Error while login on to the ciscowork via web browser

[sivakumar.ks]

Hi,

I am facing following error after validating the username and password.

Forbidden

You don't have permission to access /cwhp/LiaisonServlet on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

Can anyone help me pls to fix the same.

thanks,

siva

[Joe Clarke]

See this thread for some ideas to try:

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=Network%20Management&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1ddba04e/1#selected_message

If this does not pan out, you will need to provide more details as to the platform, whether or not you're using HTTPS, the output of pdreg -l Apache, and the value of CMFPROTOCOL from NMSROOT/MDC/etc/regdaemon.xml.

[sivakumar.ks]

Hi,

I am running ciscoworks in windows 2003 server and I am using https and here is the output of pdreg -L Apache

D:\CSCOpx\bin>pdreg -l Apache

Process = Apache

Path = d:\CSCOpx\MDC\Apache\Apache.exe

Flags = -d d:\CSCOpx\MDC\Apache -D SSL

Startup = Started automatically at boot.

Dependencies = Tomcat

D:\CSCOpx\bin>

and CMFPROTOCOL

CMFPROTOCOL

https

1

Thanks,

siva

[Joe Clarke]

Did you verify your service startup parameters? What are CiscoWorks Web Server and CiscoWorks Tomcat Servlet Engine set to?

[frankzehrer]

Hi Siva,

just a question:

Do you use the ACS Integration or maybe you use the SSO feature while you are using serveral servers?

Where does the failure happen? Do you try to login from the LMS Server or a remote client?

Check if you are able to login from another client or from the server itself.

Best regards,

Frank

[sivakumar.ks]

Hi ,

I am not using ACS for authendication. I am trying from the server itself, same error message.

Forbidden

You don't have permission to access /cwhp/LiaisonServlet on this server.

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

Please help me.

siva

[frankzehrer]

Hi Siva,

compare the settings for the Windows Services:

CiscoWorks ANI database engine : Manual

CiscoWorks Daemon Manager : Automatic

CiscoWorks RME NG database engine : Manual

CiscoWorks Tomcat Servlet Engine : Manual

CiscoWorks VisiBroker Smart Agent : Manual

CiscoWorks Web Server : Manual

CWCS Cmf database engine : Manual

CWCS rsh/rcp service : Automatic

CWCS syslog service : Automatic

CWCS tftp service : Automatic

DFM dfmEpm database engine : Manual

DFM dfmInv database engine : Manual

DFM dfmFh database engine : Manual

IPM Aging Server : Automatic

IPM DB Server : Automatic

IPM Naming Server : Automatic

IPM PM Server : Automatic

IPM Stopper : Automatic

From the Directoy CSOCpX the group casusers should have full permissions through all subdirs.

What jre are you running? Try the output from C:\ (not from C:\windows\system32) java -version.

The output should be something like this:

java version "1.3.1_06"

Java(TM) 2 Runtime Environment, Standard Edition (build 1.3.1_06-b01) Java HotSpot(TM) Client VM (build 1.3.1_06-b01, mixed mode)

If it is different try the command:

Install_Disk\Program Files\CSCOpx\MDC\JRE\bin>java.exe -version

(Install_Disk=Disk where LMS is installed)

If this does not solve your problem think about opening a TAC Service Request.

Best regards,

Frank

[sivakumar.ks]

Hi Frank,

Thanks for you reply. I have check all the parameters as mentioned above , nothing is changed. every same as above.

But still facing that problem.

regards,

siva

[rdanevich]

What's the url you're using? I've found if you don't use the full path you'll get that EXACT error message.

Try this:

https://x.x.x.x/CSCOnm/servlet/login/login.jsp

[sivakumar.ks]

Hi,

The error which I mentioned above is happening after supplying username ad password. It is authendicating , but not pulling download first screen.

siva

[Joe Clarke]

As said before, you need to open a TAC service request at this point. There are additional logs that are required to figure out why this is happening. Remote access may also be required.

[lcuchisanmillan]

I have the same problem. Sometimes i get the following error:

You don't have permission to access /cwhp/LiaisonServlet on this server

Any suggestion?

[Joe Clarke]

If this is Windows, the most common cause is the service startup parameters for some of the CiscoWorks services have been changed from Manual to automatic. See this thread for what the correct values should be.