AAMEE + Tivoli Endpoint Manager/BigFix

Has anyone successfully used an AAMEE created Adobe CS6 package in combination with Tivoli Endpoint Manager (formerly known as BigFix)?

Hi,
This is not a Product we have personally tested although I am aware that customers have used it succesfully in the past. From what I remember there was a 2gb restriction on package sizes but that may now have been removed by the vendor.
AAMEE created packages are designed to be used with 3rd party deployments tools and the msi and pkg files it produces are pretty standard. We would be interested to see how you get on with your testing and if there is any help we can provide on our side then just let us know.
Cheers
Karl Gibson
CS Enterprise Systems Engineer

Similar Messages

IBM Endpoint Manager / BigFix Versus System Center Configuration Manager

Hi All,
My organization's security team (which I'm not on) has been tasked with researching patching solutions for our environment which includes mostly Windows workstations but a good amount of Linux systems as well. Total amount of workstations covered
is approximately 13,000 spread across about five main sites.
We've been using SMS 2003 / SCCM 2007 for over a decade but unfortunately the out-of-the-box Linux support in the patching arena remains to be relatively limited even in the most recent versions of SCCM. We've also had SCCM client health
issues which has hindered the deployment of some patches and/or patching status reporting. Recently, we've written a few scripts to help with the client health issues but the Linux support issue still remain.
The current proposal, which I'm reviewing, is to move all Linux and Windows patching over to use the IBM Endpoint Manager (BigFix) product. To this end, I've got a few questions to throw out there for general feedback.
1) Has anyone had any real-life positive or negative experiences with IBM Endpoint Manager they'd like to share, especially in relation to the patching component?
2) Has anyone had any real-life positive or negative experiences with using SCCM + another plugin product for SCCM that they'd be willing to share?
3) Has anyone attempted to integrate BigFix patch deployment into SCCM OSD deployment and/or have thoughts on how to prevent SCCM mandatory deployments from interfering with BigFix activity.
Any feedback is appreciated, thanks!

Yes, I know this is an old post, but I’m trying to clean them up.
You should post this question in an IBM forum
There are lots of blogs that talk about using CM07 with 3<sup>rd</sup> party patching tools. There is where I would start.
This question should be posted to a Bigfix forum.
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ

RMAN integrated with Tivoli Storage Manager

Environment
===========
Two Node RAC Production DBs on 10.2.0.4
Platform : Solaris
RMAN is the only backup tool i've ever worked with. I've come across OTN articles which discuss TSM along with RMAN. Is there any advantage at all in using TSM with RMAN ? Or, Is it just marketing gimmick by IBM?

Our strategy:
1--Monday ------------------->Level 0 backup (1:00am)
2--Tuesday----->     Level1
3--Wednesday----->     Level1
4--Thursday------------------>Level 0 backup (1:00am)
5--Friday----->     Level1
6--Saturday----->     Level1
0--Sunday ----->     Level1Our RMAN backup pieces got to an NFS mount . Every monday morning the Level 0 backup is copied to Tape by Sysadmins and kept for 3 months. So, where does Tivoli storage manager come into picture ? Does TSM do copying the backup pieces from Disk to Tape part ?

Tivoli Access Manager 6.0 with Sun Java System Directory 6.3

Hi,
We have been using Tivoli Access Manager 6.0 with Sun Java System Directory 6.3 .
Using IBM TAM Java API we can administer the user creation but the API provide support only to create user with required attribute as user name, password, description, setAccoutntvalid etc.
But Sun Java System Directory 6.3 contains the many attributes as just to name a few...
First Name (givenname), User ID (uid),Password (userPassword), Confirm Password
E-mail (mail), Telephone Number (telephoneNumber), Country (c),Fax Number (facsimileTelephoneNumber), Locality (l), Organization (o), Organizational Unit (ou), accessHint, accountHint, departmentNumber, description, destinationIndicator, displayName, employeeNumber ETC...
Now My Issue is if we need to add the values for other attributes as "accessHint" , "employeeNumber" etc, then how can we acheive using IBM TAM Java API or is there any other way.
Thanks for your kind help...

Looks like the attribute sunIdentityServerDiscoEntries is defined twice in the schema. Run the following and see where it is defined for the second time.
# cd /var/opt/SUNWdsee/dsins1/config/schema
# grep -w sunIdentityServerDiscoEntries *.ldif | grep -iv objectclasses
Edited by: etst123 on Mar 3, 2009 1:28 PM

BPC authentication via Tivoli Access Manager

Hello experts,
I'm now investigating BPC authentication mechanism with third vendor authentication software.
Is it possible to login to BPC v7.5 MS version via Tivoli Access Manager with 'Reverse Proxy' ?
And can BPC get a login-user information as a http-header from Tivoli Access Manager at this time ?
If the above situation is possible, can BPC utilize BO enterprise authentication with Tivoli Access Manager ?
Best regards,
Tatsuo Oba

SAP BOPC can use Reverse Proxy.
I'm not sure how you want to use Tivoli Access Manager with SAP BOPC?
It is very interesting to know also the reason you woudl like to use SAP BOPC in this way.
It can be a very nice case study.
BPC can not get information like an HTTP header and something like that it will be unsafe from security point of view.
Regarding your question:
BPC to utilize CMS authentication with Tivoli Access Manager
I think you have to provide more information? Why do I need Tivoli Access Manager to access BPC or to do authentication to CMS.
I have to mention I don't know how it is working Tivoli Access Manager and because of that I'm asking you to provide more information.
Regards
Sorin Radulescu

Using IBM Tivoli Access Manager to Secure Tuxedo Services

Wondering if anybody has any experience using 'IBM Tivoli Access Manager for e-business' to perform tuxedo service authorization ?
Is there an out-of-the-box integrated solution available or does one have to basically build a security service that use the Tivoli Access Manager APIs to determine if the user is authorized to invoke service?
Thanks,

Hi,
I followed the steps of establishing SSO using TAM for OBIEE application.
Below is the piece of code that i had inserted in the "instanceconfig.xml" to enable SSO:
<Listener>

</Listener>
<CredentialStore>
<CredentialStorage type="file" path="<OracleBIData>/web/config/credentialstore.xml" passphrase="another"/> </CredentialStore>

<Auth>
<SSO enabled="true">
<ParamList>

<Param name="IMPERSONATE"
source="httpHeader" nameInSource="iv-user"/>
</ParamList> 
<LogonUrl>http://pkmslogin</LogonUrl>
<LogoffUrl>http://pkmslogout</LogoffUrl>
</SSO>
</Auth>
My credential store file look Like on below
<sawcs:credential type="usernamePassword" alias="impersonation">
<sawcs:username>USER</sawcs:username>
<sawcs:password>password</sawcs:password>
</sawcs:credential>
In the above code i am trying to get the userID of a User through the header of the application's URL, who has been already been authenticated by Windows desktop Authentication mechanism .
but then i try creating a junction using TAM and access the application through the junction i still get the logon page of OBIEE application...
Can any one help me out in this issue..
Thanks in Advance...

Hyperion integration with Tivoli Access Manager

Hello All:
Does Hyperion supports using pre-authenticated users from IBM Tivoli Access Manager. Please can you point me to any documentation explaining the integration procedure.
TIA.

Suggest you read sections 2,3,4 of the below document:
http://download.oracle.com/docs/cd/E10530_01/doc/epm.931/hyp_security_guide.pdf
It doesn't come out and say that this type of agent is supported -- you can potentially log a case with Oracle and they may be able to answer you however as it's not documented I would suggest it's not supported.
If you decided to go forward with this then you need to find someone else who is using it successfully and ask them how it is working out.
Presuming they didn't change too much from 9.3.1 to 11.1 (9.5) then you will find many many issues with SSO working.
IT saving a user a login box or two and making the application non-usable just isn't a good direction to go.
John

User Profile provising by Tivoli identity manager

Is it possible provisioning User Profile Services by Tivoli Identity Manager ITIM

HI,By default share point provisions UPS by the FIM service.This is the tool configured in sharepoint when we run the UPS and Synchronisation service.
http://expertsharepoint.blogspot.de/2014/03/user-profile-service-and-user-profile.html
Anil Avula[Partner,MCP,MCSE,MCSA,MCTS,MCITP,MCSM] See Me At: http://expertsharepoint.blogspot.de/

XSAN and TSM (Tivoli Storage Manager)

Hello,
I wanted to know if anybody had already used the TSM (Tivoli Storage Manager) solution from IBM to backup an XSAN?
From what I have read on the IBM tech guide, the solution is fully compatible.
Best regards,
Cédric

Hello Cedric.
I have used IBM TSM 5.2 with XSAN for a whole year without problems.
Our Xsan environment have 15 mixed INTEL&PPC Workstation, 2 Intel MDC, OSX-OSXSERVER 10.4.9, XSAN 1.4.1
We have a 3584 LTO library with 2 frames, 4 drives LTO2 and 2 LTO3. But we use only LTO3 with TSM from MAC. Our IBM TSM Server is a PSeries 630.
Now we are looking for a MAM system that can manage a proxy version of our archive. Parcial restores features could be very helpful for us.
CCL

Tivoli Access Manager WebSeal & Infoview

Post Author: ab129001
CA Forum: Authentication
Is it possible to enable Infoview users to authenticate via Tivoli Access Manager WebSeal (a reverse proxy authentication product)?
Thanks in advance.
Andy

Post Author: jsanzone
CA Forum: Authentication
Andy,
It's my understanding that in order to achieve SSO w/ TAM running under WebSeal, that a Portal Integration Kit (PIK) must first be produced from BusinessObjects for the XI R2 platform. Back in early April 2007, before I knew about PIKs, I submitted a trouble ticket to Tech Support in the hopes of getting a "quick" solution, hence the PIK education lesson. In response to my request, tech support submitted an enhancement request for a WebSeal Portal Integration Kit, the Ticket number for the enhancement is ADAPT00755013. If you find out anything further on this situation, I'd be all ears!!

Punchout - How to post login params to Tivoli Access Manager?

I am trying to help a customer access our parts ordering system. He is using SAP and wants to use the OCI Punchout feature. (Warning: I am a complete and utter SAP novice)
Our application servers are protected by Tivoli Access Manager and users currently login to our application by entering their user/pwd info in a form. This customer wants to store this login info in SAP and perform the login automatically as well as posting other parameters, such as HOOK_URL etc., to our parts ordering application.
I have been struggling with this for a few days now but without success. Can anyone offer some pointers here? Has anyone done something similar?
Thanks
Paul

Thanks for your reply Masa,
as I mentioned in my post, I am an SAP novice. I am assuming that the user, password and hook url are stored somewhere in SAP for use in the punchout.
The problem I see is this: how to login with TAM and send the hook url to my application. It seems to me to be 2 separate actions.
Paul

Tivoli server manager is going to be changed for backp and restore

Hi
All,
I have oracle database 10g 10.2.0.3 installed on AIX 5.3 server. I am taking bakup and restore in TAPE using RMAN. I have IBM Tivoli Server Manager as a media Management Software. All resources are locatesd at inhouse right now. the only thing that gonna be change is IBM tivoli server manager and TAPE. we will have NEW Tivoli server manager and TAP at different location. Now I have backup and restore script available and TSM client installed on database server.
I have reviewed backup and restore script but I don't know what kind of change I have to do.
So the main question is
Due to Tivoli server and Tape gonna be change
what kind of changes I have to do ?
where should I implement the change?
where can I find the useful information regarding configuration parameter for this kind of setup?
any help will be appreciated.
Thanks,
Vishal

I don't know what version of TSM you are using, but you can check Backing Up Oracle Using Tivoli Storage Management and also check Configuring RMAN to Make Backups to a Media Manager.

Oracle Apex - SSO with IBM Tivoli Access Manager WebSeal - filters out Files with Server Error 500

Hi,
We are using IBM Tivoli Access Manager for SSO to authenticate users to access our APEX application. The authentication works but...
When the application is being accessed with the WebSeal JS/CSS files are randomly not loaded and show up with either HTTP 400 or HTTP 500 error in the FF Toolbar Console. Of course without certain CSS / JS files the application can't be used by the user.
If the application is accessed without WebSeal all files are loaded successful.
Our set up:
There are two APEX Applications using the WebSeal - the first one apparently works
Apex Listener on Tomcat7.0
Apex 4.2.6
We tried all kind of different WebSeal configurations but nothing worked so far.
I found the following:
interactive report problem with SSO
==> Does anyone know how to use mapping tables and does it help?
Interactive report javascript error due to proxy
==> The solution is for EPG but we use Tomcat as Listener so the solution does not apply
Does anyone know how to configure the WebSeal ?
Thanks

I have same issue with Apex 4.2.6 and Webseal, but only on Mobile Application. Desktop Application is ok.
I have raise a SR on supportweb, but SR engineer tell me it's may be the Webseal issue, they can't reproduce it with Oracle Access Manger.
It's really a tough issue.

