IDM login throws exception with credentials in header

If a request to the IDMLogin portlet contains a populated http Authorization:
header,http://hostname:port/IDM/portal/protlet/IDMLoginPortlet, the
IDMLoginPortlet returns to the browser a Status Code 500, unhandled Java
exception in com.novell.afw.portal.exception.EboPortletActionException:
PortletContainerImpl: failed to run the portlet: 'IDMLoginPortlet'.
Products such as Novell Access Manager, Novell iChain or others typically
populate the Authorization: header for SSO purposes.

This has been reported as a bug in Novell Identity Manager 3.0.1.

This problem has been fixed in Novell Identity Manager 3.5.0.

Detailed exception info:

com.novell.afw.portal.exception.EboPortletActionException:

PortletContainerImpl: failed to run the portlet: 'IDMLoginPortlet'.

at

com.novell.afw.portal.aggregation.EboPortalAggregationHelper.handlePortletActionException(EboPortalAggregationHelper.java:2107)

at

com.novell.afw.portal.aggregation.EboPortalAggregationControllerImpl.checkAndHandleActionURLType(EboPortalAggregationControllerImpl.java:2409)

at

com.novell.afw.portal.aggregation.EboPortalAggregationControllerImpl.initiateRendering(EboPortalAggregationControllerImpl.java:1621)

at

com.novell.afw.portal.aggregation.EboPortalAggregationControllerImpl.initiateRendering(EboPortalAggregationControllerImpl.java:1501)

at

com.novell.afw.portal.aggregation.EboPortalAggregationControllerImpl.renderPortalResponse(EboPortalAggregationControllerImpl.java:1065)

at

com.novell.afw.portal.aggregation.EboPortalAggregationServlet.handlePortletRequest(EboPortalAggregationServlet.java:597)

at

com.novell.afw.portal.aggregation.EboPortalAggregationServlet.callService(EboPortalAggregationServlet.java:338)

at

com.novell.afw.portal.aggregation.EboPortalAggregationServlet.doGet(EboPortalAggregationServlet.java:127)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:697)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:810)

at

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)

at

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

at

com.novell.afw.portal.l18n.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:145)

at

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)

at

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

at

com.novell.afw.portal.xforms.EboXFormClientDetectionFilter.doFilter(EboXFormClientDetectionFilter.java:101)

at

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)

at

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

at

org.jboss.web.tomcat.filters.ReplyHeaderFilter.doFilter(ReplyHeaderFilter.java:81)

at

org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)

at

org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)

at

org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)

at

org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)

at

org.jboss.web.tomcat.security.CustomPrincipalValve.invoke(CustomPrincipalValve.java:39)

at

org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:159)

at

org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:59)

at

org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)

at

org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)

at

org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)

at

org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)

at

org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:856)

at

org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.processConnection(Http11Protocol.java:744)

at

org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)

at
org.apache.tomcat.util.net.MasterSlaveWorkerThread.run(MasterSlaveWorkerThread.java:112)

at java.lang.Thread.run(Unknown Source)

Caused by: com.sssw.fw.exception.EboRuntimeException: PortletContainerImpl:

failed to run the portlet: 'IDMLoginPortlet'.

at

com.novell.afw.portlet.core.EboPortletContainer.processOperation(EboPortletContainer.java:650)

at

com.novell.afw.portlet.core.EboPortletContainer.processOperation(EboPortletContainer.java:548)

at

com.novell.afw.portlet.core.EboPortletContainer.performBlockingInteraction(EboPortletContainer.java:209)

at

com.novell.afw.portlet.consumer.core.EboPortletConsumerContainer.processOperation(EboPortletConsumerContainer.java:298)

at

com.novell.afw.portlet.consumer.core.EboPortletConsumerContainer.performBlockingInteraction(EboPortletConsumerContainer.java:154)

at

com.novell.afw.portal.proxy.EboPortletContainerProxy.performBlockingInteraction(EboPortletContainerProxy.java:177)

at

com.novell.afw.portal.aggregation.EboPortletProxyHelper.callPortletActionRequest(EboPortletProxyHelper.java:518)

at

com.novell.afw.portal.aggregation.EboPortalAggregationControllerImpl.checkAndHandleActionURLType(EboPortalAggregationControllerImpl.java:2382)

... 33 more

Caused by: java.lang.NullPointerException

at

com.novell.afw.portal.aggregation.EboPortletAPIHelper.getDefaultPortletInstanceID(EboPortletAPIHelper.java:760)

at
com.novell.afw.portal.aggregation.EboPortalAggregationURLHelper.getPortalQueryParamsInternal(EboPortalAggregationURLHelper.java:570)

at

com.novell.afw.portal.aggregation.EboPortalAggregationURLHelper.getPortalQueryParams(EboPortalAggregationURLHelper.java:640)

at

com.novell.afw.portal.aggregation.EboPortalAggregationURLHelper.getPortalPortletAdvancedURL(EboPortalAggregationURLHelper.java:467)

at

com.novell.afw.portal.aggregation.EboPortalAggregationURLHelper.getPortalPortletRenderURL(EboPortalAggregationURLHelper.java:388)

at

com.novell.srvprv.impl.portlet.core.PasswordHelper.getRedirectDelegateURL(PasswordHelper.java:363)

at

com.novell.srvprv.impl.portlet.core.PasswordHelper.delegateRedirect(PasswordHelper.java:305)

at

com.novell.srvprv.impl.portlet.core.IDMLoginPortlet.loginUser(IDMLoginPortlet.java:1364)

at

com.novell.srvprv.impl.portlet.core.IDMLoginPortlet.processAction(IDMLoginPortlet.java:537)

at

com.novell.afw.portlet.core.EboPortletContainer.processOperation(EboPortletContainer.java:636)

... 40 more