PAM-CM-0536: Application error occured while Showing and closing Target groups members

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

1. Navigate to \Manage Targets\Target Groups\

2.  Select your Target Group and select the "Show" button

3. Select "Close"

PAM-CM-0536

Environment

PAM 4.1.x,4.2.0

Cause

This was a clustered environment.  The following is seen in the Tomcat logs (catalina.log):

2024-09-06T14:14:28.649+0000 INFO [TP7] com.cloakware.cspm.server.app.impl.ApplicationContextImpl.invokeCommand ApplicationContext.invoke(CommandRequest, Transaction, listeners) exception:5 msg:DeleteTargetAccountCmd.validateParameters Operation not allowed: Credential workflow locked due to cluster state.

This was caused by the steps being performed while the cluster was turned off and the node was locked.  This locks Credential Workflow and causes the PAM-CM-0536 message to be returned.

Resolution

Turn the cluster back on and confirm all nodes are in the cluster and try again.  Once cluster is back on you can perform this operation without issue.