Unable to login using new created UserId

ysweec · Post by **ysweec** » Tue Apr 15, 2008 3:02 am

Hi,,

I having problem to create new userid to login to DataStage application
Error : User name and/or password incorrect (80011)
Tested the userid created is able to login to Windows but not to DS app.
(DS7.5 at Windows2003).

Can anyone verify if the following steps are correct?

1. Create a new User id e.g. dsuser
2. Create a new Group e.g. dsgroup
3. Assign the dsuser to be a member of dsgroup
4. Add the dsgroup with full permission in following directories :-
-C:\Ascential\DataStage\Engine
- project directory
5. Assign the dsgroup as DataStage Developer role for a project thru the DS Administrator->[Project]-> Permissions tab
6. Assign Everyone to none for all project if don't want dsgroup to view other DS projects

ysweec · Post by **ysweec** » Tue Apr 15, 2008 3:53 am

FYI,

I tested the new userid at the DS server machine itself. It's not working(login to DS appl) even the group that assigned to this userid has been designated with DS developer role in the project. But, if I assigned the userid as member of Administrator, then it works.

What is blocking the userid from accessing the DS server as I am tested it at the server machine itself?

Advice and helps are very much appreciated.

ray.wurlod · Post by **ray.wurlod** » Tue Apr 15, 2008 5:24 am

Have you re-started either DataStage services or the Windows operating system since adding this user ID?

What user ID are you using to attempt to login? Unqualified, qualified with machine name or qualified with domain name?

ysweec · Post by **ysweec** » Tue Apr 15, 2008 7:32 pm

Hi Ray,

Yes, I tested with restart DS services or Reboot DS server. Same problem exists.
Error:-
Failed to connect to host: localhost, project: UV
(User name and/or password incorrect (80011))

The User ID is a local Windows user ID and assign to a newly created group called DSgroup(mainly for DS developer purpose).

What's difference with Server Win2003? I tested DS server in WinXP, it works according to the steps.
Any idea how to resolve it?

ray.wurlod · Post by **ray.wurlod** » Tue Apr 15, 2008 7:49 pm

Can you try logging in with a qualified user name (machine\user)?

ysweec · Post by **ysweec** » Tue Apr 15, 2008 7:53 pm

Do you mean using the new Userid to login to the server machine?
Yes, tested. The Userid can login to the server machine. But unable to login to DS applications.
Unless assign the Userid as member of admnistrators group.

ray.wurlod · Post by **ray.wurlod** » Tue Apr 15, 2008 7:55 pm

No, I mean try specifying "machinename\username" (not just "username") in the Attach dialog for DataStage client.

Post by **daignault** » Tue Apr 15, 2008 8:19 pm

Do you also have a password associated with the account. Datastage at 7.5 requires a password be present.

Regards,

Ray Daignault

ysweec · Post by **ysweec** » Tue Apr 15, 2008 8:57 pm

Yes, password associated with the account.
Tested with "machinename\username". Still produce same error message.
But, it works in my DS server in XP machine. Just not working for the customer's DS server in Win2003.

I even tested to create another new Userid and assigned to the same group. It give the same error as well.

lstsaur · Post by **lstsaur** » Wed Apr 16, 2008 11:34 am

ysweec,
For Non-Domain Controller Windows 2003 Server, you must put "Authenticated Users" to your Local Security Policy. When you add users to the group, you should also include the Authenticated Users to the group. This will solve your problem.

ysweec · Post by **ysweec** » Wed Apr 16, 2008 7:20 pm

Hi lstsaur,

Can you guide me the way to put "Authenticated Users" to Local Security Policy and include the Authenticated Users to the group?
Your assist very much appreciated!

ysweec · Post by **ysweec** » Wed Apr 16, 2008 8:19 pm

Hi lstsaur,

Many many thanks to you. At last, I solved the problem. By setting as following,

1. Add "Authenticated Users" in Local Security Policy -> Local Policies -> User Rights Assignment -> Allow log on locally
2. Assigned "Authenticated Users" to the group

With that, it works!

lstsaur · Post by **lstsaur** » Wed Apr 16, 2008 8:28 pm

Sure. Login the Windows 2003 Server using an ID ( a member of Admisinstrators). Then, in Explorer, select Control Panel, Administrative Tools.
Start Local Security Policy.
Select Local Policies, User Rights Assignment.
Select Allow Log on Locally.
Select Action, Properties from menu.
Press Add User or Group button.
Press Locations button, select your local machine,
Press OK button.
Press Advanced button.
Press Find Now button.
Select Authenticated Users, Press OK Button.
Press OK button.
Press OK button.
Exit Local Security Policy

When you add a user to the group, then
In Explorer, select Control Panel, Administrative Tools.
Start Computer Management.
Select System Tools, Local Users & Groups.
Select Groups, in tree.
Select required group (in your case, dsgroup)
Select Action, Add To Group from menu.
Press Add button.
Press Locations button.
Select your local machine name, Press OK button.
Press Advanced button.
Press Find Now button.
Select users (in your case, dsuser) to be added to the group, also
including Authenticated Users, Press OK Button.
Press OK button.
Press OK button.
Close Computer Management.