Closed: No permission for "system.user.iob_api_user" to call
-
Hi zusammen,
mein iobroker begrüßt mich seit heute mit den Meldungen im Log:
admin.0 2025-10-01 16:49:21.993 warn No permission for "system.user.iob_api_user" to call cmdExec. Need "other"."execute" admin.0 2025-10-01 16:49:17.933 warn No permission for "system.user.iob_api_user" to call sendToHost. Need "other"."sendto" sowie: No permission for "system.user.iob_api_user" to call readLogs. Need "other"."execute"Zudem werden mir keine Updates angezeigt. Das System scheint also irgendwie Rechte verloren zu haben. Seit wann das so ist, kann ich leider nicht genau sagen.
Ich nutze das Docker Image von Buanet und habe erst mal das klassische Program gefahren:
- upgrade auf aktuelles docker image v11
- iob fix
- iobroker update und upgrade self
- das maintenance script für upgrade
- Festplattenplatz geprüft
- Container durchgestartet und alles aktualisiert was in der Kette noch enthalten ist
- im Forum gesucht...
Und dann war ich mit meinen Latein leider auch schon am Ende. Ich sehe folgende Berechtigungen und bin etwas unsicher ob hier nicht ein paar Haken fehlen?
iob diag ergibt bei mir:
Script v.2025-08-09 *** BASE SYSTEM *** Hardware Vendor : QEMU Kernel : x86_64 Userland : 64 bit Docker : v11.0.0 Virtualization : docker Kernel : x86_64 Userland : 64 bit Systemuptime and Load: 17:02:07 up 30 min, 0 user, load average: 0.78, 0.86, 0.70 CPU threads: 4 *** LIFE CYCLE STATUS *** Debian 'bookworm' is the current oldstable version. Please upgrade to the latest stable release 'trixie' in due time! *** TIME AND TIMEZONES *** Wed Oct 1 15:02:07 UTC 2025 Wed Oct 1 17:02:07 CEST 2025 CEST +0200 Etc/UTC *** Users and Groups *** User that called 'iob diag': root HOME=/root GROUPS=root User that is running 'js-controller': iobroker HOME=/opt/iobroker GROUPS=iobroker tty dialout audio video plugdev bluetooth *** DISPLAY-SERVER SETUP *** Display-Server: false System has not been booted with systemd as init system (PID 1). Can't operate. Failed to connect to bus: Host is down Display-Manager: Desktop: Session: *** MEMORY *** total used free shared buff/cache available Mem: 8.3G 2.2G 5.6G 389K 903M 6.2G Swap: 2.7G 0B 2.7G Total: 11G 2.2G 8.3G Active iob-Instances: 21 7949 M total memory 2076 M used memory 1963 M active memory 318 M inactive memory 5310 M free memory 141 M buffer memory 720 M swap cache 2559 M total swap 0 M used swap 2559 M free swap *** top - Table Of Processes *** top - 17:02:07 up 30 min, 0 user, load average: 0.78, 0.86, 0.70 Tasks: 32 total, 1 running, 31 sleeping, 0 stopped, 0 zombie %Cpu(s): 0.0 us, 0.0 sy, 0.0 ni,100.0 id, 0.0 wa, 0.0 hi, 0.0 si, 0.0 st MiB Mem : 7949.7 total, 5310.3 free, 2076.4 used, 861.8 buff/cache MiB Swap: 2560.0 total, 2560.0 free, 0.0 used. 5873.3 avail Mem *** DMESG CRITICAL ERRORS *** dmesg: read kernel buffer failed: Operation not permitted No critical errors detected *** FILESYSTEM *** Filesystem Type Size Used Avail Use% Mounted on overlay overlay 15G 8.9G 5.4G 63% / tmpfs tmpfs 64M 0 64M 0% /dev shm tmpfs 64M 0 64M 0% /dev/shm /dev/sda3 ext4 15G 8.9G 5.4G 63% /opt/iobroker tmpfs tmpfs 3.9G 0 3.9G 0% /proc/acpi tmpfs tmpfs 3.9G 0 3.9G 0% /proc/scsi tmpfs tmpfs 3.9G 0 3.9G 0% /sys/firmware Messages concerning ext4 filesystem in dmesg: dmesg: read kernel buffer failed: Operation not permitted Show mounted filesystems: TARGET SOURCE FSTYPE OPTIONS /opt/iobroker /dev/sda3[/var/lib/docker/volumes/iobroker_data/_data] ext4 rw,relatime /opt/userscripts /dev/sda3[/var/lib/docker/volumes/iobroker_userscript/_data] ext4 rw,relatime /etc/resolv.conf /dev/sda3[/var/lib/docker/containers/b2cc22f455a85860949aef6802b33c328b2ddcc790ae4335c21d679042d7d408/resolv.conf] ext4 rw,relatime /etc/hostname /dev/sda3[/var/lib/docker/containers/b2cc22f455a85860949aef6802b33c328b2ddcc790ae4335c21d679042d7d408/hostname] ext4 rw,relatime /etc/hosts /dev/sda3[/var/lib/docker/containers/b2cc22f455a85860949aef6802b33c328b2ddcc790ae4335c21d679042d7d408/hosts] ext4 rw,relatime Files in neuralgic directories: /var: 36M /var/ 33M /var/lib 19M /var/lib/apt/lists 19M /var/lib/apt 14M /var/lib/dpkg /opt/iobroker/backups: 82M /opt/iobroker/backups/ 4.0K /opt/iobroker/backups/redistmp /opt/iobroker/iobroker-data: 856M /opt/iobroker/iobroker-data/ 414M /opt/iobroker/iobroker-data/history 354M /opt/iobroker/iobroker-data/files 67M /opt/iobroker/iobroker-data/files/echarts.admin 62M /opt/iobroker/iobroker-data/backup-objects The five largest files in iobroker-data are: 35M /opt/iobroker/iobroker-data/files/devices.admin/static/js/main.24f2bb56.js.map 26M /opt/iobroker/iobroker-data/files/echarts/static/js/main.41cee985.js.map 26M /opt/iobroker/iobroker-data/files/echarts.admin/chart/static/js/main.41cee985.js.map 24M /opt/iobroker/iobroker-data/files/modbus.admin/static/js/main.6a71b34c.js.map 24M /opt/iobroker/iobroker-data/files/echarts.admin/static/js/main.70a15e1f.js.map USB-Devices by-id: USB-Sticks - Avoid direct links to /dev/tty* in your adapter setups, please always prefer the links 'by-id': No Devices found 'by-id' *** ZigBee Settings *** HINT: Your zigbee.0 COM-Port is NOT matching 'by-id'. Please check your setting: /dev/ttyUSB0 Zigbee Network Settings on your coordinator/in nvbackup are: zigbee.X Extended Pan ID: *** MASKED *** Pan ID: *** MASKED *** Channel: *** MASKED *** Network Key: *** MASKED *** To unmask the settings run 'iob diag --unmask' *** NodeJS-Installation *** /usr/bin/nodejs v22.20.0 /usr/bin/node v22.20.0 /usr/bin/npm 10.9.3 /usr/bin/npx 10.9.3 /usr/bin/corepack 0.34.0 nodejs: Installed: 22.20.0-1nodesource1 Candidate: 22.20.0-1nodesource1 Version table: *** 22.20.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 100 /var/lib/dpkg/status 22.19.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.18.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.17.1-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.17.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.16.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.15.1-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.15.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.14.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.13.1-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.13.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.12.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.11.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.10.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.9.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.8.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.7.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.6.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.5.1-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.5.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.4.1-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.4.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.3.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.2.