000027917 - KB-1589 Security errors during ACM 5.5.x deployment on WebLogic

Document created by RSA Customer Support Employee on Jun 15, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000027917
Applies ToThe problem is seen on upgrades from ACM Pre-5.5.x versions to ACM 5.5.x versions. 
IssueWhile attempting to deploy the ACM 5.5.x WebLogic aveksa.ear file, the following error is seen on the WebLogic admin screen, as well as noted in the AdminServer.log for the WebLogic installation:

Errors seen in WebLogic Admin console screen during deployment:
An error occured during activation of changes, please see the log for details.
weblogic.application.ModuleException:
[HTTP:101256] The run-as user: aveksaUser for the servlet: agent for Web application: /aveksa could not be resolved to a valid user in the system. Verify the user exists. javax.security.auth.login.FailedLoginException: [Security:090304] Authentication Failed: User aveksaUser javax.security.auth.login.LoginException: [Security:090300] Identity Assertion Failed: User aveksaUser does not exist

Errors seen in WebLogic AdminServer.log:
<Jun 5, 2012 8:57:23 AM EDT> <Error> <HTTP> <HOSTNAME> <AdminServer> <[STANDBY] ExecuteThread: '9' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1338901043613> <BEA-101256> <The run-as user: aveksaUser for the servlet: agent for Web application: /aveksa could not be resolved to a valid user in the system. Verify the user exists.
javax.security.auth.login.FailedLoginException:
[Security:090304]Authentication Failed: User aveksaUser javax.security.auth.login.LoginException:
[Security:090300]Identity Assertion Failed: User aveksaUser does not exist

 
Cause

This is due to new security objects being added to the ACM 5.5.x WebLogic implementation. 

Resolution

These objects need to be added before the ACM WebLogic EAR can be deployed. 
These objects are referenced in chapter 4, of the ACM WebLogic installation guide, under the section "Create Security Realm Users and Groups'.


 


Once these objects have been successfully created, the ACM WebLogic 5.5.x ear will deploy without error. 
Note that the unsuccessfull deployment changes may need to be discarded before these objects can be created.

Attachments

    Outcomes