AEM LTS: Login failures and 404 errors after new production environment deployment
This article addresses login failures and intermittent 404 errors encountered after deploying a new Adobe Experience Manager LTS production environment.
Description description
Environment
Adobe Experience Manager (AEM) LTS (all versions)
Issue/Symptoms
After setting up a new AEM LTS Production environment, the following issues occur:
- Users are unable to log in to the AEM LTS Author environment at the login page:
https://lts-author-silabs-prod65-1.adobecqms.net/libs/granite/core/content/login.html - The publisher LTS load balancer URL intermittently returns 404 errors when accessing site pages, for example:
https://lts-silabs-prod65-1.adobecqms.net/content/siliconlabs/en.html - Some font resources return 404 errors.
These issues are reproducible immediately after deployment and block testing and access to the Production Author and Publisher environments.
No specific error codes are shown in the UI, but authentication failures and 404 responses occur.
Cause
The root cause was missing LDAP authentication certificates in the Java keystore (cacerts) on the AEM LTS Author instance, preventing successful user authentication and causing related access issues.
Resolution resolution
Follow the steps below to resolve the issue:
-
Verify LDAP Authentication Configuration
Confirm that all required root and leaf certificates for LDAP authentication are present in the Java keystore (cacerts) on the AEM LTS Author instance. -
Import Missing Certificates
-
If certificates are missing, extract the necessary root and leaf certificates from a working environment (such as a non-LTS Author instance).
-
Import the certificates into the Java keystore (
cacerts) on the AEM LTS Author instance using the following command:keytool -import -trustcacerts -alias <alias_name> -file <certificate_file> -keystore <path_to_cacerts> -
Restart the AEM Author service after importing the certificates.
-
-
Test Authentication and Site Access
- Attempt to log in to the AEM LTS Author environment to verify that LDAP authentication is now successful.
- Check the publisher URLs and font resources to confirm that 404 errors are resolved.