SHOW commands without ENABLE...?

I have a user who has been given read-only, privilege level 1, access and wants the ability to use the various SHOW commands. We have ACS running in this environment. Is there a way, through ACS, to give him these commands?
Policy Elements/Authorization and Permissions/Device Administration/Shell Profiles has ReadOnly with all shell attributes set to not in use, default/max privilege set to 1, nothing extra in custom attributes. Same set of submenus, Command Sets, Limited has "Permit" "SHOW" with no arguments listed. Under Access Policies, Standard Device Admin, Authorization, I have a rule for the identity group assigned to the user in all locations and all device types that assigns the shell profile of ReadOnly and the command set of Limited. However, the user cannot perform any such commands
What am I missing? Is there another way to do this? As I said, the key is to provide the show commands without the ability to make changes to the devices.

Yes this can be done and it sounds like you have ACS configured correctly. However, I am not sure if all show commands will be available without entering enable mode. For example, show interfaces is not available until after you enter enable mode.
What AAA commands do you have running on the devices?
I am doing pretty much what you're doing but I allow the user to enter enable mode and then restrict them to a hand full of commands. Also, I have ACS controlling the enable password on a per user basis.

Similar Messages

How to execute operation system commands by using TSQL without enabling xp_cmdshell.

Hi Experts
Looking for advise if one can use operation system commands using TSQL without enabling xp_cmdshell.
actually using xp_cmdshell requires sysadmin privs which I am unable to provide (directly or using proc) to a user but the user needs some operating system commands to execute for file manipulation from sql server session. Please share your thought.
Best Regards
khalil

>but the user needs some operating system commands to execute for file manipulation from sql server session
See article here
http://www.mssqltips.com/sqlservertip/2014/replace-xpcmdshell-command-line-use-with-sql-server-agent/:
"Problem
I need to run something from the command-line, but based on best practices xp_cmdshell has been disabled. The task that needs to run is an internal process that will originate from within SQL Server. Is there a way to do this without using xp_cmdshell?
Solution
The use of xp_cmdshell is generally frowned upon and is now recommended to be disabled, unless it is absolutely necessary. There is a solution that works around this restriction via the use of SQL Server Agent.
Wherever SQL Server is installed, SQL Server Agent is installed with it (except for SQL Express). SQL Server Agent has the ability to run job steps which invoke the command shell. And in the case that the job is owned by a member of the sysadmin fixed server
role, the job will execute as the service account under which the SQL Server Agent is running. "
Kalman Toth Database & OLAP Architect
SQL Server 2014 Database Design
New Book / Kindle: Beginner Database Design & SQL Programming Using Microsoft SQL Server 2014

