Shell script adapter and passwords

Does anyone know how to get a password into a shell script resource adapter?
I've set up the "password" attribute in my resource adapter's schema, expecting at least to see the encrypted password in in $WSUSER_password, but it's always empty. Other attributes I add to the resource scheme show up in the scripts as shell variables just fine.
Side question - the Solaris resource adapter, which looks a lot like the shell script adapter, doesn't even have a password in its schema map, yet it seems to set passwords just fine. What's up with that?
The ShellScriptResourceObjects55.xml example doesn't seem to deal with passwords at all.

Hi,
Have you been able to resolve this issue?
I am currently working on configuring a Shell Script Resource on my IDM system.
I am still in the "*Create User"* stage of things (I haven't even begun working with the other Actions : Get User, Get All Users, Delete User, Update User)
After a month-long period of trial-and-error, and a lot of headaches, I finally succeeded in Creating a new user on my Unix Machine, without any errors
Except for one thing : for some reason, the user I create is not being given a password!
A first, I configured the "Attribute Mapping" page to include a "Password" attribute. This did not work.
Then I removed the password from there (I figured that when I input the user's basic information on the IDENTITY tab in IDM, then the password gets automatically passed to the Unix machine).
Still, this did not work.
The funniest thing is : I am not getting any errors. The user is created on my Unix machine. And, also, in my My-SQL database.
The problem is : when I try to log into that same Unix machine as the user, it does not work, because......of course.....*.there is NO PASSWORD*.
What could be the problem?

Similar Messages

Shell Script Adapter - getting errors while configuring

Hi,
I am trying to configure a shell script adapter for one of my AIX resource.
the following are the values I gave to test the configuration
1. host
2. tcp port (22)
3. login user
4. password
5. login shell prompt (#)
6. connection type SSH
with these values, I tried to test the configuration, I get the following errors,
Test connection failed for resource(s):
Shell Script: Failed to find 'useradd' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'usermod' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'userdel' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'groupadd' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'groupmod' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'groupdel' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin'
is this a privilege issue?
please let me know so that I can get the appropriate privilege from my sysadm to proceed further.
thanks.

Hi, thanks for your response.
I got sudo access as root to the AIX resource.
Initially, NOPASSWD was set for my sudo privilege. using that I tried configuring the adapter, but I got errors like "Script failed waiting for "ASSWORD:" in response ",)#+(:" . I looked at the forums and was informed that I would need to 'UN-SET' the NOPASSWD attribute. I got that attribute un-set . but now I get the error
WLP_SmartScript_Original: Failed to find 'groupadd' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' WLP_SmartScript_Original: Failed to find 'groupmod' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' WLP_SmartScript_Original: Failed to find 'groupdel' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin'
Not sure why Sun should check this. these commands are not part of AIX. right? can you please tell me where I am going wrong?

Shell Script Adapter Problems

Hello all,
We are using a shell script adapter in our system. The adapter creates updates and deletes shell accounts on a unix system. The adapter works fine in dev and test environments, but is having problems with deletes in production. The following error is returned:
com.waveset.util.WavesetException: Script failed waiting for "_,)#+(:" in response "" com.waveset.util.WavesetException: Script processor timed out with nothing to read and the following unprocessed text: "".
The script executes a few commands via sudo, then exits. The delete script that is executed on the unix resource is taking about 1 minute 30 seconds to execute. The error in IDM is some times presented at around 1 minute. This led me to believe it was a timeout issue, however when I increase the "Connection Idle Timeout" to be 1,000,000 I still see the same behavior.
Does anyone know what might be causing this? I tried to trace the com.waveset.adapter.ShellScriptResourceAdapter class, however I do not see anything useful in the trace file.

I figured out the problem. While we were setting and modifying the timeout setting associated with the resource, we were not setting the timeout attribute associated with the specific resource action we were using. This is an optional attribute associated with the ResTypeAction element in the resource actions xml file. I have no idea what good the resource timeout attribute is, as it did not seem to have any effect.
Also, while the attribute is optional, it must be being set to some default value. I see no mention of the default value in the current documentation, however I suspect it to be 1 minute.

Please provide me unix shell script (export and import of database schema)

please i am new in unix
\please give me sample unix shell script (export and import of database schema)

please i am new in unix
\please give me sample unix shell script (export and import of database schema)Instead of providing you the readymade unix shell script for your requirement, I will give you the hints to prepare the same at your own.
Create a file with .sh extension.
# Specify and set all required Environment variables.
ORACLE_HOME, PATH, NLS_LANG, etc.,
# Use the export command with all clauses
export scott/tiger@orcl file=scott.dmp log=scott_emp.log
# Compress it.
compress scott.dmp
Refer any unix/linux documents for scripting basics.
http://www.bijoos.com/ora7/oracle_unix.htm
Regards,
Sabdar Syed.

Shell Script: Timeout and return error if Sqlplus hangs

Shell Script: Timeout and return error if Sqlplus hangs
Dear all,
This morning, our production database hung with lots of ORA-600 and 7445. The issue has been escalated to Oracle Tech support but my monitoring script which tries to make a connection every 5 mins to the database to see if its up, did not alert me. The reason is that, it connected to the database and hung, never came out to report an error and so I never got alerted until a user called me.
Can any one tell me how I can exit from the sqlplus block if I dont get a response in x seconds? This sqlplus block is being called with in a shell script.
Any help is highly apprciated.

I don't know of anything built into any shell scripting language that would do this, no. I'm not a Perl programmer, but I have a vague recollection that Perl may have something useful here.
From the "separate thread" part of my comment, though, you could certainly spawn a separate thread (thread 2), have thread 2 wait a period of time, then look for a message from thread 1 and throw an error if the message hadn't been sent. I don't know that I'd be for writing multi-threaded shell scripts, though. The heartbeat also gives you a layer of redundancy so that something is monitoring the monitor in case that process stops working.
Justin

Shell Script Adapter - what kind of sudo privilege needed?

Hi All,
I have a requirement in my project where I need to manage unix user provisioning and de-provisioning by using shell scripts in AIX servers. For this purpose, I selected Shellscript adapter as it allows us to execute scripts that run on the resource.
1. while I have account in the AIX server, I need to know what kind of sudo privilege is needed. Will I need sudo access to root? if yes, does it mean, I (or my account) should be added to root? please let me know.
2. also, I tried configuring the adapter using the login id, host, password, login shell prompt, port and SSH. When i tried to test the configuration, it gave the following error,
Test connection failed for resource(s):
Shell Script: Failed to find 'useradd' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'usermod' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'userdel' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'groupadd' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'groupmod' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin' Shell Script: Failed to find 'groupdel' in the path '/usr/bin /etc /usr/sbin /usr/ucb /home/eumusr/bin /usr/bin/X11 /sbin . /usr/local/bin'
I am wondering why should it search for these commands? please let me know.
thanks.

Hi All,
I got this issue resolved after a fine-grained sudo setting to the account that is used for provisioning.
The revised sudo setting was able to do all the provisioning tasks without having a root access.
This is what I set on my service account
(root) /bin/awk, /bin/cat, /bin/cp, /bin/cut, /bin/grep, /bin/login, /bin/mv, /bin/rm, /usr/bin/auths, /usr/bin/cat, /usr/bin/chgroup, /usr/bin/chgrpmem, /usr/bin/chsec, /usr/bin/chsh, /usr/bin/chuser, /usr/bin/cp, /usr/bin/last, /usr/bin/lastlog, /usr/bin/listusers, /usr/bin/logins, /usr/bin/lssec, /usr/bin/mkgroup, /usr/bin/mkuser, /usr/bin/mv, /usr/bin/passwd, /usr/bin/profiles, /usr/bin/pwdadm, /usr/bin/rm, /usr/bin/roles, /usr/sbin/groupadd, /usr/sbin/groupdel, /usr/sbin/groupmod, /usr/sbin/lsgroup, /usr/sbin/lsuser, /usr/sbin/rmgroup, /usr/sbin/rmuser, /usr/sbin/useradd, /usr/sbin/userdel, /usr/sbin/usermod, /usr/sbin/logins
(root) NOPASSWD: /usr/bin/chgrp, /usr/bin/chmod, /usr/bin/chown, /usr/bin/chpasswd, /usr/bin/cp
In this way, you need not have to be a root user to perform provisioning using AIX.
Hope this helps!!
thanks.

How to avoid password prompt in shell script for zip password protection

Hi
I am trying to set password protection to my oracle database export backup. Once the backup completed, it should compress with a password protection. Thats the plan. Initialy we were using the gzip for the compression. Then realized that there is no password protection for the gzip. Started using zip option. I tried using
zip -P <password> filename
But it was throwing below error.
-bash-3.2$ zip -P expreports REPORTS_2013FEB14.dmp
zip warning: missing end signature--probably not a zip file (did you
zip warning: remember to use binary mode when you transferred it?)
zip warning: (if you are trying to read a damaged archive try -F)
zip error: Zip file structure invalid (REPORTS_2013FEB14.dmp)
Not quite sure why.
Then I used zip -e REPORTS_2013FEB14.dmp.zip REPORTS_2013FEB14.dmp
But this prompting for the password. As I am trying to put the command in the script. It will be tough if it prompts for the password.
I would like to know how to avoid the password prompting by saving somewhere or how the code should be written. Tried using expect feature of shell script. Below was the code I tried. It didnt work.
[oracle@SF40V6636 test]$ cat repexp.sh
zip -e REPORTS_imp.log.zip REPORTS_imp.log
expect "Enter password:"
send "imprep"
expect "Verify password:"
send "imprep"
So please help in avoiding this password prompt or let me know how to change the code.
Thanks
SHIYAS M

How about using gpg and adding a secret key to the requirement of a password? No one should be able to decrypt your file, not by knowing only the password.
1. Generate a public and private key pair:
$ gpg --gen-key
When it shows "We need to generate a lot of random bytes…" open another terminal session and type "dd if=/dev/sda of=/dev/null" to create traffic. When the public and secret key created and signed you can Ctrl-C the dd command.
To see what you have created:
$ gpg --list-keys
2. Encrypt and gzip your stuff:
$ tar zcf stuff.tgz file_or_folder
$ gpg recipient "Some Name" encrypt stuff.tgz
$ rm -f stuff.tgz
3. Decrypt and extract the archive:
$ gpg batch yes --passphrase "password" -d stuff.tgz.gpg > stuff.tgz
$ tar zxvf stuff.tgz
Again, knowing the password alone will not let anybody decrypt your stuff.

Shell script stop and start SAP

Hello,
Can you tell me the command to input username and password to login from shell script?
I just know this -
su - sidadm -c "stopsap"
But this just logs in using Username - sidadm.
how do modify this to add password also in command line?

There are tools to do exactly that without a password - it's called "sudo".
sudo is disabled by AIX team
The "other user" must have execute right too.
Since its just stopsap and startsap, they would be owned by sidadm only and executed by sidadm only through crontab
I am guessing you do not know the syntax to use password in comman line on shell script

Shell script that required password

Hi,
I'm using an automator script to upload some files to a remote Linux server, and I'm using rsync in an automator shell script action.
That command required a password to work, how can I enter the password in the shell script action?
Thanks

Thanks for your answer, but as I'm no expert in AS,
I'm not sure to understand your answer.
How do those parameters are sent to AS?
You put it in the statement:
do shell script "rsync /source /dest" password "xyzzy" user name "you"
You can set up a keychain for the password and retrieve it when needed, to be secure in your code. Post back or head over to AS forum, we'll help you out. http://discussions.apple.com/forum.jspa?forumID=724
I suppose it can be run within Automator using a run
AS instead of a run shell script. As my automator do
some other task too.
Yes, Automator has Run AppleScript action.
And yes, you're right, iWeb publishing that is! Good
guest!
I saw some of your posts in iWeb board.
I'm mucking around with iWeb, it's a bloated monster. There are quite a few restrictions in iWeb, I had to hand code some of the stuffs, such as meta data keywords, tricky stuffs... I'm thinking of writing a script for post production.

Resource utilization alerts shell scripts, Memory and CPU

Hi All,
I am using the Oracle Enterprise Linux verison 4.6 x64 for Oracle 10g database. I want to implement some alerts for SWAP space thresholds, CPU comsumption and memory usage thresholds. For example I want an email alert is SWAP space is used 90%. Memory usage is more than 85%. CPU is 80% busy.
I am sure that you Gurus must have implemented this kind of alerts through some tools or shell scripts so seeking your help to implement these.
Thanks
Naveed

Hi Naveed,
Firstly, I can tell you that Oracle has its own SNMP MIBs which can be used by SNMP to send trap (alerts) to various SNMP monitoring systems. If however, you are a bit like myself and perhaps don't have the cash or the need to use something so fancy, you can use Shell Scripting or in my case something like PERL.
By using commands such as 'grep', 'awk' and 'less' (to name but a few) on can monitor simple things such as diskspace or memory.
For example, if I were to look for diskspace usage on a partition known as u01 I could pipe in the output of 'df -h' to PERL, then run a regular expression on it looking for anything greater than 80%.
Example of PERL code;
# read in df -h command, looking for the partition /u01
open(DISKUSAGE, "df -h | grep u01|");
$diskUse = <DISKUSAGE>; #read its input
chomp $diskUse; #remove last characterThis reads in the command into a 'buffer' in which you can search for things, i.e. to see if the disk usage is equal to, or greater than 80% from the variable $diskUse. As a starter I would look at splitting the string on empty spaces into an array for example, and reading the array index containing your disk usage. This can also be done with a Shell Script.
Perl also has a very easy to use SMTP module which can be used for sending E-Mails. Do a search for Net::SMTP on google on how to use it. It really is very simple.
I'm not expert on this stuff, and I'm sure there are many other and better ways of doing such things, but I hope this at least points you in the right direction.
Best of luck,
Conor

