1 of 1 people found this helpful
I found the solution for this (thanks Dante).
As I had set specific permissions the 'bltargetjobmanager' NSH command needed to be created and added to my policies.
Obviously once I had added this new NSH command to the Authorizations I could add it to all the relevant policies/templates and now it all works.
Although the above fixed my deployJob "not authorized" issue for direct jobs.
I am still experiencing the issue with in-direct jobs?
Luckily I have a server that I can reach using both direct and in-direct at the moment so I can test this.
Since I added the 'bltargetjobmanager' command mentioned previously I can deploy directly to the server without issue. However if I try in-directly I get:
"32842cc4d90c1fc95d87 0000029427 01/06/11 09:38:03.745 INFO rscd - 10.200.12.163 2380 0/0 (BLAdmins:bmcquil@TELSTRACLEAR.TCLAD): ntop: /opt/nsh/bin/ndf -H -c -h u-pr-068
42988747855637a8a66d 0000029428 01/06/11 09:38:06.371 INFO1 rscd - 10.200.12.163 2383 0/0 (BLAdmins:bmcquil@TELSTRACLEAR.TCLAD): CM: Remote File Server: Copying '/tmp/stage/blpackages/error-output-test-2002361.1' to '//tst.intdev/var/tmp/stage/error-output-test-2002361.1-2001345.5'
322da9823dafa6005c51 0000029429 01/06/11 09:38:06.566 WARN rscd - 10.200.12.163 2383 0/0 (BLAdmins:bmcquil@TELSTRACLEAR.TCLAD): CM: Remote File Server: Failed to copy '/tmp/stage/blpackages/error-output-test-2002361.1' to '//tst.intdev/var/tmp/stage/error-output-test-2002361.1-2001345.5': No authorization to access host
The package is getting copied to the repeater fine but the copy from the repeater to the target server is failing.
Obviously its a permission error of some kind but I'm not sure which (as the role:user works when deployed directly against target server).
Is there another NSH command that I need to add somewhere?
Although I haven't found the solution for this it is definitely related to the unlisted NSH Commands not being configured in the NSH Commands Authorizations.
I have temporarily removed all NSH Command Authorizations from my roles and everything is working correctly now. I have created a service ticket relating to this and will wait to see the results.
Everytime you see the access denied in the agent log on the repeater, that’s another auth you need to allow.
Unfortunately none of the logs mention which Auth its failing on :-)
I now know that its normally one of the binaries in /bin or /sbin for the agent I'm not sure what binary is needed for which functions. Hopefully BMC will be able to enlighten me.
CM: Remote File Server: Failed to copy
Can you run ‘cp’? and do you have ‘CM’ in the command list?
It was very odd, in this instance I have access to this server both directly and indirectly.
If I deploy directly it worked without a problem, if I deploy indirect (same user:role) it failed.
I can't find any command "CM" there's a cmp command in the /bin of the agent and thats included in the permissions.
That seems odd. I’d open a support ticket if you haven’t already.
thanks I have indeed opened a ticket already. I'll post the results if anything eventuates from it.