BOE XI 3.1 Security Limitations and Assumptions
Hi,
Can any one please let me know the BOE XI 3.1 Security setup Limitations, Assumptions and Risks in Windows environment(Windows 2008 server)
Also please share the mitigation and solutions of these risks.
Regards,
Jai
Hi all,
Please check out the "Windows pattern security" section and security related sections of the windows pattern book below -
https://websmp201.sap-ag.de/~sapidb/011000358700000532872009E/xi31_bip_pattern_win_en.pdf
The pattern book should address most of the XI3.1 implementation related questions.
Below planning guide also provides good insight for planning your deployment
https://websmp105.sap-ag.de/~sapidb/011000358700001647142008E/xi3-1_bip_deploy_plan_en.pdf
regards,
Shiva
Similar Messages
-
Hello,
I'm trying to plan a ConfigMgr 2012 site that will be used by multiple groups who do not interact with one another. I'd like to divide this site into managerial groups using security scopes and RBAC, ideally so members of one group cannot view or manage
collections, applications, and updates belonging to the other group. In a lab I've created groups A and B with access to security scopes A and B, with access to collections A and B. So far this has worked out nicely in almost every area except for reporting.
As a full administrator I can view and run reports just fine; however, users A and B (who are not full administrators, but are members of the "ConfigMgr Report Users" role in my SSRS instance) cannot view any reports from the console. Additionally when I
click Create Report under the context of user A or B, I get the error "Could not find an installed Reporting Services point. Verify the site role is installed and accessible." To me it sounds like there is a permissions issue somewhere in SSRS or ConfigMgr
but I haven't figured out what yet.
Aside from that, I would like so members of group A cannot report on objects that belong to security scope B. To my knowledge this won't be inherently possible because the SSRS security model is different from the ConfigMgr RBAC model. Has anybody been able
to come up with any workarounds to scope down the reporting capabilities of limited ConfigMgr users? Any advice or direction in this realm would be greatly appreciated.
Thanks,
NickYes, I know this is an old post, but I’m trying to clean them up. Did you solve this problem, if so what was the solution?
This has been solve in CM12 R2, you can see it in the blog/video.
http://www.enhansoft.com/blog/role-based-administration-rba-reporting-feature-in-sccm-2012-r2
Garth Jones | My blogs: Enhansoft and
Old Blog site | Twitter:
@GarthMJ -
Security Profile with Assignment-level Security limitations
Hi, We are on an R12 installation, and have a security profile based on Organization Hierarchy (With Assignment-Level Security - i.e. 'Restrict on Individual Assignments' checkbox is ticked); this is based on a specific organisation as the 'Top Org' rather than the User's own Assignment.
The profile option "HR: Access Non-Current Employee Data" is set to 'Yes', but the security profile still restricts access to Future-Dated Assignments and Ended Assignments. Is this expected behaviour, and is the only solution to develop a Custom security profile, and is this even feasible (to replicate organisation hierarchy security using SQL in the custom security tab), or would we have to use a different criteria, such as Payroll?
Regards, ChrisFurther investigation reveals this is a limitation of the product - within security, the selection criteria which determines which individuals (or assignments) is handled seperately to Assignment-level security (i.e. whether individual assignments are restricted), it is not possible to get around this issue even using custom security, as that does not give one the power to determine how individual assignments are handled. Thus if assignment-level security is implemented, the user cannot see Ended or Future-Dated assignments, even if the profile option "HR: Access Non-Current Employee Data" is set to 'Yes'.
The only workaround we have found for this is to:
a) remove assignment-level security, and
b) ensure that where an employee has multiple assignments that cross security groups, this individual is set up twice, as two separate employees. -
Does anyone have a quick fix for this? I downloaded the latest security update and now I cannot access web page for online banking.
It is not asking what part of your country you are in, but what country/region you are in.
Region encoding is the mechanism that enables motion picture studios to control the worldwide release of their movies. It is required by the DVD Forum (http://www.dvdforum.org/forum.shtml) in all commercial hardware DVD players. Every DVD-Video disc contains one byte of data representing a region code, which limits where the disc can be played.
http://support.apple.com/kb/HT2397
Once you have set the region in DVD Player five times it cannot be changed.
Instead, use VLC to view videos from different regions:
http://www.videolan.org/vlc/download-macosx.html -
/etc/security/limits.conf
Hello
OS : Redhat enterprise Linux Ver 5
When installed as per install guide, I see that /etc/security/limits.conf updated with entry as :
oracle hard nofile 65536
1) Why is the default limit of 1024 not sufficient ?
2) Does oracle opens more than 1024 files at a time ?
3) How to find the exact list of files open by the oracle user at any given point in time ?
Thanks in advance for your help.Hi,
that's a good question. I don't neither have an answer but I assume that especially in the past (8i) when datafile size was limited that it was causing problems on huge databases. Making it enough high could also reduce their support effort. This is just may stomach feeling which I am telling you but the truth will tell you someone else. Maybe someone else here in the forum knows more than me.
I am not 100% sure but:
$ lsof|grep oracle|wc -l
1762 shows me over 1024 open files. This with a running ASM instance, a DB and a listener.
Cheers,
David
OCP 9i
http://www.oratoolkit.ch/otn.php -
An alert message pops up upon opening saying could not initiate application security component, and it says to check to see if profile has no read/write restrictions. Than when it opens all of my saved passwords are gone, I use a master password and its disabled. When I try to enter in a new on e it says can't change password. I can't even open yahoo e-mail says that my ssl security is down but when I check it its clicked. I'm just very confused as to whats going on.
== This happened ==
Every time Firefox opened
== 5/14/2010 ==
== User Agent ==
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.5 (KHTML, like Gecko) Chrome/4.1.249.1064 Safari/532.5See [[Could not initialize the browser security component]]
Rename (or delete) secmod.db (secmod.db.old) in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Profile Folder] in case there is a problem with the file. -
I have no "Rescue email" contact in order to reset my security questions!! I've been trying now for 4 days to contact Apple/Itunes but I only get sent answers from a support team that say they cannot help me with my problem!!
The thing is that I can't ever remember answering any security questions and without a rescue email, I'm unable to reset them or even set them for the first time!!
I can't believe that no-one from Apple/Itunes can help me with this simple problem but unfortunately that is the case - Incredible, isn't it!!!
Would anyone know how I could solve this problem online??? Because each time I sign into Itunes, the same security questions reappear and reappear and reappear. In fact I've got to the point where I feel like uninstalling Itunes and downloading an alternative.
Many thanksYou need to ask Apple to reset your security questions; this can be done by clicking here and picking a method, or if your country isn't listed, filling out and submitting this form.
They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
(111154) -
Please can someone help me
From a Kappy post
The Three Best Alternatives for Security Questions and Rescue Mail
Try # 2
1. Use Apple's Express Lane.
Go to https://expresslane.apple.com ; click 'See all products and services' at the
bottom of the page. In the next page click 'More Products and Services, then
'Apple ID'. In the next page select 'Other Apple ID Topics' then 'Forgotten Apple
ID security questions' and click 'Continue'. Please be patient waiting for the return
phone call. It will come in time depending on how heavily the servers are being hit.
2. Call Apple Support in your country: Customer Service: Contact Apple support.
3. Rescue email address and how to reset Apple ID security questions.
A substitute for using the security questions is to use 2-step verification:
Two-step verification FAQ Get answers to frequently asked questions about two-step verification for Apple ID. -
i am trying to use my account to purchase but i forget my security questions and also i gave the wrong email address. What can i do?
Apple ID security issues -
Call Apple Care and ask for the Account Security Team. They can assist you with your issue. -
I got a new iPhone and i am trying to buy songs but when I go to buy a song on iTunes it says I have to answer my security questions and I don't remember the answers. I pressed where it says for them to email you your answers but I haven't gotten an email. Is there another way to change or get the answers for the security questions?
If the email hasn't arrived after a few hours and isn't in a spam filter, you need to ask Apple to reset your security questions; this can be done by phoning AppleCare and asking for the Account Security team, or clicking here and picking a method, or if your country isn't listed in either article, filling out and submitting this form.
They wouldn't be security questions if they could be bypassed without Apple verifying your identity.
