31 Oct
2014
31 Oct
'14
9:54 p.m.
Having made my XWiki site available to other users, I was concerned to find that the site
became unusable at one point with client connections eventually timing out. I had no way
to diagnose the problem, but eventually I managed to make a (slow) SSH connection to the
server and restarted Tomcat, and things seemed to settle back to normal.
The problem is I have no real sense of what happened and how to prevent it happening
again. To that end, I'd appreciate any suggestions for monitoring the server and
diagnosing poor performance. What do others typically use? I have an Apache2 server
passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My
guess is that Tomcat is doing most of the work here so that's probably what I need to
monitor the most.
31 Oct
31 Oct
10:29 p.m.
I's also find any suggestions very helpful, I've had that happen a few times and
outside of monitoring CPU and RAM, I've found logging to be difficult to use and
configure, and even when I get it configured it's not very helpful.
On Oct 31, 2014, at 1:57 PM, Bryn Jeffries
<bryn.jeffries(a)sydney.edu.au> wrote:
Having made my XWiki site available to other users, I was concerned to find that the site
became unusable at one point with client connections eventually timing out. I had no way
to diagnose the problem, but eventually I managed to make a (slow) SSH connection to the
server and restarted Tomcat, and things seemed to settle back to normal.
The problem is I have no real sense of what happened and how to prevent it happening
again. To that end, I'd appreciate any suggestions for monitoring the server and
diagnosing poor performance. What do others typically use? I have an Apache2 server
passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My
guess is that Tomcat is doing most of the work here so that's probably what I need to
monitor the most.
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
11:41 p.m.
Hello all,
Here's my experience at monitoring XWikis.
With i2geo.net and with my private XWiki, I use a zabbix server.
This php-based monitoring tool is quite easy to configure for http monitoring and with a
few more steps you get a mail notification when, e.g., a timeout occurs in connections.
I've been using HypericHQ for a while, a java based monitoring, which was rather nice
to manipulate but a machine-name-change broke everything, so I looked for something a tick
more modern.
At curriki.org, a site with lots of visitors, there's quite a few tools used to
monitor.
- First, for the safety and honesty of a system outside, alertsite.com is used. It is very
effective at detecting breakges, including potential internet backbones'. We use
monitoring from three locations.
- Second, because, indeed, the XWiki servers sometimes need a push, there used to be a
regular script that checks a basic page and, if failed, auto-restarts the app-server. For
us, this is a bit unsafe because we like to control things after a restart.
- Third, for a while, we have been running a "combined monitoring" which allowed
to combine a small graphical view synced with logs of apache, the app-server,
thread-dumps, and mysql. This allowed to catch "bad actions" which sometimes
happen when power users perform actions which trigger too big queries which locked others
(group-deletions were such an action).
- Finally, we also added a zabbix which collects http monitoring as well as other
"classical" values (disks, memory, apache-stats, …).
The rhythm at curriki is about a week… after a week, one of the two cluster nodes
(there's two currently) needs a restart because some memory gets exhausted and the GC
starts to fail. We generally get alertsite errors then.
The interest of running a monitoring infrastructure such as zabbix, is that you can
analyze the behaviors of multiple variables and see if there is a way to predict if things
are getting wrong. It remains a guts' feeling story but still gives you quite some
confidence.
It would be really nice if we could converge on a set of JMX analysis "items"
for zabbix so that we could be analyzing more concretely the xwiki-relevant information
(in particular the cache behaviors) and start adjusting to less fall out of memory.
paul
On 31 oct. 2014, at 22:29, Jason Clemons <jason.clemons(a)live.com> wrote:
I's also find any suggestions very helpful,
I've had that happen a few times and outside of monitoring CPU and RAM, I've found
logging to be difficult to use and configure, and even when I get it configured it's
not very helpful.
> On Oct 31, 2014, at 1:57 PM, Bryn Jeffries <bryn.jeffries(a)sydney.edu.au>
wrote:
>
> Having made my XWiki site available to other users, I was concerned to find that the
site became unusable at one point with client connections eventually timing out. I had no
way to diagnose the problem, but eventually I managed to make a (slow) SSH connection to
the server and restarted Tomcat, and things seemed to settle back to normal.
>
> The problem is I have no real sense of what happened and how to prevent it happening
again. To that end, I'd appreciate any suggestions for monitoring the server and
diagnosing poor performance. What do others typically use? I have an Apache2 server
passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My
guess is that Tomcat is doing most of the work here so that's probably what I need to
monitor the most.
1 Nov
1 Nov
8:15 p.m.
Hi Paul,
Many thanks for your contribution. I'll certainly look into Zabbix, although I must
confess to being aghast at what appears to be a large and complex tool for what I'd
hoped was quite simple. I hadn't realised these servers were so temperamental. Before
I loose myself in getting acquainted with a new sophisticated product, could you tell me
whether Zabbix (or something else) will help me identify the following?:
- When are users suffering timeouts (doesn't have to be real time, happy to check
summary later)
- Where was the timeout occuring (network, Apache, Tomcat, Postgres)
- What was the cause of the timeout (too many connections, low memory, long Java
operation, long query, etc)
- What specific item (Java program, DB query) was responsible
I wonder whether all this should be discoverable in the logs, with the right
configuration.
I've seen a lot of mention of JMX for Tomcat monitoring, but I've shied away from
it since I wanted to start simple, but perhaps there is no simple ... ;-(
________________________________________
From: Paul Libbrecht [paul(a)hoplahup.net]
Sent: 01 November 2014 09:41
To: XWiki Users
Subject: Re: [xwiki-users] Monitoring an Xwiki stack
Hello all,
Here's my experience at monitoring XWikis.
With i2geo.net and with my private XWiki, I use a zabbix server.
This php-based monitoring tool is quite easy to configure for http monitoring and with a
few more steps you get a mail notification when, e.g., a timeout occurs in connections.
I've been using HypericHQ for a while, a java based monitoring, which was rather nice
to manipulate but a machine-name-change broke everything, so I looked for something a tick
more modern.
At curriki.org, a site with lots of visitors, there's quite a few tools used to
monitor.
- First, for the safety and honesty of a system outside, alertsite.com is used. It is very
effective at detecting breakges, including potential internet backbones'. We use
monitoring from three locations.
- Second, because, indeed, the XWiki servers sometimes need a push, there used to be a
regular script that checks a basic page and, if failed, auto-restarts the app-server. For
us, this is a bit unsafe because we like to control things after a restart.
- Third, for a while, we have been running a "combined monitoring" which allowed
to combine a small graphical view synced with logs of apache, the app-server,
thread-dumps, and mysql. This allowed to catch "bad actions" which sometimes
happen when power users perform actions which trigger too big queries which locked others
(group-deletions were such an action).
- Finally, we also added a zabbix which collects http monitoring as well as other
"classical" values (disks, memory, apache-stats, …).
The rhythm at curriki is about a week… after a week, one of the two cluster nodes
(there's two currently) needs a restart because some memory gets exhausted and the GC
starts to fail. We generally get alertsite errors then.
The interest of running a monitoring infrastructure such as zabbix, is that you can
analyze the behaviors of multiple variables and see if there is a way to predict if things
are getting wrong. It remains a guts' feeling story but still gives you quite some
confidence.
It would be really nice if we could converge on a set of JMX analysis "items"
for zabbix so that we could be analyzing more concretely the xwiki-relevant information
(in particular the cache behaviors) and start adjusting to less fall out of memory.
paul
11:06 p.m.
Bryn,
without JMX, straight and simple console output and thread-dump based… that's what the
monitor-sample tool was doing, it has a potential to answer the back-end of that (e.g.
DB-queries). In particular, it is the only one that can express the query being hanging
and this is exactly what was needed for us.
JMX is a simple way to communicate to the internals of the java process. Standard things
are typically delivered with JMX (e.g. the heap size).
On 1 nov. 2014, at 20:15, Bryn Jeffries <bryn.jeffries(a)sydney.edu.au> wrote:
Many thanks for your contribution. I'll certainly
look into Zabbix, although I must confess to being aghast at what appears to be a large
and complex tool for what I'd hoped was quite simple. I hadn't realised these
servers were so temperamental. Before I loose myself in getting acquainted with a new
sophisticated product, could you tell me whether Zabbix (or something else) will help me
identify the following?:
- When are users suffering timeouts (doesn't have to be real time, happy to check
summary later)
Yes, you'd get that with the tomcat connection time or apache workers.
- Where was the timeout occuring (network, Apache,
Tomcat, Postgres)
That's a tick more delicate since one timeout creates others...
- What was the cause of the timeout (too many
connections, low memory, long Java operation, long query, etc)
You really can't disambiguate this so clearly.
But you can see the amount of connections the heap memory or the amount of active threads
with JMX. That helps you in this direction, I think.
- What specific item (Java program, DB query) was
responsible
I wonder whether all this should be discoverable in the logs, with the right
configuration.
The DB query I could only get with the combined log monitor… but if you can get warned by
zabbix, then you can run a "get full processlist" from mysql.
FWIW, the combined monitor is at
https://github.com/xwiki-contrib/xwiki-clams-core/tree/master/tools/appserv… but
it is likely to be very specific to our installation (e.g. it requires key-based ssh).
I've seen a lot of mention of JMX for Tomcat
monitoring, but I've shied away from it since I wanted to start simple, but perhaps
there is no simple ... ;-(
Typically, this gets you measures for free… some of which can really be useful.
paul
2 Nov
2 Nov
12:20 p.m.
Hi Bryn,
There are some information that I’ve put
at http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Monitoring to monitor XWiki
instances.
JavaMelody is quite great for that but it won’t send you alerts.
Make sure to check the tools at the end in the Others section too. There’s the xinit tool
which is a monitoring/admin tool developed by XWiki SAS.
Hope it helps,
-Vincent
On 31 Oct 2014 at 21:57:35, Bryn Jeffries
(bryn.jeffries@sydney.edu.au(mailto:bryn.jeffries@sydney.edu.au)) wrote:
Having made my XWiki site available to other users, I
was concerned to find that the site became unusable at one point with client connections
eventually timing out. I had no way to diagnose the problem, but eventually I managed to
make a (slow) SSH connection to the server and restarted Tomcat, and things seemed to
settle back to normal.
The problem is I have no real sense of what happened and how to prevent it happening
again. To that end, I'd appreciate any suggestions for monitoring the server and
diagnosing poor performance. What do others typically use? I have an Apache2 server
passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My
guess is that Tomcat is doing most of the work here so that's probably what I need to
monitor the most.
12:21 p.m.
Btw,
I am not sure you could say the XWiki installs are that "pesky".
However, depending on the user base, it may really need quite some tuning.
For example, if your xwiki manipulates complex documents the document cache may be too big
for the memory, and that you only reach with some time (it could be a week or two).
OutOfMemoryErrors then appear on a regular basis.
Another example has been the amount of registered users. This is a bit too much on curriki
to store into a page of objects, so special treatment has been applied.
Yet another example would be the mass of attachments, e.g if people use this as a shared
disk, where the file-system-attachments solution has helped quite many (I think).
I think all wikis and CMSs that I know of are rather limited in their default goals
(beyond XWiki, I have experience with Drupal and Wordpress) and special treatment maybe be
quickly available, in config, install, or custom development.
Monitoring tools can help you adjust this.
Bryn, maybe you want to indicate how big is your system?
Maybe it's just a matter of some too eager clients (e.g. some ever repeat
javascript-based-requests served to tens of users every second or so)?
paul
12:21 p.m.
BTW if you have setup some tools and have had successes with them to monitor xwiki
instances, it would be great if you could add some doc about them
at http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Monitoring
Thanks!
-Vincent
On 2 Nov 2014 at 12:20:34, vincent(a)massol.net
(vincent@massol.net(mailto:vincent@massol.net)) wrote:
Hi Bryn,
There are some information that I’ve put at
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Monitoring to monitor XWiki instances.
JavaMelody is quite great for that but it won’t send you alerts.
Make sure to check the tools at the end in the Others section too. There’s the xinit tool
which is a monitoring/admin tool developed by XWiki SAS.
Hope it helps,
-Vincent
On 31 Oct 2014 at 21:57:35, Bryn Jeffries
(bryn.jeffries@sydney.edu.au(mailto:bryn.jeffries@sydney.edu.au)) wrote:
Having made my XWiki site available to other
users, I was concerned to find that the site became unusable at one point with client
connections eventually timing out. I had no way to diagnose the problem, but eventually I
managed to make a (slow) SSH connection to the server and restarted Tomcat, and things
seemed to settle back to normal.
The problem is I have no real sense of what happened and how to prevent it happening
again. To that end, I'd appreciate any suggestions for monitoring the server and
diagnosing poor performance. What do others typically use? I have an Apache2 server
passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My
guess is that Tomcat is doing most of the work here so that's probably what I need to
monitor the most.
3 Nov
3 Nov
10:23 a.m.
(Sorry for top-posting - I'm stuck with Outlook Live :-(
My system's very small - approx 20 users and very little content at present. It's
for a small collaborative research group which may grew to ~100 members. I expect quite a
few largish attachments and have already configured filesystem attachments.
I'm using PostgreSQL for various reasons, so can't add all the suggested indexes
(names the string prefix ones that are specific to MySQL), but I'd be surprised to be
hitting limits so soon.
The slowdown occurred soon after I opened the wiki to the other members, who probably did
some exploring and perhaps triggered something painful.
________________________________________
From: Paul Libbrecht [paul(a)hoplahup.net]
Sent: 02 November 2014 22:21
To: XWiki Users
Subject: Re: [xwiki-users] Monitoring an Xwiki stack
Btw,
I am not sure you could say the XWiki installs are that "pesky".
However, depending on the user base, it may really need quite some tuning.
For example, if your xwiki manipulates complex documents the document cache may be too big
for the memory, and that you only reach with some time (it could be a week or two).
OutOfMemoryErrors then appear on a regular basis.
Another example has been the amount of registered users. This is a bit too much on curriki
to store into a page of objects, so special treatment has been applied.
Yet another example would be the mass of attachments, e.g if people use this as a shared
disk, where the file-system-attachments solution has helped quite many (I think).
I think all wikis and CMSs that I know of are rather limited in their default goals
(beyond XWiki, I have experience with Drupal and Wordpress) and special treatment maybe be
quickly available, in config, install, or custom development.
Monitoring tools can help you adjust this.
Bryn, maybe you want to indicate how big is your system?
Maybe it's just a matter of some too eager clients (e.g. some ever repeat
javascript-based-requests served to tens of users every second or so)?
paul
11:01 a.m.
My system's very small - approx 20 users and very
little content at present. It's for a small collaborative research group which may
grew to ~100 members. I expect quite a few largish attachments and have already configured
filesystem attachments.
Sounds quite reasonable.
Limited memory?
I'm using PostgreSQL for various reasons, so
can't add all the suggested indexes (names the string prefix ones that are specific to
MySQL), but I'd be surprised to be hitting limits so soon.
The database difference might be something to explore.
I've seen rather often that things are more battle-tested for MySQL.
But I fully agree you have reasons to prefer PostgreSQL.
The slowdown occurred soon after I opened the wiki to
the other members, who probably did some exploring and perhaps triggered something
painful.
You definitely need to explore when it happens.
- something such as show full processlist (that's a MySQL thing) should be available
to show if there's an SQL query taking long and if others are slow (typically, big
LIKE queries tend to block all writes)
- invoke a thread-dump (kill -HUP or use JMX or
http://extensions.xwiki.org/xwiki/bin/view/Extension/JMX+Access#HExample5:g…):
the threads generally carry the path of the http requests
- check memory
- make sure you enable -verbose:gc as a JVM option to indicate when memory limits are
reached
paul
5:15 p.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
Thanks inadvance.
Ji Zhang
Trade Informatics, LLC.
5:41 p.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContain…
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
7:10 p.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password in
Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Clemens Klein-Robbenhaar
Sent: Monday, November 03, 2014 11:42 AM
To: users(a)xwiki.org
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContain…
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
8:09 p.m.
Says Paul Libbrecht:
> My system's very small - approx 20 users and
very little content at present. It's
> for a small collaborative research group which may grew to ~100 members. I
> expect quite a few largish attachments and have already configured filesystem
> attachments.
Sounds quite reasonable.
Limited memory?
