2017-10-17 123 views
1

我已經設置了API Manager和IS作爲密鑰管理器。 (2.1.0和5.3.0) 此外,我設置了主用戶和次用戶。WSO2 API Manager和IS作爲Keymanager:用戶未被授權應用

我們已經在Secondary Userstore中創建了用戶,並使用它們在過去成功訂閱了應用程序,但是突然間,這再也無法工作。

創建應用程序以訂閱API並生成訪問令牌時,AM和IS會拋出錯誤。

爲:

TID: [-1234] [] [2017-10-17 09:07:37,479] WARN {org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl} - Illegal Access! User EXTERNAL/[email protected] does not have access to the application EXTERNAL_test-AT-test.com_201710170906_SANDBOX 
TID: [-1234] [] [2017-10-17 09:07:37,480] ERROR {org.wso2.carbon.apimgt.impl.utils.APIUtil} - Error occurred while creating ServiceProvider for app EXTERNAL_test-AT-test.com_201710170906_SANDBOX 
org.wso2.carbon.identity.application.common.IdentityApplicationManagementException: Error occurred while updating the application: EXTERNAL_test-AT-test.com_201710170906_SANDBOX 
    at org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl.updateApplication(ApplicationManagementServiceImpl.java:300) 
[...] 
Caused by: org.wso2.carbon.identity.application.common.IdentityApplicationManagementException: User not authorized 
    at org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl.updateApplication(ApplicationManagementServiceImpl.java:277) 

AM:

TID: [-1234] [] [2017-10-17 09:07:37,490] ERROR {org.wso2.carbon.apimgt.impl.AMDefaultKeyManagerImpl} - Can not create OAuth application : 201710170906_SANDBOX {org.wso2.carbon.apimgt.impl.AMDefaultKeyManagerImpl} 
org.wso2.carbon.apimgt.keymgt.stub.subscriber.APIKeyMgtSubscriberServiceAPIManagementException: APIKeyMgtSubscriberServiceAPIManagementException 
[...] 
TID: [-1234] [] [2017-10-17 09:07:37,492] ERROR {org.wso2.carbon.apimgt.impl.utils.APIUtil} - Error occurred while executing SubscriberKeyMgtClient. {org.wso2.carbon.apimgt.impl.utils.APIUtil} 
org.wso2.carbon.apimgt.api.APIManagementException: Can not create OAuth application : 201710170906_SANDBOX 
[...] 
Caused by: org.wso2.carbon.apimgt.keymgt.stub.subscriber.APIKeyMgtSubscriberServiceAPIManagementException: APIKeyMgtSubscriberServiceAPIManagementException 
    at sun.reflect.GeneratedConstructorAccessor339.newInstance(Unknown Source) 
    at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45) 

我直接久經考驗的幾件事情,並在數據庫(Oracle)的驗證:

  • 當我創建一個應用程序時,它被創建在數據庫。 (key store)
  • 當我訂閱api時,api和app之間的鏈接在數據庫中創建。
  • 當我生成訪問令牌時發生錯誤,創建用戶的角色。 (auth store)
    • 該角色的「查看用戶」顯示具有角色的用戶。
    • 用戶的「查看角色」不顯示具有角色的用戶。
    • 數據庫中的SP_APP表包含新創建的應用程序,但沒有訪問令牌。
  • 當我刪除應用程序
    • 的SP_APP停留在數據庫中。
    • 角色停留在數據庫中。

但現在棘手的部分: 一切工作正常,在主Userstore用戶。

而真正棘手的部分: 有時(像每15-20次一次),次要用戶的令牌生成工作。

[編輯]

進一步的調查使我的假設,什麼是錯與用戶/角色緩存/讀取。從密鑰管理器

日誌:

問題:

  • 爲什麼org.apache.axis2.transport.http.AxisServlet拋出NPE?
  • 不應該在2017-10-18 19:46:28,877部分在DB中創建角色後沒有問題?

完整的日誌:

[2017-10-18 19:46:28,732] DEBUG - Created singleton instance for org.wso2.carbon.identity.auth.service.handler.HandlerManager {org.wso2.carbon.identity.auth.service.handler.HandlerManager} 
[2017-10-18 19:46:28,733] DEBUG - Get first priority handler for the given handler list. {org.wso2.carbon.identity.auth.service.handler.HandlerManager} 
[2017-10-18 19:46:28,733] DEBUG - Get first priority handler : DefaultAuthenticationManager(org.wso2.carbon.identity.auth.service.AuthenticationManager) {org.wso2.carbon.identity.auth.service.handler.HandlerManager} 
[2017-10-18 19:46:28,733] DEBUG - {org.apache.axis2.transport.http.AxisServlet} 
java.lang.NullPointerException 
    at javax.servlet.GenericServlet.getServletContext(GenericServlet.java:123) 
    at org.apache.axis2.transport.http.AxisServlet.createMessageContext(AxisServlet.java:715) 
    at org.apache.axis2.transport.http.AxisServlet.createMessageContext(AxisServlet.java:741) 
    at org.apache.axis2.transport.http.AxisServlet.doPost(AxisServlet.java:138) 
    at org.wso2.carbon.core.transports.CarbonServlet.doPost(CarbonServlet.java:231) 
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:650) 
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:731) 
    at org.eclipse.equinox.http.servlet.internal.ServletRegistration.service(ServletRegistration.java:61) 
    at org.eclipse.equinox.http.servlet.internal.ProxyServlet.processAlias(ProxyServlet.java:128) 
    at org.eclipse.equinox.http.servlet.internal.ProxyServlet.service(ProxyServlet.java:68) 
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:731) 
    at org.wso2.carbon.tomcat.ext.servlet.DelegationServlet.service(DelegationServlet.java:68) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:303) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:52) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(HttpHeaderSecurityFilter.java:120) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.wso2.carbon.tomcat.ext.filter.CharacterSetFilter.doFilter(CharacterSetFilter.java:61) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.apache.catalina.filters.HttpHeaderSecurityFilter.doFilter(HttpHeaderSecurityFilter.java:120) 
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241) 
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208) 
    at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:218) 
    at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122) 
    at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:505) 
    at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:169) 
    at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103) 
    at org.wso2.carbon.identity.context.rewrite.valve.TenantContextRewriteValve.invoke(TenantContextRewriteValve.java:72) 
    at org.wso2.carbon.identity.authz.valve.AuthorizationValve.invoke(AuthorizationValve.java:91) 
    at org.wso2.carbon.identity.auth.valve.AuthenticationValve.invoke(AuthenticationValve.java:60) 
    at org.wso2.carbon.tomcat.ext.valves.CompositeValve.continueInvocation(CompositeValve.java:99) 
    at org.wso2.carbon.tomcat.ext.valves.CarbonTomcatValve$1.invoke(CarbonTomcatValve.java:47) 
    at org.wso2.carbon.webapp.mgt.TenantLazyLoaderValve.invoke(TenantLazyLoaderValve.java:57) 
    at org.wso2.carbon.tomcat.ext.valves.TomcatValveContainer.invokeValves(TomcatValveContainer.java:47) 
    at org.wso2.carbon.tomcat.ext.valves.CompositeValve.invoke(CompositeValve.java:62) 
    at org.wso2.carbon.tomcat.ext.valves.CarbonStuckThreadDetectionValve.invoke(CarbonStuckThreadDetectionValve.java:159) 
    at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:958) 
    at org.wso2.carbon.tomcat.ext.valves.CarbonContextCreatorValve.invoke(CarbonContextCreatorValve.java:57) 
    at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116) 
    at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:452) 
    at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1087) 
    at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:637) 
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1756) 
    at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.run(NioEndpoint.java:1715) 
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) 
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617) 
    at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61) 
    at java.lang.Thread.run(Thread.java:748) 
[2017-10-18 19:46:28,734] DEBUG - getAction (null) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - Old SoapAction is (null) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - New SoapAction is (null) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - setAction Old action is (null) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - setAction New action is (null) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - Input contentType (application/soap+xml; charset=UTF-8; action="urn:createOAuthApplicationByApplicationInfo") {org.apache.axis2.builder.BuilderUtil} 
[2017-10-18 19:46:28,734] DEBUG - CharSetEncoding from content-type (UTF-8) {org.apache.axis2.builder.BuilderUtil} 
[2017-10-18 19:46:28,734] DEBUG - getAction (null) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - Old SoapAction is (null) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - New SoapAction is (urn:createOAuthApplicationByApplicationInfo) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - setAction Old action is (null) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - setAction New action is (urn:createOAuthApplicationByApplicationInfo) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - getAction (urn:createOAuthApplicationByApplicationInfo) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,734] DEBUG - SoapAction is (urn:createOAuthApplicationByApplicationInfo) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,734] DEBUG - createSOAPEnvelope using Builder (class org.apache.axis2.builder.SOAPBuilder) selected from type (application/soap+xml) {org.apache.axis2.transport.TransportUtils} 
[2017-10-18 19:46:28,734] DEBUG - char set encoding set from default =UTF-8 {org.apache.axis2.builder.BuilderUtil} 
[2017-10-18 19:46:28,734] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] Checking for Service using target endpoint address : https://wimtest.domain.com/services/APIKeyMgtSubscriberService {org.apache.axis2.dispatchers.RequestURIBasedServiceDispatcher} 
[2017-10-18 19:46:28,735] DEBUG - org.apache.axis2.i18n.resource::handleGetObject(servicefound) {org.apache.axis2.i18n.ProjectResourceBundle} 
[2017-10-18 19:46:28,735] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] Found AxisService : APIKeyMgtSubscriberService {org.apache.axis2.engine.AbstractDispatcher} 
[2017-10-18 19:46:28,735] DEBUG - getAction (urn:createOAuthApplicationByApplicationInfo) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,735] DEBUG - SoapAction is (urn:createOAuthApplicationByApplicationInfo) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,735] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] Checking for Operation using Action : urn:createOAuthApplicationByApplicationInfo {org.apache.axis2.dispatchers.ActionBasedOperationDispatcher} 
[2017-10-18 19:46:28,735] DEBUG - getOperationBySOAPAction: Operation ([email protected],createOAuthApplicationByApplicationInfo) for soapAction: urn:createOAuthApplicationByApplicationInfo found in action map. {org.apache.axis2.description.AxisService} 
[2017-10-18 19:46:28,735] DEBUG - org.apache.axis2.i18n.resource::handleGetObject(operationfound) {org.apache.axis2.i18n.ProjectResourceBundle} 
[2017-10-18 19:46:28,735] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] Found AxisOperation : createOAuthApplicationByApplicationInfo {org.apache.axis2.engine.AbstractDispatcher} 
[2017-10-18 19:46:28,735] DEBUG - getAddressingRequirementParemeterValue: value: 'null' {org.apache.axis2.addressing.AddressingHelper} 
[2017-10-18 19:46:28,735] DEBUG - [MessageContext: logID=62aa565ba9f5ad1bb8a9618af3ccb60006e855dbc7d5825a] isReplyRedirected: ReplyTo is null. Returning false {org.apache.axis2.addressing.AddressingHelper} 
[2017-10-18 19:46:28,735] DEBUG - Resolving tenant id from tenant domain {org.wso2.carbon.context.PrivilegedCarbonContext} 
[2017-10-18 19:46:28,735] DEBUG - Authorization cache miss for username : admin resource /permission/admin/login action : ui.execute {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,735] DEBUG - Roles which have permission for resource : /permission/admin/login action : ui.execute {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Role : admin {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Role : INTERNAL/creator {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Role : INTERNAL/subscriber {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Role : INTERNAL/publisher {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,736] DEBUG - Retrieving internal roles for user name : admin and search filter * {org.wso2.carbon.user.core.common.AbstractUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Searching for user admin {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Replace escape characters configured to: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Replace escape characters configured to: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - value after escaping special characters in admin : admin {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - User: admin exist: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Replace escape characters configured to: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Reading roles with the memberOfProperty Property: memberOf {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,740] DEBUG - Result for searchBase: CN=admin,OU=EDV,DC=test,DC=com searchFilter: (&(|(objectClass=userProxyFull)(objectClass=user))(mail=admin)) property:memberOf appendDN: false {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,755] DEBUG - Replace escape characters configured to: true {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,757] DEBUG - Found user: CN=admin,OU=GROUPS,DC=test,DC=com {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,757] DEBUG - Result : CN=admin,OU=GROUPS,DC=test,DC=com {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,757] DEBUG - GetGroupNameAttributeValuesOfGroups with DN {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,773] DEBUG - Using DN: CN=admin,OU=GROUPS,DC=test,DC=com {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,773] DEBUG - Found role: admin {org.wso2.carbon.user.core.ldap.ReadOnlyLDAPUserStoreManager} 
[2017-10-18 19:46:28,774] DEBUG - admin user has permitted resource : /permission/admin/login, action :ui.execute {org.wso2.carbon.user.core.authorization.JDBCAuthorizationManager} 
[2017-10-18 19:46:28,774] DEBUG - getAction (null) from [email protected] {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,774] DEBUG - Old WSAAction is (null) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,774] DEBUG - New WSAAction is (urn:createOAuthApplicationByApplicationInfoResponse) {org.apache.axis2.context.MessageContext} 
[2017-10-18 19:46:28,774] DEBUG - setAction Old action is (null) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,774] DEBUG - setAction New action is (urn:createOAuthApplicationByApplicationInfoResponse) {org.apache.axis2.client.Options} 
[2017-10-18 19:46:28,774] DEBUG - messageID is null. {org.apache.axis2.context.ConfigurationContext} 
[2017-10-18 19:46:28,778] DEBUG - Resolving tenant id from tenant domain {org.wso2.carbon.context.PrivilegedCarbonContext} 
[2017-10-18 19:46:28,778] DEBUG - Creating application role : Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX and assign the user : [EXTERNAL/[email protected]] to that role {org.wso2.carbon.identity.application.mgt.ApplicationMgtUtil} 
[2017-10-18 19:46:28,779] DEBUG - Is roleName: Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX Exist: false TenantId: -1234 {org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager} 
[2017-10-18 19:46:28,783] DEBUG - Is roleName: Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX Exist: false TenantId: -1234 {org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager} 
[2017-10-18 19:46:28,792] DEBUG - Executed a batch update. Query is : INSERT INTO UM_HYBRID_USER_ROLE (UM_USER_NAME, UM_ROLE_ID, UM_TENANT_ID, UM_DOMAIN_ID) VALUES (?,(SELECT UM_ID FROM UM_HYBRID_ROLE WHERE UM_ROLE_NAME=? AND UM_TENANT_ID=?), ?, (SELECT UM_DOMAIN_ID FROM UM_DOMAIN WHERE UM_TENANT_ID=? AND UM_DOMAIN_NAME=?)): and result is[1] {org.wso2.carbon.user.core.util.DatabaseUtil} 
[2017-10-18 19:46:28,812] DEBUG - Creating Application EXTERNAL_test-AT-test.com_201710181946_SANDBOX for user EXTERNAL/[email protected] {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,820] DEBUG - Application Stored successfully with application id 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,822] DEBUG - Loading Basic Application Data of EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,823] DEBUG - ApplicationID: 135 ApplicationName: EXTERNAL_test-AT-test.com_201710181946_SANDBOX UserName: [email protected] TenantDomain: carbon.super {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,823] DEBUG - Reading Clients of Application 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,825] DEBUG - Reading Steps of Application 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,831] DEBUG - Reading Claim Mappings of Application 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,834] DEBUG - Reading Role Mapping of Application 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,874] DEBUG - Clearing cache entry for EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.provisioning.listener.ProvisioningApplicationMgtListener} 
[2017-10-18 19:46:28,874] DEBUG - Provisioning cached entry not found for sp EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.provisioning.listener.ProvisioningApplicationMgtListener} 
[2017-10-18 19:46:28,874] DEBUG - Checking whether user has role : Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX by retrieving role list of user : EXTERNAL/[email protected] {org.wso2.carbon.identity.application.mgt.ApplicationMgtUtil} 
[2017-10-18 19:46:28,874] DEBUG - Loading Application Name for ID: 135 {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,876] DEBUG - ApplicationName : EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.application.mgt.dao.impl.ApplicationDAOImpl} 
[2017-10-18 19:46:28,877] DEBUG - Checking whether user has role : Application/EXTERNAL_test-AT-test.com_201710181946_SANDBOX by retrieving role list of user : EXTERNAL/[email protected] {org.wso2.carbon.identity.application.mgt.ApplicationMgtUtil} 
[2017-10-18 19:46:28,877] WARN - Illegal Access! User EXTERNAL/[email protected] does not have access to the application EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl} 
[2017-10-18 19:46:28,877] ERROR - Error occurred while creating ServiceProvider for app EXTERNAL_test-AT-test.com_201710181946_SANDBOX {org.wso2.carbon.apimgt.impl.utils.APIUtil} 
org.wso2.carbon.identity.application.common.IdentityApplicationManagementException: Error occurred while updating the application: EXTERNAL_test-AT-test.com_201710181946_SANDBOX 
    at org.wso2.carbon.identity.application.mgt.ApplicationManagementServiceImpl.updateApplication(ApplicationManagementServiceImpl.java:300) 

問候, 墊

回答

0

所以,我找到了解決當前問題。

輔助用戶庫中角色的高速緩存配置在某種程度上無法正常工作。 UI配置沒有禁用緩存,但顯示禁用。在我更改了xml中的配置後,它確實禁用了角色緩存,問題消失了。 (現在用戶界面可以啓用和禁用緩存)。

但是,只要我重新激活緩存,問題又會回來(仍然有一個隨機的小機會在整個工作流中平穩運行)。

緩存適用於開發和生活環境,我們在那裏沒有問題。因此,不知何故,測試環境不想清除緩存/重新加載用戶角色的數據......奇怪...

所以它不是理想的,但至少可以再次使用。但是如果有人知道如何解決緩存問題,我會很高興知道!

乾杯, 墊子