manfriday
Enthusiast
Enthusiast

Perspectives permissions issue?

Hi,

I created a perspective for a group of linux admins.

I added my mortal (non-vCO admin) account to the same group as these admins, for testing purposes.

I can access the perspective and it's workflows just fine.

Howver, when the admins are having trouble.

They can log in, but when they get to their main page, they see the list of available workflows on the left.

On the right however, they have an error page.

Below is a bit of the error message.

It smells like a permissions issue, but I have double checked that the permissions were set up according to the docs.

I even tried giving the group admin rights at the "My Orchestrator" level, but it didnt seem to help.

Not sure what else to try at this point.

Thanks

Jason

org.apache.tapestry.BindingException

Unable to read OGNL expression '<parsed OGNL expression>' of $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]: Method "isWorkflowInput" failed for object $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]

binding:

ExpressionBinding[perspectives/perspective/_dashboard/$task$ExecutionsList_0 isWorkflowInput(token.get('id'))]

location:

webview:/perspectives/task/ExecutionsList.jwc, line 53

org.apache.hivemind.ApplicationRuntimeException

Unable to read OGNL expression '<parsed OGNL expression>' of $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]: Method "isWorkflowInput" failed for object $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]

component:

$PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]

location:

webview:/perspectives/perspective/_dashboard.page, line 10

5

</page-specification>

ognl.MethodFailedException

Method "isWorkflowInput" failed for object $PerspectivesTaskExecutionsListComponent_37@503c6860[perspectives/perspective/_dashboard/$task$ExecutionsList_0]

java.lang.NullPointerException

Stack Trace:

  • com.vmware.o11n.plugin.perspectives.webui.PerspectivesTaskExecutionsListComponent.isWorkflowInput(PerspectivesTaskExecutionsListComponent.java:32)
  • sun.reflect.GeneratedMethodAccessor1697.invoke(Unknown Source)
  • sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
  • java.lang.reflect.Method.invoke(Method.java:597)
  • ognl.OgnlRuntime.invokeMethod(OgnlRuntime.java:532)
0 Kudos
9 Replies
Burke-
VMware Employee
VMware Employee

Are you using vCO 4.2.1??? If so, please try the following:

http://kb.vmware.com/kb/2016770

If my answer resolved or helped you, please mark it as Correct or Helpful to award points. Thank you! Visit http://www.vcoteam.info & http://blogs.vmware.com/orchestrator for vRealize Orchestrator tips and tutorials - @TechnicalValues on Twitter
0 Kudos
manfriday
Enthusiast
Enthusiast

Hi Burke,

Thanks for taking the time to respond.

Alas, the KB article did not seem to be the solution.

I applied the jar files in the specified locations, rebooted. I even re-did the permissions as per the perspectives doc.

My mortal account works, and my co-workers does not, even though they are part of the same group.

I log in via the "test login" page in the LDAP setup tab and I get:

"User logged in successfully : *myusername* User is NOT a member of vCO administration group."

My co-worker logs into the same page and gets the same message.

From the logs:

2012-04-25 08:47:45.552-0500 DEBUG [WebVisitor] User successfully authenticated: username
2012-04-25 08:47:45.552-0500 DEBUG [WebviewPage] WEB - username - Page request:  https://myserver:8281/vmo/perspectives/default.html
2012-04-25 08:47:45.552-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.isConfigured...
2012-04-25 08:47:45.567-0500 DEBUG [ScriptUnitContext] Starting script context : username
2012-04-25 08:47:45.567-0500 DEBUG [VSOFactoryBean] --VSOFactory initializing... [for user 'username']

2012-04-25 08:47:47.782-0500 DEBUG [VsoScriptingHelper] WEB - username - done (execute action com.vmware.perspectives.isConfigured)

2012-04-25 08:47:47.798-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.getVcoAdminGroup...

2012-04-25 08:47:47.798-0500 DEBUG [VsoScriptingHelper] WEB - username - done (execute action com.vmware.perspectives.getVcoAdminGroup)

2012-04-25 08:47:47.814-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.webview.getPerspectivesForCurrentUser...

2012-04-25 08:47:50.528-0500 DEBUG [WebviewPage] WEB - username - Page request:  https://myserver:8281/vmo/perspectives/system/resources/js/dojo/iframe_history.html

2012-04-25 08:47:50.622-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/css/perspectivesIE7.css

2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_body.gif

2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/logo_vmware.gif

2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_heading.gif

2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_title.gif

2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/vco_powered.gif

2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_siteTitle.gif

2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/perspectivesLogo.gif

2012-04-25 08:47:50.637-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_contentTitle.gif

2012-04-25 08:47:50.653-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_footer.gif

2012-04-25 08:47:50.653-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_byLine.gif

2012-04-25 08:47:50.653-0500 DEBUG [WebviewResourcesService] WEB - username - Get resource perspectives/images/bg_poweredBy.gif

etc.. etc..

2012-04-25 08:47:53.851-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.getPerspectiveWittyTasks...

2012-04-25 08:47:53.851-0500 DEBUG [VsoScriptingHelper] WEB - username - Execute action com.vmware.perspectives.getPerspectiveWittyTasks...

2012-04-25 08:47:53.929-0500 DEBUG [VsoScriptingHelper] WEB - username - done (execute action com.vmware.perspectives.getPerspectiveWittyTasks)

2012-04-25 08:47:54.054-0500 DEBUG [VsoScriptingHelper] WEB - username - done (execute action com.vmware.perspectives.getPerspectiveWittyTasks)

(it looks like he get's authenticated and everything is going dandy at this point)

Then it barfs, and this is the only error message I see in the logs:

2012-04-25 08:47:46.051-0500 ERROR [MSPluginFactory] Unable to create initial LDAP Context

javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece]

at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3067)

2012-04-25 08:47:46.144-0500 ERROR [ModulesFactory] Unable to create SDKSession for module 'AD', reason : null

0 Kudos
manfriday
Enthusiast
Enthusiast

Well, this is annoying.

It works now, and I dont really know why.

Some of the workflows just started working after like the 20th time I re-built the perspectives.

A couple of them started working after I duplicated the workflow, and addeed the duplicated workflow to the perspective.

It smells buggy to me, and after a day and a half of fiddling with it, I am not 100% sure why it is working now.

But it seems to be working.

0 Kudos
manfriday
Enthusiast
Enthusiast

Ok,

I have to revisit this issue, becuase the problem has come back, and it have honed in on what is cuasing the error.

When there are any "finished workflow runs" under a workflow, I get the error in the perspective view.

If I delete all of the finished workflow runs, the perspective runs fine.

Until the workflow runs once, then it is broken again.

There must be something I have configure incorrectly?

I started over from scratch, rebuilding my whole vorchestrator install (app, database, etc)

Not sure what I am missing.

0 Kudos
manfriday
Enthusiast
Enthusiast

well, I dont think vmware supports orchestrator beyond installation, so I guess I am giving up on using perspectives.

two days of fighting is probably enough punishment for one guy. Smiley Wink

0 Kudos
qc4vmware
Virtuoso
Virtuoso

I am having similar issues and just attempted the jar replacement in the KB article you have a link to.  Now my system is blowing up.  I am running the appliance and I do not have the /opt/vmo/apps directory which is one of the spots it says to put one of the jars.  This is the first bit of text in the error:

HTTP ERROR 500

Problem accessing /config_general/General.action. Reason:

    ch/dunes/model/license/jdbc/JdbcLicenseWarden

Caused by:

java.lang.NoClassDefFoundError: ch/dunes/model/license/jdbc/JdbcLicenseWarden
     at ch.dunes.vso.configuration.web.commons.license.Config_License.loadLicenses(Config_License.java:312)
     at ch.dunes.vso.configuration.web.commons.license.Config_License.initialize(Config_License.java:79)

any clue why this is happening?

0 Kudos
Burke-
VMware Employee
VMware Employee

Paul - you should probably go ahead and open an SR on this... The patches seem to work just fine for Windows based vCO 4.2.1 installs from my experience. The one time I attempted to use them on an appliance, I received the same error you did. Filing the SR will give better tracking and hopefully lead to an updated KB and/or patch.

If my answer resolved or helped you, please mark it as Correct or Helpful to award points. Thank you! Visit http://www.vcoteam.info & http://blogs.vmware.com/orchestrator for vRealize Orchestrator tips and tutorials - @TechnicalValues on Twitter
0 Kudos
igaydajiev
VMware Employee
VMware Employee

1. When applying the patch over vCO appliance you should be carefull with the permissions of the replaced files. After the files are replaced make sure that files permissions are 644 and the owner is vco, and group is vco.

2. DO NOT REPLACE file in "/opt/var/configuration/jetty/appliance-webaps/appliance/client/lib"

3. KB  article states that you need to replace file in "/opt/vmo/apps/lib". When patching vCO Appliance this folder does not exist and nothing should be done in this step..

Hope this helps.

0 Kudos
qc4vmware
Virtuoso
Virtuoso

Awesome.  That did the trick!  At least things are loading without any crashes... time to go poke around with the perspectives stuff but it sounds like this probably won't resolve it.  I will pop back in and update this thread if my perspectives related stuff subsides.

Paul

0 Kudos