Re: Upgrading from 2.4.82 to 2.4.104
Tim Koop <[email protected]> Tue, 25 Sep 2007 14:26:46 -0600
| Newsgroups | gmane.comp.java.jspwiki.user |
|---|---|
| Message-ID | <[email protected]> |
Thanks Janne. That did it.
One more question. We are using a customised template. Are any fixes
for security vulnerabilities or extra features hidden in those default
template jsp files so we would have to modify our template too, or can
we just keep on using our 2.4.82 customized template unmodified?
Thanks.
Tim Koop
Janne Jalkanen wrote:
>
> Signature changed in 2.4.100 (it was expired). Make sure you also
> copy jspwiki.jks to the right place.
>
> /Janne
>
> On 25 Sep 2007, at 22:58, Tim Koop wrote:
>
>> Hi. I'm trying to upgrade from 2.4.82 to 2.4.104, but I'm hitting a
>> problem.
>>
>> According to the instructions, I can just copy over the new jar
>> files, the top-level jsp files, and the default template. I unzipped
>> the new war file and copied over these things. This is what I
>> copied: *.jsp, WEB-INF/lib/*.jar, and templates/default/* recursively.
>>
>> But now nobody can log in. I get the "Forbidden Sorry, you are not
>> allowed to do that." page every time. The log says this:
>>
>> 2007-09-25 19:46:08,349 [TP-Processor6] INFO
>> com.ecyrd.jspwiki.WikiServlet wiki:/wiki/page/Main
>> wiki:https://{removed}/wiki/page/Main - Request for page: Main
>> 2007-09-25 19:46:08,353 [TP-Processor6] INFO SecurityLog
>> wiki:/wiki/page/Main wiki:https://{removed}/wiki/page/Main -
>> WikiSecurityEvent.LOGIN_AUTHENTICATED
>> [source=com.ecyrd.jspwiki.auth.AuthenticationManager@1c4f0f8,
>> princpal=org.apache.catalina.connector.CoyotePrincipal Brian,
>> target=com.ecyrd.jspwiki.WikiSession@1a7905e]
>> 2007-09-25 19:46:08,377 [TP-Processor6] ERROR
>> com.ecyrd.jspwiki.WikiSession wiki:/wiki/page/Main
>> wiki:https://{removed}/wiki/page/Main - Refresh principals failed
>> because user profile matching 'Brian' not found.
>> 2007-09-25 19:46:08,383 [TP-Processor6] INFO
>> com.ecyrd.jspwiki.WikiContext wiki:/wiki/page/Main
>> wiki:https://{removed}/wiki/page/Main - User Brian has no access -
>> forbidden
>> (permission=("com.ecyrd.jspwiki.auth.permissions.PagePermission","wiki:Main","view"))
>>
>> 2007-09-25 19:46:24,035 [TP-Processor5] INFO
>> com.ecyrd.jspwiki.WikiServlet wiki:/wiki/page/Main
>> wiki:https://{removed}/wiki/page/Main - Request for page: Main
>>
>> In JSPWiki.properties I'm using:
>> jspwiki.authorizer =
>> com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer
>> jspwiki.groupdatabase =
>> com.ecyrd.jspwiki.auth.authorize.JDBCGroupDatabase
>> jspwiki.userdatabase = com.ecyrd.jspwiki.auth.user.JDBCUserDatabase
>>
>> I'm using some custom filters.
>>
>>
>> If I simply copy over and use the old (2.4.82) JSPWiki.jar file, it
>> all works fine, but if I use the new (2.4.104) JSPWiki.jar file, I
>> get the Forbidden message every time.
>>
>> Any ideas?
>>
>> Thanks a lot!
>>
>> --
>> Tim Koop
>> _______________________________________________
>> This is the Jspwiki-users mailing list, in which we discuss the
>> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. For
>> development discussion, please join jspwiki-dev.
>> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
>> http://www.jspwiki.org/JSPWikiMailingList
>
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss thestable
> release (even-numbered, 2.4.x, 2.6.x), and user-issues.For development
> discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList
>