Skip to main content

This content is closed to future replies and is no longer being maintained or updated.
Links may no longer function. If you have a similar request, please write a new post.

Question

 Kensho Tsuchihashi (KenshoTsuchihashi) PEGA Senior Project Delivery Leader
Pegasystems Inc.
JP
KenshoTsuchihashi Member since 2010 205 posts
PEGA
Posted: Jan 7, 2020
Last activity: Jun 4, 2021
Posted: 7 Jan 2020 23:08 EST
Last activity: 4 Jun 2021 5:07 EDT
Closed

PegaDiagnosticUser

Hi,

In Dev Studio, there is an interface where developer can download a log file from - System > Operations > Logs.

When text or zip link is clicked, username and password are required (below little authentication screen pops up).

Developer tried Pega credentials (ie. [email protected]), but it did't take it. Then I tried Tomcat credentials that are specified in "tomcat-users.xml" (In below case, "admin" / "admin"), and it worked. For experimental purposes, when I removed PegaDiagnosticUser role from below settings, it stopped working.

Question:

#1. This authentication pop up expects Tomcat credentials that has a "PegaDiagnosticUser" role, not Pega credentials. Is my assumption correct?

Show More

Hi,

In Dev Studio, there is an interface where developer can download a log file from - System > Operations > Logs.

When text or zip link is clicked, username and password are required (below little authentication screen pops up).

Developer tried Pega credentials (ie. [email protected]), but it did't take it. Then I tried Tomcat credentials that are specified in "tomcat-users.xml" (In below case, "admin" / "admin"), and it worked. For experimental purposes, when I removed PegaDiagnosticUser role from below settings, it stopped working.

Question:

#1. This authentication pop up expects Tomcat credentials that has a "PegaDiagnosticUser" role, not Pega credentials. Is my assumption correct?

#2. If so, how are developers supposed to know Tomcat credentials? Isn't it that they should NOT know it, from security perspectives?

#3. Is it possible to change the settings to take Pega credentials, instead of Tomcat credentials?

 

Thanks,

Show Less
***Edited by Moderator: Pooja Gadige to add platform capability tags***
To see attachments, please log in.
Pega Platform System Administration Security

Posted: 4 years ago
Posted: 8 Jan 2020 0:49 EST
Kensho Tsuchihashi (KenshoTsuchihashi) PEGA Senior Project Delivery Leader
Pegasystems Inc.
JP

Thanks for the info. These are how to enable download log files without credentials. Let me answer my own questions as following:

#1. This assumption is correct.

#2. Developers usually would or should NOT know Tomcat administrator password, but by default it takes Tomcat credentials. If you don't like it you can change the settings by editing web.xml under prweb so system won't require authentication any longer.

#3. It is not possible to change the setting to take Pega credentials.

Please let me know if above is incorrect.

Thanks,

To see attachments, please log in.

We'd prefer it if you saw us at our best.

Pega Collaboration Center has detected you are using a browser which may prevent you from experiencing the site as intended. To improve your experience, please update your browser.

Close Deprecation Notice