This Bugzilla instance is a read-only archive of historic NetBeans bug reports. To report a bug in NetBeans please follow the project's instructions for reporting issues.

Bug 84262 - stock sample does not work with non default key store
Summary: stock sample does not work with non default key store
Status: RESOLVED INVALID
Alias: None
Product: serverplugins
Classification: Unclassified
Component: Identity (show other bugs)
Version: 5.x
Hardware: All All
: P1 blocker (vote)
Assignee: Srividhya Narayanan
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-09-06 00:55 UTC by _ hlu
Modified: 2006-10-07 01:58 UTC (History)
0 users

See Also:
Issue Type: DEFECT
Exception Reporter:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description _ hlu 2006-09-06 00:55:40 UTC
EP milestone 19:

Tried stock sample with user name token profile and non default key store.
When executing the client, I got the following error:
Caught an exception

java.rmi.RemoteException: response handler error: ; nested exception is:
javax.xml.rpc.JAXRPCException: com.sun.enterprise.security.jauth.AuthException:
Response Validation Failed. 

The following messages appear on ClientModule file:
09/05/2006 04:50:39:625 PM PDT: Thread[httpWorkerThread-8080-1,10,Grizzly]
AMClientAuthModule init
09/05/2006 04:50:39:640 PM PDT: Thread[httpWorkerThread-8080-1,10,Grizzly]
secureRequest input: <env:Envelope
xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:enc="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:ns0="http://sun.com/stockquote.xsd"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><env:Body><ns0:QuoteRequest><Symbol>SUNW</Symbol></ns0:QuoteRequest></env:Body></env:Envelope>
09/05/2006 04:50:39:968 PM PDT: Thread[httpWorkerThread-8080-1,10,Grizzly]
secureRequest output: <env:Envelope
xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:enc="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:ns0="http://sun.com/stockquote.xsd"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><env:Header><wsse:Security
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-01.xsd"
env:mustUnderstand="1">
<wsse:UsernameToken wsu:Id="sc222c9887b62b87048b392c25a9c2bc59017c0d9">
<wsse:Username>hong</wsse:Username>
<wsse:Password
Type="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#PasswordDigest">KK2AZAYiaSlefSccruJXeHnDLyk=</wsse:Password>
<wsse:Nonce
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">FBV5tv6NujLUz/V/gQ4lgVnA</wsse:Nonce>
<wsse:Created>2006-09-05T23:50:39Z</wsse:Created>
</wsse:UsernameToken><wsu:TimeStamp><wsu:Created>2006-09-05T23:50:39Z</wsu:Created><wsu:Expires>2006-09-05T23:55:39Z</wsu:Expires></wsu:TimeStamp></wsse:Security></env:Header><env:Body
wsu:Id="sa1cd41b0bca6c3866e1fd38c9ee40595231fcbcd"><ns0:QuoteRequest><Symbol>SUNW</Symbol></ns0:QuoteRequest></env:Body></env:Envelope>
09/05/2006 04:50:40:296 PM PDT: Thread[httpWorkerThread-8080-1,10,Grizzly]
validateResponse input: <env:Envelope
xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"><env:Body><env:Fault><faultcode>env:Server</faultcode><faultstring>JAXRPCSERVLET28:
Missing port information</faultstring></env:Fault></env:Body></env:Envelope>
09/05/2006 04:50:40:500 PM PDT: Thread[httpWorkerThread-8080-1,10,Grizzly]
ERROR: LibertyClientAuthModule.validateResponse: Failed in validating the response.
com.sun.identity.wss.security.SecurityException: Security header not found.
