Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-10382

If we set up External CTS wrongly then OpenAM fails catastrophically on start up.

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Won't Fix
    • Affects Version/s: 14.0.0
    • Fix Version/s: None
    • Component/s: None
    • Labels:
      None

      Description

      If we have an external CTS available and we have an OpenAM instance, if we try and make the OpenAM use the external CTS and we configure it wrongly (say the wrong port or the wrong fqdn). If we then restart OpenAM, it will fail catastrophically and when we try and access the OpenAM we see a page with "Loading ........" written on it. When it is in this state we need to reinstall OpenAM.

      There are some clues from looking at logs. However there should really be some sort of error message on the page so that the administrator knows what has happened.

      Setup
      _____

      1) External DJ has been configured and set up (https://wikis.forgerock.org/confluence/display/openam/Configure+External+CTS)

      2) OpenAM has been configured and set up with default set up.

      Steps
      _____

      1) Got to Configure - Server Defaults - CTS

      1a) CTS Token Store
      Set Store Mode - External Token Store
      Root Suffix - dc=forgerock,dc=com
      Max Connections 10

      And Save changes

      1b) External Store Configuration

      connection string - (blah.com:389)
      Login id - (cn=Directory Manager)
      Password - Password
      Heartbeat - 10

      (Note for connection string we use a fqdn for a a server which does not exist)

