Account Information Not Recognized: Access is denied

Hi All,
We are facing an issue where some users who were able to log-in on BO launch pad, suddenly not able to log-in and getting an error message highlighted in below screen shot.
I have trouble shoot the problem and found that there is one role which is creating this problem. If I am assigning that particular role to user ID, user start facing log-in issue and when I remove that particular role, it works fine and user is able to log-in.
I have checked and could not find any change log for role/user in last 6 month (Issue start appearing 1 week back) and also all permissions looks fine from BOBJ side.
Could you guys help me to understand on what could be the issue? I have checked the forum and found one thread (http://scn.sap.com/thread/3399554) similar to this issue but could not get any satisfied answer.
Regards,
Anuj

Hi Tom,
My first thought is that there must be an explicit deny in one of the groups that this user is a member of. An explicit deny overtakes any not specified, or explicit grants.
The CMC has a new Query Results section that has Security Queries that you can carry out. You could try using that to determine the rights.
Also, if you go to CMC/Applications/CMC/User Security, you should be able to add the user specifically and then do a view security to see what the combined rights are for that user.
It's got to be a right of some sort that is propogating down. The strange thing is that you state that adding the user to the Administrators group resolves this issue. This means that the right must be not specified at some level because if it was denied, even adding them to the administrators group wouldn't matter.
Thanks
Jonathan

Similar Messages

Account information not recognized: Could not reach CMS ' MachineName :6400'. The CMS on machine ' MachineName ' was stopped due to a critical error. (FWM 20031)

I have just installed Information platform services 4.1 sp2 on a windows server 2008 R2 standard service pack 1. having 8 GB RAM.
Central Configuration manager is in Running status but when I try to login to Cental management Console then I get following error
"Account information not recognized: Could not reach CMS '<MachineName>:6400'. The CMS on machine '<MachineName>' was stopped due to a critical error. (FWM 20031)"
I have CMS and AUDIT database on Oracle server and they are getting connected from my machine through SQL developer and the tables are also created under CMS and audit databases.
I am not able to figure out what Issue is causing the Error. Below is the content of error_cms6400.log file located in the directory <E:\SAP Business Objects\SAP BusinessObjects Enterprise XI 4.0\logging>.
33007
CMS system database is overloaded, please try again. If the problem persists, please contact the system administrator(FWB 00027)
35101
The root server reported an error Initialization Failure. (Reason: CMS system database is overloaded, please try again. If the problem persists, please contact the system administrator(FWB 00027)CMS system database is overloaded, please try again. If the problem persists, please contact the system administrator(FWB 00027) CacheObjectIDs ).
I have created New databases for CMS and audit and it is saying database is overloaded.
Please help me rectify the Issue.
Thanks in Advance

Hi Ankur,
As per the error message you entered the issue might occur because the Oracle CMS database reside in a different network or there is a network delay between BO server and database server. Please refer KBA 1706849 and try following steps.
Confirm that the CMS database and BO server are in same network
Try to ping database server from BO server and check the reply. The reply should come in 1 ms
Confirm with DBA whether there are 14 connections established to CMS database
Stop the SIA and restart your database schema. Then start the SIA and try login
Please let us know error messages in Event viewer if this is a Windows server and also is this a clustered environment ?
Regards,
Hrishikesh

Windows AD login error: Account Information Not Recognized: Internal error.

I follow this documentation and everything is working fine.
http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/e0edd98d-c43e-2b10-e09a-e0a89931cedc
1. create a domain user called bossosvcacct
3. I was able to mapped group into the CMC and I do see user being mapped into the system.
4. I did a test to make sure the kerbose is working correctly by running kinit username
I got everything working except for when I login I'm getting this error.
Account Information Not Recognized: Internal error.
This is what is in my log.
Commit Succeeded
Debug is true storeKey false useTicketCache false useKeyTab false doNotPrompt false ticketCache is null isInitiator true KeyTab is null refreshKrb5Config is false principal is null tryFirstPass is false useFirstPass is false storePass is false clearPass is false
[Krb5LoginModule] user entered username: johndoeDOMAIN
Acquire TGT using AS Exchange
principal is johndoeDOMAIN
EncryptionKey: keyType=23 keyBytes (hex dump)=0000: 17 29 81 67 E0 91 65 B3 61 D6 1E D9 DF BB 65 F0 .).g..e.a.....e.
Commit Succeeded

