Role permissions to user/required to upload/remove data store files

Similar Questions

• Cannot remove data VMDK file store

  Hello

  I tried to solve a problem where we can't delete the 2 files hard below (since a ls - la in ssh)

  -rw - 1 root root 262144 Jul 31 13:55 2010 - 10 a-000001 - delta.vmdk
  -rw - 1 root root 133711265792 Jul 31 13:55 2010-10A - s001.vmdk

  I tried a rm without success:

  The virtual machine is more listed in VCentre (I tried to delete data store manager), I believe that files can be locked for a reason, but I don't know enough to determine whether it is safe to kill the s pid which seem to use the folder:

  [MS root@ESX1 server demo disk] # lsof | grep 'Disc of demo of MS Server'
  disc of demo server lsof 1317 root cwd DIR 0,18 560/vmfs/volumes/4fb703b6-bb64840f-e817-02215eccbdbb/MS 21592
  disc of demo server grep 1318 root cwd DIR 0,18 560/vmfs/volumes/4fb703b6-bb64840f-e817-02215eccbdbb/MS 21592
  disc of demo server lsof 1319 root cwd DIR 0,18 560/vmfs/volumes/4fb703b6-bb64840f-e817-02215eccbdbb/MS 21592
  bash 16678 disc of demo server root cwd DIR 0,18 560/vmfs/volumes/4fb703b6-bb64840f-e817-02215eccbdbb/MS 21592
  

  No results appear if I lsof files themselves.

  I can kill these processes? I have not the option to restart the server.

  I've also seen mention of restart /sbin/servicesservices. SH , but I'm hesitant because I don't know what this will do - how does affect other virtual machines running?

  I'm running ESX 4.0.0 208167 (according to VCentre) and I watched as a result of discussions among others:

  http://communities.VMware.com/message/2037529

  http://communities.VMware.com/thread/126894

  http://communities.VMware.com/thread/246141

  http://KB.VMware.com/selfservice/microsites/search.do?language=en_US & cmd = displayKC & externalId = 10051

  
  Any help is greatly appreciated

  
  [MS root@ESX1 server demo disk] # rm - rf 2010-10A - 000001 - delta.vmdk
  RM: cannot remove "2010-10A - 000001 - delta.vmdk': device or resource busy"
  

  I've also seen mention of restart /sbin/servicesservices. SH , but I'm hesitant because I don't know what this will do - how does affect other virtual machines running?

  You can restart the services... There will be no impact to the VMS running... also try to restart VMware vCenter services (services.msc)

  If the above does not work, then restart the host seems to be the fastest and the most secure option.

• Add a user in the system-jazn-"Data.xml" file

  I have an ADf application (developed in JDeveloper 10.1.3.3).
  It implements security using xml. (jazn.xml points to the system-jazn-"Data.xml")
  
  In the system-jazn-"Data.xml", I have entries like -
  -< user >
  < name > DataBase_User_OfYmnJXIxCAH90iuGKMkBoZmd5Sfm44M < / name >
  < guid > AA61EF7072F211DD8F62B3BA7CB157C2 < / guid >
  < powers {903} OfYmnJXIxCAH90iuGKMkBoZmd5Sfm44M > < / qualifications >
  < / user >
  
  no idea what are these entries and why they are here.

  Hello

  as it appears, it comes to forwarding password for a data source. In order to avoid the definitions of data source by clear text password, the defined data sources use an entry in the system-jazn-"Data.xml" where they are encrypted.

