Prev
Next
Forums Infor / Lawson Platforms S3 Security

Inadvertent deletion of SSO HTTP Endpoint

 1 Replies
 0 Subscribed to this topic
 15 Subscribed to this forum
Sort:
Author
Messages
Rick Morrison
New Member
Posts: 1
New Member
6/4/2014 2:08 PM

    I inadvertently deleted an SSO http endpoint BEFORE removing it from an http endpoint group.  Now, when I try to do anything with http endpoint groups I get the following error in ssoconfig:

    Got exception: com.lawson.lawsec.authen.LSFSecurityAuthenException:Got exception while listHTTPEndPointGroup for Error when listing all HTTP Endpoint Group in LDAP. Message {2}.

    Stack Trace : com.lawson.lawsec.authen.LSFSecurityAuthenException:Got exception while listHTTPEndPointGroup for Error when listing all HTTP Endpoint Group in LDAP. Message {2}.

            at com.lawson.lawsec.authen.LawsonHTTPEndPointGroupImpl.interviewToListHEPGroup(LawsonHTTPEndPointGroupImpl.java:768)

            at com.lawson.lawsec.authen.LawsonHTTPEndPointGroupImpl.handleChoice(LawsonHTTPEndPointGroupImpl.java:235)

            at com.lawson.lawsec.authen.util.TextMenuChoice.process(TextMenuChoice.java:144)

            at com.lawson.lawsec.authen.SSOMainMenuHandler.handleChoice(SSOMainMenuHandler.java:185)

            at com.lawson.lawsec.authen.util.TextMenuChoice.process(TextMenuChoice.java:144)

            at com.lawson.lawsec.authen.SSOConfig.processInteractiveConfiguration(SSOConfig.java:508)

            at com.lawson.lawsec.authen.SSOConfig.main(SSOConfig.java:358)

    Is this bad juju?  Was attempting to create a second HTTP endpoint for application server.  Is there a restore process?

    Thank you,

    Rick Morrison


    Kwane McNeal
    Veteran Member
    Posts: 479
    Veteran Member
    6/4/2014 2:38 PM
      Rick,
      The simplest ways I can think of are to either try to recreate the endpoint, then delete it the proper way (assuming it would allow for this), OR to use an LDAP editor to delete a few objects, and correct values on another.

      The stuff you're looking for is in 'o=LwsnSecData'. You're going to look at the HEPGroup object the HEP used to belong to, and check the multivalued attribute 'lwsnssoListOfHEPs' for an orphaned number. Delete the value, and you're done.

      This is easier in a graphical LDAP editor. You can use the command line tools, but make sure you have a solid grasp of LDIF, since this is a multi-valued attribute.

      You *could* restore the LDAP, but this fix isn't very difficult.

      Kwane