You can see configuration in the UI in 2.4.0 patches: grouper_v2_4_0_api_patch_66, /grouper_v2_4_0_ui_patch_39, grouper_v2_4_0_ws_patch_7
Quick start
configuration in grouper-ui-ng.base.properties
####################################### ## Configuration in ui ####################################### # allow configuration from ui # {valueType: "boolean", required: true} grouperUi.configuration.enabled=true # allow configuration only from these IP ranges, e.g. 1.2.3.4/32 or 2.3.4.5/24, comma separated, leave blank if available from everywhere # {valueType: "string", multiple: true} grouperUi.configurationEditor.sourceIpAddresses = 127.0.0.1/32 # if the source IP is set by apache or proxy or whatever # {valueType: "string", sampleValue: "X-FORWARDED-FOR"} grouperUi.reverseProxyForwardedForHeader =
You can:
Disable UI configuration
Open up the source IP address to let a non localhost IP address
- List a reverse proxy header where IP address is retrieve from in the incoming HTTP request, e.g. X-FORWARDED-FOR
Note: you can set this in the database via GSH
GrouperSession grouperSession = GrouperSession.startRootSession(); edu.internet2.middleware.grouper.cfg.dbConfig.GrouperConfigHibernate grouperConfigHibernate = new edu.internet2.middleware.grouper.cfg.dbConfig.GrouperConfigHibernate(); grouperConfigHibernate.setConfigEncrypted(false); grouperConfigHibernate.setConfigFileHierarchyDb("INSTITUTION"); grouperConfigHibernate.setConfigFileNameDb("grouper-ui.properties"); grouperConfigHibernate.setConfigKey("grouperUi.configurationEditor.sourceIpAddresses"); grouperConfigHibernate.setConfigValue("1.2.3.4/32"); grouperConfigHibernate.saveOrUpdate();
Viewing configuration
Features
Changes in config file location
The grouper-ui.base.properties and grouper-ws.base.properties have been moved to the API from the UI and WS. The new names are grouper-ui-ng.base.properties, and grouper-ws-ng.base.properties.