It's all about the answers!

Ask a question

LDAPAutoGroup Authorizations


laura shragowitz (3642) | asked Jul 11 '11, 3:49 p.m.
We are considering using the LDAPLocalGroup for Tomcat as described in this article: https://jazz.net/library/article/457

When testing access using a local mapping.csv file, we find that users who are defined in the mapping.csv file like so:

rtcbuild1,
or like so
rtcbuild2,

are able to authenticate and login but do not have access to the Project page. The display indicates

Error!
You are not authorized to view this page.
Forbidden

There are no errors in the log files, but it looks like the initializationData call is returning a 403 from /ccm/service/com.ibm.team.repository.service.internal.webuiInitializer.IWebUIInitializerRestService

2 answers



permanent link
Anthony Kesterton (7.5k9180136) | answered Jul 12 '11, 4:16 a.m.
JAZZ DEVELOPER
We are considering using the LDAPLocalGroup for Tomcat as described in this article: https://jazz.net/library/article/457

When testing access using a local mapping.csv file, we find that users who are defined in the mapping.csv file like so:

rtcbuild1,
or like so
rtcbuild2,

are able to authenticate and login but do not have access to the Project page. The display indicates

Error!
You are not authorized to view this page.
Forbidden

There are no errors in the log files, but it looks like the initializationData call is returning a 403 from /ccm/service/com.ibm.team.repository.service.internal.webuiInitializer.IWebUIInitializerRestService


Just replied on the other thread :-)

Try making rtcbuild1 and rtcbuild2 members of the project you are trying to access.

anthony

permanent link
laura shragowitz (3642) | answered Jul 12 '11, 1:41 p.m.
Sorry for confusing things with 2 threads....I had intended to start a completely new thread....

The problem is not that these users (defined in the mapping file) cant get to a specific project.

They cant get to the My Projects page. But users who are authorized through LDAP can get to that page.

On further testing it looks like only users who have JazzAdmins Role in the local mapping file are getting to the My Projects page. All other roles are directed to an error page, denied access/not authorized.

Your answer


Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.