User anonymous does not have permission to perform lookup : help needed

Hi All,
I'm facing a strange problem.
I'm using weblogic 8.1
Some ejbs are deployed in the application and security settings are done properly.
But sometimes, i get an exception saying that
'javax.naming.NoPermissionException: User <anonymous> does not have permission on weblogic to perform lookup operation. [Root exception is javax.naming.NoPermissionException: User <anonymous> does not have permission on weblogic to perform lookup operation.]
at weblogic.rjvm.BasicOutboundRequest.sendReceive(BasicOutboundRequest.java:108)' .
This ejb is invoked from a web application, and the exception happens only once in the server lifecycle (but not on the first try).
This happens in a JTA transaction and eventually the transaction gets timed out. Once timed out for the first time, further requests are executing fine and it is connecting with the configured security credentials.
Initially i thought ejb caching was causing the problem. But even after removing the cache, it is throwing the exception.
Only sometimes, it is trying to connect as <anonymous> user.
I'm so fed up with this..
Can anybody help me out..?

Which 8.1 SP are you on? If you open a support case, a support engineer may be able to identify a fix that has been included in a newer Service Pack.

Similar Messages

CREATE USER, User does not have permission to perform this action.

-- first, connect to the master database
CREATE LOGIN login1 WITH password='Qwerty12345';
CREATE USER login1User FROM LOGIN login1;
EXEC sp_addrolemember 'dbmanager', 'login1User';
EXEC sp_addrolemember 'loginmanager', 'login1User';After, I connect to database 'master' with 'login1User' and execute:CREATE LOGIN login2 WITH password='Qwerty12345'; - okCREATE USER login2User FROM LOGIN login2; - User does not have permission to perform this action.

Hi Vit007,
Please check the two database role: 'dbmanager' and 'loginmanager'.
CREATE USER Requires ALTER ANY USER permission on the database.
Iric Wen
TechNet Community Support
select rm.*, dp2.name AS 'User', dp1.name AS 'Role' from sys.database_role_members rm LEFT JOIN sys.database_principals dp1 ON rm.role_principal_id = dp1.principal_id LEFT JOIN sys.database_principals dp2 ON rm.member_principal_id = dp2.principal_id
role_principal_id
member_principal_id
User Role
6 8
login1 dbmanager
7 8
login1 loginmanager

PSCONFIG - error - USer does not have permission to perform this action

After installation fo July 14 CU in the sharepoint 2013 server, getting the below error when i ran the PSCONFIG command.
"An exception of type System.Data.SQLClient.SqlException was thrown. Additional Exception information: USer does not have permission to perform this action"
My service accounts have db_Owner, db_SecurityAdmin, public, and SPDataAccess to the CONFIG DB.
Added the services to the local admin group also.
I am not sure why i am getting this error.
Any help is much appreciated.
Thank u

Hi,
Did you run SharePoint configuration wizard after applying
July 14 CU?
you need to run the wizard after installing the CU.
Please remember to click Mark as Answer on the answer if it helps you

VMM Shared ISO error "User account does not have permission required to open attachment"

I had this error once because the local service account was selected during installation of VMM. I have reinstalled VMM with a Domain service account and the error went away. However, the error is back.
"User account does not have permission required to open attachment '\\[servername]\VMMLibrary\server.ISO'. Error: 'General access denied error' (0x80070005). (Virtual machine ID GUID)"
I tried to create this VM on Host1 and got the error.
I then went to Host2 and was able to create the VM while using the same ISO on the same VMM library that failed on the Host1.
Both hosts have agent 3.2.7634.0 and are both running Hyper-V Server 2012 R2.
What is wrong with Host1 and how do I correct it?
Thank you.

This is a share configuration permissions issue.
http://technet.microsoft.com/en-us/library/ee340124.aspx
Brian Ehlert
http://ITProctology.blogspot.com
Learn. Apply. Repeat.

