kborecky1 Absent Member.
Absent Member.
1035 views

Updated to v3.3, now get 5081 ERROR_NO_PROFILE_ASSIGNED


Hello all,

I just updated my [new] SSPR installation to v3.3, and now I am stuck in
a loop. I can't log in anymore because it is giving me this error:


No profile is assigned for this operation.

5081 ERROR_NO_PROFILE_ASSIGNED (no challenge profile is
configured)

(It also gives a red warning error that it can't read the policy for the
configured test user.)

In the previous version, there were challenge questions you could
configure through SSPR (instead of using eDir ones) but now I don't see
anything like that option. We don't even want to *use* challenge sets,
but at least before all it did was complain that the test user didn't
have any responses configured.

I can't even see how the updated Forgotten Password module looks,
because (it says) 'public services are not available while configuration
is open.' But I can't lock the configuration any more because it says I
need to log in to do that, but it won't let me log in.

In desperation, I tried configuring a very minimal challenge set in the
UP policy, and in the SSPR configuration I enabled 'read eDirectory
challenge sets" but it hasn't helped at all. The PwmProxy user has read
and compare to the Password Policy container.

So, in addition to wanting to shoot myself, I have these questions for
anyone who can help:

1. What happened to the SSPR challenge question page?

2. Why didn't my saved configuration (from the previous version) carry
over in this respect? (Possibly a theoretical question.)

3. Is it even possible to just use the 'send token/email/OTP' and the
associated required attributes *without *using a challenge set? the
configuration seems to imply it is - at least on that page - but then
why is it giving me this insistent error?

Things were going so smoothly before I updated 😞

Thanks for any help -
Karla B
Smith College
Massachusetts, USA


--
kborecky
------------------------------------------------------------------------
kborecky's Profile: https://forums.netiq.com/member.php?userid=6280
View this thread: https://forums.netiq.com/showthread.php?t=54098

0 Likes
6 Replies
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Updated to v3.3, now get 5081 ERROR_NO_PROFILE_ASSIGNED

Karla,

First, you can turn off editing mode manually by doing to the tomcat
directory, then webapps/sspr/WEB-INF/ and modify the SSPRConfiguration.xml
file. Near the top is a parameter about the config being editable.
Change that to 'false' and now you're in non-editable-config mode. The
application will auto-reload... just give it about ten to twenty seconds.

I hit a similar profile error when I used a user outside of the base
context for the rest of SSPR. I have yet to duplicate it and report it,
but now I guess I have a better reason to do so. When you get that error,
try this little hack. Up in the address bar, your URL should be ending
with something like '/Login'. See if you can remove that and then get a
little farther along. In my case, I had the error, went back to the login
page, but taking that portion of the address off let me in (assuming I had
authenticated properly) as the user after all. I could not find any
security holes with that (or I would not tell you about it) but it seemed
to at least let my user in despite the profile error.

When you install a new version one of the options should be to let you
upload your old configuration file. Did you do that, or were you doing
something else to upgrade? If you did not do that, you're basically in a
brand new system. You should still be able to upload a configuration file
from the Configuration Manager page, though.

I think it's possible to use those other methods only, but I have not
finished
--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
kborecky1 Absent Member.
Absent Member.

Re: Updated to v3.3, now get 5081 ERROR_NO_PROFILE_ASSIGNED


I tried assigning a policy explicitly to my test user, and no
complaints. So could it be that it can't calculate what policy applies
when it is applied to an OU, and not to individual users? Maybe
something is wrong with my tree.


--
kborecky
------------------------------------------------------------------------
kborecky's Profile: https://forums.netiq.com/member.php?userid=6280
View this thread: https://forums.netiq.com/showthread.php?t=54098

0 Likes
kborecky1 Absent Member.
Absent Member.

Re: Updated to v3.3, now get 5081 ERROR_NO_PROFILE_ASSIGNED


Well, I was wrong. Sometimes it comes up without a warning, sometimes it
comes up with a warning. Every time I think I have it fixed, the next
time I get into it, it's complaining.

The last thing I did that "fixed" it was to add LDAP attributes required
by the forgotten password - I didn't realize that part of my previous
configuration didn't carry over. It seemed happy but then after a
while, no. I can't even log into the administrator console because it
gives this "No profile is assigned for this operation" error.

I did notice in the last version the program restart (after saving a
configuration change) didn't seem to re-connect to LDAP properly so I
had to restart tomcat manually.

If anyone has any ideas, I'd appreciate hearing them. Otherwise, I might
have to re-install the old version. I just don't know what it wants.


System configuration:

Oracle Linux 7
SSPR v3.3 b98 r38597
tomcat 7.0.54
java 1.8.0
ldap = edir 8.8.7 (yes, I am working on upgrading to 8.8.8)


Thanks for any help -
Karla B


--
kborecky
------------------------------------------------------------------------
kborecky's Profile: https://forums.netiq.com/member.php?userid=6280
View this thread: https://forums.netiq.com/showthread.php?t=54098

0 Likes
Knowledge Partner Knowledge Partner
Knowledge Partner

Re: Updated to v3.3, now get 5081 ERROR_NO_PROFILE_ASSIGNED

Could you post your current SSPRConfiguration.xml file somewhere? Note
that it probably has encrypted credentials within, so maybe okay for a
test environment, but less-so for production (assuming credentials are
different as they should be), even though they are encrypted.


--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Knowledge Partner
Knowledge Partner

Re: Updated to v3.3, now get 5081 ERROR_NO_PROFILE_ASSIGNED

On 8/20/2015 8:44 AM, kborecky wrote:
>
> Well, I was wrong. Sometimes it comes up without a warning, sometimes it
> comes up with a warning. Every time I think I have it fixed, the next
> time I get into it, it's complaining.
>
> The last thing I did that "fixed" it was to add LDAP attributes required
> by the forgotten password - I didn't realize that part of my previous
> configuration didn't carry over. It seemed happy but then after a
> while, no. I can't even log into the administrator console because it
> gives this "No profile is assigned for this operation" error.
>
> I did notice in the last version the program restart (after saving a
> configuration change) didn't seem to re-connect to LDAP properly so I
> had to restart tomcat manually.
>
> If anyone has any ideas, I'd appreciate hearing them. Otherwise, I might
> have to re-install the old version. I just don't know what it wants.
>
>
> System configuration:
>
> Oracle Linux 7
> SSPR v3.3 b98 r38597
> tomcat 7.0.54
> java 1.8.0
> ldap = edir 8.8.7 (yes, I am working on upgrading to 8.8.8)


/opt/netiq/idm/apps/tomcat/webapps/sspr/WEB-INF (or wherever your Tomcat
install is) is the SSPRConfiguration.xml file. If you have a backup of
your old one, try backing up the current and copying your old one here...



0 Likes
kborecky1 Absent Member.
Absent Member.

Re: Updated to v3.3, now get 5081 ERROR_NO_PROFILE_ASSIGNED


Found the problem. I had exported then re-imported my previous
configuration (as advised in the upgrade instructions.) Not good. I
assume my previous version was too far out? I reconfigured it from
scratch and that fixed it.


--
kborecky
------------------------------------------------------------------------
kborecky's Profile: https://forums.netiq.com/member.php?userid=6280
View this thread: https://forums.netiq.com/showthread.php?t=54098

0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.