Any user can block the system

We have a Sunfire 6800 and Solaris 8.
I found out that any user can use up all available semaphores and shared segments, system wide.
Then system enters to unstable situation, which many important processes fail.
To resolve this situation, one can use ipcs command and take back reserved memories and semaphores from that "user"...
But this is after something happens.
To avoid something happens, do you know a method or a tool in Solaris 8 or 9 to restrict usage of semaphores and shared segments for each user or group of users?

Hi, thanks for your answers and advices.
But:
In those documents I am not able to find the answer of my question.
I am a Unix guy but not Solaris specialist yet. With those parameters,
I could only see the possibility of increasing or decreasing system wide
availability of semap's and shm's. But this won't stop any user
to use up all.
I found this vulnerability in the acceptance tests of our new Sunfire platform.
Sun engineer wasn't interested in and told me that I can disable
any Unix server like this (I don't know I haven't tried it in another).
But I found that denial of services in Solaris machine (8 cpu, 8 gb)
was extremely easy.
What I think is, there should be something to limit semaps and shm's per user, not per process or system wide. I could not believe the otherwise.

Similar Messages

  • Setting Time of Day users can access the system

    This has probably been asked and answered before but please bear with me, I'm new ...
    Is there a parameter that can be set to limit the time of day that users can login to the system?

    Hi,
    an option is to shutdown the user related services (like the report processing servers) using O/S scripts for a given time period.
    Regards,
    Stratos

  • Report that can take the system: (users, utilization, T-CODE)

    I need a report that can take the system:
    How many times a user logged into the system in the last month
    Most used transactions
    Changes passwords.
    Etc., all you have to do with a user-level tuning.
    thanks,
    VLopes

    Hi
    If you Activate the audit log you can keep track all information,
    have a look at   -successful and unsuccessful dialog and RFC logon attempts
                             --successful and unsuccessful transaction and report stats ...
                             how many times a user logged -in and all .yah you need to count
                             the number of times a user logged based on the report.
    Once you activate....every day transaction details are recorded for every user
    who tries to log in.keep an eye on the below parameters
    In RZ10
    rsau/enable :set to 1 to activate audit logging
    rsau/local/file   :to specify name and location of audit log file
    rsau/max_diskspace/local :To specify maximum space for audit file say if
                                                max.size is reached auditing stops
    Hope that helps.
    regards
    Manjula .U

  • How can I backup my mac on a Time Capsule (connected with ethernet), without any user logged on the mac?

    Time Machine by default does not run when no user is logged in, there's some way to let backups run without any user logged on the mac?
    I need to backup 3 iMac connected through ethernet network to a Time Capsule.
    Some hint?

    If you use eithernet for your main connection then just plug the TC bridged into the network.
    If you use wireless for your internet connection then you can use the TC isolated from the network by ethernet.. but this is really only convenient on a desktop Mac.
    The instructions I put in this thread with screenshots.. see near the bottom.
    https://discussions.apple.com/thread/4817218?tstart=30
    It is a bit tricky so if you have questions ask back here.
    Just to say a USB for firewire external drive is faster and more reliable than a TC.. cheaper to buy as well.. although since you already have the TC that is not a concern.. but you can ebay the TC and buy a bigger and better external drive with the proceeds.

  • How many users can view the same report at the same time in obiee answers

    Hi All,
    How many users can view the same report at the same time in obiee answers..?
    What is max and minimum number of users.
    Do we need to increase any system configuration.
    Thanks,
    Jagadees.

    Hi,
    Many users can view report at same time.It depends on the server if it can accept those many users at same time.If number of users increases OC4J may not work properly.
    Refer : http://www.artofbi.com/index.php/2009/10/what-is-oc4j-an-oracle-application-server-distribution-really/
    Regards,
    Srikanth

  • How we can lock No more than one user can use the table  at a single time

    Hi Abapers,
    0)  which  function modules to lock & unlock a table.
    1) When you execute the program, we can check if there is any lock on this table. If yes, the user should be able to only view the table contents and not modify.
    2) If there is no lock, then lock the table and go into change mode.
    3) On exiting from the program, unlock the table using the function module.
    4) more than one user can't modify the table just display.
    Note: If there is any lock, display message saying table is locked.
    Plz help me for this requirement.
    Thanks
    Nani

