Hi Niels,
I tried to apply your patch and configure the auth provider with "Bind user
before searching for groups" unchecked but I got an exception:
org.springframework.ldap.UncategorizedLdapException: Uncategorized
exception occured during LDAP processing; nested exception is
javax.naming.NamingException: [LDAP: error code 1 - 000004DC: LdapErr:
DSID-0C0906E8, comment: In order to perform this operation a successful
bind must be completed on the connection., data 0, ***** ]; remaining name
'ou=*****'
(*** hide connection parameters)
I've tested it against a ActiveDirectory and it seems that the
anonymous Binding is not allowed by default on recent versions[1] (I don't
have access to the server config)... Does make it sense to you? Did you use
the OpenLDAP implementation for your test right?
Best Regards,
Damiano
[1]
http://serverfault.com/questions/693279/disable-anonymous-bind-to-an-active-directory-on-windows-server-2012r2
On Thu, Apr 7, 2016 at 2:52 PM, Niels Charlier <ni...@scitus.be> wrote:
> Hey Simone and Damiano,
>
> You might want to apply my patch for LDAP first to solve a small issue I
> encountered while testing with OpenLDAP.
>
> The issue was that an exception was thrown when attempting to log on
> without having "Bind user before searching for groups" ticked. The
> reason was that it did not attempt to search the groups anonymously but
> instead tried to use the currently logged on user (which wass not LDAP -
> resulting in an exception).
>
> Kind Regards
> Niels
>
> On 07-04-16 14:43, Simone Giannecchini wrote:
> > Ciao Jody,
> > as per the email he sent on the list, Damiano Giampaoli has been
> > tasked to manual test active directory and cas (in that order).
> >
> > I am hoping to hear something about LDAP within tomorrow.
> > Regards,
> > Simone Giannecchini
> > ==
> > GeoServer Professional Services from the experts!
> > Visit http://goo.gl/it488V for more information.
> > ==
> > Ing. Simone Giannecchini
> > @simogeo
> > Founder/Director
> >
> > GeoSolutions S.A.S.
> > Via di Montramito 3/A
> > 55054 Massarosa (LU)
> > Italy
> > phone: +39 0584 962313
> > fax: +39 0584 1660272
> > mob: +39 333 8128928
> >
> > http://www.geo-solutions.it
> > http://twitter.com/geosolutions_it
> >
> > -------------------------------------------------------
> > AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
> > Le informazioni contenute in questo messaggio di posta elettronica e/o
> > nel/i file/s allegato/i sono da considerarsi strettamente riservate.
> > Il loro utilizzo è consentito esclusivamente al destinatario del
> > messaggio, per le finalità indicate nel messaggio stesso. Qualora
> > riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
> > cortesemente di darcene notizia via e-mail e di procedere alla
> > distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
> > Conservare il messaggio stesso, divulgarlo anche in parte,
> > distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
> > diverse, costituisce comportamento contrario ai principi dettati dal
> > D.Lgs. 196/2003.
> >
> > The information in this message and/or attachments, is intended solely
> > for the attention and use of the named addressee(s) and may be
> > confidential or proprietary in nature or covered by the provisions of
> > privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
> > Data Protection Code).Any use not in accord with its purpose, any
> > disclosure, reproduction, copying, distribution, or either
> > dissemination, either whole or partial, is strictly forbidden except
> > previous formal approval of the named addressee(s). If you are not the
> > intended recipient, please contact immediately the sender by
> > telephone, fax or e-mail and delete the information in this message
> > that has been received in error. The sender does not give any warranty
> > or accept liability as the content, accuracy or completeness of sent
> > messages and accepts no responsibility for changes made after they
> > were sent or for other risks which arise as a result of e-mail
> > transmission, viruses, etc.
> >
> >
> > On Tue, Apr 5, 2016 at 11:51 PM, Jody Garnett <jody.garn...@gmail.com>
> wrote:
> >> You can always check the wiki page for latest testing status, put your
> >> initial next to any open line item for testing.
> >>
> >> I had only short-listed on LDAP implementation for testing - Niels has
> been
> >> testing OpenLDAP - so testing of active directory is not currently
> scheduled
> >> (and would be welcome).
> >>
> >> I had some trouble following christians email about security-cas so I
> am not
> >> sure if he has performed manual testing - only that he is satisfied
> that the
> >> work was complete.
> >>
> >> The final gap is in testing the rest api, I am tag teaming with Luigi
> for
> >> testing gsconfig and qgis-geoserver-pluign.
> >> If geoserver-manager has automated tests it would be great if they
> could be
> >> run.
> >>
> >> Finally we have three issues to actually fix:
> >> - https://osgeo-org.atlassian.net/browse/GEOS-7482
> >> - demo request page not fully functional
> >>
> >> So I do not want to say "we got this", but I think we are near the end
> ...
> >>
> >>
> >> --
> >> Jody Garnett
> >>
> >> On 5 April 2016 at 10:22, Andrea Aime <andrea.a...@geo-solutions.it>
> wrote:
> >>> Hi Jody,
> >>> speaking of closer, what's the status of the other manual testing?
> >>> Is there anything else you could use a helping hand on?
> >>> E.g., CAS, LDAP against active directory?
> >>>
> >>> Cheers
> >>> Andrea
> >>>
> >>>
> >>> On Tue, Apr 5, 2016 at 7:07 PM, Jody Garnett <jody.garn...@gmail.com>
> >>> wrote:
> >>>> Thank you! Updating the wiki page based on your email - makes me feel
> >>>> like we are a lot closer.
> >>>>
> >>>> --
> >>>> Jody Garnett
> >>>>
> >>>> On 5 April 2016 at 09:46, Emanuele Tajariol <e...@geo-solutions.it>
> wrote:
> >>>>> At the time I wrote the mail, I was only referring to Jenkins
> building
> >>>>> and
> >>>>> running tests successfully.
> >>>>>
> >>>>> We then performed some manual testing, both with GeoFence standalone,
> >>>>> and with
> >>>>> the embedded version, and both are behaving as they should.
> >>>>>
> >>>>> Cheers,
> >>>>> Emanuele
> >>>>>
> >>>>>
> >>>>> Alle 18:38:33 di Tuesday 5 April 2016, Jody Garnett ha scritto:
> >>>>>> When you say "quite satisfied" - do you mean mean it builds, or have
> >>>>>> you
> >>>>>> been in position to test. I am updating the wiki page and would like
> >>>>>> to
> >>>>>> know if the two geoserver community modules simply build, or if they
> >>>>>> pass
> >>>>>> tests.
> >>>>>>
> >>>>>> --
> >>>>>> Jody Garnett
> >>>>>>
> >>>>>> On 31 March 2016 at 04:46, Emanuele Tajariol <e...@geo-solutions.it>
> >>>>>> wrote:
> >>>>>>> Hi,
> >>>>>>>
> >>>>>>> - branched geofence 3.1.x (Geoserver 2.8 depends on it)
> >>>>>>> - merged the spring4 branch onto master
> >>>>>>> - bumped geofence master to 3.2-SNAPSHOT
> >>>>>>> - fixed the geofence deploy on ares (the jenkins job was not
> >>>>>>> deploying
> >>>>>>> the
> >>>>>>>
> >>>>>>> artifacts )
> >>>>>>>
> >>>>>>> - bumped the geofence dep on geoserver to 3.2-SNAPSHOT
> >>>>>>>
> >>>>>>> Jenkins seems to be quite satisfied at the moment for both
> >>>>>>> geofence-master and
> >>>>>>> geoserver-master :)
> >>>>>>>
> >>>>>>> Cheers,
> >>>>>>> Emanuele
> >>>>>>>
> >>>>>>> Alle 00:51:39 di Thursday 31 March 2016, Emanuele Tajariol ha
> >>>>>>> scritto:
> >>>>>>>>> The geoserver-master build now fails because the corresponding
> >>>>>>>>> changes in the geofence 3.1-spring4 branch have not yet been
> >>>>>>>>> merged:
> >>>>>>>>> https://github.com/geoserver/geofence/tree/3.1-spring4
> >>>>>>>> Uhm... quite a big change anyway....
