Uploaded image for project: 'OpenDJ'
  1. OpenDJ
  2. OPENDJ-737

OpenDJ Administration Connector KeyStore Pin File must be defined and non empty


    • Type: Bug
    • Status: Done
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.6.0
    • Fix Version/s: 3.0.0, 2.8.0
    • Component/s: security, tools
    • Labels:
    • Environment:


      It doesn't seem possible to only define the PIN code for the administration
      connector in the ds-cfg-key-store-pin attribute of the "cn=Administration,cn=Key Manager Providers,cn=config" entry. When doing so, starting OpenDJ returns a NPE and the server doesn't start:

      [01/Feb/2013:11:26:27 +0100] category=CORE severity=NOTICE msgID=458891 msg=The Directory Server has sent an alert notification generated by class org.opends.server.core.DirectoryServer (alert type org.opends.server.DirectoryServerShutdown, alert ID 458893): The Directory Server has started the shutdown process. The shutdown was initiated by an instance of class org.opends.server.core.DirectoryServer and the reason provided for the shutdown was An error occurred while trying to start the Directory Server: NullPointerException (File.java:239 AdministrationConnector.java:804 AdministrationConnector.java:636 AdministrationConnector.java:182 ConnectionHandlerConfigManager.java:350 DirectoryServer.java:2756 DirectoryServer.java:1258 DirectoryServer.java:9542)

      Defining the ds-cfg-key-store-pin-file attribute in the same entry is enough to start OpenDJ, even if the corresponding file is empty. But in this case, it's not possible to connect to the administration port, with dsconfig for example.
      So, it seems using a PIN file with the right password is mandatory for the administration connector, while it's not for the OpenDJ server: it's possible to only define a PIN in the ds-cfg-key-store-pin attribute of the "cn=JKS,cn=Key Manager Providers,cn=config" entry.


          Issue Links



              • Assignee:
                nicolas.capponi@forgerock.com Nicolas Capponi
                cgrosjean Cyril Grosjean
                Dev Assignee:
                Nicolas Capponi
              • Votes:
                0 Vote for this issue
                2 Start watching this issue


                • Created: