Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

...


Tip

Click on the links to expand panels and see answers.

...

Expand
titleToo much logging from Google libraries
Due to a problem with Google libraries, pl.craftware.shaded.com.google.api.client.http.HttpTransport logger produces too much data. If this is a problem for you, you can disable it with:

 

Code Block
log4j.logger.pl.craftware.shaded.com.google.api.client.http.HttpTransport=OFF

 

added to log4j.properties.


Expand
titlejava.net.SocketTimeoutException: Read timed outClick here to expand...

Increasing value of google.apps.batchRequestReadTimeout helps.

...

Expand
title403 Forbidden (...) "User Rate Limit Exceeded"


Code Block
com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 Forbidden 
{ 
	"code" : 403, 
	"errors" : [ { "domain" : "usageLimits", "message" : "User Rate Limit Exceeded", "reason" : "userRateLimitExceeded" } ], 
	"message" : "User Rate Limit Exceeded" 
}

 

For security reasons, Google Directory API has usage limits equal by default 15 requests per second. Sometimes it's too little, to change it:
  • Go to Google Developers Console > Your project > APIs & auth > APIs > Admin SDK > Quotas;
  • Find Quota summary > Per user limit and click Change;
  • Enter the new value (eg 1000) and click Change.

...

Expand
title403 Forbidden (...) "Daily Limit Exceeded"


Code Block
com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 Forbidden 
{ 
	"code" : 403, 
	"errors" : [ { "domain" : "usageLimits", "message" : "Daily Limit Exceeded", "reason" : "dailyLimitExceeded" } ], 
	"message" : "Daily Limit Exceeded" 
}

 

For security reasons, Google Directory API also has usage limits equal by 150000 requests per day. If it's too little for you can change directory.cache.synchronise.interval or ask Google for more in Google Developers Console Your project > APIs & auth > APIs > Admin SDK > QuotasApply for higher quota.

...

Expand
title400 Bad Request (...) "invalid_grant"Click here to expand...


Code Block
com.google.api.client.auth.oauth2.TokenResponseException: 400 Bad Request
{
  "error" : "invalid_grant"
}

 

This error may mean many problems, but most likely the system date/time on the computer Crowd server is running on is set incorrectly (Google uses it to improve security of access tokens):

  • fix the date/time;
  • restart Crowd (many parts of it and the plugin may depend current date/time).
To prevent such problems in the future, use NTP time synchronization. It's very likely that time synchronization is already enabled on that computer, but some proxy or firewall blocks access to NTP.

...