      And Save changes

      Now restart the server

      and try to access openam - we get the loading page

      The logs say

      blacklist:01/13/2017 09:26:25:032 AM UTC: Thread[OAuthTokenBlacklisting-0,5,main]: TransactionId[2e90d09a-46e4-4b18-b669-948faffc1407-0]
      ERROR: CTSBlacklist: CTS failure while polling entry blacklist: org.forgerock.openam.cts.exceptions.QueryFailedException: 
      CTS: Query operation Failed:
      Error:  
      CTS: 
      CTS: Error during partial query
      Filter: TokenFilter: Filter: [(coreTokenType eq "OAUTH_BLACKLIST" and coreTokenDate01 ge "java.util.GregorianCalendar[time=1484299525288,areFieldsSet=true,areAllFieldsSet=true,lenient=true,zone=sun.util.calendar.ZoneInfo[id="UTC",offset=0,dstSavings=0,useDaylight=false,transitions=0,lastRule=null],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2017,MONTH=0,WEEK_OF_YEAR=2,WEEK_OF_MONTH=2,DAY_OF_MONTH=13,DAY_OF_YEAR=13,DAY_OF_WEEK=6,DAY_OF_WEEK_IN_MONTH=2,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=25,SECOND=25,MILLISECOND=288,ZONE_OFFSET=0,DST_OFFSET=0]" and ! (coreTokenString01 eq "01"))] Attributes: coreTokenId,coreTokenExpirationDate,
      org.forgerock.openam.cts.exceptions.QueryFailedException: 
      CTS: Query operation Failed:
      Error:  
      CTS: 
      CTS: Error during partial query
      Filter: TokenFilter: Filter: [(coreTokenType eq "OAUTH_BLACKLIST" and coreTokenDate01 ge "java.util.GregorianCalendar[time=1484299525288,areFieldsSet=true,areAllFieldsSet=true,lenient=true,zone=sun.util.calendar.ZoneInfo[id="UTC",offset=0,dstSavings=0,useDaylight=false,transitions=0,lastRule=null],firstDayOfWeek=1,minimalDaysInFirstWeek=1,ERA=1,YEAR=2017,MONTH=0,WEEK_OF_YEAR=2,WEEK_OF_MONTH=2,DAY_OF_MONTH=13,DAY_OF_YEAR=13,DAY_OF_WEEK=6,DAY_OF_WEEK_IN_MONTH=2,AM_PM=0,HOUR=9,HOUR_OF_DAY=9,MINUTE=25,SECOND=25,MILLISECOND=288,ZONE_OFFSET=0,DST_OFFSET=0]" and ! (coreTokenString01 eq "01"))] Attributes: coreTokenId,coreTokenExpirationDate,
      	at org.forgerock.openam.cts.impl.CoreTokenAdapter.attributeQuery(CoreTokenAdapter.java:229)
      	at org.forgerock.openam.cts.CTSPersistentStoreImpl.attributeQuery(CTSPersistentStoreImpl.java:273)
      	at org.forgerock.openam.rest.router.CTSPersistentStoreProxy.attributeQuery(CTSPersistentStoreProxy.java:192)
      	at org.forgerock.openam.blacklist.CTSBlacklist.findEntriesBlacklistedSince(CTSBlacklist.java:199)
      	at org.forgerock.openam.blacklist.CTSBlacklist.access$000(CTSBlacklist.java:80)
      	at org.forgerock.openam.blacklist.CTSBlacklist$PollTask.run(CTSBlacklist.java:232)
      	at org.forgerock.openam.audit.context.AuditRequestContextPropagatingRunnable.run(AuditRequestContextPropagatingRunnable.java:42)
      	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
      	at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308)
      	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180)
      	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294)
      	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
      	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
      	at java.lang.Thread.run(Thread.java:745)
      Caused by: org.forgerock.openam.cts.exceptions.CoreTokenException: 
      CTS: 
      CTS: Error during partial query
      	at org.forgerock.openam.cts.impl.queue.AsyncResultHandler.getResults(AsyncResultHandler.java:103)
      	at org.forgerock.openam.cts.monitoring.impl.queue.DefaultMonitoringResultHandler.getResults(DefaultMonitoringResultHandler.java:50)
      	at org.forgerock.openam.cts.impl.CoreTokenAdapter.attributeQuery(CoreTokenAdapter.java:212)
      	... 13 more
      Caused by: org.forgerock.openam.sm.datalayer.api.DataLayerException: 
      CTS: Error during partial query
      	at org.forgerock.openam.cts.impl.LdapAdapter.partialQuery(LdapAdapter.java:339)
      	at org.forgerock.openam.sm.datalayer.impl.tasks.PartialQueryTask.performTask(PartialQueryTask.java:59)
      	at org.forgerock.openam.sm.datalayer.api.AbstractTask.execute(AbstractTask.java:49)
      	at org.forgerock.openam.sm.datalayer.impl.SeriesTaskExecutor$AuditRequestContextPropagatingTask.execute(SeriesTaskExecutor.java:217)
      	at org.forgerock.openam.sm.datalayer.impl.SimpleTaskExecutor.execute(SimpleTaskExecutor.java:67)
      	at org.forgerock.openam.sm.datalayer.impl.SeriesTaskExecutorThread.run(SeriesTaskExecutorThread.java:93)
      	at org.forgerock.openam.audit.context.AuditRequestContextPropagatingRunnable.run(AuditRequestContextPropagatingRunnable.java:42)
      	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
      	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
      	... 3 more
      Caused by: org.forgerock.openam.sm.datalayer.api.DataLayerRuntimeException: 
      CTS: Could not get entries from connection
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:293)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:267)
      	at org.forgerock.openam.cts.impl.LdapAdapter.partialQuery(LdapAdapter.java:332)
      	... 11 more
      Caused by: org.forgerock.openam.cts.exceptions.QueryFailedException: 
      CTS: Failed to complete query:
            DN: dc=forgerock,dc=com
          Conn: PooledConnection(GrizzlyLdapConnection(/127.0.0.1:41408,localhost/127.0.0.1:50389))
        Filter: (&(&(coreTokenType=OAUTH_BLACKLIST)(coreTokenDate01>=20170113092525.288Z)(!(coreTokenString01=01)))(objectClass=frCoreToken))
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapSearchHandler.performSearch(LdapSearchHandler.java:70)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder.getEntries(LdapQueryBuilder.java:145)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder.access$000(LdapQueryBuilder.java:61)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:291)
      	... 13 more
      Caused by: org.forgerock.opendj.ldap.EntryNotFoundException: No Such Entry: The entry dc=forgerock,dc=com specified as the search base does not exist in the Directory Server
      	at org.forgerock.opendj.ldap.LdapException.newLdapException(LdapException.java:171)
      	at org.forgerock.opendj.ldap.spi.ResultLdapPromiseImpl.setResultOrError(ResultLdapPromiseImpl.java:132)
      	at org.forgerock.opendj.grizzly.LdapClientFilter$ClientResponseHandler.searchResult(LdapClientFilter.java:308)
      	at org.forgerock.opendj.io.LdapReader.readSearchResult(LdapReader.java:684)
      	at org.forgerock.opendj.io.LdapReader.readProtocolOp(LdapReader.java:548)
      	at org.forgerock.opendj.io.LdapReader.readMessage(LdapReader.java:123)
      	at org.forgerock.opendj.grizzly.LdapClientFilter.handleRead(LdapClientFilter.java:441)
      	at org.glassfish.grizzly.filterchain.ExecutorResolver$9.execute(ExecutorResolver.java:119)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:284)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:201)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:133)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:112)
      	at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:77)
      	at org.glassfish.grizzly.nio.transport.TCPNIOTransport.fireIOEvent(TCPNIOTransport.java:526)
      	at org.glassfish.grizzly.strategies.AbstractIOStrategy.fireIOEvent(AbstractIOStrategy.java:112)
      	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.run0(WorkerThreadIOStrategy.java:117)
      	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.access$100(WorkerThreadIOStrategy.java:56)
      	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy$WorkerThreadRunnable.run(WorkerThreadIOStrategy.java:137)
      	at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:593)
      	at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.run(AbstractThreadPool.java:573)
      	... 1 more
      
      amThreadManager:01/13/2017 09:27:24:970 AM UTC: Thread[amThreadManager-10,5,main]: TransactionId[2e90d09a-46e4-4b18-b669-948faffc1407-0]
      ERROR: ThreadMonitor: Thread WatchDog detected error, restarting
      java.util.concurrent.ExecutionException: org.forgerock.openam.sm.datalayer.api.DataLayerRuntimeException: 
      CTS: Could not get entries from connection
      	at java.util.concurrent.FutureTask.report(FutureTask.java:122)
      	at java.util.concurrent.FutureTask.get(FutureTask.java:192)
      	at org.forgerock.openam.shared.concurrency.ThreadMonitor$WatchDog.run(ThreadMonitor.java:290)
      	at org.forgerock.openam.audit.context.AuditRequestContextPropagatingRunnable.run(AuditRequestContextPropagatingRunnable.java:42)
      	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
      	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
      	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
      	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
      	at java.lang.Thread.run(Thread.java:745)
      Caused by: org.forgerock.openam.sm.datalayer.api.DataLayerRuntimeException: 
      CTS: Could not get entries from connection
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:293)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:267)
      	at org.forgerock.openam.cts.impl.query.worker.queries.CTSWorkerBaseQuery.nextPage(CTSWorkerBaseQuery.java:78)
      	at org.forgerock.openam.cts.worker.process.CTSWorkerBaseProcess.handle(CTSWorkerBaseProcess.java:46)
      	at org.forgerock.openam.cts.worker.CTSWorkerTask.run(CTSWorkerTask.java:51)
      	at org.forgerock.openam.audit.context.AuditRequestContextPropagatingRunnable.run(AuditRequestContextPropagatingRunnable.java:42)
      	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
      	at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308)
      	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180)
      	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294)
      	... 3 more
      Caused by: org.forgerock.openam.cts.exceptions.QueryFailedException: 
      CTS: Failed to complete query:
            DN: dc=forgerock,dc=com
          Conn: PooledConnection(GrizzlyLdapConnection(/127.0.0.1:41402,localhost/127.0.0.1:50389))
        Filter: (&(&(coreTokenDate04<=20170113092724.948Z)(coreTokenString13=VALID)(coreTokenType=SESSION))(objectClass=frCoreToken))
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapSearchHandler.performSearch(LdapSearchHandler.java:70)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder.getEntries(LdapQueryBuilder.java:145)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder.access$000(LdapQueryBuilder.java:61)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:291)
      	... 12 more
      Caused by: org.forgerock.opendj.ldap.EntryNotFoundException: No Such Entry: The entry dc=forgerock,dc=com specified as the search base does not exist in the Directory Server
      	at org.forgerock.opendj.ldap.LdapException.newLdapException(LdapException.java:171)
      	at org.forgerock.opendj.ldap.spi.ResultLdapPromiseImpl.setResultOrError(ResultLdapPromiseImpl.java:132)
      	at org.forgerock.opendj.grizzly.LdapClientFilter$ClientResponseHandler.searchResult(LdapClientFilter.java:308)
      	at org.forgerock.opendj.io.LdapReader.readSearchResult(LdapReader.java:684)
      	at org.forgerock.opendj.io.LdapReader.readProtocolOp(LdapReader.java:548)
      	at org.forgerock.opendj.io.LdapReader.readMessage(LdapReader.java:123)
      	at org.forgerock.opendj.grizzly.LdapClientFilter.handleRead(LdapClientFilter.java:441)
      	at org.glassfish.grizzly.filterchain.ExecutorResolver$9.execute(ExecutorResolver.java:119)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:284)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:201)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:133)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:112)
      	at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:77)
      	at org.glassfish.grizzly.nio.transport.TCPNIOTransport.fireIOEvent(TCPNIOTransport.java:526)
      	at org.glassfish.grizzly.strategies.AbstractIOStrategy.fireIOEvent(AbstractIOStrategy.java:112)
      	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.run0(WorkerThreadIOStrategy.java:117)
      	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.access$100(WorkerThreadIOStrategy.java:56)
      	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy$WorkerThreadRunnable.run(WorkerThreadIOStrategy.java:137)
      	at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:593)
      	at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.run(AbstractThreadPool.java:573)
      	... 1 more
      
