Trying to add a new user-profile in CM 4.0 1

[telcomwork]

Added the profile via ASA (prof20) and now trying to create a login ID to use this new profile and receive the following below.

One other note we have no maintenance on this system so I can't even modify the exsisting prof18 or 19.

"Error modifying user parameters, system call failed.
usermod: unknown group prof20 pUser:call to system failed."

 

[98Converter]

If the Group does not exist, you'll need to add that first, then add the add login. When adding the login, put it in the group you just added. Then in ASA add login XXX (whatever name you put in for the login on the web page)...

And you should be all set.

Thanks,
CJH

We are what we repeatedly do. Excellence, then, is not an act but a habit. ARISTOTLE 384-322 B.C.

 

[telcomwork]

The group I am using is suser so I beleive I'm good there?

The user-profile I'm tryign to use is 20 and I created using ASA.

I tried adding the login to the suser group adn user-profile 20 but get the error message.

Apologies am I missing something?

 

[98Converter]

You need to add an additional group essentially. Then add the user. Apply them to susers, and then add the additional group to that profile.

Thanks,
CJH

We are what we repeatedly do. Excellence, then, is not an act but a habit. ARISTOTLE 384-322 B.C.

 

[telcomwork]

I tried creating a new group via the web but fail as well. Should I be using a specific Group Number other than 10000

 

[telcomwork]

Created a new profile group called JrAdmin adn assigned 9999 successfully but I still can't get it assigned to additional group 20.

Still get:
Error modifying user parameters, system call failed.
usermod: unknown group prof20 pUser:call to system failed.

 

[telcomwork]

This is so annoying. It will take prof18 or prof19 but not prof20 which I configured.

If I just place 20 in "additional groups" doesn't like it.


Login ID: test


login group
additional groups
shell access:
no shell access.
standard shell access.
CDR access only.
remote login.
lock this account
date (YYYY-MM-DD) on which account is disabled (blank to ignore).

select type of authentication password
ASG

enter key or password


re-enter key or password
force password/key change on first login yes
no
maximum Number of days a password may be used (PASS_MAX_DAYS):
minimum number of days allowed between password changes (PASS_MIN_DAYS):
number of days warning given before a password expires (PASS_WARN_AGE):
days after password expires to lock account (0=immediate)

hhhhhhhhhhhhhhh

 

[telcomwork]

Finally figured it out. Damn is that confusing even with the docs...

Missed the base setup

 

[csrgzz]

you need to add the user-profile via ASA or choose 18 or 19 depending of your needs
then you need to go via web and on administrator accounts first you need to add the new profile
select add new group and type prof20 (if you create user-profile 20)

then for PID change 10000 to 10020
after that you need to go and add a new user
on login group select susers (if you want this to be a super user account)
additional groups you need to choose prof20
also there where it says web access mask or something like that its where you grant user permissions to access the server via web

hope this help!


hope this help!

 

[mrjedi]

I followed these steps but I am still not getting the same permission as dadmin. When I add prof2, I get a PIN change request but everytime I enter a new pin, it fails and takes me back to shell. When I remove the prof2, then my busy out commands are not the same as dadmin. What step am I missing ?

 

[Mitch672]

mr jedi, you need to "enable craft2 <loginid>" in Communication Manager.

mitch


AVAYA Certified Specialist

 

[pashtet]

i've got the same problem as mrjedi,
installed new s8500/g650 with cm4, installed licence and pwd file, created login with susers and prof2 groups, and now SAT prompts me to enter a PIN every time i try to login. whatever PIN I enter is says that "INCORRECT PIN", so i haven't access to some sat commands like "change" or "reset".
what should i do to get prof2 access to SAT ?

 

[mrjedi]

In order to do this, you need to create a new profile group ( ABCDEF ) and assign it a user-profile number ( 10020). Then you need to create a login and make it a suser and add prof3 and ABCDEF as the additional group. Once this is done, you need to amend user-profile 20 in CM to give it the necessary permission. Finally, you need to enable craft2 to this new login. Below are the steps:

1) From Web: administer accounts: add user group. then add new user.
2) From Web: Web Mask. - add permission to new user for Web access
3) From CM: amend new user-profle created from web and make sure there is write permission for all sections
4) Enable craft2 on new login...eg. "enable craft2 xxxx" where xxxx is the new user name for this profile