KB-1267 "Access denied: authentication failed" error thrown in application server log

Symptoms

The following error is present in the application server log:

ERROR [org.jboss.as.connector.subsystems.datasources.AbstractDataSourceService$AS7DataSourceDeployer] (MSC service thread 1-2) Exception during createSubject()PBOX000016: Access denied: authentication failed: java.lang.SecurityException: PBOX000016: Access denied: authentication failed

Cause

This is caused by incorrect Appian data source credentials.

Action

1. Navigate to <JBOSS_HOME>/standalone/configuration.
2. Open standalone.xml.
3. Search for the following lines or the ones for the corresponding data source security domain:

   <security-domain name="ds-name-security-primary" cache-type="default">
   <authentication>
       <login-module code="org.picketbox.datasource.security.SecureIdentityLoginModule" flag="required">
           <module-option name="username" value="ENTER_CORRECT_USERNAME" />
           <module-option name="password" value="ENTER_ENCODED_PASSWORD" />
       </login-module>
   </authentication>
   </security-domain>

4. Enter the correct username.
5. Enter the encoded password (created using the Configure Script).
6. Navigate to <JBOSS_HOME>/standalone/deployments.
7. Open the *-ds.xml file containing the data source in question.
8. Find the <security> tag and ensure the value of <security-domain> is the same as the name attribute of the security domain in standalone.xml. For example:

*-ds.xml:

<security>
    <security-domain>ds-name-security-primary</security-domain> 
</security>

standalone.xml:

<security-domain name="ds-name-security-primary" cache-type="default">

If you do not see the lines mentioned in step 3, then perform the following:

1. Navigate to <JBOSS_HOME>/standalone/deployments.
2. Open the appian-ds.xml file.
3. Search for the following lines:

   <module-option name="username" value="ENTER_CORRECT_USERNAME" />
   <module-option name="password" value="ENTER_PASSWORD" />

4. Enter the correct username and plaintext password.

Affected Versions

This article applies to all versions of Appian.