Limit access to certain pages does not work on CMS 12.1.0

41 views
Skip to first unread message

thomasm...@gmail.com

unread,
Jan 10, 2018, 6:52:49 AM1/10/18
to Hippo Community
I followed the link https://www.onehippo.org/library/concepts/security/how-to-limit-read-access-for-different-site-visitors.html to limit access to different types of visitors. 

So, I set up 2 content pages,  page 'a'  for customer, staff and page 'b' only for staff. Even though it prompts for a user/pass when access any of these contents, page 'b' is also visible to customers. It should have been visible only to staff.

Please can someone check and correct me. 

I've checked the config multiple times, cant figure out why it is not working.

Niels van Kampenhout

unread,
Jan 10, 2018, 11:26:42 AM1/10/18
to Hippo Community
Hi,

I've put this on the todo list to verify. Thanks for your feedback.

Niels

thomasm...@gmail.com

unread,
Jan 11, 2018, 7:14:10 AM1/11/18
to Hippo Community
To add, this was done after building the hippo gogreen website https://www.onehippo.org/trails/developer-trail/introduction.html

Not sure whether that might be the cause.

thomasm...@gmail.com

unread,
Jan 12, 2018, 5:32:12 AM1/12/18
to Hippo Community
Also it seems that css on those protected pages are not rendered.

thomasm...@gmail.com

unread,
Jan 13, 2018, 5:46:29 AM1/13/18
to Hippo Community
Below is the stacktrace when accessing the site after login via spring:

[INFO] [talledLocalContainer] 13.01.2018 04:44:17 WARN  http-nio-8080-exec-9 [HstComponentInvokerImpl.invokeBeforeRender:191] Component exception caught on window featured-products with component org.onehippo.cms7.essentials.components.EssentialsListPickerComponent: java.l
[INFO] [talledLocalContainer] java.lang.reflect.UndeclaredThrowableException: null
[INFO] [talledLocalContainer]   at com.sun.proxy.$Proxy149.getUserID(Unknown Source) ~[?:?]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.site.request.CachingObjectConverter$CacheKey.<init>(CachingObjectConverter.java:188) ~[hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.site.request.CachingObjectConverter$CacheKey.<init>(CachingObjectConverter.java:183) ~[hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.site.request.CachingObjectConverter.getObject(CachingObjectConverter.java:72) ~[hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.content.beans.manager.ObjectBeanManagerImpl.getObject(ObjectBeanManagerImpl.java:33) ~[hst-content-beans-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.site.request.HstRequestContextImpl.getSiteContentBaseBean(HstRequestContextImpl.java:760) ~[hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.onehippo.cms7.essentials.components.CommonComponent.getHippoBeanForPath(CommonComponent.java:112) ~[hippo-essentials-components-hst-4.0.1.jar:4.0.1]
[INFO] [talledLocalContainer]   at org.onehippo.cms7.essentials.components.CommonComponent.addBeanForPath(CommonComponent.java:299) ~[hippo-essentials-components-hst-4.0.1.jar:4.0.1]
[INFO] [talledLocalContainer]   at org.onehippo.cms7.essentials.components.EssentialsListPickerComponent.getDocumentItems(EssentialsListPickerComponent.java:51) ~[hippo-essentials-components-hst-4.0.1.jar:4.0.1]
[INFO] [talledLocalContainer]   at org.onehippo.cms7.essentials.components.EssentialsListPickerComponent.doBeforeRender(EssentialsListPickerComponent.java:40) ~[hippo-essentials-components-hst-4.0.1.jar:4.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstComponentInvokerImpl.invokeBeforeRender(HstComponentInvokerImpl.java:170) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) ~[?:1.8.0_152]
[INFO] [talledLocalContainer]   at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_152]
[INFO] [talledLocalContainer]   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_152]
[INFO] [talledLocalContainer]   at java.lang.reflect.Method.invoke(Unknown Source) ~[?:1.8.0_152]
[INFO] [talledLocalContainer]   at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:302) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:190) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:157) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:85) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.PersistableSessionAroundAdvice.invoke(PersistableSessionAroundAdvice.java:68) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at sun.reflect.GeneratedMethodAccessor118.invoke(Unknown Source) ~[?:?]
[INFO] [talledLocalContainer]   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_152]
[INFO] [talledLocalContainer]   at java.lang.reflect.Method.invoke(Unknown Source) ~[?:1.8.0_152]
[INFO] [talledLocalContainer]   at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethodWithGivenArgs(AbstractAspectJAdvice.java:620) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethod(AbstractAspectJAdvice.java:609) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.aspectj.AspectJAroundAdvice.invoke(AspectJAroundAdvice.java:68) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.aspectj.MethodInvocationProceedingJoinPoint.proceed(MethodInvocationProceedingJoinPoint.java:85) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.logging.HstComponentInvokerProfiler.profile(HstComponentInvokerProfiler.java:60) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at sun.reflect.GeneratedMethodAccessor117.invoke(Unknown Source) ~[?:?]
[INFO] [talledLocalContainer]   at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) ~[?:1.8.0_152]
[INFO] [talledLocalContainer]   at java.lang.reflect.Method.invoke(Unknown Source) ~[?:1.8.0_152]
[INFO] [talledLocalContainer]   at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethodWithGivenArgs(AbstractAspectJAdvice.java:620) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.aspectj.AbstractAspectJAdvice.invokeAdviceMethod(AbstractAspectJAdvice.java:609) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.aspectj.AspectJAroundAdvice.invoke(AspectJAroundAdvice.java:68) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:92) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:179) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:208) [spring-aop-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at com.sun.proxy.$Proxy125.invokeBeforeRender(Unknown Source) [?:?]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.AggregationValve.processWindowsBeforeRender(AggregationValve.java:423) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.AggregationValve.invoke(AggregationValve.java:143) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.ComponentRenderingValve.invoke(ComponentRenderingValve.java:34) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.PageCachingValve.invoke(PageCachingValve.java:62) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.ESIPageInfoScanningValve.invoke(ESIPageInfoScanningValve.java:80) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.PageInfoRenderingValve.invoke(PageInfoRenderingValve.java:50) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.ResourceServingValve.invoke(ResourceServingValve.java:40) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.ActionValve.invoke(ActionValve.java:47) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.LocalizationValve.invoke(LocalizationValve.java:96) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.ContextResolvingValve.invoke(ContextResolvingValve.java:101) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.JCRSessionStatefulConcurrencyValve.invoke(JCRSessionStatefulConcurrencyValve.java:56) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.SubjectBasedSessionValve.invoke(SubjectBasedSessionValve.java:58) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.SecurityValve$1.run(SecurityValve.java:186) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.SecurityValve$1.run(SecurityValve.java:183) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at java.security.AccessController.doPrivileged(Native Method) ~[?:1.8.0_152]
[INFO] [talledLocalContainer]   at javax.security.auth.Subject.doAsPrivileged(Unknown Source) [?:1.8.0_152]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.security.HstSubject.doAsPrivileged(HstSubject.java:98) [hst-commons-5.0.1.jar:4.0.0]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.SecurityValve.invoke(SecurityValve.java:183) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.onehippo.forge.security.support.springsecurity.container.SpringSecurityValve.invoke(SpringSecurityValve.java:106) [hst-springsec-1.1.3.jar:?]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.CmsSecurityValve.invoke(CmsSecurityValve.java:87) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.InitializationValve.invoke(InitializationValve.java:49) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline$Invocation.invokeNext(HstSitePipeline.java:288) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline.invokeValves(HstSitePipeline.java:173) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstSitePipeline.invoke(HstSitePipeline.java:155) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.container.HstRequestProcessorImpl.processRequest(HstRequestProcessorImpl.java:79) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.container.HstDelegateeFilterBean.processResolvedSiteMapItem(HstDelegateeFilterBean.java:666) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.container.HstDelegateeFilterBean.doFilter(HstDelegateeFilterBean.java:361) [hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.container.DelegatingFilter.doFilter(DelegatingFilter.java:84) [hst-commons-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.container.HstFilter.doFilter(HstFilter.java:51) [hst-commons-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.container.XSSUrlFilter.doFilter(XSSUrlFilter.java:51) [hst-commons-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:121) [spring-web-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) [spring-web-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:320) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:127) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:91) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:119) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.session.SessionManagementFilter.doFilter(SessionManagementFilter.java:137) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.authentication.AnonymousAuthenticationFilter.doFilter(AnonymousAuthenticationFilter.java:111) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.servletapi.SecurityContextHolderAwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter.java:170) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.savedrequest.RequestCacheAwareFilter.doFilter(RequestCacheAwareFilter.java:63) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at com.athene.portal.components.filter.PortalAuthFilter.doFilter(PortalAuthFilter.java:62) [classes/:0.1.0-SNAPSHOT]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.authentication.www.BasicAuthenticationFilter.doFilterInternal(BasicAuthenticationFilter.java:158) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) [spring-web-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.authentication.ui.DefaultLoginPageGeneratingFilter.doFilter(DefaultLoginPageGeneratingFilter.java:204) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.csrf.CsrfFilter.doFilterInternal(CsrfFilter.java:100) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) [spring-web-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:64) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) [spring-web-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107) [spring-web-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178) [spring-security-web-5.0.0.RELEASE.jar:5.0.0.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346) [spring-web-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:262) [spring-web-4.2.6.RELEASE.jar:4.2.6.RELEASE]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:198) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:478) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:140) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:80) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:624) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:87) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342) [catalina.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:799) [tomcat-coyote.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66) [tomcat-coyote.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:861) [tomcat-coyote.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1455) [tomcat-coyote.jar:8.5.15]
[INFO] [talledLocalContainer]   at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) [tomcat-coyote.jar:8.5.15]
[INFO] [talledLocalContainer]   at java.util.concurrent.ThreadPoolExecutor.runWorker(Unknown Source) [?:1.8.0_152]
[INFO] [talledLocalContainer]   at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) [?:1.8.0_152]
[INFO] [talledLocalContainer]   at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) [tomcat-util.jar:8.5.15]
[INFO] [talledLocalContainer]   at java.lang.Thread.run(Unknown Source) [?:1.8.0_152]
