Configuration Manager Integration Points Errors - Access is denied

  • KM02475722
  • 13-Jul-2016
  • 13-Oct-2020

Summary

The issue is due to the user created during CM installation does not meet password policy. The issue got resolved after disabling the policy in infra setting.

Error

When using two default CM integration points in Integration Studio.

  • Configuration Manager KPI Adapter
  • Configuration Manager Policy Adapter

when trying Test Connection option from Integration Studio for both points, getting this error message:

com.hp.ucmdb.discovery.probe.request.ProbeSideProcessorException: [ErrorCode [800] Couldn't connect 
to Integration{Configuration Manager KPI Adapter, CMKpiAdapter, null}]
Integration[Configuration 
Manager KPI Adapter]: Unable to connect to the Configuration Manager server. The current user does 
not have authorization to access to the Configuration Manager server.

--- Start of probe-side exception 
---
com.hp.ucmdb.dataAccess.exceptions.AdapterAccessCommunicationException: [ErrorCode [800] Couldn't 
connect to Integration{Configuration Manager KPI Adapter, CMKpiAdapter, 
null}]
Integration[Configuration Manager KPI Adapter]: Unable to connect to the Configuration 
Manager server. The current user does not have authorization to access to the Configuration 
Manager server.
at 
com.hp.ucmdb.dataAccess.exceptions.ExceptionConverter.createAdapterAccessCommunicationException(ExceptionConverter.java:293)
at 
com.hp.ucmdb.dataAccess.exceptions.ExceptionConverter.createAdapterAccessException(ExceptionConverter.java:104)
at 
com.hp.ucmdb.dataAccess.exceptions.ExceptionConverter.createAdapterAccessException(ExceptionConverter.java:67)
at 
com.hp.ucmdb.discovery.probe.processor.FederationNoneLifeCycleProbeProcessor.process(FederationNoneLifeCycleProbeProcessor.java:74)
at 
com.hp.ucmdb.discovery.probe.processor.FederationNoneLifeCycleProbeProcessor.process(FederationNoneLifeCycleProbeProcessor.java:27)
at 
com.hp.ucmdb.discovery.probe.agents.probemgr.adhoctasks.AdHocProbeRequestOperation.performAction(AdHocProbeRequestOperation.java:64)
at 
com.hp.ucmdb.discovery.probe.agents.probemgr.taskdispatcher.AdHocTaskDispatcher.dispatchTask(AdHocTaskDispatcher.java:70)
at sun.reflect.GeneratedMethodAccessor65.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at sun.reflect.misc.Trampoline.invoke(MethodUtil.java:71)
at sun.reflect.GeneratedMethodAccessor12.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:497)
at sun.reflect.misc.MethodUtil.invoke(MethodUtil.java:275)
at 
com.sun.jmx.mbeanserver.StandardMBeanIntrospector.invokeM2(StandardMBeanIntrospector.java:112)
at 
com.sun.jmx.mbeanserver.StandardMBeanIntrospector.invokeM2(StandardMBeanIntrospector.java:46)
at com.sun.jmx.mbeanserver.MBeanIntrospector.invokeM(MBeanIntrospector.java:237)
at com.sun.jmx.mbeanserver.PerInterface.invoke(PerInterface.java:138)
at com.sun.jmx.mbeanserver.MBeanSupport.invoke(MBeanSupport.java:252)
at javax.management.StandardMBean.invoke(StandardMBean.java:405)
at 
com.sun.jmx.interceptor.DefaultMBeanServerInterceptor.invoke(DefaultMBeanServerInterceptor.java:819)
at com.sun.jmx.mbeanserver.JmxMBeanServer.invoke(JmxMBeanServer.java:801)
at 
javax.management.MBeanServerInvocationHandler.invoke(MBeanServerInvocationHandler.java:292)
at 
org.springframework.jmx.access.MBeanClientInterceptor.doInvoke(MBeanClientInterceptor.java:405)
at 
org.springframework.jmx.access.MBeanClientInterceptor.invoke(MBeanClientInterceptor.java:353)
at 
org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:202)
at com.sun.proxy.$Proxy48.dispatchTask(Unknown Source)
at 
com.hp.ucmdb.discovery.probe.agents.probegw.managementtasks.adhoctasks.AdhocThread.run(AdhocThread.java:54)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:635)
at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:555)
at java.lang.Thread.run(Thread.java:745)
--- End of probe-side exception ---

 

UCMDB and CM versions are 10.22 CUP2 with CP19.

IP's and User credentials were created during CM installation process. the user credentials can be used to log in in CM.

 

Cause

There are three possiblities which might cause this issue:

1. The UCMDB is configured with multi tenant (MT)

When UCMDB is MT and CM is installed the user created on CM install is not created corectly as it does not set up the asigned tenant. To solve this issue please check the cm integration user and for that user set up tenant owner and tenant uses (The recommandation is to run CM reconfiguration and so CM restart as the new user  settings needs to be reflected in CM as well)

2.The user set up in the integration is LDAP user

You may try to test with out of the box sysadmin user (set it in the integration point configuration).

3.There is also the pasword policy functionality. When CM is installed it will require user with an password that is according to the policy (contains upper and lower and number and special char) but this would reflect in errors in the _installation\logs.

Fix

disable the policy in Infra Settings (after installation).