Universal ID and use of the BTP Neo SDK

[pjcools]

I am trying to run the following command using the BTP Neo SDK and the issue relates to security. With Universal ID now in place what credentials do I enter when I am logging into the subaccount??

neo list-ssl-hosts -- account XXXXXXX --user XXXXXXXXXXXXX --host ap1.hana.ondemand.com

This is the error I receive that is contained in the logs.

2023-07-10 10:13:06,491 INFO [main] com.sap.jpaas.infrastructure.console.ConsoleLogger: Command [list-ssl-hosts] init() finished for [707] ms
2023-07-10 10:13:13,048 INFO [main] com.sap.jpaas.infrastructure.console.ConsoleLogger: Command [list-ssl-hosts] cleanup() finished for [0] ms
2023-07-10 10:13:13,048 FATAL [main] com.sap.jpaas.infrastructure.console.ConsoleLogger: (!) ERROR
com.sap.jpaas.infrastructure.console.exception.SecurityException: null
at com.sap.jpaas.infrastructure.console.ConsoleClient.run(ConsoleClient.java:207) [com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
at com.sap.jpaas.infrastructure.console.ConsoleClient.main(ConsoleClient.java:80) [com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
Caused by: com.sap.core.utils.infrastructure.validation.AuthenticationException
at com.sap.core.utils.infrastructure.validation.LandscapeHostValidator.validateHttpResponseStatus(LandscapeHostValidator.java:437) ~[com.sap.core.utils-1.88.0.jar:?]
at com.sap.core.utils.infrastructure.validation.HttpResponseValidator.process(HttpResponseValidator.java:36) ~[com.sap.core.utils-1.88.0.jar:?]
at org.apache.http.protocol.ImmutableHttpProcessor.process(ImmutableHttpProcessor.java:139) ~[httpcore-4.3.3.jar:4.3.3]
at org.apache.http.protocol.HttpRequestExecutor.postProcess(HttpRequestExecutor.java:308) ~[httpcore-4.3.3.jar:4.3.3]
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:495) ~[httpclient-4.3.6.jar:4.3.6]
at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863) ~[httpclient-4.3.6.jar:4.3.6]
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82) ~[httpclient-4.3.6.jar:4.3.6]
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106) ~[httpclient-4.3.6.jar:4.3.6]
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57) ~[httpclient-4.3.6.jar:4.3.6]
at com.sap.core.certificate.manager.cmd.client.CertificateManagerRestClient.execute(CertificateManagerRestClient.java:320) ~[com.sap.core.customdomains.cmd-1.109.0.jar:?]
at com.sap.core.certificate.manager.cmd.client.CertificateManagerRestClient.listSSlHosts(CertificateManagerRestClient.java:182) ~[com.sap.core.customdomains.cmd-1.109.0.jar:?]
at com.sap.core.certificate.manager.cmd.commands.ListSslHostsCommand.run(ListSslHostsCommand.java:46) ~[com.sap.core.customdomains.cmd-1.109.0.jar:?]
at com.sap.jpaas.infrastructure.console.CommandManager.run(CommandManager.java:185) ~[com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
at com.sap.jpaas.infrastructure.console.CommandManager.run(CommandManager.java:146) ~[com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
at com.sap.jpaas.infrastructure.console.ConsoleClient.executeCommand(ConsoleClient.java:243) ~[com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
at com.sap.jpaas.infrastructure.console.ConsoleClient.run(ConsoleClient.java:185) [com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]

I have downloaded the latest version (as of last week) of the BTP Neo SDK 3.180.4.

Any help would be appreciated.

thanks

Phil Cooley

[NabiZamani]

Hi Phil,

Just use the explicit user id (by the way, there was a space in “-- account”):

neo list-ssl-hosts --account XXXXXXX --user S1234567 --host ap1.hana.ondemand.com

You should also be able to leave the ap1 away

neo list-ssl-hosts -a XXXXXXX -h hana.ondemand.com -u S1234567

ps Using -a, -h, and -u are the flavors that I prefer over the long “--“ options (but shouldn’t really matter).

Best, Nabi

[pjcools]

Thanks pars.man - yep syntax is all good. Got it working by using a separate S user not connected to Universal ID.