Category: Technical

Federated Identity Manager RequestSecurityToken NullPointerException

When using IBM Security Federated Identity Manager (TFIM) for an LTPA junction, I ran into a NullpointerException. STSLTPATokenM 3 com.tivoli.am.fim.trustserver.sts.modules.STSLTPATokenModule     consumeSTSUniversalUser Adding attribute to userMap:     AZN_CRED_PRINCIPAL_UUID:[e57142ba-37c7-11e2-935f-c0a82f84aa77] STSLTPATokenM 3 com.tivoli.am.fim.trustserver.sts.modules.STSLTPATokenModule     consumeSTSUniversalUser Adding attribute to userMap:     AZN_CRED_VERSION:[0x00000611] STSLTPATokenM 3 com.tivoli.am.fim.trustserver.sts.modules.STSLTPATokenModule     consumeSTSUniversalUser Adding attribute to userMap:     AZN_CRED_AUTH_METHOD:[password] STSLTPATokenM 3 com.tivoli.am.fim.trustserver.sts.modules.STSLTPATokenModule     consumeSTSUniversalUser... Continue Reading →

WSSMToken Consumer not found

Using IBM Security Federated Identity Manager (TFIM) I ran into some errors following the guide in the WSSM Web services security installation guide for the echo service application. Whenever I started either the application or the client, I got an error similar to that below: [9/20/12 18:01:14:500 EST] 0000003b ConfigUtil    E   WSEC5007E: Class "com.tivoli.am.fim.wssm.tokenconsumers.WSSMTokenConsumer" not... Continue Reading →

PGP Desktop SSO passwords out of sync

I've been experiencing an issue where the PGP desktop SSO password does not update when I change my Windows password using Ctrl-Alt-Del. Spent some time just now troubleshooting, and I believe I've found the cause. If your C: is not listed as "Disk 0" in your Disk Management Interface: As mine isn't whenever I have... Continue Reading →

ITIM Middleware Configuration Tool

Trying to use the ITIM Middleware configuration tool with an already installed version of TDS, I kept getting the following error: CTGIMP555W A supported version of the product IBM Tivoli Directory Server, was not found on this machine. The minimum supported version is 6.1.0.0 or 6.2.0.1. The found version is unknown. Please refer to the... Continue Reading →

TSPM administration API under TDI

When trying to use the Tivoli Security Policy Manager (TSPM) administration APIs under Tivoli Directory Integrator (TDI), you need to make sure you've got the following JARs: Copy orb.properties from WAS runtime folder  to ITDI JRE lib directory Copy com.ibm.ws.admin.client_7.0.0.jar and com.ibm.ws.webservices.thinclient_7.0.0.jar from WAS runtime folder to  <TDI_HOME>jrelibext folder Copy com.ibm.tspm.datamodel_7.1.jar, com.ibm.tspm.mgmt.tasks.jar, com.ibm.tspm.resources_7.1.jar  to <TDI_HOME.>jars3rd... Continue Reading →

Sharing ISAM for Web Sessions across Domains

An article has just been released on IBM developerworks on how to use the same sessions across two seperate domains when using Tivoli Access Manager for e-business (WebSEAL): The article is available here. (In the DeveloperWorks transition, it appears to have been lost, thankfully it's in the internet archive!) linked Here It builds on the... Continue Reading →

TSPM Delegated Administration Users

I found that the delegated administration steps can be a little complicated to do the first time, so I'm making a note of it here for future reference, and to hopefully help others: Configuring the Administrative Roles for the Tivoli Security Policy Manager Console. Create a User. Add the user to the tspm_user group in... Continue Reading →

TSPM JACCPlus Application errors

After Installing my TSPM JACCPLUS Equity Trader Application onto a new server with the RTSS Client already installed, I found that the entitlements call seemed to work fine, but the request for authorization when I was adding a custom attribute handler, seemed to generate the following error: Error 500: java.lang.NoSuchMethodError:     com/ibm/sec/authz/jaccplus/EvaluationContext.registerHandler     (java/lang/String;Lcom/ibm/sec/authz/jaccplus/IEvaluationContextHandler;) So,... Continue Reading →

TSPM console error reading the RTSS Configuration

When trying to read the RTSS configuration: TSPM Server Log: Caused by: javax.xml.ws.soap.SOAPFaultException: security.wssecurity.WSSContextImpl.s02: com.ibm.websphere.security.WSSecurityException: Exception org.apache.axis2.AxisFault: CWWSS6521E: The Login failed because of an exception: javax.security.auth.login.LoginException: com.ibm.wsspi.wssecurity.core.SoapSecurityException: CWWSS6800E: The entry with alias 'ktppd1' of keystore 'name=RTSS managementScope=(cell):sleslocal:(node):sleslocal' cannot be found: entry=null ocurred while running action: com.ibm.ws.wssecurity.handler.WSSecurityConsumerHandler$1@7c407c4 RTSS Client Log Caused by: com.ibm.wsspi.wssecurity.core.SoapSecurityException: CWWSS6521E: The Login... Continue Reading →

ITIM ADT – Won’t start under Linux

I was having some fun (read: Major frustrations) trying to get the ITIM Adapter development Tool (version 5.1.2.3) to run under Linux, ADT5123_ITIM51_TDI70_install.bin (38.8MB) (Under SuSE 9, Patch Level 4) Once installed and I ran the executables, I would get the following output: tiamdev:/opt/IBM/ADT51 # ./ITIMAdapterDevelopmentTool Loading TDI Jars into classpath... Loading IDILoader.jar into classpath...... Continue Reading →

Kerberos Ticket on Unix/Linux “Clock Skew too great”

Have been trying for 24hrs now to configure Desktop SSO for WebSEAL (TAMeb). After having no issues on my VM, doing it in the customers environment proved strangely difficult. After trying to run: /usr/krb5/bin/kinit user@DOMAIN.COM Even after fixing the time servers, I continued to get the message: Unable to obtain initial credentials.         Status 0x96c73a25... Continue Reading →

Website Built with WordPress.com.

Up ↑