API Failures when retrieving CustomerId via Provisioning API and OAuth

[Jay Lee]

I am seeing "Invalid Domain" failures when trying to retrieve CustomerId via the provisioning API and using OAuth authentication. The same code works fine with ClientLogin:

"gam print orgs" with OAuth:

send: 'GET https://apps-apis.google.com/a/feeds/customer/2.0/custome

rId HTTP/1.1\r\nAccept-Encoding: identity\r\nHost: apps-apis.google.com\r\nConte

nt-Type: application/atom+xml\r\nAuthorization: OAuth realm="", oauth_nonce="002

60136", oauth_timestamp="1316703279", oauth_consumer_key="xxx", oauth_signature_method="HMAC-SHA1", oauth_version="1.0", oau

th_token="xxx", oauth_signature="xxx"\r\nUser-Agent: Google Apps Manager 1.9.1 / jay0le

e...@gmail.com (Jay Lee) / Python 2.7.2 final / Windows-7-6.1.7601-SP1 AMD64 / GDat

a-Python 2.0.14+20110902+custom_mods\r\n\r\n'

reply: 'HTTP/1.1 403 Invalid domain.\r\n'

header: Content-Type: text/html; charset=UTF-8

header: Date: Thu, 22 Sep 2011 14:54:43 GMT

header: Expires: Thu, 22 Sep 2011 14:54:43 GMT

header: Cache-Control: private, max-age=0

header: X-Content-Type-Options: nosniff

header: X-Frame-Options: SAMEORIGIN

header: X-XSS-Protection: 1; mode=block

header: Server: GSE

"gam print orgs" with ClientLogin:

e domain)...send: 'GET https://apps-apis.google.com/a/feeds/customer/2.0/custome

rId HTTP/1.1\r\nAccept-Encoding: identity\r\nHost: apps-apis.google.com\r\nConte

nt-Type: application/atom+xml\r\nAuthorization: GoogleLogin auth=xxx

\r\nUser-Agent: Google Apps Manager 1.9.1 / jay...@gmail.com (

Jay Lee) / Python 2.7.2 final / Windows-7-6.1.7601-SP1 AMD64 / GData-Python 2.0.

14+20110902+custom_mods\r\n\r\n'

reply: 'HTTP/1.1 200 OK\r\n'

header: Content-Type: application/atom+xml; charset=UTF-8

header: Expires: Thu, 22 Sep 2011 14:57:07 GMT

header: Date: Thu, 22 Sep 2011 14:57:07 GMT

header: Cache-Control: private, max-age=0, must-revalidate, no-transform

header: Vary: Accept, X-GData-Authorization, GData-Version

header: GData-Version: 1.0

header: Last-Modified: Thu, 22 Sep 2011 14:57:07 GMT

header: X-Content-Type-Options: nosniff

header: X-Frame-Options: SAMEORIGIN

header: X-XSS-Protection: 1; mode=block

header: Server: GSE

header: Transfer-Encoding: chunked

this code was working up until 11pm last night. I'm seeing this issue across multiple Google Apps instances and using Google Apps Directory Sync Tool also.

I suspect this is a Google Server side issue...

Jay

[Jay Lee]

I can confirm similar issues with Google Apps Directory Sync right now. If I configure GADS to use ClientLogin username/password, I can successfully simulate the sync. If I use OAuth I get:

[2011-09-22 08:09:33,660] [AWT-EventQueue-0] [INFO] [ui.page.SimulateSync$SimulationPanel] Version 2.1.1

[2011-09-22 08:09:33,661] [AWT-EventQueue-0] [INFO] [ui.page.SimulateSync$SimulationPanel] Starting Simulation

[2011-09-22 08:09:33,669] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.SynchronizationPluginGroup] 1 plugin(s) do not support the OPTIONAL feature "ALIAS_SYNCHRONIZATION"

[2011-09-22 08:09:33,680] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.SynchronizationPluginGroup] 1 plugin(s) do not support the OPTIONAL feature "CALENDAR_RESOURCES"

[2011-09-22 08:09:33,681] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.SynchronizationPluginGroup] 1 plugin(s) do not support the OPTIONAL feature "GROUP_DESCRIPTION"

[2011-09-22 08:09:33,681] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.SynchronizationPluginGroup] 1 plugin(s) do not support the OPTIONAL feature "SHA1_PASSWORD"

[2011-09-22 08:09:33,682] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.SynchronizationPluginGroup] 1 plugin(s) do not support the OPTIONAL feature "MD5_PASSWORD"

[2011-09-22 08:09:33,682] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.SynchronizationPluginGroup] 1 plugin(s) do not support the OPTIONAL feature "GROUPS"

[2011-09-22 08:09:33,683] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.SynchronizationPluginGroup] 1 plugin(s) do not support the OPTIONAL feature "GOOGLE_QUOTA"

[2011-09-22 08:09:33,683] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.SynchronizationPluginGroup] 1 plugin(s) do not support the OPTIONAL feature "GROUP_OWNER"

[2011-09-22 08:09:33,694] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.DiskDatabaseState] Opening disk based persistent data at '/home/jlee/syncState/7afcbb26dd73442094d0d539f9b1cb7e'

[2011-09-22 08:09:33,698] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.DiskDatabaseState] Starting up state using connection string "jdbc:derby:/home/jlee/syncState/7afcbb26dd73442094d0d539f9b1cb7e;create=true"

[2011-09-22 08:09:34,292] [SwingWorker-pool-1-thread-11] [TRACE] [usersyncapp.sync.FullSyncAgent] Config revision id or hashCode changed, clearing remote date cache.

[2011-09-22 08:09:35,998] [SwingWorker-pool-1-thread-11] [TRACE] [usersyncapp.sync.FullSyncAgent] Local data cache has expired or is invalid, clearing.

[2011-09-22 08:09:36,008] [SwingWorker-pool-1-thread-11] [TRACE] [usersyncapp.sync.FullSyncAgent] Remote data cache has expired or is invalid, clearing.

[2011-09-22 08:09:38,101] [pool-2-thread-8] [DEBUG] [plugin.ldap.LDAPHandler] Executing LDAP rule, scope "ONELEVEL", filter "objectClass=inetOrgPerson"

[2011-09-22 08:09:38,109] [pool-2-thread-8] [DEBUG] [plugin.ldap.LDAPHandler] Will retrieve notable LDAP attribute "mail"

[2011-09-22 08:09:38,116] [pool-2-thread-8] [DEBUG] [plugin.ldap.LDAPHandler] Will retrieve notable LDAP attribute "sn"

[2011-09-22 08:09:38,128] [pool-2-thread-8] [DEBUG] [plugin.ldap.LDAPHandler] Will retrieve notable LDAP attribute "givenName"

[2011-09-22 08:09:38,129] [pool-2-thread-8] [DEBUG] [plugin.ldap.LDAPHandler] Connecting to LDAP using plain authentication.

[2011-09-22 08:09:38,129] [pool-2-thread-8] [DEBUG] [plugin.ldap.LDAPHandler] Connecting to LDAP using URL "ldap://localhost:389/ou=people,dc=example,dc=com", server type "OPENLDAP"

[2011-09-22 08:09:38,124] [pool-2-thread-7] [TRACE] [usersyncapp.util.ProxyAuthenticator] Restoring default Authenticator.

[2011-09-22 08:09:38,132] [pool-2-thread-7] [TRACE] [plugin.google.ServiceProxy] creating new ServiceProxy - usersUrlBase = https://apps-apis.google.com/a/feeds/,

 groupsUrlBase = https://apps-apis.google.com/a/feeds/group/2.0/jay.powerposters.org/,

 contactsUrlBase = null,

 profilesUrlBase = null,

 calendarResourcesUrlBase = https://apps-apis.google.com/a/feeds/calendar/resource/2.0/jay.powerposters.org/,

 authUri = www.google.com,

 authProtocol = https, users = true, groups = false, shared contacts = false, user profiles = false, multiDomain = true.

[2011-09-22 08:09:38,132] [pool-2-thread-7] [TRACE] [plugin.google.ServiceProxy] Doing org units - customerIdUrlBase = https://apps-apis.google.com/a/feeds/customer/2.0/customerId,

 orgunitsUrlBase = https://apps-apis.google.com/a/feeds/orgunit/2.0/.

[2011-09-22 08:09:38,132] [pool-2-thread-7] [DEBUG] [plugin.google.ServiceProxy] Using OAuth to authenticate services

[2011-09-22 08:09:38,134] [pool-2-thread-7] [DEBUG] [plugin.google.OAuthAuthenticator] Authenticated Successfully using OAuth

[2011-09-22 08:09:38,135] [pool-2-thread-8] [TRACE] [plugin.ldap.LDAPHandler] Opening Initial LDAP Context

[2011-09-22 08:09:38,166] [pool-2-thread-8] [TRACE] [plugin.ldap.LDAPHandler] Performing LDAP search

[2011-09-22 08:09:38,173] [pool-2-thread-8] [TRACE] [plugin.ldap.LDAPHandler] LDAP search completed, starting result processing

[2011-09-22 08:09:38,180] [pool-10-thread-1] [TRACE] [plugin.ldap.LDAPHandler$LdapResultProcessor] ***********LDAP RESULT 1 ************

dn: "uid=john,ou=people,dc=example,dc=com"

[2011-09-22 08:09:38,183] [pool-10-thread-1] [TRACE] [plugin.ldap.LDAPHandler$LdapResultProcessor] mail: "john...@example.com"

[2011-09-22 08:09:38,198] [pool-10-thread-1] [TRACE] [plugin.ldap.LDAPHandler$LdapResultProcessor] givenname: "John"

[2011-09-22 08:09:38,202] [pool-10-thread-1] [TRACE] [plugin.ldap.LDAPHandler$LdapResultProcessor] sn: "Doe"

[2011-09-22 08:09:38,202] [pool-10-thread-1] [DEBUG] [plugin.ldap.UserResultProcessor] User has org value type of ORG_MAPPING, but there was no mapping set for the DN. Node DN is "uid=john,ou=people,dc=example,dc=com"

[2011-09-22 08:09:38,203] [pool-10-thread-1] [TRACE] [plugin.ldap.UserResultProcessor] Found local LDAP user "john.doe", org "/"

[2011-09-22 08:09:38,209] [pool-10-thread-1] [TRACE] [plugin.ldap.LDAPHandler$LdapResultProcessor] ***********LDAP RESULT 2 ************

dn: "uid=jane,ou=people,dc=example,dc=com"

[2011-09-22 08:09:38,217] [pool-10-thread-1] [TRACE] [plugin.ldap.LDAPHandler$LdapResultProcessor] mail: "jane...@example.com"

[2011-09-22 08:09:38,219] [pool-10-thread-1] [TRACE] [plugin.ldap.LDAPHandler$LdapResultProcessor] givenname: "Jane"

[2011-09-22 08:09:38,222] [pool-10-thread-1] [TRACE] [plugin.ldap.LDAPHandler$LdapResultProcessor] sn: "Doe"

[2011-09-22 08:09:38,223] [pool-10-thread-1] [DEBUG] [plugin.ldap.UserResultProcessor] User has org value type of ORG_MAPPING, but there was no mapping set for the DN. Node DN is "uid=jane,ou=people,dc=example,dc=com"

[2011-09-22 08:09:38,224] [pool-10-thread-1] [TRACE] [plugin.ldap.UserResultProcessor] Found local LDAP user "jane.doe", org "/"

[2011-09-22 08:09:38,228] [pool-2-thread-8] [DEBUG] [plugin.ldap.LDAPHandler] Processed 2 results from LDAP search

[2011-09-22 08:09:38,468] [pool-2-thread-7] [DEBUG] [plugin.google.OAuthAuthenticator] Authenticated Successfully using OAuth

[2011-09-22 08:09:38,507] [pool-2-thread-7] [TRACE] [plugin.google.ServiceProxy] Retrying again as following exception occurred while trying to retrieve customer id (attempt #1 of 3)

com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at com.google.gdata.client.http.HttpGDataRequest.handleErrorResponse(HttpGDataRequest.java:560)

at com.google.gdata.client.http.GoogleGDataRequest.handleErrorResponse(GoogleGDataRequest.java:543)

at com.google.gdata.client.http.HttpGDataRequest.checkResponse(HttpGDataRequest.java:535)

at com.google.gdata.client.http.HttpGDataRequest.execute(HttpGDataRequest.java:514)

at com.google.gdata.client.http.GoogleGDataRequest.execute(GoogleGDataRequest.java:515)

at com.google.gdata.client.Service.getEntry(Service.java:1251)

at com.google.gdata.client.GoogleService.getEntry(GoogleService.java:567)

at com.google.gdata.client.Service.getEntry(Service.java:1177)

at com.google.gdata.client.appsforyourdomain.AppsForYourDomainService.getEntry(AppsForYourDomainService.java:115)

at com.postini.usersyncapp.plugin.google.ServiceProxy.getOrgunitCustomerId(ServiceProxy.java:633)

at com.postini.usersyncapp.plugin.google.ServiceProxy.openConnections(ServiceProxy.java:561)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:480)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:286)

at com.postini.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:283)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:63)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:28)

at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

[2011-09-22 08:09:39,551] [pool-2-thread-7] [TRACE] [plugin.google.ServiceProxy] Retrying again as following exception occurred while trying to retrieve customer id (attempt #2 of 3)

com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at com.google.gdata.client.http.HttpGDataRequest.handleErrorResponse(HttpGDataRequest.java:560)

at com.google.gdata.client.http.GoogleGDataRequest.handleErrorResponse(GoogleGDataRequest.java:543)

at com.google.gdata.client.http.HttpGDataRequest.checkResponse(HttpGDataRequest.java:535)

at com.google.gdata.client.http.HttpGDataRequest.execute(HttpGDataRequest.java:514)

at com.google.gdata.client.http.GoogleGDataRequest.execute(GoogleGDataRequest.java:515)

at com.google.gdata.client.Service.getEntry(Service.java:1251)

at com.google.gdata.client.GoogleService.getEntry(GoogleService.java:567)

at com.google.gdata.client.Service.getEntry(Service.java:1177)

at com.google.gdata.client.appsforyourdomain.AppsForYourDomainService.getEntry(AppsForYourDomainService.java:115)

at com.postini.usersyncapp.plugin.google.ServiceProxy.getOrgunitCustomerId(ServiceProxy.java:633)

at com.postini.usersyncapp.plugin.google.ServiceProxy.openConnections(ServiceProxy.java:561)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:480)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:286)

at com.postini.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:283)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:63)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:28)

at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

[2011-09-22 08:09:41,599] [pool-2-thread-7] [TRACE] [plugin.google.ServiceProxy] Retrying again as following exception occurred while trying to retrieve customer id (attempt #3 of 3)

com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at com.google.gdata.client.http.HttpGDataRequest.handleErrorResponse(HttpGDataRequest.java:560)

at com.google.gdata.client.http.GoogleGDataRequest.handleErrorResponse(GoogleGDataRequest.java:543)

at com.google.gdata.client.http.HttpGDataRequest.checkResponse(HttpGDataRequest.java:535)

at com.google.gdata.client.http.HttpGDataRequest.execute(HttpGDataRequest.java:514)

at com.google.gdata.client.http.GoogleGDataRequest.execute(GoogleGDataRequest.java:515)

at com.google.gdata.client.Service.getEntry(Service.java:1251)

at com.google.gdata.client.GoogleService.getEntry(GoogleService.java:567)

at com.google.gdata.client.Service.getEntry(Service.java:1177)

at com.google.gdata.client.appsforyourdomain.AppsForYourDomainService.getEntry(AppsForYourDomainService.java:115)

at com.postini.usersyncapp.plugin.google.ServiceProxy.getOrgunitCustomerId(ServiceProxy.java:633)

at com.postini.usersyncapp.plugin.google.ServiceProxy.openConnections(ServiceProxy.java:561)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:480)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:286)

at com.postini.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:283)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:63)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:28)

at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

[2011-09-22 08:09:44,612] [pool-2-thread-7] [DEBUG] [plugin.google.ServiceProxy] Unable to log in 3 times in a row, giving up.

com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at com.google.gdata.client.http.HttpGDataRequest.handleErrorResponse(HttpGDataRequest.java:560)

at com.google.gdata.client.http.GoogleGDataRequest.handleErrorResponse(GoogleGDataRequest.java:543)

at com.google.gdata.client.http.HttpGDataRequest.checkResponse(HttpGDataRequest.java:535)

at com.google.gdata.client.http.HttpGDataRequest.execute(HttpGDataRequest.java:514)

at com.google.gdata.client.http.GoogleGDataRequest.execute(GoogleGDataRequest.java:515)

at com.google.gdata.client.Service.getEntry(Service.java:1251)

at com.google.gdata.client.GoogleService.getEntry(GoogleService.java:567)

at com.google.gdata.client.Service.getEntry(Service.java:1177)

at com.google.gdata.client.appsforyourdomain.AppsForYourDomainService.getEntry(AppsForYourDomainService.java:115)

at com.postini.usersyncapp.plugin.google.ServiceProxy.getOrgunitCustomerId(ServiceProxy.java:633)

at com.postini.usersyncapp.plugin.google.ServiceProxy.openConnections(ServiceProxy.java:561)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:480)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:286)

at com.postini.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:283)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:63)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:28)

at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

[2011-09-22 08:09:44,620] [pool-2-thread-7] [FATAL] [ui.page.SimulateSyncWorker$WorkerStatusLogger] Exception while attempting to retrieve results

java.lang.RuntimeException: com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at com.postini.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:288)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:63)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:28)

at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

Caused by: com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at com.google.gdata.client.http.HttpGDataRequest.handleErrorResponse(HttpGDataRequest.java:560)

at com.google.gdata.client.http.GoogleGDataRequest.handleErrorResponse(GoogleGDataRequest.java:543)

at com.google.gdata.client.http.HttpGDataRequest.checkResponse(HttpGDataRequest.java:535)

at com.google.gdata.client.http.HttpGDataRequest.execute(HttpGDataRequest.java:514)

at com.google.gdata.client.http.GoogleGDataRequest.execute(GoogleGDataRequest.java:515)

at com.google.gdata.client.Service.getEntry(Service.java:1251)

at com.google.gdata.client.GoogleService.getEntry(GoogleService.java:567)

at com.google.gdata.client.Service.getEntry(Service.java:1177)

at com.google.gdata.client.appsforyourdomain.AppsForYourDomainService.getEntry(AppsForYourDomainService.java:115)

at com.postini.usersyncapp.plugin.google.ServiceProxy.getOrgunitCustomerId(ServiceProxy.java:633)

at com.postini.usersyncapp.plugin.google.ServiceProxy.openConnections(ServiceProxy.java:561)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:480)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:286)

at com.postini.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:283)

... 7 more

[2011-09-22 08:09:44,626] [SwingWorker-pool-1-thread-11] [TRACE] [usersyncapp.sync.FullSyncAgent] Caught Throwable during full synchronization - com.postini.usersyncapp.sync.FullFillWorker$FillFailureException: java.lang.RuntimeException: com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

java.util.concurrent.ExecutionException: com.postini.usersyncapp.sync.FullFillWorker$FillFailureException: java.lang.RuntimeException: com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at java.util.concurrent.FutureTask$Sync.innerGet(Unknown Source)

at java.util.concurrent.FutureTask.get(Unknown Source)

at com.postini.usersyncapp.sync.SynchronizationPluginGroup.executeFullFill(SynchronizationPluginGroup.java:102)

at com.postini.usersyncapp.sync.FullSyncAgent.fullFill(FullSyncAgent.java:425)

at com.postini.usersyncapp.sync.FullSyncAgent.call(FullSyncAgent.java:121)

at com.postini.usersyncapp.ui.page.SimulateSyncWorker.doInBackground(SimulateSyncWorker.java:84)

at com.postini.usersyncapp.ui.page.SimulateSyncWorker.doInBackground(SimulateSyncWorker.java:28)

at javax.swing.SwingWorker$1.call(Unknown Source)

at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

at javax.swing.SwingWorker.run(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(Unknown Source)

at java.util.concurrent.ThreadPoolExecutor$Worker.run(Unknown Source)

at java.lang.Thread.run(Unknown Source)

Caused by: com.postini.usersyncapp.sync.FullFillWorker$FillFailureException: java.lang.RuntimeException: com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:77)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:28)

at java.util.concurrent.FutureTask$Sync.innerRun(Unknown Source)

at java.util.concurrent.FutureTask.run(Unknown Source)

... 3 more

Caused by: java.lang.RuntimeException: com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at com.postini.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:288)

at com.postini.usersyncapp.sync.FullFillWorker.call(FullFillWorker.java:63)

... 6 more

Caused by: com.google.gdata.util.ServiceForbiddenException: Invalid domain.

