Permissions for host machine

hello,
I like to improve my applet so that it access a Server program via a client/server system.
I am thinking I should just write my own Server program and just open a socket to it on some port. I have two questions,
1) How do I set the proper permissions on my Host machine so the applet can connect to the Server program from elswhere on the Internet?
2) What would be the pro's and con's of using a Applet/Servet combo to do this? Or does Applet/Servlet not work like Client/Server?
thanks for sugessions....

Hi,
No permissions are required. All you need is a ServerSocket listening on some port. The only requirement is that the Applet must be connecting back to the server it came from. The browser's security mechanism will not allow the applet to connect to any other server unless it has a security certificate and the user gives permission.
I prefer the applet/servlet combo. The only difficulty is in maintaining state on the server side but you can do that through the data you pass back to the server. Also, with the applet/servlet communication there is no browser security limitation on connecting to a different server than the applet came from.
Hope this will help you.
Anil.
Developer Technical Support
Sun Microsystems Inc,
http://www.sun.com/developers/support

Similar Messages

10.9 Server, you do not have the necessary read.write permissions for Time Machine Service

Setting up 10.9 Server's Time Machine service when I try to backup from a computer on my LAN I get "you do not have the necessary read,write and [sic] append privileges on the selected network backup disk."
I am logging in as the admin user for the OS X Server install.
Confused.

You need to mount the sharepoint as its owner.

SCCM collection query to create ESX host machines

Hello Everyone
I am looking SCCM collection query to create ESX host collection. Any one can share the query to create EST host machines collection please

For the actual ESXi hosts you can't.
For host machines, that would be a query for all virtual servers, like this one:
select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.IsVirtualMachine = "True"
Make sure you limit the above query to servers collection or you can expand it to include servers, like this:
select SMS_R_System.ResourceId, SMS_R_System.ResourceType, SMS_R_System.Name, SMS_R_System.SMSUniqueIdentifier, SMS_R_System.ResourceDomainORWorkgroup, SMS_R_System.Client from SMS_R_System inner join SMS_G_System_OPERATING_SYSTEM on SMS_G_System_OPERATING_SYSTEM.ResourceId
= SMS_R_System.ResourceId where SMS_R_System.IsVirtualMachine = "True" and SMS_G_System_OPERATING_SYSTEM.Caption like "%server%"

I am running Lion 10.7.2 and I have an external drive hooked to my time machine. I can't rename folders and when trying, I get an error code 8076. The checkbox "ignore permissions for this device" does not show on volume info. Help please???

I am running Lion 10.7.2 and I have an external drive hooked to my time machine. I can't rename folders and when trying, I get an error code 8076. The checkbox "ignore permissions for this device" does not show on volume info. Help please???

The TIme Machine volume does not have that checkbox.
I think the issue is with your Finder...
Go to Finder "Go" menu hold the option key and choose Library. Then go to Preferences trash these files:
com.apple.finder.plist
com.apple.sidebarlists.plist
Then, restart, or log out and in again.
(You will have to reset a few finder prefs the way you like them.)

I have a lion server set up to host storage for time machine backups. Is there a limit to how many different computers can back up to the single server to back up. I am only backing up the users folders . The backup drive is an external Drobo with 6 TB.

I have a lion server set up to host storage for time machine backups. Is there a limit to how many different computers can back up to the single server to back up. I am only backing up the users folders . The backup drive is an external Drobo with 6 TB. Right now it seems to back up my users all day long. I set their time machine interval to every 5 hours but it still runs all day long and is very slow. Server is on a new Mac Server mini.

AFAIK, there is no user limit.. it is simply a question of the network load. AFP is a fairly clean protocol.. but TM is not.. it does a lot of testing of the backup.. infact your setting of 5hour gap could well make it worse.
I would sort out the clients that are doing 100GB backups to a different backup location.. no matter how fast your network.. 100GB takes time to backup.. and over wireless forever.. it will never end.
I guess some of these clients are on wireless?? I would separate the TM of wireless to those that are wired. No more than 4 or 5 wireless clients to a target device. Otherwise you are saturating your network with backup data. And use 5ghz.. so close by.. it is much faster than 2.4ghz and you will get much better transfer rates.

Need host string for xp machine (oracle 10.1.1..2)

Hi: my email address is [email protected] need host string or how to get information for host string.
Thank You
wayne

Hi
You can find the connectString under
ORACLE_HOME\..\NETWORK\ADMIN\tnsnames.ora file.
You should be able to see an entry that will look like this
ABC =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = XXXX)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = ORCL)
Here ABC is your connectString hence to connect to the database you will issue
SYSTEM/MANAGER@ABC
where SYSTEM=>USERNAME
MANAGER=>PASSWORD
ABC=>ConnectString
Hope it helps.
Rgds
Adnan

Folder permissions for sharing between users on the same machine

Hello,
I have several accounts on my MacBook and I want to keep some files private and some files shared with full permissions for everyone.
OS X standard behavior for the default Users/Shared folder is that everyone has read/write access to the folder, but if you create a new file there, then only the creating user has write access to that file.
I want to change that folder's behavior so that newly created files can be modified by everyone on default.
How would I do that?
Thanks.

Thanks, your answer helped me a lot. I found an even simpler method which doesn't require any extra applications.
Open console and navigate to the directory where your share directory is located, e.g. /Users/Share/
create the desired folder: mkdir public
set acl permissions for each user with: chmod +a "username1 allow flag1,flag2, ....." public/
check permissions with: ls -le
Example:
chmod +a "dev allow list, add_file, search, delete, add_subdirectory, delete_child, readattr, writeattr, readextattr, writeextattr, readsecurity, writesecurity, chown, file_inherit, directory_inherit" public/
This will give the user dev full access to that folder. Any file or directory created inside that folder by the user dev will also inherit the permissions of that folder.
Also, the advanced permissions override any other permissions. you can test that my making that folder inaccessible with chmod oga-rwx public/ and dev will still be able to access it because of the acl permissions.
exactly how i wanted it.

Computer Authentication /host/machine name using EAP on AP Problem

Hi All,
I have a wireless access point model 1242 with ACS server. Acs server is intigrated with windows domain. The user authentication is working ok but i would like to have a computer authentication setup. I am using PEAP with MS chapv2 on client machine and on access point using open authentication with EAP. ACS has its on certificate and client has the root certificate. I can see the acs server pulls the /host/machine name from AD but i am getting (EAP-TLS or PEAP authentication failed during SSL handshake) message on ACS server for computer authentication. What could be the problem? user authentication is working OK....
Does computer authentication require the EAP-TLS? I don't have client certificate in my setup.
I would be gratefull for any suggestion / help.

You did not mention whether your clients are running Windows or Mac OS (or some mixture of OS's)? If you are running in a pure Windows environment, it is very easy to enable PEAP machine authentication. It sounds like you have properly enabled machine authentication on the client side (since you are seeing host/machine auth attempts in the ACS log), but have you enabled machine authentication on the ACS server?
Which version of ACS are you running (hopefully 4.2).
Read up on this:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/UsrDb.html#wp354014
ACS supports EAP-TLS, PEAP (EAP-MS-CHAPv2), and PEAP (EAP-TLS) for machine authentication. You can enable each separately on the Windows User Database Configuration page, which allows a mix of computers that authenticate with EAP-TLS or PEAP (EAP-MS-CHAPv2). Microsoft operating systems that perform machine authentication might limit the user authentication protocol to the same protocol that is used for machine authentication. For more information about Microsoft operating systems and machine authentication, see Microsoft Windows and Machine Authentication.
Windows User Database Support
ACS supports the use of Windows external user databases for:
•User Authentication—For information about the types of authentication that ACS supports with Windows Security Accounts Manager (SAM) database or a Windows Active Directory database, see Authentication Protocol-Database Compatibility, page 1-8.
•Machine Authentication—ACS supports machine authentication with EAP-TLS and PEAP (EAP-MS-CHAPv2). For more information, see EAP and Windows Authentication.
•Group Mapping for Unknown Users— ACS supports group mapping for unknown users by requesting group membership information from Windows user databases. For more information about group mapping for users authenticated with a Windows user database, see Group Mapping by Group Set Membership, page 16-3.
•Password-Aging— ACS supports password aging for users who are authenticated by a Windows user database. For more information, see User-Changeable Passwords with Windows User Databases.
•Dial-in Permissions—ACS supports use of dial-in permissions from Windows user databases. For more information, see Preparing Users for Authenticating with Windows.
•Callback Settings—ACS supports use of callback settings from Windows user databases. For information about configuring ACS to use Windows callback settings, see Setting the User Callback Option, page 6-6.

Permissions for website directories/files & Share Points for managing files

Hello.
I'm wondering if anyone could lend some advice in how to best set up permissions, both POSIX and ACLs, for the following setup?
#1 - Permissions for directories and files for hosting a website (via OS X 10.5 "Web" GUI). Basically, I'm curious as to what people suggest for the basic files for the directory (and sub-directories and files) that go into the backend (html, images, etc.) of a website? I'm going to be being files over from another machine, so I may need to propagate these permissions once they've been moved over?
#2 - Permissions (ACL) for allowing users to access these directories and files for editing, etc. via client Macs on our LAN (this server is going to be a development web server for initial building/testing).
Any advice would be much appreciated!
Thanks,
Kristin.

Hi Kristin,
The "other" or "everyone" group should not have "write" permissions to any files under your website document root folder. The Apache web server runs as user "www" ... "www" is usually in the "everyone" group, thus allowing read-only access to the website.
You can set up the owner of your files to an admin account. Perhaps set up a group with write permissions to the file shares where your website files are.
You must first analyze who should have access to what, base your groups on that ...
Ted

Wrong home directory permissions for new users

Hi everyone.
I reinstalled my laptop the other day and ran into a rather strange problem: after a system update new users had their permissions totally screwed. It took me 3-4 reinstalls to notice, as i was also playing with lvm2 &co. Anyway, on fresh installations from either 2008.06 or 2009.02, everything works fine. As soon as i update to the latest package versions (including 2.6.29 kernel) and create a new user, permissions on the new home directory are screwed up to the point where the user can't access it.
Old directory permissions:
drwx------ 33 jasn users 4,0K 17. Apr 13:21 jasn
drwx------ 2 root root 16K 17. Apr 12:15 lost+found
New directory permissions:
drw-rw--w- 2 jasm users 4,0K 17. Apr 13:43 jasm
drwx------ 33 jasn users 4,0K 17. Apr 13:21 jasn
drwx------ 2 root root 16K 17. Apr 12:15 lost+found
Logging in to "jasm" results in
No directory, logging in with HOME=/
[jasm@host /]$
The whole mess can be fixed by changing the permissions on the home directory, but all that can't be on purpose, can it? I also don't know which package update (if it even was caused by one) causes this behaviour and if this only happens to me, so i didn't file a bug report.
Has anyone already seen this? I solved it after 1.5 days of puzzled (and strangely unsuccessful) googling and reinstalling, so perhaps someone who runs into the same problem can use this to fix it.
Last edited by JASN (2009-04-17 17:09:34)

umask is not really the correct thing to do in this case, as this resets the permissions for every file the user creates. Afaik, the umask setting has to be installed on every machine via the launchd-user.conf file (to contain simply: umask 002) (or whatever is appropriate for your facility), as umask is a property of the process, not the connection.
What might work better for your problem is make the homedirs world and group non-readable. That way the user creates files within their homedirs and anywhere below, but everyone else can't read them regardless of the files' permissions because the directory itself is unreadable.

Hyper-V could not replicate changes for virtual machine 'machinename': The connection with the server was terminated abnormally (0x00002EFE).

I have a 3 node cluster that has replica setup to replicate to another cluster off-site.
Suddenly one of the servers is not replicating with the error:
Hyper-V could not replicate changes for virtual machine 'machinename': The connection with the server was terminated abnormally (0x00002EFE). (Virtual Machine ID CC0FD4CC-F9B7-4C68-ABE8-B7D52A87899F)
All other servers are replicating fine so there cannot be a permissions or connectivity issue between the 2 clusters.
This server has 2TB of data so I'd rather not have to start the replication again.
Does anyone have any pointers?
Thanks.

Hi drensta,
Based on my knowledge , "hyper-v replica broker " is needed for failover cluster replica .
Here is a link for "Why is the "Hyper-V Replica Broker" required?"
http://blogs.technet.com/b/virtualization/archive/2012/03/27/why-is-the-quot-hyper-v-replica-broker-quot-required.aspx
Hope this hleps
Best Regards
Elton Ji
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

I am trying to install Mavericks on my McbookAir, but it won't install, saying that my hd is used for time machine backups. I have an external HD connected to my mbAir that I'm using for time machine.

2012 Macbk air, with OSX 10.8.5. See my question above. Mavericks won't install on my Air's HD, says that both the HD - AND - the external HD (which has a different name from the laptop HD) are used for time machine backups. I've deleted my time machine plists, restarted, repaired permissions, turned time machine off, repeatedly selected the external drive in time machine preferences. HELP. (Install went perfectly on my desktop Mac, which also has an external HD for time machine).

I need to add that the only place I have the "Backups.backupdb" folder is on my backup external disk, and it's not on my HD :-( . If it were, I'd delete it!

Display files/directories of a remote system (RIO) on a host machine (PC)

Hello,
Please assume that we are discussing software built on the standard "Labview FPGA Control on Compact RIO" sample project. The host is a standard PC running LV14 Fall edition, the remote system is an sbRIO-9636 having an SD card and a USB HDD attached. The objective is process control. The process being controlled is not relevant to the question.
This question is about implementing the following functionality: the user operates a host machine running a Labview user interface vi (UI Main.vi) locally on the host machine. Part of this vi must offer the user a built in dialogue (some express vi or another) or custom dialogue (a bespoke vi displayed on demand). The dialogue must display the directories and files of the remote system which runs RT Main.vi and it must allow the user to select a single XML file on the remote system (which contains some generic configuration information). The name of the file will then be passed to the remote system and the remote system will act to open it and populate some configuration variables.
I am sure that a widely used solution exists for this problem but I've not found the right words to type into my favourite search engine yet to produce the result. I propose the following:
1) User clicks a "select config file" button on UI Main.vi
2) The UI Main.vi event loop enqueues a message on the UI Main message queue based on the value change event caused by the button press
3) The UI Main.vi message loop enqueues a separate message on to the "UI Command Stream" network stream
4) The RT Main.vi, RT Loop - UI Commands.vi subvi receives the message from the stream and enqueues it on the RT Main.vi message queue
5) The RT Main.vi message loop performs some functions to read the disk structures, directories and file names from the RT system
6) The file and directory name data in (5) is converted to a variant and is passed along with a suitable message into the RT Writer network stream
7) The UI Main.vi periodically reads the RT Writer network stream (it's in the "monitoring loop") and enqueues the received message (from 6) into the UI message queue
8) The UI Main message queue populated the UI Main front panel with the data
9) The user selects the directory and file they desire and clicks an "ok" button
10) The ok button click causes the event loop of UI main to enqueue a message in UI Main.vi's message queue due to the value change on the ok button
11) The UI Message loop enqueues a message on to the "UI Command Stream" network stream with the selected fully qualified file name of the selected file as the data (stored as variant)
12) The RT Main.vi, RT Loop - UI Commands.vi subvi receives the message from the stream and enqueues it on the RT Main.vi message queue
13) The RT Main.vi message loop opens the XML file and populated the appropriate variables with the configuration options therein.
The user should be able to cancel the dialogue and avoid using a configuration file but I have not delt with that here.
Now for the questions:
1) Is this a logical approach?
2) Are there any suggestions for a better way?
3) Any links to some pre-written code that will allow me to impliment all or part of this with minimum effort (I'm thinking here of the dialogue box bit rather than the network streams and events bit as those structures are extant and have lots of bespoke code already in them)?
Thanks,
James
Solved!
Go to Solution.

Hi Bob,
Thanks for your input. You're right I have used network streams.
I implimented more or less what I said in my original post. It works. My main objective was to keep all the config stuff, and data for the particular target on the target's SDCard. On reflection that did make my life much harder than keeping stuff on the host.
It is more (quite a lot more) involved to keep the config files on the target and send directory info etc. back to the host on demand. If I was to do this again I would probably keep the config files on the host machine and keep them in Dropbox or a Google drive so that if I had more than one host to work from (Work PC, Home PC and Laptop...) I would have all my files with little effort. Still I didn't konw that when I started.
Thanks,
James

Remote Desktop Service Manager - configure permissions for Remote Desktop Users to Send Message, Disconnect, Logoff

Hello, dear colleagues.
We are using Windows Server 2012 R2 as Remote Desktop Server. Also use Windows Server 2008 R2 with Remote Desktop Service Manager to control RDS user sessions (Send Message, Disconnect, Logoff, Query Info).
Send Message, Disconnect, Logoff options works only for users in Administrators group.
I can't to configure permissions for Remote Desktop Users, specific user or AD group.
To set permissions I'm running RDS Host Configuration on Windows Server 2008 R2 and connect to Windows Server 2012 R2. Then double-click
RDP-Tcp, Security tab, add specific user account , AD group or configure
advanced permissions
for Remote Desktop Users.
But, as I sad above, these options works only for users in Administrators group. How to make it work for Remote Desktop Users or specific user, AD group?
Thanks.
P.S. If move specific user from Remote Desktop Users group to Administrators group on
Windows Server 2012 R2 - it works.

Hi,
You can prevent administrators from changing the permissions for a connection by applying the
Do not allow local administrators to customize permissions Group Policy setting.
This Group Policy setting is located in Computer Configuration\Policies\Administrative Templates\Windows Components\Remote Desktop Services\Remote Desktop Session Host\Security
Apart there is one command with which you can set the permission for that check the related
article. Additionally checkthis
thread for more detail.
Hope it helps!
Thanks.
Dharmesh Solanki
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Error While Joining a domain.| Adding a virtual box machine to host machine's domain

Dear All,
I have a Virtual Box(guest) Where Windows Server 2008 r2 is installed.Virtual box is hosted by a machine which Uses Windows Server 2008 r2. Host machine is a domain controller.I have added guest to another domain
other than host.But whenever I tried to add guest machine to host domain It shows me following error(See below).
An error occurred when DNS was queried for the service location (SRV) resource record used to locate an Active Directory Domain Controller (AD DC) for domain "crmrc.com".
The error was: "No records found for given DNS query."
(error code 0x0000251D DNS_INFO_NO_RECORDS)
The query was for the SRV record for _ldap._tcp.dc._msdcs.crmrc.com
Could you please suggest me the solution for it?
Thanks and Regards,
Yusuf

Hello,
C:\Users\Administrator>ipconfig/all
Windows
IP Configuration
Host Name . . . . . . . . . . . . : MSCRM
Primary Dns Suffix . . . . . . . : crmrc.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : crmrc.com
Ethernet
adapter Network Bridge:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : MAC Bridge Miniport
Physical Address. . . . . . . . . : BA-AC-6F-3F-A3-51
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::8573:2122:495b:93bc%16(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.78(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 280669295
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-14-B1-48-BF-B8-AC-6F-3F-A3-51
DNS Servers . . . . . . . . . . . : 192.168.1.78
59.144.127.17
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel
adapter isatap.{39C0341C-67DC-405D-B8F4-25DA555D53C0}:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::5efe:192.168.1.78%12(Preferred)
Default Gateway . . . . . . . . . :
DNS Servers . . . . . . . . . . . : 192.168.1.78
59.144.127.17
NetBIOS over Tcpip. . . . . . . . : Disabled
Tunnel
adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
I suppose here that this is a DC/DNS server. I see that 59.144.127.17 is
configured as a DNS server. If 59.144.127.17 is
a public DNS server then please add it as a forwarder.
Once done, run ipconfig /registerdns and restart netlogon service on the DC.
Windows
IP Configuration
Host Name . . . . . . . . . . . . : MYLYC
Primary Dns Suffix . . . . . . . : ow.pearl
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : ow.pearl
Ethernet
adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Intel(R) PRO/1000 MT De
Physical Address. . . . . . . . . : 08-00-27-43-C7-47
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::781f:3c7d:edc:684
IPv4 Address. . . . . . . . . . . : 192.168.1.105(Preferred
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.1.1
DHCPv6 IAID . . . . . . . . . . . : 235405351
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-15-7A-16-5B
DNS Servers . . . . . . . . . . . : 192.168.1.78
59.144.127.17
NetBIOS over Tcpip. . . . . . . . : Enabled
Please delete the second DNS server.
Also, disable all security softwares and try again.
Are you able to ping the DC? If not, that may be a problem with your routes.
Also, use nslookup to check that all is okay with DNS records.
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner 2010 / 2011
Microsoft Certified
Professional
Microsoft Certified
Systems Administrator: Security
Microsoft Certified
Systems Engineer: Security
Microsoft Certified
Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft Certified
Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Microsoft Certified
Technology Specialist: Windows 7, Configuring
Microsoft Certified
IT Professional: Enterprise Administrator

Permissions for host machine

Similar Messages

Maybe you are looking for