Error Message Reference

Transcription

1 Tivoli Federated Identity Manager Version Error Message Reference GC

2

3 Tivoli Federated Identity Manager Version Error Message Reference GC

4 Note Before using this information and the product it supports, read the information in Notices on page 187. This edition applies to version 6, release 2, modification 1 of IBM Tivoli Federated Identity Manager (product number 5724-L73) and to all subsequent releases and modifications until otherwise indicated in new editions. Copyright IBM Corporation 2006, US Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp.

5 Contents Figures v Operating system-dependent variables and paths xi About this publication vii Intended audience vii Publications vii IBM Tivoli Federated Identity Manager library vii Prerequisite publications viii Related publications viii Accessing terminology online ix Accessing publications online ix Ordering publications ix Accessibility ix Tivoli technical training ix Support information x Conventions used in this book x Typeface conventions x Chapter 1. Message overview Message types Message format Chapter 2. Tivoli Federated Identity Manager Messages Chapter 3. Common Auditing and Reporting Service messages Notices Trademarks Copyright IBM Corp. 2006, 2010 iii

6 iv Version 6.2.1: Error Message Reference

7 Figures 1. Message ID format Copyright IBM Corp. 2006, 2010 v

8 vi Version 6.2.1: Error Message Reference

9 About this publication Intended audience Publications IBM Tivoli Federated Identity Manager Version implements solutions for federated single sign-on, Web services security management, and provisioning that are based on open standards. IBM Tivoli Federated Identity Manager extends the authentication and authorization solutions provided by IBM Tivoli Access Manager to simplify the integration of multiple existing Web solutions. This guide describes the error messages for IBM Tivoli Federated Identity Manager. The target audience for this book includes network security architects, system administrators, network administrators, and system integrators. Readers of this book should have working knowledge of networking security issues, encryption technology, keys, and certificates. Readers should also be familiar with the implementation of authentication and authorization policies in a distributed environment. This book describes an implementation of a Web services solution that supports multiple Web services standards. Readers should have knowledge of specific Web services standards, as obtained from the documentation produced by the standards body for each respective standard. Readers should be familiar with the development and deployment of applications for use in a Web services environment. This includes experience with deploying applications into an IBM WebSphere Application Server environment. Read the descriptions of the IBM Tivoli Federated Identity Manager library, the prerequisite publications, and the related publications to determine which publications you might find helpful. The section also describes how to access Tivoli publications online and how to order Tivoli publications. IBM Tivoli Federated Identity Manager library The publications in the IBM Tivoli Federated Identity Manager library are: v IBM Tivoli Federated Identity Manager Quick Start Guide Provides instructions for getting started with IBM Tivoli Federated Identity Manager. v IBM Tivoli Federated Identity Manager Installation Guide Provides instructions for installing IBM Tivoli Federated Identity Manager. v IBM Tivoli Federated Identity Manager Configuration Guide Provides instructions for configuring IBM Tivoli Federated Identity Manager. v IBM Tivoli Federated Identity Manager for z/os Program Directory Provides instructions for installing IBM Tivoli Federated Identity Manager on z/os. v IBM Tivoli Federated Identity Manager Administration Guide Copyright IBM Corp. 2006, 2010 vii

10 v v v v Provides instructions for completing administration tasks that are required for all deployments. IBM Tivoli Federated Identity Manager Web Services Security Management Guide Provides instructions for completing configuration tasks for Web services security management. IBM Tivoli Federated Identity Manager Auditing Guide Provides instructions for auditing IBM Tivoli Federated Identity Manager events. IBM Tivoli Federated Identity Manager Error Message Reference Provides explanations of the IBM Tivoli Federated Identity Manager error messages. IBM Tivoli Federated Identity Manager Troubleshooting Guide Provides troubleshooting information and instructions for problem solving. You can obtain the publications from the IBM Tivoli Federated Identity Manager Information Center: com.ibm.tivoli.fim.doc_6.2.1/toc.xml Prerequisite publications To use the information in this book effectively, you should have some knowledge about related software products, which you can obtain from the following sources: v IBM Tivoli Access Manager for e-business Information Center: com.ibm.itame.doc/toc.xml v IBM WebSphere Application Server Version 6.1 Information Center: You can obtain PDF versions of the IBM WebSphere Application Server documentation at: Related publications You can obtain related publications from the IBM Web sites: v The IBM Tivoli Federated Identity Manager Business Gateway Information Center at v Enterprise Security Architecture Using IBM Tivoli Security Solutions. This book is available in PDF (Portable Document Format) at or in HTML (Hypertext Markup Language) at v Federated Identity Management and Web Services Security with IBM Tivoli Security Solutions (SG ). This book is available in PDF at or in HTML at v The Tivoli Software Library provides a variety of Tivoli publications such as white papers, datasheets, demonstrations, redbooks, and announcement letters. The Tivoli Software Library is available on the Web at: publib.boulder.ibm.com/tividd/td/tdprodlist.html viii Version 6.2.1: Error Message Reference