[INFO] [talledLocalContainer] Caused by: javax.jcr.LoginException: LoginModule ignored Credentials
[INFO] [talledLocalContainer]   at org.apache.jackrabbit.core.RepositoryImpl.login(RepositoryImpl.java:1526) ~[?:?]
[INFO] [talledLocalContainer]   at org.hippoecm.repository.jackrabbit.RepositoryImpl.login(RepositoryImpl.java:367) ~[?:?]
[INFO] [talledLocalContainer]   at org.hippoecm.repository.impl.RepositoryDecorator.login(RepositoryDecorator.java:71) ~[?:?]
[INFO] [talledLocalContainer]   at org.hippoecm.repository.HippoRepositoryImpl.login(HippoRepositoryImpl.java:106) ~[hippo-repository-connector-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.repository.HippoRepositoryImpl.login(HippoRepositoryImpl.java:118) ~[hippo-repository-connector-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.jcr.pool.JcrHippoRepository.login(JcrHippoRepository.java:207) ~[hst-session-pool-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.jcr.LazySessionDelegatingRepository$LazySessionInvoker.invoke(LazySessionDelegatingRepository.java:192) ~[hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.proxy.ProxyFactory$InvokerInvocationHandler.invokeImpl(ProxyFactory.java:146) ~[hst-content-beans-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.proxy.ProxyFactory$AbstractInvocationHandler.invoke(ProxyFactory.java:126) ~[hst-content-beans-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   ... 151 more
[INFO] [talledLocalContainer] Caused by: javax.security.auth.login.FailedLoginException: LoginModule ignored Credentials
[INFO] [talledLocalContainer]   at org.apache.jackrabbit.core.security.authentication.LocalAuthContext.login(LocalAuthContext.java:87) ~[?:?]
[INFO] [talledLocalContainer]   at org.apache.jackrabbit.core.RepositoryImpl.login(RepositoryImpl.java:1498) ~[?:?]
[INFO] [talledLocalContainer]   at org.hippoecm.repository.jackrabbit.RepositoryImpl.login(RepositoryImpl.java:367) ~[?:?]
[INFO] [talledLocalContainer]   at org.hippoecm.repository.impl.RepositoryDecorator.login(RepositoryDecorator.java:71) ~[?:?]
[INFO] [talledLocalContainer]   at org.hippoecm.repository.HippoRepositoryImpl.login(HippoRepositoryImpl.java:106) ~[hippo-repository-connector-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.repository.HippoRepositoryImpl.login(HippoRepositoryImpl.java:118) ~[hippo-repository-connector-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.jcr.pool.JcrHippoRepository.login(JcrHippoRepository.java:207) ~[hst-session-pool-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.core.jcr.LazySessionDelegatingRepository$LazySessionInvoker.invoke(LazySessionDelegatingRepository.java:192) ~[hst-core-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.proxy.ProxyFactory$InvokerInvocationHandler.invokeImpl(ProxyFactory.java:146) ~[hst-content-beans-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   at org.hippoecm.hst.proxy.ProxyFactory$AbstractInvocationHandler.invoke(ProxyFactory.java:126) ~[hst-content-beans-5.0.1.jar:5.0.1]
[INFO] [talledLocalContainer]   ... 151 more
[INFO] [talledLocalContainer] 13.01.2018 04:44:18 DEBUG http-nio-8080-exec-9 [AbstractBeanFactory.doGetBean:251] Returning cached instance of singleton bean 'componentInvokerProfiler'
[INFO] [talledLocalContainer] 13.01.2018 04:44:18 DEBUG http-nio-8080-exec-9 [AbstractBeanFactory.doGetBean:251] Returning cached instance of singleton bean 'persistableSessionAroundAdvice'
[INFO] [talledLocalContainer] 13.01.2018 04:44:18 DEBUG http-nio-8080-exec-9 [HstComponentInvokerImpl.invokeBeforeRender:167] invoking doBeforeRender of component: org.onehippo.cms7.essentials.components.EssentialsNewsComponent
[INFO] [talledLocalContainer] 13.01.2018 04:44:18 DEBUG http-nio-8080-exec-9 [ComponentConfigurationImpl.getParameter:73] Return value 'portal:newsdocument' for property 'documentTypes'
[INFO] [talledLocalContainer] 13.01.2018 04:44:18 DEBUG http-nio-8080-exec-9 [HstParameterInfoProxyFactoryImpl$ParameterInfoInvocationHandler.getParameterValue:203] For prefixedParameterName 'documentTypes'  returning value 'portal:newsdocument'
[INFO] [talledLocalContainer] 13.01.2018 04:44:18 DEBUG http-nio-8080-exec-9 [ComponentConfigurationImpl.getParameter:73] Return value 'news' for property 'path'
[INFO] [talledLocalContainer] 13.01.2018 04:44:18 DEBUG http-nio-8080-exec-9 [HstParameterInfoProxyFactoryImpl$ParameterInfoInvocationHandler.getParameterValue:203] For prefixedParameterName 'path'  returning value 'news'

Niels van Kampenhout

unread,
Jan 15, 2018, 8:37:57 AM1/15/18
to Hippo Community
Hi,

I verified https://www.onehippo.org/library/concepts/security/how-to-limit-read-access-for-different-site-visitors.html following the instructions, i.e. with a fresh archetype 12.1.0 project with Simple Content added, and it worked as described.

Right now, I don't have time to verify with the gogreen tutorial project, but since that's built on top of the same archetype and doesn't really add anything complex, theoretically the instructions should work there too.

I haven't seen the exception "javax.jcr.LoginException: LoginModule ignored Credentials" before, hopefully there is anyone else on the list who has a clue what that could mean.

Regards,
Niels


--
Hippo Community Group: The place for all discussions and announcements about Hippo CMS (and HST, repository etc. etc.)
 
To post to this group, send email to hippo-community@googlegroups.com
RSS: https://groups.google.com/group/hippo-community/feed/rss_v2_0_msgs.xml?num=50
---
You received this message because you are subscribed to the Google Groups "Hippo Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to hippo-community+unsubscribe@googlegroups.com.
Visit this group at https://groups.google.com/group/hippo-community.
For more options, visit https://groups.google.com/d/optout.

Reply all
Reply to author
Forward
0 new messages