[archive] Thin CLient & UNC

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

You do not specify what kind of files you are opening. But I presume it is normal files, and when you say in "Thin Client", you do not prefix it with the DISPLAY flag so that the file is actually attempted opened on the server, e.g. the acurcl launched runtime.

Thus, what you are running into is the access privileges problem. Dependent on the configuration, what happens when you have a thin client connect to acuconnect, it will launch the "remote" runtime on the server using the Local Administrator account. While this account gives you all the credentials you will need for execution locally on the server, it serves no good in a network, because, a local administrator account by its very nature does not have any access rights outside its own "home" so to speak.

In order to access unc paths, e.g. paths in the network of yours, you must use WINDOWS NT logon and a user that has sufficient privileges on the machine hosting the UNC you use, eventually you will also have to direct the runtime to be launched with that particular account.

Look in the manual of Acuconnect and documentation on NT-LOGON.

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

Thanks Gisle,

But I'm still at a loss as to what to do next.

The files are plain old line sequential files, which some other application creates for the purpose of our software importing.

I've tried looking at the documentation, and set NT_SECURITY to LOGON, etc.

I also tried seting up an alias of basically any user, and any machine use the local name of Administrator with the correct password. And the program still returns a file status of 93,00

Any other ideas what I could look at.

My own user account on the NT4 server in question has Administrator privilages set on it, but alas I still am no further on.

Thanks,

Shaun

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

If it is a permissions issue as Gisle said, here is something you can try. (I have not tried this with Acucobol or the thin client, but I do it in some other services I wrote.)

Write a program that calls the "GetUserName" Windows API call and run it from the thin client and display the results.

If it returns "SYSTEM" as the user, then that is the root of your problem - SYSTEM (aka LocalSystem or the "System Account") is a special account for running services and has null credentials on the network and cannot access any network shares.

As an aside, what would really be helpful is to be able to run the thin client server as a specific user account instead of the System Account, so all file accesses are done as that user. This is different than setting NT_SECURITY to LOGON because I don't want to set up a separate account for every remote user and I don't want them to have to enter a password. The docs say that this could be done by setting NT_SECURITY to OFF, but in reality you cannot start the AcuRCL service as a user other than the System Account (at least not through version 6.0).

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

OK, We're off!

Thanks Gisle, its working now.

Basically what had to be done (thanks to some guidance by Nigel Eaton) was manually edit the acurcl.cfg file and add the NT_SECURITY LOGON as you said.

Trying to do this through the ACURCL control panel didn't seem to work? Which was what I was doing, however every time I restarted the service it would reset back to 0.

I've now had a user added on the system with Administrator privileges which all the thin client users map over to.

Regards,

Shaun

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

Originally posted by JoeD As an aside, what would really be helpful is to be able to run the thin client server as a specific user account instead of the System Account, so all file accesses are done as that user. This is different than setting NT_SECURITY to LOGON because I don't want to set up a separate account for every remote user and I don't want them to have to enter a password. The docs say that this could be done by setting NT_SECURITY to OFF, but in reality you cannot start the AcuRCL service as a user other than the System Account (at least not through version 6.0).

Gisle,

Can you offer any advice on the above comment?
I've got alias's setup through the acurcl -access which works file just so long as your user password matches my Domain password and you're a valid alias.

Thanks,

Shaun

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

Originally posted by JoeD As an aside, what would really be helpful is to be able to run the thin client server as a specific user account instead of the System Account, so all file accesses are done as that user. This is different than setting NT_SECURITY to LOGON because I don't want to set up a separate account for every remote user and I don't want them to have to enter a password. The docs say that this could be done by setting NT_SECURITY to OFF, but in reality you cannot start the AcuRCL service as a user other than the System Account (at least not through version 6.0).

Gisle,

Can you offer any advice on the above comment?
I've got alias's setup through the acurcl -access which works file just so long as your user password matches my Domain password and you're a valid alias.

Thanks,

Shaun

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

I am not sure if I understand what you are saying. Is it so that in order to access resources in the domain, the only way you can to that is if your local user has the same name and pwd as the domain user?

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

Yep thats it.

Example.

Domain user Shaun with password shaun has administrator privileges set.

access file is as follows
Client Machine Name Client user local user password
* shaun shaun

Now when I run our application via thin mode, I get presented with the menu immediately.

If my colleague Glenn does the same thing it asks for a password, however if he enters the correct password it almost appears to ignore it as programs which need to access UNC paths cannot.

However if he changes his password to = shaun then it doesn't ask for a password and he can access the UNC paths?

Confusing.......


Thanks,

Shaun

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

The latter is presumably happening because he is being mapped to user Shaun. Hard to tell without "looking" at the stuff.
There are just too many details to check out here, I think you will be better of contacting support on this.

[Migrated content. Thread originally posted on 19 August 2004]

Folks,

I appear to have 2 problems with UNC paths.


First one

If I open I-O or EXTEND on a non existant file it just complains with error status 35,00.
I've got IO_CREATES 1 in a config file by the way.

Second one

I open input a UNC file locally on my own machine, and it works fine, however if I run the same program through the thin client it always returns error status 93,00.
If the file does not exist, it still seems to want to return error status 93,00.

Any ideas?

I could get around this all with mapped drives, but i'd have to do this on 12 different machines. Plus it a government customer, it might upset them if I ask for access to all these machines.

Edited to say these are both Line Sequential files, and not indexed files.

Regards,

Shaun

The latter is presumably happening because he is being mapped to user Shaun. Hard to tell without "looking" at the stuff.
There are just too many details to check out here, I think you will be better of contacting support on this.