User not authenticated

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

User not authenticated

prabhu
hi all,

I am getting a strange error in my ssp.log. I am quite new to using SSP.

system_id_IS_UNDEFINED: 02:59:04.216 [http-8080-5] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:06.603 [http-8080-3] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:59.446 [sspScheduler-5:cull-oauth1-nonces]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:08.292 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:28.297 [sspScheduler-4:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 984 ms
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:00:29.286 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 985 ms
system_id_IS_UNDEFINED: 03:02:38.633 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:08.994 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:29.623 [sspScheduler-9:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:30.619 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 990 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 991 ms
system_id_IS_UNDEFINED: 03:07:39.352 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
^C

Someone’s help will he greatly helpful.


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev

Reply | Threaded
Open this post in threaded view
|

Re: User not authenticated

dmccallum
Administrator
You can ignore that message. It's coming from background jobs (you can tell b/c of the thread names that start with 'sspScheduler-'), where it's normal.

- Dan

On Oct 6, 2014, at 1:31 AM, Prabhu Janakaraj <[hidden email]> wrote:

hi all,

I am getting a strange error in my ssp.log. I am quite new to using SSP.

system_id_IS_UNDEFINED: 02:59:04.216 [http-8080-5] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:06.603 [http-8080-3] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:59.446 [sspScheduler-5:cull-oauth1-nonces]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:08.292 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:28.297 [sspScheduler-4:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 984 ms
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:00:29.286 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 985 ms
system_id_IS_UNDEFINED: 03:02:38.633 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:08.994 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:29.623 [sspScheduler-9:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:30.619 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 990 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 991 ms
system_id_IS_UNDEFINED: 03:07:39.352 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
^C

Someone’s help will he greatly helpful.


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev

Reply | Threaded
Open this post in threaded view
|

Re: User not authenticated

prabhu
When I open the homepage of SSP, the port lets are not loaded properly and the log shows as User is not authenticated.

Since Dan said it can be ignored, I noticed another error in my tomcat log as

Oct 6, 2014 11:56:52 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor host-manager.xml
Oct 6, 2014 11:56:52 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor ssp.xml
11:56:57.385 [main] INFO  o.j.s.c.logging.ExternalConfigLoader - Config directory set to /opt/ssp/ssp-local
INFO 10/6/14 11:57 AM:liquibase: Successfully acquired change log lock
INFO 10/6/14 11:57 AM:liquibase: Reading from public.databasechangelog
INFO 10/6/14 11:57 AM:liquibase: Reading from public.databasechangelog
INFO 10/6/14 11:57 AM:liquibase: Continuing past: org/jasig/ssp/database/integrationchangesets/i000048.xml::id for external_student_transcript_course no natural key::tony.arland::(Checksum: 3:eb90cd2330ea627723267c4a25552a45) despite precondition failure due to onFail='CONTINUE': 
          classpath:org/jasig/ssp/database/masterChangeLog.xml : Skip v_external_student_transcript_course correction

INFO 10/6/14 11:57 AM:liquibase: Continuing past: org/jasig/ssp/database/integrationchangesets/i000050.xml::drop unique constraint 2 on external_student_test (pg)::dan.mccallum::(Checksum: 3:014de5fdb80a31a95ec43bf16b55ed6c) despite precondition failure due to onFail='CONTINUE': 
          classpath:org/jasig/ssp/database/masterChangeLog.xml : Skip drop unique constraint 2 on external_student_test (postgresql)

SEVERE 10/6/14 11:57 AM:liquibase: Change Set org/jasig/ssp/database/changesets/000081.xml::fix typo in ESL data perm::tony.arland failed.  Error: Error executing SQL UPDATE public.up_permission SET activity = 'DATA_ENGLISH_SECOND_LANGUAGE' WHERE activity = 'DATA_ENGLISH_SECOND_LANGAGE': ERROR: permission denied for relation up_permission
liquibase.exception.DatabaseException: Error executing SQL UPDATE public.up_permission SET activity = 'DATA_ENGLISH_SECOND_LANGUAGE' WHERE activity = 'DATA_ENGLISH_SECOND_LANGAGE': ERROR: permission denied for relation up_permission


Caused by: org.postgresql.util.PSQLException: ERROR: permission denied for relation up_permission


I checked the Postgresql and these tables has SSP as their owner. Is there anything wrong with the database permissions?





On Oct 6, 2014, at 10:27 AM, Daniel McCallum <[hidden email]> wrote:

You can ignore that message. It's coming from background jobs (you can tell b/c of the thread names that start with 'sspScheduler-'), where it's normal.

