Welcome Serena Central users! CLICK HERE
The migration of the Serena Central community is currently underway. Be sure to read THIS MESSAGE to get your new login set up to access your account.
gtejo1 Absent Member.
Absent Member.
345 views

Admin Modify Trustees Error on the top of the root

So when i tried to create a new administrator of the eDirectory, first step was to modify the trustees on the root of the tree. Now i can't modify any trustees on the tree with any user including the admin. Here is the error that i get:
"The current logged in user has insufficient rights to perform the selected task. Please contact your System Administrator. "
I undestand what happend, somehow the admin now doest have supervisor rights on the tree. So, if the admin was the onlyone who has those, and remove those by itself, now noone can.
Any workarround, maybe some command in the linux server? Is really critical error, and is very anoying that the iManager doest have any validation on this matters.
Labels (1)
0 Likes
2 Replies
Knowledge Partner
Knowledge Partner

Re: Admin Modify Trustees Error on the top of the root

On 05/13/2019 10:54 AM, gtejo wrote:
>
> So when i tried to create a new administrator of the eDirectory, first
> step was to modify the trustees on the root of the tree. Now i can't
> modify any trustees on the tree with any user including the admin. Here
> is the error that i get:
> "The current logged in user has insufficient rights to perform the
> selected task. Please contact your System Administrator. "


If you removed rights from the system, then you've lost that access
completely. The only way to fix it is to find another object with the
rights, or else to call Micro Focus and let them connect in to use ndsdump
to put the rights back.

> I undestand what happend, somehow the admin now doest have supervisor
> rights on the tree. So, if the admin was the onlyone who has those, and
> remove those by itself, now noone can.


Correct; if you are the admin, you can do anything. It is highly
recommended that you test these types of changes in your test environment
before doing them in an environment that maters. It is also highly
recommended to have a separate tree admin for emergencies, and that tree
admin should have explicit permissions granted from the tree [root], not
given to it via something like the existing admin or something (for this
very reason).

> Any workarround, maybe some command in the linux server? Is really
> critical error, and is very anoying that the iManager doest have any
> validation on this matters.


Call Micro Focus and tell them you need to have them use ndsdump to put
rights back on your tree admin. If you happen to have a NetWare box in
your tree, there used to be some NOM-based tools that could create an
admin for you, but those do not work on Linux (NLM stands for NetWare
Loadable Module). Once upon a time I thought it would be fun to write a
new ndsd module that did exactly what you want, but it never came to much.

Another option, of course, is to restore your tree to a backup version.
If you use something like ndsbackup you could potentially restore a single
object which is now broken, though that implies you have a way to get into
your tree with privileges, and if that's the case, just get in with them
and fix the problem directly.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below.

If you want to send me a private message, please let me know in the
forum as I do not use the web interface often.
0 Likes
gtejo1 Absent Member.
Absent Member.

Re: Admin Modify Trustees Error on the top of the root

Thanks for the quick response! I have a backup of the entirely directory, i going to restore it.
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.