Only to be sure, did you put your j2ee filter on the rest queue (ant
pattern /rest/**)
Cheers
Christian
On Wed, Sep 4, 2013 at 12:13 PM, Dmitriy Tyugaev <dtyug...@gmail.com> wrote:
> Hi list.
>
> I have an issue with Rest security in latest geoserver 2.3.5 (also in
> 2.3.4) I use j2ee authentication filter for authorization in our JOSSO
> system. Authorization is proceeding normally and everything is working as
> it should, but when I try to create a workspace via a REST receive the
> following error
>
> 2013-09-03 08:55:07,145 DEBUG
> [security.RESTfulPathBasedFilterInvocationDefinitionMap] - Converted URL to
> lowercase, from: '/rest/workspaces'; to: '/rest/workspaces' and
> httpMethod= POST
> 2013-09-03 08:55:07,145 DEBUG
> [security.RESTfulPathBasedFilterInvocationDefinitionMap] - ~~~~~~~~~~
> antPath= /** methodList= [GET]
> 2013-09-03 08:55:07,145 DEBUG
> [security.RESTfulPathBasedFilterInvocationDefinitionMap] - Candidate is:
> '/rest/workspaces'; antPath is /**; matchedPath=true; matchedMethods=false
> 2013-09-03 08:55:07,145 DEBUG
> [security.RESTfulPathBasedFilterInvocationDefinitionMap] - ~~~~~~~~~~
> antPath= /** methodList= [POST, DELETE, PUT]
> 2013-09-03 08:55:07,145 DEBUG
> [security.RESTfulPathBasedFilterInvocationDefinitionMap] - Candidate is:
> '/rest/workspaces'; antPath is /**; matchedPath=true; matchedMethods=true
> 2013-09-03 08:55:07,145 DEBUG
> [security.RESTfulPathBasedFilterInvocationDefinitionMap] - returning
> RIHMI-WDC.RCITU:GIS:ADMIN
> 2013-09-03 08:55:07,146 TRACE [ows.OWSHandlerMapping] - No handler mapping
> found for [/rest/workspaces]
> 2013-09-03 08:55:07,146 TRACE [ows.OWSHandlerMapping] - No handler mapping
> found for [/rest/workspaces]
> 2013-09-03 08:55:07,149 DEBUG [org.geoserver] - Thread 151 locking in mode
> WRITE
> 2013-09-03 08:55:07,149 DEBUG [org.geoserver] - Thread 151 got the lock in
> mode WRITE
> 2013-09-03 08:55:07,181 DEBUG [org.geoserver] - Thread 151 releasing the
> lock in mode WRITE
> 2013-09-03 08:55:07,182 ERROR [geoserver.rest] -
> com.thoughtworks.xstream.io.StreamException: : input contained no data
> at
> com.thoughtworks.xstream.io.xml.XppReader.pullNextEvent(XppReader.java:126)
> at
> com.thoughtworks.xstream.io.xml.AbstractPullReader.readRealEvent(AbstractPullReader.java:148)
> at
> com.thoughtworks.xstream.io.xml.AbstractPullReader.readEvent(AbstractPullReader.java:141)
> at
> com.thoughtworks.xstream.io.xml.AbstractPullReader.move(AbstractPullReader.java:118)
> at
> com.thoughtworks.xstream.io.xml.AbstractPullReader.moveDown(AbstractPullReader.java:103)
> at com.thoughtworks.xstream.io.xml.XppReader.<init>(XppReader.java:63)
> at
> com.thoughtworks.xstream.io.xml.AbstractXppDriver.createReader(AbstractXppDriver.java:54)
> at
> com.thoughtworks.xstream.io.xml.AbstractXppDriver.createReader(AbstractXppDriver.java:65)
> at com.thoughtworks.xstream.XStream.fromXML(XStream.java:922)
> at
> org.geoserver.config.util.XStreamPersister.load(XStreamPersister.java:549)
> at
> org.geoserver.catalog.rest.AbstractCatalogResource$1.read(AbstractCatalogResource.java:50)
> at
> org.geoserver.rest.format.StreamDataFormat.toObject(StreamDataFormat.java:33)
> at
> org.geoserver.rest.ReflectiveResource.handlePost(ReflectiveResource.java:117)
> at org.restlet.Finder.handle(Finder.java:296)
> at
> org.geoserver.rest.BeanDelegatingRestlet.handle(BeanDelegatingRestlet.java:37)
> at org.restlet.Filter.doHandle(Filter.java:105)
> at org.restlet.Filter.handle(Filter.java:134)
> at org.restlet.Router.handle(Router.java:444)
> at org.geoserver.rest.RESTDispatcher$1.handle(RESTDispatcher.java:204)
> at
> com.noelios.restlet.ext.servlet.ServletConverter.service(ServletConverter.java:129)
> at
> org.geoserver.rest.RESTDispatcher.handleRequestInternal(RESTDispatcher.java:86)
> at
> org.springframework.web.servlet.mvc.AbstractController.handleRequest(AbstractController.java:153)
> at
> org.springframework.web.servlet.mvc.SimpleControllerHandlerAdapter.handle(SimpleControllerHandlerAdapter.java:48)
> at
> org.springframework.web.servlet.DispatcherServlet.doDispatch(DispatcherServlet.java:923)
> at
> org.springframework.web.servlet.DispatcherServlet.doService(DispatcherServlet.java:852)
> at
> org.springframework.web.servlet.FrameworkServlet.processRequest(FrameworkServlet.java:882)
> at
> org.springframework.web.servlet.FrameworkServlet.doPost(FrameworkServlet.java:789)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:647)
> at javax.servlet.http.HttpServlet.service(HttpServlet.java:728)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:305)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at
> org.geoserver.filters.ThreadLocalsCleanupFilter.doFilter(ThreadLocalsCleanupFilter.java:27)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at
> org.geoserver.filters.SpringDelegatingFilter$Chain.doFilter(SpringDelegatingFilter.java:74)
> at
> org.geoserver.filters.SpringDelegatingFilter.doFilter(SpringDelegatingFilter.java:45)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at
> org.geoserver.platform.AdvancedDispatchFilter.doFilter(AdvancedDispatchFilter.java:49)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at
> org.vfny.geoserver.filters.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:109)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:311)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:68)
> at
> org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:116)
> at
> org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:83)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:72)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:91)
