Unable to authenticate Relay user. Multiple authentication exceptions.

Unable to authenticate Relay user. Multiple authentication exceptions.

When applying a password policy or login policy, customer’s stand-alone relay(s) will not load properly. They are giving an Unable to authenticate Relay user error. 

ERROR (12/03) 15:05:42 [com.stoneware.service.application.Relay[relay-SWRelay1]]: Unable to authenticate Relay user. 
com.stoneware.server.auth.AuthenticatorException: Multiple authentication exceptions. 
at com.stoneware.kernel.level2.CoreService$CoreServiceImpl.a(Noseeum:646) 
at com.stoneware.kernel.level2.CoreService$CoreServiceImpl.authenticate(Noseeum:537) 
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) 
at java.lang.reflect.Method.invoke(Unknown Source) 
at sun.rmi.server.UnicastServerRef.dispatch(Unknown Source) 
at sun.rmi.transport.Transport$1.run(Unknown Source) 
at java.security.AccessController.doPrivileged(Native Method) 
at sun.rmi.transport.Transport.serviceCall(Unknown Source) 
at sun.rmi.transport.tcp.TCPTransport.handleMessages(Unknown Source) 
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run0(Unknown Source) 
at sun.rmi.transport.tcp.TCPTransport$ConnectionHandler.run(Unknown Source) 
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source) 
at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source) 
at java.lang.Thread.run(Unknown Source) 
at sun.rmi.transport.StreamRemoteCall.exceptionReceivedFromServer(Unknown Source) 
at sun.rmi.transport.StreamRemoteCall.executeCall(Unknown Source) 
at sun.rmi.server.UnicastRef.invoke(Unknown Source) 
at com.stoneware.kernel.level2.PortalService$PortalServiceImpl_Stub.authenticate(Unknown Source) 
at com.stoneware.beans.a.f.authenticate(Noseeum:76) 
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) 
at java.lang.reflect.Method.invoke(Unknown Source) 
at com.stoneware.beans.a.d.invoke(Noseeum:67) 
at $Proxy7.authenticate(Unknown Source) 
at com.stoneware.beans.CoreServicesBean.authenticate(Noseeum:260) 
at com.stoneware.relay.managers.RelayManager.a(Noseeum:712) 
at com.stoneware.relay.managers.RelayManager.getServerSession(Noseeum:628) 
at com.stoneware.relay.managers.e.a(Noseeum:179) 
at com.stoneware.relay.managers.RelayManager.getRelayConfiguration(Noseeum:232) 
at com.stoneware.jetty.RelayImpl.startup(Noseeum:117) 
at com.stoneware.kernel.b.e.c(Noseeum:209) 
at com.stoneware.kernel.a.f(Noseeum:170) 
at com.stoneware.kernel.f.a(Noseeum:795) 
at com.stoneware.kernel.f.e(Noseeum:447) 
at com.stoneware.kernel.StonewareLoader.(Noseeum:123) 
at com.stoneware.kernel.StonewareLoader.main(Noseeum:157) 
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) 
at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) 
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) 
at java.lang.reflect.Method.invoke(Unknown Source) 
at com.zerog.lax.LAX.launch(DashoA10*..) 
at com.zerog.lax.LAX.main(DashoA10*..)



The customer has multiple Stoneware licenses available for download (one for each licensed loader) and had downloaded and installed a separate license on each loader. 

Part of the relay user authentication at startup involves hashing the license file on the relay and loader, then comparing the hashes. If the hashes match, it is assumed that the relay user is authenticating during start-up and therefore the policies are not applied. If the hashes do not match, it is assumed the relay user is logging in from a browser and the policies are applied. 

For this reason, a customer will need to download only one of their available license files and install it on all their servers. 

Customers see multiple license files available for download purely for book keeping purposes, as some customers prefer to have something physical to reflect each purchase they have made.

    • Related Articles

    • Unable to start Relay Service

      Question: The Relay Service will not start on the server.  The /stoneware/config/webNetworkTrace.log file shows the following FATAL errors: FATAL (06/16) 09:09:57 [com.stoneware.server.Kernel](Thread Thread-97): Unable to start service: ...
    • Unable to authenticate admin user - Illegal key size

      This means that the user is using a Java encryption level that does not match the license file being used.  This can happen if a different version of Java is being used other than what is shipped with webNetwork.  If this is the case then you have to ...
    • Debug relay startup problems.

      1) If you have your loaders clustered, make sure the cluster status is in sync by using the 8090 management console and checking the cluster status. 2) Use the 8090 console on the relay to turn on com.stoneware.client.stonewareclient debug.  When the ...
    • Relay Central profile synchronization

      If you are having issues with Relay Central synchronization profile changes/customizations, please try the following. To verify that the relay is pulling files from the Relay Central Server: In webAdmin, verify that all the other relays are ...
    • User profile does not finish loading if user has no assigned links

      Symptoms: Users trying to authenticate to UW are getting stuck with the profile loading animation. For the SCA profile, this is the filling cloud animation. For the Universal Profile, this is the spinning cursor animation. Older Profiles, such as the ...
    • Popular Articles

    • Old Browser Versions

      Question: I am using an older browser version and am having problems. What can be done ? We are not able to upgrade the browser at this time.   This is a challenge for any company that makes software that utilizes a browser. Since Stoneware does not ...
    • LCS Redirection

      Problem: How to redirect the LCS in an environment with multiple LCSs and students connecting to them. Solution(s): Create an allow.cfg on all LCS(s) (including the Master) in the network, however, even if no allow.cfg is present on an LCS, machines ...
    • Time windows allows for Service Shutdown

      Issue: Can the time windows gives a service to shut down before it kills the service be increased? Solution: Yes, the following information comes from the Microsoft URL : http://support.microsoft.com/kb/146092 To specify the wait time, do the ...
    • How to disable password saving - Internet Explorer

      Having multiple methods for saving a password in the browser can cause confusion for the user.   To disable password saving in Internet Explorer, launch Internet Explorer and perform the following steps. Click the blue Settings menu icon in the upper ...
    • How to disable password saving - Chrome

      Having multiple methods for saving a password in the browser can cause confusion for the user.  To disable password saving in Chrome, launch Chrome and perform the following steps. Click the Chrome menu button in the upper right corner of the Chrome ...
    • Recent Articles

    • SAML Service Provider

      Issue How can I use a 3rd Party service (such as ADFS, Office365, or OneLogin) to SSO into UW? Solution The SAML Service Provider (SP) features allows another Identity Provider (IDP) to single sign-on into Unified Workspace using SAML for a seamless ...
    • Lenovo Unified Workspace 7.0.0.63 Released

      Highlights of Unified Workspace 7.0.0.63 Before you install: Please view the installation notes here. 7.0.0.63 Requires new 7.0 license file. Below is a list of enhancements and fixes for Unified Workspace 7.0.0.63 New Profile Style New Login ...
    • How to fix customized login and profile after upgrading to v7.0

      With the release of 7.0 the default login page has been modified to simplify the customization process.  If you are having an issue with the login page not displaying, after upgrading to v7.0, you will need to delete the custom CSS code and start ...
    • SAML SP - Sync Directory Password

      Login script to prompt for directory password Since the user does not login into Unified Workspace with a password, we cannot capture the password to use in the @@password@@ variable.  If you would like to use the Active Directory password for other ...
    • MySQL 8 SSL

      Issue Admin is making a database connection to a MySQL 8 database.  When clicking the Ping button on the DB Connection object, the following error is presented: WARN: Establishing SSL connection without server's identity verification is not ...