Skip to main content

Can anyone install on Version 5.3 in an Smart Startes, with an User other than the ServiceAccount?

 

With the Service Account the Smartstarter Apps get installed, but as soon as I try it with an other user I get the error Message: "Unable to deploy the app, please review logs for detail". (I attached a screenshot)

12236i61C88893E5EBC1E5.png

https://community.k2.com/t5/K2-Five/Cannot-Install-Smart-Starters/m-p/103777#M810

Since Publishinge Rights can't beset directly(because the SmartObject security is deprecated on 5.3), I set on the whole categories Node is Everybody + Allow for ever Right.

(There are no entries in the SmartObject Security Node, which also can't be edited)

 

And in the logs only the same error message can be found: 

"Unable to deploy the app, please review logs for detail"

 

The App Administrator gets a Mail this the Info:

...

--- ERROR DETAIL ---
Message
An app catalog exception has occurred


Detail
Please review the following article for debugging suggestions: https://k2.com/help/apps/catalog/installerror


Trace
Unable to deploy the app, please review logs for detail.SourceCode.SmartObjects.Services.Apps.Catalog at SourceCode.SmartObjects.Services.Apps.Catalog.Deployment.Deploy(AppCatalogInstallerService broker, Uri baseUri, String thumbPrint) at SourceCode.SmartObjects.Services.Apps.Catalog.Deployment.Execute(AppCatalogInstallerService broker, String method) at SourceCode.SmartObjects.Services.Apps.Catalog.AppCatalogInstallerService.Execute()

...

But this Link just checks if I can access the AppCatalog, which I can, since the serviceUser CAN install Apps.

 

I'm I missing something or is this a BUG?

 

Side Note: I have to alter the K2HostServer.exe.config, since the K2-Server is behind a Proxy.

 

Thanks in Advance

Good day  @akumagamo 

 

Please see attached images and go through the following posts titled:

“Cannot Install Smart Starters”: https://community.k2.com/t5/K2-Five/Cannot-Install-Smart-Starters/td-p/103777,

“SmartStarters : App Catalog - Unable to load list”: https://community.k2.com/t5/K2-Five/SmartStarters-App-Catalog-Unable-to-load-list/td-p/105110. The deployment of Apps from App Catalog suceeded with account which is a member of "Package and Deployment" role and also had "Export rights" on the Workflow server.

 

Best,

Sunrise

 





Hello @Sunrise ,

 

Thanks for your response. I see it seem that it works for you, sadly all the mention links, I had tried the various this and with differen User. Only the ServiceUser works. I also don't get an error message, that my user is not authorizied.

In the EventLog i have three Messages

-> 0 An error occurred while sending the request.

-> 0 System.Exception: Unable to deploy the app, please review logs for detail. ....

-> 10702 An error occurred in the AppCatalogInstaller Service Instance. System.Exception: Unable to deploy the app, please review logs for detail. ....

 

If I use a User that has no permission, the Error Message on the frontend is the same, but in the eventlogs, the first error is:

-> 0 You do not have sufficient permissions to install an app. Please contact your Administrator.

 

I asume it have to do with my installations or our infrastructure. Since I have the same issue on two Systems

 

I any case thanks for your response, if you have any other tipps, how to get more information out of the log-file or so that would be great. It is not such a big problem since, I still can install the Apps with the serviceUser

 

Kind Regards

 

Charles


Hello akumagamo

 

Please see attachments and follow the following instructions using “Administrator” account

  • make an account (e.g. account that is failing to deploy App from App Catalog) a member of "Package and Deployment" role

Roles: https://help.k2.com/onlinehelp/K2Five/UserGuide/5.3/default.htm#K2-Management-Site/User_Management/Roles.htm.

 

  • Give an account "Export rights" on the Workflow server.

Server Rights: https://help.k2.com/onlinehelp/k2five/userguide/5.3/default.htm#K2-Management-Site/Workflow_Server/Server-Rights.htm

 

Also check out the following community post - "Cant install app from catalog" here: 

https://community.k2.com/t5/General/Cant-install-app-from-catalog/td-p/105245.

 

Best,

Sunrise

 





Hi Akumagamo


 


According to the link you have attached for debugging https://k2.com/help/apps/catalog/installerror


It says you must request the "App Catalog Communication Check Utility" tool from the support. This utility needs to be run on the K2 Five application server, and needs to run in the context of the K2 Server service's service account.  Once the utility has completed, an expected success outcome should look like the image below.



 


If you do not see successful output, please log a support ticket with K2 Product Support, and include the log file generated by the utility (Click the Download Log File button in the utility to download the log file), as well as the K2 server logs as described in ‘Check Host Server Log output’ .


 


Regards


Elvis


 


Hi akumagamo,


 


I've attached the above-mentioned App Catalog Communication Check Utility to this ticket for you to use in your troubleshooting.


 


 


 


 


Hi,


 


Please diagnose with the following:-verified with the logs, both app catalog logs and fiddler log,you are likely to find out that error(s) represented on both logs actually complement each other, the other traffic response error 500 server issue is caused by the request issues to server directories.


If you use fiddler tool to trace traffic you should be able to see between the Request header and Response header where the routed traffic experinced an issue specifically :- For confirmation matter if you dive into fiddler file you attached, you observe that the main issue is actually request(modify) rights/permission to Full "File System directories" which is something Service Account can access without any hassle, as referenced here(https://help.k2.com/onlinehelp/K2Five/ICG/5.3/default.htm#Plan/Required-Permissions.htm).

I think the above answers your question on "why only service account can install smartstarters successfully?".

I hope the main issue clarified as well, for account considerations please dive into this formal plan(https://help.k2.com/onlinehelp/K2Five/ICG/5.3/default.htm#Plan/Accounts.htm) .


I don't think is a bug, I think it's how is designed to operate.


 


Kind Regards;


Widson.


Reply