[midPoint] administrator can't log in

[Solberg, Eric]

Thanks Stacy- this sequence worked. The key seems to be editing the config.xml file after first run- not placing one from a previous install. 
In fact, even in this case where it worked- if I take the working config.xml (Instance 1) and try to use it on a new instance (Instance 2) at first-run it doesn't work, and then Instance 1 doesn't work after that either.

I was trying to setup config.xml for first-run to make it easier to deploy a working instance in a docker container. Perhaps I can still do this if the whole var directory is on a persistent disk, but I'll worry about that later- need to move on!

Thanks again.

On 10/16/18, 5:30 PM, "midPoint on behalf of Stacy Brock" <midpoint-bounces at lists.evolveum.com on behalf of brock at oregonstate.edu> wrote:

    Try this:
    
    - On a fresh VM, install midPoint
    - Start midPoint, which will set up the embedded database, generate 
    config.xml (and other files like keystore.jceks)
    - Stop midPoint
    - Set up the external MySQL database, including running the 
    mysql-3.8-all-utf8mb4.sql script
    - Edit config.xml to point at the external MySQL DB
    - Start midPoint
    
    Let us know how it goes. If you continue to have trouble, a copy of your 
    config.xml (with credentials redacted) would be helpful.
    
    -Stacy
    
    
    On 10/16/18 4:26 PM, Solberg, Eric wrote:
    > Hi Midpoint Experts,
    > 
    > I’m at a loss. I’ve spent almost two full days on this, and am all out 
    > of ideas on what else I can try. I’m sure it’s something basic, but I’m 
    > struggling with the installation instructions not being very 
    > clear/explicit in the install steps.
    > 
    > Here’s a summary of steps I’ve followed:
    > 
    >   * Install the demo system in a VM with embedded database-- I can log
    >     in as administrator/5ecr3t
    >   * Then I took the config.xml from this install, edited <repository> to
    >     connect to a mysql database, and set up my database using
    >     mysql-3.8-all.sql. I made no other changes to config.xml.
    >   * I installed midpoint in a new VM, putting the updated config.xml in
    >     /opt/midpoint/var prior to first start
    >   * Started midpoint.
    >   * Midpoint created the new keystore.jceks file on startup. All
    >     indications suggest database connectivity is good.
    >   * Midpoint runs, but I’m unable to login as administrator/5ecr3t. I
    >     get “Currently we are unable to process your request. Kindly try
    >     again later.”
    >   * Repeat the above process, but this time copy the keystore.jceks from
    >     the demo prior to first start
    >   * I’m still unable to log in as administrator/5ecr3t - same error
    >   * I’ve verified that administrator exists in the midpoint.m_user table
    >     in mysql
    >   * I re-installed again, and ran in demo mode for the first start. As
    >     before administrator/5ecr3t works in demo/embedded mode.
    >   * Then I edited this config.xml to point to the mysql database (no
    >     other change, just the <repository> section) and restarted
    >   * I’m unable to log in as administrator/5ecr3t - same error
    > 
    > The error that is showing up every time in midpoint.log is:
    > 
    > *018-10-16 16:44:02,824 [] [http-nio-8080-exec-4] ERROR 
    > (com.evolveum.midpoint.model.impl.security.AuthenticationEvaluatorImpl): 
    > Error dealing with credentials of user "administrator" credentials: No 
    > key mapped to key digest FbJhcZYWk/Q3KnAucPQgRSxD/QM= could be found in 
    > the keystore. Keys digests must be recomputed during initialization*
    > 
    > Midpoint looks very promising, and the demo was easy enough to get up 
    > and running. But I’m getting frustrated that the general installation 
    > instructions have gaps, presume a lot of prior knowledge and even have 
    > parts that are wrong. I’m losing a lot of time on this.
    > 
    > Anyway, don’t mean to vent. Just trying to get this up and running.
    > 
    > Perhaps someone who has done an install with mysql can point out the 
    > steps? I’ve gleaned what I can from the docs. Ugh. Thanks.
    > 
    > -Eric
    > 
    
    -- 
    Stacy Brock, Software Engineer, Identity and Access Management
    Oregon State University | University Information and Technology
    _______________________________________________
    midPoint mailing list
    midPoint at lists.evolveum.com
    http://lists.evolveum.com/mailman/listinfo/midpoint