Bad credentials detected, Access denied or Authentication failed using the unrestricted user or any user credentials to log into a Metadata Server AIX


One of the following errors may be encountered when attempting to log into the Metadata Server as the unrestricted user (sasadm) or any other user credentials when the Metadata Server is on AIX.

ERROR: bad credentials detected.

ERROR: Access denied.

ERROR: Access denied.Authentication failed.

The same user credentials can be used successfully to log into the AIX machine using TELNET, SSH or RLOGIN. In some cases, only the SAS required userids fail to authenticate.

This problem will occur when the following System Management Interface Tool (SMIT or SMITTY) control fields are not set or are not set correctly.

1.) User can LOGIN?, must be set to true.

Note: The User can LOGIN REMOTELY? field can be set to false.

2.) Weeks between password EXPIRATION and LOCKOUT [0], must be set.

3.) Password MAX. AGE [0] #, must be set.

4.) Password MIN. AGE [0] #, must be set.

Note: These fields, excluding User can LOGIN?, can be set to 0 but must be defined. The fields are ignored if set to 0.

Example:

   * User NAME sasadm
   User ID [1470] #
   ADMINISTRATIVE USER? false +
   Primary GROUP [sas] +
   Group SET [sas] +
   ADMINISTRATIVE GROUPS [] +
   ROLES [] +
   Another user can SU TO USER? true +
   SU GROUPS [ALL] +
   HOME directory [/home/sasadm]
   Initial PROGRAM [/usr/bin/sh]
   User INFORMATION [Mike Bender]
   EXPIRATION date (MMDDhhmmyy) [0]
   Is this user ACCOUNT LOCKED? false +
   User can LOGIN? true +
   User can LOGIN REMOTELY(rsh,tn,rlogin)? false +
   Allowed LOGIN TIMES []
   Number of FAILED LOGINS before [0] #
   user account is locked
   Login AUTHENTICATION GRAMMAR [compat]
   Valid TTYs [ALL]
   Days to WARN USER before password expires [0] #
   Password CHECK METHODS []
   Password DICTIONARY FILES []
   NUMBER OF PASSWORDS before reuse [0] #
   WEEKS before password reuse [0] #
   Weeks between password EXPIRATION and LOCKOUT [-1]
   Password MAX. AGE [0] #
   Password MIN. AGE [0] #
   Password MIN. LENGTH [6] #
   Password MIN. ALPHA characters [1] #
   Password MIN. OTHER characters [1] #
   Password MAX. REPEATED characters [8] #
   Password MIN. DIFFERENT characters [0] #
   Password REGISTRY [files]
   Soft FILE size [2097151] #
   Soft CPU time [-1]
   Soft DATA segment [262144] #
   Soft STACK size [65536] #