Topic
5 replies Latest Post - ‏2007-05-15T10:46:41Z by SystemAdmin
SystemAdmin
SystemAdmin
2340 Posts
ACCEPTED ANSWER

Pinned topic Help for Authentication Exit

‏2007-05-10T22:31:25Z |
We are currently using workflow authentication for our application. We need to switch to LDAP authentication soon.
I need to implement "Authentication Exit" to remove the workflow authentication.
We are using AIX 5.3 , J2RE 1.4.2, MQWF 3.6

I was trying to accomplish it using the sample programs provided by IBM (<MQWFDir>/SMP/java/authexit/*.java)

I changed the settings
fmczchk -c inst:m,RTAuthenticationExitTypeServer,JAVA

and restarted workflow.

I created the new X509 certificate (for testing) using keytool and modified hardcoded user etc. (basically I followed all the steps as mentioned in the readme.txt of sample IBM programs)

When I tried to test the "Authentication exit", i got time out error..
Error logging on to MQWF
com.ibm.workflow.client.util.FmcApiException:
FMC38009E MQSeries Workflow API Error :
API Return Code : 14
Error Origin : FmcFMLC.java:602
Error Message : FMC00014E Timeout occurred
Nested Exception : None
at com.ibm.workflow.client.util.FmcFMLC.GetMsgFmcFMLC.java:602)
at com.ibm.workflow.client.util.FmcFMLC.ConverseFmcFMLC.java:630)
at com.ibm.workflow.client.api.FmcSession.CallSync(FmcSession.java:451)
at com.ibm.workflow.client.api.FmcSession.LogonFmcSession.java:1309)
at com.ibm.workflow.client.api.FmcExecutionService.logon3(FmcExecutionService.java:818) at com.ibm.workflow.java.exit.AuthenticationClient.main(AuthenticationClient.java:193)

Any idea, what could be wrong? All suggestions are welcome.
Updated on 2007-05-15T10:46:41Z at 2007-05-15T10:46:41Z by SystemAdmin
  • SystemAdmin
    SystemAdmin
    2340 Posts
    ACCEPTED ANSWER

    Re: Help for Authentication Exit

    ‏2007-05-11T06:31:51Z  in response to SystemAdmin
    Hi,

    your client is getting a timeout because the admin server did not start
    properly.
    Check the system log and error log files of the MQWF servers.
    Most probably you made a mistake in step 2 and the admin server could not
    load the authentication exit.
    If you cannot figure out the root cause of the failure you need to switch
    on the trace for the
    admin server startup and have a look into the tracefile.

    Volker Hoss
    IBM WebSphere Process Server Development
    • SystemAdmin
      SystemAdmin
      2340 Posts
      ACCEPTED ANSWER

      Re: Help for Authentication Exit

      ‏2007-05-14T13:08:29Z  in response to SystemAdmin
      I have started all logs and tried to double/triple check all the steps.

      I have java in path.
      $which java
      /usr/java14/jre/bin/java

      Classpath also looks good and is as below:
      /var/fmc/cfgs/FMC/auth/fmcaexit.jar:/usr/lpp/fmc/bin/fmcoutil.jar::/usr/lpp/fmc/bin/fmcjapi.jar:$CLASSPATH

      fmcaexit.jar contains the sample Authentication class.

      I am still getting this error while starting the admin server:


      05/13/07 01:58:32 FMC31050E An error has occurred which has terminated processing.
      05/13/07 01:58:32
      Exception Class : FmcExitException
      Error ID : A1
      Error Description :
      No Java-Authentication Exit available: virtual machine could not be loaded.


      I am also attaching the fmctrc.log also.

      I will appreciate any help or suggestions to resolve this issue.

      Thank you
      Pankaj

      Attachments

      Updated on 2007-05-14T13:08:29Z at 2007-05-14T13:08:29Z by SystemAdmin
      • jmac_EmeriCon
        jmac_EmeriCon
        26 Posts
        ACCEPTED ANSWER

        Re: Help for Authentication Exit

        ‏2007-05-14T16:37:29Z  in response to SystemAdmin
        If I recall correctly, this error, is generally because java is not in the path.
        Regards

        John McDonald
        EmeriCon, LLC
        • SystemAdmin
          SystemAdmin
          2340 Posts
          ACCEPTED ANSWER

          Re: Help for Authentication Exit

          ‏2007-05-14T16:42:43Z  in response to jmac_EmeriCon
          Thanks John.
          But I have set the CLASSPATH explicitly before calling the fmcamain as well as on the .profile of "fmc" user. "fmc" user is running the script. Here is what is set in the script:
          ...
          ...
          ...
          export CLASSPATH=/var/fmc/cfgs/FMC/auth/fmcaexit.jar:/usr/lpp/fmc/bin/fmcoutil.jar:$CLASSPATH
          export LD_LIBRARY_PATH=/usr/java14/jre/bin:$LD_LIBRARY_PATH
          fmcamain -yFMC &
          ...
          ...
          ...

          $which java
          /usr/java14/jre/bin/java
          • SystemAdmin
            SystemAdmin
            2340 Posts
            ACCEPTED ANSWER

            Re: Help for Authentication Exit

            ‏2007-05-15T10:46:41Z  in response to SystemAdmin
            John is right.
            Something is wrong with your JVM path.
            You'll have to look into the trace in more detail.
            It will tell you what library it is searching and the exact path that is
            used.

            If you do not succeed you'll have to open a PMR and ask for support.

            Volker Hoss

            IBM WebSphere Process Server Development