title: SUM authentication issue with saphostctrl – Authentication Required
body: <p>We are trying to start the Software Update Manager (SUM) 1.0 SP20 PL4 on an Netweaver 7.02 Sandbox with Red Hat Enterprise Linux 7 and DB2 (DB6).</p>
  <p>We extracted the SUM package to /usr/sap//SUM and started the tool via command (with root):</p>
  <p>./STARTUP confighostagent QHR &amp;</p>
  <p>or</p>
  <p>./STARTUP  &amp;</p>
  <p>When calling the URL http://localhost:1128/lmsl/sumabap/QHR/doc/sluigui the authentication box appears where we type in the sidadm credentials. When we confirm the credentials the box appears again after 1 second. No matter if the credentials are correct (sidadm with correct password) or not (any login with any password), the authentication box appears again (see attached screenshot).</p>
  <p>This is, what we already checked:</p>
  <ul>
  <li>Restart of the SUM</li>
  <li>Restart of SAP Host Agent</li>
  <li>Installation of latest SAP Host Agent version</li>
  <li>Restart of complete virtual machine</li>
  <li>Tried Internet Explorer, Firefox, Chrome in normal mode and in
  private browsing mode</li>
  <li>Re-download / re-extract of SUM to /usr/sap//SUM</li>
  <li>Check of file authorizations of SUM</li>
  </ul>
  <p><strong>Notes we checked:</strong></p>
  <ul>
  <li>927637 - Web service authentication in sapstartsrv as of Release 7.00</li>
  <li>1563660 - sapcontrol, user authorization issues (SUM)</li>
  <li>2284028 - SUM SL Common UI : Troubleshooting problems with the new
  SUM UI</li>
  <li>2426160 - DB6: Add. Info - Software Update Manager 1.0 SP20</li>
  </ul>
  <p>We changed the saphostctrl tracelevel to 3 and found an error in the /usr/sap/hostctrl/work/sapstartsrv.log after trying to authenticate again:</p>
  <pre><code>[Thr 140134583793408] Authenticate check on cache failed
  
  Tue Jul 11 17:21:34 2017
  
  pam_authenticate_user -&gt; service( sapstartsrv ) user (
  qhradm )
  
  *** ERROR =&gt; pam_authenticate ( qhradm ) failed :
  Authentication failure  [usercheckux. 243]
  
  [Thr 140134583793408] helper exit with return code 251
  
  Tue Jul 11 17:21:34 2017
  
  pam_authenticate_user -&gt; service( login ) user ( qhradm )
  
  Tue Jul 11 17:21:36 2017
  
  *** ERROR =&gt; pam_authenticate ( qhradm ) failed :
  Authentication failure  [usercheckux. 243]
  
  [Thr 140134583793408] Tue Jul 11 17:21:36 2017
  
  [Thr 140134583793408] helper exit with return code 251
  
  [Thr 140134583793408] *** ERROR =&gt; soap_check_permission
  authentication: ( qhradm, ExecutOperation ) FAILED [DefaultOpera 163]
  
  [Thr 140134583793408] Authenticate clear cache
  
  [Thr 140134583793408] Unauthorized (user authentication
  required)
  
  [Thr 140134583793408] *** ERROR =&gt; Authentication is
  required  [HTTPProxyHan 258]
  
  [Thr 140134583793408] HTTPResponse::SendError HTTP 401:
  'Unauthorized: User authentication required' send as 'Unauthorized'
  </code></pre>
  <p>SAP note 927637 says the following:</p>
  <blockquote>
  <p>[…]</p>
  <p>If the user/password check fails, the system generates an &quot;Invalid Credentials&quot; SOAP exception.</p>
  <p>[…]</p>
  </blockquote>
  <p>Unfortunately there are no hints what to do with the above error message.</p>
  <p>Do you have any idea, what we can do to find/solve the problem?</p>
  <p><img src="https://i.stack.imgur.com/CUb9r.png" alt="Authentication Error" /></p>
  <p>regards,</p>
  <p>Umar Abdullah</p>