Your users.properties file is not formatted correctly. It's the same format
(and in fact can be the same file) as the one for the admin pages:

# The syntax for each line is:
#
# username=password,grantedAuthority[,grantedAuthority][,enabled|disabled]
#
gnarls=passwordnotused,ROLE_ADMIN

The above allows a user named "gnarls" to have access.

--Dave


--

DAVID A. CURRY, CISSP
*DIRECTOR OF INFORMATION SECURITY*
INFORMATION TECHNOLOGY

71 FIFTH AVE., 9TH FL., NEW YORK, NY 10003
+1 212 229-5300 x4728 • [email protected]

[image: The New School]

On Fri, Feb 23, 2018 at 10:28 AM, Cheltenham, Chris <
[email protected]> wrote:

> Hello Everyone,
>
>
>
> Still having problems with access denied on /cas-management
>
>
>
> I turned on DEBUG and I see this in the logs.
>
>
>
> 22T13:22:12.379-05:00[America/New_York], authenticationMethod=Employee-LDAP,
> successfulAuthenticationHandlers=Employee-LDAP,
>
> longTermAuthenticationRequestTokenUsed=false} | roles: [] | permissions:
> [] | isRemembered: false | clientName: CasClient |
>
> linkedId: null |] does not contain the required role [ROLE_ADMIN]
>
>
>
>
>
> My users.properties files look thusly –
>
>      casuser=ROLE_ADMIN,<myid>
>
>
>
> and yes ROLE_ADMIN is stated in the management.properties file.
>
>      cas.mgmt.adminRoles[0]=ROLE_ADMIN
>
>
>
> There is a Json file in /etc/cas/services or the users.properties file.
>
>
>
> That is stated in cas.properties
>
>    cas.serviceRegistry.config.location=file:/etc/cas/services
>
>
>
> Is there a way to format the users. Properties file so anyone can use the
> management portal?
>
>
>
>
>
>
>
> ===========================
>
> Thank You;
>
> Chris Cheltenham
> Technology Services
> The School District of Philadelphia
>
> Work # 215-400-5025
> Cell # 215-301-6571
>
> --
> - Website: https://apereo.github.io/cas
> - Gitter Chatroom: https://gitter.im/apereo/cas
> - List Guidelines: https://goo.gl/1VRrw7
> - Contributions: https://goo.gl/mh7qDG
> ---
> You received this message because you are subscribed to the Google Groups
> "CAS Community" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To view this discussion on the web visit https://groups.google.com/a/
> apereo.org/d/msgid/cas-user/008301d3acba%24f0e4fe30%
> 24d2aefa90%24%40philasd.org
> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/008301d3acba%24f0e4fe30%24d2aefa90%24%40philasd.org?utm_medium=email&utm_source=footer>
> .
>

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/CA%2Bd9XAOZfm-azTX0TzCFs7AYmY2DkvNLF%2Bv82mJqicSZntatMA%40mail.gmail.com.

Reply via email to