Re: [xmlblaster] possible problem about security plugin

[Marcel Ruff <mr at marcelruff.info>]

zhang zhi wei wrote:
> what's your platform? Maybe you are linux or unix.
> In window xp, there is problem
> 
> I find the simplest method is as follws:
> in HtPasswd.java
>  change "   if ( userEncoded.equals(encoded) ) " in line 107 to      if 
> (userEncoded.trim().equals(encoded.trim())
> it works fine.
Yep, this is a good idea to trim CR/LF,
thanks for this bug fix, i have added
it to cvs.

There are some new requirements now as well:

http://www.xmlblaster.org/xmlBlaster/doc/requirements/security.ldap.html
http://www.xmlblaster.org/xmlBlaster/doc/requirements/security.htpasswd.html
http://www.xmlblaster.org/xmlBlaster/doc/requirements/engine.service.rdbms.html

regards
Marcel
> 
> 
> 
> 
> 
>> From: Marcel Ruff <mr at marcelruff.info>
>> Reply-To: xmlblaster at server.xmlBlaster.org
>> To: xmlblaster at server.xmlblaster.org
>> Subject: Re: [xmlblaster] possible problem about security plugin
>> Date: Sun, 18 Apr 2004 10:48:34 +0200
>>
>> zhang zhi wei wrote:
>> >
>> >
>> > Hello.
>> > Sorry to report another possible error.
>> >
>> > when i use the security check in xmlBlaster, I find the system report 
> 
> an
> 
>> > error;
>> Hi,
>>
>> i have added to $HOME/xmlBlaster.htpasswd
>>
>> --------------
>> __sys__jdbc:yZ24stvIel1j6
>> --------------
>>
>> and to $HOME/xmlBlaster.properties
>>
>> --------------
>> Security.Server.Plugin.htpasswd.secretfile=${user.home}${file.separator}xmlBlaster.htpasswd 
>>
> 
> 
>> --------------
>>
>> Starting the server with:
>>
>> java org.xmlBlaster.Main -JdbcDriver.password secret
>>
>> works fine.
>> Please check your configuration again,
>>
>> best regards
>>
>> Marcel
>>
>>
>>
>> >
>> > 1.  set the fowllowing setting in xmlBlaster.properties
>> >
>> > 
> 
> Security.Server.Plugin.htpasswd.secretfile=c:\\0.9\\xmlBlaster\\xmlBlaster.htpasswd 
> 
> 
>> >
>> >
>> >
>> > Security.Client.DefaultPlugin=htpasswd,1.0
>> > 
> 
> Security.Client.Plugin[gui][1.0]=org.xmlBlaster.authentication.plugins.demo.ClientPlugin 
> 
> 
>> >
>> >
>> > 
> 
> Security.Client.Plugin[simple][1.0]=org.xmlBlaster.authentication.plugins.simple.ClientPlugin 
> 
> 
>> >
>> >
>> > 
> 
> Security.Client.Plugin[ldap][1.0]=org.xmlBlaster.authentication.plugins.ldap.ClientPlugin 
> 
> 
>> >
>> >
>> > 
> 
> Security.Client.Plugin[htpasswd][1.0]=org.xmlBlaster.authentication.plugins.htpasswd.ClientPlugin 
> 
> 
>> >
>> >
>> >
>> > 2.copy xmlBlaster.htpasswd in config directory to xmlBlaster Home
>> > directory, that is, c:\0.9\xmlBlaster
>> >
>> >  By the way , i use usrname __sys_jdbc and password secret to call  
> 
> java
> 
>> > org.inforMessaging.authentication.plugins.htpasswd.jcrypt
>> >  the generated security number is not the same as in 
> 
> xmlBlaster.htpasswd
> 
>> > 3. java org.xmlBlaster.Main   it reports:
>> >
>> >   [2004-4-17 21:56:12 WARN
>> > RunlevelManager-/node/inforMessaging_172_26_13_68_3412
>> > ] startupPlugins. Exception when loading the plugin 'JDBC' reason:
>> > errorCode=res
>> > ource.configuration.pluginFailed message=Initializing of plugin JDBC
>> > failed:Info
>> > rMessagingException
>> > errorCode=[user.security.authentication.accessDenied] server
>> > SideException=true location=[Session] message=[Authentication of user
>> > __sys__jdb
>> > c failed : ] [See URL
>> > http://www.informessaging.org/inforMessaging/doc/requireme
>> > 
> 
> nts/admin.errorcodes.listing.html#user.security.authentication.accessDenied] 
> 
> 
>> >
>> >
>> > java.lang.Exception: Stack trace
>> >        at java.lang.Thread.dumpStack(Thread.java:1064)
>> >        at
>> > org.inforMessaging.engine.runlevel.RunlevelManager.startupPlugins(Run
>> > levelManager.java:252)
>> >        at
>> > org.inforMessaging.engine.runlevel.RunlevelManager.changeRunlevel(Run
>> > levelManager.java:183)
>> >        at org.inforMessaging.Main.init(Main.java:160)
>> >        at org.inforMessaging.Main.<init>(Main.java:108)
>> >        at org.inforMessaging.Main.main(Main.java:530)
>> >
>> >
>> >  can u tell me why? thanks a lot!
>> >
>> > _________________________________________________________________
>> > 享用世界上最大的电子邮件系统― MSN Hotmail。  http://www.hotmail.com
>> >
>>
>>
>> -- 
>> http://www.xmlBlaster.org
> 
> 
> _________________________________________________________________
> 免费下载 MSN Explorer:   http://explorer.msn.com/lccn 
> 


-- 
http://www.xmlBlaster.org