SecurityFault: {"error":"invalid_grant","error_description":"Not authorized for Services."}

 

iMIS 2107

In this particular case scenario, we've observed the customer who experienced this concern resolved it by simply adding the loopback ip address (127.0.0.1) and iMIS App server's (FQDN), and that resolved it. However, if that is not your case, there are other check points that should be helpful in getting this error resolved as shown below.

Typically, this error is associate with having Web-Dav-publishing installed on the imis app server.

SecurityFault: {"error":"invalid_grant","error_description":"Not authorized for Services."}

1) Please, run the following power shell command:

get-windowsfeature Web-DAV-Publishing

If it says "Available" under Install State, that means it's not installed.

If it says "Installed" under Install State it is, and it can uninstall through this command:

uninstall-windowsfeature -name Web-DAV-Publishing

2) If the above does not solve the error, please verify if you have a hosts entry for this (FQND) in your host file:

Sample:
127.0.0.1 <tab's space> i202rio.imistest.com
Path where to find the hosts file:
From run type: %windir%\System32\drivers\etc\hosts

Sample_host_file.JPG

 

3) Ensure that you are able to browse the AsiScheduler from IIS Manager. Does it give an error, or does it render the ASP.net page?

 

4) Another reason for the error is Manager, Administrator and Guest accounts missing the RemoteService role. We used this SQL to insert them:

INSERT INTO UserRole (UserKey, RoleKey) -- MANAGER
VALUES ('E982D078-994A-4BF9-B424-1010E64097D4', '8DFF65A1-2CC3-4AAF-A9C1-9EB33662D576')

INSERT INTO UserRole (UserKey, RoleKey) -- Guest
VALUES ('DED862C6-DC74-4BC3-B6B1-DAAC7DD6E101', '8DFF65A1-2CC3-4AAF-A9C1-9EB33662D576')

INSERT INTO UserRole (UserKey, RoleKey) -- Administrator
VALUES ('E4E99E9C-1C12-4920-8AB0-8F7DA7245091', '8DFF65A1-2CC3-4AAF-A9C1-9EB33662D576')

NOTE: you have to change the UserKey values for Manager, Guest and Administrator in the above SQL inserts to match what they are in the customer's database.

After adding the RemoteService role for Manager,Guest and Administrator, restart IIS (iisreset) the site should come up ok.

Another helpful public kb article that should help validating other important settings:

https://support.imis.com/hc/en-us/articles/360021838672-Staff-site-shows-Secure-Connection-Error

 

 

 

Have more questions? Submit a request

0 Comments

Article is closed for comments.
Powered by Zendesk