Deployer : What does mean "none@--@" on ACL group

, ,
#1

Hi,

I’m deploying in PRODUCTION and I’m meeting this curious dependency.
Is it normal ? What does it mean ?

Should I to click on “Add” or “Ignore” ?

  • Referenced Assets : IS_Preprod:groups
    none@–@

  • Assets :
    Set01

    • IS_Preprod:ACLs
    • Anonymous
    • Developers
    • Internal

Regards

#2

Hi Cedric,

this means, that there is something wrong with your ACL and group definition on either Source or Target Server or on both.

Most likely one of the ACLs you try to deploy has no members defined.

I have seen similar entries when using Central User Management and the ACL was referencing a Group or Role in MWS system directory which did not exist there.

Usually I do not deploy ACLs and Groups from one IS to another as their content might be differing.
Instead I create the ACLs and their contents manually on the targets and define the ACLs as existing.

Regards,
Holger

#3

Thanks Holger,

Initially I did not want to deploy ACL;
I was just deploying my packages. but during the checking step, the Deployer asks for resolving ACL dependencies.

In my ACL console, I can see :

Anonymous ACL :
Denied : none@–@

Maybe it’s just an issue ? “none@–@” means " ----none----" ?

Anonymous ACL :
Denied : ----none----

If it’s the same thing, maybe I can delete the “none@–@” item for it to be replaced by " ----none----" ?

Regards

Capture_ACL_@none@2.JPG
Capture_ACL_@none@2.JPG975×368 42.1 KB

#4

Hi Cedric,

you should delete the “none@–@” entry.

Looks somewhat strange to me.

When defining the deployment set and checking the dependencies just mark the ACLs as “Exists” and the Set will be satisfied.
As the mentioned ACLs are default ACLs they are always existing and cannot be removed.

Regards,
Holger

#5

Cedric – In general we come across this ACL issue if there is a conflict b/w source & target servers. If you are sure, target environment has the specified ACL’s then you can chose Ignore option.

Thanks,

#6

Whenever possible I prefer Exists instead of Ignore as this will warn you when defining the map if there is something missing on the target. When using Ignore, this is simply bypassed without notification.

Additional information about the “none@–@”-entry:
This might indicate a wrong or missing Central Users Management configuration on IS.
Please check the JDBC Pools under Settings if there is a pool created for the MWS schema and assigned to the “Central Users” function.

This is needed when using Monitor especially.
In this case the MWS SAML Resolver URL under Settings → Resources should point to the appropriate MWS instance.

Regards,
Holger

#7

Thanks “MR as173d”… I always worried about warnings… specially when it comes for PROD… so I was hesitating to ignore.

Holger, you’re right : few days ago… I’ve noticed the CentralUsers was not configured.
So last week, I’ve configured this new CentralUsers pool and associated it to the “Central Users” function.
Then, I’ve change the SAML Url which was mistakenly pointing on localhost inplace of the correct MWS server.

So, I’ve corrected all that.

Maybe the “none@–@” entry could be created by the wrong previous settings, and now these entries can be safely deleted ?
(I see these ones under : “Anonymous ACL”, “Developers ACL” and “Internal ACL”),

Regards

#8

Hi Cedric,

do you remember if you had assigned a specific group or role to the deny section of these ACLs?
if not just delete this entry and it should revert to “—none—”.

You are right:
Such entries can occur when there are issues with the CentralUsers database.

Regards,
Holger

#9

Holger,

No, I did not assign any specific group or role to the deny section of theses ACLSs.
Ok, thanks, In this case, I’m going to delete these ones.

Thanks a lot
Regards

#10

Hi,

Holger, what do you mean by “I do not deploy ACL”… you mean that you click on “Ignore” for each ACL group warnings displayed during the Checking step ?

Regards

#11

Watching on my Server Admin Preproduction, I see some new entries. I never saw them before :

~DEFINE~pq__MigrationPREPROD03_3qbh
~DEPLOY~pq__MigrationPREPROD03_3qbh
~EXTRACT~pq__MigrationPREPROD03_3qbh
~MAP~pq__MigrationPREPROD03_3qbh
~VIEW~pq__MigrationPREPROD03_3qbh
…
…

Is it normal ?

Regards

#12

Hi Cedric,

I select “Exists” for the ACLs.

For custom ACLs, when we hand over the build to the other team, there is an accompanying document in which is described how the build is deployed. In this document we specify the ACLs and that they need to be created before the deployment of the build otherwise the map in Deployer will warn that the ACLs are missing.

About the additional ACLs:
yes these are expected.
Deployer creates them automatically.

By using these ACLs you can restrict access to Deployer projects.
I.e. Who can view, modify or deploy the projects.
Deployer Users Guide should have more informations about this.

Regards,
Holger

#13

Thanks a lot Holger.
Regards

#14

Hi,

May I suppose for all deploy tests projects I’ve made, I can delete all that useless ACLs entries ?

Regards

#15

Hi,

I’ve exchanged with the support and they have confirmed me what we we thinking :

Thank you for your help.
Regards

#16