Login to EEM UI fails with "EE_AUTHFAILED Authentication Failed" on RHEL 7.x

Products

• CA Spectrum
• CA Directory

Issue/Introduction

Fresh install of EEM 12.6.1.0 (from EEMServer_12.6.1.0_linux64.bin) on RHEL 7.4

Installation completed successfully. No errors during setup. No error messages in the EEM installation logs.

When try to login to EEM UI using the EiamAdmin user and password it fails with error:

The EiamAdmin password was entered during EEM setup and was accepted.  This is also confirmed correct because can successfully login with JXplorer using the same password.  

Environment

Release : 12.6.x

Component : CA Embedded Entitlements Manager

Cause

Problem is due to missing shared library libsasl2.so.2 on the RHEL 7.x system.

libsasl2.so.2 is the shared object file that can impact the EEM login success or failure.
In RHEL 7.x libsasl2.so.2 is renamed to libsasl2.so.3 , so iGateway starts without this library causing the login to EEM failure.

Resolution

iGateway needs libsasl2.so.2 library but does not deliver this file as part of the installation as it is a standard RHEL library.

However:
on RHEL 6.x libsasl2.so.2 usually resides in /lib64/ and is a default file.
on RHEL 7.x libsasl2.so.2 is not present in /lib64 as it is replaced by libsasl2.so.3

Run this command on the EEM RHEL 7.x system:

cd /opt/CA/SharedComponents/EmbeddedEntitlementsManager/lib
ldd iPoz.so

and from the output confirm the library is missing - for example:

....
        libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f2838934000)
        libsasl2.so.2 => not found
        libfreebl3.so => /lib64/libfreebl3.so (0x00007f2838730000)
....

To resolve the problem:

1. Make a copy of libsasl2.so.3 with the name libsasl2.so.2: 

cp /lib64/libsasl2.so.3 /lib64/libsasl2.so.2

2. Restart iGateway service:

$IGW_LOC/S99igateway stop

$IGW_LOC/S99igateway start

or

$IGW_LOC/S99igateway restart

Can also do it by creating a symbolic link and restart iGateway service:

ln -s /usr/lib64/libsasl2.so.3.0.0 /usr/lib64/libsasl2.so.2

After this the login to EEM UI will be successful.