Approve certificate request API call fails to be authenticated. Same about assign and unassign calls.

[iftikharahmd]

I have deployed dogtag pki root CA and subordinate CA. We have to integrate it with our solution where our users will be onbarded by requesting user certificates from dogtag PKI. For this we have successfully tested Submit CSR request API. When we try to test Approve request by providing the SSL client authentication certificate same as used to login to dogtag CA admin UI. The request does not complete there is no clear error in the logs but the following lines are being printed:
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: UGSubsystem: Retrieving user uid=caadmin,ou=People,dc=ca,dc=pki,dc=testdomain,dc=com
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: UGSubsystem: User uid=caadmin,ou=People,dc=ca,dc=pki,dc=testdomain,dc=com:
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: UGSubsystem: - uid: caadmin
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: UGSubsystem: - cn: caadmin
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: UGSubsystem: - mail: [email protected]
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: UGSubsystem: - userPassword: ********
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: UGSubsystem: - usertype: adminType
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: UGSubsystem: - userstate: 1
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: UGSubsystem: - user cert: 2;329827247296419401513186956603190913610;CN=Subordinate CA Signing Certificate,O=EXAMPLE;CN=PKI Administrator,E=[email protected],OU=pki-tomcat,O=testdomain Security Domain
2024-09-07 18:17:35 [https-jsse-jss-nio-8446-exec-17] INFO: AAclAuthz: Granting execute permission for certServer.ca.certrequests

Any idea what could be causing this issue and how I can resolve it. FYI, I am currently using postman to send the API request messages.

[fmarco76]

The log does not show any error so it is difficult to identify the problem. Do the other commands works? Is the request accepted?