sacmd command security violation error

Warren Tolentino · ‎11-10-2015

i issue this command to cancel a job.

sacmd jobcancel 8490035 YES

and got this error:

E:\Program Files\TIDAL\Scheduler\Client>sacmd jobcancel 8490035 YES
Initializing Sacmd. Please wait...
Attempting Master connection...
Successfully connected to Primary Master on wvmoap95.

Security violation
shutting down ...

E:\Program Files\TIDAL\Scheduler\Client>

the sacmd in installed at the server s3hpv01 and the tidal master is on the wvmoap95.

please advise thank you.
warren

Derrick Au · ‎11-10-2015

Hi Warren,

Can you please describe the relationship between the runtime user initiating the sacmd jobcancel command and the Tidal job itself? Check to see if the runtime user is a part of the workgroup, and if not, then it would be simpler/better to add the user as part of the workgroup rather than changing the security policy.

BR,

Derrick Au

Warren Tolentino · ‎11-10-2015

thanks derrick. i think i know why because i am using my own login to the server when i run the sacmd on the command line.

when i tried it on tidal the job that i need to cancel/stop will not cancel and the only output is the path

Microsoft Windows [Version 5.2.3790]

e:\Program Files\TIDAL\Scheduler\Client>

Completed at 11/10/2015 11:02 AM

i also uploaded a screen shot. please advise. thanks.

Warren Tolentino · ‎11-10-2015

i think i found the error on my first reply. i was using on the command cmd instead of the sacmd.exe. i made corrections and i am now getting a clear output of the error.

Initializing Sacmd. Please wait...

Error: you are not a valid user for this product

shutting down ...

Completed at 11/10/2015 11:29 AM

is the error points to permission for the runtime user on the master or on the client? i think it is more on the master right?

thanks,
warren

Derrick Au · ‎11-10-2015

Hi Warren,

Can you please describe how runtime user NYSDOT\TRUfmist is setup? Is it a regular runtime user, or a regular NYSDOT-domain user? The runtime user should be setup as a regular NYSDOT-domain user with the correct security policy assigned. For this particular runtime user, ensure that NYSDOT\TRUfmist should be assigned security policy, for example, to perform Job Control functions (Adhoc Job, Cancel/Abort, Hold/Stop, Override, Release, etc)

BR,

Derrick Au

Warren Tolentino · ‎11-10-2015

hi derrick,

we use our own windows account to open the tidal scheduler and create jobs, submit jobs, etc. we only use the runtime user to give the job the runtime user it needed to complete the creation of the job definition.

thanks,
warren

Derrick Au · ‎11-10-2015

Hi Warren,

Please check with your Tidal Administrator to switch security policy for NYSDOT\TRUfmist from runtime user to a regular Tidal user with job control functions

BR,

Derrick Au