Adobe Experience Manager Sites & More

aemanonymous · 8/2/16

I have tried installing a users and user groups package created from 5.6.1 onto AEM 6.2 with below filter definition. While installing, it threw org.apache.jackrabbit.vault.packaging.PackageException: javax.jcr.nodetype.ConstraintViolationException: OakConstraint0027: The admin user cannot be removed.

Then I modified the above filter like below and created the package from 5.6.1 and deployed it in 6.2 and my AEM 6.2 repository crashed.

Now only the web console is available. I am not able to access the repository after installing the updated package. Could anyone please let me know if I can restore the repository somehow as i would like to get back the contents.

I am getting the below stacktrace. I tried things like offline compaction using oak run tool, removed the index directory etc. but nothing worked.

02.08.2016 14:17:19.306 *ERROR* [qtp1264302152-110] org.apache.sling.engine.impl.SlingHttpContext handleSecurity: AuthenticationSupport service missing. Cannot authenticate request.
02.08.2016 14:17:19.306 *ERROR* [qtp1264302152-110] org.apache.sling.engine.impl.SlingHttpContext handleSecurity: Possible reason is missing Repository service. Check AuthenticationSupport dependencies.
02.08.2016 14:17:20.481 *ERROR* [qtp1264302152-113] org.apache.felix.http.jetty Exception while processing request to /system/console/bundles (java.lang.NullPointerException)
java.lang.NullPointerException: null
at org.apache.felix.webconsole.internal.servlet.OsgiManager.ensureLocaleCookieSet(OsgiManager.java:502)
at org.apache.felix.webconsole.internal.servlet.OsgiManager.service(OsgiManager.java:561)
at org.apache.felix.webconsole.internal.servlet.OsgiManager$3.run(OsgiManager.java:465)
at java.security.AccessController.doPrivileged(Native Method)
at org.apache.felix.webconsole.internal.servlet.OsgiManager.service(OsgiManager.java:461)
at org.apache.felix.http.base.internal.handler.ServletHandler.handle(ServletHandler.java:85)
at org.apache.felix.http.base.internal.dispatch.InvocationChain.doFilter(InvocationChain.java:79)
at com.adobe.granite.license.impl.LicenseCheckFilter.doFilter(LicenseCheckFilter.java:308)
at org.apache.felix.http.base.internal.handler.FilterHandler.handle(FilterHandler.java:135)
at org.apache.felix.http.base.internal.dispatch.InvocationChain.doFilter(InvocationChain.java:74)
at org.apache.felix.http.sslfilter.internal.SslFilter.doFilter(SslFilter.java:89)
at org.apache.felix.http.base.internal.handler.FilterHandler.handle(FilterHandler.java:135)
at org.apache.felix.http.base.internal.dispatch.InvocationChain.doFilter(InvocationChain.java:74)
at org.apache.sling.security.impl.ReferrerFilter.doFilter(ReferrerFilter.java:290)
at org.apache.felix.http.base.internal.handler.FilterHandler.handle(FilterHandler.java:135)
at org.apache.felix.http.base.internal.dispatch.InvocationChain.doFilter(InvocationChain.java:74)
at org.apache.sling.i18n.impl.I18NFilter.doFilter(I18NFilter.java:129)
at org.apache.felix.http.base.internal.handler.FilterHandler.handle(FilterHandler.java:135)
at org.apache.felix.http.base.internal.dispatch.InvocationChain.doFilter(InvocationChain.java:74)
at org.apache.sling.featureflags.impl.FeatureManager.doFilter(FeatureManager.java:116)
at org.apache.felix.http.base.internal.handler.FilterHandler.handle(FilterHandler.java:135)
at org.apache.felix.http.base.internal.dispatch.InvocationChain.doFilter(InvocationChain.java:74)
at org.apache.sling.engine.impl.log.RequestLoggerFilter.doFilter(RequestLoggerFilter.java:75)
at org.apache.felix.http.base.internal.handler.FilterHandler.handle(FilterHandler.java:135)
at org.apache.felix.http.base.internal.dispatch.InvocationChain.doFilter(InvocationChain.java:74)
at org.apache.felix.http.base.internal.dispatch.Dispatcher.dispatch(Dispatcher.java:124)
at org.apache.felix.http.base.internal.DispatcherServlet.service(DispatcherServlet.java:61)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:725)
at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:812)
at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:587)
at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:221)
at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1127)
at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:515)
at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:185)
at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1061)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:215)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
at org.eclipse.jetty.server.Server.handle(Server.java:499)
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:311)
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)
at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:544)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
at java.lang.Thread.run(Thread.java:745)
02.08.2016 14:17:20.535 *ERROR* [qtp1264302152-115] org.apache.sling.engine.impl.SlingHttpContext handleSecurity: AuthenticationSupport service missing. Cannot authenticate request.
02.08.2016 14:17:20.535 *ERROR* [qtp1264302152-115] org.apache.sling.engine.impl.SlingHttpContext handleSecurity: Possible reason is missing Repository service. Check AuthenticationSupport dependencies.

aemanonymous · 8/8/16

I've fixed the above issue by using the crx2oak migration utility by following running this. Basically I have created another instance and started it. Then performed the below.

java -jar crx2oak-1.4.2-standalone.jar --include-paths=/content,/apps,/etc --copy-versions=false --copy-orphaned-versions=false Author1/crx-quickstart/repository Author2/crx-quickstart/repository.

I had deleted the repository/index folder and it took sometime for recreating the index in the new server and I had all the content back.

The culprit was the admin user

03.08.2016 16:36:17.140 *ERROR* [FelixStartLevel] com.adobe.granite.repository.impl.SlingRepositoryManager start: Uncaught Throwable trying to access Repository, calling stopRepository()
java.lang.RuntimeException: org.apache.jackrabbit.oak.api.CommitFailedException: OakConstraint0030: Uniqueness constraint violated at path [/] for one of the property in [jcr:uuid] having value 21232f29-7a57-35a7-8389-4a0e4a801fc3

This UUID "21232f29-7a57-35a7-8389-4a0e4a801fc3" corresponds to the admin user.

There could be another better approach out there. Anyways this did the trick for me :)

View solution in original post

Opkar_Gill · 8/2/16

If you do a search on the forums you will see that creating a package for the admin user is not supported in OAK, please try it without the admin user, also probably best to exclude tokens. But a search should bring up the correct information.

Regards

Opkar

aemanonymous · 8/2/16

Opkar Gill wrote...

If you do a search on the forums you will see that creating a package for the admin user is not supported in OAK, please try it without the admin user, also probably best to exclude tokens. But a search should bring up the correct information.

Regards

Opkar

Thanks Opkar for your input. I've created the package excluding the admin user (<exclude pattern="/home/users/a/admin"/> ), but after installing that I am not able to access the repo. Are you referring to the token information for admin or for all the users?

However my real concern is that if it will be possible to get back my instance which is crashed :(

smacdonald2008 · 8/2/16

Have you performed backup of your AEM repo - as discussed here:

https://docs.adobe.com/docs/en/aem/6-2/administer/content/backup-and-restore.html

Backing up the AEM repository is best practice in case something crashes.

aemanonymous · 8/2/16

smacdonald2008 wrote...

Have you performed backup of your AEM repo - as discussed here:

https://docs.adobe.com/docs/en/aem/6-2/administer/content/backup-and-restore.html

Backing up the AEM repository is best practice in case something crashes.

unfortunately i have not taken a backup

Opkar_Gill · 8/2/16

I was referring to the token file for all users. What errors are you getting now in error.log?

Regards,

Opkar

kautuk_sahni · 8/3/16

Hi

Please have a look at this community article:- http://www.aemcq5tutorials.com/tutorials/migrate-users-and-groups-with-acl-permissions-in-aem/

// here it covers excluding Tokens and Admin user using Package Manager filter

The thing that Opkar was referring is :- "Rules: /home/users/.*/.tokens"

Please refer to this old forum thread covering same thinkg :- http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manage...

I hope this would help you.

Thanks and Regards

Kautuk Sahni

aemanonymous · 8/3/16

Opkar Gill wrote...

I was referring to the token file for all users. What errors are you getting now in error.log?

Regards,

Opkar

Thanks Opkar. Please find the log below. i am not able to access the repository. Strangely I am not able to access webconsole from Google Chrome and it works only from IE.

