Problem with permissions - no permission to view main but other pages...

Mon, 10 Mar 2008 04:21:08 -0700 

Hi

I've just installed the JSPWiki 2.6 with Tomcat 6.0.14.
All the "old" contents from the JSPWiki 2.4 are there and everything seems to be all right. 


But when I try login there there is the problem, that I cannot access 
the main Page, although my login was successfull.



2008-03-10 12:07:54,809 [TP-Processor1] INFO 
com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Remote user changed to cbu
2008-03-10 12:07:54,809 [TP-Processor1] INFO 
com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User principal changed 
to cbu
2008-03-10 12:07:54,812 [TP-Processor1] INFO SecurityLog 
JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - 
WikiSecurityEvent.LOGIN_AUTHENTICATED 
[EMAIL PROTECTED], 
princpal=org.apache.catalina.realm.GenericPrincipal cbu, 
[EMAIL PROTECTED]
2008-03-10 12:07:54,813 [TP-Processor1] WARN 
com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User profile 'cbu' not 
found. This is normal for container-auth users who haven't set up a 
profile yet.
2008-03-10 12:07:54,814 [TP-Processor1] INFO JSPWiki 
JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Successfully 
authenticated user cbu (container auth)
2008-03-10 12:07:54,815 [TP-Processor1] INFO JSPWiki 
JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Redirecting user to 
https://192.168.1.107/JSPWiki/Wiki.jsp?page=Main
2008-03-10 12:07:54,829 [TP-Processor1] INFO 
com.ecyrd.jspwiki.WikiContext JSPWiki:/JSPWiki/Wiki.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Wiki.jsp - User cbu has no access 
- forbidden 
(permission=("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Main","view"))




When I try to login via onother page 
(.../JSPWiki/Login.jsp?redirect=KnowHow) the login is ok and the page 
ask for is shown.

But I'm still not able to go to the "Main" Page.

There is this errorpage displayed:
---------------------------


     Forbidden

*Sorry, but you are not allowed to do that.*


Usually we block access to something because you do not have the correct 
privileges (/e.g./, read, edit, comment) for the page you are looking 
for. In this particular case, it is likely that you are not listed in 
the page's access control list or that your privileges aren't high 
enough (you want to edit, but ACL only allows 'read').



It is also possible that JSPWiki cannot find its security policy, or 
that the policy is not configured correctly. Either of these cases would 
cause JSPWiki to block access, too.


Better luck next time. <https://192.168.1.107/JSPWiki/>

---------------------------

My jspwiki.policy is this:

grant principal com.ecyrd.jspwiki.auth.authorize.Role "All" {

permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:Main", 
"view";
permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
"editPreferences";
permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
"editProfile";

permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", "login";
};

grant principal com.ecyrd.jspwiki.auth.authorize.Role "Authenticated" {

permission com.ecyrd.jspwiki.auth.permissions.PagePermission "*:*", 
"view,modify,rename";

permission com.ecyrd.jspwiki.auth.permissions.GroupPermission "*:*", "view";

permission com.ecyrd.jspwiki.auth.permissions.GroupPermission 
"*:<groupmember>", "edit";
permission com.ecyrd.jspwiki.auth.permissions.WikiPermission "*", 
"createPages,createGroups";

};

grant principal com.ecyrd.jspwiki.auth.GroupPrincipal "Admin" {
permission com.ecyrd.jspwiki.auth.permissions.AllPermission "*";
};
grant principal com.ecyrd.jspwiki.auth.authorize.Role "JspWikiAdmin" {
permission com.ecyrd.jspwiki.auth.permissions.AllPermission "*";
};


I
Can anyone see what is wrong with my configuration?
Any help is welcome!!!!

Greetings & Thanks

Conny


---------------------------------------------------------
-- HERE SOME ADDITIONAL INFORMATION ---
---------------------------------------------------------



Here is the complete Code of the JSPWiki.log when the server is started 
and the first requests are made.



