Perl 6 - the future is here, just unevenly distributed

IRC log for #openam, 2014-10-24

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary

All times shown according to UTC.

Time Nick Message
02:11 auke- joined #openam
04:48 ramteid joined #openam
05:41 aldaris joined #openam
07:00 aldaris joined #openam
07:00 jjpp joined #openam
07:11 GrosSeb joined #openam
07:32 jjpp joined #openam
07:32 GrosSeb joined #openam
07:37 aldaris joined #openam
07:40 jjpp joined #openam
08:39 fatbloke joined #openam
09:53 GLHMarmot joined #openam
09:56 jjpp joined #openam
09:58 balo joined #openam
09:58 Hunger-- joined #openam
11:01 MegaMatt joined #openam
12:34 insanidOpenAM joined #openam
12:35 insanidOpenAM hi all. I have a problem deploying openAM in weblogic 12c
12:35 aldaris hi
12:35 insanidOpenAM I have the following error message: java.lang.ClassNotFoundException: com.sun.identity.setup.SetupListener
12:35 aldaris have you tried a different container? :)
12:36 aldaris that is odd
12:36 aldaris custom build?
12:36 insanidOpenAM I see that interface should be in a jar file called openssoclientsdk.jar but it is not.
12:36 insanidOpenAM not a custom build.
12:37 aldaris which version of AM?
12:37 insanidOpenAM I'm trying to deploy the agent and openAM in the same weblogic instance. I haven't tried in a different container.
12:37 aldaris in more recent versions it's called openam-clientsdk.jar, also the ClientSDK shouldn't be part of openam..
12:37 aldaris don't do that
12:37 aldaris please
12:37 aldaris it won't work
12:39 insanidOpenAM sorry: what won't work ? openAM and the agent in the same machine ?
12:39 aldaris in the same weblogic instance
12:39 aldaris that will just simply not work
12:39 insanidOpenAM hmm. that's good to know. so, let me explaini my topology here:
12:40 insanidOpenAM I have a machine in which another developer is trying to configure openAM in its weblogic instance. That seems to be fine. I have deployed my application (the one that needs authentication) in that same weblogic.
12:40 insanidOpenAM that develper is trying to deploy the agent ther as well.
12:41 insanidOpenAM based on your suggestion, I'll forget that approach.
12:42 insanidOpenAM I'll so the following: I'll configure the agent in another weblogic instance (a different machine, actually) and try to get authenticated against that openAM installation in that other machine.
12:42 insanidOpenAM makes sense?
12:42 aldaris doesn't have to be separate machine, it just needs to be different weblogic instance
12:44 insanidOpenAM nice.
12:45 insanidOpenAM would you please point the best place to download the latest build? looks like I have a openssoclientsdk.jar file that's not the latest one (you just told me there's another name for that file)
12:46 aldaris with Java EE agents it is called openssoclientsdk.jar for historic reasons
12:46 insanidOpenAM ok. so that's the one we have here.
12:46 aldaris 3.3.0 is the latest version
12:47 insanidOpenAM thanks, aldaris. I'll follow your suggestion.
12:48 insanidOpenAM ops... another question:
12:49 insanidOpenAM so, I need at least TWO instances for a basic configuration, right? I mean: one for my j2ee app and the agent and another one for openam only. Is that correct ?
12:49 aldaris yes
12:50 insanidOpenAM does that apply for JBoss as well ?
12:51 MegaMatt For any container, you want to have the agent separate from the OpenAM bits
12:52 MegaMatt Let openAM run in it’s own j2ee container .. and then have your protected applications + agent in it’s own instance
12:54 insanidOpenAM that's totally clear now :_)
12:54 insanidOpenAM thanks a lot MegaMatt  and aldaris.
13:09 pfreixes joined #openam
14:42 fatbloke joined #openam
15:14 insanidOpenAM anyone alive ?
15:15 insanidOpenAM I just added the required lines in my web.xml app (those filter lines). What exactly should be the name for the <filter-name> tag?
15:15 aldaris doesn't matter
15:17 MegaMatt I think our examples just use “Agent"
15:17 insanidOpenAM and what about the <filter-mapping> <filter-name> one? doesn't matter either ?
15:18 MegaMatt The examples use Agent there too
15:18 aldaris filter's filter-name and the filter-mapping's filter-name needs to be the same, but this is pure Java EE which you are familiar with RIGHT
15:18 insanidOpenAM Ijust reached that step in the turorial and tried to reach my app. I got this: java.lang.NoClassDefFoundError: Could not initialize class com.sun.identity.agents.arch.AgentConfiguration
15:18 MegaMatt Are they set to the same name?
15:18 insanidOpenAM yes. same name.
15:19 insanidOpenAM which could be different from the Agent Instance name, right ?
15:19 insanidOpenAM my Agent instance name: Agent_001
15:20 aldaris I think we already covered that part when I said "doesn't matter"
15:21 insanidOpenAM we sure did. I'm just comparing to the name that is given during the installation script execution.
15:21 insanidOpenAM different stuff, right ?
15:21 insanidOpenAM doesn't matter :_)
15:21 insanidOpenAM I got it.
15:22 insanidOpenAM any hints on what I might be missing?
15:22 aldaris that NCDFE might be a misconfiguration or firewall error unfortunately
15:22 MegaMatt No Class Def is odd
15:22 MegaMatt Yeah, maybe you have a bad path somewhere .. it’s like it’s not in the classpath
15:23 aldaris due to badly written Java code, if the static initialization fails, you'll see NCDFE
15:23 MegaMatt Ohh yeah, I remember you mentioned something like that in a bug report somewhere I think
16:02 aldaris joined #openam
16:23 aldaris joined #openam
17:08 insanidadOpenAM joined #openam
17:08 insanidadOpenAM hi there :_)
17:27 pfreixes joined #openam
17:56 insanidadOpenAM So, when trying to access my app, I get this:
17:56 insanidadOpenAM http://pastebin.com/W3xUhw3j
17:56 insanidadOpenAM any hints ?
17:57 MegaMatt hmm
17:59 aldaris joined #openam
17:59 MegaMatt Was the agent profile made in open am - and openam restarted?
17:59 MegaMatt and this is in a different container now, right?
18:03 insanidadOpenAM right. I have the agent + my app in one weblogic and openam in another weblogic (two different machines, by the way)
18:04 MegaMatt It’s still that generic type of error.. It usually means that your agent has not been configured properly and can’t contact the and login to the OpenAM server. Your best bet would be to look under the agents config directory and look at the debug logs.
18:04 MegaMatt So make sure the profile is set up in openam for that agent
18:04 MegaMatt could try restarting openam
18:06 MegaMatt Make sure you don’t have a  wrong server url  or make sure that the agent can connect to the server and resolve the name address,… things like that
18:10 insanidadOpenAM so, the document I'm using as a guide is the following: http://openam.forgerock.org/openam-doc​umentation/openam-doc-source/doc/jee-i​nstall-guide/index/chap-weblogic.html
18:11 insanidadOpenAM I just finished step 7.4
18:12 insanidadOpenAM after this step, restarting the server gives me this: http://pastebin.com/krr26DSh
18:13 insanidadOpenAM sorry. fat finger : http://pastebin.com/4Umiv2XR
18:13 insanidadOpenAM dam. actually, both are the same :P
18:14 MegaMatt java.lang.RuntimeException: Failed to load configuration: ApplicationSSOTokenProvider​.getApplicationSSOToken(): Unable to get Application SSO Token
18:16 MegaMatt Is OpenAM set up in a site configuration?
18:17 aldaris you should verify that weblogic has the agent's JVM property set properly
18:17 aldaris if done correctly, there should be a JVM property pointing to the agent's config directory (…/Agent_001 IIRC)
18:18 MegaMatt I’m not the expert that aldaris is, but I believe I’ve seen that error when the agent can’t load it’s config file
18:19 insanidadOpenAM you mean the jvm in the agent's weblogic or in openam's one ?
18:19 insanidadOpenAM aldaris: I know the weblogic where openam is deployed has the correct jvm configurations
18:19 MegaMatt check where the agent is deployed ;)
18:20 aldaris well, if openam's JVM would have a JVM setting pointing to the agent that would be pretty useless wouldn't it
18:23 insanidadOpenAM hmmm
18:23 insanidadOpenAM Ijust followed all the steps in http://openam.forgerock.org/openam-doc​umentation/openam-doc-source/doc/jee-i​nstall-guide/index/chap-weblogic.html
18:23 aldaris that should set the JVM property on weblogic, but one never knows
18:23 aldaris hence you should check it
18:23 insanidadOpenAM the guy in charge with the openam weblogic instance has just redeployed it and just started a new configuratioin
18:26 insanidadOpenAM here's how weblogic is being started : http://pastebin.com/JX4J8m6x
18:27 aldaris yepp missing the JVM property
18:27 aldaris and booo, windows
18:27 MegaMatt and -Xverify:none
18:27 MegaMatt ffs
18:27 MegaMatt that’s just asking for trouble
18:28 MegaMatt (But is unrelated to OpenAM/Agents btw) :)
18:29 aldaris -Duser.timezone is also an interesting approach
18:29 aldaris and your JDK is slightly outdated :)
18:29 MegaMatt hehe
18:29 aldaris and Xms should have the same value as Xmx and the VM shouldn't be running with -client but with -server instead
18:30 aldaris but well, the main problem is the missing JVM property for the agent
18:30 MegaMatt Now you’re getting real picky :D
18:31 aldaris well I could also rant about not having GC logging enabled, but based on all these details I find it quite likely that this is just a dev machine, and not a preprod/etc anything more serious env
18:31 MegaMatt One would hope it’s just dev
18:32 insanidadOpenAM uow
18:32 insanidadOpenAM ;D
18:32 insanidadOpenAM absolutely. just dev.
18:33 MegaMatt What’s the name of the enviornment script again? setAgentEnv or something?
18:33 MegaMatt nvm, I see it in his doc
18:33 insanidadOpenAM hmmm
18:33 insanidadOpenAM I see the script agent is probably not being executed.
18:33 insanidadOpenAM it should. I think I added it to weblogic's start script prior to the real invocation.
18:34 insanidadOpenAM doublechecking.
18:34 MegaMatt path/to/setAgentEnv_AdminServer.sh
18:39 insanidadOpenAM I'm trying to place it correctly.
18:44 insanidadOpenAM what jvm property is actually missing? the ones in the setAgentEnv_AdminServer file ?
18:44 aldaris -Dopenam.agents.bootstrap.dir or something like that
18:46 insanidadOpenAM This is all I have in that setAgentEnv_AdminServer file: http://pastebin.com/a4XXE4x9
18:46 aldaris yeah
18:46 aldaris that may be a problem
18:46 aldaris we haven't updated the weblogic installers probably to use the JVM setting
18:46 aldaris this AGENT_CLASSPATH thing isn't really the best solution
18:47 insanidadOpenAM where could I find that ?
18:47 aldaris -Dopenam.agents.bootstrap.dir=/Users/aldaris/​j2ee_agents/tomcat_v6_agent/Agent_001/config
18:47 aldaris this is an example from my tomcat
18:48 aldaris set this JVM property on your weblogic by whatever means weblogic actually provides..
18:48 aldaris just make sure the path is adjusted of course..
18:53 insanidadOpenAM just added it: http://pastebin.com/ReYg8JXb
18:53 insanidadOpenAM problem is that weblogic fails to start up.
18:54 aldaris does the folder really exist? is it really Agent_001?
18:56 insanidadOpenAM yes
18:57 insanidadOpenAM weblogic does not start up and it complains about the following:
18:57 insanidadOpenAM http://pastebin.com/zURKP5Rh
18:58 insanidadOpenAM when trying to reach that namingservice url, I get a page where the only displayed thing is the word "OpenSSO"
18:59 aldaris well that's one very straightforward error
18:59 aldaris is there a root cause in that stacktrace?
19:00 MegaMatt That’s been on the alias before: https://lists.forgerock.org/piperma​il/openam/2013-February/010193.html
19:00 MegaMatt well no
19:00 MegaMatt that’s a different error
19:04 MegaMatt but same idea, kinda
19:06 insanidadOpenAM here goes the whole stacktrace when trying to start up weblogic:
19:07 insanidadOpenAM http://pastebin.com/B2J4mrFW
19:15 insanidadOpenAM and this is what I get from the agent's log: http://pastebin.com/k4za2B2m
19:15 MegaMatt so is the agent password correct?
22:44 GLHMarmot joined #openam
23:10 aldaris joined #openam
23:55 aldaris joined #openam

| Channels | #openam index | Today | | Search | Google Search | Plain-Text | summary