[Search for users] [Overall Top Noters] [List of all Conferences] [Download this site]

Conference azur::mcc

Title:DECmcc user notes file. Does not replace IPMT.
Notice:Use IPMT for problems. Newsletter location in note 6187
Moderator:TAEC::BEROUD
Created:Mon Aug 21 1989
Last Modified:Wed Jun 04 1997
Last Successful Update:Fri Jun 06 1997
Number of topics:6497
Total number of notes:27359

613.0. "DNS-accessdenied on REGISTER, but can get to dir. OK with DNS" by WIKKIT::WARWICK (Trevor Warwick) Thu Jan 10 1991 16:53

    
    I'm having problems with trying to REGISTER a Bridge with MCC T1.1 EFT.
    
    When I use the register command, I get the following DNS message:
    
    DECmcc (T1.1.0)
    
    MCC> regi bridge dec:.reo.cbn.bridge_lb200_1 address=08-00-2b-19-0b-c3
    
    BRIDGE DEC:.reo.cbn.bridge_lb200_1
    AT Thu 10-Jan-91 18:51:
    
    The requested operation cannot be completed
    MCC Routine Error = %DNS-E-ACCESSDENIED, No rights to perform requested operation
    
    The "DEC:.REO.CBN" directory is set up to be W:RWED, and I confirmed
    this by using DFS$CONTROL to create and delete an access point in the
    directory, from the same account that I ran MCC from.
    
    Is there some other directory that MCC is also trying to write to ?
    
    Trevor
T.RTitleUserPersonal
Name
DateLines
613.1TOOK::MULLIGANFri Jan 11 1991 16:129
When you register a bridge with this command
regi bridge dec:.reo.cbn.bridge_lb200_1 address=08-00-2b-19-0b-c3
two things happen
1. an dns object .bridge_lb200_1 is created under dec:.reo.cbn
2. a dns soft link 08002b190bc3 is created under .mcc_bridge_backtranslation

you need write access to both the "dec:.reo.cbn" and 
".mcc_bridge_backtranslation" directories.

613.2MARVIN::WARWICKTrevor WarwickFri Jan 11 1991 16:308
    
    Is there someone who is in charge of authorizing MCC field test users
    for access to the various DEC:.MCC* directories ?
    
    I had a look in those directories, and they seem to be empty. Does that
    mean everyone else is using their own private namespaces ?
    
    Trevor
613.3DEC: access deniedJETSAM::WOODCOCKMon Jan 14 1991 17:2712
    Is there someone who is in charge of authorizing MCC field test users
    for access to the various DEC:.MCC* directories ?

> At this time access is not allowed in DEC: for MCC field test users. Work
> is ongoing to resolve a couple of issues for making DEC: available.
    
    I had a look in those directories, and they seem to be empty. Does that
    mean everyone else is using their own private namespaces ?
    
> Yes

brad...
613.4CRONIC::LEMONSAnd we thank you for your support.Fri Sep 20 1991 20:225
I'm having similar problems when trying to create a domain.  Like bridges, do
domains create back links?

Thanks!
tl
613.5Does DECmcc audit-trail its DNS operations?CRONIC::LEMONSAnd we thank you for your support.Sun Sep 22 1991 12:0418
    When I attempt a CREATE DOMAIN command, I get %dns-e-accessdenied
    messages.  I've checked and re-checked the DNS access, and it looks
    great.  When DECmcc fails, it only tells me:
    
    	"The requested operation cannot be completed"
    
    but I'm left with no idea of what operation is failing.  I know that,
    for things like bridges, two entries are created:  one in my local
    directory for bridges, one in a root-level backlink directory.
    
    What DNS operation(s) are performed when a domain is created?
    
    Also, is there a DECmcc logging operation I can enable that will show
    me that DNS operations being performed?
    
    Thanks!
    tl
    
613.6KAOT01::S_HYNDMANMon Sep 23 1991 20:4811
    
    	I'm no wiz but try this.  If you have the name service running
    on your node enable decnet event 352.* and 353.1-4.  This should log
    the event when your access fails and may lead you to what is actually
    being touched.
    
    	I don't see a backtranslation directory for domains in my name
    space.
    
    
    Scott
613.7For domains, backtranslation is not requiredTOOK::A_MOOREWed Sep 25 1991 20:3317
When a domain is created, dns is called to create a dns object and some 
attributes.  Domains do not require backtranslation directory.  
Which makes creating a domain a way to test dns.  

When creating the domain from FCL did you use a dns directory or the dns 
root directory?  Check if dns directory was created and the protection is OK.

Can DFS$CONTROL access dns?

DECmcc does not log or trace dns transactions.  We do wish for a DECmcc access
module to manage dns.

  
Is DECmcc on Ultrix or VMS.  Is the dns server on Ultrix or VMS?  What are their
versions?

Al Moore
613.8Domains, yes. Bridges, no.CRONIC::LEMONSAnd we thank you for your support.Mon Oct 07 1991 16:5517
    Re .6, .7  Thanks for the help.  It turned out that I had not set up
    the access correctly to the .hlo.s.mcc.domain directory.  I can now add
    domains.
    
    However, when I try to add a bridge, I get the DNS 'No rights . . ."
    message again.  I've checked the access on both my bridge directory
    (.hlo.s.mcc.bridge) and on the backtranslation directory
    (.mcc_back_translation).  Both look good (I'm using the NCC000::SYSTEM
    account, which is part of the group .hlo.obj_admin, which is part of
    the group .mcc_admin).
    
    Again, how can I locate the exact DNS command that is being rejected? 
    Will enabling logging of the DNS events, either on my DECmcc server or
    on my DNS server, point to the problem?
    
    Thanks!
    tl
613.9backtranslation dir name?TOOK::R_SPENCENets don't fail me now...Mon Oct 07 1991 18:265
    .mcc_back_translation  ???
    
    Is this a typo? Should be .MCC_BRIDGE_BACKTRANSLATION
    
    /rob
613.10CRONIC::LEMONSAnd we thank you for your support.Tue Oct 08 1991 01:277
    Rob
    
    Yep, that was a typo.  And my questions . . . .?
    
    Thanks!
    tl
    
613.11Debug didn't help me debugCRONIC::LEMONSAnd we thank you for your support.Fri Oct 11 1991 18:4960
613.12Register command needs access rights in Backtranslation dir.TRM::KWAKThu Oct 24 1991 12:1813
    RE: .11                                                    
    
    When you try to register bridge .hlo.s.mcc.bridge.cronic, you need
    full DECdns access to .hlo.s.mcc.bridge directory and 
    .MCC_BRIDGE_BackTranslation directory in your default namespace.
    (Is it DEC:?)
    
    The MCC Bridge registration command creates DNS object  
    .hlo.s.mcc.bridge.cronic and creates DNS softlink 
    .MCC_BRIDGE_BackTranslation.08002B08C9DD pointing to the DNS object.
    
    At the time you issued the MCC register command, you might have not had
    all the required access rights in the namespace/directories.