- Dan

On Oct 6, 2014, at 1:31 AM, Prabhu Janakaraj <[hidden email]> wrote:

hi all,

I am getting a strange error in my ssp.log. I am quite new to using SSP.

system_id_IS_UNDEFINED: 02:59:04.216 [http-8080-5] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:06.603 [http-8080-3] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:59.446 [sspScheduler-5:cull-oauth1-nonces]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:08.292 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:28.297 [sspScheduler-4:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 984 ms
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:00:29.286 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 985 ms
system_id_IS_UNDEFINED: 03:02:38.633 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:08.994 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:29.623 [sspScheduler-9:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:30.619 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 990 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 991 ms
system_id_IS_UNDEFINED: 03:07:39.352 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
^C

Someone’s help will he greatly helpful.


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev

Reply | Threaded
Open this post in threaded view
|

Re: User not authenticated

dmccallum
Administrator
SSP Liquibase runs as the user you configure with 'db_admin_username', which defaults to 'sspadmin'. If you're not provisioning SSP-Platform/uPortal tables as/with that same user, you'll probably run into permissions problems such as this one. As a workaround, you could temporarily grant full access to whatever you've got configured as db_admin_username. E.g., assuming 'sspadmin':

  GRANT ALL ON TABLE up_permission TO sspadmin;
  GRANT ALL ON TABLE up_person_dir TO sspadmin;
  GRANT ALL ON TABLE up_permission_activity TO sspadmin;
  GRANT ALL ON TABLE up_user TO sspadmin;
  GRANT ALL ON TABLE up_sso_ticket TO sspadmin;
  GRANT ALL ON TABLE up_raw_events TO sspadmin;

I think that should cover all the up_* tables SSP Liquibase tries to manipulate.

Or you can provision your SSP-Platform/uPortal db artifacts into a separate db/schema, in which case SSP Liquibase should just quietly skip over them.

- Dan


On Oct 6, 2014, at 10:12 AM, Prabhu Janakaraj <[hidden email]> wrote:

When I open the homepage of SSP, the port lets are not loaded properly and the log shows as User is not authenticated.

Since Dan said it can be ignored, I noticed another error in my tomcat log as

Oct 6, 2014 11:56:52 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor host-manager.xml
Oct 6, 2014 11:56:52 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor ssp.xml
11:56:57.385 [main] INFO  o.j.s.c.logging.ExternalConfigLoader - Config directory set to /opt/ssp/ssp-local
INFO 10/6/14 11:57 AM:liquibase: Successfully acquired change log lock
INFO 10/6/14 11:57 AM:liquibase: Reading from public.databasechangelog
INFO 10/6/14 11:57 AM:liquibase: Reading from public.databasechangelog
INFO 10/6/14 11:57 AM:liquibase: Continuing past: org/jasig/ssp/database/integrationchangesets/i000048.xml::id for external_student_transcript_course no natural key::tony.arland::(Checksum: 3:eb90cd2330ea627723267c4a25552a45) despite precondition failure due to onFail='CONTINUE': 
          classpath:org/jasig/ssp/database/masterChangeLog.xml : Skip v_external_student_transcript_course correction

INFO 10/6/14 11:57 AM:liquibase: Continuing past: org/jasig/ssp/database/integrationchangesets/i000050.xml::drop unique constraint 2 on external_student_test (pg)::dan.mccallum::(Checksum: 3:014de5fdb80a31a95ec43bf16b55ed6c) despite precondition failure due to onFail='CONTINUE': 
          classpath:org/jasig/ssp/database/masterChangeLog.xml : Skip drop unique constraint 2 on external_student_test (postgresql)

SEVERE 10/6/14 11:57 AM:liquibase: Change Set org/jasig/ssp/database/changesets/000081.xml::fix typo in ESL data perm::tony.arland failed.  Error: Error executing SQL UPDATE public.up_permission SET activity = 'DATA_ENGLISH_SECOND_LANGUAGE' WHERE activity = 'DATA_ENGLISH_SECOND_LANGAGE': ERROR: permission denied for relation up_permission
liquibase.exception.DatabaseException: Error executing SQL UPDATE public.up_permission SET activity = 'DATA_ENGLISH_SECOND_LANGUAGE' WHERE activity = 'DATA_ENGLISH_SECOND_LANGAGE': ERROR: permission denied for relation up_permission


Caused by: org.postgresql.util.PSQLException: ERROR: permission denied for relation up_permission


I checked the Postgresql and these tables has SSP as their owner. Is there anything wrong with the database permissions?





On Oct 6, 2014, at 10:27 AM, Daniel McCallum <[hidden email]> wrote:

You can ignore that message. It's coming from background jobs (you can tell b/c of the thread names that start with 'sspScheduler-'), where it's normal.

- Dan

On Oct 6, 2014, at 1:31 AM, Prabhu Janakaraj <[hidden email]> wrote:

hi all,

I am getting a strange error in my ssp.log. I am quite new to using SSP.

system_id_IS_UNDEFINED: 02:59:04.216 [http-8080-5] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:06.603 [http-8080-3] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:59.446 [sspScheduler-5:cull-oauth1-nonces]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:08.292 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:28.297 [sspScheduler-4:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 984 ms
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:00:29.286 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 985 ms
system_id_IS_UNDEFINED: 03:02:38.633 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:08.994 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:29.623 [sspScheduler-9:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:30.619 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 990 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 991 ms
system_id_IS_UNDEFINED: 03:07:39.352 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
^C

Someone’s help will he greatly helpful.


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev

Reply | Threaded
Open this post in threaded view
|

Re: User not authenticated

prabhu
I granted the permission for the tables. But now it asks for the ownership to the table.

SEVERE 10/6/14 1:52 PM:liquibase: Change Set org/jasig/ssp/database/changesets/000086.xml::harmonize up_person_dir.user_name size postgres::tony.arland failed.  Error: Error executing SQL ALTER TABLE public.up_person_dir ALTER COLUMN user_name TYPE character varying(50): ERROR: must be owner of relation up_person_dir
liquibase.exception.DatabaseException: Error executing SQL ALTER TABLE public.up_person_dir ALTER COLUMN user_name TYPE character varying(50): ERROR: must be owner of relation up_person_dir


Do I need to provide the ownership?

If so I am quite new to use postgresql, please guide me. 
On Oct 6, 2014, at 12:55 PM, Daniel McCallum <[hidden email]> wrote:

SSP Liquibase runs as the user you configure with 'db_admin_username', which defaults to 'sspadmin'. If you're not provisioning SSP-Platform/uPortal tables as/with that same user, you'll probably run into permissions problems such as this one. As a workaround, you could temporarily grant full access to whatever you've got configured as db_admin_username. E.g., assuming 'sspadmin':

  GRANT ALL ON TABLE up_permission TO sspadmin;
  GRANT ALL ON TABLE up_person_dir TO sspadmin;
  GRANT ALL ON TABLE up_permission_activity TO sspadmin;
  GRANT ALL ON TABLE up_user TO sspadmin;
  GRANT ALL ON TABLE up_sso_ticket TO sspadmin;
  GRANT ALL ON TABLE up_raw_events TO sspadmin;

I think that should cover all the up_* tables SSP Liquibase tries to manipulate.

Or you can provision your SSP-Platform/uPortal db artifacts into a separate db/schema, in which case SSP Liquibase should just quietly skip over them.

- Dan


On Oct 6, 2014, at 10:12 AM, Prabhu Janakaraj <[hidden email]> wrote:

When I open the homepage of SSP, the port lets are not loaded properly and the log shows as User is not authenticated.

Since Dan said it can be ignored, I noticed another error in my tomcat log as

Oct 6, 2014 11:56:52 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor host-manager.xml
Oct 6, 2014 11:56:52 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor ssp.xml
11:56:57.385 [main] INFO  o.j.s.c.logging.ExternalConfigLoader - Config directory set to /opt/ssp/ssp-local
INFO 10/6/14 11:57 AM:liquibase: Successfully acquired change log lock
INFO 10/6/14 11:57 AM:liquibase: Reading from public.databasechangelog
INFO 10/6/14 11:57 AM:liquibase: Reading from public.databasechangelog
INFO 10/6/14 11:57 AM:liquibase: Continuing past: org/jasig/ssp/database/integrationchangesets/i000048.xml::id for external_student_transcript_course no natural key::tony.arland::(Checksum: 3:eb90cd2330ea627723267c4a25552a45) despite precondition failure due to onFail='CONTINUE': 
          classpath:org/jasig/ssp/database/masterChangeLog.xml : Skip v_external_student_transcript_course correction

INFO 10/6/14 11:57 AM:liquibase: Continuing past: org/jasig/ssp/database/integrationchangesets/i000050.xml::drop unique constraint 2 on external_student_test (pg)::dan.mccallum::(Checksum: 3:014de5fdb80a31a95ec43bf16b55ed6c) despite precondition failure due to onFail='CONTINUE': 
          classpath:org/jasig/ssp/database/masterChangeLog.xml : Skip drop unique constraint 2 on external_student_test (postgresql)

SEVERE 10/6/14 11:57 AM:liquibase: Change Set org/jasig/ssp/database/changesets/000081.xml::fix typo in ESL data perm::tony.arland failed.  Error: Error executing SQL UPDATE public.up_permission SET activity = 'DATA_ENGLISH_SECOND_LANGUAGE' WHERE activity = 'DATA_ENGLISH_SECOND_LANGAGE': ERROR: permission denied for relation up_permission
liquibase.exception.DatabaseException: Error executing SQL UPDATE public.up_permission SET activity = 'DATA_ENGLISH_SECOND_LANGUAGE' WHERE activity = 'DATA_ENGLISH_SECOND_LANGAGE': ERROR: permission denied for relation up_permission


Caused by: org.postgresql.util.PSQLException: ERROR: permission denied for relation up_permission


I checked the Postgresql and these tables has SSP as their owner. Is there anything wrong with the database permissions?





On Oct 6, 2014, at 10:27 AM, Daniel McCallum <[hidden email]> wrote:

You can ignore that message. It's coming from background jobs (you can tell b/c of the thread names that start with 'sspScheduler-'), where it's normal.

- Dan

On Oct 6, 2014, at 1:31 AM, Prabhu Janakaraj <[hidden email]> wrote:

hi all,

I am getting a strange error in my ssp.log. I am quite new to using SSP.

system_id_IS_UNDEFINED: 02:59:04.216 [http-8080-5] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:06.603 [http-8080-3] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:59.446 [sspScheduler-5:cull-oauth1-nonces]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:08.292 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:28.297 [sspScheduler-4:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 984 ms
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:00:29.286 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 985 ms
system_id_IS_UNDEFINED: 03:02:38.633 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:08.994 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:29.623 [sspScheduler-9:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:30.619 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 990 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 991 ms
system_id_IS_UNDEFINED: 03:07:39.352 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
^C

Someone’s help will he greatly helpful.


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev

Reply | Threaded
Open this post in threaded view
|

Re: User not authenticated

dmccallum
Administrator
Yep, looks like grant's won't be sufficient and you will need to be the table owner to issue an 'ALTER TABLE'. [1]

SO has examples for changing table ownership in bulk. [2]

- Dan



On Oct 6, 2014, at 12:08 PM, Prabhu Janakaraj <[hidden email]> wrote:

I granted the permission for the tables. But now it asks for the ownership to the table.

SEVERE 10/6/14 1:52 PM:liquibase: Change Set org/jasig/ssp/database/changesets/000086.xml::harmonize up_person_dir.user_name size postgres::tony.arland failed.  Error: Error executing SQL ALTER TABLE public.up_person_dir ALTER COLUMN user_name TYPE character varying(50): ERROR: must be owner of relation up_person_dir
liquibase.exception.DatabaseException: Error executing SQL ALTER TABLE public.up_person_dir ALTER COLUMN user_name TYPE character varying(50): ERROR: must be owner of relation up_person_dir


Do I need to provide the ownership?

If so I am quite new to use postgresql, please guide me. 
On Oct 6, 2014, at 12:55 PM, Daniel McCallum <[hidden email]> wrote:

SSP Liquibase runs as the user you configure with 'db_admin_username', which defaults to 'sspadmin'. If you're not provisioning SSP-Platform/uPortal tables as/with that same user, you'll probably run into permissions problems such as this one. As a workaround, you could temporarily grant full access to whatever you've got configured as db_admin_username. E.g., assuming 'sspadmin':

  GRANT ALL ON TABLE up_permission TO sspadmin;
  GRANT ALL ON TABLE up_person_dir TO sspadmin;
  GRANT ALL ON TABLE up_permission_activity TO sspadmin;
  GRANT ALL ON TABLE up_user TO sspadmin;
  GRANT ALL ON TABLE up_sso_ticket TO sspadmin;
  GRANT ALL ON TABLE up_raw_events TO sspadmin;

I think that should cover all the up_* tables SSP Liquibase tries to manipulate.

Or you can provision your SSP-Platform/uPortal db artifacts into a separate db/schema, in which case SSP Liquibase should just quietly skip over them.

- Dan


On Oct 6, 2014, at 10:12 AM, Prabhu Janakaraj <[hidden email]> wrote:

When I open the homepage of SSP, the port lets are not loaded properly and the log shows as User is not authenticated.

Since Dan said it can be ignored, I noticed another error in my tomcat log as

Oct 6, 2014 11:56:52 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor host-manager.xml
Oct 6, 2014 11:56:52 AM org.apache.catalina.startup.HostConfig deployDescriptor
INFO: Deploying configuration descriptor ssp.xml
11:56:57.385 [main] INFO  o.j.s.c.logging.ExternalConfigLoader - Config directory set to /opt/ssp/ssp-local
INFO 10/6/14 11:57 AM:liquibase: Successfully acquired change log lock
INFO 10/6/14 11:57 AM:liquibase: Reading from public.databasechangelog
INFO 10/6/14 11:57 AM:liquibase: Reading from public.databasechangelog
INFO 10/6/14 11:57 AM:liquibase: Continuing past: org/jasig/ssp/database/integrationchangesets/i000048.xml::id for external_student_transcript_course no natural key::tony.arland::(Checksum: 3:eb90cd2330ea627723267c4a25552a45) despite precondition failure due to onFail='CONTINUE': 
          classpath:org/jasig/ssp/database/masterChangeLog.xml : Skip v_external_student_transcript_course correction

INFO 10/6/14 11:57 AM:liquibase: Continuing past: org/jasig/ssp/database/integrationchangesets/i000050.xml::drop unique constraint 2 on external_student_test (pg)::dan.mccallum::(Checksum: 3:014de5fdb80a31a95ec43bf16b55ed6c) despite precondition failure due to onFail='CONTINUE': 
          classpath:org/jasig/ssp/database/masterChangeLog.xml : Skip drop unique constraint 2 on external_student_test (postgresql)

SEVERE 10/6/14 11:57 AM:liquibase: Change Set org/jasig/ssp/database/changesets/000081.xml::fix typo in ESL data perm::tony.arland failed.  Error: Error executing SQL UPDATE public.up_permission SET activity = 'DATA_ENGLISH_SECOND_LANGUAGE' WHERE activity = 'DATA_ENGLISH_SECOND_LANGAGE': ERROR: permission denied for relation up_permission
liquibase.exception.DatabaseException: Error executing SQL UPDATE public.up_permission SET activity = 'DATA_ENGLISH_SECOND_LANGUAGE' WHERE activity = 'DATA_ENGLISH_SECOND_LANGAGE': ERROR: permission denied for relation up_permission


Caused by: org.postgresql.util.PSQLException: ERROR: permission denied for relation up_permission


I checked the Postgresql and these tables has SSP as their owner. Is there anything wrong with the database permissions?





On Oct 6, 2014, at 10:27 AM, Daniel McCallum <[hidden email]> wrote:

You can ignore that message. It's coming from background jobs (you can tell b/c of the thread names that start with 'sspScheduler-'), where it's normal.

- Dan

On Oct 6, 2014, at 1:31 AM, Prabhu Janakaraj <[hidden email]> wrote:

hi all,

I am getting a strange error in my ssp.log. I am quite new to using SSP.

system_id_IS_UNDEFINED: 02:59:04.216 [http-8080-5] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:06.603 [http-8080-3] /ssp/api/1/session/getAuthenticatedPerson ERROR o.j.s.s.impl.SecurityServiceImpl - Is anonymous user
system_id_IS_UNDEFINED: 02:59:59.446 [sspScheduler-5:cull-oauth1-nonces]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:08.292 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:28.297 [sspScheduler-4:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 984 ms
system_id_IS_UNDEFINED: 03:00:29.285 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:00:29.286 [sspScheduler-4:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 985 ms
system_id_IS_UNDEFINED: 03:02:38.633 [sspScheduler-5:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:08.994 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:29.623 [sspScheduler-9:sync-coaches]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
system_id_IS_UNDEFINED: 03:05:30.619 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read 0 coaches from PersonAttributesService in 990 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - All SSP merges for 0 coaches completed in 0 ms. Reading: 0 ms. Writing: 0 ms
system_id_IS_UNDEFINED: 03:05:30.620 [sspScheduler-9:sync-coaches]  INFO  t.o.j.s.s.impl.PersonServiceImpl - Read and merged PersonAttributesService 0 coaches in 991 ms
system_id_IS_UNDEFINED: 03:07:39.352 [sspScheduler-4:send-messages]  ERROR o.j.s.s.impl.SecurityServiceImpl - User is not authenticated
^C

Someone’s help will he greatly helpful.


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev


---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev



---
You are currently subscribed to [hidden email] as: [hidden email]
To unsubscribe, change settings or access archives, see http://www.ja-sig.org/wiki/display/JSG/ssp-dev