On one of my machines, I’m unable to get the After Effects submission script to launch.
I receive this error:
The SubmitAEToDeadline.jsx script could not be found in the Deadline Repository (Error: Could not read the connection.ini for the given repository path “/Volumes/DeadlineRepository” because:
Access to the path ‘/Volumes/DeadlineRepository/settings/connection.ini’ is denied. (System.UnauthorizedAccessException) (Deadline.Configuration.DeadlineConfigException)
). Please make sure that the Deadline Client has been installed on this machine, that the Deadline Client bin folder is set in the DEADLINE_PATH environment variable, and that the Deadline Client has been configured to point to a valid Repository.
I have “Allow scripts to write files and access network” in After Effects checked.
I am directly connecting to my Deadline repository, and I can confirm that it’s mounted and I can access it through the filesystem.
I can confirm my user account on this machine has read/write access to the repo and the connection.ini file.
If I submit an After Effects job through Deadline Monitor, it renders perfectly, without error.
I have the submission script working on other machines. The only difference I can think of is on other machines, the user has admin privileges (both the failing machine and the working machine are Macs).
This feels like a permissions issue, but I’m stumped. Any ideas?
Thanks for reaching out. We can check the permissions outside of After Effects but from your response it seems fine.
To check the permissions open a terminal and try creating a file and reading it along the path:
‘/Volumes/DeadlineRepository/settings/connection.ini`
If you are able to make and read a file in the path above then add full disk access for /bin/sh under Privacy in the Security and Privacy Control Panel. You may need to navigate to the /bin folder using Go > Go to Folder… (Command-Shift-G) You can drag sh onto the panel.
If that does not help then Open a Deadline Monitor> Change Repo> Navigate to /Volumes/DeadlineRepository/settings/connection.ini let it fail not back out to the correct Repo location and retry (this has been reported a solution before for a similar issue).
I cannot create a file in /Volumes/DeadlineRepository/settings , but I can read a file successfully. But I shouldn’t be able to create a file in my Deadline Repository - it’s set to read-only. From the manual (emphasis mine):
The Repository folder (and all subfolders) should be able to be read and executed from by deadlineuserbut not written to. Only the Repository subfolders jobs/, jobsArchived/, and reports/ should be able to be written to and modified.
I gave /bin/sh Full Disk Access, and changed my Repository location, but neither worked. I also copied the submission script over manually, and it did not work.
So I have an update on this - the reason the submission script wasn’t working is because my user account wasn’t a local account - it’s a network authenticated by our Active Directory domain controller. Creating a local account on the machine and running the script works perfectly. Do you know what additional permissions I need to give my network account?
This seems to be an issue with the domain user not able to access the “/Volumes” mounted share for Repository. Did you try opening a terminal as the network user and change directory (cd) to the volume path?
Deadline submitter runs deadlinecommand in the backend to connect to the database and query information for the submitter. The “deadlinecommand” is a commandline app and on Mac, we have seen it failing as the “/bin/sh” access to the user running the application.
I have couple theories on this issue which might cause the issue:
The mounted volume was configured incorrectly and the permission for the network user were not given. You might have to give the correct permissions to the network users
The application needs the /bin/bash to get the Full Disk Access, as the mounted drive is not available to the set of users. Here is a forum I found on Apple discussion website: Mounted volume not accessible | Apple Developer Forums
The user does have access to /Volumes - they can access other mounted directories, no problem.
To test, I mounted the Deadline repo in their home directory, and can cd into it. The permissions of the Deadline repo are 700, and the user owns the directory.
I have given /bin/sh, /bin/bash, and /bin/zsh full disk access. Still, the script doesn’t work. Local accounts are able to run the script without a problem.