Rest APl request URL

[lalitsharma1]

I have been trying to set us a basic rest call to RSA Archer for login. I was able to extract the following URL for making the call from API guides and forums

http://RsaArcher/api/core/security/login

But when a call in made to this URL. I receive an error "java.net.UnknownHostException: Unable to resolve host "rsaarcher": No address associated with hostname"

I did verify a proper internet connection before testing it. The platform is Android.

So what should be the hostname in this case?

[Anonymous]

Make sure you are using the right URL, and that your user login values are correct, include their cAsE SeNsItIvItY.

[MariaNicholas2]

Yes, we’ve done this. We’re truly stumped.

We’re using Siteminder, though it shouldn’t impact. The integration worked in DEV (the failure is in Staging).

[DavidPetty]

Maria is Siteminder protecting the /api folder?  It shouldn't be protecting the api, contentapi and ws folders.

[MariaNicholas2]

We definitely covered that when we upgraded the environment in August- no, Siteminder is not protecting the API folder.

[lokeshkumar449]

for invalid logins can you check if anonymous authentication is enabled for ws folder as you has sso for root.

[MariaNicholas2]

Update: I can authenticate using the sysadmin account. Obviously we can’t make that our final solution. No other account in the system works. Could this be due to a security parameter setting/difference between the DEV and Staging environments?

[MariaNicholas2]

Update 2: I found the issue-in Staging our security parameters were set up with password expiration reminders; this was apparently thwarting authentication via REST. Turning off the reminders solved the problem. Any chance this can be fixed in future iterations?

Thanks for your help.

Maria

[Ilya_Khen]

You mean Password Expiration Notice? It should not be the case, unless account you use is expired.

If it is so, I recommend to open ticket to support.

[DavidPetty]

Maria, fixed in what manner?  It's out of the box configuration I believe for end users; non-SSO of course.

Ideally just like data feeds you should create a new security parameter for API users so that the password don't expire for the maximum time.

[Ilya_Khen]

David, is it so that Password Expiration Reminder in Security Parameter would make users to be non-authenticated over REST API? What is the relationship here, I do not get