NetApp Community Update
This site will enter Read Only mode on July 23 as we prepare to move to a new platform. You will still be able to view content, but posting and replying will be temporarily disabled.
We're excited to launch our new Community experience on July 30 and more information will follow soon.
Stay connected during the transition - Join our Discord community today.

Active IQ Unified Manager Discussions

CLI not allowing commands to run...

sswain123
5,654 Views

Hi guys,

Was hoping for a little advise… I’m funning DFM 4.0.2 and have setup my AD user acct in with GlobalFullControl…. Using the NMC or the WebUI, I have no issues doing ll administrative tasks. However; when using the CLI (RHEL 5.6) I can’t run the most basic commands, it’s telling me that the user doesn’t have the proper permissions….

Logged in as root on my  dfm server, I can clearly see that my AD account has been setup with GlobalFullControl.

[root@dfmserver ~]# dfm user role list <a-username>

Role Id Role Name

------- -------------------------

30      GlobalFullControl

However; as mentioned above, when running basic commands from the cli, I get the following

[a-username@dfmserver ~]$ dfm user role list <a-username>

Error: To use the list command, you must have Global DFM Database Read capability.

[a-username@dfmserver ~]$ dfm run cmd <filer_name> version

Error: DFM Console Execute permission denied on <filer_name>.

If anyone could shed a little light on this, I would be most grateful.

Thanks,

Scott

4 REPLIES 4

detstorage
5,654 Views

If your DFM server is running 2008 I would turn off the User Account Control setting, this can cause issues with admin rights.

sswain123
5,654 Views

I'm running RHEL 5.6.

scotthoward
5,654 Views

@detstorage,

Thanks for the tip--it worked for me and I had a Win2k8R2 instance.

Scott

columbus_admin
5,654 Views

What are the DFM permissions?  I see with root you get a response, but in your follow ups you have a-username....have you tried giving a-username sudo access and running it under elevated privileges?  It might be you are getting a Unix perm error after the base DFM commands are being run, this doesn't seem likely as you are getting a DFM denied message, but still worth a try.

- Scott

Public