Perl 6 - the future is here, just unevenly distributed

IRC log for #openam, 2014-05-20

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
06:25 pfreixes joined #openam
06:33 aldaris joined #openam
06:34 bthalmayr joined #openam
06:45 rghose joined #openam
06:57 hos001 joined #openam
07:44 rghose ERROR: The authorization server can not authorize the resource owner. -> why do I get this?
07:49 rghose it is odd, since my earlier settings with LB was working pretty fine. OPENAM-3052 did not really apply.
07:49 rghose setting*
08:11 rghose so here is something: If one deletes the OAuth2 policy and OAuth2 Provider Service and recreates the OAuth2 service for that realm, the clients that were created with the older configuration gets invalidated.
08:11 rghose even if they have the same clientID and secret. Is this the desired behaviour?
10:10 rghose joined #openam
10:41 fatbloke joined #openam
10:43 fatbloke joined #openam
10:53 MegaMatt joined #openam
11:40 bthalmay_ joined #openam
11:57 rghose accessing openam gives me this: ERROR: SessionRequestHandler encounterd exception
11:57 rghose any idea why that happens?
11:58 aldaris the other server throws an error at your face
11:59 rghose other server? I have one tomcat running.
11:59 rghose which is basically one instance of OpenAM
11:59 aldaris let me guess, you have an RP in front of the other tomcat?
12:00 rghose I have an LB
12:00 rghose in front of 2 tomcats
12:00 rghose but one of them is shut down for now
12:00 rghose RP as in OpenID Relying Party?
12:00 aldaris reverse proxy
12:01 rghose haproxy ?
12:02 rghose yes sort of
12:04 rghose I used this config: https://wikis.forgerock.org/confluence/display/o​penam/5+Extending+to+a+Dual+Instance+Deployment
12:05 aldaris search for openam and crosstalk
12:06 aldaris the problem is that your haproxy is still accessible whilst your tomcat behind it isn't, the PLL request fails as haproxy gives an HTTP 500 probably
12:07 rghose the behind runs on port 8888, and it seems to be accessible
12:07 rghose tomcat*
12:08 rghose the same error when I use the direct url
12:11 rghose well, seemed like a session problem.
12:11 rghose I deleted the cookies and it works now
12:11 aldaris you still need to understand crosstalk
12:13 rghose hmm ok
12:14 rghose This one right: http://openam.forgerock.org/openam-docu​mentation/openam-doc-source/doc/install​-guide/index/chap-session-failover.html ?
12:14 aldaris http://idmdude.com/2014/02/26/understa​nding-the-iplanetdirectorypro-cookie/
12:14 rghose thanks man
12:21 rghose really useful thanks :)
12:22 rghose so in my case, the cookie was maintained by server 02. so it should look up the session store?
12:22 rghose and strangely it could not look up the session store successfully.
12:25 aldaris no, it didn't go to the CTS because of ClusterStateService not being able to detect the other server down
12:26 rghose ohh, and why does that happen?
12:26 aldaris something for you to look into
12:29 rghose the amblcookie is 01, so this should be site 01. The one which is up.
12:45 aldaris joined #openam
12:56 rghose I still get those errors, when the site no. 02 is up!
12:56 rghose but it works very slowly
13:09 rghose some issue with the opendj instance maybe?
13:24 rghose the ClusterStateService makes a request to /namingservice url of the host. which should not have worked.
14:40 aldaris joined #openam
15:16 rghose joined #openam
15:17 aldaris joined #openam
15:22 rghose I have 2 openAM instances, one of them gives the proper port in .well-known/openid-configuration and the other gives it's own port instead. proxyPort is not defined on any of the tomcat instances. How does one work and the other does not?
15:23 rghose and replication is setup between the two.
15:34 bthalmayr joined #openam
17:48 zendron joined #openam
17:58 aldaris joined #openam
18:14 aldaris joined #openam
18:56 pfreixes joined #openam
19:04 bthalmayr joined #openam
19:08 aldaris joined #openam
19:58 pfreixes joined #openam
20:10 aldaris joined #openam
20:59 aldaris asyd: it's that time of the year :)
21:15 aldaris joined #openam
21:45 tsmalmbe joined #openam
21:47 aldaris joined #openam
22:01 aldaris joined #openam
22:03 MegaMatt joined #openam
22:13 aldaris joined #openam
22:47 aldaris joined #openam
22:53 aldaris1 joined #openam

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary