Hi, at a user site we are experiencing difficulties with using the ConnectApp Web Services method.
DMA version being used for testing is v10.0.0 CU5.
In System Centre > Users/Groups:
- The user is part of a group.
- The group was added via Active Directory.
- The group has been given all permissions (Administrator role)
In addition, the web.config file on DataMiner has been updated to uncomment the HttpGet and HttpPost protocols.
However we are observing the following results (each of them HTTP error 500):
NOTE: it is possible to log in using the ‘user1’ user via the Cube GUI.
Attempt #1:
# curl -X POST http://172.3.6.1/api/v1/soap.asmx --header "Content-Type: text/xml; charset=utf-8" --data @ConnectApp_1.xml
Contents of the ConnectApp_1.xml file:
<soapenv:Envelope xmlns:soapenv=http://schemas.xmlsoap.org/soap/envelope/ xmlns:v1=http://www.skyline.be/api/v1>
<soapenv:Header/>
<soapenv:Body>
<v1:ConnectApp>
<!--Optional:-->
<v1:host>myHost</v1:host>
<!--Optional:-->
<v1:login>DOMAIN1\user1</v1:login>
<!--Optional:-->
<v1:password>password1</v1:password>
<!--Optional:-->
<v1:clientAppName>AppName</v1:clientAppName>
<!--Optional:-->
<v1:clientAppVersion>1.1.1</v1:clientAppVersion>
<!--Optional:-->
<v1:clientComputerName>hostname123</v1:clientComputerName>
</v1:ConnectApp>
</soapenv:Body>
</soapenv:Envelope>
Response from DMA:
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:soap=http://schemas.xmlsoap.org/soap/envelope/ xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance xmlns:xsd=http://www.w3.org/2001/XMLSchema>
<soap:Body>
<soap:Fault>
<faultcode>soap:Server</faultcode>
<faultstring>Unable to authenticate as user1</faultstring>
<detail/>
</soap:Fault>
</soap:Body>
</soap:Envelope>
Information events show: Authentication Failure. Connectoin did not authenticate. Computer hostname123 Application: AppName
Attempt #2
# curl -X POST http://172.3.6.1/api/v1/soap.asmx --header "Content-Type: text/xml; charset=utf-8" --data @ConnectApp_2.xml
Contents of ConnectApp_2 file:
<soapenv:Envelope xmlns:soapenv=http://schemas.xmlsoap.org/soap/envelope/ xmlns:v1=http://www.skyline.be/api/v1>
<soapenv:Header/>
<soapenv:Body>
<v1:ConnectApp>
<!--Optional:-->
<v1:host>myHost</v1:host>
<!--Optional:-->
<v1:login>user1</v1:login>
<!--Optional:-->
<v1:password>password1</v1:password>
<!--Optional:-->
<v1:clientAppName>AppName</v1:clientAppName>
<!--Optional:-->
<v1:clientAppVersion>1.1.1</v1:clientAppVersion>
<!--Optional:-->
<v1:clientComputerName>hostname123</v1:clientComputerName>
</v1:ConnectApp>
</soapenv:Body>
</soapenv:Envelope>
Response from DMA:
<?xml version="1.0" encoding="utf-8"?>
<soap:Envelope xmlns:soap=http://schemas.xmlsoap.org/soap/envelope/ xmlns:xsi=http://www.w3.org/2001/XMLSchema-instance xmlns:xsd=http://www.w3.org/2001/XMLSchema>
<soap:Body>
<soap:Fault>
<faultcode>soap:Server</faultcode>
<faultstring>Cannot connect to the DMA; exception trapped: Failed getting the user info (user not found).</faultstring>
<detail/>
</soap:Fault>
</soap:Body>
</soap:Envelope>
In information events, no indication of errors or authentication failure.
Question 1: How should we be specifying the username in the POST body? With the domain or without the domain?
Question 2: Why is it that we are able to log in using the ‘user1’ user via the Cube GUI but through the WebAPI authentication fails?
Question 3: There are no lines in ActiveDirectory.txt providing details why the authentication is failing. Which log files captures WebAPI request attempts and responses?
Question 4: Using the same command above for Attempt #2 works for DMA v9.6 CU23 in the user's other environment.
A few things you could try:
- On the server hosting the DMA, restart the IIS webserver (iisreset)
- Can you login on the Monitoring app? (http://dma/m/)
- The WebAPI connects to SLNet, so more logging can be found in the log file of SLNet
Hi Bing,
did you find anything in the SLNet logs?
I am facing a sporadic authentication failure issue with a user, that is normally able to authenticate. In case you found something it would be great what I would have to look for.
Hi Wim, thanks for the suggestions.
– Triggering iisreset did not make a difference.
– Attempts to log into http://dma/m results in the same error seen when using curl.
– I’ll increase the logging to (6) and see what I can find.