CM repository - windows share permission issue

Hello,
I have configured CM repository to point to windows share. We are running EP 7.0 Everything worked fine. The user name I used in configuring network path is - epdshare. I have chosen AclSecurityManager as Security.
However, the physical network share currently has Everyone with read/write permissions, which is a security concern of course. When removed it, all stoped working, and CM repository is not even visible. I made sure that the user used in Network path - epdshare to has full control on this share, but as long as Everyone is not there, it does not work.
It looks like Portal is trying to access the share with something else? Any idea what this user could be? Is there anything that I am doing wrong?
Thanks,
Alex

Hi Alex,
NWA should be the most convenient way to search the log files. But you can also use the [Log Viewer|http://help.sap.com/SAPHELP_NW04S/helpdata/en/57/5f1140d72dc442e10000000a1550b0/frameset.htm] inside of the Visual Admin or just navigate on the OS System to the folder /usr/sap/<SID>/<instance_number>/j2ee/cluster/server<X>/log/ and open the file defaultTrace.X.trc. You find the correct X either by comparing the file size (it should be the file that is smaller than the others) or sorting by date.
Try to reproduce the problem when you remove the group everyone and check for an error.
In special cases you can also change the log level to get more information written in the log files, but I am pretty sure you should have an error in the logs when the repository is not displayed.
Let me know if anything is unclear,
Robert

Similar Messages

Weird file renaming permission issues

Hi!
We have a file rename permission issue. Here is the background:
We created a 2008 R2 DFS namespace called UserData with Read/write share permissions for Administrators, Everyone and System. UserData has been granted NTFS permissions as follows:
Everyone (This folder only): Traverse folder / Execute files, List folder / Read data, Read attributes, Create folders / Append data
CREATOR OWNER (Subfolders and files only): Full control
SYSTEM (This folder, subfolders and files): Full control
Domain Admins (This folder, subfolders and files)
We then enabled folder redirection for users My documents folder through GPO, setting the following:
Setting: Basic - Redirect everyones folder to the same location
Target folder: Create a folder for each user under the root path
\\domain\UserData
We also unchecked Grant the user exlusive rights to documents.
So, now to the really weird behaviour. We logged on to a Windows 7 (x64) client computer with a user who gets this GPO settings and that is not local administrator on the client. The folder is redirected as expected and we can create, delete and write to
files in anyway we want. We can also rename files if we choose an entirely different name and if we choose a longer or a shorter file name,
but we cannot rename the file to something with the same letters but different casing.
Examples of what will work:
"test" to "testing"
"test" to "cool"
"test" to "COOL"
Examples of what will NOT work:
"test" to "Test"
"test" to "tesT"
"test" to "TEST"
We the get this error: "File Access Denied. You need permission to perform this action. You require permission from S-1-5-21-220..... to make changes to this file."
Eventhough I'm pretty sure the share and NTFS permissions of the share are correctly set we have of course checked all the permissions when logged in and the user has Full NTFS control and Read/Write Share permissions.
We have encountered the same problem on a customer company as well, with a different domain with no links to our domain what so ever. I have also seen similar problems from other people when trying to find the answer on internet. Here is an example:
http://social.technet.microsoft.com/Forums/en/w7itprosecurity/thread/35ced5bb-ab13-4e28-8c48-7c68ce0b775c
Anyone have any thoughts?
/Leyan

Resent discoveries:
If I log onto a Windows 7 (x86) Enterprise I face the same Issues.
If the same user logs on to one of the DFS servers holding the namespace and accesses his folder we experience
no problems renaming files.
Customer company states that all is working fine when user logs on to a Windows XP with SP3.
/Leyan

Windows file sharing issues with Leopard

One of my clients has a Mac Mini server running Leopard with all updates installed. He has 2 Windows PCs in his office (1 XP and 1 Vista) and 1 MacBook Air running Leopard.
I created two folders in /Users/Shared and created a new full (standard) user account (SMB doesn't seem to like "share only" accounts). I turned off the OS X Firewall and set the two folders to be read/write shares for the new account I created. I turned on SMB sharing in Options.
On the Windows XP machine, I can read/write to the Mac Mini's shared folders just fine, however I cannot delete files for some reason. I always get an error saying the file is locked or I don't have permission to erase it. I tried moving the share folder to different locations, thinking it was a parent folder permission issue. No dice. It doesn't seem to matter who creates the file, I cannot delete it from the Windows computer. I can delete it fine from any Mac in the office.
Any ideas?

