Universal ID and use of the BTP Neo SDK

[pjcools]

I am trying to run the following command using the BTP Neo SDK and the issue relates to security. With Universal ID now in place what credentials do I enter when I am logging into the subaccount??

neo list-ssl-hosts -- account XXXXXXX --user XXXXXXXXXXXXX --host ap1.hana.ondemand.com

This is the error I receive that is contained in the logs.

2023-07-10 10:13:06,491 INFO [main] com.sap.jpaas.infrastructure.console.ConsoleLogger: Command [list-ssl-hosts] init() finished for [707] ms
2023-07-10 10:13:13,048 INFO [main] com.sap.jpaas.infrastructure.console.ConsoleLogger: Command [list-ssl-hosts] cleanup() finished for [0] ms
2023-07-10 10:13:13,048 FATAL [main] com.sap.jpaas.infrastructure.console.ConsoleLogger: (!) ERROR
com.sap.jpaas.infrastructure.console.exception.SecurityException: null
at com.sap.jpaas.infrastructure.console.ConsoleClient.run(ConsoleClient.java:207) [com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
at com.sap.jpaas.infrastructure.console.ConsoleClient.main(ConsoleClient.java:80) [com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
Caused by: com.sap.core.utils.infrastructure.validation.AuthenticationException
at com.sap.core.utils.infrastructure.validation.LandscapeHostValidator.validateHttpResponseStatus(LandscapeHostValidator.java:437) ~[com.sap.core.utils-1.88.0.jar:?]
at com.sap.core.utils.infrastructure.validation.HttpResponseValidator.process(HttpResponseValidator.java:36) ~[com.sap.core.utils-1.88.0.jar:?]
at org.apache.http.protocol.ImmutableHttpProcessor.process(ImmutableHttpProcessor.java:139) ~[httpcore-4.3.3.jar:4.3.3]
at org.apache.http.protocol.HttpRequestExecutor.postProcess(HttpRequestExecutor.java:308) ~[httpcore-4.3.3.jar:4.3.3]
at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:495) ~[httpclient-4.3.6.jar:4.3.6]
at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863) ~[httpclient-4.3.6.jar:4.3.6]
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82) ~[httpclient-4.3.6.jar:4.3.6]
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106) ~[httpclient-4.3.6.jar:4.3.6]
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57) ~[httpclient-4.3.6.jar:4.3.6]
at com.sap.core.certificate.manager.cmd.client.CertificateManagerRestClient.execute(CertificateManagerRestClient.java:320) ~[com.sap.core.customdomains.cmd-1.109.0.jar:?]
at com.sap.core.certificate.manager.cmd.client.CertificateManagerRestClient.listSSlHosts(CertificateManagerRestClient.java:182) ~[com.sap.core.customdomains.cmd-1.109.0.jar:?]
at com.sap.core.certificate.manager.cmd.commands.ListSslHostsCommand.run(ListSslHostsCommand.java:46) ~[com.sap.core.customdomains.cmd-1.109.0.jar:?]
at com.sap.jpaas.infrastructure.console.CommandManager.run(CommandManager.java:185) ~[com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
at com.sap.jpaas.infrastructure.console.CommandManager.run(CommandManager.java:146) ~[com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
at com.sap.jpaas.infrastructure.console.ConsoleClient.executeCommand(ConsoleClient.java:243) ~[com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]
at com.sap.jpaas.infrastructure.console.ConsoleClient.run(ConsoleClient.java:185) [com.sap.jpaas.infrastructure.console.framework-2.37.0.jar:?]

I have downloaded the latest version (as of last week) of the BTP Neo SDK 3.180.4.

Any help would be appreciated.

thanks

Phil Cooley

[MustafaBensan · Accepted solution]

Hi Phil,

While you can log into the BTP Cockpit and subaccounts with your Universal ID credentials, if you are executing technical operations such as API calls or commands, I suspect you will need to use the password of the corresponding S-User that is tied to your Universal ID and not the Universal ID password. Have you tried that?

Regards,

Mustafa.

[pjcools · Accepted solution]

Thanks mbensan Yep, I have tried that. The issue I have is that the email address is associated with about 5 S userids and in the command line tool the user option is email address. So then which password do I enter ??