Re: Missing the User Permission in the CTM:People after running rrrloginconv
Hi Misi, Thank you for the reply, I was not using ALLFORMS as option. Now selecting the CTM:* forms one by one. and executing the command. Hope to get it right. Best Regards, John Joseph Date: Wed, 19 Jan 2011 08:07:05 +0100 From: m...@rrr.se Subject: Re: Missing the User Permission in the CTM:People after running rrrloginconv To: arslist@ARSLIST.ORG Hi John, I need more information to advice you. 1. What was the exact command you ran? 2. What did the conversion file look like? 3. What is in the log file from RRR|LoginConv? 4. What did you wish to accomplish? What exactly happened to you data? Have you been able to figure that out? If you were actually changing login names, these has to be changed in many other forms that tie the user together. I typically run this against all regular forms, or in this case at least CTM:* and User. Best Regards - Misi, RRR AB, http://www.rrr.se Products from RRR Scandinavia (Best R.O.I. Award at WWRUG10): * RRR|License - Not enough Remedy licenses? Save money by optimizing. * RRR|Log - Performance issues or elusive bugs? Analyze your Remedy logs. Find these products, and many free tools and utilities, at http://rrr.se. Hi All, I executed the rrrloginConv against my ARS 7.1 ITSM 7.0.3 and all the permissions of all the entries in the CTM:People have dissapeared. The login conversion went fine. I guess the permission relationship did not. Has anyone experienced this behaviour? Could you please advise on this. Many Thanks in Anticipation. Best Regards, John Joseph ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: AIE problem on new server
Hmmm. I don't know how well installing p1 over p2 would work. It definitely doesn't sound safe. However I wouldn't be surprised if just replacing a p2 aie.exe with a p1 aie.exe (maybe this is what you were referring to, not a full install) corrects the issues we had with p2. Problem is are there other more important things that p2 aie.exe fixed? I think it is safe to install p2 and then put in a ticket for an aie.exe build that fixes these issues before you try using AIE (if you plan on using these features). Jason On Tue, Jan 18, 2011 at 7:05 PM, Ramey, Anne anne.ra...@nc.gov wrote: ** Would it be safe to install AIE from the Atrium 7.6 p1 onto an Atrium 7.6 p2 system to avoid this kind of thing? Would it be worth it? Anne Ramey *** *E-mail correspondence to and from this address may be subject to the North Carolina Public Records Law and may be disclosed to third parties only by an authorized State Official.* *From:* Action Request System discussion list(ARSList) [mailto: arslist@ARSLIST.ORG] *On Behalf Of *Jason Miller *Sent:* Tuesday, January 18, 2011 3:49 PM *To:* arslist@ARSLIST.ORG *Subject:* Re: AIE problem on new server ** Regarding Atrium Core 7.6 p2, we found a AIE few defects and have a special build of aie.exe SW00375829 - CI Class mapping functions returning errors on 7.6Patch 2 but not on 7.6patch 1. Basically we were not able to use two functions in a field mapping. For example a REPLACE nested in an UPPER. Also unsupported nested mathematical function that worked with p1 and not p2 work again with our new build. Here is an example that gets the host name of named and non-named SQL instances: {function|left($ServerName$, strstr($ServerName$,\)-1)}{ServerName} Seems odd that you cannot do a strstr -1 to find a LEFT position. I have hope that the next release of AIE will support these kind of operations :) I didn't find a SW number for the second but here is the description: We are having a problem using AIE External Data Store feature in Relationship Class Mappings. After patch 2 the SQL that was begin generated to query the external db to find relationships was malformed. HTH, Jason On Tue, Jan 18, 2011 at 12:02 PM, sphilben sphil...@mac.com wrote: ** Listers: I built a new 7.6 patch002 ARS server. Then I copied over a SQL DB from a previous 7.6 patch002 server. Everything works well except when I go to AIE. The server data in the Instances table still points to the old server. The T705 table (EIE:BackupLoadFlag) has all the data for the old server still loaded (of course) so how do I get to that table to update it to the new server? The form itself is all full of hidden fields which are not editable. I could use direct SQL but I might miss something. Is there a configuration somewhere that I am missing? Thanks. _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: ARS 7.6.03 Licensing on Windows Server 2008 R2
Hi, I have been running 7.6.03 on Win 2008 R2 since that AR version was released. I did a clean install, not an upgrade, and then migrated my custom defs and data (using rrrchive). I am running it a virtual virtlib/qemu/kvm instance on a CentOS-host. It has worked great. Best Regards - Misi, RRR AB, http://www.rrr.se Products from RRR Scandinavia (Best R.O.I. Award at WWRUG10): * RRR|License - Not enough Remedy licenses? Save money by optimizing. * RRR|Log - Performance issues or elusive bugs? Analyze your Remedy logs. Find these products, and many free tools and utilities, at http://rrr.se. This is a bit old (but interesting) thread that I will try to revive. Juan (or anyone out there who has attempt to install on 2008 R2), how did you installation go? I am contemplating installing ARS on 2008 R2 and SQL 2008 R2 for the DB. Are the pre configured stack installer exclusively for 2008 R2? Or also for 2003/2008 64-bit Thanks all Marcelo -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Juan Ingles Sent: Monday, December 13, 2010 5:27 PM To: arslist@ARSLIST.ORG Subject: Re: ARS 7.6.03 Licensing on Windows Server 2008 R2 and the general contractor doesn't notice the extra pipes sticking out of the wall for two years. ;) Juan On Mon, Dec 13, 2010 at 2:34 PM, strauss stra...@unt.edu wrote: Yes, that's exactly it; it's always fun when Mickey changes the plumbing... Christopher Strauss, Ph.D. Call Tracking Administration Manager University of North Texas Computing IT Center http://itsm.unt.edu/ -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Juan Ingles Sent: Monday, December 13, 2010 4:31 PM To: arslist@ARSLIST.ORG Subject: Re: ARS 7.6.03 Licensing on Windows Server 2008 R2 Chris, I ran across something that I dismissed as silly that I think might be related I am setting up a new 2008 VM to try out the new 7.6.3 stack installer. After installing the OS I copied over bginfo, a nifty MS internals utility that prints host info on the desktop. It really helps when managing multiple machines to know at a glance what machine you are connected to and basic system info like disk usage, patch level, installed memory, etc. Well, guess what it did for the network info... Instead of listing the one IP address, it listed ALL the network nodes, including the disabled ones. I got a list that looked something like: none none none 192.1.1.1 none none After some investigation, I discovered thet the values are fed by a WMI query that queries IP addresses. Previous to 2008, this query returned only the active addresses/NICs, but starting with 2008 that query now returns everything. Fixing this for bginfo turned out to be easy enough -- I created a new item and added the WMI query with a qualification that returns only active records. I noticed that my active NIC was not the first in the list, so I'm thinking that I might come across the same problem you did when I go to license the server. I will report my results when I get there. Juan ingles ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Reaction to Atrium Core 7.6.03 Patch 001 Technical Bulletin
Chris, Chocking read. You are normally right in your statements. It looks like we are doing the right thing waiting for ARS 7.6.4 and ITSM 7.6.4. Terje -- Sent from my Palm Pre On 18 Jan 2011 17:36, strauss lt;stra...@unt.edugt; wrote: After reading the Technical Bulletin for Atrium Core 7.6.03 Patch 001, it is easy to become convinced that BMC has finally tortured their CMDB into a hopelessly un-maintainable nightmare of conflicting code releases. There is a very large list of problems in 7.6.03 that patch 001 purports to fix (indicating that 7.6.03 was not tested very well before its release), and some of the fixes appear to generate new problems, while many more issues are still not addressed. There are a number of manual processes that must be performed before even running the patch, and others that must be done afterwards to clean up the new problems that it creates, and then many workarounds listed for the unsolved problems that remain. Admittedly there is a certain amount of it that I can ignore since I have refused to even install the Atrium Web Services - anywhere. It's the most depressing technical document that I have read in years, leaving me doubtful that we will be able to run a successful CMDB population project after we get migrated to 7.6.03/4. I don't think I am even going to bother trying to install it on my 7.6.03 test and pre-production systems, but rather do a completely fresh install of 7.6.04 if/when that is released. Is it just me, or did anyone else's brain turn to toast when trying to read this thing? It makes me glad that my users are still blissfully unaware that there is a CMDB in the product, since we are still in production on an empty 2.1 system with no Asset Mgmt module. Christopher Strauss, Ph.D. Call Tracking Administration Manager University of North Texas Computing amp; IT Center ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Reaction to Atrium Core 7.6.03 Patch 001 Technical Bulletin
No user tool support. Web only period! Sent from my iPhone On Jan 19, 2011, at 6:39 AM, Terje Moglestue te...@moglestue.com wrote: ** Chris, Chocking read. You are normally right in your statements. It looks like we are doing the right thing waiting for ARS 7.6.4 and ITSM 7.6.4. Terje -- Sent from my Palm Pre On 18 Jan 2011 17:36, strauss stra...@unt.edu wrote: After reading the Technical Bulletin for Atrium Core 7.6.03 Patch 001, it is easy to become convinced that BMC has finally tortured their CMDB into a hopelessly un-maintainable nightmare of conflicting code releases. There is a very large list of problems in 7.6.03 that patch 001 purports to fix (indicating that 7.6.03 was not tested very well before its release), and some of the fixes appear to generate new problems, while many more issues are still not addressed. There are a number of manual processes that must be performed before even running the patch, and others that must be done afterwards to clean up the new problems that it creates, and then many workarounds listed for the unsolved problems that remain. Admittedly there is a certain amount of it that I can ignore since I have refused to even install the Atrium Web Services - anywhere. It's the most depressing technical document that I have read in years, leaving me doubtful that we will be able to run a successful CMDB population project after we get migrated to 7.6.03/4. I don't think I am even going to bother trying to install it on my 7.6.03 test and pre-production systems, but rather do a completely fresh install of 7.6.04 if/when that is released. Is it just me, or did anyone else's brain turn to toast when trying to read this thing? It makes me glad that my users are still blissfully unaware that there is a CMDB in the product, since we are still in production on an empty 2.1 system with no Asset Mgmt module. Christopher Strauss, Ph.D. Call Tracking Administration Manager University of North Texas Computing IT Center ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Get Client Info created by Axton Grams
We are testing this on 7.6.03 and got an error Caught Exception:Object Expected. Since this was posted in 2007 do you have any updates. Subject: Re: How to capture a user's computer name in the mid-tier? Depending on your mid-tier server config, this can be a little trickier. If you have a load balancer, you will get the ip of the load balancer, not the client. Some load balancers allow you to send the ip through as an http header, so the js would have to be modified to account for that if this is the case. Axton Grams On 9/21/07, Kaiser Norm E CIV USAF 96 CS/SCCE [EMAIL PROTECTED] wrote: Gary: Copy the following text into your mouse buffer and paste it into Notepad: function env_ip_var() { var return_value = %=request.getRemoteAddr()%; return (return_value) } function env_hostname() { var return_value = %=request.getRemoteHost()%; return (return_value) } Save the file as get_client_info.jsp. Then copy that file into your SHARED folder on your Midtier. Then open your form in the Admin tool. Go to VIEW PROPERTIES, click the APPEARANCE tab, and click EDIT WEB HEADER CONTENT. Paste the following into the field: SCRIPT src=/arsys/shared/get_client_info.jsp language=Javascript/SCRIPT Save the form. Then create an active link that runs on SUBMIT or WINDOW OPEN or whatever that does a RUN PROCESS. The run process should be this: javascript.window.F(xxxfield idxxx).DoSet(env_hostname()); Replace xxxfield idxxx with the field ID of the field you want to capture the hostname. Just put the number--no dollar signs or quotes or anything else. Save the AL. Give it a run. Should work like a champ. Let me know if you have any trouble. I have it working here on every ticket that's submitted. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Message not in catalog -- message number = 9070
Hi Folks, Thanks for your continued interest in this thread. I did check the SQL logs to see what happens when I update the User form Password field (FID 102) using the join form with the corresponding field renumbered to something other than FID 102... it does not encrypt the contents, neither in the SQL UPDATE nor in the database table. The password is sent in clear text. When the password field in the join retains it's FID=102, everything works correctly and the result is encrypted all the way to the database table. As an interesting aside, the user_cache entry is encrypted in both cases described above. So in my case, renumbering the Password field on the join form turned out to be a poor choice. That really only left me one field that I could renumber to avoid the 9070 error... Login Name (FID 101). I have renumbered Login Name on my join and everything seems to be working as expected. Hope this is helpful. Larry On Jan 18, 2011, at 10:25 AM, Misi Mladoniczky wrote: Hi, I suspect that if the field id is not 102, it will not encrypt the content before it is sent over the network. The SQL log will still show it encrypted though, as it is encrypted by the server before it is stored. It would be complicated to track the 102 to the actual regular form, as a join may be implemented in multiple tiers. Best Regards - Misi, RRR AB, http://www.rrr.se Products from RRR Scandinavia (Best R.O.I. Award at WWRUG10): * RRR|License - Not enough Remedy licenses? Save money by optimizing. * RRR|Log - Performance issues or elusive bugs? Analyze your Remedy logs. Find these products, and many free tools and utilities, at http://rrr.se. Hi Misi, I have not checked the SQL logs but I was assuming (hoping) that since the renumbered password field (on the join form) still maps to the real password field in the real User form (with it's original FID), then it would still be treated as such and encrypted as appropriate. I did in fact set the Display-Type to Edit Masked as you suggest and that part works just fine. If I get a few minutes today, I'll check the SQL logs to see what is getting sent. Thanks. Larry On Jan 18, 2011, at 3:54 AM, Misi Mladoniczky wrote: Hi, All else to the side, in this case, couldn't you just set the Display-Type to Edit Masked? I an guessing that it changes the way modified data is sent to the server, as the password field is normally sent encrypted. In the old days, I sometimes renamed the User-form to a Swedish equivalent, which worked just fine, and it probably still does. If you had multiple User-forms the system could suddenly switch forms, for example when you imported a record into UserCopy, the user cache could get reset with only the newly imported user in it... I am sure it worked like this in version 2.0 and 2.1, and possibly a bit after that as well ;-) Why is the 9070 message missing from the Error Message Guide? Best Regards - Misi, RRR AB, http://www.rrr.se Products from RRR Scandinavia (Best R.O.I. Award at WWRUG10): * RRR|License - Not enough Remedy licenses? Save money by optimizing. * RRR|Log - Performance issues or elusive bugs? Analyze your Remedy logs. Find these products, and many free tools and utilities, at http://rrr.se. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
issue in setting up reconciliation rules..
Hi, Env: ARS 7.5 patch4, Atrium CMDB 7.6 patch1,ITSM 7.0.3 patch9 I will try best to explain this complex issue in simple way! I am making a custom recon job, which identifies a test dataset(containing computer system , IP Endpoint, LANendpoint, Hosted accesspoint(relationships between comp-IP comp-LAN). Idea is to update the existing CIs create the new ones. I have set 'identification rulesets' for each CI class based on AssetId ( 'AssetID' = $AssetID$) For the relationship class(hosted accesspoint), my identification rule set is ('Source Reconid' =$SourceReconid$) ('Destination Reconid' = $Destination Reconid$). Now if my test dataset has Computer System C1, it checks against Production dataset's Computer system C1, updates it. If it does not find it, it creates C1. But, this does not happen for IPEndpoint class, if CI with AssetID, say IP1 is already existing in prod dataset may be related to C2 in production dataset.When the test dataset has IP1 related to C3, C3 gets created(because it was not in prod dataset before) but a duplicate IP1 also gets created in production dataset. along with their relationship(C3---IP1), although I already have C2IP1 in the prod dataset. So, in nut shell, I have 2 instances of same Asset id IP1(ofcourse they have different recon ids), 1 linked to computer C2 other to computer C3. The same thing happens for LANEndpoint class. I am aware of the cardinality of hostedaccesspoint is 1-Many. So, 1 Comp CI can have multiple IPEndpoints, but not vice versa. So, holding this standard architecture rule, I expect that recon job should create only new IP CIs, not duplicates. talking bout relationship CIs, then if it encounters an IP1 which is already related to a Computer C2, it should not create a second relationship C3---IP1. Any help! -- View this message in context: http://ars-action-request-system.1093659.n2.nabble.com/issue-in-setting-up-reconciliation-rules-tp5939613p5939613.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: KMS - RESOLVED
Not a problem! If you would like, I can send you the edited file On Tue, Jan 18, 2011 at 4:39 PM, Thad Esser thad.es...@gmail.com wrote: ** Warren, Just last week a user came to me with that same problem. I was letting the issue ferment (a.k.a. I didn't have a clue where to start) and you just solved it. Thanks for posting the resolution. ARSlist - where the answers truly are. :-) Thad On Tue, Jan 18, 2011 at 12:28 PM, Warren R. Baltimore II warrenbaltim...@gmail.com wrote: ** Never mind! I just edited the html file and it works fine. On Tue, Jan 18, 2011 at 2:42 PM, Warren R. Baltimore II warrenbaltim...@gmail.com wrote: Folks, I've got an older installation of KMXPert's Knowledge Base running on an old Windows 2000 server. It was just brought to my attention that the calendar widget supplied (kms_Calendar.htm) only goes to 2010! I suspect that I can edit the html file to fix this, but I was wondering if anyone else has run into this and maybe has the updated file? I've placed a tkt. with BMC. I can find no information about the older Kbase on the website though (go figure!) TIA! -- Warren R. Baltimore II Remedy Developer 410-533-5367 -- Warren R. Baltimore II Remedy Developer 410-533-5367 _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ -- Warren R. Baltimore II Remedy Developer 410-533-5367 ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: BMC Atrium Core Console ....... Sent Failed error
Gok's, We have seen this error too. Our configurations may not be the same (ours is unusual, load balancers and firewalls and such). Are you running SSL on the mid-tier(s)? Doug On Jan 18, 2011, at 8:04 PM, gok's wrote: Environment 7.5 Patch 04 DB - SQL Server 2008 SP 2 Hi all, when select the Atrium console from quick links it is throwing an error 'sent failed ' Authentication error as according in to Remedy Knowledge mng they mentioned me to restart the midtier which I did it didn't resolved the issue.can any one help me please. Thanks -- View this message in context: http://old.nabble.com/BMC-Atrium-Core-Console-...-Sent-Failed-error-tp30705467p30705467.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are Doug -- Doug Blair d...@blairing.com +1 224-558-5462 200 North Arlington Heights Road Arlington Heights, Illinois 60004 ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are inline: bmc_skilled_pro_ar.png ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Problem Management and Tasks
Hi All We currently have Problem Management V. 7.0.03 patch 009 Often times a Problem ticket gets closed when there are still open tasks associated with it. Unfortunately even Admins can't modify or reopen the closed Problem ticket (unless we disable the workflow enforcing this), and then that task becomes stuck in somebody's queue. Wondering why Problem Management allows the ticket to be closed if there is still an open task and if this perhaps is design flaw? Or something that just we are experiencing? Thanks! Vi ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Problem Management and Tasks
** In 7.6 if there are outstanding tasks when you close the problem, it auto-closes all tasks as "Closed-Cancelled". This is OOB behavior.Terry On Jan 19, 2011, Vianna Vianna vianna...@hotmail.com wrote: ** Hi AllWe currently have Problem Management V. 7.0.03 patch 009Often times a Problem ticket gets closed when there are still open tasks associated with it. Unfortunately even Admins can't modify or reopen the closed Problem ticket (unless we disable the workflow enforcing this), and then that task becomes stuck in somebody's queue. Wondering why Problem Management allows the ticket to be closed if there is still an open task and if this perhaps is design flaw? Or something that just we are experiencing? Thanks!Vi_attend WWRUG11 www.wwrug.com ARSlist: "Where the Answers Are"_ _attend WWRUG11 www.wwrug.com ARSlist: "Where the Answers Are"_
Re: Problem Management and Tasks
Thanks for the info! Date: Wed, 19 Jan 2011 16:25:26 + From: tboot...@objectpath.com Subject: Re: Problem Management and Tasks To: arslist@ARSLIST.ORG ** In 7.6 if there are outstanding tasks when you close the problem, it auto-closes all tasks as Closed-Cancelled. This is OOB behavior. Terry On Jan 19, 2011, Vianna Vianna vianna...@hotmail.com wrote: ** Hi All We currently have Problem Management V. 7.0.03 patch 009 Often times a Problem ticket gets closed when there are still open tasks associated with it. Unfortunately even Admins can't modify or reopen the closed Problem ticket (unless we disable the workflow enforcing this), and then that task becomes stuck in somebody's queue. Wondering why Problem Management allows the ticket to be closed if there is still an open task and if this perhaps is design flaw? Or something that just we are experiencing? Thanks! Vi _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are__attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Get Client Info created by Axton Grams
Does the exception come from the included js file or from the js in the active link. If the latter, it may be that the old js functions used to manipulate fields may have changed. On Wed, Jan 19, 2011 at 6:55 AM, Roger Justice rjust2...@aol.com wrote: ** We are testing this on 7.6.03 and got an error Caught Exception:Object Expected. Since this was posted in 2007 do you have any updates. Subject: Re: How to capture a user's computer name in the mid-tier? Depending on your mid-tier server config, this can be a little trickier. If you have a load balancer, you will get the ip of the load balancer, not the client. Some load balancers allow you to send the ip through as an http header, so the js would have to be modified to account for that if this is the case. Axton Grams On 9/21/07, Kaiser Norm E CIV USAF 96 CS/SCCE [EMAIL PROTECTED] wrote: Gary: Copy the following text into your mouse buffer and paste it into Notepad: function env_ip_var() { var return_value = %=request.getRemoteAddr()%; return (return_value) } function env_hostname() { var return_value = %=request.getRemoteHost()%; return (return_value) } Save the file as get_client_info.jsp. Then copy that file into your SHARED folder on your Midtier. Then open your form in the Admin tool. Go to VIEW PROPERTIES, click the APPEARANCE tab, and click EDIT WEB HEADER CONTENT. Paste the following into the field: SCRIPT src=/arsys/shared/get_client_info.jsp language=Javascript/SCRIPT Save the form. Then create an active link that runs on SUBMIT or WINDOW OPEN or whatever that does a RUN PROCESS. The run process should be this: javascript.window.F(xxxfield idxxx).DoSet(env_hostname()); Replace xxxfield idxxx with the field ID of the field you want to capture the hostname. Just put the number--no dollar signs or quotes or anything else. Save the AL. Give it a run. Should work like a champ. Let me know if you have any trouble. I have it working here on every ticket that's submitted. _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Problem Management and Tasks
Hi Vi, I had a similar problem where a 6.3 custom form Trouble Ticket was closed while there were child Tasks still open. Open Tasks were shown on a table. I added an active link on close that refreshes the table and then walks through it. Then if Column1 != $NULL$ then Error Message to stop the close action. In my situation I had to check two tables so I used an active link guide. Works great. If you need more details let me know. Mark From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Vianna Vianna Sent: Wednesday, January 19, 2011 10:59 AM To: arslist@ARSLIST.ORG Subject: Problem Management and Tasks ** Hi All We currently have Problem Management V. 7.0.03 patch 009 Often times a Problem ticket gets closed when there are still open tasks associated with it. Unfortunately even Admins can't modify or reopen the closed Problem ticket (unless we disable the workflow enforcing this), and then that task becomes stuck in somebody's queue. Wondering why Problem Management allows the ticket to be closed if there is still an open task and if this perhaps is design flaw? Or something that just we are experiencing? Thanks! Vi _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ This e-mail is the property of NaviSite, Inc. It is intended only for the person or entity to which it is addressed and may contain information that is privileged, confidential, or otherwise protected from disclosure. Distribution or copying of this e-mail, or the information contained herein, to anyone other than the intended recipient is prohibited. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Get Client Info created by Axton Grams
Would love to hear the post on this one.. The are saying : rebuild the box.. That is the solution? Let's not find the problem, just rebuild the desktop. We have no debugging abilities, as we have no one with admin rights. On Wed, Jan 19, 2011 at 11:44 AM, Axton axton.gr...@gmail.com wrote: ** Does the exception come from the included js file or from the js in the active link. If the latter, it may be that the old js functions used to manipulate fields may have changed. On Wed, Jan 19, 2011 at 6:55 AM, Roger Justice rjust2...@aol.com wrote: ** We are testing this on 7.6.03 and got an error Caught Exception:Object Expected. Since this was posted in 2007 do you have any updates. Subject: Re: How to capture a user's computer name in the mid-tier? Depending on your mid-tier server config, this can be a little trickier. If you have a load balancer, you will get the ip of the load balancer, not the client. Some load balancers allow you to send the ip through as an http header, so the js would have to be modified to account for that if this is the case. Axton Grams On 9/21/07, Kaiser Norm E CIV USAF 96 CS/SCCE [EMAIL PROTECTED] wrote: Gary: Copy the following text into your mouse buffer and paste it into Notepad: function env_ip_var() { var return_value = %=request.getRemoteAddr()%; return (return_value) } function env_hostname() { var return_value = %=request.getRemoteHost()%; return (return_value) } Save the file as get_client_info.jsp. Then copy that file into your SHARED folder on your Midtier. Then open your form in the Admin tool. Go to VIEW PROPERTIES, click the APPEARANCE tab, and click EDIT WEB HEADER CONTENT. Paste the following into the field: SCRIPT src=/arsys/shared/get_client_info.jsp language=Javascript/SCRIPT Save the form. Then create an active link that runs on SUBMIT or WINDOW OPEN or whatever that does a RUN PROCESS. The run process should be this: javascript.window.F(xxxfield idxxx).DoSet(env_hostname()); Replace xxxfield idxxx with the field ID of the field you want to capture the hostname. Just put the number--no dollar signs or quotes or anything else. Save the AL. Give it a run. Should work like a champ. Let me know if you have any trouble. I have it working here on every ticket that's submitted. _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ -- Patrick Zandi ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Strange Behavior in Atrium Explorer
Hi Tristan, If you look at the relationships in the base relationship form what is the value of the MarkAsDeleted flags? I know that in Asset Management deleting a relationship doesn't physically delete it. Does Atrium Explorer filter on this flag? Cheers Peter From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of tristan.rop...@t-online.de Sent: 18 January 2011 17:10 To: arslist@ARSLIST.ORG Subject: Strange Behavior in Atrium Explorer ** Hi, ARS 7.5, Patch 6 CMDB 7.5 I created a Dependency relationship of a 'Database' CI to a 'Product' CI. Afterwards i removed this realtionship in the relationship tab with pressing the Remove button in the CI View 'Database'. Now i create a new Dependency relationship with a newer product. When i try to to see the realtionships in the Atrium Explorer i see now Dependency of a Database to two Products. In the Forms BMC.Core:BMC_Dependency and BMC.Core:BMC_BaseRealtionship can i see the existing two relationships. Is this a malfunction of the Remove button ? Cheers Tristan _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: BMC Atrium Core Console ....... Sent Failed error
Uh oh. Doug do you know of specific issues with using the console over SSL? We are just about to add SSL to the mix in the ITSM 7.6 environment we have been building. I played with it just a little over SSL and had seen this issue but figured it was a misconfiguration issue on my part because I just threw a cert and did some basic config to try it really quick. Gok's, Another thing to try is stop Tomcat and clear the contents of the PluginsCache directory (C:\Program Files\BMC Software\ARSystem\midtier\PluginsCache by default) and start Tomcat. Jason On Wed, Jan 19, 2011 at 7:52 AM, Doug Blair d...@blairing.com wrote: Gok's, We have seen this error too. Our configurations may not be the same (ours is unusual, load balancers and firewalls and such). Are you running SSL on the mid-tier(s)? Doug On Jan 18, 2011, at 8:04 PM, gok's wrote: Environment 7.5 Patch 04 DB - SQL Server 2008 SP 2 Hi all, when select the Atrium console from quick links it is throwing an error 'sent failed ' Authentication error as according in to Remedy Knowledge mng they mentioned me to restart the midtier which I did it didn't resolved the issue.can any one help me please. Thanks -- View this message in context: http://old.nabble.com/BMC-Atrium-Core-Console-...-Sent-Failed-error-tp30705467p30705467.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are Doug -- Doug Blair d...@blairing.com +1 224-558-5462 200 North Arlington Heights Road Arlington Heights, Illinois 60004 ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
License tracking in AR System Historical License Usage
** Hello list:ITSM 7.6 Patch 001Windows 2003 Server platform.ARServer 7.5 Patch 006We are looking into the form called "AR System Historical License Usage" and have logging of license statistics turned onfor our server (Enable License Tracking option isset). However, all we are getting entered into this form is license statistics for "AR Server" and none of the ITSM applications. Is anyone else getting ITSM Application License statistics entered into this form by the AR Server?I am led to believe that I should not only get ARServer license utilization, but ITSM application statistics as well. Am I correct? Terry _attend WWRUG11 www.wwrug.com ARSlist: "Where the Answers Are"_
Re: License tracking in AR System Historical License Usage
Hi, Application Statistics is turned on by creating records in the Application Statistics Configuration form. For each monitored application, you must submit records with where: 'Logging Status' = Enabled 'Logging Type' = Application 'Logging Interval' = 300 seconds (or what you want) 'Name' is set to those the specific application name: Remedy Incident Management Remedy Problem Management Remedy Change Management Remedy Asset Management Remedy Service Level Management We use this in our small License Threshold Notifier: http://rrr.se/cgi/licnotify Let us know if it works out! Best Regards - Misi, RRR AB, http://www.rrr.se Products from RRR Scandinavia (Best R.O.I. Award at WWRUG10): * RRR|License - Not enough Remedy licenses? Save money by optimizing. * RRR|Log - Performance issues or elusive bugs? Analyze your Remedy logs. Find these products, and many free tools and utilities, at http://rrr.se. ** Hello list: ITSM 7.6 Patch 001 Windows 2003 Server platform. ARServer 7.5 Patch 006 We are looking into the form called AR System Historical License Usage and have logging of license statistics turned on for our server (Enable License Tracking option is set). However, all we are getting entered into this form is license statistics for AR Server and none of the ITSM applications. Is anyone else getting ITSM Application License statistics entered into this form by the AR Server? I am led to believe that I should not only get ARServer license utilization, but ITSM application statistics as well. Am I correct? Terry _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Get Client Info created by Axton Grams
