Issue with es_extended

Hi. When I turn on my server (or restart es_extended), I get this in my server console:

[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command remove_principal.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command remove_principal.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command remove_principal.
[                 cmd] Access denied for command add_principal.
[                 cmd] Access denied for command remove_ace.
[                 cmd] Access denied for command add_ace.
[                 cmd] Access denied for command add_ace.

I know it is from es_extended bc i checked it.
In server.cfg everything is correct, as it should be:

exec resources.cfg ## I Have my resources in different file where also es_extended is starting correctly

add_principal group.admin group.user
add_ace resource.es_extended command.add_ace allow
add_ace resource.es_extended command.remove_principal allow
add_ace resource.es_extended command.add_principal allow
add_ace resource.es_extended command.remove_ace allow
add_ace resource.es_extended command.list_aces allow
add_ace resource.es_extended command.list_principals allow
add_ace resource.es_extended command.remove_aces_for_object allow
add_ace group.admin command allow

What can I do with it?

(Also bc of that, permissions aren’t working and I pretty much can’t do anything)

Try now

add_principal group.admin – theres nothing defined here

add_ace resource.es_extended command.add_ace allow

add_ace resource.es_extended command.remove_principal allow

add_ace resource.es_extended command.add_principal allow

add_ace resource.es_extended command.remove_ace allow

add_ace resource.es_extended command.list_aces allow

add_ace resource.es_extended command.list_principals allow

add_ace resource.es_extended command.remove_aces_for_object allow

add_ace group.admin command allow

Remove for object and list aces ive never seen them with es_extended.
You should look at the esx recepie to copy the aces from there.

This is from the ESX Default Setup

System Administrators

---------------------

Add system admins

add_principal group.admin group.user
add_ace group.admin command allow # allow all commands
add_ace group.admin command.quit deny # but don’t allow quit
add_ace resource.es_extended command.add_ace allow
add_ace resource.es_extended command.add_principal allow
add_ace resource.es_extended command.remove_principal allow
add_ace resource.es_extended command.stop allow
{{addPrincipalsMaster}}

Still nothing

Picture ??

And a codeblock please

image


image

Does es_extended execute before the perms.cfg if yes put it inthe same 1.

Maybe a framework.cfg

Wdym by “same 1”. It does executre before

Than put it after it

Es_extended then perms

image
image

Put them in the same cfg

Did that earlier and didn’t help

nvm, changing esx version helped

Ok glad to hear

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.