	at
com.sun.identity.wss.security.handler.SecureSOAPMessage.parseSOAPMessage(SecureSOAPMessage.java:155)
	at
com.sun.identity.wss.security.handler.SecureSOAPMessage.<init>(SecureSOAPMessage.java:125)
	at
com.sun.identity.wss.security.handler.SOAPRequestHandler.validateResponse(SOAPRequestHandler.java:380)
	at
com.sun.identity.agents.jsr196.as9soap.AMClientAuthModule.validateResponse(AMClientAuthModule.java:170)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:585)
	at com.sun.enterprise.security.jauth.AuthContext.invokePriv(AuthContext.java:128)
	at com.sun.enterprise.security.jauth.AuthContext$1.run(AuthContext.java:78)
	at java.security.AccessController.doPrivileged(Native Method)
	at com.sun.enterprise.security.jauth.AuthContext.invoke(AuthContext.java:75)
	at
com.sun.enterprise.security.jauth.ConfigFile$ConfigClient.validateResponse(ConfigFile.java:618)
	at
com.sun.enterprise.security.wss.WebServiceSecurity.validateResponse(WebServiceSecurity.java:324)
	at
com.sun.enterprise.security.wss.WebServiceSecurity.validateResponse(WebServiceSecurity.java:295)
	at
com.sun.enterprise.webservice.MessageLayerClientHandler.handleResponse(MessageLayerClientHandler.java:153)
	at
com.sun.xml.rpc.client.HandlerChainImpl.handleResponse(HandlerChainImpl.java:131)
	at
com.sun.xml.rpc.client.StreamingSender._callResponseHandlers(StreamingSender.java:810)
	at
com.sun.xml.rpc.client.StreamingSender._preHandlingHook(StreamingSender.java:732)
	at com.sun.xml.rpc.client.StreamingSender._send(StreamingSender.java:124)
	at
com.sun.identity.wss.sample.stockclient.StockQuotePortType_Stub.getStockQuote(StockQuotePortType_Stub.java:67)
	at
com.sun.identity.wss.sample.stockclient.ClientServlet.processPostRequest(ClientServlet.java:71)
	at
com.sun.identity.wss.sample.stockclient.ClientServlet.doPost(ClientServlet.java:155)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
	at
org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilterChain.java:397)
	at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:278)
	at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
	at
org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:240)
	at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:179)
	at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
	at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:73)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:182)
	at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
	at
com.sun.enterprise.web.VirtualServerPipeline.invoke(VirtualServerPipeline.java:120)
	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
	at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:137)
	at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
	at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:231)
	at
com.sun.enterprise.web.connector.grizzly.ProcessorTask.invokeAdapter(ProcessorTask.java:667)
	at
com.sun.enterprise.web.connector.grizzly.ProcessorTask.processNonBlocked(ProcessorTask.java:574)
	at
com.sun.enterprise.web.connector.grizzly.ProcessorTask.process(ProcessorTask.java:844)
	at
com.sun.enterprise.web.connector.grizzly.ReadTask.executeProcessorTask(ReadTask.java:287)
	at com.sun.enterprise.web.connector.grizzly.ReadTask.doTask(ReadTask.java:212)
	at com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:252)
	at com.sun.enterprise.web.connector.grizzly.WorkerThread.run(WorkerThread.java:75)


