Re: [Openca-Users] Add new right problem

[郑依华]

Hi Adolfo.

 

I check the file opencaDirectory/etc/access_control/ca.xml,it has below configuration

**************************************************************************

        <acl_config>
            <acl>yes</acl>
            <list>/usr/local/openca/ca/etc/rbac/acl.xml</list>
            <command_dir>/usr/local/openca/ca/etc/rbac/cmds</command_dir>
            <module_id>0</module_id>
            <map_role>yes</map_role>
            <map_operation>yes</map_operation>
        </acl_config>

**************************************************************************

also I check the opencaDirectory/etc/rbac/acl.xml,it has below configuration for access control configuration

**************************************************************************

      <permission>
        <module>0</module>
        <role>.*</role>
        <operation>access control configure</operation>
        <owner>.*</owner>
      </permission>
**************************************************************************

I check the opencaDirectory/etc/rbac/cmds/*,I found "add_right" "add_role" "delete_right" "delete_module" all belong to "access control configure",they have the content like belows

**************************************************************************

<openca>
    <command_config>
        <command>
            <name>delete_module</name>
            <operation>access control configure</operation>
            <owner_method></owner_method>
            <owner_argument></owner_argument>
        </command>
    </command_config>
</openca>

**************************************************************************

but in my system,I can delete Modules and add roles,but can't "add new right" and "delete right",when delete right has below error,

**************************************************************************

Error 700

General Error The compilation of the command cmdDelete_right failed. Can't call method "get_xpath" on an undefined value at (eval 143) line 20.

**************************************************************************

and add new right has below error

**************************************************************************

Error 690

Configuration Error. The access control configuration was not initialized..

**************************************************************************
but how to do the "initialize" operator for access control configuration?
 
thank you!
 

 

 

 

Hi Yihua.

 

   It sounds like if you haven't configure properly the access_control section in opencaDirectory/etc/access_control. There, in the ca.xml (.template) at the very end there is  an acl_config section. Check that portion and the opencaDirectory/rbac/acl.xml (because they are related).

 

Adolfo

 

2006/2/7, 郑依华 <[EMAIL PROTECTED]>:

 

General->Configuration->Rights

 

press "Add New right" button

 

it show belows error

*******************************************

Error 690

Configuration Error. The access control configuration was not initialized..

*******************************************

what is the reason?can you give me some advise?

 

Best Regards
--
Yihua Zheng
 

--
Yihua Zheng