03.08.2016 16:36:16.906 *INFO* [FelixStartLevel] com.adobe.granite.repository Service [543, [org.apache.jackrabbit.oak.api.jmx.IndexStatsMBean]] ServiceEvent REGISTERED
03.08.2016 16:36:16.906 *INFO* [FelixStartLevel] com.adobe.granite.repository Service [544, [java.lang.Runnable]] ServiceEvent REGISTERED
03.08.2016 16:36:16.922 *INFO* [FelixStartLevel] com.adobe.granite.repository Service [545, [org.apache.jackrabbit.oak.plugins.index.property.jmx.PropertyIndexAsyncReindexMBean]] ServiceEvent REGISTERED
03.08.2016 16:36:16.922 *INFO* [FelixStartLevel] com.adobe.granite.repository Service [546, [org.apache.jackrabbit.oak.plugins.index.counter.jmx.NodeCounterMBean]] ServiceEvent REGISTERED
03.08.2016 16:36:16.922 *INFO* [FelixStartLevel] com.adobe.granite.repository Service [547, [org.apache.jackrabbit.oak.api.jmx.QueryEngineSettingsMBean]] ServiceEvent REGISTERED
03.08.2016 16:36:17.140 *ERROR* [FelixStartLevel] com.adobe.granite.repository.impl.SlingRepositoryManager start: Uncaught Throwable trying to access Repository, calling stopRepository()
java.lang.RuntimeException: org.apache.jackrabbit.oak.api.CommitFailedException: OakConstraint0030: Uniqueness constraint violated at path [/] for one of the property in [jcr:uuid] having value 21232f29-7a57-35a7-8389-4a0e4a801fc3
   at org.apache.jackrabbit.oak.spi.lifecycle.OakInitializer.initialize(OakInitializer.java:64)
   at org.apache.jackrabbit.oak.Oak.createNewContentRepository(Oak.java:672)
   at org.apache.jackrabbit.oak.Oak.createContentRepository(Oak.java:616)
   at com.adobe.granite.repository.impl.SlingRepositoryManager.createRepository(SlingRepositoryManager.java:410)
   at com.adobe.granite.repository.impl.SlingRepositoryManager.acquireRepository(SlingRepositoryManager.java:272)
   at org.apache.sling.jcr.base.AbstractSlingRepositoryManager.start(AbstractSlingRepositoryManager.java:311)
   at com.adobe.granite.repository.impl.SlingRepositoryManager.activate(SlingRepositoryManager.java:249)
   at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
   at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
   at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
   at java.lang.reflect.Method.invoke(Method.java:497)
   at org.apache.felix.scr.impl.helper.BaseMethod.invokeMethod(BaseMethod.java:222)
   at org.apache.felix.scr.impl.helper.BaseMethod.access$500(BaseMethod.java:37)
   at org.apache.felix.scr.impl.helper.BaseMethod$Resolved.invoke(BaseMethod.java:615)
   at org.apache.felix.scr.impl.helper.BaseMethod.invoke(BaseMethod.java:499)
   at org.apache.felix.scr.impl.helper.ActivateMethod.invoke(ActivateMethod.java:295)
   at org.apache.felix.scr.impl.manager.SingleComponentManager.createImplementationObject(SingleComponentManager.java:302)
   at org.apache.felix.scr.impl.manager.SingleComponentManager.createComponent(SingleComponentManager.java:113)
   at org.apache.felix.scr.impl.manager.SingleComponentManager.getService(SingleComponentManager.java:866)
   at org.apache.felix.scr.impl.manager.SingleComponentManager.getServiceInternal(SingleComponentManager.java:833)
   at org.apache.felix.scr.impl.manager.AbstractComponentManager.activateInternal(AbstractComponentManager.java:724)
   at org.apache.felix.scr.impl.manager.DependencyManager$SingleStaticCustomizer.addedService(DependencyManager.java:954)
   at org.apache.felix.scr.impl.manager.DependencyManager$SingleStaticCustomizer.addedService(DependencyManager.java:915)
   at org.apache.felix.scr.impl.manager.ServiceTracker$Tracked.customizerAdded(ServiceTracker.java:1215)
   at org.apache.felix.scr.impl.manager.ServiceTracker$Tracked.customizerAdded(ServiceTracker.java:1136)
   at org.apache.felix.scr.impl.manager.ServiceTracker$AbstractTracked.trackAdding(ServiceTracker.java:945)
   at org.apache.felix.scr.impl.manager.ServiceTracker$AbstractTracked.track(ServiceTracker.java:881)
   at org.apache.felix.scr.impl.manager.ServiceTracker$Tracked.serviceChanged(ServiceTracker.java:1167)
   at org.apache.felix.scr.impl.BundleComponentActivator$ListenerInfo.serviceChanged(BundleComponentActivator.java:120)
   at org.apache.felix.framework.util.EventDispatcher.invokeServiceListenerCallback(EventDispatcher.java:991)
   at org.apache.felix.framework.util.EventDispatcher.fireEventImmediately(EventDispatcher.java:839)
   at org.apache.felix.framework.util.EventDispatcher.fireServiceEvent(EventDispatcher.java:546)
   at org.apache.felix.framework.Felix.fireServiceEvent(Felix.java:4557)
   at org.apache.felix.framework.Felix.registerService(Felix.java:3549)
   at org.apache.felix.framework.BundleContextImpl.registerService(BundleContextImpl.java:348)
   at org.apache.sling.commons.threads.impl.Activator.start(Activator.java:55)
   at org.apache.felix.framework.util.SecureAction.startActivator(SecureAction.java:697)
   at org.apache.felix.framework.Felix.activateBundle(Felix.java:2226)
   at org.apache.felix.framework.Felix.startBundle(Felix.java:2144)
   at org.apache.felix.framework.Felix.setActiveStartLevel(Felix.java:1371)
   at org.apache.felix.framework.FrameworkStartLevelImpl.run(FrameworkStartLevelImpl.java:308)
   at java.lang.Thread.run(Thread.java:745)
Caused by: org.apache.jackrabbit.oak.api.CommitFailedException: OakConstraint0030: Uniqueness constraint violated at path [/] for one of the property in [jcr:uuid] having value 21232f29-7a57-35a7-8389-4a0e4a801fc3
   at org.apache.jackrabbit.oak.plugins.index.property.PropertyIndexEditor.checkUniquenessConstraints(PropertyIndexEditor.java:320)
   at org.apache.jackrabbit.oak.plugins.index.property.PropertyIndexEditor.updateIndex(PropertyIndexEditor.java:300)
   at org.apache.jackrabbit.oak.plugins.index.property.PropertyIndexEditor.leave(PropertyIndexEditor.java:243)
   at org.apache.jackrabbit.oak.plugins.index.IndexUpdate.leave(IndexUpdate.java:252)
   at org.apache.jackrabbit.oak.spi.commit.VisibleEditor.leave(VisibleEditor.java:63)
   at org.apache.jackrabbit.oak.spi.commit.EditorDiff.process(EditorDiff.java:56)
   at org.apache.jackrabbit.oak.spi.commit.EditorHook.processCommit(EditorHook.java:54)
   at org.apache.jackrabbit.oak.plugins.segment.SegmentNodeStore$Commit.prepare(SegmentNodeStore.java:488)
   at org.apache.jackrabbit.oak.plugins.segment.SegmentNodeStore$Commit.optimisticMerge(SegmentNodeStore.java:519)
   at org.apache.jackrabbit.oak.plugins.segment.SegmentNodeStore$Commit.execute(SegmentNodeStore.java:575)
   at org.apache.jackrabbit.oak.plugins.segment.SegmentNodeStore.merge(SegmentNodeStore.java:238)
   at org.apache.jackrabbit.oak.spi.state.ProxyNodeStore.merge(ProxyNodeStore.java:43)
   at org.apache.jackrabbit.oak.spi.lifecycle.OakInitializer.initialize(OakInitializer.java:62)
   ... 41 common frames omitted

.........

........

03.08.2016 16:37:59.208 *ERROR* [qtp749809924-113] org.apache.felix.http.jetty Exception while processing request to /system/console/bundles (java.lang.NullPointerException)
java.lang.NullPointerException: null
   at org.apache.felix.webconsole.internal.servlet.OsgiManager.ensureLocaleCookieSet(OsgiManager.java:502)
   at org.apache.felix.webconsole.internal.servlet.OsgiManager.service(OsgiManager.java:561)
   at org.apache.felix.webconsole.internal.servlet.OsgiManager$3.run(OsgiManager.java:465)
   at java.security.AccessController.doPrivileged(Native Method)
   at org.apache.felix.webconsole.internal.servlet.OsgiManager.service(OsgiManager.java:461)
   at org.apache.felix.http.base.internal.handler.ServletHandler.handle(ServletHandler.java:85)
................
   at org.eclipse.jetty.server.Server.handle(Server.java:499)
   at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:311)
   at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:257)
   at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:544)
   at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
   at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
   at java.lang.Thread.run(Thread.java:745)
03.08.2016 16:37:59.248 *ERROR* [qtp749809924-114] org.apache.sling.engine.impl.SlingHttpContext handleSecurity: AuthenticationSupport service missing. Cannot authenticate request.
03.08.2016 16:37:59.249 *ERROR* [qtp749809924-114] org.apache.sling.engine.impl.SlingHttpContext handleSecurity: Possible reason is missing Repository service. Check AuthenticationSupport dependencies.

