"VCS Error V-16-1-50824 Command (hagrp -switch) failed. At least Group Operator privilege required on remote cluster" appears when attempting to switch to the remote (Disaster Recovery) site
Article ID: 100023144
Updated On:
Description
Error Message
VCS Error V-16-1-50824 Command (hagrp -switch ) failed. At least Group Operator privilege required on remote cluster.
Resolution
When configuring Single Sign On security for the cluster, it is imperative that the account being used to perform the remote switch within the cluster is the same account that has been used to login to the Windows session on the server.
This error comes about if the user logs into Windows using a different account than what has been created for the cluster security configuration.
It is also import to know that the account name, when entered into the cluster configuration MUST be in all capital letters, with the domain information.
(ACCOUNTNAME@DOMAIN)
If logging in under the same account used for Windows login does not resolve the issue, then it may be needed to refresh the account information entirely.
1. Open the Cluster Manager Java Console and go to File > User Management.
2. Highlight and remove all user accounts listed.
3. Open a Command Line Interface (Command Prompt or CLI) and use the information below (in the section for adding a user account through HAUSER) to create new user accounts using the HAUSER command.
4. Login to Windows under the same account information and re-test the ability to perform a remote switch.
To adjust Single Sign On security within a cluster, the HAUSER command will be a necessity.
The HAUSER command can be used to perform the following tasks:
- Add new users to the cluster security
- Delete existing users from cluster security
- Assign permissions to individual accounts
- Display a list of user accounts
Adding a new user account can be done using the following syntax:
1. haconf -makerw (this opens the cluster configuration for editing)
2. hauser -add [username] -priv [privilege]
Replace "[username]" with the name that will be used for the new account.
Replace "[privilege]" with the type of access required. Valid options are "Administrator" and "Operator." Further details on the types of privileges can be found in the Storage Foundation HA for Windows Administrators Guide.
3. haconf -dump -makero (this saves and closes the cluster configuration)
User accounts may also be deleted with the same utility, using the following syntax:
1. haconf -makerw
2. hauser -delpriv [username] [privilege]
3. hauser -delete [username]
4. haconf -dump -makero
This error comes about if the user logs into Windows using a different account than what has been created for the cluster security configuration.
It is also import to know that the account name, when entered into the cluster configuration MUST be in all capital letters, with the domain information.
(ACCOUNTNAME@DOMAIN)
If logging in under the same account used for Windows login does not resolve the issue, then it may be needed to refresh the account information entirely.
1. Open the Cluster Manager Java Console and go to File > User Management.
2. Highlight and remove all user accounts listed.
3. Open a Command Line Interface (Command Prompt or CLI) and use the information below (in the section for adding a user account through HAUSER) to create new user accounts using the HAUSER command.
4. Login to Windows under the same account information and re-test the ability to perform a remote switch.
To adjust Single Sign On security within a cluster, the HAUSER command will be a necessity.
The HAUSER command can be used to perform the following tasks:
- Add new users to the cluster security
- Delete existing users from cluster security
- Assign permissions to individual accounts
- Display a list of user accounts
Adding a new user account can be done using the following syntax:
1. haconf -makerw (this opens the cluster configuration for editing)
2. hauser -add [username] -priv [privilege]
Replace "[username]" with the name that will be used for the new account.
Replace "[privilege]" with the type of access required. Valid options are "Administrator" and "Operator." Further details on the types of privileges can be found in the Storage Foundation HA for Windows Administrators Guide.
3. haconf -dump -makero (this saves and closes the cluster configuration)
User accounts may also be deleted with the same utility, using the following syntax:
1. haconf -makerw
2. hauser -delpriv [username] [privilege]
3. hauser -delete [username]
4. haconf -dump -makero
Issue/Introduction
When configuring GCO (Global Cluster Option) within InfoScale or Storage Foundation for Windows with High Availability (SFW-HA) an error is received when attempting to switch to the remote (Disaster Recovery) site. The error states that incorrect privileges are in place for this action to be processed.
Was this article helpful?
Yes
No
Powered by
