Hi Everyone,
We are at ISAM 9.0.5.
We have an OAuth solution for which we've enabled the Introspection endpoint.
I have activated some minimal traces which show that we go through the pre-mapping rules and the post-mapping rule correctly.
I get the expected answer from the endpoint so everything seems fine
... except that in the traces I see that, between pre & post mapping rules, some exception are raised:
Is there something I should do to avoid these exceptions?
Should I just ignore them as I am getting a valid answer?
[11/6/18 21:04:17:452 EST] 0001e11e id= com.tivoli.am.fim.audit.event.impl.AbstractAuditEventImpl I getCommonBaseEvent org.eclipse.hyades.logging.events.cbe.ValidationException: action must be set in each IBM_SECURITY_TRUST.[11/6/18 21:04:17:452 EST] 0001e11e id= li.am.fim.trustserver.sts.modules.oauth20.OAuth20AuditHelper I auditOAuth20Event java.lang.NullPointerExceptionThanks,
Louis
Here is the full out put:
[11/6/18 21:04:17:452 EST] 0001e11e id= com.tivoli.am.fim.audit.event.impl.AbstractAuditEventImpl I getCommonBaseEvent org.eclipse.hyades.logging.events.cbe.ValidationException: action must be set in each IBM_SECURITY_TRUST. at com.ibm.events.security.impl.SecurityTrustEventImpl.validate(SecurityTrustEventImpl.java:145) at com.ibm.events.security.impl.SecurityEventImpl.getCBE(SecurityEventImpl.java:76) at com.tivoli.am.fim.audit.event.impl.AbstractAuditEventImpl.getCommonBaseEvent(AbstractAuditEventImpl.java:174) at com.tivoli.am.fim.audit.handler.impl.CBEXMLBasedAuditEventHandler.toString(CBEXMLBasedAuditEventHandler.java:58) at com.tivoli.am.fim.audit.handler.impl.CBEXMLSyslogEventHandler.publish(CBEXMLSyslogEventHandler.java:333) at com.tivoli.am.fim.audit.handler.impl.CBEXMLSyslogEventHandler.publish(CBEXMLSyslogEventHandler.java:340) at com.tivoli.am.fim.audit.event.impl.AuditAdapterImpl.processEvent(AuditAdapterImpl.java:267) at com.tivoli.am.fim.audit.event.impl.AuditAdapterImpl.sendEvent(AuditAdapterImpl.java:319) at com.tivoli.am.fim.audit.event.AuditHelper.sendEvent(AuditHelper.java:1990) at com.tivoli.am.fim.audit.event.AuditHelper.sendEvent(AuditHelper.java:1976) at com.tivoli.am.fim.audit.event.AuditHelper.auditOAuth20OperationSuccess(AuditHelper.java:2147) at com.tivoli.am.fim.trustserver.sts.modules.oauth20.OAuth20AuditHelper.auditOAuth20Event(OAuth20AuditHelper.java:138) at com.tivoli.am.fim.trustserver.sts.modules.OAuth20TokenModule.doMap(OAuth20TokenModule.java:264) at com.tivoli.am.fim.trustserver.sts.modules.OAuth20TokenModule.invoke(OAuth20TokenModule.java:126) at com.tivoli.am.fim.trustserver.sts.STSModuleChain.invoke(STSModuleChain.java:319) at com.tivoli.am.fim.trustserver.sts.STSModuleChainManager.executeChain(STSModuleChainManager.java:1083) at com.tivoli.am.fim.trustserver.sts.STSModuleChainManager.processthroughChains(STSModuleChainManager.java:170) at com.tivoli.am.fim.trustserver.sts.STSModuleChainManager.process(STSModuleChainManager.java:117) at com.tivoli.am.fim.trustserver.sts.STSManager.process(STSManager.java:60) at com.tivoli.am.fim.trustserver.service.SecurityTokenProcessor.process(SecurityTokenProcessor.java:63) at com.tivoli.am.fim.trustserver.service.SecurityTokenService.requestSecurityToken(SecurityTokenService.java:136) at com.tivoli.am.fim.fedmgr2.trust.TokenExchangeCommandImpl.exchange(TokenExchangeCommandImpl.java:163) at com.tivoli.am.fim.fedmgr2.trust.TokenExchangeCommandImpl.exchange(TokenExchangeCommandImpl.java:86) at com.tivoli.am.fim.oauth20.protocol.delegates.OAuth20BaseDelegate.exchangeToken(OAuth20BaseDelegate.java:626) at com.tivoli.am.fim.oauth20.protocol.delegates.OAuth20BaseDelegate.exchangeToken(OAuth20BaseDelegate.java:573) at com.tivoli.am.fim.oauth20.protocol.delegates.OAuth20IntrospectDelegate.processRequest(OAuth20IntrospectDelegate.java:147) at com.tivoli.am.fim.fedmgr2.proper.FederationManager.doInitialRequestOnDelegate(FederationManager.java:424) at