Unable to configure User's Dashboard

Tagged: ,

This topic has 11 replies, 3 voices, and was last updated 7 years ago by Peter Major.

  • Author
    Posts
  • #5956
     J_S
    Participant

    Hi all!
    I’m usin OpenAM OpenAM 12.0.0 Build 11961 with Active Directory data store.
    I can see my AD users under <RealmName>/Subjects and this users are able to log in.
    I’ve set up Dashboard service globally, configured Dashboard for a Realm, but when I’m trying to Add applications to a User’s dashboard, the following error appears:

    “An error occurred while processing this request. Contact your administrator.”

    I guess I there should be more information about this error in amAdmin.error log file, but for some reason this file is missing.

    Thanks in advance, Julia

    #6070
     Scott Heger
    Participant

    You would find more information in the debug files vs the log files. At the same directory level as your logs directory, there is a debug directory. Go in there and check out the various debug files to see if they give you information on your error. Kick up the debug level to Message if you need additional information.

    #6085
     J_S
    Participant

    Thank you very much for advice, Scott!
    I found the following error in debug/Configuration :

    amConsole:10/28/2015 10:12:39:535 PM MSK: Thread[http-nio-8080-exec-8,5,main]
    ERROR: ConsoleServletBase.onUncaughtException
    java.lang.NullPointerException
            at java.util.AbstractCollection.addAll(AbstractCollection.java:343)
            at org.forgerock.openam.idrepo.ldap.DJLDAPv3Repo.assignService(DJLDAPv3Repo.java:1714)
            at com.sun.identity.idm.server.IdServicesImpl.assignService(IdServicesImpl.java:1986)
            at com.sun.identity.idm.AMIdentity.assignService(AMIdentity.java:716)
            at com.sun.identity.console.idm.model.EntitiesModelImpl.assignService(EntitiesModelImpl.java:1528)
            at com.sun.identity.console.idm.ServicesAddViewBean.handleButton2Request(ServicesAddViewBean.java:113)
            at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
            at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
            at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
            at java.lang.reflect.Method.invoke(Method.java:497)
            at com.iplanet.jato.view.command.DefaultRequestHandlingCommand.execute(DefaultRequestHandlingCommand.java:183)
            at com.iplanet.jato.view.RequestHandlingViewBase.handleRequest(RequestHandlingViewBase.java:308)
            at com.iplanet.jato.view.ViewBeanBase.dispatchInvocation(ViewBeanBase.java:802)
            at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandlerInternal(ViewBeanBase.java:740)
            at com.iplanet.jato.view.ViewBeanBase.invokeRequestHandler(ViewBeanBase.java:571)
            at com.iplanet.jato.ApplicationServletBase.dispatchRequest(ApplicationServletBase.java:957)
            at com.iplanet.jato.ApplicationServletBase.processRequest(ApplicationServletBase.java:615)
            at com.iplanet.jato.ApplicationServletBase.doPost(ApplicationServletBase.java:473)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:648)
            at javax.servlet.http.HttpServlet.service(HttpServlet.java:729)
            at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:291)
            at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
            at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52)
            at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:239)
            at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
            at org.forgerock.openam.validation.ResponseValidationFilter.doFilter(ResponseValidationFilter.java:44)
            at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:239)
            at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
            at com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:100)
            at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:239)
            at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
            at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:219)
            at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:106)
            at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:502)
            at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:142)
            at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:79)
            at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:616)
            at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:88)
            at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:518)
            at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1091)
            at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:673)
            at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1526)
            at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1482)
            at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
            at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
            at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
            at java.lang.Thread.run(Thread.java:745)

    Any ideas?

    #6089
     J_S
    Participant

    And also if I try to assign dashboard service to user via ssoadm, the error is following:

     ./ssoadm add-svc-identity -u amadmin -i ssouser2 -t User -f /etc/pass.txt -e / -s dashboardService -a assignedDashboard=ZenDesk -v
    Process Request ...
    Constructing Request Context...
    Validating mandatory options...
    Processing Sub Command ...
    
    Executing class, com.sun.identity.cli.idrepo.AssignService.
    Authenticating...
    Authenticated.
    com.sun.identity.cli.CLIException: Message:New Generic Exception
    
            at com.sun.identity.cli.idrepo.AssignService.handleRequest(AssignService.java:103)
            at com.sun.identity.cli.SubCommand.execute(SubCommand.java:291)
            at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:212)
            at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:134)
            at com.sun.identity.cli.CommandManager.serviceRequestQueue(CommandManager.java:573)
            at com.sun.identity.cli.CommandManager.<init>(CommandManager.java:170)
            at com.sun.identity.cli.CommandManager.main(CommandManager.java:147)
    Caused by: Message:New Generic Exception
    
            at com.sun.identity.idm.remote.IdRemoteServicesImpl.processException(IdRemoteServicesImpl.java:159)
            at com.sun.identity.idm.remote.IdRemoteServicesImpl.assignService(IdRemoteServicesImpl.java:392)
            at com.sun.identity.idm.AMIdentity.assignService(AMIdentity.java:716)
            at com.sun.identity.cli.idrepo.AssignService.handleRequest(AssignService.java:91)
            ... 6 more
    1000
    
    #6098
     Scott Heger
    Participant

    I would next check your IdRepo debug file to see if you have any valuable information in there. Might be schema related. Then check your LDAP (whatever your Data Store is pointing to) access log while you are generating the error. See if something is attempting to be written but being rejected. If you are using OpenDJ as your Data Store it should give you exactly the reason why it is rejecting it…..if that is what is happening.

    #6121
     J_S
    Participant

    In IdRepo I see only one error happening every second:

    PersistentSearch:10/31/2015 06:33:48:218 PM MSK: Thread[Grizzly-worker(6),5,main]
    ERROR: An error occurred while executing persistent search
    org.forgerock.opendj.ldap.EntryNotFoundException: No Such Entry: 0000208D: NameErr: DSID-0310020A, problem 2001 (NO_OBJECT), data 0, best match of:
            'DC=mydomain,DC=com'
    
            at org.forgerock.opendj.ldap.ErrorResultException.newErrorResult(ErrorResultException.java:225)
            at com.forgerock.opendj.ldap.AbstractLDAPFutureResultImpl.setResultOrError(AbstractLDAPFutureResultImpl.java:138)
            at com.forgerock.opendj.ldap.LDAPClientFilter$1.searchResult(LDAPClientFilter.java:346)
            at com.forgerock.opendj.ldap.LDAPClientFilter$1.searchResult(LDAPClientFilter.java:79)
            at com.forgerock.opendj.ldap.LDAPReader.decodeSearchResult(LDAPReader.java:1339)
            at com.forgerock.opendj.ldap.LDAPReader.decodeProtocolOp(LDAPReader.java:1137)
            at com.forgerock.opendj.ldap.LDAPReader.decode(LDAPReader.java:166)
            at com.forgerock.opendj.ldap.LDAPClientFilter.handleRead(LDAPClientFilter.java:499)
            at org.glassfish.grizzly.filterchain.ExecutorResolver$9.execute(ExecutorResolver.java:119)
            at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:291)
            at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:209)
            at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:137)
            at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:115)
            at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:77)
            at org.glassfish.grizzly.nio.transport.TCPNIOTransport.fireIOEvent(TCPNIOTransport.java:550)
            at org.glassfish.grizzly.strategies.AbstractIOStrategy.fireIOEvent(AbstractIOStrategy.java:112)
            at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.run0(WorkerThreadIOStrategy.java:117)
            at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.access$100(WorkerThreadIOStrategy.java:56)
            at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy$WorkerThreadRunnable.run(WorkerThreadIOStrategy.java:137)
            at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:565)
            at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.run(AbstractThreadPool.java:545)
            at java.lang.Thread.run(Thread.java:745)
    

    ‘DC=mydomain,DC=com’ – is my domain, I’ve changed it in this post

    #6122
     J_S
    Participant

    Also, I tryed to assign the dashboard service to user with ssoamd command. The error is:

    ./ssoadm add-svc-identity -u amadmin -i ssouser2 -t User -f /etc/pass.txt -e / -s dashboardService -a assignedDashboard=ZenDesk -v
    Process Request ...
    Constructing Request Context...
    Validating mandatory options...
    Processing Sub Command ...
    
    Executing class, com.sun.identity.cli.idrepo.AssignService.
    Authenticating...
    Authenticated.
    com.sun.identity.cli.CLIException: Message:New Generic Exception
    
            at com.sun.identity.cli.idrepo.AssignService.handleRequest(AssignService.java:103)
            at com.sun.identity.cli.SubCommand.execute(SubCommand.java:291)
            at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:212)
            at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:134)
            at com.sun.identity.cli.CommandManager.serviceRequestQueue(CommandManager.java:573)
            at com.sun.identity.cli.CommandManager.<init>(CommandManager.java:170)
            at com.sun.identity.cli.CommandManager.main(CommandManager.java:147)
    Caused by: Message:New Generic Exception
    
            at com.sun.identity.idm.remote.IdRemoteServicesImpl.processException(IdRemoteServicesImpl.java:159)
            at com.sun.identity.idm.remote.IdRemoteServicesImpl.assignService(IdRemoteServicesImpl.java:392)
            at com.sun.identity.idm.AMIdentity.assignService(AMIdentity.java:716)
            at com.sun.identity.cli.idrepo.AssignService.handleRequest(AssignService.java:91)
            ... 6 more
    1000
    
    #6207
     Peter Major
    Moderator

    There is a small chance that you’ve ran into an obscure bug: my hunch is that getAttributes returned the objectclass attribute with different case and that’s why attrs.get(“objectclass”) fails.

    #6223
     J_S
    Participant

    Thank you for reply, Peter!
    So what should I do then? Report a bug?
    I’ve got the same error with OpenAM 11.0.0

    #6225
     Peter Major
    Moderator

    If you could verify by some means that this is indeed the cause of your error, that would be great. But yes, feel free to file an issue in JIRA for this.

    #6443
     J_S
    Participant

    Hi Piter!
    I’ve created a bug report in JIRA for my problem, but it seems nobody is interested in it :(
    There is no Assignee. May be I’ve done something wrong? The issue ID is OPENAM-7490

    • This reply was modified 7 years ago by J_S.
    #6461
     Peter Major
    Moderator

    At the moment we are rather busy resolving bugs for the upcoming 13 release and OPENAM-7490 is not amongst the most important issues I’d say. Please keep in mind that customer raised tickets tend to have higher priority, so it may take a while to get to your issue.

Viewing 12 posts - 1 through 12 (of 12 total)

You must be logged in to reply to this topic.

©2022 ForgeRock - we provide an identity and access platform to secure every online relationship for the enterprise market, educational sector and even entire countries. Click to view our privacy policy and terms of use.

Log in with your credentials

Forgot your details?