Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-18132

Failed to get the distinct user id attributes for the configured identity stores in realm

    XMLWordPrintable

    Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • 7.1.0
    • None
    • core, rest
    • Rank:
      1|i05azi:

      Description

      Bug description

      When you access AM, a serverinfo call is triggered. If you access AM with no session or a session belonging to an unprivileged user e.g. demo, AM logs this warning and serverinfo returns an empty userIdAttributes value. If you access serverinfo when logged in as amadmin, userIdAttributes is populated correctly and the warning is not logged.

      How to reproduce the issue

      1. Install AM using default configuration
      2. Enable message level debug
      3. Access AMĀ http://am.example.com:8080/openam/XUI/?service=Example
      4. Check CoreSystem log
      Expected behaviour
      I don't think serverinfo should be relying on an amadmin SSOToken to pull the data. userIdAttributes should be populated regardless of the user's SSOToken or lack of like the rest of the attributes. Is there anything that relies on userIdAttributes?
      Current behaviour
      AM logs a warning every time AM is accessed without a SSOToken or with a standard user's SSOToken (a lot of warnings are going to be logged)

      Code analysis

      org/forgerock/openam/core/rest/server/ServerInfoResource.java
      try { 
      SSOToken ssoToken = context.asContext(SSOTokenContext.class).getCallerSSOToken(); ServiceConfigManager scm = new ServiceConfigManager(ssoToken, IDREPO_SVC_NAME, VERSION);
      ...
      } catch (SSOException | SMSException | IllegalArgumentException e) {
          debug.warn("Failed to get the distinct user id attributes for the " +
                             "configured identity stores in realm {} ", realm, e);
      }

        Attachments

          Activity

            People

            Unassigned Unassigned
            aaron.haskins Aaron Haskins
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Dates

              Created:
              Updated: