Java Error configuring TM1WEB integrated login TM1 10.2

[bjones]

Hello All,

I'm trying to configure integrated login for TM1WEB in 10.2 by following these documents:
http://pic.dhe.ibm.com/infocenter/cbi/v ... beros.html
http://www.ibm.com/developerworks/libra ... index.html

But i'm still getting an "error has occured" when i open the TM1Webpage.
So i did a debug based on http://www-01.ibm.com/support/docview.w ... wg21662730

And get the following error:
ava.net.ConnectException: Connection refused: connect
at java.net.DualStackPlainSocketImpl.connect0(Native Method)
at java.net.DualStackPlainSocketImpl.socketConnect(DualStackPlainSocketImpl.java:79)
at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:358)
at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:219)
at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:201)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:180)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at java.net.Socket.connect(Socket.java:616)
at com.ibm.jsse2.qc.connect(qc.java:46)
at com.ibm.jsse2.qc.<init>(qc.java:545)
at com.ibm.jsse2.SSLSocketFactoryImpl.createSocket(SSLSocketFactoryImpl.java:14)
at com.applix.tm1.TM1NetClass.ConnectToHost(TM1NetClass.java:215)
at com.applix.tm1.TM1NetClass.ConnectUsingIPv6(TM1NetClass.java:199)
at com.applix.tm1.TM1NetClass.Connect(TM1NetClass.java:165)
at com.applix.tm1.TM1Bean.getAdmEntryList(TM1Bean.java:462)
at com.applix.tm1.TM1Bean.getNumberOfServers(TM1Bean.java:292)
at com.applix.tm1.TM1Bean.findEntryByServerName(TM1Bean.java:552)
at com.applix.tm1.TM1Bean.getServerConfig(TM1Bean.java:752)
at com.ibm.cognos.tm1.datasource.javaapi.TM1Connection.getServerSecurityMode(TM1Connection.java:149)
at com.ibm.cognos.tm1.web.services.TM1AppService.getServerSecurityMode(TM1AppService.java:421)
at com.ibm.cognos.tm1.web.services.TM1Service.getServerSecurityMode(TM1Service.java:143)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:76)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:607)
at org.directwebremoting.impl.ExecuteAjaxFilter.doFilter(ExecuteAjaxFilter.java:34)
at org.directwebremoting.impl.DefaultRemoter$1.doFilter(DefaultRemoter.java:428)
at com.ibm.cognos.tm1.web.services.dwr.DwrServiceFilter.doFilter(DwrServiceFilter.java:55)
at org.directwebremoting.impl.DefaultRemoter$1.doFilter(DefaultRemoter.java:428)
at com.ibm.cognos.tm1.web.services.dwr.LoggingFilter$1.invoke(LoggingFilter.java:34)
at com.ibm.cognos.tm1.web.services.logging.ServiceLogging.logServiceCall(ServiceLogging.java:30)
at com.ibm.cognos.tm1.web.services.logging.ServiceLogging.monitorCall(ServiceLogging.java:88)
at com.ibm.cognos.tm1.web.services.dwr.LoggingFilter.doFilter(LoggingFilter.java:32)
at org.directwebremoting.impl.DefaultRemoter$1.doFilter(DefaultRemoter.java:428)
at org.directwebremoting.impl.DefaultRemoter.execute(DefaultRemoter.java:431)
at org.directwebremoting.impl.DefaultRemoter.execute(DefaultRemoter.java:283)
at org.directwebremoting.servlet.PlainCallHandler.handle(PlainCallHandler.java:52)
at org.directwebremoting.servlet.UrlProcessor.handle(UrlProcessor.java:101)
at org.directwebremoting.servlet.DwrServlet.doPost(DwrServlet.java:146)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:637)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com.ibm.cognos.tm1.web.ResponseHeaderFilter.doFilter(ResponseHeaderFilter.java:39)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at com.ibm.cognos.tm1.web.GzipFilter.doFilter(GzipFilter.java:56)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:233)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:293)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:859)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:602)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:489)
at java.lang.Thread.run(Thread.java:781)

Any hints would be welcome

Thank you

[bjones]

Did anyone run into this problem or has a better and more detailed document in order to put in place integrated login for TM1web 10.2?
I think i tried everything and would really love some help

Thanks

[rmackenzie]

The move to Tomcat meant that the integrated login behaviour in earlier versions has significantly changed. IBM have made, and are making, incremental fixes to integrated login behaviour on TM1 Web. I understand the current recommendation to be that people wait for the next fix pack that is due in the next couple of months. You didn't state whether you are are on 10.2, 10.2 IF1, 10.2 FP1 or 10.2 FP1-little extra fix (not too sure if that's publicly available). You should contact your IBM support person to find out the specifics for your situation as each minor release has addressed some things, but not others.

[bjones]

Thanks for your reply, I've been reading about the changes that IBM made on the 10.2 version and with the right fix packs it should work
I'm on the 10.2.1.1 version which has the FP1 and another patch as well.
I'm suspecting the krb5.ini that i created might have some errors, but i was just wondering it that java exception i get in the log meant anything to anyone

Thanks

[rmackenzie]

it that java exception i get in the log meant anything to anyone

Looking at this section:

at com.applix.tm1.TM1NetClass.ConnectToHost(TM1NetClass.java:215)
at com.applix.tm1.TM1NetClass.ConnectUsingIPv6(TM1NetClass.java:199)
at com.applix.tm1.TM1NetClass.Connect(TM1NetClass.java:165)

Prompts me to query if you really should be using the IPv6 method... This is something you can configure this in Cognos Connection - IPv4 vs IPv6 - maybe worth double checking?

[Kerry372]

I just resolved an issue yesterday on our test environment that might be related. I found a fix IBM released in June 2010 for API developers. The issue is related to java and the applix cert. I emailed IBM support to let them know. I'm guessing they will be seeing more of it.

I was getting this error message:
Caused by: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:
java.security.cert.CertPathValidatorException: The certificate issued by OU="Applix, Inc.", O="Applix, Inc.", L=Westboro, ST=Massachusetts, C=US is not trusted; internal cause is:
java.security.cert.CertPathValidatorException: Certificate chaining error
at com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.java:410)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:256)
at com.ibm.jsse2.util.h.a(h.java:85)
... 61 more

If you see that in the log, here is the fix:

http://www-01.ibm.com/support/docview.w ... wg21414527

Note: the syntax in the instructions have some forward slashes that should be back slashes, make sure you change them.

Hope this helps!
Kerry