Highlighted
pwolfe Absent Member.
Absent Member.
921 views

OES 2018 - NSS AD Enabled - Permission issue

I have an OES 2018 Server being used as a file server for an AD Domain.


I have 2 volumes (APPS & DATA) that I adjusted the permissions on at the volume level. I believe I had removed all the rights for 2 groups (dom\IT dom\MIS). I have 2 other volumes that have no issues (USERS & SUPPORT).


Once I removed the 2 groups permissions I lost access to the volumes "Management" interface as the domain administrator. I can browse, edit, delete, manipulate what ever I want, however can not touch the trustee's etc....


The domain administrator is part of the OESAccessGrp as well as Domain Admins.

When I right click on the volume with the nfarm module installed and click on properties here is what I get on the different tabs:


Trustee Rights - Unable to fetch trustees for the file.
Information - Unable to fetch NSS Attributes for the selected trustee.
User Quota - The logged in user does not have sufficient privileges to view User Quota.
File System Rights - The logged in user does not have sufficient privileges to view File System Rights.
Salvage - Unable to fetch salvageable files for the selected path.


A bit more digging around, I then used the rights tool to look at the


SERVER:/media/nss/APPS # rights show

Trustees and Inherited Rights Filter
------------------------------------
File: /media/nss/APPS
------------------------------------
Trustees:
(1) dom\MIS
[read, write, create, erase, access control, scan, modify]
(2) dom\IT
[read, write, create, erase, access control, scan, modify]

Inherited Rights Filter:
[supervisor]


SERVER:/media/nss/DATA # rights show

Trustees and Inherited Rights Filter
------------------------------------
File: /media/nss/DATA
------------------------------------
Trustees:
(1) dom\MIS
[read, write, create, erase, access control, scan, modify]
(2) dom\IT
[read, write, create, erase, access control, scan, modify]

Inherited Rights Filter:
[supervisor]


I can log into NURM (OES URM) and see the same rights.


I have attempted to delete these rights from the command line and re assign these rights and use a user assigned to one of these groups to manipulate these, however I get the same errors as above.



Any ideas on where to look? Try? It's as if the "Configuration" that is referenced by the NFARM tool is corrupt or broke?



~PWOLFE / MCCFL_MLA
Labels (2)
0 Likes
2 Replies
pwolfe Absent Member.
Absent Member.

Re: OES 2018 - NSS AD Enabled - Permission issue

looking at the nfarm_all.log the volumes that I can not modify look like this:


2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:45 CAdminClientLib::CAdminClientLib:BEGIN
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:55 m_remoteAdminPath: \\server.fqdn\_admin\Manage_NSS\
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:62 m_remoteServerName: \\server.fqdn\pipe\
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:65 CAdminClientLib::CAdminClientLib:END
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetTrustees] Sources\AdminClientLib.cpp:100 CAdminClientLib::GetTrustees:BEGIN
2018-07-24 17:11:06,555 [ERROR] [CAdminClientLib::GetTrustees] Sources\AdminClientLib.cpp:110 CAdminClientLib::GetTrustees:Empty file name.
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:382 CAdminClientLib::GetIRF:BEGIN
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CreateGetFileTrusteesRequest] Sources\AdminClientLib.cpp:494 CAdminClientLib::CreateGetFileTrusteesRequest:BEGIN
2018-07-24 17:11:06,555 [ERROR] [CAdminClientLib::CreateGetFileTrusteesRequest] Sources\AdminClientLib.cpp:501 Filename is empty
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:394 Get IRF request XML:(null)
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:421 Get IRF: failed to create request.Error returned: 5002
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:423 CAdminClientLib::GetIRF:END
2018-07-24 17:11:07,837 [ERROR] [CNSSRightsPresenter::Initialize] Sources\NSSRightsPresenter.cpp:126 Unable to fetch trustees for: \\server.fqdn\DATA
2018-07-24 17:11:07,837 [DEBUG] [CNSSRightsPresenter::Initialize] Sources\NSSRightsPresenter.cpp:147 CNSSRightsPresenter::Initialize:END
2018-07-24 17:11:07,837 [DEBUG] [CNSSRightsDialog::OnInitDialog] Sources\NSSRightsDialog.cpp:571 CNSSRightsDialog::OnInitDialog:END
0 Likes
pwolfe Absent Member.
Absent Member.

Re: OES 2018 - NSS AD Enabled - Permission issue

Opened an SR#101177380431
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.