Which command we use to check root privileged users in solaris
Hi,
please tell me ,if i want to check the number of people using super user privilege in the sun solaris server .how we can find that ? ,is there any command to find that ?
please reply me
boby
there is few ways to use root privileges
- login as root or as user with UID 0
- login as ordinary user and do su - . In this case check group ownership of su file and pam config
- use sudo command - check sudo config file
Similar Messages
-
How to find which custom program uses authorization checks
Hi all,
I have been asked to find out which custom ABAP program in our organization is using Authorizations checks and which is not.
Since there are thousands of custom programs I will need to automatize this process somehow. But I am not an ABAP expert and I will need some help.
Could any of you give me an idea of what would be the best strategy to find out if authorization objects/checks exist in a number of ABAP programs? (would a simple text search do?).
Many thanks,
AldoIf you are looking out for Authorization related to Execution of any program, then look for entries in table TRDIR where field SECU (Authorization Group) is not blank.
Below SAP documentation may help you:
Authorization Group
Authorization group to which the program is assigned.
The assignment of a program to an authorization group plays a role when the system checks whether the user is authorized to:
Execute a program
--> Authorization object S_PROGRAM
Edit a program (-Include) in the ABAP Workbench
--> Authorization object S_DEVELOP
Programs that are not assigned to an authorization group are not protected against display and execution.
Security-related programs should, therefore, always be assigned to an authorization group.
Report RSCSAUTH can also be used to assign programs to authorization groups. This report is documented in detail. -
Which command i use to run SWING APPLET
Hi friends,
i m a new in swing technology i got and problem when i run swing applet .
i make a file and complie it with -deprecation it work and make a .class file but how can i run this applet [i use jview command , appletviewer command but it can't work]
i hope that someone hellp me.Just as a matter of interest and i know its a stupid question, but did you create a html file to access the class file/jar
Here is some example code of an applet html page
Hope it helps...
Also have you put it in a Jar file?
<html>
<head>
<title>(Whatever title youu want)</title>
<BODY TEXT="#000000" BGCOLOR="#FFFFFF" LINK="#0000EE" VLINK="#551A8B" ALINK="#FF0000">
<TR>
<APPLET CODE = "ClassName.class" ARCHIVE = "JarName.jar" WIDTH = "800" HEIGHT = "600"></XMP>
<PARAM NAME = CODE VALUE = "ClassName.class" >
<PARAM NAME = ARCHIVE VALUE = "JarName.jar" >
<PARAM NAME="type" VALUE="application/x-java-applet;version=1.3">
<PARAM NAME="scriptable" VALUE="false">
<dont worry about this>(they just variables for my applet)
<PARAM NAME = SERVER_IP VALUE ="192.1.1.209">
<PARAM NAME = SERVER_PORT VALUE =8701>
<PARAM NAME = DEBUG VALUE =true>
<PARAM NAME = REFRESH VALUE =10000>
<PARAM NAME = TAIL_REFRESH VALUE =2500>
<PARAM NAME = MESSAGE_TIMEOUT VALUE =60>
</dont worry about this>
</APPLET>
</body>
</html> -
How to edit an online order that I placed using guest check out
I stupidly hit guest check out when placing an online order, and despite using an email address that was registered to my apple account the order is not associated with my account. So now there is a problem with the payment because my bank asked me to confirm such a large transaction, and apple wants me to update the payment info which immediately takes me to an apple account log in screen which since I used guest check out logging in just brings me to a screen that says this account doesn't have access to this order. So I can't edit the order that apple is requesting me to order because I used guest check out. I don't want to cancel the order because it will delay receiving my phone by nearly a month!!! AAAAGGGHHH!!! Any suggestions??
Try calling the phone number in guest checkout in this article. I'd expect a delay.
http://store.apple.com/us/help/your_account -
How to check virtual Memory Info on Solaris 10
Hello,
Can anybody please tell me command used to calculate or check virtual memory configured on my solaris 10 T2000 servers.
