VMware Solutions Discussions

VSC 5, ONTAP 8.2.1, RBAC-UC -> missing capabilities

Sebastian_Goetze

Testing version RBAC-UC 2.7.5176.32418 (just checked, it's still the newest available one) on VSC 5, I get loads of "missing capabilities"

(VSCadmin created with "All" capabilities for VSC5, also see at the end of the post for the list of roles/capabilities).

I also wonder, why VSC is trying to do CIFS stuff...?? Or is it just trying to find out what it's capabilities are by trial & error?

(at line breaks characters got lost during cut-n-paste, please disregard these 'spelling errors')

Sun Jul 27 04:00:54 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) discovery: Storage discovery task found this controller to 

be connected to an ESX host managed by vCenter or manually entered.

Sun Jul 27 04:00:55 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) VmDiscovery: vc.netapp.local[99393FE9-55D6-4F4-B056-

85CE97441FC5] (Total VMs=2):debian6Guest=1,winNetEnterpriseGuest=1

Sun Jul 27 04:00:57 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) HostDiscovery: vc.netapp.local[99393FE9-55D6-F24-B056-

85CE97441FC5] (Total Hosts=2):5.5.0=2

Sun Jul 27 04:00:59 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) PluginVersions: vc.netapp.local[99393FE9-55D64F24-B056-

85CE97441FC5] version=5.5.0 OS=Windows Server 2008 R2:cim-

ui=5.5,com.vmware.vim.eam=5.5,com.vmware.vim.inventoryservice=5.5,com.vmware.vim.ls=5.5,cm.vmware.vim.sms=5.5,com.vmware.vim.sps=5.0

Sun Jul 27 04:01:01 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) PluginVersions: vc.netapp.local

(5.5.0):com.vmare.vim.stats.report=1.0.0,com.vmware.vim.vsm=5.5,health-

ui=5.5,hostdiag=1.0,VirtualCenter=1.0,com.netapp.nvpf=5.0,com.netapp.nvpf.webclient=2014.04.01.11473

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-add'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-check-spare-low'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-create'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-destroy'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-get-filer-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-get-root-name'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-mediascrub-list-inf'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-mirror'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-modify-raid-type'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-offline'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-online'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-options-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-rename'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-restrict'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-resume'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-scrub-suspend'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-set-option'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-space-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-split'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-resume'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-verify-suspend'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-wafliron-commit'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-wafliron-reject'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-wafliron-review'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-wafliron-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-force-takeover'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-giveback'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-hwassist-stats'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-hwassist-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-negotiated-failover-dsable'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-negotiated-failover-satus'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-service-disable'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-service-enable'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-takeover'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cg-commit'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cg-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-branchcache-hash-stt'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-branchcache-set-key

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-homedir-paths-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-list-config'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-nbalias-names-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-nbalias-names-set'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-session-list-iter-nxt'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-create-group-ile'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-create-passwdfile'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-site-list-ite-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-verify-passwdand-group'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-ace-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-ace-set'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-acl-list-iterend'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-acl-list-iterstart'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-change'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-list-iter-nex'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-list-iter-stat'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-start-on-target'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-stop-on-target'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-clock-get-timezone'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-clock-set-clock'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-copyoffload-copy-abort'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-copyoffload-copy-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-copyoffload-copy-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-copyoffload-modify'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-config-modiy'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-destroy'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-core-segment-status-get-ter'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-dfm-set-server-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-alert-definitin-get-iter'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-alert-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-alert-modify'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-config-get-ite'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-policy-definiton-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subscriptions-et'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subscriptions-et-iter'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subsystem-confg-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subsystem-confg-get-iter'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-maint-list'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-sanown-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-sanown-remove-ownerhip'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-swap'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-disk-unswap'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fc-config-adapter-disabl'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fc-config-list-iter-next

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-config-down'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-nameserver-lst-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-reset-stats'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-set-partner'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-topology-lis-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-zone-list-itr-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-node-set-name'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-service-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcport-send-lip'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-get-snaplock-retenton-time-list-info-max'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-inode-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-read-symlink'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-rename-directory'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-set-space-reservatin-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-file-usage-result-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-flash-get-thresholds'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fpolicy-extensions'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fpolicy-get-policy-optios'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fpolicy-operations-list-et'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ic-config-show'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ic-reset-nic-auto-on'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-igroup-lookup-lun'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-adapter-reset-stat'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-auth-generate-chappassword'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-initiator-get-defalt-auth'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-interface-list-inf'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-isns-get-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-stats-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-target-alias-clearalias'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-target-alias-get-aias'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-license-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-license-v2-add'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-clear-persistent-resrvation-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-config-check-alua-coflicts-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-create-vld-metadir-etry'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-get-maxsize'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-get-space-reservatio-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-get-target-device-id

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-has-scsi-reservation'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-id-swap'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-initiator-logged-in'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-set-device-id'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-set-read-only'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ndmp-backup-abort'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-net-config-set-persisten'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-net-ipspace-assign'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-net-resolve'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-net-vlan-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-nfs-exportfs-check-permision'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-nfs-stats-top-clients-lit-iter-end'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-nfs-stats-top-clients-lit-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-options-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-archive-get-headers

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-archive-get-instancs-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-object-counter-listinfo'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-object-get-instance'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-object-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-portset-remove'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-priority-list-info-defaut'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-qtree-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-qtree-rename'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-quota-off'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-quota-report-iter-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-radius-service-stop'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-reallocate-on'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-registry-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-sis-set-config'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapdiff-iter-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snaplock-get-volume-compiance-clock'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snaplock-privileged-delee-file'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snaplock-set-log-volume'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapmirror-quiesce'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapmirror-set-sync-scheule'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapshot-get-schedule'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapshot-partial-restorefile-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapshot-restore-file-ino'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapshot-volume-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-primary-destintions-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-primary-get-reationship-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-primary-snapsht-schedule-status-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-remove-softloc'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-secondary-relaionship-status-list-iter-end'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-secondary-relaionship-status-list-iter-next'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-secondary-resyc-relationship'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snmp-trap-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-software-async-update'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-software-extract-metadat'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-adapter-get-adaper-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-adapter-get-adaper-list'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-shelf-environmen-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-shelf-list-info'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-test-iter-start'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-useradmin-role-add'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-useradmin-role-delete'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-useradmin-user-add'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-collect-command-lgs'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-dr-resync'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-get-allowed-protools'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-get-disallowed-prtocols'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-migrate-delete-qtee'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-migrate-running'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-migrate-state'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-performance-monitr-get-status'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vmservices-vsphere-credetial-get'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-get-language'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-rename'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-scrub-resume'

Sun Jul 27 04:01:02 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-set-total-files'

=============================================================================================================================

When creating an iSCSI datastore, the following error messages appeared:

Thu Jul 31 10:21:25 GMT [SC1:snmp.link.up:info]: Interface 4 is up

Thu Jul 31 10:21:25 GMT [SC1:netif.linkUp:info]: Ethernet e0d: Link up.

Thu Jul 31 10:21:40 GMT [SC1:snmp.link.up:info]: Interface 2 is up

Thu Jul 31 10:21:40 GMT [SC1:netif.linkUp:info]: Ethernet e0b: Link up.

Thu Jul 31 10:33:01 GMT [SC1:iscsi.service.startup:info]: iSCSI service startup

Thu Jul 31 10:34:51 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) discovery: Storage discovery task found this ontroller to

be connected to an ESX host managed by vCenter or manually entered.

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-add'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-aggr-get-filer-info'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cf-takeover'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-site-list-ite-end'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-share-list-iter-nex'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-stop-on-target'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-alert-get'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-policy-modify'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-diagnosis-subscriptions-reate'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-adapter-nameserver-lst-iter-start'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fcp-wwpnalias-get-alias-nfo'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-fpolicy-destroy-policy'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ipspace-list-info'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-adapter-stats-listinfo'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-initiator-add-auth

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-initiator-modify-cap-params'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-interface-disable'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-iscsi-isns-stop'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-license-v2-delete'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-create-vld-metadir-etry'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-lun-get-comment'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ndmp-backup-abort'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-ndmp-backup-shutdown-ndmd'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-archive-get-instancs-iter-next'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-perf-object-counter-listinfo'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-reallocate-off'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-sis-set-config'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snapvault-primary-snapsht-schedule-status-list-info'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-snmp-enable'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-storage-initiator-disk-pth-list-info'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-useradmin-user-modify-pasword'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-collect-command-lgs'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-vfiler-dr-delete'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-get-root-name'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-move-start'

Thu Jul 31 10:35:10 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-volume-scrub-stop'

