Jes2005Q4 AccessManager console Authentication failed

Question

Hi,
I have installed Jes2005Q4(DirectoryServer,AdministrationServer,ApplicationServer,AccessManager) in solaris 9.after starting everything when I am going to access the following page I got the Authentication failed error.
http://andaman.miel.mot.com:8080/amserver/UI/Login?gx_charset=UTF-8
Below is the amconfig script.please give me solution asap.i am struggling a lot
BASEDIR=/apps/vendor/jes
SERVER_HOST=andaman.miel.mot.com
SERVER_PORT=8080
SERVER_PROTOCOL=http
CONSOLE_HOST=$SERVER_HOST
CONSOLE_PORT=$SERVER_PORT
CONSOLE_PROTOCOL=$SERVER_PROTOCOL
CONSOLE_REMOTE=false
DS_HOST=andaman.miel.mot.com
DS_PORT=389
DS_DIRMGRDN="cn=Directory Manager"
DS_DIRMGRPASSWD=admin123
ROOT_SUFFIX="dc=miel,dc=mot,dc=com"
COOKIE_DOMAIN=.mot.com
# ADMINPASSWD, the amadmin password, and AMLDAPUSERPASSWD, the amldapuser passwo
rd, must be set to different values
ADMINPASSWD=admin123
AMLDAPUSERPASSWD=ldapadmin123
CONSOLE_DEPLOY_URI=/amconsole
SERVER_DEPLOY_URI=/amserver
PASSWORD_DEPLOY_URI=/ampassword
COMMON_DEPLOY_URI=/amcommon
COOKIE_DOMAIN=.mot.com
JAVA_HOME=/usr/jdk/entsys-j2se
AM_ENC_PWD=""
PLATFORM_LOCALE=en_US
NEW_OWNER=root
#### Linux installations probably would want to set NEW_GROUP as root as the san
e default value.
NEW_GROUP=other
XML_ENCODING=ISO-8859-1
NEW_INSTANCE=false
############### Web Container type required #######################
# WL6 => weblogic 6.x
# WL8 => weblogic 8.x
# WAS4 => websphere 4.0.5
# WAS5 => websphere 5.x
# WS6 => s1ws 6.1
# AS7 => s1as 7.0
# AS8 => s1as 8.1
WEB_CONTAINER=AS8
############### Required for Web Server ################################
WS61_INSTANCE=https-$SERVER_HOST
WS61_HOME=/opt/SUNWwbsvr
WS61_PROTOCOL=$SERVER_PROTOCOL
WS61_HOST=$SERVER_HOST
WS61_PORT=$SERVER_PORT
WS61_ADMINPORT=8888
WS61_ADMIN="admin"
############### Required for App Server 8.x ################################
AS81_HOME=/apps/vendor/jes/SUNWappserver/appserver
AS81_PROTOCOL=$SERVER_PROTOCOL
AS81_HOST=$SERVER_HOST
AS81_PORT=$SERVER_PORT
AS81_ADMINPORT=4849
AS81_ADMIN=admin
AS81_ADMINPASSWD="admin123"
AS81_ADMIN=admin
AS81_ADMINPASSWD="admin123"
AS81_INSTANCE=server
AS81_DOMAIN=domain1
AS81_INSTANCE_DIR=/apps/vendor/jes/SUNWappserver/domains/domain1
AS81_DOCS_DIR=/apps/vendor/jes/SUNWappserver/domains/domain1/docroot
AS81_IS_SECURE=false
AS81_ADMIN_IS_SECURE=true
############### Required for SSL enabled ################################
SSL_PASSWORD="sample" # used in auto'ly restart container
DIRECTORY_MODE=1
USER_NAMING_ATTR=uid
ORG_NAMING_ATTR=o
ORG_OBJECT_CLASS=sunismanagedorganization
USER_OBJECT_CLASS=inetorgperson
DEFAULT_ORGANIZATION=

Answer 1

We faced a similar problem recently and we would like to document the solution for it. The root cause of the problem was traced to the absence of certain index configurations in the Directory Server. Because of this Access Manager was unable to fetch certain data from the backend directory during authentication.
At the time of configuration, Access Manager creates certain indexes in the LDAP Directory under the node: cn=index,cn=<databaseName>,cn=ldbm database,cn=plugins,cn=config.
where <databaseName> is the name of the database storing your Access Manager tree e.g. userRoot.
The indexes are created from the file - /etc/opt/SUNWam/config/ldif/index.ldif.
So if you are facing authentication failure problem - please cross check against the index.ldif file and verify the creation of each index. If index on a specific attribute is missing follow the steps below to resolve this issue:
* Use ldapmodify to upload the file /etc/opt/SUNWam/config/ldif/index.ldif onto each DS instance
ldapmodify -h <host> -p <port> -D "cn=directory manager" -w <pwd> -a -c -f /etc/opt/SUNWam/config/ldif/index.ldif
* Run the command db2index.pl to generate new set of indexes to be maintained by the server.
Regards,
Chetan Mutalik Desai
Persistent Systems