Uploaded image for project: 'OpenDJ'
  1. OpenDJ
  2. OPENDJ-737

OpenDJ Administration Connector KeyStore Pin File must be defined and non empty

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: 2.6.0
    • Fix Version/s: 3.0.0, 2.8.0
    • Component/s: security, tools
    • Labels:
    • Environment:
    • Sprint:
      Sprint 17

      Description

      1)
      It doesn't seem possible to only define the PIN code for the administration
      connector in the ds-cfg-key-store-pin attribute of the "cn=Administration,cn=Key Manager Providers,cn=config" entry. When doing so, starting OpenDJ returns a NPE and the server doesn't start:

      [01/Feb/2013:11:26:27 +0100] category=CORE severity=NOTICE msgID=458891 msg=The Directory Server has sent an alert notification generated by class org.opends.server.core.DirectoryServer (alert type org.opends.server.DirectoryServerShutdown, alert ID 458893): The Directory Server has started the shutdown process. The shutdown was initiated by an instance of class org.opends.server.core.DirectoryServer and the reason provided for the shutdown was An error occurred while trying to start the Directory Server: NullPointerException (File.java:239 AdministrationConnector.java:804 AdministrationConnector.java:636 AdministrationConnector.java:182 ConnectionHandlerConfigManager.java:350 DirectoryServer.java:2756 DirectoryServer.java:1258 DirectoryServer.java:9542)

      2)
      Defining the ds-cfg-key-store-pin-file attribute in the same entry is enough to start OpenDJ, even if the corresponding file is empty. But in this case, it's not possible to connect to the administration port, with dsconfig for example.
      So, it seems using a PIN file with the right password is mandatory for the administration connector, while it's not for the OpenDJ server: it's possible to only define a PIN in the ds-cfg-key-store-pin attribute of the "cn=JKS,cn=Key Manager Providers,cn=config" entry.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                nicolas.capponi@forgerock.com Nicolas Capponi
                Reporter:
                cgrosjean Cyril Grosjean
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: