Impersonation Error

Hello,

When I try to compile a template under teamSite 6.7.1 via the TeamSite UI or when click on the Preview Button I recieve this error Message:

"An error occurred in utility daemon. Error code: 2000004. Please see details in iwutild.log."

This is the corresponding iwutild.log entry:

[Tue Apr 24 17:38:14 2007] Error: Impersonation failure user= dom\muster; argcount=13; errCode=1385; cmd=C:\iw-home\TeamSite\iw-perl\bin\iwperl.exe C:\iw-home\TeamSite\bin\iwpt_compile.ipl -pt Y:\default\main\de\mybranch\development\WORKAREA\work\templatedata\content\standard\presentation\standard.tpl -ofile Y:\default\main\de\mybranch\development\WORKAREA\work\test.html -iw_pt-dcr Y:\default\main\de\mybranch\development\WORKAREA\work\templatedata\content\standard\data\iwDCR0_231655 -smartwrite -iw_include-location Y:\default\main\de\rosiplus\development\WORKAREA\work -osenc CP1252 -umask 0113

In the iw.cfg file I tried the impersonate_without_password setting with true and false, but with same result.

Has someone an idea?
The Server is Running on Windows 2003 Enterprise Server with latest Service Pack.

Find more posts tagged with

Comments

CRB

try to create a local\user and do the same, see if you will still login failure error. and let us know what you get!

omazur

Hello,

thanks for your fast answer.
I've created a local User but the Error is the same. I also tried to assign the Master privillage to the local account but with same results. Only the account wich installed the server is working.

It was a clean 6.7.1 installation. We've another TeamSite server updated from 6.7.0 with the same settings (I think) and this one works without problems.

Tanuj

I am having exactly same issue

I have Teamsite 6.7.1 windows 2003

error i get is this "[Wed May 02 00:55:51 2007] Error: LogonUser failure user=test1234; domain=AGOB2CCMS01; argCount=18; errCode=1385; cmd=C:\iw-home\iw-perl\bin\iwperl.exe C:\iw-home\bin\iwpt_compile.ipl -pt Y:\default\main\wwwNewyorkHEP\WORKAREA\DEV\templatedata\NewyorkHEPContent\events\presentation\events.tpl -ofile Y:\default\main\wwwNewyorkHEP\WORKAREA\DEV\1178067351045_test1234_preview.htm -iw_pt-dcr Y:\default\main\wwwNewyorkHEP\WORKAREA\DEV\templatedata\NewyorkHEPContent\events\data\NewyorkHepEvents -iw_pt-preview -smartwrite -manifest Y:\default\main\wwwNewyorkHEP\WORKAREA\DEV\zz_tst_test1234_0_manifest -oprefix zz_tst_test1234_0_ -iw_include-location Y:\default\main\wwwNewyorkHEP\WORKAREA\DEV -osenc CP1252 -umask 0113
"

if i add this user to administrators group then it goes away.

anybody any clue?

Thanks

Tanuj

beez

Tanuj,

Does the User have "logon locally" privledge? This is a TeamSite requirement. You will not be able to run ptcompiler in 6.7.X unless the user has it.

--Mike

Tanuj

Thanks mike that was the issue , I added my user groups to log on locally.

GriffTheDog

Thanks mike that was the issue , I added my user groups to log on locally.

We have this same issue, but our security won't allow us to add all our groups into log on locally.

You shouldn't have to add users or groups to the log on locally secutrity setting as this is handled by TeamSite using the TS_IMP user.

In your iw.cfg file under [authentication], did you set impersonate_without_password = true?

Have you installed patch 1789 that to fix bug id 69787:

Windows impersonation fails to create a complete token. The TeamSite generated user token does not contain one of the group SIDs that should be there.
Platform(s): Windows 2003

We are hoping that installing this patch will fix the problem, but have to book time in our test lab to install the patch and test it.

beez

[QUOTE]We have this same issue, but our security won't allow us to add all our groups into log on locally.

You shouldn't have to add users or groups to the log on locally secutrity setting as this is handled by TeamSite using the TS_IMP user.

In your iw.cfg file under [authentication], did you set impersonate_without_password = true?

Have you installed patch 1789 that to fix bug id 69787:

Windows impersonation fails to create a complete token. The TeamSite generated user token does not contain one of the group SIDs that should be there.
Platform(s): Windows 2003

We are hoping that installing this patch will fix the problem, but have to book time in our test lab to install the patch and test it.[/"QUOTE]

Logon Locally" a requirement for impersonation (want PtCompiler to run as the user invoking it so that perms on the generated file are correct). There are plans to make impersonation configurable in 6.7.1SP1 so that customers who do not wish to grant Logon Locally will still be able to run PtCompiler as SYSTEM (ie, without impersonation).

TSIMP_servername is a user created by TeamSite for IIS.

If users lack LogonLocally privledge, generating/previewing templating files will fail regardless of how impersonate_without_password is set.

beez

We have this same issue, but our security won't allow us to add all our groups into log on locally.

You shouldn't have to add users or groups to the log on locally secutrity setting as this is handled by TeamSite using the TS_IMP user.

In your iw.cfg file under [authentication], did you set impersonate_without_password = true?

Have you installed patch 1789 that to fix bug id 69787:

Windows impersonation fails to create a complete token. The TeamSite generated user token does not contain one of the group SIDs that should be there.
Platform(s): Windows 2003

We are hoping that installing this patch will fix the problem, but have to book time in our test lab to install the patch and test it.

Logon Locally" a requirement for impersonation (want PtCompiler to run as the user invoking it so that perms on the generated file are correct). There are plans to make impersonation configurable in 6.7.1SP1 so that customers who do not wish to grant Logon Locally will still be able to run PtCompiler as SYSTEM (ie, without impersonation).

TSIMP_servername is a user created by TeamSite for IIS.

If users lack LogonLocally privledge, generating/previewing templating files will fail regardless of how impersonate_without_password is set.

Adam Stoller

Logon Locally" a requirement for impersonation (want PtCompiler to run as the user invoking it so that perms on the generated file are correct). There are plans to make impersonation configurable in 6.7.1SP1 so that customers who do not wish to grant Logon Locally will still be able to run PtCompiler as SYSTEM (ie, without impersonation).

TSIMP_servername is a user created by TeamSite for IIS.

If users lack LogonLocally privledge, generating/previewing templating files will fail regardless of how impersonate_without_password is set.

Please note: with 6.7.1SP1 - if you utilize the non-OS-user feature - you will need to explicitly set the compiler to use for PTs (a new setting in, I believe, the templating.cfg file) and the only compiler that will work for non-OS-users is an XSLT compiler ... No Perl, No PT-XML tags - just XSL.

I'm not saying it's bad - just that there's a bit more effort to go into it for pre-existing implementations.