Making user policies stay in effect after logout

We enforce highly restrictive Windows group policies on our student users. Sometimes, a student is able to login offline, so they don't get the restrictive policy. In ZDM 7, we had the ability to make a user policy stay in effect after logout, which would keep the restrictions turned on until a user with less restrictions logged in. Is there a way to do this in ZCM 11? I looked in ZCC, and I can't see any option for this. FYI, we are using ZCM 11.2.2 MU 2.
Rick P.
Walla Walla Public Schools

Originally Posted by craig_wilson
Kevin,
Whoever told you that was clueless about GPOs.
User GPOs are removed at Logout.
Device GPOs are removed at Shutdown.
They are removed by Re-Applying the "Blank" GPOs located in
%zenworks_home%\bin\cachefiles\Orginal_GPO
(Or something like that w/o looking.)
These will only exist if a GPO is in place.
It would be possible to replace those GPO files with your locked down
files so when User/Machine GPOs are replaced with the "Blank" one, they
are actually using a Strong GPO.
On 2/15/2013 7:06 PM, RPummel wrote:
>
> kjhurni;2247277 Wrote:
>> I was told the policies were cached and would remain in effect unless a
>> new user with a DIFF policy logged in.
>>
>> I'll have to dig up my old emails as this was like over a year ago.
>
> This may be the theory, but it is not what we have observed in
> practice.
>
> Rick
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
Thanks Craig. Too bad it doesn't remain in effect on logout. Seems like a glaring security hole, IMO compared to how MS does it. OR how ZFD used to do it.
Guess an RMS is in order?

Similar Messages

How do I save changes to "Energy Saver" that stay in effect after rebooting.

I have changed the sleep settings for the hard disk and display for my iMac but after I shut down and the start up again, the settings are back to the default settings. How can I save these changes and avoid having to do this change every time I boot up?
Tim

Please read this whole message before doing anything.
This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, or by a peripheral device.
Set the Energy Saver preferences the way you want them.
Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards. Boot in safe mode and log in to the account with the problem. Note: If FileVault is enabled, or if a firmware password is set, or if the boot volume is a software RAID, you can’t do this. Ask for further instructions.
Safe mode is much slower to boot and run than normal, and some things won’t work at all, including sound output andWi-Fi on certain iMacs. The next normal boot may also be somewhat slow.
The login screen appears even if you usually log in automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin. Check the settings while in safe mode. Have they been reverted? If so, set them again. After testing, reboot as usual (i.e., not in safe mode) and verify that you still have the problem. Post the results of the test.

I installed the CC trial with an error window saying: Could not create the file '/Users/dranim/Library/Preferences/Adobe/After Effects/13.2/dummy'. That was the first window. Heres the second: After Effects can't continue: unexpected failure during app

I installed the CC trial with an error window saying: Could not create the file '/Users/dranim/Library/Preferences/Adobe/After Effects/13.2/dummy'. That was the first window. Heres the second: After Effects can’t continue: unexpected failure during application startup I paid for the month subscription of 29.99. It claims it is downloading again?! Am I missing something here? Why is this process so complicated? I need to get this resolved asap and start working.

I originally had Adobe Photoshop Extended, then upgraded to the Production Suite. I ran the Adobe Cleaner, and that uninstalled most Adobe products, including my existing Adobe install, and then I re-installed everything with the same error code. Since CS4 came with CS5, I've installed AE CS4, but would really like to upgrade because I'm new to Creative Suite, and not sure how CS4 integrates with CS5...CS4 After Effects installed perfectly. I do have a 64 bit system, and installing to an OCZ Vertex 2....every other suite installs perfectly, except AE. And I think that is the coolest program in the Suite. I thank you all so much for taking the time to help, I really want to get AECS5 running...I did try to install after doing the recommended items Adobe suggests for Exit Codes 6 and 7, including turning off many startups...
I'm baffled....
Ben

Problem with"Evaluate User Policies"sch task after the upgrade OIM R1 to R2

Problem with "Evaluate User Policies" scheduled task after the upgrade from OIMg R1 to OIM 11g R2
After the upgrade process is completed we are having issue with Access policy not triggering if rule is set to custom attribute
- We had a Rule with custom attribute (Policy='Full-Time') the value gets populated by event handler which triggers the access policy in OIM 11g R1.. which worked fine in OIM R1
After the upgrade the value is getting populated but even after running "Evaluate User Policy" the Access Policy is not getting triggered.
We tested creating a rule with other custom attribute,policy does not trigger even after running Evaluate User Policy schedule Task in this case too
but if we try creating rule with OOTB attributes(Country='US') it works fine the access policy got triggered after running Evalute User Policy
One more issue we observed is
- Evaluate User Policy value usr_policy_update is not updated still set to '1' even after the Access policy got triggered (as it worked when rule is set to OOTB attribute)
I believe after the evaluate user policy gets triggered for a user it should update the value from '1' to '0')
Please let me know if you have any idea..Thanks!

well, I overcame the issue by 'fooling' the installer: on second node, change the scan ip address to point to something else (ie, different ip address to the scan in the first node, cleanup then rerun root.sh, it went past the trouble stage, then I still have problem later at the time database creation. I think scan ip address has to be setup correctly (round robin thingy)
This is how i did the cleanup before rerun root.sh
/u01/app/11.2.0/grid/crs/install/rootcrs.pl -verbose -deconfig -force

After Effects (alert) : Impossible to create the file '/Users/JY/Library/Preferences/Adobe/After Effects/13.0/dummy'.

Hello everybodyI have few problems.
1. when I try to launch after effects (juste after the installation), I have this message and I don't know how to fix it
After Effects (alert) : Impossible to create the file '/Users/JY/Library/Preferences/Adobe/After Effects/13.0/dummy'.
2 I just dowload AE CC 2014 fort the first time and It say to me The trial version is over....
thank you

if your trial is over, it's over. there's no easy way to re-start a 30 day trial even if it ends before 30 days, Adobe trial software expired early
if you only had problem 1, you could probably resolve it by right clicking ae and clicking 'run as administrator'.

Logged Out session can be accessed again After logout (DAD authentication)

Hello,
Please find the details of my problem below:
SCENERIO:
Current Authentication: No Authentication (USING DAD)
Authorization: MYAUTH
Frequency: Once Per Session
declare
lv_retval boolean;
lv_srec pkg_myutil.r_sessionrectype;
begin
begin
-- This is NOT Apex Session. I am checking the entry in a table to make sure user is logged in
-- and the link is not opened directly. In short making sure user opened the Apex link from the
-- Oracle Forms application.
lv_srec :=pkg_myutil.get_session_info(:P1_SID);
if lv_srec.valid_session then
lv_retval := TRUE;
else
lv_retval := FALSE;
end if;
exception
when others then
lv_retval := FALSE;
end;
return lv_retval;
end;
The Application Security property Authorization is set to : MYAUTH
Logout Navigation Bar Entries-URL TARGET: http://myapp.mycompany.com/pls/apex/apex_custom_auth.logout?p_this_app=105&p_next_url=http://mycompany.com
( I cannot put this in the Authentication Logout URL as using -DATABASE- as sentry function (DAD authentication) gives me error: No functional attributes may be set when page sentry function is '-DATABASE-'.))
so i directly modified the navigation bar entry
Now I open the apex link from my forms application, and it Works fine. For example
http://myapp.mycompany.com/pls/QRYONLYDAD/f?p=105:1:2524984933940261::NO::P1_SID:0137099300:
The authorization function takes the P1_SID value and checks in database,finds the entry so returns TRUE to display the page 1 which i call Menu page.
If I click logout, it works and takes me to the Mycompany home page.
My question:
If save that link and try to access it again AFTER LOGOUT, it still displays the page. Although the session is logged out, how come it still allows to access the page? The authorization function also doesn't fire which would have prevented it atleast. How APEX knows it still a valid session even after logout happens?
I can see that Since there is DAD authentication, the login happens automatically........ but I cannot change that method. What other option do i have?
Please help.
Jay

1.) Code for the function:
Basically we are using a private DBMS_PIPE to pass a randomly generated string and read that pipe from Apex using get_session_info. Nothing to do with Apex Session. We just want to make sure the user opened the Apex link from the application.
function get_session_info (p_session_id varchar2) return pkg_myutil.r_sessionrectype is
rv_sessionrec eft.pkg_myutil.r_sessionrectype;
lv_status NUMBER;
lv_app_id varchar2(20);
lv_EMPID VARCHAR2(20);
lv_timeout BINARY_INTEGER := 0; --A timeout of 0 allows you to read without blocking. otherwise the pipe will keep waiting and our purpose won't be solved
lv_rmstatus number;
begin
begin
-- Valid Session theme: If the pipe doesnot exist means the url is not requested from inside the Forms application.
lv_status := DBMS_PIPE.RECEIVE_MESSAGE(p_session_id,lv_timeout);
IF lv_status <> 0 THEN
raise_application_error(-20003,'Error while receiving.Status = ' || lv_status);
END IF;
DBMS_PIPE.UNPACK_MESSAGE(lv_app_id);
DBMS_PIPE.UNPACK_MESSAGE(lv_EMPID);
if lv_EMPID is null then
raise_application_error(-20004,'User EMPID is null in the session info.');
end if;
-- construct return record
rv_sessionrec.session_id:=p_session_id;
rv_sessionrec.valid_session :=TRUE;
-- remove pipe
lv_rmstatus:=DBMS_PIPE.REMOVE_PIPE(p_session_id);
if lv_rmstatus <> 0 then
null; -- think what to do
end if;
exception
when others then
rv_sessionrec.session_id:=p_session_id;
rv_sessionrec.valid_session :=FALSE;
end;
return rv_sessionrec;
end get_session_info;
2.) I guess you are right. But doesn't Apex use the Userid and password hardcoded in the DAD? because it displays the username in DAD on the page footer. But It will authenticate everytime. So I want to put another layer so that my pipe verification code executes everytime which can decide whether to show the page or redirect to a error page.
If i put in a On-Load Before Header Process on Page 1 with the pl/sql code, is there a way there to redirect to different page? I couldn't think of a way to do it. Then i can remove the code from authorization scheme and add to the On-Load process?
Does this help any?
Thanks for your prompt response.
Thanks,
Jay

No keyboard at login window after logout

Hello all,
I'm just starting state testing and have been presented with a problem. When a student logs out of a machine in order to log into the testing account the login window won't accept input from the keyboard.
Bacground and details:
We have labs of computers using workgroup manager and open directory for management. In a normal lab the machine will boot to a login window. This is so that the preferences will be refreshed before a student logs in. The student will login as a local user (student) and procede to do whatever for the day.
We have recently started state mandated testing. I have set up an OD account which is very locked down and keeps the student on track while testing. This requires someone to log the normal user out and login as the OD user. This is where the problem arises.
About 50% of the time the keyboard will no longer funtion after logout. No keys of any sort work. The mouse still works. Even keystrokes through ARD do nothing. A end user is then required to reboot the system in order to do ANYTHING. This is not ideal for elementary kids.
From my digging in log files and poking around i noticed that the loginwindow process was hanging or crashing. If i kill the process the login window blinks and then works just fine. I'm sure i could write a logout script that drops a process into the background to kill the loginwindow process after so many seconds, but thats messy. Has anyone seen this? Any thoughts or solution? Only happens on a logout, never on an initial bootup.
I have found that 95% of these issues occur on Mac Mini's. I can consistantly replicate the issue on a mini. If i clone the mini to a macbook, i no longer have the problem (using carbon copy cloner). So either the hardware is part of the issue or the clone fixed something in the process.
OSX 10.5.8
/var/log/windowserver.log (on logout)
May 02 16:27:30 [252] kCGErrorIllegalArgument: CGXSetWindowListTags: Operation on a window 0x6 not owned by caller loginwindow
May 02 16:27:32 [252] CGXRestartSessionWorkspace: session workspace exited for session 256 ( on console )
May 02 16:27:32 [252] loginwindow connection closed; closing server.
May 02 16:27:33 [352] Server is starting up
May 02 16:27:36 [352] CGXMappedDisplayStart: Unit 0: no display alias property
May 02 16:27:36 [352] kCGErrorFailure: IOHIDSetCursorEnable returns -536870208
May 02 16:27:36 [352] kCGErrorFailure: Set a breakpoint at CGErrorBreakpoint() to catch errors as they are returned
May 02 16:27:36 [352] CGXPerformInitialDisplayConfiguration
May 02 16:27:36 [352] Display 0x41dc9d00: VirtualDisplay Unit 0; Vendor 0x756e6b6e Model 0x76697274 S/N 0; online enabled built-in (0,0)[1280 x 1024], base addr 0xb0021000
May 02 16:27:36 [352] AGCAttach: Couldn't find any matches
May 02 16:27:43 [352] kCGErrorIllegalArgument: CGXSetWindowListTags: Operation on a window 0x2 not owned by caller SecurityAgent
May 02 16:27:45 [352] kCGErrorIllegalArgument: CGXOrderWindow: Operation on a window 0x2 not owned by caller SecurityAgent

>kCGErrorIllegalArgument: CGXSetWindowListTags: Operation on a window 0x2 not owned by caller SecurityAgent
In those cases there may be threads and/or processes trying to do things with windows that they don't own. In other words, some programmers may have goofed up a little bit someplace.
But might try the one Helpful marked post here...
https://discussions.apple.com/thread/987826?start=0&tstart=0

GPO Run these programs at user logon not taking effect when configured in Computer Configuration section

[EDIT 20140207]:
I found that the default domain policy sets "run these programs at user logon" and (other than I expected) not BOTH GPO settings become active, but the setting from the default domain policy overrides the setting from my new GPO. So I think I have
found the answer myself.
When on our W2k8-R2 DC I create a new GPO and configure
"Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to "c:\windows\system32\notepad.exe" (just for testing) it won't take effect on Win 7 SP1, no matter what the Security
Filtering options are.
It seems other settings (in the very same GPO) become active but "run these programs at user login" from the computer policies section doesn't. I configure the very same setting in the section "user policies" instead and add "Authenticated
Users" to Security Filtering, the program will be started. But that's not what I need.
I can reproduce the issue, here are the exact steps:
create a new group "group-a" for later security filtering
create a new GPO
in the new GPO set "Computer Configuration/Policies/Windows Settings/Administrative Templates/System/Logon/run these programs at user logon" to "c:\windows\system32\notepad.exe"
for setting the scope remove "authenticated users" from Security Filtering and add "group-a" instead
link the GPO to the domain root
make "test computer" a member of "group-a"
on "test computer" run "gpupdate /force", reboot, log in
Issue: notepad is not being started.
What I'm aiming for is obvious: Depending on the membership of group-a I want to configure certain programs that should be started whenever a user logs in.
gpresult /R returns that it would be applying the GPO. (It actually is but the setting "run these programs at user login" is not being applied.)
For debugging I started MMC / RSoP on one of the machines on which the GPO should have been applied and found that "run these programs at user login" is not set (which seems to be the reason why the GPO won't work on the machines).
Searching the web I found similar reports
[1] [2] but no solution was found and the user used a workaround instead.
If I change the GPO so that I use the very same setting in "user configuration" instead of "computer configuration" it works as long as I add "authenticated users" to the Security Filtering. But then the GPO is applied to all users
and not only to the ones using computers which are members of group-a. According to this howto [3] I should not remove "authenticated users" but alter the security setting instead. However, the howto seems to be aimed ad w2k3 and using Win2k8 I cannot
find security settings "apply" for "authenticated users" so I cannot remove that setting, there's only "read" or "read and modify".
So two questions:
1. Why doesn't it work when using "computer settings"
2. What about that Security Filtering with removing "authenticated users" and using group-a instead?
T.
[1] http://social.technet.microsoft.com/Forums/windows/en-US/0e280490-fba6-4ced-aba5-ae49c60e44bd/computer-gpo-run-these-programs-at-user-logon-not-working-as-intended-on-win7-clients?forum=w7itproinstall
[2] http://social.technet.microsoft.com/Forums/windows/en-US/8cb78bf8-33ec-461e-8604-32d82d016685/run-these-programs-at-user-logon?forum=winserverGP
[3] http://www.grouppolicy.biz/2010/05/how-to-apply-a-group-policy-object-to-individual-users-or-computer/

Hi,
sounds like you find the answer already.
If you have any further question, please feel free to let me know.
Have a nice day!
If you have any feedback on our support, please click
here
Alex Zhao
TechNet Community Support

Able to see web page using back button even after logout

Hi,
I have created a web application using creator.
I have disabled caching by putting following meta tags inside the <ui:head> tag to prevent caching of the sensitive web pages.
<meta http-equiv="pragma" content="no-cache"/>
<META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-CACHE"/>
<META HTTP-EQUIV="CACHE-CONTROL" CONTENT="NO-STORE"/>
<META HTTP-EQUIV="EXPIRES" CONTENT="-1"/>
<META HTTP-EQUIV="PRAGMA" CONTENT="NO-STORE"/>
But after logout when the user clicks on the back button the user is still able to see the previous page visited. Is there any work around for this? I am using firefox. Have not checked whether this happens in other browsers or not.
Would really appretiate if you help me.
Regs,
Shastri.

I understand that this question has been asked multiple times and till now my search for any possible workaround for the issue has been futile. If anybody out there knows or finds a work around, please let me know.
Thanks in advance.
-Shastri

11.2.3a - Unable to edit exsisting xp user policies

Maybe I could get some help here. I am currently unable to edit XP group user policies from my zenworks 11.2.3a zone. All policies were "minted" uner the 11.2.2 version. I was able to edit policies no problem before the 11.2.3a Update. All machines have the 11.2.3a Group Policy helper activeX control installed on them (Fresh images not upgrades). Here are the problems I am having
1. When the group policy editor opens, all my policies are set to "Not Configured", even though these are active working policies with many items configured
2. Once in a ten or so tries, the group policy editor opens the ADM's correctly. I am able to configure the needed settings. The group Policy editor closes and echoes back theat the "Settings were successfully imported". The problem here is that the "upload button" stays dimmed out and I am unable to uplaed the configured policy.
Not really to sure what is going on.

mdymes wrote:
>
> Maybe I could get some help here. I am currently unable to edit XP
> group user policies from my zenworks 11.2.3a zone. All policies were
> "minted" uner the 11.2.2 version. I was able to edit policies no
> problem before the 11.2.3a Update. All machines have the 11.2.3a
> Group Policy helper activeX control installed on them (Fresh images
> not upgrades). Here are the problems I am having
>
> 1. When the group policy editor opens, all my policies are set to
> "Not Configured", even though these are active working policies with
> many items configured
>
> 2. Once in a ten or so tries, the group policy editor opens the ADM's
> correctly. I am able to configure the needed settings. The group
> Policy editor closes and echoes back theat the "Settings were
> successfully imported". The problem here is that the "upload button"
> stays dimmed out and I am unable to uplaed the configured policy.
>
> Not really to sure what is going on.
I've seen something like this in earlier versions as well - in my case
it was the version of the browser I used and the security settings of
this. What browser do you use?
Do you see the same if you use the ZCC from antoher server?
Niels
A true red devil...

Netboot user profiles are not persitent after reboot

Hello,
we are migrated our environment to Mountain Lion Server and Netboot Clients also with Mountain Lion. User profiles are located on the Server.
If Users change some profile settings like default browser or standart application for opening files, these settings are persistent until the user reboot the machine. After that, all settings reverted to default. User permissions looks like it should. Also if some settings would be changed inside Safari proberties like search machine or startup page, these settings will be stay after the reboot. :-( Some other not.
Any sugestions where i have to look?
Thanks and regards.
Joris

Hey Brian,
we use Netboot ... yes but every User which is log in to the netboot client get an own Network Home Directory mapped.
I know that changes on the OS not stay persistant inside the Netboot OS. But changes on the UserProfiles, like default Browser or somthing else, are also reseted after the reboot. I think they should saved in the UserProfiles and stay persistant if the user log in again after the reboot?
Regards

Evaluate user policies

Hi All
I am facing an issue which should obviously have a solution and is very important a.Please post immediatly any solutions,workarounds or referneces to it if you are aware.
1. I have a group A which is goverened by an Access Policy
2. This Access Policy is provisioning Resources RA,RB,RC.
3. A user UserA is added to the group. The resource profile of the use now has three resources RA,RB,RC.
4. I now added another( new )resource RD to he Access Policy . Now the Access policy must provision RA,RB,RC,RD.
Now my question is , what do i perform for the existing users in the group to get the new resource RD?
Work arounds tried:
1. I have Retrofit Access Policy checked.(when the access policy is created)
2. I saw somewhere in the forum , that we have to run a scheduled task called Set User provisioned date. Which didn´t workout.
Please give me some clean solution on this. Is this really not an OIM OOTB feature? Does it need any configuration which is not published?
Thank you
Regards
Shashidhar

"I am currently using Evaluate user policies only.when there arfe more number of users this is being a very costly operation.
this is really making the system slow. is this the only way?can we not limit this task only to changed policies?"
As far as I can tell you only have two options:
For a small number of users, manually query up the users in OIM and click the "Edit" button on the User Details screen and then click "Save" (no other changes). This should evaluate the current access policy against the User and provision any missing resources.
Otherwise, for a large number of users, schedule the "Evaluate User Policies" out of your normall business hours (I wouldn't expect that you would normally be doing lots of changes to your access policies during the course of a normal business day unless you have an unusual arrangement with your access policies).

OIM 11 - Error while running scheduled job "Evaluate User Policies"

Hello,
We are trying to run the OOTB scheduled job " EValuate User Policies" with the default parameters. Job history shows the execution status success but diagnostic logs throw the following error. And the users donot get provisioned to their resources based on the access policies.
We are on OIM 11 BP05.
[2013-01-30T10:11:47.072-05:00] [oim_server1] [NOTIFICATION] [IAM-0080006] [oracle.iam.platform.kernel.impl] [tid: Thread-1033] [userId: oiminternal] [ecid: 3f3dc64898fb7625:-13c8cd5d:13c88a6943c:-8000-0000000000000002,1:26684] [APP: oim#11.1.1.3.0] Orchestration process moved to failed stage, and the corresponding error is - {0}[[
oracle.iam.platform.kernel.EventFailedException: Operation - EVALUATE_POLICIES that is submitted as part of the orchestration is not supported.
at oracle.iam.platform.kernel.impl.EntityDefaultActionHandler.execute(EntityDefaultActionHandler.java:53)
at oracle.iam.platform.kernel.impl.DefaultActionHandler.execute(DefaultActionHandler.java:41)
at sun.reflect.GeneratedMethodAccessor5717.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.iam.platform.kernel.impl.EventHandlerDynamicProxy.invoke(EventHandlerDynamicProxy.java:30)
at $Proxy254.execute(Unknown Source)
at oracle.iam.platform.kernel.impl.OrchProcessData.runActionEvents(OrchProcessData.java:1036)
at oracle.iam.platform.kernel.impl.OrchProcessData.runEvents(OrchProcessData.java:644)
at oracle.iam.platform.kernel.impl.OrchProcessData.executeEvents(OrchProcessData.java:227)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.resumeProcess(OrchestrationEngineImpl.java:764)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.process(OrchestrationEngineImpl.java:519)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.orchestrate(OrchestrationEngineImpl.java:459)
at oracle.iam.platform.kernel.impl.OrchestrationEngineImpl.orchestrate(OrchestrationEngineImpl.java:378)
at oracle.iam.accesspolicy.impl.AccessPolicyServiceInternalImpl.evaluatePoliciesForUser(AccessPolicyServiceInternalImpl.java:78)
at oracle.iam.accesspolicy.api.AccessPolicyServiceInternalEJB.evaluatePoliciesForUserx(Unknown Source)
at sun.reflect.GeneratedMethodAccessor5730.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy574.evaluatePoliciesForUserx(Unknown Source)
at oracle.iam.accesspolicy.api.AccessPolicyServiceInternalEJB_bgsblp_AccessPolicyServiceInternalRemoteImpl.__WL_invoke(Unknown Source)
at weblogic.ejb.container.internal.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
at oracle.iam.accesspolicy.api.AccessPolicyServiceInternalEJB_bgsblp_AccessPolicyServiceInternalRemoteImpl.evaluatePoliciesForUserx(Unknown Source)
at sun.reflect.GeneratedMethodAccessor5727.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
at $Proxy164.evaluatePoliciesForUserx(Unknown Source)
at sun.reflect.GeneratedMethodAccessor5726.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
at $Proxy421.evaluatePoliciesForUserx(Unknown Source)
at oracle.iam.accesspolicy.api.AccessPolicyServiceInternalDelegate.evaluatePoliciesForUser(Unknown Source)
at com.thortech.xl.schedule.tasks.tcTskUsrEvaluatePolicies$PolicyEvalWorker.run(tcTskUsrEvaluatePolicies.java:319)
at java.lang.Thread.run(Thread.java:662)
at com.thortech.xl.scheduler.tasks.SchedulerBaseTask$XLSchedulerThread.run(SchedulerBaseTask.java:157)
[2013-01-30T10:11:47.081-05:00] [oim_server1] [NOTIFICATION] [IAM-0080046] [oracle.iam.platform.kernel.impl] [tid: Thread-1030] [userId: oiminternal] [ecid: 3f3dc64898fb7625:-13c8cd5d:13c88a6943c:-8al.SessionRemoteMethodInvoker.invoke(SessionRemoteMethodInvoker.java:40)
        at oracle.iam.accesspolicy.api.AccessPolicyServiceInternalEJB_bgsblp_AccessPolicyServiceInternalRemoteImpl.evaluatePoliciesForUserx(Unknown Source)
        at sun.reflect.GeneratedMethodAccessor5727.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:597)
        at weblogic.ejb.container.internal.RemoteBusinessIntfProxy.invoke(RemoteBusinessIntfProxy.java:85)
        at $Proxy164.evaluatePoliciesForUserx(Unknown Source)
        at sun.reflect.GeneratedMethodAccessor5726.invoke(Unknown Source)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
        at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:198)
        at $Proxy421.evaluatePoliciesForUserx(Unknown Source)
        at oracle.iam.accesspolicy.api.AccessPolicyServiceInternalDelegate.evaluatePoliciesForUser(Unknown Source)
        at com.thortech.xl.schedule.tasks.tcTskUsrEvaluatePolicies$PolicyEvalWorker.run(tcTskUsrEvaluatePolicies.java:319)
        at java.lang.Thread.run(Thread.java:662)
        at com.thortech.xl.scheduler.tasks.SchedulerBaseTask$XLSchedulerThread.run(SchedulerBaseTask.java:157)
Any answer is highly appreciated.
Thanks,
MBiswal

Ok, did you reimported the /metadata/iam-features-accesspolicy/event-definition/EventHandlers.xml from the BundlePatch folder?
Have you followed Addendum to OIM 11.1.1.5.6 Bundle Patch 06 Readme (Doc ID 1543504.1)?

Front Panel objects do not stay in place after saving, closing, and reopening the VI.

I have been working with a couple of versions of a main VI. The original VI was given to me so that I could add additional functionalities to it. I had been designing the front panel of the latest version of the VI on a Dell laptop running Windows 7 and LabView 2011 SP1 using a monitor with a resolution of 1920x1080. My booleans, numerics, and plots on the front panel had always stayed in place after saving, closing, and reopening the VI. Once in the field, I connected my laptop to a cRIO9073 and used my laptop screen with a resolution of 1366x768 to operate the VI. I made some changes to the VI, saved it, and reopened it. This time I noticed that the front panel objects had become overlapped, resized, and generally rearranged. I tried fixing the objects but I noticed that they reverted back to the incorrect positions after saving and reopening the VI. I was successful in keeping the objects in position a couple of times, but when I would open the VI at a later time, the objects were again rearranged. This is happening on both my monitor and laptop screen. The original version of the VI, however, does not behave this way and I have opened it on both my monitor and laptop screen. In this version, the front panel objects always stay in place. Both VI's have the same window size properties. Could I have corrupted the latest version of my VI somehow? Below are screenshots of the front panels of both VI's.
Attachments:
Blender Controller Original.PNG ‏140 KB
Blender Controller.PNG ‏203 KB

