Apply Changes fails with 'java.net.MalformedURLException: no protocol: admin' in uaa.log

Products

• VMware Tanzu Application Service for VMs

Issue/Introduction

Apply Changes fails in uaa with following error:

---- Task 12345 | 20:19:19 | Updating instance uaa: uaa/f2a95baf-####-####-8471-2e59c237b3e4 (0) (canary) (00:14:50) Updating deployment: Expected task '12345' to succeed but state is 'error' Exit code 1 L Error: Action Failed get_task: Task a395f49b-####-####-####-fd1e307b43eg result: 1 of 2 post-start scripts failed. Failed Jobs: uaa. Successful Jobs: bosh-dns. Task 424755 | 21:43:59 | Error: Action Failed get_task: Task a395f49b-####-####-####-fd1e307b43eg result: 1 of 2 post-start scripts failed. Failed Jobs: uaa. Successful Jobs: bosh-dns. Task 424755 Started Fri Jun 26 20:58:22 UTC 2020 Task 424755 Finished Fri Jun 26 21:43:59 UTC 2020 Task 424755 Duration 00:45:37 Task 424755 error ===== 2020-06-26 21:44:01 UTC Finished "/usr/local/bin/bosh --no-color --non-interactive --tty --environment=myenv --deployment=cf-rea78dfa11f76f207f19 deploy --no-redact /var/tempest/workspaces/default/deployments/cf-rea78dfa11f76f207f19 .yml --recreate"; Duration: 2910s; Exit Status: 1 Exited with 1. ---- 

When checking uaa.log you see following error:

[2020-06-29 07:01:18.757] uaa - 16 [main] .... ERROR --- DispatcherServlet: Context initialization failed org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'org.springframework.security.filterChains': Cannot resolve reference to bean 'secFilterLoginServerAuthenticate' while setting bean property 'sourceList' with key [18]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'secFilterLoginServerAuthenticate': Cannot resolve reference to bean 'oauthResourceAuthenticationFilter' while setting constructor argument with key [3]; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'oauthResourceAuthenticationFilter': Cannot create inner bean '(inner bean)#3778cd05' of type [org.springframework.security.oauth2.provider.authentication.OAuth2AuthenticationManager] while setting bean property 'authenticationManager'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name '(inner bean)#3778cd05': Cannot resolve reference to bean 'tokenServices' while setting bean property 'tokenServices'; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'tokenServices' defined in ServletContext resource [/WEB-INF/spring/oauth-endpoints.xml]: Cannot resolve reference to bean 'idTokenCreator' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'idTokenCreator' defined in ServletContext resource [/WEB-INF/spring/oauth-endpoints.xml]: Cannot resolve reference to bean 'tokenEndpointBuilder' while setting constructor argument; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'tokenEndpointBuilder' defined in ServletContext resource [/WEB-INF/spring/oauth-endpoints.xml]: Bean instantiation via constructor failed; nested exception is org.springframework.beans.BeanInstantiationException: Failed to instantiate [org.cloudfoundry.identity.uaa.oauth.TokenEndpointBuilder]: Constructor threw exception; nested exception is java.net.MalformedURLException: no protocol: admin

Environment

Product Version: 2.8

Resolution

We have seen this issue when Chrome autofill extensions fills “JWT issuer URI” field in Ops Man -> TAS -> “UAA” with "admin" or any other value. Removing that value and putting the right one (either leaving it empty so it takes https:// uaa.system-domain or putting your preferred JWS issuer) should solve this issue.