BMC Atrium-SSO appears to be somewhat of a tease.
Hello, AtriumSSO is indeed a bit of a tease. It's an open source product called OpenSSO that was killed off by Oracle after they purchased Sun. The first tease is the idea that AtriumSSO provides SSO. AtriumSSO doesn't provide an Active Directory SSO implementation which is what 90% of AR System users want from an SSO product. This means you can't open IE, navigate to Midtier and sign in without being prompted for credentials. To be fair, there is half of an AD implementation in OpenSSO. BMC's documentation states the product is not fully supported. On page 12 of their documentation it states, Defects requiring time and resources beyond commercially reasonable effort might not be addressed.. This is an entirely acceptable position given OpenSSO is about 650Mb of code and libraries, and the BMC additions account for 5% of the code, so they can be forgiven for not having reviewed/tested the other 95%. You can purchase support from a company called ForgeRock, created after Oracle killed off OpenSSO. I've spoken to them and believe they can help with some of the 95%, but won't be able to help with AR System configuration and deployment. AtriumSSO is installed as a separate Tomcat instance, introducing more administrative requirements. AtriumSSO has no wizard to integrate with your corporate infrastructure, which means you'll require BMC consulting days to perform the task. I assume customers are required to pay for BMC professional services. AtriumSSO is not recommended for external SSO use. On page 20 of their documentation it states, Installation of BMC Atrium SSO on an external Tomcat server is not recommended due to security and load issues. AtriumSSO has no support for the Windows User Tool, which is entirely acceptable given the WUT is being dropped (but we know that many AR System administrators love it!). OpenSSO was designed as a corporate SSO solution to take on the likes of Novell Access Manager, Cleartrust and Siteminder. It was never designed to slip neatly into the Midtier to solve the SSO problem. I don't believe there's support for an IIS front end either. I searched for IIS in the Atrium SSO documentation and couldn't find a match. John -- Single Sign On for the AR System http://www.javasystemsolutions.com/jss/ssoplugin ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Data Management Client - error on importing a prduct catalog
** Hi,ARS 7.5 Patch 6Data Management ClientI received an spreadsheet ProdctCatalog.xls from the DBA.I stored it correctly in der folder, after that i convert it into a csv file.All worked fine, there are now six csv Sheets, for example PCT-ProductCatalog.csvAfter that i tried to import them, but there is now data in the staging forms.Even there is now information in the log files, only the sentenceERROR - Cannot import, exception occured while importing C:\Program Files\BMC Software\DataManagementClient\7.5\CSVs\Foundation\PCT-ProductCatalog.csvDoes anybody know, what ist the reason for this malfunction, i repeat it, there is no further information in the error logs.CheersTristan _attend WWRUG11 www.wwrug.com ARSlist: "Where the Answers Are"_
Re: Data Management Client - error on importing a prduct catalog
It may be the format of the Excel file. It has to be in v2003 format. 2007 will return errors like you saw. Rick On Dec 16, 2010 7:56 AM, tristan.rop...@t-online.de tristan.rop...@t-online.de wrote: ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Timeout errors when viewing the Server Information form
Hi Larry, What lead you all to look at encryption? I do have the Security Policy set to Required for Standard encryption, didn't think to try changing that. I don't know if this test can be done on 7.6.03, but it would be interesting to see if your issue goes away (as it does for us) if you try ServerAdmin.so from 7.5 patch 006. Maybe you can ask support if that's feasible, as a test. David On 12/15/2010 6:34 PM, L G Robinson wrote: Hi David, I am seeing the exact same behavior on a 7.6.03 out-of-the-box install on Solaris 10. I believe it has something to do with encryption. My system seems to be missing an encryption library. My third-party support folks are still working through it. Please let me know if you find a solution and I'll do the same. Thanks. Larry --- L. G. Robinsonn...@ncsu.edu Office of Information Technology Remedy Services NC State University 919-515-5432 Voice Raleigh, NC 27695-7109 919-513-1893 FAX On Dec 15, 2010, at 4:53 PM, David Durling wrote: After upgrading ARS 7.5 from patch 006 to patch 007, I noticed this issue: Usually the Server Information form loads okay if I view it soon after starting arsystem. But after maybe an hour, if I come back to the Server Information form, I get a timeout error - usually the first error is arerr 93 - and the form does not load. The ARDBC and AREA Configuration forms are similarly affected. If I kill the arplugin process and let armonitor restart it, the forms will work again for a while. Support had us try a binary file from 7.5 patch 006 on this patch 007 installation, and that keeps the timeout from occurring. But apparently this is not reproducible on their system, and there are no other reports of this issue. Has anyone else experienced this? I would feel a little better if I knew that we weren't the only ones. Solaris 10 Oracle 11g R2, 64 bit Oracle 10g R2 client, 64 bit ARS 7.5 patch 007 (and Hummingbird Full Text Search) custom apps (no SRM, etc.) -- David Durling Enterprise IT Services University of Georgia ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Data Management Client - error on importing a prduct catalog
Sometimes this happens if you mis-type your password or don't use the password for the user logged in. Mike This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Strange Entry Point Behavior, 6.3
Good morning everyone1 We've got one Remedy user tool where the Entry Points in the Application List Field on a display-only form aren't functioning. Clicking on the links does nothing. Here's the wierd part: right-clicking on them brings up a context menu belonging to Internet Explorer. We can click on Open In New Window and a browser window opens but gives an error that the Active X script is blocked and may be harmful, ect. The user can access the forms through the Object List, no problem. She can use the Entry Points on a different machine. The problem extends to mulitple Remedy users on this PC. The PC was experiencing some vbscript errors on bootup that were remedied by registering the DLL. The PC had multiple versions of Java, now it's got one, the latest version and it functions. We're on Remedy 6.3, XP Pro SP3. Has anyone ever seen this problem? What other troubleshooting steps should be take before we re-install the o/s? Thanks in advance! Drew Soto Cano Air Base Honduras ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Data Management Client - error on importing a prduct catalog
** Hi,that's it. i have used no password.Beside that, it has worked in the past without enetering a password.Life is a bitch !CheersTristan-Original Message-Date: Thu, 16 Dec 2010 16:47:45 +0100Subject: Re: Data Management Client - error on importing a prduct catalogFrom: Michael Ziniti michael.p.zin...@accenture.comTo: arslist@ARSLIST.ORG** Sometimes this happens if you mis-type your password or dont use the password for the user logged in.Mike This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited._attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: "Where the Answers Are"_
Re: Timeout errors when viewing the Server Information form
Hi David, It may be coincidental, but the last entries in my API logs before the timeout seem to indicate a call to ARGetEncryptInfo. Also, when I disable standard encryption (not required), the problem disappears. Logs: API TID: 26 RPC ID: 001639 Queue: Fast Client-RPC: 390620-01 USER: Demo /* Fri Nov 05 2010 07:10:24.8059 */+GE ARGetEntry -- schema AR System Administration: Server Information entryId 001 from Remedy User (protocol 17) at IP address [my client IP Address] API TID: 27 RPC ID: 001641 Queue: Fast Client-RPC: 390620USER: [my server IP Address]/* Fri Nov 05 2010 07:10:24.9700 */+GEIARGetEncryptInfo -- as user from Unidentified Client (protocol 17) at IP address API TID: 27 RPC ID: 001641 Queue: Fast Client-RPC: 390620USER: [my server IP Address]/* Fri Nov 05 2010 07:10:24.9702 */-GEI OK API TID: 26 RPC ID: 001639 Queue: Fast Client-RPC: 390620-01 USER: Demo /* Fri Nov 05 2010 07:11:24.8680 */DEBUG INFO: plug-in v4 proc 3 to ars00srv:34000 timeout (used 60 of 60 s) API TID: 37 RPC ID: 001642 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3609 */+GSIARGetServerInfo -- as user Remedy Application Service from Application Command Dispatcher (protocol 17) at IP address [my server IP Address] API TID: 37 RPC ID: 001642 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3611 */-GSI OK API TID: 37 RPC ID: 001643 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3625 */+GLEARGetListEntry -- schema Application Pending from Application Command Dispatcher (protocol 17) at IP address [my server IP Address] SQL TID: 37 RPC ID: 001643 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3631 */SELECT T8.C1 FROM T8 WHERE (T8.C8 = 'Dispatch') ORDER BY C1 ASC SQL TID: 37 RPC ID: 001643 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3652 */OK API TID: 37 RPC ID: 001643 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3654 */-GLE OK API TID: 37 RPC ID: 001644 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3667 */+GESARGetEntryStatistics -- schema Application Pending from Application Command Dispatcher (protocol 17) at IP address [my server IP Address] SQL TID: 37 RPC ID: 001644 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3671 */SELECT C8,COUNT(*) FROM T8 WHERE (T8.C7 = 0) GROUP BY C8 ORDER BY C8 SQL TID: 37 RPC ID: 001644 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3686 */OK API TID: 37 RPC ID: 001644 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service/* Fri Nov 05 2010 07:11:43.3688 */-GES OK API TID: 26 RPC ID: 001639 Queue: Fast Client-RPC: 390620-01 USER: Demo /* Fri Nov 05 2010 07:12:24.8727 */DEBUG INFO: plug-in v4 proc 9 to ars00srv:34000 timeout (used 60 of 60 s) API TID: 26 RPC ID: 001639 Queue: Fast Client-RPC: 390620-01 USER: Demo /* Fri Nov 05 2010 07:12:24.8732 */-GE FAIL I don't have a 7.5 patch 006 system handy to test with. Would you be able to turn off security temporarily to see if the problem goes away? Thanks. Larry On Dec 16, 2010, at 9:16 AM, David Durling wrote: Hi Larry, What lead you all to look at encryption? I do have the Security Policy set to Required for Standard encryption, didn't think to try changing that. I don't know if this test can be done on 7.6.03, but it would be interesting to see if your issue goes away (as it does for us) if you try ServerAdmin.so from 7.5 patch 006. Maybe you can ask support if that's feasible, as a test. David ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Strange Entry Point Behavior, 6.3
We had a similiar issue where an update of virus software was blocking the java script on the Application field. I do not have the specifics for the fix but it was machine specific. On Thu, Dec 16, 2010 at 11:00 AM, Drew Shuller drew.shul...@gmail.comwrote: Good morning everyone1 We've got one Remedy user tool where the Entry Points in the Application List Field on a display-only form aren't functioning. Clicking on the links does nothing. Here's the wierd part: right-clicking on them brings up a context menu belonging to Internet Explorer. We can click on Open In New Window and a browser window opens but gives an error that the Active X script is blocked and may be harmful, ect. The user can access the forms through the Object List, no problem. She can use the Entry Points on a different machine. The problem extends to mulitple Remedy users on this PC. The PC was experiencing some vbscript errors on bootup that were remedied by registering the DLL. The PC had multiple versions of Java, now it's got one, the latest version and it functions. We're on Remedy 6.3, XP Pro SP3. Has anyone ever seen this problem? What other troubleshooting steps should be take before we re-install the o/s? Thanks in advance! Drew Soto Cano Air Base Honduras ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Resolved: Parent Child Filter update problem
Thanks for the input Fred! I figured the issue out. Stupid developer trick. I had the permissions set incorrectly on the fields in question. It's working now. On Wed, Dec 15, 2010 at 4:10 PM, Warren Baltimore warrenbaltim...@gmail.com wrote: The Set Field If is: 'Service Request ID' = $Service Request ID$\ I discovered something really weird. It works correctly if the change is made in the WUT. But it doesn't work when it comes from the Mid-Tier. I noticed some mention of a bug that sounded like that. I'm trying to find it now On Wed, Dec 15, 2010 at 3:17 PM, Grooms, Frederick W frederick.w.gro...@xo.com wrote: Ok ... What is strange is I would have expected the log to show an update where it was looking for the child by service request column instead of the request ID (C1) of the child. What is your Push Field's IF statement? i.e.: 'Service Request ID on Service Request Task' = $Service Request ID of Service Request$ -Original Message- From: Action Request System discussion list(ARSList) [mailto: arsl...@arslist.org] On Behalf Of Warren Baltimore Sent: Wednesday, December 15, 2010 2:05 PM To: arslist@ARSLIST.ORG Subject: Re: Parent Child Filter update problem ** No. Just a simple 1 filter update. I tried a walk when the push field was balking and it was a bigger disaster! What is weird, is one record gets updated, but not the second child -Original Message- On Wed, Dec 15, 2010 at 3:00 PM, Grooms, Frederick W frederick.w.gro...@xo.com wrote: Are you doing a table walk? If you are doing multiple pushes then the push must be in a Phase 1 filter (`!) Fred -Original Message- From: Action Request System discussion list(ARSList) [mailto: arsl...@arslist.org] On Behalf Of Warren Baltimore Sent: Wednesday, December 15, 2010 1:55 PM To: arslist@ARSLIST.ORG Subject: Parent Child Filter update problem ** ARS 6.3 running on Solaris Oracle 10g I have 2 forms. Service Request (Parent) and Service Request Task (Child). I have field Delivery Address - 255 char field. I have a filter that says whenever Delivery Address != DB.Delivery Address then run. The filter gets the db value and sets it to a temp field in first action - This works fine 2nd action updates a worklog with the temp field info. - This also works fine. 3rd action is my problem. I have tried it 2 ways. First way (partial failure) was to update all task forms that had the same Service Request ID with a push field. This works, but only for the last record it finds (as seen in the logs). None of the other children get updated. The push was set to Modify All Matching Requests. When I looked at the logs, I also ran the sql log. It looks like the db is updating the 2nd record but fails to do so for the first. SELECT C536870950 FROM T1907 WHERE C1 = 'VTSK048' UPDATE T1907 SET C536870950 = EMPTY_CLOB() WHERE C1 = 'VTSK048' SELECT C536870950 FROM T1907 WHERE C1 = 'VTSK048' FOR UPDATE Set LOB into the above row... UPDATE T1907 SET C536870955='99 New York Avenue Washington, DC 20001',C536870956=1309752000,C5='vvisual',C6=1292442282 WHERE C1 = 'VTSK049' SELECT C536870950 FROM T1907 WHERE C1 = 'VTSK049' UPDATE T1907 SET C536870950 = EMPTY_CLOB() WHERE C1 = 'VTSK049' SELECT C536870950 FROM T1907 WHERE C1 = 'VTSK049' FOR UPDATE Set LOB into the above row... COMMIT WORK 2nd way I tried was to do a filter guide that walks a table that lists all tasks. That didn't work AT ALL Anybody have any idea what might be going on? Warren R. Baltimore II Remedy Developer 410-533-5367 ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are -- Warren R. Baltimore II Remedy Developer 410-533-5367 _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are -- Warren R. Baltimore II Remedy Developer 410-533-5367 -- Warren R. Baltimore II Remedy Developer 410-533-5367 ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Timeout errors when viewing the Server Information form
Thanks Larry, Your api logs look similar to mine. Since this server is not production, I disabled encryption and don't see the timeout yet - but I need to wait a while more to confirm. I'll post again on the results. David On 12/16/2010 11:04 AM, L G Robinson wrote: Hi David, It may be coincidental, but the last entries in my API logs before the timeout seem to indicate a call to ARGetEncryptInfo. Also, when I disable standard encryption (not required), the problem disappears. Logs: API TID: 26 RPC ID: 001639 Queue: Fast Client-RPC: 390620-01 USER: Demo /* Fri Nov 05 2010 07:10:24.8059 */+GE ARGetEntry -- schema AR System Administration: Server Information entryId 001 from Remedy User (protocol 17) at IP address [my client IP Address] API TID: 27 RPC ID: 001641 Queue: Fast Client-RPC: 390620 USER: [my server IP Address] /* Fri Nov 05 2010 07:10:24.9700 */+GEIARGetEncryptInfo -- as user from Unidentified Client (protocol 17) at IP address API TID: 27 RPC ID: 001641 Queue: Fast Client-RPC: 390620 USER: [my server IP Address] /* Fri Nov 05 2010 07:10:24.9702 */-GEI OK API TID: 26 RPC ID: 001639 Queue: Fast Client-RPC: 390620-01 USER: Demo /* Fri Nov 05 2010 07:11:24.8680 */DEBUG INFO: plug-in v4 proc 3 to ars00srv:34000 timeout (used 60 of 60 s) API TID: 37 RPC ID: 001642 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3609 */+GSIARGetServerInfo -- as user Remedy Application Service from Application Command Dispatcher (protocol 17) at IP address [my server IP Address] API TID: 37 RPC ID: 001642 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3611 */-GSI OK API TID: 37 RPC ID: 001643 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3625 */+GLEARGetListEntry -- schema Application Pending from Application Command Dispatcher (protocol 17) at IP address [my server IP Address] SQL TID: 37 RPC ID: 001643 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3631 */SELECT T8.C1 FROM T8 WHERE (T8.C8 = 'Dispatch') ORDER BY C1 ASC SQL TID: 37 RPC ID: 001643 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3652 */OK API TID: 37 RPC ID: 001643 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3654 */-GLE OK API TID: 37 RPC ID: 001644 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3667 */+GES ARGetEntryStatistics -- schema Application Pending from Application Command Dispatcher (protocol 17) at IP address [my server IP Address] SQL TID: 37 RPC ID: 001644 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3671 */SELECT C8,COUNT(*) FROM T8 WHERE (T8.C7 = 0) GROUP BY C8 ORDER BY C8 SQL TID: 37 RPC ID: 001644 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3686 */OK API TID: 37 RPC ID: 001644 Queue: Prv:390680 Client-RPC: 390680-01 USER: Remedy Application Service /* Fri Nov 05 2010 07:11:43.3688 */-GES OK API TID: 26 RPC ID: 001639 Queue: Fast Client-RPC: 390620-01 USER: Demo /* Fri Nov 05 2010 07:12:24.8727 */DEBUG INFO: plug-in v4 proc 9 to ars00srv:34000 timeout (used 60 of 60 s) API TID: 26 RPC ID: 001639 Queue: Fast Client-RPC: 390620-01 USER: Demo /* Fri Nov 05 2010 07:12:24.8732 */-GE FAIL I don't have a 7.5 patch 006 system handy to test with. Would you be able to turn off security temporarily to see if the problem goes away? Thanks. Larry -- David Durling Enterprise IT Services University of Georgia ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Generic RFC Template Document?
Can anybody please share with me or point me to a simple ITIL 3ish template (such as MS Word form) for Request For Change? If sending a file, please email me directly. I searched on line (ok, briefly), but didn't find much. Thanks in advance and I apologize if you think this if off topic. Not by much, I say. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Error when connecting to remedy using ARSPerl
Hi: I have a ARSPerl script that connects to a remedy server and creates a request in a form. The scripts and the code in Remedy server have not changed for a while. Abruptly today, the script started failing with the following error ars_Login failed: [ERROR] Message not in catalog; Message number = 90 (rearsdbp02.sprintmrn.com (0) : RPC: Program not registered) (ARERR #90) at ./test_remedy.pl line 53. I can access the remedy server from the client machine I am trying to run the script. I have restarted the remedy server. I can login fine into remedy using the admin and user client. I don't see anything in any log files. Has anyone else seen this? Any suggestions on what I should look for. Thanks Ravi ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: BMC Atrium-SSO appears to be somewhat of a tease.
BMC's documentation states the product is not fully supported To clarify, Atrium SSO is fully supported. If you look at the entire sentence in context, it reads: BMC Atrium SSO is certified on the configurations explicitly stated in this document. Configurations not listed might still operate properly and so customers can choose to run in a configuration not listed as supported. Such configurations would be considered unconfirmed. BMC will accept issues reported in unconfirmed configurations but we reserve the right to request customer assistance in problem determination, including recreating the problem on a supported configuration. Reported defects either found to be unique to an unconfirmed configuration or not reproducible within a supported environment will be addressed at the discretion of BMC. Defects requiring time and resources beyond commercially reasonable effort might not be addressed. This is the same kind of statement found in the AR System compatibility matrix, by the way. It's simply stating that if you find a defect on an unsupported configuration, BMC might not address it since it's unsupported. -David J. Easter Sr. Product Manager, Enterprise Service Management BMC Software, Inc. The opinions, statements, and/or suggested courses of action expressed in this E-mail do not necessarily reflect those of BMC Software, Inc. My voluntary participation in this forum is not intended to convey a role as a spokesperson, liaison or public relations representative for BMC Software, Inc. -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of John Baker Sent: Thursday, December 16, 2010 1:48 AM To: arslist@ARSLIST.ORG Subject: BMC Atrium-SSO appears to be somewhat of a tease. Hello, AtriumSSO is indeed a bit of a tease. It's an open source product called OpenSSO that was killed off by Oracle after they purchased Sun. The first tease is the idea that AtriumSSO provides SSO. AtriumSSO doesn't provide an Active Directory SSO implementation which is what 90% of AR System users want from an SSO product. This means you can't open IE, navigate to Midtier and sign in without being prompted for credentials. To be fair, there is half of an AD implementation in OpenSSO. BMC's documentation states the product is not fully supported. On page 12 of their documentation it states, Defects requiring time and resources beyond commercially reasonable effort might not be addressed.. This is an entirely acceptable position given OpenSSO is about 650Mb of code and libraries, and the BMC additions account for 5% of the code, so they can be forgiven for not having reviewed/tested the other 95%. You can purchase support from a company called ForgeRock, created after Oracle killed off OpenSSO. I've spoken to them and believe they can help with some of the 95%, but won't be able to help with AR System configuration and deployment. AtriumSSO is installed as a separate Tomcat instance, introducing more administrative requirements. AtriumSSO has no wizard to integrate with your corporate infrastructure, which means you'll require BMC consulting days to perform the task. I assume customers are required to pay for BMC professional services. AtriumSSO is not recommended for external SSO use. On page 20 of their documentation it states, Installation of BMC Atrium SSO on an external Tomcat server is not recommended due to security and load issues. AtriumSSO has no support for the Windows User Tool, which is entirely acceptable given the WUT is being dropped (but we know that many AR System administrators love it!). OpenSSO was designed as a corporate SSO solution to take on the likes of Novell Access Manager, Cleartrust and Siteminder. It was never designed to slip neatly into the Midtier to solve the SSO problem. I don't believe there's support for an IIS front end either. I searched for IIS in the Atrium SSO documentation and couldn't find a match. John -- Single Sign On for the AR System http://www.javasystemsolutions.com/jss/ssoplugin ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: BMC Atrium-SSO appears to be somewhat of a tease.
David, Can you send me a link or e-mail off line the docs for Atrium SSO? Tauf Chowdhury | Forest Laboratories, Inc. Analyst, Service Management Mobile:646.483.2779 -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Easter, David Sent: Thursday, December 16, 2010 2:53 PM To: arslist@ARSLIST.ORG Subject: Re: BMC Atrium-SSO appears to be somewhat of a tease. BMC's documentation states the product is not fully supported To clarify, Atrium SSO is fully supported. If you look at the entire sentence in context, it reads: BMC Atrium SSO is certified on the configurations explicitly stated in this document. Configurations not listed might still operate properly and so customers can choose to run in a configuration not listed as supported. Such configurations would be considered unconfirmed. BMC will accept issues reported in unconfirmed configurations but we reserve the right to request customer assistance in problem determination, including recreating the problem on a supported configuration. Reported defects either found to be unique to an unconfirmed configuration or not reproducible within a supported environment will be addressed at the discretion of BMC. Defects requiring time and resources beyond commercially reasonable effort might not be addressed. This is the same kind of statement found in the AR System compatibility matrix, by the way. It's simply stating that if you find a defect on an unsupported configuration, BMC might not address it since it's unsupported. -David J. Easter Sr. Product Manager, Enterprise Service Management BMC Software, Inc. The opinions, statements, and/or suggested courses of action expressed in this E-mail do not necessarily reflect those of BMC Software, Inc. My voluntary participation in this forum is not intended to convey a role as a spokesperson, liaison or public relations representative for BMC Software, Inc. -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of John Baker Sent: Thursday, December 16, 2010 1:48 AM To: arslist@ARSLIST.ORG Subject: BMC Atrium-SSO appears to be somewhat of a tease. Hello, AtriumSSO is indeed a bit of a tease. It's an open source product called OpenSSO that was killed off by Oracle after they purchased Sun. The first tease is the idea that AtriumSSO provides SSO. AtriumSSO doesn't provide an Active Directory SSO implementation which is what 90% of AR System users want from an SSO product. This means you can't open IE, navigate to Midtier and sign in without being prompted for credentials. To be fair, there is half of an AD implementation in OpenSSO. BMC's documentation states the product is not fully supported. On page 12 of their documentation it states, Defects requiring time and resources beyond commercially reasonable effort might not be addressed.. This is an entirely acceptable position given OpenSSO is about 650Mb of code and libraries, and the BMC additions account for 5% of the code, so they can be forgiven for not having reviewed/tested the other 95%. You can purchase support from a company called ForgeRock, created after Oracle killed off OpenSSO. I've spoken to them and believe they can help with some of the 95%, but won't be able to help with AR System configuration and deployment. AtriumSSO is installed as a separate Tomcat instance, introducing more administrative requirements. AtriumSSO has no wizard to integrate with your corporate infrastructure, which means you'll require BMC consulting days to perform the task. I assume customers are required to pay for BMC professional services. AtriumSSO is not recommended for external SSO use. On page 20 of their documentation it states, Installation of BMC Atrium SSO on an external Tomcat server is not recommended due to security and load issues. AtriumSSO has no support for the Windows User Tool, which is entirely acceptable given the WUT is being dropped (but we know that many AR System administrators love it!). OpenSSO was designed as a corporate SSO solution to take on the likes of Novell Access Manager, Cleartrust and Siteminder. It was never designed to slip neatly into the Midtier to solve the SSO problem. I don't believe there's support for an IIS front end either. I searched for IIS in the Atrium SSO documentation and couldn't find a match. John -- Single Sign On for the AR System http://www.javasystemsolutions.com/jss/ssoplugin ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: BMC Atrium-SSO appears to be somewhat of a tease.
BMC Atrium Single Sign-On Administrator's Guide Describes an authentication system that supports many authentication protocols, how to install, and how to use. 21-May-2010 http://documents.bmc.com/supportu/documents/29/39/132939/132939.pdf -David J. Easter Sr. Product Manager, Enterprise Service Management BMC Software, Inc. The opinions, statements, and/or suggested courses of action expressed in this E-mail do not necessarily reflect those of BMC Software, Inc. My voluntary participation in this forum is not intended to convey a role as a spokesperson, liaison or public relations representative for BMC Software, Inc. -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Chowdhury, Tauf Sent: Thursday, December 16, 2010 11:59 AM To: arslist@ARSLIST.ORG Subject: Re: BMC Atrium-SSO appears to be somewhat of a tease. David, Can you send me a link or e-mail off line the docs for Atrium SSO? Tauf Chowdhury | Forest Laboratories, Inc. Analyst, Service Management Mobile:646.483.2779 -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Easter, David Sent: Thursday, December 16, 2010 2:53 PM To: arslist@ARSLIST.ORG Subject: Re: BMC Atrium-SSO appears to be somewhat of a tease. BMC's documentation states the product is not fully supported To clarify, Atrium SSO is fully supported. If you look at the entire sentence in context, it reads: BMC Atrium SSO is certified on the configurations explicitly stated in this document. Configurations not listed might still operate properly and so customers can choose to run in a configuration not listed as supported. Such configurations would be considered unconfirmed. BMC will accept issues reported in unconfirmed configurations but we reserve the right to request customer assistance in problem determination, including recreating the problem on a supported configuration. Reported defects either found to be unique to an unconfirmed configuration or not reproducible within a supported environment will be addressed at the discretion of BMC. Defects requiring time and resources beyond commercially reasonable effort might not be addressed. This is the same kind of statement found in the AR System compatibility matrix, by the way. It's simply stating that if you find a defect on an unsupported configuration, BMC might not address it since it's unsupported. -David J. Easter Sr. Product Manager, Enterprise Service Management BMC Software, Inc. The opinions, statements, and/or suggested courses of action expressed in this E-mail do not necessarily reflect those of BMC Software, Inc. My voluntary participation in this forum is not intended to convey a role as a spokesperson, liaison or public relations representative for BMC Software, Inc. -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of John Baker Sent: Thursday, December 16, 2010 1:48 AM To: arslist@ARSLIST.ORG Subject: BMC Atrium-SSO appears to be somewhat of a tease. Hello, AtriumSSO is indeed a bit of a tease. It's an open source product called OpenSSO that was killed off by Oracle after they purchased Sun. The first tease is the idea that AtriumSSO provides SSO. AtriumSSO doesn't provide an Active Directory SSO implementation which is what 90% of AR System users want from an SSO product. This means you can't open IE, navigate to Midtier and sign in without being prompted for credentials. To be fair, there is half of an AD implementation in OpenSSO. BMC's documentation states the product is not fully supported. On page 12 of their documentation it states, Defects requiring time and resources beyond commercially reasonable effort might not be addressed.. This is an entirely acceptable position given OpenSSO is about 650Mb of code and libraries, and the BMC additions account for 5% of the code, so they can be forgiven for not having reviewed/tested the other 95%. You can purchase support from a company called ForgeRock, created after Oracle killed off OpenSSO. I've spoken to them and believe they can help with some of the 95%, but won't be able to help with AR System configuration and deployment. AtriumSSO is installed as a separate Tomcat instance, introducing more administrative requirements. AtriumSSO has no wizard to integrate with your corporate infrastructure, which means you'll require BMC consulting days to perform the task. I assume customers are required to pay for BMC professional services. AtriumSSO is not recommended for external SSO use. On page 20 of their documentation it states, Installation of BMC Atrium SSO on an external Tomcat server is not recommended due to security and load issues. AtriumSSO has no support for the Windows User Tool, which is entirely acceptable given the WUT is being dropped (but we know that many AR System
Re: Error when connecting to remedy using ARSPerl
Where are you running the script? From the ARS server or another server? Sent from my iPhone On Dec 16, 2010, at 2:45 PM, Ravi rav...@cox.net wrote: Hi: I have a ARSPerl script that connects to a remedy server and creates a request in a form. The scripts and the code in Remedy server have not changed for a while. Abruptly today, the script started failing with the following error ars_Login failed: [ERROR] Message not in catalog; Message number = 90 (rearsdbp02.sprintmrn.com (0) : RPC: Program not registered) (ARERR #90) at ./test_remedy.pl line 53. I can access the remedy server from the client machine I am trying to run the script. I have restarted the remedy server. I can login fine into remedy using the admin and user client. I don't see anything in any log files. Has anyone else seen this? Any suggestions on what I should look for. Thanks Ravi ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Error when connecting to remedy using ARSPerl