What do you get if you login to client tools (deski/designer/CCM)?
commit succeeded is only the kinit part of the login, the CMS then needs to make a TGS request using the CMS service account. logging in with the client also requires this and is a good test. If clients work then the only known issues are for multi-domain/multi forest or encrypti0on mismatches between the service account and java configuration.
Let us know...
Regards,
Tim

Account Information Not Recognized: The user account has been disabled.(FW

Hi Expert ,
I'm working with SAP Business Objects 4.0 SP2 patch 5 and SAP Enterpriseportal. I want to use Single Sign On with trusted authentication in enterprise portal. EP administrator has created an infoview in order to be able to connect the portal and BO.
I have configured trusted authentication in BO but when I try to use the infoview from the portal the following error appear:
"Account Information Not Recognized: The user account has been disabled.(FWB 00012) "
the user used in the sap portal is also defined and active in sap BO.
In order to activate SSO in BO I executed the following steps:
1. Log onto the CMC.
2. Went to the Authentication management area.
3. Select the Enterprise option. The "Enterprise" dialog box opens.
4. Scroll down until I see "Trusted Authentication".
4.a. Click Trusted Authentication is enabled.
4.b. Click New Shared Secret.
4.c. Click Download Shared Secret.
5. Selected Update to commit the shared secret.
6. Saved the trustedprincipal.conf file in the boe server in the path:
'D:\Program Files (x86)\SAP BusinessObjects\SAP BusinessObjects
Enterprise XI 4.0\win32_x86'
7. Modified the file 'D:\Program Files (x86)\SAP
BusinessObjects\Tomcat6\webapps\BOE\WEB-INF\config\default\global.properties'
sso.enabled=true
sso.sap.primary=false
trusted.auth.shared.secret=
trusted.auth.user.param=
trusted.auth.user.retrieval=REMOTE_USER
8.Restart Tomcat
Please could anyone help me to resolve the issue?
Thanks in advance for collaboration.
regards
gio'

Hi Giovanni,
The configuration you have wonu2019t work. You have two different web application servers: Netweaver and Tomcat. Your user credentials are only established in one of them: Netweaver. When you configure trusted authentication in Tomcat you have to authenticate the user in this Web Application server. The REMOTE_USER canu2019t pass from one server to another.
You can confirm this capturing your request using Fiddler in your browser.
If you want to configure the integration BI4 into SAP Enterprise portal, you can follow this guide:
http://wiki.sdn.sap.com/wiki/display/BOBJ/BI4IntegrationintotheSAPEntreprisePortal+7.0.x
Regards,
Julian

Account information not recognized

Hi,
When client wants to open report in the InfoView, it prompts Username and password.
It gives following error:
Account information not recognized.
- The argument has an invalid value az_LATN_AZ
- Please check that the appropriate CMS name and authentication type are specified
- Re-enter your user name and password, and click Log On
- If you are ensure of your account information, contact your system administrator
After reentering username and password report works fine.
More, i can not reproduce problem in my pc, however my client complains that it always asks me credentials.
Thanks in advance

Are you using IIS as web server?
I would recommend to take a look at the following Microsoft KB and try to apply the workaround described on the BO server
http://support.microsoft.com/kb/939949/en-us
Regards,
Stratos

Account Information Not Recognized: An error occurred at the server : An internal error has occurred in the secLdap plugin.

I get the above error whenever I try to logon to InfoView. My LDAP accounts work for CMC. Any Suggestions? I read somewhere it has something to do with my dn having the following content:
distinguisheName CN=Hill\, Patrick,OU-Users,OU=GBH,OU=Facilities,DC=tenethealth,DC=net
It stated something about the CN containing slashes, commas, or spaces don't remember. Does anyone know how to fix this. I've also read it's a problem with the secLdap.dll but I haven't found any solid solution on how to resolve.
Thanks in advance,
Patrick

There was a rather old patch about this in some of the Hotfix Readme's. ADAPT00527068. Seems to affect various *nix deployments but was supposed to be fixed around the XIR2 MHF1 release. If you're on a later service pack, consider installing a sandbox and seeing if it's a regression bug.

"Account Information Not Found"

I'm getting a weird error that I just don't know how to troubleshoot it:
For some, but not all, users, I'm getting this error when I try to add an iCal server to a client machine:
"Account Information not found"
Access to https://ourserver.edu:8443/principals/_uids_/guid.../ is not permitted.
Can anyone help me? For my own account I can log right in and pull up the calendar and everything is great. For three other people, they get this error and this is where it ends. They can never see the calendar, etc.
I checked their open directory account and everything is fine. On my own system, those people get errors, but my account works fine. So it is defintely an account issue and not a computer issue. However, looking through the Inspector, I don't see anything different with their accounts over my account.
System information:
OS: 10.5.1 OSX Server
box: Intel XSERVE
Pulls information from a Mac Open Directory LDAP server

I finally figured out the problem...
Some users had alias usernames (shortnames), I found that If I used the actual account name (and not the short names) AND I ensured that the actual user's home directory name agreed with the account name (and not a shortname (alias), everything worked.
What a pain in the butt this was... sheesh. You'd think that ANY name should work (username or any shortname) on the iCal client since all names and aliases will work on ftp, ssh, etc.
Some other things to be careful of...
Make sure you have your iCal server's DNS under the DNS section of your client's connecting NIC (aircard, ethernet port, etc)
Hope this helps someone else... I have 10 hours into figuring out this single issue and WAY more time into getting iCal server setup properly.
Apple... you need to make this MUCH easier.
Joe

Your account does not have access to the forums system.

Greetings, My name is Jeff, I'm from Netwrix Corporation, which is a Microsoft partner. I have a problem with accessing Microsoft TechNet forum. After signing-in to my account: [email protected], I go to TechNet
forum, and get a message that: "Your account does not have access to the forums system." And also I've noticed that all my posts were deleted from TechNet forums. Can moderators tell me why did that happen? Why didn't I receive any warning
about my account suspension?
I've already submitted 2 tickets to MSDN Site Feedback Inquiry but didn't receive any answer.
I've called Microsoft TechNet at 800-344-2121 and Professional
Support team at 1-800-936-5800. But everybody send me to the MSDN Site Feedback Inquiry from which I didn't get any answer.
Anybody can help me with my problem?

Hi,
Is this the profile you're referencing?
http://social.technet.microsoft.com/Profile/netwrix
It doesn't appear to be banned, but you're definitely right about there being no activity listed.
I'd suggest contacting the forums team directly by sending an email to fissues (at) microsoft [dot] com. The admins do monitor this forum, so you'll probably get a response here as well.
Don't retire TechNet! -
(Don't give up yet - 13,085+ strong and growing)

My email gets bounced into an eternal loop in the outbox and says that my iCloud and me account are not recognized by the server? I've tried setting up another account and it says that I already have them set up, and it is stil only sending 1 or 2 message

My messages get lost in an eternal loop in my out box and it says that my iCloud me accounts are not recognized by the server. I can send 1 or 2 out of 10.
We tried adding a new account and that didn't work. We then deleted the account and started again. Still didn't work. Extremely frustrated!

There also seems to be something wrong with the time!!! My posting says 5:30ish but it was 8:30ish?

HT204053 photo stream says my iCloud account can not be accessed

Photo Stream says my iCloud account can not be accessed and I can't get rid of it

Try this now.
Reboot the iPad by holding down on the sleep and home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider if it appears on the screen - let go of the buttons. Let the iPad start up.

EWS API - Impersonating to update a calendar item created by any other user than a service account, raise an error "Access is denied. Check credentials and try again."

