[xwiki-users] Monitoring an Xwiki stack
Having made my XWiki site available to other users, I was concerned to find that the site became unusable at one point with client connections eventually timing out. I had no way to diagnose the problem, but eventually I managed to make a (slow) SSH connection to the server and restarted Tomcat, and things seemed to settle back to normal. The problem is I have no real sense of what happened and how to prevent it happening again. To that end, I'd appreciate any suggestions for monitoring the server and diagnosing poor performance. What do others typically use? I have an Apache2 server passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My guess is that Tomcat is doing most of the work here so that's probably what I need to monitor the most.
I's also find any suggestions very helpful, I've had that happen a few times and outside of monitoring CPU and RAM, I've found logging to be difficult to use and configure, and even when I get it configured it's not very helpful.
On Oct 31, 2014, at 1:57 PM, Bryn Jeffries <[email protected]> wrote:
Having made my XWiki site available to other users, I was concerned to find that the site became unusable at one point with client connections eventually timing out. I had no way to diagnose the problem, but eventually I managed to make a (slow) SSH connection to the server and restarted Tomcat, and things seemed to settle back to normal.
The problem is I have no real sense of what happened and how to prevent it happening again. To that end, I'd appreciate any suggestions for monitoring the server and diagnosing poor performance. What do others typically use? I have an Apache2 server passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My guess is that Tomcat is doing most of the work here so that's probably what I need to monitor the most. _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Hello all, Here's my experience at monitoring XWikis. With i2geo.net and with my private XWiki, I use a zabbix server. This php-based monitoring tool is quite easy to configure for http monitoring and with a few more steps you get a mail notification when, e.g., a timeout occurs in connections. I've been using HypericHQ for a while, a java based monitoring, which was rather nice to manipulate but a machine-name-change broke everything, so I looked for something a tick more modern. At curriki.org, a site with lots of visitors, there's quite a few tools used to monitor. - First, for the safety and honesty of a system outside, alertsite.com is used. It is very effective at detecting breakges, including potential internet backbones'. We use monitoring from three locations. - Second, because, indeed, the XWiki servers sometimes need a push, there used to be a regular script that checks a basic page and, if failed, auto-restarts the app-server. For us, this is a bit unsafe because we like to control things after a restart. - Third, for a while, we have been running a "combined monitoring" which allowed to combine a small graphical view synced with logs of apache, the app-server, thread-dumps, and mysql. This allowed to catch "bad actions" which sometimes happen when power users perform actions which trigger too big queries which locked others (group-deletions were such an action). - Finally, we also added a zabbix which collects http monitoring as well as other "classical" values (disks, memory, apache-stats, …). The rhythm at curriki is about a week… after a week, one of the two cluster nodes (there's two currently) needs a restart because some memory gets exhausted and the GC starts to fail. We generally get alertsite errors then. The interest of running a monitoring infrastructure such as zabbix, is that you can analyze the behaviors of multiple variables and see if there is a way to predict if things are getting wrong. It remains a guts' feeling story but still gives you quite some confidence. It would be really nice if we could converge on a set of JMX analysis "items" for zabbix so that we could be analyzing more concretely the xwiki-relevant information (in particular the cache behaviors) and start adjusting to less fall out of memory. paul On 31 oct. 2014, at 22:29, Jason Clemons <[email protected]> wrote:
I's also find any suggestions very helpful, I've had that happen a few times and outside of monitoring CPU and RAM, I've found logging to be difficult to use and configure, and even when I get it configured it's not very helpful.
On Oct 31, 2014, at 1:57 PM, Bryn Jeffries <[email protected]> wrote:
Having made my XWiki site available to other users, I was concerned to find that the site became unusable at one point with client connections eventually timing out. I had no way to diagnose the problem, but eventually I managed to make a (slow) SSH connection to the server and restarted Tomcat, and things seemed to settle back to normal.
The problem is I have no real sense of what happened and how to prevent it happening again. To that end, I'd appreciate any suggestions for monitoring the server and diagnosing poor performance. What do others typically use? I have an Apache2 server passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My guess is that Tomcat is doing most of the work here so that's probably what I need to monitor the most.
Hi Paul, Many thanks for your contribution. I'll certainly look into Zabbix, although I must confess to being aghast at what appears to be a large and complex tool for what I'd hoped was quite simple. I hadn't realised these servers were so temperamental. Before I loose myself in getting acquainted with a new sophisticated product, could you tell me whether Zabbix (or something else) will help me identify the following?: - When are users suffering timeouts (doesn't have to be real time, happy to check summary later) - Where was the timeout occuring (network, Apache, Tomcat, Postgres) - What was the cause of the timeout (too many connections, low memory, long Java operation, long query, etc) - What specific item (Java program, DB query) was responsible I wonder whether all this should be discoverable in the logs, with the right configuration. I've seen a lot of mention of JMX for Tomcat monitoring, but I've shied away from it since I wanted to start simple, but perhaps there is no simple ... ;-( ________________________________________ From: Paul Libbrecht [[email protected]] Sent: 01 November 2014 09:41 To: XWiki Users Subject: Re: [xwiki-users] Monitoring an Xwiki stack Hello all, Here's my experience at monitoring XWikis. With i2geo.net and with my private XWiki, I use a zabbix server. This php-based monitoring tool is quite easy to configure for http monitoring and with a few more steps you get a mail notification when, e.g., a timeout occurs in connections. I've been using HypericHQ for a while, a java based monitoring, which was rather nice to manipulate but a machine-name-change broke everything, so I looked for something a tick more modern. At curriki.org, a site with lots of visitors, there's quite a few tools used to monitor. - First, for the safety and honesty of a system outside, alertsite.com is used. It is very effective at detecting breakges, including potential internet backbones'. We use monitoring from three locations. - Second, because, indeed, the XWiki servers sometimes need a push, there used to be a regular script that checks a basic page and, if failed, auto-restarts the app-server. For us, this is a bit unsafe because we like to control things after a restart. - Third, for a while, we have been running a "combined monitoring" which allowed to combine a small graphical view synced with logs of apache, the app-server, thread-dumps, and mysql. This allowed to catch "bad actions" which sometimes happen when power users perform actions which trigger too big queries which locked others (group-deletions were such an action). - Finally, we also added a zabbix which collects http monitoring as well as other "classical" values (disks, memory, apache-stats, …). The rhythm at curriki is about a week… after a week, one of the two cluster nodes (there's two currently) needs a restart because some memory gets exhausted and the GC starts to fail. We generally get alertsite errors then. The interest of running a monitoring infrastructure such as zabbix, is that you can analyze the behaviors of multiple variables and see if there is a way to predict if things are getting wrong. It remains a guts' feeling story but still gives you quite some confidence. It would be really nice if we could converge on a set of JMX analysis "items" for zabbix so that we could be analyzing more concretely the xwiki-relevant information (in particular the cache behaviors) and start adjusting to less fall out of memory. paul
Bryn, without JMX, straight and simple console output and thread-dump based… that's what the monitor-sample tool was doing, it has a potential to answer the back-end of that (e.g. DB-queries). In particular, it is the only one that can express the query being hanging and this is exactly what was needed for us. JMX is a simple way to communicate to the internals of the java process. Standard things are typically delivered with JMX (e.g. the heap size). On 1 nov. 2014, at 20:15, Bryn Jeffries <[email protected]> wrote:
Many thanks for your contribution. I'll certainly look into Zabbix, although I must confess to being aghast at what appears to be a large and complex tool for what I'd hoped was quite simple. I hadn't realised these servers were so temperamental. Before I loose myself in getting acquainted with a new sophisticated product, could you tell me whether Zabbix (or something else) will help me identify the following?: - When are users suffering timeouts (doesn't have to be real time, happy to check summary later)
Yes, you'd get that with the tomcat connection time or apache workers.
- Where was the timeout occuring (network, Apache, Tomcat, Postgres)
That's a tick more delicate since one timeout creates others...