> >>>>>>>> I wonder if it's the case to bump to version 3.2 for geofence.
> >>>>>>>>
> >>>>>>>> Definitely we need a strategy for keeping the versions of
> >>>>>>>> GeoServer and
> >>>>>>>> GeoFence somehow aligned.
> >>>>>>>>
> >>>>>>>> Cheers,
> >>>>>>>> Emanuele
> >>>>>>>>
> >>>>>>>> Alle 00:00:34 di Thursday 31 March 2016, Ben Caradoc-Davies ha
> >>>>>>>> scritto:
> >>>>>>>>> On 31/03/16 05:59, Emanuele Tajariol wrote:
> >>>>>>>>>>> Can you apply this fix to master and we can delete the
> >>>>>>>>>>> spring-4-upgrade branch.
> >>>>>>>>>> Sure,
> >>>>>>>>>> here it is
> >>>>>>>>>> <
> >>>>>>>
> >>>>>>>
> https://github.com/geoserver/geoserver/commit/9473b585770f068ec0c1374e
> >>>>>>>
> >>>>>>>>>> 68 f19ddb13d8e8ef>
> >>>>>>>>>>
> >>>>>>>>>> Cheers,
> >>>>>>>>>> Emanuele
> >>>>>>>>> The geoserver-master build now fails because the corresponding
> >>>>>>>>> changes in the geofence 3.1-spring4 branch have not yet been
> >>>>>>>>> merged:
> >>>>>>>>> https://github.com/geoserver/geofence/tree/3.1-spring4
> >>>>>>>>>
> >>>>>>>>> Build failure:
> >>>>>>>>>
> >>>>>>>>>
> http://ares.boundlessgeo.com/jenkins/job/geoserver-master/2346/change
> >>>>>>>>> s
> >>>>>>>>>
> >>>>>>>>> Kind regards,
> >>>>>>> --
> >>>>>>> ==
> >>>>>>> GeoServer Professional Services from the experts!
> >>>>>>> Visit http://goo.gl/NWWaa2 for more information.
> >>>>>>> ==
> >>>>>>>
> >>>>>>> Ing. Emanuele Tajariol
> >>>>>>> Technical Lead
> >>>>>>>
> >>>>>>> GeoSolutions S.A.S.
> >>>>>>> Via di Montramito 3/A
> >>>>>>> 55054 Massarosa (LU)
> >>>>>>> Italy
> >>>>>>> phone: +39 0584 962313
> >>>>>>> fax: +39 0584 1660272
> >>>>>>> mob: +39 380 2116282
> >>>>>>>
> >>>>>>> http://www.geo-solutions.it
> >>>>>>> http://twitter.com/geosolutions_it
> >>>>>>>
> >>>>>>> -------------------------------------------------------
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>>>
> -------------------------------------------------------------------------
> >>>>>>> ----- Transform Data into Opportunity.
> >>>>>>> Accelerate data analysis in your applications with
> >>>>>>> Intel Data Analytics Acceleration Library.
> >>>>>>> Click to learn more.
> >>>>>>> http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
> >>>>>>> _______________________________________________
> >>>>>>> Geoserver-devel mailing list
> >>>>>>> Geoserver-devel@lists.sourceforge.net
> >>>>>>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
> >>>>>
> >>>>> --
> >>>>> ==
> >>>>> GeoServer Professional Services from the experts!
> >>>>> Visit http://goo.gl/NWWaa2 for more information.
> >>>>> ==
> >>>>>
> >>>>> Ing. Emanuele Tajariol
> >>>>> Technical Lead
> >>>>>
> >>>>> GeoSolutions S.A.S.