Hi,
I am new to using EWS managed APIs.
Following is the issue:
1. I am using a service account e.g. [email protected]. This user is a global administrator and also has ApplicationImpersonation role assigned. (Sign into Online Office 365 account -> Admin -> select "Exchange" tab- > select Permissions
on the left panel -> create an impersonation role -> assign ApplicationImpersonation in Roles: and [email protected] in Members: -> Click on save)
2. Create a calendar item by other user for e.g. [email protected], and invite an attendee - [email protected].
3. In a c# program, I connect to EWS service using a service account - [email protected], fetch its calendar events. If organizer of an event is some other user - [email protected] then
I use impersonation in the following way to update the calendar event/item properties- subject, body text etc.
        private static void Impersonate(string organizer)
            string impersonatedUserSMTPAddress = organizer;
            ImpersonatedUserId impersonatedUserId =
                new ImpersonatedUserId(ConnectingIdType.SmtpAddress, impersonatedUserSMTPAddress);
            service.ImpersonatedUserId = impersonatedUserId;
4. It was working fine till yesterday afternoon. Suddenly, it started throwing an exception "Access is denied. Check credentials and try again." Whenever I try to
update that event.
       private static void FindAndUpdate(ExchangeService service)
            CalendarView cv = new CalendarView(DateTime.Now, DateTime.Now.AddDays(30));
            cv.MaxItemsReturned = 25;
            try
                FindItemsResults<Item> masterResults = service.FindItems(WellKnownFolderName.Calendar, cv);
                foreach (Appointment item in masterResults.Items)
                    if (item is Appointment)
                        Appointment masterItem = item as Appointment;
                        if (!masterRecurEventIDs.Contains(masterItem.ICalUid.ToString()))
                            masterItem.Load();
                            if (!masterItem.Subject.Contains(" (Updated content)"))
                                //impersonate organizer to update and save for further use
                                Impersonate(masterItem.Organizer.Address.ToString());
                                // Update the subject and body
                                masterItem.Subject = masterItem.Subject + " (Updated content)";
                                string currentBodyType = masterItem.Body.BodyType.ToString();
                                masterItem.Body = masterItem.Body.Text + "\nUpdated Body Info:
xxxxxxxxxxxx";
                                // This results in an UpdateItem operation call to EWS.
                                masterItem.Update(ConflictResolutionMode.AutoResolve);
                                // Send updated notification to organizer of an appointment
                                CreateAndSendEmail(masterItem.Organizer.Address.ToString(), masterItem.Subject);
                                masterRecurEventIDs.Add(masterItem.ICalUid.ToString());
                            else
                                Console.WriteLine("Event is already updated. No need to update again.:\r\n");
                                Console.WriteLine("Subject: " + masterItem.Subject);
                                Console.WriteLine("Description: " + masterItem.Body.Text);
            catch (Exception ex)
                Console.WriteLine("Error: " + ex.Message);
5. What could be an issue here? Initially I thought may be its a throttling policy which is stopping same user after making certain API call limits for the day, but I am still seeing this issue today.
Any help is appreciated.
Thanks

Your logic doesn't sound correct here eg
2. Create a calendar item by other user for e.g. [email protected], and invite an attendee - [email protected]
3. In a c# program, I connect to EWS service using a service account - [email protected], fetch its calendar events. If organizer of an event is some other user - [email protected] then
I use impersonation in the following way to update the calendar event/item properties- subject, body text etc.
When your connecting to [email protected] mailbox the only user that can make changes to items within
abccalendar is abc (or ABC's delegates). If your impersonating the Organizer of the appointment pqr that wouldn't work unless the organizer had rights to abc's calendar. If you want to make updates to a calendar
appointment like that you should connect to the Organizers mailbox first update the original, send updates and then accept the updates.
When you impersonate your impersonating the security context of the Mailbox your impersonating so its the same a logging on as that user in OWA or Outlook.
Cheers
Glen

Customer Account Information not populating in Checkout process

Firstly, THANK YOU in advance for any help troubleshooting this -- I'm absolutely in the weeds.
I've taken over a Business Catalyst site that was dropped by a different designer/management company at an incomplete stage, so am admittedly trying to clean up somebody else's mess at this point. Most of the kinks are worked out, save for one: Saving/retrieving customer information.
What's worked:
- Setting up a Secure Zone for customers to create a profile, log in and review order info
- Tying that login information to the checkout process so that customers can use that login information to proceed to the payment page with (some of) their informaiton already popuplated
What's not working:
- The retention and population of the Billing Address information. It is not saving the Billing Address information from the original registration page, nor the Account Information page (wherein they can update their account details), and then (obviously) isn't populating it onto the checkout page form. It is, however, keeping and populating the name, email, company name and phone number fields from those same forms.
On the Customer Registration page (step 1), the Billing Address fields are included in the form, like so:
<tr>
                        <td><label for="BillingAddress">Billing Address <span class="req">*</span></label><br />
                        <input type="text" name="BillingAddress" id="BillingAddress" class="cat_textbox" maxlength="500" value="{module_billingaddress}" /></td>
                    </tr>
                    <tr>
                        <td><label for="BillingCity">City <span class="req">*</span></label><br />
                        <input type="text" name="BillingCity" id="BillingCity" class="cat_textbox" maxlength="255" value="{module_billingcity}" /></td>
                    </tr>
                    <tr>
                        <td><label for="BillingState">State <span class="req">*</span></label><br />
                        <input type="text" name="BillingState" id="BillingState" class="cat_textbox" maxlength="255" value="{module_billingstate}" /></td>
                    </tr>
                    <tr>
                        <td><label for="BillingZip">Zipcode/Postcode <span class="req">*</span></label><br />
                        <input type="text" name="BillingZip" id="BillingZip" class="cat_textbox" maxlength="255" value="{module_billingzip}" /></td>
                    </tr>
However, when you go to review your account details on the Account Settings page after creating your customer profile, these fields remain blank. An attempt to give them values and then submit the updates also returns null values on the updated page. Following is that section of code from the Account Settings page:
<tr>
                        <td><label for="BillingAddress">Billing Address <span class="req">*</span></label><br />
                        <input type="text" name="BillingAddress" id="BillingAddress" class="cat_textbox" maxlength="500" value="{module_billingaddress}" /></td>
                    </tr>
                    <tr>
                        <td><label for="BillingCity">City <span class="req">*</span></label><br />
                        <input type="text" name="BillingCity" id="BillingCity" class="cat_textbox" maxlength="255" value="{module_billingcity}" /></td>
                    </tr>
                    <tr>
                        <td><label for="BillingState">State <span class="req">*</span></label><br />
                        <input type="text" name="BillingState" id="BillingState" class="cat_textbox" maxlength="255" value="{module_billingstate}" /></td>
                    </tr>
                    <tr>
                        <td><label for="BillingZip">Zipcode/Postcode <span class="req">*</span></label><br />
                        <input type="text" name="BillingZip" id="BillingZip" class="cat_textbox" maxlength="255" value="{module_billingzip}" /></td>
                    </tr>
Then of course comes the page to checkout, from the Module Templates > Registration - Buy section, which includes this nugget of code to capture/display the billing information:
<div class="item"><label>Billing Address</label><br />
    <input type="text" name="BillingAddress" id="BillingAddress" class="cat_textbox" maxlength="500" value="{module_billingaddress}" /> </div>
    <div class="item"><label>City</label><br />
    <input type="text" name="BillingCity" maxlength="255" id="BillingCity" class="cat_textbox" value="{module_billingcity}" /> </div>
    <div class="item"><label>State</label><br />
    <input type="text" name="BillingState" maxlength="255" id="BillingState" class="cat_textbox" value="{module_billingstate}" /> </div>
    <div class="item"><label>Zipcode/Postcode</label><br />
    <input type="text" name="BillingZip" maxlength="255" id="BillingZip" class="cat_textbox" value="{module_billingzip}" /> </div>
    <div class="item"><label>Country</label><br />
... I feel like I must be missing something obvious here, but can't for the life of me figure out why this information isn't being saved/updated/displayed. Help!

