@jspwiki.apache.org>; Wed, 28 Aug 2013
> > > > 07:23:37 -0700 (PDT)
> > > > X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> > > > d=google.com; s=20120113;
> > > >
> > > h=x-gm-message-state:mime-version:in-reply-to:references:from:date
> > > > :message-id:subject:to:content-type;
> > > > bh=ixJFRcL2Q0jSLZM1ZNof9EtwHaH4KiesZ5zF3pHBSNc=;
> > > >
> > > > b=panDiGKtqYgtZ18nLf1tAGs8gK5G2cPtTRagm7ery4DYD+CsclNsSHvCCrK2T09SVp
> > > >
> > > > LZd44PN4rdaz0Ls0QwOii7OZRnKHpvFng9hDuK4BfkKcZJLo2AIO3suImsteLWtpe0Iv
> > > >
> > > > 7/JlUdt5dCc34Zh+rJh0sL6SBUtua0ncTbgRI/jZqK9kc1AjHXx53WZ4OH9mkC1Ew9v7
> > > >
> > > > BuKImYEJPm2pJ3i8u2rh9Z/O/cVdCqeDyIAvPaVti+8tANUUJkM45ih/Nw8f1sY5zDSs
> > > >
> > > > DwNgF+Mg/aTHh28OcIvxMvgGAsenjmOYBTripxJE0vDGqBZPPvK5MHd1g+Fn4Aarwx+u
> > > > VKdA==
> > > > X-Gm-Message-State:
> > > >
> > > >
> > >
> >
> ALoCoQlb0bM1TZ7T17Vo4wJ7kkIUXadLEO5QNZMf4IbLcigK9cLv3Z3gSlSiemW/S2DnIHsWbRm7
> > > > X-Received: by 10.182.44.134 with SMTP id
> > > e6mr6789662obm.14.1377699816993;
> > > > Wed, 28 Aug 2013 07:23:36 -0700 (PDT)
> > > > MIME-Version: 1.0
> > > > Received: by 10.60.40.41 with HTTP; Wed, 28 Aug 2013 07:23:16 -0700
> > (PDT)
> > > > X-Originating-IP: [81.139.83.190]
> > > > In-Reply-To: <
> > > >
> > >
> >
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> > > > References: <13...@jspwiki.apache.org> <
> > > >
> > >
> >
> OF0FCD1230.245CC751-ON86257BD3.00498BC2-86257BD3.00514276@ra.rockwell.com>
> > > > <CAB3ntOva5D5caVQGzm9+XE6gJ3n6+g-xX7+_WsMCK2Ds4ABs5g@mail.gmail.com
> >
> > > > <
> > > >
> > >
> >
> OF69EABD41.A8F0A0AE-ON86257BD4.005AD83C-86257BD4.005F10A8@ra.rockwell.com>
> > > > <CAB3ntOs-megCTRzddLxPCmL7Kvk2gpsp_io85+Se4tEFMgE0VQ@mail.gmail.com
> >
> > > > <CAJ0cJdxSfQQm8SLBreqYCew8T5BJ-=icjCX+kaZCWxt2UO5=og@mail.gmail.com
> >
> > <
> > > >
> > >
> >
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> > > > From: Shine Prakash <sh...@icasework.com>
> > > > Date: Wed, 28 Aug 2013 15:23:16 +0100
> > > > Message-ID: <CAJ0cJdzsMizEpTnuOe8==9wEz-GeR=
> > > > nD7sAiayAfNJ1fpvjcwA@mail.gmail.com>
> > > > Subject: Re: ldaps authentication to jspwiki
> > > > To: user-unsubscribe@jspwiki.apache.org
> > > > Content-Type: multipart/alternative;
> > > boundary=001a11c3235a3321d104e502bcf1
> > > > X-Virus-Checked: Checked by ClamAV on apache.org
> > > >
> > > >
> > > > Regards,
> > > > Shine Prakash
> > > > Software Consultant
> > > > iCasework Ltd.
> > > > +44 (0) 207 624 4991
> > > > www.icasework.com
> > > > www.usefulfeedback.com
> > > > www.managemyrequests.com
> > > >
> > > >
> > > > On 28 August 2013 15:23, Shine Prakash <sh...@icasework.com>
> > > > wrote:
> > > >
> > > > >
> > > > > Thanks. I have tried.
> > > > >
> > > > > Regards,
> > > > > Shine Prakash
> > > > > Software Consultant
> > > > > iCasework Ltd.
> > > > > +44 (0) 207 624 4991
> > > > > www.icasework.com
> > > > > www.usefulfeedback.com
> > > > > www.managemyrequests.com
> > > > >
> > > > >
> > > > > On 28 August 2013 15:18, John Pimentel <jp...@ra.rockwell.com>
> > > > wrote:
> > > > >
> > > > >> To remove your address from the list, send a message to:
> > > > >> <us...@jspwiki.apache.org>
> > > > >>
> > > > >>
> > > > >> Regards,
> > > > >> John Pimentel
> > > > >>
> > > > >> [image: Description: Description: ralogo_web]
> > > > >> *jpimentel@ra.rockwell.com* <jp...@ra.rockwell.com>
> > > > >> Office (414) 382-3354
> > > > >> *Mobile (262) 501-4785*<
> > > > 2625014785@txt.att.net?subject=RA%20Text%204%20U>
> > > > >>
> > > > >>
> > > > >>
> > > > >>
> > > > >> From: Shine Prakash <sh...@icasework.com>
> > > > >> To: user@jspwiki.apache.org
> > > > >> Date: 08/28/2013 03:35 AM
> > > > >> Subject: Re: ldaps authentication to jspwiki
> > > > >> ------------------------------
> > > > >>
> > > > >>
> > > > >>
> > > > >> HOW do I unsubscribe myself?
> > > > >>
> > > > >>
> > > > >>
> > > > >> On 27 August 2013 23:34, Jim Willeke <ji...@willeke.com> wrote:
> > > > >>
> > > > >> > You might try remove the:
> > > > >> > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > > > >> >
> > > > >> > and use (what I am using):
> > > > >> >
> > > > >> >
> > > > userBase="ou=people,dc=mydomain,dc=com"
> > > > >> > userSearch="(uid={0})"
> > > > >> > userSubtree="true"
> > > > >> >
> > > > >> > We found the LDAP search to be much more flexible using this
> than
> > > the
> > > > >> > pattern matching.
> > > > >> > You should also be able to get some error from tomcat if it is
> > > > failing.
> > > > >> > You can turn on access logging:
> > > > >> >
> > > http://tomcat.apache.org/tomcat-7.0-doc/config/host.html#Access_Logs
> > > > >> >
> > > > >> >
> > > > >> > If you drop the LDAPS, You might also get a trace. (Not sure if
> > SUN
> > > > can
> > > > >> > show the ldap requests) but tcdump (or wireshark) will.
> > > > >> >
> > > > >> >
> > > > >> > --
> > > > >> > -jim
> > > > >> > Jim Willeke
> > > > >> >
> > > > >> >
> > > > >> > On Tue, Aug 27, 2013 at 1:18 PM, John Pimentel <
> > > > >> jpimentel@ra.rockwell.com
> > > > >> > >wrote:
> > > > >> >
> > > > >> > >
> > > > >> > > Hi Jim,
> > > > >> > >
> > > > >> > > Thanks for the response.
> > > > >> > >
> > > > >> > > We are using Sun LDAP. Let me give you an example from my
> user
> > > > >> account.
> > > > >> > > Under my group container
> > > > >> > > cn=UN_CTM_AdminGroup,ou=Control-M,ou=group,dc=mydomain,dc=com
> > > > >> > > I have a attribute called uniqueMember.
> > > > >> > > The value for my account is as follows:
> > > > >> > > uid=JPimen,ou=people,dc=mydomain,dc=com
> > > > >> > >
> > > > >> > > I of course substituted our actual domain for mydomain in this
> > > > >> example,
> > > > >> > but
> > > > >> > > everything else is verbatim.
> > > > >> > >
> > > > >> > > So our groups are nmed by cn but the users are named by uid.
> > > > >> > >
> > > > >> > > Unfortunately our LDAP server will not accept anything other
> > than
> > > > >> ldaps
> > > > >> > > connections, so I am stuck there.
> > > > >> > >
> > > > >> > > Also if you have any recommendation on how to enable security
> > > > specific
> > > > >> > > debug I would appreciate that.
> > > > >> > >
> > > > >> > > I found what appears to be a log level entry in my
> > > > jspwiki.properties
> > > > >> > file.
> > > > >> > > I changed
> > > > >> > > log4j.rootCategory=INFO,FileLog
> > > > >> > > To read
> > > > >> > > log4j.rootCategory=DEBUG,FileLog
> > > > >> > >
> > > > >> > > Now, I do see debug entries in the
> > > > /web1/dyscq/tomcat/logs/jspwiki.log
> > > > >> > > file, but no entries appear when I try (and fail) to log in.
> > > > >> > >
> > > > >> > > Thanks again for any ideas.
> > > > >> > >
> > > > >> > > Regards,
> > > > >> > > John Pimentel
> > > > >> > >
> > > > >> > > (Embedded image moved to file: pic11833.gif)Description:
> > > > Description:
> > > > >> > > ralogo_web
> > > > >> > > jpimentel@ra.rockwell.com
> > > > >> > > Office (414) 382-3354
> > > > >> > > Mobile (262) 501-4785
> > > > >> > >
> > > > >> > >
> > > > >> > >
> > > > >> > >
> > > > >> > > From: Jim Willeke <ji...@willeke.com>
> > > > >> > > To: user@jspwiki.apache.org
> > > > >> > > Date: 08/27/2013 03:40 AM
> > > > >> > > Subject: Re: ldaps authentication to jspwiki
> > > > >> > >
> > > > >> > >
> > > > >> > >
> > > > >> > > I would guess, as you show no information on your LDAP setup,
> > this
> > > > >> line
> > > > >> > is
> > > > >> > > wrong:
> > > > >> > > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > > > >> > >
> > > > >> > > Are your users named by uid or cn?
> > > > >> > > You show roles as named by cn and since you show dc=,dc= I
> would
> > > > guess
> > > > >> > this
> > > > >> > > is AD
> > > > >> > >
> > > > >> > > Also, try using LDAP vs LDAPS to help troubleshoot.
> > > > >> > >
> > > > >> > > -jim
> > > > >> > >
> > > > >> > > --
> > > > >> > > -jim
> > > > >> > > Jim Willeke
> > > > >> > >
> > > > >> > >
> > > > >> > > On Mon, Aug 26, 2013 at 10:47 AM, John Pimentel
> > > > >> > > <jp...@ra.rockwell.com>wrote:
> > > > >> > >
> > > > >> > > >
> > > > >> > > > Greetings,
> > > > >> > > >
> > > > >> > > > I am having difficulties getting LDAPS authentication to
> work
> > > and
> > > > I
> > > > >> > think
> > > > >> > > I
> > > > >> > > > must be missing some fundamental configuration.
> > > > >> > > >
> > > > >> > > > My current state is that the Site loads and displays content
> > > > >> properly,
> > > > >> > > but
> > > > >> > > > when I go to edit content or I select the log in page
> > directly,
> > > my
> > > > >> LDAP
> > > > >> > > > credentials do not authenticate, and I am repeatedly
> presented
> > > > with
> > > > >> a
> > > > >> > > login
> > > > >> > > > page.
> > > > >> > > >
> > > > >> > > > I used the follwing information as my "How To" for this
> > effort.
> > > > >> > > >
> > > > http://www.ecyrd.com/JSPWiki/wiki/WebContainerAuthenticationViaLDAP
> > > > >> > > >
> > > > >> > > > This article is very good but appears to be incomplete.
> > > > >> > > >
> > > > >> > > > I have done the following configuration to get ldaps to
> work:
> > > > >> > > >
> > > > >> > > > 1. I have a previously configured LDAP Server and I stored
> > > > /trusted
> > > > >> the
> > > > >> > > > cert for this Sun LDAP server into the central java keystore
> > > using
> > > > >> this
> > > > >> > > > command:
> > > > >> > > > /usr/lib64/jvm/jre/bin/keytool -import -alias sunldap
> > > > >> > > > -file /web1/sst/dysc/content/CA-RA-v3.crt
> > > > >> > > > -keystore /usr/lib64/jvm/jre/lib/security/cacerts
> > > > >> > > >
> > > > >> > > > 2. I have configured the realm and sorted out all the log
> > errors
> > > > >> using
> > > > >> > > the
> > > > >> > > > following realm in the server.xml file. I believe tomcat is
> > > > >> > successfully
> > > > >> > > > connecting to my LDAP server.
> > > > >> > > >
> > > > >> > > > <Realm className="org.apache.catalina.realm.JNDIRealm"
> > > > >> > > > connectionURL="ldaps://
> > > mkedsintp.ds.mydomain.com:636
> > > > "
> > > > >> > > > connectionName="uid=[bind User
> > > > >> > > > UID],ou=admin,dc=rmydomain,dc=com"
> > > > >> > > > connectionPassword="[Password]"
> > > > >> > > >
> > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > > > >> > > >
> > roleBase="ou=Control-M,ou=group,dc=mydomain,dc=com"
> > > > >> > > > roleSubtree="true"
> > > > >> > > > roleName="cn"
> > > > >> > > > roleSearch="(uniqueMember={0})"
> > > > >> > > > />
> > > > >> > > >
> > > > >> > > > 3. I uncommented the "CONTAINER-MANAGED AUTH" section
> > > > >> > > > from /web1/dyscq/webapps/apps/wiki/WEB-INF/web.xml
> > > > >> > > >
> > > > >> > > > There is a section at the bottom that says "Update JSPWiki
> > > > security
> > > > >> > > policy"
> > > > >> > > > If you would like to set permissions to LDAP groups, you can
> > > > simply
> > > > >> add
> > > > >> > > > policy entries on authorize.Role. The following is an entry
> > for
> > > > >> > > wiki-admin
> > > > >> > > > group (from LDAP).
> > > > >> > > > grant principal com.ecyrd.jspwiki.auth.authorize.Role
> > > > "wiki-admin" {
> > > > >> > > > permission
> > com.ecyrd.jspwiki.auth.permissions.AllPermission
> > > > "*";
> > > > >> > > > };
> > > > >> > > >
> > > > >> > > > I'm thinking it might go into web.xml, but I am not sure of
> > > that..
> > > > >> > > >
> > > > >> > > > this section of the xml looks like this:
> > > > >> > > >
> > > > >> > > > <security-constraint>
> > > > >> > > > <web-resource-collection>
> > > > >> > > > <web-resource-name>Authenticated
> > > > area</web-resource-name>
> > > > >> > > > <url-pattern>/Edit.jsp</url-pattern>
> > > > >> > > > <url-pattern>/Comment.jsp</url-pattern>
> > > > >> > > > <url-pattern>/Login.jsp</url-pattern>
> > > > >> > > > <url-pattern>/NewGroup.jsp</url-pattern>
> > > > >> > > > <url-pattern>/Rename.jsp</url-pattern>
> > > > >> > > > <url-pattern>/Upload.jsp</url-pattern>
> > > > >> > > > <http-method>DELETE</http-method>
> > > > >> > > > <http-method>GET</http-method>
> > > > >> > > > <http-method>HEAD</http-method>
> > > > >> > > > <http-method>POST</http-method>
> > > > >> > > > <http-method>PUT</http-method>
> > > > >> > > > </web-resource-collection>
> > > > >> > > >
> > > > >> > > > <web-resource-collection>
> > > > >> > > > <web-resource-name>Read-only
> > Area</web-resource-name>
> > > > >> > > > <url-pattern>/attach</url-pattern>
> > > > >> > > > <http-method>DELETE</http-method>
> > > > >> > > > <http-method>POST</http-method>
> > > > >> > > > <http-method>PUT</http-method>
> > > > >> > > > </web-resource-collection>
> > > > >> > > >
> > > > >> > > > <auth-constraint>
> > > > >> > > > <role-name>Admin</role-name>
> > > > >> > > > <role-name>Authenticated</role-name>
> > > > >> > > > </auth-constraint>
> > > > >> > > > <!-- > > > <user-data-constraint>
> > > > >> > > >
> > > <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> > > > >> > > > </user-data-constraint>
> > > > >> > > > -->
> > > > >> > > >
> > > > >> > > > </security-constraint>
> > > > >> > > >
> > > > >> > > > <login-config>
> > > > >> > > > <auth-method>FORM</auth-method>
> > > > >> > > > <form-login-config>
> > > > >> > > > <form-login-page>/LoginForm.jsp</form-login-page>
> > > > >> > > > <form-error-page>/LoginForm.jsp</form-error-page>
> > > > >> > > > </form-login-config>
> > > > >> > > > </login-config>
> > > > >> > > >
> > > > >> > > > <security-role>
> > > > >> > > > <description>
> > > > >> > > > This logical role includes all authenticated
> users
> > > > >> > > > </description>
> > > > >> > > > <role-name>Authenticated</role-name>
> > > > >> > > > </security-role>
> > > > >> > > >
> > > > >> > > > <security-role>
> > > > >> > > > <description>
> > > > >> > > > This logical role includes all administrative
> users
> > > > >> > > > </description>
> > > > >> > > > <role-name>Admin</role-name>
> > > > >> > > > </security-role>
> > > > >> > > >
> > > > >> > > >
> > > > >> > > > Regards,
> > > > >> > > > John Pimentel
> > > > >> > > >
> > > > >> > > > (Embedded image moved to file: pic05844.gif)Description:
> > > > >> Description:
> > > > >> > > > ralogo_web
> > > > >> > > > jpimentel@ra.rockwell.com
> > > > >> > > > Office (414) 382-3354
> > > > >> > > > Mobile (262) 501-4785
> > > > >> > > >
> > > > >> > > >
> > > > >> > > >
> > > > >> > > >
> > > > >> > > > From: user-help@jspwiki.apache.org
> > > > >> > > > To: jpimentel@ra.rockwell.com
> > > > >> > > > Date: 08/26/2013 08:16 AM
> > > > >> > > > Subject: WELCOME to user@jspwiki.apache.org
> > > > >> > > >
> > > > >> > > >
> > > > >> > > >
> > > > >> > > > Hi! This is the ezmlm program. I'm managing the
> > > > >> > > > user@jspwiki.apache.org mailing list.
> > > > >> > > >
> > > > >> > > > I'm working for my owner, who can be reached
> > > > >> > > > at user-owner@jspwiki.apache.org.
> > > > >> > > >
> > > > >> > > > Acknowledgment: I have added the address
> > > > >> > > >
> > > > >> > > > jpimentel@ra.rockwell.com
> > > > >> > > >
> > > > >> > > > to the user mailing list.
> > > > >> > > >
> > > > >> > > > Welcome to user@jspwiki.apache.org!
> > > > >> > > >
> > > > >> > > > Please save this message so that you know the address you
> are
> > > > >> > > > subscribed under, in case you later want to unsubscribe or
> > > change
> > > > >> your
> > > > >> > > > subscription address.
> > > > >> > > >
> > > > >> > > >
> > > > >> > > > --- Administrative commands for the user list ---
> > > > >> > > >
> > > > >> > > > I can handle administrative requests automatically. Please
> > > > >> > > > do not send them to the list address! Instead, send
> > > > >> > > > your message to the correct command address:
> > > > >> > > >
> > > > >> > > > To subscribe to the list, send a message to:
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > >
> > > > >> > > > To remove your address from the list, send a message to:
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > >
> > > > >> > > > Send mail to the following for info and FAQ for this list:
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > >
> > > > >> > > > Similar addresses exist for the digest list:
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > >
> > > > >> > > > To get messages 123 through 145 (a maximum of 100 per
> > request),
> > > > >> mail:
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > >
> > > > >> > > > To get an index with subject and author for messages
> 123-456 ,
> > > > mail:
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > >
> > > > >> > > > They are always returned as sets of 100, max 2000 per
> request,
> > > > >> > > > so you'll actually get 100-499.
> > > > >> > > >
> > > > >> > > > To receive all messages with the same subject as message
> > 12345,
> > > > >> > > > send a short message to:
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > >
> > > > >> > > > The messages should contain one line or word of text to
> avoid
> > > > being
> > > > >> > > > treated as sp@m, but I will ignore their content.
> > > > >> > > > Only the ADDRESS you send to is important.
> > > > >> > > >
> > > > >> > > > You can start a subscription for an alternate address,
> > > > >> > > > for example "john@host.domain", just add a hyphen and your
> > > > >> > > > address (with '=' instead of '@') after the command word:
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > >
> > > > >> > > > To stop subscription for this address, mail:
> > > > >> > > > <us...@jspwiki.apache.org>
> > > > >> > > >
> > > > >> > > > In both cases, I'll send a confirmation message to that
> > address.
> > > > >> When
> > > > >> > > > you receive it, simply reply to it to complete your
> > > subscription.
> > > > >> > > >
> > > > >> > > > If despite following these instructions, you do not get the
> > > > >> > > > desired results, please contact my owner at
> > > > >> > > > user-owner@jspwiki.apache.org. Please be patient, my owner
> > is a
> > > > >> > > > lot slower than I am ;-)
> > > > >> > > >
> > > > >> > > > --- Enclosed is a copy of the request I received.
> > > > >> > > >
> > > > >> > > > Return-Path: <jp...@ra.rockwell.com>
> > > > >> > > > Received: (qmail 84748 invoked by uid 99); 26 Aug 2013
> > 13:16:04
> > > > >> -0000
> > > > >> > > > Received: from athena.apache.org (HELO athena.apache.org)
> > > > >> > > (140.211.11.136)
> > > > >> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
> 2013
> > > > >> 13:16:04
> > > > >> > > > +0000
> > > > >> > > > X-ASF-Spam-Status: No, hits=-0.0 required=5.0
> > > > >> > > > tests=SPF_PASS
> > > > >> > > > X-Spam-Check-By: apache.org
> > > > >> > > > Received-SPF: pass (athena.apache.org: local policy)
> > > > >> > > > Received: from [205.175.240.251] (HELO
> > > > ramilwsmtp01.ra.rockwell.com
> > > > >> )
> > > > >> > > > (205.175.240.251)
> > > > >> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug
> 2013
> > > > >> 13:16:00
> > > > >> > > > +0000
> > > > >> > > > In-Reply-To: <13...@jspwiki.apache.org>
> > > > >> > > > References: <13...@jspwiki.apache.org>
> > > > >> > > > Subject: Re: confirm subscribe to user@jspwiki.apache.org
> > > > >> > > > X-KeepSent: D7D57B0D:E2A05A18-86257BD3:0048D45A;
> > > > >> > > > type=4; name=$KeepSent
> > > > >> > > > To:
> > > > >> > > > user-sc.1377522681.pagaldeamkeafdeakcap-jpimentel=
> > > > >> > > > ra.rockwell.com@jspwiki.apache.org
> > > > >> > > >
> > > > >> > > > X-Mailer: Lotus Notes Release 8.5.2FP2 March 23, 2011
> > > > >> > > > Message-ID:
> > > > >> > > >
> > > > >> > > <
> > > > >> >
> > > > >>
> > > >
> > >
> >
> OFD7D57B0D.E2A05A18-ON86257BD3.0048D45A-86257BD3.0048D84D@ra.rockwell.com
> > > > >> > > > >
> > > > >> > > > From: John Pimentel <jp...@ra.rockwell.com>
> > > > >> > > > Date: Mon, 26 Aug 2013 08:15:38 -0500
> > > > >> > > > X-MIMETrack: Serialize by Router on
> > > > >> RAMilwSMTP01/Milwaukee/RA/Rockwell
> > > > >> > at
> > > > >> > > > 08/26/2013 08:15:59
> > > > >> > > > AM
> > > > >> > > > MIME-Version: 1.0
> > > > >> > > > Content-type: multipart/mixed;
> > > > >> > > >
> > > > >> > > >
> > > > Boundary="0__=09BBF140DFDB52CA8f9e8a93df938690918c09BBF140DFDB52CA"
> > > > >> > > > Content-Disposition: inline
> > > > >> > > > X-Virus-Checked: Checked by ClamAV on apache.org
> > > > >> > > >
> > > > >> > > >
> > > > >> > >
> > > > >> >
> > > > >>
> > > > >>
> > > > >
> > > >
> > >
> >
>
Re: issues unsubscribing user@jspwiki.a.o
Posted by Juan Pablo Santos Rodríguez <ju...@gmail.com>.
Hi Claudia,
sending an email to either user@jspwiki.apache.org (as per
http://jspwiki.apache.org/jspwiki/community/mailing_lists.html) or
jspwiki-user-unsubscribe@incubator.apache.org should be enough
br,
juan pablo
On Wed, Aug 28, 2013 at 7:43 PM, Claudia Frers <cl...@gmail.com>wrote:
> Hi I am having similar unsubscribe issues as Shine. Clicking on the link
> did not help. What should i do?
>
>
> On Wed, Aug 28, 2013 at 7:15 PM, Juan Pablo Santos Rodríguez <
> juanpablo.santos@gmail.com> wrote:
>
> > Hi Shine,
> >
> > (switchting subject to a more descriptive one)
> >
> > Could you try with jspwiki-user-unsubscribe@incubator.apache.org? There
> > are
> > chances you were subscribed to the incubator list, and unsubscribing
> isn't
> > looking in the old ML, which redirects to the new one. If that's the
> case,
> > would you mind pinging me off-list with the results?
> >
> > In any case, seems like an infra issue, if problem persists we'll file an
> > issue in order to stop the annoyances
> >
> >
> > br,
> > juan pablo
> >
> >
> >
> > On Wed, Aug 28, 2013 at 4:34 PM, Shine Prakash
> > <sh...@icasework.com>wrote:
> >
> > > I end up getting the same message saying that I am not in the
> subscribed
> > > list. Painful!
> > >
> > >
> > > Regards,
> > > Shine Prakash
> > > Software Consultant
> > > iCasework Ltd.
> > > +44 (0) 207 624 4991
> > > www.icasework.com
> > > www.usefulfeedback.com
> > > www.managemyrequests.com
> > >
> > >
> > > ---------- Forwarded message ----------
> > > From: <us...@jspwiki.apache.org>
> > > Date: 28 August 2013 15:24
> > > Subject: Not subscribed to user@jspwiki.apache.org
> > > To: shine.prakash@icasework.com
> > >
> > >
> > > Hi! This is the ezmlm program. I'm managing the
> > > user@jspwiki.apache.org mailing list.
> > >
> > > I'm working for my owner, who can be reached
> > > at user-owner@jspwiki.apache.org.
> > >
> > > Acknowledgment: The address
> > >
> > > shine.prakash@icasework.com
> > >
> > > was not on the user mailing list when I received
> > > your request and is not a subscriber of this list.
> > >
> > > If you unsubscribe, but continue to receive mail, you're subscribed
> > > under a different address than you currently use. Please look at the
> > > header for:
> > >
> > > 'Return-Path: <us...@jspwiki.apache.org>'
> > >
> > > The unsubscribe address for this user would be:
> > > 'user-unsubscribe-user=host.dom@jspwiki.apache.org'.
> > > Just mail to that address, substituting user=host.dom for the real
> > > values, reply to the confirmation request, and you should receive a
> > message
> > > that you're off the list.
> > >
> > > For some mail programs, you need to make the headers visible to
> > > see the return path:
> > >
> > > For Eudora 4.0, click on the "Blah blah ..." button.
> > > For PMMail, click on "Window->Show entire message/header".
> > >
> > > If this still doesn't work, I'm sorry to say that I can't help you.
> > > Please FORWARD a list message together with a note about what you're
> > > trying to achieve and a list of addresses that you might be subscribed
> > > under to my owner:
> > >
> > > user-owner@jspwiki.apache.org
> > >
> > > who will take care of it. My owner is a little bit slower than I am,
> > > so please be patient.
> > >
> > >
> > > --- Administrative commands for the user list ---
> > >
> > > I can handle administrative requests automatically. Please
> > > do not send them to the list address! Instead, send
> > > your message to the correct command address:
> > >
> > > To subscribe to the list, send a message to:
> > > <us...@jspwiki.apache.org>
> > >
> > > To remove your address from the list, send a message to:
> > > <us...@jspwiki.apache.org>
> > >
> > > Send mail to the following for info and FAQ for this list:
> > > <us...@jspwiki.apache.org>
> > > <us...@jspwiki.apache.org>
> > >
> > > Similar addresses exist for the digest list:
> > > <us...@jspwiki.apache.org>
> > > <us...@jspwiki.apache.org>
> > >
> > > To get messages 123 through 145 (a maximum of 100 per request), mail:
> > > <us...@jspwiki.apache.org>
> > >
> > > To get an index with subject and author for messages 123-456 , mail:
> > > <us...@jspwiki.apache.org>
> > >
> > > They are always returned as sets of 100, max 2000 per request,
> > > so you'll actually get 100-499.
> > >
> > > To receive all messages with the same subject as message 12345,
> > > send a short message to:
> > > <us...@jspwiki.apache.org>
> > >
> > > The messages should contain one line or word of text to avoid being
> > > treated as sp@m, but I will ignore their content.
> > > Only the ADDRESS you send to is important.
> > >
> > > You can start a subscription for an alternate address,
> > > for example "john@host.domain", just add a hyphen and your
> > > address (with '=' instead of '@') after the command word:
> > > <us...@jspwiki.apache.org>
> > >
> > > To stop subscription for this address, mail:
> > > <us...@jspwiki.apache.org>
> > >
> > > In both cases, I'll send a confirmation message to that address. When
> > > you receive it, simply reply to it to complete your subscription.
> > >
> > > If despite following these instructions, you do not get the
> > > desired results, please contact my owner at
> > > user-owner@jspwiki.apache.org. Please be patient, my owner is a
> > > lot slower than I am ;-)
> > >
> > > --- Enclosed is a copy of the request I received.
> > >
> > > Return-Path: <sh...@icasework.com>
> > > Received: (qmail 14894 invoked by uid 99); 28 Aug 2013 14:24:02 -0000
> > > Received: from athena.apache.org (HELO athena.apache.org)
> > (140.211.11.136)
> > > by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013 14:24:02
> > > +0000
> > > X-ASF-Spam-Status: No, hits=-9.9 required=10.0
> > >
> > >
> > >
> >
> tests=ASF_LIST_OPS,ASF_LIST_UNSUB_A,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,TVD_GET_STOCK,WEIRD_PORT
> > > X-Spam-Check-By: apache.org
> > > Received-SPF: unknown (athena.apache.org: error in processing during
> > > lookup
> > > of shine.prakash@icasework.com)
> > > Received: from [209.85.214.182] (HELO mail-ob0-f182.google.com)
> > > (209.85.214.182)
> > > by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013 14:23:58
> > > +0000
> > > Received: by mail-ob0-f182.google.com with SMTP id wo10so6844227obc.27
> > > for <us...@jspwiki.apache.org>; Wed, 28 Aug 2013
> > > 07:23:37 -0700 (PDT)
> > > X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> > > d=google.com; s=20120113;
> > >
> > h=x-gm-message-state:mime-version:in-reply-to:references:from:date
> > > :message-id:subject:to:content-type;
> > > bh=ixJFRcL2Q0jSLZM1ZNof9EtwHaH4KiesZ5zF3pHBSNc=;
> > >
> > > b=panDiGKtqYgtZ18nLf1tAGs8gK5G2cPtTRagm7ery4DYD+CsclNsSHvCCrK2T09SVp
> > >
> > > LZd44PN4rdaz0Ls0QwOii7OZRnKHpvFng9hDuK4BfkKcZJLo2AIO3suImsteLWtpe0Iv
> > >
> > > 7/JlUdt5dCc34Zh+rJh0sL6SBUtua0ncTbgRI/jZqK9kc1AjHXx53WZ4OH9mkC1Ew9v7
> > >
> > > BuKImYEJPm2pJ3i8u2rh9Z/O/cVdCqeDyIAvPaVti+8tANUUJkM45ih/Nw8f1sY5zDSs
> > >
> > > DwNgF+Mg/aTHh28OcIvxMvgGAsenjmOYBTripxJE0vDGqBZPPvK5MHd1g+Fn4Aarwx+u
> > > VKdA==
> > > X-Gm-Message-State:
> > >
> > >
> >
> ALoCoQlb0bM1TZ7T17Vo4wJ7kkIUXadLEO5QNZMf4IbLcigK9cLv3Z3gSlSiemW/S2DnIHsWbRm7
> > > X-Received: by 10.182.44.134 with SMTP id
> > e6mr6789662obm.14.1377699816993;
> > > Wed, 28 Aug 2013 07:23:36 -0700 (PDT)
> > > MIME-Version: 1.0
> > > Received: by 10.60.40.41 with HTTP; Wed, 28 Aug 2013 07:23:16 -0700
> (PDT)
> > > X-Originating-IP: [81.139.83.190]
> > > In-Reply-To: <
> > >
> >
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> > > References: <13...@jspwiki.apache.org> <
> > >
> >
> OF0FCD1230.245CC751-ON86257BD3.00498BC2-86257BD3.00514276@ra.rockwell.com>
> > > <CA...@mail.gmail.com>
> > > <
> > >
> >
> OF69EABD41.A8F0A0AE-ON86257BD4.005AD83C-86257BD4.005F10A8@ra.rockwell.com>
> > > <CA...@mail.gmail.com>
> > > <CA...@mail.gmail.com>
> <
> > >
> >
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> > > From: Shine Prakash <sh...@icasework.com>
> > > Date: Wed, 28 Aug 2013 15:23:16 +0100
> > > Message-ID: <CAJ0cJdzsMizEpTnuOe8==9wEz-GeR=
> > > nD7sAiayAfNJ1fpvjcwA@mail.gmail.com>
> > > Subject: Re: ldaps authentication to jspwiki
> > > To: user-unsubscribe@jspwiki.apache.org
> > > Content-Type: multipart/alternative;
> > boundary=001a11c3235a3321d104e502bcf1
> > > X-Virus-Checked: Checked by ClamAV on apache.org
> > >
> > >
> > > Regards,
> > > Shine Prakash
> > > Software Consultant
> > > iCasework Ltd.
> > > +44 (0) 207 624 4991
> > > www.icasework.com
> > > www.usefulfeedback.com
> > > www.managemyrequests.com
> > >
> > >
> > > On 28 August 2013 15:23, Shine Prakash <sh...@icasework.com>
> > > wrote:
> > >
> > > >
> > > > Thanks. I have tried.
> > > >
> > > > Regards,
> > > > Shine Prakash
> > > > Software Consultant
> > > > iCasework Ltd.
> > > > +44 (0) 207 624 4991
> > > > www.icasework.com
> > > > www.usefulfeedback.com
> > > > www.managemyrequests.com
> > > >
> > > >
> > > > On 28 August 2013 15:18, John Pimentel <jp...@ra.rockwell.com>
> > > wrote:
> > > >
> > > >> To remove your address from the list, send a message to:
> > > >> <us...@jspwiki.apache.org>
> > > >>
> > > >>
> > > >> Regards,
> > > >> John Pimentel
> > > >>
> > > >> [image: Description: Description: ralogo_web]
> > > >> *jpimentel@ra.rockwell.com* <jp...@ra.rockwell.com>
> > > >> Office (414) 382-3354
> > > >> *Mobile (262) 501-4785*<
> > > 2625014785@txt.att.net?subject=RA%20Text%204%20U>
> > > >>
> > > >>
> > > >>
> > > >>
> > > >> From: Shine Prakash <sh...@icasework.com>
> > > >> To: user@jspwiki.apache.org
> > > >> Date: 08/28/2013 03:35 AM
> > > >> Subject: Re: ldaps authentication to jspwiki
> > > >> ------------------------------
> > > >>
> > > >>
> > > >>
> > > >> HOW do I unsubscribe myself?
> > > >>
> > > >>
> > > >>
> > > >> On 27 August 2013 23:34, Jim Willeke <ji...@willeke.com> wrote:
> > > >>
> > > >> > You might try remove the:
> > > >> > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > > >> >
> > > >> > and use (what I am using):
> > > >> >
> > > >> >
> > > userBase="ou=people,dc=mydomain,dc=com"
> > > >> > userSearch="(uid={0})"
> > > >> > userSubtree="true"
> > > >> >
> > > >> > We found the LDAP search to be much more flexible using this than
> > the
> > > >> > pattern matching.
> > > >> > You should also be able to get some error from tomcat if it is
> > > failing.
> > > >> > You can turn on access logging:
> > > >> >
> > http://tomcat.apache.org/tomcat-7.0-doc/config/host.html#Access_Logs
> > > >> >
> > > >> >
> > > >> > If you drop the LDAPS, You might also get a trace. (Not sure if
> SUN
> > > can
> > > >> > show the ldap requests) but tcdump (or wireshark) will.
> > > >> >
> > > >> >
> > > >> > --
> > > >> > -jim
> > > >> > Jim Willeke
> > > >> >
> > > >> >
> > > >> > On Tue, Aug 27, 2013 at 1:18 PM, John Pimentel <
> > > >> jpimentel@ra.rockwell.com
> > > >> > >wrote:
> > > >> >
> > > >> > >
> > > >> > > Hi Jim,
> > > >> > >
> > > >> > > Thanks for the response.
> > > >> > >
> > > >> > > We are using Sun LDAP. Let me give you an example from my user
> > > >> account.
> > > >> > > Under my group container
> > > >> > > cn=UN_CTM_AdminGroup,ou=Control-M,ou=group,dc=mydomain,dc=com
> > > >> > > I have a attribute called uniqueMember.
> > > >> > > The value for my account is as follows:
> > > >> > > uid=JPimen,ou=people,dc=mydomain,dc=com
> > > >> > >
> > > >> > > I of course substituted our actual domain for mydomain in this
> > > >> example,
> > > >> > but
> > > >> > > everything else is verbatim.
> > > >> > >
> > > >> > > So our groups are nmed by cn but the users are named by uid.
> > > >> > >
> > > >> > > Unfortunately our LDAP server will not accept anything other
> than
> > > >> ldaps
> > > >> > > connections, so I am stuck there.
> > > >> > >
> > > >> > > Also if you have any recommendation on how to enable security
> > > specific
> > > >> > > debug I would appreciate that.
> > > >> > >
> > > >> > > I found what appears to be a log level entry in my
> > > jspwiki.properties
> > > >> > file.
> > > >> > > I changed
> > > >> > > log4j.rootCategory=INFO,FileLog
> > > >> > > To read
> > > >> > > log4j.rootCategory=DEBUG,FileLog
> > > >> > >
> > > >> > > Now, I do see debug entries in the
> > > /web1/dyscq/tomcat/logs/jspwiki.log
> > > >> > > file, but no entries appear when I try (and fail) to log in.
> > > >> > >
> > > >> > > Thanks again for any ideas.
> > > >> > >
> > > >> > > Regards,
> > > >> > > John Pimentel
> > > >> > >
> > > >> > > (Embedded image moved to file: pic11833.gif)Description:
> > > Description:
> > > >> > > ralogo_web
> > > >> > > jpimentel@ra.rockwell.com
> > > >> > > Office (414) 382-3354
> > > >> > > Mobile (262) 501-4785
> > > >> > >
> > > >> > >
> > > >> > >
> > > >> > >
> > > >> > > From: Jim Willeke <ji...@willeke.com>
> > > >> > > To: user@jspwiki.apache.org
> > > >> > > Date: 08/27/2013 03:40 AM
> > > >> > > Subject: Re: ldaps authentication to jspwiki
> > > >> > >
> > > >> > >
> > > >> > >
> > > >> > > I would guess, as you show no information on your LDAP setup,
> this
> > > >> line
> > > >> > is
> > > >> > > wrong:
> > > >> > > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > > >> > >
> > > >> > > Are your users named by uid or cn?
> > > >> > > You show roles as named by cn and since you show dc=,dc= I would
> > > guess
> > > >> > this
> > > >> > > is AD
> > > >> > >
> > > >> > > Also, try using LDAP vs LDAPS to help troubleshoot.
> > > >> > >
> > > >> > > -jim
> > > >> > >
> > > >> > > --
> > > >> > > -jim
> > > >> > > Jim Willeke
> > > >> > >
> > > >> > >
> > > >> > > On Mon, Aug 26, 2013 at 10:47 AM, John Pimentel
> > > >> > > <jp...@ra.rockwell.com>wrote:
> > > >> > >
> > > >> > > >
> > > >> > > > Greetings,
> > > >> > > >
> > > >> > > > I am having difficulties getting LDAPS authentication to work
> > and
> > > I
> > > >> > think
> > > >> > > I
> > > >> > > > must be missing some fundamental configuration.
> > > >> > > >
> > > >> > > > My current state is that the Site loads and displays content
> > > >> properly,
> > > >> > > but
> > > >> > > > when I go to edit content or I select the log in page
> directly,
> > my
> > > >> LDAP
> > > >> > > > credentials do not authenticate, and I am repeatedly presented
> > > with
> > > >> a
> > > >> > > login
> > > >> > > > page.
> > > >> > > >
> > > >> > > > I used the follwing information as my "How To" for this
> effort.
> > > >> > > >
> > > http://www.ecyrd.com/JSPWiki/wiki/WebContainerAuthenticationViaLDAP
> > > >> > > >
> > > >> > > > This article is very good but appears to be incomplete.
> > > >> > > >
> > > >> > > > I have done the following configuration to get ldaps to work:
> > > >> > > >
> > > >> > > > 1. I have a previously configured LDAP Server and I stored
> > > /trusted
> > > >> the
> > > >> > > > cert for this Sun LDAP server into the central java keystore
> > using
> > > >> this
> > > >> > > > command:
> > > >> > > > /usr/lib64/jvm/jre/bin/keytool -import -alias sunldap
> > > >> > > > -file /web1/sst/dysc/content/CA-RA-v3.crt
> > > >> > > > -keystore /usr/lib64/jvm/jre/lib/security/cacerts
> > > >> > > >
> > > >> > > > 2. I have configured the realm and sorted out all the log
> errors
> > > >> using
> > > >> > > the
> > > >> > > > following realm in the server.xml file. I believe tomcat is
> > > >> > successfully
> > > >> > > > connecting to my LDAP server.
> > > >> > > >
> > > >> > > > <Realm className="org.apache.catalina.realm.JNDIRealm"
> > > >> > > > connectionURL="ldaps://
> > mkedsintp.ds.mydomain.com:636
> > > "
> > > >> > > > connectionName="uid=[bind User
> > > >> > > > UID],ou=admin,dc=rmydomain,dc=com"
> > > >> > > > connectionPassword="[Password]"
> > > >> > > >
> userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > > >> > > >
> roleBase="ou=Control-M,ou=group,dc=mydomain,dc=com"
> > > >> > > > roleSubtree="true"
> > > >> > > > roleName="cn"
> > > >> > > > roleSearch="(uniqueMember={0})"
> > > >> > > > />
> > > >> > > >
> > > >> > > > 3. I uncommented the "CONTAINER-MANAGED AUTH" section
> > > >> > > > from /web1/dyscq/webapps/apps/wiki/WEB-INF/web.xml
> > > >> > > >
> > > >> > > > There is a section at the bottom that says "Update JSPWiki
> > > security
> > > >> > > policy"
> > > >> > > > If you would like to set permissions to LDAP groups, you can
> > > simply
> > > >> add
> > > >> > > > policy entries on authorize.Role. The following is an entry
> for
> > > >> > > wiki-admin
> > > >> > > > group (from LDAP).
> > > >> > > > grant principal com.ecyrd.jspwiki.auth.authorize.Role
> > > "wiki-admin" {
> > > >> > > > permission
> com.ecyrd.jspwiki.auth.permissions.AllPermission
> > > "*";
> > > >> > > > };
> > > >> > > >
> > > >> > > > I'm thinking it might go into web.xml, but I am not sure of
> > that..
> > > >> > > >
> > > >> > > > this section of the xml looks like this:
> > > >> > > >
> > > >> > > > <security-constraint>
> > > >> > > > <web-resource-collection>
> > > >> > > > <web-resource-name>Authenticated
> > > area</web-resource-name>
> > > >> > > > <url-pattern>/Edit.jsp</url-pattern>
> > > >> > > > <url-pattern>/Comment.jsp</url-pattern>
> > > >> > > > <url-pattern>/Login.jsp</url-pattern>
> > > >> > > > <url-pattern>/NewGroup.jsp</url-pattern>
> > > >> > > > <url-pattern>/Rename.jsp</url-pattern>
> > > >> > > > <url-pattern>/Upload.jsp</url-pattern>
> > > >> > > > <http-method>DELETE</http-method>
> > > >> > > > <http-method>GET</http-method>
> > > >> > > > <http-method>HEAD</http-method>
> > > >> > > > <http-method>POST</http-method>
> > > >> > > > <http-method>PUT</http-method>
> > > >> > > > </web-resource-collection>
> > > >> > > >
> > > >> > > > <web-resource-collection>
> > > >> > > > <web-resource-name>Read-only
> Area</web-resource-name>
> > > >> > > > <url-pattern>/attach</url-pattern>
> > > >> > > > <http-method>DELETE</http-method>
> > > >> > > > <http-method>POST</http-method>
> > > >> > > > <http-method>PUT</http-method>
> > > >> > > > </web-resource-collection>
> > > >> > > >
> > > >> > > > <auth-constraint>
> > > >> > > > <role-name>Admin</role-name>
> > > >> > > > <role-name>Authenticated</role-name>
> > > >> > > > </auth-constraint>
> > > >> > > > <!-- > > > <user-data-constraint>
> > > >> > > >
> > <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> > > >> > > > </user-data-constraint>
> > > >> > > > -->
> > > >> > > >
> > > >> > > > </security-constraint>
> > > >> > > >
> > > >> > > > <login-config>
> > > >> > > > <auth-method>FORM</auth-method>
> > > >> > > > <form-login-config>
> > > >> > > > <form-login-page>/LoginForm.jsp</form-login-page>
> > > >> > > > <form-error-page>/LoginForm.jsp</form-error-page>
> > > >> > > > </form-login-config>
> > > >> > > > </login-config>
> > > >> > > >
> > > >> > > > <security-role>
> > > >> > > > <description>
> > > >> > > > This logical role includes all authenticated users
> > > >> > > > </description>
> > > >> > > > <role-name>Authenticated</role-name>
> > > >> > > > </security-role>
> > > >> > > >
> > > >> > > > <security-role>
> > > >> > > > <description>
> > > >> > > > This logical role includes all administrative users
> > > >> > > > </description>
> > > >> > > > <role-name>Admin</role-name>
> > > >> > > > </security-role>
> > > >> > > >
> > > >> > > >
> > > >> > > > Regards,
> > > >> > > > John Pimentel
> > > >> > > >
> > > >> > > > (Embedded image moved to file: pic05844.gif)Description:
> > > >> Description:
> > > >> > > > ralogo_web
> > > >> > > > jpimentel@ra.rockwell.com
> > > >> > > > Office (414) 382-3354
> > > >> > > > Mobile (262) 501-4785
> > > >> > > >
> > > >> > > >
> > > >> > > >
> > > >> > > >
> > > >> > > > From: user-help@jspwiki.apache.org
> > > >> > > > To: jpimentel@ra.rockwell.com
> > > >> > > > Date: 08/26/2013 08:16 AM
> > > >> > > > Subject: WELCOME to user@jspwiki.apache.org
> > > >> > > >
> > > >> > > >
> > > >> > > >
> > > >> > > > Hi! This is the ezmlm program. I'm managing the
> > > >> > > > user@jspwiki.apache.org mailing list.
> > > >> > > >
> > > >> > > > I'm working for my owner, who can be reached
> > > >> > > > at user-owner@jspwiki.apache.org.
> > > >> > > >
> > > >> > > > Acknowledgment: I have added the address
> > > >> > > >
> > > >> > > > jpimentel@ra.rockwell.com
> > > >> > > >
> > > >> > > > to the user mailing list.
> > > >> > > >
> > > >> > > > Welcome to user@jspwiki.apache.org!
> > > >> > > >
> > > >> > > > Please save this message so that you know the address you are
> > > >> > > > subscribed under, in case you later want to unsubscribe or
> > change
> > > >> your
> > > >> > > > subscription address.
> > > >> > > >
> > > >> > > >
> > > >> > > > --- Administrative commands for the user list ---
> > > >> > > >
> > > >> > > > I can handle administrative requests automatically. Please
> > > >> > > > do not send them to the list address! Instead, send
> > > >> > > > your message to the correct command address:
> > > >> > > >
> > > >> > > > To subscribe to the list, send a message to:
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > >
> > > >> > > > To remove your address from the list, send a message to:
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > >
> > > >> > > > Send mail to the following for info and FAQ for this list:
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > >
> > > >> > > > Similar addresses exist for the digest list:
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > >
> > > >> > > > To get messages 123 through 145 (a maximum of 100 per
> request),
> > > >> mail:
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > >
> > > >> > > > To get an index with subject and author for messages 123-456 ,
> > > mail:
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > >
> > > >> > > > They are always returned as sets of 100, max 2000 per request,
> > > >> > > > so you'll actually get 100-499.
> > > >> > > >
> > > >> > > > To receive all messages with the same subject as message
> 12345,
> > > >> > > > send a short message to:
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > >
> > > >> > > > The messages should contain one line or word of text to avoid
> > > being
> > > >> > > > treated as sp@m, but I will ignore their content.
> > > >> > > > Only the ADDRESS you send to is important.
> > > >> > > >
> > > >> > > > You can start a subscription for an alternate address,
> > > >> > > > for example "john@host.domain", just add a hyphen and your
> > > >> > > > address (with '=' instead of '@') after the command word:
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > >
> > > >> > > > To stop subscription for this address, mail:
> > > >> > > > <us...@jspwiki.apache.org>
> > > >> > > >
> > > >> > > > In both cases, I'll send a confirmation message to that
> address.
> > > >> When
> > > >> > > > you receive it, simply reply to it to complete your
> > subscription.
> > > >> > > >
> > > >> > > > If despite following these instructions, you do not get the
> > > >> > > > desired results, please contact my owner at
> > > >> > > > user-owner@jspwiki.apache.org. Please be patient, my owner
> is a
> > > >> > > > lot slower than I am ;-)
> > > >> > > >
> > > >> > > > --- Enclosed is a copy of the request I received.
