KB-1267 "Access denied: authentication failed" error thrown in application server log

Symptoms

The following error is present in the application server log:

ERROR [org.jboss.as.connector.subsystems.datasources.AbstractDataSourceService$AS7DataSourceDeployer] (MSC service thread 1-2) Exception during createSubject()PBOX000016: Access denied: authentication failed: java.lang.SecurityException: PBOX000016: Access denied: authentication failed

Cause

This is caused by incorrect Appian data source credentials.

Action

  1. Navigate to <JBOSS_HOME>/standalone/configuration.
  2. Open standalone.xml.
  3. Search for the following lines or the ones for the corresponding data source security domain:
    <security-domain name="ds-name-security-primary" cache-type="default">
    <authentication>
        <login-module code="org.picketbox.datasource.security.SecureIdentityLoginModule" flag="required">
            <module-option name="username" value="ENTER_CORRECT_USERNAME" />
            <module-option name="password" value="ENTER_ENCODED_PASSWORD" />
        </login-module>
    </authentication>
    </security-domain>
  4. Enter the correct username.
  5. Enter the encoded password (created using the Configure Script).
  6. Navigate to <JBOSS_HOME>/standalone/deployments.
  7. Open the *-ds.xml file containing the data source in question.
  8. Find the <security> tag and ensure the value of <security-domain> is the same as the name attribute of the security domain in standalone.xml. For example:

*-ds.xml:

<security>
<security-domain>ds-name-security-primary</security-domain>
</security>

standalone.xml:

<security-domain name="ds-name-security-primary" cache-type="default">

If you do not see the lines mentioned in step 3, then perform the following:

  1. Navigate to <JBOSS_HOME>/standalone/deployments.
  2. Open the appian-ds.xml file.
  3. Search for the following lines:
    <module-option name="username" value="ENTER_CORRECT_USERNAME" />
    <module-option name="password" value="ENTER_PASSWORD" />
  4. Enter the correct username and plaintext password.

Affected Versions

This article applies to all versions of Appian.

Last Reviewed: June 2017

Related
Recommended