[Dspace-tech] adding cosing to manakin

[Blanco, Jose]

I have cosign running in my jspui, and I'm trying to run it now in xmlui, so I added the following to the xmui web.xml file:

<filter>
<filter-name>Cosign Authentication Filter</filter-name>
<filter-class>edu.umich.auth.cosign.CosignAuthenticationFilterIII</filter-class>
<init-param>
<param-name>Cosign.ConfigurationFile</param-name>
<param-value>/l1/dspace/repository/dev/config/cosignConfigBlancoj.xml</param-value>
</init-param>

<init-param>
<param-name>Auth.JAASConfigurationFile</param-name>
<param-value>/l/local/apache-tomcat/conf/jaas.conf</param-value>
</init-param>

</filter>

<servlet-mapping>
<servlet-name>webiso-login</servlet-name>
<url-pattern>/webiso-login</url-pattern>
</servlet-mapping>

<filter-mapping>
<filter-name>Cosign Authentication Filter</filter-name>
<url-pattern>/webiso-login</url-pattern>
</filter-mapping>

And I'm getting this error:

SEVERE: Parse error in application web.xml file at jndi:/blancoj.dev.deepblue.lib.umich.edu/WEB-INF/web.xml
java.lang.IllegalArgumentException: Filter mapping specifies an unknown filter name Cosign Authentication Filter
at org.apache.tomcat.util.digester.Digester.createSAXException(Digester.java:2726)
at org.apache.tomcat.util.digester.Digester.createSAXException(Digester.java:2752)
at org.apache.tomcat.util.digester.Digester.endElement(Digester.java:1061)
at com.sun.org.apache.xerces.internal.parsers.AbstractSAXParser.endElement(AbstractSAXParser.java:601)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanEndElement(XMLDocumentFragmentScannerImpl.java:1782)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl$FragmentContentDriver.next(XMLDocumentFragmentScannerImpl.java:2938)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentScannerImpl.next(XMLDocumentScannerImpl.java:648)
at com.sun.org.apache.xerces.internal.impl.XMLDocumentFragmentScannerImpl.scanDocument(XMLDocumentFragmentScannerImpl.java:511)


===
I don't kwow why it can't find it. It finds it just fine in jspui. Do I need to change something in one of the pom.xml files?

-Jose

[Mark Diggory]

Yes, you need to look for the dependency for cosign in your jspui pom.xml and add it to your xmlui pom.xml

Best,

Mark

------------------------------------------------------------------------------
Simplify data backup and recovery for your virtual environment with vRanger.
Installation's a snap, and flexible recovery options mean your data is safe,
secure and there when you need it. Data protection magic?
Nope - It's vRanger. Get your free trial download today.
http://p.sf.net/sfu/quest-sfdev2dev
_______________________________________________
DSpace-tech mailing list
DSpac...@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech

--
Mark R. Diggory
@mire - www.atmire.com
2888 Loker Avenue East - Suite 305 - Carlsbad - CA - 92010
Esperantolaan 4 - Heverlee 3001 - Belgium

[Blanco, Jose]

Mark,  the dspace/pom.xml is the only place that the jscosign is listed, and it seems like it would hold for all the apps.

 

Take a look.

[Mark Diggory]

No, each webapp needs to list its needed dependencies separately. Listing cosign as a dependency in dspace/pom.xml will only place it into the commandline application lib directory.

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense..
http://p.sf.net/sfu/splunk-d2d-c1

_______________________________________________
DSpace-tech mailing list
DSpac...@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech

[Tim Donohue]

Hi Jose,

It seems like there are few options (that come to my mind):

(1) The more "official" way: Create your own XMLUI Aspect which can
handle the Cosign authentication. This would be similar to the existing
EPerson Aspect (see the org.dspace.app.xmlui.aspect.eperson.* classes)
which handles authentication via LDAP, Shib, etc. This XMLUI Aspect
also uses the DSpace Authentication Plugins from
org.dspace.authenticate.* to actually perform the authentication &
report whether it was successful or not.

For more info on creating aspects, see some of the XMLUI Customization
guides here:
https://wiki.duraspace.org/display/DSPACE/DSpaceResources#DSpaceResources-Guides

The "official" way is the way the core Committers would likely do this,
as it's something that would be supported across all DSpace sites, and
actually uses the Authentication Plugins which also work for JSPUI, etc.

But, if you just wanted to get it working for Michigan, then you could
also choose...

(2) The "unofficial" way: As you mentioned, Cocoon is really just a
servlet. So, it is possible to run other servlets alongside it. So, you
can run your existing cosign servlet alongside Cocoon as a completely
separate servlet (e.g. at /webiso-login path). I think this would work
as long as you were able to pass back some flag to let DSpace know the
person authenticated correctly. (You've probably already done this in
some way in your JSPUI implementation of this work...so, it likely would
be similar logic to that)

Again, that's just off the top of my head. Which way you choose is
entirely up to you.

Good luck,

- Tim

On 7/11/2011 8:36 AM, Blanco, Jose wrote:
> Any suggestions? Really stuck here.
>
> *From:*Blanco, Jose [mailto:bla...@umich.edu]
> *Sent:* Wednesday, July 06, 2011 3:09 PM
> *To:* Mark Diggory
> *Cc:* dspac...@lists.sourceforge.net
> *Subject:* Re: [Dspace-tech] adding cosing to manakin
>
> Mark, I’m getting closer, now I can get the cosign page and login
> successfully, but what I did is map the /webiso-login to the servlet Cocoon.
>
> <servlet-mapping>
>
> <servlet-name>Cocoon</servlet-name>
>
> <url-pattern>/webiso-login</url-pattern>
>
> </servlet-mapping>
>
> In the jsp environment I had it mapped to a specifc servlet that did
> some special things, but I’m not sure how to do this in the xmlui
> environment. In the xmlui area there is only one servlet – Cocoon. Where
> do I put my jspui servlet code to handle auth? As you can tell I’m new
> to Cocoon.
>
> Thank you!
>
> Jose
>
> *From:*mdig...@gmail.com [mailto:mdig...@gmail.com] *On Behalf Of
> *Mark Diggory
> *Sent:* Monday, June 27, 2011 8:26 PM
> *To:* Blanco, Jose
> *Cc:* dspac...@lists.sourceforge.net
> *Subject:* Re: [Dspace-tech] adding cosing to manakin

>
> No, each webapp needs to list its needed dependencies separately.
> Listing cosign as a dependency in dspace/pom.xml will only place it into
> the commandline application lib directory.
>
> On Fri, Jun 24, 2011 at 8:33 AM, Blanco, Jose <bla...@umich.edu
> <mailto:bla...@umich.edu>> wrote:
>
> Mark, the dspace/pom.xml is the only place that the jscosign is listed,
> and it seems like it would hold for all the apps.
>
> Take a look.
>

> *From:*Mark Diggory [mailto:mdig...@atmire.com
> <mailto:mdig...@atmire.com>]
> *Sent:* Friday, June 24, 2011 1:48 AM
> *To:* Blanco, Jose
> *Cc:* dspac...@lists.sourceforge.net
> <mailto:dspac...@lists.sourceforge.net>
> *Subject:* Re: [Dspace-tech] adding cosing to manakin

> <http://blancoj.dev.deepblue.lib.umich.edu/WEB-INF/web.xml>

> DSpac...@lists.sourceforge.net <mailto:DSpac...@lists.sourceforge.net>

> https://lists.sourceforge.net/lists/listinfo/dspace-tech
>
>
>
>
> --
> Mark R. Diggory

> @mire - www.atmire.com <http://www.atmire.com/>

> 2888 Loker Avenue East - Suite 305 - Carlsbad - CA - 92010
> Esperantolaan 4 - Heverlee 3001 - Belgium
>
>
> ------------------------------------------------------------------------------
> All the data continuously generated in your IT infrastructure contains a
> definitive record of customers, application performance, security
> threats, fraudulent activity and more. Splunk takes this data and makes
> sense of it. Business sense. IT sense. Common sense..
> http://p.sf.net/sfu/splunk-d2d-c1
> _______________________________________________
> DSpace-tech mailing list

> DSpac...@lists.sourceforge.net <mailto:DSpac...@lists.sourceforge.net>

> https://lists.sourceforge.net/lists/listinfo/dspace-tech
>
>
>
>
> --
> Mark R. Diggory

> @mire - www.atmire.com <http://www.atmire.com/>

> 2888 Loker Avenue East - Suite 305 - Carlsbad - CA - 92010
> Esperantolaan 4 - Heverlee 3001 - Belgium
>
>
>
> ------------------------------------------------------------------------------

> All of the data generated in your IT infrastructure is seriously valuable.
> Why? It contains a definitive record of application performance, security
> threats, fraudulent activity, and more. Splunk takes this data and makes
> sense of it. IT sense. And common sense.
> http://p.sf.net/sfu/splunk-d2d-c2

[Robin Taylor]

Hi Jose,

See attached. The web.xml is where you configure Cosign as a filter. The
Sitemap is where you configure your Action to look for the credentials
that should have been added to the request by Cosign. Please excuse any
dodgy debugging code left in the source.

Please ask if you have any questions.

Cheers, Robin.




On Tue, 2011-10-04 at 16:10 +0100, Blanco, Jose wrote:
> Robin,
>
> When you get a chance could you send me the Action code and the sitemap you used to get cosign running in the xmlui environment. I'd like to give it a try.
>
> Thank you!
> Jose
>
> -----Original Message-----
> From: TAYLOR Robin [mailto:Robin....@ed.ac.uk]
> Sent: Saturday, July 16, 2011 4:42 AM
> To: Mark Diggory
> Cc: Blanco, Jose; dspac...@lists.sourceforge.net
> Subject: RE: [Dspace-tech] adding cosing to manakin
>
> Will do. Unfortunately I'm on holiday for the next two weeks and don't have access to the source code so there will be a delay.
>
> Cheers.
>
> ________________________________________
> From: mdig...@gmail.com [mdig...@gmail.com] On Behalf Of Mark Diggory [mdig...@atmire.com]
> Sent: 15 July 2011 18:48
> To: TAYLOR Robin
> Cc: Blanco, Jose; dspac...@lists.sourceforge.net

> Subject: Re: [Dspace-tech] adding cosing to manakin
>

> Robin,
>
> Can you post the Action code and the sitemap you used here? I think
> Jose needs to see this in a complete context. Likewise, maybe its
> something we can write a cosine authenticator addon for future dspace
> releases.
>
> Mark
>
> On Tue, Jul 12, 2011 at 8:22 AM, Robin Taylor <robin....@ed.ac.uk> wrote:
> > Hi Jose,
> >
> > Not sure if I am understanding the problem correctly but I have had
> > Cosign working with the XMLUI before so here is what we did...
> >
> > 1. Add the Cosign Filter to the web.xml. That should cause you to get
> > redirected to your 'cosign' login page'.
> >
> > 2. Add a new Cocoon Action to the main Cocoon sitemap.xmap. to invoke a
> > new class. Cosign will have added the 'principal' to the incoming
> > request, this new class should extract that info and do whatever you
> > want with it eg find a matching eperson.
> >
> > <map:pipeline>
> > <map:match pattern="no-account">
> > <!-- We have already checked the login and failed -->
> > <map:mount check-reload="no" src="themes/themes.xmap"
> > uri-prefix=""/>
> > </map:match>
> >
> > <map:match pattern="**">
> > <map:act type="CheckLogin"/>
> > <map:mount check-reload="no" src="themes/themes.xmap"
> > uri-prefix=""/>
> > </map:match>
> > </map:pipeline>
> >
> > (Apologies for the line wrapping)
> >
> >
> > Its worth pointing out that we were protecting the whole repo, hence the
> > check on pattern="**". If this sounds like what you need then reply and
> > I'll send you more details.
> >
> > Cheers, Robin.

> >
> >
> >
> >
> >
> > On Mon, 2011-07-11 at 14:36 +0100, Blanco, Jose wrote:
> >> Any suggestions? Really stuck here.
> >>
> >>
> >>

> >> From: Blanco, Jose [mailto:bla...@umich.edu]
> >> Sent: Wednesday, July 06, 2011 3:09 PM
> >> To: Mark Diggory
> >> Cc: dspac...@lists.sourceforge.net
> >> Subject: Re: [Dspace-tech] adding cosing to manakin
> >>
> >>
> >>
> >>

> >> Mark, I'm getting closer, now I can get the cosign page and login
> >> successfully, but what I did is map the /webiso-login to the servlet
> >> Cocoon.
> >>
> >>
> >>
> >> <servlet-mapping>
> >>

> >> <servlet-name>Cocoon</servlet-name>
> >>
> >> <url-pattern>/webiso-login</url-pattern>
> >>
> >> </servlet-mapping>
> >>
> >>
> >>

> >> In the jsp environment I had it mapped to a specifc servlet that did
> >> some special things, but I'm not sure how to do this in the xmlui

> >> environment. In the xmlui area there is only one servlet - Cocoon.

> >> Where do I put my jspui servlet code to handle auth? As you can tell
> >> I'm new to Cocoon.
> >>
> >>
> >>
> >> Thank you!
> >>
> >> Jose
> >>
> >>
> >>

> > ------------------------------------------------------------------------------
> > All of the data generated in your IT infrastructure is seriously valuable.
> > Why? It contains a definitive record of application performance, security
> > threats, fraudulent activity, and more. Splunk takes this data and makes
> > sense of it. IT sense. And common sense.
> > http://p.sf.net/sfu/splunk-d2d-c2

[Blanco, Jose]

Robin, I think I have something wrong in my consignConfig.xml file. Could you send me yours.

Thanks!
Jose

-----Original Message-----
From: Blanco, Jose [mailto:bla...@umich.edu]
Sent: Tuesday, October 04, 2011 3:00 PM
To: Robin Taylor
Cc: dspac...@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin

Ok, I see the problem with this. Since I'm using CosignIII I needed to pass in another parameter. I'm past this error, but now I'm getting:

2011-10-04 14:56:30,989 ERROR edu.umich.auth.cosign.CosignAuthenticationFilterIII @ Cosign filter defined to pickup URL but no service defined.
2011-10-04 14:56:30,989 ERROR edu.umich.auth.cosign.CosignAuthenticationFilterIII @ Cosign filter defined to pickup URL but no service defined.
javax.servlet.ServletException: Cosign filter defined to pickup URL but no service defined.
at edu.umich.auth.cosign.CosignAuthenticationFilterIII.doFilter(CosignAuthenticationFilterIII.java:355)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
at org.apache.catalina.core.ApplicationFilterC

-----Original Message-----
From: Blanco, Jose [mailto:bla...@umich.edu]
Sent: Tuesday, October 04, 2011 2:34 PM
To: Robin Taylor
Cc: dspac...@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin

Robin, I'm getting the following error when I try to go to the web site.

2011-10-04 14:25:37,293 INFO edu.umich.auth.cosign.CosignAuthenticationFilterIII @ CosignAuthenticationFilter: validateFilter called
2011-10-04 14:25:37,293 INFO edu.umich.auth.cosign.CosignAuthenticationFilterIII @ CosignAuthenticationFilter: Filter configuration file: /l1/dspace/repository/dev/config/cosignConfigBlancoj.xml
2011-10-04 14:25:37,293 ERROR edu.umich.auth.cosign.CosignAuthenticationFilterIII @ AuthorizationFilter failed to initialize.
javax.servlet.ServletException: AuthorizationFilter failed to initialize.
at edu.umich.auth.cosign.CosignAuthenticationFilterIII.validateFilter(CosignAuthenticationFilterIII.java:151)
at edu.umich.auth.cosign.CosignAuthenticationFilterIII.doFilter(CosignAuthenticationFilterIII.java:281)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)

This is what I have in cosignCofigBlancoj.xml


<services>
<service name="cosign-blancoj.dev.deepblue.lib">
<!-- new elements for 2.0 beta multi factor -->
<reqfactor>
<factor>UMICH.EDU</factor>
</reqfactor>
<protected>/cgi/deposit*</protected>
<protected>/webiso-login</protected>
</service>
</services>


I think protected, should say cocoon. Right?

