Gksudo equivilent

We have an oracle DBA that needs a GUI to install any Oracle products. On other Linux flavors, they can run "gksudo" to become the oracle user, and install the software. We need a way to accomplish this on Oracle Linux. It is against our security policy to log in with a generic account (such as "oracle"), so we need this alternative.
When I try just "sudo", I cannot run any GUI commands, because it cannot access the display:
X11 connection rejected because of wrong authentication.
Could not parse arguments: Cannot open display:
We really need a solution to the missing gksudo.

I think there are assumptions being made that are incorrect. First and foremost, this is an Oracle Linux question, and not a database question. Sorry but if you compare your last response with my previous response than my suggestion and assessment based on your input is not far from your real situation. ;-)
Being a system administrator can be difficult, in particular if you are in the shooting line between a system audit adviser, company policy and Oracle database team. Please don't get me wrong, but I think such issues or often due to advisory or decision making that applies to MS Windows environments or lack of understanding of DBA system requirements under Unix.
I think your last statement of how your DBA previously worked and had access to the Oracle account and filesystem requires some more understanding. Simply put, the "oracle" user account provides OS authentication to the Oracle database by connecting "/ as sysdba". Such logins will always connect to the database SYS schema. In fact, username and password are not used in such cases and one can even login using "joe/doe as sysdba" and it will work the same way. This type of access is required for many database maintenance tasks. If you need more access control, for instance to split DBA and OS installation teams, Oracle provides the OINSTALL and OSOPER groups, which can be assigned to other OS accounts.
Like previously mentioned, I doubt that using sudo or gksudo will be any good to perform DBA maintenance tasks, in particular when it becomes necessary to modify the shell environment. There are many DBA tasks for which there is no sufficient GUI interface. Although many basic functions can be performed using the oracle web console or Enterprise Manager or GUI tools, the Oracle DBA requires Oracle account login and shell access in particular to perform advanced upgrade, restore and recovery tasks.
By all means of auditing and security needs, a system is only as good as long as it is feasible and supporting what it is used for. I suggest to forget about gksudo or sudo to perform Oracle DBA functions. There is no gksudo for Enterprise Linux, and apparently it is not useful or there is no need for it. I suggest to look into VNC or SSH login with X11 forwarding.
The idea to prevent remote access to known user accounts or even to rename the "admin" account is typical for MS Windows. However, there are better options than using "helper" accounts, and I would certainly not recommend to use any of such account to provide password-less Oracle ssh login. It is better to evaluate and control who really needs DBA or system access and rely on strict password policies.

Similar Messages

@MOVAVG equivilent in Ver 11.1.1.3

Can anyone help me with the conversion of @MOVAVG to Essbase Ver 11.1.1.3 ?
I want to convert: @MOVAVG(Sales,7) to the equivilent in Essabse Ver 11.1.1.3.
Any help would be appreciated ! Thanks

Doesn't 11.1.1.3 have a @MOVAVG function?
http://download.oracle.com/docs/cd/E12825_01/epm.111/esb_techref/movavg.htm
Regards,
Cameron Lackpour

LabVIEW Equivilant to excel functions?

Hi, I'm trying to translate some equations done in Excel into LabVIEW.
Does anyone know what the LabVIEW equivilant is for the Excel command:
ROUND(x,0)
Also, what is the equivilant for
INT(x)
Many thanks, Alec
Solved!
Go to Solution.

Matthew Kelton wrote:
The Rounds in LabVIEW do not have decimal place inputs, so are equivalent to the ROUND, ROUNDUP, and ROUNDDOWN with the second parameter set to 0. ROUND is Round to Nearest. IF you want decimal places, you will have to do your own coding to shift the decimal places and do rounding.
So Round(x,d) will impement as I missed the negate of d on the first shot
Message Edited by Jeff Bohrer on 08-13-2009 11:01 AM
Jeff

What is the equivilant of the Cyan/Red slider?