Thu Jul 31 10:49:05 GMT [SC1:app.log.info:info]: vcenter: Provisioning and Cloning Capability 5.0: (0)  : Provisioning and Cloning Capability v5.0 createDatatore:

vcUserId: NETAPP\Administrator VMware Version:5.5.0 Build: 1623101 API: 5.5 datastoreName: DS_ISCSI1 datastoreSizeInMB: 10240 autoGrow: false growIncreent: null

maxGrowSize: null containerName: aggr_data volumeName: DS_ISCSI1 thinProvision: true protocol: ISCSI datastore cluster: null lun prefix: null

Thu Jul 31 10:49:07 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx02-687fc8d8 at IP addr 172.16.11.42

Thu Jul 31 10:49:07 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:07 GMT [SC1:iscsi.warning:warning]: ISCSI: New session request from initiator iqn.1998-01.com.vmware:esx01-25cd3422, a session from this iniiator already

exists.

Thu Jul 31 10:49:07 GMT [SC1:iscsi.warning:warning]: ISCSI: New session request from initiator iqn.1998-01.com.vmware:esx02-687fc8d8, a session from this iniiator already

exists.

Thu Jul 31 10:49:08 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:08 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx02-687fc8d8 at IP addr 172.16.11.42

Thu Jul 31 10:49:25 GMT [SC1:wafl.spacemgmnt.policyChg:info]: The space management policy for volume DS_ISCSI1 has changed: autosize volume growth increment 98720KB,

autosize volume maximum size 31981568KB, autosize state enabled.

Thu Jul 31 10:49:28 GMT [SC1:lun.map:info]: LUN /vol/DS_ISCSI1/DS_ISCSI1 was mapped to initiator group rcu_generated=0

Thu Jul 31 10:49:28 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:28 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx02-687fc8d8 at IP addr 172.16.11.42

Thu Jul 31 10:49:28 GMT [SC1:iscsi.warning:warning]: ISCSI: New session request from initiator iqn.1998-01.com.vmware:esx01-25cd3422, a session from this iniiator already

exists.

Thu Jul 31 10:49:28 GMT [SC1:iscsi.warning:warning]: ISCSI: New session request from initiator iqn.1998-01.com.vmware:esx02-687fc8d8, a session from this iniiator already

exists.

Thu Jul 31 10:49:30 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:30 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx02-687fc8d8 at IP addr 172.16.11.42

Thu Jul 31 10:49:36 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.11.41

Thu Jul 31 10:49:36 GMT [SC1:iscsi.notice:notice]: ISCSI: New session from initiator iqn.1998-01.com.vmware:esx01-25cd3422 at IP addr 172.16.12.41

Thu Jul 31 10:51:56 GMT [SC1:app.log.info:info]: vcenter: Monitoring and Host Configuration sub-plugin 5.0: (0) discovery: Storage discovery task found this ontroller to

be connected to an ESX host managed by vCenter or manually entered.

Thu Jul 31 10:52:15 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-ou-list-iter-ext'

Thu Jul 31 10:52:15 GMT [SC1:useradmin.unauthorized.user:warning]: User 'VSCadmin' denied access - missing required capability: 'api-cifs-setup-verify-name'

SC1> Thu Jul 31 11:00:03 GMT [SC1:kern.uptime.filer:info]:  11:00am up  8 days,  7:58 0 NFS ops, 0 CIFS ops, 0 HTTP ops, 0 FCP ops, 2644 iSCSI ops

SC1> useradmin role list

Name:    VSCadminRole.1

Info:    This is an auto-generated role created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Allowed Capabilities: api-file-delete-file,api-file-get-file-info,api-file-read-file,api-file-write-file,api-iscsi-connection-list-info,api-iscsi-session-list-info,api-

lun-get-geometry,api-useradmin-domainuser-list,api-useradmin-group-list,cli-cifs,cli-df,cli-ifconfig,cli-mv,cli-ndmpcopy,cli-ndmpd,api-igroup-add,api-igroup-create,api-

igroup-set-attribute,api-lun-create-by-size,api-lun-create-from-file,api-lun-initiator-list-map-info,api-lun-map,api-lun-move,api-lun-online,api-lun-set-comment,api-lun-

unmap,api-nfs-exportfs-append-rules-2,api-nfs-exportfs-load-exports,api-nfs-exportfs-modify-rule-2,api-sis-enable,api-sis-start,api-sis-stop,api-snapmirror-break,api-

snapmirror-delete-schedule,api-snapmirror-get-status,api-snapmirror-initialize,api-snapmirror-off,api-snapmirror-on,api-snapmirror-release,api-snapmirror-resync,api-

snapmirror-set-schedule,api-snapmirror-update,api-snapshot-create,api-snapshot-set-reserve,api-vfiler-add-storage,api-volume-autosize-set,api-volume-clone-create,api-

volume-create,api-volume-restrict,api-volume-set-option

Name:    VSCadminRole.2

Info:    This is an auto-generated role created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Allowed Capabilities: cli-iscsi,cli-lun,cli-qtree,cli-vfiler,api-lun-resize,api-sis-disable,api-volume-size,api-file-punch-hole,api-lun-destroy,api-lun-offline,api-

volume-destroy,api-volume-offline,api-file-list-directory-iter-end,api-file-list-directory-iter-next,api-file-list-directory-iter-start,api-igroup-destroy,api-iscsi-

initiator-list-info,api-iscsi-node-get-name,api-lun-create-from-snapshot,api-lun-get-serial-number,api-lun-restore-status,api-nfs-exportfs-storage-path,api-snapmirror-

list-destinations,api-snapshot-delete,api-snapshot-rename,api-snapshot-restore-file,api-snapshot-restore-volume,api-vfiler-create,cli-snap,cli-system

Name:    VSCadminRole

Info:    This is an auto-generated role created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Allowed Capabilities: api-aggr-list-info,api-cf-get-partner,api-cf-status,api-disk-list-info,api-ems-autosupport-log,api-fcp-adapter-initiators-list-info,api-fcp-

adapter-list-info,api-fcp-get-cfmode,api-fcp-node-get-name,api-fcp-service-status,api-igroup-list-info,api-iscsi-adapter-initiators-list-info,api-iscsi-adapter-list-

info,api-iscsi-portal-list-info,api-iscsi-service-status,api-lun-get-vdisk-attributes,api-lun-list-info,api-lun-map-list-info,api-net-ifconfig-get,api-nfs-exportfs-list-

rules-2,api-nfs-exportfs-list-rules,api-nfs-status,api-qtree-list,api-quota-report,api-snapmirror-get-volume-status,api-snapshot-list-info,api-snmp-get-next,api-snmp-

get,api-system-api-list,api-system-cli,api-system-get-info,api-system-get-ontapi-version,api-system-get-version,api-useradmin-user-list,api-vfiler-get-status,api-vfiler-

list-info,api-volume-autosize-get,api-volume-list-info-iter-end,api-volume-list-info-iter-next,api-volume-list-info-iter-start,api-volume-options-list-info,login-http-

admin,security-api-vfiler,security-priv-diagnostic,api-copyoffload-show,api-license-v2-list-info,api-feature-status-list-info,api-clone-*,api-fcp-port-name-list-

info,api-file-create-directory,api-file-delete-directory

Name:    admin

Info:

Allowed Capabilities: login-*,cli-*,api-*,security-*

Name:    audit

Info:

Allowed Capabilities: api-snmp-get,api-snmp-get-next

Name:    backup

Info:    Default role for NDMP privileges.

Allowed Capabilities: login-ndmp

Name:    compliance

Info:    Default role for compliance privileges.

Allowed Capabilities: cli-cifs*,cli-exportfs*,cli-nfs*,cli-useradmin*,api-cifs-*,api-nfs-*,login-telnet,login-http-admin,login-rsh,login-ssh,api-system-api-*,cli-

snaplock*,api-snaplock-*,api-file-*,compliance-*

Name:    none

Info:

Allowed Capabilities:

Name:    power

Info:

Allowed Capabilities: cli-cifs*,cli-exportfs*,cli-nfs*,cli-useradmin*,api-cifs-*,api-nfs-*,login-telnet,login-http-admin,login-rsh,login-ssh

Name:    root

Info:

Allowed Capabilities: *

SC1> useradmin user list VSCadmin

Name: VSCadmin

Info: This is an auto-generated username created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Rid: 131074

Groups: VSCadminGrp

Full Name:

Allowed Capabilities: api-aggr-list-info,api-cf-get-partner,api-cf-status,api-disk-list-info,api-ems-autosupport-log,api-fcp-adapter-initiators-list-info,api-fcp-

adapter-list-info,api-fcp-get-cfmode,api-fcp-node-get-name,api-fcp-service-status,api-igroup-list-info,api-iscsi-adapter-initiators-list-info,api-iscsi-adapter-list-

info,api-iscsi-portal-list-info,api-iscsi-service-status,api-lun-get-vdisk-attributes,api-lun-list-info,api-lun-map-list-info,api-net-ifconfig-get,api-nfs-exportfs-list-

rules-2,api-nfs-exportfs-list-rules,api-nfs-status,api-qtree-list,api-quota-report,api-snapmirror-get-volume-status,api-snapshot-list-info,api-snmp-get-next,api-snmp-

get,api-system-api-list,api-system-cli,api-system-get-info,api-system-get-ontapi-version,api-system-get-version,api-useradmin-user-list,api-vfiler-get-status,api-vfiler-

list-info,api-volume-autosize-get,api-volume-list-info-iter-end,api-volume-list-info-iter-next,api-volume-list-info-iter-start,api-volume-options-list-info,login-http-

admin,security-api-vfiler,security-priv-diagnostic,api-copyoffload-show,api-license-v2-list-info,api-feature-status-list-info,api-clone-*,api-fcp-port-name-list-

info,api-file-create-directory,api-file-delete-directory,api-file-delete-file,api-file-get-file-info,api-file-read-file,api-file-write-file,api-iscsi-connection-list-

info,api-iscsi-session-list-info,api-lun-get-geometry,api-useradmin-domainuser-list,api-useradmin-group-list,cli-cifs,cli-df,cli-ifconfig,cli-mv,cli-ndmpcopy,cli-

ndmpd,api-igroup-add,api-igroup-create,api-igroup-set-attribute,api-lun-create-by-size,api-lun-create-from-file,api-lun-initiator-list-map-info,api-lun-map,api-lun-

move,api-lun-online,api-lun-set-comment,api-lun-unmap,api-nfs-exportfs-append-rules-2,api-nfs-exportfs-load-exports,api-nfs-exportfs-modify-rule-2,api-sis-enable,api-

sis-start,api-sis-stop,api-snapmirror-break,api-snapmirror-delete-schedule,api-snapmirror-get-status,api-snapmirror-initialize,api-snapmirror-off,api-snapmirror-on,api-

snapmirror-release,api-snapmirror-resync,api-snapmirror-set-schedule,api-snapmirror-update,api-snapshot-create,api-snapshot-set-reserve,api-vfiler-add-storage,api-

volume-autosize-set,api-volume-clone-create,api-volume-create,api-volume-restrict,api-volume-set-option,cli-iscsi,cli-lun,cli-qtree,cli-vfiler,api-lun-resize,api-sis-

disable,api-volume-size,api-file-punch-hole,api-lun-destroy,api-lun-offline,api-volume-destroy,api-volume-offline,api-file-list-directory-iter-end,api-file-list-

directory-iter-next,api-file-list-directory-iter-start,api-igroup-destroy,api-iscsi-initiator-list-info,api-iscsi-node-get-name,api-lun-create-from-snapshot,api-lun-get-

serial-number,api-lun-restore-status,api-nfs-exportfs-storage-path,api-snapmirror-list-destinations,api-snapshot-delete,api-snapshot-rename,api-snapshot-restore-

file,api-snapshot-restore-volume,api-vfiler-create,cli-snap,cli-system

Password min/max age in days: 0/4294967295

Status: enabled

SC1> useradmin group list

Name: Administrators

Info: Members can fully administer the filer

Rid: 544

Roles: admin

Name: Backup Operators

Info: Members can bypass file security to backup files

Rid: 551

Roles: backup,none

Name: Compliance Administrators

Info: Members can perform compliance operations

Rid: 131072

Roles: compliance

Name: Guests

Info: Users granted Guest Access

Rid: 546

Roles: none

Name: Power Users

Info: Members that can share directories

Rid: 547

Roles: power

Name: Replicators

Info: not supported

Rid: 552

Roles: none

Name: Users

Info: Ordinary Users

Rid: 545

Roles: audit

Name: VSCadminGrp

Info: This is an auto-generated group created by RBAC User Creator for Virtual Storage Console for VMware vSphere.

Rid: 131073

Roles: VSCadminRole,VSCadminRole.1,VSCadminRole.2

SC1>

So in conclusion: Either VSC 5 is trying to do a whole lof of 'unnecessary' stuff, or RBAC-UC is missing a whole lot of capabilities...

  • What is the reason for some of the more exotic 'missing required capabilities', e.g. api-cifs-share-list-iter-next
  • Can DBKelly get a complete list of VSC capabilities (don't know, if this log caught them all), so we can fix the XML file...
    • I cross-posted to the RBAC-UC forum

-Sebastian

0 REPLIES 0
Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public