Re: ACL not working

Hi,

thanks for your fast response!

My jspwiki.policy looks like the one delivered with the application, I di=
d not change anything. The system variable java.security.policy is pointi=
ng to that file, in the same folder I have the keystore (all in the WEB-I=
NF  folder).

The JAAS configuration can be done in an administration GUI from Webspher=
e, thats what I did, so I do not really use the file jspwiki.jaas (it's l=
ieing in the WEB-INF directory anyway). I think that the login is working=
, because users can login :). I configured what I found in the delivered =
jspwiki.jaas, the JSPWiki-custom with the single LoginModule. In my earli=
er tests with container-login I used the other config, named JSPWiki-cont=
ainer, but without the AssertedLoginModule. To make it clear: when I logi=
n with a user, this user is shown as the logged-in user, the login itself=
 seems to work.

In the meantime I also tried the nightly build version, nothing changed.

I also took a look into the SecurityConfig.jsp, its not compiling with my=
 Websphere (Error: JSPG0123E: Unable to locate tag attribute info for tag=
 attribute). This lines are the problem:
<wiki:Messages div=3D"information" topic=3D"<%=3DSecurityVerifier.INFO+"j=
ava.security.auth.login.config"%>" prefix=3D"Good news: "/>
I deleted them, but the file does not contain useful information for me, =
i believe.

