Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

LDAP- Not authorized to access the Jazz Team Server Admin UI

There is a LDAP authenticated user who is in JazzAdnins and JazzUsers group. However, this message is displayed - "You are not authorized to access the Jazz Team Server Admin UI" - when logged on to https:/..../jazz/admin web page. Any comments please? Thanks.

0 votes



7 answers

Permanent link
There seems to be some realm binding issue. Here is the log file. Any comment please? Thanks.

SEVERE: Error initializing endpoint
java.net.BindException: Address already in use: NET_Bind:9080
at org.apache.tomcat.util.net.PoolTcpEndpoint.initEndpoint(PoolTcpEndpoint.java:298)
at org.apache.coyote.http11.Http11BaseProtocol.init(Http11BaseProtocol.java:139)
at org.apache.catalina.connector.Connector.initialize(Connector.java:1017)
at org.apache.catalina.core.StandardService.initialize(StandardService.java:578)
at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:782)
at org.apache.catalina.startup.Catalina.load(Catalina.java:504)
at org.apache.catalina.startup.Catalina.load(Catalina.java:524)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:79)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:267)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
Jun 12, 2008 3:38:20 PM org.apache.catalina.startup.Catalina load
SEVERE: Catalina.start
LifecycleException: Protocol handler initialization failed: java.net.BindException: Address already in use: NET_Bind:9080
at org.apache.catalina.connector.Connector.initialize(Connector.java:1019)
at org.apache.catalina.core.StandardService.initialize(StandardService.java:578)
at org.apache.catalina.core.StandardServer.initialize(StandardServer.java:782)
at org.apache.catalina.startup.Catalina.load(Catalina.java:504)
at org.apache.catalina.startup.Catalina.load(Catalina.java:524)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:79)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:618)
at org.apache.catalina.startup.Bootstrap.load(Bootstrap.java:267)
at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:432)
Jun 12, 2008 3:38:20 PM org.apache.catalina.startup.Catalina load
INFO: Initialization processed in 2144 ms

0 votes


Permanent link
Check if the web.xml file still contains the modifications you made for LDAP. I noticed once when I upgraded that this information was overridden.

Lorelei

0 votes


Permanent link
Thank you, Lorelei.

I just checked the web.xml file as well as the server.xml file. The custom settings are still in place. Thanks.

FYI, I'm using Microsoft Active Directory.

0 votes


Permanent link
The error message said "You are not authorized to access the Jazz Team Server Admin UI" when logged on as an active directory account. Does this mean Tomcat was actually connected to the Active Directory server? Thanks.

0 votes


Permanent link
We originally tried our own user group. But, we received the same error after creating the RTC default user group like "jazzadmins".

0 votes


Permanent link
I managed to make it work by a number of trials and errors. Here is the working Realm for Active Directory.

I managed to make it work by a number of trials and errors. Here is the working Realm.

className="org.apache.catalina.realm.JNDIRealm"
debug="99"
connectionURL="ldap://nn.nn.nn.nn:389"
authentication="simple"
referrals="follow"
connectionName="cn=xxxxxxxx,ou=people,dc=dir,dc=svc,dc=xxxxxx,dc=com"
connectionPassword="xxxxxxxxxx"
userSearch="(sAMAccountName={0})"
userBase="ou=people,dc=dir,dc=svc,dc=xxxxxxx,dc=com"
userSubtree="true"
roleSearch="(member={0})"
roleName="cn"
roleSubtree="true"
roleBase="ou=Groups,dc=dir,dc=svc,dc=xxxxx,dc=com"

0 votes


Permanent link
Hi gdang,

I thank you very much for posting the solution that you got after lot of hit and trials. I myself was strugling with the same issue. And, now I have managed to resolve the issue by using the same settings (ofcourse retaining the company wide values) that you have used.

Regards,
sanan

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details

Question asked: Jun 03 '08, 11:25 p.m.

Question was seen: 8,274 times

Last updated: Jun 03 '08, 11:25 p.m.

Confirmation Cancel Confirm