pwolfe

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-07-25
00:24
1301 views
OES 2018 - NSS AD Enabled - Permission issue
I have an OES 2018 Server being used as a file server for an AD Domain.
I have 2 volumes (APPS & DATA) that I adjusted the permissions on at the volume level. I believe I had removed all the rights for 2 groups (dom\IT dom\MIS). I have 2 other volumes that have no issues (USERS & SUPPORT).
Once I removed the 2 groups permissions I lost access to the volumes "Management" interface as the domain administrator. I can browse, edit, delete, manipulate what ever I want, however can not touch the trustee's etc....
The domain administrator is part of the OESAccessGrp as well as Domain Admins.
When I right click on the volume with the nfarm module installed and click on properties here is what I get on the different tabs:
Trustee Rights - Unable to fetch trustees for the file.
Information - Unable to fetch NSS Attributes for the selected trustee.
User Quota - The logged in user does not have sufficient privileges to view User Quota.
File System Rights - The logged in user does not have sufficient privileges to view File System Rights.
Salvage - Unable to fetch salvageable files for the selected path.
A bit more digging around, I then used the rights tool to look at the
SERVER:/media/nss/APPS # rights show
Trustees and Inherited Rights Filter
------------------------------------
File: /media/nss/APPS
------------------------------------
Trustees:
(1) dom\MIS
[read, write, create, erase, access control, scan, modify]
(2) dom\IT
[read, write, create, erase, access control, scan, modify]
Inherited Rights Filter:
[supervisor]
SERVER:/media/nss/DATA # rights show
Trustees and Inherited Rights Filter
------------------------------------
File: /media/nss/DATA
------------------------------------
Trustees:
(1) dom\MIS
[read, write, create, erase, access control, scan, modify]
(2) dom\IT
[read, write, create, erase, access control, scan, modify]
Inherited Rights Filter:
[supervisor]
I can log into NURM (OES URM) and see the same rights.
I have attempted to delete these rights from the command line and re assign these rights and use a user assigned to one of these groups to manipulate these, however I get the same errors as above.
Any ideas on where to look? Try? It's as if the "Configuration" that is referenced by the NFARM tool is corrupt or broke?
~PWOLFE / MCCFL_MLA
I have 2 volumes (APPS & DATA) that I adjusted the permissions on at the volume level. I believe I had removed all the rights for 2 groups (dom\IT dom\MIS). I have 2 other volumes that have no issues (USERS & SUPPORT).
Once I removed the 2 groups permissions I lost access to the volumes "Management" interface as the domain administrator. I can browse, edit, delete, manipulate what ever I want, however can not touch the trustee's etc....
The domain administrator is part of the OESAccessGrp as well as Domain Admins.
When I right click on the volume with the nfarm module installed and click on properties here is what I get on the different tabs:
Trustee Rights - Unable to fetch trustees for the file.
Information - Unable to fetch NSS Attributes for the selected trustee.
User Quota - The logged in user does not have sufficient privileges to view User Quota.
File System Rights - The logged in user does not have sufficient privileges to view File System Rights.
Salvage - Unable to fetch salvageable files for the selected path.
A bit more digging around, I then used the rights tool to look at the
SERVER:/media/nss/APPS # rights show
Trustees and Inherited Rights Filter
------------------------------------
File: /media/nss/APPS
------------------------------------
Trustees:
(1) dom\MIS
[read, write, create, erase, access control, scan, modify]
(2) dom\IT
[read, write, create, erase, access control, scan, modify]
Inherited Rights Filter:
[supervisor]
SERVER:/media/nss/DATA # rights show
Trustees and Inherited Rights Filter
------------------------------------
File: /media/nss/DATA
------------------------------------
Trustees:
(1) dom\MIS
[read, write, create, erase, access control, scan, modify]
(2) dom\IT
[read, write, create, erase, access control, scan, modify]
Inherited Rights Filter:
[supervisor]
I can log into NURM (OES URM) and see the same rights.
I have attempted to delete these rights from the command line and re assign these rights and use a user assigned to one of these groups to manipulate these, however I get the same errors as above.
Any ideas on where to look? Try? It's as if the "Configuration" that is referenced by the NFARM tool is corrupt or broke?
~PWOLFE / MCCFL_MLA
2 Replies
pwolfe

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-07-25
01:19
looking at the nfarm_all.log the volumes that I can not modify look like this:
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:45 CAdminClientLib::CAdminClientLib:BEGIN
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:55 m_remoteAdminPath: \\server.fqdn\_admin\Manage_NSS\
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:62 m_remoteServerName: \\server.fqdn\pipe\
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:65 CAdminClientLib::CAdminClientLib:END
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetTrustees] Sources\AdminClientLib.cpp:100 CAdminClientLib::GetTrustees:BEGIN
2018-07-24 17:11:06,555 [ERROR] [CAdminClientLib::GetTrustees] Sources\AdminClientLib.cpp:110 CAdminClientLib::GetTrustees:Empty file name.
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:382 CAdminClientLib::GetIRF:BEGIN
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CreateGetFileTrusteesRequest] Sources\AdminClientLib.cpp:494 CAdminClientLib::CreateGetFileTrusteesRequest:BEGIN
2018-07-24 17:11:06,555 [ERROR] [CAdminClientLib::CreateGetFileTrusteesRequest] Sources\AdminClientLib.cpp:501 Filename is empty
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:394 Get IRF request XML:(null)
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:421 Get IRF: failed to create request.Error returned: 5002
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:423 CAdminClientLib::GetIRF:END
2018-07-24 17:11:07,837 [ERROR] [CNSSRightsPresenter::Initialize] Sources\NSSRightsPresenter.cpp:126 Unable to fetch trustees for: \\server.fqdn\DATA
2018-07-24 17:11:07,837 [DEBUG] [CNSSRightsPresenter::Initialize] Sources\NSSRightsPresenter.cpp:147 CNSSRightsPresenter::Initialize:END
2018-07-24 17:11:07,837 [DEBUG] [CNSSRightsDialog::OnInitDialog] Sources\NSSRightsDialog.cpp:571 CNSSRightsDialog::OnInitDialog:END
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:45 CAdminClientLib::CAdminClientLib:BEGIN
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:55 m_remoteAdminPath: \\server.fqdn\_admin\Manage_NSS\
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:62 m_remoteServerName: \\server.fqdn\pipe\
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CAdminClientLib] Sources\AdminClientLib.cpp:65 CAdminClientLib::CAdminClientLib:END
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetTrustees] Sources\AdminClientLib.cpp:100 CAdminClientLib::GetTrustees:BEGIN
2018-07-24 17:11:06,555 [ERROR] [CAdminClientLib::GetTrustees] Sources\AdminClientLib.cpp:110 CAdminClientLib::GetTrustees:Empty file name.
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:382 CAdminClientLib::GetIRF:BEGIN
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::CreateGetFileTrusteesRequest] Sources\AdminClientLib.cpp:494 CAdminClientLib::CreateGetFileTrusteesRequest:BEGIN
2018-07-24 17:11:06,555 [ERROR] [CAdminClientLib::CreateGetFileTrusteesRequest] Sources\AdminClientLib.cpp:501 Filename is empty
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:394 Get IRF request XML:(null)
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:421 Get IRF: failed to create request.Error returned: 5002
2018-07-24 17:11:06,555 [DEBUG] [CAdminClientLib::GetIRF] Sources\AdminClientLib.cpp:423 CAdminClientLib::GetIRF:END
2018-07-24 17:11:07,837 [ERROR] [CNSSRightsPresenter::Initialize] Sources\NSSRightsPresenter.cpp:126 Unable to fetch trustees for: \\server.fqdn\DATA
2018-07-24 17:11:07,837 [DEBUG] [CNSSRightsPresenter::Initialize] Sources\NSSRightsPresenter.cpp:147 CNSSRightsPresenter::Initialize:END
2018-07-24 17:11:07,837 [DEBUG] [CNSSRightsDialog::OnInitDialog] Sources\NSSRightsDialog.cpp:571 CNSSRightsDialog::OnInitDialog:END
pwolfe

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2018-07-25
16:54
Opened an SR#101177380431