I'm having trouble calling a workflow via SOAP with a certain user. To avoid permission issues initially i'm just putting this user as a vco admin to see if it works.
I have my vcoadmins group (system-domain) in in the vsphere web client which is also set as the vCO admin group set in authentication > SSO Config in vCO itself.
I add the developers account to the vcoadmins group to see if his program can run a workflow and it works fine.
I add a service account which is just an active directory user to the vcoadmins group service and it fails with the error below. If I remove the developpers account from vcoadmins and he tries again, it fails. I don't understand where vCO might be pulling permissions to make one user work and another fail. If I try logging into the vCO desktop client with one of these test users, i get in just fine and see everything.
Thanks
2013-08-09 14:06:13.695-0400 ERROR [DefaultVerifier] User LDAP-USER-['MyUserName'] - MYDOMAIN.COM\MyUserName doesn't have necessary rights 'View', required to execute operation on (VSOServer, _ROOT).
2013-08-09 14:06:13.695-0400 ERROR [VcoFactoryFacade] Unable to login (Ex: javax.security.auth.login.LoginException: [0002]User 'MyUserName@mydomain.com' is not authorized!)
2013-08-09 14:06:13.695-0400 ERROR [VSOFactoryClient] [0002]User 'MyUserName@mydomain.com' is not authorized!
javax.security.auth.login.LoginException: [0002]User 'MyUserName@mydomain.com' is not authorized!
at com.vmware.o11n.service.factory.VcoFactoryFacade.authenticate(VcoFactoryFacade.java:328)
at com.vmware.o11n.service.factory.LocalVSOFactoryInvocationHandler.connect(LocalVSOFactoryInvocationHandler.java:79)
at ch.dunes.model.client.VSOAccessPointAwareFactoryClient.connectWithSession(VSOAccessPointAwareFactoryClient.java:39)
at ch.dunes.model.client.VSOFactoryClient.doConnect(VSOFactoryClient.java:449)
at ch.dunes.model.client.VSOFactoryClient.connectInternal(VSOFactoryClient.java:423)
at ch.dunes.model.connection.SharedVSOFactoryClient.connect(SharedVSOFactoryClient.java:68)
at ch.dunes.model.connection.SharedFactoryCenter.createAndBindFactory(SharedFactoryCenter.java:158)
at ch.dunes.model.connection.SharedFactoryCenter.getFactoryJndiNameForUser(SharedFactoryCenter.java:110)
at ch.dunes.model.connection.SharedFactoryFinderHelper.findFactory(SharedFactoryFinderHelper.java:76)
at ch.dunes.vso.webservice.server.WebServiceImpl.retrieveSharedVSOFactory(WebServiceImpl.java:1065)
at ch.dunes.vso.webservice.server.WebServiceImpl.retrieveSharedVSOFactory(WebServiceImpl.java:1047)
at ch.dunes.vso.webservice.server.WebServiceImpl.getWorkflowsWithName(WebServiceImpl.java:187)
at ch.dunes.vso.webservice.server.WebServiceSkeleton.getWorkflowsWithName(WebServiceSkeleton.java:614)
at sun.reflect.GeneratedMethodAccessor3627.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.axis.providers.java.RPCProvider.invokeMethod(RPCProvider.java:397)
at org.apache.axis.providers.java.RPCProvider.processMessage(RPCProvider.java:186)
at org.apache.axis.providers.java.JavaProvider.invoke(JavaProvider.java:323)
at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:454)
at org.apache.axis.server.AxisServer.invoke(AxisServer.java:281)
at org.apache.axis.transport.http.AxisServlet.doPost(AxisServlet.java:699)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at org.apache.axis.transport.http.AxisServletBase.service(AxisServletBase.java:327)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:179)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:524)
at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)
at java.lang.Thread.run(Unknown Source)
2013-08-09 14:06:13.695-0400 ERROR [SharedFactoryCenter] Cannot connect and bind shared Policy Factory : ch.dunes.util.DunesServerException: javax.security.auth.login.LoginException: [0002]User 'MyUserName@mydomain.com' is not authorized!
ch.dunes.util.DunesServerException: javax.security.auth.login.LoginException: [0002]User 'MyUserName@mydomain.com' is not authorized!
at ch.dunes.model.client.VSOFactoryClient.doConnect(VSOFactoryClient.java:479)
at ch.dunes.model.client.VSOFactoryClient.connectInternal(VSOFactoryClient.java:423)
at ch.dunes.model.connection.SharedVSOFactoryClient.connect(SharedVSOFactoryClient.java:68)
at ch.dunes.model.connection.SharedFactoryCenter.createAndBindFactory(SharedFactoryCenter.java:158)
at ch.dunes.model.connection.SharedFactoryCenter.getFactoryJndiNameForUser(SharedFactoryCenter.java:110)
at ch.dunes.model.connection.SharedFactoryFinderHelper.findFactory(SharedFactoryFinderHelper.java:76)
at ch.dunes.vso.webservice.server.WebServiceImpl.retrieveSharedVSOFactory(WebServiceImpl.java:1065)
at ch.dunes.vso.webservice.server.WebServiceImpl.retrieveSharedVSOFactory(WebServiceImpl.java:1047)
at ch.dunes.vso.webservice.server.WebServiceImpl.getWorkflowsWithName(WebServiceImpl.java:187)
at ch.dunes.vso.webservice.server.WebServiceSkeleton.getWorkflowsWithName(WebServiceSkeleton.java:614)
at sun.reflect.GeneratedMethodAccessor3627.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
at java.lang.reflect.Method.invoke(Unknown Source)
at org.apache.axis.providers.java.RPCProvider.invokeMethod(RPCProvider.java:397)
at org.apache.axis.providers.java.RPCProvider.processMessage(RPCProvider.java:186)
at org.apache.axis.providers.java.JavaProvider.invoke(JavaProvider.java:323)
at org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.handlers.soap.SOAPService.invoke(SOAPService.java:454)
at org.apache.axis.server.AxisServer.invoke(AxisServer.java:281)
at org.apache.axis.transport.http.AxisServlet.doPost(AxisServlet.java:699)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:710)
at org.apache.axis.transport.http.AxisServletBase.service(AxisServletBase.java:327)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:803)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:230)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:175)
at org.jboss.web.tomcat.security.SecurityAssociationValve.invoke(SecurityAssociationValve.java:179)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:524)
at org.jboss.web.tomcat.security.JaccContextValve.invoke(JaccContextValve.java:84)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:102)
at org.jboss.web.tomcat.service.jca.CachedConnectionValve.invoke(CachedConnectionValve.java:157)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:109)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:262)
at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:844)
at org.apache.coyote.http11.Http11Protocol$Http11ConnectionHandler.process(Http11Protocol.java:583)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run(JIoEndpoint.java:446)
at java.lang.Thread.run(Unknown Source)
Caused by: javax.security.auth.login.LoginException: [0002]User 'MyUserName@mydomain.com' is not authorized!
at com.vmware.o11n.service.factory.VcoFactoryFacade.authenticate(VcoFactoryFacade.java:328)
at com.vmware.o11n.service.factory.LocalVSOFactoryInvocationHandler.connect(LocalVSOFactoryInvocationHandler.java:79)
at ch.dunes.model.client.VSOAccessPointAwareFactoryClient.connectWithSession(VSOAccessPointAwareFactoryClient.java:39)
at ch.dunes.model.client.VSOFactoryClient.doConnect(VSOFactoryClient.java:449)
... 40 more