JMS Authentication failed user

Xyril1993

Getting this error from server.log file in JMS. I've checked every possible files and properties where the authentications were used and confirmed that I have the correct install owner or user and docbase name. I also tried restarting everything and clearing caches and logs.

com.documentum.fc.client.DfAuthenticationException: [DM_SESSION_E_AUTH_FAIL]error:  "Authentication failed for user <install_owner> with docbase <repository>."

at com.documentum.fc.client.impl.docbase.DocbaseExceptionMapper.newException(DocbaseExceptionMapper.java:52) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.MessageEntry.getException(MessageEntry.java:39) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseMessageManager.getException(DocbaseMessageManager.java:137) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.netwise.NetwiseDocbaseRpcClient.checkForMessages(NetwiseDocbaseRpcClient.java:310) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.netwise.NetwiseDocbaseRpcClient.applyForObject(NetwiseDocbaseRpcClient.java:653) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection$8.evaluate(DocbaseConnection.java:1378) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.evaluateRpc(DocbaseConnection.java:1137) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.applyForObject(DocbaseConnection.java:1370) [dfc.jar:na]

at com.documentum.fc.client.impl.docbase.DocbaseApi.authenticateUser(DocbaseApi.java:1867) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.authenticate(DocbaseConnection.java:435) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.open(DocbaseConnection.java:130) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.<init>(DocbaseConnection.java:99) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.<init>(DocbaseConnection.java:59) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnectionFactory.newDocbaseConnection(DocbaseConnectionFactory.java:26) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnectionManager.createNewConnection(DocbaseConnectionManager.java:180) [dfc.jar:na]

at com.documentum.fc.client.impl.connection.docbase.DocbaseConnectionManager.getDocbaseConnection(DocbaseConnectionManager.java:110) [dfc.jar:na]

at com.documentum.fc.client.impl.session.SessionFactory.newSession(SessionFactory.java:23) [dfc.jar:na]

at com.documentum.fc.client.impl.session.PrincipalAwareSessionFactory.newSession(PrincipalAwareSessionFactory.java:44) [dfc.jar:na]

at com.documentum.fc.client.impl.session.PooledSessionFactory.newSession(PooledSessionFactory.java:49) [dfc.jar:na]

at com.documentum.fc.client.impl.session.SessionManager.getSessionFromFactory(SessionManager.java:134) [dfc.jar:na]

at com.documentum.fc.client.impl.session.SessionManager.newSession(SessionManager.java:72) [dfc.jar:na]

at com.documentum.fc.client.impl.session.SessionManager.getSession(SessionManager.java:191) [dfc.jar:na]

at com.emc.d2.api.methods.D2Method.main(D2Method.java:853) [D2-API-4.5.0.jar:na]

at com.emc.d2.api.methods.D2Method.execute(D2Method.java:939) [D2-API-4.5.0.jar:na]

at com.documentum.mthdservlet.DfMethodRunner.runIt(Unknown Source) [mthdservlet.jar:na]

at com.documentum.mthdservlet.AMethodRunner.runAndReturnStatus(Unknown Source) [mthdservlet.jar:na]

at com.documentum.mthdservlet.DoMethod.invokeMethod(Unknown Source) [mthdservlet.jar:na]

at com.documentum.mthdservlet.DoMethod.doPost(Unknown Source) [mthdservlet.jar:na]

at javax.servlet.http.HttpServlet.service(HttpServlet.java:754) [jboss-servlet-api_3.0_spec-1.0.0.Final.jar!/:1.0.0.Final]

at javax.servlet.http.HttpServlet.service(HttpServlet.java:847) [jboss-servlet-api_3.0_spec-1.0.0.Final.jar!/:1.0.0.Final]

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161) [jbossweb-7.0.13.Final.jar!/:na]

at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) [jboss-as-web-7.1.1.Final.jar!/:7.1.1.Final]

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) [jbossweb-7.0.13.Final.jar!/:na]

at java.lang.Thread.run(Thread.java:745) [na:1.7.0_72]

2020-09-22 11:18:18 [ERROR] [http-0.0.0.0-0.0.0.0-9080-5] - c.e.d.a.m.D2Method[com.emc.d2.api.methods.D2CoreMethod] : {}

java.lang.NullPointerException: null

at com.emc.d2.api.methods.D2Method.setMethodError(D2Method.java:750) [D2-API-4.5.0.jar:na]

at com.emc.d2.api.methods.D2Method.main(D2Method.java:898) [D2-API-4.5.0.jar:na]

at com.emc.d2.api.methods.D2Method.execute(D2Method.java:939) [D2-API-4.5.0.jar:na]

at com.documentum.mthdservlet.DfMethodRunner.runIt(Unknown Source) [mthdservlet.jar:na]

at com.documentum.mthdservlet.AMethodRunner.runAndReturnStatus(Unknown Source) [mthdservlet.jar:na]

at com.documentum.mthdservlet.DoMethod.invokeMethod(Unknown Source) [mthdservlet.jar:na]

at com.documentum.mthdservlet.DoMethod.doPost(Unknown Source) [mthdservlet.jar:na]

at javax.servlet.http.HttpServlet.service(HttpServlet.java:754) [jboss-servlet-api_3.0_spec-1.0.0.Final.jar!/:1.0.0.Final]

at javax.servlet.http.HttpServlet.service(HttpServlet.java:847) [jboss-servlet-api_3.0_spec-1.0.0.Final.jar!/:1.0.0.Final]

at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:329) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:248) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:275) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:161) [jbossweb-7.0.13.Final.jar!/:na]

at org.jboss.as.web.security.SecurityContextAssociationValve.invoke(SecurityContextAssociationValve.java:153) [jboss-as-web-7.1.1.Final.jar!/:7.1.1.Final]

at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:155) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:368) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:877) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:671) [jbossweb-7.0.13.Final.jar!/:na]

at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:930) [jbossweb-7.0.13.Final.jar!/:na]

at java.lang.Thread.run(Thread.java:745) [na:1.7.0_72]

Hicham Bahi

Is this running on Windows or Linux. If Linux, are you sure that you are starting the JMS as the installation owner ?

Xyril1993

It's Windows

crazytraveller

Have you checked if the dfc client id for JMS is added as a privilege client with trusted login enabled?

Hicham Bahi

Is the JMS running on the same machine as the Documentum Server or is it an Indepedent JMS (IJMS) ? If the same machine, then you don't need to register the DFC as privileged client.

Xyril1993

Yes, it's in the same server with Documentum Server.

Hicham Bahi

Perhaps the installation owner has been inactivated in the docbase. Can you login via iapi ?

Xyril1993

Yes, I can login via iapi. 

Hicham Bahi

Check that the JMS service is running as the installation owner account.

Is this action triggered by a job and if yes which one ? Does it happen with other jobs (e.g. can you run dm_StateOfDocbase?). Most jobs use trusted login to connect to the docbase, so if JMS is running as the installation owner, it should be able to login without password.

As last resort, try to enable tracing authentication. From iapi or DA:

?,c,execute set_options with option='trace_authentication',"value"=true

Run the job

?,c,execute set_options with option='trace_authentication',"value"=false

Then have a look at the main docbase log to see where exactly it's failing authentication.

AlvaroDeAndresGomez

Login via IAPI uses $DOCUMENTUM/config/dfc.keystore, JMS jobs use the keystore on ServerApps.ear. You need to add it to the privileged client list and check the two checkboxes for trusted