00:00
Hello.
Copy
00:01
This is a walk through, uh, for understanding the error message. You are not authorized to use Pentana.
Copy
00:08
Please contact your administrator.
Copy
00:11
First, I'm going to show you my test setup. This is my, uh,
Copy
00:14
test client here.
Copy
00:16
I'm going to show you the permissions here. So I'm in the admin screen,
Copy
00:20
uh, permission screen.
Copy
00:22
I'm just going to filter on launch
Copy
00:26
web.
Copy
00:29
And what you can see is that, uh, for each of the launch web permissions,
Copy
00:35
I've changed the general viewer so that they're all set to deny.
Copy
00:41
And today, I'm going to concentrate on 2 staff members,
Copy
00:45
uh, Karl, who's got all roles,
Copy
00:48
uh, and can so can do anything in the system,
Copy
00:55
and Alex.
Copy
00:57
I'm just going to remove Alex's permissions,
Copy
01:00
uh, so that Alex just has this general viewer role here.
Copy
01:05
So for each of the modules,
Copy
01:07
uh, their role is set to deny.
Copy
01:10
And so I'm going to demonstrate logging in, and I'm going to
Copy
01:11
log in to show how that appears in the applications.
Copy
01:16
The the next thing I'll show you is the login activity screen here. Uh, and you can see that I've already had one successful login,
Copy
01:23
uh, and this is me logging into the the main application,
Copy
01:27
the desktop application just here now.
Copy
01:40
So Carl is gonna log into the web application,
Copy
01:45
and we'll see as we expect. Can log in. Can see the, uh, see the modules.
Copy
01:50
And when look at the, uh, the activity log,
Copy
01:55
we can see a successful login for that ID, carl@testnet.com.
Copy
02:02
Next thing I'm going to do is log in as Alex.
Copy
02:05
Um, what I've done here is specified just the wrong password. So this login is definitely going to fail because I've given it the wrong password. We'll see what happens.
Copy
02:16
You see we get this message here, login failed.
Copy
02:19
Please check username password.
Copy
02:22
Um, now if I go to the activity log,
Copy
02:26
you see we're not seeing any message here,
Copy
02:29
and I will come back to that later. Um, but the important thing to note is
Copy
02:34
that for the wrong password in,
Copy
02:36
we don't see any kind of, uh, message here in the activity log.
Copy
02:41
If I use the correct password,
Copy
02:48
Then we do get this message here, you are not authorized to use Pentana. Please contact your administrator.
Copy
02:55
And if I look at the
Copy
02:57
activity log, login log here,
Copy
03:00
we can see that I have logged in as Alex
Copy
03:02
successfully.
Copy
03:05
So the key point here is the login has succeeded.
Copy
03:09
We've been successful,
Copy
03:11
but because Alex does not have authorization to
Copy
03:14
run those modules,
Copy
03:17
Alex will see the message, you're not authorized to use Petana.
Copy
03:22
Now, as a final example,
Copy
03:25
I'm going
Copy
03:26
to, uh, just try logging in with a fake account. So this is someone who doesn't exist. Okay? So I'm just gonna try
Copy
03:33
logging in with this non existent account,
Copy
03:37
and we can see login failed. Please check username and password.
Copy
03:42
Uh, and again,
Copy
03:43
if I try to,
Copy
03:45
uh, see what's happened here in the activity log,
Copy
03:48
don't see anything.
Copy
03:50
Now, in fact, we do track, uh, failed logins, but we can't see them here. If we go to the database server,
Copy
03:58
uh, and take a look at the failed logins table,
Copy
04:01
then we can see these 2 attempts,
Copy
04:04
um, have taken place.
Copy
04:07
We've got a line for Alex,
Copy
04:09
uh, because Alex does exist. There's a valid user ID there. So we know that this was a login
Copy
04:16
with Alex's username, but an incorrect password.
Copy
04:20
Um, and because my fake user doesn't
Copy
04:23
exist, we can't link them to a real user ID, so we see negative one as the ID value there.
Copy
04:30
But the key message is, if you see this message, you're not authorized
Copy
04:34
to use Pentana,
Copy
04:35
then your user has successfully
Copy
04:47
re
Copy
04:50
are authenticating
Copy
04:51
via Windows. Okay. So I'm going to reset
Copy
04:54
everything
Copy
04:55
so that we're using Windows authentication
Copy
04:58
in the web UI.
Copy
04:59
Okay. So the way things are set up here, I'm getting the Windows challenge. And again, I'm going to log in as Karl, but obviously, this is, uh, now using the Windows account.
Copy
05:15
So again, no problems logging in.
Copy
05:17
And if I take a look at the
Copy
05:20
login activity,
Copy
05:26
We can see there's my successful login just here.
Copy
05:30
I'm going to log in as Alex
Copy
05:32
again.
Copy
05:35
Again, using the Windows login.
Copy
05:39
And, again, we're seeing the same message. You're not authorized to use Pentana. Please contact your administrator.
Copy
05:49
But this time, again,
Copy
05:52
I'm seeing a success message for Alex. And that's because Alex
Copy
05:56
successfully logs in,
Copy
05:58
but they're not authorized
Copy
06:00
to use the modules because of the permissions.
Copy
06:04
There is a difference between Windows authentication and forms authentication
Copy
06:08
if the user, uh, doesn't have a user account in Pentana. So,
Copy
06:14
um, this is my active directory, and we can see we have a user called Cameron.
Copy
06:18
And if I try and log in as Cameron,
Copy
06:22
I'll get the same message that I'm not authorized to use Pantana,
Copy
06:27
but
Copy
06:28
we'd also see a fail
Copy
06:30
in the login activity.
Copy
06:32
Uh, and that's because this this unique ID, this user ID just is not valid anywhere within the system. So this is a true failed login.
Copy