The user does not have permission to perform the operation

Hi,
Configuration: JES Q405. Solaris 10 x86.
My customer initially installed JES (Portal + AM + DS) on the same box.
Now, they have a change in their requirement. They want DS to run dedicatedly in another box.
I have successfully installed a fresh instance of DS in the new box with the same domain name (thus maintaining the same dn). I have copied over 99user.ldif and exported all the data from the original DS in the old box.
Everything is running fine. DS in the new box is able to function properly.
On the Portal and AM side, I have changed the following file:
1. AMConfig.properties
2. serverconfig.xml
3. PSConfig.properties
I have also changed the Primary LDAP entry in iPlanetAMAuthLDAPService, iPlanetAMAuthMembershipService, and iPlanetAMPolicyConfigService.
However, when I started AM (which is running on Sun Web Server), I got the following error message:
------------------- in /var/opt/SUNWam/debug/amSDK ---------------------------
05/01/2006 04:46:43:324 PM SGT: Thread[main,5,main]
ConfigManager->Constructor: root DN dc=sg,dc=com
05/01/2006 04:46:43:403 PM SGT: Thread[main,5,main]
Invoking _ldapPool.getConnection()
05/01/2006 04:46:43:403 PM SGT: Thread[main,5,main]
Got Connection : LDAPConnection {ldap://sg-dsq405.sg.com:389 ldapVersion:3 bindDN:"cn=puser,ou=DSAME
Users,dc=sg,dc=com"}
05/01/2006 04:46:43:410 PM SGT: Thread[main,5,main]
Invoking _ldapPool.close(conn) : LDAPConnection {ldap://sg-dsq405.sg.com:389 ldapVersion:3 bindDN:"c
n=puser,ou=DSAME Users,dc=sg,dc=com"}
05/01/2006 04:46:43:411 PM SGT: Thread[main,5,main]
Released Connection : LDAPConnection {ldap://sg-dsq405.sg.com:389 ldapVersion:3 bindDN:"cn=puser,ou=
DSAME Users,dc=sg,dc=com"}
05/01/2006 04:46:43:411 PM SGT: Thread[main,5,main]
ERROR: ConfigManager->Constructor: Caught exception Message:The user does not have permission to per
form the operation.
------------------------------------ end --------------------------------------------------
-------------------------- in /var/opt/SUNWam/debug/amAuth ---------------------
05/01/2006 04:47:21:252 PM SGT: Thread[main,5,main]
Directory Host: sg-dsq405.sg.com
Directory PORT : 389
05/01/2006 04:47:21:298 PM SGT: Thread[main,5,main]
AuthD initializing
05/01/2006 04:47:21:610 PM SGT: Thread[main,5,main]
ERROR: AuthD failed to get auth session
05/01/2006 04:47:21:688 PM SGT: Thread[main,5,main]
ERROR: AuthD init()
com.iplanet.dpro.session.SessionException: AuthD failed to get auth session
at com.sun.identity.authentication.service.AuthD.initAuthSessions(AuthD.java:709)
at com.sun.identity.authentication.service.AuthD.<init>(AuthD.java:229)
at com.sun.identity.authentication.service.AuthD.getAuth(AuthD.java:494)
at com.sun.identity.authentication.UI.LoginLogoutMapping.init(LoginLogoutMapping.java:71)
at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:921)
at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:813)
at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:3478)
at org.apache.catalina.core.StandardContext.start(StandardContext.java:3760)
at com.iplanet.ias.web.WebModule.start(WebModule.java:251)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardHost.start(StandardHost.java:652)
at org.apache.catalina.core.ContainerBase.start(ContainerBase.java:1133)
at org.apache.catalina.core.StandardEngine.start(StandardEngine.java:355)
at org.apache.catalina.startup.Embedded.start(Embedded.java:995)
at com.iplanet.ias.web.WebContainer.start(WebContainer.java:431)
at com.iplanet.ias.web.WebContainer.startInstance(WebContainer.java:500)
at com.iplanet.ias.server.J2EERunner.confPostInit(J2EERunner.java:161)
----------------------------------------- end --------------------------------------------------
Any idea how to solve this problem? Thanks in advance!
justCheeChong
Message was edited by:
justCheeChong

check if the new DS instance has all the AM required ACI's.

Obtain a primary token for a user who does not have permission to logon locally

I would like to know whether it's possible to obtain a primary token for a user who doesn't have permission to log on locally. If yes, what the recommended way is for doing that.
I called LogonUserW with logon32_logon_network logontype for user which is not allowed to logon locally. It returned impersonation token. I called DuplicateTokenEx to create primary token but it still returned impersonation token.

