By: admin labcloudinc user 11 Dec 2017 at 10:24 a.m. CST

4 Responses
admin labcloudinc gravatar
Hello, we installed Gluu server and followed the instructions by [this link](https://gluu.org/docs/ce/user-management/scim2/). This lead us to following error in oxauth.log: ` INFO [qtp2008017533-40] [org.xdi.oxauth.auth.AuthenticationFilter] (AuthenticationFilter.java:222) - Basic authentication failed java.lang.Exception: The Token Authentication Method is not valid. at org.xdi.oxauth.auth.AuthenticationFilter.processBasicAuth(AuthenticationFilter.java:199) [classes/:?] at org.xdi.oxauth.auth.AuthenticationFilter.doFilter(AuthenticationFilter.java:102) [classes/:?] at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1759) [jetty-servlet-9.3.15.v20161220.jar:9.3.15.v20161220] at org.gluu.oxserver.filters.AbstractCorsFilter.handleNonCORS(AbstractCorsFilter.java:343) [oxcore-server-3.1.1.Final.jar:?] ` Following steps were done before it: 1) Gluu installed 2) a reverse http proxy setuped 3) SCIM support enabled 4) SCIM test mode setuped by instructions above 5) tested by curl -u 'admin:<authPassword>'... by instructions above

By Michael Schwartz Account Admin 11 Dec 2017 at 10:37 a.m. CST

Michael Schwartz gravatar
Can you login to oxTrust? i.e. https://(your-hostname) ?

By Aliaksandr Samuseu staff 11 Dec 2017 at 10:48 a.m. CST

Aliaksandr Samuseu gravatar
Hi. In addition to Michael's question, could you also elaborate a bit on this? >2) a reverse http proxy setuped If you followed a specific guide at our doc portal to achieve this, please provide a link to it. As far as I can remember, Gluu should be explicitly setup with a reverse proxy only in cluster setup at the moment. Can we assume you are running a Gluu cluster? Otherwise, if you came up with your own custom setup, can it be possible that it's the cause of your current issue?

By Aharon Judovin user 14 Feb 2022 at 11:05 p.m. CST

Aharon Judovin gravatar
May I re-open this discussion? I also experience this error and need help in finding its cause. All I want to achieve is receive an id_token, so I call authorizationEndpoint, receive code and trying to get id_token from tokenEndpoint. The get request to the tokenEndpoint results in server's error 401 and this error in the oxauth.log file: ``` Basic authentication failed java.lang.Exception: The Token Authentication Method is not valid. ``` Here is my first get request: ``` https://test.gluu.org/oxauth/restv1/authorize?scope=openid&amp;response_type=code&amp;client_id=9ce09670-c48c-4bd2-8313-edea4650189f&amp;redirect_uri=http://localhost/OpenId/Default.aspx ``` here is the second: ``` https://test.gluu.org/oxauth/restv1/token?grant_type=authorization_code&amp;code=15fecea3-a3c1-4dcf-aef4-07060b22b076 ``` here is the configuration: ``` { "request_parameter_supported" : true, "token_revocation_endpoint" : "https://test.gluu.org/oxauth/restv1/revoke", "introspection_endpoint" : "https://test.gluu.org/oxauth/restv1/introspection", "claims_parameter_supported" : false, "issuer" : "https://test.gluu.org", "userinfo_encryption_enc_values_supported" : [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "id_token_encryption_enc_values_supported" : [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "authorization_endpoint" : "https://test.gluu.org/oxauth/restv1/authorize", "service_documentation" : "http://gluu.org/docs", "id_generation_endpoint" : "https://test.gluu.org/oxauth/restv1/id", "claims_supported" : [ "street_address", "country", "zoneinfo", "birthdate", "role", "gender", "formatted", "user_name", "phone_mobile_number", "preferred_username", "locale", "inum", "updated_at", "nickname", "email", "website", "email_verified", "profile", "locality", "phone_number_verified", "given_name", "middle_name", "picture", "name", "phone_number", "postal_code", "region", "family_name" ], "scope_to_claims_mapping" : [ { "profile" : [ "name", "family_name", "given_name", "middle_name", "nickname", "preferred_username", "profile", "picture", "website", "gender", "birthdate", "zoneinfo", "locale", "updated_at" ] }, { "openid" : [ ] }, { "https://test.gluu.org/oxauth/restv1/uma/scopes/scim_access" : [ ] }, { "permission" : [ "role" ] }, { "super_gluu_ro_session" : [ ] }, { "phone" : [ "phone_number_verified", "phone_number" ] }, { "revoke_session" : [ ] }, { "address" : [ "formatted", "postal_code", "street_address", "locality", "country", "region" ] }, { "clientinfo" : [ "name", "inum" ] }, { "mobile_phone" : [ "phone_mobile_number" ] }, { "email" : [ "email_verified", "email" ] }, { "user_name" : [ "user_name" ] }, { "oxtrust-api-write" : [ ] }, { "oxd" : [ ] }, { "uma_protection" : [ ] }, { "oxtrust-api-read" : [ ] }, { "offline_access" : [ ] } ], "op_policy_uri" : "http://ox.gluu.org/doku.php?id=oxauth:policy", "token_endpoint_auth_methods_supported" : [ "client_secret_basic", "client_secret_post", "client_secret_jwt", "private_key_jwt" ], "tls_client_certificate_bound_access_tokens" : true, "response_modes_supported" : [ "form_post", "query", "fragment" ], "backchannel_logout_session_supported" : true, "token_endpoint" : "https://test.gluu.org/oxauth/restv1/token", "response_types_supported" : [ "id_token", "id_token token code", "token", "code", "id_token token", "id_token code", "token code" ], "request_uri_parameter_supported" : true, "backchannel_user_code_parameter_supported" : false, "grant_types_supported" : [ "urn:ietf:params:oauth:grant-type:device_code", "implicit", "client_credentials", "password", "urn:ietf:params:oauth:grant-type:uma-ticket", "refresh_token", "authorization_code" ], "ui_locales_supported" : [ "en", "bg", "de", "es", "fr", "it", "ru", "tr" ], "userinfo_endpoint" : "https://test.gluu.org/oxauth/restv1/userinfo", "op_tos_uri" : "http://ox.gluu.org/doku.php?id=oxauth:tos", "auth_level_mapping" : { "-1" : [ "auth_ldap_server" ], "20" : [ "basic_lock" ], "10" : [ "basic" ] }, "require_request_uri_registration" : false, "id_token_encryption_alg_values_supported" : [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "frontchannel_logout_session_supported" : true, "claims_locales_supported" : [ "en" ], "clientinfo_endpoint" : "https://test.gluu.org/oxauth/restv1/clientinfo", "request_object_signing_alg_values_supported" : [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "request_object_encryption_alg_values_supported" : [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "session_revocation_endpoint" : "https://test.gluu.org/oxauth/restv1/revoke_session", "check_session_iframe" : "https://test.gluu.org/oxauth/opiframe.htm", "scopes_supported" : [ "address", "https://test.gluu.org/oxauth/restv1/uma/scopes/scim_access", "openid", "clientinfo", "user_name", "profile", "uma_protection", "permission", "revoke_session", "oxtrust-api-write", "oxtrust-api-read", "phone", "mobile_phone", "offline_access", "oxd", "super_gluu_ro_session", "email" ], "backchannel_logout_supported" : true, "acr_values_supported" : [ "basic_lock", "auth_ldap_server", "basic" ], "request_object_encryption_enc_values_supported" : [ "A128CBC+HS256", "A256CBC+HS512", "A128GCM", "A256GCM" ], "device_authorization_endpoint" : "https://test.gluu.org/oxauth/restv1/device_authorization", "display_values_supported" : [ "page", "popup" ], "userinfo_signing_alg_values_supported" : [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "claim_types_supported" : [ "normal" ], "userinfo_encryption_alg_values_supported" : [ "RSA1_5", "RSA-OAEP", "A128KW", "A256KW" ], "end_session_endpoint" : "https://test.gluu.org/oxauth/restv1/end_session", "revocation_endpoint" : "https://test.gluu.org/oxauth/restv1/revoke", "backchannel_authentication_endpoint" : "https://test.gluu.org/oxauth/restv1/bc-authorize", "token_endpoint_auth_signing_alg_values_supported" : [ "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "frontchannel_logout_supported" : true, "jwks_uri" : "https://test.gluu.org/oxauth/restv1/jwks", "subject_types_supported" : [ "public", "pairwise" ], "id_token_signing_alg_values_supported" : [ "none", "HS256", "HS384", "HS512", "RS256", "RS384", "RS512", "ES256", "ES384", "ES512" ], "registration_endpoint" : "https://test.gluu.org/oxauth/restv1/register", "id_token_token_binding_cnf_values_supported" : [ "tbh" ] } ``` here are the client's details: ``` OPENID CONNECT CLIENTS DETAILS ------------------------------ - **Name:** cs_test - **Client ID:** 9ce09670-c48c-4bd2-8313-edea4650189f - **Subject Type:** public - **ClientSecret:** XXXXXXXXXXX - **Application Type:** web - **Persist Client Authorizations:** false - **Pre-Authorization:** false - **Authentication method for the Token Endpoint:** client_secret_basic - **Logout Session Required:** false - **Include Claims In Id Token:** false - **Disabled:** false - **Logout Redirect URIs:** [http://localhost/OpenId/Default.aspx] - **Login Redirect URIs:** [http://localhost/OpenId/Default.aspx] - **Scopes:** [profile, openid, permission, super_gluu_ro_session, revoke_session, clientinfo, oxd] - **Grant types:** [authorization_code, implicit, refresh_token, client_credentials, password, urn:ietf:params:oauth:grant-type:uma-ticket] - **Response types:** [code, token, id_token] ``` this is a record from oxauth.log: ``` 2022-02-15 02:54:33,279 INFO [qtp222511810-13] [org.gluu.oxauth.auth.AuthenticationFilter] (AuthenticationFilter.java:346) - Basic authentication failed java.lang.Exception: The Token Authentication Method is not valid. at org.gluu.oxauth.auth.AuthenticationFilter.processBasicAuth(AuthenticationFilter.java:331) ~[classes/:?] at org.gluu.oxauth.auth.AuthenticationFilter.doFilter(AuthenticationFilter.java:160) ~[classes/:?] at org.eclipse.jetty.servlet.FilterHolder.doFilter(FilterHolder.java:193) ~[jetty-servlet-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.servlet.ServletHandler$Chain.doFilter(ServletHandler.java:1601) ~[jetty-servlet-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:548) ~[jetty-servlet-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:602) ~[jetty-security-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:235) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:1624) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.ScopedHandler.nextHandle(ScopedHandler.java:233) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1435) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:188) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:501) ~[jetty-servlet-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:1594) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.ScopedHandler.nextScope(ScopedHandler.java:186) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1350) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:234) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:146) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:127) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.Server.handle(Server.java:516) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.HttpChannel.lambda$handle$1(HttpChannel.java:388) ~[jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.HttpChannel.dispatch(HttpChannel.java:633) [jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:380) [jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:273) [jetty-server-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.io.AbstractConnection$ReadCallback.succeeded(AbstractConnection.java:311) [jetty-io-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.io.FillInterest.fillable(FillInterest.java:105) [jetty-io-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.io.ChannelEndPoint$1.run(ChannelEndPoint.java:104) [jetty-io-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.runTask(EatWhatYouKill.java:336) [jetty-util-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.doProduce(EatWhatYouKill.java:313) [jetty-util-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.tryProduce(EatWhatYouKill.java:171) [jetty-util-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.util.thread.strategy.EatWhatYouKill.run(EatWhatYouKill.java:129) [jetty-util-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.util.thread.ReservedThreadExecutor$ReservedThread.run(ReservedThreadExecutor.java:375) [jetty-util-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:773) [jetty-util-9.4.35.v20201120.jar:9.4.35.v20201120] at org.eclipse.jetty.util.thread.QueuedThreadPool$Runner.run(QueuedThreadPool.java:905) [jetty-util-9.4.35.v20201120.jar:9.4.35.v20201120] at java.lang.Thread.run(Thread.java:834) [?:?] ``` here is the har file: ``` { "log": { "version": "1.2", "creator": { "name": "Firefox", "version": "97.0" }, "browser": { "name": "Firefox", "version": "97.0" }, "pages": [ { "startedDateTime": "2022-02-14T19:19:58.955-05:00", "id": "page_3", "title": "The remote server returned an error: (401) Unauthorized.", "pageTimings": { "onContentLoad": 426, "onLoad": 442 } } ], "entries": [ { "pageref": "page_3", "startedDateTime": "2022-02-14T19:19:58.955-05:00", "request": { "bodySize": 0, "method": "GET", "url": "http://localhost/OpenId/Default.aspx", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Host", "value": "localhost" }, { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0" }, { "name": "Accept", "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8" }, { "name": "Accept-Language", "value": "en-US,en;q=0.5" }, { "name": "Accept-Encoding", "value": "gzip, deflate" }, { "name": "Connection", "value": "keep-alive" }, { "name": "Upgrade-Insecure-Requests", "value": "1" }, { "name": "Sec-Fetch-Dest", "value": "document" }, { "name": "Sec-Fetch-Mode", "value": "navigate" }, { "name": "Sec-Fetch-Site", "value": "none" }, { "name": "Sec-Fetch-User", "value": "?1" }, { "name": "Pragma", "value": "no-cache" }, { "name": "Cache-Control", "value": "no-cache" } ], "cookies": [], "queryString": [], "headersSize": 497 }, "response": { "status": 302, "statusText": "Found", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Cache-Control", "value": "private" }, { "name": "Content-Type", "value": "text/html; charset=utf-8" }, { "name": "Location", "value": "https://test.gluu.org/oxauth/restv1/authorize?scope=openid&amp;response_type=code&amp;client_id=9ce09670-c48c-4bd2-8313-edea4650189f&amp;redirect_uri=http://localhost/OpenId/Default.aspx" }, { "name": "Server", "value": "Microsoft-IIS/10.0" }, { "name": "X-AspNet-Version", "value": "2.0.50727" }, { "name": "X-Powered-By", "value": "ASP.NET" }, { "name": "Date", "value": "Tue, 15 Feb 2022 00:19:58 GMT" }, { "name": "Content-Length", "value": "303" } ], "cookies": [], "content": { "mimeType": "text/html; charset=utf-8", "size": 5236, "comment": "Response bodies are not included." }, "redirectURL": "https://test.gluu.org/oxauth/restv1/authorize?scope=openid&amp;response_type=code&amp;client_id=9ce09670-c48c-4bd2-8313-edea4650189f&amp;redirect_uri=http://localhost/OpenId/Default.aspx", "headersSize": 410, "bodySize": 5646 }, "cache": {}, "timings": { "blocked": 0, "dns": 0, "connect": 0, "ssl": 0, "send": 0, "wait": 2, "receive": 0 }, "time": 2, "_securityState": "insecure", "serverIPAddress": "127.0.0.1", "connection": "80" }, { "pageref": "page_3", "startedDateTime": "2022-02-14T19:19:58.962-05:00", "request": { "bodySize": 