Re: [gatein-dev] Need supports to analyze PicketLink IDM exception in eXo Intranet

Hello GateIn guys, We are analyzing the unstability in eXo Intranet relate to the login problem https://jira.exoplatform.org/browse/PLFENG-365 (sometime many users report that they can not login to eXo Intranet although they input right username/password). We checked log files and see there are many exceptions like: ==================================================================================================================================== Apr 2, 2012 10:12:26 AM org.exoplatform.services.jcr.impl.core.query.lucene.DocNumberCache get INFO: size=1024/1024, #accesses=1023, #hits=1023, #misses=0, cacheRatio=100% Apr 2, 2012 10:12:52 AM org.gatein.common.logging.Logger log INFO: Cannot authenticate user: patrice_lamarque; org.picketlink.idm.common.exception.IdentityException: IdentityObjectType[USER] not present in the store. at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.getHibernateIdentityObjectType(HibernateIdentityStoreImpl.java:2812) at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.getHibernateIdentityObject(HibernateIdentityStoreImpl.java:2827) at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.safeGet(HibernateIdentityStoreImpl.java:2752) at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.validateCredential(HibernateIdentityStoreImpl.java:2564) at org.picketlink.idm.impl.repository.WrapperIdentityStoreRepository.validateCredential(WrapperIdentityStoreRepository.java:367) at org.picketlink.idm.impl.api.session.managers.AttributesManagerImpl.validatePassword(AttributesManagerImpl.java:542) at org.exoplatform.services.organization.idm.UserDAOImpl.authenticate(UserDAOImpl.java:407) at org.exoplatform.services.organization.auth.OrganizationAuthenticatorImpl.validateUser(OrganizationAuthenticatorImpl.java:150) at org.exoplatform.services.security.jaas.SharedStateLoginModule.login(SharedStateLoginModule.java:70) at sun.reflect.GeneratedMethodAccessor725.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769) at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186) at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680) at javax.security.auth.login.LoginContext.login(LoginContext.java:579) at org.apache.catalina.realm.JAASRealm.authenticate(JAASRealm.java:409) at org.apache.catalina.realm.JAASRealm.authenticate(JAASRealm.java:334) at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:260) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:454) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:394) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298) at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:776) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:705) at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:898) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690) at java.lang.Thread.run(Thread.java:662) Caused by: org.hibernate.HibernateException: createCriteria is not valid without active transaction at org.hibernate.context.ThreadLocalSessionContext$TransactionProtectionWrapper.invoke(ThreadLocalSessionContext.java:338) at $Proxy89.createCriteria(Unknown Source) at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.getHibernateIdentityObjectType(HibernateIdentityStoreImpl.java:2786) ... 33 more Apr 2, 2012 10:12:52 AM org.gatein.common.logging.Logger log INFO: Cannot authenticate user: patrice_lamarque; org.picketlink.idm.common.exception.IdentityException: IdentityObjectType[USER] not present in the store. at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.getHibernateIdentityObjectType(HibernateIdentityStoreImpl.java:2812) at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.getHibernateIdentityObject(HibernateIdentityStoreImpl.java:2827) at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.safeGet(HibernateIdentityStoreImpl.java:2752) at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.validateCredential(HibernateIdentityStoreImpl.java:2564) at org.picketlink.idm.impl.repository.WrapperIdentityStoreRepository.validateCredential(WrapperIdentityStoreRepository.java:367) at org.picketlink.idm.impl.api.session.managers.AttributesManagerImpl.validatePassword(AttributesManagerImpl.java:542) at org.exoplatform.services.organization.idm.UserDAOImpl.authenticate(UserDAOImpl.java:407) at org.exoplatform.services.organization.auth.OrganizationAuthenticatorImpl.validateUser(OrganizationAuthenticatorImpl.java:150) at org.exoplatform.services.security.jaas.DefaultLoginModule.login(DefaultLoginModule.java:119) at sun.reflect.GeneratedMethodAccessor726.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:597) at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769) at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186) at javax.security.auth.login.LoginContext$4.run(LoginContext.java:683) at java.security.AccessController.doPrivileged(Native Method) at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680) at javax.security.auth.login.LoginContext.login(LoginContext.java:579) at org.apache.catalina.realm.JAASRealm.authenticate(JAASRealm.java:409) at org.apache.catalina.realm.JAASRealm.authenticate(JAASRealm.java:334) at org.apache.catalina.authenticator.FormAuthenticator.authenticate(FormAuthenticator.java:260) at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:454) at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127) at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) at org.apache.catalina.authenticator.SingleSignOn.invoke(SingleSignOn.java:394) at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:298) at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:190) at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:291) at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:776) at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:705) at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:898) at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:690) at java.lang.Thread.run(Thread.java:662) Caused by: org.hibernate.HibernateException: createCriteria is not valid without active transaction at org.hibernate.context.ThreadLocalSessionContext$TransactionProtectionWrapper.invoke(ThreadLocalSessionContext.java:338) at $Proxy89.createCriteria(Unknown Source) at org.picketlink.idm.impl.store.hibernate.HibernateIdentityStoreImpl.getHibernateIdentityObjectType(HibernateIdentityStoreImpl.java:2786) ... 33 more Apr 2, 2012 10:12:52 AM org.exoplatform.web.login.ErrorLoginServlet unregisterTokenCookie WARNING: Cannot delete the token 'rememberme-1385916741' java.lang.NullPointerException Apr 2, 2012 10:13:06 AM org.exoplatform.platform.gadget.services.LoginHistory.LoginHistoryListener onEvent INFO: User patrice_lamarque logged in. ===================================================================================================================================== I know "org.hibernate.HibernateException: createCriteria is not valid without active transaction" often happen when we call OrganizationService without start RequestLifeCycle before. I checked OrganizationAuthenticatorImpl.validateUser() and see RequestLifeCycle has been started and ended correctly but exceptions still happen. We are stuck on these exceptions. Each time there are reports on login problem, we often found these exceptions in log file. I attached a eXo Intranet log on Apr 2, 2012. Are there any other possibilities result to these exceptions ? Thank you very much for your supports ! -- Viet Nguyen eXo Platform SEA