Problem
From the main login page, if a user clicks the "Forgot Password" or "Register Now" hyperlink, the error BMXAA4038E "Cannot log in to perform this action" may be displayed.
Symptom
BMXAA4038E "Cannot log in to perform this action" when selecting "Forgot Password" or "Register Now", or other errors upon completing the Forgot Password or Self Registration screens.
Resolving the problem
The system property mxe.system.reguser is used internally to connect to the system for the Forgotten Password and User Self Registration applications. The value of this property should correlate with a user record on the database (maxuser.loginid) which has permissions for the FORGOTPSWD and SELFREG applications.
In the 6.x release, properties are stored in the maximo.properties file. In later releases, properties are stored on the maxpropvalue table (or overridden in maximo.properties) and can be seen in the System Properties application. If you change any properties via the System Properties application, make sure that you check the box next to the property and use the Live Refresh menu option to make the changes take effect.
Follow the list below to identify the cause of the "Cannot log in to perform this action" problem.
1) Find the value for the mxe.system.reguser property and ensure that a user exists having a loginid equal to this value.
2) Find the value for the mxe.system.regpassword property and ensure that the user found above has a password equal to this value. If you are not sure, you can reset the user's password and/or the property. (Users and passwords are managed via the Users application.)
3) Ensure that the mxe.system.reguser property is in the proper case. If it is in the proper case, find the value of the mxe.convertloginid property. When this property equals 1, the entered value of loginid is internally converted to upper case prior to authentication. If this property is 1 and the value of maxuser.loginid is not upper case, the user will not be able to log in.
4) Ensure that the user belongs to a security group that has permissions for the Forgotten Password and User Self Registration applications. (Use the Profile tab in the Users application.) Out of the box, the reguser belongs to the MAXREG security group, which has these permissions. If your reguser does not have these permissions then either add the user to the MAXREG group or configure the MAXREG group to have permission for these applications. (Group permissions are maintained via the Security Groups application.)
5) If the system is in Admin Mode, then Forgotten Password and User Self Registration are not permitted (by default). A superuser can access the Database Configuration application, Admin Mode option to see whether Admin Mode is on. Alternatively, you can perform a sql query "select value from maxvars where varname = 'ADMINRESTART'". If the value is ON then Admin Mode is on or in the process of being turned on.
If your end user is able to access the Forgotten Password or User Self Registration applications, but encounters errors when completing the transaction whose cause is not self-evident, then follow the steps below.
6) Ensure that email has been set up properly. The mail server is identified by the property mail.smtp.host. Later versions of 7.x support authentication to the email server. If your email server requires authentication, ensure that the properties mxe.smtp.user and mxe.smtp.password are correct.
7) If the problem is with Self Registration, ensure that the workflow process is configured. The maxvar SELFREGWF identifies the name of the workflow process (select varvalue from maxvars where varname = 'SELFREGWF'). The default value is SELFREG. Find this value in the Workflow Designer application and ensure that this is active and enabled. If you have Communication Templates associated with this workflow, ensure that Send From is a valid email address and that the Communication Template is active.
8) To complete the workflow process, the administrative user should log in and look at the Workflow inbox. There should be entries labeled "Review and approve/reject the self-registered user." Click Route on the notification inbox and approve or reject the self-registration. If the registration is accepted, then assign the new user to the appropriate security groups.
9) The approved new user should receive an email with notice of the registration approval. By default, the first time the user logs in, there will be a prompt to change the password.
