New SA700 NoRole

[glazarte_]

We just installed a SA700, we created a Role called accesspoint that will only give access to the intranet web page. We authenticate against the AD correctly and if we log with the wrong credentials we get the error authentication message. We were not able to find this error on the Admin guide for the SA 700

[Jickfoo_]

Under Troubleshooting turn on policy tracing then try again. Policy tracing has always worked for me when you get a No Role error. For some reason the user logging in is not getting mapped to the correct role. Check the Realm Role mapping area and make sure the user you are logging on with should be mapped to the role in question.

but again, policy trace usually will show exactly why role mapping did not work.

Justin

[glazarte_]

Will the new log information be located in the same Log/ Authentication area?

[glazarte_]

we tried to authenticate and this is the message we are getting

info - [192.168.11.161] - theadmin(Admin Users)[.Administrators] - 2008/07/29 13:56:50 - Umalaharepoint - Policy Tracing turned on
info - [192.168.11.161] - theadmin(Admin Users)[.Administrators] - 2008/07/29 14:01:05 - Umalaharepoint - Policy Tracing turned off

it looks like is not even recording

Any ideas

[Jickfoo_]

can you paste the standard event log messages when the user tries to log in ?

Are you sure you have the "events to log boxes" checked in policy tracing ? I usually check them all.

i think the user id might be case sensative.. try using lower case "u" to begin user id.

Justin