By: Nicolas Debernardi user 27 Apr 2020 at 2:34 p.m. CDT

9 Responses
Nicolas Debernardi gravatar
Hi everyone, I'm trying to activate U2F as the default authentification mechanism. We've just installed Gluu server, which has not been modified yet. Following these [indications](https://gluu.org/docs/gluu-server/4.0/authn-guide/U2F/) I encounter an error. On enabling the custom script for U2F, the change is accepted, but after a minute, the script appears in Red with the following error: ``` java.lang.Exception: Using default external type class at org.gluu.service.custom.script.CustomScriptManager.createExternalType(CustomScriptManager.java:367) at org.gluu.service.custom.script.CustomScriptManager.reloadCustomScriptConfigurations(CustomScriptManager.java:268) at org.gluu.service.custom.script.CustomScriptManager.reloadImpl(CustomScriptManager.java:157) at org.gluu.service.custom.script.CustomScriptManager.reload(CustomScriptManager.java:144) at org.gluu.service.custom.script.CustomScriptManager.reloadTimerEvent(CustomScriptManager.java:120) at org.gluu.service.custom.script.CustomScriptManager$Proxy$_$$_WeldSubclass.reloadTimerEvent(Unknown Source) at sun.reflect.GeneratedMethodAccessor128.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.jboss.weld.injection.StaticMethodInjectionPoint.invoke(StaticMethodInjectionPoint.java:95) at org.jboss.weld.injection.StaticMethodInjectionPoint.invoke(StaticMethodInjectionPoint.java:85) at org.jboss.weld.injection.MethodInvocationStrategy$SimpleMethodInvocationStrategy.invoke(MethodInvocationStrategy.java:168) at org.jboss.weld.event.ObserverMethodImpl.sendEvent(ObserverMethodImpl.java:330) at org.jboss.weld.event.ObserverMethodImpl.sendEvent(ObserverMethodImpl.java:308) at org.jboss.weld.event.ObserverMethodImpl.notify(ObserverMethodImpl.java:286) at javax.enterprise.inject.spi.ObserverMethod.notify(ObserverMethod.java:124) at org.jboss.weld.util.Observers.notify(Observers.java:166) at org.jboss.weld.event.ObserverNotifier.notifySyncObservers(ObserverNotifier.java:285) at org.jboss.weld.event.ObserverNotifier.notify(ObserverNotifier.java:273) at org.jboss.weld.event.ObserverNotifier.fireEvent(ObserverNotifier.java:177) at org.jboss.weld.event.ObserverNotifier.fireEvent(ObserverNotifier.java:159) at org.jboss.weld.manager.BeanManagerImpl.fireEvent(BeanManagerImpl.java:632) at org.jboss.weld.util.ForwardingBeanManager.fireEvent(ForwardingBeanManager.java:104) at org.gluu.service.timer.TimerJob.execute(TimerJob.java:39) at org.gluu.service.timer.JobExecutionDelegate.execute(JobExecutionDelegate.java:31) at org.quartz.core.JobRunShell.run(JobRunShell.java:202) at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:573) ==================Further details============================ Using default external type class ``` Is there some option I failed to install? Thanks a lot in advance, Best, nicolas

By Sahil Arora user 28 Apr 2020 at 11:34 a.m. CDT

Sahil Arora gravatar
Hi Nicolas, Gluu 4.1 has not been certified with Deb 8 . Please refer [supported](https://gluu.org/docs/gluu-server/4.1/installation-guide/install-debian/) platforms. Otherwise, U2F authentication works oob without any modifications. Please install on Deb 9/10 and let us know in case you get the same issue Thanks Sahil

By Nicolas Debernardi user 28 Apr 2020 at 1:33 p.m. CDT

Nicolas Debernardi gravatar
Thanks Sahil, I am now on Debian 9.9 and still experiment the same error on the custom script for U2F `java.lang.Exception` I'm probably missing something, but I cant figure out what. Let me know if you have an idea. Thanks in advance, nicolas

By Sahil Arora user 28 Apr 2020 at 1:50 p.m. CDT

Sahil Arora gravatar
HI Nicolas, Could you please share oxauth.log and oxauth_script log file from `/opt/gluu/jetty/oxauth/logs` ? Thanks Sahil

By Yuriy Movchan staff 30 Apr 2020 at 12:05 p.m. CDT

Yuriy Movchan gravatar
Hi, Can you check `disableU2fEndpoint` property value in oxAuth JSON config? It should have `false` value. Regards, Yuriy

By Yuriy Movchan staff 05 May 2020 at 4:35 a.m. CDT

Yuriy Movchan gravatar
Hi, Can you do next: 1. Set disableU2fEndpoint = true 2. Stop oxauth service 3. Clean all oxauth logs 4. Start oxauth service 5. Try to log in using U2F auth method 6. Create archive with all oxauth log files. 7. Attach zip to new response. Regards, Yuriy

By Yuriy Movchan staff 06 May 2020 at 4:42 a.m. CDT

Yuriy Movchan gravatar
Thanks for feadback Mohamed! Regards, Yuriy