A2A client Java sample Example.java reports null password

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

We compiled and are trying to run the Java Example class on an AIX server. The output shows that the server returned code 400, suggesting that the call into PAM to retrieve the password succeeded, but the password shows as "null", similar to the following:

> ./run_java_sample.sh mypamaccountalias
Status Code: 400
UsedId:      mypamaccount
Password:    null

 

The same sample code works fine on another server, for which we defined an A2A mapping for the same target account, and the correct password is retrieved.

Environment

Release : 3.3

Component : PRIVILEGED ACCESS MANAGEMENT

Cause

The Java version used on the AIX server was incompatible with the A2A client libraries., cspmclient.jar and cwjcafips.jar.

Resolution

Find or install a newer Java version that doesn't have a problem. One option is to use the JRE that the PAM A2A client installs. The Java executable would be $CSPM_CLIENT_HOME/cspmclient_thirdparty/java/bin/java.