Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-8214

JCEEncryption errors are recorded during/after upgrading to 13

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 12.0.4, 13.0.0, 13.5.0
    • Fix Version/s: 13.5.0
    • Component/s: upgrade
    • Labels:
    • Environment:
      From: OpenAM 12.0.0 Build 11961 (2014-December-17 21:16)
      To: OpenAM 13.0.0 Build 5d4589530d (2016-January-14 21:15)
    • Support Ticket IDs:

      Description

      JCEEncryption errors are recorded in debug/Idrepo during/after upgrading from OpenAM 12.0.0 (enterprise edition) to 13.0.0 (enterprise edition).

      amSDK:01/28/2016 10:37:25:166 AM JST: Thread[localhost-startStop-1,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-2]
      ERROR: JCEEncryption:: failed to decrypt data
      javax.crypto.BadPaddingException: Given final block not properly padded
              at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:966)
              at com.sun.crypto.provider.CipherCore.doFinal(CipherCore.java:824)
              at com.sun.crypto.provider.PBES1Core.doFinal(PBES1Core.java:416)
              at com.sun.crypto.provider.PBEWithMD5AndDESCipher.engineDoFinal(PBEWithMD5AndDESCipher.java:316)
              at javax.crypto.Cipher.doFinal(Cipher.java:2165)
              at com.iplanet.services.util.JCEEncryption.pbeDecrypt(JCEEncryption.java:251)
              at com.iplanet.services.util.JCEEncryption.decrypt(JCEEncryption.java:149)
              at com.iplanet.services.util.Crypt.decode(Crypt.java:350)
              at com.iplanet.services.util.Crypt.decode(Crypt.java:375)
              at com.iplanet.services.ldap.LDAPUser.getPasswd(LDAPUser.java:117)
              at com.iplanet.services.ldap.ServerInstance.getPasswd(ServerInstance.java:128)
              at org.forgerock.openam.sm.ServerGroupConfiguration.getBindPassword(ServerGroupConfiguration.java:55)
              at org.forgerock.openam.sm.ConnectionConfigFactory$DelegatingConnectionConfig.getBindPassword(ConnectionConfigFactory.java:136)
              at org.forgerock.openam.sm.utils.ConfigurationValidator.validate(ConfigurationValidator.java:48)
              at org.forgerock.openam.sm.ConnectionConfigFactory.getConfig(ConnectionConfigFactory.java:90)
              at org.forgerock.openam.cts.impl.queue.config.CTSQueueConfiguration.getProcessors(CTSQueueConfiguration.java:90)
              at org.forgerock.openam.core.guice.CoreGuiceModule.getCTSWorkerExecutorService(CoreGuiceModule.java:359)
              at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
              at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
              at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
              at java.lang.reflect.Method.invoke(Method.java:497)
              at com.google.inject.internal.ProviderMethod.get(ProviderMethod.java:104)
              at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
              at com.google.inject.internal.InjectorImpl$4$1.call(InjectorImpl.java:978)
              at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1031)
              at com.google.inject.internal.InjectorImpl$4.get(InjectorImpl.java:974)
              at com.google.inject.spi.ProviderLookup$1.get(ProviderLookup.java:89)
              at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
              at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
              at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
              at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
              at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
              at com.google.inject.internal.FactoryProxy.get(FactoryProxy.java:54)
              at com.google.inject.internal.InjectorImpl$4$1.call(InjectorImpl.java:978)
              at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1031)
              at com.google.inject.internal.InjectorImpl$4.get(InjectorImpl.java:974)
              at com.google.inject.spi.ProviderLookup$1.get(ProviderLookup.java:89)
              at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
              at com.google.inject.internal.ExposedKeyFactory.get(ExposedKeyFactory.java:54)
              at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
              at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
              at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
              at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
              at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call(ProviderToInternalFactoryAdapter.java:46)
              at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1031)
              at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
              at com.google.inject.Scopes$1$1.get(Scopes.java:65)
              at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
              at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
              at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
              at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
              at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
              at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
              at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
              at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
              at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
              at com.google.inject.internal.ProviderToInternalFactoryAdapter$1.call(ProviderToInternalFactoryAdapter.java:46)
              at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1031)
              at com.google.inject.internal.ProviderToInternalFactoryAdapter.get(ProviderToInternalFactoryAdapter.java:40)
              at com.google.inject.Scopes$1$1.get(Scopes.java:65)
              at com.google.inject.internal.InternalFactoryToProviderAdapter.get(InternalFactoryToProviderAdapter.java:40)
              at com.google.inject.internal.FactoryProxy.get(FactoryProxy.java:54)
              at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
              at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
              at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
              at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
              at com.google.inject.internal.SingleParameterInjector.inject(SingleParameterInjector.java:38)
              at com.google.inject.internal.SingleParameterInjector.getAll(SingleParameterInjector.java:62)
              at com.google.inject.internal.ConstructorInjector.construct(ConstructorInjector.java:84)
              at com.google.inject.internal.ConstructorBindingImpl$Factory.get(ConstructorBindingImpl.java:254)
              at com.google.inject.internal.InjectorImpl$4$1.call(InjectorImpl.java:978)
              at com.google.inject.internal.InjectorImpl.callInContext(InjectorImpl.java:1024)
              at com.google.inject.internal.InjectorImpl$4.get(InjectorImpl.java:974)
              at com.google.inject.internal.InjectorImpl.getInstance(InjectorImpl.java:1013)
              at org.forgerock.guice.core.InjectorHolder.getInstance(InjectorHolder.java:80)
              at com.iplanet.dpro.session.Session.<init>(Session.java:286)
              at org.forgerock.openam.session.SessionCache.getSession(SessionCache.java:296)
              at org.forgerock.openam.session.SessionCache.getSession(SessionCache.java:231)
              at org.forgerock.openam.session.SessionCache.getSession(SessionCache.java:216)
              at com.iplanet.dpro.session.service.SessionService.getAuthenticationSession(SessionService.java:346)
              at com.sun.identity.authentication.service.AuthD.initAuthSession(AuthD.java:821)
              at com.sun.identity.authentication.service.AuthD.<init>(AuthD.java:242)
              at com.sun.identity.authentication.service.AuthD.<init>(AuthD.java:100)
              at com.sun.identity.authentication.service.AuthD$SingletonHolder.getInstance(AuthD.java:122)
              at com.sun.identity.authentication.service.AuthD.getAuth(AuthD.java:531)
              at com.sun.identity.authentication.UI.LoginLogoutMapping.initializeAuth(LoginLogoutMapping.java:98)
              at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:73)
              at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:62)
              at org.apache.catalina.core.StandardWrapper.initServlet(StandardWrapper.java:1284)
              at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1197)
              at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:1087)
              at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:5231)
              at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5518)
              at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:150)
              at org.apache.catalina.core.ContainerBase.addChildInternal(ContainerBase.java:901)
              at org.apache.catalina.core.ContainerBase.addChild(ContainerBase.java:877)
              at org.apache.catalina.core.StandardHost.addChild(StandardHost.java:649)
              at org.apache.catalina.startup.HostConfig.deployWAR(HostConfig.java:1081)
              at org.apache.catalina.startup.HostConfig$DeployWar.run(HostConfig.java:1877)
              at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:511)
              at java.util.concurrent.FutureTask.run(FutureTask.java:266)
              at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
              at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
              at java.lang.Thread.run(Thread.java:745)
      
