AutoSys REST Web Service request fails with response 401 – Unauthorized
Article ID: 267658
Updated On: 11-01-2023
Products
Issue/Introduction
Autosys REST Web Service request fails with response 401 - Unauthorized
curl -X GET https://<hostname>:9443/AEWS/machine -k -u autosys
Enter host password for user 'autosys':
<!doctype html><html lang="en"><head><title>HTTP Status 401 – Unauthorized</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 401 – Unauthorized</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Description</b> The request has not been applied because it lacks valid authentication credentials for the target resource.</p><hr class="line" /><h3>Apache Tomcat/9.0.33</h3></body></html>
Following error messages were noted into $AUTOUSER/out/waae_webservices_wrapper.log
INFO | jvm 1 | 2023/06/09 10:39:45 | 09-Jun-2023 10:39:45.832 SEVERE [https-jsse-nio-9443-exec-8] org.apache.catalina.realm.JAASRealm.authenticate Unexpected error
INFO | jvm 1 | 2023/06/09 10:39:45 | java.lang.NoClassDefFoundError: org.apache.log4j.xml.DOMConfigurator
INFO | jvm 1 | 2023/06/09 10:39:45 | at com.ca.waae.logger.AsLogger.<init>(Unknown Source)
INFO | jvm 1 | 2023/06/09 10:39:45 | at com.ca.waae.security.AEEiamLoginModule.<clinit>(Unknown Source)
INFO | jvm 1 | 2023/06/09 10:39:45 | at java.lang.Class.forNameImpl(Native Method)
INFO | jvm 1 | 2023/06/09 10:39:45 | at java.lang.Class.forName(Class.java:407)
INFO | jvm 1 | 2023/06/09 10:39:45 | at javax.security.auth.login.LoginContext.invoke(LoginContext.java:710)
INFO | jvm 1 | 2023/06/09 10:39:45 | at javax.security.auth.login.LoginContext.access$000(LoginContext.java:195)
INFO | jvm 1 | 2023/06/09 10:39:45 | at javax.security.auth.login.LoginContext$4.run(LoginContext.java:682)
INFO | jvm 1 | 2023/06/09 10:39:45 | at javax.security.auth.login.LoginContext$4.run(LoginContext.java:680)
INFO | jvm 1 | 2023/06/09 10:39:45 | at java.security.AccessController.doPrivileged(AccessController.java:770)
INFO | jvm 1 | 2023/06/09 10:39:45 | at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
INFO | jvm 1 | 2023/06/09 10:39:45 | at javax.security.auth.login.LoginContext.login(LoginContext.java:587)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.realm.JAASRealm.authenticate(JAASRealm.java:418)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.realm.JAASRealm.authenticate(JAASRealm.java:332)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.authenticator.BasicAuthenticator.doAuthenticate(BasicAuthenticator.java:101)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:631)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:688)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:373)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1594)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
INFO | jvm 1 | 2023/06/09 10:39:45 | at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
INFO | jvm 1 | 2023/06/09 10:39:45 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
INFO | jvm 1 | 2023/06/09 10:39:45 | at java.lang.Thread.run(Thread.java:821)
INFO | jvm 1 | 2023/06/09 10:39:45 | Caused by: java.lang.ClassNotFoundException: org.apache.log4j.xml.DOMConfigurator
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1365)
INFO | jvm 1 | 2023/06/09 10:39:45 | at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1188)
INFO | jvm 1 | 2023/06/09 10:39:45 | ... 29 more
INFO | jvm 1 | 2023/06/09 10:39:59 | 09-Jun-2023 10:39:59.967 SEVERE [https-jsse-nio-9443-exec-4] org.apache.catalina.realm.JAASRealm.authenticate Unexpected error
INFO | jvm 1 | 2023/06/09 10:39:59 | java.lang.NoClassDefFoundError: com.ca.waae.security.AEEiamLoginModule (initialization failure)
INFO | jvm 1 | 2023/06/09 10:39:59 | at java.lang.J9VMInternals.initializationAlreadyFailed(J9VMInternals.java:98)
INFO | jvm 1 | 2023/06/09 10:39:59 | at java.lang.Class.forNameImpl(Native Method)
INFO | jvm 1 | 2023/06/09 10:39:59 | at java.lang.Class.forName(Class.java:407)
INFO | jvm 1 | 2023/06/09 10:39:59 | at javax.security.auth.login.LoginContext.invoke(LoginContext.java:710)
INFO | jvm 1 | 2023/06/09 10:39:59 | at javax.security.auth.login.LoginContext.access$000(LoginContext.java:195)
INFO | jvm 1 | 2023/06/09 10:39:59 | at javax.security.auth.login.LoginContext$4.run(LoginContext.java:682)
INFO | jvm 1 | 2023/06/09 10:39:59 | at javax.security.auth.login.LoginContext$4.run(LoginContext.java:680)
INFO | jvm 1 | 2023/06/09 10:39:59 | at java.security.AccessController.doPrivileged(AccessController.java:770)
INFO | jvm 1 | 2023/06/09 10:39:59 | at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:680)
INFO | jvm 1 | 2023/06/09 10:39:59 | at javax.security.auth.login.LoginContext.login(LoginContext.java:587)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.realm.JAASRealm.authenticate(JAASRealm.java:418)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.realm.JAASRealm.authenticate(JAASRealm.java:332)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.authenticator.BasicAuthenticator.doAuthenticate(BasicAuthenticator.java:101)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:631)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:688)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:373)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:65)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:868)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1594)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49)
INFO | jvm 1 | 2023/06/09 10:39:59 | at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
INFO | jvm 1 | 2023/06/09 10:39:59 | at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
INFO | jvm 1 | 2023/06/09 10:39:59 | at java.lang.Thread.run(Thread.java:821)
INFO | jvm 1 | 2023/06/09 10:39:59 | Caused by: java.lang.NoClassDefFoundError: org.apache.log4j.xml.DOMConfigurator
INFO | jvm 1 | 2023/06/09 10:39:59 | at com.ca.waae.logger.AsLogger.<init>(Unknown Source)
INFO | jvm 1 | 2023/06/09 10:39:59 | at com.ca.waae.security.AEEiamLoginModule.<clinit>(Unknown Source)
INFO | jvm 1 | 2023/06/09 10:39:59 | ... 27 more
INFO | jvm 1 | 2023/06/09 10:39:59 | Caused by: java.lang.ClassNotFoundException: org.apache.log4j.xml.DOMConfigurator
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1365)
INFO | jvm 1 | 2023/06/09 10:39:59 | at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1188)
INFO | jvm 1 | 2023/06/09 10:39:59 | ... 29 more
Environment
Release : 12.0 SP1, 12.0 SP1 Cum1 and 12.0 SP1 Cum2
Cause
log4j-1.2.16.jar had been deleted from following locations
$AUTOSYS/install/JARS/log4j-1.2.16.jar
$AUTOSYS/lib/log4j-1.2.16.jar
$AUTOUSER/webserver/webapps/AEWS/WEB-INF/lib/log4j-1.2.16.jar
This could have happened because log4j file could be considered as being vulnerable.
Resolution
- Restore the log4j-1.2.16.jar file from the backup or from a working AutoSys environment of the same version.
or
- Upgrade AutoSys to 12.0 SP1 CUM3 or 12.1 or latest version.
Feedback
