LIBRARY VISIBLE BUT ACCESS DEN IED

[pasclinaui]

I have set up Formativ on our Novell 5.1 network. I can build & publish applets without problem; everything was done with my notebook (WIN2K sp3, NW client for NT/2K 4.83 sp1, GROUPWISE 5.54).

Installing Formativ ADMIN onto my customer test computer (WIN2K + same NW client, GROUPWISE 6.02) I can access my local applet in administrator mode, I can see my test LIBRARY but I cannot manage it !!!

I removed everything (nds object, schema, formativ) and I reinstalled last version but the problem is the same !!

The differences are GWISE (5.54 against 6.02) and O.S. version (NW 5.1 against SBS 6 sp2).

NDS objects were created with no restriction for user associated !

Please help me ’cause I’m really “desperado” !!!

Alex !!!

Topic

[Support 1a]

Have you configured the Netware user on the client system as a member of the FormativAdministor role, and also added the user as a library administrator to the library in question? Here’s a section from the Admin guide:

If you have security equal to the FormativAdministrator Organizational Role object , Formativ Admin will start in Administration mode, which is a prerequisite for managing applets within Formativ Applet Libraries. To administer one or more Applet Libraries, you must be assigned as the Library Administrator in the target libraries by the eDirectory administrator…The Applet Library object’s Library Administrators Page allows you to specify which users are authorized to create, edit and delete applets within the library. Use the Add and Remove buttons to add and remove users as Applet Library administrators, who must also be assigned to the FormativAdministrator Organizational Role.”

Advansys Support

[pasclinaui]

I tried same operation on a W98 workstation e everything was ok !

So it appears to be an issue of WIN2K platform !

No way to solve it, actually !!!

[Support 1a]

Thank you for the update. I cannot reproduce this on our WIN2K system. Could there be an issue with the ConsoleOne/NWAdmin installation on your WIN2K machine? Rights on the WIN2K machine could be another possibility.

[Anonymous]

Hi,

I have the same problem!

I have a presentation tomorrow with a demo, please help!!!

Im running the follow:

client:

win 2k3
gw 6.5 2/3/2003
nwclient 4.90 BETA_331
Formativ Admin 1.5.9.5

server:

NW 6.5 Beta 3 (403)
GW 6.5.0 Beta

Formativ Configuration Information:

Operating System:

Unknown Windows version

Internet Explorer

6.00.3718.0 (dnsrv.021114-1947)

Cache File System:

NTFS

Current User Configuration:

Location of Files

Data: C:Program FilesAdvansysFormativData
Local applets: C:Program FilesAdvansysFormativLocal
Encoded output: C:Program FilesAdvansysFormativEncoded
Flexalock output: C:Program FilesAdvansysFormativFlexalock
Applet Config: C:PROGRA~1AdvansysFormativapplet_cfg
Applet Help: C:PROGRA~1AdvansysFormativapplet_hlp
Applet Images: C:PROGRA~1AdvansysFormativapplet_img
Library Backup: C:Program FilesAdvansysFormativData

Client Options

Portal Folder Enabled: TRUE
Portal Folder Deleted Last Session: FALSE
Portal Folder Name: Formativ Portals
Display Library Exceptions on startup: FALSE
Library Exceptions Countdown: FALSE
Redirect Associations: TRUE
Menu Caption: A&pplets
Mode: 255
Formativ is enabled
Applet creation is allowed
Client integrations are enabled
Formativ menu is enabled
Favorites menu is enabled
Applet recording is allowed
Enable intelligent applet caching
Update applet cache on client startup
eDirectory Administered: TRUE
Current Line: 1
Debug Mode: FALSE
Exception Dialog: FALSE
Include Groups in Discovery: TRUE
List Width: 349
Max Traversal: 10
Window Height: 450
Window Left: 340
Window State: 1
Window Top: 287
Window Width: 600
Word Limit: 1
Word Limit Count: 2

Protocols

Order: 1
Override: 0

LDAP Settings

Server:
Port: 389
Port SSL: 636
Default Port: 389
Default Port SSL: 636
Use SSL: FALSE
Server Requires Logon: TRUE
Attempt Authentication: TRUE
Username:
Certificate:

Library Integration Exceptions:

None

Formativ File Version Information:

