Dollar Universe Settings - Users/Profiles

Use of $U Proxies

Wed, 23 Apr 2008 11:31:45 +0200

Hello,

I use $U security to ensure only authorized users can do specific actions on $U objects and operations.

I have $U on Unix and Windows nodes that all communicate.

I was wondering about the advantage of deploying $U proxies. Is it worth it and is it not to hard to maintain?

Kenny

Solved : $U USER PROF

Wed, 25 Aug 2010 14:21:45 +0200

Hi all,

I have added a user to run the daily tasks automatically in the PROFADM profile.
What is the correct PROF that can only run schduled tasks?

Also i need to limit the access to the operator to run/abort tasks only?
What is the suitable PROF for operator ?

How about the other user profile, i need to know what the detail security limitation for these profiles.

PROFCTL
PROFDEV
PROFEXP
PROFSUP

Regards

Solved : Preventing update of objects via GCO for some users on some nodes

Fri, 16 Jul 2010 12:43:15 +0200

Hi,

I would like that some users would be prevented to update objects on all our nodes except one. They use only GCO as an interface and should have it fully operational for all infrastructure, except that they should not be able to update some objects (for instance uprocs) on any nodes except one (the referential). I don't think the security.txt can offer this granularity. From what I know It apply for all node.

Fran�ois

How to restrict update of the Desktop to some user

Fri, 02 Jul 2010 16:25:34 +0200

Hi Folks,

We use a common GCO for all our staff working on dollaru. THe GCO is installled on a windows which they access via Terminal service with their own account.

Now we would like to prevent them to make any modification on the desktop (shortcuts, node tree, etc.). I could not find any entry for this in the security.txt. Is their a way to do it?

Little precision : all these users have PROFADM profile and their users are aliased with peuniva on useralias.txt.

Solved : Running uprocs with ActiveDirectory user account

Thu, 06 May 2010 16:38:19 +0200

I'm trying to submit a urpoc using a user account that is defined in ActiveDirectory, but is not a local user. When I do, the urpoc shows up aborted, and there is no joblog. This usually happens when I run into a user account error. How do I get $Universe to recognize ActiveDirectory user accounts? The user is defined on the node, and has a valid author code, and is defined in ActiveDirectory with admin rights.

The $Universe is v5.3, running on a Windows Server 2003.

Error preventing distribution of UPROCs between MUs

Wed, 21 Apr 2010 09:41:28 +0200

Hi,

We are trying to distribute UPROCs across two nodes on respective MUs.
It was working when we used test UPROCs, however, the actual UPROC is not being accepted for distribution.

Error on screen:
An error occured during distrubution
Reason: Incompatibility exists

We need a workaround for this issue as we intend to apply this for next release to production .

Steps attempted to get workaround:
1. Obtained the UPROCs from Unix /upr and attempted to place a copy in the remote MU /upr
2. This distribution is from /app/upr to /app/upr , so expecting that cross-area issues are not expected during distribution.
3. Restarted Dollar Universe on both nodes and attempted the distribution

Please help in obtaining a solution at the earliest.

Merci!

Solved : Unable to launch an uproc with a specific user

Mon, 11 Jan 2010 17:06:43 +0100

hi,

i am using dollar universe on hp-ux and
i can't launch a uproc with a uproc with a user while i can with another :

here is the command i try to execute :
$UXEXE/uxadd FLA SIM UPR="TEST_U" VUPR="001" MU=foo USER=yann PDATE="11/01/2010"

if i execute it with the user "yann", it fails :
Commande : uxadd fla sim upr=TEST_U vupr=001 mu=foo user=yann pdate=11/01/2010 exlw=(0000,0000) nseq=0000 prty=100 queue=SYS_BATCH vses=000 noforce nocentral norestart nobypass nopartage vartsk

UxCmd_LoadUniverse Erreur d'initialisation
Incompatibilite existante
commande en erreur!!

if i execute it with the user dollarua, it works fine.

i believe that the shell environment of both user are the same, and in $U, they also have the same profil.

so ... any ideas who be appreciated !

sylvain

Solved : Unable to copy file with $universe user

Tue, 19 Jan 2010 19:50:52 +0100

Hi all, I've a network with a FTP server and $Unvierse scheduler.
When I receive some file with FTP, I've to copy this file on a Windows Share on other server.

I've tried but the UPROC abort with ACCESS DENIED error in log.

Whic user use $universe to present to Windows file when copy?

Can I set a AD user to copy this file?

Kind regards.

Solved : unable to run $UXEXE/uxlst command.

Thu, 14 Jan 2010 14:56:22 +0100

Hi,

I'm not able to user $UXEXE/uxlst command on unix (AIX) and getting following error.

