Issue with es_extended

Hi. When I turn on my server (or restart es_extended), I get this in my server console:

[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command remove_principal.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command remove_principal.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command remove_principal.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command remove_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.

I know it is from es_extended bc i checked it.
In server.cfg everything is correct, as it should be:

exec resources.cfg ## I Have my resources in different file where also es_extended is starting correctly

add_principal group.admin group.user
add_ace resource.es_extended command.add_ace allow
add_ace resource.es_extended command.remove_principal allow
add_ace resource.es_extended command.add_principal allow
add_ace resource.es_extended command.remove_ace allow
add_ace resource.es_extended command.list_aces allow
add_ace resource.es_extended command.list_principals allow
add_ace resource.es_extended command.remove_aces_for_object allow
add_ace group.admin command allow

What can I do with it?

(Also bc of that, permissions aren’t working and I pretty much can’t do anything)

Try now

add_principal group.admin – theres nothing defined here

add_ace resource.es_extended command.add_ace allow

add_ace resource.es_extended command.remove_principal allow

add_ace resource.es_extended command.add_principal allow

add_ace resource.es_extended command.remove_ace allow

add_ace resource.es_extended command.list_aces allow

add_ace resource.es_extended command.list_principals allow

add_ace resource.es_extended command.remove_aces_for_object allow

add_ace group.admin command allow

Remove for object and list aces ive never seen them with es_extended.
You should look at the esx recepie to copy the aces from there.

This is from the ESX Default Setup

System Administrators

---------------------

Add system admins

add_principal group.admin group.user
add_ace group.admin command allow # allow all commands
add_ace group.admin command.quit deny # but don’t allow quit
add_ace resource.es_extended command.add_ace allow
add_ace resource.es_extended command.add_principal allow
add_ace resource.es_extended command.remove_principal allow
add_ace resource.es_extended command.stop allow
{{addPrincipalsMaster}}

Still nothing

Picture ??

And a codeblock please

image


image

Does es_extended execute before the perms.cfg if yes put it inthe same 1.

Maybe a framework.cfg

Wdym by “same 1”. It does executre before

Than put it after it

Es_extended then perms

image
image

Put them in the same cfg

Did that earlier and didn’t help

nvm, changing esx version helped

Ok glad to hear