Unable to view passwords using password management when clustering is stopped

Document ID : KB000047097
Last Modified Date : 14/02/2018
Show Technical Document Details

Issue:

We sucesfully started clustering. To perform some testing we then stopped clustering.

While clustering is stopped we are unable to view or access passwords in the PM interface on either of the individual nodes.
Also we are unable to use transparent login features of any kind.

We get an error saying:

Show Password
Request failed. The Xsuite cluster is in stopped mode.
An error occurred; if this problem persists then please ask your Administrator to investigate.
Fail to load data


Resolution:

This is expected behaviour of CA PAM.
Basically when the Cluster stopps for whatever reason to prevent the various members going out of sync when they would continue processing requests ("Split Brain Scenario") the Password Management database gets locked on each member instantaneously.
To forcefully continue working you can press the "Unlock Me" button on the respective member in the PAM UI / Synchronization page:

 

Additional Information:

https://docops.ca.com/ca-privileged-access-manager/2-7/EN/implementing/implement-a-cluster/review-clustering-considerations