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:68)
> at
> org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:113)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:72)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:91)
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323)
> at
> org.geoserver.security.filter.GeoServerAnonymousAuthenticationFilter.doFilter(GeoServerAnonymousAuthenticationFilter.java:53)
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:68)
> at
> org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilter(BasicAuthenticationFilter.java:201)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:72)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:91)
> at
> org.geoserver.security.filter.GeoServerBasicAuthenticationFilter.doFilter(GeoServerBasicAuthenticationFilter.java:82)
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323)
> at
> org.geoserver.security.filter.GeoServerPreAuthenticationFilter.doFilter(GeoServerPreAuthenticationFilter.java:74)
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:68)
> at
> org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
> at
> org.geoserver.security.filter.GeoServerSecurityContextPersistenceFilter$1.doFilter(GeoServerSecurityContextPersistenceFilter.java:52)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:72)
> at
> org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:91)
> at
> org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:323)
> at
> org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:173)
> at
> org.geoserver.security.GeoServerSecurityFilterChainProxy.doFilter(GeoServerSecurityFilterChainProxy.java:134)
> at
> org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)
> at
> org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at org.geoserver.filters.LoggingFilter.doFilter(LoggingFilter.java:75)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at org.geoserver.filters.GZIPFilter.doFilter(GZIPFilter.java:48)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at
> org.geoserver.filters.SessionDebugFilter.doFilter(SessionDebugFilter.java:47)
> at
> org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:243)
> at
> org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:210)
> at
> org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:222)
> at
> org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:123)
> at
> org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:502)
> at
> org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
> at
> com.googlecode.psiprobe.Tomcat70AgentValve.invoke(Tomcat70AgentValve.java:38)
> at
> org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:99)
> at org.josso.tc70.agent.SSOAgentValve.invoke(SSOAgentValve.java:672)
> at
> org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:953)
> at
> org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:118)
> at
> org.apache.catalina.ha.session.JvmRouteBinderValve.invoke(JvmRouteBinderValve.java:219)
> at
> org.apache.catalina.ha.tcp.ReplicationValve.invoke(ReplicationValve.java:335)
> at
> org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
> at
> org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1023)
> at
> org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:589)
> at
> org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:312)
> at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source)
> at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
> at java.lang.Thread.run(Unknown Source)
> Caused by: java.io.EOFException: input contained no data
> at org.xmlpull.mxp1.MXParser.fillBuf(MXParser.java:2983)
> at org.xmlpull.mxp1.MXParser.more(MXParser.java:3026)
> at org.xmlpull.mxp1.MXParser.parseProlog(MXParser.java:1410)
> at org.xmlpull.mxp1.MXParser.nextImpl(MXParser.java:1395)
> at org.xmlpull.mxp1.MXParser.next(MXParser.java:1093)
> at
> com.thoughtworks.xstream.io.xml.XppReader.pullNextEvent(XppReader.java:109)
> ... 104 more
>
> Creating a workspace with a basic authentication filter is working fine..
>
> My curl command
> curl -b /tmp/geoserver.txt -XPOST -H "Content-type: text/xml" -d
> "<workspace><name>new</name></workspace>"
> http://localhost:8081/resources/rest/workspaces
>
> /tmp/geoserver.txt is a cookie file received from the JOSSO.
>
> Java 7.0_25 and Tomcat 7.0.42 on Linux
>
> Please help me what is the problem?
> --
> Cheers, Dmitriy
>
>
> ------------------------------------------------------------------------------
> Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
> Discover the easy way to master current and previous Microsoft technologies
> and advance your career. Get an incredible 1,500+ hours of step-by-step
> tutorial videos with LearnDevNow. Subscribe today and save!
> http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
> _______________________________________________
> Geoserver-users mailing list
> Geoserver-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>
>
--
DI Christian Mueller MSc (GIS), MSc (IT-Security)
OSS Open Source Solutions GmbH
------------------------------------------------------------------------------
Learn the latest--Visual Studio 2012, SharePoint 2013, SQL 2012, more!
Discover the easy way to master current and previous Microsoft technologies
and advance your career. Get an incredible 1,500+ hours of step-by-step
tutorial videos with LearnDevNow. Subscribe today and save!
http://pubads.g.doubleclick.net/gampad/clk?id=58040911&iu=/4140/ostg.clktrk
_______________________________________________
Geoserver-users mailing list
Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