      amThreadManager:01/13/2017 09:27:24:972 AM UTC: Thread[amThreadManager-9,5,main]: TransactionId[2e90d09a-46e4-4b18-b669-948faffc1407-0]
      ERROR: ThreadMonitor: Thread WatchDog detected error, restarting
      java.util.concurrent.ExecutionException: org.forgerock.openam.sm.datalayer.api.DataLayerRuntimeException: 
      CTS: Could not get entries from connection
      	at java.util.concurrent.FutureTask.report(FutureTask.java:122)
      	at java.util.concurrent.FutureTask.get(FutureTask.java:192)
      	at org.forgerock.openam.shared.concurrency.ThreadMonitor$WatchDog.run(ThreadMonitor.java:290)
      	at org.forgerock.openam.audit.context.AuditRequestContextPropagatingRunnable.run(AuditRequestContextPropagatingRunnable.java:42)
      	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
      	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
      	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
      	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
      	at java.lang.Thread.run(Thread.java:745)
      Caused by: org.forgerock.openam.sm.datalayer.api.DataLayerRuntimeException: 
      CTS: Could not get entries from connection
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:293)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:267)
      	at org.forgerock.openam.cts.impl.query.worker.queries.CTSWorkerBaseQuery.nextPage(CTSWorkerBaseQuery.java:78)
      	at org.forgerock.openam.cts.worker.process.CTSWorkerBaseProcess.handle(CTSWorkerBaseProcess.java:46)
      	at org.forgerock.openam.cts.worker.CTSWorkerTask.run(CTSWorkerTask.java:51)
      	at org.forgerock.openam.audit.context.AuditRequestContextPropagatingRunnable.run(AuditRequestContextPropagatingRunnable.java:42)
      	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
      	at java.util.concurrent.FutureTask.runAndReset(FutureTask.java:308)
      	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:180)
      	at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:294)
      	... 3 more
      Caused by: org.forgerock.openam.cts.exceptions.QueryFailedException: 
      CTS: Failed to complete query:
            DN: dc=forgerock,dc=com
          Conn: PooledConnection(GrizzlyLdapConnection(/127.0.0.1:41400,localhost/127.0.0.1:50389))
        Filter: (&(&(coreTokenDate01<=20170113092724.951Z)(coreTokenString13=VALID)(coreTokenType=SESSION))(objectClass=frCoreToken))
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapSearchHandler.performSearch(LdapSearchHandler.java:70)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder.getEntries(LdapQueryBuilder.java:145)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder.access$000(LdapQueryBuilder.java:61)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:291)
      	... 12 more
      Caused by: org.forgerock.opendj.ldap.EntryNotFoundException: No Such Entry: The entry dc=forgerock,dc=com specified as the search base does not exist in the Directory Server
      	at org.forgerock.opendj.ldap.LdapException.newLdapException(LdapException.java:171)
      	at org.forgerock.opendj.ldap.spi.ResultLdapPromiseImpl.setResultOrError(ResultLdapPromiseImpl.java:132)
      	at org.forgerock.opendj.grizzly.LdapClientFilter$ClientResponseHandler.searchResult(LdapClientFilter.java:308)
      	at org.forgerock.opendj.io.LdapReader.readSearchResult(LdapReader.java:684)
      	at org.forgerock.opendj.io.LdapReader.readProtocolOp(LdapReader.java:548)
      	at org.forgerock.opendj.io.LdapReader.readMessage(LdapReader.java:123)
      	at org.forgerock.opendj.grizzly.LdapClientFilter.handleRead(LdapClientFilter.java:441)
      	at org.glassfish.grizzly.filterchain.ExecutorResolver$9.execute(ExecutorResolver.java:119)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeFilter(DefaultFilterChain.java:284)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.executeChainPart(DefaultFilterChain.java:201)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.execute(DefaultFilterChain.java:133)
      	at org.glassfish.grizzly.filterchain.DefaultFilterChain.process(DefaultFilterChain.java:112)
      	at org.glassfish.grizzly.ProcessorExecutor.execute(ProcessorExecutor.java:77)
      	at org.glassfish.grizzly.nio.transport.TCPNIOTransport.fireIOEvent(TCPNIOTransport.java:526)
      	at org.glassfish.grizzly.strategies.AbstractIOStrategy.fireIOEvent(AbstractIOStrategy.java:112)
      	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.run0(WorkerThreadIOStrategy.java:117)
      	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy.access$100(WorkerThreadIOStrategy.java:56)
      	at org.glassfish.grizzly.strategies.WorkerThreadIOStrategy$WorkerThreadRunnable.run(WorkerThreadIOStrategy.java:137)
      	at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.doWork(AbstractThreadPool.java:593)
      	at org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker.run(AbstractThreadPool.java:573)
      	... 1 more
      