Well I'm running everything off a single VM configured with 8GB RAM and 2 VCPUS. If
necessary I can use more VMs but I wanted to keep things simple until I knew what my
actual performance needs were. I also have access to plenty of persistent storage.
I have Tomcat configured with CATALINA_OPTS="-server -Xms800m -Xmx800m
-XX:MaxPermSize=196m"
> I'm using PostgreSQL for various reasons, so
can't add all the suggested
> indexes (names the string prefix ones that are specific to MySQL), but I'd be
> surprised to be hitting limits so soon.
The database difference might be something to
explore.
I've seen rather often that things are more battle-tested for MySQL.
But I fully agree you have reasons to prefer PostgreSQL.
Yes, and I'd be interested to look into optimising common searches once things have
grown and I understand the query workload. Alternatives to MySQL string prefix indexes
would be GIN or GIST - the pg_trgm package looks promising.
4 Nov
4 Nov
8:55 a.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
To know if you are authenticated from XWiki point of view look at the
top right corner, you should see you name or id there (so probably
jsmith here). If you are not authenticated then you should have a
"login" button/link instead.
You can also enable debug log for this authenticator. Search for it in
Administration -> Logging and set log level to TRACE or DEBUG. When
this is done you should see details on what is happening in this
authenticator in your application server log.
On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <JZhang(a)tradeinformatics.com> wrote:
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password
in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Clemens Klein-Robbenhaar
Sent: Monday, November 03, 2014 11:42 AM
To: users(a)xwiki.org
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
--
Thomas Mortagne
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContain…
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
10:37 p.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Now I have the configuration below:
1) security setting in web.xml:
<security-constraint>
<web-resource-collection>
<web-resource-name>TomcatRealmUserArea</web-resource-name>
<url-pattern>/bin/view/XYZ/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>TomcatRealmUsers</role-name>
</auth-constraint>
</security-constraint>
2) xwiki.conf:
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.xwiki.AppServerTrustedAuthServiceImpl
3) Basic authentication:
#-# Authentication type. You can use 'basic' to always use basic authentication.
The restriction works, I got 403 (HTTP Status 403 - Access to the requested resource has
been denied ) when I try to access:
http://mymachine:9090/xWiki/bin/view/XYZ/Tutorial+1
The question is:
How to access this page successful?
Thanks.
-----Original Message-----
From: Ji Zhang
Sent: Monday, November 03, 2014 1:10 PM
To: users(a)xwiki.org
Subject: RE: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password in
Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Clemens Klein-Robbenhaar
Sent: Monday, November 03, 2014 11:42 AM
To: users(a)xwiki.org
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContain…
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
5 Nov
5 Nov
10:45 a.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On Tue, Nov 4, 2014 at 10:37 PM, Ji Zhang <JZhang(a)tradeinformatics.com> wrote:
Now I have the configuration below:
1) security setting in web.xml:
<security-constraint>
<web-resource-collection>
<web-resource-name>TomcatRealmUserArea</web-resource-name>
<url-pattern>/bin/view/XYZ/*</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>TomcatRealmUsers</role-name>
</auth-constraint>
</security-constraint>
2) xwiki.conf:
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.xwiki.AppServerTrustedAuthServiceImpl
3) Basic authentication:
#-# Authentication type. You can use 'basic' to always use basic
authentication.
You are mixing several things here. All the actual authentication work
is supposed to be done by TomcatRealmUsers before accessing XWiki
(AppServerTrustedAuthServiceImpl just trust what's given by the front
auth and create the user accordingly) so there is no reason to enable
XWiki basic auth.
The restriction works, I got 403 (HTTP Status 403 - Access to the requested resource has
been denied ) when I try to access:
http://mymachine:9090/xWiki/bin/view/XYZ/Tutorial+1
The question is:
How to access this page successful?
This is not a XWiki question, the authentication is done by whatever
authenticator you are using in fron of XWiki.
AppServerTrustedAuthServiceImpl just trust it.
Thanks.
-----Original Message-----
From: Ji Zhang
Sent: Monday, November 03, 2014 1:10 PM
To: users(a)xwiki.org
Subject: RE: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password
in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Clemens Klein-Robbenhaar
Sent: Monday, November 03, 2014 11:42 AM
To: users(a)xwiki.org
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
--
Thomas Mortagne
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContain…
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
6:16 p.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Hi Thomas,
Thanks for your help.