The error is generated when trying to run the code from the Active Link. I can't really tell if it is the active link Javascript call or the JS file itself. Tomcat, Windows, 7.6.03 -Original Message- From: Grooms, Frederick W frederick.w.gro...@xo.com To: arslist arslist@ARSLIST.ORG Sent: Wed, Jan 19, 2011 1:05 pm Subject: Re: Get Client Info created by Axton Grams ** One question is what are you using for a Web server and JSP engine (and on what OS)? We are using Apache/Tomcat on Solaris and the functions work correctly for Mid-Tier 7.6.03. Fred From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Roger Justice Sent: Wednesday, January 19, 2011 6:56 AM To: arslist@ARSLIST.ORG Subject: Get Client Info created by Axton Grams ** We are testing this on 7.6.03 and got an error Caught Exception:Object Expected. Since this was posted in 2007 do you have any updates. Subject: Re: How to capture a user's computer name in the mid-tier? Depending on your mid-tier server config, this can be a little trickier. If you have a load balancer, you will get the ip of the load balancer, not the client. Some load balancers allow you to send the ip through as an http header, so the js would have to be modified to account for that if this is the case. Axton Grams On 9/21/07, Kaiser Norm E CIV USAF 96 CS/SCCE [EMAIL PROTECTED] wrote: Gary: Copy the following text into your mouse buffer and paste it into Notepad: function env_ip_var() { var return_value = %=request.getRemoteAddr()%; return (return_value) } function env_hostname() { var return_value = %=request.getRemoteHost()%; return (return_value) } Save the file as get_client_info.jsp. Then copy that file into your SHARED folder on your Midtier. Then open your form in the Admin tool. Go to VIEW PROPERTIES, click the APPEARANCE tab, and click EDIT WEB HEADER CONTENT. Paste the following into the field: SCRIPT src=/arsys/shared/get_client_info.jsp language=Javascript/SCRIPT Save the form. Then create an active link that runs on SUBMIT or WINDOW OPEN or whatever that does a RUN PROCESS. The run process should be this: javascript.window.F(xxxfield idxxx).DoSet(env_hostname()); Replace xxxfield idxxx with the field ID of the field you want to capture the hostname. Just put the number--no dollar signs or quotes or anything else. Save the AL. Give it a run. Should work like a champ. Let me know if you have any trouble. I have it working here on every ticket that's submitted. _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: issue in setting up reconciliation rules..
Hi, What you describe is the behaviour I would expect. When a Computer CI is related to an IP CI via a weak relationship (hosted access point is weak) then the Computer and IP are treated as a composite object and not individually. The IP in the test dataset will only be reconciled against an existing IP in the production dataset if they are both related to the same computer. Try your test again using strong relationships between the computer and IP CIs and you should see the behaviour you are expecting (though you should revert to the hosted access point relationship after testing). I don't understand why you are identifying relationships. Just create identification rules for the main CI's and the relationships will take care of themselves. Cheers Peter -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of rmdusr Sent: 19 January 2011 13:27 To: arslist@ARSLIST.ORG Subject: issue in setting up reconciliation rules.. Hi, Env: ARS 7.5 patch4, Atrium CMDB 7.6 patch1,ITSM 7.0.3 patch9 I will try best to explain this complex issue in simple way! I am making a custom recon job, which identifies a test dataset(containing computer system , IP Endpoint, LANendpoint, Hosted accesspoint(relationships between comp-IP comp-LAN). Idea is to update the existing CIs create the new ones. I have set 'identification rulesets' for each CI class based on AssetId ( 'AssetID' = $AssetID$) For the relationship class(hosted accesspoint), my identification rule set is ('Source Reconid' =$SourceReconid$) ('Destination Reconid' = $Destination Reconid$). Now if my test dataset has Computer System C1, it checks against Production dataset's Computer system C1, updates it. If it does not find it, it creates C1. But, this does not happen for IPEndpoint class, if CI with AssetID, say IP1 is already existing in prod dataset may be related to C2 in production dataset.When the test dataset has IP1 related to C3, C3 gets created(because it was not in prod dataset before) but a duplicate IP1 also gets created in production dataset. along with their relationship(C3---IP1), although I already have C2IP1 in the prod dataset. So, in nut shell, I have 2 instances of same Asset id IP1(ofcourse they have different recon ids), 1 linked to computer C2 other to computer C3. The same thing happens for LANEndpoint class. I am aware of the cardinality of hostedaccesspoint is 1-Many. So, 1 Comp CI can have multiple IPEndpoints, but not vice versa. So, holding this standard architecture rule, I expect that recon job should create only new IP CIs, not duplicates. talking bout relationship CIs, then if it encounters an IP1 which is already related to a Computer C2, it should not create a second relationship C3---IP1. Any help! -- View this message in context: http://ars-action-request-system.1093659.n2.nabble.com/issue-in-setting-up-r econciliation-rules-tp5939613p5939613.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Get Client Info created by Axton Grams
If you disable the active link, do you get the error? If you access the jsp page directly, do you get the error? On Wed, Jan 19, 2011 at 1:26 PM, Roger Justice rjust2...@aol.com wrote: ** The error is generated when trying to run the code from the Active Link. I can't really tell if it is the active link Javascript call or the JS file itself. Tomcat, Windows, 7.6.03 -Original Message- From: Grooms, Frederick W frederick.w.gro...@xo.com To: arslist arslist@ARSLIST.ORG Sent: Wed, Jan 19, 2011 1:05 pm Subject: Re: Get Client Info created by Axton Grams ** One question is what are you using for a Web server and JSP engine (and on what OS)? We are using Apache/Tomcat on Solaris and the functions work correctly for Mid-Tier 7.6.03. Fred *From:* Action Request System discussion list(ARSList) [ mailto:arslist@ARSLIST.ORG arslist@ARSLIST.ORG?] *On Behalf Of *Roger Justice *Sent:* Wednesday, January 19, 2011 6:56 AM *To:* arslist@ARSLIST.ORG *Subject:* Get Client Info created by Axton Grams ** We are testing this on 7.6.03 and got an error Caught Exception:Object Expected. Since this was posted in 2007 do you have any updates. Subject: Re: How to capture a user's computer name in the mid-tier? Depending on your mid-tier server config, this can be a little trickier. If you have a load balancer, you will get the ip of the load balancer, not the client. Some load balancers allow you to send the ip through as an http header, so the js would have to be modified to account for that if this is the case. Axton Grams On 9/21/07, Kaiser Norm E CIV USAF 96 CS/SCCE [EMAIL PROTECTED] wrote: Gary: Copy the following text into your mouse buffer and paste it into Notepad: function env_ip_var() { var return_value = %=request.getRemoteAddr()%; return (return_value) } function env_hostname() { var return_value = %=request.getRemoteHost()%; return (return_value) } Save the file as get_client_info.jsp. Then copy that file into your SHARED folder on your Midtier. Then open your form in the Admin tool. Go to VIEW PROPERTIES, click the APPEARANCE tab, and click EDIT WEB HEADER CONTENT. Paste the following into the field: SCRIPT src=/arsys/shared/get_client_info.jsp language=Javascript/SCRIPT Save the form. Then create an active link that runs on SUBMIT or WINDOW OPEN or whatever that does a RUN PROCESS. The run process should be this: javascript.window.F(xxxfield idxxx).DoSet(env_hostname()); Replace xxxfield idxxx with the field ID of the field you want to capture the hostname. Just put the number--no dollar signs or quotes or anything else. Save the AL. Give it a run. Should work like a champ. Let me know if you have any trouble. I have it working here on every ticket that's submitted. _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
OWASP assessment (Mid-Tier)?
Does anyone know if Remedy Mid-Tier has been evaluated with respect to the Open Web Application Security Project (OWASP) top 10 web applications security vulnerabilities list? Thank you. The OWASP Top 10 Web Application Security Risks for 2010 are: * A1: Injection * A2: Cross-Site Scripting (XSS) * A3: Broken Authentication and Session Management * A4: Insecure Direct Object References * A5: Cross-Site Request Forgery (CSRF) * A6: Security Misconfiguration * A7: Insecure Cryptographic Storage * A8: Failure to Restrict URL Access * A9: Insufficient Transport Layer Protection * A10: Unvalidated Redirects and Forwards Ken Leihkauff North American Integrated Services Management Center (NAISMC) Science Applications International Corp. (SAIC) ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Get Client Info created by Axton Grams
Solaris 10 , tomcat 5.5.25 On Wed, Jan 19, 2011 at 2:00 PM, Grooms, Frederick W frederick.w.gro...@xo.com wrote: ** One question is what are you using for a Web server and JSP engine (and on what OS)? We are using Apache/Tomcat on Solaris and the functions work correctly for Mid-Tier 7.6.03. Fred *From:* Action Request System discussion list(ARSList) [mailto: arslist@ARSLIST.ORG] *On Behalf Of *Roger Justice *Sent:* Wednesday, January 19, 2011 6:56 AM *To:* arslist@ARSLIST.ORG *Subject:* Get Client Info created by Axton Grams ** We are testing this on 7.6.03 and got an error Caught Exception:Object Expected. Since this was posted in 2007 do you have any updates. Subject: Re: How to capture a user's computer name in the mid-tier? Depending on your mid-tier server config, this can be a little trickier. If you have a load balancer, you will get the ip of the load balancer, not the client. Some load balancers allow you to send the ip through as an http header, so the js would have to be modified to account for that if this is the case. Axton Grams On 9/21/07, Kaiser Norm E CIV USAF 96 CS/SCCE [EMAIL PROTECTED] wrote: Gary: Copy the following text into your mouse buffer and paste it into Notepad: function env_ip_var() { var return_value = %=request.getRemoteAddr()%; return (return_value) } function env_hostname() { var return_value = %=request.getRemoteHost()%; return (return_value) } Save the file as get_client_info.jsp. Then copy that file into your SHARED folder on your Midtier. Then open your form in the Admin tool. Go to VIEW PROPERTIES, click the APPEARANCE tab, and click EDIT WEB HEADER CONTENT. Paste the following into the field: SCRIPT src=/arsys/shared/get_client_info.jsp language=Javascript/SCRIPT Save the form. Then create an active link that runs on SUBMIT or WINDOW OPEN or whatever that does a RUN PROCESS. The run process should be this: javascript.window.F(xxxfield idxxx).DoSet(env_hostname()); Replace xxxfield idxxx with the field ID of the field you want to capture the hostname. Just put the number--no dollar signs or quotes or anything else. Save the AL. Give it a run. Should work like a champ. Let me know if you have any trouble. I have it working here on every ticket that's submitted. _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ -- Patrick Zandi ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: OWASP assessment (Mid-Tier)?
There is a security white paper that describes how AR System deals with these kind of security situations: 02-Nov-2010 BMC Remedy Action Request System 7.6.03 AR System Security PDFhttp://documents.bmc.com/supportu/documents/86/29/178629/178629.pdf AR System 7.5.00 is also undergoing Common Criteria certification as can be seen here: http://www.niap-ccevs.org/in_evaluation/. AR System 6.3.00 already achieved Common Criteria at EAL3 a few years ago: http://www.niap-ccevs.org/cc-scheme/st/vid10101/ -David J. Easter Manager of Product Management, Remedy Platform BMC Software, Inc. The opinions, statements, and/or suggested courses of action expressed in this E-mail do not necessarily reflect those of BMC Software, Inc. My voluntary participation in this forum is not intended to convey a role as a spokesperson, liaison or public relations representative for BMC Software, Inc. From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Leihkauff, Kenneth Sent: Wednesday, January 19, 2011 12:20 PM To: arslist@ARSLIST.ORG Subject: OWASP assessment (Mid-Tier)? ** Does anyone know if Remedy Mid-Tier has been evaluated with respect to the Open Web Application Security Project (OWASP) top 10 web applications security vulnerabilities list? Thank you. The OWASP Top 10 Web Application Security Risks for 2010 are: * A1: Injection * A2: Cross-Site Scripting (XSS) * A3: Broken Authentication and Session Management * A4: Insecure Direct Object References * A5: Cross-Site Request Forgery (CSRF) * A6: Security Misconfiguration * A7: Insecure Cryptographic Storage * A8: Failure to Restrict URL Access * A9: Insufficient Transport Layer Protection * A10: Unvalidated Redirects and Forwards Ken Leihkauff North American Integrated Services Management Center (NAISMC) Science Applications International Corp. (SAIC) _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Atrium Orchestrator Opening in VA for someone with a Poly Clearance
Is there anyone interested in a Atrium Orchestrator Opening in VA. The position requires a security clearance with Poly and strong experience with automation and at least 3 years experience with Atrium Orchestrator. Kind regards, David David Frankfater Column Technical Services Toll Free 1-866-265-8665 Ext. 332 Cell 630-664-5800 Fax 630-271-1487 dfrankfa...@columnit.com www.columntech.com ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Set fields problem
Hello, First off, I'm using Remedy V6 - I know, I know =) I am opening a WEB form via a URL - in the URL is the Change ID+ from a particular change control. I have an active link that is using a set fields to populate some fields on the WEB form on window open/window loaded/display. The set fields IS getting the data from the correct Change control - the problem is that some of the fields are being populated with data from what should be mapping to other fields. I have an active link log and I can see the data being sent to the wrong fields, but it correctly mapped in the AL. For instance, Set-fields 536871283 = testbed testbed should be being populated with the association, but its being populated with the Requesters Name, 536871419, which is in the AL but not in the log. Now, if I open the WEB form as an administrator, the fields map correctly. Any help would be greatly appreciated! FieldList.Query([object Object], @, CHG:Change, 3, 2) Set-fields 536871431 = 1/1/4713 BC - (should not be displaying the BC date, just a date) Set-fields 536871078 = 1/21/2011 Set-fields 536871270 = FPI Set-fields 536871429 = test sar - please ignore Set-fields 536880913 = Set-fields 35043 = Set-fields 35042 = Set-fields 536871430 = Set-fields 536871283 = testbed testbed Set-fields 536871057 = Cindy Basile Set-fields 536871058 = Useruser Set-fields 536871055 = juser2 Set-fields 536871080 = truck driver Set-fields 536871094 = New Employee ARStateChange Complete : Current state is 1 Thank you, Cindy Basile Cindy Basile System Support Lead Financial Partners, Inc. 509-340-5480 CONFIDENTIALITY NOTICE: This e-mail transmission may contain confidential information. This information is solely for the use of the individual(s) or entity to whom or which it was intended. If not an intended recipient, any review, copying, printing, disclosure, distribution or any other use is strictly prohibited. If you have received this email in error, please immediately notify the sender by reply e-mail. Please delete this e-mail from your files if you are not the intended recipient. Thank you. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: AIE problem on new server
If the installer won't work, it doesn't matter much if they supposedly fixed lots of useful things. Anne Ramey *** E-mail correspondence to and from this address may be subject to the North Carolina Public Records Law and may be disclosed to third parties only by an authorized State Official. From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Jason Miller Sent: Wednesday, January 19, 2011 3:36 AM To: arslist@ARSLIST.ORG Subject: Re: AIE problem on new server ** Hmmm. I don't know how well installing p1 over p2 would work. It definitely doesn't sound safe. However I wouldn't be surprised if just replacing a p2 aie.exe with a p1 aie.exe (maybe this is what you were referring to, not a full install) corrects the issues we had with p2. Problem is are there other more important things that p2 aie.exe fixed? I think it is safe to install p2 and then put in a ticket for an aie.exe build that fixes these issues before you try using AIE (if you plan on using these features). Jason On Tue, Jan 18, 2011 at 7:05 PM, Ramey, Anne anne.ra...@nc.govmailto:anne.ra...@nc.gov wrote: ** Would it be safe to install AIE from the Atrium 7.6 p1 onto an Atrium 7.6 p2 system to avoid this kind of thing? Would it be worth it? Anne Ramey *** E-mail correspondence to and from this address may be subject to the North Carolina Public Records Law and may be disclosed to third parties only by an authorized State Official. From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG] On Behalf Of Jason Miller Sent: Tuesday, January 18, 2011 3:49 PM To: arslist@ARSLIST.ORGmailto:arslist@ARSLIST.ORG Subject: Re: AIE problem on new server ** Regarding Atrium Core 7.6 p2, we found a AIE few defects and have a special build of aie.exe SW00375829 - CI Class mapping functions returning errors on 7.6Patch 2 but not on 7.6patch 1. Basically we were not able to use two functions in a field mapping. For example a REPLACE nested in an UPPER. Also unsupported nested mathematical function that worked with p1 and not p2 work again with our new build. Here is an example that gets the host name of named and non-named SQL instances: {function|left($ServerName$, strstr($ServerName$,\)-1)}{ServerName} Seems odd that you cannot do a strstr -1 to find a LEFT position. I have hope that the next release of AIE will support these kind of operations :) I didn't find a SW number for the second but here is the description: We are having a problem using AIE External Data Store feature in Relationship Class Mappings. After patch 2 the SQL that was begin generated to query the external db to find relationships was malformed. HTH, Jason On Tue, Jan 18, 2011 at 12:02 PM, sphilben sphil...@mac.commailto:sphil...@mac.com wrote: ** Listers: I built a new 7.6 patch002 ARS server. Then I copied over a SQL DB from a previous 7.6 patch002 server. Everything works well except when I go to AIE. The server data in the Instances table still points to the old server. The T705 table (EIE:BackupLoadFlag) has all the data for the old server still loaded (of course) so how do I get to that table to update it to the new server? The form itself is all full of hidden fields which are not editable. I could use direct SQL but I might miss something. Is there a configuration somewhere that I am missing? Thanks. _attend WWRUG11 www.wwrug.comhttp://www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.comhttp://www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.comhttp://www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Problem Management and Tasks
I had them send me a hot-fix for this for ITSM 7.0. Perhaps they can send the same to you. Anne Ramey *** E-mail correspondence to and from this address may be subject to the North Carolina Public Records Law and may be disclosed to third parties only by an authorized State Official. From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Vianna Vianna Sent: Wednesday, January 19, 2011 11:36 AM To: arslist@ARSLIST.ORG Subject: Re: Problem Management and Tasks ** Thanks for the info! Date: Wed, 19 Jan 2011 16:25:26 + From: tboot...@objectpath.com Subject: Re: Problem Management and Tasks To: arslist@ARSLIST.ORG ** In 7.6 if there are outstanding tasks when you close the problem, it auto-closes all tasks as Closed-Cancelled. This is OOB behavior. Terry On Jan 19, 2011, Vianna Vianna vianna...@hotmail.com wrote: ** Hi All We currently have Problem Management V. 7.0.03 patch 009 Often times a Problem ticket gets closed when there are still open tasks associated with it. Unfortunately even Admins can't modify or reopen the closed Problem ticket (unless we disable the workflow enforcing this), and then that task becomes stuck in somebody's queue. Wondering why Problem Management allows the ticket to be closed if there is still an open task and if this perhaps is design flaw? Or something that just we are experiencing? Thanks! Vi _attend WWRUG11 www.wwrug.comhttp://www.wwrug.com/ ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Change Management 7.5 Table
You need to change the Qualification. It used an external qualification that you can modify to not include changes with that status. Tim -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Oliva Millonig, Patricia Sent: Tuesday, January 18, 2011 10:22 AM To: arslist@ARSLIST.ORG Subject: Change Management 7.5 Table ** Hello, I need to modify the qualification that determines what changes show up in the Change Management Console table. I want to remove all the rejected changes from the table. I am drawing a blank on how to accomplish this. Can someone help? Thanks, Tricia This e-mail, including any attachments, is a confidential business communication, and may contain information that is confidential, proprietary and/or privileged. This e-mail is intended only for the individual(s) to whom it is addressed, and may not be saved, copied, printed, disclosed or used by anyone else. If you are not the(an) intended recipient, please immediately delete this e-mail from your computer system and notify the sender. Thank you. _attend WWRUG11 www.wwrug.com ARSlist: Where the Answers Are_ ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: ARS 7.6.03 Licensing on Windows Server 2008 R2
Juan, Misi, Thanks for the input. My DBA is trying to get me a 2008 R2 db. Otherwise it will have to be on 2005. Marcelo -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Misi Mladoniczky Sent: Wednesday, January 19, 2011 3:24 AM To: arslist@ARSLIST.ORG Subject: Re: ARS 7.6.03 Licensing on Windows Server 2008 R2 Hi, I have been running 7.6.03 on Win 2008 R2 since that AR version was released. I did a clean install, not an upgrade, and then migrated my custom defs and data (using rrrchive). I am running it a virtual virtlib/qemu/kvm instance on a CentOS-host. It has worked great. Best Regards - Misi, RRR AB, http://www.rrr.se Products from RRR Scandinavia (Best R.O.I. Award at WWRUG10): * RRR|License - Not enough Remedy licenses? Save money by optimizing. * RRR|Log - Performance issues or elusive bugs? Analyze your Remedy logs. Find these products, and many free tools and utilities, at http://rrr.se. This is a bit old (but interesting) thread that I will try to revive. Juan (or anyone out there who has attempt to install on 2008 R2), how did you installation go? I am contemplating installing ARS on 2008 R2 and SQL 2008 R2 for the DB. Are the pre configured stack installer exclusively for 2008 R2? Or also for 2003/2008 64-bit Thanks all Marcelo -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Juan Ingles Sent: Monday, December 13, 2010 5:27 PM To: arslist@ARSLIST.ORG Subject: Re: ARS 7.6.03 Licensing on Windows Server 2008 R2 and the general contractor doesn't notice the extra pipes sticking out of the wall for two years. ;) Juan On Mon, Dec 13, 2010 at 2:34 PM, strauss stra...@unt.edu wrote: Yes, that's exactly it; it's always fun when Mickey changes the plumbing... Christopher Strauss, Ph.D. Call Tracking Administration Manager University of North Texas Computing IT Center http://itsm.unt.edu/ -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of Juan Ingles Sent: Monday, December 13, 2010 4:31 PM To: arslist@ARSLIST.ORG Subject: Re: ARS 7.6.03 Licensing on Windows Server 2008 R2 Chris, I ran across something that I dismissed as silly that I think might be related I am setting up a new 2008 VM to try out the new 7.6.3 stack installer. After installing the OS I copied over bginfo, a nifty MS internals utility that prints host info on the desktop. It really helps when managing multiple machines to know at a glance what machine you are connected to and basic system info like disk usage, patch level, installed memory, etc. Well, guess what it did for the network info... Instead of listing the one IP address, it listed ALL the network nodes, including the disabled ones. I got a list that looked something like: none none none 192.1.1.1 none none After some investigation, I discovered thet the values are fed by a WMI query that queries IP addresses. Previous to 2008, this query returned only the active addresses/NICs, but starting with 2008 that query now returns everything. Fixing this for bginfo turned out to be easy enough -- I created a new item and added the WMI query with a qualification that returns only active records. I noticed that my active NIC was not the first in the list, so I'm thinking that I might come across the same problem you did when I go to license the server. I will report my results when I get there. Juan ingles ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Macro not honoring the data retrival settings