Shell script, automator and file permissions

We have an environment where, that when a user creates a folder on a network vol, it is owned by them and no one else has access to it. They then place a folder structure from there local HD into that folder they just created on the server. You would think a simple get info window with the user changing the permissions to include all would actually change all the file permissions in the enclosed folder, but it doesn't. I have a simple script written in automator using /bin/bash that is supposed to change the permissions in every folder and file to rw for all (user, group and everyone). It doesn't seem to be working correctly all the time for a few users.
for f in "$@"
do
chmod -R 777 "$f"
done
I have tried this as well
for f in "$@"
do
chmod -R a+rw "$f"
done
But that should be pretty much the same thing.
Something i have noticed is the users with the most problem are running 10.4.11, while the script was written in 10.5. Also the users that are having the problem dont seem to have the same get info window as the rest of the 10.4.11 users, it very closely resembles 10.5, with some minor differences. It seems they are missing the groups or something. This might be more or less than an issue than I realize.
http://picasaweb.google.com/tiemmothi/UserPermissions?feat=directlink
the 10.4 window in question is "the offender" and
"Mine" is 10.5

*Access Control List* entries are in addition to the regular POSIX permissions. They are not required, but add finer levels of access control. Setting the regular permissions to read/write for everyone should work unless there are ACL entries which allow additional access - you can see ACL entries and extended attributes with/bin/ls -le@d /path/to/some/folder
An inherited ACL entry to allow everyone read/write access would look something likechmod -R +a "everyone allow list,addfile,search,delete,add_subdirectory,delete_child,readattr,writeattr,chown,file_inherit,directoryinherit" /path/to/some/folderA users */Public/Drop Box* folder has similar entries.

Shell Script Addapter and parsing Extended ascii/UTF8 characters

Hellos.
We are about to plunge into the world of ShellScripts. Our alphabet contains accented characters. The UNIX hosts running the scripts will be using locale ISO8859-1or ISO8859-15
Simple question.
When we parse the csv file .. who is parsing it? The IDM (utf8 based) system or the Unix (ascii) host?
Should the csv always be iconv-ed to utf8 as a matter of course?
Nothing about this in the Reference Manual.

I know this thread is old, but it took me forever to find this out...
Use:
SELECT CHR (<ASCII Value> USING NCHAR_CS) FROM DUAL;
E.g.
SELECT CHR (206 USING NCHAR_CS) FROM DUAL;
CHR (206 USING NCHAR_CS)
ÎEdited by: martinByrne on 04-Aug-2010 08:37

Problems using Shell scripts and Automator

My problem is that when I use the "Run Shell Script" Automator action, it won't work if I type the script inside the action but it will work if I just type a path to the script file, which is less elegant as I then need to copy the Automator app made as well as the script file.
Here is the script I am trying to use
#!/bin/bash -f
if test -f ~/Library/Preferences/SPACE.com/Pro/Registration\ File
then
open -a /Applications/Starry\ Night\ High\ School/Starry\ Night\ High\ School.app/
else
ditto /Library/Management/Preferences/StarryNight/SPACE.com ~/Library/Preferences/SPACE.com
open -a /Applications/Starry\ Night\ High\ School/Starry\ Night\ High\ School.app/
fi
exit 0

Well I found the problem. Or at least I got it to work. I tried typing simple commands and scripts into the Shell Script action and had no issues with it running. So I then slowly expanded and typed out my script:
#!/bin/bash -f
if test -f ~/Library/Preferences/SPACE.com/Pro/Registration\ File
then
open -a /Applications/Starry\ Night\ High\ School/Starry\ Night\ High\ School.app/
else
ditto /Library/Management/Preferences/StarryNight/SPACE.com ~/Library/Preferences/SPACE.com
open -a /Applications/Starry\ Night\ High\ School/Starry\ Night\ High\ School.app/
fi
exit 0
Having typed it out in the script it runs fine. It seems you can't paste text into the action. To test this hypothesis, I copied the working script out of automator into BBedit and then back into Automator, the script no longer worked. Not sure why that is happening, but it does work if I type the scripts out.

UNIX path AND Do shell script path with spaces

I am trying to building a interface with buttons to execute shell commands when the button is pressed. Below press button execute code.
I am new to AppleScript and Xcode and Interface builder. I have read different post referencing spaces but I still don't understand.
THIS COMMAND DOESN'T WORK IT'S SOMETHING TO DO WITH SPACES.
How would I fix this to work.
on clicked theObject
do shell script "rm /Library/Preferences/com.netopia.netOctopus\ Agent.preferences"
end clicked
This works (Below) no spaces in the path
on clicked theObject
do shell script "open /System/Library/PreferencePanes/SharingPref.prefPane/"
end clicked
ALL Mac OS X (10.4.6)
ALL Mac OS X (10.4.6)
ALL Mac OS X (10.4.6)
ALL Mac OS X (10.4.6)
ALL Mac OS X (10.4.6)
ALL Mac OS X (10.4.6)
ALL Mac OS X (10.4.6)
ALL Mac OS X (10.4.8)
ALL Mac OS X (10.4.8)

Camelot's explanation was good, but you don't seem to get it, so I'll take a crack at explaining as well.
First off, you need to understand what "do shell script" does and does not do. "do shell script" takes a string from AppleScript and passes it to a shell interpreter. It does not check in advance that this string makes sense. (That is impossible to do, in fact.) It just passes it along. The shell interpreter then converts the string into a command, or series of commands, and attempts to run them.
In AppleScript, quotation marks around something make that something a string. So, for example:
"rm "
is a string containing a letter r, a letter m, and then a space. Some commands can also return a string, which can then be stored in a named variable, as for example:
set a_variable to (the text returned of display dialog "Hi!" default answer "Some text")
When you wish to put two strings together in AppleScript, you use the & operator, as in:
"String 1" & "String 2"
In this example, there is no space at the end of the first string, and none at the beginning of the second, so the result is:
"String 1String 2"
All clear so far?
When a shell interpreter attempts to convert a string into commands, it has to split the string into pieces. A space signifies a break between pieces. In order to put a space into a single item, you can do a number of things. You can put the whole item in quotation marks (single or double), which is known as "quoting":
'/A/Path/With/A Space'
or you can put a backslash before the space, which is known as "escaping":
/A/Path/With/A\ Space
You can combine quoting and escaping if you do it right. For example, the backslash also lets you use a quotation mark inside a single item which is quoted:
"/A/Path/With/A Space/And/A\"Quotation/Mark"
There are further rules and substitutions that sometimes border on the arcane.
In order to simplify things, Apple created the command "the quoted form of". This command takes a string and returns a new string which is properly set up so that it will be just one item when split up for the command line. It will add quotation marks, backslashes, or whatever.
So, to put things together:
"rm " & the quoted form of thePath
is a way of saying to AppleScript "take the string in the variable named thePath, and quote it for the command line; then stick it on the end of a string containing an r, an m, and a space."
When you pass this to "do shell script", it will break things up in such a way that it hands thePath to the rm command, which will attempt to remove whatever is represented by thePath. (Adding the "-r" in there just tells the rm command "if this is a directory, get rid of it and all its contents". Otherwise rm will complain if the item is a directory.)
I think, however, you may just have the path wrong. In one of the spots where you gave the POSIX path, it had a backslash (\) at the end instead of a forward slash (/). As Camelot says, a forward slash means that the item is a directory and not a plain file. But if you really meant the backslash, it suggests that the item is a plain file, but has a space at the end (or some other character that mystifies the command line). It's an escape.
Try making a new script in Script Editor which says
">" & (the POSIX path of (choose file)) & "<" at the end, that's the culprit.
(And if it won't let you select the file when you run the script, it means that the item is actually a folder.)

Run shell script Sudo or root?

Any way I can run an Automator shell script with sudo or as root?
I've been searching around and have found no information.
Thanks in advance.
Mac OS X (10.4.7)

Enter a command such as the following into an AppleScript action:
on run {input, parameters}
do shell script "ls -l /" with administrator privileges
--do shell script "ls -l /" password "yourpass" with administrator privileges
return input
end run
To have your password provided automatically to the script, uncomment the second do shell script line, delete the first line, and enter your password between the second pair of double quote marks. The command can be changed as needed; if the command is interactive, it likely won't work through this method.
(13950)

Shell script adapter and passwords

Similar Messages

Maybe you are looking for