"sudo" in UCM
Hi!
I was wondering if there was a kind of sudo in content server. I need to have a user (or some users) executing a service as system administrator but can't give to him the role of admin or sysmanager. In fact, they just need to update a metadata in a security group that they don't have the write permission. I was thinking in build a web page where the user would click in a button and the service executes with another user. Is that possible?
Thank you all
Guilherme.
Hi
I believe you can achieve this functionality by using the NeedToKnow (NTK) component. This component is specifically used in cases where one has to extend the security attributes of users and accesses to contents beyond the normal CS security model. A full description of this cannot be put here due to space constraint but would be a good idea if you can get hold of this component and then read through the Guide for the same.
A brief about the component goes as :
The Need to Know (NtkDocDisclosure or NTK) component supports customization for these Content Server security areas:
-Content security—Changing user access to content items.
-Search results—Modifying the display of search results.
-Hit list roles—Changing user credentials for query and check-in pages.
-Content metadata security—Altering the behavior of metadata changes for content items.
-WHERE clause calculation—Modifying use of the WHERE clause in searches.
For example, with standard security, users can only view content for which they have at least Read permission. The Need to Know component can change this in two ways:
- All users can be allowed to see content items from specified security groups in a search results list, even though they may not be able to view the metadata or document
itself.
- Read and Write permission can be expanded or restricted within specified security groups using a query against content metadata and user attributes.
The Need to Know component provides an HTML administration interface to display security configuration status information, enable editing of security configuration values, and enable viewing and testing of Idoc Script for security configuration values.
Hope this helps
Thanks
Srinath
Similar Messages
-
How Can I call a UCM service from SOAP request
Hi,
I have created one custom service and I would like to call that service from 3rd Party system via SOAP call. The 3rd Party system does not have the capability to call through RIDC.
Now I have exposed my service and tried to call but authentication exception was coming status code 401.
So I created one sample ADF application and tried to call the DocInfo service for testing (I thought let's try DocInfo then I will check my custom service). I downloaded the DocInfo service from UCM and uploaded the WSDL into the project and got the client DocInfoSoapClient.java file.
public class DocInfoSoapClient
@WebServiceRef
private static DocInfo docInfo;
public static void main(String [] args)
docInfo = new DocInfo();
DocInfoSoap docInfoSoap = docInfo.getDocInfoSoap();
DocInfoByNameResult res = docInfoSoap.docInfoByName("TEST_001603", null);
System.out.println(res.getContentInfo());
// Add your code to call the desired methods.
The error is coming like:
Exception in thread "main" com.sun.xml.ws.client.ClientTransportAccessException: The server sent HTTP status code 401: Unauthorized: http://xxxxxxxx:16200/_dav/cs/idcplg
at com.sun.xml.ws.transport.http.client.HttpTransportPipe.getClientTransportException(HttpTransportPipe.java:340)
I tried a lot but same error. There should be some process by which I can send the userid and password but failed. Even I tried to send the properties as key value pair in IdcPropertyList but I know that is wrong.
I checked the Issue: https://community.oracle.com/thread/2424460
But there was no answer.
Can anyone help on it?
Regards,
SantanuHi Santanu,
You need to write SoapHandler in order to pass username and pwd. You will need 2 classes namely HeaderHandlerResolver & SoapHandler. This is how i do in in my JAX-WS clients. I generate stubs and then attach handler to webserviceinterface
PFA HeaderHandlerResolver.java and SoapHandler.java you would attach soap handler something like this in your code i have never done this via ADF so not sure.
HeaderHandlerResolver soapHandlerResolver = new HeaderHandlerResolver();
docInfo.setHandlerResolver(soapHandlerResolver);
In SoapHandler class you will mention username and pwd like this
soapMessageContext.put(BindingProvider.USERNAME_PROPERTY,"username");
soapMessageContext.put(BindingProvider.PASSWORD_PROPERTY,"pwd");
Regards,
Amol Gavali -
Error while importing N Accounts to 1 Address with UCM Batch Manager
Hi,
I got a problem with importing Accounts using the UCM Batch Manager. Previous steps were loading the EIM Tables EIM_UCM_ORG and EIM_UCM_ADRPER. To associate addresses I used the column EIM_UCM_ADRPER.PAR_UCM_ACCNT_UID. No errors occured during an Enterprise Integration Mgr jobs to load the data into SDH tables.
The error described below occurs if I have N Accounts using one Address. Example:
h5. Account Name --> City --> Postal Code --> State --> Street
Account #1 --- Munich --- 80331 --- N/A --- Some Street 1
Account #2 --- Munich --- 80331 --- N/A --- Some Street 1
h5. If I try to get the Accounts into the Base tables using the UCM Batch Manager I get the following message from the log file:
ObjMgrBusCompLog Error 1 000003084c571160:0 2010-08-03 19:11:14 (odbccon.cpp (2097)) SBL-DBC-00111: An error has occurred writing to a record.
Please continue or ask your systems administrator to check your application configuration if the problem persists.
