解决2个IBM Portal之间令牌验证期间域不匹配问题

由于要给客户在测试机上演示证书登陆，需要在测试机上搭建一个门户，同时与其他系统做sso，由于都是IBM Portal,需要2个门户(IBM Portal)之间实现SSO.那只需要将生产的门户的LTPA key导入到测试机就可以。发现导入后出现令牌验证期间域不匹配

错误日志:

[08-4-26 15:21:39:100 CST] 00000054 LTPAServerObj E   SECJ0375E: 令牌验证期间域不匹配。
[08-4-26 15:21:39:100 CST] 00000054 LTPAServerObj E   SECJ0373E: 无法创建用户 <null> 的凭证，这是由于失败的 LTPA 令牌验证。异常为 com.ibm.websphere.security.CustomRegistryException: The realm in the token: pdc.domain.com.cn:389 does not match the current realm: domain.com.cn:389
 at com.ibm.ws.security.ltpa.LTPAServerObject.getRelativeName(LTPAServerObject.java(Compiled Code))
 at com.ibm.ws.security.ltpa.LTPAServerObject.getSecurityName(LTPAServerObject.java(Compiled Code))
 at com.ibm.ws.security.ltpa.LTPAServerObject.validate(LTPAServerObject.java(Compiled Code))
 at com.ibm.ws.security.server.lm.ltpaLoginModule.login(ltpaLoginModule.java(Compiled Code))
 at com.ibm.ws.security.common.auth.module.proxy.WSLoginModuleProxy.login(WSLoginModuleProxy.java(Inlined Compiled Code))
 at sun.reflect.GeneratedMethodAccessor112.invoke(Unknown Source)
 at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java(Compiled Code))
 at java.lang.reflect.Method.invoke(Method.java(Compiled Code))
 at javax.security.auth.login.LoginContext.invoke(LoginContext.java(Compiled Code))
 at javax.security.auth.login.LoginContext.access$000(LoginContext.java(Inlined Compiled Code))
 at javax.security.auth.login.LoginContext$4.run(LoginContext.java(Compiled Code))
 at java.security.AccessController.doPrivileged1(Native Method)
 at java.security.AccessController.doPrivileged(AccessController.java(Compiled Code))
 at javax.security.auth.login.LoginContext.invokeModule(LoginContext.java(Compiled Code))
 at javax.security.auth.login.LoginContext.login(LoginContext.java(Compiled Code))
 at com.ibm.ws.security.auth.JaasLoginHelper.jaas_login(JaasLoginHelper.java(Compiled Code))
 at com.ibm.ws.security.auth.distContextManagerImpl.login(distContextManagerImpl.java(Compiled Code))
 at com.ibm.ws.security.auth.distContextManagerImpl.login(distContextManagerImpl.java(Inlined Compiled Code))
 at com.ibm.ws.security.web.WebAuthenticator.validate(WebAuthenticator.java(Compiled Code))
 at com.ibm.ws.security.web.WebAuthenticator.validateCookie(WebAuthenticator.java(Compiled Code))
 at com.ibm.ws.security.web.WebAuthenticator.handleSSO(WebAuthenticator.java(Compiled Code))
 at com.ibm.ws.security.web.WebAuthenticator.handleCustomLogin(WebAuthenticator.java:631)
 at com.ibm.ws.security.web.WebAuthenticator.authenticate(WebAuthenticator.java(Compiled Code))
 at com.ibm.ws.security.web.WebCollaborator.authorize(WebCollaborator.java(Compiled Code))
 at com.ibm.ws.security.web.EJSWebCollaborator.preInvoke(EJSWebCollaborator.java(Compiled Code))
 at com.ibm.ws.webcontainer.webapp.WebAppSecurityCollaborator.preInvoke(WebAppSecurityCollaborator.java(Compiled Code))
 at com.ibm.ws.webcontainer.servlet.ServletWrapper.handleRequest(ServletWrapper.java(Compiled Code))
 at com.ibm.ws.webcontainer.servlet.CacheServletWrapper.handleRequest(CacheServletWrapper.java(Compiled Code))
 at com.ibm.ws.webcontainer.WebContainer.handleRequest(WebContainer.java(Compiled Code))
 at com.ibm.ws.webcontainer.channel.WCChannelLink.ready(WCChannelLink.java(Compiled Code))
 at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleDiscrimination(HttpInboundLink.java(Compiled Code))
 at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.handleNewInformation(HttpInboundLink.java(Compiled Code))
 at com.ibm.ws.http.channel.inbound.impl.HttpInboundLink.ready(HttpInboundLink.java(Compiled Code))
 at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.sendToDiscriminaters(NewConnectionInitialReadCallback.java(Compiled Code))
 at com.ibm.ws.tcp.channel.impl.NewConnectionInitialReadCallback.complete(NewConnectionInitialReadCallback.java(Compiled Code))
 at com.ibm.ws.tcp.channel.impl.WorkQueueManager.requestComplete(WorkQueueManager.java(Compiled Code))
 at com.ibm.ws.tcp.channel.impl.WorkQueueManager.attemptIO(WorkQueueManager.java(Compiled Code))
 at com.ibm.ws.tcp.channel.impl.WorkQueueManager.workerRun(WorkQueueManager.java(Compiled Code))
 at com.ibm.ws.tcp.channel.impl.WorkQueueManager$Worker.run(WorkQueueManager.java(Compiled Code))
 at com.ibm.ws.util.ThreadPool$Worker.run(ThreadPool.java(Compiled Code))

这时需要将测试机的REALM修改成生产一致即可

找到security.xml文件，一般在D:\IBM\WebSphere\profiles\wp_profile\config\cells\portal下

把realm="pdc.domain.com.cn:389"修改为realm="domain.com.cn:389"

这个只是产生LTPAToken令牌的信息，修改对其他功能不影响

保存重新启动。

记录一下