Oracle Suggested Backup, to tape only - Tivoli Storage Manager

I´ve been asked to cancel future backups to disk and to setup oracle´s suggested backup to the tape device only (which underwater is the tdpo from Tivoli´s storage manager).
This way the expensive disks can be freed from recovery data.
I´ve had my share of problems with the tdpo, but besides the problem of this gateway driver between RMAN and TSM I would like to know if this is best for the whole suggested backup strategy.
Somehow I´m not convinced in backing up to "tape" devices only; for it is slower than local disks, and because we had problems before with the driver, but there may be a lot more reasosn why I should or should not accept this desired goal to be best for our company.
I hope some of you can help me straighten my vision on this.
Robin

The biggest problems I think we might face are the
big question "who is responsible for what", and the
administration of non Oracle systems/methods to
perform backupsi have no problems with such a setup. i provide the rman skript which will be called by TSM.
the TSM admins notify me if the backup failed. retention on TSM side is disabled, only RMAN deletes obsolete/expired backups.
All I want to care about is performing a backup to
Disk, or Disk and Tape, or just Tape from within
Oracle/RMAN and read the ouput from here.
Now where these external tape labraries like TSM come
in there will be more administration for the total
handling of a backup job. It´s not only RMAN, but a
tdpo and a TSM server which need to be monitored
closely. of course TSM has to be monitored but if you already have invested an infrastructure you should use it for every type of backups.
Sadly Oracle has yet to come up with it´s secure
backup for TSM systems, but I think it would be best
if I could let Oracle solely in charge of its own
backups.if TSM retention is disabled, RMAN has absolute control.
Then again, I don´t know if anyone has good
experiences with TSM as the only backup provider for
Oracle backups. (so no disk backups)it works very good. use staged pools on TSM. primary pool should be diskpool, secondary a tapepool. you can configure TSM to move the data from disk to tape based on fill level or age.
regards,
-ap

Is it possible to Integrate IBM Tivoli Access Manager with EBS R12.1.3 ?

Hi All,
We have a requirment to integrate IBM TAM with oracle EBS R12.1.3. We already had such setup with TAM5.1 with oracle EBS 11.5.0. Now we try to replicate setup using R12.1.3 and end up with failures.
- TAM login is unable to bypass the oracle EBS 12.1.3 page (Webseal landing page marks to /OA_HTML/Rf.jsp in R12 and 11i has /OA_HTML/AppsLocalLogin.jsp) which normally gives the home page in 11i.
- I can see EBS is not accepting the TAM post call completly.
Can somebody please throw some light on this.
OS -- IBM AIX 6.1
DB - 11.2.0.3

Hi Hussein,
Thanks for the reply. There is no error message as such. TAM Page just route it to apps login page.
I've reviewed above MOS notes. But in our case, we are not using any form services. Just HTTP and oacore services are running in application node.
Below standard IBM note was followed for config,
http://pic.dhe.ibm.com/infocenter/tivihelp/v2r1/index.jsp?topic=%2Fcom.ibm.itame2.doc_5.1%2Fam51_webseal_guide99.htm
Apache log with debug option gives below messages
10.15.25.71 - - [26/Jun/2013:10:31:35 +0100] "GET /OA_HTML/RF.jsp?function_id=1024788&resp_id=-1&resp_appl_id=-
1&security_group_id=0&lang_code=US HTTP/1.1" 200 13618 6 "https://isup-sit.via.novonet/pkmslogin.form" "Mozilla
/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.45
06.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)"
10.15.25.71 - - [26/Jun/2013:10:31:35 +0100] "POST /OA_HTML/OA.jsp?page=/oracle/apps/fnd/sso/login/webui/MainLo
ginPG&_ri=0&_ti=1493943578&language_code=US&oapc=2&oas=vAqt8ennrMoGojwjkH3sjA.. HTTP/1.1" 200 12466 0 "https://
isup-sit.via.novonet/isup/OA_HTML/RF.jsp?function_id=1024788&resp_id=-1&resp_appl_id=-1&security_group_id=0&lan
g_code=US" "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 1.1.4322; .NET CLR 2.0.507
27; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET4.0C; .NET4.0E)"
In normal course we use to get one more GET to OA.jsp that is not happening here..
GET /OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE
Please note we are not using oracle SSO.
Thanks,
Lakshmanan

AAMEE + Tivoli Endpoint Manager/BigFix

Similar Messages

Maybe you are looking for