Error: Impersonation failure and iwutild daemon

boskovuk

When user A (TS Master user) triggers the submit workflow is and invokes the external task (and associated external script), everything works as expected.

However, when WCMSAuthor (TS Author user) does the same thing, the external script/task don't get invoked.

In addition, the error is generated in iwutild.log file:

[Fri Oct 13 13:49:52 2006] Error: Impersonation failure user= SIGNET\WCMSAuthor; cmd=D:\iw-home/iw-perl/bin/iwperl \iw-home/local/config/wft/custom/scripts/check_DCTtype.ipl 5488 5489 \dfait-maeci\main\internet\international-gc-ca\international-gc-ca\WORKAREA\content_contenu templatedata\Pages\Generic\data\test-bo1 templatedata\Pages\Generic\data\test-bo2; errCode=1385


As per TS Admin Guide, the iwutild daemon is a new thing in 6.7. If I understand the Admin Guide correctly, the node needs to be extended with workflow external task command.

However, even updating this node of iwutild.cfg file, WCMSAuthor still fails (and generates the identical error).

This is the update to node of iwutild.cfg file:



name="iwpt_compile"
path="D:\iw-home\bin\iwpt_compile.ipl"
script="D:\iw-home\iw-perl\bin\iwperl.exe"/>

name="check_DCTtype"
path="D:\iw-home\local\config\wft\custom\scripts\check_DCTtype.ipl"
script="D:\iw-home\iw-perl\bin\iwperl.exe"/>



Any ideas ...?

Adam Stoller

When user A (TS Master user) triggers the submit workflow is and invokes the external task (and associated external script), everything works as expected. However, when WCMSAuthor (TS Author user) does the same thing, the external script/task don't get invoked. In addition, the error is generated in iwutild.log file: [Fri Oct 13 13:49:52 2006] Error: Impersonation failure user= SIGNET\WCMSAuthor; cmd=D:\iw-home/iw-perl/bin/iwperl \iw-home/local/config/wft/custom/scripts/check_DCTtype.ipl 5488 5489 \dfait-maeci\main\internet\international-gc-ca\international-gc-ca\WORKAREA\content_contenu templatedata\Pages\Generic\data\test-bo1 templatedata\Pages\Generic\data\test-bo2; errCode=1385 As per TS Admin Guide, the iwutild daemon is a new thing in 6.7. If I understand the Admin Guide correctly, the node needs to be extended with workflow external task command. However, even updating this node of iwutild.cfg file, WCMSAuthor still fails (and generates the identical error). This is the update to node of iwutild.cfg file: name="iwpt_compile" path="D:\iw-home\bin\iwpt_compile.ipl" script="D:\iw-home\iw-perl\bin\iwperl.exe"/> name="check_DCTtype" path="D:\iw-home\local\config\wft\custom\scripts\check_DCTtype.ipl" script="D:\iw-home\iw-perl\bin\iwperl.exe"/> Any ideas ...?

Well - the documentation is a bit confusing because on one hand it says that "programs executed on behalf of trusted clients are restricted to those explicitly specified in iw-home/etc/iwutild.cfg file", but immediately following that it says "...the programs executed by [...] and workflow external tasks need not be specified in iwutild.cfg".

I think the emphasis in the first quote should be on the words "trusted clients" which I believe refers to programs initiated from remote servers - and thus the statement in the second quote makes sense because externaltask scripts are invoked by the local TS server and not a remote server.

Assuming the documentation (and perhaps my explanation of it) to be correct - your modifications to iwutild.cfg should not have any effect and the problem you are experiencing is due to something completely different. I'm not sure what - but I think you need to keep looking rather than chasing the iwutild thread.