Control Panel admin URL is missing

[Migrated From Jforum.net]

Most likely your SSO user in not in a group that has admin priviledges. You'll need to log in as the native admin user and add this SSO user to the admin group.
[originally posted on jforum.net by monroe]

[Migrated From Jforum.net]

With Cookie based SSO, when user gets directed to Jforum, I am expecting to see a link to control panel for managing the forum. But I don't see it.

Can someone tell me, which file has the code for Control panel URL, so I can check to see, if I screwed-up something. Is there an URL, I can hit for control panel, after successful login as admin.

Any advise will help...since I am totally stuck.

Thanks
MJ


[originally posted on jforum.net by sf_techie]

[Migrated From Jforum.net]

SSO user(username: Admin) is there in jforum database as admin. I verified that in jforum_user_groups table.

If I can get answer to following two questions, I can debug why link is not showing-up(since I made some template changes, but not sure how control panel link got removed)

1. Which file has link for Admin control panel
2. What is the URL for native login

Thanks..
Jain




[originally posted on jforum.net by sf_techie]

[Migrated From Jforum.net]

Rights are based on User id NUMBERS not names. Generally, when you do an SSO login, a new JForum user entry is created, if one doesn't exist. So, even though your user login name is admin, it's id number (DB primary key) is not the same. And so, it is not considered to be an admin because it's NUMERIC id is not in the admin group membership.

That said, a general process for granting SSO users admin rights would be to do the following:

1) Turn on SSO and log in as the ID you want to be an admin user (creates the JForum_Users entry)

2) Turn off SSO (modify config info) and log in as default admin user (see install docs)

3) Add the new SSO admin user to the admin group

4) Turn SSO back on.
[originally posted on jforum.net by monroe]

[Migrated From Jforum.net]

Username ''Admin' is already added to admin group. Following is evidence:

SELECT group_name FROM jforum_groups, jforum_user_groups, jforum_users WHERE
jforum_groups.group_id = jforum_user_groups.group_id AND
jforum_users.user_id = jforum_user_groups.user_id AND
jforum_users.username = 'Admin';

Above query returns 'Administration'.

After above, when I SSO with user "Admin", I should be seeing control panel link???

Please help..this gating beta launch of my website...

Thanks
Jain
[originally posted on jforum.net by sf_techie]

[Migrated From Jforum.net]

It may be possible that your "Administration" group has the wrong permissions, for any reason. If jforum_roles, check if it has "perm_administration" associtated.

The URL to the admin panel is /admBase/login.page

Rafael
[originally posted on jforum.net by Rafael Steil]

[Migrated From Jforum.net]

I have SSO enabled, but I could not get to admin link. When I follow admBase/login.page directly it says Registration of new users is disabled.

Also, I specified admin/admin as username password. How can I use it to login as admin when SSO is enabled?

Basically I wanted to get to admin panel when SSO is enabled.
[originally posted on jforum.net by shalinjshah]

[Migrated From Jforum.net]

You need to add an SSO user to your admin group. To do this, you need to:

1) Change your config file to on SSO and log in to jForum with the id you want to use as an admin. This will create a user entry in jforum's user table.

2) Change your config file to turn OFF SSO, restart the server, and log in to jForum with the default admin id (created when you installed jForum).

3) Go to the groups admin screen and add the new SSO user to the admin group.

Turn back on SSO and your SSO admin should now work.
[originally posted on jforum.net by monroe]

[Migrated From Jforum.net]

em..

I have the same problem with shalinjshah, and have follow advise from monroe.. but it's not solve my problem yet. Have it solve ur problem shalinjshah?

And this is chunk of the CookieSSO i compiled (just incase it's related to this problem):

public class CookieSSO implements SSO {

    static final String md5Salt = "someWeirdStringSharedByTheApps";
    static final int JFORUM_NORMAL_GROUP_ID = 1;
    static final int JFORUM_ADMIN_GROUP_ID = 2;
    static final int JFORUM_MODERATOR_GROUP_ID = 3;
    /**
     *  Assume cookie of format:  userId/e-mail/group_info/md5-hash.<P>
     *  
     *  Where:<br> 
     *  userId = Remote apps's authenticated app.<br>
     *  e-mail = E-mail address of remote user's app<br>
     *  group_info = Group info. 
     *  
     */
    public String authenticateUser(RequestContext request) { //  required method
	
        Cookie myCookie = ControllerUtils.getCookie("rhapforumlogin"); // my app login cookie
        if (myCookie == null) {  // No Cookie, so just return a null.
            return null;
        }
            
        //Parse the cookie into it's parts.
        StringTokenizer st = new StringTokenizer(myCookie.getValue(),"/");
        String userId = null;
        String email = null;
        String group_info = null;
        String md5String = null;
        try {
            userId = st.nextToken();
            email = st.nextToken();
            group_info = st.nextToken();
            md5String = st.nextToken();
        } catch ( Exception e ) {
            return null;
        }
		
