witto

Dear Sherman, If I try to follow your suggestions, I would end up with the following modifications: <!-- ======================== AUTHENTICATION ======================= --> <bean id="authenticationManager" class="org.acegisecurity.providers.ProviderManager"> <property name="providers"> <list> <!-- not on by default <ref local="ldapAuthenticationProvider"/> --> <ref bean="${bean.daoAuthenticationProvider}"/> <ref local="ldapAuthenticationProvider-1"/> <ref local="ldapAuthenticationProvider-2"/> <ref local="daoAuthenticationProvider"/> <ref local="anonymousAuthenticationProvider"/> <!--ref local="jaasAuthenticationProvider"/--> </list> </property> </bean> <!-- For LDAP authentication --> <bean id="initialDirContextFactory-1" class="org.acegisecurity.ldap.DefaultInitialDirContextFactory"> <!-- LDAP Query --> <!-- <constructor-arg value="ldap://mydc1:389/dc=mydomain,dc=local"/> --> <!-- Global Catalog Query --> <constructor-arg value="ldap://mydc1:3268/dc=mydomain,dc=local"/> <!-- --> <!-- You may not need the next properties --> <!-- <property name="managerDn"><value>CN=LDAPQueryUser,CN=Users,DC=mydomain,DC=local</value></property> --> <property name="managerDn"><value>LDAPQueryUser</value></property> <property name="managerPassword"><value>?S3cr3tP@ssw0rd!</value></property> <property name="extraEnvVars"> <map> <entry key="java.naming.referral" value="follow"/> </map> </property> <!-- --> <!-- --> </bean> <!-- --> <bean id="initialDirContextFactory-2" class="org.acegisecurity.ldap.DefaultInitialDirContextFactory"> <!-- LDAP Query --> <!-- <constructor-arg value="ldap://mydc2:389/dc=mydomain,dc=local"/> --> <!-- Global Catalog Query --> <constructor-arg value="ldap://mydc2:3268/dc=mydomain,dc=local"/> <!-- --> <!-- You may not need the next properties --> <!-- <property name="managerDn"><value>CN=LDAPQueryUser,CN=Users,DC=mydomain,DC=local</value></property> --> <property name="managerDn"><value>LDAPQueryUser</value></property> <property name="managerPassword"><value>?S3cr3tP@ssw0rd!</value></property> <property name="extraEnvVars"> <map> <entry key="java.naming.referral" value="follow"/> </map> </property> <!-- --> <!-- --> </bean> <!-- --> <!-- For LDAP authentication This bean is not used by default --> <bean id="userSearch" class="org.acegisecurity.ldap.search.FilterBasedLdapUserSearch"> <constructor-arg index="0"> <value></value> <!-- <value>cn=users</value> --> </constructor-arg> <constructor-arg index="1"> <value>(sAMAccountName={0})</value> <!-- <value>(uid={0})</value> --> </constructor-arg> <constructor-arg index="2"> <ref local="initialDirContextFactory" /> </constructor-arg> <property name="searchSubtree"> <value>true</value> </property> </bean> <!-- --> <!-- For LDAP authentication --> <bean id="ldapAuthenticationProvider-1" class="org.acegisecurity.providers.ldap.LdapAuthenticationProvider"> <constructor-arg> <bean class="org.acegisecurity.providers.ldap.authenticator.BindAuthenticator"> <constructor-arg><ref local="initialDirContextFactory-1"/></constructor-arg> <property name="userSearch"><ref local="userSearch" /></property> <!-- <property name="userDnPatterns"><list><value>uid={0}</value></list></property> --> </bean> </constructor-arg> <constructor-arg> <bean class="org.acegisecurity.providers.ldap.populator.DefaultLdapAuthoritiesPopulator"> <constructor-arg index="0"><ref local="initialDirContextFactory-1"/></constructor-arg> <constructor-arg index="1"><value></value> <!-- <value>cn=users</value> --> </constructor-arg> <property name="convertToUpperCase"><value>true</value></property> <property name="rolePrefix"><value></value></property> <property name="searchSubtree"><value>true</value></property> <property name="groupSearchFilter"><value>member={0}</value></property> <property name="groupRoleAttribute"><value>cn</value></property> <!-- <property name="groupSearchFilter"><value>(&(uniqueMember={0})(objectclass=groupofuniquenames))</value></property> --> </bean> </constructor-arg> </bean> <!-- --> <!-- For LDAP authentication --> <bean id="ldapAuthenticationProvider-2" class="org.acegisecurity.providers.ldap.LdapAuthenticationProvider"> <constructor-arg> <bean class="org.acegisecurity.providers.ldap.authenticator.BindAuthenticator"> <constructor-arg><ref local="initialDirContextFactory-2"/></constructor-arg> <property name="userSearch"><ref local="userSearch" /></property> <!-- <property name="userDnPatterns"><list><value>uid={0}</value></list></property> --> </bean> </constructor-arg> <constructor-arg> <bean class="org.acegisecurity.providers.ldap.populator.DefaultLdapAuthoritiesPopulator"> <constructor-arg index="0"><ref local="initialDirContextFactory"/></constructor-arg> <constructor-arg index="1"><value></value> <!-- <value>cn=users</value> --> </constructor-arg> <property name="convertToUpperCase"><value>true</value></property> <property name="rolePrefix"><value></value></property> <property name="searchSubtree"><value>true</value></property> <property name="groupSearchFilter"><value>member={0}</value></property> <property name="groupRoleAttribute"><value>cn</value></property> <!-- <property name="groupSearchFilter"><value>(&(uniqueMember={0})(objectclass=groupofuniquenames))</value></property> --> </bean> </constructor-arg> </bean> <!-- --> I did not try the modifications above at all. Can you please give your comments on the the these modifications? Kind regards,

Dear Sherman, I really do not see how this should be configured. Please forgive my ignorance, but I know anything about Java beans, except the beans I use to make coffee. As far as I can see through the configuration in my topmost post, the tag <ref local="ldapAuthenticationProvider"/> is reused in the "bean tag" <bean id="ldapAuthenticationProvider" class="org.acegisecurity.providers.ldap.LdapAuthenticationProvider"> and in that part, I do not see any configuration about the dlap servers that should be used. I do see that there is a tag constructor-arg with a subtag that refers to initialDirContextFactory: <constructor-arg index="0"><ref local="initialDirContextFactory"/></constructor-arg> Under the bean tag <bean id="initialDirContextFactory" class="org.acegisecurity.ldap.DefaultInitialDirContextFactory"> the LDAP server is provided. But I still do not see what I should change to configure more than one LDAP server. Can you please shed some light in the darkness and maybe provide a working example configuration? Thank you very much for your suggestions so far.

swood Wrote: witto, You can't just add additional URLs in the constructor arg. You could add a different set of beans for the second LDAP configuration, and add it into the list of authentation managers: <bean id="authenticationManager" class="org.springframework.security.providers.ProviderManager"> <property name="providers"> <list> <!-- not on by default <ref local="ldapAuthenticationProvider"/> --> <ref bean="${bean.daoAuthenticationProvider}"/> <ref local="ldapAuthenticationProvider-1"/> <ref local="ldapAuthenticationProvider-2"/> <ref local="anonymousAuthenticationProvider"/> </list> </property> </bean> Also, if memory serve me right, you should be able to configure your LDAP service to do this with a single IP address. LDAP services are usually designed up to be fault tolerant and scalable, so they can have a number of LDAP servers behind 1 IP address. Sherman Jaspersoft Dear Sherman, Could you elaborate on your example? I am looking for working examples and "how to get there" descriptions. I have been testing on a test server with configurations like: <bean id="initialDirContextFactory" class="org.acegisecurity.ldap.DefaultInitialDirContextFactory"> <!-- Testing alternate LDAP servers --> <!-- <constructor-arg value="ldap://mydc1:3268/dc=mydomain,dc=local ldap://dummy:3268/dc=mydomain,dc=local"/> --> <!-- <constructor-arg value="ldap://dummy:3268/dc=mydomain,dc=local ldap://mydc1:3268/dc=mydomain,dc=local"/> --> <!-- <constructor-arg value="ldap://mydc2:3268/dc=mydomain,dc=local ldap://dummy:3268/dc=mydomain,dc=local"/> --> <!-- <constructor-arg value="ldap://dummy:3268/dc=mydomain,dc=local ldap://mydc2:3268/dc=mydomain,dc=local"/> --> <!-- At first glance, the examples above seem to work --> <!-- Global Catalog Search --> <constructor-arg value="ldap://mydc1:3268/dc=mydomain,dc=local ldap://mydc2:3268/dc=mydomain,dc=local"/> <!-- LDAP Query --> <!-- <constructor-arg value="ldap://mydc1:389/dc=mydomain,dc=local ldap://mydc2:389/dc=mydomain,dc=local"/> --> <property name="managerDn"><value>LDAPQueryUser</value></property> <property name="managerPassword"><value>?S3cr3tP@ssw0rd!</value></property> <property name="extraEnvVars"> <map> <entry key="java.naming.referral" value="follow"/> </map> </property> </bean> Kind regards, Post Edited by at 10/20/2009 11:38 Post Edited by witto at 10/20/2009 11:44

Dear Sherman Wood, What do you know about the possibility to configure one or more "alternate LDAP servers" Is it enough to enumerate all the LDAP or Global Catalog servers divided by spaces? <bean id="initialDirContextFactory" class="org.acegisecurity.ldap.DefaultInitialDirContextFactory"> <constructor-arg value="ldap://mydc1:3268/dc=mydomain,dc=local ldap://mydc2:3268/dc=mydomain,dc=local"/> <property name="managerDn"><value>LDAPQueryUser</value></property> <property name="managerPassword"><value>?S3cr3tP@ssw0rd!</value></property> <property name="extraEnvVars"> <map> <entry key="java.naming.referral" value="follow"/> </map> </property> </bean>

I presume you do not have to create any user in JasperServer that has the same name and password as in your Active Directory. I presume you can follow the steps that I posted in the first post. Even for jasperServer 3.5. But we did not implement (yet) JasperServer 3.5.

Dear all, This is how we changed the password for jasperdb in MySQL and in jasperserver. Change the password in MySQL This is an example of how to modify the password for jasperdb in MySQL C:\Program Files\MySQL\MySQL Server 5.1\bin>mysql -u root -pMyS3cr3t! -h 127.0.0.1 -P 3306Welcome to the MySQL monitor. Commands end with ; or \g.Your MySQL connection id is 4Server version: 5.1.39-community MySQL Community Server (GPL) Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. mysql> UPDATE mysql.user SET Password=PASSWORD('?MyJ@sperPW') where User='jasperdb';Query OK, 2 rows affected (0.03 sec)Rows matched: 2 Changed: 2 Warnings: 0 mysql> flush privileges;Query OK, 0 rows affected (0.08 sec) mysql> quitBye C:\Program Files\MySQL\MySQL Server 5.1\bin> Modifications to context.xml and jasperserver.xml Look for the file jasperserver.xml in “C:\Program Files\Apache Software Foundation\Tomcat 6.0\conf\Catalina\localhost\". If it exists then it is preferred by Apache TomCat. The file context.xml in the webapps\jasperserver\META-INF directory is ignored. Also look for the file context.xml in “C:\Program Files\Apache Software Foundation\Tomcat 6.0\webapps\jasperserver\META-INF\” Modify the file or the files as in this example: <Context path="/jasperserver" debug="5" reloadable="true" crossContext="true"> <!-- maxActive: Maximum number of dB connections in pool. Make sure you configure your mysqld max_connections large enough to handle all of your db connections. Set to 0 for no limit. --> <!-- maxIdle: Maximum number of idle dB connections to retain in pool. Set to -1 for no limit. See also the DBCP documentation on this and the minEvictableIdleTimeMillis configuration parameter. --> <!-- maxWait: Maximum time to wait for a dB connection to become available in ms, in this example 10 seconds. An Exception is thrown if this timeout is exceeded. Set to -1 to wait indefinitely. --> <Resource name="jdbc/jasperserver" auth="Container" type="javax.sql.DataSource" maxActive="100" maxIdle="30" maxWait="10000" username="jasperdb" password="?MyJ@sperPW'" driverClassName="com.mysql.jdbc.Driver" url="jdbc:mysql://127.0.0.1:3306/jasperserver?useUnicode=true&characterEncoding=UTF-8"/> <Resource name="jdbc/sugarcrm" auth="Container" type="javax.sql.DataSource" maxActive="100" maxIdle="30" maxWait="10000" username="jasperdb" password="?MyJ@sperPW'" driverClassName="com.mysql.jdbc.Driver" url="jdbc:mysql://127.0.0.1:3306/sugarcrm?useUnicode=true&characterEncoding=UTF-8"/> <Resource name="jdbc/foodmart" auth="Container" type="javax.sql.DataSource" maxActive="100" maxIdle="30" maxWait="10000" username="jasperdb" password="?MyJ@sperPW'" driverClassName="com.mysql.jdbc.Driver" url="jdbc:mysql://127.0.0.1:3306/foodmart"/></Context> Configuration Windows 2008 Server JRE 6 Update 13 and Update 16 Apache TomCat 6.0.18 and 6.0.20 MySQL Server 5.1.34 and 5.1.39 Apache TomCat 6.0.18 and 6.0.20 jasperserver 3.1.0Kind regards,

Dear JasperForge, Doesn't anybody know how to configure multiple alternate LDAP servers? Can someone provide an example?

