[gt-user] How to use the DenyOverride algorithm with PDPs?

[Roland Kuebert]

Hi Tom,

Tom Scavo wrote:
> Roland, can you please enable DEBUG logging in the container and post
> the relevant logs?  Not the entire log file of course, just the
> relevant log entries.
>   
I added DEBUG logging for org.globus.wsrf.impl.security (and 
wsrf.config) and I get:

2009-03-11T15:11:59.904+01:00 ERROR handler.AddressingHandler 
[ServiceThread-55,invoke:142] Exception in AddressingHandler
AxisFault
 faultCode: {http://schemas.xmlsoap.org/soap/envelope/}Server.userException
 faultSubcode:
 faultString: org.globus.wsrf.config.ConfigException: [JWSSEC-186] 
Authoriation algorithm provider not found for name "DenyOverride"
 faultActor:
 faultNode:
 faultDetail:
    
{http://xml.apache.org/axis/}stackTrace:org.globus.wsrf.config.ConfigException: 
[JWSSEC-186] Authoriation algorithm provider not found for name 
"DenyOverride"
    at 
org.globus.wsrf.impl.security.authorization.AuthorizationEngine.getInstance(AuthorizationEngine.java:74)
    at 
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:142)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initAuthorizationConfig(ServiceSecurityDescriptor.java:778)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:474)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:141)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.<init>(ServiceSecurityDescriptor.java:115)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.createServiceDescriptor(ServiceSecurityHelper.java:337)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:120)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:90)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:80)
    at 
org.globus.wsrf.container.ServiceManager.initializeService(ServiceManager.java:262)
    at 
org.globus.axis.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:138)
    at 
org.globus.wsrf.handlers.AddressingHandler.resetOperations(AddressingHandler.java:310)
    at 
org.globus.axis.message.addressing.handler.AddressingHandler.processServerRequest(AddressingHandler.java:434)
    at 
org.globus.wsrf.handlers.AddressingHandler.processServerRequest(AddressingHandler.java:115)
    at 
org.globus.axis.message.addressing.handler.AddressingHandler.invoke(AddressingHandler.java:136)
    at 
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
    at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
    at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
    at org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)
    at org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
    at 
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)
    at 
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:684)
    at 
org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:182)
    at org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)


org.globus.wsrf.config.ConfigException: [JWSSEC-186] Authoriation 
algorithm provider not found for name "DenyOverride"
    at org.apache.axis.AxisFault.makeFault(AxisFault.java:104)
    at 
org.globus.axis.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:142)
    at 
org.globus.wsrf.handlers.AddressingHandler.resetOperations(AddressingHandler.java:310)
    at 
org.globus.axis.message.addressing.handler.AddressingHandler.processServerRequest(AddressingHandler.java:434)
    at 
org.globus.wsrf.handlers.AddressingHandler.processServerRequest(AddressingHandler.java:115)
    at 
org.globus.axis.message.addressing.handler.AddressingHandler.invoke(AddressingHandler.java:136)
    at 
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
    at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
    at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
    at org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)
    at org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
    at 
org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)
    at 
org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:684)
    at 
org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:182)
    at org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)
Caused by: org.globus.wsrf.config.ConfigException: [JWSSEC-186] 
Authoriation algorithm provider not found for name "DenyOverride"
    at 
org.globus.wsrf.impl.security.authorization.AuthorizationEngine.getInstance(AuthorizationEngine.java:74)
    at 
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:142)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initAuthorizationConfig(ServiceSecurityDescriptor.java:778)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:474)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.initialize(ServiceSecurityDescriptor.java:141)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityDescriptor.<init>(ServiceSecurityDescriptor.java:115)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.createServiceDescriptor(ServiceSecurityHelper.java:337)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:120)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:90)
    at 
org.globus.wsrf.impl.security.descriptor.ServiceSecurityHelper.initialize(ServiceSecurityHelper.java:80)
    at 
org.globus.wsrf.container.ServiceManager.initializeService(ServiceManager.java:262)
    at 
org.globus.axis.description.ServiceDescUtil.resetOperations(ServiceDescUtil.java:138)
    ... 13 more

If you need any more information, just tell me.

> Also, what version of GT (or JWS Core) are you using?
>   
I am using GT4 4.2.1 running on Ubuntu 8.10.

Thanks,

Roland