11 v The Tivoli Software Glossary includes definitions for many of the technical terms related to Tivoli software. The Tivoli Software Glossary is available at Accessing terminology online The IBM Terminology Web site consolidates the terminology from IBM product libraries in one convenient location. You can access the Terminology Web site at Accessing publications online IBM posts publications for this and all other Tivoli products, as they become available and whenever they are updated, to the Tivoli Information Center Web site at Note: If you print PDF documents on other than letter-sized paper, set the option in the File Print window that allows Adobe Reader to print letter-sized pages on your local paper. Ordering publications You can order many Tivoli publications online at You can also order by telephone by calling one of these numbers: v In the United States: v In Canada: In other countries, contact your software account representative to order Tivoli publications. To locate the telephone number of your local representative, perform the following steps: 1. Go to 2. Select your country from the list and click Go. 3. Click About this site in the main panel to see an information page that includes the telephone number of your local representative. Accessibility Accessibility features help a user who has a physical disability, such as restricted mobility or limited vision, to use software products successfully. With this product, you can use assistive technologies to hear and navigate the interface. You also can use the keyboard instead of the mouse to operate all features of the graphical user interface. Tivoli technical training For additional information, see the "Accessibility" topic in the information center at com.ibm.tivoli.fim.doc_6.2.1/toc.xml. For Tivoli technical training information, refer to the following IBM Tivoli Education Web site at About this publication ix

12 Support information If you have a problem with your IBM software, you want to resolve it quickly. IBM provides the following ways for you to obtain the support you need: Online Go to the IBM Software Support site at support/probsub.html and follow the instructions. IBM Support Assistant The IBM Support Assistant (ISA) is a free local software serviceability workbench that helps you resolve questions and problems with IBM software products. The ISA provides quick access to support-related information and serviceability tools for problem determination. To install the ISA software, see the IBM Tivoli Federated Identity Manager Installation Guide. Also see: Troubleshooting Guide For more information about resolving problems, see the IBM Tivoli Federated Identity Manager Troubleshooting Guide. Conventions used in this book This reference uses several conventions for special terms and actions and for operating system-dependent commands and paths. Typeface conventions This publication uses the following typeface conventions: Bold Italic v v v v v Lowercase commands and mixed case commands that are otherwise difficult to distinguish from surrounding text Interface controls (check boxes, push buttons, radio buttons, spin buttons, fields, folders, icons, list boxes, items inside list boxes, multicolumn lists, containers, menu choices, menu names, tabs, property sheets), labels (such as Tip:, and Operating system considerations:) Keywords and parameters in text Citations (examples: titles of publications, diskettes, and CDs Words defined in text (example: a nonswitched line is called a point-to-point line) v Emphasis of words and letters (words as words example: "Use the word that to introduce a restrictive clause."; letters as letters example: "The LUN address must start with the letter L.") v New terms in text (except in a definition list): a view is a frame in a workspace that contains data. v Variables and values you must provide:... where myname represents... Monospace v Examples and code examples v File names, programming keywords, and other elements that are difficult to distinguish from surrounding text v Message text and prompts addressed to the user v Text that the user must type x Version 6.2.1: Error Message Reference

13 v Values for arguments or command options Operating system-dependent variables and paths This publication uses the UNIX convention for specifying environment variables and for directory notation. When using the Windows command line, replace $variable with % variable% for environment variables and replace each forward slash (/) with a backslash (\) in directory paths. The names of environment variables are not always the same in the Windows and UNIX environments. For example, %TEMP% in Windows environments is equivalent to $TMPDIR in UNIX environments. Note: If you are using the bash shell on a Windows system, you can use the UNIX conventions. About this publication xi

14 xii Version 6.2.1: Error Message Reference

15 Chapter 1. Message overview Message types Message format Messages indicate events that occur during the operation of the system. Depending on their purpose, messages might be displayed on the screen. By default, all informational, warning, and error messages are written to the message logs. The logs can be reviewed later to determine what events occurred, to see what corrective actions were taken, and to audit all the actions performed. For more information about message logs, refer to the IBM Tivoli Federated Identity Manager Problem Determination Guide. Tivoli Federated Identity Manager uses messages of specific types. The following types of messages are used: Informational messages Indicate conditions that are worthy of noting but that do not require you to take any precautions or perform an action. Warning messages Indicate that a condition has been detected that you should be aware of, but does not necessarily require that you take any action. Error messages Indicates that a condition has occurred that requires you to take action. Messages logged by Tivoli Federated Identity Manager adhere to the Tivoli Message Standard. Each message consists of a message identifier (ID) and accompanying message text. Message ID format A message ID consists of 10 alphanumeric characters that uniquely identify the message. A message ID in Tivoli Federated Identity Manager is composed of: v three-character product identifier (FBT for Tivoli Federated Identity Manager and CBA and CFG for Common Auditing and Reporting Service) v two-character or three-character component or subsystem identifier v three-digit or four-digit serial or message number v one-character type code indicating the severity of the message The figure that follows shows a graphical representation of a possible message ID and identifies its different parts. (Some messages might use 2 characters for the Copyright IBM Corp. 2006,

16 component ID and 4 digits for the serial number.) FBT RTE 033 Figure 1. Message ID format I Severity I - Informational W -- Warning E Error Message number (3 digits) Component or subsystem identifier (3 characters) IBM product prefix (3 characters) 2 Version 6.2.1: Error Message Reference Component identifiers The component identifier indicates which component or subsystem produced the message. ADM Administration commands AUD Audit CC Common Auditing and Reporting Service disk cache CDS InfoCard messages CE Common Auditing and Reporting Service emitter CFG Configuration properties CLI Command-line interface CO Common Audit Service Configuration Console CON Tivoli Federated Identity Manager console FMS Management service IDS Identity service IN Common Auditing and Reporting Service installation ISJ Alias service JDBC component ISL Alias service LDAP component IVT Installation verification test KES Key service keystore management KJK Key service keystore management LIB Liberty single sign-on protocol LOG Logging MB Common Audit Service Configuration MBean MGT Management MET Metadata handling MOD Module OID OpenID messages PWD Password handling RPT Report messages

17 RTE SML SOC SPS STM STS STZ SU TAC TRC USC WS WSF WSP WSS XS XU Runtime environment component configuration SAML single sign-on protocol SOAP client Single sign-on protocol service Secure token service Secure token service modules RACF PassTicket tokens Common Audit Staging Utility Tivoli Access Manager configuration as point-of-contact server Trust client User self care Common Auditing and Reporting Service Web service WS-Federation single sign-on protocol Provisioning service Web services security management Common Audit Service XML data store Common Audit Service XML store utilities Severity Associated with each message is a severity level that indicates whether corrective action must be taken. Severity Description I (Informational) Provides information or feedback about normal events that occur. In general, no action needs to be performed in response to an informational message. FBTRTE033I The domain default was successfully created. FBTSTM066I The Trust Service has been disabled. W (Warning) Indicates that a potentially undesirable condition has occurred, but processing can continue. Intervention or corrective action might be necessary in response to a warning message. FBTLOG002W An integer was expected. FBTTRC004W The returned RequestSecurityTokenResponse did not have a wsu:id E (Error) Indicates that a problem has occurred that requires intervention or correction before processing can continue. An error message might be accompanied by one or more warning or informational messages that provide additional details about the problem. FBTCON013E The federation with ID insert could not be retrieved from the single sign-on protocol service. This error can occur if the console is unable to Chapter 1. Message overview 3

18 communicate with the single sign-on protocol service. FBTSML260E The binding value value for attribute attr is not valid for profile profile. Message text The text of the message, in the system locale, also is recorded in the log file. If the message text is not available in the desired language, the English language text is used. 4 Version 6.2.1: Error Message Reference

19 Chapter 2. Tivoli Federated Identity Manager Messages These messages are provided by Tivoli Federated Identity Manager. FBTADM002E successfully. The invoked command failed. The executed command did not complete Command execution halted. Check the log files or examine any returned exceptions. FBTADM004E There are no SAML Artifact Services configured. See message. Command execution halted. No response required. FBTADM005E There are no SAML Artifact Services configured with the given configuration identifier. See message. Command execution halted. No response required. FBTADM006E The given name for the creation of the new Tivoli Federated Identity Manager domain already exists. Supply a different domain name or remove the existing domain first. See message. Command execution halted. No response required. FBTADM007E A Tivoli Federated Identity Manager domain name is required for this operation to complete. See message. Command execution halted. Specify the domain name using the parameter fimdomainname FBTADM008E A WebSphere cluster or server name is required for this operation. If the target environment is on a cluster, enter the clustername. If the target environment is not a cluster, provide the name of the application server (typically server1). To find the name of the cluster or the server use the Application Servers panel on the WebSphere administrative console. See message. Command execution halted. No response required. FBTADM009E One or more parameters have to be provided for this operation. See message. Command execution halted. View the usage and pass the required parameters to the command. FBTADM010E The Tivoli Federated Identity Manager domain specified for this operation does not exist. See message. Command execution halted. Run the list operation of the command manageitfimdomain to view the domain name. FBTADM011E The Tivoli Federated Identity Manager runtime is not currently deployed into the selected domain. To deploy the runtime use the deploy operation of this command. See message. Command execution halted. Run the deploy operation of the command manageitfimdomain to deploy the runtime. FBTADM013E A file name to read from or write to needs to be provided for this command. Copyright IBM Corp. 2006,

20 FBTADM014E FBTADM025E See message. command. Command execution halted. Specify a file name for this FBTADM014E Required Tivoli Access Manager parameters were not passed to this operation. When a Tivoli Federated Identity Manager domain uses Tivoli Access Manager the following parameters are required, tamadminid, tamtampolicyserver, tamauthzservers, tamauthzports. See message. Command execution halted. Check the documentation or view the command help for usage. FBTADM017E The following error ocurred while reloading the Tivoli Federated Identity Manager Management Service. Errors from the Tivoli Federated Identity Manager Management Service is returned as a result of executing the reloaditfimmanagementservice command. Command execution halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for the exception details. FBTADM021E This operation requires that the configuration type for the alias service is set to ldap but the current configuration is jdbc. Run the configure operation to change the configuration to ldap. See message. Command execution halted. Run the configure operation of the manageitfimnameidsvc command. FBTADM022E The provided server, hostname and port, already exists in the configuration. If you need to modify the parameters use the modifyhost operation. See message. Command execution halted. Run the modifyhost operation of the manageitfimnameidsvc command. FBTADM023E The provided server, hostname and port, is not defined in the configuration. Create this server entry using the addhost operation. See message. Command execution halted. Run the addhost operation of the manageitfimnameidsvc command. FBTADM018E One of the parameters passed needs to be an integer but it is not. See message. Command execution halted. No response required. FBTADM019E One or more parameters passed are in an incorrect format. See message. Command execution halted. No response required. FBTADM020E The configuration type passed to the command is in an unrecognized format. Acceptable values are ldap or jdbc. See message. Command execution halted. Check the documentation or view the command help for usage. FBTADM024E The parameter insert is required for this operation. See message. Command execution halted. Check the documentation or view the command help for usage. FBTADM025E The partner insert associated to federation insert was not found. Check that both partner and federation names are correct. You can use the list operation of the manageitfimpartner commands to get a list of existing partners and federations. See message. Command execution halted. Run the list operation of the manageitfimpartner command. 6 Version 6.2.1: Error Message Reference

21 FBTADM026E FBTADM039E FBTADM026E The property insert is required for this operation. See message. Command execution halted. Check the documentation for response file property requirements for this operation. FBTADM033E The Report Engine could not be shut down. Check the log files or examine any returned exceptions. See message. No response required. FBTADM028E The parameter insert is required for this operation but it was not given. The command requires parameters that were not passed in. Command execution halted. Check the documentation or view the command help for usage. FBTADM029E The Tivoli Federated Identity Manager domain name, server name, server port, and report name are not specified. The command requires parameters that were not passed in. Command execution halted. View the usage and pass the required parameters to the command. FBTADM030E The Tivoli Federated Identity Manager domain name, server name, and server port are not specified. The command requires parameters that were not passed in. Command execution halted. View the usage and pass the required parameters to the command. FBTADM031E No runnable reports were found. See message. No response required. FBTADM032E The Report Engine could not be started. Check the log files or examine any returned exceptions. See message. No response required. FBTADM034E No reports are currently running. See message. No response required. FBTADM035E The Tivoli Federated Identity Manager domain name, server name, and server port are not specified. The command requires parameters that were not passed in. Command execution halted. View the usage and pass the required parameters to the command. FBTADM036E No archived reports were found. See message. No response required. FBTADM037E The Tivoli Federated Identity Manager domain name, server name, and server port are not specified. The command requires parameters that were not passed in. Command execution halted. View the usage and pass the required parameters to the command. FBTADM038E A report design is required for this operation to complete. See message. Command execution halted. Specify the report design using the reportdesign parameter. FBTADM039E A hostname is required for this operation to complete. See message. Command execution halted. Chapter 2. Tivoli Federated Identity Manager Messages 7

22 FBTADM040E FBTADM051E Specify the host name using the hostname parameter. FBTADM040E A port is required for this operation to complete. See message. hostport parameter. Command execution halted. Specify the port using the FBTADM041E A render type is required for this operation to complete. See message. Command execution halted. Specify the render type using the rendertype parameter. FBTADM042E The supplied keystore was not found in the domain. Verify that the kesytore name is correct and that it does exist. See message. Command execution halted. No response required. FBTADM043E No keys are defined inside the supplied Key Store. See message. Command execution halted. No response required. FBTADM044E The domain supplied does not have any keystores defined. See message. Command execution halted. No response required. FBTADM045E The supplied response file does not contain a valid federation name to be created. See message. to the response file. Command execution halted. Add the FedName property FBTADM046E The federation insert already exists. Specify a different name in the response file. See message. Command execution halted. No response required. FBTADM047E Unable to create partner response file. Verify that the parameters supplied were correct and verify the logs. See message. Command execution halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for errors. FBTADM048E The file insert specified in property insert does not exist. See message. Command execution halted. Check the path to the file. FBTADM049E This operation requires the Tivoli Access Manager administrator password in order to complete. Provide this password by specifying the -tamadminpwd option. See message. Command execution halted. No response required. FBTADM050E Unable to create federation response file. Verify that the parameters supplied were correct and verify the logs. See message. Command execution halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for errors. FBTADM051E A Tivoli Federated Identity Manager domain already exists in the target cluster or server insert. Remove that domain before attempting to create a new one. See message. Command execution halted. No response required. 8 Version 6.2.1: Error Message Reference