Thanks Kautuk, however now the real issue is accessing repo :(

Opkar_Gill · 8/3/16

Hi,

the exception

"org.apache.felix.webconsole.internal.servlet.OsgiManager.ensureLocaleCookieSet(OsgiManager.java:502)"

I have seen this where we can't access the cold standby instance, the thread was recent[0]. You basically have to create the file

"crx-quickstart/launchpad/config/org/apache/felix/webconsole/internal/servlet/OsgiManager.config"

and add the contents in the thread.

How are/were you deploying the package?

Regards,

Opkar

[0]http://help-forums.adobe.com/content/adobeforums/en/experience-manager-forum/adobe-experience-manage...

aemanonymous · 8/3/16

I've tried the above method by manually creating the OsgiManager.config file. However, please note that I didn't have the webconsole folder and I manually created all those folders and in the file with following content <<locale=“en_US">>. But still I am facing the same issue.

Also did you manage to find the hotfix number for Quartz Scheduler issue which you have asked in the same thread.

I've actually installed huge packages via creating an install folder under quickstart folder. It all worked fine and after installing the users package via package manager, I started facing this issue. As the repository is down, I am not sure how I will be able to install new packages. Shall I try installing the hotfix(for quartz scheduler) by keeping it in install folder while starting the instance.

Opkar_Gill · 8/4/16

Have you removed the user package from the install folder? The quartz scheduler error is actually a bit of a red herring and does not affect the repository. This a single author instance right? No standby in this setup?

aemanonymous · 8/4/16

Opkar Gill wrote...

Have you removed the user package from the install folder? The quartz scheduler error is actually a bit of a red herring and does not affect the repository. This a single author instance right? No standby in this setup?

For the users package, it was installed via package manager as it is around 1 MB in size. Hence I did not install via install folder. This is a single local author instance without any standby. However there is around 70 GB of data from higher environment.

AnkurAhlawat · 8/4/16

Have you tried restarting the instance by removing user package zip from install folder.

In AEM 6.1 replication-reciever user is created which has lockable property.

Go to crxde /home/users delete replication-receiver user and you will be able to uninstall this package and you instance will start working as expected.

regards,

Ankur Ahlawat

AEM CQ5 Tutorials

aemanonymous · 8/4/16

AnkurAhlawat wrote...

Have you tried restarting the instance by removing user package zip from install folder.

In AEM 6.1 replication-reciever user is created which has lockable property.

Go to crxde /home/users delete replication-receiver user and you will be able to uninstall this package and you instance will start working as expected.

regards,

Ankur Ahlawat

AEM CQ5 Tutorials

Thanks Ankur for this info. However, I am unable to access my repository and only Felix web console is available.

Things that don't work anymore on my instance:

http://localhost:4504/crx/explorer/index.jsp

http://localhost:4504/crx/de/index.jsp

http://localhost:4504/crx/packmgr/index.jsp

Opkar_Gill · 8/4/16

Have all the bundles started?

aemanonymous · 8/4/16

Opkar Gill wrote...

Have all the bundles started?

Yes, all the bundles are active except for the below fragment bundles.

Adobe XMPfiles bundles

Apache Sling System Bundle Extension for WS & XML

Day Communique Licence Branding

AnkurAhlawat · 8/4/16

Have you checked that you have enough memory to run AEM.

Could you please let me know How much disk space is available. As this authentication error also occurs if we don't have enough space.

aemanonymous · 8/8/16

I've fixed the above issue by using the crx2oak migration utility by following running this. Basically I have created another instance and started it. Then performed the below.

java -jar crx2oak-1.4.2-standalone.jar --include-paths=/content,/apps,/etc --copy-versions=false --copy-orphaned-versions=false Author1/crx-quickstart/repository Author2/crx-quickstart/repository.

I had deleted the repository/index folder and it took sometime for recreating the index in the new server and I had all the content back.

The culprit was the admin user

03.08.2016 16:36:17.140 *ERROR* [FelixStartLevel] com.adobe.granite.repository.impl.SlingRepositoryManager start: Uncaught Throwable trying to access Repository, calling stopRepository()
java.lang.RuntimeException: org.apache.jackrabbit.oak.api.CommitFailedException: OakConstraint0030: Uniqueness constraint violated at path [/] for one of the property in [jcr:uuid] having value 21232f29-7a57-35a7-8389-4a0e4a801fc3

This UUID "21232f29-7a57-35a7-8389-4a0e4a801fc3" corresponds to the admin user.

There could be another better approach out there. Anyways this did the trick for me :)

Adobe Experience Manager Sites & More

AEM 6.2 author crashed after package installation

Kautuk Sahni

Learn

Documentation

Community

Support

Resources

Adobe account

Adobe