LSF access error message

[FK1]

Hi Everyone,

I am using IBM Spectrum LSF/PM (verison 10.2) under Windows 2016 server.

When trying to trigger a flow from PM, I get the following error message in the lim.log ( For safty reasons, I blurred the domain name of the user with "xxxx"):

passwdSrvc: Failed to logon user xxxx\lsfuser. Logon failure: the user has not been granted the requested logon type at this computer.

I found on the IBM support website, the following note:
https://www.ibm.com/support/pages/error-logon-failure-user-has-not-been-granted-requested-logon-type

When checking lsf.conf,  I saw, that LSB_LOGON_INTERACTIVE=N was already set...

Also, I added the xxxx\lsfuser to the local Administrator Group and mirrored all granted policy rights that were (initially configured) to the xxxx\lsfadmin user, when setting up the environment. (Local Security Policy >> User Rights Assignments)

But for some reason, I still get the above mentioned error code, when running the Flow with xxxx\lsfuser ...

Using a different user, e.g. xxxx\lsfadmin or several other users I testet, everything works fine.

Therefore, the question is, what setting do I have to adjust in order for the xxxx\lsfuser to run without errors?

Thanks,

FK1

[gwootton · Accepted solution]

Does the user have the "log on as a batch job" privilege?

https://www.ibm.com/support/pages/error-limlog-passwdsrvc-failed-logon-user-xxx-logon-failure-user-h...

[FK1]

Yes, the user is member of the Administrator Group which is being granted among other privileges with the "Log on as a Batch job" privilege...
Also, when submitting the LSF command in a command line (which I started with the xxxx\lsfuser), I get "Access is denied" returned

[gwootton]

Has the user's password been stored in the LSF database?
https://www.ibm.com/support/knowledgecenter/SSWRJV_10.1.0/lsf_command_ref/lspasswd.1.html

[FK1]

Hi @gwootton,

when I enter this into a command line: lspasswd -c -u xxxx\lsfuser

I get this in return:
Your password in LSF is up to date.

[gwootton]

Typically that error is caused by the missing privilege (Log on as a Batch Job), can you give it to the user directly? If you have multiple grid hosts, be sure it is granted on all hosts.

[FK1]

Thanks gwootton,
for your help. It works now!