Unable to view passwords using password management when clustering is stopped

Products

• CA Privileged Access Manager - Cloakware Password Authority (PA)
• CA Privileged Access Manager (PAM)

Issue/Introduction

We sucesfully started clustering. To perform some testing we then stopped clustering.

Then we are unable to view passwords

 

Environment

Release: PAM -NSX API PROXY
Component: PAM 4.x

Cause

While clustering is stopped we are unable to view or access passwords in the PM interface on either of the individual nodes.
Also we are unable to use transparent login features of any kind.

We get an error saying:

Show Password
Request failed. The Xsuite cluster is in stopped mode.
An error occurred; if this problem persists then please ask your Administrator to investigate.
Fail to load data

 

Resolution

This is expected behaviour of CA PAM.
Basically when the Cluster stopps for whatever reason to prevent the various members going out of sync when they would continue processing requests ("Split Brain Scenario") the Password Management database gets locked on each member instantaneously.
To forcefully continue working you can press the "Unlock Me" button on the respective member in the PAM UI / Synchronization page