was管理控制台登录wpm报空指针异常

HPDJA0116E Cannot contact server. (0x307a8074)

Technote (troubleshooting)

Problem(Abstract)

We can't login to pdadmin webpage, but via command line we can log in.
Comes up with following message 
HPDJA0116E Cannot contact server. (0x307a8074)

Cause

The certificate stored in WPM's Java keystore, pdwpm.ks, has expired. We can verify this by looking at the pdwpm.properties file that stores the "configured on" date and the

Policy Server's ssl-cert-life parameter in the ivmgrd.conf. 

The default certificate lifetime for a certificate signed by the 
Policy Server is 365 days. 

The easiest means to recover WPM from an expired certificate is to 
reconfigure WPM. 

To confirm this you could do the following 

To verify this please check: 

1) the file date for pdwpm.ks 
2) in the pdwpm.properties what is the Config date? 

ie 
#Config last generated on 
#Mon Mar 22 14:29:09 CST 2004 

3) what is the parameter "ssl-cert-life" equal to in the ivmgrd.conf? 

If "ssl-cert-life = 365" and the pdwpm.ks file is older than 365 days,
then we have confirmed that the cert in the pdwpm.ks has expired.

Resolving the problem

To fix this problem, you can unconfigure and reconfigure Web Portal

Manager using the Access Manager for e-business Configuration utility 
(pdconfig). You can run pdconfig from the command prompt.

With the pdconfig tool, you can simply unconfigure and re-configure the web portal
manager.

Or you can manually run Java SvrSslCfg to 
unconfigure/configure WPM into the Access Manager domain to generate a 
new certificate. 

example, 

Performing SvrSslCfg unconfiguration for Web Portal Manager: 

/usr/WebSphere/AppServer/java/jre/bin/java com.tivoli.pd.jcfg.SvrSslCfg 
-action unconfig -admin_id sec_master -admin_pwd **** -appsvr_id amwpm 
-policysvr xyz:7135:1 -cfg_file 
/opt/PolicyDirector/java/export/pdwpm/pdwpm.properties 

Performing SvrSslCfg configuration for Web Portal Manager: 

/usr/WebSphere/AppServer/java/jre/bin/java com.tivoli.pd.jcfg.SvrSslCfg 
-action config -admin_id sec_master -admin_pwd **** -appsvr_id amwpm 
-mode remote -port 9090 -policysvr xyz:7135:1 -authzsvr xyz:7136:1 
-cfg_file /opt/PolicyDirector/java/export/pdwpm/pdwpm.properties 
-key_file /opt/PolicyDirector/java/export/pdwpm/pdwpm.ks -cfg_action 
replace 

The examples are single-line commands and you will need to change to 
reflect the hostnames of your Policy Server and Authorization Server. 
The hostname for the Policy Server and Authorization server in the above 
a commands was "xyz".

异常信息如下：

java.lang.NullPointerException at com.tivoli.pd.jutil.kb$1.run(kb$1.java:41) at java.security.AccessController.doPrivileged(AccessController.java:202) at com.tivoli.pd.jutil.kb.c(kb.java:141) at com.tivoli.pd.jutil.kb.(kb.java:56) at com.tivoli.pd.jutil.PDContext.(PDContext.java:151) at com.tivoli.pd.jutil.PDContext.(PDContext.java:22) at com.tivoli.pd.jutil.PDContext.(PDContext.java:73) at com.tivoli.pdconsole.common.servlets.auth.createContext(auth.java:596) at com.tivoli.pdconsole.common.servlets.auth.handleLogin(auth.java:115) at com.tivoli.pdconsole.common.servlets.auth.doGet(auth.java:77) at com.tivoli.pdconsole.common.servlets.auth.doPost(auth.java:90) at javax.servlet.http.HttpServlet.service(HttpServlet.java:738) at javax.servlet.http.HttpServlet.service(HttpServlet.java:831) at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1657) at com.ibm.ws.webcontainer.servlet.ServletWrapper.service(ServletWrapper.java:1597) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:131) at com.tivoli.pdconsole.isc.servlets.URLFilter.doFilter(URLFilter.java:118) at com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilter(FilterInstanceWrapper.java:184) at com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(WebAppFilterChain.java:116) at com.ibm.ws.webcontainer.filter.WebAppFilterChain._doFilter(WebAppFilterChain.java:77) at com.ibm.ws.webcontainer.filter.WebAppFilterManager.doFilter(WebAppFilterManager.java:908) at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:934) at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java:502) at com.ibm.ws.webcontainer.servlet.ServletWrapperImpl.handleRequest(ServletWrapperImpl.java:179) at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java:91) at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java:864) at com.ibm.ws.webcontainer.WSWebContainer.handleRequest(WSWebContainer.java:1592) at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java:186) at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java:452) at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewRequest(HttpInboundLink.java:511) at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.processRequest(HttpInboundLink.java:305) at com.ibm.ws.http.channel.inbound.impl.HttpICLReadCallback.complete(HttpICLReadCallback.java:83) at com.ibm.ws.ssl.channel.impl.SSLReadServiceContext$SSLReadCompletedCallback.complete(SSLReadServiceContext.java:1784) at com.ibm.ws.tcp.channel.impl.AioReadCompletionListener.futureCompleted(AioReadCompletionListener.java:165) at com.ibm.io.async.AbstractAsyncFuture.invokeCallback(AbstractAsyncFuture.java:217) at com.ibm.io.async.AsyncChannelFuture.fireCompletionActions(AsyncChannelFuture.java:161) at com.ibm.io.async.AsyncFuture.completed(AsyncFuture.java:138) at com.ibm.io.async.ResultHandler.complete(ResultHandler.java:204) at com.ibm.io.async.ResultHandler.runEventProcessingLoop(ResultHandler.java:775) at com.ibm.io.async.ResultHandler$2.run(ResultHandler.java:905) at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java:1604)