Search Engine: Elastic
  • Article for your preferred language does not exist. Below is international version of the article.

Article ID: 3988, created on Mar 5, 2008, last review on Aug 15, 2017

  • Applies to:
  • Operations Automation
  • Business Automation 7.0

Symptoms

An external system (Integrating External System UI with Odin Automation Control Panel) tries to create a user session in OA using one of the following links:

http://<UI IP>:8080/servlet/Sessions?event=login&user=<USERNAME>&password=<PASSWORD>
http://cp.brand01.com/servlet/Sessions\?event=login&login=<USERNAME>&password=<PASSWORD>&session_id=000001

Or via secret:

http://<UI IP>:8080/servlet/Sessions?event=login&user=<USERNAME>&secret=<PASSWORD>
http://cp.brand01.com/servlet/Sessions\?event=login&login=<USERNAME>&secret=<SECRET>&session_id=000001

but gets the following error:

403 - ERROR:javax.servlet.ServletException: Can't login

Cause

Cause 1: Since OA 7.x platform version all new users should use UPN for sing in action. Use username@domain.example.com instead of just username login:

http://cp.brand01.com/servlet/Sessions\?event=login&login=username@domain.example.com&secret=<SECRET>&session_id=000001

Cause 2: Customers attached to brands can login using their branded URL only. This is default behavior, but can be changed for enabling some special integration with external systems which do not operate with OA brands.

Resolution

To enable login from different brands, one should add the following string:

allow.login.from.different.brand=yes

In OA 6.0, this line should be added to the following file:

/usr/local/pem/ui/WEB-INF/conf/includes/custom.properties

Since OA 7.0, service 'pau' is responsible for OA UI, and this line should be added in the following file:

/usr/local/pem/wildfly-8.2.0.Final/puitconf/custom.properties

In OA 7.1, the following file should be used:

/usr/local/pem/etc/custom.properties

When aforementioned modifications would be applied please restart OA UI on the OA UI host:

  1. For OA 6.0:

    /etc/init.d/pemui restart
    
  2. For OA 7.0 and later (please check this KB Article for additional details regarding restart of services):

    /etc/init.d/pau restart
    

In case UI is running on NG cluster, this modification has to be made on all nodes of the cluster.

Note: the correct way to add this line would be on a new line, without indentation, e.g.:

client.include.resources = rc.ve_backup.diskspace, rc.ve_backup.management, \
    ...
    winmedia_ondemand_points
allow.login.from.different.brand=yes

Note: It is not recommended to keep this parameter in /usr/local/pem/ui/WEB-INF/conf/TurbineResources.properties - this file may be overwritten during updates.

caea8340e2d186a540518d08602aa065 e12cea1d47a3125d335d68e6d4e15e07 5356b422f65bdad1c3e9edca5d74a1ae 198398b282069eaf2d94a6af87dcb3ff c0f836394088a28cc30dd0e5fe8b600e b2c3b33425dfc50c7d41a2efaa7f84f3

Email subscription for changes to this article
Save as PDF