iwodauthorize REQUEST_DENIED

JSquared

When attempting to list users in the od-user role (or list deployments for a particular user, etc) using iwodauthorize, the following error occurs:

C:\Program Files\OpenDeployNG\bin>iwodauthorize -r list od-user
OpenDeploy server host: localhost, RMI registry port: 9174
Specified role: od-user

** ERROR: Failed performing OD security function.
Message: REQUEST_DENIED

I've taken a look at other similar threads and taken suggested steps (Deploy.cltProxyAuthCheck = n, login as bootstrap user, etc) and still get the same error. The users are in the od-admin role for the host, but curiously... the entry in the logs suggest that this isn't the case...

API: 2008-11-20 14:19:21 CST GMT-06:00 User testod login on od-admin role but is not an od-admin user on this OpenDeploy host.
API: 2008-11-20 14:19:21 CST GMT-06:00 Request denied. User: testod, login role: od-admin, request: GET_USERNAMES_IN_ROLE, details: od-admin

Adam Stoller

When attempting to list users in the od-user role (or list deployments for a particular user, etc) using iwodauthorize, the following error occurs: C:\Program Files\OpenDeployNG\bin>iwodauthorize -r list od-user OpenDeploy server host: localhost, RMI registry port: 9174 Specified role: od-user ** ERROR: Failed performing OD security function. Message: REQUEST_DENIED I've taken a look at other similar threads and taken suggested steps (Deploy.cltProxyAuthCheck = n, login as bootstrap user, etc) and still get the same error. The users are in the od-admin role for the host, but curiously... the entry in the logs suggest that this isn't the case... API: 2008-11-20 14:19:21 CST GMT-06:00 User testod login on od-admin role but is not an od-admin user on this OpenDeploy host. API: 2008-11-20 14:19:21 CST GMT-06:00 Request denied. User: testod, login role: od-admin, request: GET_USERNAMES_IN_ROLE, details: od-admin

If you're on Windows - are you sure that DOMAIN\testod is registered as an od-admin? or is it just testod ?
If you set AuthCheck to "n" in the deploy.cfg, you have to restart the BaseServer in order for it to take effect - If you turn off authentication checking, then the simple test is to run: iwodcmd start test as someone who was not otherwise supposed to be an od-admin.
Also - if you're on Windows - for the GUI anyway, you have to have log-on-locally privileges to the server in order to login through the GUI.

Lastly - please provide OD version information (including service pack and patch level) when posting questions like this.