Restricting access to the Admin WebConsole of WebAccess 2012

Hi,
With the new WebAccess 2012 web application, the console is now a WebConsole that can be accessed by the URL http://<server>/gw/webacc?action=Admin.Open
I search the KB, the documentation and now this forum, looking for a way to restrict access to my precious WebAccess Console. No luck! (Only one thread ask for a similar solution restrict admin tool based on ip with no solution provided so far)
Humm So we are only 2 guys in the Groupwise community concern with security in those days? No engineer at Novell ask himself if exposing an Admin console to the Whole Internet is a good idea?
Furthermore, login (successes and failures) to the Webconsole are not written to log files. So I cannot even monitor if my WebConsole is under a brute force attack!
Here some technical information to consider:
1) I have Groupwise 2012 SP2 running under Windows 2008 R2
2) Since the Admin Webconsole is hosted under the same web site as WebAccess, I cannot restrict access to the URL http://<server>/gw/webacc?action=Admin.Open without blocking at the same time access to WebAccess using firewall or IIS rule.
3) I do not want to use IPS to restrict access to this URL
Truly

Francois, Just FYI the "green dots" are only accumulated by forum users taking the time to rate Laura's answers. She has no control over them and they speak for themselves. I've asked Knowledge partners to put the bit about rating in their signatures, it wasn't Laura's idea. Just FYI Laura also has the highest feedback scores out of all her peers in the program which also says something about her interactions here in the forums. As was pointed out, Laura is not a Novell employee, just another Novell user trying her best to stay on top of the issues and taking time out of her busy day to try to help other forum users. Nobody is going to be right 100% of the time. Please refrain from petty personal attacks in the future.
I suggest you take the time to read the forum Terms of Service: https://forums.novell.com/faq.php?faq=novfor#faq_rules where it states clearly:
Offensive Messages: Messages personally attacking, calling names, or otherwise harassing or being condescending to another forum member or any ethnic or religious group will be deleted. Offensive and/or vulgar language is not appropriate for Novell sponsored forums.
Your message was offensive, personally attacking, condescending and was deleted as per the forum terms and conditions. I wouldn't be surprised if the volunteers around here were a bit slower to respond to any issue you may post here in the future.

Similar Messages

How can i add an administrator access so the admin can edit his webpage on the web browser?

How can i add an administrator access so the admin can edit his webpage on the web browser?

A content management system or CMS is software usually on the server that allows client's to log-in and edit content from any web browser with an internet connection. These web pages are typically built with server-side programming (PHP) and databases (MySql).
CMSs come big and small. The right one for your project depends on
     a) your programming skills,
     b) project requirements,
     c) budget.
COMMERCIAL CMSs:
Cushy CMS (watch the video to see how it works)
No PHP or databases required. Editing is performed on their web site.
http://www.cushycms.com
Perch ($59 license per site)
PHP & MySql required
http://grabaperch.com/
WebAssist Power CMS Builder - Extension for DW
PHP & MySql required
http://www.webassist.com/dreamweaver-extensions/powercms-builder/
Adobe Business Catalyst (full subscription includes CMS & web hosting)
http://www.businesscatalyst.com/
OPEN SOURCE CMSs:
Get Simple CMS
PHP & XML required.
http://get-simple.info/
e107 CMS
PHP & MySql required
http://e107.org/
WordPress
PHP & MySql required
http://wordpress.org
Joomla!
PHP & MySql required
http://joomla.com
Drupal
PHP & MySql required
http://drupal.com
Concrete 5
PHP & MySql required
http://www.concrete5.org/
Nancy O.

What is the best way to restrict access to the page

Hello Everyone,
We are trying to restrict access to the web page that is being accessed by the applet. Currently it is public so anybody can view it just by entering URL in the address window. We tried to restrict its access to only certain IP Addresses but then we need to enter every client's address out there since applets execute on the client and not on the server.
Is there any good way of restricting access to the web page from an applet?
Any help will be greatly appreciated.
Thanks,
Y.M.

Most web servers allow protection of web resources.
In particular, apache allows .htaccess (or other, if changed in the root configuration) files to change the access to various resources, and IIS allows you to set up protection domains to restrict access to folders.

A custom filter or module, such as URLScan, restricts access to the file.

My btns do not work, I think becuase I added this:
import flash.display.Sprite;
    import flash.net.navigateToURL;
    import flash.net.URLRequest;
    import flash.net.URLVariables;
to my time line code in an attempt to get four btns to funtion out correctly with a navigateToURL "_self".
Now the IIS browser reads "custom filter or module, such as URLScan, restricts access to the file".
Where can I find these filters and destroy them...please?
Sabby76

You might want to find out what purpose the filter(s) serve(s) before destroying (disabling/removing) it/them. For example, URLScan is there to prevent potentially harmful requests from being processed by IIS, and is configurable.

How do I restrict access at the field level in vendor creation XK01

Hello All,
Does anyone know a way to restrict access to a certain group of fields or a screen in vendor create? I know it is possible in vendor change XK02 using the field groups (transactions OBAT and OBAU) but we have a requirement to have one group of users create all vendor information except the bank details and another group of users just to create the bank details.
Thanks for any help you can offer.
rgds,
ian

We have had a similar discussion some while back. please refer to the thread below as it seems to be much similar to your requirement.
[click here|Hide or Encrypt Bank Account Number]

Restricting Access to the Certain Reporting Components

Hello Gurus!
I would like to restrict the user's access to the following:
1.) The INFORMATION Tab on the Bex Ad Hoc Query
2.) The INFORMATION BROADCASTING Tab
3.) The Exceptions and Conditions Button
4.) The Export To CSV Button
Is that even possible? If it is possible, can some kind soul out there be good enough to tell me how to do this please?
Thank you very much,
Philips

These are all on the 0ADHOC query template. You can just create a copy of this template and modify it to meet your requirements in the Web Application Designer, then assign the new template to be your default template.
Hope this helps...
Bob

Restricting access between the hours of 9am and 5pm

i need help in creating policy to restrict access between office hours. i have created the function,
but don't know how to link this up with my database. below is the function i created
create or replace function office_hrs_only
(p_schema IN VARCHAR2 DEFAULT NULL,
p_object IN VARCHAR2 DEFAULT NULL)
return VARCHAR2
AS
BEGIN
RETURN 'to_char(sysdate,''HH24'') between 9 and 17';
END;
regards,
christina

Hi, Christina,
christylong wrote:
i need help in creating policy to restrict access between office hours. i have created the function,
but don't know how to link this up with my database. below is the function i createdAre you trying to implement a row-level security policy? If so, you need to call dbms_rls.add_policy, as shown in the Packages and Types manual:
http://download.oracle.com/docs/cd/B28359_01/appdev.111/b28419/d_rls.htm#i1000830
create or replace function office_hrs_only
(p_schema IN VARCHAR2 DEFAULT NULL,
p_object IN VARCHAR2 DEFAULT NULL)
return VARCHAR2
AS
BEGIN
RETURN 'to_char(sysdate,''HH24'') between 9 and 17';
END;Remember, TO_CHAR returns a string, so you should compare it other strings, not numbers. Try this:
RETURN 'to_char(sysdate,''HH24'') between ''09'' and ''16''';If you make the upper limit '16', then people will be able to use the table as late as 16:59:59, that is, one second before 5:00 PM.
That's not completely intuitive, is it? Maybe it would be better if you said:
RETURN 'to_char(sysdate,''HH24:MI:SS'') between ''09:00:00'' and ''17:00:00''';Edited by: Frank Kulash on Aug 21, 2011 12:11 AM

Restrict access to the atributes in a cube.

Hi Experts.
This is the situation: we have a cube which contains the 0MATERIAL infoobject. Apart from my users who can have access to all the data in the cube, this cube is going to be remotely accessed by a third party company, but we would like to restrict some of the atributes of 0MATERIAL to them, such as price, etc. so they can't see them.
We need to do it at cube level, as they have their own reports.
Is there a way to restrict those attributes?
Thanks and regards.

Sorry, it was not meant for this forum.
I transfered this email to the Actionscript 3 forum
Sebastien

Hi guys I need to restrict access to the settings with a passcode but also need passcode for the screen lock due to MS Exchange. Can these codes be different?

We are introducing iPhonse into the business but have a question regarding security. We need to restrict user access to the settings on the iphone probably via a passcode. We also need the user to have access to their emails (which when using exchange enforces a passcode). Is this the same passcode that is used for both by default? Because if it is then by allowing the user access to their emails they would by default have access to the code that allows them to change the settings of the iphone?
Does anyone have any knowledge of this or how I can achieve something similar.
Thanks
Paul

Hi,
Thanks for your reply
Could you by any chance provide a few simple steps on how to do this as i not too sure how you differentiate creating a passcode for restrictions and creating a passcode for lock screen?
Kind Regards,
Paul

How do I restrict access to the RT Series PXI Controller via its FTP server?

