Forum Discussion
NimbostratusHow grant Manager rights to create iApp
I have a User with (Manager Rights) in a new partition trying to create iApp. However I gotten the following error after select a template.
Following it the error message: "Error parsing template:Tcl_Init failed: (invalid command name "file" while executing "file join $i init.tcl" (procedure "tclInit" line 21) invoked from within "tclInit" line:46)"
Please help.
16 Replies
Hi,
Which iApp and version of BIG-IP are you using?
thanks
Mike
Microgag_61404HI Mike, Apologies for the late reply. My version is 11.5.1-HF2. Thanks
- If you are deploying an iApp template that uses AFM, and you don't want to use AFM, try deprovisioning the AFM module. Otherwise, you'll need to deploy iApps as a user with the admin role.
- Microgag_61404Hi Mike, Then can I create different admin role that only have access/view only a single partition instead of all partition?
jmb_01_147406Hi Mike, We have the same problem we tried to deprovisioning the AFM module but the problem persist. Can you help me please? John
Olusola_Ayoade_Hi Mike,
Please help with the solution.
- Olusola_Ayoade_
i am getting this same error "Error parsing template:Tcl_Init failed: (invalid command name "file" while executing "file join $i init.tcl" (procedure "tclInit" line 21) invoked from within "tclInit" line:46) i am using 11.5.1 with casv_1.4 for exchange 2013.
For now, I recommend that you create a user with the admin role to deploy iApps, and open a support case with F5 about removing this limitation. If you reply to me with the case number, I will track the issue.
- Olusola_Ayoade_
Thanks Mikeshimkus, i appreciate your assistance, here is the current error i am having 01070313:3: Error reading key PEM file /config/filestore/files_d/Common_d/certificate_key_d/:Common:exchangepfx.key_44822_1 for profile /Common/f5exchange_iapp.app/f5exchange_iapp_clientssl: error:0907B068:PEM routines:PEM_READ_BIO_PRIVATEKEY:bad password read
How do i use a .pkf ssl certificate on BIG IP so that i will have an ssl key and ssl Cert
- Seems like you have a bad password on that pfx file? Here's more info about importing certs and keys: https://support.f5.com/kb/en-us/solutions/public/14000/600/sol14620.html
- Olusola_Ayoade_
Thanks Mike,
Certificate issues have been sorted but the current problem i have now is that only f5exchange_iapp_combined_https is active out of all my virtual servers, how can i test on my exchange server to confirm this other services are down from the exchange server f5exchange_iapp_combined_http f5exchange_iapp_imap4 f5exchange_iapp_pop3
- f5exchange_iapp_combined_http is a redirect virtual server, so that one should never show up or down, only unchecked (the blue box). For POP and IMAP, can you telnet directly to the server on the POP/IMAP service ports? Can those mail clients connect if you bypass the BIG-IP?
- Olusola_Ayoade_
Thanks Mike, all works now i can see node statistics shows traffic gets to the node and passes through the Virtual server, if i put in the it doesnt lead me to the OWA page.
But using ip address of individual server takes me to the individual server, please help why is the VIP not taking me to the owa page.
Kindly help
Can you be more specific? When you go to the IP address of the OWA virtual server, do you get any response? Do you see traffic to the pool member at that time?
In the iApp, did you select SSL offload and if so, are your Client Access Servers correctly configured to accept unencrypted traffic?
- Olusola_Ayoade_
when i got to the VIP address CONFIGURED for the cas servers it does not take me to the owa page but i see bit statistics for the node on my f5 change and on the pool members the nit and packets statistics changes as well.
i selected ssl offload in my iapp, how will i know if my cas servers are configured to accept unencrypted traffic?
