Error on SSO based on environment

[mciumac]

ErrorSSO.docx

I have a Spring application that uses Spring Waffle SSO. In my dev environment I successfully access the application. But when deploying to Test environment I get the error (attached) when accessing application url. Both environment run WebSphere9.

[mciumac]

we are using waffle 1.9.1
It works in my dev on Windows10 , it does not work on Test server that is on Windows 2012.

[hazendaz]

Please use a more recent version as 1.9 is really old. Sent from my Verizon, Samsung Galaxy smartphone Get Outlook for Android<https://aka.ms/AAb9ysg>

…

________________________________ From: mciumac ***@***.***> Sent: Tuesday, October 11, 2022 4:31:58 PM To: Waffle/waffle ***@***.***> Cc: Subscribed ***@***.***> Subject: Re: [Waffle/waffle] Error on SSO based on environment (Issue #1742) we are using waffle 1.9.1 It works in my dev on Windows10 , it does not work on Test server that is on Windows 2012. — Reply to this email directly, view it on GitHub<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FWaffle%2Fwaffle%2Fissues%2F1742%23issuecomment-1275241687&data=05%7C01%7C%7C09925f5156a94ce3202f08daabc7a5a4%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638011171205735156%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=cPF3QWBpOiQgqNuBEFtVUWkewwOpPzB8j4UbzO0tuDU%3D&reserved=0>, or unsubscribe<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAAHODIYJVIH2BUUXRE63AHLWCXFD5ANCNFSM6AAAAAARCTWDW4&data=05%7C01%7C%7C09925f5156a94ce3202f08daabc7a5a4%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638011171205735156%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=ijRVO8jxiPnkrQKcmr3uOXBmrn7592KkkkVd%2F6pZdTI%3D&reserved=0>. You are receiving this because you are subscribed to this thread.Message ID: ***@***.***>

[mciumac]

Thank you for response. I will upgrade. Does the table of waffle versions that is compatible with window version exist?
Does WebSphere has any effect on waffle functionality and versions?

[dblock]

All versions of Waffle (should) work with all versions of Windows.

The error from that doc file:

[10/11/22 13:48:41:141 CDT] 00000302 SystemOut     O 2022-10-11T13:48:41,141 [WebContainer : 0] ERROR  com.ibm.ws.webcontainer.webapp - SRVE0293E: [Servlet Error]-[Faces Servlet]: java.lang.NoClassDefFoundError: com.sun.jna.platform.win32.Sspi$CredHandle (initialization failure)
	at java.lang.J9VMInternals.initializationAlreadyFailed(J9VMInternals.java:95)
	at waffle.windows.auth.impl.WindowsCredentialsHandleImpl.initialize(WindowsCredentialsHandleImpl.java:79)
	at waffle.windows.auth.impl.WindowsAuthProviderImpl.acceptSecurityToken(WindowsAuthProviderImpl.java:116)
	at waffle.servlet.spi.NegotiateSecurityFilterProvider.doFilter(NegotiateSecurityFilterProvider.java:127)
	at waffle.servlet.spi.SecurityFilterProviderCollection.doFilter(SecurityFilterProviderCollection.java:147)
	at waffle.spring.NegotiateSecurityFilter.doFilter(NegotiateSecurityFilter.java:98)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
	at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:66)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
	at org.springframework.security.web.context.request.async.WebAsyncManagerIntegrationFilter.doFilterInternal(WebAsyncManagerIntegrationFilter.java:56)
	at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
	at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)
	at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
	at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:214)
	at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:177)
	at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:347)
	at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:263)
	at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:197)
	at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:90)
	at com.brick.astm.web.filter.LoggerFilter.doFilter(LoggerFilter.java:46)
	at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:197)
	at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:90)
	at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:979)
	at com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters(WebAppFilterManager.java:1119)
	at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:82)
	at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:966)
	at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1817)
	at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:382)
	at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:465)
	at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:532)
	at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:318)
	at com.ibm.ws.http.channel.inbound.impl.HttpICLReadCallback.complete(HttpICLReadCallback.java:88)
	at com.ibm.ws.ssl.channel.impl.SSLReadServiceContext$SSLReadCompletedCallback.complete(SSLReadServiceContext.java:1833)
	at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:175)
	at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217)
	at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161)
	at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138)
	at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204)
	at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775)
	at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905)
	at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1909)
Caused by: java.lang.UnsatisfiedLinkError: C:\Users\YYY-WA~1\AppData\Local\Temp\jna--313777546\jna7146032522717519553.dll (JVMPORT015E Unable to resolve shared library references - a prerequisite shared library may be missing)
	at java.lang.ClassLoader.loadLibraryWithPath(ClassLoader.java:1460)
	at java.lang.System.load(System.java:590)
	at com.sun.jna.Native.loadNativeDispatchLibraryFromClasspath(Native.java:851)
	at com.sun.jna.Native.loadNativeDispatchLibrary(Native.java:826)
	at com.sun.jna.Native.<clinit>(Native.java:140)
	at com.sun.jna.Pointer.<clinit>(Pointer.java:41)
	at com.sun.jna.Structure.<clinit>(Structure.java:2078)
	... 42 more

Looks like a problem with loading JNA, so the suggestion to try with a newer version of Waffle first that may have a newer JNA with a fix, is a good one.

[mciumac]

Thanks.
We fixed the problem for waffle 1.9.1. We had some dll missing on our Windows 2022 server. This version of waffle (1.9.1) depends on a unsupported Visual Studio 2010 (VC++ 10.0) that is why it did not work. We had the latest Visual Studio installed on this server.
We are going to upgrade waffle anyway. For the new waffle we ask what version of Visual Studio (VC++) they depend on. The year and architecture (x86 or X64)? Do you support both architectures?

[dblock]

@mciumac Which DLL specifically was missing? AFAIK Visual Studio C Runtime is not required with waffle/jna.

@hazendaz I am surprised a VS C runtime would be required anywhere vs. Windows msvcrt.dll that is on all versions. Is this a recent change in JNA? A native DLL that was built against msvcrtXY?

[hazendaz]

On arch level, they should support both still as it all still supports jdk8 and by extension both 32 and 64 bit. Waffle is likely to go full jdk 11 and that's only 64 bit though. Many underlying pieces are jumping up so I expect that to continue given where java is now. Most likely will do one last java 8 then jump up. Jna was using vc studio 2015 around that time for the build replacing some of msvc. Assuming given release notes it might have meant more. Msvc is also used still from what I could tell. All in all safest bet is to get on 3.x of waffle as it should be otherwise drop in place and there were some larger issues fixed in jna 5 that had direct impact on waffle. That was likely at version 3 and release notes will state that. Many other items were fixed too so latest is most stable. Sent from my Verizon, Samsung Galaxy smartphone Get Outlook for Android<https://aka.ms/AAb9ysg>

…

________________________________ From: Daniel (dB.) Doubrovkine ***@***.***> Sent: Wednesday, October 12, 2022 6:25:22 PM To: Waffle/waffle ***@***.***> Cc: Jeremy Landis ***@***.***>; Mention ***@***.***> Subject: Re: [Waffle/waffle] Error on SSO based on environment (Issue #1742) @hazendaz<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fhazendaz&data=05%7C01%7C%7C566954b4ad614c4d006c08daaca0a771%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638012103410895930%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=N04OTsot7cgHEEv6iNcSnc6I%2Fs7VRm8T9%2B4YMJImA9A%3D&reserved=0> I am surprised a VS C runtime is required anywhere vs. Windows msvcrt.dll that is on all versions. Is this a recent change in JNA? — Reply to this email directly, view it on GitHub<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FWaffle%2Fwaffle%2Fissues%2F1742%23issuecomment-1276795447&data=05%7C01%7C%7C566954b4ad614c4d006c08daaca0a771%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638012103410895930%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=jEVS3uGE6toX6chN8RptDIvQGuGwhosMSpX5EfqIe3g%3D&reserved=0>, or unsubscribe<https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAAHODIY7MZ3XMCMLP4KVY43WC43FFANCNFSM6AAAAAARCTWDW4&data=05%7C01%7C%7C566954b4ad614c4d006c08daaca0a771%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638012103410895930%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=w8yhpDPffzvc3bg8QcYWu6mxRfWo%2BdBtJc%2FNOFD6IFI%3D&reserved=0>. You are receiving this because you were mentioned.Message ID: ***@***.***>