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.1.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 22.0.0-1nodesource1 1001 500 https://deb.nodesource.com/node_22.x nodistro/main amd64 Packages 18.20.4+dfsg-1~deb12u1 500 500 http://deb.debian.org/debian bookworm/main amd64 Packages 500 http://deb.debian.org/debian-security bookworm-security/main amd64 Packages Temp directories causing deletion problem: 0 No problems detected Errors in npm tree: 0 No problems detected Checking for nodejs vulnerability: █████ ██ ██ ██████ ██████ ██████ ██████ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ███████ ██ ██ ██ ███ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ██ ███████ ███████ ██████ ██████ ██████ ██████ ██ *** ioBroker-Installation *** ioBroker Status iobroker is running on this host. Objects type: jsonl States type: redis Hosts: iobrokerW43 iobrokerW43 (version: 7.0.7, hostname: iobrokerW43 , alive, uptime: 227) Core adapters versions js-controller: 7.0.7 admin: 7.6.17 javascript: 8.9.2 nodejs modules from github: 0 Adapter State + system.adapter.accuweather.0 : accuweather : iobrokerW43 - enabled + system.adapter.admin.0 : admin : iobrokerW43 - enabled, port: 8081, bind: 192.168.69.225 (SSL), run as: admin + system.adapter.backitup.0 : backitup : iobrokerW43 - enabled system.adapter.devices.0 : devices : iobrokerW43 - enabled + system.adapter.echarts.0 : echarts : iobrokerW43 - enabled + system.adapter.ecovacs-deebot.0 : ecovacs-deebot : iobrokerW43 - enabled + system.adapter.email.0 : email : iobrokerW43 - enabled system.adapter.feiertage.0 : feiertage : iobrokerW43 - enabled + system.adapter.history.0 : history : iobrokerW43 - enabled + system.adapter.hm-rega.0 : hm-rega : iobrokerW43 - enabled + system.adapter.hm-rpc.0 : hm-rpc : iobrokerW43 - enabled, port: 0 + system.adapter.hm-rpc.1 : hm-rpc : iobrokerW43 - enabled, port: 0 + system.adapter.hm-rpc.2 : hm-rpc : iobrokerW43 - enabled, port: 0 + system.adapter.hm-rpc.3 : hm-rpc : iobrokerW43 - enabled, port: 0 + system.adapter.jarvis.0 : jarvis : iobrokerW43 - enabled + system.adapter.javascript.0 : javascript : iobrokerW43 - enabled system.adapter.modbus.0 : modbus : iobrokerW43 - disabled system.adapter.modbus.1 : modbus : iobrokerW43 - disabled + system.adapter.mqtt.0 : mqtt : iobrokerW43 - enabled, port: 1884, bind: 192.168.69.225 + system.adapter.nuki-extended.0 : nuki-extended : iobrokerW43 - enabled system.adapter.radar2.0 : radar2 : iobrokerW43 - disabled + system.adapter.simple-api.0 : simple-api : iobrokerW43 - enabled, port: 8087, bind: 192.168.69.225, run as: admin + system.adapter.sonoff.0 : sonoff : iobrokerW43 - enabled, port: 1883, bind: 192.168.69.225 + system.adapter.web.0 : web : iobrokerW43 - enabled, port: 8082, bind: 192.168.69.225, run as: admin system.adapter.yahka.0 : yahka : iobrokerW43 - disabled + system.adapter.zigbee.0 : zigbee : iobrokerW43 - enabled, port: /dev/ttyUSB0 + instance is alive Enabled adapters with bindings + system.adapter.admin.0 : admin : iobrokerW43 - enabled, port: 8081, bind: 192.168.69.225 (SSL), run as: admin + system.adapter.hm-rpc.0 : hm-rpc : iobrokerW43 - enabled, port: 0 + system.adapter.hm-rpc.1 : hm-rpc : iobrokerW43 - enabled, port: 0 + system.adapter.hm-rpc.2 : hm-rpc : iobrokerW43 - enabled, port: 0 + system.adapter.hm-rpc.3 : hm-rpc : iobrokerW43 - enabled, port: 0 + system.adapter.mqtt.0 : mqtt : iobrokerW43 - enabled, port: 1884, bind: 192.168.69.225 + system.adapter.simple-api.0 : simple-api : iobrokerW43 - enabled, port: 8087, bind: 192.168.69.225, run as: admin + system.adapter.sonoff.0 : sonoff : iobrokerW43 - enabled, port: 1883, bind: 192.168.69.225 + system.adapter.web.0 : web : iobrokerW43 - enabled, port: 8082, bind: 192.168.69.225, run as: admin + system.adapter.zigbee.0 : zigbee : iobrokerW43 - enabled, port: /dev/ttyUSB0 ioBroker-Repositories ┌─────────┬──────────┬─────────────────────────────────────────────────────────┬──────────────┐ │ (index) │ name │ url │ auto upgrade │ ├─────────┼──────────┼─────────────────────────────────────────────────────────┼──────────────┤ │ 0 │ 'stable' │ 'http://download.iobroker.net/sources-dist.json' │ false │ │ 1 │ 'beta' │ 'http://download.iobroker.net/sources-dist-latest.json' │ false │ └─────────┴──────────┴─────────────────────────────────────────────────────────┴──────────────┘ Active repo(s): stable Upgrade policy: none Installed ioBroker-Adapters Used repository: stable Adapter "accuweather" : 2.1.1 , installed 2.1.0 [Updatable] Adapter "admin" : 7.7.2 , installed 7.6.17 [Updatable] Adapter "backitup" : 3.3.5 , installed 3.2.2 [Updatable] Adapter "devices" : 1.2.8 , installed 1.1.5 [Updatable] Adapter "echarts" : 1.9.2 , installed 1.9.2 Adapter "ecovacs-deebot": 1.4.15 , installed 1.4.15 Adapter "email" : 2.0.4 , installed 2.0.4 Adapter "feiertage" : 1.2.1 , installed 1.2.1 Adapter "history" : 3.0.1 , installed 3.0.1 Adapter "hm-rega" : 5.1.0 , installed 5.1.0 Adapter "hm-rpc" : 2.0.2 , installed 2.0.2 Adapter "jarvis" : 3.1.8 , installed 3.1.8 Adapter "javascript" : 8.9.2 , installed 8.9.2 Controller "js-controller": 7.0.7 , installed 7.0.7 Adapter "modbus" : 6.3.2 , installed 6.3.2 Adapter "mqtt" : 6.1.4 , installed 6.1.2 [Updatable] Adapter "nuki-extended": 2.7.0 , installed 2.7.0 Adapter "radar2" : 2.4.0 , installed 2.3.0 [Updatable] Adapter "simple-api" : 2.8.0 , installed 2.8.0 Adapter "socketio" : 6.7.1 , installed 6.7.1 Adapter "sonoff" : 3.2.1 , installed 3.1.2 [Updatable] Adapter "web" : 7.0.8 , installed 7.0.8 Adapter "ws" : 2.6.2 , installed 2.6.2 Adapter "yahka" : 1.1.5 , installed 1.0.3 [Updatable] Adapter "zigbee" : 3.0.5 , installed 2.0.5 [Updatable] Objects and States Please stand by - This may take a while Objects: 5627 States: 4680 *** OS-Repositories and Updates *** Hit:1 http://deb.debian.org/debian bookworm InRelease Hit:2 http://deb.debian.org/debian bookworm-updates InRelease Hit:3 http://deb.debian.org/debian-security bookworm-security InRelease Hit:4 https://deb.nodesource.com/node_22.x nodistro InRelease Reading package lists... Pending Updates: 2 *** Listening Ports *** Active Internet connections (only servers) Proto Recv-Q Send-Q Local Address Foreign Address State User Inode PID/Program name tcp 0 0 127.0.0.1:9001 0.0.0.0:* LISTEN 1000 36696 - tcp 0 0 0.0.0.0:9443 0.0.0.0:* LISTEN 0 14716 - tcp 0 0 192.168.69.225:8081 0.0.0.0:* LISTEN 1000 37156 - tcp 0 0 192.168.69.225:8082 0.0.0.0:* LISTEN 1000 39040 - tcp 0 0 192.168.69.225:8087 0.0.0.0:* LISTEN 1000 39025 - tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 0 14381 - tcp 0 0 0.0.0.0:8400 0.0.0.0:* LISTEN 1000 38771 - tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 0 15548 - tcp 0 0 192.168.69.225:8701 0.0.0.0:* LISTEN 1000 39948 - tcp 0 0 192.168.69.225:49292 0.0.0.0:* LISTEN 1000 40055 - tcp 0 0 192.168.69.225:1883 0.0.0.0:* LISTEN 1000 38447 - tcp 0 0 192.168.69.225:1884 0.0.0.0:* LISTEN 1000 38382 - tcp 0 0 192.168.69.225:42010 0.0.0.0:* LISTEN 1000 40255 - tcp 0 0 