"Not authorized" (Failed to authenticate) error when logon to one (new) database via Controller Web, caused by system is in an invalid state, and needs restarting

Troubleshooting

Problem

User launches Controller Web. User chooses database #1 and types in username/password. This works OK.

User closes web browser, and then re-launches Controller Web. User chooses database #2 and types in username/password. An error appears.

Symptom

Not authorized

Cause

There are several known causes for this error.

TIP: See separate IBM Technote #1288582 for more examples.

This Technote specifically relates to the scenario where the cause is that the Controller Web system is in an invalid state, and needs restarting.

Example:

In one real-life example, customer had:

1. Created new database connection

2. Run "SyncDBConf.bat" (to synchronise Controller 'classic' and Controller 'web' database connections)

However, it was unclear whether the 'IBM Cognos Controller Web' service had been restarted correctly afterwards.

Environment

Example:

In one real-life example, customer had created a new database connection (pointing to a new database which was created as a copy of an existing database).

All databases worked OK except for the new database connection.

Diagnosing The Problem

Below are some of the errors that may be seen in the logs:

com.ibm.cognos.fcm.log

2019-05-14 11:39:25 | <?>@<?> | INFO | [com.ibm.cognos.fcm.web.ui.LoginController] Set session environment: prod (3 settings)
2019-05-14 11:39:25 | <?>@<?> <?>@<?> | INFO | [com.ibm.cognos.fcm.wmc.repository.CacheValidator] <databasename>: validateSharedCache (0 entity versions updated): 16 ms
2019-05-14 11:39:25 | <?>@<?> <?>@<?> | ERROR | [com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationProvider] Failed to authenticate:
com.ibm.cognos.fcm.wmc.base.exceptions.FatalException: Failed to authenticate:
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationProvider.doAuthenticate(CamAuthenticationProvider.java:124)
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.AbstractAuthenticationProvider.authenticate(AbstractAuthenticationProvider.java:65)
   at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:174)
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationFilter.attemptAuthentication(CamAuthenticationFilter.java:71)
   at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:212)
   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
   at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200)
   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
   at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:116)
   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)
   at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:64)
   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter

<.................>

   at java.lang.Thread.run(Thread.java:812)
Caused by: java.lang.NullPointerException
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationProvider.authenticateCcrProxyServer(CamAuthenticationProvider.java:221)
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationProvider.doInternalAuthenticate(CamAuthenticationProvider.java:187)
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationProvider.doAuthenticate(CamAuthenticationProvider.java:108)
   ... 51 more

ffdc_19.05.13_14.57.16.0.log (inside ffdc subfolder)

------Start of DE processing------ = [13.5.2019 14:57:16:881 GMT]
Exception = com.ibm.cognos.fcm.wmc.base.exceptions.FatalException
Source = com.ibm.ws.webcontainer.filter.WebAppFilterManager.invokeFilters
probeid = 1105
Stack Dump = com.ibm.cognos.fcm.wmc.base.exceptions.FatalException: Failed to authenticate:

   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.AbstractAuthenticationProvider.authenticate(AbstractAuthenticationProvider.java:72)
   at org.springframework.security.authentication.ProviderManager.authenticate(ProviderManager.java:174)
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationFilter.attemptAuthentication
<.................>
   at org.springframework.security.web.header.HeaderWriterFilter.doFilterInternal(HeaderWriterFilter.java:64)
   at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
   at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:331)

<.................>

(WorkQueueManager.java:501)
   at com.ibm.ws.tcpchannel.internal.WorkQueueManager.attemptIO(WorkQueueManager.java:571)
   at com.ibm.ws.tcpchannel.internal.WorkQueueManager.workerRun(WorkQueueManager.java:926)
   at com.ibm.ws.tcpchannel.internal.WorkQueueManager$Worker.run(WorkQueueManager.java:1015)
   at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1160)
   at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:635)
   at java.lang.Thread.run(Thread.java:812)

Caused by: com.ibm.cognos.fcm.wmc.base.exceptions.FatalException: Failed to authenticate:
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationProvider.doAuthenticate(CamAuthenticationProvider.java:124)
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.AbstractAuthenticationProvider.authenticate(AbstractAuthenticationProvider.java:65)
   ... 50 more

Caused by: java.lang.NullPointerException
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationProvider.authenticateCcrProxyServer(CamAuthenticationProvider.java:221)
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationProvider.doInternalAuthenticate(CamAuthenticationProvider.java:187)
   at com.ibm.cognos.fcm.web.ui.infrastructure.auth.cam.CamAuthenticationProvider.doAuthenticate(CamAuthenticationProvider.java:108)
   ... 51 more

Resolving The Problem

Obtain some downtime (no users logged onto Controller Web) and then restart the Windows service: IBM Cognos Controller Web

Related Information

1288582 - ** Troubleshooting ** "Not authorized" when logon to Controller Web

Document Location

Worldwide

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS9S6B","label":"IBM Cognos Controller"},"Component":"","Platform":[{"code":"PF033","label":"Windows"}],"Version":"10.4.0","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Tips