Hi, thanks for your fast response!
My jspwiki.policy looks like the one delivered with the application, I did not change anything. The system variable java.security.policy is pointing to that file, in the same folder I have the keystore (all in the WEB-INF folder). The JAAS configuration can be done in an administration GUI from Websphere, thats what I did, so I do not really use the file jspwiki.jaas (it's lieing in the WEB-INF directory anyway). I think that the login is working, because users can login :). I configured what I found in the delivered jspwiki.jaas, the JSPWiki-custom with the single LoginModule. In my earlier tests with container-login I used the other config, named JSPWiki-container, but without the AssertedLoginModule. To make it clear: when I login with a user, this user is shown as the logged-in user, the login itself seems to work. In the meantime I also tried the nightly build version, nothing changed. I also took a look into the SecurityConfig.jsp, its not compiling with my Websphere (Error: JSPG0123E: Unable to locate tag attribute info for tag attribute). This lines are the problem: <wiki:Messages div="information" topic="<%=SecurityVerifier.INFO+"java.security.auth.login.config"%>" prefix="Good news: "/> I deleted them, but the file does not contain useful information for me, i believe. Perhaps this is gonna help, some log from the server-start: INFO com.ecyrd.jspwiki.WikiEngine - ******************************************* INFO com.ecyrd.jspwiki.WikiEngine - JSPWiki 2.5.143-cvs starting. Whee! DEBUG com.ecyrd.jspwiki.event.WikiEventManager - instantiated WikiEventManager DEBUG com.ecyrd.jspwiki.WikiEngine - Java version: 2.2 DEBUG com.ecyrd.jspwiki.WikiEngine - Java vendor: IBM Corporation DEBUG com.ecyrd.jspwiki.WikiEngine - OS: Windows XP 5.1 build 2600 Service Pack 1 x86 DEBUG com.ecyrd.jspwiki.WikiEngine - Default server locale: de_DE DEBUG com.ecyrd.jspwiki.WikiEngine - Default server timezone: Zentraleuropäische Sommerzeit INFO com.ecyrd.jspwiki.WikiEngine - Servlet container: IBM WebSphere Application Server/6.0 DEBUG com.ecyrd.jspwiki.WikiEngine - Configuring WikiEngine... INFO com.ecyrd.jspwiki.WikiEngine - JSPWiki working directory is 'C:\DOKUME~1\i007\LOKALE~1\Temp\\JSPWiki-1821928600' DEBUG com.ecyrd.jspwiki.util.ClassUtil - Mapped class 'com.ecyrd.jspwiki.render.RenderingManager' to class 'com.ecyrd.jspwiki.render.RenderingManager' DEBUG com.ecyrd.jspwiki.PageManager - Page provider class: 'com.ecyrd.jspwiki.providers.CachingProvider' DEBUG com.ecyrd.jspwiki.PageManager - Initializing page provider class [EMAIL PROTECTED] DEBUG com.ecyrd.jspwiki.providers.CachingProvider - Initing CachingProvider DEBUG com.ecyrd.jspwiki.providers.CachingProvider - Cache expiry period is 30 s DEBUG com.ecyrd.jspwiki.providers.CachingProvider - Cache capacity 1000 pages. DEBUG com.ecyrd.jspwiki.providers.CachingProvider - Initializing real provider class [EMAIL PROTECTED] DEBUG com.ecyrd.jspwiki.providers.AbstractFileProvider - Initing FileSystemProvider INFO com.ecyrd.jspwiki.providers.AbstractFileProvider - Wikipages are read from 'c:/temp/jspwiki' INFO com.ecyrd.jspwiki.plugin.PluginManager - Registering plugins DEBUG com.ecyrd.jspwiki.plugin.PluginManager - Processing XML: wsjar:file:/C:/daten/IBM/rad6/wiki/JSPWiki/WebContent/WEB-INF/lib/JSPWiki.jar!/ini/jspwiki_module.xml DEBUG com.ecyrd.jspwiki.plugin.PluginManager - Registering plugin [name]: IfPlugin DEBUG com.ecyrd.jspwiki.plugin.PluginManager - Registering plugin [shortName]: If DEBUG com.ecyrd.jspwiki.plugin.PluginManager - Registering plugin [className]: com.ecyrd.jspwiki.plugin.IfPlugin DEBUG com.ecyrd.jspwiki.plugin.PluginManager - Registering plugin [name]: Note DEBUG com.ecyrd.jspwiki.plugin.PluginManager - Registering plugin [className]: com.ecyrd.jspwiki.plugin.Note INFO com.ecyrd.jspwiki.diff.DifferenceManager - Using difference provider: TraditionalDiffProvider DEBUG com.ecyrd.jspwiki.providers.CachingAttachmentProvider - Initing CachingAttachmentProvider DEBUG com.ecyrd.jspwiki.providers.CachingAttachmentProvider - Initializing real provider class [EMAIL PROTECTED] DEBUG com.ecyrd.jspwiki.search.SearchManager - Loaded search provider [EMAIL PROTECTED] INFO com.ecyrd.jspwiki.ui.EditorManager - Registering editor modules DEBUG com.ecyrd.jspwiki.ui.EditorManager - Processing XML: wsjar:file:/C:/daten/IBM/rad6/wiki/JSPWiki/WebContent/WEB-INF/lib/JSPWiki.jar!/ini/jspwiki_module.xml DEBUG com.ecyrd.jspwiki.ui.EditorManager - Registered editor plain DEBUG com.ecyrd.jspwiki.ui.EditorManager - Registered editor WikiWizard INFO com.ecyrd.jspwiki.auth.AuthenticationManager - Checking JAAS configuration... INFO com.ecyrd.jspwiki.auth.AuthenticationManager - JAAS already configured by some other application (leaving it alone...) INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - Examining file:/C:/daten/IBM/rad6/wiki/JSPWiki/WebContent/WEB-INF/web.xml DEBUG com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - Processing web.xml at file:/C:/daten/IBM/rad6/wiki/JSPWiki/WebContent/WEB-INF/web.xml INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - JSPWiki is using custom authentication. INFO com.ecyrd.jspwiki.auth.authorize.WebContainerAuthorizer - Authorizer WebContainerAuthorizer initialized successfully. INFO com.ecyrd.jspwiki.auth.AuthorizationManager - Initialized local security policy: C:\daten\IBM\rad6\wiki\JSPWiki\WebContent\WEB-INF\jspwiki.policy INFO com.ecyrd.jspwiki.auth.authorize.GroupManager - Attempting to load group database class com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase ERROR com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase - XML group database property jspwiki.xmlGroupDatabaseFile not found; trying C:\daten\IBM\rad6\wiki\JSPWiki\WebContent\WEB-INF\groupdatabase.xml INFO com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase - XML group database at C:\daten\IBM\rad6\wiki\JSPWiki\WebContent\WEB-INF\groupdatabase.xml DEBUG com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase - Database successfully initialized INFO com.ecyrd.jspwiki.auth.authorize.GroupManager - Group database initialized. DEBUG com.ecyrd.jspwiki.auth.authorize.XMLGroupDatabase - Database successfully initialized INFO com.ecyrd.jspwiki.auth.authorize.GroupManager - Authorizer GroupManager initialized successfully; loaded 0 group(s). INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Finding a JDK 1.4 -compatible MBeanServer. INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - mx4j.server.MX4JMBeanServer INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - WebSphere INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean Core bean INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean User administration INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean Search manager INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean Plugins INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean WikiWizard INFO com.ecyrd.jspwiki.ui.admin.AdminBeanManager - Registered new admin bean Plain editor DEBUG com.ecyrd.jspwiki.WikiEngine - Attempting to locate /WEB-INF/filters.xml from servlet context. DEBUG com.ecyrd.jspwiki.WikiEngine - Attempting to locate filters.xml from class path. INFO com.ecyrd.jspwiki.WikiEngine - Cannot find property file for filters (this is okay, expected to find it as: '/WEB-INF/filters.xml') Best regards, albert -------- Original-Nachricht -------- > Datum: Mon, 15 Oct 2007 22:30:46 +0300 > Von: Janne Jalkanen <[EMAIL PROTECTED]> > An: JSPWiki Users discussion list <[email protected]> > Betreff: Re: [Jspwiki-users] ACL not working > How does your "jspwiki.policy" file look like? Also, where exactly > is your JAAS configuration and how does it look like? > > /Janne > > On 15 Oct 2007, at 17:53, [EMAIL PROTECTED] wrote: > > > Hello, > > > > I hope you can help me with the following problem. I already wrote > > some lines on http://www.jspwiki.org/wiki/ > > BugACLCommandsBeingIgnored (as albert, obviously we are already two > > with this prob), the ACL I add to my Wiki are not working. I > > startet with a fresh Wiki, version 2.4.102 deployed on IBM > > Websphere 6.0, only changed the config-file by pointing to the > > right directories. So I use the custom-login, but in my tests > > before I also used container-login-modules. So here is what I tried: > > > > 1. create a page with this ACL: [{ALLOW view lars}] [{ALLOW edit > > lars}] > > 2. try to view the page -> success (I thought I could only view it > > as user lars or as a member of the group lars) > > 3. try to edit it -> success > > > > I tried the same with first login as lars, create a page with ACLs, > > login as dirk, access was granted. Debugging showed me, the > > problem is: every user has the AllPermission in the > > AuthorizationManager. But why?? > > > > Here is some log (where you can see, that I get access as anonymous > > to a page with ACL allowing view only for lars): > > > > > > > > I would be glad if you could help me, i'll become desperate! :-) > > > > Thanks, > > Dirk > > -- > > GMX FreeMail: 1 GB Postfach, 5 E-Mail-Adressen, 10 Free SMS. > > Alle Infos und kostenlose Anmeldung: http://www.gmx.net/de/go/freemail > > _______________________________________________ > > This is the Jspwiki-users mailing list, in which we discuss the > > stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. > > For development discussion, please join jspwiki-dev. > > http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users > > http://www.jspwiki.org/JSPWikiMailingList > > _______________________________________________ > This is the Jspwiki-users mailing list, in which we discuss the > stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. > For development discussion, please join jspwiki-dev. > http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users > http://www.jspwiki.org/JSPWikiMailingList -- Ist Ihr Browser Vista-kompatibel? Jetzt die neuesten Browser-Versionen downloaden: http://www.gmx.net/de/go/browser _______________________________________________ This is the Jspwiki-users mailing list, in which we discuss the stable release (even-numbered, 2.4.x, 2.6.x), and user-issues. For development discussion, please join jspwiki-dev. http://ecyrd.com/cgi-bin/mailman/listinfo/jspwiki-users http://www.jspwiki.org/JSPWikiMailingList
