9 Replies Latest reply on May 17, 2012 9:09 AM by qc4vmware

    Perspectives permissions issue?

    manfriday Hot Shot

      Hi,

       

      I created a perspective for a group of linux admins.

      I added my mortal (non-vCO admin) account to the same group as these admins, for testing purposes.

       

      I can access the perspective and it's workflows just fine.

      Howver, when the admins are having trouble.

      They can log in, but when they get to their main page, they see the list of available workflows on the left.

      On the right however, they have an error page.

       

      Below is a bit of the error message.

      It smells like a permissions issue, but I have double checked that the permissions were set up according to the docs.

      I even tried giving the group admin rights at the "My Orchestrator" level, but it didnt seem to help.

       

      Not sure what else to try at this point.

       

      Thanks

       

      Jason

       

      org.apache.tapestry.BindingException

      Unable to read OGNL expression '<parsed OGNL expression>' of $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]: Method "isWorkflowInput" failed for object $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]

      binding:

      ExpressionBinding[perspectives/perspective/_dashboard/$task$ExecutionsList_0 isWorkflowInput(token.get('id'))]

      location:

      webview:/perspectives/task/ExecutionsList.jwc, line 53

      org.apache.hivemind.ApplicationRuntimeException

      Unable to read OGNL expression '<parsed OGNL expression>' of $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]: Method "isWorkflowInput" failed for object $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]

      component:

      $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]

      location:

      webview:/perspectives/perspective/_dashboard.page, line 10

      5

      </page-specification>

      ognl.MethodFailedException

      Method "isWorkflowInput" failed for object $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]

      java.lang.NullPointerException

      Stack Trace:

      • com.vmware.o11n.plugin.perspectives.webui.PerspectivesTaskExecutionsListComponent.isWorkflowInput(PerspectivesTaskExecutionsListComponent.java:32)
      • sun.reflect.GeneratedMethodAccessor1697.invoke(Unknown Source)
      • sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
      • java.lang.reflect.Method.invoke(Method.java:597)
      • ognl.OgnlRuntime.invokeMethod(OgnlRuntime.java:532)
        • 1. Re: Perspectives permissions issue?
          Burke- Virtuoso
          VMware Employees

          Are you using vCO 4.2.1??? If so, please try the following:

          http://kb.vmware.com/kb/2016770

          • 2. Re: Perspectives permissions issue?
            manfriday Hot Shot

            Hi Burke,

             

            Thanks for taking the time to respond.

             

            Alas, the KB article did not seem to be the solution.

            I applied the jar files in the specified locations, rebooted. I even re-did the permissions as per the perspectives doc.

            My mortal account works, and my co-workers does not, even though they are part of the same group.

             

            I log in via the "test login" page in the LDAP setup tab and I get:

            "User logged in successfully : *myusername* User is NOT a member of vCO administration group."

             

            My co-worker logs into the same page and gets the same message.

             

            From the logs:

             

             

            2012-04-25 08:47:45.552-0500 DEBUG [WebVisitor] User successfully authenticated: username
            2012-04-25 08:47:45.552-0500 DEBUG [WebviewPage] WEB - username - Page request:  https://myserver:8281/vmo/perspectives/default.html
            2012-04-25 08:47:45.552-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.isConfigured...
            2012-04-25 08:47:45.567-0500 DEBUG [ScriptUnitContext] Starting script context : username
            2012-04-25 08:47:45.567-0500 DEBUG [VSOFactoryBean] --VSOFactory initializing... [for user 'username']

             

             

            2012-04-25 08:47:47.782-0500 DEBUG [VsoScriptingHelper] WEB - username - done (execute action com.vmware.perspectives.isConfigured)

            2012-04-25 08:47:47.798-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.getVcoAdminGroup...

            2012-04-25 08:47:47.798-0500 DEBUG [VsoScriptingHelper] WEB - username - done (execute action com.vmware.perspectives.getVcoAdminGroup)

            2012-04-25 08:47:47.814-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.webview.getPerspectivesForCurrentUser...

             

             

             

            2012-04-25 08:47:50.528-0500 DEBUG [WebviewPage] WEB - username - Page request:  https://myserver:8281/vmo/perspectives/system/resources/js/dojo/iframe_history.html

            2012-04-25 08:47:50.622-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/css/perspectivesIE7.css

            2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_body.gif

            2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/logo_vmware.gif

            2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_heading.gif

            2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_title.gif

            2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/vco_powered.gif

            2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_siteTitle.gif

            2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/perspectivesLogo.gif

            2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_contentTitle.gif

            2012-04-25 08:47:50.653-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_footer.gif

            2012-04-25 08:47:50.653-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_byLine.gif

            2012-04-25 08:47:50.653-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_poweredBy.gif

             

             

            etc.. etc..

             

             

            2012-04-25 08:47:53.851-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.getPerspectiveWittyTasks...

            2012-04-25 08:47:53.851-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.getPerspectiveWittyTasks...

            2012-04-25 08:47:53.929-0500 DEBUG [VsoScriptingHelper] WEB - username - done (execute action com.vmware.perspectives.getPerspectiveWittyTasks)

            2012-04-25 08:47:54.054-0500 DEBUG [VsoScriptingHelper] WEB - username - done (execute action com.vmware.perspectives.getPerspectiveWittyTasks)

             

             

            (it looks like he get's authenticated and everything is going dandy at this point)

             

            Then it barfs, and this is the only error message I see in the logs:

             

             

            2012-04-25 08:47:46.051-0500 ERROR [MSPluginFactory] Unable to create initial LDAP Context

            javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece]

            at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3067)

            2012-04-25 08:47:46.144-0500 ERROR [ModulesFactory] Unable to create SDKSession for module 'AD', reason : null

            • 3. Re: Perspectives permissions issue?
              manfriday Hot Shot

              Well, this is annoying.

              It works now, and I dont really know why.

              Some of the workflows just started working after like the 20th time I re-built the perspectives.

              A couple of them started working after I duplicated the workflow, and addeed the duplicated workflow to the perspective.

              It smells buggy to me, and after a day and a half of fiddling with it, I am not 100% sure why it is working now.

              But it seems to be working.

              • 4. Re: Perspectives permissions issue?
                manfriday Hot Shot

                Ok,

                 

                I have to revisit this issue, becuase the problem has come back, and it have honed in on what is cuasing the error.

                 

                When there are any "finished workflow runs" under a workflow, I get the error in the perspective view.

                If I delete all of the finished workflow runs, the perspective runs fine.

                Until the workflow runs once, then it is broken again.

                 

                There must be something I have configure incorrectly?

                I started over from scratch, rebuilding my whole vorchestrator install (app, database, etc)

                Not sure what I am missing.

                • 5. Re: Perspectives permissions issue?
                  manfriday Hot Shot

                  well, I dont think vmware supports orchestrator beyond installation, so I guess I am giving up on using perspectives.

                  two days of fighting is probably enough punishment for one guy.

                  • 6. Re: Perspectives permissions issue?
                    qc4vmware Master

                    I am having similar issues and just attempted the jar replacement in the KB article you have a link to.  Now my system is blowing up.  I am running the appliance and I do not have the /opt/vmo/apps directory which is one of the spots it says to put one of the jars.  This is the first bit of text in the error:

                     

                    HTTP ERROR 500

                    Problem accessing /config_general/General.action. Reason:

                        ch/dunes/model/license/jdbc/JdbcLicenseWarden

                     

                    Caused by:

                    java.lang.NoClassDefFoundError: ch/dunes/model/license/jdbc/JdbcLicenseWarden
                         at ch.dunes.vso.configuration.web.commons.license.Config_License.loadLicenses(Config_License.java:312)
                         at ch.dunes.vso.configuration.web.commons.license.Config_License.initialize(Config_License.java:79)
                    

                     

                    any clue why this is happening?

                    • 7. Re: Perspectives permissions issue?
                      Burke- Virtuoso
                      VMware Employees

                      Paul - you should probably go ahead and open an SR on this... The patches seem to work just fine for Windows based vCO 4.2.1 installs from my experience. The one time I attempted to use them on an appliance, I received the same error you did. Filing the SR will give better tracking and hopefully lead to an updated KB and/or patch.

                      • 8. Re: Perspectives permissions issue?
                        igaydajiev Expert
                        VMware Employees

                        1. When applying the patch over vCO appliance you should be carefull with the permissions of the replaced files. After the files are replaced make sure that files permissions are 644 and the owner is vco, and group is vco.

                         

                        2. DO NOT REPLACE file in "/opt/var/configuration/jetty/appliance-webaps/appliance/client/lib"

                         

                        3. KB  article states that you need to replace file in "/opt/vmo/apps/lib". When patching vCO Appliance this folder does not exist and nothing should be done in this step..

                         

                        Hope this helps.

                        • 9. Re: Perspectives permissions issue?
                          qc4vmware Master

                          Awesome.  That did the trick!  At least things are loading without any crashes... time to go poke around with the perspectives stuff but it sounds like this probably won't resolve it.  I will pop back in and update this thread if my perspectives related stuff subsides.

                           

                          Paul