000030166 - REST harness generates an error message unable to read a known contact list for RSA Authentication Manager Prime

Document created by RSA Customer Support Employee on Jun 14, 2016•Last modified by RSA Customer Support on Jan 8, 2020
Version 4Show Document
  • Comment • 0
  • View in full screen mode

Article Content

Article Number000030166
Applies ToRSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager Prime
IssueThe RSA Authentication Manager REST harness reports the following error:

Request started at: dd/mm/yyyy hh:mm:ss PM == Elapsed time nn:nn:nn.nnnnnnn
http://localhost:8080/am8/user/search/rsatest?searchType=equals
----
 GET 
--------
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<serviceResult errorMessage="java.lang.Exception : ==DC== Unable to read a known contact list!" result="false"/>


With debug parameter ( '-Dlog.level=DEBUG' )  enabled the RSA Authentication Manager Integration Service am8 log file in <AMIS_HOME>\amis\logs folder reports a connection problem:

2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== [ACTIVE THREAD] Active count: 3
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Creating new driver
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Reading contact list from default am server.
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Reading contact list from ip: app81p.csau.ap.rsa.net
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,Creating connection to: app81p.csau.ap.rsa.net
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,creating connection to am8 
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,Creating connection to am8 using: amisadmin
2015-05-04T15:56:40,086+1000,com.rsa.ucm.am8,32,ERROR,==DC== Error reading contact list from server/FAILURE_LOG[$Thread: 29
com.rsa.authn.AuthenticationCommandException: Access Denied
STACK_TRACE[$com.rsa.authn.AuthenticationCommandException: Access Denied
com.rsa.authn.AuthenticatedTargetImpl.login(AuthenticatedTargetImpl.java:172)
com.rsa.command.ConnectionFactory$ConnectionImpl.connect(ConnectionFactory.java:758)
com.rsa.command.ConnectionFactory$ConnectionImpl.connect(ConnectionFactory.java:740)
com.rsa.ucm.AuthManager.AuthManagerSession.createSession(AuthManagerSession.java:194)
com.rsa.ucm.AuthManager.AuthManagerSession.<init>(AuthManagerSession.java:82)
com.rsa.ucm.AuthManager.SessionFactory.createSession(SessionFactory.java:26)
com.rsa.ucm.AuthManager.AMDriverFactory.create(AMDriverFactory.java:81)
com.rsa.ucm.AuthManager.AMDriverFactory.create(AMDriverFactory.java:13)
com.rsa.ucm.AuthManager.DriverCache.getContactListFromServer(DriverCache.java:47)
com.rsa.ucm.AuthManager.DriverCache.getServerList(DriverCache.java:82)
com.rsa.ucm.AuthManager.DriverCache.createSessionOnPrimary(DriverCache.java:138)
com.rsa.ucm.AuthManager.DriverCache.createSession(DriverCache.java:198)
com.rsa.ucm.AuthManager.DriverCache.get(DriverCache.java:237)
com.rsa.ucm.AuthManager.AMService.getDriver(AMService.java:75)
com.rsa.ucm.AuthManager.AMService.userSearch(AMService.java:211)
com.rsa.ucm.shared.extensions.AMExtensionService.userSearch(AMExtensionService.java:128)
com.rsa.ucm.shared.resources.UserManager.search(UserManager.java:188)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)


 
CauseRSA Authentication Manager Integration Service requires a superadmin account in the RSA Authentication Manager database and it was left in a change password at next logon state after creation.
ResolutionConfirm the RSA Authentication Manager Integration Service superadmin account is working correctly by using the logon credentials with the Security Console of the Authentication Manager primary instance.
  1. Enter the superadmin account logon credentails:

User-added image


  1. Change the password when prompted:

User-added image


  1. Use the Authenticate (tdsAuthenticate) and Authentication Manager REST Harness (amServiceHarness) programs to test the RSA Authentication Manager Integration Service configuration after following the Security Console prompts to change the superadmin account password.
NotesHarness Information
NameExecutableLocation
AuthenticatetdsAuthenticate.exe<AMIS_HOME>\amis\apps\harness\auth
Authentication Manager Rest HarnessamServiceHarness.exe<AMIS_HOME>\amis\apps\harness\amis-methods

 
 

Attachments

    Outcomes