Setting security in ESSCMD script (long)

Hi, I'm pretty new to Essbase but couldn't find an answer to a problem I'm having running a nightly script.Basically, I have to copy an application every night before running the nightly batch update - so that users can access either the pre- or post-update versions.We use a script like the following to make a copy of the application prior to updating the data: LOGIN "server" "username" "password" ; LOADDB "Snapshot" "History" ; SELECT "Snapshot" "History" ; DELETEAPP "Snapshot"; LOADDB "History" "History" ; SELECT "History" "History" ; COPYAPP "History" "Snapshot"; :END ; LOGOUT ; EXIT ;Basically, it deletes the "old" snapshot, and then copies the current History application / database as Snapshot.The problem I have is that a specified group of users need access to this database, but every time this script runs it deletes all their security access and I have to reset it through the Application Manager. The script runs after midnight, and a few of the users need access starting at 6:00 AM, and I don't want to have to dial in every day at 5:00 AM to set it.Is there a simple way to do this in the esscmd script we are running?Thanks,Scottp.s. using Essbase 5.0.2

FYI-When you delete the application or Database ,all security asociated with with that application is deleted, so there is no way to get back the security setup .There is a work around to overcome it.1. Before you run your esscommand script,Take security file Backup on server and save it in a safe location.2.Run your esscomand script .3.copy back your security file on to the server, so that you can restore your stuff,without re-doing the whole process.This security file is available on Hyperion bin directory with .Sec Extension.Let me know, if you have any questions.Thanks

Similar Messages

Set security at app level

Hello, Is it possible to set security for a group at the application level so it automatically trickles down to the databases below (even new ones)? Thank you in advance.

We do use incremental dimension builds and we haven't seemed to have a problem about errors not written to the error log. There was a period when the write and append functions of the error logging were working backwards in MAXL, but that has long since been fixed. import database 'credits'.'credits' dimensions from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day7" using server rules_file 'store' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day7" using server rules_file 'acct' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day7" using server rules_file 'depts' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day6" using server rules_file 'store' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day6" using server rules_file 'acct' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day6" using server rules_file 'depts' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day5" using server rules_file 'store' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day5" using server rules_file 'acct' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day5" using server rules_file 'depts' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day4" using server rules_file 'store' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day4" using server rules_file 'acct' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day4" using server rules_file 'depts' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day3" using server rules_file 'store' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day3" using server rules_file 'acct' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day3" using server rules_file 'depts' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day2" using server rules_file 'store' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day2" using server rules_file 'acct' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day2" using server rules_file 'depts' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day1" using server rules_file 'store' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day1" using server rules_file 'acct' , from local text data_file "D:\\hyperion\\essbase\\app\\daily_05\\daily_05\\600$day1" using server rules_file 'depts' on error write to '3g.out'; This is a particularly nasty example of an incremental build, using daily data files to do the dimbuild but when we get errors, they seem to come from more than the last file parsed. If the on error write to isn't working for you, try the on error append to. Sometime in the not so distant past, the write and append functions were flopped causing a bug of the first degree. I'm no longer onitoring production processes, moving on to development and documentation, but I've written quite a bit of MAXL in the past and much prefer it to ESSCMD.

Setting Security in Internet Zone to High affects Trusted Sites

In response to the recent Security Advisory, we recommended our users set the Internet Zone security to High.
However, this is causing our local Intranet site which is in every users Trusted Sites Zone (set at Medium-Low) to not function.
I was under the impression that Trusted Sites are treated different than Internet Sites.
What security settings do they share that would be affected by setting the Internet Zone to High?
Thank you.
Jeremy Leigh

Hi
f12>Console tab, refresh the page to show suppressed error messages, warnings, blocked content warnings.
A 'High' security zone settings is equivalent to the Restricted Zones default setting.
by default Active Scripting, scripting of ActiveX and applets and xss is disabled in the Restricted Zone.... basically domains mapped to the Restricted sites zone will be useless without active scripting.
Rob^_^

Setting secure flag on weblogic (5.1) session cookie.

