New Ranks & Badges For The Community!
Notice something different? The ranks and associated badges have gone "Star Fleet". See what they all mean HERE

Traffic SPI only supports single users to be member of local Administrators, not AD-groups

Idea ID 2818587

Traffic SPI only supports single users to be member of local Administrators, not AD-groups

0 Votes

Due to security policy I am no longer allowed to add my own AD adminstrator user to the local Administrators group. Instead the user is a member of an AD-group that is member of the local Administrators group. That should not make any difference. I am still a local administrator on the Windows server.

A script like nmstrafficleafstatus.ovpl cannot find that I am a member of the administrators group through an AD-group membership and gvies the following error message: Access Denied: Only users belonging to administrators group can run this script

Workaround: Start and stop the Traffic Leaf and Master through Services instead of Command Prompt.

 

The request is to enhance the Traffic SPI to support AD-groups, not only single users, to be member of the local Administrators group.

 

I found the solution to the error message here. It is some years old, but I believe the Traffic SPI still has this lack of feature: https://community.microfocus.com/t5/Network-Management-OpenView-NNM/Can-t-install-iSPI-Perfomance-Trafic-Traffic-Master/td-p/555864

3 Comments
Micro Focus Expert
Micro Focus Expert
Status changed to: Needs Clarification

Dear Submitter,

From the description of the idea, it does not appear as expected product behavior. Hence, I would suggest you work with the support team to get this defect addressed.

Please provide the support case ID if a support case was filed for the same issue.

Thanks.

Captain
Captain

It sure is not an expected behavior from a user/administrator perspective. A support case has not yet been submitted because I don't know if this is by design or a defect. It could be an old code that does only look for single users in Administrators just like the LDAP authentication in NNMi that demand single users to be members of the AD-groups.

(https://softwaresupport.softwaregrp.com/doc/group/softwaresupport/search-result/-/facetsearch/document/LID/QCCR1B154399 - Support for users that are members of an Active Directory sub-group)

Maybe other users can confirm my experience with the Traffic SPI in Windows environment?

Ensign Ensign
Ensign

Yes ive had this same issue and submitted a supprot case for this. Microfocus supplied me with a patch that deleted the check in the code and allowed me to start the software without adding my AD account to the local admin group.

The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.