From Solaris Management Console I did get this information but I was wondering which command it used to extract this information.
Thanks in AdvanceHere is vmstat 2 2 s output on my machine
kthr memory page disk faults cpu
r b w swap free re mf pi po fr de sr s0 s1 s2 s3 in sy cs us sy id
0 0 0 18874528 3257488 19 47 32 3 3 0 1 2 3 0 0 964 16476 1115 1 1 98
0 0 0 21063104 5781064 36 135 28 0 0 0 0 0 0 0 0 1509 5049 1946 1 1 99
It says system has 21063104KB of Swap but my solaris management console shows
Physical Memory: 8184 MB
Virtual Memory : 21992 MB
Virtual Memory used : 7%(1537/21992)20455 MB Available
I want to know how Solaris Management Console calculated my Virtual Memory.
Thanks -
What is to be used to know whether the user has made any changes in alv
hi all,
i want to know what is to be used for checking whether a user has done any changes in an editable alv.
i have used sy-datar but it has nothing in it.
so kindly help SAP gurus.
with regards,
SindhujaHi Sindhu ,
If you want to capture the changed data ( rows) use the event : handle_data_changed .
When the user changes the data , this event will be triggered and the table will have only the changed data.
Regards,
Chitra -
hi all,
I am running a CentOS base VM on top of Hyper-V server. I upgraded PV drivers of Hyper-V in linux kernel 2.6.32 in order to support
Windows Server 2012, then i am hitting below issue on Windows Server 2008 when kernel switches from old PV(which is 2.6.32 based) to new PV(which is equivalent to linux integration component 3.4).i
am hitting following filesystem check error messages :
Setting hostname hostname:
Checking root filesystem
fsck.ext3/dev/hda2:
The superblock could not be read or does not describe correct ext2 filesystem. If the device is valid and it really contains an ext2
filesystem(and not swap or ufs or something else),then the superblock is corrupt, and you might try running e2fsck with an alternate superblock:
e2fsck -b 8193 <device>
: No such file or directory while trying to open /dev/hda2
*** An error occurred during the filesystem check.
*** Dropping you to a shell; the system will reboot
*** When you leave the shell.
Also, when I go to the repair filesystem mode. I found out the strange behaviour when i ran those command :
(Repair filesytem) 1 # mount
/dev/hda2 on / type ext3 (rw)
proc on /proc type proc (rw)
(Repair filesystem) 1# cat /etc/mtab
/dev/hda2 /ext3 rw 0 0
proc /proc proc rw 0 0
(Repair filesystem) 1# df
Filesystem 1K-blocks used Available Use% Mountedon
/dev/hda2 4%
I think for all above command there should be /dev/sda2 instead of /dev/hda2.
Also my fstab , and fdisk -l looks like ok for me.
(Repair filesystem) 1# cat /etc/fstab
LABEL=/ / ext3 defaults 1 1
LABEL=/boot /boot ext3 defaults 1 2
devpts /dev/pts devpts gid=5,mode=620 0 0
tmpfs /dev/shm tmpfs defaults 0 0
proc /proc proc defaults 0 0
sysfs /sys sysfs defaults 0 0
LABEL=swap-xvda3 swap swap defults 0 0
(Repair filesystem) 1# fdisk -l
Device Boot Start End Block Id System
/dev/sda1 * 1 49 98535 83 Linux
Partition 1 does not end with cylinder boundary.
/dev/sda2 49 19197 39062500 83 Linux
Partition 2 does not end with cylinder boundary.
/dev/sda3 ......
Partition 3 does not ......
/dev/sda4 ......
Partition 4 does not end ....
