Agent Security Errors

HCL Domino Domino Forum
1

I have two agents that can run manually, but it won’t run when scheduled. The error message is as follows:

AMgr: Error executing agent ‘Agent #2’ in ‘db.nsf’. Agent signer ‘ServerName/ORG’: You are not authorized to perform that operation

AMgr: Error executing agent ‘Agent #1’ in ‘db.nsf’. Agent signer ‘ServerName/ORG’: You are not authorized to perform that operation

It fails if signed by the designer of the application or the server.

It’s a formula language agent. The rights to execute the agent have been granted on the server in the “Server Document”, on the ‘Security’ tab. At the database level the “ACL” is set with the Manager permissions. Finally, on the agent level, anybody with “Reader” access or above is allowed to run the agent, so I have no idea why it is “not authorized to perform that operation”.

All the agent does is check some documents to see if they are overdue, then sends an email off (via @mailsend) to let them know about overdue documents. There are other similar agents in the database running perfectly.

I checked the FAQ on Agents, but have not found this particular problem. The kicker in all of this is that the agent had been working for months, and just quit recently.

Any ideas?

2

Subject: Agent Security Errors

I don’t think this would apply since the agent is only using formula lang but on the agent properties box what level of security is set, 1, 2, or 3? Try raising it to 2 - Allow Restricted Operations, if it’s not already.

3

Subject: RE: Agent Security Errors

Thanks for the reply. I already have it at level 3 though.

4

Subject: RE: Agent Security Errors

well as a workaround set the run on behalf of to yourself and see if it runs. looks like the server may not have rights to execute something your agent is trying to do.

5

Subject: RE: Agent Security Errors

Thanks for the response. I’ve tried that too. Same problem. Though I can run it manually, when it’s signed by me and runs on the server, I get the same error message, but with my name instead of the server name.