Hi Miguel,
It is possible to programmatically set or change the position of front panel objects. (for example: http://digital.ni.com/public.nsf/allkb/4D0DA06B43195B3F862572F3000AF2D3?OpenDocument) However, if you haven’t intentionally done that, it seems unlikely that it is the problem.
Have you tried copying the entire block diagram in to a new VI to see if the problem persists? While it is unlikely, you are right that it is possible for VIs to become corrupted. I’ve never heard of a situation like this except in the situation where the settings Tom had you check have been changed. Here is some information about those settings:
http://digital.ni.com/public.nsf/allkb/7567EF257B9CFDF986256F630073228F?OpenDocument
Since there was no rearrangement when you copied the front panel to a new VI, you might try copying the block diagram a little bit at a time to see if there is some particular part of it that creates the problem somehow.
K. Johnson

[SOLVED] systemd/cron as user: timer doesn't start after boot

Hello,
I've tried to follow the wiki's systemd/cron functionality article to have a systemd service to run hourly.
Everything seems to be working ok, except that the hourly timer doesn't start automatically : I have to issue a
systemctl --user timer-hourly.timer start
command every time I start the machine to get the timer running.
Can you help me understand what I'm missing to get the (user) timer to start automatically after boot?
Thanks!
My setup consists of the following files:
/home/myuser/.config/systemd/user:
drwxr-xr-x 2 myuser users 4096 Jun 25 17:30 basic.target.wants/
-rw-r--r-- 1 myuser users 217 Jun 25 10:08 db_backup.service
-rw-r--r-- 1 myuser users 232 Jun 25 10:08 test.service
-rw-r--r-- 1 myuser users 61 Jun 19 12:14 timer-hourly.target
drwxr-xr-x 2 myuser users 4096 Jun 25 10:10 timer-hourly.target.wants/
-rw-r--r-- 1 myuser users 134 Jun 19 12:14 timer-hourly.timer
/home/myuser/.config/systemd/user/basic.target.wants/:
lrwxrwxrwx 1 myuser users 50 Jun 25 10:08 timer-hourly.timer -> /home/myuser/.config/systemd/user/timer-hourly.timer
/home/myuser/.config/systemd/user/timer-hourly.target.wants/:
lrwxrwxrwx 1 myuser users 49 Jun 13 15:51 db_backup.service -> /home/myuser/.config/systemd/user/db_backup.service
lrwxrwxrwx 1 myuser users 44 Jun 25 10:10 test.service -> /home/myuser/.config/systemd/user/test.service
timer-hourly.timer:
[Unit]
Description=Hourly Timer
[Timer]
OnBootSec=5min
OnCalendar=hourly
Unit=timer-hourly.target
[Install]
WantedBy=basic.target
timer-hourly.target:
[Unit]
Description=Hourly Timer Target
StopWhenUnneeded=yes
test.service:
[Unit]
Description=Run a test (echo) job every hour
Wants=timer-hourly.timer
[Service]
Nice=19
IOSchedulingClass=2
IOSchedulingPriority=7
ExecStart=/usr/bin/python /home/myuser/test_service.py
[Install]
WantedBy=timer-hourly.target
db_backup.service:
[Unit]
Description=Backups databases
Wants=timer-hourly.timer
[Service]
Nice=19
IOSchedulingClass=2
IOSchedulingPriority=7
ExecStart=/home/myuser/source/db_backups/db_backup.sh
[Install]
WantedBy=timer-hourly.target
test_service.py is a simple python script that appends the current time to a file, to check if the service is being run by the timer. (it is after I start the timer after boot, and runs correctly every hour)
db_backup.sh is a script that dumps a database into a text file in a mercurial repository, commits the change and pushes it to backup locations.
Last edited by fede (2014-06-25 21:06:09)

Have you tried this:
systemctl --user enable timer-hourly.timer

Making user policies stay in effect after logout

Similar Messages

Maybe you are looking for