Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-8214

JCEEncryption errors are recorded during/after upgrading to 13

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 12.0.4, 13.0.0, 13.5.0
    • Fix Version/s: 13.5.0
    • Component/s: upgrade
    • Labels:
    • Environment:
      From: OpenAM 12.0.0 Build 11961 (2014-December-17 21:16)
      To: OpenAM 13.0.0 Build 5d4589530d (2016-January-14 21:15)
    • Support Ticket IDs:

      Description

      JCEEncryption errors are recorded in debug/Idrepo during/after upgrading from OpenAM 12.0.0 (enterprise edition) to 13.0.0 (enterprise edition).

      amSDK:01/28/2016 10:37:25:166 AM JST: Thread[localhost-startStop-1,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-2]
ERROR: JCEEncryption:: failed to decrypt data
javax.crypto.BadPaddingException: Given final block not properly padded
        at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:966)
        at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:824)
        at com.sun.crypto.provider.PBES1Core.doFinal(PBES1Core.java:416)
        at com.sun.crypto.provider.PBEWithMD5AndDESCipher.engineDoFinal(PBEWithMD5AndDESCipher.java:316)
        at javax.crypto.Cipher.doFinal(Cipher.java:2165)
        at com.iplanet.services.util.JCEEncryption.pbeDecrypt(JCEEncryption.java:251)
        at com.iplanet.services.util.JCEEncryption.decrypt(JCEEncryption.java:149)
        at com.iplanet.services.util.Crypt.decode(Crypt.java:350)
        at com.iplanet.services.util.Crypt.decode(Crypt.java:375)
        at com.iplanet.services.ldap.LDAPUser.getPasswd(LDAPUser.java:117)
        at com.iplanet.services.ldap.ServerInstance.getPasswd(ServerInstance.java:128)
        at org.forgerock.openam.sm.ServerGroupConfiguration.getBindPassword(ServerGroupConfiguration.java:55)
        at org.forgerock.openam.sm.ConnectionConfigFactory$DelegatingConnectionConfig.getBindPassword(ConnectionConfigFactory.java:136)
        at org.forgerock.openam.sm.utils.ConfigurationValidator.validate(ConfigurationValidator.java:48)
        at org.forgerock.openam.sm.ConnectionConfigFactory.getConfig(ConnectionConfigFactory.java:90)
        at org.forgerock.openam.cts.impl.queue.config.CTSQueueConfiguration.getProcessors(CTSQueueConfiguration.java:90)
        at org.forgerock.openam.core.guice.CoreGuiceModule.getCTSWorkerExecutorService(CoreGuiceModule.java:359)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
        at java.lang.reflect.Method.invoke(Method.java:497)
        at com.google.inject.internal.ProviderMethod.get(ProviderMethod.java:104)
        at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
        at com.google.inject.internal.InjectorImpl$4$1.call(InjectorImpl.java:978)
        at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1031)
        at com.google.inject.internal.InjectorImpl$4.get(InjectorImpl.java:974)
        at com.google.inject.spi.ProviderLookup$1.get(ProviderLookup.java:89)
        at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
        at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
        at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
        at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
        at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
        at com.google.inject.internal.FactoryProxy.get(FactoryProxy.java:54)
        at com.google.inject.internal.InjectorImpl$4$1.call(InjectorImpl.java:978)
        at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1031)
        at com.google.inject.internal.InjectorImpl$4.get(InjectorImpl.java:974)
        at com.google.inject.spi.ProviderLookup$1.get(ProviderLookup.java:89)
        at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
        at com.google.inject.internal.ExposedKeyFactory.get(ExposedKeyFactory.java:54)
        at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
        at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
        at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
        at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
        at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call(ProviderToInternalFactoryAdapter.java:46)
        at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1031)
        at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
        at com.google.inject.Scopes$1$1.get(Scopes.java:65)
        at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
        at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
        at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
        at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
        at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
        at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
        at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
        at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
        at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
        at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call(ProviderToInternalFactoryAdapter.java:46)
        at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1031)
        at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
        at com.google.inject.Scopes$1$1.get(Scopes.java:65)
        at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
        at com.google.inject.internal.FactoryProxy.get(FactoryProxy.java:54)
        at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
        at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
        at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
        at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
        at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
        at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
        at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
        at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
        at com.google.inject.internal.InjectorImpl$4$1.call(InjectorImpl.java:978)
        at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1024)
        at com.google.inject.internal.InjectorImpl$4.get(InjectorImpl.java:974)
        at com.google.inject.internal.InjectorImpl.getInstance(InjectorImpl.java:1013)
        at org.forgerock.guice.core.InjectorHolder.getInstance(InjectorHolder.java:80)
        at com.iplanet.dpro.session.Session.<init>(Session.java:286)
        at org.forgerock.openam.session.SessionCache.getSession(SessionCache.java:296)
        at org.forgerock.openam.session.SessionCache.getSession(SessionCache.java:231)
        at org.forgerock.openam.session.SessionCache.getSession(SessionCache.java:216)
        at com.iplanet.dpro.session.service.SessionService.getAuthenticationSession(SessionService.java:346)
        at com.sun.identity.authentication.service.AuthD.initAuthSession(AuthD.java:821)
        at com.sun.identity.authentication.service.AuthD.<init>(AuthD.java:242)
        at com.sun.identity.authentication.service.AuthD.<init>(AuthD.java:100)
        at com.sun.identity.authentication.service.AuthD$SingletonHolder.getInstance(AuthD.java:122)
        at com.sun.identity.authentication.service.AuthD.getAuth(AuthD.java:531)
        at com.sun.identity.authentication.UI.LoginLogoutMapping.initializeAuth(LoginLogoutMapping.java:98)
        at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:73)
        at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:62)
        at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1284)
        at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1197)
        at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1087)
        at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:5231)
        at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5518)
        at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
        at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
        at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
        at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
        at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1081)
        at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1877)
        at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
        at java.util.concurrent.FutureTask.run(FutureTask.java:266)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
        at java.lang.Thread.run(Thread.java:745)

