Hi,
The code to handle 6.3-passwords does not exist in the 5.1-tools (runmacro
etc). That is why you need to use a 6.3-arimportcmd to be able to import a
password to a 6.3-server.
I older versions, you could not do a filter-run-if like ('TR.Password' !=
$NULL$), as this was a protected field. This could make it hard to trap
password changes.
To solve this problem, I would suggest that you create a
password-change-dialog which does two Active-Link-Push-Fields to both
servers. Create a password-change-date-field and push a value into that
field.
Make sure that the Submitter-field on the User-record is the same as the
Login Name, to allow for Read-users to change their password.
You can change the Submitter-field by exporting the Login Name and Request
ID to an ARX-file and then import it using ARImport into the
Submitter-field (update old record with new record data).
Best Regards - Misi, RRR AB, http://www.rrr.se
> James,
>
> Unfortunately it appears based on his input this far that the 6.x server
> is
> primary and the 5.x server is somewhat secondary (not always connected to
> both). I think Carey's suggestion of storing the value into a
> non-encrypted
> field and using API to set it is the only way to manage this because it
> appears that once a 6.x server encrypts the password that a 5.x server
> will
> not be able to use it. AL's can do push to multiple servers but filters
> cannot...so you must move outside of Rem into a shell of some sorts. If
> he
> can manage to intercept the password value he can even use something as
> simple as the ESPSetfield executable to update the 5.x server
>
>
> L. J. Head
> Software Engineer
> Remedy Approved Consultant
>
>
>
> _____
>
> From: Action Request System discussion list(ARSList)
> [mailto:[EMAIL PROTECTED] On Behalf Of McKenzie, James J C-E LCMC
> HQISEC/L3
> Sent: Thursday, September 14, 2006 2:35 PM
> To: [email protected]
> Subject: Re: Syncing passwords between two servers
>
>
> **
> LJ:
>
> Possible solution for the original poster:
>
> Have the user log into the 5.1.2 server and change their password. Once
> the
> password is set, have a filter run the runmacro to export from the 5.1.2
> server and arimportcmd to do the import to the 6.3 server. Popup a
> message
> to have the user logout when the new password is set on the 6.3 server.
> Otherwise, the user will be locked out of the 6.3 server and this creates
> major problems. Of course, the 6.3 server will have to have a filter that
> checks for changes in the password field ON MERGE to make the popup work.
> Also, I am assuming that the user logs into both servers at the same time.
>
> James McKenzie
> L-3 GSI
>
>
> _____
>
> From: Action Request System discussion list(ARSList)
> [mailto:[EMAIL PROTECTED] On Behalf Of L. J. Head
> Sent: Thursday, September 14, 2006 1:25 PM
> To: [email protected]
> Subject: Re: Syncing passwords between two servers
>
>
> **
> Yes...export from 5.1.2 using runmacro and import with arimport from 6.3
> does in fact work
>
>
> L. J. Head
> Software Engineer
> Remedy Approved Consultant
>
>
>
> _____
>
> From: Action Request System discussion list(ARSList)
> [mailto:[EMAIL PROTECTED] On Behalf Of McKenzie, James J C-E LCMC
> HQISEC/L3
> Sent: Thursday, September 14, 2006 2:08 PM
> To: [email protected]
> Subject: Re: Syncing passwords between two servers
>
>
> **
>
> LJ:
>
> How about trying the reverse (5.1.2 to 6.3), since you have the 5.1.2
> server
> setup before destroying it?
>
> James McKenzie
>
> -----Original Message-----
> From: Action Request System discussion list(ARSList)
> [mailto:[EMAIL PROTECTED] On Behalf Of L. J. Head
> Sent: Thursday, September 14, 2006 1:06 PM
> To: [email protected]
> Subject: Re: Syncing passwords between two servers
>
> Ok...just to put this baby to bed I installed a 5.1.2 server on my dev
> box...here are the results. As Axton suggested I ran the 5.x runmacro
> command to do an export with command line of
>
> runmacro -x <6.3 Server> -a <port> -U <AdminUser> -P <AdminPassword> -o
> test
> -f User -q "'Login Name' = ""<UserInQuestion"""
>
> This produced an arx file of my user off of my 6.3 Remedy server. I then
> used the import tool to get this user onto my 5.1.2 server. I cannot log
> onto the 5.x server with my newly imported user account, I keep getting a
> bad password error. If I however change my password from within the user
> tool and log back on I can now use that user account. Now I admittedly
> used
> the 6.3 import tool to do the import...but I'm not sure if that should
> matter. I tried it again with the 6.3 runmacro and noticed that the
> password hash is different but still doesn't work when doing the import.
>
>
> L. J. Head
> Software Engineer
> Remedy Approved Consultant
> -----Original Message-----
> From: Action Request System discussion list(ARSList)
> [mailto:[EMAIL PROTECTED] On Behalf Of Carey Matthew Black
> Sent: Thursday, September 14, 2006 1:34 PM
> To: [email protected]
> Subject: Re: Syncing passwords between two servers
>
> Ah.. but...
>
>
> Use the Runmacro that fits the right _shoe_. :) [ I even managed to
> get a Buckeye reference in my answer! That should be worth at least two
> drinks in the ARSList drinking game! :]
>
>
> I would be surprised if you can not use the v5 runmacro against the v6
> server. Then use that "v5" arx file and import it to the v5 ARS server.
>
>
> I no longer have access to a v5 ARS server so....
>
> Rmdy_Buckeye please do the following:
>
> Login to the server.
