Secondary admins don't get rights to assign bundles

  • 3281762
  • 07-Feb-2007
  • 27-Apr-2012

Environment

Novell ZENworks 7 Linux Management - ZLM7

Situation

Secondary admins don't get rights to assign bundles to devices.

Resolution

Temporary Workaround:
  1. On a Windows box, Run ConsoleOne and login to the tree (zone name) with theNetware client asuser: admin.systempassword:ZENControlCenterpassword>
  2. Go into the properties of the following container:actions.bundles..cell
  3. Click on the NDS Rights tab | Trustees of this object
  4. Click "Add trustees"
  5. Click the up button twice to browse to and select your secondaryadmin(s) in the ~admins~..cell container off of the root ofthe tree.
  6. For Entry rights, choose Supervisor.
  7. For "All AttributesRights" leave the default as compare and read.
  8. Click OK

Status

Reported to Engineering

Additional Information

STEPS TO REPRODUCE:

Create a secondary admin that has all rights to everything

Login as the secondary admin

Associate a bundle to a device.

use the "relative to refresh†schedule or any other schedule

rug bl you should see the bundle

Rug bin "bundle name

RESULTS:

The ZENworks server isn't creating schedules for distribution to the client

machines. The message from the server log file

/var/opt/novell/log/zenworks/services‑messages.log is:

DEBUG: [1/18/0611:05:25 AM] DataModel An error occurred creating a scheduled

action for the newly associated bundle. This may prevent devices from getting

the most recent bundle data.

DEBUG: [1/18/0611:05:25 AM] DataModel

com.novell.zenworks.datamodel.exceptions.InternalDataModelException: An error

occurred creating the scheduled action.

Caused by: com.novell.zenworks.datamodel.exceptions.InternalDataModelException:

An error occurred while trying to create the object.

Caused by: javax.naming.NoPermissionException: [LDAP: error code 50 ‑ NDS

error: no access (‑672)]; remaining name

'nrmName=8394060810,nrmName=Actions,nrmName=~bundles~'

ROOT CAUSE:

This is because admins don't get any rights to the actions.bundles..cell container in Edir, seen through ConsoleOne.