SHOW commands in SQLPlus

Where can I find a list / explanation of the SHOW commands in SQLPlus?
Thanks,

Hi,
Also, try this cool glogin script from Chris Foot to show the instance name in your SQL*Plus promt:
COLUMN file_name FORMAT a44
COLUMN tablespace_name FORMAT a20
COLUMN owner FORMAT a15
COLUMN segment_name FORMAT a20
set lines 132
set pages 100
set termout off
col dbname new_value prompt_dbname
select instance_name dbname from v$instance;
set sqlprompt "&&prompt_dbname> "
set termout on
set time on
Here are the set options:
APPI[NFO]ON
Application info for performance monitor (see DBMS_APPLICATION_INFO)
ARRAY[SIZE] {15|n}
Fetch size (1 to 5000) the number of rows that will be retrieved in one go.
AUTO[COMMIT] OFF|n}
Autocommit commits after each SQL command or PL/SQL block
AUTOP[RINT] OFF
Automatic PRINTing of bind variables.(see PRINT)
AUTORECOVERY ON
Configure the RECOVER command to automatically apply
archived redo log files during recovery - without any user confirmation.
AUTOT[RACE] OFF} [EXP[LAIN]] [STAT[ISTICS]]
Display a trace report for SELECT, INSERT, UPDATE or DELETE statements
EXPLAIN shows the query execution path by performing an EXPLAIN PLAN.
STATISTICS displays SQL statement statistics.
Using ON or TRACEONLY with no explicit options defaults to EXPLAIN STATISTICS
BLO[CKTERMINATOR] {.|c|OFF|ON}
Set the non-alphanumeric character used to end PL/SQL blocks to c
CMDS[EP] {;|c|OFF|ON}
Change or enable command separator - default is a semicolon (;)
COLSEP { |text}
The text to be printed between SELECTed columns normally a space.
COM[PATIBILITY] {V5|V6|V7|V8|NATIVE}
Version of oracle - see also init.ora COMPATIBILITY=
You can set this back by up to 2 major versions e.g. Ora 9 supports 8 and 7
CON[CAT] {.|c|OFF|ON}
termination character for substitution variable reference
default is a period.
COPYC[OMMIT] {0|n}
The COPY command will fetch n batches of data between commits.
(n= 0 to 5000) the size of each fetch=ARRAYSIZE.
If COPYCOMMIT = 0, COPY will commit just once - at the end.
COPYTYPECHECK OFF
Suppres the comparison of datatypes while inserting or appending to DB2
DEF[INE] {&|c|OFF|ON}
c = the char used to prefix substitution variables.
ON or OFF controls whether to replace substitution variables with their values.
(this overrides SET SCAN)
DESCRIBE [DEPTH {1|n|ALL}][LINENUM {ON|OFF}][INDENT {ON|OFF}]
Sets the depth of the level to which you can recursively describe an object
(1 to 50) see the DESCRIBE command
ECHO OFF
Display commands as they are executed
EMB[EDDED] OFF
OFF = report printing will start at the top of a new page.
ON = report printing may begin anywhere on a page.
ESC[APE] {\|c|OFF|ON}
Defines the escape character. OFF undefines. ON enables.
FEED[BACK] {6|n|OFF|ON}
Display the number of records returned (when rows > n )
OFF (or n=0) turns the display off
ON sets n=1
FLAGGER OFF|FULL}
Checks to make sure that SQL statements conform to the ANSI/ISO SQL92 standard.
non-standard constructs are flagged as errors and displayed
See also ALTER SESSION SET FLAGGER.
FLU[SH] OFF
Buffer display output (OS)
(no longer used in Oracle 9)
HEA[DING] OFF
print column headings
HEADS[EP] {||c|OFF|ON}
Define the heading separator character (used to divide a column heading onto > one line.)
OFF will actually print the heading separator char
see also: COLUMN command
INSTANCE [instance_path|LOCAL]
Change the default instance for your session, this command may only be issued when
not already connected and requires Net8
LIN[ESIZE] {150|n}
Width of a line (before wrapping to the next line)
Earlier versions default to 80, Oracle 9 is 150
LOBOF[FSET] n
Starting position from which CLOB and NCLOB data is retrieved and displayed
LOGSOURCE [pathname]
Change the location from which archive logs are retrieved during recovery
normally taken from LOG_ARCHIVE_DEST
LONG {80|n}
