How to allow users to launch SMC; login to SMC without root account

I've very familliar with how to create accounts and assign members to groups and assign privliges in Solairs 10 using SMC. I want a user to review the audit logs using the SMC console since the logs are GUI but I don't want the user to use the root account to login to SMC. I know the user can use the su command but I can only login with root after typing su and then launch SMC.
Bottom line what is the best way a user can use the SMC console without having the root password to execute SMC and then login to SMC and view the audit logs?
A million thanks
John

I found the best solution is to use a Role Based Access Control (RBAC). Using SMC as root go the the Role Icon and setup a Role using the wizzard. Next have the user login to the system, go to the terminal and type:
/usr/sadm/bin/smc &
The individual user will be prompted to login with his specific user name and password and then prompted to use the Role Login Name and Password you provided in the above paragraph.
Now the user can perform SMC functions without the need for root.

Similar Messages

How to allow user chaning his password in OBIEE 11g weblogic custom LDAP?

Hi,
How to allow user chaning his password in OBIEE 11g weblogic custom LDAP?
I need to give user an option to do so, without the intervention of any Administrator. I also do not want to make user a Administrator else he will be able to login in weblogic and can do any damages unknowingly.....
Regards,
Rahul

Hi,
Replace the line in the instantconfig.xml
<WebMessage name=”kmsgChangePasswordLink”><!–<HTML><sawm:messageRef name=”kmsgUIChangePassword”/></HTML>–></WebMessage>
with
<WebMessage name=”kmsgChangePasswordLink”><HTML><sawm:messageRef name=”kmsgUIChangePassword”/></HTML></WebMessage>

How to allow user print their draft anwsers before sending it as final ?

How to allow user print their draft anwsers before sending it as final in a form central questionnaire ?

Hey MTdev,
Panel close? events cannot be triggered on a VI being viewed or controlled remotely. Some more information on that can be found in the help here:http://zone.ni.com/reference/en-XX/help/371361E-01/lvprop/vi_panel_closeq/. My suggestion would be to set the Title Bar on the front panel of your remote VI to not be visible so that their only option for closing the window is to click the logout button. Are you using Remote Front Panels(http://zone.ni.com/devzone/cda/tut/p/id/3277) to do this instrument control? Using remote front panels allows you to manage a lot of the multiple people accesssing at the same-time type issues so it may be something to look into if you are not already using this method.
Regards,
Kevin
Product Support Engineer
National Instruments

Anybody knows that how to Allowing user Customization at runtime for portle

Anybody knows that how to Allowing user Customization at runtime for portlet.
What i want is to let user Customization persist to the repository. (not session). bu tmy testing accodring the Jdev 11g guide shows not working for portlet..
Any body knows how to do this for portlet ? Web center 11g
thanks a lot.
Wayne

Hi Wayne,
You can only save runtime customizations to the repository for the users present in jazn-data.xml file (If you are using file based security).
You will have to do the following before you can start saving user customizations:
1. Create Webcenter Template project.
2. Apply ADF Security
3. Use page-definition files for jspx pages.
After this, whatever customizations you do, will be saved to persistence storage.
Better would be to try this on server. Since, before deploying, you run the pre-deployment tool, which will take the MDS Repository path as an input and store all persistence storage there.
If there is nothing in that location, you can be sure something is wrong and debug it.
Hope that was helpful.
Regards,
Kunal Chheda.

How to allow user to see attachment without login in 11i through browser ?

Hi,
I have one requirement where I need to show attachment to user even if He is not logged in.
We created Function which return Attachment File URL using seeded API.
When we paste that URL in browser it asks for login for Oracle Apps version 11i but for version R12 when we do the same the attachment gets downloaded.
Regards,
Ajay Sharma

HI Ajay,
I have one requirement where I need to show attachment to user even if He is not logged in.
We created Function which return Attachment File URL using seeded API.
When we paste that URL in browser it asks for login for Oracle Apps version 11i but for version R12 when we do the same the attachment gets downloaded.I think its not possible in 11i
this is how it is designed
we cant bypass login credentials
correct me if I'm wrong
;) AppsMasti ;)
Sharing is Caring

How to allow users to mount a Samba shares on a WXP

Through lots of reading I've managed to get an understanding of how to mount SMB shares at bootup by placing the proper edits in /etc/fstab. While having the shares of the server, running Contribs.org SME Server 6.01 (recently known as Mitel SME Server) and acting as a samba server, being mounted at startup is perfect since the server is always on. This is not the best idea for the XP workstation since it isn't always on. Here is a copy of my present fstab file with x's replacing the passwords.
fstab [B---] 0 L:[ 1+19 20/ 21] *(1085/1086b)= . 10 0x0A
# /etc/fstab: static file system information
# <file system> <dir> <type> <options> <dump> <pass>
none /proc proc defaults 0 0
none /dev/pts devpts defaults 0 0
none /dev/shm tmpfs defaults 0 0
tmpfs /tmp tmpfs defaults 0 0
sysfs /sys sysfs defaults 0 0
usbdevfs /proc/bus/usb usbdevfs defaults 0 0
/dev/cdroms/cdrom0 /mnt/cd iso9660 ro,user,noauto,unhide 0 0
/dev/cdroms/cdrom0 /mnt/dvd udf ro,user,noauto,unhide 0 0
/dev/floppy/0 /mnt/fl vfat user,noauto,unhide 0 0
//192.168.2.2/stuff /mnt/silicon2 smbfs username=kingnubian,password=xxxxxxx,user
//192.168.2.105/e-smith /mnt/silicon1 smbfs username=kingnubian,password=xxxxxxx,users,noauto
/dev/discs/disc0/part5 swap swap defaults 0 0
/dev/discs/disc0/part1 / xfs defaults 0 1
I would like users with an account on the Linux box to mount the remote share on the XP box without needing to SU and consequently need the root password. When trying now to mount "e-smith" (The share on the XP box) as a user using "mount /mnt/silicon1" I get a message about needing to be SU.

To allow users to mount smb shares you need to make smbmnt suid:
# chmod +s /usr/bin/smbmnt
Note however that the user needs to own the directory used as mountpoint. So I don't know how to make 'mount /mnt/silicon1' in your setup work for all users.
For the users to be able to unmount the smb shares as well you need:
# chmod +s /usr/bin/smbumount
Now users can do 'smbmount //server/share mountpoint -o username=whatever' or simply 'mount mountpoint' if the details are specified in fstab. To unmount root can do 'umount mountpoint' or users can do 'smbumount mountpoint'.
Don't confuse smbmount with smbmnt - the first is the command you use to mount shares manually, the second is the one that should be suid and is used both by smbmount and by mount -t smb.
Hope this helps.
-bogomipz

How to allow user upload file on applet??

Sorry I'm new to programming here, but I'm trying to allow user to upload a file to the server so the program inside the server can user the file as input.
I've noticed that JFileChooser, the ideal class for this, is not allowed on the applet, so I don't know how to go about doing this.
Thanks for any input!

ok
you wish to transfer a file from applet to server.
1. Applet gets the file
the applet needs to access the file System therefor it must b a signed applet to get aound the security restrictions. This is why the JFileChooser doesn't work. Check out the tutorials on jars and applets, particularly the security notes.
2. opens a connection with the server
so the applet has a file and needs to send it. there needs to be a service of some form on the destination computer to execpt the file. Perhaps you write your own perhaps you use HTTP.
3. server software stores the file
where an applet is an mini application that runs within the confines of the web browser. a SERVLET is a service program which runs with in the confines of a server, such as a web server.
this is a lot easier to do HTML rather that applet in my opinion but which ever.

How to allow user to enter multiple values?

Hi, can someone tell me how I can allow user to select multiple values from a selection screen. To be more clear, I have to display 4 values on the selection screen and want to allow user to select 2 or 3 values from it. It will be very helpful if someone could tell me how to do it.
Thanks in advance,
pushpa

hi mahesh,
pls c the code below. this is what i have written in my program. when i run this program it is showing only one value and that too only the first one '1234'. i want that it display all the values that i gave in the initialization part.
please help.
thanks,
pushpa
SELECTION-SCREEN BEGIN OF BLOCK enter_data WITH FRAME TITLE text-001.
SELECT-OPTIONS skunnr FOR kna1-kunnr.
SELECTION-SCREEN END OF BLOCK enter_data.
INITIALIZATION.
skunnr-low = '1234'.
skunnr-sign = 'I'.
skunnr-option = 'EQ'.
APPEND skunnr.
skunnr-low = '9824'.
skunnr-sign = 'I'.
skunnr-option = 'EQ'.
APPEND skunnr.
skunnr-low = '8756'.
skunnr-sign = 'I'.
skunnr-option = 'EQ'.
APPEND skunnr.
skunnr-low = '6534'.
skunnr-sign = 'I'.
skunnr-option = 'EQ'.
APPEND skunnr.

On and iPad how to Allow User To Enter Custom Text (Dropdown only) Enables users to enter a value other than the ones in the list.

On an iPad, how do I :
Allow User To Enter Custom Text
(Dropdown only) Enables users to enter a value other than the ones in the list.'?

Are you using the built-in Currency option under the Format tab? If so,
what you're describing should not happen.

Interactive form, how to allow user use comment and markup tool?

hi, gurus,
we are using
CALL FUNCTION 'FP_JOB_OPEN'
and
CALL FUNCTION 'FP_JOB_close'
together with the sfp funciton module to generate fillable pdf file, but we found out that the pdf generated does not allow user to use the comment and markup tool, it's required adddition reader right?
could you please how to generate the pdf that can allow user to insert comments ?
best regards.
jun

Hi,
please follow these steps:
- You have to enable ReaderRights (on ADS configuration using VisualAdmin)
- The PDF must be static and NOT dynamic
Then it works.
Take care,
Thomas

How to allow users to include a photo when submitting a form

Using Adobe Livecycle Designer ES Version 8.2.1.3144.1.471865
Would anyone out there know how to add the functionality of allowing users who are filling out a form to include a photo when submitting the form?
Thanks in advance for any help.
Regards,
Lola

Hi,
If you drag an imageField onto the page, when the user clicks on this at runtime, they will be prompted to select an image file.
There is an example of that in this form: http://assure.ly/j1KdNq.
There are more image field examples on our site, but I don't think any of them are set up for the user to select an image. http://assure.ly/ozrNSO.
Hope that helps,
Niall

How to allow user to change SAP Portal password by themselves

We would like to allow user to change SAP Portal password by themselves. However, I added role Manage_My_Password and Manage_My_Profile to a user account. After logoned with this user account and opened the option 'Personalize'. I only find the page allow me to customize the page layout. But I haven't find tab for changing profile and password.
Pls advise.
Thanks.
Edward

Hi Edwar,
You can hide the pages from portal personalization workset. copy the workset and select the page and click on property -> select Invisible in Navigation Areas ->yes
You can find the workset under
Portal content->End user content->Standard Portal Users>Workset->Portal Personalization
If you want a custom developed application fro change password see the below blog
A Change Password Application
Hope it helps
Regards
Santosh

How to allow user refer back to lecture when they are taking a quiz?

Hi everyone,
I'm new to Captivate and now I am kinda in a dilemma. Thanks for your
time watching my post!
I created a CBL in Captivate 3, the first 10 slides is a lecture and it
is followed by a 10 slides quiz set as SCORM standard.
I want the learner to be able to refer back to the lecture when they
are taking the quiz, I tried to in 2 approaches and they both have
issues in different ways.
Approach 1: "allow backward movement", and "infinite attempts". The
problem with this approach is, when the learner click "review the
quiz" and when they click "back" on the first quiz slide, the whole
quiz will be start all over, the score is flipped back to zero.
Because the quiz seeing this as a new attempt, and the learner is
allowed to make "infinite attempts" as it was configured.
Approach 2: Set "allow backward movement" and allow only "1 attempt".
The problem with this approach is, when the learner is in the middle
of the quiz and refers back to the lecture, the quiz will be
automatically shown as completed. And the learner will not get a
chance to answer those unanswered questions.
So it looks like whenever I let the learner refer back to the lecture
in the middle of a quiz, the quiz will be seen as completed!!! What am
I doing wrong? Is there a better approach that I can "allow backward
movement" and still allow user resume their quiz from where they left
off?
Sorry for the long post, I was not able to express it in a more
concise way.
Any help is really appreciated!!
-David

What you are seeing is the behaviour as-designed in Captivate for quizzing.
Each Captivate movie has a "quiz scope" which begins with the very first scorable object, and ends at the Quiz Results slide. If you enter the quiz scope by starting a quiz slide, then jump back outside the quiz scope, by going back to the main content, Captivate's default behaviour is to freeze the quiz at that point. So when Captivate refers to Allow Backward Movement, it's only talking about backward movement within the quiz scope.
For example, if you get to question 1 but don't answer it and go to question 2, then answer that one, and go back to question 1, you'll still be able to answer question 1. The quiz won't be frozen. However, if you had jumped back to any slide before question 1, your quiz would have been frozen with whatever score you had accumulated at that point.
There may be a workaround you can use to get closer to what you want. Since any scorable object is classified as being part of the quiz, you can add a button on one of the very first slides that the user needs to click in order to advance. Set the properties of this button (or click box) to report a score to the quiz. This makes it part of the quiz scope. Now any content slides that fall after this button slide are also within quiz scope and moving back to them will not have the same effect of freezing the quiz.
Please bear in mind one more aspect of quiz questions: If you answer a quiz question, and then move off the slide (forward or back) that quiz question answer is frozen and cannot be changed unless you Retake the Quiz or relaunch the entire module.
Hope this helps clear up the way things work.

How to get user 'logged in' to ironport web filter without launching IE

We have an issue with some employees who use third party programs that traverse the Internet. These programs are 100% allowed by the organization as they are required for day to day business. Some programs go over the Internet to communicate for certain reasons, such as a live chat help support, or ordering products, etc..
The problem is that some of these users log in and never even touch Internet Explorer for awhile. They will go on and start working right away. Well if they don't try to access an Internet site via IE, then the Ironport does not 'log them in', and they are known as unauthenticated. Of course this doesn't happen with everyone. There's nothing wrong with people coming in a little early and checking the local news online.
We were thinking up if it's possible to have each user 'touch' the ironport web filter in some way during a logon script, unbeknown to the end user, so that they are 'signed in' and whatever Internet connected application they launch has access through to the Internet. Right now they need to at least launch IE and go to some site (say Google or MSN) and via NTLM credentials transparently passed through IE7, 8 or 9, they can simply close the page and go about their business. Note: they MUST go to an external site.... not an internally hosted one (such as our Intranet, time clock or HR self service pages).
So is there any commands we can put in via kix or bat or something that will say "Hey Ironport, %username% just logged in at 10.x.x.x". Then maybe to make it more advanced, a logoff script that says "Hey Ironport, %username% just logged OFF of 10.x.x.x". This way when our hourly timeout happens, they aren't immediately booted from their Internet applications (if they don't keep an IE window open that is).
Right now our ASA Firewall uses WCCP to forward port 80 to the ironport web filter. The Ironport is a transparent proxy.
Thanks!

So it looks like you are moving the authentication from the Ironport S160 to the ASA5500 series firewall?
I guess we are looking at something simpler, like a way to 'touch' the internet and pass NTLM credentials, because then the Ironport knows who the user is.
If the user does not 'touch' the internet with IE, and say they use some other program that does not pass NTLM credentials (say Firefox or live chat program, or an ftp program, etc...) They are likely to be blocked, because the Ironport doesn't know who they are.
Your link seems to lead to a complicated setup for something that seems so simple. I'm not sure how that relates to an Ironport S160.. it seems to focus on the ASA5500. Also we want it to be completely 100% transparent to the end user.
This is how it worked with a Barracuda web filter appliance...
A DCAgent program sat on each domain controller. As users logged in or out of the domain, this agent passed this current activity to the Barracuda web filter appliance.
The Barracuda appliance knew exactly who was logged in because of this little program on the domain controller(s) that kept it updated. Based on this, policies could be assigned based on Active Directory group memberships. ie) HR and Marketing can access Facebook, while others cannot.
I guess I'm looking for similar functionality with the Ironport S160. If there's any way the domain controller, or even the client PC can say "Hey Ironport, %username% is logged on here at %ip_address%". That way the Ironport would know who they are, and there would be no unnecessary authentication boxes (besides the user logging into the windows domain). They could use internet connected apps that do not pass NTLM authentication. I guess the client PC or the domain controller would also have to tell the IronPort when they signed off, just so we don't have to deal with authentication timeouts. This way, say they are in our internet chat help program... after an hour, it will cut out and disconnect them - because the IronPort forgets who they are (unless they are actively using the internet with IE).
So for now, we just use the bypass option for the affected internet services. The default browser is IE, so the reality is that we are not suffering any tremendous inconvienence. It's just that we want to ensure we have the best robust solution, and we can handle these types of situations with programs other than IE accessing internet resources.

How to allow users to change password

I have enabled users to change their passwords in the Server.app for the Default Site with SSL, and who can access is a group of individuals.
When I load up the Server site, I am presented with
a Login to which I then add my username and password and I am then presented with
Welcome to OS X Server
OS X Server makes it easier than ever for the people in your organization to collaborate, communicate, and share information.
I Choose My Settings and the site is redirected to /changepassword of which a page comes
Forbidden
You don't have permission to access /auth/ on this server.
The Directory /Library/Server/Web/Data/Sites/Default/auth/ exists with the corret permissions. This is an empty directoy tho
Apache Logs:
Directory index forbidden by Options directive: /Library/Server/Web/Data/Sites/Default/auth/
I cannot get this to work. WIki's are turned on but that doesnt work either.
If I Launch /wiki, I am prompted to login, to with I do, and i just get a blank web page
Apache logs:
File does not exist: /Library/Server/Web/Data/Sites/Default/__collabd
This is on a new install of OSX server
Any Suggestions?

Hi,
On the landing page at the bottom it should say "change password".
That brings you to a forbidden page?
On my server I do not have the /auth/ folder in my default site, but my changepassword page does work.
Can you check if going to https://127.0.0.1/changepassword does work? It will give an SSL error.
Then it might be DNS related conflicting with another router/server in your network
Or... charge $ 5 per user to change his or her password personally
Goodluck!
Jeffrey
StarPine Support

How to allow users to launch SMC; login to SMC without root account

Similar Messages

Maybe you are looking for