FMP 7 and External Authentication

[RPCia]

I give up!

I have read the tech briefs and steped through the options multiple times.

FMS 7V4--Windows 2003 Server Standard

Security Tab

--FileMaker and External Server Accounts

Administration

--Require membership in fmsadmin group

--Allow remote users to administer

Domain Controller--Windows 2003 SBS

GroupName--Managers with users not groups of groups, set up as Security Group with global Domain access

Devloper File Created in FMP 8 Advanced

-External Server

-GroupName--Managers

-FullAccess(I am not planning on leaving it this way but I can't get it to work yet at all)

-I checked the access via FileMaker Network Ext Privelege

Client FileMakerPro 7--Windows XP Pro SP2

Everything is joined to the same domain, I can get into the file with my own account which I am a member of the fmsadmin, my account and password even work when I remove myself from the fmsadmin and I place myself in the managers group

No other account can access the file except mine and the admin. It seems like the authentication goes ok in that it recognizes the account and password but I keep getting the same error.

"Your access privileges do not allow you to perform this action"

Is there something else I am missing? or am I missing an update somewhere? Where am I going wrong?

[Wim Decorte]

Sounds like it should work. These things are extremely difficult to troubleshoot without being there.

Can you log into the machine itself with one of the other accounts? No conflicting groups exist on the FMS machine itself?

Try removing the XP machine from the domain, rebooting and joining again...

[RPCia]

Yes I can log into the machine itself

There are no groups on the FMS except the windows defaults. This is my thinking also that there is a problem with the way the FMS is searching the ActDir structure. But I can log on to the machine with any user count.

I should also note this isn't just with one machine its with all machines. Except mine, My theory is the only reason my account works is because I am an enterprise admin on the domain.

So I can get into any machine I wanted. I will try temporarily adding someone to this group and see if it solves the problem. But I won't have time till later this afternoon.

Thanks

[RPCia]

Ok, the security groups didn't make a difference.

And neither did removing and adding the client back to the domain.

This is not good I've spent about a week and a half developing this system and now I can't get the security to work.

Maybe I will make a call into FMP, I just don't want to get charged for a support call and have them tell me its a windows issue. I had that happen with UPS Worldship once before.

[Wim Decorte]

AFAIK there are no FMS bugs relevant to the setup you've described. So there must be something small in your setup that is not working properly.

Check to make sure you're running the latest v Revs on Server and clients.

[RPCia]

my versions are up to date

7 server v4

7 Client v3

I have another question, the tech brief said to test by logging into the fms machine as one of the accounts you wish to test.

Does the security group make a difference, ie do I need to have my groups as power users, administrators on the box, or are just plain users ok?

Edited January 13, 2006 by Guest

[RPCia]

K, I spoke with fileMaker and after an hour or so, heres what the solution was. I had to specify an account name and password for the FMS and FMS Helper services. Apparently they it didn't like the local account I was using even though it was a valid domain account.

This solved the problem.

[Wim Decorte]

Were you using the default "local system" account for FMS or had you changed it before?

It should work just fine with the default account.

[RPCia]

I was using the local default account