permission denied

I am set up as an administrator (od-admin), however, I still receive the following error message.

Permission Denied
The request to view a deployment definition was denied.

I get this in several areas, including viewing a configuration file that I created (by hand).

Any ideas?

Thanks
Matt

Find more posts tagged with

Comments

tomb_raider

If you are running on NT or 2000 and you started the opendeploy service without naming an admin then it defaulted to hostname\administrator.
Few suggestions: (if using open deploy with Teamsite openapi)
1. Stop the open deploy service
2. ensure your iw-home\conf\roles has an od-admin.uid and od-user.uid
a. Make sure the od-admin.uid contains the domain\userid needed to administer open deploy
3. Rename your odhome\db\od-admin file to odadmin.old if it exists.
4. Restart the open deploy service and run iwreset -ui

Let me know - I'm curious

TEA

Are you a bootstrap user on that box?

If not, even if you are added as an od administrator in the admin GUI or to the od-admin.uid file, you still need to be given the permission to have the od-admin role on this open deploy server instance.

You can do this through the OD admin GUI. Once you are added as the od-admin to this OD instance, you will be able to see and change all the configuration files related with this OD instance.

MattP

Here is an update:
Yes, a bootstrap user was identified, and then I was added as an od-admin. I am not the bootstrap user though.

tomb_raider thanks for the steps. I followed them all (there was an od-admin file. I renamed it).

I still get the permission denied errors. I will continue to troubleshoot.

Matt

MattP

here is the problem.
I was set up as an OD_ADMIN for the gui, but not the server. The catch 22 is, even as an admin, I can't add myself to the server admin role (I get permission denied). I / we had to log-on with another admin role and add each desired user to the server admin role (server - od_admin). Works now. Thanks for all of your suggestions.

Gery

Hi,

Sorry for my english. My config is Windows 2000 and OD 5.5.1.
I has follow all ur steps and I read a lot of forums but I dont't get to do work my opendeploy configuration.

In my od-admin.uid and od-user.uid files exists the line: interwoven\Administrator that is the same that the Deploy.bootStrapUserName attribute(interwoven\\Administrator) in the deploy.cfg file.

When logg on as Administrator (admin role) I can't start OD, I can't view deployment and upload config, I can nothing. Always return:
"Permission Denied"
And in the interwoven_odbase.log file appears:
API: 2004-04-20 18:49:00 CEST GMT+02:00 Requested start of deployment: wft_opendeploy
API: 2004-04-20 18:49:00 CEST GMT+02:00 User administrator login on od-admin role but is not an od-admin user on this OpenDeploy host.
API: 2004-04-20 18:49:00 CEST GMT+02:00 User administrator not in od-user role either.
API: 2004-04-20 18:49:00 CEST GMT+02:00 Request denied. User: administrator, login role: od-admin, deployment: wft_opendeploy, request: START_DEPLOY

Any idea of why happening it?

Regards
Thanks for help.

Adam Stoller

I think you have to go through Server Management and add the bootstrap user (or any other user for that matter) to the roles for that specific server - first, then you should be able to run deployments there.

I don't use the GUI too often, so I can't really provide much more detail - but you have to keep in mind that there are several layers of access:
1) Access to the Admin GUI
2) Access to administer a OD Server via the Admin GUI (includes '3' below)
3) Access to run a deployment from an OD server via the Admin GUI

Actually, there may be a couple of other layers since the administer for a server can actually indicate which user-role users can run which deployments too.

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

Gery

Sorry, but I don't understand you when you say "to go through Server Management", are you talking about the Admin GUI?
Can I setup the bootStrapUserName from Admin GUI and add to my opendeploy host? Is this correct?

Thanks.

Valentine

as far as i know bootstrap user should be always setup from the CLT. And then the user can login to the web gui and add more users.

If you are an TS administrator modify $iw-home/conf/roles/od-* files to contain the users.

Adam Stoller

Yes I'm talking about going through the GUI.

The bootstrap Admin user, as far as I know, can only be set explicitly and manually within the deploy.cfg file. From your earlier description I thought this was already set to the Administrator, and you were looking at how to enable users to deploy from the GUI.

Perhaps you need to re-state what you are attempting to do, what's working, and what's not working?

--fish
Senior Consultant, Quotient Inc.
http://www.quotient-inc.com

Herman

I want to use Server Management,but i have the permission of another base server,
What do i add some configure on my another base server?