Helping Notes: 2147845 - 403 Forbidden Error when starting Hana Lifecyle Manager

Wednesday, February 3, 2016

2147845 - 403 Forbidden Error when starting Hana Lifecyle Manager

Symptom

403 Forbidden Error is displayed when loading HANA Lifecyle Manager:

Environment

HANA Database 1.0

Reproducing the Issue

Enter HANA Lifecycle Manager using the following URL: http://<HOST_NAME>:80<Instance Number>/sap/hana/xs/lm/
Enter the HANA Username and Password.
403 Forbidden message appears.
The xsengine trace file shows an error similar to the following:

 [28542]{28542}[-1/-1] 2015-03-25 15:33:05.402766 e XSRequestHandler RequestHandler.cpp(00753) : exception  1: no.2  (XSEngine/Util/ConnectionPool.cpp:135)
 could not create db connection from sql connection configuration sap.hana.xs.selfService.user::selfService, username not set
 exception throw location:
 1: 0x00007fd77096c0b8 in odata::DbConnection::init()+0x2e4 at DB.cpp:43 (libxsengine.so)
 2: 0x00007fd77096ecd7 in odata::BaseSerializer::buildResult()+0x13 at BaseSerializer.cpp:18 (libxsengine.so)
 3: 0x00007fd7709135a3 in odata::JsonSerializer::serialize(odata::StringOutStream&)+0x60 at JsonSerializer.cpp:52 (libxsengine.so)
 4: 0x00007fd77090fea0 in odata::SerializationFacade::serialize(odata::RequestContext&, xsengine::WebResponse&)+0x160 at SerializationFacade.cpp:150 (libxsengine.so)
 5: 0x00007fd7708b0519 in xsengine::ODataSuffixHandler::execute(xsengine::WebRequestInternal const&, xsengine::WebResponseInternal&, xsengine::ResourceHandler::Context const&,ltt::smartptr_handle<xsengine::RepositoryCache::CachedBinary>        const&, odata::tracking::ExecutionTracker&, xsengine::ODataSuffixHandler::DBCleanupCallback*&)+0x645 at ODataSuffixHandler.cpp:218 (libxsengine.so)
 6: 0x00007fd7708b2509 in xsengine::ODataSuffixHandler::handleRequest(xsengine::WebRequestInternal const&, xsengine::WebResponseInternal&, xsengine::ResourceHandler::Context const&)+0x2d5 at ODataSuffixHandler.cpp:150 (libxsengine.so)
 7: 0x00007fd770870220 in xsengine::RequestHandler::handleRequest(ltt::smartptr_handle<xsengine::HttpRequestContext>&, int)+0x39e0 at RequestHandler.cpp:652 (libxsengine.so)
 8: 0x00007fd75823e95e in Execution::JobObjectImpl::run(Execution::JobWorker*)+0x6aa at JobExecutorImpl.cpp:822 (libhdbbasis.so)
 9: 0x00007fd75824c010 in Execution::JobWorker::runJob(ltt::smartptr_handle<Execution::JobObjectForHandle>&)+0x2f0 at JobExecutorImpl.hpp:459 (libhdbbasis.so)
10: 0x00007fd75824d044 in Execution::JobWorker::run(void*&)+0x1a0 at JobExecutorThreads.cpp:376 (libhdbbasis.so)
11: 0x00007fd75827b439 in Execution::Thread::staticMainImp(void**)+0x875 at Thread.cpp:488 (libhdbbasis.so)
12: 0x00007fd75827bffd in Execution::Thread::staticMain(void*)+0x39 at ThreadMain.cpp:26 (libhdbbasis.so)

Cause

This error is caused by insufficient privileges being assigned to the HANA user.

Resolution

Through HANA Studio SQL Console execute the following command to assign the Lifecycyle Manager Administration role to the HANA user:

call grant_activated_role ('sap.hana.xs.lm.roles::Administrator','SYSTEM');