All Gadgets showing 401 - Malformed security token root:john:appid:cont:url:0

[vincewang]

We have the out of box instgall without any changes for GA 3.1.0 FINAL with JBoss AS 5.1.0 version on Linux. Any gadget root account add al show this error. I did a search on this and found this article about the bug:

https://issues.jboss.org/browse/GTNPORTAL-1474?page=com.atlassian.jira.plugin.system.issuetabpanels%3Aall-tabpanel#issue-tabs

Even though we do not use Tomcat, I still downloaded 3 shindig jar files, shindig-common-1.0-r790473-Patch03.jar, shindig-gadgets-1.0-r790473-Patch03.jar and shindig-social-api-1.0-r790473-Patch03.jar, and put them in default/deploy/gatein.ear/lib. Restarted the server, and still got the same error. Can someone please help?

09:56:39,496 INFO  [AuthenticationServletFilter] Malformed security token root:john:appid:cont:url:0

org.apache.shindig.auth.SecurityTokenException: Invalid security token root:john:appid:cont:url:0

        at org.apache.shindig.auth.BlobCrypterSecurityTokenDecoder.createToken(BlobCrypterSecurityTokenDecoder.java:103)

        at org.apache.shindig.auth.DefaultSecurityTokenDecoder.createToken(DefaultSecurityTokenDecoder.java:66)

        at org.apache.shindig.auth.UrlParameterAuthenticationHandler.getSecurityTokenFromRequest(UrlParameterAuthenticationHandler.java:51)

        at org.apache.shindig.auth.AuthenticationServletFilter.doFilter(AuthenticationServletFilter.java:83)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

        at org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:96)

        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)

        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)

        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:235)

        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:191)

        at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:190)

        at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:92)

        at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.process(SecurityContextEstablishmentValve.java:126)

        at org.jboss.web.tomcat.security.SecurityContextEstablishmentValve.invoke(SecurityContextEstablishmentValve.java:70)

        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)

        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)

        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)

        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:330)

        at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:829)

        at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:598)

        at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:447)

        at java.lang.Thread.run(Thread.java:619)

[rraposa]

Did you try removing the shindig-Patch02.jar files from gatein.ear/lib and replacing them with the Patch-03.jar files?

There is even a newer version. In my gatein.ear/lib folder I have shindig-Patch04.jar files.

[kien_nguyen]

Yes, you must make sure that there is only one Shindig version in your lib folder. Shindig has four .jar files: shindig-common-1.0-r790473-Patch03.jar, shindig-features-1.0-r790473-Patch03.jar, shindig-gadgets-1.0-r790473-Patch03.jar and shindig-social-api-1.0-r790473-Patch03.jar

[vincewang]

Thank you all for replying. I removed the patch 2 and still got the save error. However, I cannot find the shindig feature 03 patch so I left it as 02 patch. Can you provide the link to the shindig feature patch 03 jar? I did a searchand only found the other 3 jars. Thanks.

[rraposa]

I don't see it anywhere either. This page looks hopeful:

http://grepcode.com/snapshot/repository.jboss.org/nexus/content/repositories/releases/org.gatein.shindig/shindig-gadgets/1.0-r790473-Patch03

Maybe you should just try the later version of Shindig (2.0):

http://shindig.apache.org/download/index.html

[rraposa]

Vincent - I found the Patch04 shinding JAR files here. See if these work for you:

http://maven.alfresco.com/nexus/content/groups/public/org/gatein/shindig/

[vincewang]

Thank you Rich for the link. I downloaded all 4 04 patch jars and removed all other shindig jars in gatein.ear/lib and then started the server. Still getting the same error will all the gadgets. Even if I re add them, still no luck. This install was out of box without any modification. Not sure what did I do differently. Though I had created some pages with portlet on them. Maybe I should try to do another fresh install to see if that work?

[rraposa]

Sure - nothing wrong with trying a fresh install! You can also try deleting the /deploy/data folder - might be quicker than reinstalling. (And if you're not using the Hypersonic database for the JCR - then drop all the JCR tables from your database).

[vincewang]

If I delete every thing from deploy/data, wouldn't that end up deleting out of box roles, group nav...etc.?

[rraposa]

Good question. Surprisingly enough - the answer is no! The initial pages, users, groups, navigation, etc. is all defined in XML files. When you start up GateIn and the database tables are not found in the JCR and IDM datasources, then these tables get created and populated using the information provided in the XML config files. So deleting your database is like starting clean.

[vincewang]

Cleared the data did not make any difference. It rules out the possibility of what I have done could cause this. Interestingly, if the problem was claimed to be fixed by shindig patch, why it is throwing at the exactly same line of codes in the shindig packages. I did a find under the deplore directory and did not find any other shindig jars.

Based on the bug report, it is triggered by tomcat valve, even though my installation was with JBoss AS, not tomcat, I wonder if there is any other valve I can turn off to avoid this.

[kien_nguyen]

When GateIn start up first time, it create new key for securing gadget, and this key is located in file server/default/conf/gatein/gadgets/key.txt.

During rendering gadget, if there is any problem that prevent to read this key, GateIn will throw as your exception. Please check key.txt file, is it existing?

[vincewang]

Yes the key.txt is there. It has one line as GwtiOQkIz+9Adp+w/rSvPsEfJRfiAexy6KExlWERnkU=

[vincewang]

Is any package I can turn on the debug mode to get some information? Anyone has the gadgets working on the Linux server? Anyone else having the same problem? Do I need to enable HTTPS? Any help is greatly appriciated.

[toomtooms]

Gadgets work fine on my Ubuntu box.

Did you check permissions on your key.txt file ?