#$UXEXE/uxlst ATM
Command : uxlst atm all partage

UxCmd_LoadUniverse Initialization error
Update to an unknown User
command in error!!
#

Dollar Universe Application Server 5.3

Anyone can help?

Solved : Security file update: Need to restart the product?

Mon, 11 Jan 2010 15:30:11 +0100

Hi,

Does the changes in the security file (/etc/UNIVERSE_SECURITY_
Thanks

Solved : Change user type

Wed, 14 Oct 2009 13:32:17 +0200

Hi,

I would like to update my user orsyp1e created from the $U installation as type PROD to allow it to submit jobs in APP and INT areas. I checked the uxupd user command but it seems you can only change the profile and not the type, from PROD to BOTH...
Because all my jobs are based on this user in EXP area it's far impossible for me to use an other user instead.

Thanks for your answer,
Cyrille

Solved : Author code demanded which not exists

Tue, 21 Apr 2009 13:32:16 +0200

Hey all,

i tried starting a session on AIX (uxversion 5.1.3 ) which contains 2 uprocs.
After lauching by an existing user, the first uproc run well, but the second demanded an author code, which was never defined.

what's wrong? From where did this autor code come?

Thank you

Solved : Separation of user profiles between the system and business

Mon, 05 May 2008 18:18:39 +0200

Good morning,
When setting Dollar universe, we declared 2 Domain: Business Domain ( B ) and System Domain ( S ).
Regarding uprocs, they belong to one of its two domains.
Now we need to make a separation of users, production operators have access only to business uprocs and systems operators have access only to jobs systems.
How can I set this at Dollar universe.
Thank you for your cooperation

Solved : Can I get back the Windows user services if accidently deleted?

Tue, 24 Mar 2009 15:22:55 +0100

Hi everyone,

can I get back the DollarU service users if the have been deleted by accident?

Thanx

Solved : Restrict launch access for developers to limited users

Thu, 12 Mar 2009 10:44:34 +0100

Is it possible to restrict access that certain profiles have and only allow them access to certain userids for launches. Developers want to use $U to launch UPROCs but it is a good idea to limit the launch access they have so they can only launch jobs under certain userids. This is made more difficult as there are a large number of userids and want to restrict access to a certain number of them.

Currently the only way this can be done is to add a clause in the security file for every $U user that is to be restricted. This is fine but if any userids are added in the future they would also need to be locked out for that profile. (see below, extract from security file for locking out launches for 2 users called myuser1 and myuser2)

# --------------------------------------------------------------
# User Object

USER=myuser1
-
DISPLAY
USE_WITHIN_LAUNCH
USE_WITHIN_TASK

USER=myuser2
-
DISPLAY
USE_WITHIN_LAUNCH
USE_WITHIN_TASK

----------------------------------------------------------------

Is there a way to lock out every userid except for ones indicated in the security profile? Basically if the user access is not mentioned in the security file then it cannot be used. (This is concering creating launches)

Solved : Calling uxordre from a c# web service on same machine

Sat, 13 Dec 2008 20:38:46 +0100

Hi,
I have setup a C# web service to call uxordre.exe . My call is "d:\universe\conupr\exec\uxordre.exe UPR=JOB_ME501 MU=W_LEGASIS". When I execute the above-mentioned from the DOS command prompt , it works. However, when my web service tries the same call, it receives the message: "Access Denied - Insufficient Priviliges". I noticed that when the webservice is excuting other tasks , the Windows task manager indicates the user as NETWORK SERVICE .The web service can run other executables on the machine without any problems. I have set the security permissions on the Dollar Universe folder for the user "NETWORK SERVICE" to full control. Dollar Universe has been set up to use the user "production". I have tried to make the webservice use impersonation of the "production" account to no avail. Someone suggested that I must call uxsetenv.bat, then call uxordre.exe, but it had no effect. Is there a setting that I must set to allow the account "NETWORK SERVICE" to run uxordre. My platform is Windows 2003 Server R2 Enterprise Edition Service Pack 2, Dollar Universe 2.4. Thanks

James

Solved : Is it possible to prevent the distribution to a specific MU?

Tue, 04 Nov 2008 14:53:56 +0100

Hello,

Is it possible to prevent the distribution of $U objects to a specific MU?

Solved : $U user managment : new profiles

Wed, 08 Oct 2008 12:41:22 +0200

Hello,

I would like to create 1 or 2 specific profiles. How should I proceed?

Unable to startup the Dollar Universe - Urgent

Fri, 22 Aug 2008 10:19:01 +0200

Hi All,

While i am trying to start the Job Scheduler , this below error displayed ,

Access Denied
User unknown - Check Dollar Universe users and/or proxys

Any idea , please ....