I have exactly the same issue. I think the problem is that the registration and edit account forms are not set up on the back-end to parse the billing or shipping information. Only the Checkout/Quote forms are.
*Edit - It would appear that ONLY the "Registration - Buy" form parses this data on the back-end. The "Registration - Quote" form does not.
My solution for now is to not have the customer enter billing and shipping details on registration, nor be able to edit it in the account section. Instead, I display the information and put a note to the customer saying that any billing and shipping address changes can be accomplished upon the next checkout.
Frustrating, as in my view, a customer should be able to edit those as necessary, and provide them up front if desired. In my situation, which is strictly a business to business ecommerce site, a customer can only see prices and add items to the cart once they are logged in, and in order to be allowed to log in, they have to be vetted by the company. However if the customer could provide billing and shipping info up front in the registration process, it would save my client some time by not having to enter those details separately for the customer in the CRM, in cases where the customer buys things on account instead of by credit card.
*Edit - actually, having those fields on the registration form will show up in the email auto-response to the customer and in the workflow notifaction to the client role responsible. My client could still see the information, reducing some work, but now the customer could be frustrated, knowing they entered those values, only to not see them show up in their account nor be allowed to edit them once they're added.
*Further edit - Even though I can manually enter the Billing Address in the CRM for the customer (can't manually add a shipping address), those values don't show up anywhere I've asked for {module_billing*}. So they can only be properly captured upon first or subsequent check-out. Then they will show up.
Mario's instructions for pre-populating the checkout form values are correct. Those {module_billing*}'s do exist and work if the data is in the CRM for the customer, as Liam said in post 7 here. I have it implemented in my checkout forms. Unfortunately the {module_billingdetails} (from Liam's link to the Module Quick Reference) does not do anything at all, and the {module_shippingaddress} cited there only grabs the street name and number.
Using the {module_home*} may work, but really, that's a kludge. As a developer you have to remember what is what, and a client, managing customers on a day to day basis (especially in my situation where it's only B2B), has to remember that Home Address in the CRM is actually Billing Address. But the Billing Address, I would assume, has to be captured anyway in the checkout for the system to work properly on the back-end. So there's potential for Home Address to get mixed up with Billing Address in the client's mind, and Billing Address, if entered into the CRM manually to get overridden by something else upon checkout. Then there might be a situation where the customer needs to enter a Home Address, but is a contractor working from home and needs the Billing Address to be the company they contract to because they use the company credit card or something. Really, just a kludge.

Account Information not displaying in iTunes

I am having an issue where the Account Information screen is not displaying correctly in iTunes. I can see some of the buttons down the right hand side for example; edit, edit payment information, change country information and so on. Some of those buttons though are just actually grey buttons with nothing written on them. Also the actual information is not showing it is just blank, there is nothing at all.
I have so far tried uninstalling and reinstalling iTunes and this didn't change anything.
I have de-authorised and re-authorised the PC and this didn't change anything.
I turned off my firewall and anti-virus but no success either.
I checked on another computer and can login with no issues and the account information is displayed with no problems.
I am running Windows Vista using Google Chrome as my web browser and testing via iTunes states my connection is fine.
Anyone have any suggestions?

I am having an issue where the Account Information screen is not displaying correctly in iTunes. I can see some of the buttons down the right hand side for example; edit, edit payment information, change country information and so on. Some of those buttons though are just actually grey buttons with nothing written on them. Also the actual information is not showing it is just blank, there is nothing at all.
I have so far tried uninstalling and reinstalling iTunes and this didn't change anything.
I have de-authorised and re-authorised the PC and this didn't change anything.
I turned off my firewall and anti-virus but no success either.
I checked on another computer and can login with no issues and the account information is displayed with no problems.
I am running Windows Vista using Google Chrome as my web browser and testing via iTunes states my connection is fine.
Anyone have any suggestions?

CIM installer - domain user account parameters not recognized

I'm trying to install a Cisco Interaction (Eim-Wim) but i have a problem. during a step installation, I can't authenticate the user. I tried some options, but not recognized by installation program. I tried with domain user and local admin, but not work. The lab is in domain and a single server. Help me.

Hi,
Please refer the below discisson on the same topic,
http://pdirequest.egain.com:8080/community/posts/list/66.page
Hope it helps,
Anand
Please rate helpful posts..

Server not recognizing access privileges

I have created new student accounts, set their privileges to read & write and copied those privileges to all enclosed folders, but my students still cannot gain access to their respective folders. I tried deleting a student account and recreating, but this didn't solve the problem. Also tried restarting server, but again, not a solution.
Any suggestions? Somewhat desperate here.
Thanks in advance!

I had to reset permissions for each account, but was able to solve the problem that way.

Account Information Not Recognized: Access is denied

Similar Messages

Maybe you are looking for