Set the maximum width (in chars) for displaying and copying LONG values.
LONGC[HUNKSIZE] {80|n}
Set the fetch size (in chars) for retrieving LONG values.
MARK[UP] HTML ON
[HEAD text] [BODY text] [TABLE text]
[ENTMAP {ON|OFF}][SPOOL {ON|OFF}]
[PRE[FORMAT] ON]
Output HTML text, which is the output used by iSQL*Plus.
NEWP[AGE] {1|n} NULL text
The number of blank lines between the top of each page and the top title.
0 = a formfeed between pages.
NULL text
Replace a null value with 'text'
The NULL clause of the COLUMN command will override this for a given column.
NUMF[ORMAT] format
The default number format.
see COLUMN FORMAT.
NUM[WIDTH] {10|n}
The default width for displaying numbers.
PAGES[IZE] {14|n}
The height of the page - number of lines.
0 will suppress all headings, page breaks, titles
PAU[SE] OFF
press [Return] after each page
enclose text in single quotes
RECSEP {WR[APPED]|EA[CH]|OFF}
Print a single line of the RECSEPCHAR between each record.
WRAPPED = print only for wrapped lines
EACH=print for every row
RECSEPCHAR {_|c}
Define the RECSEPCHAR character, default= ' '
SCAN OFF
OFF = disable substitution variables and parameters
SERVEROUT[PUT] OFF [SIZE n] [FOR[MAT] {WRA[PPED]|WOR[D_WRAPPED]|TRU[NCATED]}]
whether to display the output of stored procedures (or PL/SQL blocks)
i.e., DBMS_OUTPUT.PUT_LINE
SIZE = buffer size (2000-1,000,000) bytes
SHOW[MODE] OFF
Display old and new settings of a system variable
SPA[CE] {1|n}
The number of spaces between columns in output (1-10)
SQLBL[ANKLINES] ON
Allow blank lines within an SQL command. reverts to OFF after the curent command/block.
SQLC[ASE] {MIX[ED]|LO[WER]|UP[PER]}
Convert the case of SQL commands and PL/SQL blocks
(but not the SQL buffer itself)
SQLPLUSCOMPAT[IBILITY] {x.y[.z]}
Set the behavior or output format of VARIABLE to that of the
release or version specified by x.y[.z].
SQLCO[NTINUE] {> |text}
Continuation prompt (used when a command is continued on an additional line using a hyphen -)
SQLN[UMBER] OFF
Set the prompt for the second and subsequent lines of a command or PL/SQL block.
ON = set the SQL prompt = the line number.
OFF = set the SQL prompt = SQLPROMPT.
SQLPRE[FIX] {#|c}
set a non-alphanumeric prefix char for immediately executing one line of SQL (#)
SQLP[ROMPT] {SQL>|text}
Set the command prompt.
SQLT[ERMINATOR] {;|c|OFF|ON}|
Set the char used to end and execute SQL commands to c.
OFF disables the command terminator - use an empty line instead.
ON resets the terminator to the default semicolon (;).
SUF[FIX] SQL
Default file extension for SQL scripts
TAB OFF
Format white space in terminal output.
OFF = use spaces to format white space.
ON = use the TAB char.
Note this does not apply to spooled output files.
The default is system-dependent. Enter SHOW TAB to see the default value.
TERM[OUT] OFF
OFF suppresses the display of output from a command file
ON displays the output.
TERMOUT OFF does not affect the output from commands entered interactively.
TI[ME] OFF
Display the time at the command prompt.
TIMI[NG] OFF
ON = display timing statistics for each SQL command or PL/SQL block run.
OFF = suppress timing statistics
TRIM[OUT] OFF
Display trailing blanks at the end of each line.
ON = remove blanks, improving performance
OFF = display blanks.
This does not affect spooled output.
SQL*Plus ignores TRIMOUT ON unless you set TAB ON.
TRIMS[POOL] ON
Allows trailing blanks at the end of each spooled line.
This does not affect terminal output.
UND[ERLINE] {-|c|ON|OFF}
Set the char used to underline column headings to c.
VER[IFY] OFF
ON = list the text of a command before and after replacing substitution variables with values.
OFF = dont display the command.
WRA[P] OFF
Controls whether to truncate or wrap the display of long lines.
OFF = truncate
ON = wrap to the next line
The COLUMN command (WRAPPED and TRUNCATED clause) can override this for specific columns.

How to launch an App with Root privileges - without enabling "root" user ac

Is there a reliable way to launch an Application so that it can run with "root" privileges, but without enabling the OSX root account and logging in to that account?
There is an old (and, presumably, obsolete) application called "Pseudo" which used to facilitate this, but I doubt it would be safe or reliable under OSX 10.5.
So, does anyone have any suggestions?

For a more permanent method, run the following command on the same file:
sudo chmod u+s
if the item is owned by root. This may be undone by the repair permissions command.
(27138)

Using RADIUS without enabling AAA

is there anyway I can use a RADIUS server without enabling/using AAA.
is there any command "ip auth radius ... " ?
cudnt find anything on cisco as such.

Swapnendu
Am I correct in assuming that you are talking about on IOS based routers or catOS switches? If so I believe that the only way to use Radius is to use AAA.
HTH
Rick

Process show commands with EEM

Hi all,
Im newbie in EEM, but using it in on of my projects in a basic style:
syslog or ip sla tracking events
set actions and some basics if/else...
I dont know how I lived without EEM, its awesome.
I need to do some advanced inspection of show commands output, like taking some strings from "show ip route", "show ip ospf" and so on, compare them and do some actions based on result.
Can anyone show me some simple example, with filtering IP address of the DR from "show ip ospf neighbor", comparing it with router-id from the "show ip ospf interface" and make some action based on the result. It would be very useful for me.
Also documentation for beginners would be appreceated.
Best regards,
Aleksei

Sorry, I missed this one originally. There are a lot of examples in this community that talk about parsing show command output. I don't know of any OSPF-specific ones off the top of my head, but look at examples like:
https://supportforums.cisco.com/thread/2238284?tstart=0
https://supportforums.cisco.com/thread/2241567?tstart=0
You'll need to come up with regular expressions that match what you want from the output of the OSPF commands. I don't have OSPF output handy to show any relevant examples, but hopefully the two I mentioned will be of some help.

Local ASA passwords to allow ALL show commands, no config

Hi there
Currently have an ASA 5545. What I want to do is allow our support team to perform ALL show commands (up to and including show run) but not enable them to perform ANY configuration changes on the devices (not get into config t). This is to allow them to check ARP tables, routing protocol status, etc
Can anyone advise the syntax to do this? i don't have access to the ASA at the moment and haven't been able to figure it out in IOS, i'm assuming its not too hard...

Assuming AAA authentication, define some users with intermediate privilege levels and assign the commands they can run to that level, e.g.
username readonly password SomeSecret privilege 2
followed by a tedious number of privilege commands for each of the keywords "show ?" expands to:
privilege show level 2 mode exec command aaa-server
privilege show level 2 mode exec command xlate
Anyone knowing a more consise way would be welcome.
-- Jim Leinweber, WI State Lab of Hygiene

Sending 'show' command outputs to console/terminal using EEM

Hi Everyone,
I'm new to EEM and was wondering if it would be possible to send 'show' commands (like 'show interface' or 'show crypto ipsec sa') to the terminal/console session after every, let's say, 10 minutes using watchdog timer. I know how to send it to the flash but would like to know if something of this sort is possible.
Any suggestions would be really appreciated!
Regards,
Nikhil

Hi Nithakur,
you can try the "action puts" from EEM
event manager applet SHOWI
event timer watchdog time 600
action 1.0 cli command "enable"
action 2.0 cli command "show int X/Y"
action 3.0 puts "$_cli_result"
for this to work, you would need to have "logging monitor informational" in your run and "terminal monitor" activated. The other option is to use IOS send command
event manager applet SHOWI2
event timer watchdog time 600
action 1.0 cli command "enable"
action 2.0 cli command "show int XY"
action 3.0 set A "$_cli_result"
action 4.0 cli command "send *" pattern "C:"
action 5.0 cli command "$A\032" pattern "confirm"
action 6.0 cli command "yes"
Note that the \032 is an equivalent for CTRL+Z (^Z) so after you configure it, you will see this line as
action 5.0 cli command "$A^Z" pattern "confirm"
in your ruiining config.
Regards,
Alex

Allow some show commands in AAA Authorization Set

I'm working on creating AAA authorization sets for our environment and ran into a question!
I'd like to be able to enable ALL show commands except 'show run'. I would also like to enable 'show run interface'. I've figured out how to enable all show commands and disable show run. The problem I'm finding is that since 'show run interface' is a subset of 'show run' it seems to disable. Even if I try to explicitly enable it.
Is there a way to disable 'show run' but enable all other show commands and 'show run interface' with a AAA authorization set?
ACS Version 4.1.
Command set is configured:

