Hi Melody
Please stay on the user mailing list.
The stack trace tells me that GeoServer is not able to find the web.xml
file. This is strange, I tested with tomcat and jetty, no problems here.
Check if the file is there and that it is readable for the weblogic
container.
An alternative solution is:
Remove the J2ee role service
Add the role "GEOSERVER" to the role service named "default".
Configure the role service named "default" to have "Administrator Role" =
"GEOSERVER".
Configure the J2EE filter to use the role service "default".
Try again and let me know
Christian
2013/8/1 Ballance, Melody (IS) <[email protected]>
> Christian,****
>
> Below is the addition made to the downloaded web.xml that
> is deployed in the war file. I am NOT seeing the GEOSERVER role in the
> user/groups/roles (roles) tab.****
>
> ** **
>
> ** **
>
> <security-constraint>****
>
> <web-resource-collection>****
>
> <web-resource-name>GeoServer</web-resource-name>****
>
> <url-pattern>/ *</url-pattern>****
>
> <http-method>PUT</http-method>****
>
> <http-method>DELETE</http-method>****
>
> <http-method>GET</http-method>****
>
> <http-method>POST</http-method>****
>
> </web-resource-collection>****
>
> <auth-constraint>****
>
> <role-name>GEOSERVER</role-name>****
>
> </auth-constraint>****
>
> </security-constraint>****
>
> ** **
>
> <login-config>****
>
> <auth-method>BASIC</auth-method>****
>
> </login-config>****
>
> ** **
>
> <security-role>****
>
> <role-name>GEOSERVER</role-name>****
>
> ** **
>
> I followed your instructions:****
>
> - add J2EE role service (GUI) ****
>
> - add J2EE authentication filter using the J2EE role service (GUI)****
>
> - put this filter on the filter chains, remove unneeded filters****
>
> When I did this part I would add the J2EE_AUTH_FILTER to
> each of the chains. When I would restart the application, the
> J2EE_AUTH_FILTER was no longer in any of the filter chains.****
>
> So I added it back again to all of the filter chains
> except the login and logout. And then I removed the rememberme
> authentication filter and restarted the application but this time I got a
> Error
> 500--Internal Server Error. Then when I looked in the logs I saw the
> following.****
>
> ** **
>
> ************* error after removing the rememberme authentication
> filter******************
>
> ** **
>
> java.lang.RuntimeException: java.io.IOException: Cannot open
> /WEB-INF/web.xml****
>
> at
> org.geoserver.security.filter.GeoServerPreAuthenticationFilter.doAuthenticate(GeoServerPreAuthenticationFilter.java:122)
> ****
>
> at
> org.geoserver.security.filter.GeoServerPreAuthenticationFilter.doFilter(GeoServerPreAuthenticationFilter.java:63)
> ****
>
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323)
> ****
>
> at
> org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:68)
> ****
>
> at
> org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:182)
> ****
>
> Truncated. see log file for complete stacktrace****
>
> Caused By: java.io.IOException: Cannot open /WEB-INF/web.xml****
>
> at
> org.geoserver.security.impl.GeoServerJ2eeRoleService.load(GeoServerJ2eeRoleService.java:267)
> ****
>
> at
> org.geoserver.security.impl.GeoServerJ2eeRoleService.<init>(GeoServerJ2eeRoleService.java:183)
> ****
>
> at
> org.geoserver.security.impl.J2eeSecurityProvider.createRoleService(J2eeSecurityProvider.java:40)
> ****
>
> at
> org.geoserver.security.GeoServerSecurityManager$RoleServiceHelper.load(GeoServerSecurityManager.java:2647)
> ****
>
> at
> org.geoserver.security.GeoServerSecurityManager.loadRoleService(GeoServerSecurityManager.java:658)
> ****
>
> Truncated. see log file for complete stacktrace****
>
> </security-role>****
>
> ** **
>
> Thanks,****
>
> Melody****
>
> ** **
>
> *From:* Christian Mueller [mailto:[email protected]]
> *Sent:* Thursday, August 01, 2013 6:57 AM
> *To:* Ballance, Melody (IS)
> *Cc:* [email protected]
> *Subject:* EXT :Re: [Geoserver-users] Disabling Geoserver Security in
> 2.3.4?****
>
> ** **
>
> Hi Melody****
>
> ** **
>
> First, this hat nothing to do with disabling GeoServer security. You have
> to create a J2EE authentication filter. (Can be done on the
> "Authentication" page). ****
>
> ** **
>
> A J2EE authentication filter requires a role service. Two possibilities
> here:****
>
> ** **
>
> - If you have defined your roles in the web.xml file, create a new J2EE
> role service ("User, Groups,Roles" page).****
>
> - If you want to use the default role serice, you have to add the J2EE
> roles individually (not recommended).****
>
> ** **
>
> For each filter chain ("Authentication" page") do the following.****
>
> ** **
>
> Remove the current authentication filters and add your new J2EE
> authentication filter.****
>
> ** **
>
> Hint: Make a backup of your GEOSERVER_DATA_DIR/security directory- This
> helps restoring your original security configuration.****
>
> ** **
>
> Cheers****
>
> Chrstian****
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> ** **
>
> 2013/7/31 Ballance, Melody (IS) <[email protected]>****
>
> I am trying to use weblogic’s authentication via basic form
> authentication, but I still cannot disable the geoserver security login.
> What all do I need to comment out in the web.xml to make this happen?
> Also, how can I still have a geoserver privileged user to access/update the
> configuration of geoserver?****
>
> ****
>
> I currently have it where the user is being prompted for a weblogic
> account and proceeding with that account, but it does NOT log me in to
> geoserver. Then when I type in root and the appropriate password, I get
> https://FQDN:443/GeoServer/j_spring_security_check. ****
>
> ****
>
> I am installing 2.3.4 which I thought is suppose to resolve the disabling
> geoserver security issue.****
>
> ****
>
> Thanks,
> Melody****
>
> ****
>
>
>
> ------------------------------------------------------------------------------
> Get your SQL database under version control now!
> Version control is standard for application code, but databases havent
> caught up. So what steps can you take to put your SQL databases under
> version control? Why should you start doing it? Read more to find out.
> http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk
> _______________________________________________
> Geoserver-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/geoserver-users****
>
>
>
> ****
>
> ** **
>
> -- ****
>
> DI Christian Mueller MSc (GIS), MSc (IT-Security)****
>
> OSS Open Source Solutions GmbH****
>
> ** **
>
--
DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH
------------------------------------------------------------------------------
Get your SQL database under version control now!
Version control is standard for application code, but databases havent
caught up. So what steps can you take to put your SQL databases under
version control? Why should you start doing it? Read more to find out.
http://pubads.g.doubleclick.net/gampad/clk?id=49501711&iu=/4140/ostg.clktrk
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users
