IBM Support

HTTP 403 error

Troubleshooting


Problem

Logging on to Maximo/TSRM, HTTP error 403 is received.

Symptom

Following related message is written to systemout.log file:
SECJ0129E: Authorization failed for maxadmin while invoking GET on maximo_host:/maximo/ui/login, Authorization failed, Not granted any of the required roles: maximouser

Resolving The Problem

This problem is related to the user logging on to Maximo not having the required J2EE role. Each user logging in to Maximo/TSRM/CCMDB must have the maximouser role. By default, the Maximo/TSRM/CCMDB installation process maps this role to all authenticated users. If you have modified this mapping, a user might be authenticated by WebSphere security but be unable to log in because the role is not assigned. If this is the case, you will see this message in the SystemOut.log file: SECJ0129E: Authorization failed for maxadmin while invoking GET on maximo_host:/maximo/ui/login, Authorization failed, Not granted any of the required roles: maximouser.

If you see this message, assign the group maximouser to the user in the directory server, or modify the
security role to user/group mapping to map this role to All authenticated users. If you modify the role mapping, you must restart MXServer for the changes to take effect.

[{"Product":{"code":"SS6HJK","label":"Tivoli Service Request Manager"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Component":"--","Platform":[{"code":"PF002","label":"AIX"},{"code":"PF016","label":"Linux"},{"code":"PF033","label":"Windows"}],"Version":"7.1","Edition":"","Line of Business":{"code":"LOB59","label":"Sustainability Software"}}]

Product Synonym

TSRM

Document Information

Modified date:
27 February 2019

UID

swg21399246