Attribute permissions

Hi,
based on the iPlanet knowledgebase I tried to set a user profile
via the dynamic profile servlet, however this fails due to
an error:
com.iplanet.portalserver.profile.ProfileException: Permission denied in
setting attributes or privileges
This is what I did:
Profile p = sess.getUserProfile();
p.setAttributeString("iwtUser-role",rolename,Profile.NEW);
I modified /etc/opt/SUNWips/xml/iwtUser.xml so that iwtUser-role
now has
<iwt:Att name="iwtUser-role"
desc="Users Role"
type="string"
idx="u12"
userConfigurable="TRUE">
<Rperm>ADMIN</Rperm><Rperm>OWNER</Rperm>
<Wperm>ADMIN</Wperm><Wperm>OWNER</Wperm>
</iwt:Att>
I restarted the server afterwards
Anything I forgot?
thanks
Bob

The XML files on disk are not used at run-time. They are only there
as a reference if one would ever want to revert back to the original values.
To change the permissions on the iwtUser-role attribute, use the admin console,
select the appropriate domain, role, or user profile, select the User component
and click the "Show Read/Write Permissions" radio button. You can then enable
write permission.
Keep in mind that if a user can change their role, they can change it to the
admin role and thereby get permission to change anything.
Tom
Super-User wrote:
>
Hi,
based on the iPlanet knowledgebase I tried to set a user profile
via the dynamic profile servlet, however this fails due to
an error:
com.iplanet.portalserver.profile.ProfileException: Permission denied in
setting attributes or privileges
This is what I did:
Profile p = sess.getUserProfile();
p.setAttributeString("iwtUser-role",rolename,Profile.NEW);
I modified /etc/opt/SUNWips/xml/iwtUser.xml so that iwtUser-role
now has
<iwt:Att name="iwtUser-role"
desc="Users Role"
type="string"
idx="u12"
userConfigurable="TRUE">
<Rperm>ADMIN</Rperm><Rperm>OWNER</Rperm>
<Wperm>ADMIN</Wperm><Wperm>OWNER</Wperm>
</iwt:Att>
I restarted the server afterwards
Anything I forgot?
thanks
Bob

Similar Messages

  • Mac OSX file copy to Windows Share folder permissions

    We'd got a few Mac's, one is snow leopard and the other is Lion.  The scenario is:
    Mac:
    Go > Connect to server > smb://servernamehere > Connect > select your share
    The authentication box then pops up, they've been typing in a username and password to connect to Server 2008 (Active Directory here by the way).  I don't think it matters if they type in "DOMAIN\username" and the password or just "username" and the password.
    They try to copy files around but they get this wacky -xx number and their Macs lock up.
    On the Windows Server Side I look at the folder permissions and the users they're using are all golden, full permissions.  I look at a test folder I create and it too looks good.
    The weird thing is this:
    If I look at the folders on Windows it looks normal but if I open the command line on a Mac, do:
    cd /
    cd Volumes
    ls
    cd Folder_I'm_Connected_To
    ls -la | grep testfolder_I_made
    I get these results...
    drwx------ 1 Their_Username_Here  staff  --> Some other stuff here like a folder size, date, time and the folder name
    My question is this I guess.
    Do I have to join these Macs to the Windows domain for the permissions and folder views on the Mac to look right AND to have them funtion properly?  The user of the other Mac says she never types in any authentication stuff, she just clicks a folder shortcut on her Mac ans she's in.
    I would expect the permissions to at least say something like:
    drwxdrwx---
    The Windows server doesn't have the group "staff" which makes it seem the Mac isn't looking at the mounted volume in the same way Windows is.  They also had this problem on AFP and SMB shares directly on a FreeNAS box which is also BSD like a Mac.
    As a result of the Macs behaving similarly on both Windows and BSD (FreeNAS) I think this seems to be some wacky Mac behavior and I just can't figure it out.
    Any help would be appreciated.
    Thanks.

    Hi, same results at the terminal command on a SMB share, observed here with mac computers running with OsX 10.8 with Windows 2008 R2 SMB shares. My issue is that theses computers need to copy files on theses shares with Chronosync or Carbon Copy and this is not working due to an "modify file attributes permissions" error. But if I copy the files using "Finder" it works great.
    You don't need to join your computers to your domain to get it to work. The error that you are talking about is the -5000 error ???

  • External Hard Drive won't appear on PC (want cross platform)

    I have an external USB Hard Drive. I formatted it using the Disk Utility, OS Format and Journaling. Did a small partition in case I needed a system boot drive. Now my sis needed to backup her laptop (Dell laptop), but the drive won't appear in My Computer, it recognizes there is a USB device on the lower task bar, but no drive anywhere.
    Do I have to reformat? what steps do I need to make this USB drive cross-platform friendly?
    Paul

    Hi, Paul.
    You may not want to reformat the drive as FAT-32 since there is a limit on the size of the partition, the maximum file size, and other issues, especially if her Dell's drive is formatted as NTFS (FAT-32 does not support NTFS extended attributes). FAT-32 is unsuitable for backing-up Mac OS X volumes as it cannot preserve the extended attributes (permissions, etc.) employed by Mac OS X.
    It's really best if you each have your own external hard drive for backup, as part of implementing a comprehensive Backup and Recovery solution, such as I use and detail in my "Backup and Recovery" FAQ. You also don't want one person inadvertently writing over another person's backups, which could happen if one is not careful. Furthermore, it is often easiest for recovery.
    How one handles backup in cross-platform environments is tricky and depends on the native formats employed by the different computers involved, and whether backup will be performed over a network or by directly connecting backup drives to the computers one is backing up.
    To enable her Dell to use the Mac-formatted drive, install Mediafour's MacDrive for Windows on the PC. MacDrive for Windows is probably the state-of-the-art application for enabling you to use Mac-formatted disks and hard drives on Windows-based PCs.
    Good luck!
    Dr. Smoke
    Author: Troubleshooting Mac® OS X
    Note: The information provided in the link(s) above is freely available. However, because I own The X Lab™, a commercial Web site to which some of these links point, the Apple Discussions Terms of Use require I include the following disclosure statement with this post:
    I may receive some form of compensation, financial or otherwise, from my recommendation or link.

  • Backup script

    I created a backup script for my data & system and i'd like to share it.
    I have a 320GB hdd (1) as my main hard drive, and a 160GB hdd (2) as a backup drive (i keep this one in a drawer nearby, disconnected from the computer).
    What i wanted was to create a partial copy of 1 on 2, such that 2 would contain the entire system (bootable) + a part of my data.
    1. You need to have the same filesystem on both (i have ext4). Maybe it works with a mix of ext3 and 4, but it's better to have just one. The partitioning scheme on hdd 1 doesn't matter, but for hdd 2 you need a single partition to which you backup.
    2. The scripts:
    backup
    #!/bin/sh
    # rsync backup script
    sudo rsync -av --delete-excluded --exclude-from="excl" / "$1"
    sudo touch "$1"/BACKUP
    This one is very simple. You rsync in archive mode (which ensures that symbolic links, devices, attributes,  permissions,  ownerships,  etc.  are preserved) and exclude the files that match the patterns from excl.
    The / is the source from where you backup (in our case the whole root) and "$1" is the destination to where you backup (this is passed as an argument to the script).
    excl
    # Include
    + /dev/console
    + /dev/initctl
    + /dev/null
    + /dev/zero
    + /media/win
    + /var/run/mpd
    + /home/wooptoo/music/Amestecate
    + /home/wooptoo/music/script
    + /home/wooptoo/music/list.txt
    + /home/wooptoo/music/.hg*
    # Exclude
    - /home/wooptoo/dl/*
    - /home/wooptoo/games/kits/*
    - /home/wooptoo/mov/*
    - /home/wooptoo/music/*
    - /dev/*
    - /media/*
    - /media/win/*
    - /mnt/*
    - /proc/*
    - /sys/*
    - /tmp/*
    - /var/run/*
    - /var/run/mpd/*
    This is a bit more tricky. It's an exclude (and include) file in rsync format.
    Exclude: I excluded my games, movies and music from the backup, and also the system directories /dev, /media, /mnt, /proc, /sys, /tmp, /var/run. These are excluded because their content is created at runtime by the system. Note that the direcotries themselves are preserved (you need them!) but they are empty.
    Include: even though i excluded /dev, i need to include 4 file from it (which are not dinamically created by udev), these are console, initctl, null, zero.
    I also included the directories /media/win and /var/run/mpd. But these are empty, because their content was excluded (in the exclude section).
    3. So we got these two files: backup and excl.
    Mount the backup hdd, let's say at /media/backup/ and run the script:
    ./backup /media/backup/
    rsync will backup the whole root to that destination. I excluded game kits, music and movies from my backup because they are just too large to fit on hdd 2, and it would also take a lot of time to backup and keep in sync afterwards.
    4. After the sync is finished you need to install a boot loader on hdd2, so you can have a working copy of your system.
    Open the grub console and type in:
    root (hd1,0)
    setup (hd1)
    The root command tells grub where your system is installed (in this case hdd 2, first partition).
    Setup tells grub where to install the boot loader. In my example it is installed in the MBR of hdd 2.
    The problem here is that the boot loader installs correctly, but its menu entries are for the partitions of the main system, not the backup system. So if you'll try to boot the backup system, it won't work.
    You can fix this by creating a custom menu.lst for the backup hdd. But i prefer not to do this, in order to have an accurate copy of my data. I just prefer to edit the entries from the boot menu on the fly if i need to boot the backup directly. But you can automatically add a custom menu.lst to the backup hdd from the backup script:
    #!/bin/sh
    # rsync backup script
    sudo rsync -av --delete-excluded --exclude-from="excl" / "$1"
    sudo cp ~/custom.menu.lst "$1"/boot/grub/menu.lst
    sudo touch "$1"/BACKUP
    5. Reboot and try out your new system.
    I think this approach (system + data backup) is better than just data backup because if something goes wrong with the main hdd, you can always swap in the backup one and continue working. Besides this, you now have another working system, from which you can recover the main one without the need of live CDs.
    In my setup both hdds are SATA with AHCI, so they are hot-pluggable. You can plugin the backup drive, run the backup script, and disconnect it. This is very advantageous because you don't have to reboot.
    But you can use an USB stick/hdd as backup drive if you only have IDE.
    I would like to know what do you think of my backup strategy. Is it good or am i doing it wrong? Are there better methods? What backup strategy do you use? etc.
    Last edited by wooptoo (2009-10-24 01:40:46)

    I use the following to rotate four backups and backup my root and home separately and hard-link common files between all the backups. I run this weekly to have backups of the last four weeks while using barely more space then one full backup would. It is not super customisable as it is my personal script and I've been wanting to add in a check to see whether the backup location is actually mounted, but I've not gotten to it just yet
    #!/bin/bash
    # Script to rotate three backups of / and /home and make a new incremental
    # backup. No arguments required. Make sure the correct disk is mounted at
    # $PAR, though!
    # Original command ran to create the first backup of /home :
    # /usr/bin/sudo /usr/bin/rsync --progress --stats -avz \
    # --exclude-from=/home/ramses/home_backup_excludes --delete-exludes \
    # /home/ /media/seadisc/home_backup.0
    # Variables and paths
    PAR="/media/seadisc/backup"
    HOME_EXCLUDES="/usr/local/bin/backup_config/home_backup_excludes"
    ROOT_EXCLUDES="/usr/local/bin/backup_config/root_backup_excludes"
    SUDO="/usr/bin/sudo"
    MV="/bin/mv"
    RM="/bin/rm"
    RSYNC="/usr/bin/rsync"
    DATE="/bin/date"
    TEE="/usr/bin/tee"
    # Home backups
    echo "Moving previous /home backups ..."
    $SUDO $RM -rf $PAR/home_backup.3
    $SUDO $MV $PAR/home_backup.2 $PAR/home_backup.3
    $SUDO $MV $PAR/home_backup2_date $PAR/home_backup3_date
    $SUDO $MV $PAR/home_backup.1 $PAR/home_backup.2
    $SUDO $MV $PAR/home_backup1_date $PAR/home_backup2_date
    $SUDO $MV $PAR/home_backup.0 $PAR/home_backup.1
    $SUDO $MV $PAR/home_backup0_date $PAR/home_backup1_date
    echo "Doing incremental backup of /home ..."
    $SUDO $RSYNC --progress --stats -av \
    --exclude-from=${HOME_EXCLUDES} \
    --delete --delete-excluded \
    --link-dest=$PAR/home_backup.1 \
    /home/ $PAR/home_backup.0
    $SUDO $DATE | $TEE $PAR/home_backup0_date > /dev/null
    # Root backups
    echo "Moving previous / backups ..."
    $SUDO $RM -rf $PAR/root_backup.3
    $SUDO $MV $PAR/root_backup.2 $PAR/root_backup.3
    $SUDO $MV $PAR/root_backup2_date $PAR/root_backup3_date
    $SUDO $MV $PAR/root_backup.1 $PAR/root_backup.2
    $SUDO $MV $PAR/root_backup1_date $PAR/root_backup2_date
    $SUDO $MV $PAR/root_backup.0 $PAR/root_backup.1
    $SUDO $MV $PAR/root_backup0_date $PAR/root_backup1_date
    echo "Doing incremental backup of / ..."
    $SUDO $RSYNC --progress --stats -av \
    --exclude-from=${ROOT_EXCLUDES} \
    --delete --delete-excluded \
    --link-dest=$PAR/root_backup.1 \
    / $PAR/root_backup.0
    $SUDO $DATE | $TEE $PAR/root_backup0_date > /dev/null

