Unable to set site permissions for AD group

Hello,
I have upgraded TFS from 2012 to 2013 Update 2 and using SharePoint SP1.
The TFS server is installed in Domain A which has Trust to Domain B (domain B doesnt have trust to domain A). User account that the TFS runs under is from Domain B, also application pool in IIS runs under account from Domain B.
Problem is that i cannot add domain groups from Domain A to the site permissions, i can add users but not the groups.
The error i get when adding domain group from Domain A: "The user does not exist or is not unique"
Does anybody have that or had this kind of problem?

It is the Application Pool account making the query to retrieve the groups, so you would need to establish a trust from Domain B -> A.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Similar Messages

206 unable to set alert only for certain group

Hi,
is it a symbian unwanted feature that user is unable to set Nokia 206
profile to alert for certain group (even though this kind of functionality is
available on this phone)?
To be more precise user is able to set profile to alert only for certain
group but this setting has no effect (phone rebooted, groups recreated, etc. no effect)
This feature has been available and workin in previous Nokia phones
since last decace - is it a software quality issue or what.
Best regards,
Hez

It is the Application Pool account making the query to retrieve the groups, so you would need to establish a trust from Domain B -> A.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Setting file permissions for 'wheel' group files

I have a bunch of files I copied from my PC when I made the transition to my Mac. I'm having problems moving or backing up many of the files apparently because the Mac has set the group for these files to 'wheel' and I'm not sure how to change them back. My efforts to chown or chgrp the files always result in "Operation not permitted" error messages.
I have been able to select a file at a time in the finder and use the get-info option to change the permissions, but I need to do this for thousands of files and it takes too long manually.

mpender wrote:
I have been able to select a file at a time in the finder and use the get-info option to change the permissions, but I need to do this for thousands of files and it takes too long manually.
Yes, you need a global fix. Download BatChmod Read the online documentation and online help. Let us know.
-mj

[SOLVED] setting up permissions for mounted usb devices

Hi all,
I've been having the following problem when mounting my external hd: in order to mount the external hd I created a folder /mnt/usbstick/ giving permissions to a non-root user to read the files/directories in this folder (using chmod); however, after I mount the external hd, the set of permissions for /mnt/usbstick/ change so that a non-root user cannot read the mounted files in /mnt/usbstick. This is a problem for me because, when I copy a file from the external hd to the non-root home folder, the copied file can only be read by the root user.
Do you know how I can solve this problem? Should I write a udev rule and place it at /etc/udev/rules.d/? Or should I simply add the non-root user to a specific group from /etc/group? Any ideas?
Thanks!
Last edited by falsum (2010-05-08 09:21:59)

You could try adding an entry for your usb device in /etc/fstab and specify the option user to let non-superusers mount it.
Here's an example of an entry for my external HD. I'm sure there are probably other (and better) ways to do this but it works for me.
UUID=4376-0BFB /media/FIRELITE vfat rw,user,noauto,async 0 0
Nice howto found on the wiki: http://wiki.archlinux.org/index.php/Fstab

How do we set the permissions for....

Using Acrobat 9, Setting permissions is very confusing!
How do we set the permissions for document so that:
-- the end user needs no password
-- Printing: Allowed
-- Changing the Document: Not Allowed
-- Doument Assembly: Not Allowed
-- Content Copying: Not Allowed
-- Content Copying for Accessability: Not Allowed
-- Page Extraction: Not Allowed
-- Commenting: Allowed
-- Filling of Form Fields: Allowed
-- Signing: Not Allowed
-- Dreating of Template Pages: Not Allowed

Not possible. If you allow filling in forms you must allow signing. BTW, while it is nice to be able to set permissions anything that depends upon passwords that you set is easily overcome by third party utilities. Don't do anything that really depends upon these permissions. If you want to set permissions using the Document Properties Dialog box (control D), then click on the Security button. In the Security Method Dialog box, select password security and fill it out as you need.

When setting up permissions for application files--URGENT

Hello All,
when setting up permissions for application files,
Is this following permisson appropriate?
If application files are owned by a single owner,
that owner should be the oracle user.
DN

Here is my question again.
when setting up permission for application file, which permission is
appropriate?
a) If application files are owned by a sigle owner,that owner should be oracle
user.
b) Application files should be owned by oracle user
c) Application files should be owned by single user.

Unable to set import lock for software component version

Hi team,
While importing object (.tpz) file into integration repository we are getting error message as below.
======
Unable to set import lock for software component version <XXXX>-COMMON,1.0 of <XXX>.com because user <userid> is currently importing data to this component
try again once user <userid> has finished importing data
=======
We checked with the user and found he is not doing any activity in fact he logged off. the developer wants to import and how do we terminate this import attement and proceed with new importing of the same object
We wan't to avoid cache refresh as this is production environment
We already performed clear SLD data cache with in the IR not for whole.
Thanks
Vijay

Hi Vijay,
Thefollowing threads speak about the locking issues with the IR objects .Hope this will help you out in resolving the issue.
http://help.sap.com/saphelp_erp2005/helpdata/EN/93/a3a74046033913e10000000a155106/content.htm
Internal lock version management : Unable to copy objects
Thanks,
Ram.

Unable to set node credentials for /LDAPv3/127.0.0.1 with record name n`.

When starting Server Preferences, I receive a window with the following text:Unable to set node credentials for /LDAPv3/127.0.0.1 with record name n`. There may be an error with the Open Directory Service.
This started to occur after I used the command changeip to change the ip of the service.
I've tried (Re)starting Open Directory Service, but that doesn't resolve it.
Does anyone know how I can resolve this error? I'd like to be able to user Server Preferences again!

One of our servers (10.6.8) that had been running for months suddenly started generating that error message when trying to access Server Preferences. Workgroup Manager, which seems to use the same login information, accessed just fine. We tried deleting access information in Keychain, to no avail. What finally worked for US was:
- Via Server Admin, (in Open Directory > Settings > General) change the Role: Open Directory from Master to Standalone
- This (for us) then restored access to Server Prefs
- Use Server Admin to change the Role back to Master
Warnings - 1) backup first 2) you will have to reinstall the master password, and 3) ALL accounts were lost and had to be recreated.

Rpc.nfsd: unable to set any sockets for nfsd

Hi all!
I have problem..
[root@myhost ~]# /etc/rc.d/nfs-server restart
:: Stopping rpc.mountd daemon [FAIL]
:: Mounting nfsd filesystem [DONE]
:: Exporting all directories [DONE]
:: Starting rpc.nfsd daemon [BUSY]
rpc.nfsd: unable to resolve ANYADDR:nfs to inet address: Servname not supported for ai_socktype
rpc.nfsd: unable to set any sockets for nfsd
My configs:
- daemons in rc.conf
DAEMONS=(syslog-ng crond network @adsl @iptables @sshd @rpcbind @nfs-common @nfs-server @alsa @cups !deluged hal @inadyn !netfs slim)
- /etc/hosts.allow (server: 192.168.2.1, client: 192.168.2.2)
sshd: 192.168.2.2/255.255.255.255
ALL: 192.168.2.2/255.255.255.255
- /etc/exports
/home/kate/Torrents/ 192.168.2.2/255.255.255.255(rw,fsid=0,no_subtree_check,async)
Any ideas?
Last edited by gard (2010-09-11 07:18:35)

I have same problem and i'm using networkmanager (notebook, wifi). My DAEMONS section on rc.conf:
DAEMONS=(... networkmanager alsa kdm cups bluetooth rpcbind nfs-common nfs-server netfs autofs ...)
When i try automatically connect on boot, i have same problem (but network work now without X starts, after console login).
When i try
[stepan@stepan-nb ~]$ sudo /etc/rc.d/nfs-server restart
:: Stopping rpc.mountd daemon [FAIL]
:: Stopping rpc.nfsd daemon [DONE]
:: Unexporting all directories [DONE]
:: Mounting nfsd filesystem [DONE]
:: Exporting all directories [DONE]
:: Starting rpc.nfsd daemon [DONE]
:: Starting rpc.mountd daemon [DONE]
after boot and login, everything works, but on boot nfs-server init script fails to start.
Last edited by Tapan (2010-01-06 19:22:25)

Unable to set parent context for this record.

Has anyone seen this error when doing an import? In my case I was doing an import to the Opportunity Product record.
the full error message is
Unable to set parent context for this record. Please make sure that the parent record is valid and you have permission to modify the parent record.
I was attempting to populate one field on the record with data.

Hi,
Was there a resolution to this that you found, cause it's driving me crazy.
We've resorted to manually created a product in OnDemand with an EUI and exported it but we can't reimport it to overwrite it as we get the same error message "Unable to set parent context for this record"
The opty and the product both exist as they got manually created, although when you export them there are now 2 of them (I see this in reporting as well????)
Besides the Opty-Product External ID what else is required to do an import to overwrite?
regards
Alex

Problem with XI objects transport - Unable to set import lock for SWC

Hi guys!
I try to import objects from dev to qa but I'm getting following error:
Unable to set import lock for software component version SWC_xxxx , 1.0 of company.com because user OSALUDEW is currently importing data to this component Try again once user OSALUDEW has finished importing data
The problem is, I'm not importing anything.. Well, I try to import, but something is hanging there from previous time.
How to solve this issue?
Thank you!
Olain

Well,
I closed all the applications - repositories (dev, qa), directories (dev, qa), then started qa repository again and imported the objects successfully
....hmmm....
Olian

Set windows permissions for folder

My labview app is being installed to the prog files dir for the app by an installer created by the LV Dev System. i encounter a problem when trying to store a config file for the app to the directory during user customization of settings after app installation because the file I am trying to update is read only due to win 7 defaults. I try to set the permissions for the folder programmatically, but it does not change the folder to a NOT read only one. What is the trick here? Do I need to put my config files in another directory somewhere or is ther a way to change the folder settings so I can create temp files in that folder?

Creating temporary config files in Program Files is not very good practice. I would do it in the public user folder.
How are you setting the parameters?
Did you use the following?
http://zone.ni.com/reference/en-XX/help/371361J-01/glang/set_permissions/
http://zone.ni.com/reference/en-XX/help/371361J-01/glang/setting_permissions/
Excerpt from the link above:
You can use permissions to change only write permissions for users (bit 7); the operating system ignores all other changes to the bits.
Beginner? Try LabVIEW Basics
Sharing bits of code? Try Snippets or LAVA Code Capture Tool
Have you tried Quick Drop?, Visit QD Community.

Has anyone encounter this "unable to set node credentials for /LDAPv3"?

Install and updated the Macmini server to 10.6.5. It working fine until try to access the Server Preferences and error message "unable to set node credentials for /LDAPv3/127.0.0.1 with the record name **." Looking at the logs and has servermgr_accounts got error 5203 trying to auth to local LDAP node. Has anyone found solution for this problem?
Thanks
Luis

Thank you for responding. This is what we are using in a small company a Cisco Switcher, and don't have a router.
If you're getting connections off of the network out to the Internet, then yes, there is a router involved. Somewhere.
MacMini server I have an IP address of 169.254.xxx.xx, before IP address was 192.254.xxx.xx.
That IP address implies that the box isn't getting an IP address from a DHCP server; that's the self-assigned block. (Officially, these addresses are in the Automatic Private Address Configuration Automatic Private IP Addressing (APIPA) IANA reserved range.)
Which implies that at least two problems lurk.
Mac OS X Server must have a static IP address. Not DHCP-assigned dynamic addresses.
And a DHCP server isn't answering the IP address requests. (Well, not unless the DHCP server is passing out addresses in the self-assigned block, and that wouldn't likely be considered best-practice. More likely an IP address from a DHCP address pool allocated within a subnet somewhere in the 10.0.0.0/8 or 172.16.0.0/12 or (less desirably) 192.168.0.0/16 private blocks.
The Firewall is not turned on. Its purpose is for guest to access files, without deleting or modifying it.
When you're debugging problems, simplify. Divide the problem. With network services, test the lowest levels of the stack. Then work your way up the stack; toward higher-level services and mechanisms. Then add more parts and pieces, and DHCP and related.
IP hosts operating at 169.254.0.0/16 addresses (for longer than it takes to get an IP address from DHCP) usually implies that the network configuration is invalid or the DHCP server is not working.
I did not expect that Open Directory would be a big problem.
If DNS services or IP routing is misconfigured, then the whole rest of the stack will be unstable at best. The configuration order (and debugging order) involves functional IP networking and hardware, first and foremost. Then having functional DNS. Then Open Directory and then Kerberos. Then the rest of the stack.

JAAS - How to set up permissions for a specific code?

I would like to set up permissions for specific code in JAAS policy files.
In other words, let's say I have the followiong entry:
permission java.util.PropertyPermission "java.home", "read";
Then, when I do Subject.doAsPrivileged(..., MyAction), if this permission is absent, I will not be able to access the "java.home" property in my MyAction.
If I, let's say, set up a file permission, I will not be able to read certain files if the permission is absent.
I want something simpler. I want to be able to specify that the whole class MyAction cannot be executed if the permission is absent - I do not want the code to even go there. Basically, if the necessary entry in the Policy file is not present, I do not want the calling code to have access to class com.mypackage.MyAction.
This must be really straight-forward, what am I missing?

Thank you for your input.
My case is a little bit more complex.
There is a request and approval process attached to the provision to this target system.
The approval process has a first level of approval (including 1 to many approval steps) and the user gets the basic access to this target system. The user can then access the target system but is limited to what he/she can do.
Then the approval goes to a second level of approval (including many approval steps) and if approved the user gets the elevated access to this target system.
To accomplish this, the previous implementer created 2 resources for the same target. After the first level of approval, he provisioned resource A to the user. After the second level of approval, he provisioned resource B to the user, revoked resource B, and updated resource A.
This is very confusing because we are dealing with 2 resources for the same target.
I am looking for way to take advantage of the GTC to provision and reconcile with a system that takes a flat file and can write a flat file. But I also need to make it work with this approval nightmare.
Do you have any ideas on how to make this better and simpler?
Thanks
Khanh

Unable to set email address for user MySite in SharePoint2013

Hi,
I've a SharePoint Ent farm with a MySite Host Site Collection created. Under that, I've got some users having their own MySites.
Now, the problem is, I'm unable to get the link for editing the user's email address after logging in to the MySite under the credentials of the particular user.
Can anybody please suggest. Is this field at all editable?
Thanks,
Arnab

Hi John,
Elaborating...
I've created a MySite Host Site Collection programmatically, say, http://test.mysitehost.local/.
Under the same I'm creating user mysites (through SharePoint2013 Object model), say, http://test.mysitehost.local/personal/user1. (for my case "personal" is the managed path). While creating the user mysites, I'm not passing any value for the email
address of the user.
Now, my question is, can I set the email address of the user from MS native portal or through powershell?
Please note, I'm using SharePoint2013 Server.
Thanks in advance,
Arnab

Unable to set site permissions for AD group

Similar Messages

Maybe you are looking for