4 Replies Latest reply: Jul 2, 2010 7:13 AM by 807573 RSS

    CLI configuration problem.

    800645
      I've just installed opensso adminTools, but they doesn't work, i get the error message:

      [h@h cli]$ ./opensso/bin/ssoadm list-servers -u amadmin -v -f ../passwd
      Process Request ...
      Constructing Request Context...
      Validating mandatory options...
      Processing Sub Command ...

      Executing class, com.sun.identity.cli.serverconfig.ListServers.
      Authenticating...
      com.sun.identity.cli.CLIException: AdminTokenAction: FATAL ERROR: Cannot obtain Application SSO token.
      Check AMConfig.properties for the following properties
           com.sun.identity.agents.app.username
           com.iplanet.am.service.password
           at com.sun.identity.cli.LogWriter.log(LogWriter.java:109)
           at com.sun.identity.cli.Authenticator.ldapLogin(Authenticator.java:169)
           at com.sun.identity.cli.AuthenticatedCommand.ldapLogin(AuthenticatedCommand.java:158)
           at com.sun.identity.cli.serverconfig.ListServers.handleRequest(ListServers.java:59)
           at com.sun.identity.cli.SubCommand.execute(SubCommand.java:290)
           at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:212)
           at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:134)
           at com.sun.identity.cli.CommandManager.serviceRequestQueue(CommandManager.java:568)
           at com.sun.identity.cli.CommandManager.<init>(CommandManager.java:164)
           at com.sun.identity.cli.CommandManager.main(CommandManager.java:141)
      AdminTokenAction: FATAL ERROR: Cannot obtain Application SSO token.
      Check AMConfig.properties for the following properties
           com.sun.identity.agents.app.username
           com.iplanet.am.service.password


      I've followed all installation instructions (quite simple) and nothing seems to improve. I read some forums and the known issue that appears in the release notes document:
      [ http://docs.sun.com/app/docs/doc/820-3745/ghtso?a=view| http://docs.sun.com/app/docs/doc/820-3745/ghtso?a=view]

      but it doesn't apply to my environment because I'm absolutely sure I have the same password for cn=directory manager and amadmin. I even reinstalled opensso to be sure about that.

      I installed opensso enterprise 8.0 in a linux box. I'm using glassfish v3 prelude as a container. All is OK with opensso, it works flawlessly via the web console, but the CLI just throw such a weird and not-too-helpful error message.

      I checked also the debug logs:
      CoreSystem:
      amNaming:04/23/2009 02:42:53:357 PM GMT-06:00: Thread[main,5,main]
      ERROR: WebtopNaming.getServerFromID() can not find server name for server ID : 01
      com.iplanet.services.naming.ServerEntryNotFoundException: Cannot find server.
              at com.iplanet.services.naming.WebtopNaming.getServerFromID(WebtopNaming.java:705)
              at com.iplanet.dpro.session.SessionID.setServerID(SessionID.java:351)
              at com.iplanet.dpro.session.SessionID.parseSessionString(SessionID.java:334)
              at com.iplanet.dpro.session.SessionID.getExtension(SessionID.java:406)
              at com.iplanet.dpro.session.Session.getSessionServiceURL(Session.java:1169)
              at com.iplanet.dpro.session.Session.getSessionServiceURL(Session.java:839)
              at com.iplanet.dpro.session.Session.doRefresh(Session.java:1373)
              at com.iplanet.dpro.session.Session.access$300(Session.java:100)
              at com.iplanet.dpro.session.Session$3.run(Session.java:1345)
      ....
      ...
      amSecurity:04/23/2009 02:42:53:358 PM GMT-06:00: Thread[main,5,main]
      ERROR: SystemAppTokenProvider.getAppSSOToken()
      com.sun.identity.shared.locale.L10NMessageImpl: Error occurred while creating SSOToken.
              at com.sun.identity.authentication.AuthContext.getSSOToken(AuthContext.java:1171)
              at com.sun.identity.security.SystemAppTokenProvider.getAppSSOToken(SystemAppTokenProvider.java:91)
              at com.sun.identity.security.AdminTokenAction.getSSOToken(AdminTokenAction.java:295)
              at com.sun.identity.security.AdminTokenAction.run(AdminTokenAction.java:190)
              at java.security.AccessController.doPrivileged(Native Method)
              at com.sun.identity.cli.LogWriter.log(LogWriter.java:96)
              at com.sun.identity.cli.Authenticator.ldapLogin(Authenticator.java:169)
              at com.sun.identity.cli.AuthenticatedCommand.ldapLogin(AuthenticatedCommand.java:158)
              at com.sun.identity.cli.serverconfig.ListServers.handleRequest(ListServers.java:59)
              at com.sun.identity.cli.SubCommand.execute(SubCommand.java:290)
              at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:212)
              at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:134)
      ...
      ...
      amSecurity:04/23/2009 02:42:53:359 PM GMT-06:00: Thread[main,5,main]
      ERROR: AdminTokenAction: FATAL ERROR: Cannot obtain Application SSO token.
      Check AMConfig.properties for the following properties
              com.sun.identity.agents.app.username
              com.iplanet.am.service.password
      In Configuration:
      amCLI:04/23/2009 02:42:53:362 PM GMT-06:00: Thread[main,5,main]
      **********************************************
      amCLI:04/23/2009 02:42:53:361 PM GMT-06:00: Thread[main,5,main]
      ERROR: CommandManager.<init>
      com.sun.identity.cli.CLIException: AdminTokenAction:  FATAL ERROR: Cannot obtain Application SSO token.
      Check AMConfig.properties for the following properties
              com.sun.identity.agents.app.username
              com.iplanet.am.service.password
              at com.sun.identity.cli.LogWriter.log(LogWriter.java:109)
              at com.sun.identity.cli.Authenticator.ldapLogin(Authenticator.java:169)
              at com.sun.identity.cli.AuthenticatedCommand.ldapLogin(AuthenticatedCommand.java:158)
              at com.sun.identity.cli.serverconfig.ListServers.handleRequest(ListServers.java:59)
              at com.sun.identity.cli.SubCommand.execute(SubCommand.java:290)
              at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:212)
              at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:134)
              at com.sun.identity.cli.CommandManager.serviceRequestQueue(CommandManager.java:568)
              at com.sun.identity.cli.CommandManager.<init>(CommandManager.java:164)
              at com.sun.identity.cli.CommandManager.main(CommandManager.java:141)