    Hello Nani
    Have a look at the lock object EMMARAE (<i>Lock MARA and MARM/MAKT exclusively</i>) in transaction SE11.
    Inspect the F1 help for field <b>Lock mode</b>:
    DE ENQMODE
    Short Text
         Lock mode
    Definition
         Defines how to synchronize table record access by several users.
    The following modes exist:
         Exclusive lock
             The locked data can be read or processed by one user only. A request
             for another exclusive lock or for a shared lock is rejected.
         Shared lock
             Several users can read the same data at the same time, but as soon
             as a user edits the data, a second user can no longer access this
             data. Requests for further shared locks are accepted, even if they
             are issued by different users, but exclusive locks are rejected.
         Exclusive but not cumulative lock
             Exclusive locks can be requested by the same transaction more than
             once and handled successively, but an exclusive but not cumulative
             lock can only be requested once by a given transaction. All other
             lock requests are rejected.
    If you want to lock a standard table search whether the table is used in lock objects (<i>Where-Used-List</i>). If it is a customer table you have to create your own lock object (including two function modules: one for enqueuing and the other for dequeuing).
    The lock modules can be found in menu <b>GoTo -> Lock Modules</b>.
    Given these lock modules the logic should be quite clear after starting the program:
    1. Request lock -> if successful, continue in Change mode; -> if failed, continue in Display mode
    2. Before leaving the report remove lock (note: no problem if no lock has been set in the beginning).
    Regards
      Uwe

  • Is there any way to block the shutdown of the device is protected by password? This function would help in case of theft with the issue of the find my iphone app.

    is there any way to block the shutdown of the device is protected by password? This function would help in case of theft with the issue of the find my iphone app.

    Device experiences issues, locks up.
    I need to do a reset.
    How would I do that with a pass code lock in place?
    Wait until the battery dies?
    Apple's changes in iOS 7 are smarter.
    "Losing your iOS device feels lousy. Thankfully, Find My iPhone can help you get it back. But if it looks like that’s not going to happen, new security features in iOS 7 make it harder for anyone who’s not you to use or sell your device. Now turning off Find My iPhone or erasing your device requires your Apple ID and password. Find My iPhone can also continue to display a custom message, even after your device is erased. And your Apple ID and password are required before anyone can reactivate it. Which means your device is still your device. No matter where it is."
    http://www.apple.com/ios/whats-new/

  • Unauthorized User can see the aggregated result?

    Dear all,
    I got a problem that, unauthorized user can see the aggregated result.
    e.g. A user who is allowed to read data of Sales Office (0SALES_OFF) 0001 only. (It is done in the RSECADMIN already)
    Now a cube contains Sales records of Sales office 0001 & 0002 :
    Sales Office 0001  Sales Value 3000
    Sales Office 0002  Sales Value 2000
    When the user execute a query from the cube without any selection criteria, it give the aggregated Sales Value 5000.
    But if the user try to drill down for each sales office, it can then give error, because the user are not suppose to see Sales Office 0002 records.
    What I expect is an error at the very beginning when the user execute the query, saying the cube contains data that the user is not suppose to see, the user need to put in the correct Sales Office as criteria first.
    Is there anyone can help on this issue?? I have no idea how can this happened?
    Many Thanks!!!
    Chris

    Hi,
    Now I understood your concern correctly. Unfortunately, I do not have prompt answer for you. So, User should be able to view the aggregated result, but not to irrelevant sales office. If you don't have condition on Aggregated Result, restricting to individual Sales Office can be done in RSECADMIN.
    Let's wait for other's opinions.......
    Regards,
    Suman

  • I want to learn about workflow any one can provide the guidence for me

    i want to learn about workflow any one can provide the guidance for me

    SAP Business Workflow can be used to define business processes that are not yet mapped in the R/3 System. These may be simple release or approval procedures, or more complex business processes such as creating a material master and the associated coordination of the departments involved. SAP Business Workflow is particularly suitable for situations in which work processes have to be run through repeatedly, or situations in which the business process requires the involvement of a large number of agents in a specific sequence.
    Features
    SAP Business Workflow provides a number of tools for defining and analyzing workflows as well as for monitoring operation.
    The Workflow Builder is for displaying and making changes to workflows. You can make small extensions directly to the original workflows supplied by SAP, such as carrying out your own agent assignments or changing deadline monitoring.
    There are several Workflow Wizards to support you in the definition of workflows, with which you can create specific parts of a workflow. The Workflow Wizard Explorer gives you an overview of the existing Workflow Wizards.
    In order to make the functions of the R/3 Systems available to a workflow, you use business objects, which you can define and analyze in the Business Object Builder. These business objects are made available to the workflow in reusable tasks. The Business Wizard Explorer gives you an overview of all existing tasks.
    You can also use SAP Business Workflow to respond to errors and exceptions in other, existing business processes. You can start a workflow when predefined events occur, for example an event can be triggered if particular errors are found during an automatic check.
    Please follow the links,
    http://help.sap.com/saphelp_nw04s/helpdata/en/04/926f8546f311d189470000e829fbbd/content.htm
    http://help.sap.com/saphelp_46c/helpdata/en/c5/e4a930453d11d189430000e829fbbd/content.htm
    http://help.sap.com/saphelp_nw2004s/helpdata/en/a1/172437130e0d09e10000009b38f839/frameset.htm
    A good tutorial
    http://www.thespot4sap.com/articles/Invoice_Verification_Automation_Using_SAP_Workflow.asp
    http://www.sap-basis-abap.com/wf/sap-business-workflow.htm
    http://www.sap-img.com/workflow/sap-workflow.htm
    /people/alan.rickayzen/blog
    /people/jocelyn.dart/blog/2006/06/19/why-use-abap-oo-with-workflow
    a good book
    http://www.sap-press.com/product.cfm?account=&product=H950
    http://help.sap.com/printdocu/core/Print46c/en/data/pdf/PSWFL/PSWFL.pdf
    http://help.sap.com/saphelp_47x200/helpdata/en/4a/dac507002f11d295340000e82dec10/frameset.htm
    http://www.workflowing.com/id18.htm
    http://www.e-workflow.org/
    http://web.mit.edu/sapr3/dev/newdevstand.html
    Check the following PDF
    http://help.sap.com/printdocu/core/Print46c/en/data/pdf/BCBMTWFMSTART/BCBMTWFMSTART.pdf
    http://help.sap.com/printdocu/core/Print46c/en/data/pdf/BCBMTWFMDEMO/BCBMTWFMDEMO.pdf
    http://help.sap.com/printdocu/core/Print46c/en/data/pdf/BCBMTWFMPM/BCBMTWFMPM.pdf
    http://help.sap.com/printdocu/core/Print46c/en/data/pdf/PSWFL/PSWFL.pdf
    Regards,
    Sai

  • Block the system for GR against po and inboiund delivery

    Hi Gurus,
    can anybody please tell me is there a way in the system where we can block the GR against PO if there is an inbound delivery cretaed against that PO. so if the PO has an inbound delivery created in the confirmations tab, then during GR the system should only allow to receive against inbound deklivery and not agianst the PO. what settings do we need to do to do this. Points will be duly rewarded for helpful replies
    Thanks
    Anusha

    Hello Anusha,
    Basically you need to maintain the confirmation control key in the Info record or the vendor master in order get the option of doing an inbound delivery and not a rough GR. in info record in purchasing screen and also the same screen in vendor master.
    The above is a permanent setting for a vendor, if you want to do it temporarily, you need to go to the confirmations tab in PO item details and change the control key in there.
    I hope this is what you are looking for
    regards,

  • Trace on User activity in the system

    Hi Experts,
    We have ECC6.0 installed in our organization, and now we want to find out the below points-
    1. Report on what time which users logged into the system.
    2. What are the t-codes or transaction they have executed in the system
    3. How much time they worked into the system and how much time they were idle in the system
    I want a cosolidated report from the system on the above points.
    Regards,
    Sudip

    Hi,
    you can run tcode ST03N to see some statistics on the executed reports/transactions in specific time frames of all/single users. Some information about can be requested via user information management (SUIM) as well as tcode AL08. However there is no report that covers all these things.. because this kind of observation may be a problem for workers' representatives.
    Regards, RP

  • How many ways we can block the vendor

    hi friends,
                 How many ways we can block the vendor

    Hello
    Adding further,
    Within Accounts Payable, you can block a vendor account for posting. You have to block a vendor master record before you can mark it for deletion. You would also block a vendor that you use only as an alternative payment recipient, so that nobody can post to it by mistake.
    There are several fields in the vendor master record available to you. You can set the following blocks:
    Posting block for certain company codes or for all company codes
    Purchasing block for certain purchasing organizations or for all purchasing organizations. This is of course only if you have purchased and installed the purchasing application component.
    This topic describes how to block a vendor account and blocking an account for the accounting department only. A separate topic explains how you block a vendor from being paid.
    You can cancel a vendor account block at any time. To do this, simply remove the relevant indicator.
    Only block an account if there are no more open items in the account. If an account is blocked, you cannot clear any open items in it.
    Reg
    assign points if useful

  • In javascript, how do I open a dialog so that the user can input the value of a variable?

    I'm working on a script that will be used for many images, all of them using the same format (size of the image, layer layout, etc).
    All of these images will have a layer of text, and what I want is to have the script modify the horizontal length of the text layer (horizontal percentage scale), shrinking it so that all of the text appears on-screen, in case there's too much of it.
    But the text will vary from image to image, and what I want is for the script to display a dialog box were the user can input the text that will be put on the text layer and scaled down.
    Can this be done?