> > > >> > > >
> > > >> > > > Return-Path: <jp...@ra.rockwell.com>
> > > >> > > > Received: (qmail 84748 invoked by uid 99); 26 Aug 2013
> 13:16:04
> > > >> -0000
> > > >> > > > Received: from athena.apache.org (HELO athena.apache.org)
> > > >> > > (140.211.11.136)
> > > >> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug 2013
> > > >> 13:16:04
> > > >> > > > +0000
> > > >> > > > X-ASF-Spam-Status: No, hits=-0.0 required=5.0
> > > >> > > > tests=SPF_PASS
> > > >> > > > X-Spam-Check-By: apache.org
> > > >> > > > Received-SPF: pass (athena.apache.org: local policy)
> > > >> > > > Received: from [205.175.240.251] (HELO
> > > ramilwsmtp01.ra.rockwell.com
> > > >> )
> > > >> > > > (205.175.240.251)
> > > >> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug 2013
> > > >> 13:16:00
> > > >> > > > +0000
> > > >> > > > In-Reply-To: <13...@jspwiki.apache.org>
> > > >> > > > References: <13...@jspwiki.apache.org>
> > > >> > > > Subject: Re: confirm subscribe to user@jspwiki.apache.org
> > > >> > > > X-KeepSent: D7D57B0D:E2A05A18-86257BD3:0048D45A;
> > > >> > > > type=4; name=$KeepSent
> > > >> > > > To:
> > > >> > > > user-sc.1377522681.pagaldeamkeafdeakcap-jpimentel=
> > > >> > > > ra.rockwell.com@jspwiki.apache.org
> > > >> > > >
> > > >> > > > X-Mailer: Lotus Notes Release 8.5.2FP2 March 23, 2011
> > > >> > > > Message-ID:
> > > >> > > >
> > > >> > > <
> > > >> >
> > > >>
> > >
> >
> OFD7D57B0D.E2A05A18-ON86257BD3.0048D45A-86257BD3.0048D84D@ra.rockwell.com
> > > >> > > > >
> > > >> > > > From: John Pimentel <jp...@ra.rockwell.com>
> > > >> > > > Date: Mon, 26 Aug 2013 08:15:38 -0500
> > > >> > > > X-MIMETrack: Serialize by Router on
> > > >> RAMilwSMTP01/Milwaukee/RA/Rockwell
> > > >> > at
> > > >> > > > 08/26/2013 08:15:59
> > > >> > > > AM
> > > >> > > > MIME-Version: 1.0
> > > >> > > > Content-type: multipart/mixed;
> > > >> > > >
> > > >> > > >
> > > Boundary="0__=09BBF140DFDB52CA8f9e8a93df938690918c09BBF140DFDB52CA"
> > > >> > > > Content-Disposition: inline
> > > >> > > > X-Virus-Checked: Checked by ClamAV on apache.org
> > > >> > > >
> > > >> > > >
> > > >> > >
> > > >> >
> > > >>
> > > >>
> > > >
> > >
> >
>
Re: issues unsubscribing user@jspwiki.a.o
Posted by Claudia Frers <cl...@gmail.com>.
Hi I am having similar unsubscribe issues as Shine. Clicking on the link
did not help. What should i do?
On Wed, Aug 28, 2013 at 7:15 PM, Juan Pablo Santos Rodríguez <
juanpablo.santos@gmail.com> wrote:
> Hi Shine,
>
> (switchting subject to a more descriptive one)
>
> Could you try with jspwiki-user-unsubscribe@incubator.apache.org? There
> are
> chances you were subscribed to the incubator list, and unsubscribing isn't
> looking in the old ML, which redirects to the new one. If that's the case,
> would you mind pinging me off-list with the results?
>
> In any case, seems like an infra issue, if problem persists we'll file an
> issue in order to stop the annoyances
>
>
> br,
> juan pablo
>
>
>
> On Wed, Aug 28, 2013 at 4:34 PM, Shine Prakash
> <sh...@icasework.com>wrote:
>
> > I end up getting the same message saying that I am not in the subscribed
> > list. Painful!
> >
> >
> > Regards,
> > Shine Prakash
> > Software Consultant
> > iCasework Ltd.
> > +44 (0) 207 624 4991
> > www.icasework.com
> > www.usefulfeedback.com
> > www.managemyrequests.com
> >
> >
> > ---------- Forwarded message ----------
> > From: <us...@jspwiki.apache.org>
> > Date: 28 August 2013 15:24
> > Subject: Not subscribed to user@jspwiki.apache.org
> > To: shine.prakash@icasework.com
> >
> >
> > Hi! This is the ezmlm program. I'm managing the
> > user@jspwiki.apache.org mailing list.
> >
> > I'm working for my owner, who can be reached
> > at user-owner@jspwiki.apache.org.
> >
> > Acknowledgment: The address
> >
> > shine.prakash@icasework.com
> >
> > was not on the user mailing list when I received
> > your request and is not a subscriber of this list.
> >
> > If you unsubscribe, but continue to receive mail, you're subscribed
> > under a different address than you currently use. Please look at the
> > header for:
> >
> > 'Return-Path: <us...@jspwiki.apache.org>'
> >
> > The unsubscribe address for this user would be:
> > 'user-unsubscribe-user=host.dom@jspwiki.apache.org'.
> > Just mail to that address, substituting user=host.dom for the real
> > values, reply to the confirmation request, and you should receive a
> message
> > that you're off the list.
> >
> > For some mail programs, you need to make the headers visible to
> > see the return path:
> >
> > For Eudora 4.0, click on the "Blah blah ..." button.
> > For PMMail, click on "Window->Show entire message/header".
> >
> > If this still doesn't work, I'm sorry to say that I can't help you.
> > Please FORWARD a list message together with a note about what you're
> > trying to achieve and a list of addresses that you might be subscribed
> > under to my owner:
> >
> > user-owner@jspwiki.apache.org
> >
> > who will take care of it. My owner is a little bit slower than I am,
> > so please be patient.
> >
> >
> > --- Administrative commands for the user list ---
> >
> > I can handle administrative requests automatically. Please
> > do not send them to the list address! Instead, send
> > your message to the correct command address:
> >
> > To subscribe to the list, send a message to:
> > <us...@jspwiki.apache.org>
> >
> > To remove your address from the list, send a message to:
> > <us...@jspwiki.apache.org>
> >
> > Send mail to the following for info and FAQ for this list:
> > <us...@jspwiki.apache.org>
> > <us...@jspwiki.apache.org>
> >
> > Similar addresses exist for the digest list:
> > <us...@jspwiki.apache.org>
> > <us...@jspwiki.apache.org>
> >
> > To get messages 123 through 145 (a maximum of 100 per request), mail:
> > <us...@jspwiki.apache.org>
> >
> > To get an index with subject and author for messages 123-456 , mail:
> > <us...@jspwiki.apache.org>
> >
> > They are always returned as sets of 100, max 2000 per request,
> > so you'll actually get 100-499.
> >
> > To receive all messages with the same subject as message 12345,
> > send a short message to:
> > <us...@jspwiki.apache.org>
> >
> > The messages should contain one line or word of text to avoid being
> > treated as sp@m, but I will ignore their content.
> > Only the ADDRESS you send to is important.
> >
> > You can start a subscription for an alternate address,
> > for example "john@host.domain", just add a hyphen and your
> > address (with '=' instead of '@') after the command word:
> > <us...@jspwiki.apache.org>
> >
> > To stop subscription for this address, mail:
> > <us...@jspwiki.apache.org>
> >
> > In both cases, I'll send a confirmation message to that address. When
> > you receive it, simply reply to it to complete your subscription.
> >
> > If despite following these instructions, you do not get the
> > desired results, please contact my owner at
> > user-owner@jspwiki.apache.org. Please be patient, my owner is a
> > lot slower than I am ;-)
> >
> > --- Enclosed is a copy of the request I received.
> >
> > Return-Path: <sh...@icasework.com>
> > Received: (qmail 14894 invoked by uid 99); 28 Aug 2013 14:24:02 -0000
> > Received: from athena.apache.org (HELO athena.apache.org)
> (140.211.11.136)
> > by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013 14:24:02
> > +0000
> > X-ASF-Spam-Status: No, hits=-9.9 required=10.0
> >
> >
> >
> tests=ASF_LIST_OPS,ASF_LIST_UNSUB_A,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,TVD_GET_STOCK,WEIRD_PORT
> > X-Spam-Check-By: apache.org
> > Received-SPF: unknown (athena.apache.org: error in processing during
> > lookup
> > of shine.prakash@icasework.com)
> > Received: from [209.85.214.182] (HELO mail-ob0-f182.google.com)
> > (209.85.214.182)
> > by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 28 Aug 2013 14:23:58
> > +0000
> > Received: by mail-ob0-f182.google.com with SMTP id wo10so6844227obc.27
> > for <us...@jspwiki.apache.org>; Wed, 28 Aug 2013
> > 07:23:37 -0700 (PDT)
> > X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
> > d=google.com; s=20120113;
> >
> h=x-gm-message-state:mime-version:in-reply-to:references:from:date
> > :message-id:subject:to:content-type;
> > bh=ixJFRcL2Q0jSLZM1ZNof9EtwHaH4KiesZ5zF3pHBSNc=;
> >
> > b=panDiGKtqYgtZ18nLf1tAGs8gK5G2cPtTRagm7ery4DYD+CsclNsSHvCCrK2T09SVp
> >
> > LZd44PN4rdaz0Ls0QwOii7OZRnKHpvFng9hDuK4BfkKcZJLo2AIO3suImsteLWtpe0Iv
> >
> > 7/JlUdt5dCc34Zh+rJh0sL6SBUtua0ncTbgRI/jZqK9kc1AjHXx53WZ4OH9mkC1Ew9v7
> >
> > BuKImYEJPm2pJ3i8u2rh9Z/O/cVdCqeDyIAvPaVti+8tANUUJkM45ih/Nw8f1sY5zDSs
> >
> > DwNgF+Mg/aTHh28OcIvxMvgGAsenjmOYBTripxJE0vDGqBZPPvK5MHd1g+Fn4Aarwx+u
> > VKdA==
> > X-Gm-Message-State:
> >
> >
> ALoCoQlb0bM1TZ7T17Vo4wJ7kkIUXadLEO5QNZMf4IbLcigK9cLv3Z3gSlSiemW/S2DnIHsWbRm7
> > X-Received: by 10.182.44.134 with SMTP id
> e6mr6789662obm.14.1377699816993;
> > Wed, 28 Aug 2013 07:23:36 -0700 (PDT)
> > MIME-Version: 1.0
> > Received: by 10.60.40.41 with HTTP; Wed, 28 Aug 2013 07:23:16 -0700 (PDT)
> > X-Originating-IP: [81.139.83.190]
> > In-Reply-To: <
> >
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> > References: <13...@jspwiki.apache.org> <
> >
> OF0FCD1230.245CC751-ON86257BD3.00498BC2-86257BD3.00514276@ra.rockwell.com>
> > <CA...@mail.gmail.com>
> > <
> >
> OF69EABD41.A8F0A0AE-ON86257BD4.005AD83C-86257BD4.005F10A8@ra.rockwell.com>
> > <CA...@mail.gmail.com>
> > <CA...@mail.gmail.com> <
> >
> OFF6D32AD2.980ABECE-ON86257BD5.004E8980-86257BD5.004E90C4@ra.rockwell.com>
> > From: Shine Prakash <sh...@icasework.com>
> > Date: Wed, 28 Aug 2013 15:23:16 +0100
> > Message-ID: <CAJ0cJdzsMizEpTnuOe8==9wEz-GeR=
> > nD7sAiayAfNJ1fpvjcwA@mail.gmail.com>
> > Subject: Re: ldaps authentication to jspwiki
> > To: user-unsubscribe@jspwiki.apache.org
> > Content-Type: multipart/alternative;
> boundary=001a11c3235a3321d104e502bcf1
> > X-Virus-Checked: Checked by ClamAV on apache.org
> >
> >
> > Regards,
> > Shine Prakash
> > Software Consultant
> > iCasework Ltd.
