No Engine credentials were found on the Services Tier
Moderators: chulett, rschirm, roy
The engine tier cannot use the internal user registry.
For an internal user registry, set User Registry to Not Shared and map credentials.
For an external user registry, set User Registry to Shared or Not Shared, depending on your setup. Mine is like yours all on one box and I have it set to Shared. In that case, no credential mapping is required.
Details are outlined in the Admin Guide, but take your time because it reads a bit like IRS 1040 instructions...
For an internal user registry, set User Registry to Not Shared and map credentials.
For an external user registry, set User Registry to Shared or Not Shared, depending on your setup. Mine is like yours all on one box and I have it set to Shared. In that case, no credential mapping is required.
Details are outlined in the Admin Guide, but take your time because it reads a bit like IRS 1040 instructions...
Choose a job you love, and you will never have to work a day in your life. - Confucius
Here's what I did:
1) Reinstalled IIS 8.5 with Engine & Services on the same RHEL box and metadata repository pointing to an empty Oracle DB( XMETA is the name of the DB, schema and the user)
2) USER123 belonging to group dstage was already existing in RHEL
3) Opened web console and did the following:
a) Users and Groups -> Users -> New user -> [ Created USER123 and assigned all the roles in Suite & Suite component; Save & Close ]
b) Domain Management -> Engine Credentials [ Value of "User Registry" is "Not Shared" ]
c) Domain Management -> Engine Credentials -> Open User Credentials -> [ Added USER123 to "Map User Credentials" tab; Selected USER123 and typed in USER123 details in "Assign User Credentials" and clicked on Apply ]
d) Now "InfoSphere Information Server Engine Operating System Users" shows USER123 for the suite user USER123.
e) Logged out of web console and restarted RHEL. Waited until I could login to web console and tried logging into Designer using user USER123. Got the same error: No Engine credentials were found on the Services Tier for the specified user ('USER123') on Information Server Engine '<IP address>'
Have I followed the steps correctly in the right order to make Internal User Registry authentication work?
Just a thought:
Should I have created dstage group in web console and added USER123 to it?
1) Reinstalled IIS 8.5 with Engine & Services on the same RHEL box and metadata repository pointing to an empty Oracle DB( XMETA is the name of the DB, schema and the user)
2) USER123 belonging to group dstage was already existing in RHEL
3) Opened web console and did the following:
a) Users and Groups -> Users -> New user -> [ Created USER123 and assigned all the roles in Suite & Suite component; Save & Close ]
b) Domain Management -> Engine Credentials [ Value of "User Registry" is "Not Shared" ]
c) Domain Management -> Engine Credentials -> Open User Credentials -> [ Added USER123 to "Map User Credentials" tab; Selected USER123 and typed in USER123 details in "Assign User Credentials" and clicked on Apply ]
d) Now "InfoSphere Information Server Engine Operating System Users" shows USER123 for the suite user USER123.
e) Logged out of web console and restarted RHEL. Waited until I could login to web console and tried logging into Designer using user USER123. Got the same error: No Engine credentials were found on the Services Tier for the specified user ('USER123') on Information Server Engine '<IP address>'
Have I followed the steps correctly in the right order to make Internal User Registry authentication work?
Just a thought:
Should I have created dstage group in web console and added USER123 to it?
Last edited by mavrick21 on Thu May 03, 2012 5:31 pm, edited 1 time in total.
I assume you ran XMETA scripts before the install.
You should not need to restart the OS after adding users.
You don't need to create any groups in the web console.
Your error message indicates USER1 vs. USER123. Double check that first.
You should not need to restart the OS after adding users.
You don't need to create any groups in the web console.
Your error message indicates USER1 vs. USER123. Double check that first.
Choose a job you love, and you will never have to work a day in your life. - Confucius
I thought if you went non-DB2 (DB2 is default) on the repository that you first had to run the DDL to create the objects in the repository. Maybe not... Install guide for your version would say.
Also confirm an admin login works, like isadmin or dsadm, before setting up new IDs.
Also confirm an admin login works, like isadmin or dsadm, before setting up new IDs.
Choose a job you love, and you will never have to work a day in your life. - Confucius
I presume I need to install 8.5 using UNIX root else I get this error: "Current login name is not root, please switch to root to continue installation."
Most of the installed UNIX directories have root as user and root as group. Could this be causing the issue? Should dstage group belong to root group or something like that?
Most of the installed UNIX directories have root as user and root as group. Could this be causing the issue? Should dstage group belong to root group or something like that?
root install is the way to go. You don't need to add root into any groups. It is normal for root to own many files under the install location. Did you try logging into any DataStage clients as isadmin and dsadm IDs (not into Web Console)?
Choose a job you love, and you will never have to work a day in your life. - Confucius
Just tried isadmin and wasadmin in Designer and Director client. Same error. If I try a dummy username and password I get "Failed to authenticate the current user against the selected Services Tier"
I also checked the firewall on my client (Windows Server 2003 R2 service pack 2) and it's turned off. I hope this version of windows is not the one causing it.
I also checked the firewall on my client (Windows Server 2003 R2 service pack 2) and it's turned off. I hope this version of windows is not the one causing it.