hi all, I have a macro running on a form that searches for all records on the form which has more than 1000 records. now we have set the max number of records to retrieve = 1000 in the user tools option. what we see is that when we make a search call explicit on that form we get only 1000 records as per the settings but if we perform the same search via a simple search macro we get more than 1000 records in fact we get the actual number of records. can any one share any idea how to avoid this?? we are on ARS 5.0.1 and user tool is 701. Thanks, Viki -- View this message in context: http://old.nabble.com/Macro-not-honoring-the-data-retrival-settings-tp30716698p30716698.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Macro not honoring the data retrival settings
Hi, Try recording a new macro where you actually go in and change this setting to 1000 during the recording. You may have to set it to something other than 1000 before you start the recording... Best Regards - Misi, RRR AB, http://www.rrr.se Products from RRR Scandinavia (Best R.O.I. Award at WWRUG10): * RRR|License - Not enough Remedy licenses? Save money by optimizing. * RRR|Log - Performance issues or elusive bugs? Analyze your Remedy logs. Find these products, and many free tools and utilities, at http://rrr.se. hi all, I have a macro running on a form that searches for all records on the form which has more than 1000 records. now we have set the max number of records to retrieve = 1000 in the user tools option. what we see is that when we make a search call explicit on that form we get only 1000 records as per the settings but if we perform the same search via a simple search macro we get more than 1000 records in fact we get the actual number of records. can any one share any idea how to avoid this?? we are on ARS 5.0.1 and user tool is 701. Thanks, Viki -- View this message in context: http://old.nabble.com/Macro-not-honoring-the-data-retrival-settings-tp30716698p30716698.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: Macro not honoring the data retrival settings
hi Misi, it still gives me more than 1000 records.. Thanks, Vikrant Misi Mladoniczky wrote: Hi, Try recording a new macro where you actually go in and change this setting to 1000 during the recording. You may have to set it to something other than 1000 before you start the recording... Best Regards - Misi, RRR AB, http://www.rrr.se Products from RRR Scandinavia (Best R.O.I. Award at WWRUG10): * RRR|License - Not enough Remedy licenses? Save money by optimizing. * RRR|Log - Performance issues or elusive bugs? Analyze your Remedy logs. Find these products, and many free tools and utilities, at http://rrr.se. hi all, I have a macro running on a form that searches for all records on the form which has more than 1000 records. now we have set the max number of records to retrieve = 1000 in the user tools option. what we see is that when we make a search call explicit on that form we get only 1000 records as per the settings but if we perform the same search via a simple search macro we get more than 1000 records in fact we get the actual number of records. can any one share any idea how to avoid this?? we are on ARS 5.0.1 and user tool is 701. Thanks, Viki -- View this message in context: http://old.nabble.com/Macro-not-honoring-the-data-retrival-settings-tp30716698p30716698.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are -- View this message in context: http://old.nabble.com/Macro-not-honoring-the-data-retrival-settings-tp30716698p30716858.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are
Re: issue in setting up reconciliation rules..
Thanks a lot Peter.Your post really helps. I had an understanding that we can transform the recon rules according to our way to whatever depth. that was the reason, I gave relationship identification rules also, just to make sure that I dont miss on any of the data of test dataset. Peter Romain-2 wrote: Hi, What you describe is the behaviour I would expect. When a Computer CI is related to an IP CI via a weak relationship (hosted access point is weak) then the Computer and IP are treated as a composite object and not individually. The IP in the test dataset will only be reconciled against an existing IP in the production dataset if they are both related to the same computer. Try your test again using strong relationships between the computer and IP CIs and you should see the behaviour you are expecting (though you should revert to the hosted access point relationship after testing). I don't understand why you are identifying relationships. Just create identification rules for the main CI's and the relationships will take care of themselves. Cheers Peter -Original Message- From: Action Request System discussion list(ARSList) [mailto:arslist@ARSLIST.ORG] On Behalf Of rmdusr Sent: 19 January 2011 13:27 To: arslist@ARSLIST.ORG Subject: issue in setting up reconciliation rules.. Hi, Env: ARS 7.5 patch4, Atrium CMDB 7.6 patch1,ITSM 7.0.3 patch9 I will try best to explain this complex issue in simple way! I am making a custom recon job, which identifies a test dataset(containing computer system , IP Endpoint, LANendpoint, Hosted accesspoint(relationships between comp-IP comp-LAN). Idea is to update the existing CIs create the new ones. I have set 'identification rulesets' for each CI class based on AssetId ( 'AssetID' = $AssetID$) For the relationship class(hosted accesspoint), my identification rule set is ('Source Reconid' =$SourceReconid$) ('Destination Reconid' = $Destination Reconid$). Now if my test dataset has Computer System C1, it checks against Production dataset's Computer system C1, updates it. If it does not find it, it creates C1. But, this does not happen for IPEndpoint class, if CI with AssetID, say IP1 is already existing in prod dataset may be related to C2 in production dataset.When the test dataset has IP1 related to C3, C3 gets created(because it was not in prod dataset before) but a duplicate IP1 also gets created in production dataset. along with their relationship(C3---IP1), although I already have C2IP1 in the prod dataset. So, in nut shell, I have 2 instances of same Asset id IP1(ofcourse they have different recon ids), 1 linked to computer C2 other to computer C3. The same thing happens for LANEndpoint class. I am aware of the cardinality of hostedaccesspoint is 1-Many. So, 1 Comp CI can have multiple IPEndpoints, but not vice versa. So, holding this standard architecture rule, I expect that recon job should create only new IP CIs, not duplicates. talking bout relationship CIs, then if it encounters an IP1 which is already related to a Computer C2, it should not create a second relationship C3---IP1. Any help! -- View this message in context: http://ars-action-request-system.1093659.n2.nabble.com/issue-in-setting-up-r econciliation-rules-tp5939613p5939613.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are -- View this message in context: http://old.nabble.com/issue-in-setting-up-reconciliation-rules..-tp30709825p30716897.html Sent from the ARS (Action Request System) mailing list archive at Nabble.com. ___ UNSUBSCRIBE or access ARSlist Archives at www.arslist.org attend wwrug11 www.wwrug.com ARSList: Where the Answers Are