The following messages appear on ServerModule file:
09/05/2006 04:50:40:046 PM PDT: Thread[httpWorkerThread-8080-4,10,Grizzly]
validateResponse input: <env:Envelope
xmlns:env="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:enc="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:ns0="http://sun.com/stockquote.xsd"
xmlns:wsu="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"><env:Header><wsse:Security
xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-01.xsd"
env:mustUnderstand="1">
<wsse:UsernameToken wsu:Id="sc222c9887b62b87048b392c25a9c2bc59017c0d9">
<wsse:Username>hong</wsse:Username>
<wsse:Password
Type="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-1.0#PasswordDigest">KK2AZAYiaSlefSccruJXeHnDLyk=</wsse:Password>
<wsse:Nonce
EncodingType="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-soap-message-security-1.0#Base64Binary">FBV5tv6NujLUz/V/gQ4lgVnA</wsse:Nonce>
<wsse:Created>2006-09-05T23:50:39Z</wsse:Created>
</wsse:UsernameToken><wsu:TimeStamp><wsu:Created>2006-09-05T23:50:39Z</wsu:Created><wsu:Expires>2006-09-05T23:55:39Z</wsu:Expires></wsu:TimeStamp></wsse:Security></env:Header><env:Body
wsu:Id="sa1cd41b0bca6c3866e1fd38c9ee40595231fcbcd"><ns0:QuoteRequest><Symbol>SUNW</Symbol></ns0:QuoteRequest></env:Body></env:Envelope>
09/05/2006 04:50:40:281 PM PDT: Thread[httpWorkerThread-8080-4,10,Grizzly]
ERROR: AMServerAuthModule.validateRequest: SOAP Binding Exception.
java.lang.NullPointerException
	at
com.sun.identity.wss.security.handler.SOAPRequestHandler.initializeSystemProperties(SOAPRequestHandler.java:430)
	at
com.sun.identity.wss.security.handler.SOAPRequestHandler.getWSPConfig(SOAPRequestHandler.java:459)
	at
com.sun.identity.wss.security.handler.SOAPRequestHandler.validateRequest(SOAPRequestHandler.java:171)
	at
com.sun.identity.agents.jsr196.as9soap.AMServerAuthModule.validateRequest(AMServerAuthModule.java:120)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
	at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:585)
	at com.sun.enterprise.security.jauth.AuthContext.invokePriv(AuthContext.java:128)
	at com.sun.enterprise.security.jauth.AuthContext$1.run(AuthContext.java:78)
	at java.security.AccessController.doPrivileged(Native Method)
	at com.sun.enterprise.security.jauth.AuthContext.invoke(AuthContext.java:75)
	at
com.sun.enterprise.security.jauth.ConfigFile$ConfigServer.validateRequest(ConfigFile.java:653)
	at
com.sun.enterprise.security.wss.WebServiceSecurity.validateRequest(WebServiceSecurity.java:162)
	at
com.sun.enterprise.security.wss.WebServiceSecurity.validateRequest(WebServiceSecurity.java:95)
	at
com.sun.enterprise.webservice.ServletSystemHandlerDelegate.processRequest(ServletSystemHandlerDelegate.java:144)
	at
com.sun.enterprise.webservice.monitoring.JAXRPCEndpointImpl.processRequest(JAXRPCEndpointImpl.java:52)
	at
com.sun.xml.rpc.server.http.JAXRPCServletDelegate.doPost(JAXRPCServletDelegate.java:466)
	at com.sun.enterprise.webservice.JAXRPCServlet.doPost(JAXRPCServlet.java:106)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
	at
org.apache.catalina.core.ApplicationFilterChain.servletService(ApplicationFilterChain.java:397)
	at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:278)
	at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
	at
org.apache.catalina.core.StandardContextValve.invokeInternal(StandardContextValve.java:240)
	at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:179)
	at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
	at com.sun.enterprise.web.WebPipeline.invoke(WebPipeline.java:73)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:182)
	at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
	at
com.sun.enterprise.web.VirtualServerPipeline.invoke(VirtualServerPipeline.java:120)
	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
	at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:137)
	at org.apache.catalina.core.StandardPipeline.doInvoke(StandardPipeline.java:566)
	at org.apache.catalina.core.StandardPipeline.invoke(StandardPipeline.java:536)
	at org.apache.catalina.core.ContainerBase.invoke(ContainerBase.java:939)
	at org.apache.coyote.tomcat5.CoyoteAdapter.service(CoyoteAdapter.java:231)
	at
com.sun.enterprise.web.connector.grizzly.ProcessorTask.invokeAdapter(ProcessorTask.java:667)
	at
com.sun.enterprise.web.connector.grizzly.ProcessorTask.processNonBlocked(ProcessorTask.java:574)
	at
com.sun.enterprise.web.connector.grizzly.ProcessorTask.process(ProcessorTask.java:844)
	at
com.sun.enterprise.web.connector.grizzly.ReadTask.executeProcessorTask(ReadTask.java:287)
	at com.sun.enterprise.web.connector.grizzly.ReadTask.doTask(ReadTask.java:212)
	at com.sun.enterprise.web.connector.grizzly.TaskBase.run(TaskBase.java:252)
	at com.sun.enterprise.web.connector.grizzly.WorkerThread.run(WorkerThread.java:75)
Comment 1 Srividhya Narayanan 2006-09-06 01:39:14 UTC
can u provide the values you used for keystore for both client and server? can u
attach the flatfiles for client and server from AM flatfile respository?
Comment 2 _ hlu 2006-09-06 05:58:12 UTC
 Keystore Location:C:/coke/accessManager/testdir/keystore/key-unt/unt for
profile and web service client.
I also gave password for both, but the password for the profile is not saved(see
issue 82434).
I only chose UserNameToken for the service provider.
Comment 3 _ hlu 2006-09-06 06:07:39 UTC
Can you tell me exactly what files?
Comment 4 Srividhya Narayanan 2006-09-08 23:06:34 UTC
The keystore and the password values should be proper values. The values entered
here are fake and since the keystore itself doesnt exist the sample doesnt work.

There is also a problem with the AM where even if I gave the proper keystore
values it fails to work. I have filed a runtime issue on that separately.
Closing this bug so we can track the real runtime issue in bugster.