Install fails if running OAM in docker with volume

Tagged: ,

This topic has 1 reply, 2 voices, and was last updated 5 years, 4 months ago by Peter Major.

  • Author
    Posts
  • #16411
     full2
    Participant

    Hello:

    I am trying to use OpenAm 13 in docker. From the docker example in this page (https://forgerock.org/2016/05/deploying-openam-instances-docker/) I got the docker file, simplified a little and try to runing it. First only OpenAm, without an external OpenDJ.
    If I run the web wizard “create a configuration”, enter the details , choosing embebed DJ for both Configuration and User Store everything works ok (i.e docker command
    docker run -p 8080:8080 –add-host=”dockerpiam.credential.es:127.0.0.1″ credentialpiam)

    But If I try to do the same, this time using a volume to keep the OpenAm configuration (i.e docker run -p 8080:8080 –add-host=”dockerpiam.credential.es:127.0.0.1″ -v /c/Users/jose/carpeta:/root/piam credentialpiam), the setup fails, showing a error in logs:

    (…)
    Running OpenDJ setupSetup command: –cli –adminConnectorPort 4444 –baseDN dc=credential,dc=es –rootUserDN cn=Directory Manager –ldapPort 50389 –skipPortCheck –rootUserPassword xxxxxxx –jmxPort 1689 –no-prompt –doNotStart –hostname dockerpiam.credential.es –noPropertiesFile
    See /usr/local/tomcat/temp/opendj-setup-7285573261241387294.log for a detailed
    log of this operation.

    Configuring Directory Server ….. Done.

    To see basic server configuration status and configuration you can launch
    /root/piam/opends/bin/status

    …Success.
    …Success
    Installing OpenAM configuration store in /root/piam/opends…Success.
    Creating OpenAM suffixImport task 20170322075318835 scheduled to start immediately
    Import task 20170322075318835 did not complete successfully
    Error loading OpenAM suffix 1
    AMSetupServlet.processRequest: errorcom.sun.identity.setup.ConfiguratorException: emb.creatingfamsuffix.failure
    at com.sun.identity.setup.EmbeddedOpenDS.setup(EmbeddedOpenDS.java:278)
    at com.sun.identity.setup.AMSetupServlet.setupEmbeddedDS(AMSetupServlet.java:836)
    ….

    Inside /c/Users/jose/carpeta there are things and the previous log.

    It seems the internal OpDJ is installed ok, but some importing/migrating data fails later, if running with volumes.
    I am afraid it must be related I am running docker in a Windows machine. So maybe, there are some things about file or atributes that fails me if running in Windows. Any idea? Sugestion? Thanks a lot

    Update:
    In the piam/debug/configuration log file I see something similar:

    “amSetupServlet:03/22/2017 07:52:58:623 AM UTC: Thread[http-apr-8080-exec-3,5,main]: TransactionId[5656f4fb-41a7-4184-b9c0-71b10455c017-2]
    ERROR: EmbeddedOpenDS.setup(): Unable to delete zip file:/root/piam/opends/opendj.zip
    amSetupServlet:03/22/2017 07:53:21:983 AM UTC: Thread[http-apr-8080-exec-3,5,main]: TransactionId[5656f4fb-41a7-4184-b9c0-71b10455c017-2]
    ERROR: EmbeddedOpenDS.setupOpenDS. Error loading OpenAM suffix
    amSetupServlet:03/22/2017 07:53:21:983 AM UTC: Thread[http-apr-8080-exec-3,5,main]: TransactionId[5656f4fb-41a7-4184-b9c0-71b10455c017-2]
    ERROR: AMSetupServlet.configure: error
    com.sun.identity.setup.ConfiguratorException: emb.creatingfamsuffix.failure
    at com.sun.identity.setup.EmbeddedOpenDS.setup(EmbeddedOpenDS.java:278)
    at com.sun.identity.setup.AMSetupServlet.setupEmbeddedDS(AMSetupServlet.java:836)
    at com.sun.identity.setup.AMSetupServlet.setupSMDatastore(AMSetupServlet.java:884)
    at com.sun.identity.setup.AMSetupServlet.configure(AMSetupServlet.java:922)

    #16426
     Peter Major
    Moderator

    If the creation of the suffix fails, you may be running into network/DNS issues. Make sure that the hostname/port combination used to configure the embedded DJ works from the docker image.

Viewing 2 posts - 1 through 2 (of 2 total)

You must be logged in to reply to this topic.

©2022 ForgeRock - we provide an identity and access platform to secure every online relationship for the enterprise market, educational sector and even entire countries. Click to view our privacy policy and terms of use.

Log in with your credentials

Forgot your details?