privileges problem

I'm having problem problem to run a perl script through a CGI task. Each time I run it, I'm getting this error:

TeamSite : Wrapper
Error: Installation problem:
Need to have 'Act as part of the operating system' (SeTcbPrivilege) privileges. These need to be enabled for user DOMAIN\user
Need to have 'Increase quotas' (SeIncreaseQuotaPrivilege) privileges. These need to be enabled for user DOMAIN\user
Need to have 'Replace a process-level token' (SeAssignPrimaryTokenPrivilege) privileges. These need to be enabled for user DOMAIN\user.

I'm using WFM 1.0.0.1
Teamsite 6.7.1 is install on Windows Server 2003

Any idea why this error comes up?

Find more posts tagged with

Comments

moonkhanna

without seeing your perl script. Noone maybe able to help you. Priveleges in general, your user is missing permissions on either the perl script itself or any files the perl script is trying to open.

More probably the perl script.

MadMouse

The perl script doesn't get started at all, as soon as the workflow hit the CGI task, I get this error.

showOnTop_Example.rptdesign

nipper

Does it really say DOMAIN\user in the error log or did you change it ?

Basically the issue is the CGI is to run as someone and that user needs permission to do the tasks listed.

If it really says DOMAIN\user then you also need ot change that to the proer user first (and I am not certain where it is getting that login)

ISCBorisB

The perl script doesn't get started at all, as soon as the workflow hit the CGI task, I get this error.

In the WFT Model (perhaps WFM too) Workflow Engine automatically uses iw_cgi_wrapper.cgi for the CGI Tasks.
That impersonates task Owner so that CGI Process is owned by that user. The error you've described manifests
typical "insufficient privileges for impersonation" Problem. How did you specify Task Owner for this CGI?

MadMouse

Does it really say DOMAIN\user in the error log or did you change it ?

I change it, because it is my name and the domain I'm on.

How did you specify Task Owner for this CGI?

The task owner is $IW_USER.

nipper

I change it, because it is my name and the domain I'm on.

The task owner is $IW_USER.

You need to make certain that user has the permission listed in the errors (act as part of the OS, etc).

Typically for a task like this I make the user system\tsadmin (or whatever local TS admin account you have) instead of IWUSER. Then give those permissions to that account.

It was much easier to give those abilities in Win2K than in 2003, but I have found the screen once. No idea how.

moonkhanna

I change it, because it is my name and the domain I'm on.

The task owner is $IW_USER.

BTW - why do you want to hide your name?