Hi ,
I am not able to copy / paste any file from the depot to one location to other and getting "login not allowed for user error"? Any suggestion / idea for this?
Please help!
Nov 7, 2011 9:40 AM
what role:user is doing this in the gui?
is there a mapping for this role:user on the file server?
I am using my LAN ID: BLAdmins , but i tried even with BLAdmin user and same error i am getting , and when i login in BLappserver in windows i see many of my script were not there in storage folder and even i try to create new file under new folder i got the same "login not allowed for user error"? Is it something happened to file server? But my file server is local as D: Drive?
Nov 7, 2011 9:56 AM
The file server is accessed via the rscd agent, not directly. therefore you need to check the acls in the rsc files (C:\windows\rsc) for the file server agent.
What local user is your role:user mapped to?
users file
BLAdmins:LANID rw,map=Administrator
users.local
BLAdmin:BLADmin rw,map=admin-id
System:System rw,map=admin-id
Nov 7, 2011 10:17 AM
is 'Administrator' a valid local account on the box?
BLAdmins:BLADmin is likely not a valid user - you need that to be BLAdmins:BLAdmin
Yes correct , i checked the Administrator it's not there but its mapped to some different id , and i changed this to that id in users file and its working now. But i have one doubt its all happened due to Agent ACL refresh Job and that updated to "Administrator" ID not to our default renamed "admin" ID, means the entries are like below
For Windows:-
users
BLAdmins:LANID rw,map=Administrator
For Unix:-
BLAdmins:LANDID rw,map=root
I remvoed all my BL app server from the Agent refresh Job as it's windows hosts.Could you please let me know if i run Agent ACL refresh Job next time how it should map to our windows admin user ID but not to Administrator ID?
I saw the Doc to modify the default Property for ADMIN_ACCOUNT and set the string enumeration and set the required account info.
But i do not see any Property with the name ADMIN_ACCOUNT in BBSA v8.0? And even Add new property + sign is disable for me as BLAdmins role.
-Raj
Nov 8, 2011 8:10 AM
Look in the BLAdmins role in RBAC - how is the user mapping setup? to a property (like ADMIN_ACCOUNT) or directly to an account name?
if it's set to a property, what is the value of that property on the Server Object ?
Also, if you want to mange any of the RBAC objects, you need to be logged in as a member of RBACAdmins.
Thanks for your all help, i checked BLAdmins role in RBAC and user mapping is setup directly to an account name to Administrator for Windows host , now i changed this to my own admin account, and push the Agent ACL job successfully for windows hosts.
Thanks a lot for your help.
-Raj