The RT Series PXI Controllers run an FTP server, so I can view files on the controller over the Internet wtih a Web browser. I can also download and upload files with a Web browser. How can I instruct the FTP server to give access only to specified, trustworthy FTP clients?

It is possible to "Lock" the controller from the Measurement and Automation Explorer program. The password you set when locking the controller (which prevents others from making configuration changes to the controller while running) is the same password that controls access to the FTP server. When the controller is unlocked, anyone who can access the PXI controller's IP can read, write, and delete files on the FTP server. When locked, anyone can read data from the FTP server, but only when logged in with the lock password will you have access to write or delete data.
For more information on locking your controller, see the user manual, MAX online help, or the following link.
NI Developer Zone: Controlling Access to LabVIEW Real-Time PXI Targets

How do I restrict access to the saved passwords in Safari's settings?

I just noticed there is no barrier to entry to my entire catalogue of online passwords, anyone know if I can use restrictions or something to put a passcode on that area?

"As Meg said - the iPad is meant to be used by just 1 person, so the lack of ability to "lock down" the passwords isn't really a problem when the iPad is used as intended."
I don't think Apple has ever stated the iPad as a '1 person' device. In fact in many instances it is shared between multiple users.
Also if the device is stollen that password data could cause far greater loss than the cost of the device itself especially if there are banking logins saved there. You could say hey just don't save them but it's very easy to accidentally save a login and it's not exactly intuitive to remove the data. Just the other day I had to help my Dad delete his banking details from autofill.

Restricting access of the ivews

I have an asp page where links are given to pages in the portal using epcf navigation. Is there a way by which i can restrict the pages displayed depending on the user who is logged in.The asp page will be visible to all but the links will work only depending on who has logged in.
Please help.

hi Aamod,
If you want the links to be enabled for any user assign a particular role to user.
Get the role of the user logged in using this piece of code
IUser user = request.getUser();
          Iterator roles = user.getRoles(true);
          while (roles.hasNext()) {
            try {
                    String uniqueID = roles.next().toString();
                    IRole userRole = UMFactory.getRoleFactory().getRole(uniqueID);
                    if(userRole.getDisplayName().equalsIgnoreCase("elearningclient"))
                    response.write("Role is :"+userRole.getDisplayName());
                       } catch (Exception e) {
                            response.write(""+e);
based on the role you can activate or deactivate the links.
regards,
Rahul.

How do I restrict access to the survey to only selected respondents?

I have a survey that I wish to send to only selected respondents instead of opening up to everyone. How should I go about doing that?
Thank you.

There is no way to restrict it to just a set of respondents. There is one URL for the form and if a person has the URL they can fill out the form.
Randy

I am using workgroup manager to restrict access in the finder to students, i have selected basic finder this seems to work when you try and launch finder, but when you are in another application eg safari and select open you can see shared devices

as well as shared devices you can see locations etc in the side bar. i know you can edit this in finder preferences or simply drag them off and they will be removed but i want to remove them as a student logs on. i know you can edit the finder plist file in workgroup manager but i do not know what keys i need to add to remove these options and the keys are not there as default can anyone please help any ideas on how to achieve this would be great

Please post in the Photoshop forum.
http://forums.adobe.com/community/photoshop
Bob

Best way to restrict access to documents (outside of the group or library level)

Hi, we're thinking of implementing SharePoint Server 2013 Standard Edition for our organization. Many of our employees are research scientists working on proprietary information. From the (admittedly little) I understand about SharePoint, if a user wants
to restrict access to a particular document to the 2 or 3 people with whom they're collaborating (and also have it not appear in the search results), they will have to email their power user to request that a new document library be created in which they can
store their documents. Is that correct? In this case, what is the best way to handle item-level permissions? Users absolutely want to have the freedom to restrict access to their documents themselves rather than being forced to go to their power user. Thanks.

Hi,
Per my knowledge, if you want to restrict access to the documents to some users, then you need to have Manage Permissions permission to modify other users’ permission on the documents.
If you do not have the Manage Permissions permission, I recommend to ask the site administrator to create a workflow as below to remove the corresponding users’ permission on the documents which you uploaded. You can start the workflow on the document you
upload and then the permission of the users set on the workflow will be removed from the document.
Best regards.
Thanks
Victoria Xia
TechNet Community Support

Restricting access to the Admin WebConsole of WebAccess 2012

Similar Messages

Maybe you are looking for