xnat authentication problem

[Laura Konerth]

Hello everybody,

I got a problem while installing xnat 1.6.2.1 with a new database...
When I try to run the statement from the command prompt:

"StoreXML -dir ./work/field_groups -u admin -p admin -allowDataDeletion true"

I get the message: "No authentication.properties file found in conf directory. Skipping enhanced authentication method."

And after starting Tomcat(6.0.36) and deploying the war-file, I'm not able to start my xnat-application because of the following error:
org.postgresql.util.PSQLException: FATAL: Ident authentication failed for user "xnat01"

How can I test if the JDBC Driver (9.1) is working?

Thanks for help!

Laura






[Simon Doran]

Hi Laura,

  The guys at NRG may correct me if I am mistaken, but I don't think that these two are connected. The response you are getting to StoreXML is normal and I think relates to authentication methods such as LDAP (see https://wiki.xnat.org/display/XNAT16/Services.Properties+Configuration#Services.PropertiesConfiguration-Authentication).

  I suspect that the error message that you are getting relates to the method of authentication for the user xnat01 of Postgres that you have defined rather than authentication of users within the XNAT webapp. Take a look at the documentation here http://www.postgresql.org/docs/9.1/static/auth-pg-hba-conf.html.

  See if you can find the postgres system file pg_hba.conf. If you look inside, I suspect you will find one or more entries with "ident". On my system, these are set "md5" and things seem to work fine.

Simon

[Herrick, Rick]

Thanks Simon! Yeah, I think that’s all correct. The authentication.properties message is just saying that it can’t find anything more so it’ll steam on with what it thinks it’s supposed to do otherwise.

 

As for your JDBC driver, it’s definitely working: that message is coming from the Postgres server and just saying that you’ve failed to authenticate properly, so you’re reaching it, just not giving it what it wants to let you in. That’s mainly because ident-based authentication is kind of a pain:

 

http://www.postgresql.org/docs/9.0/static/auth-methods.html#AUTH-IDENT

 

In my experience, you almost always want to use trust (very useful for access from localhost on development or test machines, but you should NEVER use this on a production server!) or md5.

 

The location of your pg_hba.conf file really depends on your system, but it will in the data folder located somewhere in your Postgres installation. You can read a bit about this configuration here:

 

http://www.postgresql.org/docs/9.0/static/auth-pg-hba-conf.html

 

Once you’ve made the required changes, you’ll need to restart Postgres.

 

Rick Herrick

Sr. Programmer/Analyst

Neuroinformatics Research Group

Washington University School of Medicine

(314) 827-4250

--
You received this message because you are subscribed to the Google Groups "xnat_discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to xnat_discussi...@googlegroups.com.
To post to this group, send email to xnat_di...@googlegroups.com.
Visit this group at http://groups.google.com/group/xnat_discussion.
For more options, visit https://groups.google.com/groups/opt_out.

---

The material in this message is private and may contain Protected Healthcare Information (PHI). If you are not the intended recipient, be advised that any unauthorized use, disclosure, copying or the taking of any action in reliance on the contents of this information is strictly prohibited. If you have received this email in error, please immediately notify the sender via telephone or return mail.