The default behavior for the /Users/Shared folder is that you can only delete files you put in the Shared folder - this is called the "sticky bit." ie: User A saves/moves a file into Shared, User B can read/write that file but cannot delete it, User A can read/write and delete. The sticky bit can be set via Terminal.

Problem accessing Windows network - permission checking is inconsistent

I am in the process of making the move at my workplace from a Windows/Solaris environment to an exclusively-Solaris workstation environment. I have wanted to do this for a while but now that Evolution is bundled in with Solaris 10 I have finally embarked down this path.
One of things that I need to be able to do is access Windows shares on our corporate network. I am having a few issues with this using the Java Desktop system in Solaris 10. Here is a quick view of the windows network hierarchy.
Windows Network -> Sub-network -> List of machines ->
List of folders on a given machine -> List of sub-folders within a given folder and so on ....
Here is what I am trying to do.
1) Double Click 'Network Places' from the desktop.
2) When the window 'File Browser: Network Places' opens, it appears that my Solaris workstation has automatically detected the presence of a Windows network. Very slick!
3) Double click on the 'Windows Network (SMB)' icon.
4) A list of sub-networks appear. Occasionally this list is not 100% complete. ie. there are 5 sub-networks but only 2 will appear on occasion.
5) Double click the smaller network that I wish to access. The various machines within this network appear as a list of hostnames.
6) Double click on the machine that I wish to access and a list of folders on this machine appear.
7) Double click on the folder that I wish to access and a list of subfolders is presented. When I try to naviagte deeper an 'Authentication Required' window appears. I enter my username, password and domain. I also check the 'Remember password for this session' and 'Save password in keyring' options.
8) I am prompted with a 'Create Default Keyring' window asking me for a password to associate with the default keyring. I enter the same password that I entered in Step 7.
9) A list of subfolders appears. This is great. But when I attempt to navigate any deeper ... I cannot. A dialog pops up saying "The folder contents could not be displayed" with a message stating "You do not have permissions necessary to view the contents of the "foldername".
At this point, the file broswer gets in to a funny state. I try to hit the 'up' arrow to return to the folder which I could previously access but I am now greeted with a dialog claiming that I do not have permissions to access this folder. I cannot access anything past the first folder level on a given machine even though I could just a minute ago. This "funniness" clears up after some length of time. ie. if I come back in an hour, I can once again reach part 1 of step 9 without being greeted with permission errors.
Are there any SAMBA config options that I need to tweak or add to my smb.conf file to make :
1) the listing of Windows networks be more consistent
2) the permission checking to be more consistent and stable
Or does the issue lie on the Windows side of things.
Thanks in advance for any help,
Tim

Thought I would update this one myself in case anyone else was having similar problems with a baseline Sol10 install. I suspected the problem was with Samba or the GNOME Keyring Manager. I downloaded Sun's new Update Connection tool to stay on top of patches. (http://www.sun.com/download/products.xml?id=42e02045) I installed a slew of GNOME and underlying OS patches and things are working now. Pays to stay up to date. ;)

Lightroom 4 crashes when trying to open the slideshow module. I spent over three hours with both Adobe and Apple tech support and we know it is a permission issue but have not been able to get it solved. It started with the last upgrade to 10.8

Lightroom 4 crashes when trying to open the slideshow module. I spent over three hours with both Adobe and Apple tech support and we know it is a permission issue but have not been able to get it solved. It started with the last upgrade to 10.8

Back up all data.
This procedure will unlock all your user files (not system files) and reset their ownership and access-control lists to the default. If you've set special values for those attributes on any of your files, they will be reverted. In that case, either stop here, or be prepared to recreate the settings if necessary. Do so only after verifying that those settings didn't cause the problem. If none of this is meaningful to you, you don't need to worry about it.
Step 1
If you have more than one user account, and the one in question is not an administrator account, then temporarily promote it to administrator status in the Users & Groups preference pane. To do that, unlock the preference pane using the credentials of an administrator, check the box marked Allow user to administer this computer, then reboot. You can demote the problem account back to standard status when this step has been completed.
Triple-click the following line to select it. Copy the selected text to the Clipboard (command-C):
{ sudo chflags -R nouchg,nouappnd ~ $TMPDIR.. ; sudo chown -Rh $UID:staff ~ $_ ; sudo chmod -R u+rwX ~ $_ ; chmod -R -N ~ $_ ; } 2> /dev/null
Launch the Terminal application in any of the following ways:
☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
☞ Open LaunchPad. Click Utilities, then Terminal in the icon grid.
Paste into the Terminal window (command-V). You'll be prompted for your login password, which won't be displayed when you type it. You may get a one-time warning not to screw up. If you don’t have a login password, you’ll need to set one before you can run the command. If you see a message that your username "is not in the sudoers file," then you're not logged in as an administrator.
The command will take a noticeable amount of time to run. Wait for a new line ending in a dollar sign (“$”) to appear, then quit Terminal.
Step 2 (optional)
The first step should give you usable permissions in your home folder. This step will restore special attributes set by OS X on some user folders to protect them from unintended deletion or renaming. You can skip this step if you don't consider that protection to be necessary.
Boot into Recovery by holding down the key combination command-R at startup. Release the keys when you see a gray screen with a spinning dial.
When the OS X Utilities screen appears, select
Utilities ▹ Terminal
from the menu bar. A Terminal window will open.
In the Terminal window, type this:
resetpassword
That's one word, all lower case, with no spaces. Then press return. A Reset Password window will open. You’re not going to reset a password.
Select your boot volume ("Macintosh HD," unless you gave it a different name) if not already selected.
Select your username from the menu labeled Select the user account if not already selected.
Under Reset Home Directory Permissions and ACLs, click the Reset button.
Select
 ▹ Restart
from the menu bar.

Error when reading a RCDC (permission issue)

Hello,
I have created a MPR to grant right for a specific set (set 1) of user to read somes attributes (DisplayName) of a specific set of objects (set 2).
For you information this set contains in fact all objects of a custom type.
I have created a RCDC for viewing this object.
In a first time the XML template of this RCDC contains only a control for the DisplayName attribute.
<my:Control my:Name="DisplayName" my:TypeName="UocLabel" my:Caption="{Binding Source=schema, Path=DisplayName.DisplayName}" my:Description="{Binding Source=schema, Path=DisplayName.Description}" my:RightsLevel="{Binding Source=rights, Path=DisplayName}">
<my:Properties>
<my:Property my:Name="Text" my:Value="{Binding Source=object, Path=DisplayName, Mode=OneWay}" />
</my:Properties>
</my:Control>
When I try to read the object with a user belonging to the set 1, I meet the error below. However if I modify my MPR to grant right on all attributes, I am able to read the RCDC. This is why I think the error is related to a permission issue.
Error page on the FIM web portal:
Unable to process your request.
Please contact your help desk or system administrator.
> Go to Forefront Identity Manager home page
More information on the error in the Windows Event Viewer:
Requestor: urn:uuid:2dabeb0a-e780-447c-9f2b-6f715997f716
Microsoft.ResourceManagement.Service: Microsoft.ResourceManagement.WebServices.Exceptions.PermissionDeniedException: Exception of type 'Microsoft.ResourceManagement.WebServices.Exceptions.PermissionDeniedException' was thrown.
at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteGetAction(RequestType request)
at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteAction(RequestType request)
at Microsoft.ResourceManagement.WebServices.RequestDispatcher.ExecuteAction[ResponseBodyType](RequestType request)
at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request, Guid requestIdentifier, Object redispatchSingleInstanceKey, Boolean isRedispatch)
at Microsoft.ResourceManagement.WebServices.RequestDispatcher.DispatchRequest[ResponseBodyType](RequestType request)
at Microsoft.ResourceManagement.WebServices.ResourceManagementService.Get(Message request)
Does anyone have an idea of a way to solve this issue? Thank you ;)
Regards,
Serge

Finally, I found the solution. I had to add ObjectID in the list of attributes in the MPR.
If the user can't read the object id, he will not able to read the RCDC.

