Portal access failure
search cancel

Portal access failure

book

Article ID: 277437

calendar_today

Updated On:

Products

Information Centric Analytics

Issue/Introduction

The Information Centric Analytics (ICA) portal prompts a user to enter his or her credentials repeatedly. No error message is displayed. Other users are able to access the portal without being prompted to enter their credentials. All users have been granted the same portal privileges.

The Internet Information Services (IIS) log captures entries similar to the following:

2023-12-19 19:11:48 10.1.108.141 GET / - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 401 3 0 140
2023-12-19 19:12:08 10.1.108.141 GET / - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 401 3 0 15
2023-12-19 19:12:12 10.1.108.141 GET /favicon.ico - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 404 0 2 7
2023-12-19 19:13:34 10.1.108.141 GET / - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 401 3 0 15
2023-12-19 19:38:39 10.1.108.141 GET /favicon.ico - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 404 0 2 0

Cause

The relevant section of the IIS log is the HTTP code 401.3:

2023-12-19 19:11:48 10.1.108.141 GET / - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 401 3 0 140

This indicates the user does not have permission to view the site directory or page because of an access control list (ACL) configuration or encryption setting on the application server. ICA's portal permissions aren't yet involved at this stage of authentication, so the problem lies somewhere between IIS, Active Directory (AD), and filesystem ACLs.

Resolution

Compare the AD groups and privileges assigned to a working portal user account against those of the account that is failing to access the console. Compare these values with the permissions of the ICA application's virtual directory, which is located in the following path in a default installation:

%SystemDrive%\Program Files\Bay Dynamics\Risk Fabric Server Web