0, "method": "GET", "url": "https://test.gluu.org/oxauth/restv1/authorize?scope=openid&amp;response_type=code&amp;client_id=9ce09670-c48c-4bd2-8313-edea4650189f&amp;redirect_uri=http://localhost/OpenId/Default.aspx", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Host", "value": "test.gluu.org" }, { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0" }, { "name": "Accept", "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8" }, { "name": "Accept-Language", "value": "en-US,en;q=0.5" }, { "name": "Accept-Encoding", "value": "gzip, deflate, br" }, { "name": "Connection", "value": "keep-alive" }, { "name": "Cookie", "value": "rp_origin_id=http://localhost/OpenId/Default.aspx; org.gluu.i18n.Locale=en; session_id=b484f88f-4073-4e73-95ff-899c7b5c0b11; session_state=18b3a5a7ca9ddb19b1baf383ddebad9777e88b7c051f04d01af66577347f823b.0ca307e2-1750-4fdd-8f2e-1608847003a2; opbs=b959dfa2-a2fc-453b-9106-0f1a0afeb26b; current_sessions=[\"b484f88f-4073-4e73-95ff-899c7b5c0b11\"]" }, { "name": "Upgrade-Insecure-Requests", "value": "1" }, { "name": "Sec-Fetch-Dest", "value": "document" }, { "name": "Sec-Fetch-Mode", "value": "navigate" }, { "name": "Sec-Fetch-Site", "value": "none" }, { "name": "Sec-Fetch-User", "value": "?1" }, { "name": "Pragma", "value": "no-cache" }, { "name": "Cache-Control", "value": "no-cache" } ], "cookies": [ { "name": "rp_origin_id", "value": "http://localhost/OpenId/Default.aspx" }, { "name": "org.gluu.i18n.Locale", "value": "en" }, { "name": "session_id", "value": "b484f88f-4073-4e73-95ff-899c7b5c0b11" }, { "name": "session_state", "value": "18b3a5a7ca9ddb19b1baf383ddebad9777e88b7c051f04d01af66577347f823b.0ca307e2-1750-4fdd-8f2e-1608847003a2" }, { "name": "opbs", "value": "b959dfa2-a2fc-453b-9106-0f1a0afeb26b" }, { "name": "current_sessions", "value": "[\"b484f88f-4073-4e73-95ff-899c7b5c0b11\"]" } ], "queryString": [ { "name": "scope", "value": "openid" }, { "name": "response_type", "value": "code" }, { "name": "client_id", "value": "9ce09670-c48c-4bd2-8313-edea4650189f" }, { "name": "redirect_uri", "value": "http://localhost/OpenId/Default.aspx" } ], "headersSize": 990 }, "response": { "status": 302, "statusText": "Found", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Date", "value": "Tue, 15 Feb 2022 00:19:59 GMT" }, { "name": "Server", "value": "Apache/2.4.41 (Ubuntu)" }, { "name": "X-Xss-Protection", "value": "1; mode=block" }, { "name": "X-Content-Type-Options", "value": "nosniff" }, { "name": "Strict-Transport-Security", "value": "max-age=31536000; includeSubDomains" }, { "name": "Location", "value": "http://localhost/OpenId/Default.aspx?code=63ce029b-ad6a-4b77-be36-9c64928db201&amp;scope=openid&amp;session_id=b484f88f-4073-4e73-95ff-899c7b5c0b11&amp;session_state=18b3a5a7ca9ddb19b1baf383ddebad9777e88b7c051f04d01af66577347f823b.0ca307e2-1750-4fdd-8f2e-1608847003a2&amp;sid=387cfd82-e51d-492c-90bb-5f43f68a922d" }, { "name": "Content-Length", "value": "0" }, { "name": "Keep-Alive", "value": "timeout=5, max=100" }, { "name": "Connection", "value": "Keep-Alive" } ], "cookies": [], "content": { "mimeType": "text/html; charset=utf-8", "size": 5236, "comment": "Response bodies are not included." }, "redirectURL": "http://localhost/OpenId/Default.aspx?code=63ce029b-ad6a-4b77-be36-9c64928db201&amp;scope=openid&amp;session_id=b484f88f-4073-4e73-95ff-899c7b5c0b11&amp;session_state=18b3a5a7ca9ddb19b1baf383ddebad9777e88b7c051f04d01af66577347f823b.0ca307e2-1750-4fdd-8f2e-1608847003a2&amp;sid=387cfd82-e51d-492c-90bb-5f43f68a922d", "headersSize": 604, "bodySize": 5840 }, "cache": {}, "timings": { "blocked": 132, "dns": 120, "connect": 1, "ssl": 10, "send": 0, "wait": 104, "receive": 0 }, "time": 367, "_securityState": "secure", "serverIPAddress": "10.10.25.176", "connection": "443" }, { "pageref": "page_3", "startedDateTime": "2022-02-14T19:19:59.201-05:00", "request": { "bodySize": 0, "method": "GET", "url": "http://localhost/OpenId/Default.aspx?code=63ce029b-ad6a-4b77-be36-9c64928db201&amp;scope=openid&amp;session_id=b484f88f-4073-4e73-95ff-899c7b5c0b11&amp;session_state=18b3a5a7ca9ddb19b1baf383ddebad9777e88b7c051f04d01af66577347f823b.0ca307e2-1750-4fdd-8f2e-1608847003a2&amp;sid=387cfd82-e51d-492c-90bb-5f43f68a922d", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Host", "value": "localhost" }, { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0" }, { "name": "Accept", "value": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8" }, { "name": "Accept-Language", "value": "en-US,en;q=0.5" }, { "name": "Accept-Encoding", "value": "gzip, deflate" }, { "name": "Connection", "value": "keep-alive" }, { "name": "Upgrade-Insecure-Requests", "value": "1" }, { "name": "Sec-Fetch-Dest", "value": "document" }, { "name": "Sec-Fetch-Mode", "value": "navigate" }, { "name": "Sec-Fetch-Site", "value": "none" }, { "name": "Sec-Fetch-User", "value": "?1" }, { "name": "Pragma", "value": "no-cache" }, { "name": "Cache-Control", "value": "no-cache" } ], "cookies": [], "queryString": [ { "name": "code", "value": "63ce029b-ad6a-4b77-be36-9c64928db201" }, { "name": "scope", "value": "openid" }, { "name": "session_id", "value": "b484f88f-4073-4e73-95ff-899c7b5c0b11" }, { "name": "session_state", "value": "18b3a5a7ca9ddb19b1baf383ddebad9777e88b7c051f04d01af66577347f823b.0ca307e2-1750-4fdd-8f2e-1608847003a2" }, { "name": "sid", "value": "387cfd82-e51d-492c-90bb-5f43f68a922d" } ], "headersSize": 757 }, "response": { "status": 500, "statusText": "Internal Server Error", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Cache-Control", "value": "private" }, { "name": "Content-Type", "value": "text/html; charset=utf-8" }, { "name": "Server", "value": "Microsoft-IIS/10.0" }, { "name": "X-AspNet-Version", "value": "2.0.50727" }, { "name": "X-Powered-By", "value": "ASP.NET" }, { "name": "Date", "value": "Tue, 15 Feb 2022 00:19:58 GMT" }, { "name": "Content-Length", "value": "5236" } ], "cookies": [], "content": { "mimeType": "text/html; charset=utf-8", "size": 5236, "text": "&lt;html&gt;\r\n &lt;head&gt;\r\n &lt;title&gt;The remote server returned an error: (401) Unauthorized.&lt;/title&gt;\r\n &lt;style&gt;\r\n body {font-family:\"Verdana\";font-weight:normal;font-size: .7em;color:black;} \r\n p {font-family:\"Verdana\";font-weight:normal;color:black;margin-top: -5px}\r\n b {font-family:\"Verdana\";font-weight:bold;color:black;margin-top: -5px}\r\n H1 { font-family:\"Verdana\";font-weight:normal;font-size:18pt;color:red }\r\n H2 { font-family:\"Verdana\";font-weight:normal;font-size:14pt;color:maroon }\r\n pre {font-family:\"Lucida Console\";font-size: .9em}\r\n .marker {font-weight: bold; color: black;text-decoration: none;}\r\n .version {color: gray;}\r\n .error {margin-bottom: 10px;}\r\n .expandable { text-decoration:underline; font-weight:bold; color:navy; cursor:hand; }\r\n &lt;/style&gt;\r\n &lt;/head&gt;\r\n\r\n &lt;body bgcolor=\"white\"&gt;\r\n\r\n &lt;span&gt;&lt;H1&gt;Server Error in '/OpenId' Application.&lt;hr width=100% size=1 color=silver&gt;&lt;/H1&gt;\r\n\r\n &lt;h2&gt; <i>The remote server returned an error: (401) Unauthorized.</i> &lt;/h2&gt;&lt;/span&gt;\r\n\r\n &lt;font face=\"Arial, Helvetica, Geneva, SunSans-Regular, sans-serif \"&gt;\r\n\r\n <b> Description: </b>An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.\r\n\r\n &lt;br&gt;&lt;br&gt;\r\n\r\n <b> Exception Details: </b>System.Net.WebException: The remote server returned an error: (401) Unauthorized.&lt;br&gt;&lt;br&gt;\r\n\r\n <b>Source Error:</b> &lt;br&gt;&lt;br&gt;\r\n\r\n &lt;table width=100% bgcolor=\"#ffffcc\"&gt;\r\n &lt;tr&gt;\r\n &lt;td&gt;\r\n <code>&lt;pre&gt;\r\n\r\nLine 144: oTokenRequest.Credentials = credentials;\r\nLine 145: Uri oTokenUri = new Uri(sEndPointRequest);\r\n&lt;font color=red&gt;Line 146: string sToken = oTokenRequest.DownloadString(sEndPointRequest);\r\n&lt;/font&gt;Line 147:// Response.Redirect(sEndPointRequest);\r\nLine 148:// string sToken = SendHttpPost(sEndPointRequest);&lt;/pre&gt;</code>\r\n\r\n &lt;/td&gt;\r\n &lt;/tr&gt;\r\n &lt;/table&gt;\r\n\r\n &lt;br&gt;\r\n\r\n <b> Source File: </b> c:\\inetpub\\wwwroot\\OpenId\\Default.aspx.cs<b> &nbsp;&nbsp; Line: </b> 146\r\n &lt;br&gt;&lt;br&gt;\r\n\r\n <b>Stack Trace:</b> &lt;br&gt;&lt;br&gt;\r\n\r\n &lt;table width=100% bgcolor=\"#ffffcc\"&gt;\r\n &lt;tr&gt;\r\n &lt;td&gt;\r\n <code>&lt;pre&gt;\r\n\r\n[WebException: The remote server returned an error: (401) Unauthorized.]\r\n System.Net.WebClient.DownloadDataInternal(Uri address, WebRequest&amp; request) +3078413\r\n System.Net.WebClient.DownloadString(Uri address) +129\r\n _Default.Page_Load(Object sender, EventArgs e) in c:\\inetpub\\wwwroot\\OpenId\\Default.aspx.cs:146\r\n System.Web.Util.CalliHelper.EventArgFunctionCaller(IntPtr fp, Object o, Object t, EventArgs e) +25\r\n System.Web.Util.CalliEventHandlerDelegateProxy.Callback(Object sender, EventArgs e) +42\r\n System.Web.UI.Control.OnLoad(EventArgs e) +132\r\n System.Web.UI.Control.LoadRecursive() +66\r\n System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +2428\r\n&lt;/pre&gt;</code>\r\n\r\n &lt;/td&gt;\r\n &lt;/tr&gt;\r\n &lt;/table&gt;\r\n\r\n &lt;br&gt;\r\n\r\n &lt;hr width=100% size=1 color=silver&gt;\r\n\r\n <b>Version Information:</b>&nbsp;Microsoft .NET Framework Version:2.0.50727.9151; ASP.NET Version:2.0.50727.9160\r\n\r\n &lt;/font&gt;\r\n\r\n &lt;/body&gt;\r\n&lt;/html&gt;\r\n" }, "redirectURL": "", "headersSize": 241, "bodySize": 5477 }, "cache": {}, "timings": { "blocked": 0, "dns": 0, "connect": 0, "ssl": 0, "send": 0, "wait": 31, "receive": 1 }, "time": 32, "_securityState": "insecure", "serverIPAddress": "127.0.0.1", "connection": "80" }, { "pageref": "page_3", "startedDateTime": "2022-02-14T19:19:59.509-05:00", "request": { "bodySize": 0, "method": "GET", "url": "http://localhost/favicon.ico", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Host", "value": "localhost" }, { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0" }, { "name": "Accept", "value": "image/avif,image/webp,*/*" }, { "name": "Accept-Language", "value": "en-US,en;q=0.5" }, { "name": "Accept-Encoding", "value": "gzip, deflate" }, { "name": "Connection", "value": "keep-alive" }, { "name": "Referer", "value": "http://localhost/OpenId/Default.aspx?code=63ce029b-ad6a-4b77-be36-9c64928db201&amp;scope=openid&amp;session_id=b484f88f-4073-4e73-95ff-899c7b5c0b11&amp;session_state=18b3a5a7ca9ddb19b1baf383ddebad9777e88b7c051f04d01af66577347f823b.0ca307e2-1750-4fdd-8f2e-1608847003a2&amp;sid=387cfd82-e51d-492c-90bb-5f43f68a922d" }, { "name": "Sec-Fetch-Dest", "value": "image" }, { "name": "Sec-Fetch-Mode", "value": "no-cors" }, { "name": "Sec-Fetch-Site", "value": "same-origin" }, { "name": "Pragma", "value": "no-cache" }, { "name": "Cache-Control", "value": "no-cache" } ], "cookies": [], "queryString": [], "headersSize": 689 }, "response": { "status": 404, "statusText": "Not Found", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Cache-Control", "value": "private" }, { "name": "Content-Type", "value": "text/html; charset=utf-8" }, { "name": "Server", "value": "Microsoft-IIS/10.0" }, { "name": "X-Powered-By", "value": "ASP.NET" }, { "name": "Date", "value": "Tue, 15 Feb 2022 00:20:00 GMT" }, { "name": "Content-Length", "value": "4842" } ], "cookies": [], "content": { "mimeType": "text/html; charset=utf-8", "size": 4842, "text": " \n&lt;html xmlns=\"http://www.w3.org/1999/xhtml\"&gt; \n&lt;head&gt; \n&lt;title&gt;IIS 10.0 Detailed Error - 404.0 - Not Found&lt;/title&gt; \n&lt;style type=\"text/css\"&gt; \n \n&lt;/style&gt; \n \n&lt;/head&gt; \n&lt;body&gt; \n&lt;div id=\"content\"&gt; \n&lt;div class=\"content-container\"&gt; \n &lt;h3&gt;HTTP Error 404.0 - Not Found&lt;/h3&gt; \n &lt;h4&gt;The resource you are looking for has been removed, had its name changed, or is temporarily unavailable.&lt;/h4&gt; \n&lt;/div&gt; \n&lt;div class=\"content-container\"&gt; \n &lt;fieldset&gt;&lt;h4&gt;Most likely causes:&lt;/h4&gt; \n <ul> \t<li>The directory or file specified does not exist on the Web server.</li> \t<li>The URL contains a typographical error.</li> \t<li>A custom filter or module, such as URLScan, restricts access to the file.</li> </ul> \n &lt;/fieldset&gt; \n&lt;/div&gt; \n&lt;div class=\"content-container\"&gt; \n &lt;fieldset&gt;&lt;h4&gt;Things you can try:&lt;/h4&gt; \n <ul> \t<li>Create the content on the Web server.</li> \t<li>Review the browser URL.</li> \t<li>Create a tracing rule to track failed requests for this HTTP status code and see which module is calling SetStatus. For more information about creating a tracing rule for failed requests, click <a href='\"http://go.microsoft.com/fwlink/?LinkID=66439\"'>here</a>. </li> </ul> \n &lt;/fieldset&gt; \n&lt;/div&gt; \n \n&lt;div class=\"content-container\"&gt; \n &lt;fieldset&gt;&lt;h4&gt;Detailed Error Information:&lt;/h4&gt; \n &lt;div id=\"details-left\"&gt; \n &lt;table border=\"0\" cellpadding=\"0\" cellspacing=\"0\"&gt; \n &lt;tr class=\"alt\"&gt;&lt;th&gt;Module&lt;/th&gt;&lt;td&gt;&nbsp;&nbsp;&nbsp;IIS Web Core&lt;/td&gt;&lt;/tr&gt; \n &lt;tr&gt;&lt;th&gt;Notification&lt;/th&gt;&lt;td&gt;&nbsp;&nbsp;&nbsp;MapRequestHandler&lt;/td&gt;&lt;/tr&gt; \n &lt;tr class=\"alt\"&gt;&lt;th&gt;Handler&lt;/th&gt;&lt;td&gt;&nbsp;&nbsp;&nbsp;StaticFile&lt;/td&gt;&lt;/tr&gt; \n &lt;tr&gt;&lt;th&gt;Error Code&lt;/th&gt;&lt;td&gt;&nbsp;&nbsp;&nbsp;0x80070002&lt;/td&gt;&lt;/tr&gt; \n \n &lt;/table&gt; \n &lt;/div&gt; \n &lt;div id=\"details-right\"&gt; \n &lt;table border=\"0\" cellpadding=\"0\" cellspacing=\"0\"&gt; \n &lt;tr class=\"alt\"&gt;&lt;th&gt;Requested URL&lt;/th&gt;&lt;td&gt;&nbsp;&nbsp;&nbsp;http://localhost:80/favicon.ico&lt;/td&gt;&lt;/tr&gt; \n &lt;tr&gt;&lt;th&gt;Physical Path&lt;/th&gt;&lt;td&gt;&nbsp;&nbsp;&nbsp;C:\\inetpub\\wwwroot\\favicon.ico&lt;/td&gt;&lt;/tr&gt; \n &lt;tr class=\"alt\"&gt;&lt;th&gt;Logon Method&lt;/th&gt;&lt;td&gt;&nbsp;&nbsp;&nbsp;Anonymous&lt;/td&gt;&lt;/tr&gt; \n &lt;tr&gt;&lt;th&gt;Logon User&lt;/th&gt;&lt;td&gt;&nbsp;&nbsp;&nbsp;Anonymous&lt;/td&gt;&lt;/tr&gt; \n \n &lt;/table&gt; \n &lt;div class=\"clear\"&gt;&lt;/div&gt; \n &lt;/div&gt; \n &lt;/fieldset&gt; \n&lt;/div&gt; \n \n&lt;div class=\"content-container\"&gt; \n &lt;fieldset&gt;&lt;h4&gt;More Information:&lt;/h4&gt; \n This error means that the file or directory does not exist on the server. Create the file or directory and try the request again. \n &lt;p&gt;<a href='\"https://go.microsoft.com/fwlink/?LinkID=62293&amp;amp;IIS70Error=404,0,0x80070002,19044\"'>View more information &raquo;</a>&lt;/p&gt; \n \n &lt;/fieldset&gt; \n&lt;/div&gt; \n&lt;/div&gt; \n&lt;/body&gt; \n&lt;/html&gt; \n" }, "redirectURL": "", "headersSize": 200, "bodySize": 5042 }, "cache": {}, "timings": { "blocked": -1, "dns": 0, "connect": 0, "ssl": 0, "send": 0, "wait": 871, "receive": 0 }, "time": 871, "_securityState": "insecure", "serverIPAddress": "127.0.0.1", "connection": "80" } ] } } ``` Thank you.

By Aliaksandr Samuseu staff 15 Feb 2022 at 11:58 a.m. CST

Aliaksandr Samuseu gravatar
Hi, Aharon. This is very old ticket for EOL version of Gluu Server, and I assume your version is much newer than that. It's not a good idea to mix questions on products with drastically different codebase in one ticket. I suggest you to open a new ticket, and reference this one from it, if you wish.