Grails JIRA

[GRAILSPLUGINS-2985] Spring Security Ldap Cant Be Externalized

Mon, 23 Apr 2012 11:13:59 -0700

Trying to externalize my LDAP config. Works normally when put in my Config.groovy file but when put into my properties file, it fails consistently. I can get most of it to pass but it fails always at the context:

grails.plugins.springsecurity.ldap.context.server="ldap://my.ldap.server:10389/"

Can't use single quotes or it throws error:

Caused by TokenMgrError: Lexical error at line 1, column 1. Encountered: "\'" (39), after : ""

Can't use colon (which is need by url) or it throws error:

Caused by TokenMgrError: Lexical error at line 1, column 5. Encountered: ":" (58), after : ""

Can't escape colon; it just throws same error.

[GRAILSPLUGINS-2984] ExtendedGormMappings Plugin broken with grails 2.0.1

Mon, 12 Mar 2012 04:51:49 -0700

I realize this isn't a Grails issue, I just couldn't find a jira project for the ExtendedGormMappings plugin. The issue is theExtendedMappingLocalSessionFactoryBean (defined in the plugin) which extends ConfigurableLocalSessionFactoryBean but provides its own applicationContext property. This masks the definition in ConfigurableLocalSessionFactoryBean which then fails initialization (NPE) line 163 as it has a null app context. Fix is to just remove the applicationContext property, getter and setter from ExtendedMappingLocalSessionFactoryBean. Also, ExtendedMappingLocalSessionFactoryBean does not need to implement ApplicationContextAware since ConfigurableLocalSessionFactoryBean already does.

[GRAILSPLUGINS-2981] Include libraries into a jar in plugin project using Grails 2.0 not work

Wed, 25 Jan 2012 01:00:45 -0800

Scenario:

When I export the project plugin into a jar format, the libraries (lib directory) is not included in it.
However when I compile it into a zip format, it's included.

To reproduce:

Create a plugin project
Include library in lib directory
Package plugin in binary format
Drag created jar file into new project (Grails 2.0)
Run project
Try access to library Class from your plugin (Exception thrown: NoClassDefFoundError )

However, it's works fine with zip format.

[GRAILSPLUGINS-2980] Grails 2.0: Binary plugin not execute install script (_Install.groovy)

Wed, 25 Jan 2012 00:31:46 -0800

When I am deploying my binary plugin in a grails project, it seems like my scripts (_Install.groovy, _Upgrade.groovy, _Uninstall.groovy) have been missed.

[GRAILSPLUGINS-2978] Grails 2.0.0 Plugin development: when trying to use dynamic finders an exceptions occurs

Wed, 11 Jan 2012 08:43:17 -0800

In Grails 2.0.0 in plugin project when trying to use dynamic finders for model an exceptions occurs.

For example, when I am trying to list from my model:

"groovy.lang.MissingMethodException: No signature of method: myPackage.MyModel.list() is applicable for argument types: () values: []
Possible solutions: list(), list(java.util.Map), is(java.lang.Object), wait(), lock(), find()"

That not ocurrs in application project, however happens in plugin project.

That not occurs in previous versions (1.3.4, 1.3.7)

[GRAILSPLUGINS-2977] DB Connection leak in reports

Mon, 26 Dec 2011 05:49:20 -0800

Hello,

with useGrailsDatasource = 'true', connections opened in BirtReportService are never returned to the pool. It is as if task.close() did not care to close provided connections (which would seem to be a good practice as it is generally the responsibility of someone grabbing a resource to return it). I have made a patch taking care of this. I I can't find how to attach it, here it is https://gist.github.com/1521198

Regards

[GRAILSPLUGINS-2976] csv plugin fails with groovy.lang.MissingMethodException in Grails2.0.0.RC3

dependent — Thu, 15 Dec 2011 05:38:48 -0800

grails create-app csvtest
cd csvtest
grails install-plugin csv

Change BootStrap.groovy:

class BootStrap {

   def init = { servletContext ->
    
      "hello, world, how, are, you".eachCsvLine { tokens ->
         println("$tokens")
      }
   }
}

This is the first example how to use the plugin.
app-run leads to

Message: groovy.lang.MissingMethodException: No signature of method: BootStrap$_closure1_closure3.doCall() is applicable for argument types: (java.lang.String, java.lang.String, java.lang.String, java.lang.String, java.lang.String) values: [hello,  world,  how,  are,  you]

Same under Grails 2.0.0.RC1 works.

[GRAILSPLUGINS-2975] datePicker clipped by bottom of accordionElement

Mon, 5 Dec 2011 15:43:40 -0800

I have placed gui:datePicker components inside a gui:accordionElement. When I click on the calendar button, the calendar drops down but it is clipped by the bottom of the accordionElement. I expect to see the calendar and be able to click on it.

[GRAILSPLUGINS-2974] the list of plugins on svn.codehaus.org/grails-plugins is incomplete

Sun, 6 Nov 2011 21:35:52 -0800

If I try to get le list of plugins
http://svn.codehaus.org/grails-plugins/.plugin-meta/plugins-list.xml
I get a list containing only 4 plugins instead of 700

[GRAILSPLUGINS-2973] [dynamic-controller] Can't use completely dynamic controller with Grails 2.0.0

Thu, 20 Oct 2011 07:45:10 -0700

With latest grails 2.0.0.BUILD-SNAPSHOTs you can't create a completely dynamic controller (one without existing source). If you try you will get NPE. Workaround is to create empty (without any methods or closures, just class declaration) groovy class for targeted dynamic controller in grails-app/controllers.

Problem is in com.burtbeckwith.grails.plugins.dynamiccontroller.DynamicControllerManager which doesn't initialize dynamic controller in registerClosures method.

[GRAILSPLUGINS-2972] Incorrect maven repo in bubbling plugin

Tue, 27 Sep 2011 14:39:02 -0700

This plugin doesn't seem to have a issue tracker. So creating one under grails-ui

Why is the code below a part of plugin.

mavenRepo "http://localhost:8081/artifactory/plugins-releases-local"

[GRAILSPLUGINS-2971] Users can authenticate with the password defined in the SysAuthUser.password column even though LDAP authentication is used

Wed, 14 Sep 2011 08:45:44 -0700

I used the settings below. The password column is filled in the database with senseful values so I could turn of LDAP authentication any time. But the side effect is, that it is possible to get through the login screen by EITHER entering the password defined in the Active Directory for the user OR by entering the password encoded in the password column of the SysAuthUser table in the database!

Assuming that I am not the only one that might switch to using the LDAP plugin after using the database-only approach for a while, this is a security implication.

If I turn on LDAP authentication there MUST only be one password allowed and that is the password defined in the ldap.

I realize that the mechanism is that if I enter the password defined in the database, the principal is org.codehaus.groovy.grails.plugins.springsecurity.GrailsUser and if I enter the password used in the ldap, the principal org.springframework.security.ldap.userdetails.LdapUserDetailsImpl.

But it looks wrong to me. A solution would be to set the passwords in the database to a non-zero-length string, that will never be matched by a md5-hash. But that should be documented.

If it is, I overlooked, sorry.

grails.plugins.springsecurity.ldap.context.managerDn = 'CN=xxxx,CN=Users,DC=xxxx,DC=xxxx'
grails.plugins.springsecurity.ldap.context.managerPassword = ''
grails.plugins.springsecurity.ldap.context.server = 'ldap://xxxx:389'
grails.plugins.springsecurity.ldap.authorities.groupSearchBase = 'CN=Users,DC=xxxx,DC=xxxx'
grails.plugins.springsecurity.ldap.authorities.groupSearchFilter = 'member={0}' // Active Directory specific - the example settings will work fine for a plain LDAP server
grails.plugins.springsecurity.ldap.search.base = 'CN=Users,DC=xxxx,DC=xxxx'
grails.plugins.springsecurity.ldap.search.filter="sAMAccountName={0}" // for Active Directory you need this
grails.plugins.springsecurity.ldap.useRememberMe = false
grails.plugins.springsecurity.ldap.authorities.ignorePartialResultException = true // typically needed for Active Directory
grails.plugins.springsecurity.ldap.authorities.retrieveDatabaseRoles = true

[GRAILSPLUGINS-2970] Facing Problem while installing security ldap plugin

Tue, 13 Sep 2011 09:08:58 -0700

I am trying to use Spring ldap security feature, howevel when i am running the grails compile command, grails tries to downlaod the dependencies, but it gets hanged after the statement;

Downloading: http://repository.springsource.com/maven/bundles/release/org/springframework/ldap/org.springframework.ldap/1.3.0.RELEASE/org.springframework.ldap-1.3.0.RELEASE.pom ...
Download complete.
Downloading: http://repository.springsource.com/maven/bundles/release/org/springframework/ldap/org.springframework.ldap/1.3.0.RELEASE/org.springframework.ldap-1.3.0.RELEASE.pom.sha1 ...
Download complete.

note that i am working in secure zone so i am providing the proxy settings for the grails.

