IBM i Global

IBM i Global

Connect, learn, share, and engage with IBM Power.

 View Only
Back to discussions
Expand all | Collapse all

Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

  • 1.  Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Mon December 18, 2023 05:32 PM

    Hello All,

    Cannot resolve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority" after October PTF installation. 

    Any suggestions?

    User added to QIBM_NAV_ALL_FUNCTION, QIBM_QINAV_WEB_FUNCTIONS, QIBM_QINAV_WEB_INTERFACE, QIBM_QINAV_WEB_CONFIGURE, and QIBM_XD1_OPNAV_DBLIBS.

    Thanks



    ------------------------------
    michael woodard
    ------------------------------


  • 2.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?
    Best Answer

    Posted Tue December 19, 2023 03:31 AM
    Edited by michael woodard Wed December 20, 2023 11:45 AM

    Michael,

    check the audit journal for AF and GR entries from the time of the error, that will give you additional detail. 

    ------------------------------
    Kurt Thomas
    ------------------------------

    Original Message


  • 3.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Wed December 20, 2023 11:47 AM

    Thanks Kurt, Let's see if that provides a clearer answer than the job log.



    ------------------------------
    michael woodard
    ------------------------------

    Original Message


  • 4.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Wed December 20, 2023 12:09 PM

    Thanks Kurt, much more detail than the job log. The user needed *SECADM Special Authority. Being SECADM User Class did not cut it.  The call to eimCreateHandle (function with authority failure in journals) lead to IBM support page with the appropriate information.



    ------------------------------
    michael woodard
    ------------------------------

    Original Message


  • 5.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Wed December 20, 2023 07:39 AM

    What function were you trying to get into?



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------

    Original Message


  • 6.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Wed December 20, 2023 07:54 AM

    I even tried it with a new user created with CRTUSRPRF USRPRF(DUMMY) PASSWORD(redacted)

    IBM i 7.5



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------

    Original Message


  • 7.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Wed December 20, 2023 11:48 AM

    We helpdesk, none QSECOFR/ALLOBJ people needing to manage the EIM/SSO registrations.



    ------------------------------
    michael woodard
    ------------------------------

    Original Message


  • 8.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Wed December 20, 2023 12:09 PM

    We don't use EIM.  Tried to guess what "manage the EIM/SSO registrations" meant.  So I ended up in Security, Enterprise Identity Mapping (EIM) and tried a few options.  Got one different error because we haven't done the setup yet and gave up.  I didn't want to risk setting it up wrong only to have to clear junk out later if we decide to pursue this route further.



    ------------------------------
    Robert Berendt IBMChampion
    ------------------------------

    Original Message


  • 9.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Fri December 22, 2023 03:22 AM

    It's probably because you are trying to do admin things without admin special authorities. See here for needed special authorities:

    IBM i user profile considerations for EIM - IBM Құжаттамасы

    Does that help?



    ------------------------------
    Kurt Thomas
    ------------------------------

    Original Message


  • 10.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Wed December 20, 2023 12:11 PM

    See Kurt's suggestion concerning reviewing QAUDJRN for AF and GR entries at the time of the latest request.



    ------------------------------
    michael woodard
    ------------------------------

    Original Message


  • 11.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Thu December 21, 2023 09:06 AM

    make sure you examine all the function usage IDs


    wrkfcnusg QIBM_NAV* 



    ------------------------------
    Bryan Dietz
    ------------------------------

    Original Message


  • 12.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Fri December 22, 2023 03:04 AM

    Michael,

    The terms "domain identifier list Details" remind me of SSO with EIM.
    It seems that the system is unable to find data on the domain. Michael, is EIM active in your IBM i ? 
    If this is not the case, the user may have configured a 5250 session, or an ACS connection, with Kerberos enabled. 

    The configuration would be like this

    Sorry for the screenshot in french language... Just check another value and test the connection again.
    In this case, the error message is probably a bad lead. Because the IBM LDAP directory for EIM is not configured, or is not started, the system reports an error as if it were an authority issue because it is unable to access it.



    ------------------------------
    Dominique Gayte
    ------------------------------

    Original Message


  • 13.  RE: Anyone encounter and solve "Error: NAV_307010: Failed to retrieve the domain identifier list Details:Insufficient authority for the operation. Contact the system administrator to get proper IBM i authority"?

    Posted Thu January 04, 2024 09:37 AM
      |   view attached

    I want to add that another place you can look for information on errors is the messages.log file.  Available by navigating to Serviceability (wrench) > View GUI Logs.

    You would need to recreate the issue with the GUI Log configured for INFO level information.  Then there would be more detail on the specific errors received.  

    Navigator could do a better job of surfacing these errors, and we have it as a future work item to improve this.

    For now, I wanted to let you know there is another place to look for potential information.



    ------------------------------
    Lora R Powell

    IBM i – Systems
    IBM Navigator for i & Performance on the web (PDI)
    IBM i 7.5 Memo to Users
    IBM Power Systems Development

    Office: 30-2/ C204

    Do the next right thing
    Let's GO
    ------------------------------

    Attachment(s)

    docx
    Lora Powell signature.docx   13 KB 1 version
    Original Message