Page 1 of 1

Authentication problem with Windows Insight v5.12

PostPosted: Fri Nov 13, 2015 2:14 pm
by mattc
Hi,

we're having authentication problems with the Windows Insight client v 5.12. Mac and Linux clients connect as normal but the Windows Insight gives a login failure. In omeroinsight.log it shows:

OMERO address: jic_omero
User Name: an_other -- Password: ************
org.openmicroscopy.shoola.env.data.DSOutOfServiceException: Can't connect to OMERO. OMERO info not valid.

Ice.SecurityException
reason = "IceSSL: handshake error"
at IceInternal.ConnectRequestHandler.getConnection(ConnectRequestHandler.java:244)
at IceInternal.ConnectRequestHandler.sendRequest(ConnectRequestHandler.java:141)
at IceInternal.Outgoing.invoke(Outgoing.java:77)
at Ice._ObjectDelM.ice_isA(_ObjectDelM.java:33)
at Ice.ObjectPrxHelperBase.ice_isA(ObjectPrxHelperBase.java:98)
at Ice.ObjectPrxHelperBase.ice_isA(ObjectPrxHelperBase.java:61)
at Glacier2.RouterPrxHelper.checkedCast(RouterPrxHelper.java:2262)
at omero.client.getRouter(client.java:783)
at omero.client.createSession(client.java:706)
at org.openmicroscopy.shoola.env.data.OMEROGateway.createSession(OMEROGateway.java:1857)
at org.openmicroscopy.shoola.env.data.DataServicesFactory.connect(DataServicesFactory.java:559)
at org.openmicroscopy.shoola.env.data.login.LoginServiceImpl.attempt(LoginServiceImpl.java:134)
at org.openmicroscopy.shoola.env.data.login.LoginServiceImpl.login(LoginServiceImpl.java:261)
at org.openmicroscopy.shoola.env.data.login.LoginManager.login(LoginManager.java:98)
at org.openmicroscopy.shoola.env.init.SplashScreenInit.onEnd(SplashScreenInit.java:180)
at org.openmicroscopy.shoola.env.init.Initializer.notifyEnd(Initializer.java:189)
at org.openmicroscopy.shoola.env.Container.runStartupProcedure(Container.java:125)
at org.openmicroscopy.shoola.env.Container.access$000(Container.java:74)
at org.openmicroscopy.shoola.env.Container$1.run(Container.java:170)
at java.lang.Thread.run(Unknown Source)
Caused by: javax.net.ssl.SSLHandshakeException: DHPublicKey does not comply to algorithm constraints
at sun.security.ssl.Handshaker.checkThrown(Unknown Source)
at sun.security.ssl.SSLEngineImpl.checkTaskThrown(Unknown Source)
at sun.security.ssl.SSLEngineImpl.readNetRecord(Unknown Source)
at sun.security.ssl.SSLEngineImpl.unwrap(Unknown Source)
at javax.net.ssl.SSLEngine.unwrap(Unknown Source)
at IceSSL.TransceiverI.handshakeNonBlocking(TransceiverI.java:543)
at IceSSL.TransceiverI.initialize(TransceiverI.java:109)
at Ice.ConnectionI.initialize(ConnectionI.java:1933)
at Ice.ConnectionI.message(ConnectionI.java:1084)
at IceInternal.ThreadPool.run(ThreadPool.java:321)
at IceInternal.ThreadPool.access$300(ThreadPool.java:12)
at IceInternal.ThreadPool$EventHandlerThread.run(ThreadPool.java:693)
... 1 more
Caused by: javax.net.ssl.SSLHandshakeException: DHPublicKey does not comply to algorithm constraints
at sun.security.ssl.DHCrypt.checkConstraints(Unknown Source)
at sun.security.ssl.ClientHandshaker.serverKeyExchange(Unknown Source)
at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
at sun.security.ssl.Handshaker.processLoop(Unknown Source)
at sun.security.ssl.Handshaker$1.run(Unknown Source)
at sun.security.ssl.Handshaker$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at sun.security.ssl.Handshaker$DelegatedTask.run(Unknown Source)
at IceSSL.TransceiverI.handshakeNonBlocking(TransceiverI.java:530)
... 7 more

