iwodcmd not working when invoked from UI.

Hi Guys,

We are using TS 6.1 and OD 6.0.2. OS :: Solaris 5.8

Presently we are using iwodstart to invoke a deployment and planning to migrate to iwodcmd.

As per our understanding we can't call iwodcmd directly from UI, so instead we used the wrapper script provided in /solutions/clt/iwodstart.

If we initiate deployment from backend using this wrapper script, it is happening without any issues, but if executed through UI, getting the following error in odbase.log and deployment is not happening.

API: 2007-03-08 04:15:11 GMT+00:00 Requested start of deployment xxxxxxxx27227
API: 2007-03-08 04:15:11 GMT+00:00 User **** login on od-admin role but is not an od-admin user on this OpenDeploy host.
API: 2007-03-08 04:15:11 GMT+00:00 User **** not in od-user role either.
API: 2007-03-08 04:15:11 GMT+00:00 Request denied. User: ****, login role: od-admin, deployment: xxxxxxxxx, request: START_DEPLOY

NOTE::we are using LDAP for authentication. And also if I'm using the old cmd iwodstart, then it is working fine.

Can anybody help me to sort this out?

Thanx in advance...

Regards
mpal

Find more posts tagged with

Comments

nipper

Have you added that user to od_user or od_admin ? Not the files mind you, but via the GUI ?

Migrateduser

OD 6.02 implemented a auth checking in deploy.cfg

Deploy.cltProxyAuthCheck: n

see page 34 in the release notes

Authorization Checking for Deployments Invoked Using iwodcmd
Authorization now occurs by default any time an individual deployment is invoked using the
iwodcmd start command-line tool. You can authorize individuals to run certain
deployments from the browser-based user interface, or from the command line using the
iwodauthorize tool.
Refer to “Roles and Authorization” on page 71 in the OpenDeploy Administration Guide for
more information.
Disabling Authorization Checking for Deployments
You can disable the authorization checking feature through the Service configuration file
(deploy.cfg). This file resides in the following location:
od-home/etc
Open the Service configuration file using your favorite text editor and change the
Deploy.cltProxyAuthCheck attribute value to n to disable authorization checking, for
example:
Deploy.cltProxyAuthCheck: n
Save and close the service configuration file. You must restart your base server to
implement the change in authorization checking.
To reenable authorization checking, change the Deploy.cltProxyAuthCheck attribute
value to y.

mpal

Thanx a lot for your quick answer. It worked fine after changing the parameter in Deploy.cfg as mentioned by you....

Regards
Mpal