Re: Backing up an Environment

Sanchez,
Try this simple escript:
findactenv
exportenv
exit
Note that this will only export the active environments - no simulated
environments will be exported.
It's also a good idea to rebuild your environment repository every now and
then. How often you do it depends partly on how many and how often you do
deployments, installations, or other changes to the environment. However,
once a month is not a bad starting point.
Don
At 04:54 PM 4/29/98 -0400, Sanchez, Bernardo wrote:
>
We are currently running a cron job to backup & clean our CentralRepository
(bt:central) on a daily basis. This works OK.
We would also like to backup our forte environment on a weekly basis. Does
anyone have a script to do this?
Thanks in advance.
Bernardo Sanchez DMC Inc.
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>
============================================
Don Nelson
Regional Consulting Manager - Rocky Mountain Region
Forte Software, Inc.
Denver, CO
Phone: 303-265-7709
Corporate voice mail: 510-986-3810
aka: [email protected]
============================================
"When you deal with high numbers, you need higher math." - Hobbes
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

Similar Messages

Get back the variable environment (Subsitution) from Essbase

Hi all,
How to get back variables of environment stored in Essbase to reuse them in ODI.
I think of using a view in ODI, is it possible to use them in the request of creation of the view sight.
Thanks,
Ben

Hi,
You can use the Essbase Java API to retrieve essbase substitution variable information.
If you have a read of :- http://john-goodwin.blogspot.com/2009/11/odi-series-planning-11113-enhancements.html
There is a section that goes through how to achieve it.
Cheers
John
http://john-goodwin.blogspot.com/

Backing Up System Environment Variables

How do I backup system variables on a Windows machine? Are HYPERION_HOME and EPM_ORACLE_HOME system variables the same?

If this is windows then I find the best way is to either backup the registry or part of the registry, environment variables are stored in the registry at :-
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment
So if you go to start > run > regedit > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment > right click export, it will save it out to a registry file.
The registry can also be exported from command line , for example go to a command prompt and type
REG EXPORT /?
Cheers
John
http://john-goodwin.blogspot.com/

Opinions on backing up my environment

We're a small shop and have a 10g box that serves nothing but to develop on. Updates to it are rare and its only seed data.
It essentially has 1 physical drive because of the RAID (striping i believe)on it.
My worry is I dont have another physical disk to duplex my control files, redo logs and where to store my baseline backups and im not archive logging.
I guess my only option is to do a full exp once a month to another box?
Any suggestions would be helpfull.
Oh, i was wondering, in the real world, when they say to duplex on another physical disk, is this actually 1 disk? or one whole RAID?

Well there is no link of export and controlfile backup. Means if you lose your controlfile then that you won't be recover that from the exp file. You have to recreate the whole database from scratch using exp, you can also recreate the controlfile using create controlfile statement. If you can survive some downtime then you can also go for cold backup but If the amount of data is not too much then I will prefer to export only the schemas having application data not the whole database. In case of recovery just create a new database and import the users.
Daljit Singh

Is Veeam and BackupAssist good solutions for backing up my environment?

Hi,
I currently have 3 VMWare hosts and several physical servers (with around 100TB of data). To backup my data, I was recommended Veeam for the VMs and BackupAssist for the physical servers.
I am not an IT person, so being easy to use and manage is a huge thing for me (think something like CrashPlan Pro). Are those solutions the best ones for my needs? I don't mind paying a bit if it means easy of management and even the ability to see the status of my backups on a dashboard.
Thanks for your input!
This topic first appeared in the Spiceworks Community

Hi,
I currently have 3 VMWare hosts and several physical servers (with around 100TB of data). To backup my data, I was recommended Veeam for the VMs and BackupAssist for the physical servers.
I am not an IT person, so being easy to use and manage is a huge thing for me (think something like CrashPlan Pro). Are those solutions the best ones for my needs? I don't mind paying a bit if it means easy of management and even the ability to see the status of my backups on a dashboard.
Thanks for your input!
This topic first appeared in the Spiceworks Community

Adding a track when out of Objects in The Environment

Hi,
I use GarageBand 2 (GB2) to get the idea down quickly when the inspiration strikes. It works perfectly for that purpose. To take a song from that initial idea to the finished product, I import the song into Logic Pro 7.1.1 (LP7).
All in all, LP7 is a very good-, comprehensive- and versatile product, but the one thing that keeps frustrating me beyond belief is "The Environment". I have read and re-read the documentation on "The Environment" several times, but I just hit a road block every time I need to add a track if I'm out of objects in The Environment (Audio, Midi or Audio Instrument). When I choose "Track -> Create With Next Instrument" and there is no "Next Instrument" left, I'm stuck.
My current workaround is that I add plenty additional "Real Instrument" and "Soft Instrument" tracks in GB2 before importing the song into LP7. The import routine takes care of setting up The Environment. But sometimes I don't add enough tracks and then I'm stuck again.
Can anyone suggest a reasonably straight forward way of adding a track once you're out of objects (Audio-, Midi- or Audio Instrument) in The Environment, please?
Thx & brgds,
...tt

Well, I've tried both of those and that's where the problems arise.
If I do "Track -> Create Multiple..." I get the error message "No more tracks available".
If I create an Audio Object in the Environment, double-click on its icon to transform it into a channel strip, and then try to assign the desired channel, only the channels that are already taken appear in the pull-down menu. If I go back to the Arrange Window and choose "Track -> Create" a new track is created given the same name and linked to the same Audio object and channel as the previously last Audio track. Going back to The Environment I still only have the same channels as before to choose from.
In GB2, in Cubase and in Sonar all you have to do is create a new track and choose whether you want it to be an Audio track or a Midi track. I just don't get why it has to be so complicated in Logic?
What am I doing wrong?
...tt

Library vs Environment?

I've added (by hand) my Roland JV-1010 synth module to the environment in a project. I can import that into another project (though it's a little tedious, importing one layer of the environment from the other project). But the patches for that instrument don't show up in the Library. What shows up in the Library at this point is several versions of the JV1010 I've experimented with, and the "patches" column doesn't let me choose anything useful--I have to go back into the Environment and select patches there.
Two questions:
1. How do I erase something from the Library? Those old versions aren't helping, but I can't find a Delete item anywhere.
2. Is there any way to get the Library's patch list to show what's really in the instrument (according to its representation in the Environment)? And is there any way to change banks and select patches by name, without going back into the Environment over and over?
I hope this makes sense, and I hope somebody can help me make sense of this. Where does the Library really live?

In relation to having multiple libraries, how do you attach all of the field level scripting for an individual service?
Do you have an automated attach routine or do you manually attach scripting?
I have been able to come up with a method to automatically attach a script library associated only with a particular service, but I'm still working on trying to update our automated attach routine to create/attach the field level functions. Any insight someone would have in this area would be

How I Managed to Install Windows 8.1 Pro on an iMac 27-inch, Late 2013

As is typical with many of my Boot Camp installs, this one did *not* goes as smoothly as planned. This installation was particularly troublesome, so I thought I would share how I managed to set up Boot Camp on a brand new iMac (27-inch, Late 2013) using a Windows 8.1 Pro DVD and an external Apple SuperDrive. These are the steps I took:
Download Boot Camp Support Software 5.1.5640 (http://support.apple.com/kb/DL1721)
Copy Boot Camp Support Software to empty MS-DOS (FAT)-formatted USB key
Run Boot Camp Assistant and select third option only (Install Windows 7 or later version)
Computer would reboot after Boot Camp Assistant finished but would boot back into Mac environment and not continue Windows installation
Boot computer holding down option key and select Windows (with DVD icon) and go through initial setup process (could go as far as trying to format Boot Camp partition as NTFS and then got stuck)
Quit Windows installer and reboot computer holding down option key and select EFI Boot
Run Windows installer
These same steps worked for another iMac (same model) that I set up later the same day.

Note: These types of discs or activities are not supported by DVD or CD sharing:
DVD movies.
Audio CDs.
Copy protected discs such as game discs.
Install discs for an operating system such as Microsoft Windows (for use with Boot Camp), or Mac OS X.
Burn a CD or DVD

Best practice in migrating to a production system

Dear experts,
Which is the best practice to follow during an implementation project to organize development, quality and production environment?
In my case, considering that SRM is connected to the back-end development system, what should be done to connect SRM to back-end quality environment:
- connect the same SRM server to back-end quality environment, even if in this case the old data remain in SRM or
- connect another SRM server to back-end quality environment?
thanks,

Hello Gaia,
If yo have 3 landscape, backend connection should be like this.
SRM DEV   - ERP DEV
SRM QAS   - ERP QAS
SRM PRD - ERP PRD
If you have 2 landscape.
SRM(client 100) - ERP DEV
SRM(client 200) - ERP QAS
SRM PRD         - ERP PRD
Regards,
Masa

RE: Accessing multiple Env from single Client-PC

Look in the "System Management Guide" under connected environments page
72. This will allow services in your primary environment to find
services in your connected environment. However, there is a bug
reported on this feature which is fixed in 2F4 for the HP and H1 for all
other servers. The following is from Forte:
The connected environments bug that was fixed in 2F4 is #24282. The
problem
was in the nodemgr/name server source code and caused the following to
occur:
Service1 is in connected envs A and B.
Client has env A as primary, B as secondary.
Envmgr A dies before the client has ever made a call to Service1.
Afer env A is gone, client makes a call to Service1 which causes Envmgr
B to
seg fault.
You should upgrade your node manager/env manager nodes to 2F4. The 2F2
development and runtime clients are fully compatible with 2F4 servers.
Kal Inman
Andersen Windows
From: Inho Choi[SMTP:[email protected]]
Sent: Monday, April 21, 1997 2:04 AM
To: [email protected]
Subject: Accessing multiple Env from single Client-PC
Hi, All!
Is there anybody has any idea to access multiple environments from
single client-PC? I have to have multiple environments because each
environment resides geographically remote node and network bandwidth,
reliability are not good enough to include all the systems into single
environment.
Using Control Panel for doing this is not easy for those who are not
familiar with Windows. The end-user tend to use just single application
to access all necessary services.
I could consider two option to doing this:
1. Make some DOS batch command file to switch different environment
like, copying back/forward between environment repositories and
set up forte.ini for changing FORTE_NS_ADDRESS. After then, invoke
proper client partition(ftexec).
2. Duplicate necessary services among each environment.
But, these two options have many drawbacks in terms of system
management(option 1), performance(option 2) and others.
Has anybody good idea to implement this? Any suggestion would be
appreciated.
Inho Choi, Daou Tech., Inc.
email: [email protected]
phone: +82-2-3450-4696

Look in the "System Management Guide" under connected environments page
72. This will allow services in your primary environment to find
services in your connected environment. However, there is a bug
reported on this feature which is fixed in 2F4 for the HP and H1 for all
other servers. The following is from Forte:
The connected environments bug that was fixed in 2F4 is #24282. The
problem
was in the nodemgr/name server source code and caused the following to
occur:
Service1 is in connected envs A and B.
Client has env A as primary, B as secondary.
Envmgr A dies before the client has ever made a call to Service1.
Afer env A is gone, client makes a call to Service1 which causes Envmgr
B to
seg fault.
You should upgrade your node manager/env manager nodes to 2F4. The 2F2
development and runtime clients are fully compatible with 2F4 servers.
Kal Inman
Andersen Windows
From: Inho Choi[SMTP:[email protected]]
Sent: Monday, April 21, 1997 2:04 AM
To: [email protected]
Subject: Accessing multiple Env from single Client-PC
Hi, All!
Is there anybody has any idea to access multiple environments from
single client-PC? I have to have multiple environments because each
environment resides geographically remote node and network bandwidth,
reliability are not good enough to include all the systems into single
environment.
Using Control Panel for doing this is not easy for those who are not
familiar with Windows. The end-user tend to use just single application
to access all necessary services.
I could consider two option to doing this:
1. Make some DOS batch command file to switch different environment
like, copying back/forward between environment repositories and
set up forte.ini for changing FORTE_NS_ADDRESS. After then, invoke
proper client partition(ftexec).
2. Duplicate necessary services among each environment.
But, these two options have many drawbacks in terms of system
management(option 1), performance(option 2) and others.
Has anybody good idea to implement this? Any suggestion would be
appreciated.
Inho Choi, Daou Tech., Inc.
email: [email protected]
phone: +82-2-3450-4696

Accessing multiple Env from single Client-PC

Hi, All!
Is there anybody has any idea to access multiple environments from
single client-PC? I have to have multiple environments because each
environment resides geographically remote node and network bandwidth,
reliability are not good enough to include all the systems into single
environment.
Using Control Panel for doing this is not easy for those who are not
familiar with Windows. The end-user tend to use just single application
to access all necessary services.
I could consider two option to doing this:
1. Make some DOS batch command file to switch different environment
like, copying back/forward between environment repositories and
set up forte.ini for changing FORTE_NS_ADDRESS. After then, invoke
proper client partition(ftexec).
2. Duplicate necessary services among each environment.
But, these two options have many drawbacks in terms of system
management(option 1), performance(option 2) and others.
Has anybody good idea to implement this? Any suggestion would be
appreciated.
Inho Choi, Daou Tech., Inc.
email: [email protected]
phone: +82-2-3450-4696

Hi, All!
Is there anybody has any idea to access multiple environments from
single client-PC? I have to have multiple environments because each
environment resides geographically remote node and network bandwidth,
reliability are not good enough to include all the systems into single
environment.
Using Control Panel for doing this is not easy for those who are not
familiar with Windows. The end-user tend to use just single application
to access all necessary services.
I could consider two option to doing this:
1. Make some DOS batch command file to switch different environment
like, copying back/forward between environment repositories and
set up forte.ini for changing FORTE_NS_ADDRESS. After then, invoke
proper client partition(ftexec).
2. Duplicate necessary services among each environment.
But, these two options have many drawbacks in terms of system
management(option 1), performance(option 2) and others.
Has anybody good idea to implement this? Any suggestion would be
appreciated.
Inho Choi, Daou Tech., Inc.
email: [email protected]
phone: +82-2-3450-4696

Importing a class CEX file using TOOL

Hi Forte Users,
Would anyone know how to import a class CEX file using TOOL code? Is there
a class in one of the libraries that I can use to do such a task?
If anyone has some insight into such an endeavor (positive or negative)
please respond!
As well, I would like to express my appreciation for this mailing list - it
has carried some excellent Forte dialogue.
Thanks for all your help!
Geoff Whittington
-----Original Message-----
From: [email protected] [SMTP:[email protected]]
Sent: Wednesday, May 13, 1998 3:54 PM
To: [email protected]
Cc: [email protected]; [email protected];
[email protected]; [email protected]
Subject: Re: Backing up an Environment
Hi Daniel,
How can you use RpClean on an environment repository
which is C-tree ? (Or is there a way to store it as B-tree
with Forte R3 ?)
Note also that your Name Server performances may be
dramatically impoverished after several applications
install/uninstall (say 8 or 10), once your Env. Mgr repository
has grown pretty big. The only way to recycle it is then to restart
it from an export file with the -b option.
Please let me know,
Vincent
On Wed, 13 May 1998 00:03:52 +0200 Daniel Nguyen
<[email protected]> writes:
Hi,
It is normal. The Export of the Environment only contains node
definitions.
You should also loose your partitioning definition in your Workshop.
Have you tried the RpClean on the environment repository ?
I would use the export file only after a crash of the environment on
production
site or restart from a backup of the environment repository without
the
user
connexions.
Hope this helps,
Daniel Nguyen
Freelance Forte Consultant
Chael, Tom wrote:
Every time I export my environment definition and rebuild the
environment repository I loose my application definitions. I have to
go into Econsole/Escript to Uninstall and reinstall my applications.
Is this normal? I am on a Windows NT environment running Forte
2.0.H.1. I have verified that I am using the correct .edf file when I
do my environment rebuild.
-----Original Message-----
From: Don Nelson [SMTP:[email protected]]
Sent: Wednesday, April 29, 1998 5:35 PM
To: Sanchez, Bernardo
Cc: '[email protected]'
Subject: Re: Backing up an Environment
Sanchez,
Try this simple escript:
findactenv
exportenv
exit
Note that this will only export the active environments - no
simulated
environments will be exported.
It's also a good idea to rebuild your environment repository
every now and
then. How often you do it depends partly on how many and how
often you do
deployments, installations, or other changes to the environment.
However,
once a month is not a bad starting point.
Don
At 04:54 PM 4/29/98 -0400, Sanchez, Bernardo wrote:
We are currently running a cron job to backup & clean ourCentralRepository
(bt:central) on a daily basis. This works OK.
We would also like to backup our forte environment on a weeklybasis. Does
anyone have a script to do this?
Thanks in advance.
Bernardo Sanchez DMC Inc.
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive<URL:http://pinehurst.sageit.com/listarchive/>
============================================
Don Nelson
Regional Consulting Manager - Rocky Mountain Region
Forte Software, Inc.
Denver, CO
Phone: 303-265-7709
Corporate voice mail: 510-986-3810
aka: [email protected]
============================================
"When you deal with high numbers, you need higher math." - Hobbes
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive
<URL:http://pinehurst.sageit.com/listarchive/>-
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive
<URL:http://pinehurst.sageit.com/listarchive/>
You don't need to buy Internet access to use free Internet e-mail.
Get completely free e-mail from Juno at http://www.juno.com
Or call Juno at (800) 654-JUNO [654-5866]
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>-
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

Hi Forte Users,
Would anyone know how to import a class CEX file using TOOL code? Is there
a class in one of the libraries that I can use to do such a task?
If anyone has some insight into such an endeavor (positive or negative)
please respond!
As well, I would like to express my appreciation for this mailing list - it
has carried some excellent Forte dialogue.
Thanks for all your help!
Geoff Whittington
-----Original Message-----
From: [email protected] [SMTP:[email protected]]
Sent: Wednesday, May 13, 1998 3:54 PM
To: [email protected]
Cc: [email protected]; [email protected];
[email protected]; [email protected]
Subject: Re: Backing up an Environment
Hi Daniel,
How can you use RpClean on an environment repository
which is C-tree ? (Or is there a way to store it as B-tree
with Forte R3 ?)
Note also that your Name Server performances may be
dramatically impoverished after several applications
install/uninstall (say 8 or 10), once your Env. Mgr repository
has grown pretty big. The only way to recycle it is then to restart
it from an export file with the -b option.
Please let me know,
Vincent
On Wed, 13 May 1998 00:03:52 +0200 Daniel Nguyen
<[email protected]> writes:
Hi,
It is normal. The Export of the Environment only contains node
definitions.
You should also loose your partitioning definition in your Workshop.
Have you tried the RpClean on the environment repository ?
I would use the export file only after a crash of the environment on
production
site or restart from a backup of the environment repository without
the
user
connexions.
Hope this helps,
Daniel Nguyen
Freelance Forte Consultant
Chael, Tom wrote:
Every time I export my environment definition and rebuild the
environment repository I loose my application definitions. I have to
go into Econsole/Escript to Uninstall and reinstall my applications.
Is this normal? I am on a Windows NT environment running Forte
2.0.H.1. I have verified that I am using the correct .edf file when I
do my environment rebuild.
-----Original Message-----
From: Don Nelson [SMTP:[email protected]]
Sent: Wednesday, April 29, 1998 5:35 PM
To: Sanchez, Bernardo
Cc: '[email protected]'
Subject: Re: Backing up an Environment
Sanchez,
Try this simple escript:
findactenv
exportenv
exit
Note that this will only export the active environments - no
simulated
environments will be exported.
It's also a good idea to rebuild your environment repository
every now and
then. How often you do it depends partly on how many and how
often you do
deployments, installations, or other changes to the environment.
However,
once a month is not a bad starting point.
Don
At 04:54 PM 4/29/98 -0400, Sanchez, Bernardo wrote:
We are currently running a cron job to backup & clean ourCentralRepository
(bt:central) on a daily basis. This works OK.
We would also like to backup our forte environment on a weeklybasis. Does
anyone have a script to do this?
Thanks in advance.
Bernardo Sanchez DMC Inc.
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive<URL:http://pinehurst.sageit.com/listarchive/>
============================================
Don Nelson
Regional Consulting Manager - Rocky Mountain Region
Forte Software, Inc.
Denver, CO
Phone: 303-265-7709
Corporate voice mail: 510-986-3810
aka: [email protected]
============================================
"When you deal with high numbers, you need higher math." - Hobbes
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive
<URL:http://pinehurst.sageit.com/listarchive/>-
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive
<URL:http://pinehurst.sageit.com/listarchive/>
You don't need to buy Internet access to use free Internet e-mail.
Get completely free e-mail from Juno at http://www.juno.com
Or call Juno at (800) 654-JUNO [654-5866]
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>-
To unsubscribe, email '[email protected]' with
'unsubscribe forte-users' as the body of the message.
Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

