10 Replies Latest reply on Aug 29, 2014 9:01 AM by Martín Ponce

    Error looking up current user's priviliges: Access is denied

    Martín Ponce

      Hi guys,

       

      I received thata message when I try to deploy a BLPackages against other servers instead the localhost.

       

       

      The contents in the BLPackage is simply a user creation.

       

      This problem is not happening when the BLPackage deploy task is done over the same server where the AP resides.

       

       

      These are the contents of the debug:

      ------------------------------------------------------------------------------------------------------------------------------------------------------------------------

       

      Info    08/07/2014 15:26:27    The job 'JOB_CREA_USUARIO_MARTIN->JOB_CREA_USUARIO_MARTIN' has succeeded on server 192.168.88.131 

      Warning    08/07/2014 15:26:23    Could not get group members Administrators: Err = Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Warning    08/07/2014 15:26:23    Error looking up current user's privileges: Access is denied.

      Info    08/07/2014 15:26:21    Started running the deploy step job 'JOB_CREA_USUARIO_MARTIN->JOB_CREA_USUARIO_MARTIN' on application server 'bl85'(1) against target server '192.168.88.131' 

      Info    08/07/2014 15:26:21    Deploy Dry Run Job (Pre-Execute):JOB_CREA_USUARIO_MARTIN; Server:192.168.88.131;  PkgID:"02f5eb8d-8d76-40eb-a4de-1e4d9ce1ac81-1315.3"; UUID:a7b492a471873aa189db2195bc77e086

       

      ------------------------------------------------------------------------------------------------------------------------------------------------------------------------

       

      Anyone knows the root cause of this problem?

      The problem appears even when I try to make a software deploy job. Not in a file deploy job.

      In all cases I used the windows Administrator account.

       

      Thanks in advance.

      Martin

        • 1. Re: Error looking up current user's priviliges: Access is denied
          Bill Robinson

          "This problem is not happening when the BLPackage deploy task is done over the same server where the AP

          resides."

          what does this mean "where the AP resides" ?

          • 2. Re: Error looking up current user's priviliges: Access is denied
            Martín Ponce

            It means this: If I run this Blpackage against the RSCD Agent installed in the same server where the Application Server is installed, no problems appears.

             

            But if I run the same BLpackage against another server, the run gives me the mentioned error.

             

            Sorry for the mistake with AP, instead of AS word.

            Martin

            • 3. Re: Error looking up current user's priviliges: Access is denied
              Bill Robinson

              Ok, so what user are you mapped to on the working server?  And on the failing server?

               

              Do you have the rscd.log on the failing server?

              • 4. Re: Error looking up current user's priviliges: Access is denied
                Martín Ponce

                I´m using the Administrator in both servers. At least I used administrator user to install the RSCD Agents in both servers.

                 

                 

                rscd.log content, for 192.168.88.131:

                 

                ------------------------------------------------------------------------------------------------------------------------------------

                08/07/14 18:23:21.446 INFOrscd -  agentebl852 1584 SYSTEM (Not_available): (Not_available): FIPS Enabled
                08/07/14 18:23:21.446 INFOrscd -  agentebl852 1584 SYSTEM (Not_available): (Not_available): Agent version is 8.5.00.469
                08/07/14 18:23:21.446 INFOrscd -  agentebl852 1584 SYSTEM (Not_available): (Not_available): The operation completed successfully.
                08/07/14 18:23:21.446 INFOrscd -  agentebl852 1584 SYSTEM (Not_available): (Not_available): Platform Details: x86;agentebl852;5.2;WindowsNT;3790;x86
                08/07/14 18:23:21.462 INFOrscd -  agentebl852 1584 SYSTEM (Not_available): (Not_available): Main: **** RSCD started (app) ****
                08/07/14 18:23:21.727 INFOrscd -  agentebl852 1928 SYSTEM (Not_available): (Not_available): User Privilege Mapping enabled.
                08/07/14 18:23:21.727 INFOrscd -  agentebl852 1928 SYSTEM (Not_available): (Not_available): The following local user will be used by the agent for user privilege mapping: BladeLogicRSCD
                08/07/14 18:29:39.462 INFOrscd -  agentebl852 3340 SYSTEM (Not_available): (Not_available): FIPS already enabled
                08/07/14 18:29:39.774 INFO1rscd -  192.168.88.130 3340 BladeLogicRSCD@AGENTEBL852->Anonymous:PrivilegeMapped (BLAdmins:BLAdmin): CM: > [Client] Retrieving property values
                08/07/14 18:29:39.774 INFOrscd -  agentebl852 3340 BladeLogicRSCD (Not_available): (Not_available): The operation completed successfully.
                08/07/14 18:29:39.821 INFOrscd -  agentebl852 3340 BladeLogicRSCD (Not_available): (Not_available): Getting network interfaces details
                08/07/14 18:29:39.821 INFOrscd -  agentebl852 3340 BladeLogicRSCD (Not_available): (Not_available): Got network interfaces details: 1 entries
                08/07/14 18:29:42.134 INFOrscd -  agentebl852 3340 BladeLogicRSCD (Not_available): (Not_available): Getting system overview details
                08/07/14 18:29:42.134 INFOrscd -  agentebl852 3340 BladeLogicRSCD (Not_available): (Not_available): Getting filesystem disk space usage details
                08/07/14 18:29:43.165 INFOrscd -  agentebl852 3340 BladeLogicRSCD (Not_available): (Not_available): Got filesystem disk space usage details: 1 entries
                08/07/14 18:29:43.165 INFOrscd -  agentebl852 3340 BladeLogicRSCD (Not_available): (Not_available): The operation completed successfully.
                08/07/14 18:29:43.165 INFOrscd -  agentebl852 3340 BladeLogicRSCD (Not_available): (Not_available): The operation completed successfully.
                08/07/14 18:29:43.165 INFOrscd -  agentebl852 3340 BladeLogicRSCD (Not_available): (Not_available): Got system overview list: 1 entries
                08/07/14 18:29:43.868 INFOrscd -  agentebl852 3364 SYSTEM (Not_available): (Not_available): Registering DDA plugin
                08/07/14 18:29:43.868 INFOrscd -  agentebl852 3364 SYSTEM (Not_available): (Not_available): Registered DDA plugin
                08/07/14 18:31:17.196 INFO1rscd -  192.168.88.130 3436 BladeLogicRSCD@AGENTEBL852->Anonymous:PrivilegeMapped (BLAdmins:BLAdmin): CM: > [Deploy] Job 'JOB_CREA_USUARIO_MARTIN' is executing a dry run
                08/07/14 18:31:24.524 INFO1rscd -  192.168.88.130 3484 BladeLogicRSCD@AGENTEBL852->Anonymous:PrivilegeMapped (BLAdmins:BLAdmin): CM: > [Deploy] Deleting //192.168.88.131/C/Program Files/BMC Software/BladeLogic/RSCD//Transactions/log/tmp/bldeploy-1233de1a6f9532399e29a9e6089f3a6c.log
                08/07/14 18:31:26.868 INFO1rscd -  192.168.88.130 3488 BladeLogicRSCD@AGENTEBL852->Anonymous:PrivilegeMapped (BLAdmins:BLAdmin): CM: > [Deploy] Retrieving the root filesystem
                08/07/14 18:31:26.868 INFOrscd -  agentebl852 3488 BladeLogicRSCD (Not_available): (Not_available): Getting filesystem disk space usage details
                08/07/14 18:31:27.915 INFOrscd -  agentebl852 3488 BladeLogicRSCD (Not_available): (Not_available): Got filesystem disk space usage details: 1 entries
                08/07/14 18:31:28.165 INFO1rscd -  192.168.88.130 3488 BladeLogicRSCD@AGENTEBL852->Anonymous:PrivilegeMapped (BLAdmins:BLAdmin): CM: > [Deploy] Copying '//127.0.0.1/d/blpackages/02f5eb8d-8d76-40eb-a4de-1e4d9ce1ac81' to '//192.168.88.131/tmp/stage/ccfc38c7e21b3fb1803779ca670c4360'
                08/07/14 18:31:31.352 INFO1rscd -  192.168.88.130 3504 BladeLogicRSCD@AGENTEBL852->Anonymous:PrivilegeMapped (BLAdmins:BLAdmin): CM: > [Deploy] Job 'JOB_CREA_USUARIO_MARTIN' is applying
                08/07/14 18:31:37.040 INFO1rscd -  192.168.88.130 3540 BladeLogicRSCD@AGENTEBL852->Anonymous:PrivilegeMapped (BLAdmins:BLAdmin): CM: > [Deploy] Deleting //192.168.88.131/C/Program Files/BMC Software/BladeLogic/RSCD//Transactions/log/tmp/bldeploy-1233de1a6f9532399e29a9e6089f3a6c.log
                08/07/14 18:33:21.962 INFOrscd -  agentebl852 1584 SYSTEM (Not_available): (Not_available): Main: Starting AgentHouseKeeping.

                ------------------------------------------------------------------------------------------------------------------------------------

                 

                Thanks in advance.

                Martin

                • 5. Re: Error looking up current user's priviliges: Access is denied
                  Bill Robinson

                  Installing the agent as administrator does nothing to setup the user mapping.  In the agent log you are mapped to anonymous.

                   

                  You need to setup the user mapping… look in the docs about managing agent acls.

                  • 7. Re: Error looking up current user's priviliges: Access is denied
                    Martín Ponce

                    Sorry Joe,

                     

                    I have not access to those files. Are only for registered customers or Partners.
                    I´m just a final user of the tool.

                     

                    Thanks anyway.

                    Martin

                    • 8. Re: Error looking up current user's priviliges: Access is denied
                      Bill Robinson

                      if you are a user you should have access to that site through your company.  is that not the case ?

                      • 9. Re: Error looking up current user's priviliges: Access is denied
                        Evan Wetstone

                        As of about a week ago, we removed the customer and partner restrictions on BMC documentation.  Please try again to see if you can access those pages.

                         

                        See Announcement about open access and improved experience on docs.bmc.com

                        • 10. Re: Error looking up current user's priviliges: Access is denied
                          Martín Ponce

                          Many thanks Evan.

                           

                          Problem solved.

                          Martin