Error when saving CA Service Catalog Data Source in Unified Self-Service

Document ID : KB000004676
Last Modified Date : 14/02/2018
Show Technical Document Details
Issue:

When trying to configure the Data Source for CA Service Catalog product in Unified Self-Service (USS), the following error message appears:

"Unable to connect to CA Service Catalog"

TEC1211236-1a.png

 

In addition, the following will appear in the USS logs (default log location path: "C:\Program Files\CA\Self Service\OSOP\logs"):

 

13:54:07,761 ERROR [CATALOGSource:120] Throwing exception : EE_NOTALLOWED Operation not allowed

[Attach Error: PozError, Attach Error: PozError, PE_NOTALLOWED Operation not allowed, PozFactory.attach: unable to attach, PozFactory.attachPoz: error invoking iPoz::ClientAttach on host XXXXXXXXXXX, CERT-Service Catalog, ]

com.ca.eiam.SafeException: EE_NOTALLOWED Operation not allowed

at com.ca.eiam.poz.PozFactory.attachPoz(PozFactory.java:402)

at com.ca.eiam.SafeContext.attach(SafeContext.java:1442)

at com.ca.sfo.service.external.source.model.CATALOGSource.testLogin(CATALOGSource.java:631)

at com.ca.sfo.service.external.source.model.CATALOGSource.validate(CATALOGSource.java:245)

at com.ca.sfo.service.external.source.model.CATALOGSource.validate(CATALOGSource.java:193)

 

Environment:
CA Service Catalog 14.1 + Unified Self-Service (USS) and authentication through CA Embedded Entitlements Manager (EEM)
Cause:

The root cause of this issue is on CA Embedded Entitlements Manager (EEM) authentication. There is a default policy missing which is required.

TEC1211236-0a.png

Resolution:

You can recreate this policy manually by following below steps:

1-Log into EEM as EiamAdmin user making sure you selected the <Global> Application:

TEC1211236-2a.png

2-Select the "Manage Access Policies" tab and click at "Scoping Policies" link. You should see no policies defined.

TEC1211236-3a.png

3-Create a new scoping policy and define the values as below.

Name: DefaultGlobalAttach

Description: all usres can attach to global

Resource: ApplicationInstance

Actions: Read

TEC1211236-4a.png

TEC1211236-4c.png

TEC1211236-4e.png

Confirm the policy got created by clicking at the Scoping Policies link again:

TEC1211236-4g.png

 

Check that now you are able to connect to CA Service Catalog into the USS Data Source now:

TEC1211236-5a.png