After Patching to GlassFish 2.1.1 Patch 7 or later, OpenSSO Single-Sign On Fails Affecting Remote Authentication. (Doc ID 1309733.1)

Last updated on MAY 05, 2023

Applies to:

Symptoms

Single sign on access using the OpenSSO client SDK from another GlassFish server works fine on GF 2.1.1 p06 and earlier.  However, after updating the GlassFish installation used by the OpenSSO server to GF 2.1.1 p07 or later (until patch 13), the single sign on functionality of OpenSSO fails to work.  Updating the remote client SDK or the remote GlassFish server does not provide relief.

When the problem is encountered there is no exception or error visible at the OpenSSO server/GlassFish server end, however some exceptions can be seen on the client OpenSSO end.

For example, with the OpenSSO remote client used by the Sun Convergence application (/iwc), the following exception is seen in the iwc log file /<install-root>/iwc/logs/iwc.log:

Changes

Upgrading the GlassFish installation used by the OpenSSO server from 2.1.1 p06 or lower, to 2.1.1 p07 through to 2.1.1 p12.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.