PGP Command Line Error
Created: 26 Sep 2012 | Updated: 26 Sep 2012 | 7 comments
Hi,
We have recently Installed PGP on one of our server's and are facing the following below issue in our log files due to which the PGP files are not getting decrypted,
************** Process Started **************
Process StandardOutPut=
After Message =\\FilePath\Filename.xml.pgp:decrypt (3090:operation failed, file permissions)
pgp-1388-0.tmp:decrypt (3001:input file not found)
Process StandardOutput closed.
Process WaitForExit.
Process Closed.
Process Disposed.
Process Disposed Called!
************** Process End **************
Please note the following,
1. The folder \\FilePath\Filename.xml.pgp is a Network shared drive and has requisite Read,Write,List,Delete, Active directory user Access to the user running PGP command
2. The folder C:\Program Files\PGP Corporation\PGP Command Line on the server where the PGP is installed has full access to the Active directory user running PGP command
3. The Passphrase has been installed by logging into the server with the username which will run the PGP command
Your kind support in helping us establish the resoultion will be highly appreciated.
Discussion Filed Under:
Comments 7 Comments • Jump to latest comment
I'm sorry you're having this problem. Does PGP Command Line have permission to create the output file in the output directory? Does it have write permissions on the "current working" directory? By default the current directory will be used as a "temporary directory" for PGP Command Line to use. You can change the temp directory by using the "--temp-dir" option.
--------
David Finkelstein
Symantec R&D
Hi,
Please note the inline answers to your questions,
Does PGP Command Line have permission to create the output file in the output directory? - Yes. The Implementation is performed in a manner that the output file is created in the directory the PGP file exists in, though the path is a shared path on the network.
Does it have write permissions on the "current working" directory? - The user which runs the command line is a part of an Active Directory which has Write access to the folder, and further admin rights.
We get the following error : 3083:could not create output file \\sharedfolder\filename.xml.021012.pgp
Its important to have Admin rights on the machine that you are running commandline.
Hi,
The user that runs the commandline has Admin rights on the machine.
does he have creation rights on the machine where the unc path resides?
http://www.cstl.com
If you have full permissions, but the file cannot be created, then most likely there is already a file at that location with that name. If you run with "--overwrite remove" or "--overwrite wipe" any existing file will first be removed (or wiped).
--------
David Finkelstein
Symantec R&D
Maybe could be an obviously answer, but...
Would you like to reply?
Login or Register to post your comment.