amSDK:01/28/2016 10:40:53:176 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: -98
amSDK:01/28/2016 10:40:53:200 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: -98
amSDK:01/28/2016 10:40:53:200 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: -98
amSDK:01/28/2016 10:40:53:200 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: -98
amSDK:01/28/2016 10:41:08:895 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: -53
amSDK:01/28/2016 10:41:08:908 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: -78
amSDK:01/28/2016 10:41:08:926 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: 85
amSDK:01/28/2016 10:41:08:945 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: -44
amSDK:01/28/2016 10:41:08:963 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: -41
amSDK:01/28/2016 10:41:17:595 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
ERROR: JCEEncryption:: Unsupported version: -56
amSDK:01/28/2016 10:44:26:584 AM JST: Thread[Thread-16,5,main]: TransactionId[1c5fe9d0-295e-4e12-a3bb-63938c04723a-9]
ERROR: JCEEncryption:: Unsupported version: -98
amSDK:01/28/2016 10:44:26:588 AM JST: Thread[Thread-16,5,main]: TransactionId[1c5fe9d0-295e-4e12-a3bb-63938c04723a-9]
ERROR: JCEEncryption:: Unsupported version: -98
amSDK:01/28/2016 10:44:26:588 AM JST: Thread[Thread-16,5,main]: TransactionId[1c5fe9d0-295e-4e12-a3bb-63938c04723a-9]
ERROR: JCEEncryption:: Unsupported version: -98
amSDK:01/28/2016 10:44:26:589 AM JST: Thread[Thread-16,5,main]: TransactionId[1c5fe9d0-295e-4e12-a3bb-63938c04723a-9]
ERROR: JCEEncryption:: Unsupported version: -98

        Attachments

          Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. OPENAM-6471 Cannot Initialize Authentication exception when upgrading OpenAM

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. OPENAM-8215 Guice provision errors during upgrade to 13

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. OPENAM-9033 Upgrade to AM 13.x makes ERROR: JCEEncryption:: failed to decrypt data in IdRepo

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          is related to

          Bug - A problem which impairs or prevents the functions of the product. OPENAM-6471 Cannot Initialize Authentication exception when upgrading OpenAM

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. OPENAM-9033 Upgrade to AM 13.x makes ERROR: JCEEncryption:: failed to decrypt data in IdRepo

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                nriossc NRI Support Team
                QA Assignee:
                Andrew Vinall
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: