KBA - Login Activity and 'You are not authorized to use Pentana'
KBA - Login Activity and 'You are not authorized to use Pentana'
The speaker explains the process of logging into Pentana and the use of the login page. They demonstrate the error messages and logging in with a new account, but note that the user does not have authorization to use the modules. The speaker also explains the difference between Windows authentication and forms authentication for user login.
0
Activity
K
Karl Newstead
created this
recording
ยท
over 1 year ago
Developer Tools
This session does not contain any console logs.
Replays are enabled though, so feel free to close this tab
and try again after there has been some action on your page.
This session does not contain any network requests.
Replays are enabled though, so feel free to close this tab
and try again after there has been some action on your page.
No details
This video was uploaded. No details are available.
00:00
Hello.
00:01
This is a walk through, uh, for understanding the error message. You are not authorized to use Pentana.
00:08
Please contact your administrator.
00:11
First, I'm going to show you my test setup. This is my, uh,
00:14
test client here.
00:16
I'm going to show you the permissions here. So I'm in the admin screen,
00:20
uh, permission screen.
00:22
I'm just going to filter on launch
00:26
web.
00:29
And what you can see is that, uh, for each of the launch web permissions,
00:35
I've changed the general viewer so that they're all set to deny.
00:41
And today, I'm going to concentrate on 2 staff members,
00:45
uh, Karl, who's got all roles,
00:48
uh, and can so can do anything in the system,
00:55
and Alex.
00:57
I'm just going to remove Alex's permissions,
01:00
uh, so that Alex just has this general viewer role here.
01:05
So for each of the modules,
01:07
uh, their role is set to deny.
01:10
And so I'm going to demonstrate logging in, and I'm going to
01:11
log in to show how that appears in the applications.
01:16
The the next thing I'll show you is the login activity screen here. Uh, and you can see that I've already had one successful login,
01:23
uh, and this is me logging into the the main application,
01:27
the desktop application just here now.
01:40
So Carl is gonna log into the web application,
01:45
and we'll see as we expect. Can log in. Can see the, uh, see the modules.
01:50
And when look at the, uh, the activity log,
01:55
we can see a successful login for that ID, carl@testnet.com.
02:02
Next thing I'm going to do is log in as Alex.
02:05
Um, what I've done here is specified just the wrong password. So this login is definitely going to fail because I've given it the wrong password. We'll see what happens.
02:16
You see we get this message here, login failed.
02:19
Please check username password.
02:22
Um, now if I go to the activity log,
02:26
you see we're not seeing any message here,
02:29
and I will come back to that later. Um, but the important thing to note is
02:34
that for the wrong password in,
02:36
we don't see any kind of, uh, message here in the activity log.
02:41
If I use the correct password,
02:48
Then we do get this message here, you are not authorized to use Pentana. Please contact your administrator.
02:55
And if I look at the
02:57
activity log, login log here,
03:00
we can see that I have logged in as Alex
03:02
successfully.
03:05
So the key point here is the login has succeeded.
03:09
We've been successful,
03:11
but because Alex does not have authorization to
03:14
run those modules,
03:17
Alex will see the message, you're not authorized to use Petana.
03:22
Now, as a final example,
03:25
I'm going
03:26
to, uh, just try logging in with a fake account. So this is someone who doesn't exist. Okay? So I'm just gonna try
03:33
logging in with this non existent account,
03:37
and we can see login failed. Please check username and password.
03:42
Uh, and again,
03:43
if I try to,
03:45
uh, see what's happened here in the activity log,
03:48
don't see anything.
03:50
Now, in fact, we do track, uh, failed logins, but we can't see them here. If we go to the database server,
03:58
uh, and take a look at the failed logins table,
04:01
then we can see these 2 attempts,
04:04
um, have taken place.
04:07
We've got a line for Alex,
04:09
uh, because Alex does exist. There's a valid user ID there. So we know that this was a login
04:16
with Alex's username, but an incorrect password.
04:20
Um, and because my fake user doesn't
04:23
exist, we can't link them to a real user ID, so we see negative one as the ID value there.
04:30
But the key message is, if you see this message, you're not authorized
04:34
to use Pentana,
04:35
then your user has successfully
04:47
re
04:50
are authenticating
04:51
via Windows. Okay. So I'm going to reset
04:54
everything
04:55
so that we're using Windows authentication
04:58
in the web UI.
04:59
Okay. So the way things are set up here, I'm getting the Windows challenge. And again, I'm going to log in as Karl, but obviously, this is, uh, now using the Windows account.
05:15
So again, no problems logging in.
05:17
And if I take a look at the
05:20
login activity,
05:26
We can see there's my successful login just here.
05:30
I'm going to log in as Alex
05:32
again.
05:35
Again, using the Windows login.
05:39
And, again, we're seeing the same message. You're not authorized to use Pentana. Please contact your administrator.
05:49
But this time, again,
05:52
I'm seeing a success message for Alex. And that's because Alex
05:56
successfully logs in,
05:58
but they're not authorized
06:00
to use the modules because of the permissions.
06:04
There is a difference between Windows authentication and forms authentication
06:08
if the user, uh, doesn't have a user account in Pentana. So,
06:14
um, this is my active directory, and we can see we have a user called Cameron.
06:18
And if I try and log in as Cameron,
06:22
I'll get the same message that I'm not authorized to use Pantana,
06:27
but
06:28
we'd also see a fail
06:30
in the login activity.
06:32
Uh, and that's because this this unique ID, this user ID just is not valid anywhere within the system. So this is a true failed login.
Details
16 Dec 2024, 18:54
K
Karl Newstead
Upload
No assignees