REST harness generates an error message unable to read a known contact list for RSA Authentication Manager Prime

[#1]

Article Number

000030166

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager Prime

Issue

The RSA Authentication Manager REST harness reports the following error:

Request started at: dd/mm/yyyy hh:mm:ss PM == Elapsed time nn:nn:nn.nnnnnnn
http://localhost:8080/am8/user/search/rsatest?searchType=equals
----
 GET 
--------
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<serviceResult errorMessage="java.lang.Exception : ==DC== Unable to read a known contact list!" result="false"/>

With debug parameter ( '-Dlog.level=DEBUG' )  enabled the RSA Authentication Manager Integration Service am8 log file in <AMIS_HOME>\amis\logs folder reports a connection problem:

2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== [ACTIVE THREAD] Active count: 3
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Creating new driver
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Reading contact list from default am server.
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Reading contact list from ip: app81p.csau.ap.rsa.net
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,Creating connection to: app81p.csau.ap.rsa.net
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,creating connection to am8 
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,Creating connection to am8 using: amisadmin
2015-05-04T15:56:40,086+1000,com.rsa.ucm.am8,32,ERROR,==DC== Error reading contact list from server/FAILURE_LOG[$Thread: 29
com.rsa.authn.AuthenticationCommandException: Access Denied
STACK_TRACE[$com.rsa.authn.AuthenticationCommandException: Access Denied
com.rsa.authn.AuthenticatedTargetImpl.login(AuthenticatedTargetImpl.java:172)
com.rsa.command.ConnectionFactory$ConnectionImpl.connect(ConnectionFactory.java:758)
com.rsa.command.ConnectionFactory$ConnectionImpl.connect(ConnectionFactory.java:740)
com.rsa.ucm.AuthManager.AuthManagerSession.createSession(AuthManagerSession.java:194)
com.rsa.ucm.AuthManager.AuthManagerSession.<init>(AuthManagerSession.java:82)
com.rsa.ucm.AuthManager.SessionFactory.createSession(SessionFactory.java:26)
com.rsa.ucm.AuthManager.AMDriverFactory.create(AMDriverFactory.java:81)
com.rsa.ucm.AuthManager.AMDriverFactory.create(AMDriverFactory.java:13)
com.rsa.ucm.AuthManager.DriverCache.getContactListFromServer(DriverCache.java:47)
com.rsa.ucm.AuthManager.DriverCache.getServerList(DriverCache.java:82)
com.rsa.ucm.AuthManager.DriverCache.createSessionOnPrimary(DriverCache.java:138)
com.rsa.ucm.AuthManager.DriverCache.createSession(DriverCache.java:198)
com.rsa.ucm.AuthManager.DriverCache.get(DriverCache.java:237)
com.rsa.ucm.AuthManager.AMService.getDriver(AMService.java:75)
com.rsa.ucm.AuthManager.AMService.userSearch(AMService.java:211)
com.rsa.ucm.shared.extensions.AMExtensionService.userSearch(AMExtensionService.java:128)
com.rsa.ucm.shared.resources.UserManager.search(UserManager.java:188)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

 

Cause

RSA Authentication Manager Integration Service requires a superadmin account in the RSA Authentication Manager database and it was left in a change password at next logon state after creation.

Resolution

Confirm the RSA Authentication Manager Integration Service superadmin account is working correctly by using the logon credentials with the Security Console of the Authentication Manager primary instance.

1. Enter the superadmin account logon credentails:

Image description

2. Change the password when prompted:

Image description

3. Use the Authenticate (tdsAuthenticate) and Authentication Manager REST Harness (amServiceHarness) programs to test the RSA Authentication Manager Integration Service configuration after following the Security Console prompts to change the superadmin account password.

Notes

Harness Information

Name	Executable	Location
Authenticate	tdsAuthenticate.exe	<AMIS_HOME>\amis\apps\harness\auth
Authentication Manager Rest Harness	amServiceHarness.exe	<AMIS_HOME>\amis\apps\harness\amis-methods