2008-03-10 12:05:19,182 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
*******************************************
2008-03-10 12:05:19,186 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
JSPWiki 2.6.0 starting. Whee!
2008-03-10 12:05:19,195 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
Servlet container: Apache Tomcat/6.0.14
2008-03-10 12:05:19,255 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
JSPWiki working directory is '/nC-Wiki/work'
2008-03-10 12:05:19,798 [main] INFO 
com.ecyrd.jspwiki.providers.AbstractFileProvider - Wikipages are read 
from '/nC-Wiki/content'
2008-03-10 12:05:19,834 [main] INFO 
com.ecyrd.jspwiki.plugin.PluginManager - Registering plugins
2008-03-10 12:05:19,915 [main] INFO 
com.ecyrd.jspwiki.diff.DifferenceManager - Using difference provider: 
TraditionalDiffProvider
2008-03-10 12:05:20,062 [main] INFO 
com.ecyrd.jspwiki.search.LuceneSearchProvider - Lucene enabled, cache 
will be in: /nC-Wiki/work/lucene
2008-03-10 12:05:20,295 [main] INFO com.ecyrd.jspwiki.ui.EditorManager - 
Registering editor modules
2008-03-10 12:05:20,433 [JSPWiki Lucene Indexer] INFO 
com.ecyrd.jspwiki.search.LuceneSearchProvider - Files found in Lucene 
directory, not reindexing.
2008-03-10 12:05:20,482 [main] INFO 
com.ecyrd.jspwiki.auth.AuthenticationManager - Checking JAAS 
configuration...
2008-03-10 12:05:20,482 [main] INFO 
com.ecyrd.jspwiki.auth.AuthenticationManager - JAAS not configured. 
Installing default configuration: 
file:/usr/share/apache-tomcat-6.0.14/webapps/JSPWiki/WEB-INF/jspwiki.jaas. 
You can set the java.security.auth.login.config system property to point 
to your jspwiki.jaas file, or add the entries from jspwiki.jaas to your 
own JAAS configuration file.
2008-03-10 12:05:20,581 [main] INFO 
com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - Examining 
jndi:/forum26/JSPWiki/WEB-INF/web.xml
2008-03-10 12:05:20,808 [main] INFO 
com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - JSPWiki is 
using container-managed authentication.
2008-03-10 12:05:20,808 [main] INFO 
com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - JSPWiki 
determined the web container manages these roles: 
[com.ecyrd.jspwiki.auth.authorize.Role: nC Alle] 
[com.ecyrd.jspwiki.auth.authorize.Role: JspWikiAdmin] 
[com.ecyrd.jspwiki.auth.authorize.Role: Authenticated]
2008-03-10 12:05:20,808 [main] INFO 
com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - Authorizer 
WebContainerAuthorizer initialized successfully.
2008-03-10 12:05:20,939 [main] INFO 
com.ecyrd.jspwiki.auth.AuthorizationManager - Initialized default 
security policy: 
/usr/share/apache-tomcat-6.0.14/webapps/JSPWiki/WEB-INF/jspwiki.policy
2008-03-10 12:05:20,940 [main] INFO 
com.ecyrd.jspwiki.auth.authorize.GroupManager - Attempting to load group 
database class com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase
2008-03-10 12:05:20,945 [main] INFO 
com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase - XML group database 
at /nC-Wiki/groupdatabase.xml
2008-03-10 12:05:21,093 [main] INFO 
com.ecyrd.jspwiki.auth.authorize.GroupManager - Group database initialized.
2008-03-10 12:05:21,104 [main] INFO 
com.ecyrd.jspwiki.auth.authorize.GroupManager - Authorizer GroupManager 
initialized successfully; loaded 5 group(s).
2008-03-10 12:05:21,149 [main] INFO 
com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Using JDK 1.5 Platform 
MBeanServer
2008-03-10 12:05:21,528 [main] INFO 
com.ecyrd.jspwiki.ui.admin.AdminBeanManager - 
com.sun.jmx.mbeanserver.JmxMBeanServer
2008-03-10 12:05:21,528 [main] INFO 
com.ecyrd.jspwiki.ui.admin.AdminBeanManager - DefaultDomain
2008-03-10 12:05:21,551 [main] INFO 
com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean 
Core bean
2008-03-10 12:05:21,554 [main] INFO 
com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean 
User administration
2008-03-10 12:05:21,564 [main] INFO 
com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean 
Search manager
2008-03-10 12:05:21,566 [main] INFO 
com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean 
Plugins
2008-03-10 12:05:21,567 [main] INFO 
com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean 
WikiWizard
2008-03-10 12:05:21,570 [main] INFO 
com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean 
Plain editor
2008-03-10 12:05:21,576 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
Cannot find property file for filters (this is okay, expected to find it 
as: '/WEB-INF/filters.xml')
2008-03-10 12:05:21,620 [main] INFO 
com.ecyrd.jspwiki.render.RenderingManager - Rendering content with 
com.ecyrd.jspwiki.render.XHTMLRenderer.
2008-03-10 12:05:27,945 [main] INFO com.ecyrd.jspwiki.ReferenceManager - 
Starting cross reference scan of WikiPages
2008-03-10 12:05:28,265 [main] INFO com.ecyrd.jspwiki.auth.UserManager - 
Attempting to load user database class 
com.ecyrd.jspwiki.auth.user.XMLUserDatabase
2008-03-10 12:05:28,273 [main] INFO 
com.ecyrd.jspwiki.auth.user.AbstractUserDatabase - XML user database at 
/nC-Wiki/userdatabase.xml
2008-03-10 12:05:28,317 [main] INFO com.ecyrd.jspwiki.auth.UserManager - 
UserDatabase initialized.
2008-03-10 12:05:30,568 [main] INFO com.ecyrd.jspwiki.ReferenceManager - 
Cross reference scan done in 0:00:02.623
2008-03-10 12:05:30,602 [main] INFO com.ecyrd.jspwiki.WikiEngine - 
WikiEngine configured.
2008-03-10 12:05:30,603 [main] INFO com.ecyrd.jspwiki.WikiEngine - Root 
path for this Wiki is: '/usr/share/apache-tomcat-6.0.14/webapps/JSPWiki/'
2008-03-10 12:05:30,609 [main] INFO com.ecyrd.jspwiki.WikiServlet - 
WikiServlet initialized.
2008-03-10 12:07:54,809 [TP-Processor1] INFO 
com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Remote user changed to cbu
2008-03-10 12:07:54,809 [TP-Processor1] INFO 
com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User principal changed 
to cbu
2008-03-10 12:07:54,812 [TP-Processor1] INFO SecurityLog 
JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - 
WikiSecurityEvent.LOGIN_AUTHENTICATED 
[EMAIL PROTECTED], 
princpal=org.apache.catalina.realm.GenericPrincipal cbu, 
[EMAIL PROTECTED]
2008-03-10 12:07:54,813 [TP-Processor1] WARN 
com.ecyrd.jspwiki.WikiSession JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - User profile 'cbu' not 
found. This is normal for container-auth users who haven't set up a 
profile yet.
2008-03-10 12:07:54,814 [TP-Processor1] INFO JSPWiki 
JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Successfully 
authenticated user cbu (container auth)
2008-03-10 12:07:54,815 [TP-Processor1] INFO JSPWiki 
JSPWiki:/JSPWiki/Login.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Login.jsp - Redirecting user to 
https://192.168.1.107/JSPWiki/Wiki.jsp?page=Main
2008-03-10 12:07:54,829 [TP-Processor1] INFO 
com.ecyrd.jspwiki.WikiContext JSPWiki:/JSPWiki/Wiki.jsp 
JSPWiki:https://192.168.1.107/JSPWiki/Wiki.jsp - User cbu has no access 
- forbidden 
(permission=("com.ecyrd.jspwiki.auth.permissions.PagePermission","JSPWiki:Main","view"))


---------------------------------------------------------------------------------------------


The catalina.out says something like this, but I don't know if this 
belongs to my error:


SEVERE: Exception loading sessions from persistent storage

java.io.WriteAbortedException: writing aborted; 
java.io.NotSerializableException: 
com.ecyrd.jspwiki.auth.UserManager$JSONUserModule

.....

Caused by: java.io.NotSerializableException: 
com.ecyrd.jspwiki.auth.UserManager$JSONUserModule

....
Mar 10, 2008 12:05:19 PM org.apache.catalina.core.ApplicationContext log

























					Reply via email to