1 Reply Latest reply on May 12, 2015 4:09 PM by disabled_ntaylor

    User authentication requires FileMaker user

    TWE

      Summary

      User authentication requires FileMaker user

      Product

      FileMaker Pro

      Version

      12

      Operating system version

      Windows 7

      Description of the issue

      I'm changing a FileMaker database so there is an external adnin group that has full access. After that user is created, deactivate the FileMaker user(s) that have full access. Click the 'OK' button to exit the File -> Manage -> Security settings and see this message:

        There are no active FileMaker accounts that use the Full Access
        privilege set. There must be one account like this. Create a
        new account or modify an existing account to use the Full
        Access privilege set.

      I have an account that has Full Access, it is just not a FileMaker account.
      I suspect that this is a holdover from the days before FileMaker Server could authentication against an external server.

      Steps to reproduce the problem

      (0) The FileMaker server can authenticate against an external server.

      (1) Open Remote to open any remote database using an account that has full access.

      (2) Go to File -> Manage -> Security settings.

      (3) Create a new user
          (a) specify external authentication

          (b) Specify a group (with users) in the external authentication server

          (c) Specify full access.

          (d) Click OK

      (4) Disable the FileMaker authenticated users with full access.

      (5) Click OK

      Expected result

      There is an account that has full access, so this should be allowed.

      Actual result

      Got the error message described below.

      Exact text of any error message(s) that appear

      There are no active FileMaker accounts that use the Full Access
      privilege set. There must be one account like this. Create a
      new account or modify an existing account to use the Full
      Access privilege set.

      Workaround

      Create a dummy active FileMaker user with full access and a very long password that will never be used.

        • 1. Re: User authentication requires FileMaker user

          TWE:

           

          Thank you for the post.

           

          The following is from the FileMaker Pro 12 Help on “Editing existing accounts”:

           

          “At least one active, FileMaker-authenticated account in each file must be assigned the Full Access privilege set. An error message will appear if you edit accounts so that no active account is assigned the Full Access privilege set.”

           

          If an Active Directory group were allowed to be the only [FULL ACCESS] account and the database were removed from the FileMaker Server, then [FULL ACCESS] would be lost.

           

          However, using FileMaker Pro Advanced “you can use the Developer Utilities to remove all administrative accounts from a file.”

           

          Removing Admin access to databases (FileMaker Pro Advanced)

           

          TSFalcon

          FileMaker, Inc.