Changing it to 'deny running-config' does the exact same thing. It looks like it's seeing the 'show running-config' then stoping on that before anything else. I've tried adding 'permit run interface' in ACS and same thing. Other AAA Authorization set commands work just fine.
On the switch (its a 2960G-8TC-K) running 12.2(58)SE2.
aaa group server tacacs+ SHS
server 10.10.11.200
aaa authentication login verifyme group TACACS+ local
aaa authorization config-commands
aaa authorization exec verifyme group TACACS+ local
aaa authorization commands 0 default group TACACS+
aaa authorization commands 1 default group TACACS+
aaa authorization commands 15 default group TACACS+
aaa accounting send stop-record authentication failure
aaa accounting exec verifyme start-stop group TACACS+
aaa accounting commands 15 default start-stop group TACACS+
aaa accounting network verifyme start-stop group TACACS+
aaa accounting system default start-stop group TACACS+
aaa session-id common
Debugs!
Jun 21 11:07:39: AAA: parse name=tty0 idb type=-1 tty=-1
Jun 21 11:07:39: AAA: name=tty0 flags=0x11 type=4 shelf=0 slot=0 adapter=0 port=0 channel=0
Jun 21 11:07:39: AAA/MEMORY: create_user (0x3A790DC) user='test' ruser='SGAVEJ01' ds0=0 port='tty0' rem_addr='async' authen_type=ASCII service=NONE priv=15 initial_task_id='0', vrf= (id=0)
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): Port='tty0' list='' service=CMD
Jun 21 11:07:39: AAA/AUTHOR/CMD: tty0 (4105592267) user='test'
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV service=shell
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd=show
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=running-config
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=interface
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=GigabitEthernet
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=0/1
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): send AV cmd-arg=
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD(4105592267): found list "default"
Jun 21 11:07:39: tty0 AAA/AUTHOR/CMD (4105592267): Method=TACACS+ (tacacs+)
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): user=test
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV service=shell
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd=show
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=running-config
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=interface
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=GigabitEthernet
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=0/1
Jun 21 11:07:39: AAA/AUTHOR/TAC+: (4105592267): send AV cmd-arg=
Jun 21 11:07:39: TAC+: Using default tacacs server-group "TACACS+" list.
Jun 21 11:07:39: TAC+: Opening TCP/IP to 10.10.11.200/49 timeout=5
Jun 21 11:07:39: TAC+: Opened TCP/IP handle 0x3A41210 to 10.10.11.200/49 using source 10.40.0.14
Jun 21 11:07:39: TAC+: 10.10.11.200 (4105592267) AUTHOR/START queued
Jun 21 11:07:39: TAC+: (4105592267) AUTHOR/START processed
Jun 21 11:07:39: TAC+: (-189375029): received author response status = FAIL
Jun 21 11:07:39: TAC+: Closing TCP/IP 0x3A41210 connection to 10.10.11.200/49
Jun 21 11:07:39: AAA/AUTHOR (4105592267): Post authorization status = FAIL
Jun 21 11:07:39: AAA/MEMORY: free_user (0x3A790DC) user='test' ruser='SGAVEJ01' port='tty0' rem_addr='async' authen_type=ASCII service=NONE priv=15 vrf= (id=0)

Robo v9 Show/Hide without Twisties - One button no longer working

Hey there, as stated I am using Robo v9 with Show/Hide without Twisties (One button) with javascipts. We have most of our images using DHTML drop-downs and when folks click on "Show All Images" on the page, the GIF changes to "Hide All Images" and all drop-downs (our images) and expanding text are diaplayed.
It had been working all the time, but now it only works when I right click the topic in the TOC and choose "Edit Topic", then while in the Edit Window (Display view), when I do a View (Ctrl-W) and it displays the page within RoboHelp..I can click the "Show All Images" and it works like it always had. BUT, if that page is not in the Edit Window, and I right click "Preview Topic", the click "Show All Images" (or on the DHTML dropdown itself) it will NOT show the images, *but the GIF image does properly toggle to "Hide All Images" (and if I do again, then it properly toggles to the "Show All Images" GIF, if I do it again), but now NO images are getting displayed for some reason. It also NEVER works properly when I publish to our website (even when clicking the DHTML dropdown itself), but the GIF images toggle properly.
If I right click and choose "Preview Topic" and click "View With" and use Internet Explorer 8 it still never works anymore, unless the topic is in the Edit Window (Display View), so I know the issue is not on the server. It stops working after I do a generate and run on my pc. Also when I view it IE8 within Robo (and Allow the Blocked Content to run the scripts), many instances of the same error is shown as:
Message: Access is denied.
Line: 2646
Char: 3
Code: 0
URI: file:///D:/Users/_RBH9_TPO-Generate/v9-testing/ehlpdhtm.js
...but I *do* have access to the folder system, but in checking the coding of the ehlpdhtm.js, that area show, where I believe line 2646, character 3 starts at the "values = getAttribute(element, prop );" line below...but maybe something does not exist:
==
//End HTML code invoked function
function InitEffect( element, prop )
var values = null;
if( getAttribute(element,prop))
values = getAttribute(element, prop );
else if( getAttribute( element, "currentStyle" ) && element.currentStyle.getAttribute)
values = element.currentStyle.getAttribute( prop );
else if (element.style.getAttribute)
values = element.style.getAttribute( prop );
if( !values )
return;
var functions = new Array();
==
I have a much older backup when restored, it all works properly again in all cases, but I have done so much work since then that I think would need to be manually redone. I have played with keeping those some javascipts alone (in case I changed something) and updated the rest of the data files I had added, deleted the .CPD file, but it somehow stops working again, probably with some updated file. I am not sure what specific files could be causing the negative impact that is preventing it from working. Maybe if I knew what files could impact, I couldrestore those from my old backup. The newer backups when restored do not work properly, so there was a point in time where something changed and is causing this.
All prior versions of RoboHelp (v7 and v8) have always worked and still do. I am using v9.0.1.262, as the latest version has not yet been allowed on our pcs (per security), but since my earlier backup works, I thought it may not be the issue, but wanted to tell you anyway. ;->
Any ideas on how I should proceed? What files may have impact to cause it not to work anymore? The showhide.js is the only .js to show up as a baggage file. Also, the DHTML line does exits in each html page's code, as we are still using Robo v7 as the production software and the Show/Hide always works, and I copy them into the respective Robo v9 folders (and if new, then I copy them, then import them), otherwise the newer v7 updated pages are copied over the older v9 html files while RoboHelp is closed.
Thanks in advance for any info you can provide!

I may have figured out what to fix to get v9 back to working on the Show/Hide button, but not the "why?" .
It looks to all be dealing with the Robo automatic html coding of where to locate the .js file(s)...here is a quick overview of this issue and what I did. When I view the non-working pages within Internet Explorer 8 within Robo (and Allow the Blocked Content to run the scripts), I saw many instances of the same error is shown as this in the log, which implied since I *do* have access rights, maybe the file was just not being found.
Message: Access is denied.
Line: 2646
Char: 3
Code: 0
URI: file:///D:/Users/_RBH9_TPO-Generate/v9-testing/ehlpdhtm.js
OK, here are my findings. EXAMPLE #1 and EXAMPLE #2 below are excerpts of the same file. EXAMPLE #1 is from Robo v7 and is copied to the v9 folder after it was updated so our soon to be "production" webhelp will be from Robo v9 (instead of making the same manual updates in Robo v9 as in Robo v7, I copy the updated the .html file to the Robo v9 file system). Note the direction of the directory slashes of the java scripts listed below, as they are all DOS type slashes (back slashes), EXCEPT for ehlpdhtm.js as it is the ONLY one using UNIX (forward) slashes.
EXAMPLE #1 (from Robo v7)
==
<link rel="StyleSheet" href="..\..\sty-std-topic.css">
<script type="text/javascript" language=JavaScript x-save-method=compute-relative
src="..\..\showhide.js"></script>
</head>
<body>
<robohelp><script type="text/javascript" language=JavaScript1.2 src="../../ehlpdhtm.js"
x-save-method=compute-relative></script>
<script type="text/javascript" language=JavaScript1.2>

</script>
==
EXAMPLE #2(from Robo v9)
This is from the restored backup of the Robo v9 files that always work when I restore them, and note they are ALL UNIX (forward) slashes. These backup files were generated from Importing/Upgrading a copy of the Robo v7 files into Robo v9.
++
<title>[Endpoint Protection] Symantec Overview</title>
<link rel="StyleSheet" href="../../sty-std-topic.css" type="text/css" />
<script type="text/javascript" language="JavaScript" src="../../showhide.js">
</script>
</head>
<body>
<?rh-script_start ?><script src="../../ehlpdhtm.js" type="text/javascript" language="JavaScript1.2">
</script><?rh-script_end ?>
++
Additional info: The following is from another file from the Robo v9 backup files that always WORK and once again they are ALL UNIX (forward) slashes.
~~
<link rel="StyleSheet" href="../../sty-std-topic.css" type="text/css" />
<script type="text/javascript" language="JavaScript" src="../../showhide.js">
</script>
</head>
<body>
<?rh-script_start ?><script src="../../ehlpdhtm.js" type="text/javascript" language="JavaScript1.2">
</script><?rh-script_end ?>
~~
BUT since all .js files are referenced in EXAMPLE #1 have DOS slashes (back slashes), EXCEPT for the ehlpdhtm.js, I decided to change the line in ehlpdhtm.js FROM src="../../ehlpdhtm.js" TO src="..\..\ehlpdhtm.js" and IT (this one page) BEGAN WORKING AGAIN after I published. So having all DOS back slashes DOES work in Robo v9!!!! BUT it appears that Robo v9 only generates new pages using UNIX (forward) slashes in ALL coding. I've read about issues like this occurring with the FireFox browser, but we only use IE8, and have not read anything like this related to IE8 issues.
So if all UNIX forward slashes and all DOS back slashes can work in Robo v9 in finding and using ehlpdhtm.js, (the Show/Hide buttons function properly) why is this problem existing in Robo v9 when there are mixed "slashes" (using forward and backward)? ...and the mixed slashes ALWAYS works in Robo v7! They do not have to all be in the same direction in Robo v7 as it appears to have to be in the newer/more advanced Robo v9. Why does it matter that all slashes need to be all the same direction, if Robo v9 CAN actually read and figure out the DOS back slashes (formatted by Robo v7 creation) and actually generates UNIX forward slashes for the .js files in new Robo v9 output within the .html?
More importantly will I have to always do a Global search and replace in Robo v9 to change the direction of the "back slashes" when I copy updated Robo v7 .html files into the Robo v9 folders (instead of manually reworking each change), while in transition from v7 to v9?
Thanks in advance any information, recommendations, and feedback as your time is greatly appreciated!

I have an iPad 1. I filled out a PDF questionaire in adobe reader. When I send it to Dropbox, iBooks,mercury browser the form shows up without the answers . My objective is to email the completed form. Please advise as to how to do thisThanks. Big Jake

I have an iPad 1. I filled out a PDF questionaire in adobe reader. When I send it to Dropbox, iBooks,mercury browser the form shows up without the answers . My objective is to email the completed form. Please advise as to how to do thisThanks.
Big Jake

If the PDF is a form fillable PDF, which I assume that it is, email it to yourself or send it to DropBox and open it on your computer. You should see the fields filled in there. It works for me if I do it that way.
Adobe Reader supports it, but the other apps don't. I assume that if you email the PDF to a computer user it would be readable in Adode Reader.

At CRS-1,how can i use show command with pipe | ?

