access denied for creating new Activity Information Configuration
-
vendredi 2 mars 2012 11:26
hi,
When we creating new Activity Information Configuration that gives error Access denied.please suggest me what i do.
we fallow these steps for creating Activity Information Configuration.
First We create custom logging activity project in visual stdio 2008 after this build this project that build successfull without any error.
After this we login FIM Portal through Administrator. First click on Administrator after this we click on All Resource after this we click on Activity Information Configuration click on new button page open for crating Activity Information Configuration and provide reqired details
Discription
DisplayName
ActivityName
AssemblyName(Put dll name here)
isActionActivity checked
isAuthenticationActivity checked
isAuthorizationActivity checked
TypeName(Class Name)
when we submit this form then gives Access denied Error.
Regards
Anil Kumar
Toutes les réponses
-
vendredi 2 mars 2012 11:42
Did you create a Management Policy Rule to specify that your administrators have the rights to create an AIC ?
http://c--shark.blogspot.com/2010/02/error-defining-activity-information.html
-
lundi 5 mars 2012 04:54
hi,
Thank's for Response.I did not create any MPR for this so please tell me which MPR will have the rights to create an AIC.
Regards
Anil Kumar -
lundi 5 mars 2012 08:19
You just need to create the following MPR as specified in the link I attached.
Display Name Administration: Administrators have full control over Activity Information Configuration resources Action Parameter * Action Type Add; Create; Delete; Modify; Remove Action Workflows 0 Authentication Workflows 0 Authorization Workflows 0 Description Administration: Administrators have full control over Activity Information Configuration resources Grant Right TRUE Principal Set Administrators Resource Current Set All Activity Information Configurations Resource Final Set All Activity Information Configurations
Yannick Fournel.
-
mardi 6 mars 2012 06:53
Hi Yannick,
Thank's for Response.
I have been done everything as you say to me and it is working now to create new AIC. but we test this custom activity working or not first we add one record in database table and want to write this details in FIMLogs file the details is not wrinting in this file after this we eventviewer=>Application and services logs that gives some error.Please help on this
System.Web.Services: System.Net.WebException: The request failed with HTTP status 407: Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. ).
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.ResourceManagement.WebServices.Mail.Exchange.ExchangeServiceBinding.FindItem(FindItemType FindItem1)
at Microsoft.ResourceManagement.WebServices.Mail.Exchange.MailChannel.ExchangeMailChannelListener`1.ExchangeMailListener.<OnPollTimerExpired>b__0(Boolean findUnreadItems)
at Microsoft.ResourceManagement.WebServices.Mail.Exchange.MailChannel.ExchangeMailChannelListener`1.ExchangeMailListener.OnPollTimerExpired(Object state)Regards
Anil Kumar
-
lundi 12 mars 2012 07:55
Hi Yannick,
Thank's for Response.
I have been done everything as you say to me and it is working now to create new AIC. but we test this custom activity working or not first we add one record in database table and want to write this details in FIMLogs file the details is not wrinting in this file after this we eventviewer=>Application and services logs that gives some error.Please help on this
System.Web.Services: System.Net.WebException: The request failed with HTTP status 407: Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. ).
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters)
at Microsoft.ResourceManagement.WebServices.Mail.Exchange.ExchangeServiceBinding.FindItem(FindItemType FindItem1)
at Microsoft.ResourceManagement.WebServices.Mail.Exchange.MailChannel.ExchangeMailChannelListener`1.ExchangeMailListener.<OnPollTimerExpired>b__0(Boolean findUnreadItems)
at Microsoft.ResourceManagement.WebServices.Mail.Exchange.MailChannel.ExchangeMailChannelListener`1.ExchangeMailListener.OnPollTimerExpired(Object state)Regards
Anil Kumar
-
lundi 12 mars 2012 09:25
I don't really know much about your proxy configuration but it seems that your user is not allowed to access your DB server. Check your ISA Server.
(If this error is causing your activity to definitely stop, you could try to write in your logfile before inserting it to the DB (for example the SQL Query), this way you could have some idea about what to debug except your proxy configuration.)
Anyway, I don't know ISA Server and someone else will have to lend you a hand.
Good luck.
Yannick.
-
mardi 15 janvier 2013 12:16
This is actually not the correct solution.
The reason you get this error is because there is a bug in FIM.
The built-in MPR called 'Administration: Administrators control configuration related resources' has a small typo in it.
Solution:
- Open the MPR 'Administration: Administrators control configuration related resources'
- Go to 'Advanced View'
- Go to 'Extended Attributes'
- In the 'Action Parameter' attribute change the wrongly spelled 'IsAuthoriztionActivity' to 'IsAuthorizationActivity'
- Save the change.
- Proposé comme réponse Kent Nordström mardi 15 janvier 2013 12:16
-
mardi 15 janvier 2013 18:12see:
Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)
Jorge de Almeida Pinto | MVP Identity & Access - Directory Services
-------------------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always evaluate/test yourself before using/implementing this!
* DISCLAIMER: http://jorgequestforknowledge.wordpress.com/disclaimer/
-------------------------------------------------------------------------------------------------------
################# Jorge's Quest For Knowledge ###############
###### BLOG URL: http://JorgeQuestForKnowledge.wordpress.com/ #####
#### RSS Feed URL: http://jorgequestforknowledge.wordpress.com/feed/ ####
-------------------------------------------------------------------------------------------------------<>"Kent Nordström" wrote in message news:7806efe3-3ddd-47eb-8e44-3b9750f43d02@communitybridge.codeplex.com...This is actually not the correct solution.
The reason you get this error is because there is a bug in FIM.
The built-in MPR called 'Administration: Administrators control configuration related resources' has a small typo in it.
Solution:
- Open the MPR 'Administration: Administrators control configuration related resources'
- Go to 'Advanced View'
- Go to 'Extended Attributes'
- In the 'Action Parameter' attribute change the wrongly spelled 'IsAuthoriztionActivity' to 'IsAuthorizationActivity'
- Save the change.
Jorge de Almeida Pinto [MVP-DS] | Principal Consultant | BLOG: http://jorgequestforknowledge.wordpress.com/
.png)