> > +44 (0) 207 624 4991
> > www.icasework.com
> > www.usefulfeedback.com
> > www.managemyrequests.com
> >
> >
> > On 28 August 2013 15:23, Shine Prakash <sh...@icasework.com>
> > wrote:
> >
> > >
> > > Thanks. I have tried.
> > >
> > > Regards,
> > > Shine Prakash
> > > Software Consultant
> > > iCasework Ltd.
> > > +44 (0) 207 624 4991
> > > www.icasework.com
> > > www.usefulfeedback.com
> > > www.managemyrequests.com
> > >
> > >
> > > On 28 August 2013 15:18, John Pimentel <jp...@ra.rockwell.com>
> > wrote:
> > >
> > >> To remove your address from the list, send a message to:
> > >> <us...@jspwiki.apache.org>
> > >>
> > >>
> > >> Regards,
> > >> John Pimentel
> > >>
> > >> [image: Description: Description: ralogo_web]
> > >> *jpimentel@ra.rockwell.com* <jp...@ra.rockwell.com>
> > >> Office (414) 382-3354
> > >> *Mobile (262) 501-4785*<
> > 2625014785@txt.att.net?subject=RA%20Text%204%20U>
> > >>
> > >>
> > >>
> > >>
> > >> From: Shine Prakash <sh...@icasework.com>
> > >> To: user@jspwiki.apache.org
> > >> Date: 08/28/2013 03:35 AM
> > >> Subject: Re: ldaps authentication to jspwiki
> > >> ------------------------------
> > >>
> > >>
> > >>
> > >> HOW do I unsubscribe myself?
> > >>
> > >>
> > >>
> > >> On 27 August 2013 23:34, Jim Willeke <ji...@willeke.com> wrote:
> > >>
> > >> > You might try remove the:
> > >> > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > >> >
> > >> > and use (what I am using):
> > >> >
> > >> >
> > userBase="ou=people,dc=mydomain,dc=com"
> > >> > userSearch="(uid={0})"
> > >> > userSubtree="true"
> > >> >
> > >> > We found the LDAP search to be much more flexible using this than
> the
> > >> > pattern matching.
> > >> > You should also be able to get some error from tomcat if it is
> > failing.
> > >> > You can turn on access logging:
> > >> >
> http://tomcat.apache.org/tomcat-7.0-doc/config/host.html#Access_Logs
> > >> >
> > >> >
> > >> > If you drop the LDAPS, You might also get a trace. (Not sure if SUN
> > can
> > >> > show the ldap requests) but tcdump (or wireshark) will.
> > >> >
> > >> >
> > >> > --
> > >> > -jim
> > >> > Jim Willeke
> > >> >
> > >> >
> > >> > On Tue, Aug 27, 2013 at 1:18 PM, John Pimentel <
> > >> jpimentel@ra.rockwell.com
> > >> > >wrote:
> > >> >
> > >> > >
> > >> > > Hi Jim,
> > >> > >
> > >> > > Thanks for the response.
> > >> > >
> > >> > > We are using Sun LDAP. Let me give you an example from my user
> > >> account.
> > >> > > Under my group container
> > >> > > cn=UN_CTM_AdminGroup,ou=Control-M,ou=group,dc=mydomain,dc=com
> > >> > > I have a attribute called uniqueMember.
> > >> > > The value for my account is as follows:
> > >> > > uid=JPimen,ou=people,dc=mydomain,dc=com
> > >> > >
> > >> > > I of course substituted our actual domain for mydomain in this
> > >> example,
> > >> > but
> > >> > > everything else is verbatim.
> > >> > >
> > >> > > So our groups are nmed by cn but the users are named by uid.
> > >> > >
> > >> > > Unfortunately our LDAP server will not accept anything other than
> > >> ldaps
> > >> > > connections, so I am stuck there.
> > >> > >
> > >> > > Also if you have any recommendation on how to enable security
> > specific
> > >> > > debug I would appreciate that.
> > >> > >
> > >> > > I found what appears to be a log level entry in my
> > jspwiki.properties
> > >> > file.
> > >> > > I changed
> > >> > > log4j.rootCategory=INFO,FileLog
> > >> > > To read
> > >> > > log4j.rootCategory=DEBUG,FileLog
> > >> > >
> > >> > > Now, I do see debug entries in the
> > /web1/dyscq/tomcat/logs/jspwiki.log
> > >> > > file, but no entries appear when I try (and fail) to log in.
> > >> > >
> > >> > > Thanks again for any ideas.
> > >> > >
> > >> > > Regards,
> > >> > > John Pimentel
> > >> > >
> > >> > > (Embedded image moved to file: pic11833.gif)Description:
> > Description:
> > >> > > ralogo_web
> > >> > > jpimentel@ra.rockwell.com
> > >> > > Office (414) 382-3354
> > >> > > Mobile (262) 501-4785
> > >> > >
> > >> > >
> > >> > >
> > >> > >
> > >> > > From: Jim Willeke <ji...@willeke.com>
> > >> > > To: user@jspwiki.apache.org
> > >> > > Date: 08/27/2013 03:40 AM
> > >> > > Subject: Re: ldaps authentication to jspwiki
> > >> > >
> > >> > >
> > >> > >
> > >> > > I would guess, as you show no information on your LDAP setup, this
> > >> line
> > >> > is
> > >> > > wrong:
> > >> > > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > >> > >
> > >> > > Are your users named by uid or cn?
> > >> > > You show roles as named by cn and since you show dc=,dc= I would
> > guess
> > >> > this
> > >> > > is AD
> > >> > >
> > >> > > Also, try using LDAP vs LDAPS to help troubleshoot.
> > >> > >
> > >> > > -jim
> > >> > >
> > >> > > --
> > >> > > -jim
> > >> > > Jim Willeke
> > >> > >
> > >> > >
> > >> > > On Mon, Aug 26, 2013 at 10:47 AM, John Pimentel
> > >> > > <jp...@ra.rockwell.com>wrote:
> > >> > >
> > >> > > >
> > >> > > > Greetings,
> > >> > > >
> > >> > > > I am having difficulties getting LDAPS authentication to work
> and
> > I
> > >> > think
> > >> > > I
> > >> > > > must be missing some fundamental configuration.
> > >> > > >
> > >> > > > My current state is that the Site loads and displays content
> > >> properly,
> > >> > > but
> > >> > > > when I go to edit content or I select the log in page directly,
> my
> > >> LDAP
> > >> > > > credentials do not authenticate, and I am repeatedly presented
> > with
> > >> a
> > >> > > login
> > >> > > > page.
> > >> > > >
> > >> > > > I used the follwing information as my "How To" for this effort.
> > >> > > >
> > http://www.ecyrd.com/JSPWiki/wiki/WebContainerAuthenticationViaLDAP
> > >> > > >
> > >> > > > This article is very good but appears to be incomplete.
> > >> > > >
> > >> > > > I have done the following configuration to get ldaps to work:
> > >> > > >
> > >> > > > 1. I have a previously configured LDAP Server and I stored
> > /trusted
> > >> the
> > >> > > > cert for this Sun LDAP server into the central java keystore
> using
> > >> this
> > >> > > > command:
> > >> > > > /usr/lib64/jvm/jre/bin/keytool -import -alias sunldap
> > >> > > > -file /web1/sst/dysc/content/CA-RA-v3.crt
> > >> > > > -keystore /usr/lib64/jvm/jre/lib/security/cacerts
> > >> > > >
> > >> > > > 2. I have configured the realm and sorted out all the log errors
> > >> using
> > >> > > the
> > >> > > > following realm in the server.xml file. I believe tomcat is
> > >> > successfully
> > >> > > > connecting to my LDAP server.