  • Chart legend visible item

    How to update the legend list??
    is I reduce the number of traces, the legends reduces, but if I add traces, is does not show up (the nes traces)

    You can use SetTraceAttribute with ATTR_TRACE_LG_VISIBLE attribute.Other trace attributes permit you to customize the legend as you will.
    Proud to use LW/CVI from 3.1 on.
    My contributions to the Developer Zone Community
    If I have helped you, why not giving me a kudos?

  • MacBook Pro starting to run slower

    Hi there,
    I purchased a MacBook Pro beginning of summer last year (2013).
    When I first got it I could easily run and bounce between PS, InDesign and Illustrator at the same time. Now it takes 5-10 minutes to just open one of those and trying to run more than one at a time results in huge delays when switching between programs. (which makes doing work horribly frustrating)
    What can I do to check to make sure everything is okay? Or help fix this issue?
    Thanks
    13" MacBook Pro (Mid 2012)
    2.5 GHz Intel Core i5
    4GB 1600 MHz DDR3
    Intel HD Graphics 4000 1024 MB
    OSX 10.9.5
    500GB HDD (109GB free)

    OK, first things first: if you come from Windows, you're probably used to leaving a lot of stuff on your Desktop for accessibility's sake, but in OS X, that's a recipe for longer and longer boots.
    In OS X, the Desktop is a folder before it's a backdrop with icons on it. Every time you boot or reboot your Mac, this folder has to be indexed by the OS, to make sure everything's there, all folders are accounted for, at the right place, with the right permissions (more on that later), the right content, etc... Since the advent of Spotlight (OS X's indexing tool), indexing is more or less constant on a Mac, as shown in your screenshot by the amount of memory used by the "mds" processes (parent and child).
    Bottom line is, the cleaner your Desktop, the better. I were you, I'd move all this stuff to, say, your Documents folder, which is accessible from the Dock anyway. You should notice a real change in boot speed just by doing that.
    This said, your RAM usage is really high, and if your Kernel_task process occasionally gets high, on machines as recent as yours, it usually indicates that your CPU is throttling up (to accomodate the need of your running applications in terms of CPU cycles) and down (to prevent overheating).
    This constant rise and fall in the CPU activity is also usually linked to bad ventilation inside your Mac; check if your fans are working, and if the air does come out of the vents. If not, try and do some light cleaning, it can't hurt, provided you do it gently...
    You can try something that won't exactly make your Mac faster, but will let you see if there isn't something wrong with your virtual memory.
    Open Terminal (it's in the Applications / Utilities folder), and copy-paste the following line inside its window:
    sudo launchctl unload -w /System/Library/LaunchDaemons/com.apple.dynamic_pager.plist
    Enter your admin password (it won't show at all, so don't be surprised if the caret doesn't move), press Enter, and reboot your Mac.
    After restart, you'll notice that your applications usually start and run faster, which is normal, because you just have told your Mac to just make do with the physical memory available, and not page on your hard drive at all; RAM is faster than a hard drive (even an SSD), so everything seems faster.
    The more apps you'll run, though, the slower your Mac will get.
    Use your Mac for an hour or two like this, then open Terminal again, and type:
    sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.dynamic_pager.plist
    Enter your admin password again, press Enter, and reboot your Mac.
    Tell us how it goes from there.
    Now, about permissions: in OS X, every file and folder is attributed permissions, depending on who owns it (root, admin, user). Leaving the system files alone is always best, unless you really know what you're doing. Some files are owned by the administrator (you, I suppose), and can be deleted, moved, edited, etc... by you, but not by another user.
    Some files can't be deleted or modified by regular users, simply because they don't own them. By own, we usually mean those files have been created by one user, and they belong to that user until he/it (in the case of the system) allows another user to run/edit/rewrite them.
    If permissions on a file or folder have been corrupted for one reason or another, when the system checks that file or folder, it finds a discrepancy between what's inside the index of files and the real characteristics of the file or folder. A bit like opening a cardboard box after moving into a new home, expecting it to contain kitchen utensils, and finding your wife's underwear in it instead. Pardon the metaphor, but you'd be surprised if that happened to you; the OS is surprised too when it discovers that a file that's supposed to be rewritable or movable actually can't be, because of a wrong set of permissions.
    One good way to correct those errors is to run Disk Utility (in Applications / Utilities, if it's not already in your Dock), select your MacintoshHD volume, and click on the "Repair permissions" button.
    Depending on how many files and folders you have on your hard drive, this can take a while, but it's usually worth it.