  Frank

• Adding a user to a role, you see only not the role permissions

  Hi all

  Simple question HERE and frustrating because it seems so easy... Oracle 11 G 64-bit (11.2.0.3) on Windows

  I created a role and a user as follows:

  CREATE USER TEST_USER
    IDENTIFIED BY <password>
    DEFAULT TABLESPACE USERS
    TEMPORARY TABLESPACE M_TEMP
    PROFILE DEFAULT
    ACCOUNT UNLOCK;
    -- 1 Role for TEST_USER 
    GRANT INTELLIWAVE TO TEST_USER;
    ALTER USER TEST_USER DEFAULT ROLE NONE;
    -- 1 System Privilege for TEST_USER 
    GRANT CREATE SESSION TO TEST_USER;
  

  The role is:

  CREATE ROLE INTELLIWAVE NOT IDENTIFIED;
  -- Object privileges granted to INTELLIWAVE
  GRANT SELECT ON SCHEMA1.ERROR_LOG TO INTELLIWAVE;
  -- Grantees of INTELLIWAVE
  GRANT INTELLIWAVE TO TEST_USER;
  GRANT INTELLIWAVE TO SYS WITH ADMIN OPTION;
  

  Now when I use the Toad and sign in using the TEST_USER user, I can connect fine but if I try to choose among this SCHEMA1. Table ERROR_LOG, reads table/view does not exist. And when I check the tree of the scheme under the scheme, I don't see this table under that user. It is there.

  What Miss me?

  Thanks in advance!

  It seems likely that the new role is not enabled in the session. Try

  SELECT * FROM SESSION_ROLES;

  While signed in as a user. The new role appears?

  I don't see EDIT USER by DEFAULT ALL ROLE; in your script CREATE USER.

  I don't see EDIT USER by DEFAULT ROLE INTELLIWAVE;

  For example, if the role is not one of the default roles for the user (via one of the above) then you will need to deliver the VALUE ROLE INTELLIWAVE. or the ROLE ALL VALUE; to access privileges granted to this role. The SET ROLE command affects only the current session.

• Roles, permissions - DataCenter, file, Cluster, host Layout - best Practices\How-to

  Have a little problem with permissions and roles. I'm sure it will be an easy one for those of you with more experience of working with roles. I hope that my layout organization made with quote boxes is readable.

  The Organization has just spun a new host ESXi 4 for developers and added in vCenter. Developers want to use the vSphere Client\VIC to manage the ESX Server. They need rights to create virtual machines, remove VMs, clone VMs, VMs potential power. However, we don't want them to be able to reach production.

  According to the diagram below, the new host of development, labeled as "HostC (autonomous DEVELOPMENT host)", is located under "Data Center-City-2", who also owns the production ESX clusters. " And obviously I don't want developers having rights on production groups.

  Lets say I have create a role called 'HostC Dev Sandbox Rights', add users and assign directly to "HostC" below. This role contains the VM 'create' right, however when I run the wizard Creation of VM of HostC as a member of the role the vSphere Client tells me this task requires rights create VM on the level of data center! But given these developers to create VMS access on the data center would give them rights to create virtual machines in the poles of Production! Which is obviously a problem.

  I can't believe that our need to give these rights to ONLY one host in a DataCenter is rare. I don't know that there is a misunderstanding on my part of how to configure VMware roles for best practices.

  Anyone with more expirence on VMware roles ready to help me on this one? Thanks in advance!

  Organization representative Schema using quote boxes:

  vSphere (vCenter Server)

  City of DataCenter-1

  Many cases, clusters, hosts

  City of DataCenter-2

  FolderA (Division A)

  ClusterA (A Cluster of Production)

  HostA1 (Production host in Group A)

  HostA2 (Production host in Group A)

  %Windir%$NTUninstallKB941568_DX8$\Spuninstb (division B)

  Focus (Production Cluster B)

  HostB1 (Production host in Group B)

  HostB2 (Production host in Group B)

  HostC (autonomous DEVELOPMENT host) - under %windir%$NTUninstallKB941568_DX8$\Spuninstb but not in the cluster

  City Center-3

  Many cases, clusters, hosts

  You can apply permissions directly to the data store.  I didn't need to go further than the clusters in our environment, but what really works for you is to place data warehouses in folders for storage.  Have the records be the names of your groups hosts and clusters.  Then place the warehouses of data for each cluster in the corresponding folder.  Then, just apply permissions for the data on the record instead of warehouses in each individual data store.  Off topic a little, but a records of something in the store of data discovered lack is the function of "views of storage" and I put a future application.

  Yes, if you set permissision to the view of the data store the user can turn opinion and see.  Extensive your permissions framework tests is guaranteed before pushing users.  Looks like you are already doing.

• Permissions for user Oracle vRM

  People,

  The permissions that are required for the Oracle user vRM?

  Thank you

  Cormac

  The user oracle, at least should be GRANT-ed the roles/privileges to follow:

  • "CONNECT".

  • CREATE PROCEDURE

  • CREATE TABLE

  • CREATE VIEW

  • CREATE THE TRIGGER

  • CREATE THE TYPE

• R7000 drive NAS cannot delete the folders permissions question user-person not

  I have the R7000 with a Seagate STBV4000100 4 to USB 3.0 drive connected. I can connect to it very well, driving shares of work etc. Since a WIN 7 64 bit OS file system using windows Explorer I can create folders, etc.

  It comes occasionally when I try to delete some files or folders, I get the following message;

  "You must be authorized to perform this action."
  You need authorization of Unix User\nobody to make changes to this file"

  It would seem that I am not able to change the permissions of either windows Explorer.

  If anyone knows how I can change the permissions so I can delete from windows Explorer?

  One thing of note. When I copied the files/folders on the NAS of the windows system drive, some files have been marked read-only. Not sure if this is part of the question, but anyway. How do I set the permissions to something so I can remove them from windows?

  NOTE: If I disconnect the drive of the router and connect directly to the computer... it works fine. As the router and the PC are not on the same floor, is not practical and defeated the purpose. Suggestions welcome!

  After a few reformats the drive, it worked for me. The eSata disk files are exactly like Windows Explorer 'standard '. I can save, load, delete, change properties, etc... Because it worked, I had to turn off the router once, and after a reboot, nothing had changed. While working. (except the bad 5G wifi and "freaky" interface, but it was like before)...

• Why should I create a new user profile when you remove a damaged user account?

  I have a corrupted user account and was referred to the following link http://windows.microsoft.com/en-CA/windows-vista/Fix-a-corrupted-user-profile

  However, I don't understand why we're required to go through this complicated process when we go to Control Panel - user accounts and family safety-user accounts - add and remove accounts delete user accounts until you can actually remove an account asks you if you want to keep the files of this account.  It is said that it can automatically save the contents of this user account office and favorite Documents, music, photos and videos in a new folder on the desktop.  I realize, this does not include e-mail messages, but I thought I could export those to a memory stick and then import them into my new user account.  It all seems a much simpler process than to create a new profile.  Why Microsoft suggests must create a new profile?

  Hello Kodika

  Thanks for the return of the response.  I guess that it was just a typo, but it's OK.  Please let us know if you have any other questions or you are experiencing other problems.

  Thanks again!

• Are there special permissions (file access) required for reports write to temporary files?

  Report BUILDER 11.1.0.7 (64-bit)
  

  Form builder 11.1.2.1.0 (64-bit)
  

  Windows 7 Pro 64-bit

  Java:

  Java version "1.6.0_45".

  Java (TM) SE Runtime Environment (build 1.6.0_45 - b06)

  Java for 64-bit Server VM (build 20.45 - b01, mixed mode)

  IDAutomation LinearBarcode.jar

  
  

  I have a report that prints the data with bar code on the detail rows in a report.  It uses the Java LinearBarcode.jar by Idautomation package for this purpose.  The Java package contains an encoder that returns a bar code in the form of a GIF image to a field on the report.  One of the arguments that it requires is a name of temporary file generated by srw.create_temporary_filename ().  When it works perfectly, and it creates the temporary image file in my folder tree 'House' (C:\Users\ < username > \AppData\Local\Temp) run under the report generator.  When I run this report generator with fast running behind her I can watch the report search, open, read and close this file LinearBarcode.jar several times for successive lines of the report.  Everything seems to be very good in the generator.

