LDAPException: error result (50); Insufficient access

Hi all,
I am getting the "netscape.ldap.LDAPException: error result (50); Insufficient access" during the .compare() method.Althogh the given user is authenticated properlly.
here is the code which I am using
doAuthenticate(){
     try {
          ld.connect( host, 389);
          ld.authenticate("uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot", "admin123");
          this.userdn = "uid=admin,ou=Administrators,ou=TopologyManagement,o=NetscapeRoot";
          LDAPAttribute attr = new LDAPAttribute("uniqueMember", userdn);               
          // Test for group membership
          System.out.println("log -5 ==> creating attribute");
          boolean attrMatch = ld.compare(groupdn, attr);
          // Display the test results                    
          if (attrMatch) {
               System.out.println("\nIS A GROUP MEMBER!\n");
          } else {
               System.out.println("\nIS NOT A GROUP MEMBER!\n");
          } catch (LDAPReferralException e) {
               // Ignore referrals...
          } catch (LDAPException e) {
               System.out.println(e.toString());
          }finally{
               if ((ld != null) && ld.isConnected()) {
                    try {
                         ld.disconnect();
                         System.out.println("Conection closed");
                    } catch (LDAPException e) {
                         System.out.println("Error: " + e.toString());
}Thanks

The fact that a user can authenticate does not mean they have access to anything. You need to check your ACIs. Does your user have access to do the compare?
Eric

Similar Messages

  • LDAP: error code 50 - Insufficient Access Rgiths

    Hi,
    I am newbie at Oracle Internet Directory. I hope you help me to resolve the following problem:
    When I signed in the Oracle Director Manager with user "cn=orcladmin,cn=Users,dc=localhost,dc=com" and blank password
    to create an entry (or attribute). I got error: [LDAP: error code 50 - Insufficient Access Rgiths]
    How do I resolve this problem?
    Thanks,
    QuanND

    Connecting as orcladmin requires using a password. The password has been established during installation of OID. By default from (9.0.4) on it is set to be the same password as the ias_admin password you provided during installation of the Oracle Infrastructure installation.
    Notice that there are two (2) orcladmin entries in OID.
    One cn=orcladmin is the OID superuser (same as root on UNIX) the other one is cn=orcladmin, cn=users,dc=your.default.domain
    When you login to OID using ODM and specify only orcladmin ODM assumes by default this will be cn=orcladmin (aka root)
    regards,
    --Olaf                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                       

  • Error while configuring SSL in OID 11g - LDAP 50 Insufficient Access rights

    HI,
    I am trying to configure SSL in OID 11g.As per the doc http://download.oracle.com/docs/cd/E12839_01/oid.1111/e10029/ssl.htm#CBHGBGAF ,i tried creating a Self-Signed Wallte using Fusion Middleware control,But i am getting an error LDAP 50: Insufficient access rights".I logged into Fusion Middle Ware control as Weblogic user.Is anybody faced this issue?.Thanks in advance.

    I am not sure how you tried, but I would recommend to do the following...
    1. Add the 'user1' to "OU=Franchisees,ou=People,dc=company,dc=com"
    2. Delete the 'user1' from 'OU=Internal,ou=People,dc=company,dc=com'

  • "Insufficient access privileges for operation" Export Error

    I have been working on a very important project in iMovie 09 and I went to go export it into quicktime format, and I get an error that says "The movie could not be exported because an error occurred. (Insufficient access privileges for operation )"
    I have the video files on an external drive, and I know based on the error message that it has something to do with the privileges of the video files. I just don't know how to fix it. Hopefully you can help!
    Thanks

    This may not be your problem, but you may want to check. By default, permissions are ignored on external volumes. Select the external volume with your video files on it and go to File --> Get Info. At the bottom of that window, make sure that "Ignore ownership on this volume" is checked. If it is not, check it. (You may have to click the "lock" and supply your administrator password first.)
    If it is checked, then the conflict is with some other file(s), in which case, someone else will have to help you with that.

  • Unable to catch LDAPException  error code(53) in jsp on weblogic 6.1

    When I try to authenticate a user in LDAP whose account is inactivated the following error is thrown UNWILLING_TO_PERFORM in weblogic Server log.
    My JSP file couldn't to catch this exception, where as it could catch all other exception like NO_SUCH_OBJECT
    INVALID_CREDENTIALS. It throws 500 internal server error on browser which seems awkward to the user.
    Im Using basic authentication model by setting 401 status code in response.
    I have even tried catch block with Exception, but failed to catch it.
    Could Any one plz help me out.
    Exception in detail-----
    Servlet failed with Exception
    netscape.ldap.LDAPException: error result (53); Account inactivated. Contact system administrator.; DSA is unwilling to perform
    at netscape.ldap.LDAPConnection.checkMsg(LDAPConnection.java:4852)
            at netscape.ldap.LDAPConnection.internalBind(LDAPConnection.java:1757)
            at netscape.ldap.LDAPConnection.authenticate(LDAPConnection.java:1294)
            at netscape.ldap.LDAPConnection.authenticate(LDAPConnection.java:1303)
            at netscape.ldap.LDAPConnection.bind(LDAPConnection.java:1613)
            at weblogic.security.ldaprealmv2.LDAPDelegate.authenticate(LDAPDelegate.java:851)
            at weblogic.security.ldaprealmv2.LDAPRealm.authUserPassword(LDAPRealm.java:61)
            at weblogic.security.acl.AbstractListableRealm.authInternal(AbstractListableRealm.java:186)
            at weblogic.security.acl.AbstractListableRealm.authenticate(AbstractListableRealm.java:127)
            at weblogic.security.acl.AbstractListableRealm.getUser(AbstractListableRealm.java:110)
            at weblogic.security.acl.CachingRealm.authenticate(CachingRealm.java:945)
            at weblogic.security.acl.CachingRealm.getUser(CachingRealm.java:889)
            at weblogic.security.acl.Realm.authenticate(Realm.java:200)
            at weblogic.security.acl.Realm.getAuthenticatedName(Realm.java:233)
            at weblogic.security.acl.internal.Security.authenticate(Security.java:172)
            at weblogic.servlet.security.internal.SecurityModule.checkAuthenticate(SecurityModule.java:302)
            at weblogic.servlet.security.ServletAuthentication.weak(ServletAuthentication.java:318)
            at weblogic.servlet.security.internal.BasicSecurityModule.checkAuthenticateHeader(BasicSecurityModule.java:62)
            at weblogic.servlet.security.internal.ServletSecurityManager.checkAccess(ServletSecurityManager.java:118)
            at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:2674)
            at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2427)
            at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:159)
            at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:140)
    --------------- nested within: ------------------
    weblogic.security.ldaprealmv2.LDAPRealmException: Account inactivated. Contact system administrator. - with nested exception:
    [netscape.ldap.LDAPException: error result (53); Account inactivated. Contact system administrator.; DSA is unwilling to perform]
            at weblogic.security.ldaprealmv2.LDAPDelegate.authenticate(LDAPDelegate.java:885)
            at weblogic.security.ldaprealmv2.LDAPRealm.authUserPassword(LDAPRealm.java:61)
            at weblogic.security.acl.AbstractListableRealm.authInternal(AbstractListableRealm.java:186)
            at weblogic.security.acl.AbstractListableRealm.authenticate(AbstractListableRealm.java:127)
            at weblogic.security.acl.AbstractListableRealm.getUser(AbstractListableRealm.java:110)
            at weblogic.security.acl.CachingRealm.authenticate(CachingRealm.java:945)
            at weblogic.security.acl.CachingRealm.getUser(CachingRealm.java:889)
            at weblogic.security.acl.Realm.authenticate(Realm.java:200)
            at weblogic.security.acl.Realm.getAuthenticatedName(Realm.java:233)
            at weblogic.security.acl.internal.Security.authenticate(Security.java:172)
            at weblogic.servlet.security.internal.SecurityModule.checkAuthenticate(SecurityModule.java:302)
            at weblogic.servlet.security.ServletAuthentication.weak(ServletAuthentication.java:318)
            at weblogic.servlet.security.internal.BasicSecurityModule.checkAuthenticateHeader(BasicSecurityModule.java:62)
            at weblogic.servlet.security.internal.ServletSecurityManager.checkAccess(ServletSecurityManager.java:118)
            at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:2674)
            at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2427)
            at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:159)
            at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:140)
    ..so on