HI,ALL
when I use show command with pipe on the CRS-1,the command invalid
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |errors
                                                                   ^
% Invalid input detected at '^' marker.
========================================================
But Previously on the cisco 7609,I can use the show command
GZ-DM-SR-1.MAN.7609#show int | include line |err
Vlan1 is down, line protocol is down
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 interface resets
Vlan11 is administratively down, line protocol is down
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 interface resets
Vlan99 is down, line protocol is down
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 interface resets

RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |errors
                                                                   ^
% Invalid input detected at '^' marker.
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |?
|
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | |?
                                                                    ^
% Invalid input detected at '^' marker.
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | ?
begin    Begin with the line that matches
exclude Exclude lines that match
file     Save the configuration
include Include lines that match
utility A set of common unix utilities
<cr>
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |
% Incomplete command.
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |errors
                                                                   ^
% Invalid input detected at '^' marker.
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | ?
begin    Begin with the line that matches
exclude Exclude lines that match
file     Save the configuration
include Include lines that match
utility A set of common unix utilities
<cr>
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |?
|
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | include er$
Thu Jan 15 22:36:24.120 GMT
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#
RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line
Thu Jan 15 22:37:05.013 GMT
Loopback0 is up, line protocol is up
Loopback1 is up, line protocol is up
Loopback6 is up, line protocol is up
Null0 is up, line protocol is up
POS0/0/0/0 is up, line protocol is up (APS not Configured )
POS0/0/1/0 is up, line protocol is up (APS not Configured )
TenGigE0/0/4/0 is up, line protocol is up

Create a privilege level that only allows access to show commands

Hi,
I would like to create a privilege level that would only give access to the show commands for certain users. What would be the best way to do this?
Would I have to use the privilege mode level level command for every available show command or is there a more efficient way of doing this?
In addition, could we manage such a privilege level from a Radius Server.
Thanks for your help
Stéphane

Well, I think the best way to achive this is to use TACACS with command authorization feature.
Configuration on the tacacs server ( only for show commands, read only access)
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#scenario2
These commands are required on an IOS router or switch in order to implement command authorization through an ACS server:
    aaa new-model
    aaa authorization config-commands
    aaa authorization commands 0 default group tacacs+ local
    aaa authorization commands 1 default group tacacs+ local
    aaa authorization commands 15 default group tacacs+ local
     tacacs-server host 10.1.1.1
     tacacs-server key cisco123
These commands are required on ASA/PIX/FWSM in order to implement command authorization through an ACS server:
    aaa-server authserver protocol tacacs+
    aaa-server authserver host 10.1.1.1
    aaa authorization command authserver
However, if you strictly want to use radius server then please try the below listed attribute for a single user or group.
Service-Type = NAS Prompt
http://www.ietf.org/assignments/radius-types/radius-types.xml#radius-types-4
This might not work for ASDM.
HTH
Regards,
Jatin
Do rate helpful posts-

Execute a command without thread

Hi....i have to execute a command in DOS and i'm using runtime java class with its method exec(). The process works perfectly but in my code i have to execute that command without a thread because the successive operations will work only if the command terminated correctly. What can i do to resolve it?

String cmd = input.getTxtDb2Cmd();
Process p = Runtime.getRuntime().exec(cmd);
int r = p.waitFor();
if (r != 0)
throw new RuntimeException("db2 command failed");
i've to invoke a db2 command that import a txt file in a db table. After this code i've some operations that works with this table so i've to terminate this import before execute other functions.

Expdp command without directory method

hi,
i wanted to use expdp command without using create directory method as i do not have create directory access
thanks
expdp hr/hr DIRECTORY=dpump_dir2 DUMPFILE=expfull.dmp FULL=y NOLOGFILE=y
thanks

The answer, which is already given is no, but...
Data pump recognizes a default directory object is defined. If it is defined, the if you do not wpspecify a directory, dim files will be created there, I forget what it is called, but just try to export with a directory object.
The answer to the second question is... It depends. If the daatypes are compatible, it should work. The only way tot tell is to try it.
If you changes varchar2(20) to varchar2(30) I would assume yes.
If you changed clob to number, I would guess no.
Dean

SHOW commands without ENABLE...?

Similar Messages

Maybe you are looking for