This site requires JavaScript to be enabled

Notifications

8495 views

4.0 - Updated on 2021-03-22 by Marcia Teckenbrock

3.0 - Updated on 2021-03-22 by Marcia Teckenbrock

2.0 - Updated on 2021-03-22 by Marcia Teckenbrock

1.0 - Authored on 2018-12-06 by Anthony Donzelli

Problem: Windows users of the FermiDash system, fermidash.fnal.gov, are not allowed to view the dashboards after connecting.  They received a “permission denied” message.  This situation happens almost exclusively while using the Internet Explorer (IE) or Edge browsers. In most cases, the user is no longer prompted with a login box, which would allow them to enter Services username and password.  


Cause:  This is caused by the implementation of the Fermilab “Single Sign On (SSO) feature  in November 2018.  The FermiDash system is in the “Services” domain, and the SSO feature automatically tries to log the user in to FermiDash using the “Fermi” domain and its associated password.  This will not work for FemiDash, and therefore the dashboards are not shown. 


Workaround: The following steps can be taken to remedy the situation:

 

  1. All users should make sure they are connected to the lab network either on-site or via VPN.

    2. If you get a permissions error, you must enter the following command in the Windows command box and/or the Command Window. Once you do this, your Services account will be the default.

 cmdkey /add:cdv-fdashp.fnal.gov /user:services\username  (space between cmdkey and / and .gov and /)   

     

               3. Depending on your browser, you may see different prompts. Follow the instructions for your browser and the prompt you are getting:



IE

 

a. Make sure you’re connected to the lab network/VPN.

b. When you attempt to login, by default, IE prompts you to use your Fermi (Windows logon) password. NOTE: This will get permanently overridden once you perform Step 2 above. To use your Services password instead:

     o Click Use a different account, then click OK.
     o Click More choices, then click OK:

     o Enter services\yourusername and your Services password

     o Click OK.

c.  If you’re using a YubiKey on your computer, you will be prompted to enter a PIN. However, YubiKey is not used to authenticate to FermiDash. Click More choices:


 

     o Enter your Services password, then click OK:

  

 

d. If you attempt to log in using your FERMI domain (Windows logon ) account, you will get an error:

 

Graphical user interface, text, application, email

Description automatically generated

 

 


Edge

 

a. Make sure you’re connected to the lab network/VPN.

b. When you attempt to login, by default, IE prompts you to use your Fermi (Windows logon) password. NOTE: This will get permanently overridden once you perform Step 2 above. To use your Services password instead:

     o Click Use a different account, then click OK.
     o Click More choices, then click OK:

     o Enter services\yourusername and your password.
     o Click OK.

c. If you’re using a YubiKey on your computer, you will be prompted to enter a PIN. However, YubiKey cannot be used to authenticate to FermiDash.

     o Click More choices, then click OK:

    • Click Use a different account, then click OK.
    • Enter services\yourusername, then your Services password
    • Click OK:

 

 

d. If you attempt to log in using your FERMI domain (Windows logon ) account, you will get an error:

Graphical user interface, application

Description automatically generated

Graphical user interface, text, application, email

Description automatically generated

 

4. If the above workarounds do not work, contact Desktop Support via the Service Desk.