(106007) -
I forgot all of the answers to my security questions and when I set up my apple id I did not add a rescue email, I recently got a new iphone and I cannot purchase anything on it because it asks me to answer my security questions which i can't reset because I do not have a rescue email. what do I do?
this does not help. I have forgotten ALL of the answers to my security questions. I can NOT reset the answers to my security questions without answering two of the three security questions. The other way to reset the answers to these questions is for apple to send me an email on my rescue email addres which I DO NOT HAVE.
-
When I try to setup my new iPad air, I go through all the steps for the iCloud sign-in and choosing security questions and what not. But after I hit the agree to the terms and conditions... It says Apple ID could not be created because of a server error. Have no clue what to do... I've restarted the iPad and get the same message. But my internet works just fine.
1. Turn router off for 30 seconds and on again
2. Settings>General>Reset>Reset Network Settings -
I am in iphone **** or better icloud ****. When I try to go ointo settings on the phone a signin prompt pops up continuously with one apple id. I think i've made it that i have a separate icloud and apple id. I am trying to delete the icloud id. I made all the passwords the same so that there should be no problem but the phone won't still take the password. So when i went in again, looking to see if I could delete the icloud, i screwed up answering my security questions and am now unable to enter that icloud id. How long til I can again? Secondly, since the phone won't accept any password, I have tried to delete it. When I do that, it come up with a request for that same password to shut of the locator service. What the heck? I'm frustrated. I just can't get the hang of apple software and itunes seems to be just as bad for me. Any suggestions appreciated ( aside from stomping on it, I've considered it). Tried to take the battery out but not for me, mere mortal, thought might reset. Got sim card out. Whooopeeee.
It sounds like you have the Find my iphone Activation lock for sure. Go to www.icloud.com/find and see if you put in that Apple ID that is coming up and yoru password to see if you are able to sign into the account that way to turn it off. If you are unable to, you will have to contact AppleCare by phone (chat cannot handle account lock outs or forgotten password due to not being able to verify your identity) and see if they can reset it. And are you sure the Apple ID that is coming up yours?
-
I can not purchase from the iTunes store because of the security question I am I do not know your security question and alternative mail has been hacked
You need to contact Apple. Click here, phone them, and ask for the Account Security team.
(87808) -
Every time I try to purchase a song from itunes, it says I have to put in security questions and answer them, which it's never done before. Then after I do the questions, it says that an error occurred and my changes couldn't be saved. It has been doing this for weeks, and I can't purchase anything! HELP!
Hi mterry1723, one solution that might be worth trying is this:
- Close iTunes, if it's open
- Open Safari and got to 'Preferences'
- Select 'Security' on the top
- Untick all the security options in the menu
- Click the 'Show Cookies' button and look for all the 'apple' entries in the left-hand column.
- Highlight them (select them collectively) and press 'Remove'
- Now open iTunes and buy the song as usual.
- You may be asked to do the same security process as before, so do as asked.
- Hopefully, the security check will now have accepted your answers and start downloading the song as normal.
Remember to re-tick all the required security options you had just un-ticked in Safari preferences. You don't need to bother about opening the cookies again.
I hope this has worked for you and my profoundest apologies if it has not. Worth a go, though!
I did see this thread: https://discussions.apple.com/message/18259935#18259935 which may be of more help, mainly the last entry by 'c2boyd'
Message was edited by: Bongomal
Maybe you are looking for
-
Re : item category in BOm
Hi While creating BOM how to set Item category of the higher-level item like TAN TAQ. Thanks mani
-
Photoshop 6.0, bringing sketches in and adding color
I have Photoshop 6.0 (and Illustrator 10). I am also new to the software. Am I able to import a sketch into Photoshop, and then work with it? I'd like to draw a sketch on paper or a board, import it in, and then "clean it up". Then be able to color i
-
On my iPad Mini screen, since I have bought it, there has been one small black dot in the middle of the screen (I'm presuming a dead pixel because its absolutely always there). And I'm not too bothered about it but if there was something I could do w
-
What is the procedure to reinstall premiere 2014_2
I need to reinstall...what is the procedure?
-
My desktop no longer fits my screen.
My son touched the "m" key on the keyboard while I was operating Safari. Now my desktop, windows and such are too large for the screen size. It's like he zoomed in. Only I can not figure out how to zoom out. I tried restarting but it loaded again in