Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI (4054 Views)
Reply
Occasional Advisor
CorMax
Posts: 10
Registered: ‎03-08-2012
Message 1 of 17 (4,551 Views)

DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

I have just installed DP 8.0 CM on Linux and GUI on my Windows 7 client.

It seems to work fine, but I cannot configure or query any device.

If I click on "Devices" under "Devices & Media" menu I get an "Insufficient permissions, access denied." error message.

 

Insufficient_permissions_access_denied.jpeg

 

I'm connecting DP using an admin user, so I don't understand why I get this error message.

 

What I'm missing?

Occasional Advisor
CorMax
Posts: 10
Registered: ‎03-08-2012
Message 2 of 17 (4,532 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

I found these messages in /var/opt/omni/log/AppServer/DPServer.log every time I click on "Devices":

 

15:23:59,761 ERROR [BaseAuthenticator:150:http--0.0.0.0-7116-1] Ticket is null!
15:23:59,828 ERROR [DpAuthenticateResource:136:http--0.0.0.0-7116-1] forbidden.
15:23:59,834 ERROR [BaseAuthenticator:150:http--0.0.0.0-7116-1] Ticket is null!
15:23:59,896 ERROR [DpAuthenticateResource:136:http--0.0.0.0-7116-1] forbidden.
15:23:59,902 ERROR [BaseAuthenticator:150:http--0.0.0.0-7116-1] Ticket is null!
15:23:59,947 ERROR [BaseAuthenticator:150:http--0.0.0.0-7116-1] Ticket is null!
15:24:00,011 ERROR [DpAuthenticateResource:136:http--0.0.0.0-7116-1] forbidden.
15:24:00,017 ERROR [BaseAuthenticator:150:http--0.0.0.0-7116-1] Ticket is null!
15:24:00,085 ERROR [DpAuthenticateResource:136:http--0.0.0.0-7116-1] forbidden.
15:24:00,092 ERROR [BaseAuthenticator:150:http--0.0.0.0-7116-1] Ticket is null!

It seems AppServer has some kind of problem.

HP Expert
Bob_Clark
Posts: 1,439
Registered: ‎08-14-2013
Message 3 of 17 (4,525 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

Did you do this prior to installing DP 8.0:

            

             ===============

 

On Linux and HP-UX, the database OS super user must be created prior to

the installation. The recommendation on Linux and HP-UX is to name it as

 

                      hpdp

 

and to create a user group (with the same name) hpdp that the user

belongs to.

Occasional Advisor
CorMax
Posts: 10
Registered: ‎03-08-2012
Message 4 of 17 (4,520 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

Yes, I did.

 

Following processes status:

 

[root@backupsrv ~]# omnisv status
    ProcName      Status  [PID]    
===============================
    crs         : Active  [3791]
    mmd         : Active  [3789]
    kms         : Active  [3790]
    hpdp-idb    : Active  [3760]
    hpdp-idb-cp : Active  [3785]
    hpdp-as     : Active  [3832]
    omnitrig    : Active
    Sending of traps disabled.
===============================
Status: All Data Protector processes/services up and running.

 