- What was the cause of the timeout (too many connections, low memory, long Java operation, long query, etc)
You really can't disambiguate this so clearly. But you can see the amount of connections the heap memory or the amount of active threads with JMX. That helps you in this direction, I think.
- What specific item (Java program, DB query) was responsible I wonder whether all this should be discoverable in the logs, with the right configuration.
The DB query I could only get with the combined log monitor… but if you can get warned by zabbix, then you can run a "get full processlist" from mysql. FWIW, the combined monitor is at https://github.com/xwiki-contrib/xwiki-clams-core/tree/master/tools/appservm... but it is likely to be very specific to our installation (e.g. it requires key-based ssh).
I've seen a lot of mention of JMX for Tomcat monitoring, but I've shied away from it since I wanted to start simple, but perhaps there is no simple ... ;-(
Typically, this gets you measures for free… some of which can really be useful. paul
Hi Bryn, There are some information that I’ve put at http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Monitoring to monitor XWiki instances. JavaMelody is quite great for that but it won’t send you alerts. Make sure to check the tools at the end in the Others section too. There’s the xinit tool which is a monitoring/admin tool developed by XWiki SAS. Hope it helps, -Vincent On 31 Oct 2014 at 21:57:35, Bryn Jeffries ([email protected](mailto:[email protected])) wrote:
Having made my XWiki site available to other users, I was concerned to find that the site became unusable at one point with client connections eventually timing out. I had no way to diagnose the problem, but eventually I managed to make a (slow) SSH connection to the server and restarted Tomcat, and things seemed to settle back to normal.
The problem is I have no real sense of what happened and how to prevent it happening again. To that end, I'd appreciate any suggestions for monitoring the server and diagnosing poor performance. What do others typically use? I have an Apache2 server passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My guess is that Tomcat is doing most of the work here so that's probably what I need to monitor the most.
Btw, I am not sure you could say the XWiki installs are that "pesky". However, depending on the user base, it may really need quite some tuning. For example, if your xwiki manipulates complex documents the document cache may be too big for the memory, and that you only reach with some time (it could be a week or two). OutOfMemoryErrors then appear on a regular basis. Another example has been the amount of registered users. This is a bit too much on curriki to store into a page of objects, so special treatment has been applied. Yet another example would be the mass of attachments, e.g if people use this as a shared disk, where the file-system-attachments solution has helped quite many (I think). I think all wikis and CMSs that I know of are rather limited in their default goals (beyond XWiki, I have experience with Drupal and Wordpress) and special treatment maybe be quickly available, in config, install, or custom development. Monitoring tools can help you adjust this. Bryn, maybe you want to indicate how big is your system? Maybe it's just a matter of some too eager clients (e.g. some ever repeat javascript-based-requests served to tens of users every second or so)? paul
BTW if you have setup some tools and have had successes with them to monitor xwiki instances, it would be great if you could add some doc about them at http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Monitoring Thanks! -Vincent On 2 Nov 2014 at 12:20:34, [email protected] ([email protected](mailto:[email protected])) wrote:
Hi Bryn,
There are some information that I’ve put at http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Monitoring to monitor XWiki instances.
JavaMelody is quite great for that but it won’t send you alerts.
Make sure to check the tools at the end in the Others section too. There’s the xinit tool which is a monitoring/admin tool developed by XWiki SAS.
Hope it helps, -Vincent
On 31 Oct 2014 at 21:57:35, Bryn Jeffries ([email protected](mailto:[email protected])) wrote:
Having made my XWiki site available to other users, I was concerned to find that the site became unusable at one point with client connections eventually timing out. I had no way to diagnose the problem, but eventually I managed to make a (slow) SSH connection to the server and restarted Tomcat, and things seemed to settle back to normal.
The problem is I have no real sense of what happened and how to prevent it happening again. To that end, I'd appreciate any suggestions for monitoring the server and diagnosing poor performance. What do others typically use? I have an Apache2 server passing wiki page requests to Tomcat7 via an ajp connector, and a PostgreSQL database. My guess is that Tomcat is doing most of the work here so that's probably what I need to monitor the most.
(Sorry for top-posting - I'm stuck with Outlook Live :-( My system's very small - approx 20 users and very little content at present. It's for a small collaborative research group which may grew to ~100 members. I expect quite a few largish attachments and have already configured filesystem attachments. I'm using PostgreSQL for various reasons, so can't add all the suggested indexes (names the string prefix ones that are specific to MySQL), but I'd be surprised to be hitting limits so soon. The slowdown occurred soon after I opened the wiki to the other members, who probably did some exploring and perhaps triggered something painful. ________________________________________ From: Paul Libbrecht [[email protected]] Sent: 02 November 2014 22:21 To: XWiki Users Subject: Re: [xwiki-users] Monitoring an Xwiki stack Btw, I am not sure you could say the XWiki installs are that "pesky". However, depending on the user base, it may really need quite some tuning. For example, if your xwiki manipulates complex documents the document cache may be too big for the memory, and that you only reach with some time (it could be a week or two). OutOfMemoryErrors then appear on a regular basis. Another example has been the amount of registered users. This is a bit too much on curriki to store into a page of objects, so special treatment has been applied. Yet another example would be the mass of attachments, e.g if people use this as a shared disk, where the file-system-attachments solution has helped quite many (I think). I think all wikis and CMSs that I know of are rather limited in their default goals (beyond XWiki, I have experience with Drupal and Wordpress) and special treatment maybe be quickly available, in config, install, or custom development. Monitoring tools can help you adjust this. Bryn, maybe you want to indicate how big is your system? Maybe it's just a matter of some too eager clients (e.g. some ever repeat javascript-based-requests served to tens of users every second or so)? paul
My system's very small - approx 20 users and very little content at present. It's for a small collaborative research group which may grew to ~100 members. I expect quite a few largish attachments and have already configured filesystem attachments.
Sounds quite reasonable. Limited memory?
I'm using PostgreSQL for various reasons, so can't add all the suggested indexes (names the string prefix ones that are specific to MySQL), but I'd be surprised to be hitting limits so soon.
The database difference might be something to explore. I've seen rather often that things are more battle-tested for MySQL. But I fully agree you have reasons to prefer PostgreSQL.
The slowdown occurred soon after I opened the wiki to the other members, who probably did some exploring and perhaps triggered something painful.
You definitely need to explore when it happens. - something such as show full processlist (that's a MySQL thing) should be available to show if there's an SQL query taking long and if others are slow (typically, big LIKE queries tend to block all writes) - invoke a thread-dump (kill -HUP or use JMX or http://extensions.xwiki.org/xwiki/bin/view/Extension/JMX+Access#HExample5:ge...): the threads generally carry the path of the http requests - check memory - make sure you enable -verbose:gc as a JVM option to indicate when memory limits are reached paul
Guys, I am new to Xwiki. I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it? Thanks inadvance. Ji Zhang Trade Informatics, LLC.
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here: http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContaine... That (and restarting tomcat) should be everything you need to do. Cheers, Clemens
Thanks Clemens. How do I test if this authentication works? For example, I have an user jsmith/password in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith? Thanks again. Ji -----Original Message----- From: users [mailto:[email protected]] On Behalf Of Clemens Klein-Robbenhaar Sent: Monday, November 03, 2014 11:42 AM To: [email protected] Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here: http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContaine... That (and restarting tomcat) should be everything you need to do. Cheers, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
Says Paul Libbrecht:
My system's very small - approx 20 users and very little content at present. It's for a small collaborative research group which may grew to ~100 members. I expect quite a few largish attachments and have already configured filesystem attachments.
Sounds quite reasonable. Limited memory?
Well I'm running everything off a single VM configured with 8GB RAM and 2 VCPUS. If necessary I can use more VMs but I wanted to keep things simple until I knew what my actual performance needs were. I also have access to plenty of persistent storage. I have Tomcat configured with CATALINA_OPTS="-server -Xms800m -Xmx800m -XX:MaxPermSize=196m"
I'm using PostgreSQL for various reasons, so can't add all the suggested indexes (names the string prefix ones that are specific to MySQL), but I'd be surprised to be hitting limits so soon.