Perhaps this is gonna help, some log from the server-start:
INFO com.ecyrd.jspwiki.WikiEngine  - ************************************=
*******
INFO com.ecyrd.jspwiki.WikiEngine  - JSPWiki 2.5.143-cvs starting. Whee!
DEBUG com.ecyrd.jspwiki.event.WikiEventManager  - instantiated WikiEventM=
anager
DEBUG com.ecyrd.jspwiki.WikiEngine  - Java version: 2.2
DEBUG com.ecyrd.jspwiki.WikiEngine  - Java vendor: IBM Corporation
DEBUG com.ecyrd.jspwiki.WikiEngine  - OS: Windows XP 5.1 build 2600 Servi=
ce Pack 1 x86
DEBUG com.ecyrd.jspwiki.WikiEngine  - Default server locale: de_DE
DEBUG com.ecyrd.jspwiki.WikiEngine  - Default server timezone: Zentraleur=
op=E4ische Sommerzeit
INFO com.ecyrd.jspwiki.WikiEngine  - Servlet container: IBM WebSphere App=
lication Server/6.0
DEBUG com.ecyrd.jspwiki.WikiEngine  - Configuring WikiEngine...
INFO com.ecyrd.jspwiki.WikiEngine  - JSPWiki working directory is 'C:\DOK=
UME~1\i007\LOKALE~1\Temp\\JSPWiki-1821928600'
DEBUG com.ecyrd.jspwiki.util.ClassUtil  - Mapped class 'com.ecyrd.jspwiki=
.render.RenderingManager' to class 'com.ecyrd.jspwiki.render.RenderingMan=
ager'
DEBUG com.ecyrd.jspwiki.PageManager  - Page provider class: 'com.ecyrd.js=
pwiki.providers.CachingProvider'
DEBUG com.ecyrd.jspwiki.PageManager  - Initializing page provider class c=
om.ecyrd.jspwiki.providers.CachingProvider@314d314d
DEBUG com.ecyrd.jspwiki.providers.CachingProvider  - Initing CachingProvi=
der
DEBUG com.ecyrd.jspwiki.providers.CachingProvider  - Cache expiry period =
is 30 s
DEBUG com.ecyrd.jspwiki.providers.CachingProvider  - Cache capacity 1000 =
pages.
DEBUG com.ecyrd.jspwiki.providers.CachingProvider  - Initializing real pr=
ovider class com.ecyrd.jspwiki.providers.FileSystemProvider@7b517b51
DEBUG com.ecyrd.jspwiki.providers.AbstractFileProvider  - Initing FileSys=
temProvider
INFO com.ecyrd.jspwiki.providers.AbstractFileProvider  - Wikipages are re=
ad from 'c:/temp/jspwiki'
INFO com.ecyrd.jspwiki.plugin.PluginManager  - Registering plugins
DEBUG com.ecyrd.jspwiki.plugin.PluginManager  - Processing XML: wsjar:fil=
e:/C:/daten/IBM/rad6/wiki/JSPWiki/WebContent/WEB-INF/lib/JSPWiki.jar!/ini=
/jspwiki_module.xml
DEBUG com.ecyrd.jspwiki.plugin.PluginManager  - Registering plugin [name]=
: IfPlugin
DEBUG com.ecyrd.jspwiki.plugin.PluginManager  - Registering plugin [short=
Name]: If
DEBUG com.ecyrd.jspwiki.plugin.PluginManager  - Registering plugin [class=
Name]: com.ecyrd.jspwiki.plugin.IfPlugin
DEBUG com.ecyrd.jspwiki.plugin.PluginManager  - Registering plugin [name]=
: Note
DEBUG com.ecyrd.jspwiki.plugin.PluginManager  - Registering plugin [class=
Name]: com.ecyrd.jspwiki.plugin.Note
INFO com.ecyrd.jspwiki.diff.DifferenceManager  - Using difference provide=
r: TraditionalDiffProvider
DEBUG com.ecyrd.jspwiki.providers.CachingAttachmentProvider  - Initing Ca=
chingAttachmentProvider
DEBUG com.ecyrd.jspwiki.providers.CachingAttachmentProvider  - Initializi=
ng real provider class com.ecyrd.jspwiki.providers.BasicAttachmentProvide=
r@74cd74cd
DEBUG com.ecyrd.jspwiki.search.SearchManager  - Loaded search provider co=
m.ecyrd.jspwiki.search.BasicSearchProvider@37c337c3
INFO com.ecyrd.jspwiki.ui.EditorManager  - Registering editor modules
DEBUG com.ecyrd.jspwiki.ui.EditorManager  - Processing XML: wsjar:file:/C=
:/daten/IBM/rad6/wiki/JSPWiki/WebContent/WEB-INF/lib/JSPWiki.jar!/ini/jsp=
wiki_module.xml
DEBUG com.ecyrd.jspwiki.ui.EditorManager  - Registered editor plain
DEBUG com.ecyrd.jspwiki.ui.EditorManager  - Registered editor WikiWizard
INFO com.ecyrd.jspwiki.auth.AuthenticationManager  - Checking JAAS config=
uration...
INFO com.ecyrd.jspwiki.auth.AuthenticationManager  - JAAS already configu=
red by some other application (leaving it alone...)
INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer  - Examining=
 file:/C:/daten/IBM/rad6/wiki/JSPWiki/WebContent/WEB-INF/web.xml
DEBUG com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer  - Processi=
ng web.xml at file:/C:/daten/IBM/rad6/wiki/JSPWiki/WebContent/WEB-INF/web=
.xml
INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer  - JSPWiki i=
s using custom authentication.
INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer  - Authorize=
r WebContainerAuthorizer initialized successfully.
INFO com.ecyrd.jspwiki.auth.AuthorizationManager  - Initialized local sec=
urity policy: C:\daten\IBM\rad6\wiki\JSPWiki\WebContent\WEB-INF\jspwiki.p=
olicy
INFO com.ecyrd.jspwiki.auth.authorize.GroupManager  - Attempting to load =
group database class com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase
ERROR com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase  - XML group data=
base property jspwiki.xmlGroupDatabaseFile not found; trying C:\daten\IBM=
\rad6\wiki\JSPWiki\WebContent\WEB-INF\groupdatabase.xml
INFO com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase  - XML group datab=
ase at C:\daten\IBM\rad6\wiki\JSPWiki\WebContent\WEB-INF\groupdatabase.xm=
l
DEBUG com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase  - Database succe=
ssfully initialized
INFO com.ecyrd.jspwiki.auth.authorize.GroupManager  - Group database init=
ialized.
DEBUG com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase  - Database succe=
ssfully initialized
INFO com.ecyrd.jspwiki.auth.authorize.GroupManager  - Authorizer GroupMan=
ager initialized successfully; loaded 0 group(s).
INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager  - Finding a JDK 1.4 -co=
mpatible MBeanServer.
INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager  - mx4j.server.MX4JMBean=
Server
INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager  - WebSphere
INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager  - Registered new admin =
bean Core bean
INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager  - Registered new admin =
bean User administration
INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager  - Registered new admin =
bean Search manager
INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager  - Registered new admin =
bean Plugins
INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager  - Registered new admin =
bean WikiWizard
INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager  - Registered new admin =
bean Plain editor
DEBUG com.ecyrd.jspwiki.WikiEngine  - Attempting to locate /WEB-INF/filte=
rs.xml from servlet context.
DEBUG com.ecyrd.jspwiki.WikiEngine  - Attempting to locate filters.xml fr=
om class path.
INFO com.ecyrd.jspwiki.WikiEngine  - Cannot find property file for filter=
s (this is okay, expected to find it as: '/WEB-INF/filters.xml')



