ramkrishna.addanki Posted February 24, 2016 Posted February 24, 2016 Hi folks,I am trying to connect jasper reports server with FreeIPA LDAP,when i am connecting to Ldap it is giving the following error and i can't understand why i am getting that., any help would be appreciated and helpful.I am using jasper reports community edition and i am not using sample default configuration file and i making changes in applicationcontext-security.xml This is my error DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /exituser.html; matched=false2016-02-24 10:39:54,616 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /exituser.html; matched=false2016-02-24 10:39:54,617 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /home.html; matched=false2016-02-24 10:39:54,617 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /home.html; matched=false2016-02-24 10:39:54,618 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /flow.html; matched=false2016-02-24 10:39:54,618 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /flow.html; matched=false2016-02-24 10:39:54,619 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /loginsuccess.html; matched=false2016-02-24 10:39:54,619 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /loginsuccess.html; matched=false2016-02-24 10:39:54,620 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /listolapviews.html; matched=false2016-02-24 10:39:54,620 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /listolapviews.html; matched=false2016-02-24 10:39:54,621 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /fillparams.html; matched=false2016-02-24 10:39:54,621 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /fillparams.html; matched=false2016-02-24 10:39:54,622 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /j_spring_switch_user*; matched=false2016-02-24 10:39:54,622 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /j_spring_switch_user*; matched=false2016-02-24 10:39:54,623 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /fileview/**; matched=false2016-02-24 10:39:54,623 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /fileview/**; matched=false2016-02-24 10:39:54,624 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /olap/**; matched=false2016-02-24 10:39:54,624 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /olap/**; matched=false2016-02-24 10:39:54,625 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /xmla; matched=false2016-02-24 10:39:54,625 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /xmla; matched=false2016-02-24 10:39:54,626 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /services/**; matched=false2016-02-24 10:39:54,626 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /services/**; matched=false2016-02-24 10:39:54,627 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /reportimage/**; matched=false2016-02-24 10:39:54,627 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /reportimage/**; matched=false2016-02-24 10:39:54,628 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /jrpxml/**; matched=false2016-02-24 10:39:54,628 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /jrpxml/**; matched=false2016-02-24 10:39:54,629 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /heartbeatinfo.html; matched=false2016-02-24 10:39:54,629 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /heartbeatinfo.html; matched=false2016-02-24 10:39:54,630 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest/**; matched=false2016-02-24 10:39:54,630 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest/**; matched=false2016-02-24 10:39:54,630 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/jobs/**; matched=false2016-02-24 10:39:54,630 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/jobs/**; matched=false2016-02-24 10:39:54,631 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/permissions/**; matched=false2016-02-24 10:39:54,631 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/permissions/**; matched=false2016-02-24 10:39:54,632 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/reports/**; matched=false2016-02-24 10:39:54,632 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/reports/**; matched=false2016-02-24 10:39:54,633 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/resources/**; matched=false2016-02-24 10:39:54,633 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/resources/**; matched=false2016-02-24 10:39:54,634 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/reportexecutions/**; matched=false2016-02-24 10:39:54,634 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/reportexecutions/**; matched=false2016-02-24 10:39:54,635 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/serverinfo/**; matched=false2016-02-24 10:39:54,635 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/serverinfo/**; matched=false2016-02-24 10:39:54,636 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/application.wadl; matched=false2016-02-24 10:39:54,636 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/application.wadl; matched=false2016-02-24 10:39:54,637 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/application.wadl/xsd0.xsd; matched=false2016-02-24 10:39:54,637 