The database difference might be something to explore. I've seen rather often that things are more battle-tested for MySQL. But I fully agree you have reasons to prefer PostgreSQL.
Yes, and I'd be interested to look into optimising common searches once things have grown and I understand the query workload. Alternatives to MySQL string prefix indexes would be GIN or GIST - the pg_trgm package looks promising.
To know if you are authenticated from XWiki point of view look at the top right corner, you should see you name or id there (so probably jsmith here). If you are not authenticated then you should have a "login" button/link instead. You can also enable debug log for this authenticator. Search for it in Administration -> Logging and set log level to TRACE or DEBUG. When this is done you should see details on what is happening in this authenticator in your application server log. On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <[email protected]> wrote:
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Clemens Klein-Robbenhaar Sent: Monday, November 03, 2014 11:42 AM To: [email protected] Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContaine...
That (and restarting tomcat) should be everything you need to do.
Cheers, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Now I have the configuration below: 1) security setting in web.xml: <security-constraint> <web-resource-collection> <web-resource-name>TomcatRealmUserArea</web-resource-name> <url-pattern>/bin/view/XYZ/*</url-pattern> </web-resource-collection> <auth-constraint> <role-name>TomcatRealmUsers</role-name> </auth-constraint> </security-constraint> 2) xwiki.conf: xwiki.authentication.authclass=com.xpn.xwiki.user.impl.xwiki.AppServerTrustedAuthServiceImpl 3) Basic authentication: #-# Authentication type. You can use 'basic' to always use basic authentication. The restriction works, I got 403 (HTTP Status 403 - Access to the requested resource has been denied ) when I try to access: http://mymachine:9090/xWiki/bin/view/XYZ/Tutorial+1 The question is: How to access this page successful? Thanks. -----Original Message----- From: Ji Zhang Sent: Monday, November 03, 2014 1:10 PM To: [email protected] Subject: RE: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl Thanks Clemens. How do I test if this authentication works? For example, I have an user jsmith/password in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith? Thanks again. Ji -----Original Message----- From: users [mailto:[email protected]] On Behalf Of Clemens Klein-Robbenhaar Sent: Monday, November 03, 2014 11:42 AM To: [email protected] Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here: http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContaine... That (and restarting tomcat) should be everything you need to do. Cheers, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
On Tue, Nov 4, 2014 at 10:37 PM, Ji Zhang <[email protected]> wrote:
Now I have the configuration below:
1) security setting in web.xml:
<security-constraint> <web-resource-collection> <web-resource-name>TomcatRealmUserArea</web-resource-name> <url-pattern>/bin/view/XYZ/*</url-pattern> </web-resource-collection> <auth-constraint> <role-name>TomcatRealmUsers</role-name> </auth-constraint> </security-constraint>
2) xwiki.conf:
xwiki.authentication.authclass=com.xpn.xwiki.user.impl.xwiki.AppServerTrustedAuthServiceImpl
3) Basic authentication:
#-# Authentication type. You can use 'basic' to always use basic authentication.
You are mixing several things here. All the actual authentication work is supposed to be done by TomcatRealmUsers before accessing XWiki (AppServerTrustedAuthServiceImpl just trust what's given by the front auth and create the user accordingly) so there is no reason to enable XWiki basic auth.
The restriction works, I got 403 (HTTP Status 403 - Access to the requested resource has been denied ) when I try to access:
http://mymachine:9090/xWiki/bin/view/XYZ/Tutorial+1
The question is:
How to access this page successful?
This is not a XWiki question, the authentication is done by whatever authenticator you are using in fron of XWiki. AppServerTrustedAuthServiceImpl just trust it.
Thanks.
-----Original Message----- From: Ji Zhang Sent: Monday, November 03, 2014 1:10 PM To: [email protected] Subject: RE: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Clemens Klein-Robbenhaar Sent: Monday, November 03, 2014 11:42 AM To: [email protected] Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HContaine...
That (and restarting tomcat) should be everything you need to do.