  • JRE 7 update 45

    Hi,
    After updating jre 7update 45 my applet is not working.The applet is signed with the trusted certificate.
    Also accrding to release notes I have added the attributes
    Permissions : all-permissions
    codebase : *
    Application-Name : Display
    Application-Library-Allowable-Codebase : *
    Caller-Allowable-Codebase : *
    After adding the attribute I again siged the jar file using the same trusted certificate we have been using.
    Still it gives some blue shield warning message.
    Is there a bug in jre 7update 45.Or I am missing something because of which it is not working.
    Is there any solution for suppressing these security warnings.

    This is resolved and jar file is working fine without any warning message.
    What I did is.I added the below attrributes to my jar file
    Codebase : *
    Permissions: all-permissions
    Application-Allowable-Library-Codebase : *
    Caller-Allowable-Codebase : *
    I added these attributes by extracting the jar file contents through winzip.
    After this I signed the jar file again with new trusted certificate anded used the following cermgr Command
    to include the certificate in ROOT and trusted publisher
    certmgr.exe -add  <path of the certificate> -s -r localMachine ROOT
    certmgr.exe -add <path of the cetificate> -s -r localMachine trustedpublisher
    This made my jar file working fine with jre 7 update 45.

  • ACS - Shell Command Authorization Sets

    Hi,
    I have had a problem where a set of users in two groups in ACS are struggling entering commands.  The commands are set in the Shell Command Authorization Sets and this hasnt changed.  Other commands are working.  As this is spanning two groups in ACS I am thinking it's not something with the groups but the command sets itself.
    Just to check, the commands are 'clear port-security' and clear mac address-table' - I have entered in Command 'clear' and the following attributes;
    permit port-security
    permit mac address-table'
    I've also ticked 'Permit unmatched args'
    At the same time as this is occuring I have been recieving the following messages from the ACS server via email;
    Test Timed out for service: CSAdmin
    Test Timed out for service: CSAuth
    Test Timed out for service: CSDbSync
    Test Timed out for service: CSLog
    I have looked at other posts and have restarted CSMon.  This then stops the messages for some time, then a day or so later I get the messages again.
    Could this be tied in with the command issue?  Is there something else I should look at other than restarting the server and the CSMon service again?  All other CS' services are running.
    Thanks!!
    Steve

    Thanks for your reply!
    there are no errors, the switch ios is putting the asterics as it does when you enter a command that is not recognised, i.e. for clear port-security the port-security onwards is not recognised.  On this note, the user is entered into priviledge mode and not in configure terminal mode, just base priviledge mode.  The group in ACS is set to max priviledge level 7 and have also set this on the user account in addition.
    I am using ACS v 4.1.
    While I receive the service messages and also when they go away - I always have the authorisation problem.
    Thanks
    Steve

  • Minimum permisions required to get Design Console access

    Hi,
    What are the minimum permissions required by User (expect for checking the Design Console checkbox on user profile) to access Design Console in OIM 11g R1 (11.1.1.5.0)?
    Ofcourse, we donot want to add the user in System Admin group.
    We just want that the user is able to modify the lookups thru' DC.
    Thanks
    Sid
    Edited by: Sidharath on Dec 13, 2012 12:46 PM

    11g: End-User Administrator (Select Design Console Access Attribute)
    Permissions you can give :
    Go to Role > Data Object permission > Select desired permissions from there
    Metalink: ID 1495238.1]
    R2: OIM 11gR2 Design Console Access

  • ATTRIB +R

    This command does not protect files from deletion by Lightroom - anybody know if its possible?

    johnrellis wrote:
    Hmm, it also doesn't protect deletion or moving to the Recycle Bin by Windows Explorer.
    Silly me - I just assumed it did, since I've been prompted before whether I really want to delete read-only files... - I guess its an app-specific thing.
    johnrellis wrote:
     I've never bothered to really understand Windows permissions (which I relearn to regret every few years).
    You and me both. It seems like the kind of thing that once you understand it, its hard to remember what its like to not, or something. The theory is relatively easy to understand, but its the devil in the details about just when and who decides and what user is in play when a particular thing is happening... I have backups that I can't open because I dont have permission. Say what??? Or documents and settings folders on a drive pulled from a different system that I cant open... Seems most educational material stops shy of the stuff you really need to know to deal with it in the real world. (or maybe I'm just being dense and not being fair...)
    johnrellis wrote:
     But some experimentation suggests you'll have to to remove or deny the Write Attributes and Write Extended Attributes permissions using "icacls" to prevent Windows Explorer and LR from deleting or moving a file to the Recycle Bin. 
    I'll look into it and report back - thanks a bunch John
    Rob

  • Entity Object - Permission

    I have a project "A" with EOs (Entire domain model) and enabled Permission for few Entities and Entity Attributes. I use this project as a JAR imported in another project "B". The adf security is enabled in the project "B". In the resource grants I cannot see the entity attribute permissions. How can I define grants for entity permission resources?

    Thanks Vinod.
    So is my only option to manually copy permissions from entity xml to Jazn-data.xml? If yes this will definitely add extra documenting efforts.
    For task flows that are coming from JARs there is an option to select "Show Task flows imported from ADF Libraries". Likewise are there any future plans to automatically bring entity permissions from JARs to Jazn-data.xml ?

  • Adding picture to mp3 files in iTunes Bugs found!

    There is a bug when you adding picture to lots of music in an album. Which you when you finish adding the picture, some of them changed the picture...but there are some not changed. Those not changed picture mp3 files are all bugged, the bug is which your music will be repeating at the first few sec. Its kinda annoying! Need to delete the whole mp3 file away...
    Please help to contact Apple about this bugs and fix it quickly! Thank you.

    I was having the same issue with a few (not all) .m4k files on a NAS -- in my case the problem was something with file attributes/permissions (I'm using Windows 7).
    ITunes could not change the actual file (rename/move to keep organized, add artwork, etc), though Windows would update the file date when I did attempt these things. Permissions seemed fine for the files, but the fix was to simply change an attribute and hit 'Apply' from the file properties window (right click file in File Explorer...Properties).
    Specifically, most of my files had the Archive attribute checked, which I just unchecked and hit Apply. The issue wasn't the setting since all of my files have this attribute set and most can be edited by Itunes, but by changing the attribute, it fixed whatever weird issue there was with iTunes altering the file.

  • How to copy very large number of files from one drive to another???

    I'm a fairly experienced Mac user for serveral years but this problem really has me stumped.
    I'm trying to copy or move 152,000 files from one external drive to another drive. I can highlight (Cmd - A) all the files on the first drive and drag them to the second drive but Finder always shows 32,768 files being copied no matter what I try.
    Any and all suggestions on how to move/copy a large number of files from one external drive to another are greatefully appreciated.
    Thank you in advance,
    Mack

    I would use the command line tool rsync.
    For instance with: rsync -av source-dir destination-dir
    -a The files are transferred in "archive" mode, which ensures that symbolic links, devices, attributes, permissions, ownerships, etc. are preserved in the transfer.
    -v Verbose, so you see the progress.
    Rsync is fast and really, really powerful and many times used in shell scripts and the like to automatically backup and/or sync stuff. Google a bit for more info.

  • CSU Rev 2.3.6(2) - deny key commands in IOS config mode

    I want to deny certain commands to certain users in a group. I have defined the following on the ACS.
    service = shell{
    default cmd=permit
    default attribute=permit
    cmd=configure{
    deny="no ip routing"
    deny="no router isis"
    permit=""
    This logic does not work.
    1. Does CSU support command authorization within config mode?
    2. Any tips?
    Thanx,
    Kenny

    You are not alone with issues related to the e1000e (but all they concluded was that reloading the module makes it work again):
    https://bbs.archlinux.org/viewtopic.php?id=145564
    It seems like this is more your issue:
    http://permalink.gmane.org/gmane.linux. … devel/8932
    But if none of those boot flags work for you, then there's not much you can do, and you'll have to write a script to reload the module each time after initial boot finishes I guess until the module gets fixed.
    Also, power management of the PCIe interface causes the e1000e to shut off after a while as well (lots of people on CentOS noticing this):
    http://serverfault.com/questions/226319 … ie-aspm-do
    So you can use that boot parameter to stop that from happening, if that becomes an issue for you as well.

  • OER 11.1.1.7 - Asset Navigator doesn't open with an Error - Missing Required permissions attribute in main jar

    Hi,
    I have installed OER-11g version 11.1.1.7 and am successfuly able to open Asset Editor , ImpExp utility and also could harvest SOA and OSB components.
    Issue 1:
    However while trying to open the Navigator of the harvested components in OER console, a new window opens with two sections ( top and bottom). The top one which is a diagram view doesn't open with an error - Missing required permissions attribute in main jar: http://localhost:7101/oer-web/applets/components.aler-thinkmapclient-11.1.1.7.0.jar.
    Please find the screenshot below.
    Issue #2 : While trying to browse for the Assets from OER console. The below error is seen ( missing permissions for components.jexplorer-11.1.1.7.0.jar)
    Could someone direct me on how to solve this issue. Appreciate your help !
    Thanks and regards,
    Sridhar.

    It works for me after I did a small tweak by as mine is a demo install.
    Idea - is to make an security exception for the OER url in Java control console
    Steps to do that :
    1.Go to the control panel and uninstall the 64 bit version of Java
    Open Programs and Features and select the 64 bit version of Java and select Uninstall.
    2.Open up the Java Control Panel
    Found as an option in the standard windows control panel
    3.Check the version by clicking on the About Tab
    If this is not what you expected you can go to java.com and download the latest version.
    4.Click on the Security Tab in the Java Control Panel
    5.Click on the Edit Site List button in the lower RH corner of the control panel
    6.Add your URL to be allowed
    Enter the full path that you use to access this such as https://myequallogics.com or the IP address if that is how you access it (as in http://192.168.0.100 - Https is recommended by Oracle.) Once complete hit OK. You should now see the exception on the security page.
    7.Close out of the control panel.
    8.You can now acess your site through the browser window.
    Thanks to Java error: Missing required Permissions manifest attribute in main jar - Spiceworks for letting me know this.
    regards,
    Sridhar

Maybe you are looking for

  • ISE External radius server

    Hello, Since the JRS roam servers have to be put in a Radius Server sequence on ISE, which node IP address is meant to be registered with JANET, PAN or each PSN IP address. I would have thought it to be the PAN since all the external radius servers a

  • Why has iphoto stopped importing from iphone

    Up til now iPhoto has always opened automatically when I connect my iPhone to my computer and started importing photos. In the last week it has stopped.  I have looked at iPhoto preferences and iTunes preferences but can't find how to change settings

  • Need to use JMS in Web service for PUB/SUB pattern

    Hi All, I have JMS configured in my Web logic server 10.3.4. I have stand alone program for JMS in PUB/SUB pattern. I have Web service application with Apache CXF framework. Now, the problem I need to integrate JMS in my web service application for n

  • Dr. Katz on iTunes Store?

    Heard the complete Dr. Katz series is coming out on DVD. Anyone know (or know how to find out) if it will be available on iTunes Store? Thanks.

  • Using MAPI with JavaMail

    I want to use MAPI protocol to send mail. Is it possible with java mail API. I would appreciate if some body can give me a solution. Thanks Saikumar