A Network Logon is always going to return an impersonation token. This is by design.
A Batch or Service logon would return a Primary Token. The user would need the corresponding right to return these 2 types of token. Typically, all users are allowed to generate a Network Token (Impersonation Token) but as you have discovered
it has limited usage which is by design.
thanks
Frank K [MSFT]
Follow us on Twitter, www.twitter.com/WindowsSDK

User does not have permission to perform this action

Dear sirs,
i made a project (VB2010 express) connecting to SQL Server 2008 express on my PC running Windows 7 (W7): it works as expected.
Now,
i need the same project run on a different PC (running Windows XP, say WXP, with VB2010 express installed) of my private LAN, but still connecting to SQL server running on Windows7-PC. So i exported the project file to WXP PC.
After enabling TCP for SQL, opening ports and bla bla bla, i can "see" SQLEXPRESS instance (running on W7) from SqlServerManagementStudio running on WXP and i can modify, select, create tables and so on.
Then i changed connection string parameters in app.config to point to the dB:
<connectionStrings>
<add name="IlMioCapolavoro22.My.MySettings.MyCompanyConnectionString"
connectionString="Data Source=INGSERGIO\SQLEXPRESS;AttachDbFilename=z:\mycompany.mdf;Integrated Security=true;Connect Timeout=30;User Instance=True"
providerName="System.Data.SqlClient" />
</connectionStrings>
In detail, i changed .\SQLEXPRESS to INGSERGIO\SQLEXPRESS and AttachDbFilename =c:\temp\mycompany.mdf to AttachDbFilename = Z:\mycompany.mdf (c:\temp of W7-PC is mounted as z:\ on WXP PC).
IF i do F5, i get the sql exception above.
Based on what i read in other forums,
it seems that the user connecting to SQL server (when the program starts) has not enough permission to access the database: frankly speaking, i don't know which user should i add permission for (my knowledge of SQL is poor).
The SQL Server Log file doesn't show anything (or what i am able to see).
.mdf file is in a directory where anyone has all privileges in reading-writing etc.
Can anyone help me?
Thanks
Sergio

Dear Sofiya,
thanks for reply.
TCP/IP, SQLServer.exe and SQLBrowser were already configured (Windows firewall was configured by adding "listening ports"
and not by changing scope to applications... i don't think this is a problem): in fact i can connect db remotely from SSMS (all privileges).
When you say:
"make sure the
user running your DB application in other computer has permissions to access the database"
you mean "windows user" ? if so, same windows user & password are accessing the 2 PCs, they both have admin-privileges on both PCs (maybe different operating system is a concern?). I didn't
create sql-user so far because my understanding is that in windows authentication mode it shouldn't be necessary or am i wrong?
"..., we can attach the “.mdf” file the SQL Server Express and then use the same method (Connect to database with
VB) to connect the database." ---> VB doesn't let me do this, because if i try to test the connection
with the db file from VB, it errors saying: "the file is in a network path not supported for database files. A database with the
same name exists, or specified file cannot be opened, or it is located on UNC share." Somewhere i had read
that the VB EXPRESS doesn't support database remote connection, so it is necessary to do it by changing manually string connection.
Any ideas?
thank you.
Sergio

User does not have permission...

Emm... actually this is jdbc, but from Microsoft ...
I have created a login with "Security Admin" role, and after i login with the newly created id in console, i can successfully issue sp_addlogin.
But the problem is, when i login with this id over jdbc and tried to create an account with sp_addlogin command, it gave me:
[Microsoft][SQLServer 2000 Driver for JDBC][SQLServer]User does not have permission to perform this action.
I could logged in, but not allowed to run sp_addlogin.
Would any one pls help?? Many Thanks!
(i am using the latest jdbc drivers download from MS)

I have already checked "SQL Server and Windows", is there anything else missing in the configuriation?
(I am running SQL Server 5.0 SP3 on Windows 2000, and I created the a/c through the Enterprise Manager)
Many Thanks in advance.
Did you set the SQLServer security setting to
"SQLServer and Windows"? In the SQLServer
administration tool, that is.

User "system" doesn not have Permission "modify"

Using the Admin console, I am trying to add a new permission to an ACL and I am running
in to an error. The ACL is "weblogic.jndi.lightbridge.rms" and I am trying to add
the "lookup" permission. The error that I encounter is:
User "system" does not have Permission "modify" based on ACL "weblogic.admin.acl".
I have tried given the "system" user the permission (through the Admin console) but
I encounter the same error. I seem to have run into a "chicken or the egg" problem.
How do I give the "system" user the permission?

Try adding this entry to filerealm.properties and rebooting the server
acl.modify.weblogic.admin.acl=Administrators
and make sure that the "system" user is in the "Administrators" group. It should be by
default.
Now you should be able to add any ACL's and corresponding privileges that you like.
You could also add your ACL manually to fileRealm.properties--
acl.lookup.weblogic.jndi.lightbridge.rms=system
Cheers
Joe Jerry
Tom Muldoon wrote:
Using the Admin console, I am trying to add a new permission to an ACL and I am running
in to an error. The ACL is "weblogic.jndi.lightbridge.rms" and I am trying to add
the "lookup" permission. The error that I encounter is:
User "system" does not have Permission "modify" based on ACL "weblogic.admin.acl".
I have tried given the "system" user the permission (through the Admin console) but
I encounter the same error. I seem to have run into a "chicken or the egg" problem.
How do I give the "system" user the permission?

SCSFileDownloadServlet fails: User 'guest' does not have sufficient priv.

Hi,
We have an ADF application that is using SCSFileDownloadServlet to get documents from UCM. We added the servlet in web.xml and we are using this link to download the documents: /getfile?adapterName=our_adapter_name&dDocName=document12345&dID=12345
The issue is that sometimes it works but sometimes it fails throwing this message in the logs:
Event generated by user 'guest' at host 'CIS'. Unable to download 'COR-ER-421722'. User 'guest' does not have sufficient privileges. [ Details ]
An error has occurred. The stack trace below shows more information.
!csUserEventMessage,guest,CIS!$!csUnableToDownload,COR-ER-421722!csUserInsufficientAccess,guest
intradoc.common.ServiceException: !csUnableToDownload,COR-ER-421722!csUserInsufficientAccess,guest
*ScriptStack GET_FILE
3:checkSecurity,dID=421317,dDocName=COR-ER-421722
at intradoc.server.ServiceRequestImplementor.buildServiceException(ServiceRequestImplementor.java:2115)
at intradoc.server.Service.buildServiceException(Service.java:2260)
at intradoc.server.Service.createServiceExceptionEx(Service.java:2254)
at intradoc.server.ServiceSecurityImplementor.validateSecurityPrivilegeLevel(ServiceSecurityImplementor.java:813)
at intradoc.server.DocumentAccessSecurity.checkSecurity(DocumentAccessSecurity.java:170)
at intradoc.server.DocumentAccessSecurity.checkSecurity(DocumentAccessSecurity.java:121)
at intradoc.server.ServiceSecurityImplementor.checkSecurity(ServiceSecurityImplementor.java:371)
at intradoc.server.Service.checkSecurity(Service.java:2829)
at intradoc.server.FileService.checkSecurity(FileService.java:337)
at intradoc.server.Service.checkSecurity(Service.java:2807)
at sun.reflect.GeneratedMethodAccessor456.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
Is it possible to set a user/password to this servlet so it is able to download the documents everytime?
Thanks,
Josue

Hi go9189,
According to your description, you come across the error that User 'guest' does not have permission to run DBCC checkprimaryfile. This issue could happen when the login account doesn't have CREATE DATABASE, CREATE ANY DATABASE,
or ALTER ANY DATABASE permission in SQL Server instance, or that the login account has no access to the mdf and ldf files when attaching database, so SQL Server recognize the login account as a "Guest".
To solve the issue, you could pay attention to the points below.
1. Ensure that the login account has at least CREATE DATABASE, CREATE ANY DATABASE, or ALTER ANY DATABASE permission. You could grant the fixed server role 'dbcreator' or 'sysadmin' to the login account following the steps below.
a. Connect to SQL Server instance with the login account which has sysadmin fix server role.
b. Expand the folder 'Security', right click the login, and select Properties.
c. In the Server Roles tab, check the checkbox for 'dbcreator' or 'sysadmin'.
2. Make sure that the the login account has full control permission on the mdf and ldf files. For how to grant the login account with full control permission on the mdf and ldf files, please refer to the steps in the following article:
http://msdn.microsoft.com/en-us/library/bb727008.aspx
There is a similar thread for your reference:
https://social.technet.microsoft.com/Forums/en-US/e463df4c-8d26-46cf-aa2e-bddd97c7a9b8/user-guest-does-not-have-permission-to-run-dbcc-checkprimaryfile?forum=sqlgetstarted
Regards,
Michelle Li