[root@backupsrv ~]# ps -ef | grep omni
hpdp      3760     1  0 16:56 ?        00:00:00 /opt/omni/idb/bin/postgres -D /var/opt/omni/server/db80/pg
hpdp      3785     1  0 16:56 ?        00:00:00 /opt/omni/idb/bin/pgbouncer -d /etc/opt/omni/server/idb//hpdp-idb-cp.cfg
root      3789     1  0 16:56 ?        00:00:00 /opt/omni/lbin/mmd -session_key 1001 -owner root root backupsrv 3788 4294967295 -lang C
root      3790     1  0 16:56 ?        00:00:00 /opt/omni/lbin/kms -session_key 1002 -owner root root backupsrv 3788 4294967295 -lang C
root      3791     1  0 16:56 ?        00:00:00 /opt/omni/lbin/crs
hpdp      3832     1  0 16:56 ?        00:00:00 /bin/sh /opt/omni/AppServer/bin/standalone.sh -b backupsrv
hpdp      3892  3832 21 16:56 ?        00:00:09 /opt/omni/jre/bin/java -D[Standalone] -server -XX:+UseCompressedOops -XX:+TieredCompilation -Xms64m -Xmx512m -XX:MaxPermSize=256m -Djava.net.preferIPv4Stack=false -Djava.net.preferIPv6Stack=true -Dorg.jboss.resolver.warning=true -Dsun.rmi.dgc.client.gcInterval=3600000 -Dsun.rmi.dgc.server.gcInterval=3600000 -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true -Djboss.server.default.config=standalone.xml -Dorg.jboss.boot.log.file=/var/opt/omni/log/AppServer/boot.log -Dlogging.configuration=file:/etc/opt/omni/server/AppServer/logging.properties -Djboss.server.log.dir=/var/opt/omni/log/AppServer -Djboss.server.temp.dir=/var/opt/omni/tmp/AppServer -Djboss.server.data.dir=/var/opt/omni/server/AppServer -Djboss.server.config.dir=/etc/opt/omni/server/AppServer -Dhp.dataprotector.programdir=/opt/omni/bin -Dhp.dataprotector.datadir=/var/opt/omni -Dhp.dataprotector.configdir=/etc/opt/omni -Dhp.dataprotector.shared.datadir=/var/opt/omni -Dhp.dataprotector.shared.configdir=/etc/opt/omni -Dcom.hp.im.components.configdir=/etc/opt/omni/client/components -jar /opt/omni/AppServer/jboss-modules.jar -mp /opt/omni/AppServer/modules -jaxpmodule javax.xml.jaxp-provider org.jboss.as.standalone -Djboss.home.dir=/opt/omni/AppServer -b backupsrv

HP Expert
Bob_Clark
Posts: 1,439
Registered: ‎08-14-2013
Message 5 of 17 (4,515 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

OK, one more thing to see if thsi is only a GUI problem.  From the command line on the cell manager, please run

 

       cd /opty/omni/bin

       omnidownload -list_devices -detail

 

This is the command-line equivalent of clicking on Devices in the GUI.  If you get the same error, you will need to open a case with teh REsponse Center

Occasional Advisor
CorMax
Posts: 10
Registered: ‎03-08-2012
Message 6 of 17 (4,506 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

[ Edited ]

Thank you Bob,

it seems to be a GUI problem:

 

[root@backupsrv ~]# omnidownload -list_devices -detail
NAME "NDMP_DRIVE1"
DESCRIPTION ""
HOST backupsrv
POLICY SCSI-II
TYPE LTO-Ultrium
POOL "NDMP"
LIBRARY "SL150_NDMP"
CONCURRENCY 1
SHAREDDRIVE
ENCRCAPABLE
DATAFORMAT NDMP Celerra
NDMPSERVER vnx
DRIVES
        "c32t0l0"
        "1"
BLKSIZE 256
LOCKNAME  "DRIVE1"
DEVSERIAL ""
RESTOREDEVICEPOOL NO
COPYDEVICEPOOL NO


Now the question is: How can I fix this GUI problem?

HP Expert
Bob_Clark
Posts: 1,439
Registered: ‎08-14-2013
Message 7 of 17 (4,498 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

I think that it is time to open a case with the response center.  To get a head start, in addition to supplying the DP version and the OS-version of the Cell Manager and the system running the GUI, they will be asking you to create debugs.  Stop the GUI.  On the Cell Manager, clear the file

 

             /var/opt/omni/log/AppServer/DPServer.log

 

On the system running the GUI, from the MS-DOS prompt

 

       cd \Program Files\Omniback\bin

       manager.exe -debug 1-500 GUI.txt

 

Duplicate the error, take a screenshot of the error, and exit the GUI

 

On the system running the GUI,

check the folder

               Program Files -> Omniback -> tmp Windows 2003
or
              Program Data -> Omniback -> tmp  Windows 2008

 

Look for long filenames that start OB2DBG and end with GUI.txt.  Save these to a ‘zip’ file

 

On your Cell Manager, check /tmp.   Look for long filenames that start OB2DBG and end with GUI.txt.  Save these to a 'tar', 'rar', or 'zip' file, along with a copy of the DPServer.log file

 

Once you get the case opened, ask for a FTP site to be created to send these files to.  Hopefully, this will speed things along

Frequent Visitor
FreddyEsquivel
Posts: 2
Registered: ‎05-31-2013
Message 8 of 17 (4,483 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

Hi,

This is DP 8 bug. Please log a case and provide all debugs from that Host.