DBCLog DBCLogError 1 000003084c571160:0 2010-08-03 19:11:14 SQLError: [23000],[Microsoft][SQL Native Client][SQL Server]Cannot insert duplicate key row in object 'dbo.S_ADDR_PER'-Objekt with unique index 'S_ADDR_PER_U1'.
DBCLog DBCLogError 1 000003084c571160:0 2010-08-03 19:11:14 SQLError: [01000],[Microsoft][SQL Native Client][SQL Server]The statement has been terminated.
ObjMgrBusCompLog Error 1 000003084c571160:0 2010-08-03 19:11:14 (sqlobj.cpp (43735)) SBL-DAT-00381: A record that contains identical values to the record you have created already exists.
If you would like to enter a new record, please ensure that the field values are unique.
ObjMgrLog Error 1 000003084c571160:0 2010-08-03 19:11:14 (adptutils.cpp (5715)) SBL-EAI-04381: For instance of Integration Component 'Account_Business Address', using user key '[City] = "Munich" AND [Postal Code] = "80331" AND [State] = "N/A" AND [Street Address] = "Some Street 1"', a record with identical values already exists in the Siebel database.
Please ensure that the field values in the input message are unique.
EAISiebAdpt EAISiebAdptErr 1 000003084c571160:0 2010-08-03 19:11:15 [0] For instance of Integration Component 'Account_Business Address', using user key '[City] = "Munich" AND [Postal Code] = "80331" AND [State] = "N/A" AND [Street Address] = "Some Street 1"', a record with identical values already exists in the Siebel database.
Please ensure that the field values in the input message are unique.(SBL-EAI-04381) (0x75017d)
h5. Result:
Account #1 gets inserted with Record Type: "Source-Insert"
Account #2 will not be imported and gets Record Type: "Incomplete"
Does anyone know how to handle this problem?
Many Thanks
Sebastian
Edited by: user13098670 on 04.08.2010 06:34I have selected the option
Add new metadata and replace existing objetcs. But it is not importing. Also I tried other options like
1. deleting the existing mapping and tried.
2. Putting the mapping in recycle bin and try.
3. Take it from recycle bin.Even during taking it from recycle it is giving me the following error .
Error occurred importing mapping
<DWH_CMMDTY_INVC_FACT_MAP/DWH_CMMDTY_INVC_FACT_MAP>
(at line 141).
Detailed Error Message:
API2014: Internal Error: Error in createStage:
In above all cases it is giving me the error.
Could you please help? -
UCM workflow: Unable to capture the reject event.
Hi guys,
We are using UCM 11.1.1.5
We want to customize our workflow with 3 stages. If a particular user rejects the workflow, we want to display a error message and abort the reject action.
hence we wrote under the Entry event of the previous stage as follows
<$if wfAction like "REJECT"$>
<$abortToErrorPage("Sorry you cannot reject this stage.")$>
<$endif$>
But we found that the script was not triggered when a user clicks on Reject button. Is there anyway we can capture the Reject Action?
Is it a bug in UCM 11.1.1.5? Anybody faced similar problem.
Please help us
THanks & Regards
Jacobhi,
Unfortunately I don't have the solution as I also am facing the same issue. You can also follow my thread here at the forum. Search for "workflow issue using wfAction" here at the forum.
Have you tried to run the test under the Test tab and what results do you get?
cheers,
Ibrahim -
Unable to install Matlab in sudo mode
I am trying to install 64-bit version of Matlab in my ArchLinux, running KDE.
The installer was able to start when I typed
/media/iso/instal
(install being the install sh script).
However, it wasn't able to create folders due to permission limits.
So, I decided to run it as a root, I type
sudo /media/iso/install
and it gave me bunch of errors and existed to the prompt again.
Here is just part of that error message
Preparing installation files ...
Installing ...
No protocol specified
No protocol specified
Exception in thread "main" com.google.inject.ProvisionException: Guice provision errors:
1) Error injecting constructor, java.lang.NoClassDefFoundError: Could not initialize class sun.awt.X11GraphicsEnvironment
at com.mathworks.wizard.ui.laf.UIDefaultsTableImpl.<init>(UIDefaultsTableImpl.java:17)
while locating com.mathworks.wizard.ui.laf.UIDefaultsTableImpl
while locating com.mathworks.wizard.ui.laf.UIDefaultsTable
at com.mathworks.wizard.ui.laf.LookAndFeelModule.provideUIProperties(LookAndFeelModule.java:41)
while locating com.mathworks.wizard.ui.laf.UIProperties
for parameter 4 at com.mathworks.wizard.ui.WizardUIImpl.<init>(WizardUIImpl.java:75)
while locating com.mathworks.wizard.ui.WizardUIImpl
while locating com.mathworks.wizard.ui.WizardUI annotated with @com.google.inject.name.Named(value=BaseWizardUI)
at com.mathworks.wizard.ui.UIModule.provideWizardUI(UIModule.java:36)
while locating com.mathworks.wizard.ui.WizardUI
for parameter 0 at com.mathworks.wizard.ExceptionHandlerImpl.<init>(ExceptionHandlerImpl.java:23)
while locating com.mathworks.wizard.ExceptionHandlerImpl
while locating com.mathworks.wizard.ExceptionHandler
Caused by: java.lang.NoClassDefFoundError: Could not initialize class sun.awt.X11GraphicsEnvironment
Last edited by kdar (2010-10-24 13:31:09)ngoonee wrote:
When you're root some env variables aren't propagated, so probably your java env variables are among those.
I'd suggest installing Matlab as user, that's what I do with mine. Just create a folder anywhere (let's say /opt/Matlab) and chmod -R youruser:yourgroup on that folder, and you're good to go.
Thanks that worked, but I just realized I have not enough space on my root partition.
I guess I will just install it in my home folder somewhere. -
Applescript for running sudo commands in terminal
I'm a newbie when it comes to Applescript and was wondering if someone could help with a basic request. I need to write a small script to do the following:
1. Launch terminal
2. Run the 'Sudo -s' command
3. Enter the administrator password (in plain text)
and then
4. run some sudo commands like "sudo defaults write /Library/Preferences/com.apple.loginwindow HiddenUsersList -array-add administrator"
I actually WANT the administrator password to be in the script in plain text even though I understand the security risks (I will literally be the only person to ever see the script). I've trawled forums all over but can't seem to find what I am looking for and cannot get it working by patching together the various commands I have found. Thanks in advance for any help you can give!
SeanI've included two examples. The preferred way & the hacker way.
with administrator
It is easier to diagnose problems with debug information. I suggest adding log statements to your script to see what is going on. Here is an example.
Author: rccharles
For testing, run in the Script Editor.
1) Click on the Event Log tab to see the output from the log statement
2) Click on Run
For running shell commands see:
http://developer.apple.com/mac/library/technotes/tn2002/tn2065.html
on run
-- Write a message into the event log.
log " --- Starting on " & ((current date) as string) & " --- "
-- debug lines
set unixDesktopPath to POSIX path of "/System/Library/User Template/"
log "unixDesktopPath = " & unixDesktopPath
set quotedUnixDesktopPath to quoted form of unixDesktopPath
log "quoted form is " & quotedUnixDesktopPath
try
set fromUnix to do shell script "sudo ls -l " & quotedUnixDesktopPath with administrator privileges
display dialog "ls -l of " & quotedUnixDesktopPath & return & fromUnix
on error errMsg
log "ls -l error..." & errMsg
end try
end run
This version has an inline password.
Notice the echo 'password' |
The single quotes are no accident.
It is easier to diagnose problems with debug information. I suggest adding log statements to your script to see what is going on. Here is an example.
Author: rccharles
For testing, run in the Script Editor.
1) Click on the Event Log tab to see the output from the log statement
2) Click on Run
For running shell commands see:
http://developer.apple.com/mac/library/technotes/tn2002/tn2065.html
on run
-- Write a message into the event log.
log " --- Starting on " & ((current date) as string) & " --- "
-- debug lines
set unixDesktopPath to POSIX path of "/System/Library/User Template/"
log "unixDesktopPath = " & unixDesktopPath
set quotedUnixDesktopPath to quoted form of unixDesktopPath
log "quoted form is " & quotedUnixDesktopPath
try
set fromUnix to do shell script "echo 'password' | sudo ls -l " & quotedUnixDesktopPath
display dialog "ls -l of " & quotedUnixDesktopPath & return & fromUnix
on error errMsg
log "ls -l error..." & errMsg
end try
end run -
How to access UCM Web Service in Oracle.
Hi All,
I am trying to call UCM Web Service (CheckIn.wsdl) using oracle.
But these web services are secured and expecting username/password.
Any one have any idea to pass username/password in oracle function.
My Code :-
CREATE OR REPLACE FUNCTION checkin (dDocName IN VARCHAR2,dDocTitle IN VARCHAR2,dDocType IN VARCHAR2,
dDocAuthor IN VARCHAR2,dSecurityGroup IN VARCHAR2,dDocAccount IN VARCHAR2,
primaryFile IN VARCHAR2)
return number
AS
l_service SYS.UTL_DBWS.service;
l_call SYS.UTL_DBWS.call;
newurl VARCHAR2(32767);
l_wsdl_url VARCHAR2(32767);
l_namespace VARCHAR2(32767);
l_service_qname SYS.UTL_DBWS.qname;
l_port_qname SYS.UTL_DBWS.qname;
l_operation_qname SYS.UTL_DBWS.qname;
l_xmltype_in SYS.XMLTYPE;
l_xmltype_out SYS.XMLTYPE;
BEGIN
l_wsdl_url := 'http://localhost:16200/cs/groups/secure/wsdl/custom/CheckIn?wsdl';
l_namespace := 'http://www.stellent.com/CheckIn/';
l_service_qname := SYS.UTL_DBWS.to_qname(l_namespace, 'CheckIn');
l_port_qname := SYS.UTL_DBWS.to_qname(l_namespace, 'CheckInSoap');
l_operation_qname := SYS.UTL_DBWS.to_qname(l_namespace, 'CheckInUniversal');
l_service := SYS.UTL_DBWS.create_service (
wsdl_document_location => URIFACTORY.getURI(l_wsdl_url),
service_name => l_service_qname);
l_call := SYS.UTL_DBWS.create_call (
service_handle => l_service,
port_name => l_port_qname,
operation_name => l_operation_qname);
l_xmltype_in := SYS.XMLTYPE('<?xml version="1.0" encoding="utf-8"?>
<CheckInUniversal xmlns="' || l_namespace || '">
<VARCHAR2>' || dDocName || '</VARCHAR2>
<VARCHAR2>' || dDocTitle || '</VARCHAR2>
<VARCHAR2>' || dDocType || '</VARCHAR2>
<VARCHAR2>' || dDocAuthor || '</VARCHAR2>
<VARCHAR2>' || dSecurityGroup || '</VARCHAR2>
<VARCHAR2>' || dDocAccount || '</VARCHAR2>
<VARCHAR2>' || primaryFile || '</VARCHAR2>
</CheckInUniversal>');
l_xmltype_out := SYS.UTL_DBWS.invoke(call_Handle => l_call,
request => l_xmltype_in);
SYS.UTL_DBWS.release_call (call_handle => l_call);
SYS.UTL_DBWS.release_service (service_handle => l_service);
END;
It's compiling successfully.
When ever i am trying to run using
SELECT checkin ('WEBSERVICE009','WEBSERVICE009', 'Document','weblogic','Private','IT/EBA/Distributor_testuser','D:/ucmfiles/test_WebService_11.txt') FROM dual;
It's expecting username/password...
Any body have any idea.If you are using apex, you have access to the wwv_flow_web_services package that has all the procs you need to made this work. If not, you can use flex_ws_api, which, although a bit out of date, should still work. This can be found at: http://jastraub.blogspot.com/2009/11/flexwsapi-no-on-samplecodeoraclecom.html
Hopefully this will get you the start you need. Don't forget soapUI. This has proved to be invaluable in my development just to prove something works. It becomes a very easy way when I keep hearing, "UCM doesn't work....".
Check-In
-- Modify and create select that will get filename and content from a table.
-- set serverouput on
-- make sure flex_ws_api package is installed in same schema that you run this.
declare
l_filename varchar2(100);
l_login varchar2(20);
l_ddocname varchar2(20);
l_BLOB BLOB;
l_CLOB CLOB;
l_envelope CLOB;
l_response_msg varchar2(32767);
begin
select name, content, ddocname
into l_filename, l_BLOB, l_ddocname
from pdfs
where id = 1;
l_login := 'kalee';
l_CLOB := flex_ws_api.blob2clobbase64(l_BLOB);
l_envelope := '<?xml version=''''1.0'''' encoding=''''UTF-8''''?>';
l_envelope := l_envelope || '<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:chec="http://www.stellent.com/CheckIn/">';
l_envelope := l_envelope || '<soapenv:Header/>';
l_envelope := l_envelope || ' <soapenv:Body>';
l_envelope := l_envelope || ' <chec:CheckInUniversal>';
if length(ltrim(rtrim(l_ddocname))) > 0 then
l_envelope := l_envelope || ' <chec:dDocName>'||l_ddocname||'</chec:dDocName>';
end if;
l_envelope := l_envelope || ' <chec:dDocTitle>'||l_filename||'</chec:dDocTitle>';
l_envelope := l_envelope || ' <chec:dDocType>WebContent</chec:dDocType>';
l_envelope := l_envelope || ' <chec:dDocAuthor>'||l_login||'</chec:dDocAuthor>';
l_envelope := l_envelope || ' <chec:dSecurityGroup>Public</chec:dSecurityGroup>';
l_envelope := l_envelope || ' <chec:dDocAccount>WebContent</chec:dDocAccount>';
l_envelope := l_envelope || ' <chec:CustomDocMetaData>';
l_envelope := l_envelope || ' <chec:property>';
l_envelope := l_envelope || ' <chec:name>xDCSDProfileTrigger</chec:name>';
l_envelope := l_envelope || ' <chec:value>WebContent</chec:value>';
l_envelope := l_envelope || ' </chec:property>';
l_envelope := l_envelope || ' </chec:CustomDocMetaData>';
l_envelope := l_envelope || ' <chec:primaryFile>';
l_envelope := l_envelope || ' <chec:fileName>'||l_filename||'</chec:fileName>';
l_envelope := l_envelope || ' <chec:fileContent>'||l_CLOB||'</chec:fileContent>';
l_envelope := l_envelope || ' </chec:primaryFile>';
l_envelope := l_envelope || ' </chec:CheckInUniversal>';
l_envelope := l_envelope || ' </soapenv:Body>';
l_envelope := l_envelope || '</soapenv:Envelope>';
l_xmltype := flex_ws_api.make_request(
p_url => 'https://ucmdev.dcsdk12.org/_dav/cs/idcplg',
p_action => 'http://www.stellent.com/Search/',
p_envelope => l_envelope,
p_username => 'admin',
p_password => 'password',
p_wallet_path => 'file:/u01/app/oracle/admin/SADD/wallet',
p_wallet_pwd => 'walletpassword'
l_response_msg := flex_ws_api.parse_response(p_collection_name=>'STELLENT_CHECKIN',p_xpath=>'//idc:CheckInUniversalResponse/idc:CheckInUniversalResult/idc:StatusInfo/idc:statusMessage/text()',p_ns=>'xmlns:idc="http://www.stellent.com/CheckIn/"');
dbms_output.put_line(l_response_msg);
exception
when others then
dbms_output.put_line(l_response_msg);
raise;
end;
/Search
declare
l_envelope CLOB;
l_xmltype XMLTYPE;
l_response varchar2(100);
ecode NUMBER;
emesg VARCHAR2(200);
cursor searchresults_cur(p_xmltype xmltype) is
SELECT
extractvalue(column_value, '/idc:SearchResults/idc:dDocName','xmlns:idc="http://www.stellent.com/Search/"') DOCNAME,
