Social Login Error with external OpenDJ

[Dafugh]

Hello,

I posted this first in the OpenDJ Topic but it seems that it was the wrong one. So I post it again here.

first of all i want to apologise for my english since it’s not my mother language. I understand english better than I write it

I have set up OpenAM succesfully with an external OpenDJ server. It all works so far since I have made 200 example userdata to test the connection and I see them on OpenAM. The amadmin was imported in the data from OpenDJ too.

So here is my problem:

With the embedded OpenDJ DataStore the Social Authentication works perfectly with Facebook and Google+ but when i reinstall OpenAM and use the external OpenDJ Server they say in both cases “Authentication Failed”. The amadmin account works perfekt and the Config in the Realm is nearly the same than in the version from OpenAM with the embedded OpenDJ.

I have looked many Videos and looked at many Sites but i can’t solve the problem.
I dont usually write in Forum so sorry for mistakes in the Topic.

Friendly,

Dafugh

[Nan]

Can you post the logs?

[Dafugh]

Which logs?

I found logs from localhost, localhost-access, host-manager and catalina in the Directory and

access.csv, activity.csv, authentication.csv, config.csv in the config directory. i dont really want to post them all here because i dont find spoiler tags and it would take too mutch place

[Dafugh]

Perhaps this is important:
I use Oracle Java 8 for tomcat,
use 7.0.73 as tomcat Version
use OpenDJ version 13.0 and
OpenAM version 13.0

also i found logs from earlier day where they posted a huge error log(3500 Lines). I overlooked them and found the same massage at localhost.log over and over again:

java.lang.ExceptionInInitializerError
at org.forgerock.openam.xui.XUIState.destroy(XUIState.java:109)
at org.forgerock.openam.xui.XUIFilter.destroy(XUIFilter.java:139)
at org.apache.catalina.core.ApplicationFilterConfig.release(ApplicationFilterConfig.java:312)
at org.apache.catalina.core.StandardContext.filterStop(StandardContext.java:4992)
at org.apache.catalina.core.StandardContext.stopInternal(StandardContext.java:5821)
at org.apache.catalina.util.LifecycleBase.stop(LifecycleBase.java:221)
at org.apache.catalina.core.ContainerBase$StopChild.call(ContainerBase.java:1587)
at org.apache.catalina.core.ContainerBase$StopChild.call(ContainerBase.java:1576)
at java.util.concurrent.FutureTask.run(FutureTask.java:266)
at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
Caused by: com.sun.identity.security.AMSecurityPropertiesException: AdminTokenAction: FATAL ERROR: Cannot obtain Application SSO token.
at com.sun.identity.security.AdminTokenAction.run(AdminTokenAction.java:268)
at com.sun.identity.security.AdminTokenAction.run(AdminTokenAction.java:74)
at java.security.AccessController.doPrivileged(Native Method)
at org.forgerock.openam.xui.XUIState$XUIMode.<init>(XUIState.java:50)
at org.forgerock.openam.xui.XUIState$XUIMode.<clinit>(XUIState.java:36)
… 12 more

This is the error i get when i try to login with Facebook or Google+.

[Dafugh]

I think I found one issue.

On the external OpenDJ and in OpenAM’s Data Store I set the LDAP Organization DN to
“dc=openam,dc=forgerock,dc=org” and I think that I might change them to my Domain. but I don’t really understand what DN means and what Options I have. It was the same in the working embedded version of OpenDJ and it was the same dc’s.

One more thing: When i set up Opendj and set my Hostname he always uses my IP domain even when im telling him to use my correct Domain. I don’t really understand why he does that and how I can change it. but that might be a question for the OpenDJ Forum.

[Author]

Posts