  The fun begins when I try to call the same report from a FORM (Form Builder fleeing), where he fails every time, somewhere in the image generation stage.  In my view, that it fails to the creation of the image itself, when he tries to open the file for writing temporary image.  I can find the empty temporary files left after the report runs and fails, but the size of the file is zero byte.  When I run this report of my test form with Microsoft quick run behind it I see the report search, open, read and close this file LinearBarcode.jar for the first line of data in the report, then the report fails.  So, I know that the .jar file and the required REPORTS_CLASSPATH/CLASSPATH entries are synchronized with the location of the .jar file.  The report runs, and he finds the LinearBarcode.jar, it opens, it reads and closes it.  What I do is to not see any activity related to the image itself temporary file.   Thus, failure at least gives the impression of being in the image create step itself, which makes me doubt the safety of Java.  However, there is no message popup on Java security problems.

  I tried implementing Trace for reports, but also, that does not give something of use, except to confirm that the report is certainly a failure in the creation of barcode code somewhere.  This is known from the error message in the log file: fatal error REP-1401 < barcode create procedure name >

  I'm guessing that he might be a missing 'writing' somewhere authorization prevent the creation of the temporary file used to generate the barcode image file. This error only occurs under Java (run from a form). I was not able to find something about it by reading everything I could find on the OracleBarcode.jar demo.  I also not found anything in Google searches that does not count.

  Are special permissions to allow these operations to temporary file as shown above?  If Yes, where and how are they set?  If this isn't the case, else anyone seen this issue before?

  Thanks in advance

  Hank

  Resolved: This issue had nothing to do with the creation of barcodes. It turns out that there is a field in the State who had no defined source. It was not rendered because it was hidden by a format trigger. It seems that this case is handled by the constructor, but blew the engine in the reporting process used when a report is called by the forms. It took a long process of elimination, elimination of triggers, fields, parameters, and even the generation of bar code code until I found it.

  Thank you

  Hank

• What is the potential security risk to give 'any analysis' to a role or a user of 11.2.0.3 base data?

  What is the potential security risk to give 'any analysis' to a role or a user of 11.2.0.3 base data?

  Thank you

  Larry

  What is the potential security risk to give 'any analysis' to a role or a user of 11.2.0.3 base data?

  This is a HUGE security risk.

  Any person who uses the ANALYZE statement may accidentally or INTENTIONALLY, destroy the overall system performance.

  Just look at what the ANALYZE statement can do:

  https://docs.Oracle.com/CD/E11882_01/server.112/e41084/statements_4005.htm

  Goal

  Use the ANALYZE instruction to collect statistics, for example, to:

  • Collect or delete statistics on an index or index partition, table or table partition, table held in index, cluster, or scalar object attribute.

  The ANALYZE statement has been deprecated for statistics for the DBMS_STATS package.

  But what happens if the real and accurate data use by your important questions have been removed or replaced with nonsense, invalid statistical totall?

  You could bring your system to its knees INSTANTLY. The system could start making full of HUGE tables table scans instead of using an appropriate index.

  TERRIBLE, TERRIBLE thing to do to grant this privilege unless absolutely necessary.

• On the role of the user of the VI

  Hello!

  Role of the user of the vi, I get a problem in get by powercli. I can get the information of account by the Get-VMHostAccount cmdlet

  but he did not provide the role information, so, how can I get role of vi and vi user mapping information?

  Other: I know something in the 'Description' filed by Get-VMHostAccount, and sometimes he shows me that the user is an "administrator."

  But how to know exactly what the "some user" user as a role of 'administrator '?

  Thanks in advance!

  The Get-VMHostAccount cmdlet returns the accounts defined in the COS of the ESX Server.

  The accounts used in permissions on entities of vCenter are local users on the server vCenter or AD accounst of the domain to which belongs the vCenter server.

  To see the accounts, look at the main property returned by the Get-VIPermission cmdlet.

  Get-VIPermission
  

  ____________

  Blog: LucD notes

  Twitter: lucd22

• Assign a role to a user already created

  Hi experts,
  
  I created a rule, a role, a strategy of access and every time I have to create a new user of the access policy is properly triggered and appropriate resources are properly assigned.
  If I manually assign a role to a user, IOM provisions automatically objects associated with the role.
  The problem is that all users created before the creation of the role, do not belong to the role: what should I do to give the role to all users?
  
