Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rbac settings authentication issues #292

Open
ghuser580 opened this issue Jan 24, 2024 · 1 comment
Open

rbac settings authentication issues #292

ghuser580 opened this issue Jan 24, 2024 · 1 comment
Assignees
Labels
bug Something isn't working

Comments

@ghuser580
Copy link

Gateway Version: 2311
Extension Version that's been used if it applies

To Reproduce
Steps to reproduce the behavior:

  1. Go to '..server connections then click add and connect to this server'
  2. Click on 'settings then role based access control - click apply do not click away for at least 10 mins (seriously -until you see the green notification - do not click refresh during this time )....'
  3. once you see that it has been applied, add a non privileged user to the local group "Windows Admin Center readers" on the server which has been created as part of the rbac process' using ad it just needs to be a domain user - the default for Mac gateway users is also domain users
    4.copy the wac gateway address and logon to the gateway with the non privileged account - this works and will leave a view of the only server being the way gateway server
  4. add the server where the rbac config has been deployed and try to authenticate - you will get "your credentials didn't work" error. and possibly some web socket errors showing up in the console from the alarm bell icon in the top rh corner

Expected behavior
it should lcomplete and add the server to the console but it didn't - the credentials were checked using the eye revealer and were correct multiple times.

I connected with admin credentials from the gateway to the rbac server and added the non privileged user to the remote management group - following that the above procedure worked and the credentials were accepted.

tried to connect to the rbac server as non privileged user (from a client machine using the Wac url) and now the error is "exception - operation blocked by rbac settings"

if I change the "manage as" credential directly on the WAC gateway itself then the non privileged user connects through to the rbac configured server as a limited access user as expected

@ghuser580 ghuser580 added the bug Something isn't working label Jan 24, 2024
@RebeccaMbula
Copy link

Hi! Thank you for bringing it this issue! We are investigating the RBAC currently.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

3 participants