One of our suppliers is trying to integrate a Java application with our CoSign install, and they're seeing an error:
"Failed to borrow CosignConnectionList connect from pool"
It seems to happen when Tomcat tries to connect to cosignd.
Cosignd logs the following:
2011-08-15T12:05:09.019310+01:00 weblogin1 cosignd[4531]: REGISTER
steveb LANCS.LOCAL 10.1.134.80 cosign-dora-test
2011-08-15T12:05:09.178209+01:00 weblogin1 cosignd[4532]: connect:
10.1.67.79
2011-08-15T12:05:09.181204+01:00 weblogin1 cosignd[4532]:
f_starttls: snet_starttls: error:140890B2:SSL
routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned
2011-08-15T12:05:09.302262+01:00 weblogin1 cosignd[4532]:
snet_getline: Connection reset by peer
2011-08-15T12:05:09.302616+01:00 weblogin1 cosignd[966]: child 4532
exited with 1
About 18 months ago someone reported a similar error, but there was no
followup - I've included the previous report below, in case it jogs any
memories.
The server with the problem is a Windows Server 2008R2 box.
I'm no expert on Tomcat, but the config looks pretty much identical to a
Linux server that's running Tomcat that is working fine, and the
certificates in the keystore all seem to be present and correct.
The tomcat logs show a stacktrace when the error occurs:
15-Aug-2011 12:05:09 edu.umich.auth.cosign.CosignConfig
matchServiceWithName
INFO: Service name in compared to read in services: cosign-dora-test
15-Aug-2011 12:05:09
edu.umich.auth.cosign.pool.CosignConnectionListFactory makeObject
INFO: [2:weblogin.lancs.ac.uk]: making new cosign connection list
15-Aug-2011 12:05:09 edu.umich.auth.cosign.pool.CosignConnectionPool
borrowCosignConnectionList
SEVERE: Failed to borrow CosignConnectionList from pool
java.lang.Exception: [1]: failed to connect to any cosignd servers.
at
edu.umich.auth.cosign.pool.CosignConnectionList.<init>(CosignConnectionL
ist.java:72)
at
edu.umich.auth.cosign.pool.CosignConnectionListFactory.makeObject(Cosign
ConnectionListFactory.java:42)
at
org.apache.commons.pool.impl.GenericObjectPool.borrowObject(GenericObjec
tPool.java:974)
at
edu.umich.auth.cosign.pool.CosignConnectionPool.borrowCosignConnectionLi
st(CosignConnectionPool.java:71)
at
edu.umich.auth.cosign.CosignLocationHandler.check(CosignLocationHandler.
java:61)
at
edu.umich.auth.cosign.CosignAuthenticationFilterIII.doFilter(CosignAuthe
nticationFilterIII.java:326)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:243)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:210)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValv
e.java:240)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValv
e.java:164)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java
:164)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java
:100)
at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:563
)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.
java:118)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:4
03)
at
org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.j
ava:286)
at
org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.proce
ss(Http11AprProtocol.java:272)
at
org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.run(AprEndpoint.j
ava:1730)
at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
15-Aug-2011 12:05:09 edu.umich.auth.cosign.CosignAuthenticationFilterIII
doFilter
SEVERE: Failed to borrow cosign connections from pool.
javax.security.auth.login.LoginException: Failed to borrow cosign
connections from pool.
at
edu.umich.auth.cosign.CosignLocationHandler.check(CosignLocationHandler.
java:64)
at
edu.umich.auth.cosign.CosignAuthenticationFilterIII.doFilter(CosignAuthe
nticationFilterIII.java:326)
at
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(Applica
tionFilterChain.java:243)
at
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilt
erChain.java:210)
at
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValv
e.java:240)
at
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValv
e.java:164)
at
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java
:164)
at
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java
:100)
at
org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:563
)
at
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.
java:118)
at
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:4
03)
at
org.apache.coyote.http11.Http11AprProcessor.process(Http11AprProcessor.j
ava:286)
at
org.apache.coyote.http11.Http11AprProtocol$Http11ConnectionHandler.proce
ss(Http11AprProtocol.java:272)
at
org.apache.tomcat.util.net.AprEndpoint$SocketProcessor.run(AprEndpoint.j
ava:1730)
at
java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)
Does anyone have any clues? Is the source to JavaCosign available
somewhere (I don't see it on SF)
Thanks in advance,
--
Steve Bennett, Systems Support,
Information Systems Services, Lancaster University.
From: Fabrizio Iaciofano [mailto:[email protected]]
Sent: Friday, January 29, 2010 4:14 PM
To: [email protected]
Cc: [email protected];
[email protected]
Subject: [Cosign-discuss] Request
Hi,
I've create a cosign filter java for my service, but when I call my
services Cosign show this error " Failed to borrow CosignConnectionList
connect from pool".
Do you can help me to resolve this problem ?
Bye
--
Fabrizio Iaciofano
Via Valentino Mazzola, 66
00142 - Roma
Tel. 0651039270
Cell. 3389171463
--------------------------------------------------
Questo messaggio e' strettamente confidenziale e puo' contenere
informazioni riservate esclusivamente
per il destinatario indicato. La sua diffusione e' assolutamente
vietata. Se avete ricevuto questo
messaggio per errore, Vi preghiamo di informarci immediatamente.
Le informazioni contenute nel presente messaggio sono state autorizzate
dal soggetto interessato e
vengono trattate nel rispetto e con le garanzie di cui ai sensi della
L.196/2003.
--------------------------------------------------
<<image001.png>>
------------------------------------------------------------------------------ uberSVN's rich system and user administration capabilities and model configuration take the hassle out of deploying and managing Subversion and the tools developers use with it. Learn more about uberSVN and get a free download at: http://p.sf.net/sfu/wandisco-dev2dev
_______________________________________________ Cosign-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/cosign-discuss