Are you saying that the Tomcat JDBC realm users will be automatically becoming registered
xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users
in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured
correctly?
Thx again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Thomas Mortagne
Sent: Tuesday, November 04, 2014 2:56 AM
To: XWiki Users
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
To know if you are authenticated from XWiki point of view look at the top right corner,
you should see you name or id there (so probably jsmith here). If you are not
authenticated then you should have a "login" button/link instead.
You can also enable debug log for this authenticator. Search for it in Administration
-> Logging and set log level to TRACE or DEBUG. When this is done you should see
details on what is happening in this authenticator in your application server log.
On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <JZhang(a)tradeinformatics.com> wrote:
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password
in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Clemens
Klein-Robbenhaar
Sent: Monday, November 03, 2014 11:42 AM
To: users(a)xwiki.org
Subject: Re: [xwiki-users] Question regarding
AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo
ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
7:20 p.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On Wed, Nov 5, 2014 at 6:16 PM, Ji Zhang <JZhang(a)tradeinformatics.com> wrote:
Hi Thomas,
Thanks for your help.
Are you saying that the Tomcat JDBC realm users will be automatically becoming registered
xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users
in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured
correctly?
AppServerTrustedAuthServiceImpl will create a user as soon as its
accessing XWiki so yes it's automatically registered but no you won't
see all users, only those that conected to XWiki.
Thx again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Thomas Mortagne
Sent: Tuesday, November 04, 2014 2:56 AM
To: XWiki Users
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
To know if you are authenticated from XWiki point of view look at the top right corner,
you should see you name or id there (so probably jsmith here). If you are not
authenticated then you should have a "login" button/link instead.
You can also enable debug log for this authenticator. Search for it in Administration
-> Logging and set log level to TRACE or DEBUG. When this is done you should see
details on what is happening in this authenticator in your application server log.
On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <JZhang(a)tradeinformatics.com> wrote:
--
Thomas Mortagne
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password
in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Clemens
Klein-Robbenhaar
Sent: Monday, November 03, 2014 11:42 AM
To: users(a)xwiki.org
Subject: Re: [xwiki-users] Question regarding
AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo
ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
9:44 p.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Thomas,
1) The logging level is set to be trace for all by default, but I don't see where
anything regarding authentication in any of the log file in TOMCAT/logs directory (
catalina.out is the stdout log )
2) If I do the following:
-- logout from xwiki from browser
-- Keep log out
-- put URL http://techdev1:9090/XWiki/bin/view/XYZ/ into browser <== this is protected
by realm
-- return
-- immediately getting 403
Question: why I am not getting log-in prompt?
Thanks,
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Ji Zhang
Sent: Wednesday, November 05, 2014 12:17 PM
To: XWiki Users
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Hi Thomas,
Thanks for your help.
Are you saying that the Tomcat JDBC realm users will be automatically becoming registered
xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users
in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured
correctly?
Thx again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Thomas Mortagne
Sent: Tuesday, November 04, 2014 2:56 AM
To: XWiki Users
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
To know if you are authenticated from XWiki point of view look at the top right corner,
you should see you name or id there (so probably jsmith here). If you are not
authenticated then you should have a "login" button/link instead.
You can also enable debug log for this authenticator. Search for it in Administration
-> Logging and set log level to TRACE or DEBUG. When this is done you should see
details on what is happening in this authenticator in your application server log.
On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <JZhang(a)tradeinformatics.com> wrote:
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password
in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Clemens
Klein-Robbenhaar
Sent: Monday, November 03, 2014 11:42 AM
To: users(a)xwiki.org
Subject: Re: [xwiki-users] Question regarding
AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo
ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
10:13 p.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On Wed, Nov 5, 2014 at 9:44 PM, Ji Zhang <JZhang(a)tradeinformatics.com> wrote:
Thomas,
1) The logging level is set to be trace for all by default, but I don't see where
anything regarding authentication in any of the log file in TOMCAT/logs directory (
catalina.out is the stdout log )
No the level is not set to trace by default. The level is what you
have in the "Level" column and by default it's not set for most of
them (which means it's the default which is INFO).
