Showing results for 
Search instead for 
Do you mean 

Workaround for "Invalid token" error with WIndows Authentication and User Maps & Workflow

by Technical Evangelist on ‎12-06-2018 07:42 AM (793 Views)

"Invalid token" error can be triggered by following the workflow below:

[How to repeat]
[1] Go to Apollo "welcome" page, go to Administrative Console, go to Maps & Workspaces
[2] From "add data source" to add your Apollo server as Apollo,
[3] From "add data source" to add Blue Marble "as WMS"
[4] In User Maps, dropdown on Workspaces, Add "from MAP" check use credentials
Expand Maps under your mew workspace and delete all of the default maps. They have the incorrect data sources.
Use windowing controls to window over US
[5] Dropdown on the new workspace and Add . from Map, Check use credentials, Enter USA as name for map.
Window over South America, Europe, Africa, and add maps under the new workspace.
[6] Dropdown on the new workspace and set for instance, as starting workspace, check Apollo-portal, and select "set" in bottom left.
Exit.
[8] Go back to Apollo DM, and attempt to login

 

[What was expected to happen]
User should be able to login to DM

 

[What did happen]
nothing happens, user can not login to DM.
Look at the Tomcat log. You'll see many ""invalid token" errors

==========================================================================
2018-06-25 09:52:40,648 WARN (ajp-nio-8009-exec-1)[waffle.spring.NegotiateSecurityFilter] error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid
2018-06-25 09:52:40,648 WARN (ajp-nio-8009-exec-7)[waffle.spring.NegotiateSecurityFilter] error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid
2018-06-25 09:52:40,648 WARN (ajp-nio-8009-exec-2)[waffle.spring.NegotiateSecurityFilter] error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid
2018-06-25 09:52:40,648 WARN (ajp-nio-8009-exec-5)[waffle.spring.NegotiateSecurityFilter] error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid
==========================================================================

 

 

 

The workaround is to restart server.

Or

The best workaround for this is to use a direct link to the Administrative Console instead of the Apollo landing pages link. Something like this:

http://<APOLLOSERVER>/AdminConsole/App
or
http://localhost/AdminConsole/App

 

 

Comments
by
on ‎05-23-2019 01:52 AM

Hi, I am facing the same problem. The workaround you suggested is for AdminConsole only. But I am not able to login to Data Manager. It shows an error: " Authentication failure on rpc endpoint : 401". And in Tomcat log, its showing the following errors:

2019-05-23 14:17:29,742 WARN  (ajp-nio-8009-exec-2)[waffle.spring.NegotiateSecurityFilter] error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid
2019-05-23 14:26:01,843 WARN  (ajp-nio-8009-exec-4)[waffle.spring.NegotiateSecurityFilter] error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid

Please suggest.

 

Regards,

Shashank Mathur

by Technical Evangelist
on ‎05-23-2019 06:21 AM

Instead of using Maps and workspace in admin console (may not include Apollo catalog connection by default), you can setup maps and workspace in portal. 

https://community.hexagongeospatial.com/t5/ERDAS-APOLLO-Q-A/How-to-add-Apollo-catalog-to-new-Portal-...

 

hope it helps.

haiyan

by
on ‎05-23-2019 09:45 PM

Hi Haiyan,

 

Actually, I am not able to login to Datamanager. The workaround suggested by you is not applicable to DM. It shows an error: " Authentication failure on rpc endpoint : 401". And in Tomcat log, its showing the following errors:

2019-05-23 14:17:29,742 WARN  (ajp-nio-8009-exec-2)[waffle.spring.NegotiateSecurityFilter] error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid
2019-05-23 14:26:01,843 WARN  (ajp-nio-8009-exec-4)[waffle.spring.NegotiateSecurityFilter] error logging in user: com.sun.jna.platform.win32.Win32Exception: The token supplied to the function is invalid

Also I am not able to loging to ApolloCatlogWMS.

 

However, when I open the Catalog Web Interface, it automatically gets logged in. I don't need to key-in the username & password.

 

BTW, I am using ERDAS Apollo Version: 16.05.0000.00105

 

 

Please suggest.

 

Regards,

Shashank

 

 

by
on ‎11-15-2019 05:21 AM

I have the same error as Shashank. Any solution or ideas?

Contributors