at org.openmicroscopy.shoola.env.data.OMEROGateway.createSession(OMEROGateway.java:1878)
at org.openmicroscopy.shoola.env.data.DataServicesFactory.connect(DataServicesFactory.java:559)
at org.openmicroscopy.shoola.env.data.login.LoginServiceImpl.attempt(LoginServiceImpl.java:134)
at org.openmicroscopy.shoola.env.data.login.LoginServiceImpl.login(LoginServiceImpl.java:261)
at org.openmicroscopy.shoola.env.data.login.LoginManager.login(LoginManager.java:98)
at org.openmicroscopy.shoola.env.init.SplashScreenInit.onEnd(SplashScreenInit.java:180)
at org.openmicroscopy.shoola.env.init.Initializer.notifyEnd(Initializer.java:189)
at org.openmicroscopy.shoola.env.Container.runStartupProcedure(Container.java:125)
at org.openmicroscopy.shoola.env.Container.access$000(Container.java:74)
at org.openmicroscopy.shoola.env.Container$1.run(Container.java:170)
at java.lang.Thread.run(Unknown Source)
Caused by: Ice.SecurityException
reason = "IceSSL: handshake error"
at IceInternal.ConnectRequestHandler.getConnection(ConnectRequestHandler.java:244)
at IceInternal.ConnectRequestHandler.sendRequest(ConnectRequestHandler.java:141)
at IceInternal.Outgoing.invoke(Outgoing.java:77)
at Ice._ObjectDelM.ice_isA(_ObjectDelM.java:33)
at Ice.ObjectPrxHelperBase.ice_isA(ObjectPrxHelperBase.java:98)
at Ice.ObjectPrxHelperBase.ice_isA(ObjectPrxHelperBase.java:61)
at Glacier2.RouterPrxHelper.checkedCast(RouterPrxHelper.java:2262)
at omero.client.getRouter(client.java:783)
at omero.client.createSession(client.java:706)
at org.openmicroscopy.shoola.env.data.OMEROGateway.createSession(OMEROGateway.java:1857)
... 10 more
Caused by: javax.net.ssl.SSLHandshakeException: DHPublicKey does not comply to algorithm constraints
at sun.security.ssl.Handshaker.checkThrown(Unknown Source)
at sun.security.ssl.SSLEngineImpl.checkTaskThrown(Unknown Source)
at sun.security.ssl.SSLEngineImpl.readNetRecord(Unknown Source)
at sun.security.ssl.SSLEngineImpl.unwrap(Unknown Source)
at javax.net.ssl.SSLEngine.unwrap(Unknown Source)
at IceSSL.TransceiverI.handshakeNonBlocking(TransceiverI.java:543)
at IceSSL.TransceiverI.initialize(TransceiverI.java:109)
at Ice.ConnectionI.initialize(ConnectionI.java:1933)
at Ice.ConnectionI.message(ConnectionI.java:1084)
at IceInternal.ThreadPool.run(ThreadPool.java:321)
at IceInternal.ThreadPool.access$300(ThreadPool.java:12)
at IceInternal.ThreadPool$EventHandlerThread.run(ThreadPool.java:693)
... 1 more
Caused by: javax.net.ssl.SSLHandshakeException: DHPublicKey does not comply to algorithm constraints
at sun.security.ssl.DHCrypt.checkConstraints(Unknown Source)
at sun.security.ssl.ClientHandshaker.serverKeyExchange(Unknown Source)
at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
at sun.security.ssl.Handshaker.processLoop(Unknown Source)
at sun.security.ssl.Handshaker$1.run(Unknown Source)
at sun.security.ssl.Handshaker$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at sun.security.ssl.Handshaker$DelegatedTask.run(Unknown Source)
at IceSSL.TransceiverI.handshakeNonBlocking(TransceiverI.java:530)
... 7 more
Exception in thread "Initializer"

Do you have any advice?

Thanks,

Matt.

Re: Authentication problem with Windows Insight v5.12

PostPosted: Sun Nov 15, 2015 9:36 pm
by sbesson
Hi Matt,

the error from you omeroinsight.log looks similar the Java security issue explained in this blog post. Do you know which version of the server are you running against? If the server is OMERO 5.1.2 or below, you should likely contact your system administrator and ask to upgrade it to a more recent version of OMERO containing the security fix.

Best,
Sebastien