Re: Node - [error] authentication : Authentication failure:Invalid login credentials

Hi Jan,

The user you are trying to use, jan.bednar, is a native OS user for the Windows machine where the ESP cluster is running. You must append a domain to the user name omitting top-level domain extensions such as .com or .net—for example, fred@sap, not fred@sap.com.

Added: If you do not include the domain, the defaultDomain option must be specified in the authenticator section of cluster configuration.

Also: If you use a Windows account to log in, you must also grant permissions to the user name in the format username@domain.

For example: grant perm all on all to user jan.bednar@sap

You will need to use that complete userid whenever logging into any ESP components when the ESP cluster is running on windows, since all security and authentication is centralized for the whole cluster.

(See Granting Permissions - SAP Event Stream Processor: Installation Guide for Windows - SAP Library.)

So, now let's go back to what you described originally in this post - I'm guessing that for the original user id you were referring to of "esp1", you had wanted to create that using preconfigured username/password authentication.

Here are the steps for setting up a Pre-Configured ESP user account, using the SYS_STREAMING user:

1. Generate an encrypted password string using the streamingclusteradmin utility as follows:

1. Execute the utility:  %STREAMING_HOME%/bin/streamingclusteradmin --encode_text
2. Respond to the prompts:
   1. Please enter text to be encoded:
   2. Please re-enter text to be encoded:
   3. The encrypted password is returned:{SHA-256:31EApshv/zQ=}VNkrYJ7URNpxVkv4k3QlIt4UE8PNh0UiT+IHHkUV3vU=
      
      

2. Add a username/password authenticator for the new user account:

1. Log in to the cockpit using the SYS_STREAMING user account.
2. Navigate to configure Authenticators:
3. Click "EXPLORE."
4. In the Browse tab, click "ESP Nodes."
5. Click the upside-down triangle and choose "Configure Cluster."
6. Expand the Security folder.
7. If you already have an authenticator, the “Authenticators” folder will be displayed.
8. If the “Authenticators” folder appears, expand the folder, and click on one of the listed authenticators.
9. If the “Authenticators” folder does not appear, but instead, shows up as a file, then click on “Authenticators”:
   1. Click on "Add Authenticator..."
   2. From the "Authenticator Type" dropdown, choose Pre-Configured User.
   3. Click "Done."
   4. Click OK on the Info pop-up that says "The authenticator has been saved to the configuration."
10. Click in the Value field for the username to enter the desired username.
11. Click in the Value field for the password to enter the encoded text string that you generated in Step 1.
12. Click "Apply."
    
    

3. IMPORTANT: You MUST RESTART the node for these changes to go into effect:

1. Stop the node - see Stopping a Node or Cluster - SAP Event Stream Processor: Configuration and Administration Guide - SAP Library.
2. Start the node - see Starting a Node or Cluster - SAP Event Stream Processor: Configuration and Administration Guide - SAP Library.