SOLVED--"object no longer exists" for Windows shares

If you can see a Windows share in the Finder but can't connect to it, or get the error that says the object doesn't exist, I think I've found the answer. I was trying to mount a connected Western Digital USB drive which was shared from a Windows XP machine. It was seen correctly in Finder, but I could never actually connect to it. It wasn't until recently that I discovered that I was also having a problem connecting to it from another Windows machine, and that led me to find this solution.
http://winhlp.com/node/40
If you still have the error after rebooting your Windows machine where the share resides, increase the value of 15, then reboot. I had to go to 25 to make everything work.

Kelly,
Do you do any DDL on EMP table of HR schema?
I guess, if you do any DDL on EMP, you may loose all the grants, you may need to regarnt permission again.
Jaffar

Sharer folder issue between two directly connected PC

Dear All, I have an issue regarding folder sharing. need your help to resolve this. the scenario is
two PC's are connected directly to share a folder, to open *.mdb file of a accounting software. this problem start when I moved windows XP PC's and installed windows 7 64 bit PC's. there is no compatibility issue as I run the same software on other
locations
PC A (192.168.1.200) has that *.mdb file and PC B (192.168.1.100) has to open this file through a network.
when I configured the folder share and network setting, all done well and PC B can connect with PC A and that software work well. After two days, when we start the software at PC B, its not responding when it try's to open that database file.
while analyzing, I found out that PC B can open the share folder of PC A but when open the desired database folder explore starts not responding and need to quit it by force. I also tried to share another folder of PC A but results are same.
PC A run the software with out any problem.
It seems like network issue, so I check the cable with cable tester, found it good, than I check the connectivity by ping command, it giving me <1ms time. but still change the connectors.
the hard part is that, this share folder issue arises 3-4 days a week and 2-3 days it works well, and this is happening from last 28 days. I mean, one day we start the the PC B and use the software via network, the next day we start the PC B and we don't
able to use the software,..strange.
I also change the cable connection from cross to straight as both new PC's have gigabit Ethernet but results are same.
I already contact with software company, as per them its network issue as we can use the software on local PC (PC A) and there is no error messages popup.
please help me out in this regard.
Thanks Tanveer

Hi,
Firstly, we need to identify is this file sharing or netowrking problem. If you can access to the shared folder and modify its files which locate at PC B through PC A, it indicates file sharing works with no problem.
After that, we need to check if its networking or software itself problem when reading the .mdb file.
Put the .mdb file at PC A, then using the software open it for test. If no problem, we need to use Process Monitor to capture the access trace of the software process, we should be able to find some clues.
You can access to the link below to download Process Monitor:
https://technet.microsoft.com/en-us/sysinternals/bb896645.aspx
How to capture a Process Monitor trace:
http://blogs.msdn.com/b/dswl/archive/2010/01/10/how-to-capture-a-process-monitor-trace.aspx
Learning Example:
Using Process Monitor to Troubleshoot and Find Registry Hacks:
http://www.howtogeek.com/school/sysinternals-pro/lesson5/all/
Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Roger Lu
TechNet Community Support

File permission issues

I cannot access any printer plug-ins by going the HD>Library>Printer>Epson>Inkjet route. All the plug-ins are grayed out so I cannot load them. I am attempting to add a printer attached to a windows machine. I followed all the instructions, I can see the correct plug-in, but I cannot load the plug-in.
The second permission issue is moving jpeg files to the DVD or to a windows machine on the network. I am the owner of the files and all the folders are marked read and write. I also have checked windows file sharing.
I have also done the repair permission route.
I am new to Macs, so this is probably a simple ix, it just does not show up in the searches I have made in the Help menu or support topics. Any help is greatly appreciated. Thank you.

Thanks for the tip, but I have tried every known fix listed anywhere and still am missing something somewhere. I can access the correct drivers when I connect the epson directly to the laptop and it will work. I can almost access the print drivers if I use IP Print when connecting to the printer across the workgroup. Almost, in that the drivers are no longer grayed-out, but if I select them, I still get generic print driver and it ignores the Epson driver. For some reason, if I try to install the driver for the printer while it is attached to a PC on the windows nworkgroup, using windows print, the print utility will not allow me to use the print driver. It has got to be something silly that I am missing.

Expdp fails with error ORA-39006: internal error writing on a windows share

Hi!
I need to get the following configuration working:
Linux Server (CentOS 5 32 bits) with Oracle 11.2.0.1.0
Windows Server 2003 SP2 32 bits.
On the windows server I have created a user called oracle, who is member of oinstall and dba groups. (On Linux username, and group membership is the same).
After that, I share a directory on D:\data_pump (I gave the full control of directory to oracle user). I mount the windows share on my linux as follows:
mount -t cifs //winserver/data_pump /u04/oradata/data_pump -o user=oracle,password="pass",uid=oracle,gid=oinstall
As the linux oracle user I'm capable of create and edit files, but:
I connect to my database, create the directory called DATA_PUMP pointing to my cifs mount point, and, after that, I issue the following expdp sentence:
expdp system DIRECTORY=DATA_PUMP DUMPFILE=test4.dmp LOGFILE=test4.log FULL=yes
And I get the following error:
ORA-39006: internal error
Looking at expdp log I found the following information:
ORA-39097: Data Pump job encountered unexpected error -31643
ORA-39065: unexpected master process exception in FILE
ORA-31643: unable to close dump file "/u04/oradata/data_pump/gaston4.dmp"
ORA-19510: failed to set size of 1 blocks for file "/u04/oradata/data_pump/gaston4.dmp" (block size=4096)
ORA-27045: unable to close the file
Linux Error: 5: Input/output error
Additional information: 4
Do you have any suggestions?
Thanks in advance.

Hi, see metalink:
Bug 8313127: EXPDP EXPORT TO CIFS MOUNT ON WINDOWS FROM LINUX FAILS
http://kr.forums.oracle.com/forums/thread.jspa?threadID=923398

Windows shares - content not appearing in Finder, potential workaround

After upgrading to Lion I'm having problems seeing shared Windows drives.
- Connecting as normal (apple - K) mounts the root directory as expected.
- I can navigate to a child directory, but can't see the contents of that child directory in the Finder
- However, I can see it if I navigate to it via the Terminal...
In addition, if I navigate to the child directory via the Terminal and issue "open ." a Finder window opens revealing the files. I can then go 'up' a directory to the parent and see the full listing that was not being shown before!
Obviously this is some sort of bug? I am alone in experiencing this?
Tristan

Tristan Collins wrote:
Obviously this is some sort of bug? I am alone in experiencing this?
Well I have no issue with seeing Windows shares on Win 2008 cluster servers and my wifes XP SP3 Dell. Lion does seem to take longer than SL in showing the content of some folders when first opening, but I would say that once the index for the content is complete then there is no delay from then on.

Slow Folder View When Mounting to Windows Share

I'm an intern at an educational institute and we have a graphics lab that has access to a large windows share. They use the share for storing large picture files primarily. Only individuals in certain classes have access to the drive and each student has their individual folder. Graphics shares this share with cad students so the share is called CADShare
On a windows machine when the student connects the only folder that is seen is their own which is folder name = 'firstname.lastname'
On a mac it seems to load every students folder within the share (around 400 students maybe?) and then pull every folder that it populated until the only one seen is the one you have permissions to. It will behave slightly different depending on the folder view.
If the folder is being viewed in list or detail view it will populate/unpopulate instantly and will cause the machine to 'hang' while it's doing this. But if the folder is in folder view it will only populate the full amount of folders. If you click on a folder that is supposed to be hidden it will then unpopulate that folder.
This is becoming an issue for students trying to save and access files in Adobe cs2 but it seems to be more of a problem with the finder than it is with Adobe.
Is there a way to change view settings to be more friendly to windows shares for it not to lag this much when viewing or has anyone seen anything like this?
Any thoughts or solutions would be helpful :]
Message was edited by: mcc_helpdesk