Best regards.
Occasional Advisor
CorMax
Posts: 10
Registered: ‎03-08-2012
Message 9 of 17 (4,443 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

Thank you all for your replies, but I was testing DP 8 as the first step of an upgrade. This is a test server with no license so I cannot open a service request.

But I don't think I'll upgrade from DP 7 to 8.

I'll wait for some patch to be released.

 

Meanwhile, I'll be waiting for some other suggestion...

HP Expert
Bob_Clark
Posts: 1,439
Registered: ‎08-14-2013
Message 10 of 17 (4,430 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

Excellent idea, I always advise that you try to hold off on updating until , at lease, the first set of patches are released

 

Lets just say that DP 8 has had some 'challenges'

Honored Contributor
danielbraun
Posts: 720
Registered: ‎07-07-2010
Message 11 of 17 (4,427 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

Hi,

 

please keep in mind that you have to wait until December/January timeframe for updates of DP 8.0, which will not be distributed via patches, it will be the 8.1 version.

 

Best regards

Daniel

-----------
Please assign Kudos - How to assign...
Advisor
hiltonnjr
Posts: 15
Registered: ‎10-10-2013
Message 12 of 17 (4,419 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

Hi,

I'm with the same problem, but I noticed that logging in with Windows Domain User which is used to perform the backups on clients, devices and pools are successfully displayed. I will wait for the update to see if problem is solved.

Grateful.
Occasional Advisor
CorMax
Posts: 10
Registered: ‎03-08-2012
Message 13 of 17 (4,404 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

Hi hiltonnjr,

 

unfortunatelly it is not possible for me to logon using same domain user used for backup.

My CellManager is a Linux box and all backed up servers are Linux or Unix.

 

Occasional Advisor
Michal Doležal
Posts: 7
Registered: ‎05-09-2006
Message 14 of 17 (4,301 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

[ Edited ]

Solved.

 

It is DNS problem and OmniInet problem.

 

What is required to correct function:

a. DNS entries for GUI and CellManager - this can be little bit difficult when management station is from different domain in that case you have two options. First: create on DNS server (windows) new zone with domain with Cell Manager, Second: Edit hosts file on Cell Manager /etc/hosts

It must pass: ping fqdn_name_of_gui_client from Cell Manager ping fqdn_name_of_CellManager from Gui Client

and must pass: ping NETBIOS_name_gui_client from CellManager

b. OmniInet service must be running

c. Firewall must allow to pass all communication (on given ports) between CellManager and Gui Client.

 

Its very weird.

Michal Dolezal, DiS.
System engineer
AVE BOHEMIA, s.r.o.
Occasional Visitor
Alberto_Eng
Posts: 1
Registered: ‎12-24-2013
Message 15 of 17 (4,054 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

This error also happened to me. but the problem was that I was using a laptop via wifi ... when I put the network cable and used a fixed IP I managed to add the device.

Occasional Visitor
DanielGines
Posts: 1
Registered: ‎02-08-2014
Message 16 of 17 (3,671 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

Hello, I have the same problem with DP 8.1

Environment newly installed. Anyone solved this problem?

In my case already checked the services, DNS, etc, all OK.

HP Expert
Bob_Clark
Posts: 1,439
Registered: ‎08-14-2013
Message 17 of 17 (3,633 Views)

Re: DP 8.0 - Insufficient permissions, access denied when accessing devices using GUI

I had put this question to the lab, and it looks like there is some kid of bug in teh Certificat5e program

 

=================

 

could be that certificate expired? They probably all installed after 19th January?

=================================

Best to analyze is by simple going taking a browser and open the site:

https://hostname:7116" \t "_blank">https://hostname:7116

It will ask whether it is allowed to continue, then a click on the certificate symbol just before or after the address bar, will show you the certificate. This way you can see whether the certificate is expired

 

we have a parsing bug in the omnigencert.pl and that procedure below does not work, since it always takes default value.

 

To fix customer case, there might be many, follow the following procedure:

 

Find in /etc/opt/omni/client/components/webservice.properties the keystore password

 

cd to /opt/omni/sbin directory

regenerate the certificate using the following command:

perl omnigencert.pl –server_id <FQDN of your server> -user_id hpdp -store_password <Your keystore password> -cert_expire <number of days less than 24 * 365>

omnisv stop

omnisv start

 

Alternatively, for now, just search the perl script for '24 * 365' and replace it with '10 * 365'.

There is going to be a corrected version of 'omnigencert.pl '

The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation.