Unable to add cluster in AIQUM due to ONTAPI authentication issue

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 446

Visibility:: Public

Votes:: 1

Category:: ontap-9

Specialty:: om

Last Updated:

Applies to

ONTAP 9
AIQUM

Issue

Unable to add the cluster in ActiveIQ Unified Manager(AIQUM) due to an authentication issue.
It fails with both default admin and user created accounts.
There is no issue with the account as the same credentials works fine on the cluster CLI and System Manager.
From the autosupport logs in the cluster, we see the following events:

EMS

[Cluster1: mgwd: security.invalid.login:alert]: Failed to authenticate login attempt to Vserver: vserver1, username: null, application: ontapi.

[Cluster1: mgwd: security.invalid.login:alert]: Failed to authenticate login attempt to Vserver: vserver1, username: null, application: ontapi.

We see the username as NULL.

Audit logs

[kern_audit:info:3212] 8503e8000037467e :: Cluster1:ontapi :: 10.XXX.XXX.17:4XX36 :: Cluster1:null :: Login Attempt :: Error: Authentication failed.

[kern_audit:info:11033] 8503e8000037467e :: Cluster1:ontapi :: 10.XXX.XXX.17:4XX36 :: Cluster1:null :: POST /servlets/netapp.servlets.admin.XMLrequest_filer HTTP/1.0 :: Error: 401 Unauthorized

MGWD

[kern_mgwd:info:3212] 0x8443d6900: 0: ERR: PAM::PASSWD: doLocalUserAuth:src/pam/pam_passwd.cc:895 Error: null entry does not exist in login table. Application: ontapi: vserverId: 4294967295: username: null Authmethod: password. Reason: entry doesn't exist

[kern_mgwd:info:3212] 0x8443d6900: 0: ERR: PAM::PASSWD: doRemoteUserAuth:src/pam/pam_passwd.cc:1204 src/pam/pam_passwd.cc: doRemoteUserAuth: Unable to get password for user: null belonging to vserverId: 4294967295 via getpwnam.

[kern_mgwd:info:3212] 0x8443d6900: 0: ERR: PAM::PASSWD: pam_sm_authenticate: passwd comparison failed for user(null).

[kern_mgwd:info:3212] Error: PAM failed to authenticate user 'null', application 'ontapi', vserver 4294967295: Permission denied

FIPS is not enabled on the cluster.