/ Forums / Advansys Formativ / eDirectory/NDS Management / LIBRARY VISIBLE BUT ACCESS DEN IED

  • Creator
    Topic
  • #3494
    pasclinaui
    Participant

    I have set up Formativ on our Novell 5.1 network. I can build & publish applets without problem; everything was done with my notebook (WIN2K sp3, NW client for NT/2K 4.83 sp1, GROUPWISE 5.54).

    Installing Formativ ADMIN onto my customer test computer (WIN2K + same NW client, GROUPWISE 6.02) I can access my local applet in administrator mode, I can see my test LIBRARY but I cannot manage it !!!

    I removed everything (nds object, schema, formativ) and I reinstalled last version but the problem is the same !!

    The differences are GWISE (5.54 against 6.02) and O.S. version (NW 5.1 against SBS 6 sp2).

    NDS objects were created with no restriction for user associated !

    Please help me ’cause I’m really “desperado” !!!

    Alex !!!

  • Author
    Replies
  • #5244
    Support 1a
    Participant

    Have you configured the Netware user on the client system as a member of the FormativAdministor role, and also added the user as a library administrator to the library in question? Here’s a section from the Admin guide:

    If you have security equal to the FormativAdministrator Organizational Role object , Formativ Admin will start in Administration mode, which is a prerequisite for managing applets within Formativ Applet Libraries. To administer one or more Applet Libraries, you must be assigned as the Library Administrator in the target libraries by the eDirectory administrator…The Applet Library object’s Library Administrators Page allows you to specify which users are authorized to create, edit and delete applets within the library. Use the Add and Remove buttons to add and remove users as Applet Library administrators, who must also be assigned to the FormativAdministrator Organizational Role.”

    Advansys Support

    #5250
    pasclinaui
    Participant

    I tried same operation on a W98 workstation e everything was ok !

    So it appears to be an issue of WIN2K platform !

    No way to solve it, actually !!!

    #5243
    Support 1a
    Participant

    Thank you for the update. I cannot reproduce this on our WIN2K system. Could there be an issue with the ConsoleOne/NWAdmin installation on your WIN2K machine? Rights on the WIN2K machine could be another possibility.

    #5249
    Anonymous

    Hi,

    I have the same problem!

    I have a presentation tomorrow with a demo, please help!!!

    Im running the follow:

    client:

    win 2k3
    gw 6.5 2/3/2003
    nwclient 4.90 BETA_331
    Formativ Admin 1.5.9.5

    server:

    NW 6.5 Beta 3 (403)
    GW 6.5.0 Beta

    Formativ Configuration Information:

    Operating System:

    Unknown Windows version

    Internet Explorer

    6.00.3718.0 (dnsrv.021114-1947)

    Cache File System:

    NTFS

    Current User Configuration:

    Location of Files

    Data: C:Program FilesAdvansysFormativData
    Local applets: C:Program FilesAdvansysFormativLocal
    Encoded output: C:Program FilesAdvansysFormativEncoded
    Flexalock output: C:Program FilesAdvansysFormativFlexalock
    Applet Config: C:PROGRA~1AdvansysFormativapplet_cfg
    Applet Help: C:PROGRA~1AdvansysFormativapplet_hlp
    Applet Images: C:PROGRA~1AdvansysFormativapplet_img
    Library Backup: C:Program FilesAdvansysFormativData

    Client Options

    Portal Folder Enabled: TRUE
    Portal Folder Deleted Last Session: FALSE
    Portal Folder Name: Formativ Portals
    Display Library Exceptions on startup: FALSE
    Library Exceptions Countdown: FALSE
    Redirect Associations: TRUE
    Menu Caption: A&pplets
    Mode: 255
    Formativ is enabled
    Applet creation is allowed
    Client integrations are enabled
    Formativ menu is enabled
    Favorites menu is enabled
    Applet recording is allowed
    Enable intelligent applet caching
    Update applet cache on client startup
    eDirectory Administered: TRUE
    Current Line: 1
    Debug Mode: FALSE
    Exception Dialog: FALSE
    Include Groups in Discovery: TRUE
    List Width: 349
    Max Traversal: 10
    Window Height: 450
    Window Left: 340
    Window State: 1
    Window Top: 287
    Window Width: 600
    Word Limit: 1
    Word Limit Count: 2