      amSDK:01/28/2016 10:40:53:176 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: -98
      amSDK:01/28/2016 10:40:53:200 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: -98
      amSDK:01/28/2016 10:40:53:200 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: -98
      amSDK:01/28/2016 10:40:53:200 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: -98
      amSDK:01/28/2016 10:41:08:895 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: -53
      amSDK:01/28/2016 10:41:08:908 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: -78
      amSDK:01/28/2016 10:41:08:926 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: 85
      amSDK:01/28/2016 10:41:08:945 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: -44
      amSDK:01/28/2016 10:41:08:963 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: -41
      amSDK:01/28/2016 10:41:17:595 AM JST: Thread[http-bio-38080-exec-6,5,main]: TransactionId[b3fea1eb-aaad-4d20-9b66-941b90e78ad8-4]
      ERROR: JCEEncryption:: Unsupported version: -56
      amSDK:01/28/2016 10:44:26:584 AM JST: Thread[Thread-16,5,main]: TransactionId[1c5fe9d0-295e-4e12-a3bb-63938c04723a-9]
      ERROR: JCEEncryption:: Unsupported version: -98
      amSDK:01/28/2016 10:44:26:588 AM JST: Thread[Thread-16,5,main]: TransactionId[1c5fe9d0-295e-4e12-a3bb-63938c04723a-9]
      ERROR: JCEEncryption:: Unsupported version: -98
      amSDK:01/28/2016 10:44:26:588 AM JST: Thread[Thread-16,5,main]: TransactionId[1c5fe9d0-295e-4e12-a3bb-63938c04723a-9]
      ERROR: JCEEncryption:: Unsupported version: -98
      amSDK:01/28/2016 10:44:26:589 AM JST: Thread[Thread-16,5,main]: TransactionId[1c5fe9d0-295e-4e12-a3bb-63938c04723a-9]
      ERROR: JCEEncryption:: Unsupported version: -98
      

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                nriossc NRI Support Team
                QA Assignee:
                Andrew Vinall
              • Votes:
                0 Vote for this issue
                Watchers:
                7 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: