forgerock - 在 Forgerock AM（Web 代理流程）中进行身份验证后获取“无法从 HttpRequest 创建 SSOToken（SessionID 为空）”

Question

我最近部署了 Apache http 服务器并与 Forgerock AM 集成。当我尝试访问应用程序时，将出现顶级领域登录页面进行身份验证，而不是配置的领域，并且在通过领域进行身份验证后，我收到500 Error。以下是来自 OAuth2Provider 日志文件的一些日志。

原因：com.iplanet.dpro.session.SessionException：com.iplanet.sso.providers.dpro.SSOProviderImpl.createSSOToken(SSOProviderImpl.java:134) 处的 SessionID 为空 ... 106 多个 OAuth2Provider:06/03/2021 04 :16:29:597 PM IST: 线程 [http-nio-7777-exec-7,5,main]: TransactionId[aa44f229-e05d-497a-9cfe-a5e29919f6cd-3102] 警告：针对 OpenAM 验证用户时出错：com。 iplanet.sso.SSOException：在 com.iplanet.sso.providers.dpro.SSOProviderImpl.createSSOToken(SSOProviderImpl.java:160) 处的 com.iplanet.sso.providers.dpro.SSOProviderImpl.createSSOToken(SSOProviderImpl.java:147) 处的 SessionID 为空) 在 com.iplanet.sso.SSOTokenManager.createSSOToken(SSOTokenManager.java:303) 无法签署选定的 acr 值 org.forgerock.openam.secrets.SecretInitialisationException：无法在 org.forgerock.openam.secrets.Secrets 加载一些秘密存储.resolveSecretStores(Secrets.java:258) at org.forgerock.openam.secrets.Secrets.loadSecretStores(Secrets.java:227) at org.forgerock.openam.secrets.Secrets.loadGlobalSecretStores(Secrets.java:192) at io.vavr .Lazy.computeValue(Lazy.java:162) 在 io.vavr.Lazy.get(Lazy.java:156) 在 org.forgerock.openam.secrets.Secrets.getGlobalSecrets(Secrets.java:127) 在 org.forgerock。 oauth2.core.AgentOAuth2ProviderSettings.getProviderKeys(AgentOAuth2ProviderSettings.java:150) 在 org.forgerock.oauth2.core.AgentOAuth2ProviderSettings.getAuthenticitySigningKey(AgentOAuth2ProviderSettings.java:577) 在 org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:第586章）258) 在 org.forgerock.openam.secrets.Secrets.loadSecretStores(Secrets.java:227) 在 org.forgerock.openam.secrets.Secrets.loadGlobalSecretStores(Secrets.java:192) 在 io.vavr.Lazy.computeValue(Lazy .java:162) 在 io.vavr.Lazy.get(Lazy.java:156) 在 org.forgerock.openam.secrets.Secrets.getGlobalSecrets(Secrets.java:127) 在 org.forgerock.oauth2.core.AgentOAuth2ProviderSettings。 getProviderKeys(AgentOAuth2ProviderSettings.java:150) at org.forgerock.oauth2.core.AgentOAuth2ProviderSettings.getAuthenticitySigningKey(AgentOAuth2ProviderSettings.java:577) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:586) at org.forgerock .oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:556)258) 在 org.forgerock.openam.secrets.Secrets.loadSecretStores(Secrets.java:227) 在 org.forgerock.openam.secrets.Secrets.loadGlobalSecretStores(Secrets.java:192) 在 io.vavr.Lazy.computeValue(Lazy .java:162) 在 io.vavr.Lazy.get(Lazy.java:156) 在 org.forgerock.openam.secrets.Secrets.getGlobalSecrets(Secrets.java:127) 在 org.forgerock.oauth2.core.AgentOAuth2ProviderSettings。 getProviderKeys(AgentOAuth2ProviderSettings.java:150) at org.forgerock.oauth2.core.AgentOAuth2ProviderSettings.getAuthenticitySigningKey(AgentOAuth2ProviderSettings.java:577) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:586) at org.forgerock .oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:556)java:227) 在 org.forgerock.openam.secrets.Secrets.loadGlobalSecretStores(Secrets.java:192) 在 io.vavr.Lazy.computeValue(Lazy.java:162) 在 io.vavr.Lazy.get(Lazy.java :156) 在 org.forgerock.oauth2.core.AgentOAuth2ProviderSettings.getProviderKeys(AgentOAuth2ProviderSettings.java:150) 在 org.forgerock.oauth2.core 的 org.forgerock.openam.secrets.Secrets.getGlobalSecrets(Secrets.java:127)。 AgentOAuth2ProviderSettings.getAuthenticitySigningKey(AgentOAuth2ProviderSettings.java:577) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:586) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:556)java:227) 在 org.forgerock.openam.secrets.Secrets.loadGlobalSecretStores(Secrets.java:192) 在 io.vavr.Lazy.computeValue(Lazy.java:162) 在 io.vavr.Lazy.get(Lazy.java :156) 在 org.forgerock.oauth2.core.AgentOAuth2ProviderSettings.getProviderKeys(AgentOAuth2ProviderSettings.java:150) 在 org.forgerock.oauth2.core 的 org.forgerock.openam.secrets.Secrets.getGlobalSecrets(Secrets.java:127)。 AgentOAuth2ProviderSettings.getAuthenticitySigningKey(AgentOAuth2ProviderSettings.java:577) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:586) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:556)162) 在 io.vavr.Lazy.get(Lazy.java:156) 在 org.forgerock.openam.secrets.Secrets.getGlobalSecrets(Secrets.java:127) 在 org.forgerock.oauth2.core.AgentOAuth2ProviderSettings.getProviderKeys(AgentOAuth2ProviderSettings .java:150) 在 org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:586) 在 org.forgerock.oauth2 的 org.forgerock.oauth2.core.AgentOAuth2ProviderSettings.getAuthenticitySigningKey(AgentOAuth2ProviderSettings.java:577)。 core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:556)162) 在 io.vavr.Lazy.get(Lazy.java:156) 在 org.forgerock.openam.secrets.Secrets.getGlobalSecrets(Secrets.java:127) 在 org.forgerock.oauth2.core.AgentOAuth2ProviderSettings.getProviderKeys(AgentOAuth2ProviderSettings .java:150) 在 org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:586) 在 org.forgerock.oauth2 的 org.forgerock.oauth2.core.AgentOAuth2ProviderSettings.getAuthenticitySigningKey(AgentOAuth2ProviderSettings.java:577)。 core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:556)AgentOAuth2ProviderSettings.getAuthenticitySigningKey(AgentOAuth2ProviderSettings.java:577) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:586) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:556)AgentOAuth2ProviderSettings.getAuthenticitySigningKey(AgentOAuth2ProviderSettings.java:577) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:586) at org.forgerock.oauth2.core.ResourceOwnerSessionValidator.authenticationRequired(ResourceOwnerSessionValidator.java:556)

标签： forgerock