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/application.wadl/xsd0.xsd; matched=false2016-02-24 10:39:54,638 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/bundles/**; matched=false2016-02-24 10:39:54,638 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/bundles/**; matched=false2016-02-24 10:39:54,639 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/settings/**; matched=false2016-02-24 10:39:54,639 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/settings/**; matched=false2016-02-24 10:39:54,640 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /404.html; matched=false2016-02-24 10:39:54,640 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /404.html; matched=false2016-02-24 10:39:54,640 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /500.html; matched=false2016-02-24 10:39:54,640 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /500.html; matched=false2016-02-24 10:39:54,641 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /reportgenerator.html; matched=false2016-02-24 10:39:54,641 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /reportgenerator.html; matched=false2016-02-24 10:39:54,642 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /viewreportcancel.html; matched=false2016-02-24 10:39:54,642 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /viewreportcancel.html; matched=false2016-02-24 10:39:54,643 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /viewreportasynccancel.html; matched=false2016-02-24 10:39:54,643 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /viewreportasynccancel.html; matched=false2016-02-24 10:39:54,644 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /viewreportpageupdatecheck.html; matched=false2016-02-24 10:39:54,644 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /viewreportpageupdatecheck.html; matched=false2016-02-24 10:39:54,645 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /bif/*; matched=false2016-02-24 10:39:54,645 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /bif/*; matched=false2016-02-24 10:39:54,646 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /bif/*/**; matched=false2016-02-24 10:39:54,646 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /bif/*/**; matched=false2016-02-24 10:39:54,647 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /xdm.html; matched=false2016-02-24 10:39:54,647 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /xdm.html; matched=false2016-02-24 10:39:54,648 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /getreportcomponents.html; matched=false2016-02-24 10:39:54,648 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /getreportcomponents.html; matched=false2016-02-24 10:39:54,649 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /getrequirejsconfig.html; matched=false2016-02-24 10:39:54,649 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /getrequirejsconfig.html; matched=false2016-02-24 10:39:54,649 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /runreportaction.html; matched=false2016-02-24 10:39:54,649 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /runreportaction.html; matched=false2016-02-24 10:39:54,650 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /scheduler/jobsummary.html; matched=false2016-02-24 10:39:54,650 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /scheduler/jobsummary.html; matched=false2016-02-24 10:39:54,651 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /scheduler/jobdetails.html; matched=false2016-02-24 10:39:54,651 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /scheduler/jobdetails.html; matched=false2016-02-24 10:39:54,652 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /scheduler/main.html; matched=false2016-02-24 10:39:54,652 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /scheduler/main.html; matched=false2016-02-24 10:39:54,653 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /awsconfiguration.html; matched=false2016-02-24 10:39:54,653 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /awsconfiguration.html; matched=false2016-02-24 10:39:54,654 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/**; matched=false2016-02-24 10:39:54,654 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /rest_v2/**; matched=false2016-02-24 10:39:54,655 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /*.html; matched=false2016-02-24 10:39:54,655 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /*.html; matched=false2016-02-24 10:39:54,656 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /*.jsp; matched=false2016-02-24 10:39:54,656 DEBUG DefaultFilterInvocationDefinitionSource,http-apr-8080-exec-1:224 - Candidate is: '/_themes/97f5aabb/images/favicon.ico'; pattern is /*.jsp; matched=false 2016-02-24 10:39:54,657 DEBUG AbstractSecurityInterceptor,http-apr-8080-exec-1:244 - Public object - authentication not attempted2016-02-24 10:39:54,657 DEBUG AbstractSecurityInterceptor,http-apr-8080-exec-1:244 - Public object - authentication not attempted 2016-02-24 10:39:54,658 DEBUG FilterChainProxy,http-apr-8080-exec-1:406 - /_themes/97F5AABB/images/favicon.ico at position 17 of 18 in additional filter chain; firing Filter: 'com.jaspersoft.jasperserver.api.security.JSSwitchUserProcessingFilter[ order=1800; ]'2016-02-24 10:39:54,658 DEBUG FilterChainProxy,http-apr-8080-exec-1:406 - /_themes/97F5AABB/images/favicon.ico at position 17 of 18 in additional filter chain; firing Filter: 'com.jaspersoft.jasperserver.api.security.JSSwitchUserProcessingFilter[ order=1800; ]'2016-02-24 10:39:54,659 DEBUG FilterChainProxy,http-apr-8080-exec-1:406 - /_themes/97F5AABB/images/favicon.ico at position 18 of 18 in additional filter chain; firing Filter: 'com.jaspersoft.jasperserver.api.security.IPadSupportFilter@5ade2f72'2016-02-24 10:39:54,659 DEBUG FilterChainProxy,http-apr-8080-exec-1:406 - /_themes/97F5AABB/images/favicon.ico at position 18 of 18 in additional filter chain; firing Filter: 'com.jaspersoft.jasperserver.api.security.IPadSupportFilter@5ade2f72'2016-02-24 10:39:54,662 DEBUG FilterChainProxy,http-apr-8080-exec-1:393 - /_themes/97F5AABB/images/favicon.ico reached end of additional filter chain; proceeding with original chain2016-02-24 10:39:54,662 DEBUG FilterChainProxy,http-apr-8080-exec-1:393 - /_themes/97F5AABB/images/favicon.ico reached end of additional filter chain; proceeding with original chain2016-02-24 10:39:54,667 DEBUG ExceptionTranslationFilter,http-apr-8080-exec-1:104 - Chain processed normally2016-02-24 10:39:54,667 DEBUG ExceptionTranslationFilter,http-apr-8080-exec-1:104 - Chain processed normally2016-02-24 10:39:54,668 DEBUG HttpSessionContextIntegrationFilter,http-apr-8080-exec-1:255 - SecurityContextHolder now cleared, as request processing completed2016-02-24 10:39:54,668 DEBUG HttpSessionContextIntegrationFilter,http-apr-8080-exec-1:255 - SecurityContextHolder now cleared, as request processing completed
ajoslin Posted March 14, 2016 Posted March 14, 2016 I have successfully connected Jasper Reports to our IPA server using the applicationContext-externalAuth-LDAP.xml fileIn IPA I have a User Group: jasper-admins -- anyone in that group gets admin, all else are usersJust so there is no confusion I'm pasting in the complete xml file (with a few things changed to protect the innocent)<!-- ~ Copyright © 2005 - 2014 TIBCO Software Inc. All rights reserved. ~ http://www.jaspersoft.com. ~ ~ Unless you have purchased a commercial license agreement from Jaspersoft, ~ the following license terms apply: ~ ~ This program is free software: you can redistribute it and/or modify ~ it under the terms of the GNU Affero General Public License as ~ published by the Free Software Foundation, either version 3 of the ~ License, or (at your option) any later version. ~ ~ This program is distributed in the hope that it will be useful, ~ but WITHOUT ANY WARRANTY; without even the implied warranty of ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the ~ GNU Affero General Public License for more details. ~ ~ You should have received a copy of the GNU Affero General Public License ~ along with this program. If not, see <http://www.gnu.org/licenses/>. --> <beans xmlns="http://www.springframework.org/schema/beans" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.springframework.org/schema/beans http://www.springframework.org/schema/beans/spring-beans-3.1.xsd"> <!-- ############ LDAP authentication ############ - Sample configuration of external authentication via an external LDAP server. --> <bean id="proxyAuthenticationProcessingFilter" class="com.jaspersoft.jasperserver.api.security.EncryptionAuthenticationProcessingFilter" parent="authenticationProcessingFilter"> <property name="authenticationManager"> <ref local="ldapAuthenticationManager"/> </property> <property name="authenticationSuccessHandler" ref="externalAuthSuccessHandler" /> </bean> <bean id="proxyAuthenticationSoapProcessingFilter" class="com.jaspersoft.jasperserver.api.security.externalAuth.DefaultAuthenticationSoapProcessingFilter"> <property name="authenticationManager" ref="ldapAuthenticationManager"/> <property name="authenticationSuccessHandler" ref="externalAuthSuccessHandler" /> <property name="filterProcessesUrl" value="/services"/> </bean> <bean id="proxyAuthenticationRestProcessingFilter" class="com.jaspersoft.jasperserver.api.security.externalAuth.DefaultAuthenticationRestProcessingFilter"> <property name="authenticationManager"> <ref local="ldapAuthenticationManager"/> </property> <property name="authenticationSuccessHandler" ref="externalAuthSuccessHandler" /> <property name="filterProcessesUrl" value="/rest/login"/> </bean> <bean id="proxyRequestParameterAuthenticationFilter" class="com.jaspersoft.jasperserver.war.util.ExternalRequestParameterAuthenticationFilter" parent="requestParameterAuthenticationFilter"> <property name="authenticationManager"> <ref local="ldapAuthenticationManager"/> </property> <property name="externalDataSynchronizer" ref="externalDataSynchronizer"/> </bean> <bean id="externalAuthSuccessHandler" class="com.jaspersoft.jasperserver.api.security.externalAuth.JrsExternalAuthenticationSuccessHandler" parent="successHandler"> <property name="externalDataSynchronizer"> <ref local="externalDataSynchronizer"/> </property> </bean> <bean id="proxyBasicProcessingFilter" class="com.jaspersoft.jasperserver.api.security.externalAuth.ExternalAuthBasicProcessingFilter" parent="basicProcessingFilter"> <property name="authenticationManager" ref="ldapAuthenticationManager"/> <property name="externalDataSynchronizer" ref="externalDataSynchronizer"/> </bean> <bean id="ldapAuthenticationManager" class="com.jaspersoft.jasperserver.api.security.externalAuth.wrappers.spring.JSProviderManager"> <property name="providers"> <list> <ref local="ldapAuthenticationProvider"/> <ref bean="${bean.daoAuthenticationProvider}"/> <!