I'm so used to the color balance tool, but I love that camera raw is so easy to change a large folder of images quickly without an action.
The whitle balance (is like blue/yellow slider), and the tint, (which is like the magenta/ green slider), there is no equivilant of the red/ cyan slider there?
Ditto same question for the white/ black points in the levels adjustment layer -- is there an equivilant of that in camera Raw? So nice to be able to quickly click on a white spot and see it everything becomes nuetral. Don't see that ability in Camera Raw, maybe I missed it. (assuming you did not take a grey card shot for the white balance tool).
Finally I remember, is it lightroom though that there were all these color sliders, very in depth, can't locate that now! thanks.

kevin4545 wrote:
Don't see a little hand in adjustment layers, just see the three little triangle pointers up at bottoms of the dialogue box to pull sliders. TAT so unique in that you are sliding right on a nose or a cheek.
Are you using Photoshop CS5? The PS Adjustment layers have the PS version of TAT which allows on the image adjustments.

Equivilent of Visual Basic Chr() function?

What is an equivilent function in Java to the Chr() function of Visual Basic?
Cheers

How can you assume that we know what that function does? From some experience in basic 7.0 on my old C128D i remember that chr returns the ascii value of a character or the character from an ascii value - in Java "char c = (char) i;" or "int i = c;".

CS4 is missing the Pagemaker tool bar, is there an equivilant?

I did read in the description that the Pagemaker Tool bar (was renamed to something else for CS3) was removed totally from CS4. Is there any equivilant tool bar in CS4 that gives a lot of the same options like open and save buttons? I also used the increase and decrease all fonts button and the zoom in and out buttons all the time. Now it is forcing the user to go into the dropdowns to do a lot of the same stuff now which are extra steps. If there is nothing in CS4 like this anymore, are there any plugins to create something similar out there?

I don't know the answer to your toolbar question -- but all of the functions you mention have simple keyboard shortcuts, which are (in my experience) much quicker and easier to use than toolbar buttons (or menus), and keep me from excess mousing and repetitive motion injuries. And the lack of a toolbar gives me more screen real estate for doing actual work. If you do, in fact, use these commands "all the time," it's probably worth your time to at least try them. On the Mac, command-shift-angle-brackets increases or decreases type size of selected text by an amount you set in preferences; open and save are command-O and command-S; zooming is done with command-hyphen and command-equals (think minus and plus), and command-zero fits the page to the window.
The standard toolbar does at least have a place you can click to resize the currently selected text -- the little arrows next to the current font size.

( SOLVED )gnome-terminal, su, sudo, gksu, gksudo does not work

Hello,
In my fresh installed gnome3 graphical environment, in gnome-terminal, I can not gain root access.
I've tried diverse su commands.
1. su command, ends with:
su -
Password:
su: Authentication failure
2. sudo command, ends with:
sudo -l
[sudo] password for root:
Sorry, try again.
[sudo] password for root:
Sorry, try again.
[sudo] password for root:
sudo: 2 incorrect password attempts
Of course - each time, I typed correct password.
In my sudoers file, group wheel ( into which belongs user I logged in ) has permissions to execute any command.
3. gksudo with debug:
gksudo -ld gnome-terminal
No ask_pass set, using default!
xauth: /tmp/libgksu-stbGos/.Xauthority
STARTUP_ID: gksudo/gnome-terminal/879-0-Bex_TIME0
cmd[0]: /usr/bin/sudo
cmd[1]: -H
cmd[2]: -S
cmd[3]: -p
cmd[4]: GNOME_SUDO_PASS
cmd[5]: -u
cmd[6]: root
cmd[7]: --
cmd[8]: gnome-terminal
buffer: -GNOME_SUDO_PASS-
brute force GNOME_SUDO_PASS ended...
Yeah, we're in...
sudo: 1 incorrect password attempt
xauth: /tmp/libgksu-stbGos/.Xauthority
xauth_env: /var/run/gdm/auth-for-tangram-9JYTNt/database
dir: /tmp/libgksu-stbGos
I've been asked for my password, not root, after typing I get "incorrect password attempt", if I type root pwd I get the same.
4. Same with this command:
gksu -ld gnome-terminal
No ask_pass set, using default!
xauth: /tmp/libgksu-SBPcOB/.Xauthority
STARTUP_ID: gksu/gnome-terminal/1028-0-Bex_TIME0
cmd[0]: /usr/bin/sudo
cmd[1]: -H
cmd[2]: -S
cmd[3]: -p
cmd[4]: GNOME_SUDO_PASS
cmd[5]: -u
cmd[6]: root
cmd[7]: --
cmd[8]: gnome-terminal
buffer: -GNOME_SUDO_PASS-
brute force GNOME_SUDO_PASS ended...
Yeah, we're in...
sudo: 1 incorrect password attempt
xauth: /tmp/libgksu-SBPcOB/.Xauthority
xauth_env: /var/run/gdm/auth-for-tangram-6RCSoJ/database
dir: /tmp/libgksu-SBPcOB
In multi-user-mode I can login to root account.
Last edited by tangram (2013-12-23 08:42:09)

