Enterprise command line. CA Workload Automation AE

[Bohdan Zaiachkovskyi]

Hi!

I'm trying to launch commands(autorep -M ALL, chk_auto_up) using enterprise command line in WCC. But every time I've got a mistake "Failed to log on using the given credentials."​
In my server configuration EEM is enabled. Monitor user (svc.iev.autosys), that set in server configuration presents in EEM. Such user is also present on linux servers, where AutoSys installed. I also added him to autosys_secure.
All rights, such as scheduler, executive, commander, etc, are given for this user in EEM, it can successfully schedule jobs on the servers.

Thanks for the help!

[Linda Williams]

You need to setup the user in the credentials tab in WCC for each instance.

You can do it individually for each user, or set a global one using _GLOBAL_:<username>.

[Bohdan Zaiachkovskyi]

I think, I'm doing something wrong.
WCC version is CA-WCC11.4.7-02-27.
The user name is "svc.iev.autosys". I was trying to add it to credentials as "svc.iev.autosys"(as in domain), "_GLOBAL_svc.iev.autosys", "svc.iev.autosys@p-autosys-app10" and many other variants. Every time I get an error, that user is invalid, when validating it.

Default user - is a user, that was used to log in to WCC. When "svc.iev.autosys" is default user - the situation is the same.
Have no more ideas how to solve this.
Is there any log files where I can find more detailed information?
upd. Found debug information of igateway but it didn't help.

starting in debug mode...
ACE_FIPS_MODE set to [ACE_FIPS_MODE_OFF]
ACE_SSL_CRYPTO_LIB set to [NULL]
log4cxx: No appender could be found for logger (eiam.server.eventplugin.xmleventstore).
log4cxx: Please initialize the log4cxx system properly.
TRACE: [0x7d987700] No MaxLogSize tag found, Setting Log file size to default value [10] for Sponsor [AutoSysCommandISponsor]
TRACE: [0x7d987700] JSponsor: creating object AutoSysCommandISponsor
TRACE: [0x7d987700] JSponsor::CallJSponsor: class AutoSysCommandISponsor method <init> sig (J)V
TRACE: [0x7d987700] JSponsor::CallJSponsor: attaching thread
TRACE: [0x7d987700] JSponsor::CallJSponsor: attached thread
TRACE: [0x7d987700] JSponsor::CallJSponsor: found class AutoSysCommandISponsor
TRACE: [0x7d987700] AutoSysCommandISponsor:: Begin - AutoSysCommandISponsor()
TRACE: [0x7d987700] AutoSysCommandISponsor:: Param - anchor: [47203849402592]
TRACE: [0x7d987700] AutoSysCommandISponsor:: <init>
TRACE: [0x7d987700] AutoSysCommandISponsor:: end - AutoSysCommandISponsor()
TRACE: [0x7d987700] JSponsor: sponsor create returned code 0
TRACE: [0x7d987700] JSponsor: Creating an entry for the sponsor named AutoSysCommandISponsor
TRACE: [0x7d987700] iSponsorEntry: INITIALIZED isponsor [AutoSysCommandISponsor] dispatch [AutoSysCommandISponsor] jvm 0xc49a36a8
WARN:  [0xa8c05700] iAuthority::AuthorityLoginCert() - Signature does not match.
TRACE: [0xc361a700] iSponsor::Invoke: [AutoSysCommandISponsor->AutoSysCommandISponsor] method [Run Command]
TRACE: [0xc361a700] JSponsor::Run: received for sponsor AutoSysCommandISponsor
TRACE: [0xc361a700] JSponsor::CallJSponsor: class AutoSysCommandISponsor method Run sig (J)J
TRACE: [0xc361a700] JSponsor::CallJSponsor: attaching thread
TRACE: [0xc361a700] JSponsor::CallJSponsor: attached thread
TRACE: [0xc361a700] JSponsor::CallJSponsor: found class AutoSysCommandISponsor
TRACE: [0xc361a700] JSponsor::CallJSponsor: running obj 0x80161848
TRACE: [0xc361a700] AutoSysCommandISponsor:: Begin - Run()
TRACE: [0xc361a700] AutoSysCommandISponsor:: Param - anchor: [47204106524976]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Run
  Sponsor [AutoSysCommandISponsor]
  Portalversion [2.0] Sponsorversion [2.0]
  Portal Location []
  Action [select] Table [Run Command]
  Transaction [notrans] Credentials [nocreds]
  Outputtype [all]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Run: filter: logic [AND] col [User] oper [EQUAL] val [7376632E6965762E6175746F737973]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Run: filter: logic [AND] col [Password] oper [EQUAL] val [<**protected**>]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Run: filter: logic [AND] col [Command] oper [EQUAL] val [6C73]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Run: filter: logic [AND] col [Instance] oper [EQUAL] val [503033]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Run: filter: logic [AND] col [Timeout] oper [EQUAL] val [300000]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Begin - CommandISponsorRunCommand()
TRACE: [0xc361a700] AutoSysCommandISponsor:: CommandISponsorRunCommand
TRACE: [0xc361a700] AutoSysCommandISponsor:: Begin - hexStringToString()
TRACE: [0xc361a700] AutoSysCommandISponsor:: Param - hexString: [7376632E6965762E6175746F737973]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Return - hexStringToString()
TRACE: [0xc361a700] AutoSysCommandISponsor:: string: [svc.iev.autosys]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Begin - hexStringToString()
TRACE: [0xc361a700] AutoSysCommandISponsor:: Param - hexString: [<**protected**>]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Return - hexStringToString()
TRACE: [0xc361a700] AutoSysCommandISponsor:: string: [<**protected**>]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Begin - hexStringToString()
TRACE: [0xc361a700] AutoSysCommandISponsor:: Param - hexString: [6C73]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Return - hexStringToString()
TRACE: [0xc361a700] AutoSysCommandISponsor:: string: [ls]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Begin - hexStringToString()
TRACE: [0xc361a700] AutoSysCommandISponsor:: Param - hexString: [503033]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Return - hexStringToString()
TRACE: [0xc361a700] AutoSysCommandISponsor:: string: [P03]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Begin - allowCommand()
TRACE: [0xc361a700] AutoSysCommandISponsor:: Param - command: [ls]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Begin - loadCommandFilters()
TRACE: [0xc361a700] AutoSysCommandISponsor:: Return - loadCommandFilters()
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autorep(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autorep\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^jil(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^jil\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^sendevent(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^sendevent\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autoflags(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autoflags\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autoping(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autoping\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^chase(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^chase\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^chk_auto_up(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^chk_auto_up\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^archive_events(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^archive_events\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^clean_files(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^clean_files\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^dbstatistics(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^dbstatistics\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autotimezone(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autotimezone\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autostatus(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autostatus\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^job_depends(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^job_depends\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^time0(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^time0\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autocal_asc(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^autocal_asc\.exe(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^forecast(\s.+)?]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^ls]
TRACE: [0xc361a700] AutoSysCommandISponsor:: filter: [^ls] matches.
TRACE: [0xc361a700] AutoSysCommandISponsor:: Return - allowCommand()
TRACE: [0xc361a700] AutoSysCommandISponsor:: Execute command: [ls]
TRACE: [0xc361a700] ThreadedCommand:: Begin - ThreadedCommand()
TRACE: [0xc361a700] ThreadedCommand:: Param - user    : [svc.iev.autosys]
TRACE: [0xc361a700] ThreadedCommand:: Param - password: [<**protected**>]
TRACE: [0xc361a700] ThreadedCommand:: Param - command : [ls]
TRACE: [0xc361a700] ThreadedCommand:: Param - instance: [P03]
TRACE: [0xc361a700] ThreadedCommand:: Param - timeout : [300000]
TRACE: [0xc361a700] ThreadedCommand:: End - ThreadedCommand()
TRACE: [0xc361a700] ThreadedCommand:: Begin - exec()
TRACE: [0xe0f7e700] ThreadedCommand:: Begin - run()
TRACE: [0xe0f7e700] ThreadedCommand:: Current Working Directory: [/opt/CA/SharedComponents/iTechnology]
TRACE: [0xe0f7e700] ThreadedCommand:: Executing command: [/opt/CA/SharedComponents/iTechnology/AutoSysCommandWrapper.sh]
TRACE: [0xe0f7e700] ThreadedCommand:: Send message: [svc.iev.autosys
<**protected**>
ls
P03
ENDOFTRANSMISSION
]
TRACE: [0xe0f7e700] ThreadedCommand:: End - run()
TRACE: [0xc361a700] ThreadedCommand:: End - exec()
TRACE: [0xc361a700] AutoSysCommandISponsor:: Begin - checkForError()
TRACE: [0xc361a700] AutoSysCommandISponsor:: CheckForError Data: [COMMAND WRAPPER ERROR CODE: -1
COMMAND WRAPPER ERROR MESSAGE: Failed to log on using the given credentials.
]
ERROR: [0xc361a700] AutoSysCommandISponsor:: Exception while executing command: [Failed to log on using the given credentials.]
TRACE: [0xc361a700] AutoSysCommandISponsor:: Return - checkForError()
WARN:  [0xab017700] iAuthority::AuthorityLoginCert() - Signature does not match.
​

[Michael Woods]

Hi,

It is trying to validate the credentials on the local machine, not to EEM,  so the userid needs to be able to logon to that box.
It uses PAM to do this.  So I would start with verifying the user can logon to the box.  If it can, then something is going wrong with the PAM call and that would need to be investigated further.

Regards,
Mike