How to get required DFC client to provide Privilege in DA for retention policy

Hello All,

How to can I get required client details in DA in "Previlege clients" node to provide / approve privilege for Retnetion policy..

Find more posts tagged with

Comments

DCTM_Guru

What client details are you looking for? If you are just trying to differentiate which client to approve, follow these instructions:

Solution # 96984

How can I distinguish specific privileged clients from DA?

Symptoms

When adding privileged clients from DA (Administration > Privileged Clients > Manage Clients) the list of available candidates can be confusing since the naming is generic (dfc_<machinename>_<id>).

This can make it difficult to distinguish which client you wish to grant privilged access.

Cause

There is no dfc.name property defined in the client's dfc.properties

Resolution

1. Shutdown all DFC applications on the client machine

2. Add the dfc.name property to dfc.properties

i.e. dfc.name=myclient

3. Restart the DFC application on the client machine

4. In DA, navigate back to Administration > Privileged Clients > Manage Clients. Select the client that now starts with the name prefix you assigned to the client machine.

Kothari

I tried this option of adding dfc.name in composer dfc.properties , but unfortunately not getting required/custom dfc name.. do I have to make dfc.properties change , any where else ?

taksali.ajay

I would suggest to make following change in your dfc.properties file

Uniquely name your dfc instance with the property ‘dfc.name’ as suggested by Johnny.
Have a unique DFC data directory for your application not shared by other applications, ‘dfc.data.dir’ property in dfc.properties file.
Specifically provide unique path to your dfc.keystore file, not shared by other application, ‘dfc.security.keystore.file’
Add two more entries to your dfc.properties file as given below:
- dfc.privilege.enable=true
- dfc.verify_registration=true

After making the changes, you need to restart your app server and approve privileged access to these DFC instance through DA.

Hopefully it will work for you.

-Ajay

badal.chowdhury

Hi Kothar,

Other way you can do it.

Open dfc.keystore file in textpad and in that file you can find "dfc_lJGXxFFQ4totazCS5GtOMdtt9L4a0" kind of entry. Take last 6 digit after 0 means tt9L4a.

Now while adding privilage client , you can find dfc_<claint machine addres>_<dfc keystore 6 digit no.>.

You have add for content server as well as application server.

Thanks

Badal

nishanarayanan

we are running the standard alone dfc utility while updating one object we are getting below error

 [DM_SESSION_E_SETUP_ROLES_FOR_RPC]error: "Error initializing dynamic roles for RPC EXEC (0000000000000000)."; ERRORCODE: 100; NEXT: DfException:: THREAD: main; MSG: [DM_GROUP_E_PROTECTED_ROLE_PRIV]error: "The requesting application is not privileged to use role (dcs_privileged_users)."; ERRORCODE: 100; NEXT: DfException:: THREAD: main; MSG: [DM_DCNFG_E_RIGHTS_NOT_AUTHORIZED]error: "Client 'dfc_fK6f5U9PWT4mqfbX44NWAbEzFrAa' is not authorized to use role 'dcs_privileged_users'."; ERRORCODE: 100; NEXT: DfException:: THREAD: main; MSG: [DM_OBJ_MGR_E_FETCH_FAIL]error: "attempt to fetch object with handle 7f010000PPPvfffv failed"; ERRORCODE: 100; NEXT: DfException:: THREAD: main; MSG: [DM_DCNFG_E_RIGHTS_NOT_EXIST]error: "Could not find entry for client 'dfc_fK6f5U9PWT4mqfbX44NWAbEzFrAa' in the rights database."; ERRORCODE: 100; NEXT: null
	at com.documentum.fc.client.impl.docbase.DocbaseExceptionMapper.newException(DocbaseExceptionMapper.java:57)
	at com.documentum.fc.client.impl.connection.docbase.MessageEntry.getException(MessageEntry.java:39)
	at com.documentum.fc.client.impl.connection.docbase.DocbaseMessageManager.getException(DocbaseMessageManager.java:137)
	at com.documentum.fc.client.impl.connection.docbase.netwise.NetwiseDocbaseRpcClient.checkForMessages(NetwiseDocbaseRpcClient.java:329)
	at com.documentum.fc.client.impl.connection.docbase.netwise.NetwiseDocbaseRpcClient.applyForCollection(NetwiseDocbaseRpcClient.java:453)
	at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection$3.evaluate(DocbaseConnection.java:1279)
	at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.evaluateRpc(DocbaseConnection.java:1141)
	at com.documentum.fc.client.impl.connection.docbase.DocbaseConnection.applyForCollection(DocbaseConnection.java:1267)
	at com.documentum.fc.client.impl.docbase.DocbaseApi.exec(DocbaseApi.java:71)
	at com.documentum.fc.client.impl.session.Session.query(Session.java:3660)
	at com.documentum.fc.client.impl.session.Session.getIdByQualificationEx(Session.java:1046)

. I fallowed above step to add privilage client but privilage client is not listed in da.

Please help