    If you want the user to both enter then fit the text while your script is running, here is one way to do that.
    var typeLayer = activeDocument.activeLayer;
    var type = typeLayer.textItem;
    var t = prompt ("Enter text" , "new text");
    type.contents= t;
    transformLayer();
    function transformLayer() {
         try{
         var desc = new ActionDescriptor();
            var ref = new ActionReference();
            ref.putEnumerated( charIDToTypeID('Lyr '), charIDToTypeID('Ordn'), charIDToTypeID('Trgt') );
        desc.putReference( charIDToTypeID('null'), ref );
        desc.putEnumerated( charIDToTypeID('FTcs'), charIDToTypeID('QCSt'), charIDToTypeID('Qcsa') );
            var desc1 = new ActionDescriptor();
            desc1.putUnitDouble( charIDToTypeID('Hrzn'), charIDToTypeID('#Rlt'), 0.000000 );
            desc1.putUnitDouble( charIDToTypeID('Vrtc'), charIDToTypeID('#Rlt'), 0.000000 );
        desc.putObject( charIDToTypeID('Ofst'), charIDToTypeID('Ofst'), desc1 );
        desc.putUnitDouble( charIDToTypeID('Wdth'), charIDToTypeID('#Prc'), 100 );
        desc.putUnitDouble( charIDToTypeID('Hght'), charIDToTypeID('#Prc'), 100 );
        desc.putBoolean( charIDToTypeID('Lnkd'), true );
        executeAction( charIDToTypeID('Trnf'), desc, DialogModes.ALL );
         }catch(e){}

  • I have a WD 2 tb hard drive that I want to use to back up my Mac Pro quad core.  How do I create a back up startup disk?  Also, when I used Time macine, it only backed up users and not the system or library folders.  Ideas?

    I have a WD 2 tb hard drive that I want to use to back up my Mac Pro quad core.  How do I create a back up startup disk?  Also, when I used Time macine, it only backed up users and not the system or library folders.  Ideas?

    Welcome to Apple Support Communities
    Time Machine should be enough to make a backup of your files. Also, it should back up all folders, so open System Preferences > Time Machine > Options, and make sure that there are no folders included in the excluded items list.
    If you want to create a bootable clone of your hard drive, you need to use an app like Carbon Copy Cloner or the Disk Utility's Restore feature > http://pondini.org/OSX/DU7.html

  • Is there a way the user can change the equation in the formular node from the front panel on the fly, dynamically?

    Is there a way the user can change the equation in the formular node from the front panel on the fly, dynamically?

    Sorry, I don't think so. That would be pretty cool if you could create a property node for a formula node and then enter a formula on the front panel and use it to update the formula. But you can't create a property node for a formula node and the only way of modifying the formula is by typing it into the formula node on the diagram. And you can't modify a diagram of a running VI.
    You could create a VI which is only a formula node with the maximum number of inputs and outputs you expect. Have a button on the calling VI to Edit Formula. When the button is pressed, use a VI server to display the front panel on the formula VI, display a dialog box telling the user how to display the diagram of the formula VI, then stop the calling VI. (You can't edit a sub-VI while t
    he calling VI is running). The user will then need to rerun the calling VI to use the new formula.
    You might be able to do something by calling MatLab or something like that to get an interactive formula window.

Maybe you are looking for

  • REP-1401: 'cf_10formula': Fatal PL/SQL error occurred. ORA-06502: PL/SQL: numeric or value error

    Hi Team, I am running one conc programme. After running I am getting below  error. I checked the issue on metalink  and other, seems that it is an size related issue. I have increased the size of formula columns and placeholdder too. But still gettin

  • Using bberry to connect to the internet

    i have connected to the internet using my bberry and things are working well except i cannot send out mail from my outlook mailbox. i am receiving and sending from my gmail. i am receiving from outlook mail but cannot send. what is the problem?

  • Messages received by iPad

    I Receive some messages on my iPad but not on my iPhone. Why?

  • Regional Format

    Hi all, it's not a massive issue but one I'd like to fix if possible. I live in United Arab Emirates and use Awesome Note as calendar application on my iPad. ANote does not offer support to change first day of week to Sunday, it operates off the loca

  • Internal error: Failed to get GenericServlet

    I'm using iPlanet 4.1sp7. I'm getting "Internal error: Failed to get GenericServlet" errors when I try to use jsp's. I've tarred and copied a working iPlanet from Sol7 to this Sol8 system and still the same error. CLASSPATHs seem fine. Any tips on wh