2017-10-17 9 views
1

APIマネージャーとISをキーマネージャーとして設定しました。 (2.1.0と5.3.0) また、私はプライマリとセカンダリUserstoreを設定しました。WSO2 APIマネージャーとISとしてKeymanager:ユーザーがアプリケーションの承認を受けていません

私たちはSecondary Userstoreでユーザーを作成し、これを使用して過去にアプリケーションを正常に購読しましたが、突然それが動作しなくなりました。

APIをサブスクライブし、アクセストークンを生成するアプリケーションを作成すると、AMとISのスローエラーが発生します。

は次のとおりです。

TID: [-1234] [] [2017-10-17 09:07:37,479] WARN {org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl} - Illegal Access! User EXTERNAL/[email protected] does not have access to the application EXTERNAL_test-AT-test.com_201710170906_SANDBOX 
TID: [-1234] [] [2017-10-17 09:07:37,480] ERROR {org.wso2.carbon.apimgt.impl.utils.APIUtil} - Error occurred while creating ServiceProvider for app EXTERNAL_test-AT-test.com_201710170906_SANDBOX 
org.wso2.carbon.identity.application.common.IdentityApplicationManagementException: Error occurred while updating the application: EXTERNAL_test-AT-test.com_201710170906_SANDBOX 
    at org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl.updateApplication(ApplicationManagementServiceImpl.java:300) 
[...] 
Caused by: org.wso2.carbon.identity.application.common.IdentityApplicationManagementException: User not authorized 
    at org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl.updateApplication(ApplicationManagementServiceImpl.java:277) 

AM:私は直接しようとしたカップルの事をテストし、データベース(Oracleなど)で確認した

TID: [-1234] [] [2017-10-17 09:07:37,490] ERROR {org.wso2.carbon.apimgt.impl.AMDefaultKeyManagerImpl} - Can not create OAuth application : 201710170906_SANDBOX {org.wso2.carbon.apimgt.impl.AMDefaultKeyManagerImpl} 
org.wso2.carbon.apimgt.keymgt.stub.subscriber.APIKeyMgtSubscriberServiceAPIManagementException: APIKeyMgtSubscriberServiceAPIManagementException 
[...] 
TID: [-1234] [] [2017-10-17 09:07:37,492] ERROR {org.wso2.carbon.apimgt.impl.utils.APIUtil} - Error occurred while executing SubscriberKeyMgtClient. {org.wso2.carbon.apimgt.impl.utils.APIUtil} 
org.wso2.carbon.apimgt.api.APIManagementException: Can not create OAuth application : 201710170906_SANDBOX 
[...] 
Caused by: org.wso2.carbon.apimgt.keymgt.stub.subscriber.APIKeyMgtSubscriberServiceAPIManagementException: APIKeyMgtSubscriberServiceAPIManagementException 
    at sun.reflect.GeneratedConstructorAccessor339.newInstance(Unknown Source) 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) 

  • アプリケーションを作成すると、アプリケーションが作成されます。データベース。 (キーストア)
  • apiを購読すると、apiとappの間のリンクがデータベースに作成されます。
  • アクセストークンを生成すると、エラーが発生し、ユーザーの役割が作成されます。 (認証ストア)
    • ロールの「ユーザーの表示」は、ロールを持つユーザーを示します。
    • ユーザーの「役割の表示」では、役割を持つユーザーは表示されません。
    • データベース内のSP_APPテーブルには、新しく作成されたアプリケーションが含まれていますが、アクセストークンは含まれていません。
  • 私は
    • SP_APPがデータベースにとどまるアプリケーションに削除
    • ロールはデータベース内にとどまります。

しかし、今トリッキーな部分について: すべてがプライマリUSERSTOREのユーザーのために正常に動作します。

そして本当に面倒な部分: 時々(15-20回に1回)、セカンダリユーザーのトークン生成が動作することがあります。

[EDIT]

詳しい調査の結果、何かが、ユーザー/役割キャッシング/読書と間違っていることを、前提に私をリードしています。キーマネージャから

ログ:

質問:

  • なぜorg.apache.axis2.transport.http.AxisServletは、NPEを投げていますか?
  • 2017-10-18 19:46:28,877の部分は、問題なくDBにロールを作成した後で作業してはいけませんか?

完全なログ:

[2017-10-18 19:46:28,732] DEBUG - Created singleton instance for org.wso2.carbon.identity.auth.service.handler.HandlerManager {org.wso2.carbon.identity.auth.service.handler.HandlerManager} 
[2017-10-18 19:46:28,733] DEBUG - Get first priority handler for the given handler list. {org.wso2.carbon.identity.auth.service.handler.HandlerManager} 
[2017-10-18 19:46:28,733] DEBUG - Get first priority handler : DefaultAuthenticationManager(org.wso2.carbon.identity.auth.service.AuthenticationManager) {org.wso2.carbon.identity.auth.service.handler.HandlerManager} 
[2017-10-18 19:46:28,733] DEBUG - {org.apache.axis2.transport.http.AxisServlet} 
java.lang.NullPointerException 
    at javax.servlet.GenericServlet.getServletContext(GenericServlet.java:123) 
    at org.apache.axis2.transport.http.AxisServlet.createMessageContext(AxisServlet.java:715) 
    at org.apache.axis2.transport.http.AxisServlet.createMessageContext(AxisServlet.java:741) 
    at org.apache.axis2.transport.http.AxisServlet.doPost(AxisServlet.java:138) 
    at org.wso2.carbon.core.transports.CarbonServlet.doPost(CarbonServlet.java:231) 
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:650) 
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:731) 
    at org.eclipse.equinox.http.servlet.internal.ServletRegistration.service(ServletRegistration.java:61) 
    at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:128) 
    at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:68) 
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:731) 
    at org.wso2.carbon.tomcat.ext.servlet.DelegationServlet.service(DelegationServlet.java:68) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(HttpHeaderSecurityFilter.java:120) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.wso2.carbon.tomcat.ext.filter.CharacterSetFilter.doFilter(CharacterSetFilter.java:61) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(HttpHeaderSecurityFilter.java:120) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:218) 
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) 
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505) 
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:169) 
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) 
    at org.wso2.carbon.identity.context.rewrite.valve.TenantContextRewriteValve.invoke(TenantContextRewriteValve.java:72) 
    at org.wso2.carbon.identity.authz.valve.AuthorizationValve.invoke(AuthorizationValve.java:91) 
    at org.wso2.carbon.identity.auth.valve.AuthenticationValve.invoke(AuthenticationValve.java:60) 
    at org.wso2.carbon.tomcat.ext.valves.CompositeValve.continueInvocation(CompositeValve.java:99) 
    at org.wso2.carbon.tomcat.ext.valves.CarbonTomcatValve$1.invoke(CarbonTomcatValve.java:47) 
    at org.wso2.carbon.webapp.mgt.TenantLazyLoaderValve.invoke(TenantLazyLoaderValve.java:57) 
    at org.wso2.carbon.tomcat.ext.valves.TomcatValveContainer.invokeValves(TomcatValveContainer.java:47) 
    at org.wso2.carbon.tomcat.ext.valves.CompositeValve.invoke(CompositeValve.java:62) 
    at org.wso2.carbon.tomcat.ext.valves.CarbonStuckThreadDetectionValve.invoke(CarbonStuckThreadDetectionValve.java:159) 
    at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:958) 
    at org.wso2.carbon.tomcat.ext.valves.CarbonContextCreatorValve.invoke(CarbonContextCreatorValve.java:57) 
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) 
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:452) 
    at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1087) 
    at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:637) 
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1756) 
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1715) 
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) 
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) 
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) 
    at java.lang.Thread.run(Thread.java:748) 
[2017-10-18 19:46:28,734] DEBUG - getAction (null) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - Old SoapAction is (null) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - New SoapAction is (null) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - setAction Old action is (null) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - setAction New action is (null) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - Input contentType (application/soap+xml; charset=UTF-8; action="urn:createOAuthApplicationByApplicationInfo") {org.apache.axis2.builder.BuilderUtil} 
[2017-10-18 19:46:28,734] DEBUG - CharSetEncoding from content-type (UTF-8) {org.apache.axis2.builder.BuilderUtil} 
[2017-10-18 19:46:28,734] DEBUG - getAction (null) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - Old SoapAction is (null) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - New SoapAction is (urn:createOAuthApplicationByApplicationInfo) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - setAction Old action is (null) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - setAction New action is (urn:createOAuthApplicationByApplicationInfo) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - getAction (urn:createOAuthApplicationByApplicationInfo) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - SoapAction is (urn:createOAuthApplicationByApplicationInfo) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - createSOAPEnvelope using Builder (class org.apache.axis2.builder.SOAPBuilder) selected from type (application/soap+xml) {org.apache.axis2.transport.TransportUtils} 
[2017-10-18 19:46:28,734] DEBUG - char set encoding set from default =UTF-8 {org.apache.axis2.builder.BuilderUtil} 
[2017-10-18 19:46:28,734] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] Checking for Service using target endpoint address : https://wimtest.domain.com/services/APIKeyMgtSubscriberService {org.apache.axis2.dispatchers.RequestURIBasedServiceDispatcher} 
[2017-10-18 19:46:28,735] DEBUG - org.apache.axis2.i18n.resource::handleGetObject(servicefound) {org.apache.axis2.i18n.ProjectResourceBundle} 
[2017-10-18 19:46:28,735] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] Found AxisService : APIKeyMgtSubscriberService {org.apache.axis2.engine.AbstractDispatcher} 
[2017-10-18 19:46:28,735] DEBUG - getAction (urn:createOAuthApplicationByApplicationInfo) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,735] DEBUG - SoapAction is (urn:createOAuthApplicationByApplicationInfo) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,735] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] Checking for Operation using Action : urn:createOAuthApplicationByApplicationInfo {org.apache.axis2.dispatchers.ActionBasedOperationDispatcher} 
[2017-10-18 19:46:28,735] DEBUG - getOperationBySOAPAction: Operation ([email protected],createOAuthApplicationByApplicationInfo) for soapAction: urn:createOAuthApplicationByApplicationInfo found in action map. {org.apache.axis2.description.AxisService} 
[2017-10-18 19:46:28,735] DEBUG - org.apache.axis2.i18n.resource::handleGetObject(operationfound) {org.apache.axis2.i18n.ProjectResourceBundle} 
[2017-10-18 19:46:28,735] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] Found AxisOperation : createOAuthApplicationByApplicationInfo {org.apache.axis2.engine.AbstractDispatcher} 
[2017-10-18 19:46:28,735] DEBUG - getAddressingRequirementParemeterValue: value: 'null' {org.apache.axis2.addressing.AddressingHelper} 
[2017-10-18 19:46:28,735] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] isReplyRedirected: ReplyTo is null. Returning false {org.apache.axis2.addressing.AddressingHelper} 
[2017-10-18 19:46:28,735] DEBUG - Resolving tenant id from tenant domain {org.wso2.carbon.context.PrivilegedCarbonContext} 
[2017-10-18 19:46:28,735] DEBUG - Authorization cache miss for username : admin resource /permission/admin/login action : ui.execute {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,735] DEBUG - Roles which have permission for resource : /permission/admin/login action : ui.execute {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Role : admin {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Role : INTERNAL/creator {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Role : INTERNAL/subscriber {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Role : INTERNAL/publisher {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Retrieving internal roles for user name : admin and search filter * {org.wso2.carbon.user.core.common.AbstractUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Searching for user admin {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Replace escape characters configured to: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Replace escape characters configured to: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - value after escaping special characters in admin : admin {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - User: admin exist: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Replace escape characters configured to: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Reading roles with the memberOfProperty Property: memberOf {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Result for searchBase: CN=admin,OU=EDV,DC=test,DC=com searchFilter: (&(|(objectClass=userProxyFull)(objectClass=user))(mail=admin)) property:memberOf appendDN: false {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,755] DEBUG - Replace escape characters configured to: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,757] DEBUG - Found user: CN=admin,OU=GROUPS,DC=test,DC=com {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,757] DEBUG - Result : CN=admin,OU=GROUPS,DC=test,DC=com {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,757] DEBUG - GetGroupNameAttributeValuesOfGroups with DN {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,773] DEBUG - Using DN: CN=admin,OU=GROUPS,DC=test,DC=com {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,773] DEBUG - Found role: admin {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,774] DEBUG - admin user has permitted resource : /permission/admin/login, action :ui.execute {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,774] DEBUG - getAction (null) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,774] DEBUG - Old WSAAction is (null) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,774] DEBUG - New WSAAction is (urn:createOAuthApplicationByApplicationInfoResponse) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,774] DEBUG - setAction Old action is (null) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,774] DEBUG - setAction New action is (urn:createOAuthApplicationByApplicationInfoResponse) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,774] DEBUG - messageID is null. {org.apache.axis2.context.ConfigurationContext} 
[2017-10-18 19:46:28,778] DEBUG - Resolving tenant id from tenant domain {org.wso2.carbon.context.PrivilegedCarbonContext} 
[2017-10-18 19:46:28,778] DEBUG - Creating application role : Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX and assign the user : [EXTERNAL/[email protected]] to that role {org.wso2.carbon.identity.application.mgt.ApplicationMgtUtil} 
[2017-10-18 19:46:28,779] DEBUG - Is roleName: Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX Exist: false TenantId: -1234 {org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager} 
[2017-10-18 19:46:28,783] DEBUG - Is roleName: Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX Exist: false TenantId: -1234 {org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager} 
[2017-10-18 19:46:28,792] DEBUG - Executed a batch update. Query is : INSERT INTO UM_HYBRID_USER_ROLE (UM_USER_NAME, UM_ROLE_ID, UM_TENANT_ID, UM_DOMAIN_ID) VALUES (?,(SELECT UM_ID FROM UM_HYBRID_ROLE WHERE UM_ROLE_NAME=? AND UM_TENANT_ID=?), ?, (SELECT UM_DOMAIN_ID FROM UM_DOMAIN WHERE UM_TENANT_ID=? AND UM_DOMAIN_NAME=?)): and result is[1] {org.wso2.carbon.user.core.util.DatabaseUtil} 
[2017-10-18 19:46:28,812] DEBUG - Creating Application EXTERNAL_test-AT-test.com_201710181946_SANDBOX for user EXTERNAL/[email protected] {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,820] DEBUG - Application Stored successfully with application id 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,822] DEBUG - Loading Basic Application Data of EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,823] DEBUG - ApplicationID: 135 ApplicationName: EXTERNAL_test-AT-test.com_201710181946_SANDBOX UserName: [email protected] TenantDomain: carbon.super {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,823] DEBUG - Reading Clients of Application 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,825] DEBUG - Reading Steps of Application 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,831] DEBUG - Reading Claim Mappings of Application 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,834] DEBUG - Reading Role Mapping of Application 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,874] DEBUG - Clearing cache entry for EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.provisioning.listener.ProvisioningApplicationMgtListener} 
[2017-10-18 19:46:28,874] DEBUG - Provisioning cached entry not found for sp EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.provisioning.listener.ProvisioningApplicationMgtListener} 
[2017-10-18 19:46:28,874] DEBUG - Checking whether user has role : Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX by retrieving role list of user : EXTERNAL/[email protected] {org.wso2.carbon.identity.application.mgt.ApplicationMgtUtil} 
[2017-10-18 19:46:28,874] DEBUG - Loading Application Name for ID: 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,876] DEBUG - ApplicationName : EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,877] DEBUG - Checking whether user has role : Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX by retrieving role list of user : EXTERNAL/[email protected] {org.wso2.carbon.identity.application.mgt.ApplicationMgtUtil} 
[2017-10-18 19:46:28,877] WARN - Illegal Access! User EXTERNAL/[email protected] does not have access to the application EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl} 
[2017-10-18 19:46:28,877] ERROR - Error occurred while creating ServiceProvider for app EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.apimgt.impl.utils.APIUtil} 
org.wso2.carbon.identity.application.common.IdentityApplicationManagementException: Error occurred while updating the application: EXTERNAL_test-AT-test.com_201710181946_SANDBOX 
    at org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl.updateApplication(ApplicationManagementServiceImpl.java:300) 

よろしく、 マット

答えて

0

ので、私は、現在の問題を修正しました。

セカンダリユーザーストア内のロールのキャッシュ構成が正しく動作していなかった。 UI設定はキャッシュを無効にしませんでしたが、無効にしました。 xmlで設定を変更した後、ロールキャッシングが無効になり、問題はなくなりました。 (これでUIはキャッシュを有効または無効にします)。

ただし、キャッシングを再度有効にすると、問題は再び発生します(まだワークフローをスムーズに実行する可能性はわずかです)。

キャッシングは開発環境とライブ環境用であり、問​​題はありません。だから何とか、テスト環境は、キャッシュをクリアする/ユーザーの役割のためのデータをリロード...奇妙な...

それは理想的ではありませんが、少なくとも再び使用可能です。しかし、誰かがキャッシングの問題を解決する方法を手がかりにしているなら、私は知ってうれしいです!

乾杯、 マット

関連する問題