        //Validate the cookie's MD5 Hash
        try {
            if (!makeMD5Token(userId, email, group_info).equals(md5String)) {
                return null;
            }
        } catch ( Exception e ) {
            myCookie.getValue();
            return null;
        }

        SessionContext session = request.getSessionContext();
        
        String lastSSOUser = (String) session.getAttribute("MY_SSO_USER");
        
        // If lastSSOUser is set and matches, then it's valid so just 
        // return the name and save looking up the user, etc.
        if ( lastSSOUser != null && lastSSOUser.equals(userId)) {
            return lastSSOUser;
        }
        
        // Create the jForum user entry if needed.
        SSOUtils utils = new SSOUtils();

        String password = null;  // Could set a password here if desired.
        if (!utils.userExists(userId)) {

            if (email == null || email.equals("")) {
                email = SystemGlobals.getValue(ConfigKeys.SSO_DEFAULT_EMAIL);
            }

            if (password == null) {
                password = SystemGlobals.getValue(ConfigKeys.SSO_DEFAULT_PASSWORD);
            }

            utils.register(password, email);
        }
        User user = utils.getUser();
        
        session.setAttribute("MY_SSO_USER", userId);
        
        // Make sure user group info is current with each "login".
        
        UserDAO um = DataAccessDriver.getInstance().newUserDAO();
        
        int[] disallowedGroups = null;
        int[] allowedGroups = null;

        if ( group_info.equals("admin")) {
            allowedGroups = new int[3];
            allowedGroups[0] = JFORUM_NORMAL_GROUP_ID;
            allowedGroups[1] = JFORUM_MODERATOR_GROUP_ID;
            allowedGroups[2] = JFORUM_ADMIN_GROUP_ID;
        } else if ( group_info.equals("moderator" )){
            disallowedGroups = new int[1];
            disallowedGroups[0] = JFORUM_ADMIN_GROUP_ID;
            allowedGroups = new int[2];
            allowedGroups[0] = JFORUM_NORMAL_GROUP_ID;
            allowedGroups[1] = JFORUM_MODERATOR_GROUP_ID;
        } else {
            disallowedGroups = new int[2];
            disallowedGroups[0] = JFORUM_ADMIN_GROUP_ID;
            disallowedGroups[1] = JFORUM_MODERATOR_GROUP_ID;
            allowedGroups = new int[1];
            allowedGroups[0] = JFORUM_NORMAL_GROUP_ID;
        } 
        if ( disallowedGroups != null ) {
            um.removeFromGroup(user.getId(), disallowedGroups);
        }
        um.addToGroup(user.getId(), allowedGroups);
        SecurityRepository.remove(user.getId());

        // User by isSessionValid.
        Cookie cookie = new Cookie("JforumSSO", userId);
        cookie.setMaxAge(myCookie.getMaxAge());
        cookie.setPath("/");
        JForumExecutionContext.getResponse().addCookie(cookie);


        return userId; 
    }
    
    public boolean isSessionValid(UserSession userSession, RequestContext request) {
        String remoteUser  = null;
        Cookie SSOCookie = ControllerUtils.getCookie("JforumSSO");
        if (SSOCookie != null) remoteUser = SSOCookie.getValue(); //  jforum username

		if (remoteUser == null){
			return false;
		}
		// remoteUser !=null
		else if (remoteUser.equals(userSession.getUserId())){
			return true;
		}
		
        return false;
    }

[originally posted on jforum.net by Vilisini]

[Migrated From Jforum.net]

Hi Vilisini,

With workaround suggested monroe, I can get one of my apps user to be admin. What I did is added him through SSO in JForum system, then turn of SSO and added my apps user to admin group.

Now, turn SSO back on. With this now my own app user is admin and he can see admin panel link.

Let me know if this doesn't work for you.

Regards,
Shalin
[originally posted on jforum.net by shalinjshah]

[Migrated From Jforum.net]

sorry for not replying soon XD..

umm.. it still doesn't work in my case , jforum keep saying "Registration of new users is disabled." when i click admin control panel button. Can u please show me ur sso configuration shalinjsah?

Regards,
Vilisini
[originally posted on jforum.net by Vilisini]

[Migrated From Jforum.net]

Hi Vilisini,

since i turn on sso, i missing the admin link too.

Do you have found a solution for missing admin control panel link?

Regards,
starr
[originally posted on jforum.net by starr]

[Migrated From Jforum.net]

I assume you followed the steps above to make your SSO user an admin user?

If not... A quick search for where the "Registration disabled.." message might come from suggests that this might be due to the following options in the jforum-custom.conf file being wrong.

First, check:

registration.enabled=false

This setting will cause any call to create a new user to be disabled unless the current id is an admin or the config file contains this setting:

authentication.type=sso

Note this must be lower case and make sure there are no blanks, etc around it (might not matter... but...)


[originally posted on jforum.net by monroe]

[Migrated From Jforum.net]

Hi Monroe,

thank you for reply. I have solved the problem in the meantime.

I found the bug in my own authenticateUser method. It overwrote the group settings in the db table.

Regards,
starr
[originally posted on jforum.net by starr]