Forum Discussion

wayney_128269's avatar
wayney_128269
Icon for Nimbostratus rankNimbostratus
Aug 21, 2006

not authorized to access "urn:iControl:System / ConfigSync::save_configuration

Hello,

 

 

 

I'm getting this error when trying to issue a ConfiguSync. The user account that I am using is an admin account. Why is this happening?

 

 

 

Error:Non-fatal exception was thrown synchronizing config to BigIP device: User "userxyz" is not authorized to access "urn:iControl:System/ConfigSync::save_configuration". at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall) at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object[] parameters) at VIPNetXML.F5System.ConfigSync.SystemConfigSync.save_configuration(String filename, SystemConfigSyncSaveMode save_flag) at VIPNetXML.BigIP.F5PostIf.postV9(Device myDev, String[] dipIp, String[] action, String[] serverFarm)

 

networkdeviceabc [10.10.10.20],

 

 

 

thanks
dev
devops
iControl
  • Joe_Pruitt's avatar
    Joe_Pruitt
    Aug 21, 2006
    For an admin user this shouldn't happen. Our front level authentication passes along an access level to the iControl daemon and it will use this value to determine whether access is granted. Is it just the synchronize_configuration() method that is blocked? Odds are other "set_*" type methods are getting blocked as well.

     

     

    I'd try going back and making sure your user does indeed have full admin rights (and maybe tweaking the settings back and forth to make sure the configuration is setup correctly).

     

     

    If this still persists, then this may be more than we can support here at DevCentral as it will require some system level configuration data that isn't appropriate to post in a public forum. You might have to go through the product support channel to work this out.

     

     

    -Joe
  • Amrit_Lalli_952's avatar
    Amrit_Lalli_952
    Icon for Nimbostratus rankNimbostratus
    Nov 01, 2006
    I am guessing my problem isnt related.

     

     

    But I tried saving SAVE_BASE_LEVEL_CONFIG, which worked.

     

     

    When i try to save SAVE_HIGH_LEVEL_CONFIG, It doesnt write to the file.

     

     

    This isnt related to this threads subject is it?
  • Joe_Pruitt's avatar
    Joe_Pruitt
    Nov 02, 2006
    success for those methods depends on the file names you specify. Those flags equate to the following system commands (and generated config files).

     

     

    SAVE_BASE_LEVEL_CONFIG: "bigpipe base save" - config/bigip_base.conf

     

    SAVE_HIGH_LEVEL_CONFIG: "bigpipe save" - config/bigip.conf

     

     

    I would suggest you try issuing those commands from the file system as that is all the iControl interface is doing.

     

     

    -Joe