How to Setup an ACL over a Command in solaris 2.6

Hi all,
Has anyone have an idea on how to setup an ACL over a command
in solaris 2.6 . i.e: to force a user (or a group) to enter a
password to run a command (like mount and others).
Thanks for your help.
haed98.
[email protected]

Hi head98,
You can set ACL using setfacl commands. This way you can exclusively assign read/write/execute permissions on command that you wish. But ACL doesn't prompt for passwords or you can set passwords using ACL. One way of doing this will be to create wrapper for commands which will prompt for passwd, compare them with /etc/shadow and then execute the real command.
Hope this helps, Thanks. SUN/DTS

Similar Messages

How to setup a vpn over the internet

Hi ,
how to setup a vpn over the internet ? Just I have using window server 2012 r2, I already install 'remote access service' also ready enable VPN service but I can't connect to vpn server over Internet(Other network), when I connect from LAN , vpn service
is enable I can connected. My ADSL router also Enable VPN access(PPTP, L2TP, IPsec). But I can't access my server over Internet :'( . What I need to do? Help me please.
Thanks,

Hiya,
Did you have a look at this guide? - It gives you all the steps.
http://www.howtogeek.com/135996/how-to-create-a-vpn-server-on-your-windows-computer-without-installing-any-software/

How to setup shortcut to insert a command in Oracle sql shell?

Hi,
Under sqlplus shell, if i want to frequently insert a long command while
tuning queries, is there any way I can press a couple of keys to insert the
command that is pre-prepared.
For example, I need to frequently insert:
sqlplus> alter session set events '10053 trace name context forever';
anyone knows some tips to avoid typing?
thanks,
Rick

user10217806 wrote:
i mean sqlplus command line input interface under linux.Well, Ivan showed how to just use some sql files to do it .. not exactly pasting your command at the command line, but useful, nevertheless.
As for actually pasting text at the command prompt, as I said, what you are asking has nothing to do with sqlplus itself and everything to do with the environment in which you are running it. For instance, if I use Putty to connect to my *nix boxes, it is a feature of putty to paste whatever is in the clipboard by simply right-clicking the mouse. I can do the same thing at a Windows command prompt window if I have the properties set for 'quick edit'.

How to turn off voice over command in mac book pro 10.6.8

how to turn off voice over command in mac book pro 10.6.8

Open Universal Access preferences and disable it there.

How do I start my setup process all over again?

How do i start my setup process all over again? I didn't complete it and I don't think its registered. My PC's iTunes does not see it.

Place the iOS device in Recovery Mode and then connect to your computer and restore via iTunes. The iPod will be erased.
If recovery mode does not work try DFU mode.
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
For how to restore:
iTunes: Restoring iOS software
Try another cable
Try on another computer
If still problem, make an appointment at the Genius Bar of an Apple store since it appears you have a hardware problem.
Apple Retail Store - Genius Bar

HT2477 Just bought a Mac book and the set up is with the Voice over key commands,how do you switch this off as it is painfull to use and use the scroll pad

Just bought a Mac book and the set up is with the Voice over key commands,how do you switch this off as it is painfull to use and use the scroll pad?

It's the button (key) that is labelled Control.
Each of the modifier keys and similar keys has its own symbol; this makes listing command keys easier to do. The Command key is usually the only key which has its symbol printed on the key. If you open Keyboard Viewer (in the Input menu, the one which displays the flag in the main menu bar), you can see what symbol refers to which key.

Help! Confusion over how to setup intel3945 wireless and rc.conf

Hi,
I'm very confused. I've already read through all the wikis and searched many forum posts. I can't get my wireless intel3945 to work on my dell vostro 1400.
Iwconfig says the wireless card is at wlan0 and dmesg | grep iwl says it has detected it. However, when I try a iwlist wlan0 scan it returns :
wlan0 Interface doesn't support scanning : Network is down
I think the problem is that I don't know how to setup rc.conf correctly or use the command line to test the wireless. Forum posts say many different things on how this is done.
These are the steps I have taken:
uninstalled the ipw3945 and ipw3945-ucode and ipw3945d.
installed iwlwifi and iwlwifi-3945-ucode
in my rc.conf modules, added iwl3945.
I'm not sure how to setup the networking section, this what I have now:
lo="lo 127.0.01"
eth0="dhcp"
wlan0="dhcp"
INTERFACES=(lo etho)
gateway="default gw 192.168.1.1"
ROUTES=(!gateway)
And in my dameons I have 'network'.
How can I scan for networks and connect to them on the commandline? I'd prefer not to use a gui tool because they never work and never tell me why they're not working.
Any help is greatly appreciated!
Cheers!
kilolima

iphitus wrote:
broch wrote:I have ipw3945 and iwl3945 working with wpa2 (or vpn)
(less complicatd than the above)
don't use netcfg2
Why?
no particular reason.
Simply when I configured wireless, netcfg2 wasn't available. Since then it (wireless) works, so not having any problems, I did not modify network setup. Next week or so I am going to install Arch on my daughter's laptop (per her request ) so I will try netcfg2.
So this is what I have for ipw3945 wpa2 or iwl3945 with wpa2
Below you will find a lot of words so read slowly but there is not much actual work
ipw3945 setup
kernel 2.6.23.x (Arch or vanilla)
or
kernel 2.6.24/2.6.24-gitX (patched with ipw3945 patch from gentoo -> compiling separate module for 2.6.24 may fail. if you want kernel patch I can post a link)
for default kernel install Arch packages for ipw3945, ipw3945d, ipw3945-ucode
or
if you want to compile modules, you will also need ieee80211 (first uninstall kernel's default, then install from sources otherwise ieee80211 from sources may refuse to install)
modify /etc/rc.conf
DAEMONS=(.... @ipw3945d @network ....)
that is all you don't need to add ipw3945 to MODULES=(.....)
because ipw3945d will automatically start ipw3945 module
do not list eth1 in network config section:
lo="lo 127.0.0.1"
eth0="dhcp"
INTERFACES=(eth0)
as you see, in my case only eth0 (wired) is listed and eth1 (wireless) is not listed
now you are done with basic network configuration for ipw3945, restart network/computer to bring up ipw3945d/ipw3945
check if modules are up and basic network is set:
#lsmod | grep ipw
#ifconfig -a
or
#iwconfig
if all is o.k. configure
WPA2:
configure router for wpa2
client: basically follow Arch wiki:
configure wpa_supplicant (installed already of course)
#wpa_passphrase your_ssid your_psk
keep terminal window open with created encrypted wpa passphrase and in the second terminal window edit /etc/wpa_supplicant.conf
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="your_ssid"
scan_ssid=1
proto=WPA RSN
key_mgmt=WPA-PSK
pairwise=CCMP TKIP
group=CCMP TKIP
psk=whatever_output_from_wpa_passphrase
Above pairwise and group setup will depend on your router (network capabilities)
almost done:
run
#wpa_supplicant -Bw -Dwext -i eth1 -c/etc/wpa_supplicant.conf
the above assumes that your ipw3945 is set as eth1 (from iwconfig output)
to connect to the network I am using "wireless assistant" http://www.kde-apps.org/content/show.ph … tent=21832
that is all for ipw3945. You may automate network starting/connecting to wpa2 by writing simple script.
iwl3945
--kernel 2.6.23.x
install iwlwifi and iwlwifi-3945-ucode
--kernel 2.6.24.x
install only iwlwifi-3945-ucode as kernel has iwlwifi module incorporated
default iwlwifi does not support LED so I suggest to install something like knemo for kde to show active network icon. The latest iwlwifi does support LED but it is not yet incorporated into 2.6.24 vanilla kernel.
if you have kernel 2.6.23.x with external iwlwifi module
modify /etc/rc.conf
and add iwlwifi to
MODULES=(.....)
nothing else is required.
if you have kernel 2.6.24 with integrated iwlwifi module you don't have to edit /etc/rc.conf
As in the case of ipw3945, I do not list wireless interface (wlan0) in /etc/rc.conf
for kernel 2.6.23.x
load module/restart network or simply restart computer
check if module is up
#lsmod | grep iwl
#iwconfig
or
#ifconfig -a
WPA2
same wpa_supplicant.conf as above, so if you already have it no need for modifications.
start wpa2
#wpa_supplicant -Bw -Dwext -i wlan0 -c/etc/wpa_supplicant.conf
the only difference in the command is wireless interface: wlan0
connect to the network, again I am using "wireless assistant"
vpn
I am using cisco vpn. Client is provided by vpn host, cisco does not provide vpn client for individual download, but you can find it on line.
vpn host will provide pcf file for you
- install vpnclient
- copy your VPN profile (vpn.pcf) to the
/etc/CiscoSystemsVPNClient/Profiles
directory
-- start vpn client
/opt/cisco-vpnclient/bin/vpnclient connect vpn pcf_file_name
provide username and password and off you go
From my experience none of linux gui for vpn works reliably so you will have to resort to the command line.
That is all, a lot of writing, but actual ipw3945 and iwl3945 configuration is straightforward and very short.
Hopefully this will work for you.
forgot to add regarding vpnclient (cisco)
you will have to modify
/etc/init.d/vpnclient_init
line 38 and line 101
replace
/sbin/lsmod
with
/bin/lsmod
Last edited by broch (2008-02-07 15:55:45)

How to setup oracle database to archivelog mode and auto delete ?

Oracle 11g R2
- How to setup database to archive log mode and have oracle only save 24 hours of archive logs
and delete the rest. So at any given time I will have only 24 hours of archive log and not more.
So only 1 day of archive logs.
- Let me know the database parameters I need to setup to accomplish this.
- I don't want to use the RMAN
- I am not setting up the database to archive log mode for recovery purpose. I am setting up archive log mode
so we can use the log miner tool to dig up achives to see log activity for any performance & tuning.
Edited by: johnpau2013 on May 9, 2012 6:09 PM

johnpau2013 wrote:
Thanks everyone for there responses.
I need to rephrase and explain everyone as what I wanted to do exactly. This might help everyone understand and suggest me.
We have oracle database 11g r2. Its a test database. Nothing is critical. We use EXPDP utility to backup the entire database every night. Which is enough for us to recover incase something happens. Even if we loose some data. That's fine.
We are testing our web application on this oracle test database for performance & tuning.
One thing we have noticed is that the redo logs are switching very frequently. 50MB each log file and there are 5 logs. each log switches every 40 seconds. So we wanted to see what is getting written in this redo logs. We wanted to use the LOG MINER tool in OEM to read the logs. It needed our database to be setup in archive log mode. So the log miner can read the archive logs and show us the sql's within the archive logs.
Now when we setup the archive log mode on our database. By default the archive logs destination was set to flash recovery area ( may be oracle default archive log location is flash recovery area folder).
We have setup the db_recovery_file_dest_size to 100GB. Now within 2 days we have filled up the flash recovery area folder. Database was frozen. Then we realized that its because oracle couldn't write archive logs. Because it reached the 100GB. Then we physically deleted files in the flash recovery area folder. Thinking it would help us start the frozen oracle database. But it didn't . The we realized that we are doing something wrong. As Oracle does not know that at OS level we deleted the files. Then temporarily we changed the db_recovery_file_dest_size to 130GB and were able to start the oracle database. Later we turned OFF the archive log mode.
Being a rookie DBA we would have not read something properly.
Finally:
We wanted to know how to always keep only 1 day of archive logs (only for our performance tuning ) and not more than that. All we need this 1 day of archive logs is to use the log miner to read them. Backup is NOT our priority here. Only be able to read the archive logs from LOG MINER is PRIORITY.
Correct me if I am wrong.Okay, so its making much more sense now, thanks for explaining your requirement.
Database won't honor anything that you would do over the o/s without telling it. Your deletion of the archive log from the o/s location is NOT updated in the control file of the database and that's why, even when you had deleted the entire 100GB , from the db perspective, the space was still marked as used. This is the same which would happen even if you would increase the space from 100gb to whatever size as well. To delete the space, you would need to update the database's control file and that you can do from RMAN using its two commands , crosscheck backup following with deleted expired backup . The first command would find that which database backup files are NOT on the o/s which are shown in the control file and would mark all of them as expired. The second command would simply delete those expired files. This would update the control file and you would have your 100gb or whatever space, given back to you.
To keep the archive logs of just one day, set up that Retention Policy for RMAN to either number of copies using the Redundancy option(default and set to 1) or Recovery Window. I believe for you Redundancy would be a suitable choice but you can have a read and play around with it. Setting it up would mark the files as Obsoleted and finally, you can write a small RMAN script to delete those obsoleted files.
Now, what I don't understand is that why you want to keep on generating the archive logs just for the log miner? If you would have generated them once and figure out the reason for extensive redo generation(did you try increasing the redo log file size, 50mb seems to be smallish) , I don't think that there is any reason to keep on generating the archive logs still .
And last part, for your question asked about that whether we can use RMAN to put the db in the archive log and is it a backup tool, yes and yes.
HTH
Aman....

How to setup a static IP for a wireless printer

This problem has been ongoing for several versions of OS X and the last five printers I've had and I'm finally over messing with it. For some reson, when using a wireless printer with OS X this is a repetetive problem, and I think if I configured the printer to a static IP address instead of using DHCP, it might work better. At least once a week, if not more often, I'll print something and get the ubiquitous Dock error of "Printer is not connected". The printer is still in Preferences, but if I delete it, then it doesn't show up as it should for selection.
The only way to fix this is reboot, and then the printer shows up again in Preferences. I select it and all is well again...until a few days pass and the same thing happens again. Using an HP LaserJet P1102w, still a current model, but it doesn't matter which printer I use. I also have an Epson Artisan 725 and the same thing happens with it about once a week. Also, this happens from both my Mac and my wife's Mac, so it's not an issue with just my machine.
I've searched for documentation on how to setup a static IP address for a wireless printer with the Airport Extreme, but all I find are tutorials on how to do it with an ethernet hard-wired printer. Any help would be greatly appreciated.

You could set up your router to do manual assignment of IP address instead of using DHCP, but that is a PITA, because then you'd have to manually set up IP for all your devices.
If you have AirPOrt Extreme, you could do this:
In your Apple TV, go to the Settings >> About and write down the MAC address of your ATV
Start up the AiPort Admin Utility
Go to Network tab
click + in the DHCP reservations
Choose an IP you want for your ATV & Enter the MAC address
From now on, this IP address will be reserved to the MAC address and only your ATV will be able to get it, no other device will.
It is not a static IP in a true sense, but behaves just like one.
Works great for me...
If you don't have a AP Extreme, I'm sure other routers will allow you do reservations too.

How to setup my airport for music streaming

Hi all
I would like to use my iPhone and or iPad to stream music from Pandora and Spotify to my 5.1 (Wired) Speakers.
This question is similiar to this thread https://discussions.apple.com/thread/4153687 however i wanted some clarity and thought best to start a new discussion before pulling my hair out doing this the wrong way.
I have an unused Airport Express basestation (A1408) My current home setup is as follows:
Modem Router: (Netgear DGND3700) N600 Wireless ADSL2+ Dual band Gigabit
Home Theatre Computer: Windows 7 (Cat6 LAN Ethernet connection) NO LAN port
AV Reciever: (Onkyo TX-SR309)
5.1 Speakers: Wired connection to AV Receiver (NOT Airplay capable)
Laptop: Windows 7 (Cat6 LAN Ethernet connection)
My question is how to setup the airport, i understand it can be used to enable airplay streaming of music over the existing WiFi network, as these music streaming apps download and play music concurrently i would not want to have to switch between to two seperate WiFi networks. Should i plug the airport into the HTPC? I would need to purchase a LAN Splitter as the only LAN socket is already taken up with my cat6 connection. OR would i plug it directly into the modem/router? This second option is prefereable.
I have attached an image of my setup below. Any advice would be great, Regards Steve
[URL=http://s1293.photobucket.com/user/steve7677/media/homesetup_zps63eaf61c.jpg.html][IMG]http://i1293.photobucket.com/albums/b599/steve7677/homesetup_zps63eaf61c.jpg[/IMG][/URL]

Still slightly confused, with the link you provided i chose scenario 2. All the other secanrios instructed i connect the airport express to my home stereo or powered speakers. As i dont have an aiport express only an airport extreme there is no audio jack and cannot connect it to the stereo/speakers.
option 2: Connecting to an existing Wi-Fi network as part of a roaming network
Ensure that the AirPort base station Ethernet cables are connected as above
I have done this and conected it via ethernet cat6 to the modem/router
Launch AirPort Utility 6.1. The Assistant will automatically configure the Roaming network
Im using windows 7 and cannot find this version of aiport utility, only 5.6.1 - The message comes up: Aiport utility was unable to find any airport wireless device. I am running this utility on my win7 HTPC (which is connected to my modem/router via cat6 LAN) The airport light is blinkng amber.
would you reccommend a hard reset of the airport? or can you provide a link for AirPort Utility 6.1.?
Regards

How to setup a static multicast ARP entry with Cisco SF300-08?

We're running a cluster in multicast mode as a loadbalancer.
We have Cisco SF300-08 and when we adding a static ARP entry results in an error message telling the user that the hardware address needs to be a valid unicast MAC address.
So how to setup a static multicast in Cisco SF300 or maybe someone know other solution to setup multicastes mode in Cisco SF300.

Hi, Tom!
We have two watchguard xtm505(cluster active-active) in our network. Watchguard interfaces have one ip and one mac adresses. IP 192.168.111.1(Unicast) and MAC 01:00:5e:02:02:03(multicast). Cisco SF300 is router to outside networks(to internet). Cisco IP adresss is 192.168.111.254. There are another some hosts in this network.
Ping from hosts to 192.168.111.254 works well. Ping from hosts to 192.168.111.1 works well too. But there is no ping from watchguard cluster(192.168.111.1) to Cisco(192.168.111.254). And there is no routing to internet
This is well-known situation. We need to do following(example for cisco 3750):
1.    Start the Cisco 3750 command line interface.
2.    Add a static ARP entry for the multicast MAC address of the FireCluster interface.
Type this command:
arp arpa
For this example, type:
arp 192.168.111.1 01:00:5e:02:02:03 arpa
3.    Add an entry to the MAC address table.
Type this command:
mac-address-table static vlan interface <#>
For this example, type:
mac-address-table static 01:00:5e:02:02:03 vlan 1 interface gi1/0/11
But we can't add arp entry on Cisco SF300. CLI tells us "MAC address illegal"!
We tried enable igmp snooping, but is not helps.
Could you tell more detailed about MAC groups?

How to setup real SFTP in Yosemite?

There's lots and lots of information online about how to setup remote access to my mac using SSH and SFTP in Yosemite...but apparently none of it is actually useful for genuinely remote access...access from outside my network, access from miles away. Because here is what I have learned:
The ip address listed in the Sharing pane when you access remote login is internal. it's some version of 192.168.x.x, which is essentially everybody's computer and utterly useless from outside the network.
So my actual public ip as assigned by my service provider is really my IP if you are trying to get to my computer from outside.
But that IP doesn't "just work" via SSH or, much more importantly for me, SFTP. Evidently that involves something called "port forwarding" which one used to be able to do via Airport Utility, but is no longer possible because such options do not exist in the current version of the utility.
(What I want to achieve is for a friend of mine, a friend on a mac about 4 miles away, to be able to directly access very large files on my computer. I don't want to use clouds or public sites or anything like that, I just want to be my own private little FTP server just for her. That used to be no big deal.)
So... is there a solution for this?

Dropbox may be a better option if you can both have accounts with enough storage, it is a simple setup process that can be forgotten about.
Bittorrent sync is another option that mirrors data between several endpoints. You should get better performance if the files are not being transferred over the network (Dropbox & Bittorrent sync create copies at each end).
ssh & port forwarding allows you to use sftp, if you do some more setup you can also use sshfuse to mount the remote content as a network disk, it's a plugin for http://osxfuse.github.io
Just be aware that many scripts & botnets are constantly attempting to login on visible ssh ports on routers across the internet. Enabling ssh to outside access means that any user on you Mac can be a potential login - have good passwords set on ALL user accounts, and do not enable the root account password. There are also options to disable passwords in ssh (& use ssh keys only) if you want better security.
ssh is good, but it is not trivial to setup and it won't open ports for you. Apps like bittorrent sync can use UPnP to request port forwarding rules, to make setup easier.
Back to My Mac is OK, provided you are willing to hand over the keys to your Apple ID.
P.S. You keep mentioning ftp, please avoid ftp. ftp can use plain text passwords that can be sniffed over the network, avoid opening the network to inbound ftp traffic too.

How to setup the drill down on union report

Hi,
I'm setting the union report.
I want to set the drill down to another report.
But I can't setup it.
Would you please tell me how to setup.
Thank you.

Hi Hemlatha
In Crystal Reports, to prevent the ability to drill down into a subreport when published on the Web, add a text object that is filled with blank spaces, created by pressing the 'Space Bar' and 'Enter' for line returns, to eclipse the subreport.
This workaround is applicable only to subreports that does not grow in size. For example, subreports that display only a chart or graph.
Steps to Add a Text Object over a Subreport
1. In the Crystal Reports Designer of the main report, insert a text object over the subreport.
2. Resize the text object to be the same size or a little larger than the subreport object on the main report.
3. Fill the text object with blank spaces created by pressing the 'Space Bar' and 'Enter'. This is necessary because resizing a text object without
the blank spaces will not maintain its size when it has been published on the Web.
====================
NOTE:
You can format the text object with a hyperlink to another report, another file or a URL.
====================
Now, when the Crystal report is previewed on the Web, the text object that fully eclipses the subreport will prevent the ability to drill down into it.
Regards
Girish

How to setup the Home Screen Application

Hi,
I'm using Nokia 5630 XpressMusic.
When I goto Menu->Settings->Settings->General->Personalisation->Standby Mode->Home Screen Application, there is a list of application available for selection(Mark/UnMark) as below:
O Shortcut bar
O Calendar
O WLAN
O Contacts on OVI
O Contacts bar
I will be able to check the applications that I wish to appear on the Home Screen. My question is how to setup a list of application available for selection. For example,
O Shortcut bar
O Messaging
O WLAN
O Calculator
O Web
Pls advise!
Regards,
Toyogo

Hi,
to switch on and off the mode go to menu- settings- main display -active standby - active standby mode - on or off.
Sorry, I cannot get the option path you mentioned. I'm using Nokia 5630 model which is based on S60 3rd Edition software. When I goto main menu->settings: there are 4 options: "General", "Phone", "Connection" and "Applications"; I goto "General", there are "Personalization", "Date and time", "Enhancement", "Security", "Factory settings", "Positioning". I goto "Personalization", there are "Display", "Standby mode", "Tone", "Themes", "Language","Voice commands". I goto "Personalization", there are "Home screen applicaitons", "Shortcuts", "Standby theme", "Notifica.light", "Email notification". I cannot find the option that allow me to change the list of applicaitons on "Home screen applications".
Pls indicate which option path that I should use.
Regards,
Toyogo.

How to setup the button inactive in pf-status?

who can tell me how to setup a button inactive in pf-status so that the button is inactive when the program is running?
there is a sample of button '&SUM' in PF-STATUS 'STANDARD'(lines 303) of program 'RM07MKON'.

Hi huanzhiyu,
In a custom (Z) program you can make PF status buttons and subsequently their OK codes inactive by using the following command:
SET PF-STATUS 'STANDARD' EXCLUDING '&SUM'.
And if you need to exclude more than one OK code
data: itab type sy-ucomm occurs 0,
wa type sy-ucomm.
move '&SUM' to wa. append wa to itab.
move '&ADD' to wa. append wa to itab.
set pf-status 'STANDARD' excluding itab.
Hope this helps.
Regards,
Aditya

How to Setup an ACL over a Command in solaris 2.6

Similar Messages

Maybe you are looking for