Troubleshooting
Problem
Enable tracing fails with system error DPWAP0011E The administration command, trace list, failed HPDAC1502E aznAPI -- Authorization Failure.
Symptom
Access the LMI console and navigate to
Secure Web Settings > Reverse Proxy > Select Instance > Manage > Troubleshooting >Tracing
throws system error as following:
Cause
Necessary user permissions are missing to enable tracing for reverse proxy instance
Diagnosing The Problem
Access CLI console and login to pdadmin
isam1> isam
isam1:isam> admin
pdadmin> login
Enter User ID: sec_master
Enter Password:
pdadmin sec_master>
Execute following command:
object show /Management/Server
Verify details of effective ACL from above command output
acl show default-management
Verify if permission is given for iv-admin group for Trace bit "t" as following:
pdadmin sec_master> acl show default-management
ACL Name: default-management
Description: Default Management ACL.
Entries:
Group iv-admin TcmdbsvaBtRNWA
Group ivmgrd-servers Ts
Any-other Tv
Resolving The Problem
Correct default-management ACL if required.
If the ACL is not the default-management, the effective ACL should have given the iv-admin group the same permission bits as the default-management ACL.
If the problem is not resolved, check the members of iv-admin group using following command
group show-members iv-admin
The webseal instance user may have been removed from the group. If missing from the group then add it back to resolve the issue.
Was this topic helpful?
Document Information
Modified date:
16 June 2018
UID
swg22006081