Unable to log in to the CA Performance Manager (CAPM) OpenAPI interface.

book

Article ID: 7115

calendar_today

Updated On:

Products

CA Infrastructure Management CA Infrastructure Management CA Performance Management - Usage and Administration CA Performance Management - Data Polling

Issue/Introduction

No user is able to gain access to the OpenAPI user interface.

Logging in with any user with OpenAPI access shows the following behavior:

Log in with the correct user name and password, the log in prompt is returned again with no error message.

Log in with the wrong user name or password, the correct response showing incorrect user name or password used is returned.

Cause

The CA Data Aggregator (DA) and CA Performance Manager servers are out of synchronization for time.

When logging into the DA OpenAPI tool, the CAPM server provides user access control.

When logging in the DA requests SSO authorization for the users access from CAPM.

CAPM sends back an SSO token in the URL returned to the DA for valid user access authorization by the DA.

The token contains a value composed of different data points, including the current time. When the servers are not in synchronization for time, the SSO token fails to be read properly.

Environment

All CAPM releases

Resolution

Set the CA DA and CAPM servers to the same time

Additional Information

Best practice suggests use of an NTP server to ensure they are kept synchronized for time to avoid problems like this.