Re: failed to create new user in fortress through console

[Shawn McKinney <shawn.mckinney@jts.us>]

Hello Suman,

The problem is you did not pass a valid User organizational unit.  User 
(&Perm) OU's are used by ARBAC features to delegate administrative 
policy.  You can find the list of valid User OU's under this entry DN in 
DIT:

ou=OS-U,ou=ARBAC,dc=jts,dc=us

with your favorite LDAP browser.

For testing, try using 'DEV0'  (case does not matter).

Later as you get further into the features of Fortress you can add any 
OU name you want using the Fortress management tools.

Shawn


On 04/15/2013 03:26 AM, suman karki wrote:
>   Hello there Good Morning.
>   I have successfully   installed fortress in redhat server.
>   I can see users and modify them through ldap- apache directory studio.
>   But when i try to create users with fortress console, ./b.sh console
>   then i get errors like,
>
>   so what may be mistakes that i have done?
>   help me to solve this?
>
>   thank you very much for previous support.
>
>
>      [java]
>      [java]
>      [java]
>      [java]
>      [java]
>      [java]
>      [java] Enter userId:
> biz
>      [java] Enter user's common name (cn):
> test
>      [java] Enter user's surname (sn):
> try
>      [java] Enter pw
> admin123
>      [java] Enter User's description field
> test
>      [java] Enter organization unit, blank for default
> People
>      [java] Do you want to set temporal constraints on User - Y or N
> N
>      [java] Enter Role name (or NULL to skip):
>
>      [java] Enter prop key (or NULL to skip):
>
>      [java] Enter password policy (or NULL to skip):
>
>      [java] 2013-04-15 04:19:07,066 (ERROR) 
> us.jts.fortress.AdminMgrConsole.addUser caught SecurityException 
> rc=1035, msg=us.jts.fortress.rbac.UserP.validate detected invalid 
> orgUnit name [People] adding user with userId [biz]
>      [java] us.jts.fortress.ValidationException: 
> us.jts.fortress.rbac.UserP.validate detected invalid orgUnit name 
> [People] adding user with userId [biz]
>      [java]     at us.jts.fortress.rbac.UserP.validate(UserP.java:770)
>      [java]     at us.jts.fortress.rbac.UserP.add(UserP.java:230)
>      [java]     at us.jts.fortress.rbac.UserP.add(UserP.java:210)
>      [java]     at 
> us.jts.fortress.rbac.AdminMgrImpl.addUser(AdminMgrImpl.java:114)
>      [java]     at 
> us.jts.fortress.AdminMgrConsole.addUser(AdminMgrConsole.java:362)
>      [java]     at 
> us.jts.fortress.ProcessMenuCommand.processAdminFunction(ProcessMenuCommand.java:348)
>      [java]     at 
> us.jts.fortress.ProcessMenuCommand.processRbacControl(ProcessMenuCommand.java:73)
>      [java]     at 
> us.jts.fortress.FortressConsole.main(FortressConsole.java:28)
>      [java]     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native 
> Method)
>      [java]     at 
> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
>      [java]     at 
> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
>      [java]     at java.lang.reflect.Method.invoke(Method.java:601)
>      [java]     at 
> org.apache.tools.ant.taskdefs.ExecuteJava.run(ExecuteJava.java:217)
>      [java]     at java.lang.Thread.run(Thread.java:722)


--
shawn.mckinney@jts.us is my new email address