000030166 - RSA Authentication Manager Prime - AMIS - Authentication Manager Rest Harness generates an error message

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 3Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000030166
Applies To
RSA Product SetSecurID
RSA Product/Service TypeRSA Authentication Manager Prime
RSA Version/Condition1.8.4
PlatformMicrosoft Windows 2012 R2
Platform (Other) 
O/S VersionMicrosoft Windows 2012 R2
Product Name 
Product Description 
IssueAuthentication Manager Rest Harness reports the following error:
Request started at: dd/mm/yyyy hh:mm:ss PM == Elapsed time nn:nn:nn.nnnnnnn
http://localhost:8080/am8/user/search/rsatest?searchType=equals
----
 GET 
--------
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<serviceResult errorMessage="java.lang.Exception : ==DC== Unable to read a known contact list!" result="false"/>

With debug parameter ( '-Dlog.level=DEBUG' )  enabled the AMIS am8 log file in the <AMIS_HOME>\amis\logs folder reports a connection problem:
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== [ACTIVE THREAD] Active count: 3
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Creating new driver
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Reading contact list from default am server.
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Reading contact list from ip: app81p.csau.ap.rsa.net
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,Creating connection to: app81p.csau.ap.rsa.net
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,creating connection to am8 
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,Creating connection to am8 using: amisadmin
2015-05-04T15:56:40,086+1000,com.rsa.ucm.am8,32,ERROR,==DC== Error reading contact list from server/FAILURE_LOG[$Thread: 29
com.rsa.authn.AuthenticationCommandException: Access Denied
STACK_TRACE[$com.rsa.authn.AuthenticationCommandException: Access Denied
com.rsa.authn.AuthenticatedTargetImpl.login(AuthenticatedTargetImpl.java:172)
com.rsa.command.ConnectionFactory$ConnectionImpl.connect(ConnectionFactory.java:758)
com.rsa.command.ConnectionFactory$ConnectionImpl.connect(ConnectionFactory.java:740)
com.rsa.ucm.AuthManager.AuthManagerSession.createSession(AuthManagerSession.java:194)
com.rsa.ucm.AuthManager.AuthManagerSession.<init>(AuthManagerSession.java:82)
com.rsa.ucm.AuthManager.SessionFactory.createSession(SessionFactory.java:26)
com.rsa.ucm.AuthManager.AMDriverFactory.create(AMDriverFactory.java:81)
com.rsa.ucm.AuthManager.AMDriverFactory.create(AMDriverFactory.java:13)
com.rsa.ucm.AuthManager.DriverCache.getContactListFromServer(DriverCache.java:47)
com.rsa.ucm.AuthManager.DriverCache.getServerList(DriverCache.java:82)
com.rsa.ucm.AuthManager.DriverCache.createSessionOnPrimary(DriverCache.java:138)
com.rsa.ucm.AuthManager.DriverCache.createSession(DriverCache.java:198)
com.rsa.ucm.AuthManager.DriverCache.get(DriverCache.java:237)
com.rsa.ucm.AuthManager.AMService.getDriver(AMService.java:75)
com.rsa.ucm.AuthManager.AMService.userSearch(AMService.java:211)
com.rsa.ucm.shared.extensions.AMExtensionService.userSearch(AMExtensionService.java:128)
com.rsa.ucm.shared.resources.UserManager.search(UserManager.java:188)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

 
CauseAMIS requires a superadmin account in the authentication manager database and it was left in a 'change password at next logon' state after creation.
ResolutionConfirm the AMIS superadmin account is working correctly by using the logon credentials with the Security Console of the authentication manager primary instance.
Example; enter the superadmin account logon credentails:
User-added image
Example; change the password when prompted:
User-added image
Use the Authenticate (tdsAuthenticate) and Authentication Manager Rest Harness (amServiceHarness) programs to test the AMIS configuration after following the Security Console prompts to change the superadmin account password.
NotesHarness Information:
NameExecutableLocation
AuthenticatetdsAuthenticate.exe<AMIS_HOME>\amis\apps\harness\auth
Authentication Manager Rest HarnessamServiceHarness.exe<AMIS_HOME>\amis\apps\harness\amis-methods

 
 

Attachments

    Outcomes