2) If I do the following:
-- logout from xwiki from browser
-- Keep log out
-- put URL http://techdev1:9090/XWiki/bin/view/XYZ/ into browser <== this is protected
by realm
-- return
-- immediately getting 403
Question: why I am not getting log-in prompt?
Thanks,
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Ji Zhang
Sent: Wednesday, November 05, 2014 12:17 PM
To: XWiki Users
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Hi Thomas,
Thanks for your help.
Are you saying that the Tomcat JDBC realm users will be automatically becoming registered
xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users
in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured
correctly?
Thx again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Thomas Mortagne
Sent: Tuesday, November 04, 2014 2:56 AM
To: XWiki Users
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
To know if you are authenticated from XWiki point of view look at the top right corner,
you should see you name or id there (so probably jsmith here). If you are not
authenticated then you should have a "login" button/link instead.
You can also enable debug log for this authenticator. Search for it in Administration
-> Logging and set log level to TRACE or DEBUG. When this is done you should see
details on what is happening in this authenticator in your application server log.
On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <JZhang(a)tradeinformatics.com> wrote:
--
Thomas Mortagne
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password
in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Clemens
Klein-Robbenhaar
Sent: Monday, November 03, 2014 11:42 AM
To: users(a)xwiki.org
Subject: Re: [xwiki-users] Question regarding
AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo
ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
10:16 p.m.
New subject: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On Wed, Nov 5, 2014 at 10:13 PM, Thomas Mortagne
<thomas.mortagne(a)xwiki.com> wrote:
--
Thomas Mortagne
On Wed, Nov 5, 2014 at 9:44 PM, Ji Zhang
<JZhang(a)tradeinformatics.com> wrote:
Again this has absolutely nothing to do with XWiki, XWiki is not doing
anything here it's whatever authenticator YOU setup in front of XWiki.
AppServerTrustedAuthServiceImpl just received the user id once the
actual authentication is validated and you finally ends up on XWiki.
Thomas,
1) The logging level is set to be trace for all by default, but I don't see where
anything regarding authentication in any of the log file in TOMCAT/logs directory (
catalina.out is the stdout log )
No the level is not set to trace by default. The level is what you
have in the "Level" column and by default it's not set for most of
them (which means it's the default which is INFO).
>
> 2) If I do the following:
>
> -- logout from xwiki from browser
> -- Keep log out
> -- put URL http://techdev1:9090/XWiki/bin/view/XYZ/ into browser <== this is
protected by realm
> -- return
> -- immediately getting 403
>
> Question: why I am not getting log-in prompt?
Thanks,
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Ji Zhang
Sent: Wednesday, November 05, 2014 12:17 PM
To: XWiki Users
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Hi Thomas,
Thanks for your help.
Are you saying that the Tomcat JDBC realm users will be automatically becoming registered
xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users
in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured
correctly?
Thx again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Thomas Mortagne
Sent: Tuesday, November 04, 2014 2:56 AM
To: XWiki Users
Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
To know if you are authenticated from XWiki point of view look at the top right corner,
you should see you name or id there (so probably jsmith here). If you are not
authenticated then you should have a "login" button/link instead.
You can also enable debug log for this authenticator. Search for it in Administration
-> Logging and set log level to TRACE or DEBUG. When this is done you should see
details on what is happening in this authenticator in your application server log.
On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <JZhang(a)tradeinformatics.com> wrote:
--
Thomas Mortagne Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password
in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message-----
From: users [mailto:users-bounces@xwiki.org] On Behalf Of Clemens
Klein-Robbenhaar
Sent: Monday, November 03, 2014 11:42 AM
To: users(a)xwiki.org
Subject: Re: [xwiki-users] Question regarding
AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
--
Thomas Mortagne
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC
realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed
documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo
ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers,
Clemens
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
_______________________________________________
users mailing list
users(a)xwiki.org
http://lists.xwiki.org/mailman/listinfo/users
3700
days inactive
3705
days old
21 comments
7 participants
participants (7)
-
Bryn Jeffries -
Clemens Klein-Robbenhaar -
Jason Clemons -
Ji Zhang -
Paul Libbrecht -
Thomas Mortagne -
vincent＠massol.net