Weblogic 12c on Mac OS X: Cannot build SAMLSSO sample

Question

I'm trying to build the SAML sample which comes with WLS 12c (/Oracle/Middleware/wlserver_12.1/samples/server/examples/src/examples/security/samlsso). I'd like to create both a SAML 2.0 IdP and SP and test them before I attempt to integrate a 3rd party IdP with WLS as SP. I'm following the instructions found at /Oracle/Middleware/wlserver_12.1/samples/server/index.html which indicate I should do the following:
Create and configure the IdP domain: ant prepareIdentityProviderServer
Create and configure the SP domain: ant prepareServiceProviderServer
In both cases the domains are creates, the server starts and I see the configIDPServer (and configSPServer) being called. In the case of the IdP I see the following, correct, output:
configIDPServer:
[wlst]
[wlst] +++++ Properties passed to script +++++
[wlst]
[wlst] adminUser: weblogic
[wlst] adminPwd: welcome1
[wlst] adminURL: t3://localhost:7003
[wlst] preferredBinding: HTTP/POST
[wlst] ssoServerName: examplesServer
[wlst] entityID: http://localhost:7003/idpentityid
[wlst] publishedSiteURL: http://localhost:7003/saml2
[wlst] loginURL: http://localhost:7003/loginapp/loginapp.jsp
[wlst] ssoSigningKeyAlias: idpSSOSigningKeyAlias
[wlst] ssoSigningKeyPassPhrase: idpSSOSigningKeyPassPhrase
[wlst] sport: 7004
[wlst] customTrustKeyStoreFileName: /Users/dgrstl/Oracle/Middleware/wlserver_12.1/samples/server/examples/src/examples/security/samlsso/samlattr-cert/idpTrust.jks
[wlst] customTrustKeyStorePassPhrase: idpTrustKeyStorePassPhrase
[wlst] customIdentityKeyStoreFileName: /Users/dgrstl/Oracle/Middleware/wlserver_12.1/samples/server/examples/src/examples/security/samlsso/samlattr-cert/idpIdentity.jks
[wlst] customIdentityKeyStorePassPhrase: idpIdentityKeyStorePassPhrase
[wlst] serverPrivateKeyAlias: idpServerKeyAlias
[wlst] serverPrivateKeyPassPhrase: idpServerKeyPassPhrase
[wlst] replicatedCacheEnabled: false
[wlst] credentialMapperName: saml2cm
[wlst] KeyStoresName: CustomIdentityAndCustomTrust
[wlst]
[wlst] +++++ Properties passed to script +++++
[wlst]
[wlst] Connecting to t3://localhost:7003 with userid weblogic ...
At this point I should be able to connect to http://localhost:7003/console but cannot (I do see an active listening port open on 7003). After 4 minutes the WLST times out with the following error:
[wlst] WLST lost connection to the WebLogic Server that you were
[wlst] connected to, this may happen if the server was shutdown or
[wlst] partitioned. You will have to re-connect to the server once the
[wlst] server is available.
[wlst]
[wlst] WLST detected that the RuntimeMBeanServer is not enabled. This
[wlst] might happen if the RuntimeMBeanServer is disabled via the JMXMBean.
[wlst] Please ensure that this MBeanServer is enabled. Online WLST cannot
[wlst] function without this MBeanServer.
[wlst] Disconnected from weblogic server: examplesServer
[wlst] Traceback (innermost last):
[wlst] File "/Users/dgrstl/Oracle/Middleware/wlserver_12.1/samples/server/examples/src/examples/security/samlsso/scripts/saml20cfg/IdP_configSite.py", line 50, in ?
[wlst] Exception in thread "main" java.lang.IllegalStateException: Traceback (innermost last):
[wlst] File "<iostream>", line 22, in connect
[wlst] File "/Users/dgrstl/Oracle/Middleware/wlserver_12.1/samples/server/examples/src/examples/security/samlsso/scripts/saml20cfg/IdP_configSite.py", line 50, in ?
[wlst] File "<iostream>", line 648, in raiseWLSTException
[wlst] File "<iostream>", line 22, in connect
[wlst] WLSTException: Error occured while performing connect : "Cannot connect to WLST." : No message was received for: '240' seconds
[wlst] Use dumpStack() to view the full stacktrace
[wlst]
[wlst] File "<iostream>", line 648, in raiseWLSTException
[wlst] WLSTException: Error occured while performing connect : "Cannot connect to WLST." : No message was received for: '240' seconds
[wlst] Use dumpStack() to view the full stacktrace
[wlst]
[wlst]      at weblogic.management.scripting.WLSTInterpreterInvoker.printError(WLSTInterpreterInvoker.java:146)
[wlst]      at weblogic.management.scripting.WLSTInterpreterInvoker.executePyScript(WLSTInterpreterInvoker.java:111)
[wlst]      at weblogic.management.scripting.WLSTInterpreterInvoker.main(WLSTInterpreterInvoker.java:30)
BUILD FAILED
Is this sample broken? Any ideas on what the problem could be? I should note that I can manually start the server from a new command shell, connect to the console, etc. so the domain seems fine except when started from WLST.

Answer 1

I was able to work around this by modifying the prepareServers.xml ant import. Specifically I did the following:
1. Setup the environment
2. ant prepareIdentityProviderServer
3. Server started, killed the script
4. Repeated 2-4 for the SP
5. Modified the prepareServerController target in prepareServers.xml by commenting out the ant-call target="stopServer" and target="createServer"
6. ant prepareIdentityProviderServer (which remarkably worked despite needing to stop and restart the server with the same startServer target)
7. ant prepareServiceProviderServer
Could this be a bug in the wlserver task? startServer looks like this (hangs when it has to create a domain, works fine when a domain already exists)
<target name="startServer">
<echo message="*****************************************" />
<echo message="Starting WLS......" />
<echo message="*****************************************" />
<property name="generateConfig" value="true" />
<property name="customNameMapperLib" value="" />
<property name="extra-server-verbose" value="" />
<property name="sleepHours" value="${spServerSleep}" />
<property name="wls-min-stack" value="512m" />
<property name="wls-max-stack" value="512m" />
<wlserver dir="${domainDir}" servername="${serverName}" host="${host}" port="${port}" generateConfig="${generateConfig}" username="${username}" password="${password}" action="start">
<jvmarg line="-ms${wls-min-stack} -mx${wls-max-stack} -XX:MaxPermSize=128m -DCommonSecurityEnabled=true ${extra-server-verbose}" />
<classpath>
<pathelement location="${wl.home}/server/lib/weblogic.jar"/>
<pathelement location="${customNameMapperLib}"/>
</classpath>
</wlserver>
<sleep hours="${sleepHours}" />
</target>