CallbackHandler does not support problem

[fre3man]

Hi all experts,

I have a OpenKM 5.1.9 with MySQL install on Windows. I have successfully setup everything and it is running fine, until i tried to access 'okm:root'.
It will took a long time to update the property group and then auto reset connection. Following that, everytime i click on any folder/file under 'okm:root', i would get the following error:

Code: Select all

2012-04-18 15:25:26,842 ERROR [com.openkm.servlet.frontend.PropertyGroupServlet] CallbackHandler does not support: javax.security.auth.callback.NameCallback@41d81f: CallbackHandler does not support: javax.security.auth.callback.NameCallback@41d81f
com.openkm.frontend.client.OKMException: CallbackHandler does not support: javax.security.auth.callback.NameCallback@41d81f: CallbackHandler does not support: javax.security.auth.callback.NameCallback@41d81f
	at com.openkm.servlet.frontend.PropertyGroupServlet.getGroups(PropertyGroupServlet.java:195)
	at com.openkm.servlet.frontend.PropertyGroupServlet.getAllGroups(PropertyGroupServlet.java:97)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
	at java.lang.reflect.Method.invoke(Method.java:597)
	at com.google.gwt.user.server.rpc.RPC.invokeAndEncodeResponse(RPC.java:562)
	at com.google.gwt.user.server.rpc.RemoteServiceServlet.processCall(RemoteServiceServlet.java:207)
	at com.google.gwt.user.server.rpc.RemoteServiceServlet.processPost(RemoteServiceServlet.java:243)
	at com.google.gwt.user.server.rpc.AbstractRemoteServiceServlet.doPost(AbstractRemoteServiceServlet.java:62)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
	at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:182)
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:524)
	at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
	at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262)
	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
	at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
	at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)
	at java.lang.Thread.run(Thread.java:619)

Does anyone know what is the cause of the problem?

Please kindly advice.

Thanks in advance!!

[fre3man]

Hi, Anybody able to help out please?

[pavila]

This error is thrown because the JAAS identity has been lost, thats mean, you don't use an authenticated user to access document repository.

[fre3man]

Sorry, I'm still quite new to JBoss. May i know what do you mean by i am not using an authenticated user to access?

I was able to logon to OpenKM and create new file/folder even though this error keeps popping out.

I am confused with the 'user' you mentioned.

[fre3man]

I actually switch on the debug trace and saw the following in the log file:

Code: Select all

11:00:18,682 TRACE [org.jboss.security.auth.login.XMLLoginConfigImpl] End getAppConfigurationEntry(OpenKM), authInfo=AppConfigurationEntry[]:
[0]
LoginModule Class: org.jboss.security.auth.spi.DatabaseServerLoginModule
ControlFlag: LoginModuleControlFlag: required
Options:name=principalsQuery, value=select usr_password as PASSWD from OKM_USER where usr_id=? and usr_active='T'
name=dsJndiName, value=java:/OpenKMDS
name=rolesQuery, value=select ur_role as ROLEID, 'Roles' from OKM_USER_ROLE where ur_user=?
[1]
LoginModule Class: org.jboss.security.ClientLoginModule
ControlFlag: LoginModuleControlFlag: required
Options:
11:00:18,682 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] initialize, instance=@20207019
11:00:18,682 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] Security domain: OpenKM
11:00:18,682 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] DatabaseServerLoginModule, dsJndiName=java:/OpenKMDS
11:00:18,682 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] principalsQuery=select usr_password as PASSWD from OKM_USER where usr_id=? and usr_active='T'
11:00:18,682 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] rolesQuery=select ur_role as ROLEID, 'Roles' from OKM_USER_ROLE where ur_user=?
11:00:18,682 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] suspendResume=true
11:00:18,682 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] login
11:00:18,682 TRACE [org.jboss.security.ClientLoginModule] Security domain: OpenKM
11:00:18,682 TRACE [org.jboss.security.ClientLoginModule] Enabling restore-login-identity mode
11:00:18,682 TRACE [org.jboss.security.ClientLoginModule] Begin login
11:00:18,682 TRACE [org.jboss.security.auth.spi.DatabaseServerLoginModule] abort
11:00:18,682 TRACE [org.jboss.security.ClientLoginModule] abort
11:00:18,682 TRACE [org.jboss.security.SecurityAssociation] clear, server=true
11:00:18,979 TRACE [org.jboss.security.SecurityAssociation] popRunAsIdentity, runAs=null
11:00:18,979 TRACE [org.jboss.security.SecurityAssociation] clear, server=true
11:00:22,682 TRACE [org.jboss.security.SecurityAssociation] pushRunAsIdentity, runAs=null
11:00:22,682 TRACE [org.jboss.security.SecurityAssociation] pushSubjectContext, subject=Subject:
	Principal: okmadmin
	Principal: Roles(members:AdminRole)
, sc=org.jboss.security.SecurityAssociation$SubjectContext@1b647b9{principal=okmadmin,subject=4955023}
11:00:22,682 TRACE [org.jboss.security.SecurityAssociation] popRunAsIdentity, runAs=null
11:00:22,682 TRACE [org.jboss.security.SecurityAssociation] clear, server=true
11:00:22,713 TRACE [org.jboss.security.SecurityAssociation] pushRunAsIdentity, runAs=null
11:00:22,713 TRACE [org.jboss.security.SecurityAssociation] pushSubjectContext, subject=Subject:
	Principal: okmadmin
	Principal: Roles(members:AdminRole)
, sc=org.jboss.security.SecurityAssociation$SubjectContext@243322{principal=okmadmin,subject=4955023}

'org.jboss.security.auth.spi.DatabaseServerLoginModule' was aborted each time i click on the documents. Does this relates to the problem or it is a norm?

Attached with the log file:

[fre3man]

Does anyone encounters this issue before? i have tried multiple methods but i still hit this error.

Would really requires some help in resolving this issue. I am out of ideas.

Thanks in advance.

[jllort]

This server has internet connection ?

[pavila]

This error never should be thrown when using OpenKM from a web browser. It can be shown when you start an operation which take some time to complete and close the browser before it ends.

[fre3man]

jilort: Yes, the server itself does have the internet connection. i had even tried to add the proxy server and port to ensure it is not due to the proxy restriction.

pavila: I dont quite get you. I was trying on IE, Chrome, and FireFox but all hit the same issue.

The scenario is always the same:
1- Click on 'okm:root'
2- Took some time to 'Updating Property Group' screen
3- Hit the 'OKM-009001 GetAllGroups() : Internal Repository Error
4- Always popped-out the same error on any selection of file/folder
5- Checked the log file: indicated callbackhandler does not support error

*On a side note, i had setup OpenKM to retrieve login data from MySQL database.

[pavila]

I think is a configuration problem, but I would need to connect to your server and check the OpenKM installation.

[fre3man]

What are the possible configuration problem that comes to your mind? I would love to allow connection but it is restricted by the IT admin.

When you said 'check the OpenKM installation', are you referring to the OpenKM directory? I can upload somewhere and allow access to download from there.

Is that good enough?

[Update]: I just realized one thing. I have made changes to the files in OpenKM.war. I have tried to re-compile by running 'jar -cvf OpenKM.war *' in the window command prompt. Does this step caused any impact to the repository?

[jllort]

I do not know exactly whick kind of changes you have included in OpenKM.war file. Change war file has no change in repository meanwhile OpenKM is not running, but depending the change you have done ( repository classes into the war file ) then could take some effect on it. Anyway I suggest ensure you are doing backups correctly.