nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

TS permissions

CRB

is there difference to how TS treats local users vs domain users?

bc i have two masters:
1 - localhost\master_user
2 - globaldomain\master_user

i added them both to the same groups but i cant do with globaldomain\master_user what i can do with localhost\master_user.

using localhost\master_user i can go to any workarea and see under file menu -> new file, import, delete, rename... i can also see edit file on the right hand side

using globaldomain\master_user i can only browse around, and download file to local machine to edit it and then upload it.

i have all branches shared by local group, and all users are added to that group including my globaldomain\master_user and localhost\master_user. i also have this in iw.cfg:
[html]
[iwserver]

server_locale=English_UnitedStates.MS1252@Binary;
cachesize=30000
rpc_threadcount=64
fs_threadcount=2
thruputmonitoring=on
thruputmonitor1=1 # 1 minute
thruputmonitor2=15 # 15 minutes
thruputmonitor3=60 # 1 hour
thruputmonitor4=480 # 8 hours
thruputmonitor5=1440 # 24 hours
thruputmonitor6=2880 # 48 hours
thruputmonitor7=5760 # 96 hours
thruputmonitor8=-1 # forever
disklow_mbytes=200 # freeze server if disk space falls below this number (in MB)
disklowpercent=5 # freeze server if disk space falls below this pct
main_lock_model=submit_lock
main_owner=Administrator
main_group=Administrators
event_log_size=64
branch_security=off
workarea_security=off
debug_event_handler=no
old_mod_times=true
author_editor_rename_workarea=no
force_EA_mod_times=false
webserver_group=TeamSite Web Preview

autocompress=no
failsafe=yes
only_lock_owner_creator_submits=no
disklow_knodes=null
domain_list=crmprod
show_user_list=false
domain_local_groups=yes
low_memory_level=102400
[/html]

Find more posts tagged with

Comments

nipper

What do the perms look like through the y: drive ?

I assume you made the owner of the files/branches//WAs, etc as the local master

Did you create the branches & workareas with the groups ?

CRB

well the store was originally migrated from 5.5.2 using iwmigrate, so everything was tagged like this "S-1-5-21-299502267-484061587-682003330-1006 " since it was converted by system.

and immediatly after the migration finished, i used the store and i created workareas and made them shared by local\group and local\owner but the edition i created from had content tagged with system owner and group.

and when i go to Y:\ i right click and check security , it shows the system tags "S-1-5-21-299502267-484061587-682003330-1006" and some other things, it doesnt show the local\group that i assigned to it when i created it. and i try to add the group view the windows security thing, it just freezes and takes hours and hours with no change. i am assuming it might be because of the many files i have in eachother workarea.

i might just have to migrate the store again and do it all over with the proper steps.

it s really confusing it ll make sense to you if you see everything i am talking about.
it is a test box, so if anybody has 5 mins to take alook at it, i can show it to you via an online meeting, just give your email Smiley Happy

nipper

Try this first. If not I may have some time tomorrow to netmeeting.

Have you updated submit.cfg to set the permissions for the files so that the appropriate groups own them ? That is a firm requirement.

How many files are in the WA ?

Log on the box as local admin.
Traverse the Y: drive to a branch/WORKAREA folder.
select workarea name. Right click on properties go to security, add the group and full control. Make certain that is recursively applied.Go to TS, view all modified, select all and submit direct.

Then try global_admin

CRB

yes the submit.cfg is configured and has the proper rules.

the WA has 1000s of files since the entire site is just bunch of HTML pages.

i did the add group with full control the same you desribed before but it freezes or takes long time i even waitd for it for 6 hours before. but i will do it again and i ll update this if i get anything out of it.
for the netmeeting things Smiley Very Happy

it wil be nice if you take look at it maybe u d understand my issue here. Smiley Very Happy

did you say u use paypal? Smiley Wink

lol i have bunch of AMC golden tickets and free #1s Smiley Very Happy

if u want them too.

nipper

If the setting of security truly takes hours, try it in smaller chunks. Do some sub dirs and make certain it is behaving properly.

Click on my user name and send me an email. Your login is not configured to receive email.

Andy

Adam Stoller

well the store was originally migrated from 5.5.2 using iwmigrate, so everything was tagged like this "S-1-5-21-299502267-484061587-682003330-1006 " since it was converted by system.

and immediatly after the migration finished, i used the store and i created workareas and made them shared by local\group and local\owner but the edition i created from had content tagged with system owner and group.

and when i go to Y:\ i right click and check security , it shows the system tags "S-1-5-21-299502267-484061587-682003330-1006" and some other things, it doesnt show the local\group that i assigned to it when i created it. and i try to add the group view the windows security thing, it just freezes and takes hours and hours with no change. i am assuming it might be because of the many files i have in eachother workarea.

i might just have to migrate the store again and do it all over with the proper steps.

it s really confusing it ll make sense to you if you see everything i am talking about.
it is a test box, so if anybody has 5 mins to take alook at it, i can show it to you via an online meeting, just give your email

After you did the iwmigrate - which resulted in all the SIDs - did you try using iwidmap to fix the SIDs? (remember you have to deactivate and reactivate the store after running iwidmap for the changes to take effect).

You can read more about iwidmap in the CLT manual, various threads on this site and various KB articles (the Support site has a couple of very good KBs regarding the use of iwidmap).

CRB

yes!! i think iwidmap is good way to do it too. this is the article and i will be doing senario 4.
https://support.interwoven.com/kb/kb_show_article2.asp?ArticleID=49980
this is the senario that i will be doing:
[HTML]
Scenario 4

A new backing store has resulted due to a conversion process from system A to system B.

This scenario is similar to scenario 3 with some minute differences.
Since the new backing store is the result of a conversion from a 5.0 system (which does not have this separate mapping)
the names of all the local users will not be mapped correctly.
As a result in the output only the SID will be displayed. To overcome this, the following command can be run on system B

C:\teamsite\bin> iwidmap -u -a -s systemA -x c:\store.idmap c:\iw-store\default
C:\teamsite\bin> iwidmap -u -a -s systemA -x c:\store.idmap c:\iwstoreadm -a

This causes a lookup to happen on the system A and all the SID of the local users will be mapped to the correct names.
=======
Usage: iwidmap [-v] [-h] (-u | -g) [-a][-c ] [-x | -i ] [-s hostname] backing-store

-v print the version of this program
-h print this message
-u update userid mapping
-g update groupid mapping
-a update all entries in the id map
-c update user1 to user2
-x extract to file
-i import from file
-s host on which to lookup SID backing-store location of backing store

[/HTML]

for some reason i feel that those commands might be incorrect? both commands have systemA in them, i knwo i will be running this on systemB but from reading "Usage iwidmap" -s is where to lookup SID backing-store location of backing store... i thought i need to look up on systemB since it s the one that has my new backing store?

Adam Stoller

yes!! i think iwidmap is good way to do it too. this is the article and i will be doing senario 4.
https://support.interwoven.com/kb/kb_show_article2.asp?ArticleID=49980
...

for some reason i feel that those commands might be incorrect? both commands have systemA in them, i knwo i will be running this on systemB but from reading "Usage iwidmap" -s is where to lookup SID backing-store location of backing store... i thought i need to look up on systemB since it s the one that has my new backing store?

I'm not sure if that's the particular KB article I was thinking of, though it does sound like it (I didn't check the link, there are several of them out there and some are better than others).

Basically if you extract the idmap from system A (assuming that systemA provided iwidmap) than you can compare those to the idmaps you extract from systemB - create a new map by manually merging the information, and then use iwidmap to use the new map on systemB.

During this process you can re-assign unknown or no-longer-involved users and groups to other and/or new users and groups by making the appropriate changes in the maps before applying them to systemB.

Take your time working on the new maps. It becomes increasingly harder to figure out what you're trying to fix if you have a moving target.

CRB

iwidmap is the most beautiful tool ever Smiley Very Happy

it nicely, smoothly, pain free, changed names and ids and issues to what i wanted them to be Smiley Very Happy

.. good invention Smiley Wink