CAL SAP HANA express - cannot access administration cockpit with user XSA_ADMIN

[Former Member]

I have setup the latest CAL SAP HANA express and I have changed the user passwords:

sudo su - hxeadm 
hdbsql -i 90 -d systemdb -u SYSTEM 
alter user XSA_DEV password **********;
alter user XSA_ADMIN password **********; 

I have then checked the services in xs command-line interface with user XS_ADMIN:

xs login -a https://localhost:39030 --skip-ssl-validation -u XSA_ADMIN 
xs apps

It worked fine.

My problem: I cannot login to the administration cockpit https://vhcalhxedb:51015/ with user XSA_ADMIN. I get an "Unable to verify username or password. Please try again." I even connected with a clean browser and from a different network than I use for the Web-IDE.

Connecting to the adminstration cockpit with user XSA_DEV works fine.

Any idea? It seams the only workaround will be to use the xs command-line interface instead of the administration cockpit.

Thank you for any help!

Johannes

[Sidney]

Hey there, when I use my sap account to log in to cockpit (or any authentication with authentication.canaryac.vlab-sapcloudplatformdev.cn) I meet the same problem. Shall I reset my password as well? How shall I do that?

[Former Member]

Hi Joice,

Thanks for your response. I don't use HANA Studio - I just explore the Web IDE. I summarize HANA's strange behavior with user XSA_ADMIN:

In command-line with

sudo su - hxeadm 
hdbsql -i 90 -d systemdb -u SYSTEM 
alter user XSA_ADMIN password YYYY;  

I can set a new password for user XSA_ADMIN. With this new password I can then either log in to xsa-admin web interface or to XS CLI. When I log in to xsa-admin web interface and then to XS CLI, authentication fails and vice versa. I have to set a new password!?

Strange, but it is some kind of workaround.

Best regards,
Johannes

[former_member486811]

This is one possibility is about sync-up of UAA security token. We will be contacting more teams for help and get back to you soon. Thanks for letting us know.

[Former Member]

I'm also seeing the same problem, is there a fix yet?

thanks

[former_member486811]

Hi Johannes,

Can you check if your XSA_ADMIN user has be deactivated through HANA Studio?

It can also be a cause due to multiple times of invalid password input. In that case, this user cannot access the page either.

Thanks,

Joice

[former_member486811]

Hi Johannes,

I am investigating this issue you have face. However, I cannot reproduce this issue in house.

Could you please try my suggestions below?

• re-verify if the new password they type for “XSA_ADMIN” is correct.

• And provide more logs with commands below:

xs logs cockpit-admin-web-app –all

xs logs cockpit-web-app –all

• Try to restart cockpit apps with commands below and recheck if the page is accessible after the commands:

xs rs cockpit-web-app

xs rs cockpit-admin-web-app

More details of the steps I did:

I changed the new passwords for both XSA_DEV and XSA_ADMIN.

hdbsql SYSTEMDB=> alter user XSA_DEV password ******

hdbsql SYSTEMDB=> alter user XSA_ADMIN password ******

Without restarting any cockpit applications, I am able to access both URLs with new password for user XSA_ADMIN without any issues.

cockpit-admin-web-app STARTED 1/1 128 MB <unlimited> https://<INTERNAL_URL>:51066

cockpit-web-app STARTED 1/1 512 MB <unlimited> https://<INTERNAL_URL>:51064

I also tried the old password and got message “Unable to verify username or password. Please try again.” as expected.

Best regards,

Joice

[former_member486811]

Hi Johannes,

Plus, here is another workaround is that

once change password of these users XSA_DEV and XSA_ADMIN.

hdbsql SYSTEMDB=> alter user XSA_DEV password ******

hdbsql SYSTEMDB=> alter user XSA_ADMIN password ******

Access the cockpit admin page immediately with new password. It can be accessed.

The new password may be expire after certain amount of time which may be the cause for your issue.

At the meanwhile, I am contacting cockpit team to get more idea of the cause.

Thanks,

Joice