> Find the runmacro on the server and run it with a -h (or -help, or
> --help) command line flag from a shell window. It should spit out a bunch
> of
> command line options that you can use. They likely include the
> AdvancedGuide-630.pdf details:
>
> Page 566:
> "
> The AR System server includes the runmacro utility, which can run a macro
> or
> export data without a GUI, as a background process. The runmacro utility
> can
> be run from filter or escalation workflow, or as a standalone process
> (that
> is, a Windows batch file or UNIX script).
>
> The runmacro utility can also be used by third-party applications to run
> AR
> System macros. One limitation of the runmacro functionality is that it
> provides no GUI support. Therefore, runmacro can execute processes that
> run
> in the background and complete, but it cannot perform tasks such as
> displaying a Results List of a set of records.
>
> The runmacro command has two formats, which follow. (The items between
> square brackets are optional.) Enclose arguments that contain blank spaces
> or symbols in double quotes.
>
> You can use the original version of runmacro without the output file
> option
> (-o):
> runmacro [-h <home_directory>] [-d <macro_directory>] [{-x <server_name>}
> ...] { -e | -i } <macro_name> [-p <parameter>=<value> ...] [-U
> <user_name>]
> [-P <password>] [-Q <internal_qualification_format>] [-q
> <client_tool_qualification_format>]
>
> [-Z <internal_format_qualification_file_name>]
> [-z <client_tool_format_qualification_file_name>]
> [{-w | -W } <external_authentication_string>] [-a <port_number>] [-O]
>
>
> You can use runmacro with the -o option to use the old arcopy syntax,
> which
> copies the output to a file:
> runmacro -o <output_file_name> [{-x <server>} ...] -U <user>] [-P
> <password>] [{ -f | -s} <form>] [-t {arx|csv|xml}] [-Q
> <internal_qualification_format>] [-q <client_tool_qualification_format>]
>
> [-Z <internal_format_qualification_file_name>]
> [-z <client_tool_format_qualification_file_name>]
> [{-w | -W } <external_authentication_string>] [-a <port_number>] "
>
> What you want to use is the "OLD" arcopy syntax. Something like:
>
> runmacro -o logfile.txt -x ARSserver.your.com -U bob -P
> Yep_password_goes_here -f User -t arx -q "'1'="$Request ID$"" -a
> Port_number_if_you_need_it
>
> Now you likely need a wrapper around that to get the command line syntax
> right from the Run Process action. But that is a simple shell script
> issue.
>
> And you then need to turn around and "import" that records to "server#2"
> as
> well. (See the docs for "arimportcmd" that are also in that same chapter
> too. I think it was still called that for a v5 server.)
>
> But the possible key is to use the v5 tools against the version 6 server
> go
> GET the data and the v5 tools to PUT the data to a v5 server. (Assuming
> that
> James's concerns are valid.)
>
> --
> Carey Matthew Black
> Remedy Skilled Professional (RSP)
> ARS = Action Request System(Remedy)
>
> Love, then teach
> Solution = People + Process + Tools
> Fast, Accurate, Cheap.... Pick two.
>
>
> On 9/14/06, McKenzie, James J C-E LCMC HQISEC/L3
> <[EMAIL PROTECTED]> wrote:
>> **
>>
>>
>> Remedy_Buckeye:
>>
>> Run the program on the server, not the client. Thus, your users will
>> not have to clear any dialogs, etc. This is done using a FILTER which
>> triggers on the change of password (you have to copy the cleartext
>> password to another field before submit and this can be done with your
>> AL.) It is NOT possible, from what I understand, to downlevel from
>> 6.0 to 5.0 the encrypted password.
>>
>> James Mckenzie
>> L-3 GSI
>>
>>
>>
>> -----Original Message-----
>> From: Action Request System discussion list(ARSList)
>> [mailto:[EMAIL PROTECTED] On Behalf Of Rmdy_Buckeye
>> Sent: Thursday, September 14, 2006 12:13 PM
>> To: [email protected]
>> Subject: Re: Syncing passwords between two servers
>>
>>
>> RunMacro
>> Description Run the specified macro, substituting the specified
> parameters.
>> The macro is run in visible mode. If you run this method against an
>> invisible instance of Remedy User, it will be made visible to the
>> desktop user. If Remedy User User is visible but minimized, its window
>> will be brought to the foreground.
>>
>> The
>> desktop user must dismiss any dialogs triggered by the macro before
>> your automation client can regain control.
>>
>> The above is taken from the C_API_Guide_English page 421.
>>
>> To reiterate, when a password is changed on the User form on server
>> A(running 6.0), I want to in the background send that password and
>> user id to server B(5.0) and have the Remedy software on server B sync
>> up that password.
>>
>> I do appreciate this assistence, so far I am impressed by the number
>> of people and qualit of respones on this website. Ill let my team know
>> about this group.
>>
>> ______________________________________________________________________
>> _________ UNSUBSCRIBE or access ARSlist Archives at
>> http://www.wwrug.org
>>
>> __20060125_______________________This posting was submitted with HTML
>> in it___
>
> ____________________________________________________________________________
>
> ___
> UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
>
> ____________________________________________________________________________
> ___
> UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
>
> __20060125_______________________This posting was submitted with HTML in
> it___ __20060125_______________________This posting was submitted with
> HTML
> in it___ __20060125_______________________This posting was submitted with
> HTML in it___
>
> _______________________________________________________________________________
> UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
>
_______________________________________________________________________________
UNSUBSCRIBE or access ARSlist Archives at http://www.wwrug.org
