DataPower

DataPower

Join this online group to communicate across IBM product users and experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

SLM Peer Group - XML Management Interface - Access Denied error

  • 1.  SLM Peer Group - XML Management Interface - Access Denied error

    Posted Wed September 29, 2021 08:49 PM

    Hi,

    We are implementing SLM policy and we are using SLM Peer Group as we have more than one DataPower instance.

    When the DataPower instances are trying to communicate to each other to share SLM traffic information using XML management interface, the calls are getting failed. Following are the errors I was observing on the appliances.

    2021-09-29T14:45:01.833393-04:00 [0x83a00087] [slm][error] xmlmgr(xmlmgmt-manager): trans(63)[scheduled]: SLM push yyyy-T1R-CAT/ABCOne_SLM failed to https://xxxx-mgmt.1dc.com:5550/service/slm/datashare/1.0.

    So, I took a packet capture to see why the calls were failing and I found the Access Denied error in the response. Attached the error screenshot for reference.

    I believe it is getting access denied error as the appliance is not passing credentials when it makes SOMA call. So I checked if there is a way to supply credentials in the SLM settings or SLM Peer Group, but couldn't find any option as such.

    Not sure if someone has faced a similar problem before, any pointers would be helpful here.



    #DataPower
    #Support
    #SupportMigration


  • 2.  RE: SLM Peer Group - XML Management Interface - Access Denied error

    Posted Thu September 30, 2021 10:16 AM

    Hi,

    you can try to set the creds in XML management interface advanced tab by defining a custom user agent. Are you sure that you don't have an access control list entry in XML management interface that would prevent you from connecting the appliances...

    --HP



    #DataPower
    #Support
    #SupportMigration