Advansys Formativ (VBSSAFE.EXE) 1.5 1.5.1.0 17/09/2002 09:06:40 pm
Advansys Formativ Tray Interface (FORMATIV.EXE) 1.5 1.5.1.0 17/09/2002 09:06:24 pm
Advansys Formativ Registration Utility (FRMRMG10.EXE) 1.5 1.5.1.0 17/09/2002 09:05:44 pm
Advansys Formativ Quick Config (QUICKCONFIG.EXE) 1.5 1.5.1.0 17/09/2002 10:44:40 pm
Advansys Formativ Admin (FORMATIV.DLL) 1.5 1.5.9.5 23/06/2003 11:54:12 am
Advansys Formativ Control Panel Applet (FORMATIV.CPL) 1.5 1.5.1.0 17/09/2002 09:04:46 pm
Advansys Formativ Applet Generator (SCRIPTGEN.DLL) 1.5 1.5.1.0 13/09/2002 12:03:28 pm
Advansys Formativ Applet Recorder (SCRIPTRECORDER.DLL) 1.5 1.5.1.0 13/09/2002 11:50:44 am
Advansys Formativ Command Blocker (TOKENBLOCKER.DLL) 1.6 1.6.0.0 26/02/2003 12:47:56 pm
Advansys Formativ Portal Manager Resources (HTMLRES.DLL) 1.5 1.5.1.0 13/09/2002 03:00:04 pm
Advansys Formativ Interface Loader (UILOAD.DLL) 1.5 1.5.1.0 13/09/2002 12:27:02 pm
Advansys Formativ Resource Manager Loader (FIXLDR32.DLL) 1.5 1.5.1.0 13/09/2002 11:53:26 am
Advansys Formativ Resource Manager for WIN32 (FIXTLS32.DLL) 1.5 1.5.1.0 13/09/2002 11:53:08 am
Advansys Formativ Resource Manager for Windows 95/98 (FIXTLS9X.DLL) 1.5 1.5.1.0 13/09/2002 11:52:56 am
Advansys Formativ Resource Manager for Windows NT (FIXTLSNT.DLL) 1.5 1.5.1.0 13/09/2002 11:52:38 am

LDAP File Version Information:

Novell LDAP C Library (LDAPSDK.DLL) 2.1.0 2.1.0 15/08/2001 05:01:46 pm
Novell LDAP Extension APIs (LDAPX.DLL) 2.1.0 2.1.0 15/08/2001 05:04:10 pm
Novell LDAP SSL Library (LDAPSSL.DLL) 2.1.0 2.1.0 15/08/2001 05:03:34 pm

GroupWise File Version Information:

Novell GroupWise Client (GRPWISE.EXE) 6.5.0 6.5.0 03/02/2003 06:06:20 pm
Novell GroupWise C3PO Manager (GWDT31.DLL) 6.5.0 6.5.0 16/01/2003 10:28:38 pm
Novell GroupWise Address Book (ADDRBOOK.EXE) 6.5.0 6.5.0 16/01/2003 11:05:30 pm
Novell GroupWise Address Book (GWABU1.DLL) 6.5.0 6.5.0 16/01/2003 11:03:06 pm
Novell GroupWise Object Library (GWCMA1.DLL) 6.5.0 6.5.0 17/01/2003 10:38:24 am
GroupWise Win32 Client Import Module (GWIMPEXE.EXE) 5.5 1.0 16/01/2003 10:41:56 pm
GroupWise ‘Hit the Road’ setup (HTRSETUP.EXE) 1, 0, 0, 1 1, 0, 0, 1 16/01/2003 10:21:24 pm
GroupWise Attachments ActiveX Control Module (GWATT1.OCX) 1, 0, 0, 1 1, 0, 0, 1 17/01/2003 10:54:28 am
Novell GroupWise Notify (NOTIFY.EXE) 6.5.0 6.5.0 16/01/2003 10:47:42 pm
Novell GroupWise Admin API (GWCMB1.DLL) 6.5.0 6.5.0 17/01/2003 12:50:08 am

GroupWise Interface Language:

Language: US

GroupWise Address Books:

AB Modal From Toolbar: No
Default Address Book: AB.0081D836918BCE1187EB00805FB4B2BE.Klanten (Carolien Bravenboer)
Delimiter Characters: ,;
Display Name Format: F L
Name Search Mode: No

Third Party Handlers

DLL1 C:PROGRA~1AdvansysFormativTokenBlocker.dll
Advansys Formativ Command Blocker (TOKENBLOCKER.DLL) 1.6 1.6.0.0 26/02/2003 12:47:56 pm
DLL2 C:PROGRA~1AdvansysFormativScriptRecorder.dll
Advansys Formativ Applet Recorder (SCRIPTRECORDER.DLL) 1.5 1.5.1.0 13/09/2002 11:50:44 am

GroupWise C3PO Entries:

GW.CLIENT
Advansys.formativ
Events
OnReady
OnShutDown
Objects
CommandFactory
EventMonitor
GW.CLIENT.WINDOW.ATTACHVIEWER
Advansys.formativ
Objects
CommandFactory
GW.CLIENT.WINDOW.CALENDAR
Advansys.formativ
Objects
CommandFactory
GW.CLIENT.WINDOW.FINDRESULTS
Advansys.formativ
Objects
CommandFactory
GW.MESSAGE
Advansys.formativ
Events
OnDelivery
Objects
EventMonitor
GW.MESSAGE.APPOINTMENT
Advansys.formativ
Objects
CommandFactory
GW.MESSAGE.DISCUSSION
Advansys.formativ
Objects
CommandFactory
GW.MESSAGE.MAIL
Advansys.formativ
Events
GW#C#OPEN
Objects
CommandFactory
GW.MESSAGE.NOTE
Advansys.formativ
Objects
CommandFactory
GW.MESSAGE.PHONE
Advansys.formativ
Objects
CommandFactory
GW.MESSAGE.TASK
Advansys.formativ
Objects
CommandFactory

LDIF output:

dn: cn=admin, o=testflex
nGWPostOffice: cn=gwpoa,ou=gw,ou=services,o=testflex
messageServer: cn=TESTSERVER,ou=services,o=testflex
ACL: 2#subtree#cn=admin,o=testflex#[All Attributes Rights]
ACL: 6#entry#cn=admin,o=testflex#loginScript
ACL: 2#entry#[Public]#messageServer
ACL: 6#entry#cn=admin,o=testflex#printJobConfiguration
ACL: 2#entry#cn=admin,o=testflex#bhGUIDList
ACL: 3#entry#[Root]#seeAlso
networkAddress: 12#
objectClass: inetOrgPerson
objectClass: organizationalPerson
objectClass: person
objectClass: ndsLoginProperties
objectClass: top
objectClass: bhPortalConfig
sASLoginConfigurationKey:: AAAAAO+/vQAAADDvv73vv70w77+977+9AgICAAIBATAyAgEDBg
tg77+9SAHvv73vv703AQIIGgICAO+/vQIBAgIDEQAA77+9FAnHkW/vv73vv73vv70uMmLvv70y77
+977+9D1Dvv73vv708LwQgbk3vv71gIWjvv700Le+/ve+/vRPvv73DkntX77+977+9SQQYZu+/vV
jvv71y77+9fO+/ve+/vTAiBgtg77+9SAHvv73vv703AQIIGzATMBECBQDvv70AAAQECE5NQVNJVj
Ay77+9EB9R77+9We+/vWzvv70J77+977+977+977+9Nm1MTjAzMA8GC2Dvv71IAe+/ve+/vTcBAg
gOBQAEIHHvv73vv70dHDLvv73vv73vv70v77+9X8+M77+9MkPvv73vv70k77+9Ne+/vVZSXMOO77
+9KXcAABAAAAAfUe+/vVnvv71s77+9Ce+/ve+/ve+/ve+/vTZtTE4=
loginTime: 20030624090356Z
securityEquals: cn=apchadmn-Administrators,o=testflex
securityEquals: cn=sshadmn-Administrators,ou=services,o=testflex
securityEquals: cn=admins,o=testflex
securityEquals: cn=FormativAdministrator,ou=formativ,ou=services,o=testflex
uid: admin
mail: admin@hartdinxveld.netflex.nl
cn: admin
nGWGroupWiseID: GWDOM.gwpoa.admin{106}68F1B5C0-02B4-0000-B19C-51004000F100
bhGUIDList: {67304221-0000-00F4-E993-8FB1C0A86314}
bhGUIDList: {30AAD958-0000-00F4-E993-C5F0C0A86314}
bhGUIDList: {F1C03F9D-0000-00F4-F7BB-76A2C0A86314}
bhGUIDList: {0DB56604-0000-00F4-F889-DFB5C0A86314}
bhGUIDList: {6B66B5FC-0000-00F5-0236-AF2DC0A86314}
nGWAccountID: admin
eMailAddress: 7#admin@GWDOM.gwpoa
Language: ENGLISH
sASLoginConfiguration:: JgAAAAQAAAAAAAAAUABhAHMAcwB3AG8AcgBkACAASABhAHMAaAAYA
AAAVjjvv70mHO+/vcapTu+/vXDvv71A77+9Ne+/vcmf77+977+9VAEaTg==
nGWVisibility: 2
seeAlso: cn=Global Config,ou=formativ,ou=services,o=testflex
loginGraceRemaining: 255
sn: admin
nGWObjectID: admin
groupMembership: cn=apchadmn-Administrators,o=testflex
groupMembership: cn=sshadmn-Administrators,ou=services,o=testflex
groupMembership: cn=admins,o=testflex
nGWFileID: 0rr

dn: ou=formativ, ou=services, o=testflex
ou: formativ
objectClass: organizationalUnit
objectClass: ndsLoginProperties
objectClass: ndsContainerLoginProperties
objectClass: top
ACL: 2#entry#ou=formativ,ou=services,o=testflex#loginScript
ACL: 2#entry#ou=formativ,ou=services,o=testflex#printJobConfiguration

dn: cn=FormativAdministrator, ou=formativ, ou=services, o=testflex
equivalentToMe: cn=admin,o=testflex
objectClass: organizationalRole
objectClass: top
seeAlso: cn=Global Config,ou=formativ,ou=services,o=testflex
ACL: 3#entry#[Root]#seeAlso
cn: FormativAdministrator

dn: cn=Global Config, ou=formativ, ou=services, o=testflex
description: Global Config
objectClass: advansysFvConfig
objectClass: resource
objectClass: top
seeAlso: cn=Global Applets,ou=formativ,ou=services,o=testflex
seeAlso: cn=Applet Development Library,ou=formativ,ou=services,o=testflex
ACL: 3#subtree#[Root]#[All Attributes Rights]
ACL: 1#subtree#[Root]#[Entry Rights]
advansysFvClientOptions: 255
cn: Global Config

dn: cn=Global Applets, ou=formativ, ou=services, o=testflex
description: Global Applets
objectClass: advansysFvScriptLib
objectClass: resource
objectClass: top
seeAlso: cn=admin,o=testflex
ACL: 3#subtree#[Root]#[All Attributes Rights]
ACL: 1#subtree#[Root]#[Entry Rights]
ACL: 15#subtree#cn=FormativAdministrator,ou=formativ,ou=services,o=testflex#[
Entry Rights]
ACL: 15#subtree#cn=FormativAdministrator,ou=formativ,ou=services,o=testflex#[
All Attributes Rights]
cn: Global Applets

dn: cn=Applet Development Library, ou=formativ, ou=services, o=testflex
description: Applet Development Library
objectClass: advansysFvScriptLib
objectClass: resource
objectClass: top
seeAlso: cn=admin,o=testflex
ACL: 3#subtree#[Root]#[All Attributes Rights]
ACL: 1#subtree#[Root]#[Entry Rights]
cn: Applet Development Library

[Anonymous]

Could you send me an email if you have an anwser to alex@netflex.nl

We are a reseller of Advansys in the Netherlands

[Support 2]

We are currently researching the issue. We have been using Win2K for a long time, including our main demo system, and there must be other factors at work here. As we cannot yet reproduce the problem, we suspect it is related to a rights issue, although as you are the admin user, it is rather puzzling. We need to gather more information.

Under normal circumstances, the following step is important:

Highlight the library and, by using the ‘Trustees of this object’ option, add the FormativAdministrator Organizational Role object as a trustee of the library. Enable the [Entry] Browse, Create, Delete, Rename, Inheritable and [All Attributes] Compare, Read, Write, Inheritable rights to the library object.

From the LDIF output, it appears that you have performed this step for the Global Applets library but not the Applet Development Library. However, you appear to have Admin rights so this should not be an issue. Are you unable to administer both the Global Applets and the Development libraries?

When you run FormativCentral, in the applet list are you able to see the ‘hammer’ icon next to the name of the applet library?

What happens if you move the FormativAdministrator role into the Formativ OU?

I will write to you directly on this matter to see if we can further troubleshoot the issue. Considering you need to do a demo today, we may need to provide you with an online Webex support session to see the issue first-hand.

Best regards,

Advansys Support

[Support 2]

It is very surprising that the operating system could affect the rights to eDirectory objects. This should not normally be the case and as yet, we don’t know how it could.

Which versions of the NetWare Client are you using in each case?

I presume that you are logging in as the same NetWare user?

What User level are you using for Win2K?

Regards,

Advansys Support

quote:

---

Originally posted by pasclinaui:
I tried same operation on a W98 workstation e everything was ok !

So it appears to be an issue of WIN2K platform !

No way to solve it, actually !!!

---

[Anonymous]

Hi,

The first thing is the follow: pasclinaui is not me (but we have the same name).

Maybe the problem is that im using windows server 2003 as a workstation.

I get my demo over a couple of hours but i can use a laptop (winXP) that works.

But doesn’t solve my problem (only for the demo)

It isn’t an eDirectory issue becouse if i use the laptop on the same eDirectory i can edit the applet library.

On the win2003 i can’t see the hammers. The FormativAdministrator role is in the formativ OU (cn=FormativAdministrator, ou=formativ, ou=services, o=testflex
).

[Support 1a]

Alex has been contacted directly regarding this issue.

Advansys Support

[Author]

Replies