Failed to getSSOToken after second connection in one JVM

Question

I met a problem when connected to two hosts to getSSOToken. I can get the SSO token in the first connection but failed in the second connection. And during the second connection, login succeeded, but failed to getSSOToken from AuthContext. The code is:
import com.iplanet.am.util.SystemProperties;
import com.iplanet.sso.SSOToken;
import com.sun.identity.authentication.AuthContext;
import com.sun.identity.authentication.spi.AuthLoginException;
import javax.net.ssl.*;
import javax.security.auth.callback.Callback;
import javax.security.auth.callback.NameCallback;
import javax.security.auth.callback.PasswordCallback;
import java.io.File;
import java.io.FileOutputStream;
import java.io.IOException;
import java.security.KeyStore;
import java.security.SecureRandom;
import java.security.cert.CertificateException;
import java.security.cert.X509Certificate;
public class AuthSession {
public static void main(String[] args) throws Exception {
AuthSession session1 = new AuthSession();
session1.login("IP1", "login1", "pass1");
String cookie1 = session1.getCookieId();
System.out.println("Cookie: " + cookie1);
session1.logout();
AuthSession session2 = new AuthSession();
session2.login("IP2", "login2", "pass2");
String cookie2 = session2.getCookieId();
System.out.println("Cookie: " + cookie2);
session2.logout();
private AuthContext authContext = null;
private SSOToken ssoToken = null;
private static final String NGSSO_SEC_LOGIN_MODULE = "NgssoSecLoginModule";
private static final int PORT = 58082;
private static final String COOKIE_NAME = "iPlanetDirectoryPro";
public void login(String host, String user, String pwd) throws Exception {
this.authContext = getAuthContext(host, user, pwd);
public void logout() {
try {
if (authContext != null) {
authContext.logout();
authContext.reset();
authContext = null;
} catch (AuthLoginException e) {
throw new RuntimeException(e);
public String getCookieName() {
return COOKIE_NAME;
public String getCookieId() throws Exception {
return getSSOToken().getTokenID().toString();
private SSOToken getSSOToken() throws Exception {
if (authContext != null) {
if (ssoToken == null) {
ssoToken = authContext.getSSOToken();
return ssoToken;
return null;
private static AuthContext getAuthContext(String hostname, String login, String password) throws Exception {
String url = "https://" + hostname + ":" + PORT + "/amserver/namingservice";
initProperties(password, url, hostname);
AuthContext localAuthContext = new AuthContext("/");
localAuthContext.login(AuthContext.IndexType.MODULE_INSTANCE, NGSSO_SEC_LOGIN_MODULE);
Callback[] callbacks = localAuthContext.getRequirements();
while (callbacks != null) {
NameCallback nameCallBack = null;
PasswordCallback passwordCallback = null;
for (Callback callback : callbacks) {
if (callback instanceof NameCallback) {
nameCallBack = (NameCallback) callback;
if (callback instanceof PasswordCallback) {
passwordCallback = (PasswordCallback) callback;
if (nameCallBack != null && passwordCallback != null) {
nameCallBack.setName(login);
passwordCallback.setPassword(password.toCharArray());
} else {
throw new Exception("connection failed on '" + hostname + "'");
localAuthContext.submitRequirements(callbacks);
callbacks = localAuthContext.getRequirements();
if (localAuthContext.getStatus() != AuthContext.Status.SUCCESS) {
throw new Exception("bad login/pwd on '" + hostname + "'");
return localAuthContext;
private static String getKeyStore(String password) throws Exception {
File keyStore = File.createTempFile("wskeys_", ".keystore");
keyStore.deleteOnExit();
String keyStoreFileName = keyStore.getAbsolutePath().replaceAll("\\\\", "/");
PrivateTrustManager trustManager = new PrivateTrustManager(keyStoreFileName, password);
SSLContext context = SSLContext.getInstance("SSL");
context.init(null, new TrustManager[]{trustManager}, new SecureRandom());
HttpsURLConnection.setDefaultSSLSocketFactory(context.getSocketFactory());
return keyStoreFileName;
private static void initProperties(String password, String url, final String hostname) throws Exception {
String keyFileName = getKeyStore(password);
HttpsURLConnection.setDefaultHostnameVerifier(new HostnameVerifier() {
public boolean verify(String urlHostName, javax.net.ssl.SSLSession session) {
return true;
System.setProperty("javax.net.ssl.trustStore", keyFileName);
System.setProperty("javax.net.ssl.trustStorePassword", password);
SystemProperties.initializeProperties("com.iplanet.am.naming.url", url);
SystemProperties.initializeProperties("com.iplanet.services.debug.level", "error");
SystemProperties.initializeProperties("com.iplanet.services.debug.directory","D:\\tmp");
System.setProperty("com.iplanet.am.naming.url", url);
System.setProperty("com.sun.identity.agents.app.username", "administrator");
System.setProperty("com.iplanet.am.service.password", password);
System.setProperty("com.iplanet.am.naming.failover.url","");
System.setProperty("com.iplanet.services.debug.level","error");
System.setProperty("com.sun.identity.agents.notification.enabled","false");
System.setProperty("com.iplanet.am.server.protocol", "https");
System.setProperty("com.iplanet.am.server.host", hostname);
System.setProperty("com.iplanet.am.server.port", String.valueOf(PORT));
System.getProperty("com.iplanet.am.serverMode");
private static class PrivateTrustManager implements X509TrustManager {
private String keyStoreName;
private String password;
public PrivateTrustManager(String keyStoreName, String password) {
this.keyStoreName = keyStoreName;
this.password = password;
public void checkClientTrusted(X509Certificate[] chains, String authType) {
public void checkServerTrusted(X509Certificate[] chains, String authType)
throws CertificateException {
FileOutputStream keyStoreOutputStream = null;
try {
KeyStore keyStore = KeyStore.getInstance("JKS", "SUN");
char[] storePassword = password.toCharArray();
keyStore.load(null, storePassword);
for (X509Certificate oneChain : chains) {
keyStore.setCertificateEntry("wskey", oneChain);
keyStoreOutputStream = new FileOutputStream(keyStoreName);
keyStore.store(keyStoreOutputStream, storePassword);
} catch (Exception e) {
throw new CertificateException(e);
finally {
try {
if (keyStoreOutputStream != null) {
keyStoreOutputStream.close();
} catch (IOException e) {
e.printStackTrace();
public X509Certificate[] getAcceptedIssuers() {
return new X509Certificate[0];
Does anyone have idea? Thanks a lot!

Answer 1

And when the java code is executed, below exception is thrown:
com.iplanet.sso.SSOException: AQIC5wM2LY4SfcwNBIUIhyedKiqTZSd+vcrG5/PD5Pir+lc=@AAJTSQACMDE=# Invalid session ID.AQIC5wM2LY4SfcwNBIUIhyedKiqTZSd+vcrG5/PD5Pir+lc=@AAJTSQACMDE=#
     at com.iplanet.sso.providers.dpro.SSOProviderImpl.createSSOToken(SSOProviderImpl.java:178)
     at com.iplanet.sso.SSOTokenManager.createSSOToken(SSOTokenManager.java:305)
     at com.sun.identity.authentication.AuthContext.getSSOToken(AuthContext.java:1071)
     at AuthSession.getSSOToken(AuthSession.java:77)
     at AuthSession.getCookieId(AuthSession.java:70)
     at AuthSession.main(AuthSession.java:36)
Exception in thread "main" com.sun.identity.common.L10NMessageImpl: Error occurred while creating SSOToken.
     at com.sun.identity.authentication.AuthContext.getSSOToken(AuthContext.java:1074)
     at AuthSession.getSSOToken(AuthSession.java:77)
     at AuthSession.getCookieId(AuthSession.java:70)
     at AuthSession.main(AuthSession.java:36)
It's strange that it can be succeeded to invoke authContext.getAuthIdentifier(), while failed to getSSOToken().getTokenID().toString().