Re: [BPM 9.23] Scripts cannot run when instance runs as specific user (336 Views)
Reply
Occasional Contributor
airbusmillet
Posts: 2
Registered: ‎09-18-2012
Message 1 of 5 (441 Views)

[BPM 9.23] Scripts cannot run when instance runs as specific user

Hello,

 

I have installed a BPM 9.23 on a Windows Server 2003 R2.

When I left the default parameters for credentials (BPM run as SYSTEM and so the instance), the scripts run fine.

When I set the BPM to run as a specific user (recognized as local administrator), the scripts also run fine.

BUT when I set the instance to run as this very same user, then the scripts never end!

I can see the mdrv process is always in memory and never quit.

When I go to the "res" subdirectory of the script, I found a "runas.log" file containing:

 

2014-03-13 15:35:25 INFO  : *********************************************************************
2014-03-13 15:35:25 INFO  : Run as started
2014-03-13 15:35:25 INFO  : About to start app C:\HP\LoadGenerator\bin\mdrv.exe with next parameters:  user: sa-c500-b-fr domain: eu password: portcpp arguments: -usr C:\Program timeout: 900
2014-03-13 15:35:25 INFO  : Get a handle to the interactive window station
2014-03-13 15:35:25 INFO  : Get a handle to the interactive desktop
2014-03-13 15:35:25 INFO  : Get the SID for the client's logon session
2014-03-13 15:35:25 INFO  : Try to GetTokenInformation
2014-03-13 15:35:25 INFO  : getLogonSid failed to GetTokenInformation: System error: 122: The data area passed to a system call is too small.


2014-03-13 15:35:25 INFO  : Try to get the token group information from the access token
2014-03-13 15:35:25 INFO  : Loop through the groups to find the logon SID
2014-03-13 15:35:25 INFO  : Obtain the DACL for the window station
2014-03-13 15:35:25 INFO  : addAceToWindowStation failed to GetUserObjectSecurity: System error: 122: The data area passed to a system call is too small.


2014-03-13 15:35:25 INFO  : Create a new DACL
2014-03-13 15:35:25 INFO  : Get the DACL from the security descriptor
2014-03-13 15:35:25 INFO  : DACL is not NULL
2014-03-13 15:35:25 INFO  : Add the first ACE to the window station
2014-03-13 15:35:25 INFO  : Add the second ACE to the window station
2014-03-13 15:35:25 INFO  : Obtain the security descriptor for the desktop object
2014-03-13 15:35:25 INFO  : addAceToDesktop failed to GetUserObjectSecurity: System error: 122: The data area passed to a system call is too small.


2014-03-13 15:35:25 INFO  : Create a new security descriptor
2014-03-13 15:35:25 INFO  : Obtain the DACL from the security descriptor
2014-03-13 15:35:25 INFO  : DACL is NULL
2014-03-13 15:35:25 INFO  : Initialize the new ACL
2014-03-13 15:35:25 INFO  : DACL is present, copy it to a new DACL. Copy the ACEs to the new ACL 
2014-03-13 15:35:25 INFO  : Add ACE to the DACL
2014-03-13 15:35:25 INFO  : Set new DACL to the new security descriptor
2014-03-13 15:35:25 INFO  : Set the new security descriptor for the desktop object

 

Does anyone can help me please ? Thanks.

HP Expert
PatWest
Posts: 832
Registered: ‎03-06-2008
Message 2 of 5 (430 Views)

Re: [BPM 9.23] Scripts cannot run when instance runs as specific user

"System error: 122: The data area passed to a system call is too small."

this means that the current user "sa-c500-b-fr" is still missing some rights to successfully run the script. (but what those rights are, is hard to say)
Regular Advisor
BAC Man
Posts: 133
Registered: ‎05-14-2003
Message 3 of 5 (336 Views)

Re: [BPM 9.23] Scripts cannot run when instance runs as specific user

did you find a resolution to this problem?

Advisor
kkuc
Posts: 22
Registered: ‎04-02-2007
Message 4 of 5 (117 Views)

Re: [BPM 9.23] Scripts cannot run when instance runs as specific user

I also have this problem when trying to execute script on instance running as specific user (has local admin rights) but on BPM 9.24 - Windows Server 2008 R2.

The script verifies if Single Sign-On login on website works and was executed successfully a few times on BPM instance running as specific user but  after that I started receiving failed execution because of "Unauthorized".

I checked the runas.log and I've gotthe same error "System error: 122: The data area passed to a system call is too small".

 

Do any of you have found the resolution?

 

 

Regular Advisor
BAC Man
Posts: 133
Registered: ‎05-14-2003
Message 5 of 5 (89 Views)

Re: [BPM 9.23] Scripts cannot run when instance runs as specific user

make sure all of the folders that are used by BPM (for example C:\HP\BPM, C:\Program Data\HP, C:\HPBPM, ...) have the user account added to it with full control permissions. even though the user account may have administrator permissions, it needs to be added to the folders.

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.