Jazz Forum Welcome to the Jazz Community Forum Connect and collaborate with IBM Engineering experts and users

LDAPAutoGroup Authorizations

We are considering using the LDAPLocalGroup for Tomcat as described in this article: https://jazz.net/library/article/457

When testing access using a local mapping.csv file, we find that users who are defined in the mapping.csv file like so:

rtcbuild1,
or like so
rtcbuild2,

are able to authenticate and login but do not have access to the Project page. The display indicates

Error!
You are not authorized to view this page.
Forbidden

There are no errors in the log files, but it looks like the initializationData call is returning a 403 from /ccm/service/com.ibm.team.repository.service.internal.webuiInitializer.IWebUIInitializerRestService

0 votes



2 answers

Permanent link
We are considering using the LDAPLocalGroup for Tomcat as described in this article: https://jazz.net/library/article/457

When testing access using a local mapping.csv file, we find that users who are defined in the mapping.csv file like so:

rtcbuild1,
or like so
rtcbuild2,

are able to authenticate and login but do not have access to the Project page. The display indicates

Error!
You are not authorized to view this page.
Forbidden

There are no errors in the log files, but it looks like the initializationData call is returning a 403 from /ccm/service/com.ibm.team.repository.service.internal.webuiInitializer.IWebUIInitializerRestService


Just replied on the other thread :-)

Try making rtcbuild1 and rtcbuild2 members of the project you are trying to access.

anthony

0 votes


Permanent link
Sorry for confusing things with 2 threads....I had intended to start a completely new thread....

The problem is not that these users (defined in the mapping file) cant get to a specific project.

They cant get to the My Projects page. But users who are authorized through LDAP can get to that page.

On further testing it looks like only users who have JazzAdmins Role in the local mapping file are getting to the My Projects page. All other roles are directed to an error page, denied access/not authorized.

0 votes

Your answer

Register or log in to post your answer.

Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.

Search context
Follow this question

By Email: 

Once you sign in you will be able to subscribe for any updates here.

By RSS:

Answers
Answers and Comments
Question details

Question asked: Jul 11 '11, 3:49 p.m.

Question was seen: 4,491 times

Last updated: Jul 11 '11, 3:49 p.m.

Confirmation Cancel Confirm