In CA Service Desk Manager, when clicking on Visualizer button from the CI detail page, I see the error "Error: Authentication failed for the user. Please try again. If problem persists, please contact administrator"

Document ID : KB000018494
Last Modified Date : 08/03/2018
Show Technical Document Details
Introduction:

Symptoms:

-        When clicking on the Visualizer button from the detail page of a Configuration Item (CI), you receive a logon prompt and the following error message:

"Error: Authentication failed for the user. Please try again. If problem persists, Please contact administrator."

-        When entering valid credentials into the provided login prompt, you may receive the following error message:

"Error: Error while logging in."

-        You also receive the above error message when launching Visualizer directly from the server on which it is configured.

 

Environment: 

-        These steps apply only to environments where Visualizer is installed and has been configured through pdm_configure. SOAP Web Services need to be configured for Visualizer to run.

 

Cause:

These errors indicate problems authenticating when loading Visualizer, and may have one (or more) of several causes, including:

-        The proxy contact is inactive, deleted, or set to an unexpected value.

-        The logged in user does not have a SOAP Web Services API Role assigned to their access type.

-        The Visualizer SOAP Web Services policy needs to be recreated.

-        The Visualizer .p12 key file needs to be regenerated.
 

Resolution:

To check the Visualizer proxy contact:

-        On the Administration tab, navigate to SOAP Web Services Policy > Policies.

-        Select the CA_CMDB_VISUALIZER policy. A new window opens.

-        Determine which contact is assigned as the policy’s Proxy Contact. In the screenshot below, which shows the default settings, the Proxy Contact is “System_CMDB_Visualizer_User”.

User-added image

Note: If your Visualizer policy settings look significantly different from the screenshot above, your policy file may have become corrupt, and needs to be recreated. Please see “To recreate the Visualizer policy and .p12 file” section below for details.

-        On the Administration tab, navigate to Security and Role Management > Contacts.

-        Search for and open the contact listed as your policy’s Proxy Contact.

-        Ensure that the Status field is set to Active.

To check if a contact’s Access Type has a SOAP Web Services API Role defined:

-        On the Administration tab, navigate to Security and Role Management > Access Types.

-        Open the Access Type of the user you wish to modify.

-        Click on the 3. Roles tab.

-        Ensure that there is a valid value provided in the SOAP Web Service API Role field. If this field is left blank, users with this Access Type will not be able to log in to Visualizer.

To recreate the Visualizer policy and .p12 file:

Note: The following steps require restarting the Service Desk Manager services. These steps also involve manipulating your database. Please take backups of your database and all critical files before proceeding.

-        Take screenshots of your existing Visualizer policy to aid in rebuilding it. Alternatively, you can use the screenshots provided below to recreate the policy with out-of-the-box settings.

-        On the server where Visualizer is configured, open an administrative command prompt. Navigate to a folder where you have write access.

-        Use the following commands to isolate the existing Visualizer policy, and then delete it from your database:

pdm_extract –f “select * from SA_Policy where code = ‘CA_CMDB_VISUALIZER’” > vizpolicy.dat
pdm_load –r –f vizpolicy.dat

-        Navigate to NX_ROOT\bopcfg\www\CATALINA_BASE_VIZ\webapps\CMBDVisualizer\WEB-INF\classes. Rename the file CA_CMDB_VISUALIZER.p12 to CA_CMDB_VISUALIZER_p12.OLD. If you have multiple servers with Visualizer configured, follow this step on each server.
Note: Do not leave the file extension as .p12, as this may cause errors.

-        From the Service Desk web interface, open the Administration tab and navigate to SOAP Web Services Policy > Policies. Verify that the CA_CMDB_VISUALIZER policy is not present.

-        Click on Create New, and recreate the policy based on either your earlier screenshots or the images below, which detail the out-of-the-box configuration.
Note: Both the Symbol and Code fields must be “CA_CMDB_VISUALIZER”.

User-added image
Stock Visualizer policy, second tab.

-        On the server where Visualizer is configured, open an administrative command prompt. Navigate to NX_ROOT\bin.

-        Run the following command to generate a new policy file:

pdm_pki –f –p CA_CMDB_VISUALIZER

-        Take the CA_CMDB_VISUALIZER.p12 file that has been generated in NX_ROOT\bin and move it to NX_ROOT\bopcfg\www\CATALINA_BASE_VIZ\webapps\CMBDVisualizer\WEB-INF\classes. If you have multiple servers with Visualizer configured, copy this same file to the indicated folder on each server.

-        Restart your Service Desk Manager services on all servers.

 

Additional Information:  

 

For additional information on the CMDB Visualizer and Service Desk Manager 14.1, please see the CA Service Management wiki:
CMDB Visualizer Overview

Instructions:
Please Update This Required Field