Unable to login after CM migration

[#1]

Hi,

I migrated database from embedded postgres to mysql database. Later when i tried to login, i got this message:
You are not authorized to use this application. Click logout to close your single sign-on session

Please help!

[#2]

@kundansonuj,

If you are not using SAML, this error indicates that you may have LDAP authentication enabled and "Remember Me" checked.  If not, it still points more to some sort of session problem.

I recommend using a different browser, incognito window, or clear the cache and browsing history before trying to authenticate again.

If it still happens, let us know.

[#3]

@bgooley  This is a big problem, I have three different browsers and now none of them is working.

I already clear the cache and browsing history before trying to authenticate again.

Please have a look into it on priority and advise.

Thanks.

[#4]

What do the Cloudera Manager logs say about the failed logins? They might give a clue as to why authentication is failing.

[#5]

@wwwnlc111,

The error you are seeing is very specific in nature:

A user session is specified but that user has no authorization.

What authentication types are you using in Cloudera Manager?  SAML, LDAP, Cloudera Manager backend, etc.

If you see this problem even on browsers that have no session cookie for Cloudera Manager, then I have to show some concern regarding whether the migration from postgres to mysql may be involved here.

In general, the only two causes I recall for the issue you are observing are:

(1)

SAML authentication is used and no role/group mapping exists for the user

(2)

LDAP authentication is used and the user clicked on "Remember Me" in the login screen.  After the session expiration time, the error will appear:

You are not authorized to use this application. Click logout to close your single sign-on session

I understand this issue is causing you difficulty, so it is important you share more about the issue... maybe debug it from the browser developer tools too...

[#6]

@bgooley I am using LDAP

Well, I will talk specifically for  Internet Explorer 11 

I cleaned up and history/cookies, restarted my laptop, never used 'Remeber Me'... But strange still I am getting 

You are not authorized to use this application. Click logout to close your single sign-on session.

This need to look from your end.

Thanks. 

[#7]

@wwwnlc111

If you cleaned history and cookies and then you should have been prompted to log in.  Where you?

If not, then indeed there is a lingering session cookie... or at least that is likely.

I would strongly advice making certain you are using a fresh browser session in which case you should be prompted to log in to Cloudera Manager.

What is the behavior you see when you attempt to connect to Cloudera Manager?  Do you get prompted for login?

[#8]

@JimYou are not authorized to use this application. Click logout to close your single sign-on session

[#9]

Is that a message you see in the browser or in the logs? Check the log file /var/log/cloudera-scm-server/cloudera-scm-server.log as well, this might give you a better idea what is going on.

[#10]

---

@kundansonuj wrote:

Hi,

I migrated database from embedded postgres to mysql database. Later when i tried to login, i got this message:
You are not authorized to use this application. Click logout to close your single sign-on session

Please help!

---

Hi, I am still facing the same problem here, please help me with this.

[#11]

@kundansonuj

Please clear all cookies, history and cookies in your browser. Close the browser and open new session of browser and after that try it.

Laos try with different browser.

[#12]

@kundansonuj

Did you try for clear your browser all cookies, history and data. After that close your browser and open new session of browser.

Also try with different browser.