REST harness generates an error message unable to read a known contact list for RSA Authentication Manager Prime
2 years ago
Originally Published: 2015-05-04
Article Number
000060541
Applies To
RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager Prime
Issue
The RSA Authentication Manager REST harness reports the following error:
Request started at: dd/mm/yyyy hh:mm:ss PM == Elapsed time nn:nn:nn.nnnnnnn
http://localhost:8080/am8/user/search/rsatest?searchType=equals
----
 GET 
--------
<?xml version="1.0" encoding="UTF-8" standalone="no"?>
<serviceResult errorMessage="java.lang.Exception : ==DC== Unable to read a known contact list!" result="false"/>

With debug parameter ( '-Dlog.level=DEBUG' )  enabled the RSA Authentication Manager Integration Service am8 log file in <AMIS_HOME>\amis\logs folder reports a connection problem:
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== [ACTIVE THREAD] Active count: 3
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Creating new driver
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Reading contact list from default am server.
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,==DC== Reading contact list from ip: app81p.csau.ap.rsa.net
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,Creating connection to: app81p.csau.ap.rsa.net
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,creating connection to am8 
2015-05-04T15:56:40,040+1000,com.rsa.ucm.am8,27,INFO ,Creating connection to am8 using: amisadmin
2015-05-04T15:56:40,086+1000,com.rsa.ucm.am8,32,ERROR,==DC== Error reading contact list from server/FAILURE_LOG[$Thread: 29
com.rsa.authn.AuthenticationCommandException: Access Denied
STACK_TRACE[$com.rsa.authn.AuthenticationCommandException: Access Denied
com.rsa.authn.AuthenticatedTargetImpl.login(AuthenticatedTargetImpl.java:172)
com.rsa.command.ConnectionFactory$ConnectionImpl.connect(ConnectionFactory.java:758)
com.rsa.command.ConnectionFactory$ConnectionImpl.connect(ConnectionFactory.java:740)
com.rsa.ucm.AuthManager.AuthManagerSession.createSession(AuthManagerSession.java:194)
com.rsa.ucm.AuthManager.AuthManagerSession.<init>(AuthManagerSession.java:82)
com.rsa.ucm.AuthManager.SessionFactory.createSession(SessionFactory.java:26)
com.rsa.ucm.AuthManager.AMDriverFactory.create(AMDriverFactory.java:81)
com.rsa.ucm.AuthManager.AMDriverFactory.create(AMDriverFactory.java:13)
com.rsa.ucm.AuthManager.DriverCache.getContactListFromServer(DriverCache.java:47)
com.rsa.ucm.AuthManager.DriverCache.getServerList(DriverCache.java:82)
com.rsa.ucm.AuthManager.DriverCache.createSessionOnPrimary(DriverCache.java:138)
com.rsa.ucm.AuthManager.DriverCache.createSession(DriverCache.java:198)
com.rsa.ucm.AuthManager.DriverCache.get(DriverCache.java:237)
com.rsa.ucm.AuthManager.AMService.getDriver(AMService.java:75)
com.rsa.ucm.AuthManager.AMService.userSearch(AMService.java:211)
com.rsa.ucm.shared.extensions.AMExtensionService.userSearch(AMExtensionService.java:128)
com.rsa.ucm.shared.resources.UserManager.search(UserManager.java:188)
sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)

 
Cause
RSA Authentication Manager Integration Service requires a superadmin account in the RSA Authentication Manager database and it was left in a change password at next logon state after creation.
Resolution
Confirm the RSA Authentication Manager Integration Service superadmin account is working correctly by using the logon credentials with the Security Console of the Authentication Manager primary instance.
  1. Enter the superadmin account logon credentails:
User-added image
  1. Change the password when prompted:
User-added image
  1. Use the Authenticate (tdsAuthenticate) and Authentication Manager REST Harness (amServiceHarness) programs to test the RSA Authentication Manager Integration Service configuration after following the Security Console prompts to change the superadmin account password.
Notes
Harness Information
NameExecutableLocation
AuthenticatetdsAuthenticate.exe<AMIS_HOME>\amis\apps\harness\auth
Authentication Manager Rest HarnessamServiceHarness.exe<AMIS_HOME>\amis\apps\harness\amis-methods