    It would worth if you take a look to the access log file, and see what error code is returning your operation. I detected that when you perform an ldapsearch using a user with expired password (with DS 5.2, explicitly passwordExpirationTime set to 19700101000000Z in my case) the command returns "ldap_search: DSA is unwilling to perform"
    jair@riscl~ $ ldapsearch -b "o=isp" -D "uid=RRJA2829,ou=people,o=affiliates,o=isp" -w met999 "uid=admin"
    ldap_search: DSA is unwilling to perform
    jair@riscl~ $ echo $?
    53And the access log shows (LDAP_SUCCESS for BIND operation):
    [23/Jun/2009:15:16:14 -0500] conn=1847 op=-1 msgId=-1 - fd=48 slot=48 LDAP connection from 127.0.0.1 to 127.0.0.1
    [23/Jun/2009:15:16:14 -0500] conn=1847 op=0 msgId=1 - BIND dn="uid=RRJA2829,ou=people,o=affiliates,o=isp" method=128 version=3
    [23/Jun/2009:15:16:14 -0500] conn=1847 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=rrja2829,ou=people,o=affiliates,o=isp"
    [23/Jun/2009:15:16:14 -0500] conn=1847 op=1 msgId=2 - need new password
    [23/Jun/2009:15:16:14 -0500] conn=1847 op=1 msgId=2 - RESULT err=53 tag=101 nentries=0 etime=0
    [23/Jun/2009:15:16:14 -0500] conn=1847 op=2 msgId=3 - UNBIND
    [23/Jun/2009:15:16:14 -0500] conn=1847 op=2 msgId=-1 - closing - U1
    [23/Jun/2009:15:16:15 -0500] conn=1847 op=-1 msgId=-1 - closed.So, it is possible that your code doesn't catch the exception because the bind operation is returning code 0 (LDAP_SUCCESS) and for some other reason weblogic is receiving a second code 53 which is thrown by the server and not catched by your code, I really don't know if it is possible, is just what comes to my mind right now.
    I also made a test with java using the same user with expired password and couldn't catch any exception like in your case
    import java.util.Hashtable;
    import javax.naming.directory.*;*
    *import javax.naming.ldap.*;
    import javax.naming.*;
    public class Password {
       public static void main (String args[]) {
          LdapContext ctx = null;
          String userid = "uid=RRJA2829,ou=people,o=affiliates,o=isp";
          String passwd = "met999";
          try {
             Hashtable env = new Hashtable();
             env.put("java.naming.factory.initial", "com.sun.jndi.ldap.LdapCtxFactory");
             env.put("java.naming.provider.url", "ldap://riscl:389/");
             env.put("java.naming.security.principal", userid);
             env.put("java.naming.security.credentials", passwd);
             ctx = new InitialLdapContext(env, null);
          } catch (AuthenticationException e) {
                System.out.println("=> "  +e.getMessage()+  " <=");
          } catch (NamingException ne) {
             System.out.println("=> "  +ne.getMessage()+  " <=");
    }and the logs showed:
    [23/Jun/2009:15:32:41 -0500] conn=43 op=-1 msgId=-1 - fd=52 slot=52 LDAP connection from 127.0.0.1 to 127.0.0.1
    [23/Jun/2009:15:32:41 -0500] conn=43 op=0 msgId=1 - BIND dn="uid=RRJA2829,ou=people,o=affiliates,o=isp" method=128 version=3
    [23/Jun/2009:15:32:41 -0500] conn=43 op=0 msgId=1 - RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=rrja2829,ou=people,o=affiliates,o=isp"
    [23/Jun/2009:15:32:42 -0500] conn=43 op=-1 msgId=-1 - closing - B1
    [23/Jun/2009:15:32:42 -0500] conn=43 op=-1 msgId=-1 - closed.but in this case LDAP is not returning the code 53 "UNWILLING TO PERFORM" to java app in the way it did to ldapsearch.
    Hope it helps.
    BR,
    jairsinho

  • "CreateUser Failed" / error result (1); Operations error

    Good afternoon,
    I'm still having problems adding domains or users through the ida.
    specs: (all NT 4)
    Messaging server 5.1
    Admin Server 4.2
    Directory Server 4.13
    When trying to create a user for an existing(working) domain, the error message that comes up through the ida is this:
    Status: CreateUser
    Failed:
    netscape.ldap.LDAPException: error result (1); Operations error
    [Continue]
    At that moment, the following error comes up in the ldap access log. The full cut is below. Any ideas why it won't enter the a user into the ldap database?
    [17/Nov/2004:12:51:45 -0800] conn=134 op=28 ADD dn="uid=testing,ou=people,o=our.domain,o=our.domain"
    [17/Nov/2004:12:51:45 -0800] conn=134 op=28 RESULT err=1 tag=105 nentries=0 etime=0
    This is what happens when using 'imadmin user create':
    D:\iPlanet\Server5\ndacli\bin>imadmin user create
    Enter login ID: [email protected]
    Enter login domain: our.domain
    Enter iDA server port: 8080
    Enter login password: ****
    Enter iDA server host name: chinook.our.domain
    Enter user's login ID: testbob
    Enter user's first name: testbob
    Enter user's last name: test-bob
    Enter user's password: test
    [email protected]: create user failed:
    error result (1); Operations error
    D:\iPlanet\Server5\ndacli\bin>
    Thanks in advance for any help.
    -Josh
    Full cut from access log:
    [17/Nov/2004:12:51:45 -0800] conn=127 op=25 BIND dn="uid=ServiceAdmin,ou=People,o=our.domain,o=our.domain" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=127 op=25 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=127 op=26 BIND dn="" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=127 op=26 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=129 op=24 BIND dn="uid=NDAUser,ou=config,o=our.domain" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=129 op=24 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=129 op=25 SRCH base="dc=ca,o=internet" scope=0 filter="(|(objectclass=*)(objectclass=ldapsubentry))"
    [17/Nov/2004:12:51:45 -0800] conn=129 op=25 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=125 op=28 BIND dn="uid=NDAUser,ou=config,o=our.domain" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=125 op=28 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=125 op=29 SRCH base="o=our.domain" scope=0 filter="(objectclass=*)"
    [17/Nov/2004:12:51:45 -0800] conn=125 op=29 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=125 op=30 BIND dn="" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=125 op=30 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=129 op=26 SRCH base="dc=bc,dc=ca,o=internet" scope=0 filter="(|(objectclass=*)(objectclass=ldapsubentry))"
    [17/Nov/2004:12:51:45 -0800] conn=129 op=26 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=130 op=39 BIND dn="uid=NDAUser,ou=config,o=our.domain" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=130 op=39 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=130 op=40 SRCH base="o=our.domain" scope=0 filter="(objectclass=*)"
    [17/Nov/2004:12:51:45 -0800] conn=130 op=40 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=130 op=41 BIND dn="" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=130 op=41 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=129 op=27 SRCH base="dc=ca,o=internet" scope=0 filter="(|(objectclass=*)(objectclass=ldapsubentry))"
    [17/Nov/2004:12:51:45 -0800] conn=129 op=27 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=126 op=25 BIND dn="uid=NDAUser,ou=config,o=our.domain" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=126 op=25 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=126 op=26 SRCH base="o=our.domain" scope=0 filter="(objectclass=*)"
    [17/Nov/2004:12:51:45 -0800] conn=126 op=26 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=126 op=27 BIND dn="" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=126 op=27 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=129 op=28 SRCH base="dc=bc,dc=ca,o=internet" scope=0 filter="(|(objectclass=*)(objectclass=ldapsubentry))"
    [17/Nov/2004:12:51:45 -0800] conn=129 op=28 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=131 op=24 BIND dn="uid=NDAUser,ou=config,o=our.domain" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=131 op=24 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=131 op=25 SRCH base="o=our.domain" scope=0 filter="(objectclass=*)"
    [17/Nov/2004:12:51:45 -0800] conn=131 op=25 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=131 op=26 BIND dn="" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=131 op=26 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=129 op=29 SRCH base="o=our.domain,o=our.domain" scope=0 filter="(|(objectclass=*)(objectclass=ldapsubentry))"
    [17/Nov/2004:12:51:45 -0800] conn=129 op=29 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=129 op=30 BIND dn="" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=129 op=30 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=134 op=24 BIND dn="uid=ServiceAdmin,ou=People,o=our.domain,o=our.domain" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=134 op=24 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=135 op=24 BIND dn="uid=NDAUser,ou=config,o=our.domain" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=135 op=24 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=135 op=25 SRCH base="dc=ais,dc=bc,dc=ca,o=internet" scope=0 filter="(objectclass=*)"
    [17/Nov/2004:12:51:45 -0800] conn=135 op=25 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=135 op=26 BIND dn="" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=135 op=26 RESULT err=0 tag=97 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=134 op=25 SRCH base="dc=ais,dc=bc,dc=ca,o=internet" scope=0 filter="(|(objectclass=*)(objectclass=ldapsubentry))"
    [17/Nov/2004:12:51:45 -0800] conn=134 op=25 RESULT err=0 tag=101 nentries=1 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=134 op=26 SRCH base="o=our.domain" scope=2 filter="(|([email protected])([email protected]))"
    [17/Nov/2004:12:51:45 -0800] conn=134 op=26 RESULT err=0 tag=101 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=134 op=27 SRCH base="o=our.domain" scope=2 filter="(|([email protected])([email protected]))"
    [17/Nov/2004:12:51:45 -0800] conn=134 op=27 RESULT err=0 tag=101 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=134 op=28 ADD dn="uid=testing,ou=people,o=our.domain,o=our.domain"
    [17/Nov/2004:12:51:45 -0800] conn=134 op=28 RESULT err=1 tag=105 nentries=0 etime=0
    [17/Nov/2004:12:51:45 -0800] conn=134 op=29 BIND dn="" method=128 version=3
    [17/Nov/2004:12:51:45 -0800] conn=134 op=29 RESULT err=0 tag=97 nentries=0 etime=0

    Well if I open the console and open the Directory Server, then click on the Database in the configuration tree, then the 'Settings' tab, the 'Make database read-only' box is not checked. I know this is the dumb-ass way of checking and I've learnt not to trust the console any more than a one-night stand in Bangkok, so how would I go about properly checking that it hasn't turned read-only on me?
    The only changes that would have affected the acl in any way would have been recent admin password changes, but these have been reversed.

  • Ecm11g sitestudio:insufficient access to contributor mode

    hi All,
    I am new comer for wcm, I am using ecm11.1.1.4 sitestudio on winxp, I enabled sitestudio,ssxa, sitestudio publisher components, I updated jdev11.1.1.4 with zip file under Oracle_ECM1\ucm\Distribution, I followed the steps in http://download.oracle.com/docs/cd/E17904_01/doc.1111/e13650/ssxa_creatingsites.htm, while when I came to the step of the following:
    3.2.12 Adding a Placeholder to the Home Page
    15.Click the Switch Placeholder Definition Role value, and select the admin security role from the drop-down list.
    In this step, I can't find "Switch Placeholder Definition Role" in my SiteStudioDemo.xml, so I jumped over this step, but when I run the startSiteStudioDemo.jspx, press ctrl+shift+F5, login with weblogic/weblogic1, IE displayed an error message showing insufficient access to create placeholder, the wls startup console showed the following message:
    ================
    intradoc.common.ServiceException: !csUserInsufficientAccess,weblogic
    at intradoc.server.ServiceRequestImplementor.buildServiceException(Servi
    ceRequestImplementor.java:2115)
    at intradoc.server.Service.buildServiceException(Service.java:2260)
    at intradoc.server.Service.createServiceExceptionEx(Service.java:2254)
    at intradoc.server.ServiceSecurityImplementor.validateSecurityPrivilegeL
    evel(ServiceSecurityImplementor.java:813)
    at intradoc.server.ServiceSecurityImplementor.globalSecurityCheck(Servic
    eSecurityImplementor.java:364)
    at intradoc.upload.UploadSecurityImplementor.globalSecurityCheck(UploadS
    ecurityImplementor.java:57)
    at intradoc.server.Service.globalSecurityCheck(Service.java:2671)
    at intradoc.server.ServiceRequestImplementor.doRequest(ServiceRequestImp
    lementor.java:678)
    at intradoc.server.Service.doRequest(Service.java:1890)
    at intradoc.server.ServiceManager.processCommand(ServiceManager.java:435
    at intradoc.server.IdcServerThread.processRequest(IdcServerThread.java:2
    65)
    at intradoc.server.IdcServerThread.run(IdcServerThread.java:160)
    ==========================
    Since I didn't finish step 3.2.12.15 mentioned above, I doubt that was the reason for the issue, the point is why I couldn't see "Switch Placeholder Definition Role" when I edited SiteStudioDemo.xml?
    Best regards

    Hi Srinath,
    Thank you very much for your answer.
    To be sure, the issue is the following :
    [localhost oracle /u01/app/oracle/product/Middleware/user_projects/domains/webcenter/bin]$ <Jan 27, 2012 6:47:16 AM PST> <Error> <HTTP> <BEA-101020> <[ServletContext@24412361[app:pocIaEnterpriseApplication module:pocIA-Project1-context-root path:/pocIA-Project1-context-root spec-version:2.5]] Servlet failed with Exception
    java.lang.IllegalArgumentException: The file weblogic.jsp.wlw.util.filesystem.mds.MDSFile@1da7214 is not a source file
    at weblogic.jsp.internal.CPL.addSourceFile(CPL.java:632)
    at weblogic.jsp.internal.CPL.addSourceFiles(CPL.java:616)
    at weblogic.servlet.jsp.JavelinxJSPStub.compilePage(JavelinxJSPStub.java:140)
    at weblogic.servlet.jsp.ResourceProviderJavelinxJspStub.compilePage(ResourceProviderJavelinxJspStub.java:78)
    at weblogic.servlet.jsp.JspStub.prepareServlet(JspStub.java:256)
    Truncated. see log file for complete stacktrace
    >
    <Jan 27, 2012 6:47:16 AM PST> <Notice> <Diagnostics> <BEA-320068> <Watch 'UncheckedException' with severity 'Notice' on server 'SSXA_server1' has triggered at Jan 27, 2012 6:47:16 AM PST. Notification details:
    WatchRuleType: Log
    WatchRule: (SEVERITY = 'Error') AND ((MSGID = 'WL-101020') OR (MSGID = 'WL-101017') OR (MSGID = 'WL-000802') OR (MSGID = 'BEA-101020') OR (MSGID = 'BEA-101017') OR (MSGID = 'BEA-000802'))
    WatchData: DATE = Jan 27, 2012 6:47:16 AM PST SERVER = SSXA_server1 MESSAGE = [ServletContext@24412361[app:pocIaEnterpriseApplication module:pocIA-Project1-context-root path:/pocIA-Project1-context-root spec-version:2.5]] Servlet failed with Exception
    java.lang.IllegalArgumentException: The file weblogic.jsp.wlw.util.filesystem.mds.MDSFile@1da7214 is not a source file
    at weblogic.jsp.internal.CPL.addSourceFile(CPL.java:632)
    at weblogic.jsp.internal.CPL.addSourceFiles(CPL.java:616)
    at weblogic.servlet.jsp.JavelinxJSPStub.compilePage(JavelinxJSPStub.java:140)
    at weblogic.servlet.jsp.ResourceProviderJavelinxJspStub.compilePage(ResourceProviderJavelinxJspStub.java:78)
    at weblogic.servlet.jsp.JspStub.prepareServlet(JspStub.java:256)
    at weblogic.servlet.jsp.JspStub.prepareServlet(JspStub.java:216)
    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:243)
    at weblogic.servlet.jsp.ResourceProviderJspStub.execute(ResourceProviderJspStub.java:59)
    at weblogic.servlet.internal.ServletStubImpl.onAddToMapException(ServletStubImpl.java:416)
    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:326)
    As JP says, I have followed the official tutorial and some configurations seem to be obsolete because I can't find it in JDeveloper.
    Do you know if Oracle will publish an updated tutorial ?
    Thank you,
    Romain.
    Edited by: 910491 on 27 janv. 2012 06:43

  • Insufficient access rights registering Oracle Directory Integration Server

    Hi all!
    following steps I´ve done to use the Oracle Directory Integration Server.(I´ve installed Oracle 10g infrastructure - OID is running - I´m also able to apply successful with ODM and orcladmin account)
    - oidctl connect=mydb1 server=odisrv instance=1 stop
    - odisrvreg -h localhost -p 389 -D cn=orcladmin,cn=Users,dc=localhost;dc=com -w ,pass
    where pass is the password of orcladmin.
    -> now I get the following error:
    registering..
    Error javax.naming.NoPermissionException [LDAP:error code 50: Insufficient Access Rights]; remaining name 'cn=odisrv+orclhostname=maschine,cn=odi,cn=oracle internet directory' !
    Any idea ??
    Thanks for all help & comments.

    I have gone through the documentation for creating the script. But there is one thing which I am not able to understand i.e. Subscription Parameters.
    Can anyone tell me the use of subscription parameters? What is the role of subscription parameters in Oracle Lite and External Authentication.
    Regards
    Kapil

  • Error when changing BPM: "Insufficient access privileges"

    Hello, Logic Express gurus:
    I am just a lowly fitness instructor trying to mix her own music (self taught DJ). When changing the BPM here's what I do:
    I double click on the song track, then from the window that pops up, I click on the "Factory" pull down menu, then choose "Temp and Pitch Machine". When I change the BPM to the desired tempo and click "Process & Paste", I get the following error:
    "Insufficient access privileges for operation (Result code -5000)", then another error stating:
    "Error when creating temp file!"
    It used to work beautifully. Can anyone assist me? Thanks.

    Thanks for the reply, Matt. I tried your suggestion, but it did not make a difference in the tempo. I am bringing in MPEGs, by the way.
    My method was working fine until I began getting this error message. Any further suggestions from you or anyone?

  • Keep Receiving: Error is: 'Insufficient access rights to perform the operation' When running script

    Hello. I have a powershell script I run in our domain to disable AD accounts. Part of that also removes the users from all AD groups. That part of my script however keeps throwing up this Error is: 'Insufficient access rights to perform the operation'
    error. 
    Now from our Exchange server if I run this script with powershell, things work fine. But running it on the domain controller is when I get this error. Thoughts? 

    Thanks Anna!
    I was able to add this code below in to the script where it kept erroring out and it then worked. I had to point it to a different DC then it was running on. 
    –Server comp1.test.server.com
    Thanks again!

  • Error -5000 Insufficient Access Privileges - Can anyone help?

    Hi, I have been using logic since version 4.1 and have never had this problem. About 50% of the files I import or audio I record have problems when using the Audio editor in logic.. I can't do simple things like Normalize, Fade in/out/, Gain, Time & Pitch etc... All i keep getting back is 'Error -5000 Insufficient Access Privileges For Operation'. I've checked the files are on read & write however I cannot figure out why it will not let me do anything to the audio.. Any advice appreciated! Kai P.S I've updated to the latest Version of Logic Pro 7.2

    You should run "repair permissions" for your hard drives.
    Check the Apple Help manual on exactly how to do this,it's not hard to do.
    This is not a Logic Issue,but a file management issue...Access privileges is a term to describe what access level you have on each file on your computer.If you don't have write access,you cannot edit the file.
    I hope this helps,
    noeqplease

  • PAB_CMD_GET_PABS returns ldap error: Insufficient access

    hi when i run the messenger express web interface, whenever I do anything that tries to acess the address book I get:- PAB_CMD_GET_PABS returns ldap error: Insufficient access
    can anyone help me ?

