ssoadm create-metdata-templ command fails with NullPointerException in OpenAM 11.0.0
The purpose of this article is to provide assistance if you get a NullPointerException when using the ssoadm create-metdata-templ command in OpenAM 11.0.0.
Archived
This article has been archived and is no longer maintained by ForgeRock.
Symptoms
The following stacktrace is shown when executing the ssoadm create-metdata-templ command from your terminal window:
Exception in thread "main" java.lang.NullPointerException at com.sun.identity.federation.cli.CreateMetaDataTemplate.buildConfigTemplate(CreateMetaDataTemplate.java:573) at com.sun.identity.federation.cli.CreateMetaDataTemplate.handleSAML2Request(CreateMetaDataTemplate.java:154) at com.sun.identity.federation.cli.CreateMetaDataTemplate.handleRequest(CreateMetaDataTemplate.java:127) at com.sun.identity.cli.SubCommand.execute(SubCommand.java:291) at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:212) at com.sun.identity.cli.CLIRequest.process(CLIRequest.java:134) at com.sun.identity.cli.CommandManager.serviceRequestQueue(CommandManager.java:573) at com.sun.identity.cli.CommandManager.<init>(CommandManager.java:171) at com.sun.identity.cli.CommandManager.main(CommandManager.java:148)The following error is shown in the browser if you are using ssoadm.jsp:
HTTP Status 500 - AMSetupFilter.doFilter type Exception report message AMSetupFilter.doFilter description The server encountered an internal error that prevented it from fulfilling this request. exception javax.servlet.ServletException: AMSetupFilter.doFilter com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:134) root cause org.apache.jasper.JasperException: java.lang.NullPointerException org.apache.jasper.servlet.JspServletWrapper.handleJspException(JspServletWrapper.java:502) org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:430) org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313) org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260) javax.servlet.http.HttpServlet.service(HttpServlet.java:723) org.forgerock.openam.validation.ResponseValidationFilter.doFilter(ResponseValidationFilter.java:44) com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:98) root cause java.lang.NullPointerException com.sun.identity.federation.cli.CreateMetaDataTemplate.buildWSFedConfigTemplate(CreateMetaDataTemplate.java:764) com.sun.identity.federation.cli.CreateMetaDataTemplate.handleWSFedRequest(CreateMetaDataTemplate.java:174) com.sun.identity.federation.cli.CreateMetaDataTemplate.handleRequest(CreateMetaDataTemplate.java:135) com.sun.identity.cli.SubCommand.execute(SubCommand.java:291) com.sun.identity.cli.CLIRequest.process(CLIRequest.java:212) com.sun.identity.cli.CLIRequest.process(CLIRequest.java:134) com.sun.identity.cli.CommandManager.serviceRequestQueue(CommandManager.java:573) com.sun.identity.cli.WebCLIHelper.processRequest(WebCLIHelper.java:151) com.sun.identity.cli.WebCLIHelper.getHTML(WebCLIHelper.java:92) org.apache.jsp.ssoadm_jsp._jspService(ssoadm_jsp.java:139) org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70) javax.servlet.http.HttpServlet.service(HttpServlet.java:723) org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:388) org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:313) org.apache.jasper.servlet.JspServlet.service(JspServlet.java:260) javax.servlet.http.HttpServlet.service(HttpServlet.java:723) org.forgerock.openam.validation.ResponseValidationFilter.doFilter(ResponseValidationFilter.java:44) com.sun.identity.setup.AMSetupFilter.doFilter(AMSetupFilter.java:98)Recent Changes
Upgraded to OpenAM 11.0.0.
Causes
Changes made for a different issue tracker ID (OPENAM-2966 (SAML tokens not created in CTS)) in OpenAM 11.0.0 resulted in a delegation check, which meant an empty entityID was no longer considered valid. As such, this change caused the create-metdata-templ command to fail.
Solution
This issue can be resolved by upgrading to OpenAM 11.0.1 or later; you can download this from BackStage.
See Also
FAQ: Installing and using ssoadm in AM
Subsequent attempts to use ssoadm fail in AM 6.x
OpenAM Reference › OpenAM Command Line Tools › ssoadm
Related Training
N/A
Related Issue Tracker IDs
OPENAM-3172 (ssoadm create-metadata-templ fails with Exception)