com.tivoli.am.fim.fedmgr2.proper.FederationManager.finishProcessingWithDelegateId(FederationManager.java:264) at com.tivoli.am.fim.fedmgr2.proper.FederationManager.processRequest(FederationManager.java:154) at com.tivoli.am.fim.fedmgr2.servlet.SSOPSServletBase.doRequest(SSOPSServletBase.java:129) at com.tivoli.am.fim.fedmgr2.servlet.SPSCommandDispatcher.invoke(SPSCommandDispatcher.java:431) at com.tivoli.am.fim.war.runtime.liberty.LibertyRuntimeServlet.doPost(LibertyRuntimeServlet.java:92) at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1290) at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:778) at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:475) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:148) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:79) at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:1021) at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1143) at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:82) at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:956) at com.ibm.ws.webcontainer.osgi.DynamicVirtualHost$2.run(DynamicVirtualHost.java:280) at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink$TaskWrapper.run(HttpDispatcherLink.java:967) at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.wrapHandlerAndExecute(HttpDispatcherLink.java:359) at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.ready(HttpDispatcherLink.java:318) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:471) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleNewRequest(HttpInboundLink.java:405) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.processRequest(HttpInboundLink.java:285) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.ready(HttpInboundLink.java:256) at com.ibm.ws.channel.ssl.internal.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:1043) at com.ibm.ws.channel.ssl.internal.SSLConnectionLink$MyReadCompletedCallback.complete(SSLConnectionLink.java:632) at com.ibm.ws.channel.ssl.internal.SSLReadServiceContext$SSLReadCompletedCallback.complete(SSLReadServiceContext.java:1777) at com.ibm.ws.tcpchannel.internal.WorkQueueManager.requestComplete(WorkQueueManager.java:504) at com.ibm.ws.tcpchannel.internal.WorkQueueManager.attemptIO(WorkQueueManager.java:574) at com.ibm.ws.tcpchannel.internal.WorkQueueManager.workerRun(WorkQueueManager.java:929) at com.ibm.ws.tcpchannel.internal.WorkQueueManager$Worker.run(WorkQueueManager.java:1018) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) at java.lang.Thread.run(Thread.java:811)[11/6/18 21:04:17:452 EST] 0001e11e id= li.am.fim.trustserver.sts.modules.oauth20.OAuth20AuditHelper I auditOAuth20Event java.lang.NullPointerException at com.tivoli.am.fim.audit.handler.impl.CBEXMLSyslogEventHandler.publish(CBEXMLSyslogEventHandler.java:335) at com.tivoli.am.fim.audit.handler.impl.CBEXMLSyslogEventHandler.publish(CBEXMLSyslogEventHandler.java:340) at com.tivoli.am.fim.audit.event.impl.AuditAdapterImpl.processEvent(AuditAdapterImpl.java:267) at com.tivoli.am.fim.audit.event.impl.AuditAdapterImpl.sendEvent(AuditAdapterImpl.java:319) at com.tivoli.am.fim.audit.event.AuditHelper.sendEvent(AuditHelper.java:1990) at com.tivoli.am.fim.audit.event.AuditHelper.sendEvent(AuditHelper.java:1976) at com.tivoli.am.fim.audit.event.AuditHelper.auditOAuth20OperationSuccess(AuditHelper.java:2147) at com.tivoli.am.fim.trustserver.sts.modules.oauth20.OAuth20AuditHelper.auditOAuth20Event(OAuth20AuditHelper.java:138) at com.tivoli.am.fim.trustserver.sts.modules.OAuth20TokenModule.doMap(OAuth20TokenModule.java:264) at com.tivoli.am.fim.trustserver.sts.modules.OAuth20TokenModule.invoke(OAuth20TokenModule.java:126) at com.tivoli.am.fim.trustserver.sts.STSModuleChain.invoke(STSModuleChain.java:319) at com.tivoli.am.fim.trustserver.sts.STSModuleChainManager.executeChain(STSModuleChainManager.java:1083) at com.tivoli.am.fim.trustserver.sts.STSModuleChainManager.processthroughChains(STSModuleChainManager.java:170) at com.tivoli.am.fim.trustserver.sts.STSModuleChainManager.process(STSModuleChainManager.java:117) at com.tivoli.am.fim.trustserver.sts.STSManager.process(STSManager.java:60) at com.tivoli.am.fim.trustserver.service.SecurityTokenProcessor.process(SecurityTokenProcessor.java:63) at com.tivoli.am.fim.trustserver.service.SecurityTokenService.requestSecurityToken(SecurityTokenService.java:136) at com.tivoli.am.fim.fedmgr2.trust.TokenExchangeCommandImpl.exchange(TokenExchangeCommandImpl.java:163) at com.tivoli.am.fim.fedmgr2.trust.TokenExchangeCommandImpl.exchange(TokenExchangeCommandImpl.java:86) at com.tivoli.am.fim.oauth20.protocol.delegates.OAuth20BaseDelegate.exchangeToken(OAuth20BaseDelegate.java:626) at com.tivoli.am.fim.oauth20.protocol.delegates.OAuth20BaseDelegate.exchangeToken(OAuth20BaseDelegate.java:573) at com.tivoli.am.fim.oauth20.protocol.delegates.OAuth20IntrospectDelegate.processRequest(OAuth20IntrospectDelegate.java:147) at com.tivoli.am.fim.fedmgr2.proper.FederationManager.doInitialRequestOnDelegate(FederationManager.java:424) at com.tivoli.am.fim.fedmgr2.proper.FederationManager.finishProcessingWithDelegateId(FederationManager.java:264) at com.tivoli.am.fim.fedmgr2.proper.FederationManager.processRequest(FederationManager.java:154) at com.tivoli.am.fim.fedmgr2.servlet.SSOPSServletBase.doRequest(SSOPSServletBase.java:129) at com.tivoli.am.fim.fedmgr2.servlet.SPSCommandDispatcher.invoke(SPSCommandDispatcher.java:431) at com.tivoli.am.fim.war.runtime.liberty.LibertyRuntimeServlet.doPost(LibertyRuntimeServlet.java:92) at javax.servlet.http.HttpServlet.service(HttpServlet.java:707) at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1290) at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:778) at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:475) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarget(WebAppFilterChain.java:148) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:79) at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:1021) at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1143) at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:82) at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:956) at com.ibm.ws.webcontainer.osgi.DynamicVirtualHost$2.run(DynamicVirtualHost.java:280) at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink$TaskWrapper.run(HttpDispatcherLink.java:967) at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.wrapHandlerAndExecute(HttpDispatcherLink.java:359) at com.ibm.ws.http.dispatcher.internal.channel.HttpDispatcherLink.ready(HttpDispatcherLink.java:318) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:471) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.handleNewRequest(HttpInboundLink.java:405) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.processRequest(HttpInboundLink.java:285) at com.ibm.ws.http.channel.internal.inbound.HttpInboundLink.ready(HttpInboundLink.java:256) at com.ibm.ws.channel.ssl.internal.SSLConnectionLink.determineNextChannel(SSLConnectionLink.java:1043) at com.ibm.ws.channel.ssl.internal.SSLConnectionLink$MyReadCompletedCallback.complete(SSLConnectionLink.java:632) at com.ibm.ws.channel.ssl.internal.SSLReadServiceContext$SSLReadCompletedCallback.complete(SSLReadServiceContext.java:1777) at com.ibm.ws.tcpchannel.internal.WorkQueueManager.requestComplete(WorkQueueManager.java:504) at com.ibm.ws.tcpchannel.internal.WorkQueueManager.attemptIO(WorkQueueManager.java:574) at com.ibm.ws.tcpchannel.internal.WorkQueueManager.workerRun(WorkQueueManager.java:929) at com.ibm.ws.tcpchannel.internal.WorkQueueManager$Worker.run(WorkQueueManager.java:1018) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635) at java.lang.Thread.run(Thread.java:811)------------------------------
Louis Beaudry
Access Management
Intact Financial Corporation
------------------------------