How to setup User-level LaunchDaemons and scp/rsync

We are trying to rsync/scp scripts from a Xserve 10.6 (just installed) to an Xserve 10.4, both of which which run scientific models, and transfer output files between systems automatically. These scripts must start automatically on reboot. This is easily done via cron jobs on our older Xserves.
Taking the plunge into converting cron jobs to launchd jobs has, for the most part, gone relatively smoothly. However, I am unable to locate instructions/examples on how to do the following:
While it is possible to set up a LaunchDaemon *.plist on a System(root) level by placing it in /Library/LaunchDaemons, it is unable to do an scp or rsync (without needing the password), because it does not have a root id_dsa.pub installed on the remote Xserve (I really do not want to do that!). An scp/rsync job should be done at the user level.
According to the man pages, there is no such thing as a ~user/Library/LaunchDaemons, only ~user/Library/LaunchAgents, which if I understand correctly, are only executed when the user logs in.
So how do I permit user-level scp/rsync operations (easily done in cron) using launchd?

Thank you for your comment and suggestion. I will give your suggestion a try. However, it seems the question is still open:
If a user wants to write a program/script that does an scp/rsync that transfers a file from one host to another (assuming the .ssh keys are properly set up), and put it into a launchd process that executes like it would under a cron (i.e., they do not need to be logged in, and it persists after a reboot), how is this accomplished without using the root-level /Library/LaunchDaemon?
Am I miss-informed that a users LaunchAgents are executed only when the user logs in?
At least in the scientific arena, using a cron to transfer files is a very regular practice. It would be a major headache if the system administrator had to manually add each users launchd files to /Library/LaunchDaemon

Similar Messages

How to refresh user level schema in apps

Guys.
how to refresh user level schema in oracle apps, My DB is 10g and apps version is 11.5.10.2 and OS: HP UX, Can any one give me some detail explanation.
Thanks

I would recommend Datapump over Export/Import because it is faster and allows you to restart the job in case it failed.
In addition to Export/Import/Datapump, you can use Transportable Tablespaces with RMAN.
Creating Transportable Tablespace Sets from Backup with RMAN
http://download.oracle.com/docs/cd/B19306_01/backup.102/b14191/ontbltrn.htm#CACDBIHC
Note: 371556.1 - How move tablespaces across platforms using Transportable Tablespaces with RMAN
https://metalink2.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=371556.1

URGENT...Help on User Level export and import

User level export and import -
In my db there are more than 20 users, i would like export only 2 users and they have constraints to other user tables in db.
what are the precautions I need to take before exporting ???
1. Disabling all constraints etc, .
2. Synonymns, Procedures , Triggers etc.
3. what are the parameters setting I should use for the export.
For Importing back into DB (same users) - What are the sequences/steps to follow..
1. what are the parameters setting I should use for the Import.
2. Precautions like Disabling Constraints...
3. Special actions for Synonyms/ Procedures.
Using Oracle 8.1.7 on Solaris.. Total DB Size is 13.3 GB
Any help will be appreciated....

See to it that u have the DBA PRIVS to exp/imp.
1.Grant export full database /import full database privileges to the user doing this.
2.If this is the first time u are doing this u have to run the scripts CATEXP.SQL and CATPROC.SQL to create the necessary views,datadictionaries as user SYS/INTERNAL.These instructions are also mentioned in the scripts comments at the beginning .
3.Also create the necessary tablespaces where u need to direct u'r imp.
4.select the interactive option where u can interact with
imp/exp process and u can do this selectively for users/tables/partitions and other preferences.
5.look out for the version compatibility of your .DMP files

How to assigned user to "B1iINDIRECT_MSS" and "b1i" licenses

Hello everyone!
Can someone tell my how to assing user to B1iNDIRECT_MSS and b1i licenses?
Thanks!

