Portal access failure
Article ID: 277437
Updated On:
Products
Issue/Introduction
The Information Centric Analytics (ICA) portal prompts a user to enter his or her credentials repeatedly. No error message is displayed. Other users are able to access the portal without being prompted to enter their credentials. All users have been granted the same portal privileges.
The Internet Information Services (IIS) log captures entries similar to the following:
2023-12-19 19:11:48 10.1.108.141 GET / - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 401 3 0 140
2023-12-19 19:12:08 10.1.108.141 GET / - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 401 3 0 15
2023-12-19 19:12:12 10.1.108.141 GET /favicon.ico - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 404 0 2 7
2023-12-19 19:13:34 10.1.108.141 GET / - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 401 3 0 15
2023-12-19 19:38:39 10.1.108.141 GET /favicon.ico - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 404 0 2 0
Cause
The relevant section of the IIS log is the HTTP code 401.3:
2023-12-19 19:11:48 10.1.108.141 GET / - 8443 <domain\username> 10.1.108.141 Mozilla/5.0+(Windows+NT+10.0;+WOW64;+Trident/7.0;+rv:11.0)+like+Gecko - 401 3 0 140
This indicates the user does not have permission to view the site directory or page because of an access control list (ACL) configuration or encryption setting on the application server. ICA's portal permissions aren't yet involved at this stage of authentication, so the problem lies somewhere between IIS, Active Directory (AD), and filesystem ACLs.
Resolution
Compare the AD groups and privileges assigned to a working portal user account against those of the account that is failing to access the console. Compare these values with the permissions of the ICA application's virtual directory, which is located in the following path in a default installation:
%SystemDrive%\Program Files\Bay Dynamics\Risk Fabric Server Web
Feedback