    Thanks for your reply, the cn was set to msg-admin-4 so I granted that user access to the o=pab area in ldap and it is now working ok, except for the fact that this system is used witha proprietory system called campus pipeline as well which stores its personal addresses elsewhere in the ldap, and when I do a directory lookup, it returns all the matching email addresses in everybodys personal address lists!
    Is there any support for compiling groups from the global ldap search ? or is this a personal address book only [eice of software?                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           

  • Unable to import pab ldif file. Insufficient Access

    I am in the process of upgrading from iMS 5.2 w/iDS 4.16 on an NT box to iMS 5.2 w/iDS 5.1 on Solaris 9.
    And , yes I am new to solaris, but that is another story.....
    I have successfully installed solaris, iDS 5.2, run the ims_dssetup.pl script, installed iMS 5.2 servers, and gotten everyting to work. I have successfully imported my users by using .ldif files. My problem is that when I try to import the pab entries from an ldif file, all the entries get rejected with the error "Insufficient Access".
    I should add that I am doing this on a SunFire V210 with no video card, mouse or keyboard. In other words through the mgmt port and using a windows workstation to access the administration and directory servers.
    I'm at wits end.... do I go left or right?
    Thanks in advance..

    I am logging into the administration server from my windows workstation as admin (administration server user) and i believe this to be the same user as the configuration directory user admin. I am opening the server group and opening the directory server window. I then go to the configuration tab and click on Console > Import database. I then select the file on my local windows workstation(choosing one on the server seems to not be an option) and click ok.
    it then procedes to reject the entries.
    I did try to do an ldapadd -d DirectoryManager -w password -f filename.ldif from the ldap server instance directory, but got basically the same results..
    What am I doing wrong?

  • Insufficient Access Rights when trying to modify send as permissions on a public folder

    Where I work, we have 2 mailbox database servers and 2 cas servers on Exchange 2010, upgraded from Exchange 2003. We are finding that when trying to grant a user send as rights to a publlic folder we are getting an Insufficient Access Rights error. The
    bizzare thing is for one particluar folder we can amend the send as rights with no issue on one of the cas servers but not the other cas or either db servers.
    You would have thought if it was a user permissions issue i.e the adminsitrator not having sufficent rights it would fail on every server and likewise if it was a problem with the folder itself, why is it working on one of the cas servers? Also on
    the one server this particluar folder does allow us to amend the rights, when we try to amend others we get the same error 
    If anyone has come accross this before and knows a fix please share it.
    Thanks

    Hi,
    Please check the ownership of the affected public folder to make sure it points to the right server.
    Here is a similar thread which may help you, please following the suggests in this thread to check result.
    https://social.technet.microsoft.com/Forums/office/en-US/0960b944-82b2-42f1-b438-a7d57b7ab783/insuffaccessrights?forum=exchangesvrgenerallegacy
    Best regards,
    Belinda Ma
    TechNet Community Support

  • 49 - Invalid Credentials vs. 50 -Insufficient Access

    Need help understanding the difference between error codes
    49 - Invalid Credentials and 50 -Insufficient Access
    I'm getting a 50 - Insufficient Access when I'm in a "chaining" process and receive it on the target server. I've followed the instructions for chaining and am in need of some help. Also, where can I go to get detailed explanations for the error codes. My Admin manual does not do a good job of explaning.

    These are ldap result codes and actually imply what they are saying. To simplify think of these as
    49 - incorrect password
    50 - permission denied
    With regards to chaining, have you looked at the documenation and followed all the required steps such as creating the proxy identity and required ACI's on the target/remote server?
    http://docs.sun.com/source/817-7613/suffixes.html#wp19889
    An explaination of the ldap result codes can be found here
    http://docs.sun.com/source/817-6707/resultcodes.html
    Regards,
    -Wajih

Maybe you are looking for