Robin, I have not made much progress with this. Do you have any idea as to what
might be happening.
Thank you!
Jose
-----Original Message-----
From: Blanco, Jose
Sent: Tuesday, October 04, 2011 4:29 PM
To: Blanco, Jose; Robin Taylor
Cc: dspace-tech@lists.sourceforge.net
Subject: RE: [Dspace-tech] adding cosing to manakin
Ok, I have a new clue to the problem. I changed cosignConfig to have:
<services>
<service name="cosign-blancoj.dev.deepblue.lib">
<!-- new elements for 2.0 beta multi factor -->
<reqfactor>
<factor>UMICH.EDU</factor>
</reqfactor>
<protected>/cgi/deposit*</protected>
<protected>/</protected>
</service>
</services>
NOTICE the <protected>/</protected>, so when I go to the "/" page I'm asked to
cosign in and all goes well - I login and I'm back at the "/" page, but as
soon as I hit a link from there, say "/community-list", I get
HTTP Status 503 - Cosign filter defined to pickup URL but no service defined.
It almost seems like you have to say something like
"*" do cosign?
Any ideas?
Thank you!
Jose
-----Original Message-----
From: Blanco, Jose
Sent: Tuesday, October 04, 2011 3:44 PM
To: Blanco, Jose; Robin Taylor
Cc: dspace-tech@lists.sourceforge.net
Subject: RE: [Dspace-tech] adding cosing to manakin
Robin, I think I have something wrong in my consignConfig.xml file. Could you
send me yours.
Thanks!
Jose
-----Original Message-----
From: Blanco, Jose [mailto:blan...@umich.edu]
Sent: Tuesday, October 04, 2011 3:00 PM
To: Robin Taylor
Cc: dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin
Ok, I see the problem with this. Since I'm using CosignIII I needed to pass
in another parameter. I'm past this error, but now I'm getting:
2011-10-04 14:56:30,989 ERROR
edu.umich.auth.cosign.CosignAuthenticationFilterIII @ Cosign filter defined to
pickup URL but no service defined.
2011-10-04 14:56:30,989 ERROR
edu.umich.auth.cosign.CosignAuthenticationFilterIII @ Cosign filter defined to
pickup URL but no service defined.
javax.servlet.ServletException: Cosign filter defined to pickup URL but no
service defined.
at
edu.umich.auth.cosign.CosignAuthenticationFilterIII.doFilter(CosignAuthenticationFilterIII.java:355)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
at org.apache.catalina.core.ApplicationFilterC
-----Original Message-----
From: Blanco, Jose [mailto:blan...@umich.edu]
Sent: Tuesday, October 04, 2011 2:34 PM
To: Robin Taylor
Cc: dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin
Robin, I'm getting the following error when I try to go to the web site.
2011-10-04 14:25:37,293 INFO
edu.umich.auth.cosign.CosignAuthenticationFilterIII @
CosignAuthenticationFilter: validateFilter called
2011-10-04 14:25:37,293 INFO
edu.umich.auth.cosign.CosignAuthenticationFilterIII @
CosignAuthenticationFilter: Filter configuration file:
/l1/dspace/repository/dev/config/cosignConfigBlancoj.xml
2011-10-04 14:25:37,293 ERROR
edu.umich.auth.cosign.CosignAuthenticationFilterIII @ AuthorizationFilter
failed to initialize.
javax.servlet.ServletException: AuthorizationFilter failed to initialize.
at
edu.umich.auth.cosign.CosignAuthenticationFilterIII.validateFilter(CosignAuthenticationFilterIII.java:151)
at
edu.umich.auth.cosign.CosignAuthenticationFilterIII.doFilter(CosignAuthenticationFilterIII.java:281)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
This is what I have in cosignCofigBlancoj.xml
<services>
<service name="cosign-blancoj.dev.deepblue.lib">
<!-- new elements for 2.0 beta multi factor -->
<reqfactor>
<factor>UMICH.EDU</factor>
</reqfactor>
<protected>/cgi/deposit*</protected>
<protected>/webiso-login</protected>
</service>
</services>
I think protected, should say cocoon. Right?
-----Original Message-----
From: Blanco, Jose [mailto:blan...@umich.edu]
Sent: Tuesday, October 04, 2011 1:34 PM
To: Robin Taylor
Cc: dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin
I see now it's from:
dspace-xmlui/dspace-xmlui-webapp/src/main/webapp
-----Original Message-----
From: Blanco, Jose [mailto:blan...@umich.edu]
Sent: Tuesday, October 04, 2011 1:18 PM
To: Robin Taylor
Cc: dspace-tech@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin
Robin, Is this the sitemap that goes in:
dspace-xmlui/dspace-xmlui-api/src/main/resources/aspects/EPerson
-----Original Message-----
From: Robin Taylor [mailto:robin.tay...@ed.ac.uk]
Sent: Tuesday, October 04, 2011 11:40 AM
To: Blanco, Jose
Cc: dspace-tech@lists.sourceforge.net
Subject: RE: [Dspace-tech] adding cosing to manakin
Hi Jose,
See attached. The web.xml is where you configure Cosign as a filter. The
Sitemap is where you configure your Action to look for the credentials that
should have been added to the request by Cosign. Please excuse any dodgy
debugging code left in the source.
Please ask if you have any questions.
Cheers, Robin.
On Tue, 2011-10-04 at 16:10 +0100, Blanco, Jose wrote:
> Robin,
>
> When you get a chance could you send me the Action code and the sitemap you
> used to get cosign running in the xmlui environment. I'd like to give it a
> try.
>
> Thank you!
> Jose
>
> -----Original Message-----
> From: TAYLOR Robin [mailto:robin.tay...@ed.ac.uk]
> Sent: Saturday, July 16, 2011 4:42 AM
> To: Mark Diggory
> Cc: Blanco, Jose; dspace-tech@lists.sourceforge.net
> Subject: RE: [Dspace-tech] adding cosing to manakin
>
> Will do. Unfortunately I'm on holiday for the next two weeks and don't have
> access to the source code so there will be a delay.
>
> Cheers.
>
> ________________________________________
> From: mdigg...@gmail.com [mdigg...@gmail.com] On Behalf Of Mark
> Diggory [mdigg...@atmire.com]
> Sent: 15 July 2011 18:48
> To: TAYLOR Robin
> Cc: Blanco, Jose; dspace-tech@lists.sourceforge.net
> Subject: Re: [Dspace-tech] adding cosing to manakin
>
> Robin,
>
> Can you post the Action code and the sitemap you used here? I think
> Jose needs to see this in a complete context. Likewise, maybe its
> something we can write a cosine authenticator addon for future dspace
> releases.
>
> Mark
>
> On Tue, Jul 12, 2011 at 8:22 AM, Robin Taylor <robin.tay...@ed.ac.uk> wrote:
> > Hi Jose,
> >
> > Not sure if I am understanding the problem correctly but I have had
> > Cosign working with the XMLUI before so here is what we did...
> >
> > 1. Add the Cosign Filter to the web.xml. That should cause you to
> > get redirected to your 'cosign' login page'.
> >
> > 2. Add a new Cocoon Action to the main Cocoon sitemap.xmap. to
> > invoke a new class. Cosign will have added the 'principal' to the
> > incoming request, this new class should extract that info and do
> > whatever you want with it eg find a matching eperson.
> >
> > <map:pipeline>
> > <map:match pattern="no-account">
> > <!-- We have already checked the login and failed -->
> > <map:mount check-reload="no" src="themes/themes.xmap"
> > uri-prefix=""/>
> > </map:match>
> >
> > <map:match pattern="**">
> > <map:act type="CheckLogin"/>
> > <map:mount check-reload="no"
> > src="themes/themes.xmap"
> > uri-prefix=""/>
> > </map:match>
> > </map:pipeline>
> >
> > (Apologies for the line wrapping)
> >
> >
> > Its worth pointing out that we were protecting the whole repo, hence
> > the check on pattern="**". If this sounds like what you need then
> > reply and I'll send you more details.
> >
> > Cheers, Robin.