Cheers, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Hi Thomas, Thanks for your help. Are you saying that the Tomcat JDBC realm users will be automatically becoming registered xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured correctly? Thx again. Ji -----Original Message----- From: users [mailto:[email protected]] On Behalf Of Thomas Mortagne Sent: Tuesday, November 04, 2014 2:56 AM To: XWiki Users Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl To know if you are authenticated from XWiki point of view look at the top right corner, you should see you name or id there (so probably jsmith here). If you are not authenticated then you should have a "login" button/link instead. You can also enable debug log for this authenticator. Search for it in Administration -> Logging and set log level to TRACE or DEBUG. When this is done you should see details on what is happening in this authenticator in your application server log. On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <[email protected]> wrote:
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Clemens Klein-Robbenhaar Sent: Monday, November 03, 2014 11:42 AM To: [email protected] Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
On Wed, Nov 5, 2014 at 6:16 PM, Ji Zhang <[email protected]> wrote:
Hi Thomas,
Thanks for your help.
Are you saying that the Tomcat JDBC realm users will be automatically becoming registered xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured correctly?
AppServerTrustedAuthServiceImpl will create a user as soon as its accessing XWiki so yes it's automatically registered but no you won't see all users, only those that conected to XWiki.
Thx again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Thomas Mortagne Sent: Tuesday, November 04, 2014 2:56 AM To: XWiki Users Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
To know if you are authenticated from XWiki point of view look at the top right corner, you should see you name or id there (so probably jsmith here). If you are not authenticated then you should have a "login" button/link instead.
You can also enable debug log for this authenticator. Search for it in Administration -> Logging and set log level to TRACE or DEBUG. When this is done you should see details on what is happening in this authenticator in your application server log.
On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <[email protected]> wrote:
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Clemens Klein-Robbenhaar Sent: Monday, November 03, 2014 11:42 AM To: [email protected] Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
Thomas, 1) The logging level is set to be trace for all by default, but I don't see where anything regarding authentication in any of the log file in TOMCAT/logs directory ( catalina.out is the stdout log ) 2) If I do the following: -- logout from xwiki from browser -- Keep log out -- put URL http://techdev1:9090/XWiki/bin/view/XYZ/ into browser <== this is protected by realm -- return -- immediately getting 403 Question: why I am not getting log-in prompt? Thanks, Ji -----Original Message----- From: users [mailto:[email protected]] On Behalf Of Ji Zhang Sent: Wednesday, November 05, 2014 12:17 PM To: XWiki Users Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl Hi Thomas, Thanks for your help. Are you saying that the Tomcat JDBC realm users will be automatically becoming registered xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured correctly? Thx again. Ji -----Original Message----- From: users [mailto:[email protected]] On Behalf Of Thomas Mortagne Sent: Tuesday, November 04, 2014 2:56 AM To: XWiki Users Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl To know if you are authenticated from XWiki point of view look at the top right corner, you should see you name or id there (so probably jsmith here). If you are not authenticated then you should have a "login" button/link instead. You can also enable debug log for this authenticator. Search for it in Administration -> Logging and set log level to TRACE or DEBUG. When this is done you should see details on what is happening in this authenticator in your application server log. On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <[email protected]> wrote:
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Clemens Klein-Robbenhaar Sent: Monday, November 03, 2014 11:42 AM To: [email protected] Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
On Wed, Nov 5, 2014 at 9:44 PM, Ji Zhang <[email protected]> wrote:
Thomas,
1) The logging level is set to be trace for all by default, but I don't see where anything regarding authentication in any of the log file in TOMCAT/logs directory ( catalina.out is the stdout log )
No the level is not set to trace by default. The level is what you have in the "Level" column and by default it's not set for most of them (which means it's the default which is INFO).
2) If I do the following:
-- logout from xwiki from browser -- Keep log out -- put URL http://techdev1:9090/XWiki/bin/view/XYZ/ into browser <== this is protected by realm -- return -- immediately getting 403
Question: why I am not getting log-in prompt?
Thanks,
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Ji Zhang Sent: Wednesday, November 05, 2014 12:17 PM To: XWiki Users Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Hi Thomas,
Thanks for your help.
Are you saying that the Tomcat JDBC realm users will be automatically becoming registered xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured correctly?
Thx again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Thomas Mortagne Sent: Tuesday, November 04, 2014 2:56 AM To: XWiki Users Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
To know if you are authenticated from XWiki point of view look at the top right corner, you should see you name or id there (so probably jsmith here). If you are not authenticated then you should have a "login" button/link instead.
You can also enable debug log for this authenticator. Search for it in Administration -> Logging and set log level to TRACE or DEBUG. When this is done you should see details on what is happening in this authenticator in your application server log.
On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <[email protected]> wrote:
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Clemens Klein-Robbenhaar Sent: Monday, November 03, 2014 11:42 AM To: [email protected] Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
On Wed, Nov 5, 2014 at 10:13 PM, Thomas Mortagne <[email protected]> wrote:
On Wed, Nov 5, 2014 at 9:44 PM, Ji Zhang <[email protected]> wrote:
Thomas,
1) The logging level is set to be trace for all by default, but I don't see where anything regarding authentication in any of the log file in TOMCAT/logs directory ( catalina.out is the stdout log )
No the level is not set to trace by default. The level is what you have in the "Level" column and by default it's not set for most of them (which means it's the default which is INFO).
2) If I do the following:
-- logout from xwiki from browser -- Keep log out -- put URL http://techdev1:9090/XWiki/bin/view/XYZ/ into browser <== this is protected by realm -- return -- immediately getting 403
Question: why I am not getting log-in prompt?
Again this has absolutely nothing to do with XWiki, XWiki is not doing anything here it's whatever authenticator YOU setup in front of XWiki. AppServerTrustedAuthServiceImpl just received the user id once the actual authentication is validated and you finally ends up on XWiki.
Thanks,
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Ji Zhang Sent: Wednesday, November 05, 2014 12:17 PM To: XWiki Users Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
Hi Thomas,
Thanks for your help.
Are you saying that the Tomcat JDBC realm users will be automatically becoming registered xwiki users if AppServerTrustedAuthServiceImpl is turned on. Should we see all the users in realm in the xwiki user list if AppServerTrustedAuthServiceImpl is configured correctly?
Thx again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Thomas Mortagne Sent: Tuesday, November 04, 2014 2:56 AM To: XWiki Users Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
To know if you are authenticated from XWiki point of view look at the top right corner, you should see you name or id there (so probably jsmith here). If you are not authenticated then you should have a "login" button/link instead.
You can also enable debug log for this authenticator. Search for it in Administration -> Logging and set log level to TRACE or DEBUG. When this is done you should see details on what is happening in this authenticator in your application server log.
On Mon, Nov 3, 2014 at 7:10 PM, Ji Zhang <[email protected]> wrote:
Thanks Clemens.
How do I test if this authentication works? For example, I have an user jsmith/password in Tomcat JDBC realm. How do I assign the viewing privileges to jsmith?
Thanks again.
Ji
-----Original Message----- From: users [mailto:[email protected]] On Behalf Of Clemens Klein-Robbenhaar Sent: Monday, November 03, 2014 11:42 AM To: [email protected] Subject: Re: [xwiki-users] Question regarding AppServerTrustedAuthServiceImpl
On 11/03/2014 05:15 PM, Ji Zhang wrote:
Guys,
I am new to Xwiki.
I have a xwiki deployed on tomcat 6. I need to use authentication against tomcat JDBC realm. AppServerTrustedAuthServiceImpl seems to my option. Are there some detailed documents or examples for using it?
yes: add a line do the xwiki.cfg in the WEB-INF folder, as explained here:
http://platform.xwiki.org/xwiki/bin/view/AdminGuide/Authentication#HCo ntainerAuthentication
That (and restarting tomcat) should be everything you need to do.
Cheers, Clemens _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users _______________________________________________ users mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/users
-- Thomas Mortagne
-- Thomas Mortagne
participants (7)
-
Bryn Jeffries -
Clemens Klein-Robbenhaar -
Jason Clemons -
Ji Zhang -
Paul Libbrecht -
Thomas Mortagne -
vincent＠massol.net