# Initial log on with google account

**URL:** <https://forum.getodk.org/t/initial-log-on-with-google-account/1719>\
**Category:** Support\
**Created:** [October 23, 2012, 11:55am UTC](https://forum.getodk.org/t/initial-log-on-with-google-account/1719 "2012-10-23T11:55:37Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Bashir\_Jahed](https://getodk.b-cdn.net/letter_avatar_proxy/v4/letter/b/3be4f8/32.png) [@Bashir\_Jahed](https://forum.getodk.org/u/Bashir_Jahed)\
**Post date:** [October 23, 2012, 11:55am UTC](https://forum.getodk.org/t/initial-log-on-with-google-account/1719/1 "2012-10-23T11:55:37Z")

</div>

I have set up a new instance of ODK aggregate, tomcat6 and mysql.

Then i try and log in for the first time using the google apps email set in  
the installer i get the following error. same happening for a previous site  
installed. Any way to log on initially without using the google apps  
account?

HTTP Status 401 - Authentication Failed: Log in failed - identity could not  
be verified

> **···**
>
> ------------------------------
> 
> _type_ Status report
> 
> _message_ _Authentication Failed: Log in failed - identity could not be  
> verified_
> 
> _description_ _This request requires HTTP authentication (Authentication  
> Failed: Log in failed - identity could not be verified)._  
> \*  
> \*

---

<div class="post-metadata">

**Author:** ![Christopher\_Robert1](https://getodk.b-cdn.net/letter_avatar_proxy/v4/letter/c/5fc32e/32.png) [@Christopher\_Robert1](https://forum.getodk.org/u/Christopher_Robert1)\
**Post date:** [October 23, 2012, 12:01pm UTC](https://forum.getodk.org/t/initial-log-on-with-google-account/1719/2 "2012-10-23T12:01:59Z")

</div>

Bashir,

One idea: Make sure that you're capitalizing your login address precisely  
the way you did when you entered it into the installer.

Alternatively, set the security.server.superUserUsername property in  
security.properties (and see the comments in security.properties for more  
details).

Best,

Chris

> **···**
>
> On Tuesday, October 23, 2012, Bashir Jahed wrote:
> 
> > I have set up a new instance of ODK aggregate, tomcat6 and mysql.
> > 
> > Then i try and log in for the first time using the google apps email set  
> > in the installer i get the following error. same happening for a previous  
> > site installed. Any way to log on initially without using the google apps  
> > account?
> > 
> > ## HTTP Status 401 - Authentication Failed: Log in failed - identity could not be verified
> > 
> > _type_ Status report
> > 
> > _message_ _Authentication Failed: Log in failed - identity could not be  
> > verified_
> > 
> > _description_ _This request requires HTTP authentication (Authentication  
> > Failed: Log in failed - identity could not be verified)._  
> > \*  
> > \*
> > 
> > --  
> > Post: [opendatakit@googlegroups.com](mailto:opendatakit@googlegroups.com) \<javascript:\_e({}, 'cvml',  
> > 'opendatakit@googlegroups.com');\>  
> > Unsubscribe: [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com) \<javascript:\_e({},  
> > 'cvml', 'opendatakit%2Bunsubscribe@googlegroups.com');\>  
> > Options: [http://groups.google.com/group/opendatakit?hl=en](http://groups.google.com/group/opendatakit?hl=en)

---

<div class="post-metadata">

**Author:** ![Mitch\_S](https://getodk.b-cdn.net/letter_avatar_proxy/v4/letter/m/3ec8ea/32.png) [@Mitch\_S](https://forum.getodk.org/u/Mitch_S)\
**Post date:** [October 23, 2012, 5:10pm UTC](https://forum.getodk.org/t/initial-log-on-with-google-account/1719/3 "2012-10-23T17:10:52Z")

</div>

Check your catalina.log for error details. A common problem is to have the  
system time set improperly, giving an error like:

Feb 1, 2012 5:02:41 PM org.openid4java.consumer.AbstractNonceVerifier seen  
WARNING: Nonce is too old: 2012-02-01T12:00:20ZmhjAZk0Ti\_hX-w  
Feb 1, 2012 5:02:41 PM org.openid4java.consumer.ConsumerManagerImpl verify  
SEVERE: Nonce verification failed.

As far as I can tell, this seems to be an issue if the BIOS clock and the  
operating system clock are out of alignment. It appears that setting the  
operating system clock manually will correct the problem.

Otherwise, this wiki provides info on the configuration options:  
[http://code.google.com/p/opendatakit/wiki/AggregateDeploymentConfiguration](http://code.google.com/p/opendatakit/wiki/AggregateDeploymentConfiguration)  
should you want to eliminate the need for the Google authentication. Keep  
in mind that this is lightly tested code, as we primarily use it for  
automated tests.

Mitch

> **···**
>
> On Tue, Oct 23, 2012 at 5:01 AM, Christopher Robert \< Christopher\_Robert@hks.harvard.edu\> wrote:
> 
> > Bashir,
> > 
> > One idea: Make sure that you're capitalizing your login address precisely  
> > the way you did when you entered it into the installer.
> > 
> > Alternatively, set the security.server.superUserUsername property in  
> > security.properties (and see the comments in security.properties for more  
> > details).
> > 
> > Best,
> > 
> > Chris
> > 
> > On Tuesday, October 23, 2012, Bashir Jahed wrote:
> > 
> > > I have set up a new instance of ODK aggregate, tomcat6 and mysql.
> > > 
> > > Then i try and log in for the first time using the google apps email set  
> > > in the installer i get the following error. same happening for a previous  
> > > site installed. Any way to log on initially without using the google apps  
> > > account?
> > > 
> > > ## HTTP Status 401 - Authentication Failed: Log in failed - identity could not be verified
> > > 
> > > _type_ Status report
> > > 
> > > _message_ _Authentication Failed: Log in failed - identity could not be  
> > > verified_
> > > 
> > > _description_ _This request requires HTTP authentication (Authentication  
> > > Failed: Log in failed - identity could not be verified)._  
> > > \*  
> > > \*
> > > 
> > > --  
> > > Post: [opendatakit@googlegroups.com](mailto:opendatakit@googlegroups.com)  
> > > Unsubscribe: [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com)  
> > > Options: [http://groups.google.com/group/opendatakit?hl=en](http://groups.google.com/group/opendatakit?hl=en)
> > 
> > --  
> > Post: [opendatakit@googlegroups.com](mailto:opendatakit@googlegroups.com)  
> > Unsubscribe: [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com)  
> > Options: [http://groups.google.com/group/opendatakit?hl=en](http://groups.google.com/group/opendatakit?hl=en)
> 
> --  
> Mitch Sundt  
> Software Engineer  
> University of Washington  
> [mitchellsundt@gmail.com](mailto:mitchellsundt@gmail.com)

---

<div class="post-metadata">

**Author:** ![Bashir\_Jahed](https://getodk.b-cdn.net/letter_avatar_proxy/v4/letter/b/3be4f8/32.png) [@Bashir\_Jahed](https://forum.getodk.org/u/Bashir_Jahed)\
**Post date:** [October 23, 2012, 6:46pm UTC](https://forum.getodk.org/t/initial-log-on-with-google-account/1719/4 "2012-10-23T18:46:50Z")

</div>

Thanks that worked, synchronised time with NTP server now it works 100%.  
Will keep in ind for future deployments to sync using ntp.

Kudos!

> **···**
>
> On Tue, Oct 23, 2012 at 7:10 PM, Mitch S wrote:
> 
> > Check your catalina.log for error details. A common problem is to have the  
> > system time set improperly, giving an error like:
> > 
> > Feb 1, 2012 5:02:41 PM org.openid4java.consumer.AbstractNonceVerifier seen  
> > WARNING: Nonce is too old: 2012-02-01T12:00:20ZmhjAZk0Ti\_hX-w  
> > Feb 1, 2012 5:02:41 PM org.openid4java.consumer.ConsumerManagerImpl verify  
> > SEVERE: Nonce verification failed.
> > 
> > As far as I can tell, this seems to be an issue if the BIOS clock and the  
> > operating system clock are out of alignment. It appears that setting the  
> > operating system clock manually will correct the problem.
> > 
> > Otherwise, this wiki provides info on the configuration options:  
> > [http://code.google.com/p/opendatakit/wiki/AggregateDeploymentConfiguration](http://code.google.com/p/opendatakit/wiki/AggregateDeploymentConfiguration)  
> > should you want to eliminate the need for the Google authentication. Keep  
> > in mind that this is lightly tested code, as we primarily use it for  
> > automated tests.
> > 
> > Mitch
> > 
> > On Tue, Oct 23, 2012 at 5:01 AM, Christopher Robert \< Christopher\_Robert@hks.harvard.edu\> wrote:
> > 
> > > Bashir,
> > > 
> > > One idea: Make sure that you're capitalizing your login address precisely  
> > > the way you did when you entered it into the installer.
> > > 
> > > Alternatively, set the security.server.superUserUsername property in  
> > > security.properties (and see the comments in security.properties for more  
> > > details).
> > > 
> > > Best,
> > > 
> > > Chris
> > > 
> > > On Tuesday, October 23, 2012, Bashir Jahed wrote:
> > > 
> > > > I have set up a new instance of ODK aggregate, tomcat6 and mysql.
> > > > 
> > > > Then i try and log in for the first time using the google apps email set  
> > > > in the installer i get the following error. same happening for a previous  
> > > > site installed. Any way to log on initially without using the google apps  
> > > > account?
> > > > 
> > > > ## HTTP Status 401 - Authentication Failed: Log in failed - identity could not be verified
> > > > 
> > > > _type_ Status report
> > > > 
> > > > _message_ _Authentication Failed: Log in failed - identity could not be  
> > > > verified_
> > > > 
> > > > _description_ \*This request requires HTTP authentication  
> > > > (Authentication Failed: Log in failed - identity could not be verified).  
> > > > \*  
> > > > \*  
> > > > \*
> > > > 
> > > > --  
> > > > Post: [opendatakit@googlegroups.com](mailto:opendatakit@googlegroups.com)  
> > > > Unsubscribe: [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com)  
> > > > Options: [http://groups.google.com/group/opendatakit?hl=en](http://groups.google.com/group/opendatakit?hl=en)
> > > 
> > > --  
> > > Post: [opendatakit@googlegroups.com](mailto:opendatakit@googlegroups.com)  
> > > Unsubscribe: [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com)  
> > > Options: [http://groups.google.com/group/opendatakit?hl=en](http://groups.google.com/group/opendatakit?hl=en)
> > 
> > --  
> > Mitch Sundt  
> > Software Engineer  
> > University of Washington  
> > [mitchellsundt@gmail.com](mailto:mitchellsundt@gmail.com)
> > 
> > --  
> > Post: [opendatakit@googlegroups.com](mailto:opendatakit@googlegroups.com)  
> > Unsubscribe: [opendatakit+unsubscribe@googlegroups.com](mailto:opendatakit+unsubscribe@googlegroups.com)  
> > Options: [http://groups.google.com/group/opendatakit?hl=en](http://groups.google.com/group/opendatakit?hl=en)