> > >> > > >
> > >> > > > <Realm className="org.apache.catalina.realm.JNDIRealm"
> > >> > > > connectionURL="ldaps://
> mkedsintp.ds.mydomain.com:636
> > "
> > >> > > > connectionName="uid=[bind User
> > >> > > > UID],ou=admin,dc=rmydomain,dc=com"
> > >> > > > connectionPassword="[Password]"
> > >> > > > userPattern="uid={0},ou=people,dc=mydomain,dc=com"
> > >> > > > roleBase="ou=Control-M,ou=group,dc=mydomain,dc=com"
> > >> > > > roleSubtree="true"
> > >> > > > roleName="cn"
> > >> > > > roleSearch="(uniqueMember={0})"
> > >> > > > />
> > >> > > >
> > >> > > > 3. I uncommented the "CONTAINER-MANAGED AUTH" section
> > >> > > > from /web1/dyscq/webapps/apps/wiki/WEB-INF/web.xml
> > >> > > >
> > >> > > > There is a section at the bottom that says "Update JSPWiki
> > security
> > >> > > policy"
> > >> > > > If you would like to set permissions to LDAP groups, you can
> > simply
> > >> add
> > >> > > > policy entries on authorize.Role. The following is an entry for
> > >> > > wiki-admin
> > >> > > > group (from LDAP).
> > >> > > > grant principal com.ecyrd.jspwiki.auth.authorize.Role
> > "wiki-admin" {
> > >> > > > permission com.ecyrd.jspwiki.auth.permissions.AllPermission
> > "*";
> > >> > > > };
> > >> > > >
> > >> > > > I'm thinking it might go into web.xml, but I am not sure of
> that..
> > >> > > >
> > >> > > > this section of the xml looks like this:
> > >> > > >
> > >> > > > <security-constraint>
> > >> > > > <web-resource-collection>
> > >> > > > <web-resource-name>Authenticated
> > area</web-resource-name>
> > >> > > > <url-pattern>/Edit.jsp</url-pattern>
> > >> > > > <url-pattern>/Comment.jsp</url-pattern>
> > >> > > > <url-pattern>/Login.jsp</url-pattern>
> > >> > > > <url-pattern>/NewGroup.jsp</url-pattern>
> > >> > > > <url-pattern>/Rename.jsp</url-pattern>
> > >> > > > <url-pattern>/Upload.jsp</url-pattern>
> > >> > > > <http-method>DELETE</http-method>
> > >> > > > <http-method>GET</http-method>
> > >> > > > <http-method>HEAD</http-method>
> > >> > > > <http-method>POST</http-method>
> > >> > > > <http-method>PUT</http-method>
> > >> > > > </web-resource-collection>
> > >> > > >
> > >> > > > <web-resource-collection>
> > >> > > > <web-resource-name>Read-only Area</web-resource-name>
> > >> > > > <url-pattern>/attach</url-pattern>
> > >> > > > <http-method>DELETE</http-method>
> > >> > > > <http-method>POST</http-method>
> > >> > > > <http-method>PUT</http-method>
> > >> > > > </web-resource-collection>
> > >> > > >
> > >> > > > <auth-constraint>
> > >> > > > <role-name>Admin</role-name>
> > >> > > > <role-name>Authenticated</role-name>
> > >> > > > </auth-constraint>
> > >> > > > <!-- > > > <user-data-constraint>
> > >> > > >
> <transport-guarantee>CONFIDENTIAL</transport-guarantee>
> > >> > > > </user-data-constraint>
> > >> > > > -->
> > >> > > >
> > >> > > > </security-constraint>
> > >> > > >
> > >> > > > <login-config>
> > >> > > > <auth-method>FORM</auth-method>
> > >> > > > <form-login-config>
> > >> > > > <form-login-page>/LoginForm.jsp</form-login-page>
> > >> > > > <form-error-page>/LoginForm.jsp</form-error-page>
> > >> > > > </form-login-config>
> > >> > > > </login-config>
> > >> > > >
> > >> > > > <security-role>
> > >> > > > <description>
> > >> > > > This logical role includes all authenticated users
> > >> > > > </description>
> > >> > > > <role-name>Authenticated</role-name>
> > >> > > > </security-role>
> > >> > > >
> > >> > > > <security-role>
> > >> > > > <description>
> > >> > > > This logical role includes all administrative users
> > >> > > > </description>
> > >> > > > <role-name>Admin</role-name>
> > >> > > > </security-role>
> > >> > > >
> > >> > > >
> > >> > > > Regards,
> > >> > > > John Pimentel
> > >> > > >
> > >> > > > (Embedded image moved to file: pic05844.gif)Description:
> > >> Description:
> > >> > > > ralogo_web
> > >> > > > jpimentel@ra.rockwell.com
> > >> > > > Office (414) 382-3354
> > >> > > > Mobile (262) 501-4785
> > >> > > >
> > >> > > >
> > >> > > >
> > >> > > >
> > >> > > > From: user-help@jspwiki.apache.org
> > >> > > > To: jpimentel@ra.rockwell.com
> > >> > > > Date: 08/26/2013 08:16 AM
> > >> > > > Subject: WELCOME to user@jspwiki.apache.org
> > >> > > >
> > >> > > >
> > >> > > >
> > >> > > > Hi! This is the ezmlm program. I'm managing the
> > >> > > > user@jspwiki.apache.org mailing list.
> > >> > > >
> > >> > > > I'm working for my owner, who can be reached
> > >> > > > at user-owner@jspwiki.apache.org.
> > >> > > >
> > >> > > > Acknowledgment: I have added the address
> > >> > > >
> > >> > > > jpimentel@ra.rockwell.com
> > >> > > >
> > >> > > > to the user mailing list.
> > >> > > >
> > >> > > > Welcome to user@jspwiki.apache.org!
> > >> > > >
> > >> > > > Please save this message so that you know the address you are
> > >> > > > subscribed under, in case you later want to unsubscribe or
> change
> > >> your
> > >> > > > subscription address.
> > >> > > >
> > >> > > >
> > >> > > > --- Administrative commands for the user list ---
> > >> > > >
> > >> > > > I can handle administrative requests automatically. Please
> > >> > > > do not send them to the list address! Instead, send
> > >> > > > your message to the correct command address:
> > >> > > >
> > >> > > > To subscribe to the list, send a message to:
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > >
> > >> > > > To remove your address from the list, send a message to:
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > >
> > >> > > > Send mail to the following for info and FAQ for this list:
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > >
> > >> > > > Similar addresses exist for the digest list:
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > >
> > >> > > > To get messages 123 through 145 (a maximum of 100 per request),
> > >> mail:
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > >
> > >> > > > To get an index with subject and author for messages 123-456 ,
> > mail:
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > >
> > >> > > > They are always returned as sets of 100, max 2000 per request,
> > >> > > > so you'll actually get 100-499.
> > >> > > >
> > >> > > > To receive all messages with the same subject as message 12345,
> > >> > > > send a short message to:
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > >
> > >> > > > The messages should contain one line or word of text to avoid
> > being
> > >> > > > treated as sp@m, but I will ignore their content.
> > >> > > > Only the ADDRESS you send to is important.
> > >> > > >
> > >> > > > You can start a subscription for an alternate address,
> > >> > > > for example "john@host.domain", just add a hyphen and your
> > >> > > > address (with '=' instead of '@') after the command word:
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > >
> > >> > > > To stop subscription for this address, mail:
> > >> > > > <us...@jspwiki.apache.org>
> > >> > > >
> > >> > > > In both cases, I'll send a confirmation message to that address.
> > >> When
> > >> > > > you receive it, simply reply to it to complete your
> subscription.
> > >> > > >
> > >> > > > If despite following these instructions, you do not get the
> > >> > > > desired results, please contact my owner at
> > >> > > > user-owner@jspwiki.apache.org. Please be patient, my owner is a
> > >> > > > lot slower than I am ;-)
> > >> > > >
> > >> > > > --- Enclosed is a copy of the request I received.
> > >> > > >
> > >> > > > Return-Path: <jp...@ra.rockwell.com>
> > >> > > > Received: (qmail 84748 invoked by uid 99); 26 Aug 2013 13:16:04
> > >> -0000
> > >> > > > Received: from athena.apache.org (HELO athena.apache.org)
> > >> > > (140.211.11.136)
> > >> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug 2013
> > >> 13:16:04
> > >> > > > +0000
> > >> > > > X-ASF-Spam-Status: No, hits=-0.0 required=5.0
> > >> > > > tests=SPF_PASS
> > >> > > > X-Spam-Check-By: apache.org
> > >> > > > Received-SPF: pass (athena.apache.org: local policy)
> > >> > > > Received: from [205.175.240.251] (HELO
> > ramilwsmtp01.ra.rockwell.com
> > >> )
> > >> > > > (205.175.240.251)
> > >> > > > by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 26 Aug 2013
> > >> 13:16:00
> > >> > > > +0000
> > >> > > > In-Reply-To: <13...@jspwiki.apache.org>
> > >> > > > References: <13...@jspwiki.apache.org>
> > >> > > > Subject: Re: confirm subscribe to user@jspwiki.apache.org
> > >> > > > X-KeepSent: D7D57B0D:E2A05A18-86257BD3:0048D45A;
> > >> > > > type=4; name=$KeepSent
> > >> > > > To:
> > >> > > > user-sc.1377522681.pagaldeamkeafdeakcap-jpimentel=
> > >> > > > ra.rockwell.com@jspwiki.apache.org
> > >> > > >
> > >> > > > X-Mailer: Lotus Notes Release 8.5.2FP2 March 23, 2011
> > >> > > > Message-ID:
> > >> > > >
> > >> > > <
> > >> >
> > >>
> >
> OFD7D57B0D.E2A05A18-ON86257BD3.0048D45A-86257BD3.0048D84D@ra.rockwell.com
> > >> > > > >
> > >> > > > From: John Pimentel <jp...@ra.rockwell.com>
> > >> > > > Date: Mon, 26 Aug 2013 08:15:38 -0500
> > >> > > > X-MIMETrack: Serialize by Router on
> > >> RAMilwSMTP01/Milwaukee/RA/Rockwell
> > >> > at
> > >> > > > 08/26/2013 08:15:59
> > >> > > > AM
> > >> > > > MIME-Version: 1.0
> > >> > > > Content-type: multipart/mixed;
> > >> > > >
> > >> > > >
> > Boundary="0__=09BBF140DFDB52CA8f9e8a93df938690918c09BBF140DFDB52CA"
> > >> > > > Content-Disposition: inline
> > >> > > > X-Virus-Checked: Checked by ClamAV on apache.org
> > >> > > >
> > >> > > >
> > >> > >
> > >> >
> > >>
> > >>
> > >
> >
>