Palo Community Forum

Hi,
did you restart Apache after changing the passwords?

I Have the same problem,
After removing the new users und setting the old passwords ( by using palo-excel) and restarting all services web-login was possible. Now I changed the users und passwords once more. I could work with new passwords and users with palo excel, it was also possible to login over palo web, but it was also possible to login into palo-web with the old passwords. After some time the apache-Server crashed, apache_error_log: [error] [client 172.16.34.82] proxy: error processing body. Client aborted connection., referer: http://xxxx/xxxx/xxxx/main.php
I restarted all servers, but have no access to palo-web at all. Message:
"unable to fetch user group"
Now no message in apache-error_log
core-log:
ERROR fatal error! failed to load extension 'palo_wss3.dll': Caught exception: not authorized for operation : login error
palo_server_log:
INFO: user 'Paul' logged in
WARNING: error code: 1009 description: not authorized for operation message: login error
Any ideas???
Best regards
Roland
@ PerMerte: Could you solve the problem???
Best regards
Roland

Hello,
1. If you are wondering about the message "unabe to fetch user group" (palo-web)
2. ERROR fatal error! failed to load extension 'palo_wss3.dll' (log-file)
3. error code: 1009 description: not authorized for operation message: login error (log-file)
4. You can use old and changed passwords in palo-web in the same time
5. The next day you have no access to palo web at all
6. The restart of the services doesn´t help
Then maybe you have changed the admin-password, but have forgotten to change this password also in the files ./httpd/app/etc/config.php and ./core2/palo_wss3_config.xml (windows paths).
I wonder why have found this information only in the forum and not in the documentation, maybe this information is quite hidden? I think many users are changing the admin-password and this leads often to frustration. Why is the changing of the admin-password so complicated?
Best regards
Roland

In the current version, the "admin" user isn't used anymore for internal communication of the components with OLAP Server; instead a special user ("_internal_suite") with a password randomly generated during setup is used.
So changing the admin password doesn't influence internal communication anymore.

Hello Dominik,
do you speaking about the premium-version? I use the community version 3.1., maybe this function is part of the next community-realease?
Best regards
Roland

Ich habe ein ähnliches Problem. Ich habe unter Version 3.0 eine Palo-Installation durchgeführt und dabei das Datenverzeichnis auf ein eigenes Laufwerk gelegt.

Nun habe ich ein Update auf Version 3.2 durchgeführt. Anfangs hat der Web-Zugriff auch funktioniert. Als ich dann ein Berechtigungssystem aufgebaut hatte und den Usern Passwörter zugeordnet habe, war dann plötzlich der Zugriff per Web nicht mehr möglich; über den Excel-Client funktioniert das Berechtigungssystem wunderbar. Beim Web-Zugriff kommt ständig die Fehlermeldung "ERROR: Unable to fetch user group!" Anscheinend wird aber doch auf die Berechtigungen zugegriffen: nachdem ich das Passwort falsch eingegeben hatte, kommt die Meldung: "ERROR: Username or password invalid!"

Bitte um Hilfe.

@Schimanski:

Does the admin-user work?

Are all the new users members of a group?

@ fr@nk:

Thanks for your answer.

Admin doesn't also work. All users are member of groups, roles are defined, the groups have rights on dimensions, ...

It doesn't work

Did you restart the apache-server?

Hello fr@nk,

i tried it several times. New installations on the Palo-Server and on new systems didn't bring success. I'm hopeless.

Hi Schimanski,

1) are the user-account activated?
2) it looks like a authority problem.
The users are member of groups(#_USER_GROUP), these groups have roles(#_GROUP_ROLE). You must config the roles (#_ROLE_ROLE_PROPERTIES). Then you have to config the rights for the objects (#_ROLE_RIGHT_OBJECT). And after that you can define the group rights for single dimensions (#_GROUP_DIMENSION_DATA_Datatypes) etc.

To config it in excel: Palo > paste view > (db) system > userrightscube > and then use the "#_xxx" form the braces to config it!

Best regards

tell us which log-files you checked

... and which login/credential specific error messages you found

Thanks to all for your help

Palo is running well with the Excel AddIn with our Rights-System. The problem occures, when i'm trying to get access to the Web. Even with the admin i get the same Error-message.

Now i tried to configure the ROLE_PROPERTIES: there's only the "inactive"-Element; there are no other elements! How can i extend these elements?

I created the Server, the database an the cubes with Palo 3.0 and made several updates - is this probably the reason for my problems? The database is in a seperate path.

ROLE_PROPERTIES shows two attributes for each role:
description
inactive


Given roles are:
admin
poweruser
editor
viewer
designer
user

ROLE_PROPERTIES: How can i extend these elements?

Quoted

ROLE_PROPERTIES: How can i extend these elements?

What do you wanna do?

For each role you have the attributes DESCRIPTION and INACTIVE. You can't add more attributes in this view.

Hi,

if you are on 3.2 CE - do you have the _internal_suite user?
Is the user member of the admin group?
Did you change the user's pwd?
If so, did you change it to the same value in the respective config files?

Regards.