Troubleshooting Informatica Job Error using Native Account: [ICMD_10033] Command [getworkflowlog] failed with error
Article ID: 88361
Updated On:
Products
CA Automic Workload Automation - Automation Engine
Issue/Introduction
Informatica Job does not complete with the following error, involving native accounts:
This error can be caused by things on the Informatica and the Automic side, and it is hard to find out where exactly the error is coming from. There are several different troubleshooting steps that can be done to see where the source of the error may be.
2017-12-14 09:23:20 Error retrieving Workflow log file, runid: 82795
2017-12-14 09:23:20 Stdout: [ICMD_10033] Command [getworkflowlog] failed with error [[CCM_10541] Internal error. Failed to create a client for service [Internal error. Failed to create a client for service [/coreservices/DomainService] because of the following error: [[DTF_0020] The [DomainService] Service failed to authenticate the user with the error message [[UM_10205] Failed to authenticate user [infodomain] belonging to security domain [Native]. Please check domain logs for more information.].]. Contact Informatica Global Customer Support.] because of the following error: [{1}]. Contact Informatica Global Customer Support.].
2017-12-14 09:23:20 Stderr: sh: SHELLOPTS: readonly variable
2017-12-14 09:23:20 /bin/sh: SHELLOPTS: readonly variable
2017-12-14 09:23:20 /bin/sh: SHELLOPTS: readonly variable
2017-12-14 09:23:20 log4j:ERROR setFile(null,true) call failed.
2017-12-14 09:23:20 Stdout: [ICMD_10033] Command [getworkflowlog] failed with error [[CCM_10541] Internal error. Failed to create a client for service [Internal error. Failed to create a client for service [/coreservices/DomainService] because of the following error: [[DTF_0020] The [DomainService] Service failed to authenticate the user with the error message [[UM_10205] Failed to authenticate user [infodomain] belonging to security domain [Native]. Please check domain logs for more information.].]. Contact Informatica Global Customer Support.] because of the following error: [{1}]. Contact Informatica Global Customer Support.].
2017-12-14 09:23:20 Stderr: sh: SHELLOPTS: readonly variable
2017-12-14 09:23:20 /bin/sh: SHELLOPTS: readonly variable
2017-12-14 09:23:20 /bin/sh: SHELLOPTS: readonly variable
2017-12-14 09:23:20 log4j:ERROR setFile(null,true) call failed.
This error can be caused by things on the Informatica and the Automic side, and it is hard to find out where exactly the error is coming from. There are several different troubleshooting steps that can be done to see where the source of the error may be.
Environment
Release: AOMINA99000-5.0-Automic-Operations Manager-Informatica Agent
Component:
Component:
Resolution
Troubleshooting Steps when running into the error above:
- Check if it is a problem with using a Native Account
An easy test for this is to create a new Native account within the Informatica security domain and ensure that this new account is added to the same native security group as the login that is currently having issues. Then test with a new connection object with this dummy Native user within the same group. This way, we know that the problem isn't with the Informatica group if we have no issues.
- Ensure that the Native user has all necessary permissions
Insufficient permissions can always be a problem; double check that the user has all the necessary permissions for the repository.
- Check the Native Account's credentials
Check that the account's credentials are correct by manually logging into the domain or the Informatica client applications such as repository manager or designer. If it works, then make sure that these credentials are the same as in the connection object.
- Test the getworkflow log command manually
The RA Informatica connection object runs this command and may have trouble doing so. Manually test the getworkflog log command to ensure that Informatica security isn't the cause:
$INFA_HOME/server/bin/infacmd.sh getWorkflowLog -dn <Domain Name> -rs <Repository Name> -is <Integration> -ru <username> -rp '<Password>' -fn <Folder Name> -wf <Workflow Name> -fm TEXT
- See if the Informatica connection object is corrupted
The RA Informatica Object may be corrupted which is why the getworkflow log command is not running. To test this, try deleting the old connection object and making a new connection object with the same credentials.
- Delete the Agent cache
Stop the Agent and in the cache folder delete INFORMATICAAGENT. Be very careful when doing this step! Don't do this with root and check where your path is located before deleting anything. This comes from the actual Agent so it will be rebuilt after being deleted.
-The issue still persists?
While a possible Informatica solution is to recreate the entire domain, this is obviously a very impactful action. When running into this error it is a good idea to check these steps first. When making a ticket with support, please note which steps have already been tried so that it will be easier to narrow down the issue.
- Check if it is a problem with using a Native Account
An easy test for this is to create a new Native account within the Informatica security domain and ensure that this new account is added to the same native security group as the login that is currently having issues. Then test with a new connection object with this dummy Native user within the same group. This way, we know that the problem isn't with the Informatica group if we have no issues.
- Ensure that the Native user has all necessary permissions
Insufficient permissions can always be a problem; double check that the user has all the necessary permissions for the repository.
- Check the Native Account's credentials
Check that the account's credentials are correct by manually logging into the domain or the Informatica client applications such as repository manager or designer. If it works, then make sure that these credentials are the same as in the connection object.
- Test the getworkflow log command manually
The RA Informatica connection object runs this command and may have trouble doing so. Manually test the getworkflog log command to ensure that Informatica security isn't the cause:
$INFA_HOME/server/bin/infacmd.sh getWorkflowLog -dn <Domain Name> -rs <Repository Name> -is <Integration> -ru <username> -rp '<Password>' -fn <Folder Name> -wf <Workflow Name> -fm TEXT
- See if the Informatica connection object is corrupted
The RA Informatica Object may be corrupted which is why the getworkflow log command is not running. To test this, try deleting the old connection object and making a new connection object with the same credentials.
- Delete the Agent cache
Stop the Agent and in the cache folder delete INFORMATICAAGENT. Be very careful when doing this step! Don't do this with root and check where your path is located before deleting anything. This comes from the actual Agent so it will be rebuilt after being deleted.
-The issue still persists?
While a possible Informatica solution is to recreate the entire domain, this is obviously a very impactful action. When running into this error it is a good idea to check these steps first. When making a ticket with support, please note which steps have already been tried so that it will be easier to narrow down the issue.
Feedback
Yes
No
Powered by