Security Filtering on the v7 Web Server using sed_request

I have been trying to improve protection of an application from cross-site scripting and SQL injection attackes. The ideal solution is the modsecurity rulebase but this is for Apache 2 only so I haev been looking for other solutions. I'm not going to guarantee all of the following since I haven't finished testing it but it looks hopeful so far as an avenue for investigation.
A direct port of the modsecurity engine to the Sun One / iPlanet web server has been started, with an unsupported implementation with near complete functionality in the version 7 codebase, but not all keywords required for the rules are available in this release and it remains unsupported for production use. A simpler but fully supported solution is the sed filter; which is also provided with the version 7 product, but as a separate NSAPI plugin implementing the sed_request and sed_response server application functions (SAFs) which could theoretically be lifted out and run against earlier versions of the web server.
So, how does the sed filter help? Well, although the functionality is less than that of the full modsecurity engine and performance is more limited, as implementing the Unix stream editor (sed) support for simple basic regular expressions it is possible to port some of the key modsecurity rules. The approach is a simple one:
* Choose the key rules for modsecurity that are to implemented, e.g. SQL injection, cross-site scripting, etc
* Open the rule set for each and copy out the extended regular expression
* Translate the extended regular expression to a standard basic regular expression, including replacing the found string with nothing
* Import the new sed rule into the obj.conf for the web server instance
This is best explained with a simple example.
First download the modsecurity source code from http://www.modsecurity.org and unpackage the tarball. In the resulting directory tree go to the rules/base_rules subdirectory and open the modsecurity_crs_41_sql_injection_attacks.conf file. In this file are a number of security rules defined, but a simple examination of each will show the format, the phase and a description after the SecRule keyword and some type information. Note that many of the security rules can be applied unchanged by the unsupported Sun One / iPlanet modsecurity engine that will be a full implementation in a future release. After the type information the extended regular expression used to define when the rule is to be applied can be found. For example, consider one SQL injection rule:
SecRule REQUEST_FILENAME|ARGS_NAMES|ARGS|XML:/* "\buser_tab_columns\b" \
"phase:2,rev:'2.0.5',capture,t:none,ctl:auditLogParts=+E,pass,no
log,auditlog,msg:'Blind SQL Injection Attack',id:'959536',tag:'WEB_ATTACK/SQL_INJECTION',tag:'WASCTC/WASC-19',tag:'OWASP_TOP_10/A1',tag:'OWASP_AppSensor/CIE1',tag:'PCI/6.5.2',logdata:'%{TX.0}',severity:'2',setvar:'tx.msg=%{rule.msg}',setvar
:tx.sql_injection_score=+%{tx.critical_anomaly_score},setvar:tx.anomaly_score=+%
{tx.critical_anomaly_score},setvar:tx.%{rule.id}-WEB_ATTACK/SQL_INJECTION-%{matched_var_name}=%{tx.0}"
In this the extended regular expression saying when this rule applies is "\buser_tab_columns\b"
which tells the rules engine to look for the phrase user_tab_columns in the input stream.
We want to replace this with nothing, so a sample sed rule for this would be
sed="s/\buser_tab_columns\b//g"
This says to replace all occurences found in the stream with nothing.
Taking this to its extreme, which will not result in the fastest processing, but will ptotect from cross-site scripting and SQL injection POST attacks against a back end Oracle environment, we end up with a complex segment of an obj.conf for Oracle iPlanet Web Server 7.09. Details are in the next post.

This is something like:
<Object name="default">
Input fn="insert-filter"
method="(GET|POST|HEAD)"
filter="sed-request"
sed="s/</\\</g"
sed="s/%3c/\\</g"
sed="s/%3C/\\</g"
sed="s/>/\\>/g"
sed="s/%3e/\\>/g"
sed="s/%3E/\\>/g"
sed="s/\x2Eexecscript\b//g"
sed="s/<body\b.*?\bonload\b//g"
sed="s/\blivescript://g"
sed="s/\bsettimeout\b[^a-zA-Z_0-9]*?//g"
sed="s/\x3C ?iframe//g"
sed="s/\bsrc\b[^a-zA-Z_0-9]*?\bjavascript://g"
sed="s/\bsrc\b[^a-zA-Z_0-9]*?\bvbscript://g"
sed="s/\btype\b[^a-zA-Z_0-9]*?\btext\b[^a-zA-Z_0-9]*?\becmascript\b//g"
sed="s/\x2Ecookie\b//g"
sed="s/\x3C\x21\x5Bcdata\x5B//g"
sed="s/\x2Eaddimport\b//g"
sed="s/\bhref\b[^a-zA-Z_0-9]*?\bjavascript://g"
sed="s/\btype\b[^a-zA-Z_0-9]*?\btext\b[^a-zA-Z_0-9]*?\bjscript\b//g"
sed="s/\balert\b[^a-zA-Z_0-9]*?\x28//g"
sed="s/\btype\b[^a-zA-Z_0-9]*?\bapplication\b[^a-zA-Z_0-9]*?\bx-vbscript\b//g"
sed="s/\x3C ?meta\b//g"
sed="s/\bsrc\b[^a-zA-Z_0-9]*?\bhttp://g"
sed="s/\btype\b[^a-zA-Z_0-9]*?\btext\b[^a-zA-Z_0-9]*?\bvbscript\b//g"
sed="s/\bhref\b[^a-zA-Z_0-9]*?\bvbscript://g"
sed="s/\burl\b[^a-zA-Z_0-9]*?\bjavascript://g"
sed="s/\x2Einnerhtml\b//g"
sed="s/\x40import\b//g"
sed="s/\x3C ?script\b//g"
sed="s/\btype\b[^a-zA-Z_0-9]*?\btext\b[^a-zA-Z_0-9]*?\bjavascript\b//g"
sed="s/\x2Efromcharcode\b//g"
sed="s/\burl\b[^a-zA-Z_0-9]*?\bvbscript://g"
sed="s/\bsettimeout\b[^a-zA-Z_0-9]*?\x28//g"
sed="s/<(a|abbr|acronym|address|applet|area|audioscope|b|base|basefront|bdo|bgsound|big|blackface|blink|blockquote|body|bq|br|button|caption|center|cite|code|col|colgroup|comment|dd|del|dfn|dir|div|dl|dt|em|embed|fieldset|fn|font|form|frame|frameset|h1|head|hr|html|i|iframe|ilayer|img|input|ins|isindex|kdb|keygen|label|layer|legend|li|limittext|link|listing|map|marquee|menu|meta|multicol|nobr|noembed|noframes|noscript|nosmartquotes|object|ol|optgroup|option|p|param|plaintext|pre|q|rt|ruby|s|samp|script|select|server|shadow|sidebar|small|spacer|span|strike|strong|style|sub|sup|table|tbody|td|textarea|tfoot|th|thead|title|tr|tt|u|ul|var|wbr|xml|xmp)[^a-zA-Z_0-9]//g"
sed="s/(asfunction|javascript|vbscript|data|mocha|livescript)://g"
sed="s/(fromcharcode|alert|eval)\x73*\x28//g"
sed="s/<!\x5Bcdata\x5B|\x5D>//g"
sed="s/['\"<]xss['\">]//g"
sed="s/(88,83,83)//g"
sed="s/'';!--\"<xss>=&{()}//g"
sed="s/&{//g"
sed="s/<!(doctype|entity)//g"
sed="s/(?i:<style.*?>.*?((@[i\\\\])|(([:=]|(&[#\x28\x29=]x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\]|(&[#()=]x?0*((40)|(28)|(92)|(5C));?)))))//g"
sed="s/(?i:[ /+\t\"\'`]style[ /+\t]*?=.*?([:=]|(&[#()=]x?0*((58)|(3A)|(61)|(3D));?)).*?([(\\\\]|(&[#()=]x?0*((40)|(28)|(92)|(5C));?)))//g"
sed="s/(?i:<object[ /+\t].*?((type)|(codetype)|(classid)|(code)|(data))[ /+\t]*=)//g"
sed="s/(?i:[ /+\t\"\'`]datasrc[ +\t]*?=.)//g"
sed="s/(?i:<base[ /+\t].*?href[ /+\t]*=)//g"
sed="s/(?i:<link[ /+\t].*?href[ /+\t]*=)//g"
sed="s/(?i:<meta[ /+\t].*?http-equiv[ /+\t]*=)//g"
sed="s/(?i:<?import[ /+\t].*?implementation[ /+\t]*=)//g"
sed="s/(?i:<embed[ /+\t].*?SRC.*?=)//g"
sed="s/(?i:[ /+\t\"\'`]on\x63\x63\x63+?[ +\t]*?=.)//g"
sed="s/(?i:<?frame.*?[ /+\t]*?src[ /+\t]*=)//g"
sed="s/(?i:<isindex[ /+\t>])//g"
sed="s/(?i:<form.*?>)//g"
sed="s/(?i:<script.*?[ /+\t]*?src[ /+\t]*=)//g"
sed="s/(?i:<script.*?>)//g"
sed="s/(?i:[\"\'][ ]*(([^a-z0-9~_:\'\" ])|(in)).*?(((l|(\\\\u006C))(o|(\\\\u006F))(c|(\\\\u0063))(a|(\\\\u0061))(t|(\\\\u0074))(i|(\\\\u0069))(o|(\\\\u006F))(n|(\\\\u006E)))|((n|(\\\\u006E))(a|(\\\\u0061))(m|(\\\\u006D))(e|(\\\\u0065)))).*?=)//g"
sed="s/(?i:[\"\'][ ]*(([^a-z0-9~_:\'\" ])|(in)).+?(([.].+?)|([\x5B].*?[\x5D].*?))=)//g"
sed="s/\bsys\x2Euser_catalog\b//g"
sed="s/\bsys\x2Euser_tables\b//g"
sed="s/\bcharindex\b//g"
sed="s/\bsys\x2Eall_tables\b//g"
sed="s/\bsys\x2Euser_constraints\b//g"
sed="s/\bselect\b.{0,40}buser\b//g"
sed="s/\bwaitfor\b[^a-zA-Z_0-9]*?\bdelay\b//g"
sed="s/\bselect\b.{0,40}\bsubstring\b//g"
sed="s/\bsys\x2Euser_triggers\b//g"
sed="s/\blocate[^a-zA-Z_0-9]+\x28//g"
sed="s/\bsys\x2Euser_tab_columns\b//g"
sed="s/\battnotnull\b//g"
sed="s/\bsys\x28tab\b//g"
sed="s/\bselect\b.{0,40}\bascii\b//g"
sed="s/\bsys\x2Euser_views\b//g"
sed="s/\binstr[^a-zA-Z_0-9]+\x28//g"
sed="s/\bsys\x2Euser_objects\b//g"
sed="s/\buser_tables\b//g"
sed="s/\buser_tab_columns\b//g"
sed="s/\ball_objects\b//g"
sed="s/\bsubstr\b//g"
sed="s/\bsysdba\b//g"
sed="s/\btextpos[^a-zA-Z_0-9]+\x28//g"
sed="s/\buser_password\b//g"
sed="s/\buser_users\b//g"
sed="s/\buser_constraints\b//g"
sed="s/\bcolumn_name\b//g"
sed="s/\bsubstring\b//g"
sed="s/\bobject_type\b//g"
sed="s/\bobject_id\b//g"
sed="s/\buser_ind_columns\b//g"
sed="s/\bcolumn_id\b//g"
sed="s/\btable_name\b//g"
sed="s/\bobject_name\b//g"
sed="s/\brownum\b//g"
sed="s/\buser_group\b//g"
sed="s/\butl_http\b//g"
sed="s/\bselect\b.*?\bto_number\b//g"
sed="s/\bgroup\b.*\bbyb.{1,100}?\bhaving\b//g"
sed="s/\bselect\b.*?\bdata_type\b//g"
sed="s/\bisnull\b[^a-zA-Z_0-9]*?\x28//g"
sed="s/\bunion\b.{1,100}?\bselect\b//g"
sed="s/\binsert\b[^a-zA-Z_0-9]*?\binto\b//g"
sed="s/\bselect\b.{1,100}?\bcount\b.{1,100}?\bfrom\b//g"
sed="s/\x3B[^a-zA-Z_0-9]*?\bdrop\b//g"
sed="s/\bloadb[^a-zA-Z_0-9]*?\bdata\b.*\binfile\b//g"
sed="s/\bselect\b.*?\bto_char\b//g"
sed="s/\bdbms_java\b//g"
sed="s/\bnvarchar\b//g"
sed="s/\butl_file\b//g"
sed="s/\binner\b[^a-zA-Z_0-9]*?\bjoin\b//g"
sed="s/\bselect\b.{1,100}?\bfrom\b.{1,100}?\bwhere\b//g"
sed="s/\bintob[^a-zA-Z_0-9]*?\bdumpfile\b//g"
sed="s/\bdelete\b[^a-zA-Z_0-9]*?\bfrom\b//g"
sed="s/\x3B[^a-zA-Z_0-9]*?\bshutdown\b//g"
sed="s/\bautonomous_transaction\b//g"
sed="s/\bdba_users\b//g"
sed="s/\bselect\b.{1,100}?\btop\b.{1,100}?\bfrom\b//g"
sed="s/\b(?:coalesce\b|root\x40)//g"
sed="s/\b(?:(?:rel(?:(?:nam|typ)e|kind)|to_(?:numbe|cha)r|d(?:elete|rop)|group\b[^a-zA-Z_0-9]*\bby|insert|where)\b|s(?:(?:ubstr(?:ing)?|leep)[^a-zA-Z_0-9]+\x28|(?:hutdown|elect)\b)|(?:b(?:enchmark|in)|find_in_set|position|mid)[^a-zA-Z_0-9]+\x28|c(?:o(?:n(?:cat[^a-zA-Z_0-9]+\x28|vert\b)|unt\b)|ha?r\b)|u(?:n(?:hex[^a-zA-Z_0-9]+\x28|ion\b)|pdate\b)|l(?:o(?:cate|wer)[^a-zA-Z_0-9]+\x28|ength\b)|a(?:ttn(?:ame|um)\b|scii[^a-zA-Z_0-9]+\x28)|h(?:aving\b|ex[^a-zA-Z_0-9]+\x28))//g"
sed="s/(?:[\\\x28\x29\x25#]|--)//g"
sed="s/\b(?:benchmark|encode)\b//g"

Adobe Flash FAIL: Adobe Flash Player local storage settings incorrect. Module 'Resume' feature may not work on this computer.

Using a Windows 2012 RDS Environment, we have users connecting to a CPD website, and as part of the CPD they need to run a systems checker. When they run the systems checker they get the following error message: "Adobe Flash FAIL: Adobe Flash Player local storage settings incorrect. Module 'Resume' feature may not work on this computer". All users are connecting to this environment with Windows CE Clients,I have checked the setting on Adobe Flash and they seem correct but as each user has its own profile on the RDS session, is there something that I should be setting for each user. I have added the website to the trusted sites and it has made no difference. Any ideas

It sounds like what's happening is that Flash Player can't write or read from the local shared objects in the user's redirected home directory because we disallow traversing junctions in the broker process. This behavior was disabled to address a vulnerability identified in some of John Forshaw's research into the IE broker last year.
You can enable this behavior by adding the following setting to mms.cfg:
EnableInsecureJunctionBehavior=1
That said, you can probably gather from the name of the flag that we don't really recommend this approach, and disable this attack surface by default. There's some risk that a network attacker could craft content that abuses fundamental issues with how Windows handles Junctions to write to arbitrary locations.
Unfortunately, there's not a simple or easy workaround that I'm aware of (but it's been ages since I've administered a Windows domain) for this kind of NAS/SAN-backed terminal server environment where Flash is not able to access \Users\<user>\AppData\Roaming\Macromedia\Flash Player\ without traversing a junction.

Web Page Composer (WPC) – Web page - Approval process

We have requirement with our web publishing environment where we want to stage the web pages for review before they are published for public. Currently, if you develop a web page in Web Page Composer ( WPC ) and click publish to review the content/layout. The page is published for public and included in TRex and can be searchable.
We thought KM Approval process will help resolve this issue. The approval process work very well with the u2018Site Contentu2019 where once author develop the content (article, paragraph etc.) and submit for approval in this case Editor (role). The content under site content folder is not published (not available for public) until approved by Editor.
This same approval process does not work on the Web Page folder. We have exactly same permission/ Service permission setup on the Web Page folder. Even though the u2018Approvalu2019 is turned on the Web Page folder it does not inherit the same to new web pages created or existing web pages in that folder. If we go and turn on the u2018Approvalu2019 on a page then we see a u2018Approvalu2019 button in WPC but when you submit the page for approval it pops up another screen with below message.
Confirm that you want to publish the page. A new version of the homepage will be created and, if appropriate, submitted for approval. Changes to pages not subject to approval are active immediately.
When you confirm this message nothing happens (no workflow kicks off).
I would like to hear if any one has tried the approval process on WPC web pages. If you are not using this process how you are staging the web page for review before publishing to public.
Thanks.

Hi Bertina,
We encountered the same problem couple days back in our environment. There is a SAP note (# 1294833) which details the issue but affected version indicated in this note is different then what we are on so we decided to create a note for SAP.
Below is SAP response for this issues
13.09.2010 - 08:52:12 CET - Reply by SAP
Dear customer,
I can confirm that the issue described in SAP Note 1294833 is indeed
present in EP 7.01 SP4 and is the reason you are currently experiencing
this problem.
Unfortunately, as outlined in the note, there is no workaround
available but our developers have advised me that the fix will be
included in the next patch for KMC WEB PAGE COMPOSER 7.01 SP04.
Hope this helps.

Re: Backing up an Environment

Similar Messages

Maybe you are looking for