Error when saving CA Service Catalog Data Source in Unified Self-Service

book

Article ID: 4676

calendar_today

Updated On:

Products

CA Service Management - Asset Portfolio Management CA Service Management - Service Desk Manager

Issue/Introduction

When trying to configure the Data Source for CA Service Catalog product in Unified Self-Service (USS), the following error message appears:

"Unable to connect to CA Service Catalog"

<Please see attached file for image>

TEC1211236-1a.png

 

In addition, the following will appear in the USS logs (default log location path: "C:\Program Files\CA\Self Service\OSOP\logs"):

 

13:54:07,761 ERROR [CATALOGSource:120] Throwing exception : EE_NOTALLOWED Operation not allowed

[Attach Error: PozError, Attach Error: PozError, PE_NOTALLOWED Operation not allowed, PozFactory.attach: unable to attach, PozFactory.attachPoz: error invoking iPoz::ClientAttach on host XXXXXXXXXXX, CERT-Service Catalog, ]

com.ca.eiam.SafeException: EE_NOTALLOWED Operation not allowed

at com.ca.eiam.poz.PozFactory.attachPoz(PozFactory.java:402)

at com.ca.eiam.SafeContext.attach(SafeContext.java:1442)

at com.ca.sfo.service.external.source.model.CATALOGSource.testLogin(CATALOGSource.java:631)

at com.ca.sfo.service.external.source.model.CATALOGSource.validate(CATALOGSource.java:245)

at com.ca.sfo.service.external.source.model.CATALOGSource.validate(CATALOGSource.java:193)


NOTE: If instead you see the following error in the log then follow doc 000099907:

19:46:40,759 ERROR [CATALOGSource:120] Throwing exception : EE_AUTHFAILED Authentication Failed 
[Authenticate Error: Authentication Failed, Identity Attempted: null] 
com.ca.eiam.SafeException: EE_AUTHFAILED Authentication Failed

Cause

The root cause of this issue is on CA Embedded Entitlements Manager (EEM) authentication. There is a default policy missing which is required.

<Please see attached file for image>

TEC1211236-0a.png

Environment

CA Service Catalog 14.1 + Unified Self-Service (USS) and authentication through CA Embedded Entitlements Manager (EEM)

Resolution

You can recreate this policy manually by following below steps:

1-Log into EEM as EiamAdmin user making sure you selected the <Global> Application:

<Please see attached file for image>

TEC1211236-2a.png

2-Select the "Manage Access Policies" tab and click at "Scoping Policies" link. You should see no policies defined.

<Please see attached file for image>

TEC1211236-3a.png

3-Create a new scoping policy and define the values as below.

Name: DefaultGlobalAttach

Description: all usres can attach to global

Resource: ApplicationInstance

Actions: Read

<Please see attached file for image>

TEC1211236-4a.png

<Please see attached file for image>

TEC1211236-4c.png

<Please see attached file for image>

TEC1211236-4e.png

Confirm the policy got created by clicking at the Scoping Policies link again:

<Please see attached file for image>

TEC1211236-4g.png

 

Check that now you are able to connect to CA Service Catalog into the USS Data Source now:

<Please see attached file for image>

TEC1211236-5a.png

Attachments

1558701750468000004676_sktwi1f5rjvs16kny.png get_app
1558701748612000004676_sktwi1f5rjvs16knx.png get_app
1558701746751000004676_sktwi1f5rjvs16knw.png get_app
1558701744909000004676_sktwi1f5rjvs16knv.png get_app
1558701743000000004676_sktwi1f5rjvs16knu.png get_app
1558701741029000004676_sktwi1f5rjvs16knt.png get_app
1558701739196000004676_sktwi1f5rjvs16kns.png get_app
1558701737294000004676_sktwi1f5rjvs16knr.png get_app
1558701735251000004676_sktwi1f5rjvs16knq.png get_app