(Repair filesystem) 1# e2label /dev/sda1
/boot
(Repair filesystem) 1# e2label /dev/sda2
(Repair fielsystem) 1# ls /dev/sd*
/dev/sda /dev/sda1 /dev/sda2 /dev/sda3 /dev/sda4
(Repair filesyatem) 1# ls /dev/hd*
ls: /dev/hd*: No such file or directory
Kindly suggest any configuration of windows server or kernel configs missing or how to resolve this issues
Many many thanks for your reply.
thanks & Regards,
Ujjwali am not able to understand duplicate UUID and from where it is picking /dev/hda* ?
~
VVM:>>
VVM:>> Output of dmesg | grep ata contain substring "Hyper-V" ?
VVM:>>
it doesn't contain "Hyper-V" or ata related message and the output doesn't change with boot parameter reserve=0x1f0, 0x8
~~
~~~~
==
output of dmesg related "ata" Ubuntu v13.04 mini.iso ( with boot parameter reserve=0x1f0, 0x8)
==
see later ( in "good situation" example )
~~
===
Disable legacy ATA driver by adding the following to kernel command line in /boot/grub/menu.lst:
reserve=0x1f0, 0x8
. (This option reserves this I/O region and prevents ata_piix from loading).
==
See output of dmesg related "ata" Ubuntu v13.04 mini.iso ( with boot parameter reserve=0x1f0, 0x8) :
~~
[ 0.176027]
libata version 3.00 loaded.
[ 0.713319]
ata_piix 0000:00:07.1: version 2.13
[ 0.713397]
ata_piix 0000:00:07.1: device not available (can't reserve [io 0x0000-0x0007])
[ 0.713404]
ata_piix: probe of 0000:00:07.1 failed with error -22
[ 0.713474]
pata_acpi 0000:00:07.1: device not available (can't reserve [io 0x0000-0x0007])
[ 0.713479]
pata_acpi: probe of 0000:00:07.1 failed with error -22
~~
As result: 1) IDE disk handled by hv_storvsc , but 2) no CD-ROM device
==
~ # blkid
/dev/sda1: LABEL="ARCH_BOOT" UUID="009c2043-4bl7-4f95-al4d-fb8951f95b5d" TYPE="ext2"
==
~~
VVM>>
VVM>>Q1: Output of blkid contain duplicate UUID ?
VVM>>
-> blkid contains duplicate UUID, below are the output.
~~
This situation is classic problem "
use hv_storvsc instead of ata_piix to handle the IDE disks devices ( but not for the DVD-ROM / CD-ROM device handling)
~~
For compare, see example "good situation":
See output of dmesg related "ata" Ubuntu v13.04 mini.iso ( without boot parameter reserve=0x1f0, 0x8) :
~~~~
~ # dmesg |grep ata
[ 0.167224] libata version 3.00 loaded.
[ 0.703109] ata_piix 0000:00:07.1: version 2.13
[ 0.703267] ata_piix 0000:00:07.1: Hyper-V Virtual Machine detected, ATA device ignore set
[ 0.703339] ata_piix 0000:00:07.1: setting latency timer to 64
[ 0.704968] scsi0 : ata_piix
[ 0.705713] scsi1 : ata_piix
[ 0.706191] atal: PATA max UDMA/33 cmd 0xlf0 ctl 0x3f6 bmdma 0xffa0 irq 14
[ 0.706194] ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0xffa8 irq 15
[ 0.868844] atal.00: host indicates ignore ATA devices, ignored
[ 0.869142] ata2.00: ATAPI: Virtual CD, , max MWDMA2
[ 0.871736] ata2.00: configured for MWDMA2
~~~~
===
~ # uname -a
Linux ubuntu 3.7.0-7-generic #15-Ubuntu SUP Sat Dec 15 14:13:08 UTC 2012 x86_64 GNU/Linux
~ # lsmod
hv_netvsc 22769 0
hv_storvsc 17496 3
hv_utils 13569 0
hv_vmbus 34432 3 hv_netvsc,hv_storvsc,hv_utils
~ # blkid
/dev/sr0: LABEL=”CDROM" TYPE="iso9660”
/dev/sda1: LABEL="ARCH_BOOT" UUID="009c2043-4bl7-4f95-al4d-fb8951f95b5d" TYPE="ext2"
===
( only CD-ROM and 1( one) IDE disk connected to ATA)
~~
regarding ata_piix.c patch . . .
As far as i understand this patch , it ignore ATA devices on Hyper-V when PV drivers(CONFIG_HYPERV_STORAGE=y) are enabled.
~~
Yes:
ignore ATA-HDD ( but not ignore ATA CD-ROM ) on Hyper-V when PV drivers(CONFIG_HYPERV_STORAGE=y) are enabled.
~
this patches need be backported:
cd006086fa5d ata_piix: defer disks to the Hyper-V drivers by default
and its prerequisite
db63a4c8115a libata: add a host flag to ignore detected ATA devices
~
~~
P.S.
Are You do this:
==
As temporary solution, increase on 1-2 Gb size all .vhd connected to IDE bus
( but not increase size of partitions inside disks)
==
? fsck write message a-la: "no error in file system" ?
2013-01-24 Answer by Ujjwal Kumar: As a temporary solution looks ok for me, but [ VVM: need true solution ]
P.P.S.
To Ujjwal Kumar :
My e-mail:
ZZZZZZZZZZZZZZZ
please send e-mail to me, in reply I send to You patches to ata_piix ( and *.c before and after patches) , etc.
} on 2013-01-14 -- DoNe -
Hi All,
Recently, we've encountered some weird error for some users when trying to assign records to them through both the CRM UI and CRM SDK Call.
The error message saying: "The user for which we are checking a privilege should be in the same org as the context provided".
Here is the trace log for assigning a lead for one of those users (same error for other records):
[2010-08-09 13:58:06.0] Process: w3wp |Organization:d905ae4d-8d9f-df11-a1b0-00237df0351e |Thread: 22 |Category: Exception |User: fb56b107-949f-df11-a1b0-00237df0351e |Level: Error | CrmArgumentException..ctor
at CrmArgumentException..ctor(String message)
at SecurityLibrary.TryCheckPrivilege(Guid user, Guid privilege, ExecutionContext context)
at SecurityLibrary.CheckPrivilege(Guid user, Guid privilege, ExecutionContext context)
at SecurityLibrary.CheckPrivilege(Guid user, EntityMetadata metadata, PrivilegeType type, ExecutionContext context)
at CascadeEngine.AssignDB(BusinessEntityMoniker moniker, SecurityPrincipal assignee, ExecutionContext context)
at RuntimeMethodHandle._InvokeMethodFast(Object target, Object[] arguments, SignatureStruct& sig, MethodAttributes methodAttributes, RuntimeTypeHandle typeOwner)
at RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture, Boolean skipVisibilityChecks)
at RuntimeMethodInfo.Invoke(Object obj, BindingFlags invokeAttr, Binder binder, Object[] parameters, CultureInfo culture)
at LogicalMethodInfo.Invoke(Object target, Object[] values)
at InternalOperationPlugin.Execute(IPluginExecutionContext context)
at PluginStep.Execute(PipelineExecutionContext context)
at Pipeline.Execute(PipelineExecutionContext context)
at MessageProcessor.Execute(PipelineExecutionContext context)
at InternalMessageDispatcher.Execute(PipelineExecutionContext context)
at ExternalMessageDispatcher.Execute(String messageName, Int32 primaryObjectTypeCode, Int32 secondaryObjectTypeCode, PropertyBag fields, CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
at RequestBase.Process(Int32 primaryObjectTypeCode, Int32 secondaryObjectTypeCode, CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
at RequestBase.Process(CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
at CrmServiceInternal.Execute(RequestBase request, CorrelationToken correlationToken, CallerOriginToken originToken, UserAuth userAuth, Guid callerId)
at InProcessCrmService.Execute(Object request)
at PlatformCommand.ExecuteInternal()
at AssignRouteOnCreateUpdateListener.AssignEntity(Entity entity, LookupValue owner)
at CommunicationListener.HandlePostEvent(PlatformCommand command, Response response)
at PlatformCommand.ExecuteInternal()
at UpdateCommand.Execute()
at EntityProxy.Update(Boolean performDuplicateCheck)