Ravi, The 90 is saying it can't connect to the remedy server, so I would that the machine can connect to the server with THAT name, and on that portis it possible port mapper stopped working on the server? What if you change from port 0 to the actual port the server is running on, does that help? -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Ravi Sent: Thursday, December 16, 2010 12:46 PM To: arslist@ARSLIST.ORG Subject: Error when connecting to remedy using ARSPerl Hi: I have a ARSPerl script that connects to a remedy server and creates a request in a form. The scripts and the code in Remedy server have not changed for a while. Abruptly today, the script started failing with the following error ars_Login failed: [ERROR] Message not in catalog; Message number = 90 (rearsdbp02.sprintmrn.com (0) : RPC: Program not registered) (ARERR #90) at ./test_remedy.pl line 53. I can access the remedy server from the client machine I am trying to run the script. I have restarted the remedy server. I can login fine into remedy using the admin and user client. I don't see anything in any log files. Has anyone else seen this? Any suggestions on what I should look for. Thanks Ravi ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Error when connecting to remedy using ARSPerl
LJ: it's be a while. How do I find out which port is the remedy running? Is there a way to check if the portmapper is running on solaris 10 or if it's having some issues? Frank: I am connecting from a different server Thanks Ravi On 12/16/2010 3:39 PM, LJ LongWing wrote: Ravi, The 90 is saying it can't connect to the remedy server, so I would that the machine can connect to the server with THAT name, and on that portis it possible port mapper stopped working on the server? What if you change from port 0 to the actual port the server is running on, does that help? -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Ravi Sent: Thursday, December 16, 2010 12:46 PM To: arslist@ARSLIST.ORG Subject: Error when connecting to remedy using ARSPerl Hi: I have a ARSPerl script that connects to a remedy server and creates a request in a form. The scripts and the code in Remedy server have not changed for a while. Abruptly today, the script started failing with the following error ars_Login failed: [ERROR] Message not in catalog; Message number = 90 ( (0) : RPC: Program not registered) (ARERR #90) at ./test_remedy.pl line 53. I can access the remedy server from the client machine I am trying to run the script. I have restarted the remedy server. I can login fine into remedy using the admin and user client. I don't see anything in any log files. Has anyone else seen this? Any suggestions on what I should look for. Thanks Ravi ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Error when connecting to remedy using ARSPerl
Ok...I think port mapper only runs on Windowsyou can find the TCP Port that remedy is running on in the Admin console in Remedy clientI think Solaris has its own port mapper...but it's also been a long time since I ran that environment. -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Ravi Sent: Thursday, December 16, 2010 1:59 PM To: arslist@ARSLIST.ORG Subject: Re: Error when connecting to remedy using ARSPerl LJ: it's be a while. How do I find out which port is the remedy running? Is there a way to check if the portmapper is running on solaris 10 or if it's having some issues? Frank: I am connecting from a different server Thanks Ravi On 12/16/2010 3:39 PM, LJ LongWing wrote: Ravi, The 90 is saying it can't connect to the remedy server, so I would that the machine can connect to the server with THAT name, and on that portis it possible port mapper stopped working on the server? What if you change from port 0 to the actual port the server is running on, does that help? -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Ravi Sent: Thursday, December 16, 2010 12:46 PM To: arslist@ARSLIST.ORG Subject: Error when connecting to remedy using ARSPerl Hi: I have a ARSPerl script that connects to a remedy server and creates a request in a form. The scripts and the code in Remedy server have not changed for a while. Abruptly today, the script started failing with the following error ars_Login failed: [ERROR] Message not in catalog; Message number = 90 ( (0) : RPC: Program not registered) (ARERR #90) at ./test_remedy.pl line 53. I can access the remedy server from the client machine I am trying to run the script. I have restarted the remedy server. I can login fine into remedy using the admin and user client. I don't see anything in any log files. Has anyone else seen this? Any suggestions on what I should look for. Thanks Ravi ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Error when connecting to remedy using ARSPerl
On Solaris the RPC portmapper is a process 'rpcbind'. You can check the status of the portmapper using the rpcinfo command on a remote machine or on the server. On Thu, Dec 16, 2010 at 3:32 PM, LJ LongWing lj.longw...@gmail.com wrote: Ok...I think port mapper only runs on Windowsyou can find the TCP Port that remedy is running on in the Admin console in Remedy clientI think Solaris has its own port mapper...but it's also been a long time since I ran that environment. -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Ravi Sent: Thursday, December 16, 2010 1:59 PM To: arslist@ARSLIST.ORG Subject: Re: Error when connecting to remedy using ARSPerl LJ: it's be a while. How do I find out which port is the remedy running? Is there a way to check if the portmapper is running on solaris 10 or if it's having some issues? Frank: I am connecting from a different server Thanks Ravi On 12/16/2010 3:39 PM, LJ LongWing wrote: Ravi, The 90 is saying it can't connect to the remedy server, so I would that the machine can connect to the server with THAT name, and on that portis it possible port mapper stopped working on the server? What if you change from port 0 to the actual port the server is running on, does that help? -Original Message- From: Action Request System discussion list(ARSList) [mailto:arsl...@arslist.org] On Behalf Of Ravi Sent: Thursday, December 16, 2010 12:46 PM To: arslist@ARSLIST.ORG Subject: Error when connecting to remedy using ARSPerl Hi: I have a ARSPerl script that connects to a remedy server and creates a request in a form. The scripts and the code in Remedy server have not changed for a while. Abruptly today, the script started failing with the following error ars_Login failed: [ERROR] Message not in catalog; Message number = 90 ( (0) : RPC: Program not registered) (ARERR #90) at ./test_remedy.pl line 53. I can access the remedy server from the client machine I am trying to run the script. I have restarted the remedy server. I can login fine into remedy using the admin and user client. I don't see anything in any log files. Has anyone else seen this? Any suggestions on what I should look for. Thanks Ravi ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
