SME_SEC_NEED_CREDS in Web Admin Console using short Domain Name
search cancel

SME_SEC_NEED_CREDS in Web Admin Console using short Domain Name

book

Article ID: 429185

calendar_today

Updated On:

Products

CA Client Automation - IT Client Manager CA Client Automation

Issue/Introduction

Following error appears when trying to logon in Web Admin Console using a Remote Windows Domain (short name) and security provided winnt
 
<%key%>: SME_SEC_NEED_CREDS The client must provide explicit credentials to complete authentication as unified logon is not available.
 
in DSM\logs\wac_lo.log we could see this 
 
2026-02-11 11:42:20,427 INFO c.c.w.u.DSMWebSession [ajp-nio-0.0.0.0-8020-exec-3] username:winnt://<domain_name>/<user_name>
2026-02-11 11:42:22,974 ERROR c.c.w.a.LoginAction [ajp-nio-0.0.0.0-8020-exec-3] The Exception raised to create the session with webservices
javax.xml.ws.soap.SOAPFaultException: SME_SEC_NEED_CREDS The client must provide explicit credentials to complete authentication as unified logon is not available.
at org.apache.cxf.jaxws.JaxWsClientProxy.mapException(JaxWsClientProxy.java:195) ~[cxf-rt-frontend-jaxws-3.5.11.jar:3.5.11]
at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:145) ~[cxf-rt-frontend-jaxws-3.5.11.jar:3.5.11]
at com.sun.proxy.$Proxy106.login(Unknown Source) ~[?:?]
at com.ca.wac.utilities.DSMWebSession.login(DSMWebSession.java:73) ~[classes/:?]
at com.ca.wac.utilities.DSMWebServiceSessionBean.initServiceStubs(DSMWebServiceSessionBean.java:206) ~[classes/:?]
at com.ca.wac.utilities.DSMWebServiceSessionBean.<init>(DSMWebServiceSessionBean.java:95) ~[classes/:?]
at com.ca.wac.actions.LoginAction.execute(LoginAction.java:97) [classes/:?]

Environment

Client Automation 14.5, 14.6

Resolution

In some environment this problem could be resolved with :

  1. In DSM Explorer go in menu Security - Security Profiles
  2. In Security Profiles, click Add button
  3. Click Add button again and add the full Domain Name.
    Example if the problem occurs with domain name <AD1> then add the full FQDN. Example <AD1>.<PART1>.<PART2>
  4. A winnt directory is added with the full domain name