192.168.69.225:42001 0.0.0.0:* LISTEN 1000 40227 - tcp 0 0 0.0.0.0:6379 0.0.0.0:* LISTEN 0 15537 - tcp6 0 0 :::9443 :::* LISTEN 0 14723 - tcp6 0 0 :::22 :::* LISTEN 0 14383 - tcp6 0 0 :::8000 :::* LISTEN 0 14765 - tcp6 0 0 :::51989 :::* LISTEN 1000 38408 - tcp6 0 0 :::6379 :::* LISTEN 0 14729 - udp 0 0 0.0.0.0:5353 0.0.0.0:* 103 36630 - udp 0 0 0.0.0.0:50086 0.0.0.0:* 103 36632 - udp6 0 0 :::5353 :::* 103 36631 - udp6 0 0 :::43578 :::* 103 36633 - *** Log File - Last 25 Lines *** 2025-10-01 17:00:51.884 - info: hm-rpc.3 (729) Connected 2025-10-01 17:00:51.902 - info: hm-rpc.3 (729) xmlrpc <- listDevices ["iobrokerW43:hm-rpc.3:e1524352660d7525b1ca02fd20c57300"] 2025-10-01 17:00:51.971 - info: hm-rpc.3 (729) xmlrpc -> 16 devices 2025-10-01 17:00:52.042 - info: hm-rpc.3 (729) xmlrpc <- newDevices 16 2025-10-01 17:00:52.061 - info: hm-rpc.3 (729) new virtual-devices devices/channels after filter: 0 2025-10-01 17:00:52.069 - info: hm-rpc.3 (729) xmlrpc <- setReadyConfig ["iobrokerW43:hm-rpc.3:e1524352660d7525b1ca02fd20c57300","INT0000001"] 2025-10-01 17:00:52.077 - info: hm-rpc.3 (729) xmlrpc <- setReadyConfig ["iobrokerW43:hm-rpc.3:e1524352660d7525b1ca02fd20c57300","INT0000002"] 2025-10-01 17:01:04.094 - info: host.iobrokerW43 instance system.adapter.hm-rpc.0 in version "2.0.2" started with pid 768 2025-10-01 17:01:05.624 - info: hm-rpc.0 (768) starting. Version 2.0.2 in /opt/iobroker/node_modules/iobroker.hm-rpc, node: v22.20.0, js-controller: 7.0.7 2025-10-01 17:01:05.747 - info: hm-rpc.0 (768) xmlrpc server is trying to listen on 192.168.69.225:42001 2025-10-01 17:01:05.747 - info: hm-rpc.0 (768) xmlrpc client is trying to connect to 192.168.69.221:42001/ with ["http://192.168.69.225:42001","iobrokerW43:hm-rpc.0:cf701104c4a4a45878e2f35abbbc1f94"] 2025-10-01 17:01:05.801 - info: hm-rpc.0 (768) xmlrpc <- system.listMethods ["iobrokerW43:hm-rpc.0:cf701104c4a4a45878e2f35abbbc1f94"] 2025-10-01 17:01:05.808 - info: hm-rpc.0 (768) xmlrpc <- listDevices ["iobrokerW43:hm-rpc.0:cf701104c4a4a45878e2f35abbbc1f94"] 2025-10-01 17:01:05.832 - info: hm-rpc.0 (768) xmlrpc -> 52 devices 2025-10-01 17:01:05.844 - info: hm-rpc.0 (768) Connected 2025-10-01 17:01:07.968 - info: host.iobrokerW43 instance system.adapter.hm-rpc.1 in version "2.0.2" started with pid 783 2025-10-01 17:01:09.430 - info: hm-rpc.1 (783) starting. Version 2.0.2 in /opt/iobroker/node_modules/iobroker.hm-rpc, node: v22.20.0, js-controller: 7.0.7 2025-10-01 17:01:09.532 - info: hm-rpc.1 (783) xmlrpc server is trying to listen on 192.168.69.225:42010 2025-10-01 17:01:09.532 - info: hm-rpc.1 (783) xmlrpc client is trying to connect to 192.168.69.221:42010/ with ["http://192.168.69.225:42010","iobrokerW43:hm-rpc.1:0ced319d8899761f9adbd9d5683c4d4b"] 2025-10-01 17:01:09.592 - info: hm-rpc.1 (783) Connected 2025-10-01 17:01:09.599 - info: hm-rpc.1 (783) xmlrpc <- listDevices ["iobrokerW43:hm-rpc.1:0ced319d8899761f9adbd9d5683c4d4b"] 2025-10-01 17:01:09.668 - info: hm-rpc.1 (783) xmlrpc -> 0 devices 2025-10-01 17:01:09.867 - info: hm-rpc.1 (783) xmlrpc <- newDevices 108 2025-10-01 17:01:09.901 - info: hm-rpc.1 (783) new HMIP devices/channels after filter: 0 2025-10-01 17:01:43.072 - info: admin.0 (205) <== Disconnect system.user.iob_api_user from 192.168.69.76 adminHat jemand einen Tipp wo ich noch ansetzen kann?
Danke & Grüße
-
Oh Gott bin ich blind - natürlich geht dort nichts, wenn man sich mit einem anderen User mit weniger Rechten anmeldet und nicht mit dem Admin.
Das Thema kann zu.
