<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://community.appian.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/"><channel><title>KB-1029 "401 Unauthorized" error when running the Deployment Automation Manager in the command line</title><link>https://community.appian.com/support/w/kb/254/kb-1029-401-unauthorized-error-when-running-the-deployment-automation-manager-in-the-command-line</link><description /><dc:language>en-US</dc:language><generator>Telligent Community 12</generator><item><title>KB-1029 "401 Unauthorized" error when running the Deployment Automation Manager in the command line</title><link>https://community.appian.com/support/w/kb/254/kb-1029-401-unauthorized-error-when-running-the-deployment-automation-manager-in-the-command-line</link><pubDate>Tue, 14 Feb 2017 07:51:55 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:4cab444d-fc0a-499b-82a8-acbc98574f7f</guid><dc:creator>Nick Vigilante</dc:creator><comments>https://community.appian.com/support/w/kb/254/kb-1029-401-unauthorized-error-when-running-the-deployment-automation-manager-in-the-command-line#comments</comments><description>Current Revision posted to Appian Knowledge Base by Nick Vigilante on 2/14/2017 7:51:55 AM&lt;br /&gt;
&lt;div class="row content_container"&gt;
&lt;h2 id="symptoms"&gt;Symptoms&lt;/h2&gt;
&lt;p&gt;The &lt;a href="https://forum.appian.com/suite/tempo/records/type/components/item/i8BCLGOdlMUpdGVqT-RV7oRg74uEGJO5y8YYyll2ORd3wIJVhcEdFn4_7WTseA_ag/view/summary"&gt;Deployment Automation Manager&lt;/a&gt; shared component works correctly in the web browser, but using the command line tool fails. Running the command with the correct parameters as per the &lt;a href="https://docs.appian.com/suite/help/latest/Deployment_Automation.md"&gt;instructions&lt;/a&gt; is not able to successfully complete and the deployment processes stop. This behavior was observed when using WebLogic as an application server.&lt;/p&gt;
&lt;p&gt;The following error can be seen in the generated &lt;strong&gt;deploymentautomation_XXXX.log&lt;/strong&gt;:&lt;/p&gt;
&lt;pre&gt;&lt;code&gt;[main] DEBUG org.apache.http.headers - http-outgoing-0 &amp;lt;&amp;lt; HTTP/1.1 401 Unauthorized
&lt;/code&gt;&lt;/pre&gt;
&lt;h2 id="cause"&gt;Cause&lt;/h2&gt;
&lt;p&gt;The deployment fails because the command line tool sends a POST request to the application server with basic authentication headers, however WebLogic requires any POST request with basic authentication to be validated. Thus, it strips the authentication headers before sending it to Appian. Appian will then receive a request without authentication details and returns &lt;strong&gt;Error 401 - Unauthorized&lt;/strong&gt;.&lt;/p&gt;
&lt;h2 id="action"&gt;Action&lt;/h2&gt;
&lt;p&gt;To make sure WebLogic validates the deployment tool requests:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Create a new WebLogic user to run the automated deployment.&lt;/li&gt;
&lt;li&gt;The username and password must match the Appian credentials in the command line parameters &lt;code&gt;-username&lt;/code&gt; and &lt;code&gt;-password&lt;/code&gt;.&lt;/li&gt;
&lt;li&gt;This WebLogic user does not require elevated privileges.&lt;/li&gt;
&lt;/ol&gt;
&lt;h2 id="workaround"&gt;Workaround&lt;/h2&gt;
&lt;p&gt;A workaround would be disabling the WebLogic setting, but it is a security risk as this controls whether or not the system should allow requests with invalid HTTP BASIC authentication credentials to access unsecured resources. Disable the &lt;code&gt;enforce-valid-basic-auth-credentials&lt;/code&gt; flag in WebLogic by following these &lt;a href="http://docs.oracle.com/cd/E11035_01/wls100/security/thin_client.html#wp1057361"&gt;steps&lt;/a&gt;.&lt;/p&gt;
&lt;h2 id="affected-versions"&gt;Affected Versions&lt;/h2&gt;
&lt;p&gt;This article applies to all versions of Appian using WebLogic as application server.&lt;/p&gt;
&lt;/div&gt;
&lt;p&gt;Last Reviewed: February 2017&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: weblogic, plug-ins, application server&lt;/div&gt;
</description></item><item><title>KB-1029 "401 Unauthorized" error when running the Deployment Automation Manager in the command line</title><link>https://community.appian.com/support/w/kb/254/kb-1029-401-unauthorized-error-when-running-the-deployment-automation-manager-in-the-command-line/revision/1</link><pubDate>Tue, 14 Feb 2017 12:51:17 GMT</pubDate><guid isPermaLink="false">d3a83456-d57b-489c-a84c-4e8267bb592a:4cab444d-fc0a-499b-82a8-acbc98574f7f</guid><dc:creator>Nick Vigilante</dc:creator><comments>https://community.appian.com/support/w/kb/254/kb-1029-401-unauthorized-error-when-running-the-deployment-automation-manager-in-the-command-line#comments</comments><description>Revision 1 posted to Appian Knowledge Base by Nick Vigilante on 2/14/2017 12:51:17 PM&lt;br /&gt;
&lt;div class="row content_container"&gt;
&lt;h2 id="symptoms"&gt;Symptoms&lt;/h2&gt;
&lt;p&gt;The &lt;a href="https://forum.appian.com/suite/tempo/records/type/components/item/i8BCLGOdlMUpdGVqT-RV7oRg74uEGJO5y8YYyll2ORd3wIJVhcEdFn4_7WTseA_ag/view/summary"&gt;Deployment Automation Manager&lt;/a&gt; shared component works correctly in the web browser, but using the command line tool fails. Running the command with the correct parameters as per the &lt;a href="https://docs.appian.com/suite/help/17.1/Deployment_Automation.md"&gt;instructions&lt;/a&gt; is not able to successfully complete and the deployment processes stop. This behavior was observed when using WebLogic as an application server.&lt;/p&gt;
&lt;p&gt;The following error can be seen in the generated &lt;strong&gt;deploymentautomation_XXXX.log&lt;/strong&gt;:&lt;/p&gt;
&lt;pre&gt;&lt;code&gt;[main] DEBUG org.apache.http.headers - http-outgoing-0 &amp;lt;&amp;lt; HTTP/1.1 401 Unauthorized
&lt;/code&gt;&lt;/pre&gt;
&lt;h2 id="cause"&gt;Cause&lt;/h2&gt;
&lt;p&gt;The deployment fails because the command line tool sends a POST request to the application server with basic authentication headers, however WebLogic requires any POST request with basic authentication to be validated. Thus, it strips the authentication headers before sending it to Appian. Appian will then receive a request without authentication details and returns &lt;strong&gt;Error 401 - Unauthorized&lt;/strong&gt;.&lt;/p&gt;
&lt;h2 id="action"&gt;Action&lt;/h2&gt;
&lt;p&gt;To make sure WebLogic validates the deployment tool requests:&lt;/p&gt;
&lt;ol&gt;
&lt;li&gt;Create a new WebLogic user to run the automated deployment.&lt;/li&gt;
&lt;li&gt;The username and password must match the Appian credentials in the command line parameters &lt;code&gt;-username&lt;/code&gt; and &lt;code&gt;-password&lt;/code&gt;.&lt;/li&gt;
&lt;li&gt;This WebLogic user does not require elevated privileges.&lt;/li&gt;
&lt;/ol&gt;
&lt;h2 id="workaround"&gt;Workaround&lt;/h2&gt;
&lt;p&gt;A workaround would be disabling the WebLogic setting, but it is a security risk as this controls whether or not the system should allow requests with invalid HTTP BASIC authentication credentials to access unsecured resources. Disable the &lt;code&gt;enforce-valid-basic-auth-credentials&lt;/code&gt; flag in WebLogic by following these &lt;a href="http://docs.oracle.com/cd/E11035_01/wls100/security/thin_client.html#wp1057361"&gt;steps&lt;/a&gt;.&lt;/p&gt;
&lt;h2 id="affected-versions"&gt;Affected Versions&lt;/h2&gt;
&lt;p&gt;This article applies to all versions of Appian using WebLogic as application server.&lt;/p&gt;
&lt;/div&gt;
&lt;p&gt;Last Reviewed: October 2015&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;

&lt;div style="font-size: 90%;"&gt;Tags: weblogic, application server, shared components&lt;/div&gt;
</description></item></channel></rss>