Publish + dispatcher + 403 forbidden issue

[Mahesh_Vikram]

Hi All,

I have dispatcher and publisher (AEM 6.1) setup for my project, now when i tried to access via dispatcher, it is giving me 403 forbidden error and when i try to access publisher it is giving "Authentication Denied"

Pl find.. logs below.

Steps we did is:-

Created a package from fresh CQ instance /libs/granite/security/ and installed it on the publish with issue.

Thanks,Mahesh

dispatcher log:-

[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] Found farm publish for epsiqaweb01.d.solutionset.com
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] checking [/content/geometrixx/en/toolbar/account/login.html]
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] request contains a query string: resource=%2F&$$login$$=%24%24login%24%24&j_reason=User+name+and+password+do+not+match&j_reason_code=invalid_login
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] cache-action for [/content/geometrixx/en/toolbar/account/login.html]: NONE
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] Creating new socket: 10.0.3.215:4503
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] Connected to backend rend01 (10.0.3.215:4503)
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] Adding request header: Host
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] Adding request header: Cache-Control
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] Adding request header: Accept
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] Adding request header: Upgrade-Insecure-Requests
[Wed Jan 13 14:51:28 2016] [D] [12898(140074796648192)] Adding request header: User-Agent

Publish access_log:-

10.0.3.152 - - 13/Jan/2016:14:40:31 -0500 "GET /content/geometrixx/en/toolbar/account/login.html?resource=%2Ffavicon.ico&$$login$$=%24%24login%24%24&j_reason=User+name+and+password+do+not+match&j_reason_code=invalid_login HTTP/1.1" 403 22 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0"
10.0.3.152 - - 13/Jan/2016:14:40:31 -0500 "GET /content/geometrixx/en/toolbar/account/login.html?resource=%2Ffavicon.ico&$$login$$=%24%24login%24%24&j_reason=User+name+and+password+do+not+match&j_reason_code=invalid_login HTTP/1.1" 403 22 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0"
115.99.255.154 - admin 13/Jan/2016:14:41:01 -0500 "GET /libs/granite/csrf/token.json HTTP/1.1" 200 103 "

publish error_log:-

13.01.2016 14:48:30.901 INFO [qtp1054929456-57] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:49:30.912 INFO [qtp1054929456-59] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:50:30.923 INFO [qtp1054929456-353] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:51:28.041 INFO [qtp1054929456-353] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate anonymous user: UserId/Password mismatch.
13.01.2016 14:51:28.041 ERROR [qtp1054929456-353] com.day.cq.auth.impl.LoginSelectorHandler requestCredentials: Abort login due to apparent misconfiguration.
13.01.2016 14:51:28.041 ERROR [qtp1054929456-353] com.day.cq.auth.impl.LoginSelectorHandler requestCredentials: Possible reasons: login page not existing or not accessible
13.01.2016 14:51:28.775 INFO [qtp1054929456-58] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate anonymous user: UserId/Password mismatch.
13.01.2016 14:51:30.934 INFO [qtp1054929456-354] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:52:17.264 INFO [qtp1054929456-57] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate anonymous user: UserId/Password mismatch.
13.01.2016 14:52:17.539 INFO [qtp1054929456-354] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate anonymous user: UserId/Password mismatch.
13.01.2016 14:52:17.539 ERROR [qtp1054929456-354] com.day.cq.auth.impl.LoginSelectorHandler requestCredentials: Abort login due to apparent misconfiguration.
13.01.2016 14:52:17.539 ERROR [qtp1054929456-354] com.day.cq.auth.impl.LoginSelectorHandler requestCredentials: Possible reasons: login page not existing or not accessible
13.01.2016 14:52:18.432 INFO [qtp1054929456-59] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate anonymous user: UserId/Password mismatch.
13.01.2016 14:52:30.945 INFO [qtp1054929456-56] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:53:30.957 INFO [qtp1054929456-59] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:54:30.968 INFO [qtp1054929456-56] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:55:30.977 INFO [qtp1054929456-58] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:56:30.987 INFO [qtp1054929456-57] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:56:42.462 INFO [pool-6-thread-3] com.day.cq.polling.importer.impl.PollingImporterImpl importData: Importing data from screport:default to /content/geometrixx-outdoors/en/company/unlimited-blog/jcr:content/sidebar/topblogposts_4d49/report/thirtyday as admin by com.day.cq.analytics.sitecatalyst.impl.importer.ReportImporter@789647c0
13.01.2016 14:56:42.464 INFO [pool-6-thread-3] com.day.cq.analytics.sitecatalyst.impl.importer.ReportImporter No valid sitecatalyst config found for /content/geometrixx-outdoors/en/company/unlimited-blog/jcr:content/sidebar/topblogposts_4d49/report/thirtyday, skipping report
13.01.2016 14:56:42.467 INFO [pool-6-thread-5] com.day.cq.polling.importer.impl.PollingImporterImpl importData: Importing data from screport:default to /content/geometrixx-outdoors/en/brand/unlimited-blog/jcr:content/sidebar/topblogposts_4d49/report/thirtyday as admin by com.day.cq.analytics.sitecatalyst.impl.importer.ReportImporter@789647c0
13.01.2016 14:56:42.468 INFO [pool-6-thread-5] com.day.cq.analytics.sitecatalyst.impl.importer.ReportImporter No valid sitecatalyst config found for /content/geometrixx-outdoors/en/brand/unlimited-blog/jcr:content/sidebar/topblogposts_4d49/report/thirtyday, skipping report
13.01.2016 14:57:30.997 INFO [qtp1054929456-59] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:58:31.006 INFO [qtp1054929456-56] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 14:59:31.014 INFO [qtp1054929456-58] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 15:00:29.999 INFO [pool-6-thread-4] com.adobe.granite.taskmanagement.impl.jcr.TaskArchiveService archiving tasks at: 'Wed Jan 13 15:00:29 EST 2016'
13.01.2016 15:00:31.022 INFO [qtp1054929456-354] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 15:01:31.033 INFO [qtp1054929456-353] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.
13.01.2016 15:02:31.042 INFO [qtp1054929456-58] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.

[leeasling]

Are you getting the Geometrixx login screen?

[Mahesh_Vikram]

PFA .. of the publish when we access http://localhost:4503/

We are able to login /crx/explorer and from there  I can go to /crx/de, but directly /crx/de i am not able to access.

[Jitendra_S_Toma]

@Mahesh,

I do not find any clue related to issues with crxde. All I see is that provided login credentials are not correct.  

13.01.2016 14:58:31.006 INFO [qtp1054929456-56] org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate admin: UserId/Password mismatch.

For more clarity, kindly provide step by step details to understand your concern.

Jitendra

[Mahesh_Vikram]

Hi Jitendra,

We changed the password for publisher instance, after that we started facing issue.

No chance for forgetting password, I tried to login /crx/explorer with the new password, I successfully logged in.

Thanks,Mahesh

[Jitendra_S_Toma · Accepted solution]

@Mahesh,

If you are able to login to crx but not in crxde, it seems odd that the password is changed only for CRX explorer but not for other tools. In older version of AEM, it used to happen.

Are you able to login on the publish felix console?.

For more details :  http://wcmaem.blogspot.in/2013/12/how-to-change-default-admin-password.html

Jitendra

[Mahesh_Vikram]

Hi Jitendra,

I followed the same steps in the link you provided, after that problem started.

Thanks,Mahesh