--anonymousAuthenticationProvider only needed if filterInvocationInterceptor.alwaysReauthenticate is set to true <ref bean="anonymousAuthenticationProvider"/>--> </list> </property> </bean> <bean id="ldapAuthenticationProvider" class="com.jaspersoft.jasperserver.api.security.externalAuth.wrappers.spring.ldap.JSLdapAuthenticationProvider"> <constructor-arg> <bean class="com.jaspersoft.jasperserver.api.security.externalAuth.wrappers.spring.ldap.JSBindAuthenticator"> <constructor-arg><ref local="ldapContextSource"/></constructor-arg> <property name="userSearch" ref="userSearch"/> </bean> </constructor-arg> <constructor-arg> <bean class="com.jaspersoft.jasperserver.api.security.externalAuth.wrappers.spring.ldap.JSDefaultLdapAuthoritiesPopulator"> <constructor-arg index="0"><ref local="ldapContextSource"/></constructor-arg> <constructor-arg index="1"><value>cn=groups,cn=accounts</value></constructor-arg> <property name="groupRoleAttribute" value="cn"/> <property name="groupSearchFilter" value="(member={0})"/> <property name="searchSubtree" value="true"/> <!-- Can setup additional external default roles here <property name="defaultRole" value="LDAP"/> --> </bean> </constructor-arg> </bean> <bean id="userSearch" class="com.jaspersoft.jasperserver.api.security.externalAuth.wrappers.spring.ldap.JSFilterBasedLdapUserSearch"> <constructor-arg index="0"> <value>cn=users,cn=accounts</value> </constructor-arg> <constructor-arg index="1"> <value>(uid={0})</value> </constructor-arg> <constructor-arg index="2"> <ref local="ldapContextSource" /> </constructor-arg> <property name="searchSubtree"> <value>true</value> </property> </bean> <bean id="ldapContextSource" class="com.jaspersoft.jasperserver.api.security.externalAuth.ldap.JSLdapContextSource"> <constructor-arg value="ldap://ipa-server.my-domain.com:389/dc=my-domain,dc=com"/> <!-- manager user name and password NOTE: Even tho' IPA server allows anonymous ldap searches for login tests, you need an authenticated user to search groups we use _userName for service accounts which have never-expiring passwords --> <property name="userDn" value="uid=_ldapsearcher,cn=users,cn=accounts,dc=epc-instore,dc=com"/> <property name="password" value="_ldapsearcherPassword"/> </bean> <!-- ############ LDAP authentication ############ --> <!-- ############ JRS Synchronizer ############ --> <bean id="externalDataSynchronizer" class="com.jaspersoft.jasperserver.api.security.externalAuth.ExternalDataSynchronizerImpl"> <property name="externalUserProcessors"> <list> <ref local="externalUserSetupProcessor"/> <!-- Example processor for creating user folder--> <!--<ref local="externalUserFolderProcessor"/>--> </list> </property> </bean> <bean id="abstractExternalProcessor" class="com.jaspersoft.jasperserver.api.security.externalAuth.processors.AbstractExternalUserProcessor" abstract="true"> <property name="repositoryService" ref="${bean.repositoryService}"/> <property name="userAuthorityService" ref="${bean.userAuthorityService}"/> <property name="tenantService" ref="${bean.tenantService}"/> <property name="profileAttributeService" ref="profileAttributeService"/> <property name="objectPermissionService" ref="objectPermissionService"/> </bean> <bean id="externalUserSetupProcessor" class="com.jaspersoft.jasperserver.api.security.externalAuth.processors.ExternalUserSetupProcessor" parent="abstractExternalProcessor"> <!--Default permitted role characters; others are removed. Change regular expression to allow other chars. <property name="permittedExternalRoleNameRegex" value="[A-Za-z0-9_]+"/>--> <property name="userAuthorityService"> <ref bean="${bean.internalUserAuthorityService}"/> </property> <property name="defaultInternalRoles"> <list> <value>ROLE_USER</value> </list> </property> <property name="organizationRoleMap"> <map> <!-- Example of mapping customer roles to JRS roles NOTE: Spring security will take the groupname from your ldap server and prefix it with ROLE_ before bringing it here to make the comparison So do not prefix your actual group names with ROLE or they will arrive here with ROLE_ROLE_someGroupName --> <entry> <key> <value>ROLE_JASPER-ADMINS</value> </key> <!-- JRS role that the <key> external role is mapped to--> <value>ROLE_ADMINISTRATOR</value> </entry> </map> </property> </bean> <!-- EXAMPLE Processor <bean id="externalUserFolderProcessor" class="com.jaspersoft.jasperserver.api.security.externalAuth.processors.ExternalUserFolderProcessor" parent="abstractExternalProcessor"> <property name="repositoryService" ref="${bean.unsecureRepositoryService}"/> </bean> --> <!-- ############ JRS Synchronizer ############ --></beans> Hope this helps Al; - Don't believe everything you read on the internet - Abraham Lincoln.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now