Solutions Enabler : Symcli commands failed with error "Symmetrix access control denied the request"

Riepilogo: Symcli commands failed with error "Symmetrix access control denied the request"

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.
Scopri le altre risorse

Sintomi

Array had both symauth and symacl enabled

Found following errors in symapi.log: 
08/05/2022 00:33:34.580 15624 17628 EMC:SYMCFG read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545

08/05/2022 00:33:35.511 9944 20468 EMC:SYMSNAPVX read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545

08/05/2022 00:33:36.527 9944 20468 EMC:SYMSNAPVX read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545

08/05/2022 00:33:37.543 9944 20468 EMC:SYMSNAPVX read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545

08/05/2022 00:33:38.558 9944 20468 EMC:SYMSNAPVX Failed to load information. remote: 0, remote_hop_num: 0, retries: 3, sts: SYMAPI_C_ACCESS_DENIED - error msg: Symmetrix access control denied the request

08/05/2022 00:33:39.426 19788 20016 EMC:SYMSNAPVX read_authz_file Error reading Authz rules from array: 000497xxxxxx - 2545
Above error indicates issue with symauth. However, checked 
 "symauth show -username"
and verified the same user is seen in 
 "symauth -sid <SID> list -users"
 Also checked 
"symacl -sid <sid> show accgroup Admingrp"
and verified that host is part of symacl AdminGrp.

Tried to sync by running 
"symcfg sync -sid <SID>"
however, sync failed with error "Symmetrix access control denied the request".

Causa

symacl access issue

Risoluzione

Run 
"symacl -sid XXX show accgroup AdminGrp -acl"
and check if AdminGrp has necessary access type 
C:\>symacl -sid XXX show accgroup AdminGrp -acl

Symmetrix ID: 000197XXXX
    Group Name                            Pool Name                            Access Type
    ----------------------------------    ---------------------------------    -----------
    AdminGrp                              ALL_DEVS                             ADMIN
    AdminGrp                              ALL_DEVS                             ALL

In above output we can see AdminGrp has access type ADMIN and ALL., we will need to add other appropriate access to run commands for example BASE and BASECTRL to run other commands.
image.png

Refer Array control and Management guide for more information about Available access control permissions : 
https://dl.dell.com/content/docu95463

Command to grant permissions to access group: 
symacl -sid <SID> commit -file <FileName>

Where file contains: 
grant access=AccessType to accgroup GroupName for accpool PoolName | ALL | NON-POOLED devs
Once BASE and BASECTRL access was granted to AdminGrp we were able to execute commands without any error. 
C:\>symacl -sid XXX show accgroup AdminGrp -acl

Symmetrix ID: 00019XXXXXX
    Group Name                            Pool Name                            Access Type
    ----------------------------------    ---------------------------------    -----------
    AdminGrp                              ALL_DEVS                             ADMIN
    AdminGrp                              ALL_DEVS                             ALL
    AdminGrp                              ALL_DEVS                             BASECTRL
    AdminGrp                              ALL_DEVS                             BASE

Prodotti interessati

Solutions Enabler
Proprietà dell'articolo
Numero articolo: 000204041
Tipo di articolo: Solution
Ultima modifica: 11 lug 2024
Versione:  3
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.