Rest API call /api.php/v1/passwords/viewRequests.json fails on 3.3.2 when only requestPeriodStart is provided
book
Article ID: 188240
calendar_today
Updated On:
Products
CA Privileged Access Manager (PAM)
Issue/Introduction
The viewPasswordRequests.json Rest API call is working as expected in 3.3.0 but not working in 3.3.2. This is for the case where we try to get all view password requests from a given start date/time to the current time by setting parameter "requestPeriodStart" and leaving parameter "requestPeriodEnd" empty. We had no problem at release 3.3.0, but after upgrading to 3.3.2 we get a PAM-CMN-0467 error:
{ "error": { "code": 400, "message": "Bad Request: PAM-CMN-0467: A Password Authority problem prevented completing the request. Message: PAM-CM-0539: A database error occurred. CODE=1525 MSG=Incorrect DATETIME value: 'Tue Apr 07 13:44:41 UTC 2020' Check log for details." } }
Cause
A change implemented to fix another problem with the Rest API caused a problem with processing an empty "requestPeriodEnd" value.
Environment
Release : 3.3.2
Component : PRIVILEGED ACCESS MANAGEMENT
Resolution
As of April 7 2020 no fix to the problem is available. As a workaround use a date in the distant future for the "requestPeriodEnd" parameter. E.g. the following settings will return all requests from April 1 2020 up to the current time:
requestPeriodStart: 2020-04-01 00:00:00
requestPeriodEnd: 9999-01-01 00:00:00
A defect is open with PAM Engineering to have the problem fixed in future releases.