-----Original Message-----
From: Blanco, Jose [mailto:bla...@umich.edu]
Sent: Tuesday, October 04, 2011 1:34 PM
To: Robin Taylor
Cc: dspac...@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin

I see now it's from:

dspace-xmlui/dspace-xmlui-webapp/src/main/webapp

-----Original Message-----
From: Blanco, Jose [mailto:bla...@umich.edu]
Sent: Tuesday, October 04, 2011 1:18 PM
To: Robin Taylor
Cc: dspac...@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin

Robin, Is this the sitemap that goes in:

dspace-xmlui/dspace-xmlui-api/src/main/resources/aspects/EPerson

http://p.sf.net/sfu/splunk-d2dcopy1

_______________________________________________
DSpace-tech mailing list
DSpac...@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.

http://p.sf.net/sfu/splunk-d2dcopy1

_______________________________________________
DSpace-tech mailing list
DSpac...@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.

http://p.sf.net/sfu/splunk-d2dcopy1

_______________________________________________
DSpace-tech mailing list
DSpac...@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.

http://p.sf.net/sfu/splunk-d2dcopy1

[Blanco, Jose]

Robin,

When you get a chance could you send me the Action code and the sitemap you used to get cosign running in the xmlui environment. I'd like to give it a try.

Thank you!
Jose

-----Original Message-----
From: TAYLOR Robin [mailto:Robin....@ed.ac.uk]
Sent: Saturday, July 16, 2011 4:42 AM
To: Mark Diggory
Cc: Blanco, Jose; dspac...@lists.sourceforge.net
Subject: RE: [Dspace-tech] adding cosing to manakin

Will do. Unfortunately I'm on holiday for the next two weeks and don't have access to the source code so there will be a delay.

Cheers.

________________________________________
From: mdig...@gmail.com [mdig...@gmail.com] On Behalf Of Mark Diggory [mdig...@atmire.com]
Sent: 15 July 2011 18:48
To: TAYLOR Robin

Cc: Blanco, Jose; dspac...@lists.sourceforge.net

Subject: Re: [Dspace-tech] adding cosing to manakin

>> Cc: dspac...@lists.sourceforge.net
>> Subject: Re: [Dspace-tech] adding cosing to manakin
>>
>>
>>
>>

>> Mark, I'm getting closer, now I can get the cosign page and login
>> successfully, but what I did is map the /webiso-login to the servlet
>> Cocoon.
>>
>>
>>
>> <servlet-mapping>
>>

>> <servlet-name>Cocoon</servlet-name>
>>
>> <url-pattern>/webiso-login</url-pattern>
>>
>> </servlet-mapping>
>>
>>
>>

>> In the jsp environment I had it mapped to a specifc servlet that did
>> some special things, but I'm not sure how to do this in the xmlui
>> environment. In the xmlui area there is only one servlet - Cocoon.
>> Where do I put my jspui servlet code to handle auth? As you can tell
>> I'm new to Cocoon.
>>
>>
>>
>> Thank you!
>>
>> Jose
>>
>>
>>
>> From: mdig...@gmail.com [mailto:mdig...@gmail.com] On Behalf Of Mark
>> Diggory
>> Sent: Monday, June 27, 2011 8:26 PM

> ------------------------------------------------------------------------------

> All of the data generated in your IT infrastructure is seriously valuable.
> Why? It contains a definitive record of application performance, security
> threats, fraudulent activity, and more. Splunk takes this data and makes
> sense of it. IT sense. And common sense.
> http://p.sf.net/sfu/splunk-d2d-c2

> _______________________________________________
> DSpace-tech mailing list
> DSpac...@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/dspace-tech
>



--
Mark R. Diggory
@mire - www.atmire.com
2888 Loker Avenue East - Suite 305 - Carlsbad - CA - 92010
Esperantolaan 4 - Heverlee 3001 - Belgium
--

The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.

[Blanco, Jose]

Robin, I'm getting the following error when I try to go to the web site.

2011-10-04 14:25:37,293 INFO edu.umich.auth.cosign.CosignAuthenticationFilterIII @ CosignAuthenticationFilter: validateFilter called
2011-10-04 14:25:37,293 INFO edu.umich.auth.cosign.CosignAuthenticationFilterIII @ CosignAuthenticationFilter: Filter configuration file: /l1/dspace/repository/dev/config/cosignConfigBlancoj.xml
2011-10-04 14:25:37,293 ERROR edu.umich.auth.cosign.CosignAuthenticationFilterIII @ AuthorizationFilter failed to initialize.
javax.servlet.ServletException: AuthorizationFilter failed to initialize.
at edu.umich.auth.cosign.CosignAuthenticationFilterIII.validateFilter(CosignAuthenticationFilterIII.java:151)
at edu.umich.auth.cosign.CosignAuthenticationFilterIII.doFilter(CosignAuthenticationFilterIII.java:281)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)

This is what I have in cosignCofigBlancoj.xml


<services>
<service name="cosign-blancoj.dev.deepblue.lib">
<!-- new elements for 2.0 beta multi factor -->
<reqfactor>
<factor>UMICH.EDU</factor>
</reqfactor>
<protected>/cgi/deposit*</protected>
<protected>/webiso-login</protected>
</service>
</services>


I think protected, should say cocoon. Right?



-----Original Message-----

From: Blanco, Jose [mailto:bla...@umich.edu]

Sent: Tuesday, October 04, 2011 1:34 PM
To: Robin Taylor

Cc: dspac...@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin

I see now it's from:

dspace-xmlui/dspace-xmlui-webapp/src/main/webapp

-----Original Message-----

From: Blanco, Jose [mailto:bla...@umich.edu]

Sent: Tuesday, October 04, 2011 1:18 PM
To: Robin Taylor

Cc: dspac...@lists.sourceforge.net
Subject: Re: [Dspace-tech] adding cosing to manakin

Robin, Is this the sitemap that goes in:

dspace-xmlui/dspace-xmlui-api/src/main/resources/aspects/EPerson

-----Original Message-----
From: Robin Taylor [mailto:robin....@ed.ac.uk]

http://p.sf.net/sfu/splunk-d2dcopy1

_______________________________________________
DSpace-tech mailing list
DSpac...@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/dspace-tech

------------------------------------------------------------------------------
All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.

http://p.sf.net/sfu/splunk-d2dcopy1

[Blanco, Jose]

Robin, Is this the sitemap that goes in:

dspace-xmlui/dspace-xmlui-api/src/main/resources/aspects/EPerson

-----Original Message-----
From: Robin Taylor [mailto:robin....@ed.ac.uk]

[Blanco, Jose]

Robin, I have not made much progress with this. Do you have any idea as to what might be happening.

Thank you!
Jose

-----Original Message-----
From: Blanco, Jose
Sent: Tuesday, October 04, 2011 4:29 PM
To: Blanco, Jose; Robin Taylor
Cc: dspac...@lists.sourceforge.net
Subject: RE: [Dspace-tech] adding cosing to manakin

Ok, I have a new clue to the problem. I changed cosignConfig to have:

<services>
<service name="cosign-blancoj.dev.deepblue.lib">
<!-- new elements for 2.0 beta multi factor -->
<reqfactor>
<factor>UMICH.EDU</factor>
</reqfactor>
<protected>/cgi/deposit*</protected>

<protected>/</protected>
</service>
</services>

NOTICE the <protected>/</protected>, so when I go to the "/" page I'm asked to cosign in and all goes well - I login and I'm back at the "/" page, but as soon as I hit a link from there, say "/community-list", I get

HTTP Status 503 - Cosign filter defined to pickup URL but no service defined.


It almost seems like you have to say something like

"*" do cosign?

Any ideas?

[Blanco, Jose]

I see now it's from:

dspace-xmlui/dspace-xmlui-webapp/src/main/webapp

-----Original Message-----

From: Blanco, Jose [mailto:bla...@umich.edu]

Sent: Tuesday, October 04, 2011 1:18 PM
To: Robin Taylor

------------------------------------------------------------------------------

All the data continuously generated in your IT infrastructure contains a
definitive record of customers, application performance, security
threats, fraudulent activity and more. Splunk takes this data and makes
sense of it. Business sense. IT sense. Common sense.

http://p.sf.net/sfu/splunk-d2dcopy1

[Blanco, Jose]

Mark, I’m getting closer, now I can get the cosign page and login successfully, but what I did is map the /webiso-login to the servlet Cocoon.

 

  <servlet-mapping>

    <servlet-name>Cocoon</servlet-name>

    <url-pattern>/webiso-login</url-pattern>

  </servlet-mapping>

 

In the jsp environment I had it mapped to a specifc servlet that did some special things, but I’m not sure how to do this in the xmlui environment.  In the xmlui area there is only one servlet – Cocoon.   Where do I put my jspui servlet code to handle auth?  As you can tell I’m new to Cocoon. 

 

Thank you!

Jose

 

From: mdig...@gmail.com [mailto:mdig...@gmail.com] On Behalf Of Mark Diggory

Sent: Monday, June 27, 2011 8:26 PM

[Blanco, Jose]

Ok, I see the problem with this. Since I'm using CosignIII I needed to pass in another parameter. I'm past this error, but now I'm getting:

2011-10-04 14:56:30,989 ERROR edu.umich.auth.cosign.CosignAuthenticationFilterIII @ Cosign filter defined to pickup URL but no service defined.
2011-10-04 14:56:30,989 ERROR edu.umich.auth.cosign.CosignAuthenticationFilterIII @ Cosign filter defined to pickup URL but no service defined.
javax.servlet.ServletException: Cosign filter defined to pickup URL but no service defined.
at edu.umich.auth.cosign.CosignAuthenticationFilterIII.doFilter(CosignAuthenticationFilterIII.java:355)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:215)
at org.apache.catalina.core.ApplicationFilterC

[Blanco, Jose]

Any suggestions?  Really stuck here.

 

From: Blanco, Jose [mailto:bla...@umich.edu]

Sent: Wednesday, July 06, 2011 3:09 PM
To: Mark Diggory

[Blanco, Jose]

Ok, I have a new clue to the problem. I changed cosignConfig to have:

<services>
<service name="cosign-blancoj.dev.deepblue.lib">
<!-- new elements for 2.0 beta multi factor -->
<reqfactor>
<factor>UMICH.EDU</factor>
</reqfactor>
<protected>/cgi/deposit*</protected>

<protected>/</protected>
</service>
</services>

NOTICE the <protected>/</protected>, so when I go to the "/" page I'm asked to cosign in and all goes well - I login and I'm back at the "/" page, but as soon as I hit a link from there, say "/community-list", I get

HTTP Status 503 - Cosign filter defined to pickup URL but no service defined.


It almost seems like you have to say something like

"*" do cosign?

Any ideas?

Thank you!
Jose
-----Original Message-----

From: Blanco, Jose
Sent: Tuesday, October 04, 2011 3:44 PM

[Robin Taylor]

[Mark Diggory]

Robin,

Can you post the Action code and the sitemap you used here? I think
Jose needs to see this in a complete context. Likewise, maybe its
something we can write a cosine authenticator addon for future dspace
releases.

Mark

On Tue, Jul 12, 2011 at 8:22 AM, Robin Taylor <robin....@ed.ac.uk> wrote:

> ------------------------------------------------------------------------------

> All of the data generated in your IT infrastructure is seriously valuable.
> Why? It contains a definitive record of application performance, security
> threats, fraudulent activity, and more. Splunk takes this data and makes
> sense of it. IT sense. And common sense.
> http://p.sf.net/sfu/splunk-d2d-c2

[TAYLOR Robin]

Will do. Unfortunately I'm on holiday for the next two weeks and don't have access to the source code so there will be a delay.

Cheers.

________________________________________
From: mdig...@gmail.com [mdig...@gmail.com] On Behalf Of Mark Diggory [mdig...@atmire.com]
Sent: 15 July 2011 18:48
To: TAYLOR Robin

Cc: Blanco, Jose; dspac...@lists.sourceforge.net