Hello All,
 I need to set secure flag on weblogic session cookie. I am not able to
 find any property in weblogic.properties file to set the secure flag for
 session cookie.
 Does anybody has any idea how to achieve this.?
 Thanks
 Nitin


The best way to reduce GC is to change you application to use less memory. Serious.
There are a number of JVM options for GC. I can't tell you what will work best
for your application.
25 seconds is way too long for a GC. Is the OS paging? You may wish to invest
in additional memory.
Mike Reiche
vijendran <[email protected]> wrote:
Hi,
I am running a load test which will simulate 100 users. when i tried
to simulate i found that GC is happening often even though i set the
heap to 512 MB., and that too some time it takes upto 25 secs. for a
GC to complete. Please advise on how to increase the performance for
more number of users (without clustering weblogic) and to avoid GC happening
often.
Regards
Vijendran

Figure out wheather it is Esscmd Script or Maxl script

Hello Friends, could you tell me please wheather it is Esscmd script or Maxl script? Thanks in advance.
/*     ===============================================================
     This script will:
     - Prevent connections to the BISEssApp_A and BISEssApp
          applications
     - Unload the BISEssApp application
     ===============================================================     */
/*     Log In                                        */
SPOOL OFF;
LOGIN $1 $2 ON $3;
/*     Send output to a log file                         */
SET MESSAGE LEVEL ERROR;
SPOOL ON TO "$BISMAXLLog";
/*     Disable application connections                         */
ALTER APPLICATION $BISEssApp_A DISABLE CONNECTS;
/*     Try to unload BISEssApp_A                              */
ALTER SYSTEM UNLOAD APPLICATION $BISEssApp_A;
IFERROR 'Sleep1a';
GOTO 'Finish';
DEFINE LABEL 'Sleep1a';
/*     Wait 2 minutes and try to unload BISEssApp_A a 2nd time          */
SHELL "/BISApps/Control/Pgms/Sleep.exe 120";
ALTER SYSTEM UNLOAD APPLICATION $BISEssApp_A;
IFERROR 'Sleep1b';
GOTO 'Finish';
DEFINE LABEL 'Sleep1b';
/*     Wait 2 minutes and try to unload BISEssApp_A a 3rd time          */
SHELL "/BISApps/Control/Pgms/Sleep.exe 120";
ALTER SYSTEM UNLOAD APPLICATION $BISEssApp_A;
IFERROR 'ErrorExit1';
GOTO 'Finish';
DEFINE LABEL 'ErrorExit1';
/*     BISApp could not be unloaded                         */
SPOOL OFF;
SPOOL ON TO "$BISMAXLErr";
DISPLAY SESSION ON APPLICATION $BISEssApp_A;
SPOOL OFF;
SPOOL ON TO "$BISMAXLLoga";
GOTO 'AllowConnects';
DEFINE LABEL 'AllowConnects';
/*     Enable connections to the applicaton                    */
ALTER APPLICATION $BISEssApp_A ENABLE CONNECTS;
GOTO 'Finish';
DEFINE LABEL 'Finish';
/*     Logout & Exit                                   */
LOGOUT;
EXIT;

Hi,
This is definitely Maxl.
Cheers
John
http://john-goodwin.blogspot.com/

Not able to set security group without mail enabled as site collection admin using powershell in sharepoint online site - office 365

not able to set security group without mail enabled as site collection admin using powershell in sharepoint online site - office 365?
Any idea?

after few days test in my lab, I can see that only email enabled group can be added as site collection admin using POWERSHELL.
hope this helps who stuck like me!! :-)

I forgot my icloud password but when I go to verify my birthdate in order to answer my security questions, it says "For your security, please provide a longer answer." can someone explain this to me? Seriously how can I provide a longer answer?

I forgot my icloud password. I attemptted to reset it by going to my security questions and answering them but when I go to verify my birthday, it says
Please verify your birth date to continue.
                     Month                     January                     February                     March                     April                      May                      June                     July                     August                     September                     October                     November                     December                                      Day                     1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31                                          Year                         2014
2013
2012
2011
2010
2009
2008
2007
2006
2005
2004
2003
2002
2001
2000
1999
1998
1997
1996
1995
1994
1993
1992
1991
1990
1989
1988
1987
1986
1985
1984
1983
1982
1981
1980
1979
1978
1977
1976
1975
1974
1973
1972
1971
1970
1969
1968
1967
1966
1965
1964
1963
1962
1961
1960
1959
1958
1957
1956
1955
1954
1953
1952
1951
1950
1949
1948
1947
1946
1945
1944
1943
1942
1941
1940
1939
1938
1937
1936
1935
1934
1933
1932
1931
1930
1929
1928
1927
1926
1925
1924
1923
1922
1921
1920
1919
1918
1917
1916
1915
1914
1913
1912
1911
1910
1909
1908
1907
1906
1905
1904
1903
1902
1901
1900
1899
1898
1897
1896
1895
1894
1893
1892
1891
1890
1889
1888
1887
1886
1885
1884
1883
1882
1881
1880
1879
1878
1877
1876
1875
1874
1873
1872
1871
1870
1869
1868
1867
1866
1865
1864                     For your security, please provide a longer answer.
Seriously how am I suppose to provide a longer answer?

If you are having problems using the website to reset your password, you can call AppleCare support. They can assist you with AppleID issues, and I believe there will be no charge for that.
AppleCare phone number: (800)-694-7466

How to set page numbers in scripts

Hi,
i want page numbers at bottom of page,
please tell me how to set page numbers in scripts?

Hi,
In footer
use this
&PAGE& / &SAPSCRIPT-FORMPAGES&
&PAGE& of &SAPSCRIPT-FORMPAGES&
reward if it helps..
regards,
Omkar.

Failed to set security on SQL Server registry key. Error: 2

Hi,
I have a Primary site (mixed mode) running SCCM 2007 SP1 for many months now with no issues.
This site is made up of two Win 2008 sp2 servers sharing the SCCM roles:-
SCCM01 - Site server, DP, RP, PXE and SQL2005 hosting the SCCM database
SCCM02 – SUP, MP, FSP, SLP
The SQL2005 on SCCM01 is running under a domain service account called
domain\service_sccm which is also a sysadmin in SQL as is the SCCM02 server.
In an effort to resolve the isse I have made this account a Domain Admin.
I have also used this account to log onto SEC01 to run the Secondary Site installation and to be the SQL Service account.
I'm now trying to add a Secondary Site on a Domain Controller called SEC01 (also Win2008 sp2) and on the same LAN as the SCCM01/02.
This is where I get problems.
I run the installation locally on the Sec Site server (DC) as a Domain Admin and the installation completes OK (all green ticks),
the ComponentSetup.log and Pre-Reqs are all good as well however when I check the ConfigMgrSetup.log I see the below -
Failed to set security on SQL Server registry key. Error: 2.
<11-09-2010 22:46:59> SMS Setup full version is 4.00.6221.1000
<11-09-2010 22:46:59> Successfully set security on Setup registry key.
<11-09-2010 22:46:59> Failed to set security on SQL Server registry key. Error: 2
<11-09-2010 22:46:59> Successfully set security on Identification registry key.
<11-09-2010 22:46:59> Creating SMS Inbox Source registry key ...
<11-09-2010 22:46:59> Installing SMS Site Component Manager ...
<11-09-2010 22:46:59> Installing Site Component Manager under acct <NT AUTHORITY\SYSTEM> path <C:\Program Files (x86)\Microsoft
Configuration Manager\bin\i386\sitecomp.exe>
<11-09-2010 22:47:01> Started Site Component Manager service
<11-09-2010 22:47:01> SMS Site Component Manager installation completed.
<11-09-2010 22:47:01> Done with service installation
Adding the PMP role to SEC01 also fails to install and no MPSetup or MPControl logs are created.
WebDav and win2008 roles, features all added and server fully patched.
Despooler.log on SCCM01 seems good and passing keys.
Tried installing to default path and to shortened path such as C:\SCCM
The new secondary site is listed in the console and an address can be added for the Secondary Site
BITS Server Extensions and Remote Differential Compression Features are enabled.
The Group memberships all appear ok:-
SCCM01
Local Admins
contains the sec site server SEC01, SCCM01, installation accounts
SMS_SiteToSiteConnection_001
SEC01 (the sec site server)
SMS_SiteSystemToSiteServerConnection_001
SCCM02
SEC01
No Local Admins as a DC
SMS_SiteToSiteConnection_002
SCCM01
SMS_SiteSystemToSiteServerConnection_002
empty
SQL 2005
This has the account logged in during installation as a sysadmin
SCCM02 is also sysadmin
The fundamental issue appears to be that the SEC01$ server account is not being added to SQL Logins (and therefore SCCM database Roles)
therefore the installation cannot complete.
I have tried to manually add the SEC01 account to SQL Logins before installation of Sec Site but this did not work.
Not sure if the fact that SEC01 is a DC may be a factor.
Appreciate any help if anyone has seen this before or can suggest a resolution.
Thanks

After a lot of digging around and head scratching I eventually found the resolution.
The original thread title Error turned out to be a bit of a red herring in that my failure to deploy Sec Sites came down to two separate issues seemingly unrelated to the error message of the thread title.
The first part of the resolution was to manually create the SQL Server accounts for the Sec Site Servers and assign them to the smsdbrole_MP DB role to
let the SQL side of the SCCM install complete a s these were not being created automatically.
This then left the fact that that the installation of the Sec Site completed successfully according to the install logs in C:\ however the DP and MP would
never install.
The big clue was eventually contained in the mpfdm.log errors relating to
**ERROR: Cannot find path for destination inbox SMS_AMT_PROXY_COMPONENT on server REGISTRY SMS_MP_FILE_DISPATCH_MANAGER
and
**ERROR: Cannot find path for destination inbox Asset Intelligence KB Manager on server REGISTRY SMS_MP_FILE_DISPATCH_MANAGER
Thankfully the errors led me to these two blogs:
http://myitforum.com/cs2/blogs/scassells/archive/2009/07/20/error-cannot-find-path-for-destination-inbox-sms-amt-proxy-component-on-server-registry.aspx
and
http://social.technet.microsoft.com/Forums/en-US/configmgrsetup/thread/5fcc53d4-8629-4b34-9eaa-6cb020eedc13/
As it turned out the SCCM installation registry and folder creation does not complete and I had to manually enter the reg settings as detailed in the
links above to complete the installation. Once I did as described everything worked a treat – all my MPs and DPs are 100% now.
Solutions
Add the following reg keys to each of your effected secondary sites.
Inbox Fix
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\MPFDM\Inboxes]
"Asset Intelligence KB Manager"="E:\\Program Files\\Microsoft Configuration Manager\\inboxes\\AIKbMgr.box"
"SMS_AMT_PROXY_COMPONENT"="E:\\Program Files\\Microsoft Configuration Manager\\inboxes\\amtproxy.box"
Asset Intelligence fix:
Note: you will need to identify the next largest key value.
In my example it was key 49
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Inbox Source\Inbox Definitions\49]
"Inbox Name"="Asset Intelligence KB Manager"
"Relative Path"="inboxes\\AIKbMgr.box"
"NAL Path"=""
"User Rights"=dword:00000000
"Service Rights"=dword:00000004
"Monitoring Enabled"=dword:00000001
"Location Type"=dword:00000001
"Guest Rights"=dword:00000001
AMT registry Fix.
 Note: you will need to identify the next largest key value.
In my example it was key 50
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS\Inbox Source\Inbox Definitions\50]
"Inbox Name"="SMS_AMT_PROXY_COMPONENT"
"Relative Path"="inboxes\\amtproxy.box"
"NAL Path"=""
"User Rights"=dword:00000000
"Service Rights"=dword:00000004
"Monitoring Enabled"=dword:00000001
"Location Type"=dword:00000001
"Guest Rights"=dword:00000001
Big thanks to Shaun Cassells and John Marcum for these blogs

How to set security group as primary site collection admin and secondary site collection admin using powershell in sharepoint online site - office 365?

How to set security group as primary site collection admin and secondary site collection admin using powershell in sharepoint online site - office 365?

Hi,
According to your description, my understanding is that you want to set security group as admin of primary and secondary site collection using PowerShell command in office 365.
I suggest you can use the command below to set the group to site owner, then it will have the site collection admin permission.
Set-SPOSite -Identity https://contoso.sharepoint.com/sites/site1 -Owner [email protected] -NoWait
Here are some detailed articles for your reference:
https://technet.microsoft.com/en-us/library/fp161394(v=office.15)
http://blogs.realdolmen.com/experts/2013/08/16/managing-sharepoint-online-with-powershell/
Thanks
Best Regards
Jerry Guo
TechNet Community Support

Combine functionality Batch Create Multiple files and Set Security

Greetings,
Is there any way to combine the functionality of Acrobat Pro’s “Batch Create Multiple Files” (File (drop down) -> Create PDF -> Batch Create Multiple Files…) and running a batch process (Advanced -> Document Processing -> Batch Processing -> Batch Sequences -> Set Security)?
Ideally I’d like to either:
1) Add the “Set Security” batch process to the “Batch Create Multiple Files … command located under the File (drop down) -> Create PDF
or
2) Be able to create a batch process that first allows me to select the documents (Word, Excel, etc.) I want to convert into PDF files, then converts them, then runs the Set Security batch process.
Right now it isn’t too much trouble to first “Create Multiple Files…” then run the batch process Set Security, but it would be nice to be able to do both with a single command.
Any suggestions?
Thank you,
TPK

I have uploaded the files and shared them. These are the links
Grade 11 Maths Standardisation Project Paper 2 2013.doc
https://files.acrobat.com/preview/9694310d-ca7f-4919-883d-c53b36215d89
Grade 11 Maths Standardisation Project Paper 2 Analysis Grid 2013.doc
https://files.acrobat.com/preview/97da9e5f-d412-4d25-9bbc-d1a525d90826
Grade 11 Maths Standardisation Project Paper 2 Diagram Sheet 2013.doc
https://files.acrobat.com/preview/f50dd62e-af04-4060-85c5-fa81ce6803d8
Grade 11 Maths Standardisation Project Paper 2 Formula Sheet 2013.doc
https://files.acrobat.com/preview/7fc6007b-aaa6-4d65-9a8c-bf99818474a5
Grade 11 Maths Standardisation Project Paper 2 Marking Guidelines 2013.doc
https://files.acrobat.com/preview/b3a715bb-3683-48df-b0ec-3d17442275be
Grade 11 Maths Standardisation Project Paper I Analysis Grid 2013.docx
https://files.acrobat.com/preview/ab62e6b6-0261-434e-8a2f-382f74335685
The first file is the problem file. If you create this file separately, Acrobat will convert it perfectly. But "Batch create multiple files" and the graphics are deconstructed on page 8

How to set a picture when you long- in

how to set a picture when you long- in

How to set a picture when you log in to where ?

JavaBean - Netscape security model is no longer supported.

Netscape security model is no longer supported.
Please migrate to the Java 2 security model instead.
Is logged to my java console window and the javabean will not be invoked. How do I migrate to the Java 2 security model. I'm tryÃng to use acrobat viewer for Java as a bean in my forms to open and print pdf documents.
Thanks,
Anders

Anders,
see also my response to your second posting on this:
VBean
My last information regarding the Acrobat Reader jar files were that they are based on Java 1.x, wchih may explain the problems you are running into. I tried these jar files one or two years ago and had problems getting them to work in a newer Java environment.
Frank

Can you set security on Collab folders or just projects?

I know this is the Content Services forum, but I couldn't find a forum for Collab. Anyone know if you can set security to the folder level in Collab 4.0.2 or can you only set it to the project level?

thanks for the clarification...there is no concept of setting security on actual project folders. Security is managed on an individual project basis.

Detecting clientside NLS_LANG setting in SQL*Plus script

Our company has developed an application that uses an Oracle database as it backend. Companies can buy our application and run it against their own Oracle installation.
A new version of our application often requires an update to the Oracle database schema.
Together with new application files we send our customers an update.sql script they must run against their database using SQL*Plus.
This update script may contain international characters like é for example:
UPDATE SHOPS SET DESCRIPTION = 'Café'
WHERE SHOP_ID=1We save the SQL-script file in windows-1252 encoding so the character é is encoded as 0xE9 in the script file.
When the DBA running the upgrade script has set NLS_LANG=.WE8MSWIN1252 this works perfectly.
When the DBA has set his NLS_LANG=US7ASCII the é gets replaced by an upside-down question mark. Other NLS_LANG settings can also be troublesome.
To prevent this we give very clear installation instructions. However, nobody reads them. This leads to two questions:
A) Is there a way to prevent this problem so I do not depend on the NLS_LANG setting by the DBA running the upgrade script?
B) Otherwise: is there a way to test for the NLS_LANG setting inside the script and abort if it is not WE8MSWIN1252?
Info:
Database is 10.2.0.3/10.2.0.4 and sometimes 10.2.0.5, always database character set WE8MSWIN1252.
Client software: I do not know what each DBA uses but it will be mostly 10g client software
Client OS: Some DBA's will be running the script from Windows, others from some Unix variety. I cannot control that.

I agree with Sergiusz. You're much better off if you can remove character set dependencies from your scripts by using commands like this.
UPDATE SHOPS SET DESCRIPTION = unistr( 'Caf\00E9' )
WHERE SHOP_ID=1 ;If that's not possible however you can try this approach to determine the session's character set.
SQL> column USERENV_LANGUAGE format a30
SQL> column oracle_charset   format a20
SQL> r
1 select
2    userenv_language
3 , substr
4    ( userenv_language
5    , instr( userenv_language, '.' ) + 1
6    ) as oracle_charset
7 from
8 ( select sys_context( 'USERENV', 'LANGUAGE' ) as userenv_language
9    from dual
10* )
USERENV_LANGUAGE               ORACLE_CHARSET
AMERICAN_AMERICA.AL32UTF8      AL32UTF8 --
Joe

Setting security in ESSCMD script (long)

Similar Messages

Maybe you are looking for