tangram wrote:
Hurrican, ok, there is no need to install antother terminal, as I wrote it did not work also in xterm.
Yesterday evening, tired and sad that gk(su|sudo) still does not work,
as the "last chance idea", I logged in into multi-user mode ( init level 3 ) and changed root's password,
then loged in into graphical mode ( init level 5 ), start gnome-terminal and suddenly ... command "su -" started to work.
By the way, similar solution ( but with chroot ) has suggested Gulver in his post ( this thread, answer #2 ).
The question is, why root's password, set during install, after finished installation is recognized in text mode, but not im graphical ?
First root's password was really simple, like "dog4356", without any national chars.
You're right. I don't even have xterm installed so I guess I just singled out gnome-terminal and forgot that xterm also wasn't working.
Forgive me for my shaky advice. Like you I've been super busy, and sweating out a fever of 102 degrees (that's Fahrenheit no my
blood wasn't boiling ). Anyways, glad you got it working. After reading over the whole thread and thinking about it for a little bit, I
can't really make a good guess as to what was happening.
I'm sure you probably had tried this, but you could have typed the password out in the command line so you could see it. If there was
something wrong with it, it would have shown up there as well. If it was perfectly fine, then it would have been very, very weird.
The important thing is you got it working.
Merry Christmas.

PC equivilent to Safari

As per header - I'm having trouble with a page
http://www.kathyprest.co.uk/folio-1.html
that displays perfectly in IE
and Firefox but not on a Mac using Safari - I was wondering
if there's
a PC equivilent to safari as the client can't see the bottom
two links
TIA!!
Buzby
There's nothing more dangerous than a resourceful idiot

Opinions from a newbie....
Neat site, neat product.
http://www.kathyprest.co.uk/folio-1.html
(slow to load on dialup, but hey, whatever--once loaded, the
rollover images
are very fast)
Mac OS 10.4.7, Safari 2.0.4
The bottom two thumbnails are still being pushed below the
bottom line of
the background image in Safari 2, and then the rollover
images appear
directly to the right and fail to cover up the background
image.
Mac Firefox 1.5.0.6 brings it up as designed--but Safari
ships with Macs, is
set as the default, and many people stick with it.
[Still in Firefox]
Did you want <<<previous page | next page
>>> to be all on a single line?
Because it isn't here, even before I upsized the text. When I
upsized the
text two steps or more, home/folio/me/contact slid underneath
the thumbnail
images to become inaccessible. (By "upsize the text", I mean
I hit cmd-+ to
increase the font size of all the text--I happen to do this a
lot--though,
admittedly, I might not bother on a text-light site like
this.)
When I shrank the browser window below the width needed for
the thumbnails
and the background image, the site suddenly reset itself so
that the
thumbnails were centered in my window, rather than over to
the left with the
background image partially cut off on the right. Just FYI.
I wouldn't mess with an old iMac for $200 (probably running
old software)
when I think a MacMini is maybe $500 and comes with $129 OS
10.4 free, plus
a lot of other software. But I haven't really checked into
it, just
suggesting investigating that route, if you are thinking
about a Mac.
Daiya
On 9/27/06 8:29 AM, "James Loudon" wrote:
> Okay, I just had a look at that on my Mac and those
bottom two links are not
> there. Well actually they are, but just right down low
and not in line with
> the other four. You have to scroll down to get to them -
but sure why that
> is though. Safari 1 is a horrid browser and lots of
things do not render
> properly - they fixed it to some extent with the later
releases but S1 is
> only good for the most basic of sites. I have S1 because
I have an old
> Powerbook running OS 10.2.8 and you need 10.3 to run
later browsers.
>
> Which brings me to Toms point, if you are building
websites for a living
> there really is no good reason not to have a Mac if you
are a PC user, and
> vice versa. Dont have to be a top end one - just
something to check sites
> with. Browsers behave differently, colours are
different, gamma is
> different. You can pick up an old iMac for $200 these
days or maybe less.

Looking for equivilent of Microsoft Digital Image Pro 10

Sorry if this is in the wrong topic, didn't know where to post....
I am a new Mac user and am loving my MacBook, but iPhoto isn't quite doing enough for me when it comes to working with and editing pictures. I've used Microsoft Digital Image Pro on my PC for the last few years, and REALLY like it, although of course they don't make it for macs. Any ideas on a program that would be the equivilent for macs? I don't want something as comlicated as Photoshop, but a little more than iPhoto. Thanks!

Here's a tip for controlling iPhoto's red-eye tool. It also works with the Retouch tool:
* Type Caps lock + Control + 9
* Undo caps lock
* Click on Retouch or the Red-Eye Removal tool.
* The tab key will toggle between cursor types, a cross or a circle for Red-Eye removal tool and between darken and lighten in the Retouch tool.
* The "[" and "]" keys decrease or increase the size accordingly.
* To get a lighter pupil with the red-eye tool, Shift-Click inside the circular curser.
NOTE: Using the "{" "}" keys will will change the value next to the circle and that represents the degree of change or intensity that the Retouch tool imparts on each pass.
Thanks to Old Toad for the above information.
I have found that in some situations where Elements absolutely refuses to correct the red-eye properly, I can get a better adjustment using iPhoto. But without the use of this secret mode, it is pretty much useless.
As far as iPhoto's capabilities, it is a really powerful image organizer with a few editing features for added convenience. What makes it better than other organizers is that it is not a file browser, it is a database application. Once you give the database some information, you can use that info to search and group your photos in almost infinite ways very quickly and easily. You can print your own cards, too. If you've had trouble with the 7 X 10 size you may benefit from Old Toad's tutorial. See his posts in this thread for an explanation and link: http://discussions.apple.com/thread.jspa?messageID=4605228
I agree with you that Elements can be complicated and overwhelming. It has so many features that it can be challenging trying to figure out which ones you need to correct your photo. When editing a group of photos I try to keep it simple: adjust the levels, lighten shadows (a must for many indoor shots), fix red-eye, crop. Plus, I do love the healing brush (band-aid tool) for removing the odd spec of anything that doesn't belong. My Elements experience was greatly improved after I bought and read a good book. You can get one that will tell you which features really work, which ones are more of a gimmick, and how to do the things you need to do most. If you can get through the learning curve, then the tools I listed really are quick and simple to use.
Good luck.

Sudo-1.8.4-1-i686.pkg.tar.xz causes sudo/gksudo to fail

Sudo and gksudo from the sudo-1.8.4-1-i686.pkg.tar.xz package fail with me, often producing a 'cannot open display' error, despite having 'Defaults env_keep += "HOME"' in /etc/sudoers. Happens with any program I'm trying to run. Downgrading to sudo-1.8.3.p2-2-i686.pkg.tar.xz makes everything work again as expected.
Has something in the sudo logic or configuration changed, or is this a bug or whatever?

Yes, I have experienced the same problem. After playing around with visudo, I commented the "Defaults env_keep += "HOME" option that I added in /etc/sudoers (therefore disabling it) and sudo/gksudo started functioning again for graphical applications. Something definitely changed, but I have no idea what..
From the Arch Wiki this variable does the following;
"Run X11 apps using sudo
To allow sudo to start graphical application in X11, you need to add
Defaults env_keep += "HOME" to visudo."
But now it seems with the new sudo package that adding "Defaults env_keep += "HOME" disables the functionality of sudo/gksudo for X11 apps on my end?
Last edited by iknelav (2012-02-22 02:03:52)

GKSUDO, GKSU and SUDO. What's going on?!?!

Hello all. I don't usually come to boards, however I didn't found an answer to my question. So let me explain in details to you all:
(I'm using Arch with gnome3-fallback)
(gconf key /apps/gksu/sudo-mode is false by default)
(I tested everything with gedit and checking permissions in ~/.config/gedit)
First, I want to know what's the difference between gksu, gksudo and sudo.
From what I read on the internet it should be like this:
sudo: uses user's configuration, with root privileges. (supposed to be unsafe)
gksu: uses root's configuration, with root privileges. (supposed to be safe)
gksudo:: uses root's configuration, with root privileges. (supposed to be safe)
What's actually happening is:
sudo: uses root's configuration, with root privileges. (it's safe)
gksu: uses user's configuration, with root privileges, and screws up user's configuration permissions. (it's not safe)
gksudo: uses root's configuration, with root privileges, and some bugs appear, as an empty document on gedit. (it's safe)
gksudo and sudo are equally safe. They didn't screw up permissions, however gksudo showed some bugs, which are probably unrelated. That makes sense as gksudo is supposed to use sudo_mode (gksu -S).
gksu is very funny, so you have to try this:
- Open one instance with gksu gedit. (Output is something with 'Failed to connect to the session manager'. gedit uses user's configs)
- Open various instances with gedit. (Some of them will use root's configs, some of them will use user's configs. Some of them will print permission errors about ~/.local/share/recently-used.xbel, some won't.)
If you keep fiddling with that, at some point your user's configurations will be all messed up.
What's happening there? I don't have a clue.
Second, I would like to know how does gksudo works.
As some people pointed it out, it seems that gksu and gksudo should do the same thing, because gksudo is a symlink to gksu (try 'ls -l /usr/bin/gksudo').
However, they do different actions. How? All I can think about is libgksu treating them differently.
Nevertheless, gksudo is actually gksu -S, they can be freely swapped in my examples.
Any help is appreciated. Also, sorry for my english, I'm brazilian.

fsckd wrote:
Awebb wrote:
wonder wrote:gksu/sudo is deprecated. use pkexec
Not so fast, pilgrim :-D
I know, the OP mentioned Gnome 3, but not everybody uses a policykit-driven desktop, although I suspect you think everybody should :-D
Upstream says in big letters "gksu is being replaced by gksu PolicyKit, please take a look at http://live.gnome.org/gksu." On the page of that link is written "The new gksu will use PolicyKit as backend, instead of su and sudo."
AFAIK pure sudo stays for now, right?

Formcalc or Javascript equivilent of =now() in Excel

Could someone please tell me if there is a Formcalc or Javascript equivilent of =now() in Excel? I know there is that time function, but that seems to come out with a long number that doen't mean anything to me. I want to be able to tab into a field, and the field show the current system time in HH:MM format.
Thanks.

