My guess would be that your Apache does not pass the REMOTE_USER field
properly to your Tomcat instance
I'm not sure what's needed for that.
Ludovic
Everitt, Glenn wrote:
My configuration does authentication in Apache and then passes the
pre-authenticated request to Tomcat. It looks like the class
com.xpn.xwiki.user.impl.xwiki.AppServerTrustedAuthServiceImpl assumes
the authentication has already occurred and creates an Xwiki user
which is what I think I want. So, I thought all I had to do was add a
line to the xwiki.cfg file like this:
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.xwiki.AppServerTrustedAuthServiceImpl
But it didn't seem to work so I turned on debugging log4j.properties
with this:
log4j.logger.com.xpn.xwiki.user.impl.xwiki=debug
And this showed up in my xwiki.log:
17:21:20,996 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Checking match: XWiki.XWikiGuest in
17:21:20,996 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Checking match: XWiki.XWikiGuest in
17:21:20,997 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Failed match: XWiki.XWikiGuest in
17:21:20,997 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Checking object 2
17:21:20,997 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Checking match: view in view,register,
17:21:20,997 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Found a right for true
17:21:20,997 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Checking match: XWiki.XWikiGuest in XWiki.XWikiGuest,
17:21:20,997 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Checking match: XWiki.XWikiGuest in XWiki.XWikiGuest
17:21:20,998 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Found matching right in XWiki.XWikiGuest, for XWiki.XWikiGuest
17:21:20,998 [TP-Processor2] DEBUG xwiki.XWikiRightServiceImpl -
Access has been granted for (XWiki.XWikiGuest,Panels.MyRecentModif
It doesn't seem to be using the AppServerTrustedAuthServiceImpl
because the expected log statements don't appear in the log file. Any
suggestions on how to properly configure
AppServerTrustedAuthServiceImpl ??
Any help greatly appreciated - Glenn
The contents of this e-mail are intended for the named addressee only.
It contains information that may be confidential. Unless you are the
named addressee or an authorized designee, you may not copy or use it,
or disclose it to anyone else. If you received it in error please
notify us immediately and then destroy it.
------------------------------------------------------------------------
_______________________________________________
devs mailing list
devs(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/devs