We've tried something similar to that, they actually connect using afp rather than smb?
But we've tried connecting:
afp://server/CADShare/firstname.lastname/
and
afp://server/CADShare/firstname.lastname/
It seems to connect to their share directly but it still mounts CADShare so when students browse for files through an application, for example the graphics students are using the "place" command, they experience that lag because of the volume of folders.
It seems like it might just be something our network guy should handle by either making each students folder an individual share or nesting the folders by class or instructor.
Thanks so far though, any other ideas?

Slow start of app from Windows-Share

Hi,
i have an ZFD-App which has to start an *.EXE from a Windows-Server. The command ist like \\winserver\icd\path\boxes.exe When I start this ZEN-App I have to wait longer than 30 seconds before I can see a logon-windows of this program. If I make a good old local link on my WinXP-desktop and I start this I see the logon-windows after only 2 seconds. This is e very big difference.
I tested this scenario with another EXE from another windows-share, it's the same problem.
Any suggestions?
Uwe Bassen
Hamburg
Germany

Well, if the user/workstation isn't authenticated to your windows box before
the app starts, its going to have different timeout issues (I'm not sure how
you have the app assocated).
My suggestion: copy the exe to a location that the user/workstation already
has rights to. Not sure why you have to run the app from a server the user
doesn't have rights to already.
You might be able to build in the authentication prompt into your app with a
pre-launch script (i.e. net use )
>>> On 12/21/2009 at 3:46 AM, in message
<[email protected]>,
bassen<[email protected]> wrote:
> Hi,
> i have an ZFD-App which has to start an *.EXE from a Windows-Server.The
> command ist like \\winserver\icd\path\boxes.exe When I start thisZEN-App I
> have to wait longer than 30 seconds before I can see alogon-windows of
> this program. If I make a good old local link on myWinXP-desktop and I
> start this I see the logon-windows after only 2seconds. This is e very big
> difference.
>
> I tested this scenario with another EXE from another windows-share,it's
> the same problem.
>
> Any suggestions?
>
> Uwe Bassen
> Hamburg
> Germany--
bassen----------------------------------------------------------------------
--bassen's Profile:
> http://forums.novell.com/member.php?userid=30002View this thread:
> http://forums.novell.com/showthread.php?t=396411

Unable to view files from windows share

Hi guys,
I am wondering if you can help me out. I have 10 mac ocnnected to a windows domain. Five machinies are OSX 10.5.8 and five are OSX 10.6.8. The problem I am having is I can connect to the windows share via smb but I am unable to view the files. I can connect the server and see the folder listings but I am unable to view the contents of each directory. The users permissions are fine as they can log into a windows PC an are able to access the files as needed. I have tried different user accounts and all are getting the same issue. Each account has admin rights as well. I was wondering if anyone else has seen this issue before?
Thanks in advance!

files like movies or pdf files. Under the apps section, I can't see any way to transfer files.
Also do I need to completely sync my ipad, if i click sync then after a while it says can't sync all the apps present on the ipad

Win 7 install permission issues

Hello,
I had the flash player crash, so iI uninstalled it now i can't reinstall due to permission issues. I have done the steps recommended in the troubleshooting, but has i run them, I see alot of failed operations in the dos window.

Dixit wrote:
hi satish,
thanks for reply, i know its not supported, but just trying to work as i have got win 7 installed and cant change it as its dual boot machine now with RHEL 5.3 installedThere's your solution ... install on the REHL side.
>
anyways but the issue is not due to compatibility i think... it might be because of privileges... i will definitlly try 11g R2, but still if u find any solution le me know.. as it is installed on OS means it can work on it as well right??
Thanks and regards
VD

CM repository - windows share permission issue

Similar Messages

Maybe you are looking for