In JavaScript you would use the Date object:
// Create variables
var currentDate;
var hours;
var minutes;
var formattedTime;
// Get time
currentDate   = new Date();
hours         = currentDate.getHours();
minutes       = currentDate.getMinutes();
// Format time
if (hours   < 10) { hours = "0" + hours };
if (minutes < 10) { minutes = "0" + minutes };
formattedTime = hours + ":" + minutes;
// Display formatted time
this.rawValue = formattedTime;
In your case, you would put this script in the 'enter' event of your field.
If you are doing this across multiple fields, it would make sence to implement this as a function in a script object.
Ben Walsh
www.avoka.com

How can I implement the equivilent of a temporary table with "on commit delete rows"?

hi,
I have triggers on several tables. During a transaction, I need to gather information from all of them, and once one of the triggers has all the information, it creates some data. I Can't rely on the order of the triggers.
In Oracle and DB2, I'm using temporary tables with "ON COMMIT DELETE ROWS" to gather the information - They fit perfectly to the situation since I don't want any information to be passed between different transactions.
In SQL Server, there are local temporary tables and global. Local temp tables don't work for me since apparently they get deleted at the end of the trigger. Global tables keep the data between transactions.
I could use global tables and add some field that identifies the transaction, and in each access to these tables join by this field, but didn't find how to get some unique identifier for the transaction. @@SPID is the session, and sys.dm_tran_current_transaction
is not accessible by the user I'm supposed to work with.
Also with global tables, I can't just wipe data when "operation is done" since at the triggers level I cannot identify when the operation was done, transaction was committed and no other triggers are expected to fire.
Any idea which construct I could use to acheive the above - passing information between different triggers in the same transaction, while keeping the data visible to the current transaction?
(I saw similar questions but didn't see an adequate answer, sorry if posting something that was already asked).
Thanks!

This is the scenario: If changes (CRUD) happen to both TableA and TableB, then log some info to TableC. Logic looks something like this:
Create Trigger TableA_C After Insert on TableA {
If info in temp tables available from TableB
        Write info to TableC
   else
       Write to temp tables info from TableA
Create Trigger TableB_C After Insert on TableB {
If info in temp tables available from TableA
        Write info to TableC
   else
       Write to temp tables info from TableB
So each trigger needs info from the other table, and once everything is available, info to TableC is written. Info is only from the current transaction.
Order of the triggers is not defined. Also there's no gurantee that both triggers would fire - changes can happen only to TableA / B and in that case I don't want to write anything to TableC.
The part that gets and sets info to temp table is implemented as temp tables with "on commit delete rows" in DB2 / Oracle.
What do you think? As I've mentioned, I could use global temp tables with a field that would identify the transaction, but didn't find something like that in SQL Server. And, the lifespan of local temp tables is too short.

OS X's Equivilant to Windows Remote Desktop?

I just ordered my first Mac today, a 1.66Ghz Mac Mini, and I was wondering if there is anything similar to the Remote Desktop functionality built in to Windows XP Professional, where simply by knowing the IP address of my computer, I can log into it from home.
I know about Apple's Remote Desktop application for $499, but it seems to be geared more towards corporate administration and not simply accessing one system.
Any help would be greatly appreciated!

I don't know how good it is over internet because I only use for my LAN at home, but you could try Chicken of the VNC

How to use fscommand or equivilant in action script 3

Hello every one,
I am new to action script 3, I want to burn my flash
projector file on a CD so that when it plays it opens in full
screen mode with movie size set to 100% and no scaling allowed. I
use to do it with FScommand in previous versions but it doesn't
work in flashcs3. Can someone help this poor soul how to use it in
actionscript3.
Thanks in advance.

do a search for fscommand in the Flash CS3 help and look for
a file heading called AS2.0 Migration Once you find that file, do a
search for fscommand again inside the document.

Gksudo equivilent

Similar Messages

Maybe you are looking for