Hi Niels,
I tried to apply your patch and configure the auth provider with "Bind
user before searching for groups" unchecked but I got an exception:
org.springframework.ldap.UncategorizedLdapException: Uncategorized
exception occured during LDAP processing; nested exception is
javax.naming.NamingException: [LDAP: error code 1 - 000004DC: LdapErr:
DSID-0C0906E8, comment: In order to perform this operation a
successful bind must be completed on the connection., data 0, ***** ];
remaining name 'ou=*****'
(*** hide connection parameters)
I've tested it against a ActiveDirectory and it seems that the
anonymous Binding is not allowed by default on recent versions[1] (I
don't have access to the server config)... Does make it sense to you?
Did you use the OpenLDAP implementation for your test right?
Best Regards,
Damiano
[1]
http://serverfault.com/questions/693279/disable-anonymous-bind-to-an-active-directory-on-windows-server-2012r2
On Thu, Apr 7, 2016 at 2:52 PM, Niels Charlier <ni...@scitus.be
<mailto:ni...@scitus.be>> wrote:
Hey Simone and Damiano,
You might want to apply my patch for LDAP first to solve a small
issue I
encountered while testing with OpenLDAP.
The issue was that an exception was thrown when attempting to log on
without having "Bind user before searching for groups" ticked. The
reason was that it did not attempt to search the groups
anonymously but
instead tried to use the currently logged on user (which wass not
LDAP -
resulting in an exception).
Kind Regards
Niels
On 07-04-16 14 <tel:07-04-16%2014>:43, Simone Giannecchini wrote:
> Ciao Jody,
> as per the email he sent on the list, Damiano Giampaoli has been
> tasked to manual test active directory and cas (in that order).
>
> I am hoping to hear something about LDAP within tomorrow.
> Regards,
> Simone Giannecchini
> ==
> GeoServer Professional Services from the experts!
> Visit http://goo.gl/it488V for more information.
> ==
> Ing. Simone Giannecchini
> @simogeo
> Founder/Director
>
> GeoSolutions S.A.S.
> Via di Montramito 3/A
> 55054 Massarosa (LU)
> Italy
> phone: +39 0584 962313 <tel:%2B39%200584%20962313>
> fax: +39 0584 1660272 <tel:%2B39%200584%201660272>
> mob: +39 333 8128928 <tel:%2B39%20%20333%208128928>
>
> http://www.geo-solutions.it
> http://twitter.com/geosolutions_it
>
> -------------------------------------------------------
> AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
> Le informazioni contenute in questo messaggio di posta
elettronica e/o
> nel/i file/s allegato/i sono da considerarsi strettamente riservate.
> Il loro utilizzo è consentito esclusivamente al destinatario del
> messaggio, per le finalità indicate nel messaggio stesso. Qualora
> riceviate questo messaggio senza esserne il destinatario, Vi
preghiamo
> cortesemente di darcene notizia via e-mail e di procedere alla
> distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
> Conservare il messaggio stesso, divulgarlo anche in parte,
> distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per
finalità
> diverse, costituisce comportamento contrario ai principi dettati dal
> D.Lgs. 196/2003.
>
> The information in this message and/or attachments, is intended
solely
> for the attention and use of the named addressee(s) and may be
> confidential or proprietary in nature or covered by the
provisions of
> privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
> Data Protection Code).Any use not in accord with its purpose, any
> disclosure, reproduction, copying, distribution, or either
> dissemination, either whole or partial, is strictly forbidden except
> previous formal approval of the named addressee(s). If you are
not the
> intended recipient, please contact immediately the sender by
> telephone, fax or e-mail and delete the information in this message
> that has been received in error. The sender does not give any
warranty
> or accept liability as the content, accuracy or completeness of sent
> messages and accepts no responsibility for changes made after they
> were sent or for other risks which arise as a result of e-mail
> transmission, viruses, etc.
>
>
> On Tue, Apr 5, 2016 at 11:51 PM, Jody Garnett
<jody.garn...@gmail.com <mailto:jody.garn...@gmail.com>> wrote:
>> You can always check the wiki page for latest testing status,
put your
>> initial next to any open line item for testing.
>>
>> I had only short-listed on LDAP implementation for testing -
Niels has been
>> testing OpenLDAP - so testing of active directory is not
currently scheduled
>> (and would be welcome).
>>
>> I had some trouble following christians email about
security-cas so I am not
>> sure if he has performed manual testing - only that he is
satisfied that the
>> work was complete.
>>
>> The final gap is in testing the rest api, I am tag teaming with
Luigi for
>> testing gsconfig and qgis-geoserver-pluign.
>> If geoserver-manager has automated tests it would be great if
they could be
>> run.
>>
>> Finally we have three issues to actually fix:
>> - https://osgeo-org.atlassian.net/browse/GEOS-7482
>> - demo request page not fully functional
>>
>> So I do not want to say "we got this", but I think we are near
the end ...
>>
>>
>> --
>> Jody Garnett
>>
>> On 5 April 2016 at 10:22, Andrea Aime
<andrea.a...@geo-solutions.it
<mailto:andrea.a...@geo-solutions.it>> wrote:
>>> Hi Jody,
>>> speaking of closer, what's the status of the other manual testing?
>>> Is there anything else you could use a helping hand on?
>>> E.g., CAS, LDAP against active directory?
>>>
>>> Cheers
>>> Andrea
>>>
>>>
>>> On Tue, Apr 5, 2016 at 7:07 PM, Jody Garnett
<jody.garn...@gmail.com <mailto:jody.garn...@gmail.com>>
>>> wrote:
>>>> Thank you! Updating the wiki page based on your email - makes
me feel
>>>> like we are a lot closer.
>>>>
>>>> --
>>>> Jody Garnett
>>>>
>>>> On 5 April 2016 at 09:46, Emanuele Tajariol
<e...@geo-solutions.it <mailto:e...@geo-solutions.it>> wrote:
>>>>> At the time I wrote the mail, I was only referring to
Jenkins building
>>>>> and
>>>>> running tests successfully.
>>>>>
>>>>> We then performed some manual testing, both with GeoFence
standalone,
>>>>> and with
>>>>> the embedded version, and both are behaving as they should.
>>>>>
>>>>> Cheers,
>>>>> Emanuele
>>>>>
>>>>>
>>>>> Alle 18:38:33 di Tuesday 5 April 2016, Jody Garnett ha scritto:
>>>>>> When you say "quite satisfied" - do you mean mean it
builds, or have
>>>>>> you
>>>>>> been in position to test. I am updating the wiki page and
would like
>>>>>> to
>>>>>> know if the two geoserver community modules simply build,
or if they
>>>>>> pass
>>>>>> tests.
>>>>>>
>>>>>> --
>>>>>> Jody Garnett
>>>>>>
>>>>>> On 31 March 2016 at 04:46, Emanuele Tajariol
<e...@geo-solutions.it <mailto:e...@geo-solutions.it>>
>>>>>> wrote:
>>>>>>> Hi,
>>>>>>>
>>>>>>> - branched geofence 3.1.x (Geoserver 2.8 depends on it)
>>>>>>> - merged the spring4 branch onto master
>>>>>>> - bumped geofence master to 3.2-SNAPSHOT
>>>>>>> - fixed the geofence deploy on ares (the jenkins job was not
>>>>>>> deploying
>>>>>>> the
>>>>>>>
>>>>>>> artifacts )
>>>>>>>
>>>>>>> - bumped the geofence dep on geoserver to 3.2-SNAPSHOT
>>>>>>>
>>>>>>> Jenkins seems to be quite satisfied at the moment for both
>>>>>>> geofence-master and
>>>>>>> geoserver-master :)
>>>>>>>
>>>>>>> Cheers,
>>>>>>> Emanuele
>>>>>>>
>>>>>>> Alle 00:51:39 di Thursday 31 March 2016, Emanuele Tajariol ha
>>>>>>> scritto:
>>>>>>>>> The geoserver-master build now fails because the
corresponding
>>>>>>>>> changes in the geofence 3.1-spring4 branch have not yet been
>>>>>>>>> merged:
>>>>>>>>> https://github.com/geoserver/geofence/tree/3.1-spring4
>>>>>>>> Uhm... quite a big change anyway....
>>>>>>>> I wonder if it's the case to bump to version 3.2 for
geofence.
>>>>>>>>
>>>>>>>> Definitely we need a strategy for keeping the versions of
>>>>>>>> GeoServer and
>>>>>>>> GeoFence somehow aligned.
>>>>>>>>
>>>>>>>> Cheers,
>>>>>>>> Emanuele
>>>>>>>>
>>>>>>>> Alle 00:00:34 di Thursday 31 March 2016, Ben
Caradoc-Davies ha
>>>>>>>> scritto:
>>>>>>>>> On 31/03/16 05:59, Emanuele Tajariol wrote:
>>>>>>>>>>> Can you apply this fix to master and we can delete the
>>>>>>>>>>> spring-4-upgrade branch.
>>>>>>>>>> Sure,
>>>>>>>>>> here it is
>>>>>>>>>> <
>>>>>>>
>>>>>>>
https://github.com/geoserver/geoserver/commit/9473b585770f068ec0c1374e
>>>>>>>
>>>>>>>>>> 68 f19ddb13d8e8ef>
>>>>>>>>>>
>>>>>>>>>> Cheers,
>>>>>>>>>> Emanuele
>>>>>>>>> The geoserver-master build now fails because the
corresponding
>>>>>>>>> changes in the geofence 3.1-spring4 branch have not yet been
>>>>>>>>> merged:
>>>>>>>>> https://github.com/geoserver/geofence/tree/3.1-spring4
>>>>>>>>>
>>>>>>>>> Build failure:
>>>>>>>>>
>>>>>>>>>
http://ares.boundlessgeo.com/jenkins/job/geoserver-master/2346/change
>>>>>>>>> s
>>>>>>>>>
>>>>>>>>> Kind regards,
>>>>>>> --
>>>>>>> ==
>>>>>>> GeoServer Professional Services from the experts!
>>>>>>> Visit http://goo.gl/NWWaa2 for more information.
>>>>>>> ==
>>>>>>>
>>>>>>> Ing. Emanuele Tajariol
>>>>>>> Technical Lead
>>>>>>>
>>>>>>> GeoSolutions S.A.S.
>>>>>>> Via di Montramito 3/A
>>>>>>> 55054 Massarosa (LU)
>>>>>>> Italy
>>>>>>> phone: +39 0584 962313 <tel:%2B39%200584%20962313>
>>>>>>> fax: +39 0584 1660272 <tel:%2B39%200584%201660272>
>>>>>>> mob: +39 380 2116282 <tel:%2B39%20380%202116282>
>>>>>>>
>>>>>>> http://www.geo-solutions.it
>>>>>>> http://twitter.com/geosolutions_it
>>>>>>>
>>>>>>> -------------------------------------------------------
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
-------------------------------------------------------------------------
>>>>>>> ----- Transform Data into Opportunity.
>>>>>>> Accelerate data analysis in your applications with
>>>>>>> Intel Data Analytics Acceleration Library.
>>>>>>> Click to learn more.
>>>>>>>
http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
>>>>>>> _______________________________________________
>>>>>>> Geoserver-devel mailing list
>>>>>>> Geoserver-devel@lists.sourceforge.net
<mailto:Geoserver-devel@lists.sourceforge.net>
>>>>>>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>>>>
>>>>> --
>>>>> ==
>>>>> GeoServer Professional Services from the experts!
>>>>> Visit http://goo.gl/NWWaa2 for more information.
>>>>> ==
>>>>>
>>>>> Ing. Emanuele Tajariol
>>>>> Technical Lead
>>>>>
>>>>> GeoSolutions S.A.S.
>>>>> Via di Montramito 3/A
>>>>> 55054 Massarosa (LU)
>>>>> Italy
>>>>> phone: +39 0584 962313 <tel:%2B39%200584%20962313>
>>>>> fax: +39 0584 1660272 <tel:%2B39%200584%201660272>
>>>>> mob: +39 380 2116282 <tel:%2B39%20380%202116282>
>>>>>
>>>>> http://www.geo-solutions.it
>>>>> http://twitter.com/geosolutions_it
>>>>>
>>>>> -------------------------------------------------------
>>>>
>>>>
>>>>
>>>>
------------------------------------------------------------------------------
>>>>
>>>> _______________________________________________
>>>> Geoserver-devel mailing list
>>>> Geoserver-devel@lists.sourceforge.net
<mailto:Geoserver-devel@lists.sourceforge.net>
>>>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>>>
>>>
>>>
>>> --
>>> ==
>>> GeoServer Professional Services from the experts! Visit
>>> http://goo.gl/it488V for more information.
>>> ==
>>>
>>> Ing. Andrea Aime
>>> @geowolf
>>> Technical Lead
>>>
>>> GeoSolutions S.A.S.
>>> Via di Montramito 3/A
>>> 55054 Massarosa (LU)
>>> phone: +39 0584 962313 <tel:%2B39%200584%20962313>
>>> fax: +39 0584 1660272 <tel:%2B39%200584%201660272>
>>> mob: +39 339 8844549
>>>
>>> http://www.geo-solutions.it
>>> http://twitter.com/geosolutions_it
>>>
>>> AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
>>>
>>> Le informazioni contenute in questo messaggio di posta
elettronica e/o
>>> nel/i file/s allegato/i sono da considerarsi strettamente
riservate. Il loro
>>> utilizzo è consentito esclusivamente al destinatario del
messaggio, per le
>>> finalità indicate nel messaggio stesso. Qualora riceviate
questo messaggio
>>> senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia
>>> via e-mail e di procedere alla distruzione del messaggio stesso,
>>> cancellandolo dal Vostro sistema. Conservare il messaggio
stesso, divulgarlo
>>> anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per
>>> finalità diverse, costituisce comportamento contrario ai
principi dettati
>>> dal D.Lgs. 196/2003.
>>>
>>>
>>>
>>> The information in this message and/or attachments, is
intended solely for
>>> the attention and use of the named addressee(s) and may be
confidential or
>>> proprietary in nature or covered by the provisions of privacy act
>>> (Legislative Decree June, 30 2003, no.196 - Italy's New Data
Protection
>>> Code).Any use not in accord with its purpose, any disclosure,
reproduction,
>>> copying, distribution, or either dissemination, either whole
or partial, is
>>> strictly forbidden except previous formal approval of the named
>>> addressee(s). If you are not the intended recipient, please
contact
>>> immediately the sender by telephone, fax or e-mail and delete the
>>> information in this message that has been received in error.
The sender does
>>> not give any warranty or accept liability as the content,
accuracy or
>>> completeness of sent messages and accepts no responsibility
for changes
>>> made after they were sent or for other risks which arise as a
result of
>>> e-mail transmission, viruses, etc.
>>>
>>>
>>> -------------------------------------------------------
>>
>>
>>
------------------------------------------------------------------------------
>>
>> _______________________________________________
>> Geoserver-devel mailing list
>> Geoserver-devel@lists.sourceforge.net
<mailto:Geoserver-devel@lists.sourceforge.net>
>> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
>>
>
------------------------------------------------------------------------------
> _______________________________________________
> Geoserver-devel mailing list
> Geoserver-devel@lists.sourceforge.net
<mailto:Geoserver-devel@lists.sourceforge.net>
> https://lists.sourceforge.net/lists/listinfo/geoserver-devel
------------------------------------------------------------------------------
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
<mailto:Geoserver-devel@lists.sourceforge.net>
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
--
==
GeoServer Professional Services from the experts!
Visit http://goo.gl/it488V for more information.
==
Dott. Damiano Giampaoli
Software Engineer
GeoSolutions S.A.S.
Via di Montramito 3/A
55054 Massarosa (LU)
Italy
phone: +39 0584 962313 <tel:%2B39%200584%20962313>
fax: +39 0584 1660272 <tel:%2B39%200584%201660272>
mob: +39 333 8128928 <tel:%2B39%20%20333%208128928>
http://www.geo-solutions.it <http://www.geo-solutions.it/>
http://twitter.com/geosolutions_it
-------------------------------------------------------
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate.
Il loro utilizzo è consentito esclusivamente al destinatario del
messaggio, per le finalità indicate nel messaggio stesso. Qualora
riceviate questo messaggio senza esserne il destinatario, Vi preghiamo
cortesemente di darcene notizia via e-mail e di procedere alla
distruzione del messaggio stesso, cancellandolo dal Vostro sistema.
Conservare il messaggio stesso, divulgarlo anche in parte,
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità
diverse, costituisce comportamento contrario ai principi dettati dal
D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely
for the attention and use of the named addressee(s) and may be
confidential or proprietary in nature or covered by the provisions of
privacy act (Legislative Decree June, 30 2003, no.196 - Italy's New
Data Protection Code).Any use not in accord with its purpose, any
disclosure, reproduction, copying, distribution, or either
dissemination, either whole or partial, is strictly forbidden except
previous formal approval of the named addressee(s). If you are not the
intended recipient, please contact immediately the sender by
telephone, fax or e-mail and delete the information in this message
that has been received in error. The sender does not give any warranty
or accept liability as the content, accuracy or completeness of sent
messages and accepts no responsibility for changes made after they
were sent or for other risks which arise as a result of e-mail
transmission, viruses, etc.
