The remote server returned an error: (401) Unauthorized
Applies to
- ONTAP 9
- ONTAP AV Connector 1.0.6
Issue
-
ONTAP AV Connector 1.0.6 is unable to connect to the management LIF
REST API call to <ip-address> using account "<account>" failed. The remote server returned an error: (401) Unauthorized
ONTAP AV Connector log
- ONTAP/ASUP log:
APACHE-ERROR.log
[dot:error] [client <ip-address>:x] [vserver ID x] [service rest] Denied access to role 'vsadmin' for user '<account>'
[authz_core:error] [client <ip-address>:x] user encrypt: authorization failure for "/api/network/ip/interfaces":
[dot:error] [client <ip-address>:x] [vserver ID x] [service rest] Denied access to role 'vsadmin' for user '<account>'
[authz_core:error] [client <ip-address>:x] user encrypt: authorization failure for "/api/cluster":
ONTAP AV connector log (e.g. avshim.log)
Curl request to <ip-address> failed with http error code 401
Error 22: HTTP response code said error
Failed to fetch data LIF(s) from <ip-address>
Problem fetching vserver LIFs from mgmt-lif <ip-address>
vserver services web show
indicate no role is listed for name entriesrest
andsecurity
(role:none):
Example:
::> vserver services web show -vserver <vserver> -name rest
- Role has no access to API
/api/cluster
and/api/network/ip/interfaces
::> security login show -user-or-group-name <account> -vserver <vserver> -instance
::> security login show -vserver <vserver> -role <role>
::> security login role show -vserver <vserver> -role <role> -cmddirname "network interface"
::> security login rest-role show -vserver <vserver> -role <role> -api /api/cluster
::> security login rest-role show -vserver <vserver> -role <role> -api /api/network/ip/interfaces