Server permissions questions

Hello All,
i have some questions, pls show me the way.
1- i'm using AD auth for weblogic server login. There are 10+ user. i want to give permission to users on managed servers. i mean, user A can start/stop deploy on ManagedServerA, but this user should not do this actions to ManagedServerB.
2- How can i group managed servers without cluster. i'm just want to grouping servers for deployments and see ordered. i created cluster without any config, but during startup managed servers, cluster trying sycn to other server. nothing happen ofcourse but it's wasting time during startup.
3- i'm deploying a new application to managed server. Application state is waiting on "new" until restart managed weblogic. After restart it's changing to "active". after this i can stop and start deployments are ok.
Kind Regards,
Kaan

Me too..!
are getting the access denied message when trying to save files in DW. Also the file in gone...
But only on some files.
Has anyone come up with a solution or workaround? It's making us crazy and slowing down our work significantly.

Similar Messages

Public, Server Permissions, and Endpoints

I am seeking a good discussion of how to handle the impact of revoking connect to endpoint permissions for the public role. Up to this point, I've encountered several resources, including the Microsoft documentation, that recommend removing all server
permissions from public. I find this amusing due to the fact that all other logins inherit their permissions on the various endpoints from public. Of course, if I revoke connect for the endpoints from public, only system administrators can connect.
None of the sources that I've found address handling this issue. This reminds me a bit of the old South Park episode with the Underpants Gnomes and their business plan: Step 1 - Underpants, Step 2 - ?, Step 3 - Profit! In this case, it is
Step 1 - Revoke rights from public, Step 2 - ?, Step 3 - Security!
There is a comment on the SQL Server 2008 on-line documentation that recommends granting connect to endpoint to specific logins, but it does not supply any detail. I understand that Step 2 is highly dependent on factors that vary from location to location,
and application to application.
My question is whether there is a resource that details the considerations for granting connect to endpoint for the various endpoints and logins? I am looking for answers to questions like:
Is there a case in which one would have a login that was not granted connect to any endpoint?
Do logins like ##MS_PolicyTsqlExecutionLogin## need these rights, and if so, to which endpoints specifically?
I have a number of others, but I was hoping someone could provide me with a resource from which I could draw this information without having to chase all over the documentation. Thanks in advance!

Rick,
First, thanks so much for the helpful reply! It validates what I was thinking.
For versions 2008, 2008 R2, and 2012, if you follow Administer Servers by Using Policy-Based Management -> Monitor and Enforce Best Practices by Using Policy-Based Management -> Server public Permissions, it advises, "Do not grant server permissions
to the server public role." The links below are for the 2012 version of this page:
http://technet.microsoft.com/en-us/library/cc645930.aspx
http://msdn.microsoft.com/en-us/library/cc645930(v=sql.110).aspx
You and "Quantum John" are listed as authors of a comment on the 2008 version of this page (http://technet.microsoft.com/en-us/library/cc645930(v=sql.100).aspx) that acknowledge
this problem. The last part of that comment is:
However, as mentioned in Harry Zheng's post on Dosql (http://dosql.com/cms/index.php?option=com_content&view=article&id=96:sql-server-best-practice-policy-public-not-granted-server-permissions&catid=40:microsoft-sql-server&Itemid=41),
executing the following command:
REVOKE CONNECT ON ENDPOINT::[TSQL Default TCP] FROM public
while best practice, is nevertheless liable to get you in deep trouble on a production server unless you also execute:
GRANT CONNECT ON ENDPOINT::[TSQL Default TCP] to [loginname]
for each of your logins, because without this, no-one except sysadmins will have permission to connect to your instance via TCP.
It refers to performing the revoke connect on endpoint as best practice, which we agree is arguable. Unfortunately, Harry Zheng's post is a dead link. None of the later editions of this page are commented on in any way.
Further, the policy referenced by this documentation, "Public Not Granted Server Permissions," is distributed with SQL Server and evaluates @PublicServerRoleIsGranted. It flags this policy as failed if any connect to endpoint is granted to public.
Fortunately, I'm one of those that insists on testing before moving forward with any change. I also cannot leave gaps in my knowledge unfilled, which is why I posted. Again, thanks for the assistance!

Apple please fix OS X Leopard server permissions/privilges issues!!

I am having constant issues with OS X server permissions.
Users running OS X Tiger/Leopard create a folder on the server.Other users can open files from within this folder but when they save changes to a document it says the file is in use or locked. Doh! when it isn't!!
The folder in question has read/write privileges for users concerned.
The group in which the user lives has read/write access.
ACL's are set to inherit the parent folder, so it should carry on through subsequent folders. Posix is set to read and write. I have propogated the permissions.
I have read loads of issues with Leopard with clients as well as server for this problem. Is this a known bug? Help please!!

This is so frustrating! Yesterday, one of my Windows users reorganised one of the main folder structures we use, and now no one can perform any action requiring write permissions in these directories! So - no saving to any of these folders or subfolders etc. This is unbelievable.
When acessing our Leopard Server (running on a Mac Pro) I am unable to ascertain anything that I can change (although I am completely new to running a server) to fix this. It appears that when I am logged in as the sysadmin I can view the applied permissions when I 'Get Info' on the folder causing problems, so they are set to:
Everyone: Read & write
Workgroup: Custom
In File Sharing System Preferences, the shared drive that contains these directories indicates that all users can read & write. But they can't!
If I can't find a fix for this then I think my server is going to be unusable within the day.
Help!?

Security Groups when in 'Project Server Permissions Mode' - Project Online

Hi All,
We have Project Online up and running, by default the PWA instance we added to O365 was in "SharePoint Permissions" Mode, we changed to "Project Server Permissions" Mode because of some complex security we need to configure. For some
reason (different from Project Server 2013) Project Online creates a number of Security Groups by default that seem to be duplicates. For example for Administrators there are:
- Administrators
- Administrators for Project Web App
- Web Administrators (Project Web App Synchronized)
For Project Managers:
- Project Managers
- Project Managers (Project Web App Synchronized)
- Project Managers for Project Web App
And there is something similar for all the groups (compared to Project Server 2013):
I have looked online, with no luck, for some guidance on what all these groups are and if I can delete some of them without causing PWA to crash.
If anyone out there can point me in the right direction / send me some documentation or links it will be greatly appreciated!
Thanks!
Jorge

Hi Jorge, I had the same thing on two different tenants within the last week - one today. I will just clean up the SharePoint groups manually. The ones with the descriptions are the correct Project Server permission mode groups... Hopefully Microsoft will
fix this soon, you could raise a support ticket on your office 365 tenant - support is pretty quick! Paul
Paul Mather | Twitter |
http://pwmather.wordpress.com | CPS

Problem with Task Aggregation from Project Server with old Project Server permissions mode.

Hi, I have installed Sharepoint 2013 with all CU, and Project Server 2013 with June CU update. Later, I attached database from old Project Server 2010 database, all was OK, but now I have my PWA with old Project Server permissions mode.
After that I have created MySite with users from AD of my company, it's OK, but Task Aggregation not working. Moreover, I have not any errors on the MyTask page.
You can see that I can insert private tasks, but I can not see any tasks from pwa, however I have a lot of tasks there. Please help me.
My search works well amd WMA Service too.
Where directly crawler search the tasks? Maybe there are errors in search log with that ulrs?

Hi,
did you setup the Work Management Service Application in the Central Administration? If yes, please check if the Applicationpool account of the Work Managment Service has full Access to the User Profile Service Application (over the Ribbon | Permissions).
Check also if your Projects are published so that you have a Project Workspace for each Project. In the workspaces you should have a list "Tasks" or "Tasks1" for migrated workspaces. This is important because only Tasks from the workspaces' Tasklist are
shown in the Mysite
In any other cases please check the ULS Log and/or the Application Event log. Especially have a look to Distributed Cache Service and the Feed Cache.
Bernhard Fischer [MVP] | www.wodey.de

9iR2 OLAP Reporting Server Capacity Question

9iR2 OLAP Reporting Server Capacity Question
We are running Oracle 9iR2 with OLAP.
OS - RHEL3 AS
SERVERS - Dell Poweredge 6600's
cpu 4 x 2.4ghz
24GB RAM
1.5 TB space
Our AWs are typically 30GB in size. My question is, what is my capacity of jdbc thin client user sessions per box? I haven't been able to find much documentation on scalability with large AWs and a large user base. We will need to host reports for 6000 users moving to 16000 by next year.
We will be switching to 2x 1.6ghz 64bit opteron boxes this year sometime as well.

9iR2 OLAP Reporting Server Capacity Question
We are running Oracle 9iR2 with OLAP.
OS - RHEL3 AS
SERVERS - Dell Poweredge 6600's
cpu 4 x 2.4ghz
24GB RAM
1.5 TB space
Our AWs are typically 30GB in size. My question is, what is my capacity of jdbc thin client user sessions per box? I haven't been able to find much documentation on scalability with large AWs and a large user base. We will need to host reports for 6000 users moving to 16000 by next year.
We will be switching to 2x 1.6ghz 64bit opteron boxes this year sometime as well.

[SOLVED Noob question about web server permissions

Hi I have setup up succesfully my web server. Now I am having some permission's questions/problems.
First of all, I want the /home/httpd/home folder not to be show to the other machine users and only to root.
I have created a user www-data and I have conf the apache file.
This is my settings:
My server directory is: /home/httpd and the permissions I have set:
home dir:
~edited because solved~
I have set .htaccess to some folders. I don't know If the permissions are safe or not. Can you help me?
I think that I have different permissions to files and different to the folders...
Thank you!
Edited:
And an example of my permission (phpMyAdmin):
~edited because solved~
Last edited by k3rn31 (2008-02-28 22:26:09)

This is more of a chat item for me, if you feel like it you can find me most of the time here at http://zaxter.org/xmpp.html if you have flash you can join via a simple click on connect.
Sorry I've not been of much help to you.

Yosemite Server Users question.

I recently installed Yosemite Server 4.0.3 on a fully patched Yosemite 10.10.2 install on a Mac Mini (Late 2014/2.6GHz i5/16GB/1TB) that we're going to hang a LaCie Thunderbolt RAID off of for a file server update, and while setting users, and permissions (had some problems with a user unable to write to a share), the Server application crashed. After bringing the Server application back up and after various tests, the users interface on the server application lists every user on the system, including the unix/posix users such as amavisd, postfix, etc.
My initial guess is that a switch regarding which users are displayed got toggled in the application crash. But at the same time, I can't see where that setting would be and would hate to have to guess what switch to throw in a command line launch to correct the problem.
So my effective question is this, has anyone seen a problem quite like this and if so why did it occur and how was it addressed?
Thanks in advance for any thoughts you may have.
Ed.

I knew it had to be something so simple that I'd overlook it. Thank you! I'd not seen that happen in earlier versions (10.6 and previous), so it caught me a bit off guard. Thank you again.

Crystal Report Server - InfoView question

Hi . I have a question on the Crystal Report Server. I want to send the output ( excel file ) from a crystal report in Infoview. I tried to click the 'Send To' button, but it only sends out the .rpt file. Please help...

Hi,
If you schedule the report you will have output file options for Excel, PDF, Word...
You should probably have an Export option on your viewer as well - Excel should appear in this. (You need to have permissions to see this)
Regards
Alan
PS: This should be posted to the BO General or Crystal Reports forums.