Best regards,
albert

-------- Original-Nachricht --------
> Datum: Mon, 15 Oct 2007 22:30:46 +0300
> Von: Janne Jalkanen <[email protected]>
> An: JSPWiki Users discussion list <[email protected]>
> Betreff: Re: [Jspwiki-users] ACL not working

> How does your "jspwiki.policy" file look like?  Also, where exactly =20
> is your JAAS configuration and how does it look like?
>=20
> /Janne
>=20
> On 15 Oct 2007, at 17:53, [email protected] wrote:
>=20
> > Hello,
> >
> > I hope you can help me with the following problem. I already wrote =20
> > some lines on http://www.jspwiki.org/wiki/=20
> > BugACLCommandsBeingIgnored (as albert, obviously we are already two =20
> > with this prob), the ACL I add to my Wiki are not working. I =20
> > startet with a fresh Wiki, version 2.4.102 deployed on IBM =20
> > Websphere 6.0, only changed the config-file by pointing to the =20
> > right directories. So I use the custom-login, but in my tests =20
> > before I also used container-login-modules. So here is what I tried:
> >
> > 1. create a page with this ACL: [{ALLOW view lars}] [{ALLOW edit =20
> > lars}]
> > 2. try to view the page -> success (I thought I could only view it =20
> > as user lars or as a member of the group lars)
> > 3. try to edit it -> success
> >
> > I tried the same with first login as lars, create a page with ACLs, =20
> > login as dirk, access was granted.  Debugging showed me, the =20
> > problem is: every user has the AllPermission in the =20
> > AuthorizationManager. But why??
> >
> > Here is some log (where you can see, that I get access as anonymous =20
> > to a page with ACL allowing view only for lars):
> >
> >
> >
> > I would be glad if you could help me, i'll become desperate! :-)
> >
> > Thanks,
> > Dirk
> > --=20
> > GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS.
> > Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemai=
l
> > _______________________________________________
> > This is the Jspwiki-users mailing list, in which we discuss the
> > stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.
> > For development discussion, please join jspwiki-dev.
> > http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> > http://www.jspwiki.org/JSPWikiMailingList
>=20
> _______________________________________________
> This is the Jspwiki-users mailing list, in which we discuss the=20
> stable release (even-numbered, 2.4.x, 2.6.x), and user-issues.=20
> For development discussion, please join jspwiki-dev.
> http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users
> http://www.jspwiki.org/JSPWikiMailingList

--=20
Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten=20
Browser-Versionen downloaden: http://www.gmx.net/de/go/browser