03-26-2018 11:57 PM - edited 03-01-2019 04:07 AM
Hi,
a customer of us is doing some tests with exnternal authentication. They can login via the CLI, are assigned to a group and can provision a service. But when they want to do a re-deploy of the same service, they are getting an access-denied error:
test@ncs> request services core-link uuid-20180313-16:51:00 re-deploy
Error: access denied
When we have a look in the audit trail:
<INFO> 14-Mar-2018::16:44:39.481 nso-01-tst ncs[26047]: audit user: test/51 assigned to groups: ncsadmin
<INFO> 14-Mar-2018::16:44:52.104 nso-01-tst ncs[26047]: audit user: test/51 CLI ‘request services core-link uuid-20180313-16:51:00 re-deploy’
<INFO> 14-Mar-2018::16:44:52.134 nso-01-tst ncs[26047]: audit user: test/52 assigned to groups:
<INFO> 14-Mar-2018::16:44:52.153 nso-01-tst ncs[26047]: audit user: test/51 CLI aborted
It looks like assigned to groups is empty
When I have a look in our environment with only a couple of local users and do a re-deploy of a service:
<INFO> 26-Mar-2018::17:06:45.865 nso ncs[1875]: audit user: test/6569 CLI 'request services vcompartiment vcompartiment13 re-deploy'
<INFO> 26-Mar-2018::17:06:45.867 nso ncs[1875]: audit user: test/6577 assigned to groups: admin
<INFO> 26-Mar-2018::17:06:46.078 nso ncs[1875]: audit user: test/6569 CLI done
User is assigned to local admin group and we can provision en re-deploy the service without any problem.
Any idea what might be the problem here?
Solved! Go to Solution.
04-11-2018 01:56 AM
We upgraded to the latest version which solved our issue.
04-11-2018 01:56 AM
We upgraded to the latest version which solved our issue.
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the NSO Developer community: