KB-1267 "Access denied: authentication failed" error thrown in application server log


The following error is present in the application server log:

ERROR [org.jboss.as.connector.subsystems.datasources.AbstractDataSourceService$AS7DataSourceDeployer] (MSC service thread 1-2) Exception during createSubject()PBOX000016: Access denied: authentication failed: java.lang.SecurityException: PBOX000016: Access denied: authentication failed


This is caused by incorrect Appian data source credentials.


  1. Navigate to <JBOSS_HOME>/standalone/configuration.
  2. Open standalone.xml.
  3. Search for the following lines or the ones for the corresponding data source security domain:
    <security-domain name="ds-name-security-primary" cache-type="default">
        <login-module code="org.picketbox.datasource.security.SecureIdentityLoginModule" flag="required">
            <module-option name="username" value="ENTER_CORRECT_USERNAME" />
            <module-option name="password" value="ENTER_ENCODED_PASSWORD" />
  4. Enter the correct username.
  5. Enter the encoded password (created using the Configure Script).
  6. Navigate to <JBOSS_HOME>/standalone/deployments.
  7. Open the *-ds.xml file containing the data source in question.
  8. Find the <security> tag and ensure the value of <security-domain> is the same as the name attribute of the security domain in standalone.xml. For example:




<security-domain name="ds-name-security-primary" cache-type="default">

If you do not see the lines mentioned in step 3, then perform the following:

  1. Navigate to <JBOSS_HOME>/standalone/deployments.
  2. Open the appian-ds.xml file.
  3. Search for the following lines:
    <module-option name="username" value="ENTER_CORRECT_USERNAME" />
    <module-option name="password" value="ENTER_PASSWORD" />
  4. Enter the correct username and plaintext password.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: June 2017