> >
> >
> >
> >
> >
> > On Mon, 2011-07-11 at 14:36 +0100, Blanco, Jose wrote:
> >> Any suggestions? Really stuck here.
> >>
> >>
> >>
> >> From: Blanco, Jose [mailto:blan...@umich.edu]
> >> Sent: Wednesday, July 06, 2011 3:09 PM
> >> To: Mark Diggory
> >> Cc: dspace-tech@lists.sourceforge.net
> >> Subject: Re: [Dspace-tech] adding cosing to manakin
> >>
> >>
> >>
> >>
> >> Mark, I'm getting closer, now I can get the cosign page and login
> >> successfully, but what I did is map the /webiso-login to the
> >> servlet Cocoon.
> >>
> >>
> >>
> >> <servlet-mapping>
> >>
> >> <servlet-name>Cocoon</servlet-name>
> >>
> >> <url-pattern>/webiso-login</url-pattern>
> >>
> >> </servlet-mapping>
> >>
> >>
> >>
> >> In the jsp environment I had it mapped to a specifc servlet that
> >> did some special things, but I'm not sure how to do this in the
> >> xmlui environment. In the xmlui area there is only one servlet - Cocoon.
> >> Where do I put my jspui servlet code to handle auth? As you can
> >> tell I'm new to Cocoon.
> >>
> >>
> >>
> >> Thank you!
> >>
> >> Jose
> >>
> >>
> >>
> >> From: mdigg...@gmail.com [mailto:mdigg...@gmail.com] On Behalf Of
> >> Mark Diggory
> >> Sent: Monday, June 27, 2011 8:26 PM
> >> To: Blanco, Jose
> >> Cc: dspace-tech@lists.sourceforge.net
> >> Subject: Re: [Dspace-tech] adding cosing to manakin
> >>
> >>
> >>
> >>
> >> No, each webapp needs to list its needed dependencies separately.
> >> Listing cosign as a dependency in dspace/pom.xml will only place it
> >> into the commandline application lib directory.
> >>
> >> On Fri, Jun 24, 2011 at 8:33 AM, Blanco, Jose <blan...@umich.edu>
> >> wrote:
> >>
> >> Mark, the dspace/pom.xml is the only place that the jscosign is
> >> listed, and it seems like it would hold for all the apps.
> >>
> >>
> >>
> >> Take a look.
> >>
> >>
> >>
> >> From: Mark Diggory [mailto:mdigg...@atmire.com]
> >> Sent: Friday, June 24, 2011 1:48 AM
> >> To: Blanco, Jose
> >> Cc: dspace-tech@lists.sourceforge.net
> >> Subject: Re: [Dspace-tech] adding cosing to manakin
> >>
> >>
> >>
> >>
> >> Yes, you need to look for the dependency for cosign in your jspui
> >> pom.xml and add it to your xmlui pom.xml
> >>
> >>
> >>
> >>
> >> Best,
> >>
> >>
> >> Mark
> >>
> >> On Thu, Jun 23, 2011 at 12:00 PM, Blanco, Jose <blan...@umich.edu>
> >> wrote:
> >>
> >> I have cosign running in my jspui, and I'm trying to run it now in
> >> xmlui, so I added the following to the xmui web.xml file:
> >>
> >> <filter>
> >> <filter-name>Cosign Authentication Filter</filter-name>
> >>
> >>
> >> <filter-class>edu.umich.auth.cosign.CosignAuthenticationFilterIII</filter-class>
> >> <init-param>
> >> <param-name>Cosign.ConfigurationFile</param-name>
> >>
> >>
> >> <param-value>/l1/dspace/repository/dev/config/cosignConfigBlancoj.xml</param-value>
> >> </init-param>
> >>
> >> <init-param>
> >> <param-name>Auth.JAASConfigurationFile</param-name>
> >> <param-value>/l/local/apache-tomcat/conf/jaas.conf</param-value>
> >> </init-param>
> >>
> >> </filter>
> >>
> >> <servlet-mapping>
> >> <servlet-name>webiso-login</servlet-name>
> >> <url-pattern>/webiso-login</url-pattern>
> >> </servlet-mapping>
> >>
> >> <filter-mapping>
> >> <filter-name>Cosign Authentication Filter</filter-name>
> >> <url-pattern>/webiso-login</url-pattern>
> >> </filter-mapping>
> >>
> >> And I'm getting this error:
> >>
> >> SEVERE: Parse error in application web.xml file at
> >> jndi:/blancoj.dev.deepblue.lib.umich.edu/WEB-INF/web.xml
> >> java.lang.IllegalArgumentException: Filter mapping specifies an
