Hi,
I use the version 9.3 of nuxeo (no problem with the 9.2 version).
When I try to connect the first time to nuxeo with shibboleth, I have this error :
2018-01-04 19:46:52,468 ERROR [ajp-nio-0.0.0.0-8009-exec-1] [org.nuxeo.ecm.platform.shibboleth.auth.ShibbolethAuthenticationPlugin] Failed to get or create user entry
org.nuxeo.ecm.directory.DirectorySecurityException: User null does not have Write permission
at org.nuxeo.ecm.directory.BaseSession.checkPermission(BaseSession.java:143)
at org.nuxeo.ecm.directory.BaseSession.createEntry(BaseSession.java:357)
at org.nuxeo.ecm.platform.shibboleth.auth.ShibbolethAuthenticationPlugin.handleRetrieveIdentity(ShibbolethAuthenticationPlugin.java:133)
(...)
I modified this file : nuxeo-platform-login-shibboleth/src/main/java/org/nuxeo/ecm/platform/shibboleth/auth/ShibbolethAuthenticationPlugin.java
131c131
< DocumentModel entry = userDir.getEntry(userId);
---
> DocumentModel entry = Framework.doPrivileged(() -> userDir.getEntry(userId));
133c133
< userDir.createEntry(fieldMap);
---
> Framework.doPrivileged(() -> userDir.createEntry(fieldMap));
136c136
< userDir.updateEntry(entry);
---
> Framework.doPrivileged(() -> userDir.updateEntry(entry));
And now it's ok, my new profil is created.
Happy new year 🙂