  Thank you

  1 create an access policy and audit indicator change see details below

  #If renovation flag is set for the policy

  These assessments do not immediately occur after the action. Instead, they occur during the next run to evaluate the schedule task user policies. Evaluations can occur in the following scenarios:

  * Definition of strategy is updated so that the indicator adaptation is defined on IT. Policies are evaluated for all users there.
  * A role is added or removed from the definition of the policy. Policies are evaluated only for roles that is added or removed.
  * A resource is added, deleted, or the flag value revoke if no. Longer applies is changed for the resource. Policies are evaluated for all users there.
  * When the policy data are updated or deleted. This includes data form of the mother and the child. Policies are evaluated for all users there.

  2. a way to do this is to write a scheduled task and using the API assign the role of the user
  Check below link
  http://docs.Oracle.com/CD/E14571_01/doc.1111/e14309/spmlapi.htm
  Article 29.3

• Script to export the VC roles/Permissions/objects

  I need a script to the list of all the roles in VC, users/groups assigned to the role, and the role object is assigned to. I want only the list of objects that have a role assigned to them. I would also like to be able to export this info into a csv file if possible. If anyone has a pre-made script that can do it, it would be very useful. I was looking for some sort of get-permission or the cmdlet get-vmpermission to achieve this, but cant seem to find anything. Any help would be great.

  Thank you

  Jason

  Get permissions is a filter I wrote, see the script in the use of role identifier.

  Again not in this thread.

  The line example I gave was just a new version of the last line of the script in the use of role ID to show how to export the result to a CSV file.

  The parameter - Useculture is new in PowerShell v2. Sorry should have left this.

  I use it because it solves the problem we had in PS v1 with the separator.

  By default, the separator is a comma, but in our locale, it is defined as the semicolon.

  Without the parameter - Useculture the Export-Csv cmdlet always uses a comma, with this setting, need the separator defined in the regional settings.

  Your last question, Yes, you can limit the scope of the Get-Onventory cmdlet with the - Location parameter.

  If, for example, only wanted a report for a specific data center, you can do

  Get-Inventory -Location (Get-Datacenter ) | Get-Permissions | Export-Csv -Path "C:\permissions.csv" -NoTypeInformation
  

• Change the role of the user once authenticated LDAP authentication

  Hi forum,
  
  I do know that if it is possible, I have not found a solution so far
  
  I have a simple web application with LDAP authentication. We would like to use LDAP for authentication and store the information of user roles in the database. After authentication, LDAP assigns the role of "guest" to the user and the home page (the only page available for this role) is displayed.
  
  In this home page, the user must select a profile (the same user can have multiple profiles) in a list retrieved from the database. The profile of each user has an associated role. After selection, we want to change the role of the user "guest" to the role associated with the selected profile.
  
  I don't think that implementation of a custom plug-in fits my needs because the role assignment requires the participation of the user.
  
  Any suggestions?
  
  Thanks in advance,
  
  Tatiana.

  Hello

  Well, the problem is that you need to change the subject of the user authenticated, who's a JAAS thing to do. The only way this can work is indeed use a custom LoginModule and then access the user object to add a security principal that represents the role you want to add.

  Frank

• The user * address email is removed from the privacy * could not connect, could not access the directory.

  For the second time in the last two weeks going through my event logs, I noticed several hundred newspaper failed attempts at the course over a period of twenty minutes.  they are random user accounts that don't exist not user 1, user 2, www., or just names at random, the papers say newspaper caused by a wrong password or account.  "the first of these events several connected has this message:" user * address email is removed from the privacy * could not connect, could not access the directory. ».  What does that mean?  Do you need access and control my computer?  Any info would be a great help.

  Looks like someone trying to log on your computer.  Check your firewall settings to make sure that they can't.

  Visit https://www.grc.com/x/ne.dll?bh0bkyd2 the site "shields up" to perform a check.  Some people to dismiss the guy who runs it, but the test doesn't show you which allows your computer to the world to see.