[midPoint] JMX Invalid username or password

[Florin. Stingaciu]

Hello,

I'm following this guide
<https://wiki.evolveum.com/display/midPoint/Failover+setup> to setup
Midpoint in a failover environment. After setting everything up and
navigating to /tasks I get the following error:

2016-05-09 21:05:40,778 [] [http-bio-8080-exec-1] ERROR
> (com.evolveum.midpoint.web.page.admin.server.dto.NodeDtoProvider):
> Unhandled exception when listing nodes, reason: Subresult
> com.evolveum.midpoint.task.api.TaskManager..searchObjects of operation
> com.evolveum.midpoint.model.api.ModelService.searchObjects is still UNKNOWN
> during cleanup; during handling of exception java.lang.SecurityException:
> Authentication failed! Invalid username or password (class
> java.lang.IllegalStateException)
>

I'm fairly positive, I've set up everything correctly. Here's the relevant
config.xml:

        <repository>
>
> <repositoryServiceFactoryClass>com.evolveum.midpoint.repo.sql.SqlRepositoryFactory</repositoryServiceFactoryClass>
>                 <database>mysql</database>
>                 <jdbcUsername>midpoint</jdbcUsername>
>                 <jdbcPassword>myDBPass</jdbcPassword>
>                 <jdbcUrl>jdbc:mysql://DBSERVER:3306/midpoint</jdbcUrl>
>                 <embedded>false</embedded>
>                 <driverClassName>com.mysql.jdbc.Driver</driverClassName>
>                 <hibernateHbm2ddl>validate</hibernateHbm2ddl>
>
> <hibernateDialect>org.hibernate.dialect.MySQLDialect</hibernateDialect>
>         </repository>
>         <taskManager>
>           <clustered>true</clustered>
>           <jdbcUrl>jdbc:mysql://DBSERVER:3306/midpoint_quartz</jdbcUrl>
>           <jmxUsername>midpoint</jmxUsername>
>           <jmxPassword>password</jmxPassword>
>         </taskManager>


On both Midpoint instances I have the following two files:

/var/opt/midpoint/jmxremote.password

> midpoint password
>
/var/opt/midpoint/jmxremote.access

> midpoint readwrite


 Also, the permissions for these files:

> -rwx------ 1 tomcat7 tomcat7 19 May  9 19:40 jmxremote.access
> -rwx------ 1 tomcat7 tomcat7 19 May  9 20:55 jmxremote.password


Lastly, I have the following entries in JAVA_OPTS:

> -Dcom.sun.management.jmxremote=true
>
> -Dcom.sun.management.jmxremote.password.file=/var/opt/midpoint/jmxremote.password
>
> -Dcom.sun.management.jmxremote.access.file=/var/opt/midpoint/jmxremote.access
> -Dmidpoint.nodeId=002 -Dcom.sun.management.jmxremote.port=20001

-Dcom.sun.management.jmxremote.ssl=false


The only difference is the nodeId.

Also, upon server startup I see the following entries, which indicate the
connection to the DB works fine:


> 2016-05-09 21:04:45,822 [] [localhost-startStop-1] INFO
> (com.evolveum.midpoint.task.quartzimpl.Initializer): Task Manager
> initialization.
> 2016-05-09 21:04:45,829 [] [localhost-startStop-1] INFO
> (com.evolveum.midpoint.task.quartzimpl.Initializer): Task Manager: Quartz
> Job Store: JDBC, clustered. Threads: 10
> 2016-05-09 21:04:45,830 [] [localhost-startStop-1] INFO
> (com.evolveum.midpoint.task.quartzimpl.TaskManagerConfiguration): Quartz
> database is at jdbc:mysql://DBSERVER:3306/midpoint_quartz (a JDBC URL)
> 2016-05-09 21:04:45,840 [] [localhost-startStop-1] INFO
> (com.evolveum.midpoint.task.quartzimpl.cluster.NodeRegistrar): Registering
> this node in the repository as 001 at 100.80.134.132:20001
> 2016-05-09 21:04:46,199 [] [localhost-startStop-1] INFO
> (com.evolveum.midpoint.task.quartzimpl.execution.TaskSynchronizer):
> Synchronizing Quartz job store with midPoint repository.
> 2016-05-09 21:04:46,398 [] [localhost-startStop-1] INFO
> (com.evolveum.midpoint.task.quartzimpl.execution.TaskSynchronizer):
> Synchronization of midpoint and Quartz task store finished. 3 task(s)
> existing in midPoint repository successfully processed, resulting in 0
> updated Quartz job(s). 0 task(s) removed from Quartz job store. Processing
> of 0 task(s) failed.
> 2016-05-09 21:04:46,398 [] [localhost-startStop-1] INFO
> (com.evolveum.midpoint.task.quartzimpl.Initializer): Task Manager
> initialized


You can find the full stack trace here: http://pastebin.com/kHnN3frr. Any
help would be greatly appreciated.

Also, as a side question. This guide uses the word failover configuration,
however from my understanding this configuration could be used as an
active/active mode of operation. Is this correct?

Thanks,
-F
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.evolveum.com/pipermail/midpoint/attachments/20160509/f6d8c707/attachment.htm>