Authenitcation working differently on Autosys client running on windows.

Products

• Autosys Workload Automation

Issue/Introduction

Windows users authenticate differently to different instances.

We have the following configuration:
Windows Server 2016 with AutoSys client and agent installed for multiple AutoSys instances.
AutoSys servers are all installed on RHEL 7 servers.

From the Windows server, we open two different client windows to instances <INSTANCEID1> and <INSTANCEID2>.

When a command is attempted to <INSTANCEID1>, it authenticates as "username".  
But when the same command is attempted to <INSTANCEID2>, it authenticates as "DOMAIN\username" - which fails EEM checks.

How do we get all instances to authenticate without the domain name?

jil>>1> insert_job:test_job1 job_type: b owner: autosys
jil>>2> exit
______________________________________________________________________________

CAUAJM_I_50323 Inserting/Updating job: test_job1
CAUAJM_W_10420 Job Create Access Denied!
CAUAJM_W_10439 No policies granting access to resource.
CAUAJM_W_10440 Class: as-job Resource: <INSTANCEID1>.test_job1 User: <username> Access: create
CAUAJM_W_10442 Time: 1710947508  Delegator: None
CAUAJM_E_10302 Database Change WAS NOT successful.

 

jil>>1> insert_job:test_job1 job_type: b owner: autosys 
jil>>2> exit
______________________________________________________________________________

CAUAJM_I_50323 Inserting/Updating job: ktest_job1
CAUAJM_W_10420 Job Create Access Denied!
CAUAJM_W_10439 No policies granting access to resource.
CAUAJM_W_10440 Class: as-job Resource: <INSTANCEID2>.test_job1 User: <DOMAIN>\<username> Access: create
CAUAJM_W_10442 Time: 1710947492  Delegator: None
CAUAJM_E_10302 Database Change WAS NOT successful.

note:
Both instances are using EEM, but they are not shared:

Environment

Autosys 12.x

Cause

EEM configuration difference between the two instances.

Resolution

The working instance was set to TRUST ALL and the none working one was not:

<INSTANCEID1>: CAUAJM_I_60228 CA EEM server: <EEM_SERVER1>
                              CAUAJM_I_60342 Unauthenticated user mode: TRUSTALL

<INSTANCEID2>: CAUAJM_I_60228 CA EEM server:  <EEM_SERVER2>
                              CAUAJM_I_60342 Unauthenticated user mode: OFF

Additional Information

https://techdocs.broadcom.com/us/en/ca-enterprise-software/intelligent-automation/autosys-workload-automation/12-0-01/securing/security-policy-customization/customize-security-policy-and-settings/manage-the-unauthenticated-user-mode.html