at AppForm.HandleFormEventAssign(Boolean gridRefreshCallbackAdded)
at AppForm.RaiseDataEvent(FormEventId eventId)
at EndUserForm.Initialize(Entity entity)
at CustomizableForm.Execute(Entity entity, String formType)
at LeadDetailPage.ConfigureForm()
at AppUIPage.OnPreRender(EventArgs e)
at Control.PreRenderRecursiveInternal()
at Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)
at Page.ProcessRequest()
at Page.ProcessRequest(HttpContext context)
at sfa_leads_edit_aspx.ProcessRequest(HttpContext context)
at CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
at ApplicationStepManager.ResumeSteps(Exception error)
at HttpApplication.System.Web.IHttpAsyncHandler.BeginProcessRequest(HttpContext context, AsyncCallback cb, Object extraData)
at HttpRuntime.ProcessRequestInternal(HttpWorkerRequest wr)
at HttpRuntime.ProcessRequestNoDemand(HttpWorkerRequest wr)
at ISAPIRuntime.ProcessRequest(IntPtr ecb, Int32 iWRType)
>Crm Exception: Message: The user for which we are checking a privilege should be in the same org as the context provided, ErrorCode: -2147220989, InnerException: System.ArgumentException: The user for which we are checking a privilege should be in the same
org as the context provided
I checked the user id and the organization id, and there are both correct (in the database). The user id "fb56b107-949f-df11-a1b0-00237df0351e " is actually the internal CRM System User.
What could the issue be?
Can anyone help, please. ThanksAre you sure, the User which you are assigning is in the same organisaion. It seems that the Orgname which you are specifying is not correct. and the web service is pointing to other user which is not the current ms crm organisaion.
Could you please paste your code here for more details.?
Thanks, Ranjitsingh R | http://mscrm-developer.blogspot.com/ | MS CRM Consultant -
[SOLVED]Root Privilege Command in Openbox Menu
This is my first post as a arch user, and I just thought I would start by saying hi!!!
Anyway, I have recently moved from CrunchBang linux 9.04 to Arch linux. I have setup an openbox session as my default. I have gotten everything to work so far except for one thing:
Lets say you something to the openbox menu, like gparted. Gparted requires root privilege to run. Under ubuntu/debian, I would simply use "gksu gparted" as the command because that would prompt me for the password and then run the program. I am not aware of any way to do such a thing in arch linux. Is there a simple way to do this?
-thanks
Last edited by Dr Belka (2010-04-04 17:54:48)You're in Arch country now, boy. You want fancy gksu, you pacMAN up and install it.
Also note gksu comes with gksudo so you can use your password rather than roots - assuming you're in the sudoers file.
Last edited by Mardoct (2010-04-04 17:53:15) -
Environment:
OS: Windows 7 32/64 bit, Windows 2008 Server 64
bit/ Windows 2012 Server 64 bit
Priority:
- Critical
Requirement: - Since
the Windows Service is running under the Local System Account, we would like to emulate this same behaviour.
Basically, we would like to run CMD.EXE under the Local System Account. So that we can map a network drive to be used by a service using following
command
net use z: \\servername\sharedfolder /persistent:yes.
Already Attempt:
We tried to launch the CMD.exe using the DOS Task Scheduler AT command. Here’s a sample command:
AT 10:36 /interactive cmd.exe
But I received a warning that “due
to security enhancements, this task will run at the time excepted but not interactively.”
It turns out that this approach will work for XP, 2000 and Server 2003 but due to session isolation
Interactive services no longer work on Windows 7, Windows Server 2008 and above.