> >> unknown filter name Cosign Authentication Filter
> >> at
> >> org.apache.tomcat.util.digester.Digester.createSAXException(Digester.java:2726)
> >> at
> >> org.apache.tomcat.util.digester.Digester.createSAXException(Digester.java:2752)
> >> at
> >> org.apache.tomcat.util.digester.Digester.endElement(Digester.java:1061)
> >> at
> >> com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:601)
> >> at
> >> com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1782)
> >> at
> >> com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerI
> >> mpl
> >> $FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2938)
> >> at
> >> com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:648)
> >> at
> >> com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerI
> >> mpl.scanDocument(XMLDocumentFragmentScannerImpl.java:511)
> >>
> >>
> >> ===
> >> I don't kwow why it can't find it. It finds it just fine in jspui.
> >> Do I need to change something in one of the pom.xml files?
> >>
> >> -Jose
> >>
> >> -------------------------------------------------------------------
> >> ----------- Simplify data backup and recovery for your virtual
> >> environment with vRanger.
> >> Installation's a snap, and flexible recovery options mean your data
> >> is safe, secure and there when you need it. Data protection magic?
> >> Nope - It's vRanger. Get your free trial download today.
> >> http://p.sf.net/sfu/quest-sfdev2dev
> >> _______________________________________________
> >> DSpace-tech mailing list
> >> DSpace-tech@lists.sourceforge.net
> >> https://lists.sourceforge.net/lists/listinfo/dspace-tech
> >>
> >>
> >>
> >>
> >>
> >> --
> >> Mark R. Diggory
> >> @mire - www.atmire.com
> >> 2888 Loker Avenue East - Suite 305 - Carlsbad - CA - 92010
> >> Esperantolaan 4 - Heverlee 3001 - Belgium
> >>
> >>
> >>
> >> -------------------------------------------------------------------
> >> ----------- All the data continuously generated in your IT
> >> infrastructure contains a definitive record of customers,
> >> application performance, security threats, fraudulent activity and
> >> more. Splunk takes this data and makes sense of it. Business sense.
> >> IT sense. Common sense..
> >> http://p.sf.net/sfu/splunk-d2d-c1
> >> _______________________________________________
> >> DSpace-tech mailing list
> >> DSpace-tech@lists.sourceforge.net
> >> https://lists.sourceforge.net/lists/listinfo/dspace-tech
> >>
> >>
> >>
> >>
> >>
> >> --
> >> Mark R. Diggory
> >> @mire - www.atmire.com
> >> 2888 Loker Avenue East - Suite 305 - Carlsbad - CA - 92010
> >> Esperantolaan 4 - Heverlee 3001 - Belgium
> >>
> >>
> >
> >
> >
> > --------------------------------------------------------------------
> > ---------- All of the data generated in your IT infrastructure is
> > seriously valuable.
> > Why? It contains a definitive record of application performance,
> > security threats, fraudulent activity, and more. Splunk takes this
> > data and makes sense of it. IT sense. And common sense.
> > http://p.sf.net/sfu/splunk-d2d-c2
> > _______________________________________________
> > DSpace-tech mailing list
> > DSpace-tech@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/dspace-tech
> >
>
>
>
> --
> Mark R. Diggory
> @mire - www.atmire.com
> 2888 Loker Avenue East - Suite 305 - Carlsbad - CA - 92010
> Esperantolaan 4 - Heverlee 3001 - Belgium
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.
http://p.sf.net/sfu/splunk-d2dcopy1
_______________________________________________
DSpace-tech mailing list
DSpace-tech@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech
