Unable to Impersonate

[DNest19]

I have been trying to give a user the ability to impersonate a handful of other users. None of the users that can be impersonated are appearing in the impersonation dropdown, and when they type the user ID in and hits OK nothing happens(or they are logged out completely). I'm seeing this error in our logs: org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate null: Impersonation not allowed . Oddly, impersonation is working fine on our dev server but not this prod server. Is there a config or setting somewhere to enable impersonation? I have searched this error and found nothing. This user has the proper ACLs. On production only the admin account does not get this error. I tried with a test account and even assigned it to the administrators group and it still had the same issue. Any help is appreciated, thank you.

[DPrakashRaj]

Check this article

https://experienceleaguecommunities.adobe.com/t5/adobe-experience-manager/unable-to-impersonate-in-a...

[DNest19]

The users all exist in the useradmin console. I'm not seeing anything else in that article.

[DPrakashRaj]

1) In order for impersonating to work for non-admin users - even if member of the “administrators” group, the impersonator is required to have READ permissions in the /home/users path.
2) impersonate will only work within the same group.

[DNest19]

1. My user has read permissions for /home/users

2. Can you elaborate on this? My user belongs to the same groups(and some additional groups) as the users they are attempting to impersonate. 

[DNest19]

We are running 6.5, updated with the latest sp

[Shiv_Prakash_Patel]

Hi @DNest19 ,

Below are the steps to impersonate.

• Log in to the AEM author instance with an administrator or privileged user account.

• Navigate to the useradmin console, search for an admin or privileged user account, open it, and also expand the impersonation tab.

• Now search the user for impersonation, drag it into the impersonation tab, and save it.
• Navigate to AEM site console - http://localhost:4502/aem/start.html 
• Click on the profile icon, search for the impersonation user, select, and save.
• That's all you have successfully impersonated.

You can also refer this - https://www.youtube.com/watch?v=LR3Eb_S1UqI 

Regards,

Shiv

•  

[DNest19]

I have already followed these steps to add the impersonators, thanks. The problem is I have already added them but they don't appear and I get an error stating: org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate null: Impersonation not allowed

[Rohan_Garg]

Please refer to the below URL & see if this helps!

https://helpx.adobe.com/in/experience-manager/kb/login_error.html

Also, are you getting the same error of Unable to authenticate null: Impersonation not allowed for an admin?
Can you check the login and access report? An Admin’s login and access are captured in login and access report. For each user who is impersonated by Admin, a record is created in the report.

Source - https://helpx.adobe.com/in/learning-manager/administrators/feature-summary/impersonation-learner-man...

[DNest19]

Hi Rohan.

1/2.This is a local user created in AEM

3. all users except admin

4. The only entry is the one I've already mentioned:  org.apache.sling.auth.core.impl.SlingAuthenticator handleLoginFailure: Unable to authenticate null: Impersonation not allowed