SUM authentication issue with saphostctrl – Authentication Required

[tenbussa]

We are trying to start the Software Update Manager (SUM) 1.0 SP20 PL4 on an Netweaver 7.02 Sandbox with Red Hat Enterprise Linux 7 and DB2 (DB6).

We extracted the SUM package to /usr/sap/<SID>/SUM and started the tool via command (with root😞

./STARTUP confighostagent QHR &

or

./STARTUP <SID> &

When calling the URL http://localhost:1128/lmsl/sumabap/QHR/doc/sluigui the authentication box appears where we type in the sidadm credentials. When we confirm the credentials the box appears again after 1 second. No matter if the credentials are correct (sidadm with correct password) or not (any login with any password), the authentication box appears again (see attached screenshot).

This is, what we already checked:

1. Restart of the SUM
2. Restart of SAP Host Agent
3. Installation of latest SAP Host Agent version
4. Restart of complete virtual machine
5. Tried Internet Explorer, Firefox, Chrome in normal mode and in private browsing mode
6. Re-download / re-extract of SUM to /usr/sap/<SID>/SUM
7. Check of file authorizations of SUM

Notes we checked:

• 927637 - Web service authentication in sapstartsrv as of Release 7.00
• 1563660 - sapcontrol, user authorization issues (SUM)
• 2284028 - SUM SL Common UI : Troubleshooting problems with the new SUM UI
• 2426160 - DB6: Add. Info - Software Update Manager 1.0 SP20

We changed the saphostctrl tracelevel to 3 and found an error in the /usr/sap/hostctrl/work/sapstartsrv.log after trying to authenticate again:

[Thr 140134583793408] Authenticate check on cache failed

Tue Jul 11 17:21:34 2017

pam_authenticate_user -> service( sapstartsrv ) user (
qhradm )

*** ERROR => pam_authenticate ( qhradm ) failed :
Authentication failure  [usercheckux. 243]

[Thr 140134583793408] helper exit with return code 251

Tue Jul 11 17:21:34 2017

pam_authenticate_user -> service( login ) user ( qhradm )

Tue Jul 11 17:21:36 2017

*** ERROR => pam_authenticate ( qhradm ) failed :
Authentication failure  [usercheckux. 243]

[Thr 140134583793408] Tue Jul 11 17:21:36 2017

[Thr 140134583793408] helper exit with return code 251

[Thr 140134583793408] *** ERROR => soap_check_permission
authentication: ( qhradm, ExecutOperation ) FAILED [DefaultOpera 163]

[Thr 140134583793408] Authenticate clear cache

[Thr 140134583793408] Unauthorized (user authentication
required)

[Thr 140134583793408] *** ERROR => Authentication is
required  [HTTPProxyHan 258]

[Thr 140134583793408] HTTPResponse::SendError HTTP 401:
'Unauthorized: User authentication required' send as 'Unauthorized'

SAP note 927637 says the following:

[…]

If the user/password check fails, the system generates an "Invalid Credentials" SOAP exception.

[…]

Unfortunately there are no hints what to do with the above error message.

Do you have any idea, what we can do to find/solve the problem?

[Former Member]

Hi Andre,Currently we are upgrading Solman to 7.2 and now we are in downtime phase and Java is at 50% and ABAP is waiting for Java to proceed however we currently stuck in Java upgrade and we are getting similar errors as yours(i understand you now able to start SUM).

Our current Java upgrade phase is "Rename Start Profiles" and we are getting below error on the server.

<!--LOGHEADER[START]/-->
<!--HELP[Manual modification of the header may cause parsing problem!]/-->
<!--LOGGINGVERSION[2.0.7.1006]/-->
<!--NAME[/usr/sap/MD1/SUM/sdt/log/SUM/REGISTER-SERVICES_01.LOG]/-->
<!--PATTERN[REGISTER-SERVICES_01.LOG]/-->
<!--FORMATTER[com.sap.tc.logging.TraceFormatter(%d [%6s]: %m)]/-->
<!--ENCODING[UTF8]/-->
<!--LOGHEADER[END]/-->
Jul 19, 2017 8:30:22 AM [Info ]: The application server instances do not require registration with instance profile on dual stack system.
Jul 19, 2017 8:30:22 AM [Info ]: Registering service of instance SCS61 with new profile /usr/sap/MD1/SYS/profile/MD1_SCS61_md1ci.
Jul 19, 2017 8:30:22 AM [Info ]: Registering sapcontrol service using saphostagent for host md1ci, instance number 61 with start profile /usr/sap/MD1/SYS/profile/MD1_S
CS61_md1ci
Jul 19, 2017 8:30:24 AM [Error ]: The following problem has occurred during step execution: com.sun.xml.internal.ws.fault.ServerSOAPFaultException: Client received SOAP

Fault from server: Invalid Credentials Please see the server log to find more detail regarding exact cause of the failure..

We upgraded the hostagent in message server and App server(our's is a distributed environment) to fix it but even after installing new host agent we couldn't proceed ahead and we kept on getting this issue

We followed the SAP notes but no luck.

is anything you can suggest to fix the issue and proceed ahead.

• 1563660 - sapcontrol, user authorization issues (SUM)

[Former Member]

Hi Supragya,

Did you check the note #2428412

Regards,
Manjunath