23 FBTADM052E FBTADM064E FBTADM052E The federation insert is not an identity provider. A query requester partner can only be added to an identity provider federation. See message. Command execution halted. No response required. FBTADM058E The callback property: insert for callback insert is not defined. Check the available properties for a callback using the listcallbacks operation. See message. Command execution halted. No response required. FBTADM053E Unable to import the key insert into keystore insert. Make sure that the keystore name and supplied password are correct. See message. Command execution halted. No response required. FBTADM054E The export operation failed to write the domain to the supplied file. Check the name and path of the supplied file and that its location can be written. See message. Command execution halted. No response required. FBTADM055E Unable to undeploy runtime from: insert. See message. Command execution halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for errors. FBTADM056E This operation is not supported for the specified Single Sign-On protocol. See message. Command execution halted. No response required. FBTADM057E The callback id: insert is not defined. Publish the Point of Contact callback plug-ins to the runtime node if creating a custom point of contact or check the existing callback names using the listcallbacks operation. See message. Command execution halted. No response required. FBTADM059E The specified Point of Contact profile: insert was not found. See message. Command execution halted. No response required. FBTADM060E The specified Chain Request Mapping with uuid: insert was not found. See message. Command execution halted. No response required. FBTADM061E The module instance with uuid: insert was not found. See message. Command execution halted. No response required. FBTADM062E The module type with uuid: insert was not found. See message. Command execution halted. No response required. FBTADM063E The module chain with uuid: insert was not found. See message. Command execution halted. No response required. FBTADM064E The number of instances provided does not match the number of modes provided. These two numbers must match. See message. Command execution halted. No response required. Chapter 2. Tivoli Federated Identity Manager Messages 9

24 FBTADM065E FBTADM076E FBTADM065E The mode: insert for module instance: insert is not supported. See message. Command execution halted. No response required. FBTADM066E The chain mapping for chain: insert was not found. See message. Command execution halted. No response required. FBTADM067E The custom properties cannot be loaded into the specified domain. imported. The custom properties cannot be Command execution halted. No response required. FBTADM068E The given name for the Tivoli Federated Identity Manager domain does not exist. Supply a different domain name. exist. The specified domain name does not Command execution halted. No response required. FBTADM069E A Tivoli Federated Identity Manager federation name is required for this operation to complete. This operation requires the name of an existing federation. Command execution halted. Specify the federation name using the parameter federationname FBTADM070E The federation insert does not exist. Specify a different name. exist. The specified federation name does not Command execution halted. No response required. FBTADM071E The operation operation is unknown for the current command. An operation was specified that is not implemented for the current command. Command execution halted. Please enter a valid operation for this command. FBTADM072E A key with alias 'key alias' was not found in the keystore 'keystore'. An alias was specified for a signing or encryption key, but no key with that alias was found in the specified keystore. Command execution halted. Please enter a valid alias. FBTADM073E The partner role value insert specified on parameter insert is not supported for this operation. The partner role specified is not supported by the federation. Command execution halted. Check the documentation or view the command help for usage. FBTADM074E The migration type is required for this operation to complete. This operation requires the migration type to be performed. Command execution halted. Specify the migration type using the parameter migrationtype FBTADM075E The migration type value insert specified on parameter insert is not supported by the runtime. The migration type specified is not supported by the runtime. types for the runtime. Command execution halted. List the supported migration FBTADM076E The migration type insert does not support the use of a response file. The migration type specified does not support the use of a response file. Command execution halted. Execute the operation 10 Version 6.2.1: Error Message Reference

25 FBTADM077E FBTAUD009E without using a response file. FBTADM077E The federation name can contain only characters from the set 'a-z', 'A-Z' and '0-9'. Specify a different name in the response file using only the valid characters. See message. Command execution halted. No response required. FBTAUD001E Check the audit configuration to ensure that it is correct. The audit configuration settings might contain errors or ommissions. try restarting the server. System will not audit. Check the audit properties or FBTAUD002E The passed-in audit provider is not supported. This error occurs due to problems in the audit configuration. try restarting the server. System will not audit. Check the audit properties or FBTAUD003E The audit configuration property insert is not defined or is incorrect. This error occurs due to problems in the audit configuration. System will not audit. Correctly specify the property and restart the server. FBTAUD004E An error was encountered while initializing the file logger. This error occurs due to problems in the audit configuration. System will not audit. Check the file logger properties and the encapsulated exception to solve the problem. FBTAUD005E An error was encountered while initializing context to the Common Audit Serivice server. Check the JNDI connection property and emitter profile for possible errors. This error occurs due to problems in the audit configuration. System will not audit. Check the properties mentioned in the error and the encapsulated exception to solve the problem. FBTAUD006E An error was encountered while sending the audit event to the Common Audit Service server. This error occurs because of problems in the audit configuration, or because of connectivity problems with the Common Audit Service server. event. System will not audit this particular Ensure that the Common Audit Service server is running and check the encapsulated exception to solve the problem. FBTAUD007E An error was encountered while initializing the audit component. This error occurs because of problems in the audit configuration, or because of connectivity problems with the Common Audit Service server. event. System will not audit this particular Ensure that the Common Audit Service server is running and check the previous exceptions in the log to determine the cause of the problem. FBTAUD008E An event completion exception was encountered because all of the event data is not filled in correctly. This error occurs if any of the required elements in the event are not set. System will not audit this particular event and will log an exception. Check the encapsulated exception to solve the problem. FBTAUD009E System could not audit a call because a required parameter to the API is not available. This error occurs if any of the required elements in the event are not set. System will not audit this particular event and will log an exception. Check the parameter that is not being passed correctly. Chapter 2. Tivoli Federated Identity Manager Messages 11

26 FBTAUD010E FBTCDS010E FBTAUD010E An event validation exception was encountered because all of the event data is not correctly filled in. This error occurs if any of the required elements in the event are not set. System will not audit this particular event and log an exception. Check the encapsulated exception to solve the problem. FBTCDS001E The received request is missing the required parameter: parameter message. FBTCDS002E The current request is not valid. The request will be halted. Validate the incoming Token exchange failed. The current request could not be completed because the token exchange failed. The request will be halted. Validate the incoming message and the trust service configuration. In addition, examine the trace logs to see why the token exchange failed. FBTCDS003E The security token could not be decrypted. The encrypted security token could not be decrypted. Ensure that the decryption keys and decryption parameters are configured properly for the provider that sent the message. FBTCDS004E The security token signature could not be validated. be validated. The security token signature could not Ensure that the validation keys are configured properly for the provider that sent the message. contain a TARGET parameter, which should point to the target SSO URL. FBTCDS006E While processing action: action the following configuration parameter was determined to be missing or incorrect: param The current request could not be completed because the configuration is not valid. configured correctly. The request will be halted. Validate that the system is FBTCDS007E The current user making the request is not authenticated. message. The current request is not valid. The request will be halted. Validate the incoming FBTCDS008E The Security Token Service was unable to generate a token for this request. The current request is not valid. The request will be halted. Validate the incoming message, and the system configuration. FBTCDS009E The card used for authentication to the STS mapped to the alias: action and could not be mapped to a local user account. The alias service could not resolve the alias generated from the token presented for authentication to a local user account. This may be because the alias was not written correctly when the card was created, or that the alias has been deleted from the alias service. The request will be halted. Validate that the alias server is configured and working, and that the alias for the user exists. FBTCDS005E The request was missing the TARGET parameter. The login page must contain a TARGET parameter either in the Query string or in a hidden input field. The operation will be halted. Modify the login page to FBTCDS010E The incoming request to the InfoCard STS has an AppliesTo address which does not contain the identity information of the relying party: appliesto The AppliesTo element from the client should either not contain an AppliesTo element, or if it does, it must contain the identity information 12 Version 6.2.1: Error Message Reference

27 FBTCDS011E FBTCFG004E (including the X509 certificate) of the relying party. This can be caused if the metadata policy response to InfoCard does not contain the <wsaw:usingaddressing/> directive. The request will be halted. Validate that the configured metadata policy contains <wsaw:usingaddressing/> FBTCDS011E The incoming request to the InfoCard STS does not contain a valid authentication token for this federation. The incoming request may contain no authentication token, or it may contain an authentication token which does not match the authentication mechanism supported by this federation. The request will be halted. Validate that the incoming request contains the correct authentication token. FBTCDS012E The incoming metadata exchange request contains an invalid 'action' header in the SOAP request: action The incoming request contained an 'action' header other than: schemas.xmlsoap.org/ws/2004/09/transfer/get The request will be halted. Validate that the client is sending a valid metadata exchange request. FBTCDS015E The supplied card alias, ppid, is already in-use by another user. The user supplied a self-issued card that is already associated with another user's account. is necessary. The request will be halted. No administrative response FBTCFG001E An error occurred while reading a configuration document. An attempt to read a configuration stream has failed. halted. The configuration request will be Validate the Tivoli Federated Identity Manager configuration. FBTCFG002E The expected root for this document, type documentroottype was not found in the document. The expected document root was missing because the parsed configuration file does not contain the correct configuration document. halted. The configuration request will be Validate the Tivoli Federated Identity Manager configuration. FBTCDS013E The incoming metadata exchange request contains an invalid 'to' header in the SOAP request: to. We were expecting our metadata exchange endpoint: mexendpoint The incoming request contained a 'to' header which did not match our metadata exchange endpoint. The request will be halted. Validate that the client is sending a valid metadata exchange request. FBTCDS014E The request for a card contained a support claim parameter in an invalid format: sclaim The incoming request contained a supported claim in an invalid format. The request will be halted. Validate that the getcard HTML template has supported claims in the correct format. FBTCFG003E The configuration for the component component was not found in this document. The expected document root was missing because the parsed configuration file does not contain the correct configuration document. halted. The configuration request will be Validate the Tivoli Federated Identity Manager configuration. FBTCFG004E An error occurred while saving a configuration document. An attempt to save a configuration stream has failed. halted. The configuration request will be Validate the Tivoli Federated Identity Manager environment configuration. Chapter 2. Tivoli Federated Identity Manager Messages 13

28 FBTCFG005E FBTCLI034E FBTCFG005E An error occurred while reading configuration information from file: filename. An attempt to read a configuration stream has failed. halted. The configuration request will be Validate the Tivoli Federated Identity Manager configuration. FBTCFG006E The configuration file parser has encountered an unexpected exception: exception text. An attempt to read a configuration stream has failed. halted. The configuration request will be Validate the Tivoli Federated Identity Manager configuration. FBTCLI001E The configuration entry entry is not correct or not supported. The configuration entry is either not correct or not supported. The processing has been halted. Check the documentation and ensure that the specified configuration entry is correct and supported. FBTCLI002E The configuration entry entry is required and was not given. given. The required configuration entry was not The processing has been halted. Check the documentation and ensure that all required configuration entries are given. FBTCLI005E The properties file [filename] was not found. A required properties file was not given. The processing has been halted. Ensure that the path given to the properties file is correct. FBTCLI008E The upgrade finished with errors. Enable a more detailed trace to determine the problem. failed. The upgrade of the configuration files The processing has been halted. To determine the problem, enable finer tracing and re-execute the upgrade tool. FBTCLI010E The given source JAR is not the expected version. The given JAR file was not exported from the expected product version. The processing has been halted. Ensure that the source JAR is from the expected product version. FBTCLI026E Unable to create domain (domain) An error occurred creating the domain. The processing has been halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for errors. FBTCLI032E Federation(fed) does not exist See message. The processing has been halted. No response required. FBTCLI003E The entry entry and entry entry are not correct. not correct. The specified configuration entries are The processing has been halted. Check the documentation and ensure that all required configuration entries are given correctly. FBTCLI033E Unable to create file (file) See message. The processing has been halted. Check the name and path of the supplied file and make sure it can be written to. FBTCLI034E File (file) not found See message. The processing has been halted. Verify the file exists. 14 Version 6.2.1: Error Message Reference

29 FBTCLI036E FBTCLI069E FBTCLI036E Partner (partner) does not exist in federation (fed) See message. The processing has been halted. No response required. FBTCLI043E The property you are trying to set, (prop), is not appropriate for role=(fed) and protocol=(fed) federation. See message. The processing has been halted. No response required. FBTCLI051E Unable to parse property (lhs=rhs) in file (fed) See message. The processing has been halted. Verify the file exists. FBTCLI054E Unable to import federation (fed) See message. The processing has been halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for errors. FBTCLI055E Unable to import partner (part) into federation (fed) in domain domain) See message. The processing has been halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for errors. FBTCLI056E Unable to get federation (fed) See message. The processing has been halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for errors. Tivoli Federated Identity Manager Management Service machine for errors. FBTCLI059E No federations exist in domain (domain) See message. The processing has been halted. No response required. FBTCLI060E No partners exist for federation (fed) in domain (domain) See message. The processing has been halted. No response required. FBTCLI062E Federation (fed) does not exist in domain (domain) See message. The processing has been halted. No response required. FBTCLI065E Unable to delete partner (partner) in federation (fed) See message. The processing has been halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for errors. FBTCLI066E Unable to delete all partners in federation (fed) See message. The processing has been halted. Check the log files on the Tivoli Federated Identity Manager Management Service machine for errors. FBTCLI068E Domain (domain) already exists See message. The processing has been halted. No response required. FBTCLI058E Unable to delete federation (fed) in domain (domain) See message. The processing has been halted. Check the log files on the FBTCLI069E No domains exist See message. The processing has been halted. Cerate a domain to proceed. Chapter 2. Tivoli Federated Identity Manager Messages 15

30 FBTCLI070E FBTCLI083E FBTCLI070E EAR File [EAR File] does not exist. The installation failed. spokeha tool. Specify valid options to the The given EAR file did not exist, the installation could not continue. The processing has been halted. Ensure that the EAR file is located at the expected location. FBTCLI076E Directory (directory) does not exist See message. The processing has been halted. No response required. FBTCLI071W The IVT application failed to install, attempting to recover by removing any existing IVT applications. FBTCLI074E Installation of IVT application failed. An error occurred while installing the IVT application and the installation did not complete. The processing has been halted. Check the log for the cause of the error. If the error was not logged, enable debug tracing to determine the cause of the problem. FBTCLI075E Usage: java -jar itfimbgha.jar -action <mode> [options] The itfimbgha tool has two modes of operation. Each mode uses different command line options. -action export: Used to gathering required configuration from the exported federation configuration archive. This option is used when running the tool on the node being replicated, to gather the required files. Options: -inputfile <file> (Required): The jar file created by federation configuration export. -outputfile <file> (Optional): The resultant archive containing the files needed to create a replica node. If it is not specified the output file will be./bg_ha_files.jar. -action import: Used to import the configuration files from the archive file to the replica node. This option is used when running the tool on the replica node to put the required configuration files into place. Options: -inputfile <file> (Required): The jar file containing the output from running the tool in export mode. -wasprofiledir <directory> (Required): The absolute filepath to the WebSphere profile directory that Federated Identity Manager is running in. The options provided to the HA tool were not valid. The tool will exit without updating any configuration files. FBTCLI077E An unexpected error occurred: (exception) An unexpected error occurred. Check the logs for any errors. The processing has been halted. FBTCLI078E Could not delete: (file) See message. be deleted. No response required. The processing has been halted. Verify the file exists and can FBTCLI081E The input jar file (file) was not created by the Federated Identity Manager export function. The input jar file was not determined to have been created by the export feature in the Federated Identity Manager console. The Federated Identity Manager high availability tool will not continue. Re-export the Federated Identity Manager configuration jar and run the high availability tool again. FBTCLI082E The output jar file (file) could not be created by the high availability tool. An error occurred which prevented the high availability tool from completing successfully. The Federated Identity Manager high availability tool will not continue. details. Check the log file for more FBTCLI083E Failed to backup the Federated Identity Manager configuration files. An error occurred which prevented the high availability tool from backing up the current configuration. The Federated Identity Manager high availability tool will not continue. 16 Version 6.2.1: Error Message Reference

31 FBTCLI088E FBTCON010E Check the log file for more details. FBTCLI088E The domain (domain) does not exist. See message. The processing has been halted. No response required. FBTCON001E An error occurred while modifying component host names and ports. This error occurs due to a problem writing to the console properties file. The system will leave the properties file unchanged. Check the file console properties or try restarting the server. FBTCON002E An error occurred retrieving the ISC launch service. retrieved. The ISC launch service could not be The system might have problems launching some pages and portlets. See the exception stack trace. FBTCON003E An error occurred while loading component host names and ports from the properties file. This error occurs due to a problem loading the console properties file. The console will be unable to communicate with the various components. Check that the console properties file is in your classpath. FBTCON004E The ISC launch service could not find the following page: insert An error occurred while launching a page using the ISC launch service. See the exception stack trace. FBTCON005E An error occurred while setting the trust service endpoint. This error can occur if the protocol is missing from the trust service endpoint (for example or if your management context was invalidated. Trust service endpoint is left unchanged. The system rolls back the session to try to create a valid context. Make sure the trust service endpoint is correctly formatted and includes the protocol (for example FBTCON006E An error occurred setting the identity service endpoint. This error can occur if the identity service endpoint is incorrectly formatted. unchanged The identity service endpoint is left Make sure the identity service endpoint is correct. FBTCON007E Error setting the Key Service endpoint This error can occur if the key service endpoint is incorrectly formatted. unchanged. The key service endpoint is left Make sure that the key service endpoint is correct. FBTCON008E An error occurred retrieving the component endpoint. This error occurs if there is a problem retrieving the trust service, identity service, or key service endpoint from the single sign-on protocol service. endpoint. The console is unable to display the See the exception stack trace. FBTCON009E An error occurred while creating a federation. A single sign-on protocol service encountered a problem creating a federation. See the exception stack trace. FBTCON010E An error occurred while committing the session in the single sign-on protocol service. The configuration changes could not be saved to the single sign-on protocol service. See the exception stack trace. Chapter 2. Tivoli Federated Identity Manager Messages 17