[THIN] AAC 4.2 and 4.5 File Share access issues in Multi-domain deployments
- From: Jeremy Saunders <jeremy.saunders@xxxxxxxxxxx>
- To: thin@xxxxxxxxxxxxx
- Date: Mon, 4 Dec 2006 21:17:45 +0800
Hi All,
Another issue that is frustrating me.
Deployed the AAC 4.2 server in the forest root domain.
The Service account is also in the forest root domain.
Published File Shares in a sub-domain.
User accounts also in sub-domain.
All permissions are okay and logging into the AAC as the service account I
can access the file shares.
However, logging into the AAC as a user from the sub-domain, gets "Access
Denied" when accessing the File Shares. The Event Logs on AAC says that the
account is not Authorized.
Hmmm....everything outside of the AAC works. From a Windows XP workstation
the users in the sub-domain can access the file share whithout issues.
I am concerned that there is cross domain issues with the AAC, such as
enumerating Universal groups when communicating with Active Directory.
Has anyone else run into these types of issues before?
We've tried both AAC 4.5 and have now rolled back to 4.2 with the same
issue.
Citrix support did a GoToAssist, and were not sure. They are setting up a
similar environment to test. But I can believe that no one has run into
this issue before. The problem is that because it is difficullt to debug
the AAC at this level, I'm unsure if there is a bug with the AAC server or
something quirky about this customers Active Directory.
Once again, my apologies if you see this post on other forums. I'm
desperate for some assistance here.
Cheers.
Kind regards,
Jeremy Saunders
Senior Technical Specialist
Infrastructure Technology Services
(ITS) & Cerulean
Global Technology Services (GTS)
IBM Australia
Level 2, 1060 Hay Street
West Perth WA 6005
Visit us at
http://www.ibm.com/services/au/its
P: +61 8 9261 8412 F: +61 8 9261 8486
M: TBA E-mail:
jeremy.saunders@xxxxxxxxxxx
SBC SITES ONLY GOOGLE SEARCH: http://www.F1U.com
************************************************
For Archives, RSS, to Unsubscribe, Subscribe or
set Digest or Vacation mode use the below link:
//www.freelists.org/list/thin
************************************************
Other related posts:
- » [THIN] AAC 4.2 and 4.5 File Share access issues in Multi-domain deployments
