Hi!
I am trying to use shiro with keycloak and Pac4j to authenticate in zeppelin, but I think that I am missing something in the configuration. Could someone help me?
My shiro.ini file:
[main]
sessionManager = org.apache.shiro.web.session.mgt.DefaultWebSessionManager
securityManager.sessionManager = $sessionManager
securityManager.sessionManager.globalSessionTimeout = 86400000
oidcConfig = org.pac4j.oidc.config.KeycloakOidcConfiguration
oidcConfig.realm = axesor
oidcConfig.baseUri = https://nep.pro.gc.axesor.com/auth
oidcConfig.clientId = zeppelin
oidcConfig.secret = xxxxxxxxxxxxxxxxxxxxxxxxxx
oidcConfig.clientAuthenticationMethodAsString = client_secret_basic
oidcConfig.scope = openid
oidcConfig.responseType = code
oidcConfig.logoutUrl = https://nep.pro.gc.axesor.com/auth/realms/axesor/protocol/openid-connect/logout
keycloakOidcClient = org.pac4j.oidc.client.KeycloakOidcClient
keycloakOidcClient.configuration = $oidcConfig
requireRoleAdmin = org.pac4j.core.authorization.authorizer.RequireAnyRoleAuthorizer
requireRoleAdmin.elements = admin_role, zeppelin_admin
clients = org.pac4j.core.client.Clients
clients.callbackUrl = https://atlax360-zeppelin-nb-dev.gc.axesor.com/api/callback
clients.clients = $keycloakOidcClient
pac4jRealm = io.buji.pac4j.realm.Pac4jRealm
pac4jRealm.principalNameAttribute = preferred_username
pac4jSubjectFactory = io.buji.pac4j.subject.Pac4jSubjectFactory
securityManager.subjectFactory = $pac4jSubjectFactory
securityManager.realm = $pac4jRealm
requireRoleAdmin = org.pac4j.core.authorization.authorizer.RequireAnyRoleAuthorizer
requireRoleAdmin.elements = admin_role
config = org.pac4j.core.config.Config
config.clients = $clients
config.authorizers = jcherrera:$requireRoleAdmin
oidcSecurityFilterAdmin = io.buji.pac4j.filter.SecurityFilter
oidcSecurityFilterAdmin.config = $config
oidcSecurityFilterAdmin.clients = KeycloakOidcClient
;oidcSecurityFilterAdmin.authorizers = jcherrera
callbackFilter = io.buji.pac4j.filter.CallbackFilter
callbackFilter.defaultUrl = https://atlax360-zeppelin-nb-dev.gc.axesor.com/
callbackFilter.config = $config
ajaxRequestResolver = org.pac4j.core.http.ajax.DefaultAjaxRequestResolver
ajaxRequestResolver.addRedirectionUrlAsHeader = true
keycloakOidcClient.ajaxRequestResolver = $ajaxRequestResolver
[urls]
/api/version = oidcSecurityFilterAdmin
/api/login/** = oidcSecurityFilterAdmin
/api/cluster/** = oidcSecurityFilterAdmin
/api/callback = callbackFilter
/api/interpreter/** = oidcSecurityFilterAdmin
/api/configurations/** = oidcSecurityFilterAdmin
/api/credential/** = oidcSecurityFilterAdmin
/** = oidcSecurityFilterAdmin
And the log file:
INFO [2023-08-02 11:14:21,329] ({main} EnvironmentLoader.java[initEnvironment]:147) - Shiro environment initialized in 917 ms.
INFO [2023-08-02 11:14:24,071] ({main} ContextHandler.java[doStart]:860) - Started o.e.j.w.WebAppContext@909217e{zeppelin-web,/,jar:file:///opt/zeppelin/zeppelin-web-0.10.1.war!/,AVAILABLE}{/opt/zeppelin/zeppelin-web-0.10.1.war}
INFO [2023-08-02 11:14:24,096] ({main} StandardDescriptorProcessor.java[visitServlet]:276) - NO JSP Support for /next, did not find org.eclipse.jetty.jsp.JettyJspServlet
INFO [2023-08-02 11:14:24,098] ({main} ContextHandler.java[log]:2303) - Initializing Shiro environment
INFO [2023-08-02 11:14:24,099] ({main} EnvironmentLoader.java[initEnvironment]:133) - Starting Shiro environment initialization.
DEBUG [2023-08-02 11:14:24,101] ({main} IniWebEnvironment.java[parseConfig]:95) - Checking any specified config locations.
DEBUG [2023-08-02 11:14:24,101] ({main} ResourceUtils.java[loadFromFile]:147) - Opening file [/opt/zeppelin/conf/shiro.ini]...
DEBUG [2023-08-02 11:14:24,102] ({main} Ini.java[load]:401) - Parsing [main]
TRACE [2023-08-02 11:14:24,103] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: sessionManager = org.apache.shiro.web.session.mgt.DefaultWebSessionManager
TRACE [2023-08-02 11:14:24,103] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: securityManager.sessionManager = $sessionManager
TRACE [2023-08-02 11:14:24,104] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: securityManager.sessionManager.globalSessionTimeout = 86400000
TRACE [2023-08-02 11:14:24,104] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcConfig = org.pac4j.oidc.config.KeycloakOidcConfiguration
TRACE [2023-08-02 11:14:24,104] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcConfig.realm = axesor
TRACE [2023-08-02 11:14:24,104] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcConfig.baseUri = https://nep.pro.gc.axesor.com/auth
TRACE [2023-08-02 11:14:24,105] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcConfig.clientId = zeppelin
TRACE [2023-08-02 11:14:24,105] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcConfig.secret = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
TRACE [2023-08-02 11:14:24,105] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcConfig.clientAuthenticationMethodAsString = client_secret_basic
TRACE [2023-08-02 11:14:24,105] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcConfig.scope = openid
TRACE [2023-08-02 11:14:24,106] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcConfig.responseType = code
TRACE [2023-08-02 11:14:24,106] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcConfig.logoutUrl = https://nep.pro.gc.axesor.com/auth/realms/axesor/protocol/openid-connect/logout
TRACE [2023-08-02 11:14:24,106] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: keycloakOidcClient = org.pac4j.oidc.client.KeycloakOidcClient
TRACE [2023-08-02 11:14:24,106] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: keycloakOidcClient.configuration = $oidcConfig
TRACE [2023-08-02 11:14:24,107] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: requireRoleAdmin = org.pac4j.core.authorization.authorizer.RequireAnyRoleAuthorizer
TRACE [2023-08-02 11:14:24,107] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: requireRoleAdmin.elements = admin_role, zeppelin_admin
TRACE [2023-08-02 11:14:24,107] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: clients = org.pac4j.core.client.Clients
TRACE [2023-08-02 11:14:24,108] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: clients.callbackUrl = https://atlax360-zeppelin-nb-dev.gc.axesor.com/api/callback
TRACE [2023-08-02 11:14:24,109] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: clients.clients = $keycloakOidcClient
TRACE [2023-08-02 11:14:24,109] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: pac4jRealm = io.buji.pac4j.realm.Pac4jRealm
TRACE [2023-08-02 11:14:24,109] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: pac4jRealm.principalNameAttribute = preferred_username
TRACE [2023-08-02 11:14:24,109] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: pac4jSubjectFactory = io.buji.pac4j.subject.Pac4jSubjectFactory
TRACE [2023-08-02 11:14:24,110] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: securityManager.subjectFactory = $pac4jSubjectFactory
TRACE [2023-08-02 11:14:24,110] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: securityManager.realm = $pac4jRealm
TRACE [2023-08-02 11:14:24,110] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: requireRoleAdmin = org.pac4j.core.authorization.authorizer.RequireAnyRoleAuthorizer
TRACE [2023-08-02 11:14:24,110] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: requireRoleAdmin.elements = admin_role
TRACE [2023-08-02 11:14:24,110] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: config = org.pac4j.core.config.Config
TRACE [2023-08-02 11:14:24,111] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: config.clients = $clients
TRACE [2023-08-02 11:14:24,111] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: config.authorizers = jcherrera:$requireRoleAdmin
TRACE [2023-08-02 11:14:24,111] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcSecurityFilterAdmin = io.buji.pac4j.filter.SecurityFilter
TRACE [2023-08-02 11:14:24,111] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcSecurityFilterAdmin.config = $config
TRACE [2023-08-02 11:14:24,112] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: oidcSecurityFilterAdmin.clients = KeycloakOidcClient
TRACE [2023-08-02 11:14:24,112] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: callbackFilter = io.buji.pac4j.filter.CallbackFilter
TRACE [2023-08-02 11:14:24,112] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: callbackFilter.config = $config
TRACE [2023-08-02 11:14:24,113] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: ajaxRequestResolver = org.pac4j.core.http.ajax.DefaultAjaxRequestResolver
TRACE [2023-08-02 11:14:24,113] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: ajaxRequestResolver.addRedirectionUrlAsHeader = true
TRACE [2023-08-02 11:14:24,113] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: keycloakOidcClient.ajaxRequestResolver = $ajaxRequestResolver
DEBUG [2023-08-02 11:14:24,113] ({main} Ini.java[load]:401) - Parsing [urls]
TRACE [2023-08-02 11:14:24,114] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: /api/version = oidcSecurityFilterAdmin
TRACE [2023-08-02 11:14:24,114] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: /api/login/** = oidcSecurityFilterAdmin
TRACE [2023-08-02 11:14:24,117] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: /api/cluster/** = oidcSecurityFilterAdmin
TRACE [2023-08-02 11:14:24,117] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: /api/callback = callbackFilter
TRACE [2023-08-02 11:14:24,117] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: /api/interpreter/** = oidcSecurityFilterAdmin
TRACE [2023-08-02 11:14:24,118] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: /api/configurations/** = oidcSecurityFilterAdmin
TRACE [2023-08-02 11:14:24,118] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: /api/credential/** = oidcSecurityFilterAdmin
TRACE [2023-08-02 11:14:24,118] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: /** = oidcSecurityFilterAdmin
DEBUG [2023-08-02 11:14:24,118] ({main} ResourceUtils.java[loadFromClassPath]:159) - Opening resource from class path [buji-pac4j-default.ini]
DEBUG [2023-08-02 11:14:24,120] ({main} Ini.java[load]:401) - Parsing [main]
TRACE [2023-08-02 11:14:24,120] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: clients = org.pac4j.core.client.Clients
TRACE [2023-08-02 11:14:24,122] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: config = org.pac4j.core.config.Config
TRACE [2023-08-02 11:14:24,122] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: config.clients = $clients
TRACE [2023-08-02 11:14:24,122] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: pac4jRealm = io.buji.pac4j.realm.Pac4jRealm
TRACE [2023-08-02 11:14:24,122] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: pac4jSubjectFactory = io.buji.pac4j.subject.Pac4jSubjectFactory
TRACE [2023-08-02 11:14:24,123] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: securityManager.subjectFactory = $pac4jSubjectFactory
TRACE [2023-08-02 11:14:24,123] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: callbackFilter = io.buji.pac4j.filter.CallbackFilter
TRACE [2023-08-02 11:14:24,123] ({main} Ini.java[splitKeyValue]:604) - Discovered key/value pair: callbackFilter.config = $config
DEBUG [2023-08-02 11:14:24,123] ({main} IniFactorySupport.java[createInstance]:149) - Creating instance from Ini [sections=main,urls]
TRACE [2023-08-02 11:14:24,124] ({main} FormAuthenticationFilter.java[setLoginUrl]:89) - Adding login url to applied paths.
DEBUG [2023-08-02 11:14:24,126] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$clients'. Looking up object with id 'clients'
TRACE [2023-08-02 11:14:24,126] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [clients] value [#Clients# | callbackUrl: null | clients: null | ajaxRequestResolver: null | callbackUrlResolver: null | authorizationGenerators: [] | defaultSecurityClients: null | urlResolver: null |] on object of type [org.pac4j.core.config.Config]
DEBUG [2023-08-02 11:14:24,127] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$pac4jSubjectFactory'. Looking up object with id 'pac4jSubjectFactory'
TRACE [2023-08-02 11:14:24,128] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [subjectFactory] value [io.buji.pac4j.subject.Pac4jSubjectFactory@363f0ba0] on object of type [org.apache.shiro.web.mgt.DefaultWebSecurityManager]
DEBUG [2023-08-02 11:14:24,129] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$config'. Looking up object with id 'config'
TRACE [2023-08-02 11:14:24,129] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [config] value [org.pac4j.core.config.Config@6c8909c3] on object of type [io.buji.pac4j.filter.CallbackFilter]
DEBUG [2023-08-02 11:14:24,129] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$sessionManager'. Looking up object with id 'sessionManager'
TRACE [2023-08-02 11:14:24,130] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [sessionManager] value [org.apache.shiro.web.session.mgt.DefaultWebSessionManager@50acf55d] on object of type [org.apache.shiro.web.mgt.DefaultWebSecurityManager]
TRACE [2023-08-02 11:14:24,130] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [sessionManager.globalSessionTimeout] value [86400000] on object of type [org.apache.shiro.web.mgt.DefaultWebSecurityManager]
TRACE [2023-08-02 11:14:24,131] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [realm] value [axesor] on object of type [org.pac4j.oidc.config.KeycloakOidcConfiguration]
TRACE [2023-08-02 11:14:24,131] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [baseUri] value [https://nep.pro.gc.axesor.com/auth] on object of type [org.pac4j.oidc.config.KeycloakOidcConfiguration]
TRACE [2023-08-02 11:14:24,132] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [clientId] value [zeppelin] on object of type [org.pac4j.oidc.config.KeycloakOidcConfiguration]
TRACE [2023-08-02 11:14:24,132] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [secret] value [xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx] on object of type [org.pac4j.oidc.config.KeycloakOidcConfiguration]
TRACE [2023-08-02 11:14:24,133] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [clientAuthenticationMethodAsString] value [client_secret_basic] on object of type [org.pac4j.oidc.config.KeycloakOidcConfiguration]
TRACE [2023-08-02 11:14:24,133] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [scope] value [openid] on object of type [org.pac4j.oidc.config.KeycloakOidcConfiguration]
TRACE [2023-08-02 11:14:24,133] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [responseType] value [code] on object of type [org.pac4j.oidc.config.KeycloakOidcConfiguration]
TRACE [2023-08-02 11:14:24,134] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [logoutUrl] value [https://nep.pro.gc.axesor.com/auth/realms/axesor/protocol/openid-connect/logout] on object of type [org.pac4j.oidc.config.KeycloakOidcConfiguration]
DEBUG [2023-08-02 11:14:24,134] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$oidcConfig'. Looking up object with id 'oidcConfig'
TRACE [2023-08-02 11:14:24,135] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [configuration] value [#KeycloakOidcConfiguration# | clientId: zeppelin | secret: [protected] | discoveryURI: null | scope: openid | customParams: {} | clientAuthenticationMethod: client_secret_basic | useNonce: false | preferredJwsAlgorithm: null | maxAge: null | maxClockSkew: 30 | connectTimeout: 500 | readTimeout: 5000 | resourceRetriever: null | responseType: code | responseMode: null | logoutUrl: https://nep.pro.gc.axesor.com/auth/realms/axesor/protocol/openid-connect/logout | withState: true | stateGenerator: org.pac4j.core.util.generator.RandomValueGenerator@2aeefcc | logoutHandler: null | tokenValidator: null |] on object of type [org.pac4j.oidc.client.KeycloakOidcClient]
TRACE [2023-08-02 11:14:24,135] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [elements] value [[admin_role]] on object of type [org.pac4j.core.authorization.authorizer.RequireAnyRoleAuthorizer]
TRACE [2023-08-02 11:14:24,136] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [callbackUrl] value [https://atlax360-zeppelin-nb-dev.gc.axesor.com/api/callback] on object of type [org.pac4j.core.client.Clients]
DEBUG [2023-08-02 11:14:24,136] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$keycloakOidcClient'. Looking up object with id 'keycloakOidcClient'
DEBUG [2023-08-02 11:14:24,137] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$keycloakOidcClient'. Looking up object with id 'keycloakOidcClient'
TRACE [2023-08-02 11:14:24,137] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [clients] value [[#KeycloakOidcClient# | name: KeycloakOidcClient | callbackUrl: null | callbackUrlResolver: null | ajaxRequestResolver: null | redirectionActionBuilder: null | credentialsExtractor: null | authenticator: null | profileCreator: org.pac4j.core.profile.creator.AuthenticatorProfileCreator@1852a3ff | logoutActionBuilder: org.pac4j.core.logout.NoLogoutActionBuilder@7203c7ff | authorizationGenerators: [] | configuration: #KeycloakOidcConfiguration# | clientId: zeppelin | secret: [protected] | discoveryURI: null | scope: openid | customParams: {} | clientAuthenticationMethod: client_secret_basic | useNonce: false | preferredJwsAlgorithm: null | maxAge: null | maxClockSkew: 30 | connectTimeout: 500 | readTimeout: 5000 | resourceRetriever: null | responseType: code | responseMode: null | logoutUrl: https://nep.pro.gc.axesor.com/auth/realms/axesor/protocol/openid-connect/logout | withState: true | stateGenerator: org.pac4j.core.util.generator.RandomValueGenerator@2aeefcc | logoutHandler: null | tokenValidator: null | |]] on object of type [org.pac4j.core.client.Clients]
TRACE [2023-08-02 11:14:24,137] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [principalNameAttribute] value [preferred_username] on object of type [io.buji.pac4j.realm.Pac4jRealm]
DEBUG [2023-08-02 11:14:24,138] ({main} AuthorizingRealm.java[getAuthorizationCacheLazy]:235) - No authorizationCache instance set. Checking for a cacheManager...
DEBUG [2023-08-02 11:14:24,138] ({main} AuthorizingRealm.java[getAuthorizationCacheLazy]:249) - No cache or cacheManager properties have been set. Authorization cache cannot be obtained.
DEBUG [2023-08-02 11:14:24,139] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$pac4jRealm'. Looking up object with id 'pac4jRealm'
TRACE [2023-08-02 11:14:24,139] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [realm] value [io.buji.pac4j.realm.Pac4jRealm@7a22a3c2] on object of type [org.apache.shiro.web.mgt.DefaultWebSecurityManager]
DEBUG [2023-08-02 11:14:24,140] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$requireRoleAdmin'. Looking up object with id 'requireRoleAdmin'
TRACE [2023-08-02 11:14:24,140] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [authorizers] value [{jcherrera=org.pac4j.core.authorization.authorizer.RequireAnyRoleAuthorizer@f4cfd90}] on object of type [org.pac4j.core.config.Config]
DEBUG [2023-08-02 11:14:24,151] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$config'. Looking up object with id 'config'
TRACE [2023-08-02 11:14:24,151] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [config] value [org.pac4j.core.config.Config@6c8909c3] on object of type [io.buji.pac4j.filter.SecurityFilter]
TRACE [2023-08-02 11:14:24,151] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [clients] value [KeycloakOidcClient] on object of type [io.buji.pac4j.filter.SecurityFilter]
TRACE [2023-08-02 11:14:24,156] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [addRedirectionUrlAsHeader] value [true] on object of type [org.pac4j.core.http.ajax.DefaultAjaxRequestResolver]
DEBUG [2023-08-02 11:14:24,156] ({main} ReflectionBuilder.java[resolveReference]:424) - Encountered object reference '$ajaxRequestResolver'. Looking up object with id 'ajaxRequestResolver'
TRACE [2023-08-02 11:14:24,156] ({main} ReflectionBuilder.java[setProperty]:675) - Applying property [ajaxRequestResolver] value [org.pac4j.core.http.ajax.DefaultAjaxRequestResolver@5fc930f0] on object of type [org.pac4j.oidc.client.KeycloakOidcClient]
DEBUG [2023-08-02 11:14:24,157] ({main} AuthorizingRealm.java[getAuthorizationCacheLazy]:235) - No authorizationCache instance set. Checking for a cacheManager...
DEBUG [2023-08-02 11:14:24,157] ({main} AuthorizingRealm.java[getAuthorizationCacheLazy]:249) - No cache or cacheManager properties have been set. Authorization cache cannot be obtained.
INFO [2023-08-02 11:14:24,157] ({main} IniSecurityManagerFactory.java[isAutoApplyRealms]:127) - Realms have been explicitly set on the SecurityManager instance - auto-setting of realms will not occur.
DEBUG [2023-08-02 11:14:24,157] ({main} IniFactorySupport.java[createInstance]:149) - Creating instance from Ini [sections=main,urls]
TRACE [2023-08-02 11:14:24,158] ({main} FormAuthenticationFilter.java[setLoginUrl]:89) - Adding login url to applied paths.
TRACE [2023-08-02 11:14:24,158] ({main} IniFilterChainResolverFactory.java[createChains]:203) - Before url processing.
DEBUG [2023-08-02 11:14:24,158] ({main} DefaultFilterChainManager.java[createChain]:142) - Creating chain [/api/version] with global filters [invalidRequest] and from String definition [oidcSecurityFilterAdmin]
DEBUG [2023-08-02 11:14:24,159] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/version] to filter [invalidRequest] with config [null]
DEBUG [2023-08-02 11:14:24,159] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/version] to filter [io.buji.pac4j.filter.SecurityFilter@3701e6e4] with config [null]
DEBUG [2023-08-02 11:14:24,159] ({main} DefaultFilterChainManager.java[createChain]:142) - Creating chain [/api/login/**] with global filters [invalidRequest] and from String definition [oidcSecurityFilterAdmin]
DEBUG [2023-08-02 11:14:24,159] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/login/**] to filter [invalidRequest] with config [null]
DEBUG [2023-08-02 11:14:24,159] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/login/**] to filter [io.buji.pac4j.filter.SecurityFilter@3701e6e4] with config [null]
DEBUG [2023-08-02 11:14:24,160] ({main} DefaultFilterChainManager.java[createChain]:142) - Creating chain [/api/cluster/**] with global filters [invalidRequest] and from String definition [oidcSecurityFilterAdmin]
DEBUG [2023-08-02 11:14:24,160] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/cluster/**] to filter [invalidRequest] with config [null]
DEBUG [2023-08-02 11:14:24,160] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/cluster/**] to filter [io.buji.pac4j.filter.SecurityFilter@3701e6e4] with config [null]
DEBUG [2023-08-02 11:14:24,160] ({main} DefaultFilterChainManager.java[createChain]:142) - Creating chain [/api/callback] with global filters [invalidRequest] and from String definition [callbackFilter]
DEBUG [2023-08-02 11:14:24,160] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/callback] to filter [invalidRequest] with config [null]
DEBUG [2023-08-02 11:14:24,161] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/callback] to filter [io.buji.pac4j.filter.CallbackFilter@c6634d] with config [null]
DEBUG [2023-08-02 11:14:24,161] ({main} DefaultFilterChainManager.java[createChain]:142) - Creating chain [/api/interpreter/**] with global filters [invalidRequest] and from String definition [oidcSecurityFilterAdmin]
DEBUG [2023-08-02 11:14:24,161] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/interpreter/**] to filter [invalidRequest] with config [null]
DEBUG [2023-08-02 11:14:24,161] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/interpreter/**] to filter [io.buji.pac4j.filter.SecurityFilter@3701e6e4] with config [null]
DEBUG [2023-08-02 11:14:24,161] ({main} DefaultFilterChainManager.java[createChain]:142) - Creating chain [/api/configurations/**] with global filters [invalidRequest] and from String definition [oidcSecurityFilterAdmin]
DEBUG [2023-08-02 11:14:24,162] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/configurations/**] to filter [invalidRequest] with config [null]
DEBUG [2023-08-02 11:14:24,162] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/configurations/**] to filter [io.buji.pac4j.filter.SecurityFilter@3701e6e4] with config [null]
DEBUG [2023-08-02 11:14:24,162] ({main} DefaultFilterChainManager.java[createChain]:142) - Creating chain [/api/credential/**] with global filters [invalidRequest] and from String definition [oidcSecurityFilterAdmin]
DEBUG [2023-08-02 11:14:24,163] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/credential/**] to filter [invalidRequest] with config [null]
DEBUG [2023-08-02 11:14:24,163] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/api/credential/**] to filter [io.buji.pac4j.filter.SecurityFilter@3701e6e4] with config [null]
DEBUG [2023-08-02 11:14:24,164] ({main} DefaultFilterChainManager.java[createChain]:142) - Creating chain [/**] with global filters [invalidRequest] and from String definition [oidcSecurityFilterAdmin]
DEBUG [2023-08-02 11:14:24,164] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/**] to filter [invalidRequest] with config [null]
DEBUG [2023-08-02 11:14:24,164] ({main} DefaultFilterChainManager.java[applyChainConfig]:313) - Attempting to apply path [/**] to filter [io.buji.pac4j.filter.SecurityFilter@3701e6e4] with config [null]
DEBUG [2023-08-02 11:14:24,164] ({main} EnvironmentLoader.java[initEnvironment]:142) - Published WebEnvironment as ServletContext attribute with name [org.apache.shiro.web.env.EnvironmentLoader.ENVIRONMENT_ATTRIBUTE_KEY]
INFO [2023-08-02 11:14:24,165] ({main} EnvironmentLoader.java[initEnvironment]:147) - Shiro environment initialized in 66 ms.