Office Web Apps server security question

Hello,
According to this technet article Microsoft appears to recommend against allowing both external and internal users access to your OWA server.
http://technet.microsoft.com/en-us/library/jj219435(v=office.15).aspx#viewers
"Files that are intended to be viewed through a web browser by using Online Viewers must not require authentication. In other words, the files must be available publicly because Online Viewers can’t perform authentication when it is retrieving files.
We strongly recommend that the Office Web Apps Server farm that you use for Online Viewers is only able to access either the intranet or the Internet, but not both. This is because Office Web Apps Server doesn’t differentiate between requests for intranet
and Internet URLs. Somebody on the Internet could request an intranet URL, for example, causing a security leak if an internal document is viewed."
Just trying to make sense of this. I am building a new Lync 2013 environment and I definitely want my internal users to be able to leverage the OWA server. So does that mean I should not publish that server to the internet? And if I do
not, does that mean my users will not be able to share a powerpoint presentation at all to external users? If this is all true and I'm understanding this correctly, does this mean that most implementations choose one or the other? Or does Lync not
use these "Online Viewers" so I can just disable them and users will still be able to share powerpoint presentations with external users?
Thanks for any help you can provide for this confusion.

No, you should publish to both internal and Internet on the same server, it's just how it's done with Lync. You can't really have two with Lync for this purpose anyway. Users will upload PowerPoint presentations to it when it's time to share,
no editing is possible, and the risk is generally minimal. You can shorten the cache time to help if you're concerned.
Regardless, from the article:
http://technet.microsoft.com/en-us/library/jj219442(v=office.15).aspx setting OpenFromUrlEnabled "Turns on or off the ability to use Online Viewers to view Officefiles from a URL or UNC path.". This is set to false and turned off by default.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer".
SWC Unified Communications

Mail server setup question on mini server

I want use Mac Mini Server as my emailserver, I have some question here.
Is 500G hard-disk enough for storedata? After two or three years, incase 500G already not enough for store all email data, Could I have any solution for this issue? My company has around 100 email user.
Is Mac mini server can do 7*24job?

Is 500G hard-disk enough for storedata?
How long is a piece of string?
Seriously. Who can answer that question? no one here can. It depends on way more factors than you've given us. The use of IMAP (where messages are stored on the server) vs. POP (where they're downloaded to the client) will also make a difference, as will retention policies (do you require keeping all email correspondence for 5 years? or do you not care if users delete mail immediately?)
A good starting point, though would be to look at the average size of a user's mailbox now and extrapolate.
For example, I think I'm a fairly heavy email user and my ~/Library/Mail directory is 5.4GB. If everyone in your company is like me then you'd need 5.4GB x 100 users, or 540GB to store all their mail.
Most users aren't like me, though, but you'll have to determine that yourself.
After two or three years, incase 500G already not enough for store all email data, Could I have any solution for this issue?
Sure. You can add additional storage (e.g. via FireWire or some external mechanism) and migrate mailboxes there. You can even selectively store different user's mailboxes on different volumes. It's all possible.
Is Mac mini server can do 7*24job?
Sure. Many people are using the Mini 24/7. I wouldn't say it's ideal for critical systems but using mirrored disk will insulate you from the biggest problem. If this is going to be the main mail system for your company though, you need to consider other elements such as backup and failover (what to do when/if this machine crashes/explodes/is otherwise unavailable).

Mail server setup question

i am setting up a mac pro with the leopard server. After 3 reinstallations of the os i keep reaching the same situation. Once i have setup mail services the mails can only be relayed within the local lan and mail sent via smtp can go to the internet. Mails forwarded to the ip/subdomain however do not arrive.
the dns & mx has been setup as the mail services pdf indicates. on the domain side a subdomain has been created with mx but of a lower priority than the main domain mx.
www.casinomalindi.com is the domain and the mx are mail.casinomalindi.com & mld.casinomalindi.com
kindly assist.
regards

Sorry for the delay in response. The server is at a remote site.
Sending mail is OK and receipients are receiving mails ok. The problem is in receiving mail from external sources. e.g. if i send mail from gmail i get the following:
Technical details of temporary failure:
The recipient server did not accept our requests to connect. Learn more at http://mail.google.com/support/bin/answer.py?answer=7720
[mld.casinomalindi.com (1): Connection timed out]
kindly find the post conf file:
------------------------------postconf -------------------------------------
Last login: Tue Jun 30 15:35:43 on ttys000
mld:~ adminmyd$ postconf -n
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
html_directory = no
inet_interfaces = all
mail_owner = _postfix
mailboxsizelimit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
messagesizelimit = 10485760
mydomain = casinomalindi.com
mydomain_fallback = localhost
myhostname = mld.casinomalindi.com
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpdpw_server_securityoptions = gssapi
smtpdrecipientrestrictions = permitsasl_authenticated,permit_mynetworks,reject_unauthdestination,permit
smtpdsasl_authenable = yes
smtpduse_pwserver = yes
unknownlocal_recipient_rejectcode = 550
mld:~ adminmyd$
pls advise if this is ok.
regards
LM

Mac OSX 10.5.3 Leopard STANDARD Server CHANGEIP questions

I am confused on how to check and change TCP/IP addresses via Mac OSX Leopard 10.5.3 server in STANDARD mode.
I watched the great Sean Colins Lynda.com tutorial on OSX 10.5 Server, but i still have a few questions with how to deal with DNSs and CHANGE IP
Here is the hardware & scenario:
-- G5 Silver Doors Tower with 1.7GB Ram and Mac OSX 10.5 Leopard 10 user server
-- Cablevision ISP with there BOOST service [that allows you to set-up a server and does not block ports 25 or 80]
-- NO Static IP from Cablevison [they change it once in a blue moon when they want so I rely on DYNDNS below]
-- Apple Airport TimeCapsule [with all latest firmware updates etc]
-- DynDNS account and client software installed on server to update the DYNDNS severs with the current Cablevisions TCP/IP address
Problem and Question
===
Three times a year I will need to move this server. 1/3rd of year and at setup it is on residential Cablevision Account and Apple TimeCapsule Router, Then 2/3 of year server will be behind two funky large networks where I will have to set-up manual IP, DNS, and proxy info
I need to know what the proper process is when I want to move the Mac. When the 10.5.3 STANDARD Server is in STANDARD mode can I just change the TCP/IP address in SYSTEM PREFERENCES...NETWORK ? Do I have to run the CHANGEIP command Afterwards [or Before]
Also, for DNS config on server does it always need to have the loop back self reference [127.0.0.1] or can it just be configed from the Airport and/or network?
And, big problem for now... dumbly when I set-up the OSX Server on the TimeCapsule Network I forgot to write down the TCP/IP address used. Now I am on the second funky corporate network and can't use the command:
sudo changeip - idon't_knowip 10.0.96.48 server.cmtenyoffice.com server.cmtenyoffice.com
Also, another question for the HOSTNAME... should it be HOSTNAME or FullyQuallifiedDomainName?
My HOSTNAME seems to be "CMTE-Server.local" but I specified the FullyQualifiedDomainName to "sever.cmtenyoffice.com"
NOTE: I do NOT have this domain registered and am not yet hosting a website or email server on this machine, but I may soon register the domain and then point MX records etc to the DYNDNS record that would point to server
Anyhow, to wrap up,
1- What is the proper process for changing the TCP IP address with a Leopard 10.5.3 STANDARD SERVER?
2- What do I do with CHANGEIP command if I don't know what the STARTING TCP/IP address is?
3- For HOSTNAME should I be entering the unregistered FQDN or the "CMTE-Server.local"
Thanks for any an all info.
-- Eric ZORK Alan
-- Professional Poet & BED VLOGGER

Hi Eric
You use the one its using now.
If the Server is Standalone issue:
sudo changeip - oldIP newIP oldhostname newhostname
Even if nothing changes you can still issue the command, supply the system admin name and password and let it do its stuff. Prior to doing this you must change the address in the Network Preferences Pane. Although not necessary it does not hurt if you restart afterwards.
If the Server is an OD Master issue:
sudo changeip /LDAPv3/127.0.0.1 oldIP newIP oldhostname newhostname
You will not only be prompted for the system admin name and password but also for the Directory Administrator name and password. With both command you will get feedback as to what is going on. Obviously you will see more changes made if its an LDAP Server. Hostname will be the fully qualifed domain name (FQDN) defined in the DNS Service eg: myserver.mydomain.com.
man changeip
For usage. Actually prior to doing any of this and incidentally a good way of finding out not only the hostname but also the IP address associated with that name issue:
sudo changeip -checkhostname
You should run this before/after making the change. If everything checks out OK it should report 'the names match, there is nothing to change'. This is a good a test that lets you know its worked. However its not the only test. I would run host, nslookup and dig also. Next set a client to use the Server for its DNS and then test connectivity with firstly the Server's fqdn and lastly its IP Address.
Ultimately the truest test is: "what impact has the change made on clients accessing the Server and its Services successfully?"
If the Server is a mature OD Master (possibly PDC as well) with DNS, Mail, AFP, SMB, iCal and any other 2-3 additional services configured and running then issuing changeip may appear - superficially - to have worked. Occsasionally - in my experience - serious problems begin to develop with the LDAP database to the extent where the only 'cure' is to demote to Standalone, sorting out DNS and re-promoting. This can have serious repercussions if you have not made preparations to limit the re-build time prior to changing the IP address and issuing the command. Equally it can be successful. However can you take the risk?
Tony

Final Cut Server Usage Question...

I have just started researching this product and confused a little about it. I am the IT dept at a small advertising agency that does quite bit of video work.
Mostly all of the workstation in the office are PowerMac G5's that clock in at dual 2.2GHz or above with 4GB of RAM
We also have an Xserve G5 (Dual) with 4GB of RAM a 2GB fibre card installed and an apple RAID system as well. The office is all wired with 10/100.
With final cut server - will they be able to actullay edit video over the network on the RAID through the Xserve. Is that what this software is for? Sorry for such a lame question. If not is this basically like Adobe's Bridge application?
Let me know.

Yes it does do basically what your saying, You can leave the source media on the server and just edit from your local machine. You can also download proxies (lower res version of the source media) and edit on a laptop or with a PC without having to move the large source files.
I cant imagine any reason why any company or small business using more than one editing machine wouldn't go for this solution
Does that answer your question?

Repair Disk Permissions question...

I keep getting this after I repair disk permissions :
"Permissions differ on "System/Library/LaunchDaemons/com.apple.usbmuxd.plist", should be -rw-r--r-- , they are -rwxr-xr-x .
Warning: SUID file "System/Library/CoreServices/Finder.app/Contents/Resources/OwnerGroupTool" has been modified and will not be repaired.
Group differs on "private/etc/cups", should be 0, group is 26.
Permissions differ on "private/var/spool/cups/cache/rss", should be drwxr-xr-x , they are drwxrwxr-x ."
Can someone please tell me what this means?...and especially the Warning: SUID...something modified and will not be repaired?...is this something I should be concerned about?...
Wasn't sure where to put this question...if it's in the wrong place please tell me and i'll post it elsewhere...
Thanks for help in advance...
M
Message was edited by: Morris Taub
Message was edited by: Morris Taub

Hi Morris,
Here's the Apple article on the subject:
http://support.apple.com/kb/TS1448
Apparently it is not a problem. Mine started giving these after the 10.5.5 update.

Server permissions questions

Similar Messages

Maybe you are looking for