Fatal Error Cannot Obtain Application Sso Token. Check Amconfig.properties
March 27, 2015 at 12:37 am #3747 Peter MajorModerator Possible reasons involve: * https://bugster.forgerock.org/jira/browse/OPENAM-480 * http://docs.forgerock.org/en/openam/12.0.0/admin-guide/index.html#openam-cli-overview which is essentially the same as https://wikis.forgerock.org/confluence/display/openam/Using+the+ssoadm+command+with+a+Site+configuration * Bad JVM truststore setup if the site Check AMConfig.properties for the following properties com.sun.identity.agents.app.username com.iplanet.am.service.password Logging configuration class "com.sun.identity.log.s1is.LogConfigReader" failed OpenAM lead Peter Major of ForgeRock provides the solution in this forum post: Issue with ssoadm tool after com.sun.identity.security.AMSecurityPropertiesException: AdminTokenAction:FATALERROR:CannotobtainApplicationSSOtoken. Percona Toolkit tools owned by qownnotes Enthusiasm Archives Archives Select Month June 2016 (1) May 2016 (8) April 2016 (10) March 2016 (3) February 2016 (5) January 2016 (4) December 2015
switching \ with JDK 1.6 still gives me one error instead of two as before Logging configuration \ class "com.sun.identity.log.s1is.LogConfigReader" \ failedcom.sun.identity.security.AMSecurityPropertiesException: AdminTokenAction: \ FATAL ERROR: Cannot obtain Application SSO token.Check www.forgerock.com Recent blog posts Message Capture with OpenIG November 4, 2016 Social Registration with vKontakte in OpenIDM October 31, 2016 Introducing OpenIG Studio October 28, 2016 DDOS Attacks leveraging LDAP ! Subject: Re: getting "FATAL ERROR: Cannot obtain Application SSO token." despite all efforts when using OpenSSO WSS Date: Mon, 22 Mar 2010 08:26:48 +0800 Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type;
Other names may be trademarks of their respective owners. (revision 20160708.bf2ac18) Powered by Oracle, Project Kenai and Cognisync Done Please Confirm No Yes Documentation Home > Sun OpenSSO Regards, Paresh. Oracle and Java are registered trademarks of Oracle and/or its affiliates. When OpenAM authenticates it will set a cookie withe the session token.
Check AMConfig.properties for the following properties com.sun.identity.agents.app.username com.iplanet.am.service.password Logging configuration class "com.sun.identity.log.s1is.LogConfigReader" failed com.sun.identity.security.AMSecurityPropertiesException: AdminTokenAction: FATAL ERROR: Cannot obtain Application SSO token. The problem was the cookie domain. I have openam deployed on centos and would like to know what would \ cause this. Solution de contournement.
If you have any suggestion about solving this problem, please let me know. Home Forums ForgeRock Projects OpenAM Issue with ssoadm tool after setting up OpenAM site. Check AMConfig.properties for the following properties com.sun.identity.agents.app.username com.iplanet.am.service.password Check if the amadmin password is different from the directory manager password for the service management data store. Creating directory layout and configuring Agent file for Agent_001 instance ...DONE.
azlabs I.AM Specialists Friday, January 9, 2015 FATAL ERROR: Cannot obtain Application SSO token It has been more than a month since I last posted. Export the service XML file by using the ssoadm export-svc-cfg command. Définissez le mot de passe à deux endroits représentés par amadmin-password dans le XML. Re-execute the ssoadm import-svc-cfg command until it succeeds. 3955: Unable to execute the ssoadm command You are unable to execute the ssoadm command with the get-realm due to this exception.
Workaround. check over here And yes, indeed! $ ./ssoadm list-servers -u amadmin -f .pwd.txt https://f50d.abc.com:3131/am . Does my electronic parking brake remain engaged if I disconnect the battery? Do Morpheus and his crew kill potential Ones?
The project administrators are pluo, jayashree, shivaram, jamiefnelson, ssuresh, qcheng, asondhi, kevinserwin, and monzillo. openssoclientsdk,openfedlib,amserver,jaas,wireless_rendering, opensso,opensso-sharedlib,commons-logging,commons-lang-2.4,allof thearejarfiles. _________________________________________________________ HereisacopyofmyAMConfig.propertiesfile com.sun.identity.urlconnection.useCache=false com.iplanet.services.debug.level=error com.sun.embedded.replicationport= com.iplanet.security.SSLSocketFactoryImpl=com.sun.identity.shared.ldap. SUMMARY OF AGENT INSTALLATION ----------------------------- Agent instance name: Agent_001 Agent Bootstrap file location: D:/Studies/sso/OpenAM-SP2IDP/webagent/j2ee_agents/tomcat_v6_agent/Agent_001/conf ig/OpenSSOAgentBootstrap.properties Agent Configuration file location D:/Studies/sso/OpenAM-SP2IDP/webagent/j2ee_agents/tomcat_v6_agent/Agent_001/conf ig/OpenSSOAgentConfiguration.properties Agent Audit directory location: D:/Studies/sso/OpenAM-SP2IDP/webagent/j2ee_agents/tomcat_v6_agent/Agent_001/logs /audit Agent Debug directory location: his comment is here Either "Hit the Back button, and re-enter the correct agent profile name/user name", or "Create this agent profile when asked(available only in custom-install)", or "Continue without validating it because agent profile
Adding OpenAM Tomcat Agent Filter and Form login authentication to selected Web applications ...DONE. The following scenarios can cause this problem: Configure OpenSSO Enterprise using a remote Sun Java System Directory Server as the configuration data store. E-mail me at philipATlembobrothersDOTcom.
Ah, maybe a restart of OpenAM will help.
Please include the deployment URI also as shown below: (http://agent1.sample.com:1234/agentapp) [ ? : Help, < : Back, ! : Exit ] Agent URL: http://org.sso.com:7070/agentapp Enter the Agent profile name [ ? asked 1 year ago viewed 3117 times active 1 year ago Upcoming Events 2016 Community Moderator Election ends Nov 22 Linked 1 OpenAM J2EE agent installation bringing down tomcat Related 1Unable Solution follows. Workaround.
PowerShell vs Python If an image is rotated losslessly, why does the file size change? But we need to setup OpenAM site, as we will have two OpenAM instances sitting behind load balancer. Link-only answers can become invalid if the linked page changes. –DJClayworth Sep 24 '15 at 15:35 1 I agree! :) my bad, thank you for your suggestion. weblink February 19, 2016 at 10:00 pm #7990 [email protected] This issue may also happen, if the openam nodes are out of service in the ELB due to health check failure or some
Back to the last interaction 3. If yes, apply the following workaround. However, this is not happening in our case. Before I posting the question again, I searched the web and saw some suggestions like using amadmin and adminadmin as com.sun.identity.agents.app.username and com.iplanet.am.service.password but it did not resolved my problem.
If yes, apply the following workaround. Ré-importer les données de service XML obtenues à l'étape2 en utilisant la commande ssoadm import-svc-cfg.