Skip to Content

CAL SAP HANA express - cannot access administration cockpit with user XSA_ADMIN

I have setup the latest CAL SAP HANA express and I have changed the user passwords:

sudo su - hxeadm 
hdbsql -i 90 -d systemdb -u SYSTEM 
alter user XSA_DEV password **********;
alter user XSA_ADMIN password **********; 

I have then checked the services in xs command-line interface with user XS_ADMIN:

xs login -a https://localhost:39030 --skip-ssl-validation -u XSA_ADMIN 
xs apps

It worked fine.

My problem: I cannot login to the administration cockpit https://vhcalhxedb:51015/ with user XSA_ADMIN. I get an "Unable to verify username or password. Please try again." I even connected with a clean browser and from a different network than I use for the Web-IDE.

Connecting to the adminstration cockpit with user XSA_DEV works fine.

Any idea? It seams the only workaround will be to use the xs command-line interface instead of the administration cockpit.

Thank you for any help!

Johannes

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • Dec 12, 2017 at 02:09 AM

    Hi Johannes,

    I am investigating this issue you have face. However, I cannot reproduce this issue in house.

    Could you please try my suggestions below?

    • re-verify if the new password they type for “XSA_ADMIN” is correct.
    • And provide more logs with commands below:

    xs logs cockpit-admin-web-app –all

    xs logs cockpit-web-app –all

    • Try to restart cockpit apps with commands below and recheck if the page is accessible after the commands:

    xs rs cockpit-web-app

    xs rs cockpit-admin-web-app

    More details of the steps I did:

    I changed the new passwords for both XSA_DEV and XSA_ADMIN.

    hdbsql SYSTEMDB=> alter user XSA_DEV password ******

    hdbsql SYSTEMDB=> alter user XSA_ADMIN password ******

    Without restarting any cockpit applications, I am able to access both URLs with new password for user XSA_ADMIN without any issues.

    cockpit-admin-web-app STARTED 1/1 128 MB <unlimited> https://<INTERNAL_URL>:51066

    cockpit-web-app STARTED 1/1 512 MB <unlimited> https://<INTERNAL_URL>:51064

    I also tried the old password and got message “Unable to verify username or password. Please try again.” as expected.

    Best regards,

    Joice

    Add comment
    10|10000 characters needed characters exceeded

    • Hi Johannes,

      Plus, here is another workaround is that

      once change password of these users XSA_DEV and XSA_ADMIN.

      hdbsql SYSTEMDB=> alter user XSA_DEV password ******

      hdbsql SYSTEMDB=> alter user XSA_ADMIN password ******

      Access the cockpit admin page immediately with new password. It can be accessed.

      The new password may be expire after certain amount of time which may be the cause for your issue.

      At the meanwhile, I am contacting cockpit team to get more idea of the cause.

      Thanks,

      Joice

  • Dec 12, 2017 at 07:58 PM

    Hi Johannes,

    Can you check if your XSA_ADMIN user has be deactivated through HANA Studio?

    It can also be a cause due to multiple times of invalid password input. In that case, this user cannot access the page either.

    Thanks,

    Joice

    Add comment
    10|10000 characters needed characters exceeded

  • Dec 17, 2017 at 05:27 PM

    Hi Joice,

    Thanks for your response. I don't use HANA Studio - I just explore the Web IDE. I summarize HANA's strange behavior with user XSA_ADMIN:

    In command-line with

    sudo su - hxeadm 
    hdbsql -i 90 -d systemdb -u SYSTEM alter user XSA_ADMIN password YYYY;

    I can set a new password for user XSA_ADMIN. With this new password I can then either log in to xsa-admin web interface or to XS CLI. When I log in to xsa-admin web interface and then to XS CLI, authentication fails and vice versa. I have to set a new password!?

    Strange, but it is some kind of workaround.

    Best regards,
    Johannes

    Add comment
    10|10000 characters needed characters exceeded