> >>>>> Via di Montramito 3/A
> >>>>> 55054 Massarosa (LU)
> >>>>> Italy
> >>>>> phone: +39 0584 962313
> >>>>> fax: +39 0584 1660272
> >>>>> mob: +39 380 2116282
> >>>>>
> >>>>> http://www.geo-solutions.it
> >>>>> http://twitter.com/geosolutions_it
> >>>>>
> >>>>> -------------------------------------------------------
> >>>>
> >>>>
> >>>>
> >>>>
> ------------------------------------------------------------------------------
> >>>>
> >>>> _______________________________________________
> >>>> Geoserver-devel mailing list
> >>>> Geoserver-devel@lists.sourceforge.net
> >>>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
> >>>>
> >>>
> >>>
> >>> --
> >>> ==
> >>> GeoServer Professional Services from the experts! Visit
> >>> http://goo.gl/it488V for more information.
> >>> ==
> >>>
> >>> Ing. Andrea Aime
> >>> @geowolf
> >>> Technical Lead
> >>>
> >>> GeoSolutions S.A.S.
> >>> Via di Montramito 3/A
> >>> 55054 Massarosa (LU)
> >>> phone: +39 0584 962313
> >>> fax: +39 0584 1660272
> >>> mob: +39 339 8844549
> >>>
> >>> http://www.geo-solutions.it
> >>> http://twitter.com/geosolutions_it
> >>>
> >>> AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
> >>>
> >>> Le informazioni contenute in questo messaggio di posta elettronica e/o
> >>> nel/i file/s allegato/i sono da considerarsi strettamente riservate.
> Il loro
> >>> utilizzo è consentito esclusivamente al destinatario del messaggio,
> per le
> >>> finalità indicate nel messaggio stesso. Qualora riceviate questo
> messaggio
> >>> senza esserne il destinatario, Vi preghiamo cortesemente di darcene
> notizia
> >>> via e-mail e di procedere alla distruzione del messaggio stesso,
> >>> cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
> divulgarlo
> >>> anche in parte, distribuirlo ad altri soggetti, copiarlo, od
> utilizzarlo per
> >>> finalità diverse, costituisce comportamento contrario ai principi
> dettati
> >>> dal D.Lgs. 196/2003.
> >>>
> >>>
> >>>
> >>> The information in this message and/or attachments, is intended solely
> for
> >>> the attention and use of the named addressee(s) and may be
> confidential or
> >>> proprietary in nature or covered by the provisions of privacy act
> >>> (Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
> >>> Code).Any use not in accord with its purpose, any disclosure,
> reproduction,
> >>> copying, distribution, or either dissemination, either whole or
> partial, is
> >>> strictly forbidden except previous formal approval of the named
> >>> addressee(s). If you are not the intended recipient, please contact
> >>> immediately the sender by telephone, fax or e-mail and delete the
> >>> information in this message that has been received in error. The
> sender does
> >>> not give any warranty or accept liability as the content, accuracy or
> >>> completeness of sent messages and accepts no responsibility for
> changes
> >>> made after they were sent or for other risks which arise as a result of
> >>> e-mail transmission, viruses, etc.
> >>>
> >>>
> >>> -------------------------------------------------------
> >>
> >>
> >>
> ------------------------------------------------------------------------------
> >>
> >> _______________________________________________
> >> Geoserver-devel mailing list
> >> Geoserver-devel@lists.sourceforge.net
> >> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
> >>
> >
> ------------------------------------------------------------------------------
> > _______________________________________________
> > Geoserver-devel mailing list
> > Geoserver-devel@lists.sourceforge.net
> > https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> Geoserver-devel mailing list
> Geoserver-devel@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>
--
==
GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.
==
Dott. Damiano Giampaoli
Software Engineer
GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 333 8128928 <%2B39%20%20333%208128928>
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial! http://pubads.g.doubleclick.net/
gampad/clk?id=1444514301&iu=/ca-pub-7940484522588532
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