The loged on user does not have permission to use this object'

A professional license user currently has Authorisation to all Customer BPs and Sales Documents.
When creating a random Sales Order, the error message
'Create POs(): The loged on user does not have permission to use this object'
is occuring. This is not occuring for all Sales Orders, this is occuring randomly.
Note that the Purchase Orders Button in the Logsitics tab in the sales order is NOT selected.
Cheers Lisa

hi lisa
there could be some changes in transaction notification from your side if there are any i would request you to please comment all the changes and then try saving the document it would definately go ahead as there has to be some change in the stored procedure ,
Regards,
Manish

'The logged-on user does not have permission to use this object'

Hello everyone,
I am getting the message 'The logged-on user does not have permission to use this object' while saving the Sales Order. I am logging in as a CRM user. There is an addon also running on the server, that saves some data into a user defined table when the Sales Order is saved. Is there any authoisation for users to access user defined tables.
Regards,
William

hi William,
this is an Authorization issue. provide the user with authorization on your UDT. Definition of user authorization can be found in Administration -- >> System Initialization -->> Authorizations -->> Additional Authorization Creator.... if already defined from here you can fined the additional authorization from the General authorization window.
regards,
Fidel

Error msg: Current user does not have privileges to perform product Activation

I am running Adobe Photoshop CS 8.0 on Windows Home Vista platform.
I keep getting this error message when I try to open Photoshop:
Current user does not have privileges to perform product activation. Run this application from a user account with administrative privileges or contact your system administrator.
I am the only owner & user of this software. I have re-installed the SW once (full install), and the error message went away for a while.
Now it's come back.
What do I do now?

2 options:
Either disable UAC (User Access Controls) or run the application with Administrator rights.

Error Message' "The loged on user does not have permission to use this obje

The loged on user does not have permission to use this object-
I am entering a Sales order, which is customized, when I add the Sales order this system imformation appears.
The user has a pro-license and authorizations to all AR
Can someone tell me what my problem might be?

Thank you for your help

The logged in user does not have permissions to perform this operation

OIM 11.1.2.0.4
Connector: Microsoft Active Directory User Management 11.1.1.5.0
Action: revoke a provisioned AD account (logged in user is XELSYSADM member of SYSTEM ADMINISTRATIONS role)
Error message: IAM-2050243 : Orchestration process with id 5756, failed with error message IAM-4065011 : An error occurred in oracle.iam.provisioning.spi.DOBProvisioningMechanism/revoke(Account) while revoking account with id 1 for the user with key 43 and the cause of error is The logged in user does not have permissions to perform this operation..

The problem is missing entries into table AAD, Provisioning API uses table AAD to check administrator's scope on the user's organization.
TEST: following SQL statement should return at least a value
select aad_write, aad_delete
from aad aad
, usr usr
where aad.act_key = usr.act_key
and usr.usr_key = <user_key_of_user_you_wanto_to_revoke>
and aad.ugp_key in (
select ugp.ugp_key
from ugp ugp
, usg usg
where ugp.ugp_key = usg.ugp_key
and usg.usr_key = <user_key_of_xelsysadm>
BUG (in my case): if you create an Organization using a OIM user that does not have any Role (except default ALL USERS Role) the system does NOT add right entries into AAD table, so you can revoke account of users that are members of this Organization
WORKAROUND: manually insert entries for all Organizations (ACT_KEYs) for the user XELSYSADM into AAD table
FIX: always create an Organization using a OIM users with at least one Role except ALL USERS role

User anonymous does not have permission to perform lookup : help needed

Similar Messages

Maybe you are looking for