INFO [2023-08-02 11:14:24,760] ({main} ContextHandler.java[doStart]:860) - Started o.e.j.w.WebAppContext@48bb62{zeppelin-web-angular,/next,jar:file:///opt/zeppelin/zeppelin-web-angular-0.10.1.war!/,AVAILABLE}{/opt/zeppelin/zeppelin-web-angular-0.10.1.war}
INFO [2023-08-02 11:14:24,792] ({main} AbstractConnector.java[doStart]:331) - Started ServerConnector@436a4e4b{HTTP/1.1, (http/1.1)}{0.0.0.0:8080}
INFO [2023-08-02 11:14:24,793] ({main} Server.java[doStart]:400) - Started @8811ms
INFO [2023-08-02 11:14:29,793] ({main} ZeppelinServer.java[main]:265) - Done, zeppelin server started
WARN [2023-08-02 11:14:29,921] ({main} ApacheUtils.java[noSuchMethodThrownByNormalizeUriInvoker]:246) - NoSuchMethodException was thrown when disabling normalizeUri. This indicates you are using an old version (< 4.5.8) of Apache http client. It is recommended to use http client version >= 4.5.9 to avoid the breaking change introduced in apache client 4.5.7 and the latency in exception handling. See https://github.com/aws/aws-sdk-java/issues/1919 for more information
WARN [2023-08-02 11:14:30,514] ({main} LocalConfigStorage.java[loadNotebookAuthorization]:77) - NotebookAuthorization file /opt/zeppelin/conf/notebook-authorization.json is not existed
INFO [2023-08-02 11:14:30,749] ({Thread-11} RemoteInterpreterEventServer.java[run]:112) - InterpreterEventServer is starting at 172.17.1.78:12320
INFO [2023-08-02 11:14:31,244] ({main} RemoteInterpreterEventServer.java[start]:140) - RemoteInterpreterEventServer is started
INFO [2023-08-02 11:14:31,248] ({main} InterpreterSettingManager.java[<init>]:197) - Using RecoveryStorage: org.apache.zeppelin.interpreter.recovery.NullRecoveryStorage
INFO [2023-08-02 11:14:31,300] ({main} InterpreterSettingManager.java[registerInterpreterSetting]:540) - Register InterpreterSettingTemplate: spark
INFO [2023-08-02 11:14:31,300] ({main} LocalConfigStorage.java[loadInterpreterSettings]:63) - Load Interpreter Setting from file: /opt/zeppelin/conf/interpreter.json
INFO [2023-08-02 11:14:31,327] ({main} InterpreterSettingManager.java[loadFromFile]:294) - Create interpreter setting spark from interpreter.json
INFO [2023-08-02 11:14:31,330] ({main} InterpreterSetting.java[setStatus]:739) - Set interpreter spark status to READY
INFO [2023-08-02 11:14:31,330] ({main} LocalConfigStorage.java[save]:53) - Save Interpreter Setting to /opt/zeppelin/conf/interpreter.json
INFO [2023-08-02 11:14:31,395] ({main} LuceneSearch.java[<init>]:91) - Use /tmp/zeppelin-index for storing lucene search index
The version of mi jars:
buji-pac4j-5.0.1.jar
commons-collections4-4.4.jar
content-type-2.1.jar
json-smart-2.4.7.jar
lang-tag-1.5.jar
mail-1.4.7.jar
oauth2-oidc-sdk-9.9.jar
pac4j-core-4.0.3.jar
pac4j-oidc-4.0.4.jar
Thank you so much!!