2. We
tried to create a secondary Windows Service via the Service Control (sc.exe) which merely launches CMD.exe.
<Drive>:\sc create RunCMDAsLSA binpath= "cmd" type=own type=interact <Drive>:\sc
start RunCMDAsLSA
In this case the service fails to start and results it the following error message:
FAILED 1053: The service did not respond to the start or control request in a timely fashion.
3. One
suggestion, we found to launch CMD.exe via a Scheduled Task, but
it is not giving any option to launch CMD.exe in interactive mode; so that I can map network drive using net command.
4. I read an article, which
demonstrates the use of PSTools from SysInternals. I launched the command line and executed following command
psexec -i -s cmd.exe
PSTools worked fine, but It seems that in scope of Sysinternals Software License
Terms. You may not "use the software for commercial software hosting services."
Application will deploy on client, which will be like commercial,
so we are not able to use PSTools.
Kindly assist us for achieving the requirement. We have tried all the ways, but nothing is working for us. Kindly suggest.
I will be really thankful.Hi Sir,
Nothing worked from above for us. You can see our remarks on posted query.
That’s why, we posted on forum.
And there will not be any vulnerability, because, if we will use "net
use ..."
in network domain; definitely,
we will provide username and password of mapped drive system.
And, that system, itself is given by client; so that, there must not be any vulnerability; they are ready to provide user name and password.
We need a way; by which we can complete the requirement. Kindly assist.
Regards,
S. P. Singh -
"Command-i" which was so useful for selectively deleting messages from servers has disappeared in Maverick. I wonder if it has been replaced by something else or should I look into other mail applications.
Hmmm. Which Mail program are you referring to?
in Mac Mail command -i used to bring up the Account info pane on the server (10.8.5)
Now it seems you have to use the gear at the bottom in "Mail Activity" to get the drop down (10.9) : -
What command would you use to check for allocation, structural, or logical integrity problems?
Wondering if you are looking for DBCC CHECKDB command? For more information, on that command, try to look at this:
http://technet.microsoft.com/en-us/library/ms176064.aspx -
Background and foreground colors can be interchanged using which command
hi
background and foreground colors can be interchanged using which command<b>Background and foreground colors can be interchanged using the command Format Inverse.</b>
-
hey,i forgot my login password,so i changed the password by using terminal command(reset password).now i have new user name with new password,
but i can't find my data which i have saved on mac.the storage is showing data used and free space on the disk
please help me out in this matter.How did you change your user name?
resetpassword wouldn't have done it. If you managed to create a new user, then your data is still in the old account. -
How to check which table is used
After creating RFQ , i want to check which table is used in creating RFQ.
how can i see that data has gone or not into the database table.Hi
See the Table EKKO and EKPO only
with EKKO-BSTYP = A
Regards
Anji
Maybe you are looking for
-
Why do I keep getting an error message when trying to use passbook?
Why do I keep getting an error message when trying to use passbook?
-
Changed Pressure transducers with 0-5Vdc from the old 0-10. PVis way off!
Im a newby with labiew as of last week. I was tasked to change the range of new pressure transducers that were recently installed in our lab application. I am currently running 6.1 with Fp-PS-4 , FP-1601 , FP-AI-112 , and FP-RTD-124 Hardware. We are
-
Can I be able to read a pdf format on my blackberry?
Can I be able to read a pdf format on my blackberry? Is there a program that will be able to do that? Please give me Kudos if you feel like I helped you Thank you cuse165
-
What is the Use of Text Module Radio buton in Smartforms
Hi all, What is the Use of Text Module Radio buton in Smartforms T - code ? How can we link this to our form ? Thanks in advance KR
-
Hi Experts! Anyone know how the above two TCODES are related. I know DP91 is used for RRB - Resource Related Billing. So how is MR11 linked to it? By what tables, etc..? Thanks, jah