Error 2004: Unable to communicate with server Access Denied

• The RSA Authentication Manager password policy forced changes for the super admin password, so incorrect credentials are entered.
• Correct credentials are entered, but the password contains a special character like $.
• The AMBulkAdmin.jar file has incorrect permissions. This happens when the customer copies the .jar file from one RSA Authentication Manager instance to another without setting the correct permission on the file.

1. Ensure that the super admin user ID and password are correct by using them to log in to the Security Console.
2. If the super admin's password contains any special characters and you are passing it in the command ./rsautil AMBulkAdmin -i <test.txt> -o outputlog --verbose -a <super admin name> -P <super admin password>, the special character has to be enclosed in single quotes to avoid any confusion. For example, in the command below the dollar sign is in single quotes:

./rsautil AMBulkAdmin -i <test.txt> -o outputlog --verbose -a superadmin -P P4$$w0rd'$'

3. Check the permissions on the AMBulkAdmin.jar file:
   1. Launch an SSH client, such as PuTTY.
   2. Log in to the primary RSA Authentication Manager server as rsaadmin and enter the operating system password.

4. Go to /opt/rsa/am/utils/lib:

login as: rsaadmin
Using keyboard-interactive authentication.
Password:<enter operating system password>
Last login: Fri 1 May 16:39:41 2020 from jumphost.vcloud.local
RSA Authentication Manager Installation Directory: /opt/rsa/am 
rsaadmin@alaa:~> cd /opt/rsa/am/utils/lib

5. Run the following command to identify the AMBulkAdmin.jar file permissions:

rsaadmin@alaa:/opt/rsa/am/utils/lib> ls -l /opt/rsa/am/utils/lib/ | grep AMBulkAdmin
-rw-r--r-- 1 rsaadmin rsaadmin 307446 Aug  2  2019 AMBulkAdmin-8.4.0.5.0.jar

6. If permissions are not set as shown above, use following commands to change the permissions and ownership of the AMBulkAdmin.jar file:

rsaadmin@alaa:/opt/rsa/am/utils/lib> chmod 644 /opt/rsa/am/utils/lib/AMBulkAdmin*
rsaadmin@alaa:/opt/rsa/am/utils/lib> chown rsaadmin:rsaadmin /opt/rsa/am/utils/lib/AMBulkAdmin* 

7. Go to /opt/rsa/am/utils and run the AMBulkAdmin.jar script again:

rsaadmin@alaa:/opt/rsa/am/utils/lib> cd ..
rsaadmin@alaa:/opt/rsa/am/utils> ./rsautil AMBulkAdmin -i <test.txt> -o outputlog --verbose -a <super admin ID> -P <super admin password>

rsaadmin@alaa:/opt/rsa/am/utils> ./rsautil AMBulkAdmin -i addgroup.csv -o outputlog --verbose -a superadmin -P P4ssw0rd'$'