No operation happens after that.

Can you please let me know what is the issue?

[GRAILSPLUGINS-2969] sharding plugin - "ShardingDS.groovy: 15: Can't have an abstract method in a non-abstract class"

Fri, 2 Sep 2011 02:50:20 -0700

Install (as described in http://jeffrick.com/2010/07/13/a-grails-plugin-for-sharding/) on console:

1) grails create-app ShardingExample
2) cd ShardingExample
3) grails install-plugin sharding

than set up first domain class:
4) grails create-domain-class UserIndex

in this step the error occours:

C:\Dokumente und Einstellungen\soenkex\.grails\1.3.7\projects\ShardingExample\plugins\sharding-0.5\src\groovy\com\jeffrick\grails\plugin\sharding\ShardingDS.groovy: 15: Can't have an abstract method in a non-abstract class. The class 'com.je
ffrick.grails.plugin.sharding.ShardingDS' must be declared abstract or the method 'java.util.logging.Logger getParentLogger()' must be implemented.
@ line 15, column 1.
class ShardingDS extends AbstractRoutingDataSource implements ApplicationContextAware {
^
1 error
at org.codehaus.groovy.control.ErrorCollector.failIfErrors(ErrorCollector.java:302)
at org.codehaus.groovy.control.CompilationUnit.applyToPrimaryClassNodes(CompilationUnit.java:969)
at org.codehaus.groovy.control.CompilationUnit.doPhaseOperation(CompilationUnit.java:519)
at org.codehaus.groovy.control.CompilationUnit.processPhaseOperations(CompilationUnit.java:497)
(....)

Thanks!
-Soenke

[GRAILSPLUGINS-2968] Authentication failures because of duplicate encoding of password when we use Spring-security-ui with spring-security-core-1.2.1

Fri, 26 Aug 2011 02:27:16 -0700

The spring security manual, http://grails-plugins.github.com/grails-spring-security-core/docs/manual/guide/single.html#12.2%20Salted%20Passwords, has a note giving this info.

"If you are encoding the password in the User domain class (using beforeInsert and encodePassword) then don't call springSecurityService.encodePassword() in your controller since you'll double-encrypt the password and users won't be able to log in. It's best to encapsulate the password handling logic in the domain class. "

However,the UserController.groovy file in spring-security-ui plugin encodes the password before passing it to User.groovy of Spring-security-core plugin. This leads to authentication failures.

The solution is to remove encoding from Usercontroller.groovy and include Salt in User.groovy of spring-security-core by default and tag it to username.

Patch:

UserController.groovy:

/* Copyright 2009-2010 the original author or authors.
*

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
*
http://www.apache.org/licenses/LICENSE-2.0
*
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/
package grails.plugins.springsecurity.ui

import grails.plugins.springsecurity.ui.AbstractS2UiController

import grails.converters.JSON

//import org.codehaus.groovy.grails.plugins.springsecurity.NullSaltSource
import org.springframework.dao.DataIntegrityViolationException

/**

@author <a href='mailto:burt@burtbeckwith.com'>Burt Beckwith</a>
*/
class UserController extends AbstractS2UiController {

def userCache

def create = { def user = lookupUserClass().newInstance(params) [user: user, authorityList: sortedRoles()] }

def save = {
def user = lookupUserClass().newInstance(params)
if (params.password) { user.password = params.password }
if (!user.save(flush: true)) { render view: 'create', model: [user: user, authorityList: sortedRoles()] return }

addRoles(user)
flash.message = "${message(code: 'default.created.message', args: [message(code: 'user.label', default: 'User'), user.id])}"
redirect action: edit, id: user.id
}

def edit = { def user = params.username ? lookupUserClass().findByUsername(params.username) : null if (!user) user = findById() if (!user) return return buildUserModel(user) }

def update = {
def user = findById()
if (!user) return
if (!versionCheck('user.label', 'User', user, [user: user])) { return }

def oldPassword = user.password
user.properties = params
if (params.password && !params.password.equals(oldPassword)) { user.password = params.password } }

if (!user.save()) { render view: 'edit', model: buildUserModel(user) return }

lookupUserRoleClass().removeAll user
addRoles user
userCache.removeUserFromCache user.username
flash.message = "${message(code: 'default.updated.message', args: [message(code: 'user.label', default: 'User'), user.id])}"
redirect action: edit, id: user.id
}

