Home › Forums › CPIP Connectors

CPIP--Cannot connect to SSB

Thu, 2008-07-24 18:51 — rbean

I am trying to connect with SSO to SSB (and for that matter INB) and neither will work. When I use the channel link I get an error: CPIP Notification: Unsupported OID service.

In the CPIP.log I find:
[2008-07-24 14:00:37,699] [5p] (Thread-168) [com.pipeline.sdk.oid.DefaultOIDService]: GetConfig url = http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion2_sserv
[2008-07-24 14:00:37,699] [5p] (pool-2-thread-47) [com.pipeline.web.DefaultURLRequestBroker]: Opened GET connection to URL '/blum/gokssso.P_GetConfigVersion2_sserv?oid=1.3.6.1.4
.1.4409.1.1.1.1' URL:http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion2_sserv?oid=1.3.6.1.4.1.4409.1.1.1.1
[2008-07-24 14:00:37,699] [5p] (pool-2-thread-47) [com.pipeline.web.DefaultURLRequestBroker]: connecting to URL:http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion2_sse
rv?oid=1.3.6.1.4.1.4409.1.1.1.1
[2008-07-24 14:00:37,758] [5p] (Thread-165) [com.pipeline.sdk.oid.GetConfig1111]: UNABLE TO config EXTERNAL System sctssb
[2008-07-24 14:00:37,765] [5p] (pool-2-thread-47) [com.pipeline.web.DefaultURLRequestBroker]: DURB response code: 404
[2008-07-24 14:00:37,766] [5p] (pool-2-thread-47) [com.pipeline.web.DefaultURLRequestBroker]: DURB completed header copy.
[2008-07-24 14:00:37,766] [5p] (pool-2-thread-47) [com.pipeline.web.DefaultURLRequestBroker]: getResponse failed for http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion
2_sserv?oid=1.3.6.1.4.1.4409.1.1.1.1
java.io.FileNotFoundException: http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion2_sserv?oid=1.3.6.1.4.1.4409.1.1.1.1

Does this mean anything to anyone?

0
No votes yet
‹ Has anyone built a SSO to PeopleAdmin? NetPartner student financial aid web module SSO failing ›

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.
Fri, 2008-07-25 09:12 — Jeepgirlnj

Es.systems

Does your es.systems config include sctssb (or whatever your cpip name is)? I got that error before when this value was accidentally overwritten by an import file.

Fri, 2008-07-25 12:53 — bagley

Es.systems

Yes our does and it refers to the server url for SSB.

Mon, 2008-07-28 14:56 — rbean

Es.systems

Yes.
es.systems=sct cal comexp sctssb sctinb.systems

It seems there is some sort of "discovery" going on because I see this in my cpip.log now:
[2008-07-28 10:17:19,521] [5p] (http-80-Processor16) [com.pipeline.sdk.cpip.ExternalSession]: session data not found: es.sct
[2008-07-28 10:17:19,522] [5p] (http-80-Processor16) [com.pipeline.sdk.cpip.ExternalSession]: session data not found: es.cal
[2008-07-28 10:17:19,523] [5p] (http-80-Processor16) [com.pipeline.sdk.cpip.ExternalSession]: session data not found: es.comexp
[2008-07-28 10:17:19,524] [5p] (http-80-Processor16) [com.pipeline.sdk.cpip.ExternalSession]: session data not found: es.sctinb
[2008-07-28 10:17:19,524] [5p] (http-80-Processor16) [com.pipeline.sdk.cpip.ExternalSession]: session data not found: es.sctssb

Does anyone know where Luminis looks for the session data?

BTW--This is Luminis 4.02 on Red Hat 3 AS.

--Ron

Mon, 2008-07-28 19:13 — Jeepgirlnj

es.sctssb

What do you get when you do a configman -g es.sctssb?

Mon, 2008-07-28 19:49 — rbean

es.sctssb

These are my config setting for sctssb.

es.sctssb.configURL=http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion2_sserv
This URL is correct

es.sctssb.configattempts=5
es.sctssb.configsleeptime=30000
es.sctssb.doGMTOffset=false

--Ron

Mon, 2008-07-28 22:47 — Jeepgirlnj

have you tried...

reinitializing the cpip connector by going to http://yourportal.edu/?sys=sctssb

Tue, 2008-07-29 15:18 — rbean

Have you tried...

I did this.

Still get CPIP Notification: Unsupported OID service.

Tue, 2008-07-29 17:11 — Jason

unsupported OID

What do you see when you type:
http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion2_sserv?oid=123

in a web browser? It should return a connection string. If it does not, the problem is on the self-service server.

Do you get the same thing when you are at a command prompt on the Luminis server and do a "wget http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion2_sserv?oid=123"

Unsupported OID usually means that that Luminis server was not able to get that connection string.

Tue, 2008-07-29 18:01 — rbean

unsupported OID

Jason,

Thanks. Now I know what's not working. I get a 404 error when I try either method. Of course, the DBA's swear that this is the right URL. :)

Here's my next newbie question...
my understanding is that the procedure gokssso.P_GetConfigVersion2 only runs once (at the first user access to SSB) and it is supposed to call the Banner database and tell Luminis the URL's to call for the log in and log out. If this is correct, do you know how to run it again so that it will update or reset? Also, I've looked in both the Banner database and the Luminis database and I don't seem to find the procedure. Do you know where it is located?

--Ron

Tue, 2008-07-29 19:56 — Jason

calling getConfig

I know you can call it by doing what someone posted above

http(s)://myserver.edu/cp/ip/config?sys=sctssb

(or some systems myserver.edu/?sys=sctssb, depends on your server setup)

You can watch the call happen in the $CP_ROOT/logs/cpip.log (Luminis IV)

I believe that it also happens when you restart the cpipconnector web server instance,
$CP_ROOT/bin/rc/60-cpipconnector stop/start

Another thing to watch out for, is that if your self-service/dba sets up the link to use SSL, HTTPS, then you need to have the portal server trust that cert.

Otherwise, you will see the cpip.log saying "access denied" or something like that. I think the quick method is to open the link to the getconfigURL in a browser, and view the cert (I use firefox and a cert viewer add on), copy the cert, then do a keytook -trustcacerts -keystore mykeystore -alias forSelfService, etc..

Tue, 2008-07-29 20:21 — rbean

restarted cpipconnector and Luminis

I restarted the CPIPConnnector and Luminis.

When I run a wget I am getting these responses:
$ wget http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion2_sserv?oid=123
--16:02:07-- http://devwss.mtsac.edu:9006/blum/gokssso.P_GetConfigVersion2_sserv?oid=123
=> `gokssso.P_GetConfigVersion2_sserv?oid=123'
Resolving devwss.mtsac.edu... 140.144.210.12
Connecting to devwss.mtsac.edu|140.144.210.12|:9006... connected.
HTTP request sent, awaiting response... 404 Not Found
16:02:07 ERROR 404: Not Found.
#######################################################
$ wget http://devwss.mtsac.edu:9006/blum/twbkwbis.P_WWWLogin
--16:08:31-- http://devwss.mtsac.edu:9006/blum/twbkwbis.P_WWWLogin
=> `twbkwbis.P_WWWLogin'
Resolving devwss.mtsac.edu... 140.144.210.12
Connecting to devwss.mtsac.edu|140.144.210.12|:9006... connected.
HTTP request sent, awaiting response... 200 OK
Length: 5,952 (5.8K) [text/html]

100%[===========================================================================>] 5,952 --.--K/s

16:08:44 (405.45 MB/s) - `twbkwbis.P_WWWLogin' saved [5952/5952]

Do you know why would the twbkwbis package would work and the gokssso package fail?

--Ron

Tue, 2008-07-29 20:50 — Jason

tw package

Why it isn't reporting a connection string back, I'm not sure, I don't set up our self-service.

If you can't get a response by putting your configURL in a browser, then keep tossing it back to your self-service guy/gal:) Don't forget the ?oid=123 on the end of it.

Tue, 2008-08-12 20:19 — rbean

Resolved

After all that the solution was:

On the Web Tailor Administration page the parameter "Suffix for LDAP User" must be either blank or the same as "Search Base for LDAP" with a comma preceding it. Example: ,ou=people,o=email.school.edu,o=cp.

If you put a value in DO NOT FORGET the preceding comma.

Thanks to all.

--Ron