<HTML>

<HEAD>

<TITLE>Invalid domain.</TITLE>

</HEAD>

<BODY BGCOLOR="#FFFFFF" TEXT="#000000">

<H1>Invalid domain.</H1>

<H2>Error 403</H2>

</BODY>

</HTML>

at com.google.gdata.client.http.HttpGDataRequest.handleErrorResponse(HttpGDataRequest.java:560)

at com.google.gdata.client.http.GoogleGDataRequest.handleErrorResponse(GoogleGDataRequest.java:543)

at com.google.gdata.client.http.HttpGDataRequest.checkResponse(HttpGDataRequest.java:535)

at com.google.gdata.client.http.HttpGDataRequest.execute(HttpGDataRequest.java:514)

at com.google.gdata.client.http.GoogleGDataRequest.execute(GoogleGDataRequest.java:515)

at com.google.gdata.client.Service.getEntry(Service.java:1251)

at com.google.gdata.client.GoogleService.getEntry(GoogleService.java:567)

at com.google.gdata.client.Service.getEntry(Service.java:1177)

at com.google.gdata.client.appsforyourdomain.AppsForYourDomainService.getEntry(AppsForYourDomainService.java:115)

at com.postini.usersyncapp.plugin.google.ServiceProxy.getOrgunitCustomerId(ServiceProxy.java:633)

at com.postini.usersyncapp.plugin.google.ServiceProxy.openConnections(ServiceProxy.java:561)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:480)

at com.postini.usersyncapp.plugin.google.ServiceProxy.<init>(ServiceProxy.java:286)

at com.postini.usersyncapp.plugin.google.GooglePlugin.doFullFill(GooglePlugin.java:283)

... 7 more

[2011-09-22 08:09:44,633] [SwingWorker-pool-1-thread-11] [DEBUG] [usersyncapp.sync.DiskDatabaseState] Shutting down state using connection string "jdbc:derby:/home/jlee/syncState/7afcbb26dd73442094d0d539f9b1cb7e;shutdown=true"

[2011-09-22 08:09:44,843] [AWT-EventQueue-0] [INFO] [ui.page.SimulateSync$SimulationPanel$2] Simulation completed successfully

[2011-09-22 08:11:38,851] [AWT-EventQueue-0] [DEBUG] [plugin.google.OAuthAuthenticator] Authenticated Successfully using OAuth

[Jay Lee]

For reference, I've filed case #01573876 with GES on this issue. I've also referred them to this post.

Jay

[Alexandre Jacquet]

Hello Jay,

We are having the same issues in a few of our customers using GADS OAuth and OAuth applications.

I think is global problem =\

                                                                                           

Alexandre Jacquet Google Apps Deployment Specialst  São Paulo | SP | Brasil Tel.: 55 11 8064 6882

On Thu, Sep 22, 2011 at 1:17 PM, Jay Lee <jay...@gmail.com> wrote:

For reference, I've filed case #01573876 with GES on this issue. I've also referred them to this post.

Jay

--
You received this message because you are subscribed to the Google Groups "Google Apps Domain Information and Management APIs" group.

To view this discussion on the web visit https://groups.google.com/d/msg/google-apps-mgmt-apis/-/Q3LwPyr9cCQJ.

To post to this group, send email to google-app...@googlegroups.com.
To unsubscribe from this group, send email to google-apps-mgmt...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/google-apps-mgmt-apis?hl=en.

[Shraddha Gupta]

Hello,

We are looking into this problem. Thanks for raising the issue. We will update on this, as soon as we solve it, till then please bear with us.

Thanks,

Shraddha Gupta |

Developer Programs Engineer |

shra...@google.com |

[Michael Manoochehri]

Hi everyone:

A number of domains are still reporting invalid domain errors (401 HTTP responses) when requesting a customerID resource.  We are still trying to identify the cause of the problem, but do not currently have a workaround or an ETA on a resolution. However we are escalating the priority issue and our team will update this thread with more information soon!

- Michael

[Michael Manoochehri]

Hi everyone:

Thanks again for reporting this issue. Our engineers are currently working on restoring API service - I have posted an update about this on our API Downtime List (here) and will make updates on that thread. However, my current estimate is that this issue will be fixed within 24 hours.

- Michael

[James Schlackman]

Michael,

Thanks for your update on the problem. This may sound silly, but has anyone told GES that this is now a known issue? I just got off the phone with them and they had no idea of this when I discussed my case with them.

[Shraddha Gupta]

Hi all,

We are glad to inform that this issue has been solved. You shall be able to make Provisioning API call for retrieving customerId using OAuth. Thanks for your patience. 

-Shraddha