Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-15667

AM debug log does not tell which auth-module was handled - needed for troubleshooting

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 13.5.0, 13.5.1, 13.5.2, 14.0.0, 14.1.0, 14.1.1, 14.5.0, 14.5.1, 5.5.1, 6.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, 6.0.0.4, 6.0.0.5, 6.0.0.6, 6.5.0, 6.5.0.1, 6.5.1, 6.5.0.2, 6.5.2, 14.1.1.1, 14.1.1.2, 14.1.1.3, 14.1.1.4, 14.1.1.5, 14.1.2.2, 6.0.0.7, 14.1.2.3, 14.1.2.4, 6.5.2.1, 6.5.2.2, 14.1.2.11, 14.1.2.5
    • Fix Version/s: 6.5.3, 7.0.0
    • Component/s: authentication
    • Labels:
    • Sprint:
      AM Sustaining Sprint 70
    • Story Points:
      1
    • Support Ticket IDs:

      Description

      Bug description

      AM Authentication debug log does not tell which Auth module instance of an auth chain was already handled. This makes troubleshooting challenging.

      How to reproduce the issue

      Details steps outlining how to recreate the issue (remove this text)

      1. Configure AM
      2. Configure auth-modules and chain like
      [name=CertificatePwC] [flag=OPTIONAL] [options=]
      [name=DeviceMatch] [flag=SUFFICIENT] [options=]
      [name=TestOTP] [flag=OPTIONAL] [options=]
      [name=DeviceSave] [flag=SUFFICIENT] [options=]
      [name=LDAP] [flag=REQUISITE] [options=]
      [name=DeviceMatch] [flag=SUFFICIENT] [options=]
      [name=TestOTP] [flag=REQUIRED] [options=]
      [name=DeviceSave] [flag=REQUIRED] [options=]
      
      1. perform service based auth
      2. try to determine from the logs why AM prompts 2 times for the LDAP credentials
      Expected behaviour
      AM should tell which auth modules (instances) are handled
      
      Current behaviour
      AM does not tell any details
      
      excerpt from AM 6.0.0.6 Authentication debug log
      amLoginModule:11/11/2019 04:51:10:658 PM CET: Thread[http-nio-8080-exec-10,5,main]: TransactionId[661b3278-133a-446e-9fcd-49eddb3237af-304]
      This module has already done.
      amJAAS:11/11/2019 04:51:10:658 PM CET: Thread[http-nio-8080-exec-10,5,main]: TransactionId[661b3278-133a-446e-9fcd-49eddb3237af-304]
      login ignored
      

        Attachments

          Activity

            People

            • Assignee:
              joe.starling Joe Starling
              Reporter:
              bthalmayr Bernhard Thalmayr
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: