Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-02-12 Thread Andrea Aime
Hi Darell, I'm sorry but I have to insist... the only way a developer is maybe going to look into this is that you or Harleen put toghether a script that recreates this bug starting from the simplest possible installation, and then attach it to a ticket at https://osgeo-org.atlassian.net/projects/G

Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-02-12 Thread Darell van der Voort
Hello everyone, An update on the issue. I am now experiencing the problem regularly, even when adding a single account. The roles.xml keeps getting corrupted, mostly the associations between role_id and username are lost. It only happens when I access the roles.xml file, but it does seem random as

Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-01-24 Thread Darell van der Voort
Hello, Thank you for the thorough explanation Harleen, very helpful. It turned out that also our roles.xml was corrupted in production. It did keep most of the role_ids, however it removed nearly all of the role-user associations, including the admin. Hence the lock out. We ware able to restore mo

Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-01-24 Thread Andrea Aime
Hi all, thanks for moving the discussion forward. Just to be clear, the only way a developer may look into this is that you make it easily reproducable on a vanilla installation that anyone can run on their own. If GeoFence has to be plugged in to reproduce, that is not a problem, just describe it

Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-01-23 Thread Harleen Lappano
One more update. I goofed on some of the info I passed in my last email. I mentioned that the roles.xml is getting messed up. I want to add also the users.xml. I didn't catch it before because our admin is under a different user group than the one we are adding users to. But all the users includin

Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-01-23 Thread Harleen Lappano
Hey again, Just to add I hit the snag again after making those above changes too. However, I isolated the situation more and how to sort of recover back. The roles.xml file is getting corrupted somehow. It is removing some of the users that were already in place including admin. Which is why the

Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-01-23 Thread Harleen Lappano
Hey, Andrea, I also don't know if we will be able to run a test here without Geofence. It would be on my own time right now since we battled through the issue for now. However, I can say we tried to dump a users.xml and roles.xml while it was running to add the users that way instead of the REST a

Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-01-23 Thread Darell van der Voort
Hello Harleen, Andrea, Thank you very much for the input! Harleen, your problem is exactly the same as we are facing. I am also adding authentication with geofence and pull the exisiting users from the users.xml file. Normally we only add just a few users without any problems. But indeed with more

Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-01-23 Thread Andrea Aime
Hi Darell and Harleen, it seems you're on to something. Wondering, can it be reproduced without GeoFence in the mix? It would be useful to have a script that reproduces the problem on a vanilla GeoServer installation, if that can be done please open a ticket with it at: https://osgeo-org.atlassian.

Re: [Geoserver-users] Access denied after creating multiple accounts using REST API

2018-01-22 Thread Harleen Lappano
Hey Darell, I'm not a expert on Geoserver. However, funny story is that I ran into this same issue last Friday as we were pushing our changes to our production. We are using Geoserver 2.9.1 for our product. I don't remember the tomcat version. If it wasn't for your email, we would have been still

[Geoserver-users] Access denied after creating multiple accounts using REST API

2018-01-22 Thread Darell van der Voort
Hello everybody, I'm running Geoserver 2.11.2 on Java 1.8.0_144 32 bits on Amazon Linux together with Tomcat 9. I have a very urgent problem. I have a Python script that uses the REST API to automatically create users, set read/write permissions and create workspaces. I have been using this for t