Hi,
Those licenses are only for B1 application. It is not there for assigning user license.
Thanks,
Gordon

How To Setup User Row Level Security In Answers From Values In Table

I am trying to setup row level security when a user logs into BI Answers. Basically I want the user to create any report that they would like but only see the data that they are associated to being retrieved in the Answer Report results. I have users stored in an Oracle authentication table where they have multiple values for schools that they can view. I have data in my RPD file that contain tables with multiple rows for schools. What I would like is to capture the associated school values for the user logged into BI Answers and place a filter on the data being retrieved in the RPD file to only show rows for the user's associated schools. Can I add a WHERE clause on the Business Model and Mapping layer of the RPD that would retrieve the multiple associated schools in my authentication table and filter/match them (IN clause maybe) to the school values in the RPD data being retrieved?
Thank you in advance for any information you my have to help me along,
Kyle

Turribeach,
I appologize, I did not use those exact words to search on in the forum. I should have and what I did use didn't turn anything up for my situation.
Thank you for the link. It helped me find the below link which describes the setup in detail and resolved my issue:
http://oraclebizint.wordpress.com/2008/06/30/oracle-bi-ee-1013332-row-level-security-and-row-wise-intialized-session-variables/
What I needed was a row-wise variable/initialization block that stored the multiple school values for my logged in user. I then edited the "Content" tab of the Logical Table Source with a WHERE/IN clause that filtered down the result set based on my variable/initialization block SQL query.
This solution works great!
Thanks again!

How to set users level security profiles and auditing?

hi,
We are using EBS 12( 12.0.6 ) with database 10g (10.2.0.3) on Linux redhat 4.
I want to set the all user level and site level security profiles like user login attempts, password attempts, case sensitivity, and all these
infos and attempts should be audit.
Please also explain the empact of audit on running system?
Thx

I want to set the all user level and site level security profiles like user login attempts, password attempts, case sensitivity, and all these
infos and attempts should be audit. https://forums.oracle.com/forums/search.jspa?threadID=&q=Profile+AND+Option+AND+API&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
https://forums.oracle.com/forums/search.jspa?threadID=&q=Profile+AND+Option+AND+Audit&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Please also explain the empact of audit on running system?https://forums.oracle.com/forums/search.jspa?threadID=&q=Auditing+AND+FND+AND+Profile+AND+Option&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
Try this in a TEST instance before you promote it to Production.
You will need to bounce the application services and enforce the users to sign off/on after setting those profile options.
Thanks,
Hussein

How to setup user's rights to modify Windows Firewall Rules?

I would like to have an account in my system that doesn't have any other administrative privileges besides rights to modify the Windows Firewall rules by means of Firewall API. How to setup a minimal set of rights for this account to do the task?
Right now what I see is that if I try to call INetFwRule::put_RemoteAddresses from an account without administrative privileges, the call fails with access denied. There is no means to find out access to what is needed. The call fails even if the process
is run under high integrity level.
I tried to setup global security audit, but there were no relevant events logged.
I tried to monitor the process with procmon, there were no any access denied events logged.
I tried to give the full access for this account to the correspondent registry keys. It didn't help.
I stepped firewallapi.dll in a debugger and found out that what fails is an RPC call to some COM interface proxy. I assumed that probably it is a remote call to some HNetCfg.FwRule method. I tried to add the user account to the HNetCfg.FwRule launch and
access permission ACLs in the DCOM configuration utility. It didn't help either.
Dear Microsoft, why did you do such a simple thing as settings user rights so difficult? Can you reveal the secret what rights and privileges I have to set?
Thanks in advance.
Dei nostra Matrix est.

Here is what I found so far.
The firewall service calls RpcServerRegisterAuthInfo to setup RPC security from FwRpcAPIsRegisterAuthInfo. It happens during registration of RPC interfaces in FwRpcAPIsInterfaceCreate. FwRpcAPIsInterfaceCreate is called from FwRpcAPIsInitialize. And FwRpcAPIsInitialize
is used from FwServiceAsyncStartupRoutine.
After calling FwRpcAPIsRegisterAuthInfo function FwRpcAPIsInterfaceCreate calls ConvertStringSecurityDescriptorToSecurityDescriptor, which converts a textual description of a security descriptor to some binary form.
So my guess is that access rights are hard coded inside mpssvc.dll and what I have to do is just to find the textual representation of the correspondent descriptor.
I found 8 descriptors inside mpssvc.dll:
O:SYG:SYD:(A;;RCWD;;;BA)(A;;RCWD;;;NO)
O:SYG:SYD:(A;;RCWD;;;S-1-5-80-2940520708-3855866260-481812779-327648279-1710889582)(A;;RCWD;;;S-1-5-80-3526382388-830156861-4107432654-3665941875-1028450966)
O:SYG:SYD:(A;;RCWD;;;S-1-5-80-62724632-2456781206-3863850748-1496050881-1042387526)
O:SYG:SYD:(A;;RCWD;;;S-1-5-80-979556362-403687129-3954533659-2335141334-1547273080)
O:SYG:SYD:(A;;RC;;;BA)(A;;RC;;;NO)(A;;RCWD;;;CY)
O:SYG:SYD:(A;;RCWD;;;BA)(A;;RCWD;;;NO)(A;;RC;;;CY)
O:SYG:SYD:(A;;RCWD;;;BA)(A;;RCWD;;;NO)(A;;RC;;;AU)
O:SYG:SYD:(A;;RC;;;AU)
I don't know yet which one corresponds to changing a firewall rule.
Dei nostra Matrix est.

OpenSSH: How to setup non-interactive SSH/SFTP/SCP

Hi,
Anyone has any idea how to setup/configure OpenSSH on Solaris (Client) & Windows (Server) for sftp/scp transfer in non-interactive host-based authentication.
I need to setup this for secure file transfer from a solaris client to a windows server without having to enter a password. My external script will run in crontab to tap on sftp/scp for file transfer.
Pls advise. thanks.

I'd go for key-based authentication and simply don't provide a password for the key. You're on your own about how to implement this on Windows, so far I wasn't even aware Windows had a SSH service.

How to setup older Flex SDK and AIR 1.5?

I found an older Flex app that I wanted to install. It looks like it uses Flex 3 SDK and Adobe AIR.
How do you setup a different SDK and use a different version of AIR? I would think the latest version of AIR would be backward compatible but it doesn't appear to be that way. It seems that the SDK version and the AIR version must match exactly or the app won't compile. Is this right?
Thanks,
-Westside

Thanks for your help, Flex harUI,
The first impression that comes to mind is that FP version is indeed only for the web browser plugin. Then, why does the official Flex 4.6 mobile development documentation have a link to that page that only speaks about the supported FP version in mobiles under the title "AIR requirements"??
This makes it way too confusing.
Do you know whether there is something like an equivalent matrix/list of mobile devices with their supported AIR runtime versions? I went a great deal in trying to keep my original app under 400kb... I didn't know that in the end it would end up weighing 9.5Mb... :S
Thanks again,

How to show users display name and email address in open social widget?

Hello experts,
Is it possible to retrieve users display name and email address with opensocial javascript e.g. Login widget seems to load user data (and userData.firstname) during the site init. Is this something that could be consumed or is there some opensocial data request that could/should be used. Any working sample widget spec would be appreciated.
Best regards,
Ville

Hi Ville,
in the logon widget, we also use the data retrevied from siteInit.loadData.data.user. However, this widget is part of the out of the box openSocial widgets, it is being released with the product code, not as a separate OS widget deployed on HANA Cloud Platform.
If you'll do window.parent.siteInit you'll probably will get the data you are looking for, but this isn't the official public API, so you can use it but we cannot commit on keeping this structure.
Why do you need this information in the widget level? Does your widget require authentication or is it for personalization needs?
The best way is to retrieve this info on the java side using HAHA Cloud Platform APIs and send them back to the client.
Look at this - SAP HANA Cloud Platform SDK >
Package com.sap.security.um.user
Interface:
User
This interface provides read access to user data and is an extension of Principal.
UserAttribute
The interface represents abstraction over a user general attribute, such as an e-mail address.
UserProvider
This interface represents the service interface which provides read access to a user implementation.
Inbal

How to delete users from Dev and Testing once it is deleted in Production

Sap Gurus,
Is there any automated way to delete the users from development and testing once it is has been deleted from production. i.e. when the administrator deletes the user from production after logging in then it should automatically delete the users from testing and development without logging on in these 2 systems (development and testing). Can anyone help me in resolving this issue.
I am very much thankful in advance..
Regards,
Kali

Rob,
Ok, you are right in that way I can allow only that person but I have to allow 2 persons at this time. i.e. If at all I have to allow one more person also how should I do it, and also what if the person uses different passwords in development and testing?
Thanks for your response Rob.
Kali.

How make the Top-level Navigation and Content Area in one page as a whole?

I want to make the Top-level Navigation and the Content Area in the one page as a whole displayed in user interface.In the default framework,the Top-level Navigation and the Content Area were contained in 2 pages, So the vertical scroll bar could only control the Content Area. I want to control the full page with one vertical bar like the page of "www.sdn.sap.com" Web.

Hi Jianguo,
One advantage of the external facing portal solution (SP14) is that the framework page is displayed in a single frame. Perhaps this could be of use to you.
Hope this helps.
Daniel

How To Create User-Defined DateTo and DateFrom?

This document https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/6ce7b0a4-0b01-0010-52ac-a6e813c35a84 describe techniques used to create BI Infocubes.
In chapter 4.4.2.4 Report only on data for constellations valid today and yesterday (comparable results) - today and yesterday.
...Report only on data for constellations valid today and yesterday (comparable results): Solution
Given an attribute–characteristic relation.
Define the dependent attribute as a time-dependent navigational attribute of the characteristic. Define
additionally user-defined DateTo and DateFrom time-dependent navigational attributes. Together with the
query key date and a filter on DateTo and DateFrom excluding your reporting time span, you will get the
desired result.
MatGr-SID From-User   To-User    From-Sys   To-Sys   Material   Material-SID
     910        01/1000       12/9999     01/1000    12/9999     AAA    001
     910        01/1000       09/1998     01/1000    09/1998     BBB    002
     920        10/1998       12/9999     10/1998    12/9999     BBB    002
     920        01/1000       12/9999     01/1000    12/9999     CCC    003
     920        01/1000       12/9999     01/1000    12/9999     DDD    004
     920        10/1998       12/9999     10/1998    12/9999     EEE    005
Report showing comparable results
Material group Rev 09/98     Rev 10/98
    X                  100             100
    Y                  200             200
HOW TO Create From-User   To-User attributes?

Hi Monica
Third party software is available,from AccessVia, that can be used to create and update templates. Sample sample sqt can help you to understand the required inputs (batchID, templateID, departmentID, locale).
Thanks
Himanshu

How to setup ftp with dreamweaver and windows server 2003

Does anyone know if there is a tutorial/article on settinp up Dreamweaver cs3 to use Windows server 2003 as an FTP server...
any assistance would be greatly appreciated...

I was able to figure out how to setup the ftp connection, connect to my home server, however,whenever i tried to upload the contents of my website to my server, nothing gets uploaded to the site. I tried putting one page at a time, nothing. tried everything, and still no joy. I can see everything on my local server which is a XAMP package, but nothing on my remote server. Do i maybe need to maybe have a WAMP or XAMP on the Windows Server 2003 or that should not matter. This is new to me so i am learning as i go along.
Another thing, i was able to create a subfolder in my c:\www.ftproot folder, i can see that folder on my local machine, i'm just not seeing the files in that folder when i do my 'put' with my files.

Problems with my account. How to setup a new one and copy all data in it?

I've had this Admin account called 'Alex' since my TiBook days. It was on a freshly installed Panther, but for some reason it had a few problems. Just within my own account, that is. My 'Alex' account happened to be the only Admin account; all the other accounts, three in number if I'm not mistaken, were Std accounts.
Problems I had back then included certain installers not running, or rather starting to bounce and then quitting before doing anything at all. I remember I had to use another account to install Final Cut Express 1.01.
When I got this new Powerbook I used Migration Assistant when first turning it on, and transfered my home folder using FW cable from the TiBook. Trouble is, the problems I had up to then got transferred, too! For example, now I cannot click on 'Burn' within iDVD5, or the whole thing will collapse (iDVD that is, not the OS!). Also, bought FaxSTF Pro X from Smith Micro, and I can't fax out anything! But, switch to another account on my Powerbook, things are smooth as silk.
I am contemplating the solution of setting up a new account for me and transferring all my files to that account, then delete my current, problematic one. I want the new account to also be called 'Alex' for short, to have the same long name (my full name, just like my current Admin account). I also would like it if it was possible to copy my Dock configuration, instead of having to re-compose it from scratch. I've got used to using it over the months, and would like to keep it for GUI reasons.
So, what would be the right order of doing things? Rename my current, bad, account, then create a fresh admin account, then change the ownership and privileges in everything in my home folder and move to the new account, then verify and finally delete my current account? Does all this make sense? Am I setting myself up for some sort of digital tragedy?
Thanks, people.

You know, I was thinking if I went ahead and just created a new account, then shipped all my Home folder under the new account and used chown to fix the ownership details, then most likely the problems of my current account would be transferred to the new one.
How about skipping all .plist files and other preferences? What if I only transferred my actual work documents from all software that I use, plus emails and what have you? Would that tend to minimize the chances of problems re-manifesting themselves in the new environment?

How to setup User-level LaunchDaemons and scp/rsync

Similar Messages

Maybe you are looking for