extractvalue(column_value, '/idc:SearchResults/idc:dDocTitle','xmlns:idc="http://www.stellent.com/Search/"') DOCTITLE
FROM TABLE(XMLSequence(p_xmltype.extract('//idc:QuickSearchResponse/idc:QuickSearchResult/idc:SearchResults','xmlns:idc="http://www.stellent.com/Search/"')));
searchresults_rec searchresults_cur%ROWTYPE;
begin
l_envelope := '<?xml version=''''1.0'''' encoding=''''UTF-8''''?>';
l_envelope := l_envelope || '<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:sear="http://www.stellent.com/Search/">';
l_envelope := l_envelope || ' <soapenv:Header/>';
l_envelope := l_envelope || ' <soapenv:Body>';
l_envelope := l_envelope || ' <sear:QuickSearch>';
l_envelope := l_envelope || ' <sear:queryText>dDocAuthor <matches> `kalee`</sear:queryText>';
l_envelope := l_envelope || ' </sear:QuickSearch>';
l_envelope := l_envelope || ' </soapenv:Body>';
l_envelope := l_envelope || '</soapenv:Envelope>';
-- dbms_output.put_line('(soapenv)='||l_envelope);
l_xmltype := flex_ws_api.make_request(
p_url => 'https://ucm.yourdomain/_dav/cs/idcplg',
p_action => 'http://www.stellent.com/Search/',
p_envelope => l_envelope,
p_username => 'admin',
p_password => 'password',
p_wallet_path => 'file:/u01/app/oracle/admin/DATABASESID/wallet',
p_wallet_pwd => 'walletpassword'
-- dbms_output.put_line('(xml)='||substr(l_xmltype.GetClobVal(),1,2000));
open searchresults_cur(l_xmltype);
loop
fetch searchresults_cur into searchresults_rec;
exit when searchresults_cur%NOTFOUND;
dbms_output.put_line('(dDocName)='||searchresults_rec.DOCNAME||' (dDocTitle)='||searchresults_rec.DOCTITLE);
end loop;
if searchresults_cur%ROWCOUNT = 0 then
dbms_output.put_line('No records found!');
end if;
close searchresults_cur;
exception
when others then
ecode := SQLCODE;
emesg := SQLERRM;
--insert into log_table (code,message,info) values (0,TO_CHAR(ecode) || '-' || emesg,'.CheckinDocument emesg');
--commit;
raise;
end;
/ -
UCM 10gR3 installation problem on Solaris
Hi,
I have a problem installing Oracle Content Server 10gR3. When I run the setup script:
*$ cd <path>/UCM/ContentServer/solaris-x86/*
*$ ./setup.sh*
I get the following error:
Exception in thread "main" java.lang.NoClassDefFoundError: Installer
I am running Solaris 10 on VirtualBox, and I have Oracle Database 10gR2 Installed. JDK 1.5.0_20 is installed with Solaris, but I have tried different JDK's, with no use.
I tried setting the CLASSPATH environment variable to ".;/usr/jdk/latest/lib;/usr/jdk/latest/jre/lib", and running the script again, but I got the same result.
Any Ideas?
Thanks in Advance.
Ayman Madkour
Edited by: Ayman Madkour on Nov 2, 2010 9:05 AMhi,
we are working production environment, for that reason we have to install UCM 10gR3 on sun solaries OS.
UCM 11g will it support SUN Solaries OS ??
can you provide me for UCM Installation guide on sun solaries OS.
its very urgent requirement.please provide installation guide for SUN SOLARIES V.10 asap.
Thanks in advance.
Edited by: 792821 on Nov 30, 2010 11:20 AM -
How to create a report of users in ucm about their roles and permission
Hi All ,
I need to create a report and it should contain all the users in ucm as well as their roles and permissions. Basically the report would be for the admin who can see all the users in a single report and can know about the roles and access of each and every users.
How to create such report ?? I have tried from web layuot editor but the default report template i.e stdUserReport in user datasource does not contain more than three fields..Is there any method to get such kind of report???
Please suggest!!There was an example component to demonstrate this kind of function. Under Stellent in version 7.5
I do not know if they hand it out anymore but it is not on the standard samples page for Oracle. You may want to open a Support SR to ask for it. It should still be around in their servers if they can get permission to hand it out as a sample again.
Sample CustomReports component to demonstrate how to create customized reports
CustomReportsBundle.zip
Date: October 30, 2006
Sample Version: version=2006_10_20 (build 1)
Product and Version: Content Server
Sample Status: This is a Stellent Sample. Stellent Samples are free and include non-supported add-ons, utilities, tutorials or programming examples. It may require additional configuration or security auditing for maximum effect. It is not supported by Stellent without a consulting engagement. -
Application Sudo listed in Activity Monitor - Is this a default app that should be running?
First Question: Do other MBP users have an application Sudo listed in Activity Monitor from start up of their mac or with typical use?
Second Question: If you have Sudo process listed in your Activity Monitor, do you also use an Huawei USB wireless modem?
Third Question: For those experienced in relevant coding domains and given the more technical details below - your thoughts?
(Technical)
Using MBP Retina, mid 2012, OSX 10.8.4
I understand sudo is a unix root level access command.
I have used Terminal and become familiar with some basic unix commands, including using the sudo command in very limited single action command circumstances. I have not used Terminal for many weeks, and the sudo command probably twice several months ago.
Sudo showing in Activity Monitor as an active process is to my understanding an entirely different situation to it being used in Terminal. It appears the sudo process is being activated by some other application or process not of my direct use or actions.
I remain a little concerned about this in view of the purchase of this particular MBP. It has a story to it. I was told this MBP was available as new on discount as it had been purchased by a man for his wife, the wife then left him, and subsequently he returned it unused to the store. I was aware that there was a slim risk the laptop had been used for some other activities, and returned so any come back comes back to the new owner.
I noted later with use that the MBP lower keys were sticky as if something has been spilt on them, so I do wonder if the laptop was previously used, then wiped, in which case the story presented to the retailer is likely not true and a more concerning scenario becomes possible.
All the same, I felt a clean install should remove any risk. The MBP arrived in standard ready to set up and go mode, so OS loaded but no activation. So it seemed a clean install to me. I did not wipe the HD and do a fresh OS install from scratch. A decision I now regret.
Some months after using this new MBP, my concerns were raised when I had one day of inexplicable internet usage on a wireless internet connection. Not only did the level of data upload and data load, about 4 GB out of 20 GB for the month not make sense with actual usage, but also the MBP system logs did not tally with the internet providers accounting of usage on that day. There have been two or three other anomalies in usage since. The internet service provider reimbursed me on my evidence of OSX system logs. Not sure if the service provider has people joy riding other users accounts or something suss this end was going on. Never resolved. The ISP was not exactly forthcoming, and I had to press hard to get some collaboration on resolve the anomaly of unexplained data usage.
On the less suspicious side, the existence of this sudo program tracked down as in part coming from the install software from a Huawei modem provided by my internet provider. However, while widely used and therefore likely not a security risk, I still feel need for some better explanation and resolution of the persistent sudo process.
I have inquired to Apple Support about this sudo app running, and it apparently was not seen as an issue of concern by the front line support staff. I took up some further concerns with them but checks indicate no issues of concern with the MBP from their assessment. I trusted that as fairly likely a definitive view, and so left the questions and anomalies as unexplained but harmless.
It is now several months later and I still find the existence of sudo as a running application or process in Activity Monitor troubling, and decided to try and resolve once again how typical and for what reason it is active on my MBP. Which brings us to this post.
I have again spent a few hours searching on Google and Apple Support Forums. All search results I find relate to the use of sudo as a unix command in Terminal to resolve a problem. I can not find any indication of sudo as an app being open routinely in Activity Monitor with or without Terminal being opened or used.
The only way I can think of to resolve if this is unusal or not is to get on this forum and ask the first two questions at the top of this post.
More technical details follow.
For some more technically minded the details may be of interest, hence below here I have added details for further comment. I am hoping some MBP users on this forum may also be coders, and hence have some idea of the internal mac coding environment. Enough to shed some light on this situation.
As mentioned, I think the sudo Activity Monitor may originate from the running of the Internet Providers USB Wireless Modem and software (Huawei E 169? modem). The USB modem has the install software on it. You install that software on your HD as an application.
On this USB Wireless Modem front I have done some checking.
Killing sudo in Activity Monitor does not stop an internet connection mid session.
When the USB modem is removed, the sudo process remains running and listed in Activity Monitor.
If I remove the Modem icon, unplug modem, close all apps, restart without the modem connected, the sudo process is still loaded and running in Activity Monitor.
Months ago on a previous check if I deleted (uninstalled) the modem software, removed associated start up files installed by the modem installation, took out the USB Modem and did a restart, there was no return of the sudo process in Activity Monitor. When the modem software was reinstalled or the start up files restored directly, the sudo process returns to Activity Monitor. One of the software bits installed in start up files calls sudo (or so it appears having a peak in BBedit at the files.)
This seems to fairly much establish the source of the sudo application. However it does not resolve why it needs to be open all the time, and if this is unique to this modem, my modem, modems in general, or if permanent running sudo processes are fairly 'normal' in general. Since sudo is a root level access process, I do feel a little concerned of the situation. Let's say the sudo process is needed to initiate the modem under some justification. Does the sudo process in remaining running permanently from there on, with or without the USB modem connected leave an open access way and vulnerability that can or is used later? i do not know enough of the coding level architecture to form a view. Still, seeing a permanent sudo process operating does niggle by sense of suspicion. Hence, I continue to raise this issue and ask the questions I do.
In Activity Monitor:
sudo as a process when running is not very active.
Real Mem 8 KB, Virtual Mem 9.4 MB, Sent Msgs 75, Rcved Mesgs 26, Ports 25, Intel (64 bit).
The sudo process:
Using Sample Process in Activity Monitor: sudo appears to be a running of the actual sudo command from within the unix command files.
Path: /usr/bin/sudo (Master Library, not the one in the User files)
Load Address: (removed)
Identifier: sudo
Version: ??? (???)
Code Type: X86-64 (Native)
Parent Process: launchd [1]
Call graph
2nd line is 2656 start (in libdyld.dylib) + 1 [(removed)]
Binary Images:
Includes reference to lots of .dylib files. eg libcache.dylib, libquarantine.dylib, libremovefile.dylib, libcompiler_rt.dylib, libcorecrypto.dylib
The parent process is launchd[1]
Process: launchd [1]
Path: /sbin/launchd
Load Address: (removed)
Identifier: launchd
Version: ??? (???)
Code Type: X86-64 (Native)
Parent Process: ??? [Unknown]
It seems all of the activity of launchd[1] is from the sudo process.
Again reference to .dylib files as captured in call graph and Binary images.
I hope the details are valued by someone with an interest to assist with resolving concerns.Thanks,
I usually use the OS connection option. So as you suggest, connect without the ISP connection software. Doing so does not by-pass the sudo command being active in Activity Monitor however.
On reading my post I see my failure to link the concerns of the laptop purchase with the sudo and modem. My thought here is of an intersection of known vulnerability with this widely used modem/software (via permanent sudo process activated) and that vulnerability then being known and utilised by another party(s).
I am pursuing the issue in part with consideration to a broader possible issue of vulnerability.
Thanks again for your thoughts and suggestions. Valued. -
Jabber 9 UCM 6 and phone control..
Hello, I'm setting up Presence and Jabber for a client with UCM 6.1. Everthing seems to be working fine except the ability to control desktop phones from Jabber. Although all the settings appear to be ok whenever a user tries to change from softphone to hardphone in Jabber it fails. I have a TAC case open and we are at the..let's pull the same logs again stage..which means they are stumped usually. So my question is..Has anyone out there ever got this to work with CallManager 6? I am begining to suspect that this feature just doesn't work with this version of CallManager. Any help would be much appreciated.
Thanks!
JustinSupported Servers for On-Premises Deployments
Cisco Unified Communications Manager versions 7.1.4 to 9.0
Note
Cisco Jabber for Windows supports Cisco Unified Communications Manager 7.1.3 if you install the following COP file to enable CSF devices: ciscocm.installcsfdevicetype.cop.sgn.Download ciscocm.installcsfdevicetype.cop.sgn from the Cisco Jabber for Windows administration package on Cisco.com.
HTH
java
if this helps, please rate
www.cisco.com/go/pdihelpdesk -
Get native file in ucm (ucm and terastack solution working together)
Hi,
We use oracle universal content management server (ucm). A lot of files are stored on the hard disk of the system using this content management system. Now we are using Terastack Solution (http://www.hie-electronics.com/) to create backup of the data. The TeraStack Solution is an optical data storage system designed and manufactured to improve performance through affordable and reliable data storage management. Terastack solution archives (writes) all files to dvds and then a module of it truncates all these files to zero byte in size to save disk space. Now terastack solution watches all archived files. If an application tries to open such a file, it intercepts this, blocks this request, then restores the file from the dvd. During this process calling application just waits for the file to open. After restoring terastack solution sends a signal to the calling application, and the file with full contents is opened in the application.
Now here is the problem:
Files are check-in oracle content server. Terastack solution has burned these files to dvd and made these files to zero byte in size. Now when we click a link in content server to get a checked-in file (native file), terastack solution intercepts it, restore the file from dvd, then an open/save dialog box open to either open or save the file to a location. We save the file to a folder, open this file and come to know that there is no content in the file. It is still a zero byte file.
When we checked the file at original location (remember ucm stores files in vault folder), we came to know that file is actually restored successfully by the terastack solution but the content server returned a zero byte file. When we click the link for the same file again to get native file in ucm then we get a fully restored file. i.e. on the first try to get native file we get a zero byte file although it is restored by terastack solution successfully. And on the second try we get file with full contents. On the second try, file has already been restored by terastack solution during the first try and terastack solution ignores files greater than zero byte in size, that’s why client gets a correct file on second try. Having size greater than zero means file is already restored.