def delete = {
def user = findById()
if (!user) return

try {
lookupUserRoleClass().removeAll user
user.delete flush: true
userCache.removeUserFromCache user.username
flash.message = "${message(code: 'default.deleted.message', args: [message(code: 'user.label', default: 'User'), params.id])}"
redirect action: search
}
catch (DataIntegrityViolationException e) {
flash.error = "${message(code: 'default.not.deleted.message', args: [message(code: 'user.label', default: 'User'), params.id])}"
redirect action: edit, id: params.id
}
}

def search = { [enabled: 0, accountExpired: 0, accountLocked: 0, passwordExpired: 0] }

def userSearch = {

boolean useOffset = params.containsKey('offset')
setIfMissing 'max', 10, 100
setIfMissing 'offset', 0

def hql = new StringBuilder('FROM ' + lookupUserClassName() + ' u WHERE 1=1 ')
def queryParams = [:]

for (name in ['username']) {
if (params[name]) { hql.append " AND LOWER(u.$name) LIKE :$name" queryParams[name] = params[name].toLowerCase() + '%' }
}

for (name in ['enabled', 'accountExpired', 'accountLocked', 'passwordExpired']) {
int value = params.int(name)
if (value) { hql.append " AND u.$name=:$name" queryParams[name] = value == 1 }
}

int totalCount = lookupUserClass().executeQuery("SELECT COUNT(DISTINCT u) $hql", queryParams)[0]

int max = params.int('max')
int offset = params.int('offset')

String orderBy = ''
if (params.sort) {
orderBy = " ORDER BY u.$params.sort ${params.order ?: 'ASC'}"
}

def results = lookupUserClass().executeQuery(
"SELECT DISTINCT u $hql $orderBy",
queryParams, [max: max, offset: offset])
def model = [results: results, totalCount: totalCount, searched: true]

// add query params to model for paging
for (name in ['username', 'enabled', 'accountExpired', 'accountLocked',
'passwordExpired', 'sort', 'order']) { model[name] = params[name] }

render view: 'search', model: model
}

/**

Ajax call used by autocomplete textfield.
*/
def ajaxUserSearch = {

def jsonData = []

if (params.term?.length() > 2) {
String username = params.term

setIfMissing 'max', 10, 100

def results = lookupUserClass().executeQuery(
"SELECT DISTINCT u.username " +
"FROM ${lookupUserClassName()} u " +
"WHERE LOWER(u.username) LIKE :name " +
"ORDER BY u.username",
[name: "${username.toLowerCase()}%"],
[max: params.max])

for (result in results) { jsonData << [value: result] }
}

render text: jsonData as JSON, contentType: 'text/plain'
}

protected void addRoles(user) {
for (String key in params.keySet()) {
if (key.contains('ROLE') && 'on' == params.get(key)) { lookupUserRoleClass().create user, lookupRoleClass().findByAuthority(key), true }
}
}

protected Map buildUserModel(user) {

List roles = sortedRoles()
Set userRoleNames = user.authorities*.authority
def granted = [:]
def notGranted = [:]
for (role in roles) {
if (userRoleNames.contains(role.authority)) { granted[(role)] = userRoleNames.contains(role.authority) }
else { notGranted[(role)] = userRoleNames.contains(role.authority) }
}

return [user: user, roleMap: granted + notGranted]
}

protected findById() {
def user = lookupUserClass().get(params.id)
if (!user) {
flash.message = "${message(code: 'default.not.found.message', args: [message(code: 'user.label', default: 'User'), params.id])}"
redirect action: search
}

user
}

protected List sortedRoles() {
lookupRoleClass().list().sort { it.authority }
}
}

User.groovy(Domain class of spring-security-core) --> Change this function:

protected void encodePassword() {
password = springSecurityService.encodePassword(password,username)
}

Config.groovy --> Add this line also by default

grails.plugins.springsecurity.dao.reflectionSaltSourceProperty = 'username'

[GRAILSPLUGINS-2967] An error occured installing the plugin [shiro-1.1.3]: Unable to delete

Thu, 18 Aug 2011 22:25:08 -0700

grails> install-plugin shiro

Resolving plugin JAR dependencies..
delete logs...

Plugin installed.
grails> compile --staktrace

Error An error occured installing the plugin [shiro-1.1.3]: Unable to delete f
ile D:\TZProfile\.grails\2.0.0.M1\projects\Vote\plugins\shiro-1.1.3\lib\shiro-co
re-1.1.0.jar

Error Error running script compile --staktrace: org.codehaus.groovy.grails.cli
.ScriptExitException (Use --stacktrace to see the full trace)