    Protocols

    Order: 1
    Override: 0

    LDAP Settings

    Server:
    Port: 389
    Port SSL: 636
    Default Port: 389
    Default Port SSL: 636
    Use SSL: FALSE
    Server Requires Logon: TRUE
    Attempt Authentication: TRUE
    Username:
    Certificate:

    Library Integration Exceptions:

    None

    Formativ File Version Information:

    Advansys Formativ (VBSSAFE.EXE) 1.5 1.5.1.0 17/09/2002 09:06:40 pm
    Advansys Formativ Tray Interface (FORMATIV.EXE) 1.5 1.5.1.0 17/09/2002 09:06:24 pm
    Advansys Formativ Registration Utility (FRMRMG10.EXE) 1.5 1.5.1.0 17/09/2002 09:05:44 pm
    Advansys Formativ Quick Config (QUICKCONFIG.EXE) 1.5 1.5.1.0 17/09/2002 10:44:40 pm
    Advansys Formativ Admin (FORMATIV.DLL) 1.5 1.5.9.5 23/06/2003 11:54:12 am
    Advansys Formativ Control Panel Applet (FORMATIV.CPL) 1.5 1.5.1.0 17/09/2002 09:04:46 pm
    Advansys Formativ Applet Generator (SCRIPTGEN.DLL) 1.5 1.5.1.0 13/09/2002 12:03:28 pm
    Advansys Formativ Applet Recorder (SCRIPTRECORDER.DLL) 1.5 1.5.1.0 13/09/2002 11:50:44 am
    Advansys Formativ Command Blocker (TOKENBLOCKER.DLL) 1.6 1.6.0.0 26/02/2003 12:47:56 pm
    Advansys Formativ Portal Manager Resources (HTMLRES.DLL) 1.5 1.5.1.0 13/09/2002 03:00:04 pm
    Advansys Formativ Interface Loader (UILOAD.DLL) 1.5 1.5.1.0 13/09/2002 12:27:02 pm
    Advansys Formativ Resource Manager Loader (FIXLDR32.DLL) 1.5 1.5.1.0 13/09/2002 11:53:26 am
    Advansys Formativ Resource Manager for WIN32 (FIXTLS32.DLL) 1.5 1.5.1.0 13/09/2002 11:53:08 am
    Advansys Formativ Resource Manager for Windows 95/98 (FIXTLS9X.DLL) 1.5 1.5.1.0 13/09/2002 11:52:56 am
    Advansys Formativ Resource Manager for Windows NT (FIXTLSNT.DLL) 1.5 1.5.1.0 13/09/2002 11:52:38 am

    LDAP File Version Information:

    Novell LDAP C Library (LDAPSDK.DLL) 2.1.0 2.1.0 15/08/2001 05:01:46 pm
    Novell LDAP Extension APIs (LDAPX.DLL) 2.1.0 2.1.0 15/08/2001 05:04:10 pm
    Novell LDAP SSL Library (LDAPSSL.DLL) 2.1.0 2.1.0 15/08/2001 05:03:34 pm

    GroupWise File Version Information:

    Novell GroupWise Client (GRPWISE.EXE) 6.5.0 6.5.0 03/02/2003 06:06:20 pm
    Novell GroupWise C3PO Manager (GWDT31.DLL) 6.5.0 6.5.0 16/01/2003 10:28:38 pm
    Novell GroupWise Address Book (ADDRBOOK.EXE) 6.5.0 6.5.0 16/01/2003 11:05:30 pm
    Novell GroupWise Address Book (GWABU1.DLL) 6.5.0 6.5.0 16/01/2003 11:03:06 pm
    Novell GroupWise Object Library (GWCMA1.DLL) 6.5.0 6.5.0 17/01/2003 10:38:24 am
    GroupWise Win32 Client Import Module (GWIMPEXE.EXE) 5.5 1.0 16/01/2003 10:41:56 pm
    GroupWise ‘Hit the Road’ setup (HTRSETUP.EXE) 1, 0, 0, 1 1, 0, 0, 1 16/01/2003 10:21:24 pm
    GroupWise Attachments ActiveX Control Module (GWATT1.OCX) 1, 0, 0, 1 1, 0, 0, 1 17/01/2003 10:54:28 am
    Novell GroupWise Notify (NOTIFY.EXE) 6.5.0 6.5.0 16/01/2003 10:47:42 pm
    Novell GroupWise Admin API (GWCMB1.DLL) 6.5.0 6.5.0 17/01/2003 12:50:08 am

    GroupWise Interface Language:

    Language: US

    GroupWise Address Books:

    AB Modal From Toolbar: No
    Default Address Book: AB.0081D836918BCE1187EB00805FB4B2BE.Klanten (Carolien Bravenboer)
    Delimiter Characters: ,;
    Display Name Format: F L
    Name Search Mode: No

    Third Party Handlers

    DLL1 C:PROGRA~1AdvansysFormativTokenBlocker.dll
    Advansys Formativ Command Blocker (TOKENBLOCKER.DLL) 1.6 1.6.0.0 26/02/2003 12:47:56 pm
    DLL2 C:PROGRA~1AdvansysFormativScriptRecorder.dll
    Advansys Formativ Applet Recorder (SCRIPTRECORDER.DLL) 1.5 1.5.1.0 13/09/2002 11:50:44 am

    GroupWise C3PO Entries:

    GW.CLIENT
    Advansys.formativ
    Events
    OnReady
    OnShutDown
    Objects
    CommandFactory
    EventMonitor
    GW.CLIENT.WINDOW.ATTACHVIEWER
    Advansys.formativ
    Objects
    CommandFactory
    GW.CLIENT.WINDOW.CALENDAR
    Advansys.formativ
    Objects
    CommandFactory
    GW.CLIENT.WINDOW.FINDRESULTS
    Advansys.formativ
    Objects
    CommandFactory
    GW.MESSAGE
    Advansys.formativ
    Events
    OnDelivery
    Objects
    EventMonitor
    GW.MESSAGE.APPOINTMENT
    Advansys.formativ
    Objects
    CommandFactory
    GW.MESSAGE.DISCUSSION
    Advansys.formativ
    Objects
    CommandFactory
    GW.MESSAGE.MAIL
    Advansys.formativ
    Events
    GW#C#OPEN
    Objects
    CommandFactory
    GW.MESSAGE.NOTE
    Advansys.formativ
    Objects
    CommandFactory
    GW.MESSAGE.PHONE
    Advansys.formativ
    Objects
    CommandFactory
    GW.MESSAGE.TASK
    Advansys.formativ
    Objects
    CommandFactory

    LDIF output:

    dn: cn=admin, o=testflex
    nGWPostOffice: cn=gwpoa,ou=gw,ou=services,o=testflex
    messageServer: cn=TESTSERVER,ou=services,o=testflex
    ACL: 2#subtree#cn=admin,o=testflex#[All Attributes Rights]
    ACL: 6#entry#cn=admin,o=testflex#loginScript
    ACL: 2#entry#[Public]#messageServer
    ACL: 6#entry#cn=admin,o=testflex#printJobConfiguration
    ACL: 2#entry#cn=admin,o=testflex#bhGUIDList
    ACL: 3#entry#[Root]#seeAlso
    networkAddress: 12#
    objectClass: inetOrgPerson
    objectClass: organizationalPerson
    objectClass: person
    objectClass: ndsLoginProperties
    objectClass: top
    objectClass: bhPortalConfig
    sASLoginConfigurationKey:: AAAAAO+/vQAAADDvv73vv70w77+977+9AgICAAIBATAyAgEDBg
    tg77+9SAHvv73vv703AQIIGgICAO+/vQIBAgIDEQAA77+9FAnHkW/vv73vv73vv70uMmLvv70y77
    +977+9D1Dvv73vv708LwQgbk3vv71gIWjvv700Le+/ve+/vRPvv73DkntX77+977+9SQQYZu+/vV
    jvv71y77+9fO+/ve+/vTAiBgtg77+9SAHvv73vv703AQIIGzATMBECBQDvv70AAAQECE5NQVNJVj
    Ay77+9EB9R77+9We+/vWzvv70J77+977+977+977+9Nm1MTjAzMA8GC2Dvv71IAe+/ve+/vTcBAg
    gOBQAEIHHvv73vv70dHDLvv73vv73vv70v77+9X8+M77+9MkPvv73vv70k77+9Ne+/vVZSXMOO77
    +9KXcAABAAAAAfUe+/vVnvv71s77+9Ce+/ve+/ve+/ve+/vTZtTE4=
    loginTime: 20030624090356Z
    securityEquals: cn=apchadmn-Administrators,o=testflex
    securityEquals: cn=sshadmn-Administrators,ou=services,o=testflex
    securityEquals: cn=admins,o=testflex
    securityEquals: cn=FormativAdministrator,ou=formativ,ou=services,o=testflex
    uid: admin
    mail: admin@hartdinxveld.netflex.nl
    cn: admin
    nGWGroupWiseID: GWDOM.gwpoa.admin{106}68F1B5C0-02B4-0000-B19C-51004000F100
    bhGUIDList: {67304221-0000-00F4-E993-8FB1C0A86314}
    bhGUIDList: {30AAD958-0000-00F4-E993-C5F0C0A86314}
    bhGUIDList: {F1C03F9D-0000-00F4-F7BB-76A2C0A86314}
    bhGUIDList: {0DB56604-0000-00F4-F889-DFB5C0A86314}
    bhGUIDList: {6B66B5FC-0000-00F5-0236-AF2DC0A86314}
    nGWAccountID: admin
    eMailAddress: 7#admin@GWDOM.gwpoa
    Language: ENGLISH
    sASLoginConfiguration:: JgAAAAQAAAAAAAAAUABhAHMAcwB3AG8AcgBkACAASABhAHMAaAAYA
    AAAVjjvv70mHO+/vcapTu+/vXDvv71A77+9Ne+/vcmf77+977+9VAEaTg==
    nGWVisibility: 2
    seeAlso: cn=Global Config,ou=formativ,ou=services,o=testflex
    loginGraceRemaining: 255
    sn: admin
    nGWObjectID: admin
    groupMembership: cn=apchadmn-Administrators,o=testflex
    groupMembership: cn=sshadmn-Administrators,ou=services,o=testflex
    groupMembership: cn=admins,o=testflex
    nGWFileID: 0rr

    dn: ou=formativ, ou=services, o=testflex
    ou: formativ
    objectClass: organizationalUnit
    objectClass: ndsLoginProperties
    objectClass: ndsContainerLoginProperties
    objectClass: top
    ACL: 2#entry#ou=formativ,ou=services,o=testflex#loginScript
    ACL: 2#entry#ou=formativ,ou=services,o=testflex#printJobConfiguration

    dn: cn=FormativAdministrator, ou=formativ, ou=services, o=testflex
    equivalentToMe: cn=admin,o=testflex
    objectClass: organizationalRole
    objectClass: top
    seeAlso: cn=Global Config,ou=formativ,ou=services,o=testflex
    ACL: 3#entry#[Root]#seeAlso
    cn: FormativAdministrator

    dn: cn=Global Config, ou=formativ, ou=services, o=testflex
    description: Global Config
    objectClass: advansysFvConfig
    objectClass: resource
    objectClass: top
    seeAlso: cn=Global Applets,ou=formativ,ou=services,o=testflex
    seeAlso: cn=Applet Development Library,ou=formativ,ou=services,o=testflex
    ACL: 3#subtree#[Root]#[All Attributes Rights]
    ACL: 1#subtree#[Root]#[Entry Rights]
    advansysFvClientOptions: 255
    cn: Global Config

    dn: cn=Global Applets, ou=formativ, ou=services, o=testflex
    description: Global Applets
    objectClass: advansysFvScriptLib
    objectClass: resource
    objectClass: top
    seeAlso: cn=admin,o=testflex
    ACL: 3#subtree#[Root]#[All Attributes Rights]
    ACL: 1#subtree#[Root]#[Entry Rights]
    ACL: 15#subtree#cn=FormativAdministrator,ou=formativ,ou=services,o=testflex#[
    Entry Rights]
    ACL: 15#subtree#cn=FormativAdministrator,ou=formativ,ou=services,o=testflex#[
    All Attributes Rights]
    cn: Global Applets

    dn: cn=Applet Development Library, ou=formativ, ou=services, o=testflex
    description: Applet Development Library
    objectClass: advansysFvScriptLib
    objectClass: resource
    objectClass: top
    seeAlso: cn=admin,o=testflex
    ACL: 3#subtree#[Root]#[All Attributes Rights]
    ACL: 1#subtree#[Root]#[Entry Rights]
    cn: Applet Development Library

    #5248
    Anonymous

    Could you send me an email if you have an anwser to alex@netflex.nl

    We are a reseller of Advansys in the Netherlands

    #5245
    Support 2
    Moderator

    We are currently researching the issue. We have been using Win2K for a long time, including our main demo system, and there must be other factors at work here. As we cannot yet reproduce the problem, we suspect it is related to a rights issue, although as you are the admin user, it is rather puzzling. We need to gather more information.

    Under normal circumstances, the following step is important:

    Highlight the library and, by using the ‘Trustees of this object’ option, add the FormativAdministrator Organizational Role object as a trustee of the library. Enable the [Entry] Browse, Create, Delete, Rename, Inheritable and [All Attributes] Compare, Read, Write, Inheritable rights to the library object.

    From the LDIF output, it appears that you have performed this step for the Global Applets library but not the Applet Development Library. However, you appear to have Admin rights so this should not be an issue. Are you unable to administer both the Global Applets and the Development libraries?

    When you run FormativCentral, in the applet list are you able to see the ‘hammer’ icon next to the name of the applet library?

    What happens if you move the FormativAdministrator role into the Formativ OU?

    I will write to you directly on this matter to see if we can further troubleshoot the issue. Considering you need to do a demo today, we may need to provide you with an online Webex support session to see the issue first-hand.

    Best regards,

    Advansys Support

    #5247
    Support 2
    Moderator

    It is very surprising that the operating system could affect the rights to eDirectory objects. This should not normally be the case and as yet, we don’t know how it could.

    Which versions of the NetWare Client are you using in each case?

    I presume that you are logging in as the same NetWare user?

    What User level are you using for Win2K?

    Regards,

    Advansys Support

    quote:


    Originally posted by pasclinaui:
    I tried same operation on a W98 workstation e everything was ok !

    So it appears to be an issue of WIN2K platform !

    No way to solve it, actually !!!


    #5242
    Anonymous

    Hi,

    The first thing is the follow: pasclinaui is not me (but we have the same name).

    Maybe the problem is that im using windows server 2003 as a workstation.

    I get my demo over a couple of hours but i can use a laptop (winXP) that works.

    But doesn’t solve my problem (only for the demo)

    It isn’t an eDirectory issue becouse if i use the laptop on the same eDirectory i can edit the applet library.

    On the win2003 i can’t see the hammers. The FormativAdministrator role is in the formativ OU (cn=FormativAdministrator, ou=formativ, ou=services, o=testflex
    ).

    #5246
    Support 1a
    Participant

    Alex has been contacted directly regarding this issue.

    Advansys Support

Viewing 9 replies - 1 through 9 (of 9 total)
  • You must be logged in to reply to this topic.