Shibboleth cannot create a new user in 9.3

jelninos_ — Thu, 04 Jan 2018 19:28:11 GMT

Hi,

I use the version 9.3 of nuxeo (no problem with the 9.2 version). When I try to connect the first time to nuxeo with shibboleth, I have this error :

2018-01-04 19:46:52,468 ERROR [ajp-nio-0.0.0.0-8009-exec-1] [org.nuxeo.ecm.platform.shibboleth.auth.ShibbolethAuthenticationPlugin] Failed to get or create user entry
org.nuxeo.ecm.directory.DirectorySecurityException: User null does not have Write permission
	at org.nuxeo.ecm.directory.BaseSession.checkPermission(BaseSession.java:143)
	at org.nuxeo.ecm.directory.BaseSession.createEntry(BaseSession.java:357)
	at org.nuxeo.ecm.platform.shibboleth.auth.ShibbolethAuthenticationPlugin.handleRetrieveIdentity(ShibbolethAuthenticationPlugin.java:133)
(...)

I modified this file : nuxeo-platform-login-shibboleth/src/main/java/org/nuxeo/ecm/platform/shibboleth/auth/ShibbolethAuthenticationPlugin.java

131c131
<                 DocumentModel entry = userDir.getEntry(userId);
---
>                 DocumentModel entry = Framework.doPrivileged(() -> userDir.getEntry(userId));
133c133
<                     userDir.createEntry(fieldMap);
---
>                     Framework.doPrivileged(() -> userDir.createEntry(fieldMap));
136c136
<                     userDir.updateEntry(entry);
---
>                     Framework.doPrivileged(() -> userDir.updateEntry(entry));

And now it's ok, my new profil is created. Happy new year 🙂

Re: Shibboleth cannot create a new user in 9.3

Florent_Guillau — Thu, 11 Jan 2018 14:20:42 GMT

Thanks, but this was already fixed: NXP-23837

topic Re: Shibboleth cannot create a new user in 9.3 in Nuxeo Forum

Shibboleth cannot create a new user in 9.3

Re: Shibboleth cannot create a new user in 9.3