Symptom
- Scheduling documents or reports fails randomly with the error: Object failed to run due to insufficient security privileges
- It is happening in Crystal Reports and Web Intelligence
Environment
- BusinessObjects Enterprise 3.1 SP7
- Windows 2003 Server
- Active Directory
Cause
When tracing the Central Management Server (CMS) during the schedules that failed, the following lines appeared:
The following groups could not be verified: S-1-5-21-1166504003-212407854-1952712345-83207
GetAliases threw exception: Active Directory Authentication failed to verify one or more of the mapped groups. If the problem persists, please delete and re-map into BusinessObjects Enterprise the following group(s): S-1-5-21-1166504003-212407854-1952712345-83207 Plugin error: SecWinAD Error: invalid parameters in GetUsers().
Resolution
Identify the problematic group. In the traces you will be able to identify the GUID, using the following tools, you should be able to obtain the name of the group: AD Explorer and LDP.
With your Active Directory administrators, identify if there is a problematic domain controller. You can identify the domain controller used searching for the following line in the CMS traces:
WINAD: ADNetworkBinding::BindIADsToDomainController() -- Binding to domain controller with LDAP://NAME_OF_YOUR_SERVER -- hr=0
Keywords
KBA , BI-BIP-ADM , BI Servers, security, Crystal Reports in Launchpad , BI-BIP-AUT , Authentication, ActiveDirectory, LDAP, SSO, Vintela , BI-BIP-PUB , Publishing and scheduling in InfoView/BI launch pad , Problem