I really don't know. You see I do not even get an answer on the rather simple question that I asked. Do you see a difference in speed between "ldap://mydc1:389/dc=mydomain,dc=local" and "ldap://mydc1:3268/dc=mydomain,dc=local"?

Dear all, I seem to understand that "Spring LDAP" is used for LDAP Authentication. I also seem to understand that "Spring LDAP" supports the configuration of multiple alternate LDAP servers. Can anyone give an example how this is configured in JasperServer? Should I write something like: <constructor-arg value="ldap://mydc1:3268/dc=mydomain,dc=local ldap://mydc1:3268/dc=mydomain,dc=local"/> ??? More information: http://static.springsource.org/spring-ldap/docs/1.3.x/reference/html/ http://static.springsource.org/spring-ldap/docs/1.3.x/reference/html/configuration.html#dir-context-url Kind regards Post Edited by witto at 07/27/2009 14:11 Post Edited by witto at 07/27/2009 14:33 Post Edited by witto at 07/27/2009 14:35

Forget the question about <property name="managerDn"><value>LDAPQueryUser</value></property> It works fine for me. I will change the topmost post. If anybody knows if it is possible to provide information about an alternate LDAP server, then I am still interested in the answer. Post Edited by witto at 07/27/2009 11:56

Dear all, In our solution above, I don't like the <property name="managerDn"><value>CN=LDAPQueryUser,CN=Users,DC=mydomain,DC=local</value></property> Does anybody know how to reduce this to <property name="managerDn"><value>LDAPQueryUser</value></property> About <constructor-arg value="ldap://mydc1:3268/dc=mydomain,dc=local"/> Does anybody know if it is possible to provide alternate LDAP server URL's in case the default is unavailable? Thanks, Kind regards Post Edited by witto at 07/08/2009 11:51

Yes indeed, is there a "Never Expires"? Maybe "<session-timeout>0</session-timeout>"? If JasperServer is integratetd with Windows Active Directory, I don't think there is any need to throw users out of the application. The screensaver with "On Resume, password protect" should do the trick. Or is it better to set the time of the session to i.e. the time of one working day ("<session-timeout>480</session-timeout>" )?

There all, Here is, for our company, a working solution to integrate JasperServer (3.1) in a Windows (2003) Active Directory. Create in your Windows Active Directory a user to make LDAP Queries, i.e. "LDAPQueryUser". An ordinary "Domain User" is enough, no elevated rights are needed. Modify the file "applicationContext-security.xml". You can find it in the directory "C:\Program Files\Apache Software Foundation\Tomcat 6.0\webapps\jasperserver\WEB-INF". Find "ldapAuthenticationProvider" <!-- ======================== AUTHENTICATION ======================= --> <bean id="authenticationManager" class="org.acegisecurity.providers.ProviderManager"> <property name="providers"> <list> <!-- not on by default <ref local="ldapAuthenticationProvider"/> --> <ref local="daoAuthenticationProvider"/> <ref local="anonymousAuthenticationProvider"/> <!--ref local="jaasAuthenticationProvider"/--> </list> </property> </bean> Remove the remark tags <!-- ======================== AUTHENTICATION ======================= --> <bean id="authenticationManager" class="org.acegisecurity.providers.ProviderManager"> <property name="providers"> <list> <ref local="ldapAuthenticationProvider"/><!-- not on by default --> <ref local="daoAuthenticationProvider"/> <ref local="anonymousAuthenticationProvider"/> <!--ref local="jaasAuthenticationProvider"/--> </list> </property> </bean> Find "bean id="initialDirContextFactory"" <!-- For LDAP authentication <bean id="initialDirContextFactory" class="org.acegisecurity.ldap.DefaultInitialDirContextFactory"> <constructor-arg value="ldap://scopeserv1:389/dc=panscopic,dc=com"/> --> <!-- You may not need the next properties <property name="managerDn"><value>cn=manager,dc=acegisecurity,dc=org</value></property> <property name="managerPassword"><value>acegisecurity</value></property> --> <!-- </bean> --> Modifications <!-- For LDAP authentication --> <bean id="initialDirContextFactory" class="org.acegisecurity.ldap.DefaultInitialDirContextFactory"> <!-- LDAP Query --> <!-- <constructor-arg value="ldap://mydc1:389/dc=mydomain,dc=local"/> --> <!-- Global Catalog Query --> <constructor-arg value="ldap://mydc1:3268/dc=mydomain,dc=local"/> <!-- --> <!-- You may not need the next properties --> <!-- <property name="managerDn"><value>CN=LDAPQueryUser,CN=Users,DC=mydomain,DC=local</value></property> --> <property name="managerDn"><value>LDAPQueryUser</value></property> <property name="managerPassword"><value>?S3cr3tP@ssw0rd!</value></property> <property name="extraEnvVars"> <map> <entry key="java.naming.referral" value="follow"/> </map> </property> <!-- --> <!-- --> </bean> <!-- --> Find “bean id="userSearch"” <!-- For LDAP authentication This bean is not used by default <bean id="userSearch" class="org.acegisecurity.ldap.search.FilterBasedLdapUserSearch"> <constructor-arg index="0"> <value></value> </constructor-arg> <constructor-arg index="1"> <value>(uid={0})</value> </constructor-arg> <constructor-arg index="2"> <ref local="initialDirContextFactory" /> </constructor-arg> <property name="searchSubtree"> <value>true</value> </property> </bean> --> Modifications <!-- For LDAP authentication This bean is not used by default --> <bean id="userSearch" class="org.acegisecurity.ldap.search.FilterBasedLdapUserSearch"> <constructor-arg index="0"> <value></value> <!-- <value>cn=users</value> --> </constructor-arg> <constructor-arg index="1"> <value>(sAMAccountName={0})</value> <!-- <value>(uid={0})</value> --> </constructor-arg> <constructor-arg index="2"> <ref local="initialDirContextFactory" /> </constructor-arg> <property name="searchSubtree"> <value>true</value> </property> </bean> <!-- --> Find "bean id="ldapAuthenticationProvider"" <!-- For LDAP authentication <bean id="ldapAuthenticationProvider" class="org.acegisecurity.providers.ldap.LdapAuthenticationProvider"> <constructor-arg> <bean class="org.acegisecurity.providers.ldap.authenticator.BindAuthenticator"> <constructor-arg><ref local="initialDirContextFactory"/></constructor-arg> <property name="userDnPatterns"><list><value>uid={0}</value></list></property> </bean> </constructor-arg> <constructor-arg> <bean class="org.acegisecurity.providers.ldap.populator.DefaultLdapAuthoritiesPopulator"> <constructor-arg index="0"><ref local="initialDirContextFactory"/></constructor-arg> <constructor-arg index="1"><value></value></constructor-arg> <property name="groupRoleAttribute"><value>cn</value></property> <property name="groupSearchFilter"><value>(&(uniqueMember={0})(objectclass=groupofuniquenames))</value></property> </bean> </constructor-arg> </bean> --> Modifications <!-- For LDAP authentication --> <bean id="ldapAuthenticationProvider" class="org.acegisecurity.providers.ldap.LdapAuthenticationProvider"> <constructor-arg> <bean class="org.acegisecurity.providers.ldap.authenticator.BindAuthenticator"> <constructor-arg><ref local="initialDirContextFactory"/></constructor-arg> <property name="userSearch"><ref local="userSearch" /></property> <!-- <property name="userDnPatterns"><list><value>uid={0}</value></list></property> --> </bean> </constructor-arg> <constructor-arg> <bean class="org.acegisecurity.providers.ldap.populator.DefaultLdapAuthoritiesPopulator"> <constructor-arg index="0"><ref local="initialDirContextFactory"/></constructor-arg> <constructor-arg index="1"><value></value> <!-- <value>cn=users</value> --> </constructor-arg> <property name="convertToUpperCase"><value>true</value></property> <property name="rolePrefix"><value></value></property> <property name="searchSubtree"><value>true</value></property> <property name="groupSearchFilter"><value>member={0}</value></property> <property name="groupRoleAttribute"><value>cn</value></property> <!-- <property name="groupSearchFilter"><value>(&(uniqueMember={0})(objectclass=groupofuniquenames))</value></property> --> </bean> </constructor-arg> </bean> <!-- --> Restart your JasperServer (or your Apache Tomcat server). More information: http://forum.springsource.org/showthread.php?t=41167 Regards, Post Edited by witto at 07/07/2009 22:47 Post Edited by witto at 07/27/2009 11:55

I never posted anything to that blog. I don't work with PostgreSQL. Post Edited by witto at 04/29/2009 10:15

Problem: JasperServer 3.1 Community Edition I used "jasperserver-3.1-windows-installer.exe", the Windows i386 installer. If installed WITH the Sample Databases and Sample Reports, there is no problem. If installed WITHOUT the Sample Databases and Sample Reports, it is impossible to login with jasperadmin/jasperadmin. In the file jasperserver.log ("C:Program FilesApache Software FoundationTomcat 6.0webappsjasperserverWEB-INFlogsjasperserver.log") there are messages like: 15:55:01,775 WARN LoggerListener,http-8080-2:55 - Authentication event AuthenticationFailureBadCredentialsEvent: jasperadmin; details: org.acegisecurity.ui.WebAuthenticationDetails@957e: RemoteIpAddress: 10.32.26.1; SessionId: FDB2A7083A154A8BAA15DA08C408FCF8; exception: Bad credentials In the file bitrock_installer.log or bitrock_installer_xxxx.log, that you can find in the %TEMP% folder of the person who installed the jasperserver software, there is this message: Script output: Script stderr: C:/PROGRA~1/MySQL/MYSQLS~1.1/bin/mysqladmin.exe: DROP DATABASE jasperserver failed; error: 'Can't drop database 'jasperserver'; database doesn't exist' ERROR 1064 (42000) at line 3 in file: 'C:PROGRA~1JASPER~1.1scriptsmysqljasperserverCreateDefaultSecurity-mysql.sql': You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near '('ROLE_PORTLET',0)' at line 5 Cause: There is an error in the file “C:Program Filesjasperserver-3.1scriptsmysqljasperserverCreateDefaultSecurity-mysql.sql”. There is a comma missing. INSERT INTO `JIRole` (`rolename`,`externallyDefined`) VALUES ('ROLE_USER',0), ('ROLE_ADMINISTRATOR',0), ('ROLE_ANONYMOUS',0) ('ROLE_PORTLET',0); Should be changed to INSERT INTO `JIRole` (`rolename`,`externallyDefined`) VALUES ('ROLE_USER',0), ('ROLE_ADMINISTRATOR',0), ('ROLE_ANONYMOUS',0), ('ROLE_PORTLET',0); More information can be found on http://jasperforge.org/plugins/mantis/view.php?id=3328 Solution: 1) Change the SQL script file 2) Open a command prompt. Run these commands: cd /d "c:\Program Files\jasperserver-3.1\scripts\mysql" "c:\Program Files\MySQL\MySQL Server 5.1\bin\mysql.exe" -u root –p use jasperserver; source jasperserverCreateDefaultSecurity-mysql.sql exit Post Edited by witto at 04/29/2009 11:55 Post Edited by witto at 07/08/2009 08:39 Post Edited by witto at 07/08/2009 08:40

No, it is jasperadmin/jasperadmin and I found the problem.

During the installation of JasperServer, at the question "Do you wish to install sample databases and sample reports" I answered "No" While testing, uninstalling and again installing the JasperServer, I changed this to "Yes". Now, it works. Apparently, the jasperserver database is also a sample database?

Dear, I try to install the JasperServer Community Edition separate from JRE, TomCat and MySQL. At the end, I cannot logon to the JasperServer Web Page. I tried the default jasperadmin/jasperadmin credentials, but they do not work. In the "C:\Program Files\Apache Software Foundation\Tomcat 6.0\webapps\jasperserver\WEB-INF\logs\jasperserver.log" I see loggings like: This is how I set up the server: Windows Server 2008 JRE 6 U13 Apache TomCat 6.0.18 Custom Install, added "Service" and "Native" Added tomcat6.exe as an exception to the Windows FireWall Changed the compatibility for tomcat6w.exe to "Run this program as an administrator" for all users MySQL Community Server 5.1.34 Typical install Instance configuration: Server Machine As a windows service, to launch automaticcally JasperServer Community Edition 3.1 Changed the paths for the TomCat and MySQL server Copied the JDB Connector to "C:\Progam Files\Apache Software Foundation\Tomcat 6.0\lib" (tried both mysql-connector-java-3.1.14-bin.jar and mysql-connector-java-5.1.7-bin.jar)Thanks for all suggestions and help Kind regards,