The link in ucm that is used to get native file does not point directly to the desired file. It calls some code in ucm that transmit the required file back to the client. Something like this:
http://localhost/idc/idcplg?IdcService=GET_FILE&dID=11&dDocName=test_06&allowInterrupt=1
I think what is going on here is, when we click on a link to get native file that is zero byte in size, content server creates a response for the file, append the size of the file (currently zero) to the header of the response along with other info, and then tries to transmit the file to the client. At this point, terastack solution intercept the request and restore the file. After restoring terastack solution send signal to calling application that file is restored. But the server has already created request for the file and it is not updated during or after the restore, that’s why client gets zero byte file.
What I want is somehow force the content server to wait until file is fully restored by terastack solution and then transmit the fully restored file to client. Is there any configuration setting for ucm that will achieve the goal?
Any setting in bin/intradoc.cfg or config/config.cfg or something else?
Need help.
Environment:
OS: Windows XP SP3
Content Server 10gR3 (Deployed to: IIS, JDK used: v1.5)
TeraStack Solution (Deployed to: JBoss)Thank you for your reply. Although the links to weblayout version of files works perfectly with terastack, but we want to take backup of files in vault folder. Is it possible to change the links that are use to get native file? Can we somehow make these links to directly point to vault files? If yes please tell us how.
A custom java service to download the native file can also work. Can you please give us a sample code and how to implement it in ucm?
Please provide one of the solutions. I’m a new comer to ucm, so please provide instructions in more details.
BTW, I tested the restoration of file using a test dotnet web application. I added code that downloaded a user selected file to the client. The code we used is as under:
1. FileInfo fi = new FileInfo(filepath);
2. Response.Clear();
3. Response.AddHeader("Content-Disposition", "attachment; filename=" + fi.Name);
4. Response.AddHeader("Content-Length", fi.Length.ToString());
5. Response.ContentType = GetFileContentType(fi.Extension);
6. Response.TransmitFile(fi.FullName);
7. Response.End();
GetFileContentType() function is a simple function to get content type of a file type.
Line#4 is important here. A file is zero byte in size when a request to download a file is received by the server, and the server just appends content-length=0 in the header. So even the file is restored by the terastack afterwards, client still receives a zero byte file. At this stage our test application has the same problem, not getting a native file with full contents.
We removed line# 4 and tried again to download a file thru our test web application. This time client got file with full contents after the file is restored. So we think this Content-Length header is the one that needs to be handled.
You may find this information useful if you decide to build a java service solution. -
I am trying to free up space on my macbook air by stopping local backups. I type sudo tmutil disablelocal and it prompts me for my passsword. When I try to type in the password it wont type-- i.e the letters do not apear when I type them-- any suggestions??
Hi there...
For security do not appear in code, but once you hit ENTER it has been passed in Terminal ...careful to write the code properly and kaps lock -
Want to install Siebel CRM in my PC for integrating with UCM.
I am very familiar with Oracle UCM and trying to integrate with Siebel CRM. I have UCM 11g installed in my PC with Oracle 11g DB and also I know the configuration process or steps from siebel end as well as UCM end. Now I want to install Siebel CRM for this integration.
I searched in orcale and found that I need the below softawres and also I downloaded it from e-delivery:
Oracle Base Application (V26510-01_1of2 and V26510-01_2of2)
Oracle Siebel Image creator(V26511-01)
Oracle DB11g: OracleXEUniv
RCU
What should I do now?
1. Is the above softwares enough for installation of Siebel ? If yes then can anyone please tell me the installation guide docs.
2. Should I require more softawre ?
3. I have also V26699-01_1of6 to V26699-01_6of6 setup files for siebel but I do not know whether I should install from these because I do not have any idea regarding this setup files.
Regards,
SantanuI think you also need V14496-01 Part 1 of 2 and V14496-01 Part 2 of 2 (English Language Extension Packs).
Installation is explained in the Bookshelf: V29095-01 -
i am trying to install oracle 11g xe on ubuntu aws instance when i execute sudo /etc/init.d/oracle-xe configure command iam getting this error: sudo: /etc/init.d/oracle-xe : command not found.
"command not found" means ... there is no such thing.
Has the .rpm been installed?
http://docs.oracle.com/cd/E17781_01/install.112/e18802/toc.htm#XEINL122
Maybe you are looking for
-
I have given up with Photoshop CS4 when saving images for Web, whilst in previous version it was an instantaneous process, now when I press 'Save' Photoshop goes into Spinning wheel limbo from which I have to 'Force Quit' to leave. Have now installed
-
Concurrent movement of two scrollpane
hai all, i have two scrollpane while moving the first one the second should move the corresopnding amount of movement in first , if the second one is moving that same action should happend in first one also by lolipop
-
I've been googling for a while, and I can't figure out how to apply a small-caps effect to the title at the top of my document. i have it in rich text format. i even tried Bean, and it uses the OS X font picker in which there is no small caps option.
-
Facebook integration in groups
Hi,jus bothering whether the groups in our facebook could be integrated wit the groups in our contacts. It would be very useful for fb lovers.
-
Hi My osX Lion loaded iMac always prints with a default "scale" of "150%" and consequently won't print anything on a single page. I always have to go into "Printer Settings" and change it to "100%" to print properly. Is there any way to set this up t