      tokenDataLayer:01/13/2017 09:27:25:022 AM UTC: Thread[CTSWorkerPool-6,5,main]: TransactionId[2e90d09a-46e4-4b18-b669-948faffc1407-0]
      ERROR: CTS Async: Task Processor Error: processing task
      org.forgerock.openam.sm.datalayer.api.DataLayerException: 
      CTS: Error during partial query
      	at org.forgerock.openam.cts.impl.LdapAdapter.partialQuery(LdapAdapter.java:339)
      	at org.forgerock.openam.sm.datalayer.impl.tasks.PartialQueryTask.performTask(PartialQueryTask.java:59)
      	at org.forgerock.openam.sm.datalayer.api.AbstractTask.execute(AbstractTask.java:49)
      	at org.forgerock.openam.sm.datalayer.impl.SeriesTaskExecutor$AuditRequestContextPropagatingTask.execute(SeriesTaskExecutor.java:217)
      	at org.forgerock.openam.sm.datalayer.impl.SimpleTaskExecutor.execute(SimpleTaskExecutor.java:67)
      	at org.forgerock.openam.sm.datalayer.impl.SeriesTaskExecutorThread.run(SeriesTaskExecutorThread.java:93)
      	at org.forgerock.openam.audit.context.AuditRequestContextPropagatingRunnable.run(AuditRequestContextPropagatingRunnable.java:42)
      	at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
      	at java.util.concurrent.FutureTask.run(FutureTask.java:266)
      	at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
      	at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
      	at java.lang.Thread.run(Thread.java:745)
      Caused by: org.forgerock.openam.sm.datalayer.api.DataLayerRuntimeException: 
      CTS: Could not get entries from connection
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:293)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.java:267)
      	at org.forgerock.openam.cts.impl.LdapAdapter.partialQuery(LdapAdapter.java:332)
      	... 11 more
      Caused by: org.forgerock.openam.cts.exceptions.QueryFailedException: 
      CTS: Failed to complete query:
            DN: dc=forgerock,dc=com
          Conn: PooledConnection(GrizzlyLdapConnection(/127.0.0.1:41406,localhost/127.0.0.1:50389))
        Filter: (&(&(coreTokenType=OAUTH_BLACKLIST)(coreTokenDate01>=20170113092625.017Z)(!(coreTokenString01=01)))(objectClass=frCoreToken))
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapSearchHandler.performSearch(LdapSearchHandler.java:70)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder.getEntries(LdapQueryBuilder.java:145)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder.access$000(LdapQueryBuilder.java:61)
      	at org.forgerock.openam.sm.datalayer.impl.ldap.LdapQueryBuilder$EntryIterator.next(LdapQueryBuilder.jav
      

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                edward.barker edwardb
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: