Customer Support Support Issues Library

Options Cache / ODBC DSN Configuration improves in SEM Version 2.2

Component: SEM:

Link to Gemini issue 116 removed.

Date: 9-Apr-2007

Resolved in SEM Build: TBD

Configuration of SEM for user & workstation access to SAcM Options Cache files & System DSN access to databases is significantly improved in SEM Version 2.2. From this version onwards all access to these objects will be conducted via the Authorization server process and therefore individual workstations and user accounts for SEM users do not need to be configured.

SEM Version 2.2 is due to be released for evaluation in September 2007.

Click the "Gemini Report" link above for more details.

Unattended Windows Install - ability to choose Agent Account

Component: SEM:

Link to Gemini issue 111 removed.

Date: 17-Apr-2007

Resolved in SEM Build: 3376

The Sysgem Enterprise Manager (Agent Only) Install Wizard now allows the account where the service starts to be defined to something other than a local account (during Unattended Install).

Click the "Gemini Report" link above for more details.

Can I control the range of UNIX UIDs and VMS UIC allocated?

Component: SAcM:

Issue:

We would like our uid's to be allocated in the range 10000 and 51999 when applying the "Unique UID" button in SAcM Multi-Platform Create and UNIX Create.

Is this possible?

Answer:

Change the value of "Unique Algorithm Range - UNIX UID Begin" and "Unique Algorithm Range - UNIX UID End".

Restart your SEM session (or ask the SEM user to do so) and then you will see that the "Unique UID" algorithms work within the designated range.

SAcM has an options cache and keeps a list of all UIDs allocated on all machines it has ever connected to. It uses this options cache to resolve the next UID to allocate. For it work well when there are multiple SEM users creating accounts - you should also be using the "central options cache" so that any new accounts created by any SEM user will update the options cache for all SEM users.

It is the same principal for allocating a "central options cache" to a SEM user - it is controlled by the SAcM Access Control Token "SAcM File Specifications".

View a List of displays being run in an Unattended Mode Session

Component: SEM:

Link to Gemini issue 107 removed.

Date: 26-Jun-2007

Resolved in SEM Build: 3411

A List of displays that are being run by the SEM Unattended Mode session can now be viewed with a new menu option: "Tools" > "Monitor Unattended Mode".

Click the "Gemini Report" link above for more details.

Option to preserve customer-added columns

Component: SEM:

Link to Gemini issue 104 removed.

Date: 26-Jun-2007

Resolved in SEM Build: 3389

A new flag (Preserve) has been added to each column in the development editor. When checked, the definition is saved across a module import.

Click the "Gemini Report" link above for more details.

Ability to schedule display refreshes

Component: SEM:

Link to Gemini issue 95 removed.

Date: 26-Jun-2007

Resolved in SEM Build: 3326

SEM display windows now have the ability to be refreshed at a particular calendar time, rather than after a specific elapsed period, so for instance a window can be scheduled to refresh at 02:00 every morning.

Click the "Gemini Report" link above for more details.

SAcM Enterprise Accounts - "VMS, Update Any Field" has been enhanced.

Component: SAcM:

Link to Gemini issue 105 removed.

Date: 17-May-2007

Resolved in SAcM Build: 28-Jun-2007

VMS option "Update Any Field" on Enterprise Accounts had the following problems:

there was no option for "/noexpiration" qualifier
/pwdexpired should not have had a value associated, but SAcM put an "=" after the qualifier
there was no option for "/nopwdexpired"
there was no "/nopwdlifetime" option

These problems have been resolved.

Click the "Gemini Report" link above for more details.

Subscriber Reconcile Automatically removes pointers to non-existent account

Component: SAcM:

Link to Gemini issue 90 removed.

Date: 26-Jun-2007

Resolved in SAcM Build: 26-Jun-2007

The Subscriber Reconcile scripts have the ability to automatically add missing account pointers to the Subscriber DB. The requirement was for the same automated process to be able to remove account pointers when the account have been deleted manually (but still to report on the fact that those subscribers had those pointers).

Click the "Gemini Report" link above for more details.

Permit Duplicate UICs during VMS Account Create

Component: SAcM:

Link to Gemini issue 106 removed.

Date: 27-Jun-2007

Resolved in SAcM Build: 27-Jun-2007

If the symbol "Custom_Allow_Duplicate_UIC" is defined with a value in the customer include files, e.g.:

    @{{CUSTOM_CODE_START(Create-02-Script-VMS)
    $   Custom_Allow_Duplicate_UIC = 1
    @}}CUSTOM_CODE_START(Create-02-Script-VMS)

and...

    @{{CUSTOM_CODE_START(Create-Multi-Platform-15-Script-VMS)
    $   Custom_Allow_Duplicate_UIC = 1
    @}}CUSTOM_CODE_START(Create-Multi-Platform-15-Script-VMS)

... then the script will allow duplicate UIC in both the Multi-Platform Create and the VMS Create options.

Click the "Gemini Report" link above for more details.

VMS - Delete Intrusion Record

Component: SAcM:

Link to Gemini issue 101 removed.

Date: 27-Jun-2007

Resolved in SAcM Build: 27-Jun-2007

A problem was found in the Post procesing script of the main window for displaying VMS Intrusion records.

The parsed date did not allow days of a single digit, i.e. did not allow 1-9.

Consequently, expiration dates with a single day field would corrupt the Intrusion "Source" field to be as in the following example:

Incorrect:

Expiration ..: 16-APR-2007
Source ......: 15:31:48.67 123.hp-interex.ch::TELNET_C2BF137B

Correct:

Expiration ..: 16-APR-2007 15:31:48.67
Source ......: 123.hp-interex.ch::TELNET_C2BF137B

This problem has been resolved.

Click the "Gemini Report" link above for more details.

"Login Command File" field added to Multi-Platform Create

Component: SAcM:

Link to Gemini issue 100 removed.

Date: 9-April-2007

Resolved in SAcM Build: 16-Apr-2007

An additional field has been added to the Create Multi-Platform input form with a code of "CF" to be compatible with the VMS Create and Modify forms. Code previously only present in the VMS Create script to handle this field has now also been added to the Create Multi-Platform form.

Click the "Gemini Report" link above for more details.

Setting UNIX Passwords containing a "$"

Component: SAcM:

Link to Gemini issue 98 removed.

Date: 27-Mar-2007

Resolved in SAcM Build: 16-Apr-2007

In previous versions of SAcM the "$" was not permitted to be set in UNIX passwords. This has now been corrected. The following Enterprise Accounts menu options have been modified: UNIX Create; Multi-Platform Create; Modify; Set Password;

Click the "Gemini Report" link above for more details.

Subscriber Reconcile now "Steps-over" unavailable Agents

Component: SAcM:

Link to Gemini issue 96 removed.

Date: 9-Mar-2007

Resolved in SAcM Build: 12-Mar-2007

In previous versions of the Subscriber Reconcile, if a SEM Agent was unavailable then the reconcile process would not complete. In this release any unavailable Agents are "stepped-over" and the reconcile process completes without those agents being reconciled.

Click the "Gemini Report" link above for more details.

Does the SEM Installation Write ANY Files Into \WINNT\ ?

Issue:

Does the SEM installation write ANY files into \WINNT.

Answer:

No

SEM has it's own directory under...

\Program Files\

...it writes nothing into \WINNT\...

except under...

\WINNT\Profiles\\Application Data\ and...

\WINNT\Profiles\\Personal\...

it also copies Perl libraries (prefixed with "Sysgem") and Perl .dll files (prefixed with Sysgem) in the Perl lower level directories such as \Perl\bin\ and in \Perl\site\lib\auto\sysgem\.

Problem Deleting Subscriber Records with Accented Characters in Fullname

Component: SAcM:

Link to Gemini issue 93 removed.

Date: 12-Mar-2007

Resolved in SAcM Build: 12-Mar-2007

There was a problem when trying to delete a Subscriber record when an international accented character was present in the Subscriber's Fullname. This problem has now been resolved.

SEM Installation on HP UNIX - Security Key

Issue:

The DEC and Solaris UNIX agents are installed and working fine, but with HP the system manager couldn't see a way of configuring the security key. Are there any instructions on this?

Answer:

Have a look at section 6.3.4.1 of the installation guide - the key has to be set manually after the installation on HP with the following...

/usr/lbin/SYSGEM/Monitor/SSMSystemServer -k FortKnox

(where "FortKnox" is the case-sensitive key you have chosen for your installation. It should be uniquely chosen - rather like a password - by you during the installation).

In a simple case, the same key needs to be registered with all the Agents and also with the central SEM Authorization Server.

There can, however, be up to 10 optional keys registered with Agents and the Authorization Server. You may, for instance, have some agents with one key and other agents with another. In this case you would need to register both keys with the Authorization Server.

You may also have a second or more Authorization Server which 'share' some agents and have exclusive access to others. In this case you may want to register 2 or more keys with the shared agents, each agent would then need to have at least one key in common with the keys registered at an Authorization Server in order for the SEM users at that Authorization Server to gain access to those agents.

To register second and subsequent keys with an agent use the syntax shown above, but instead of "-k" use "-kN" where "N" is a number in the range 0-9.(e.g. -k1 or -k2).

A GUI installation may also have keys registered. If this is the case, then the keys registered with the GUI are used instead of the ones registered with the Authorization Server.

Click the "Gemini Report" link above for more details.

Products

Versatile, powerful IT management tools for monitoring and managing systems, administering user accounts and auditing security.
Sysgem Enterprise Manager
Sysgem Account Manager
Sysgem System Manager
Sysgem Development Manager
Sysgem VMS Monitor
Password Synchronizer
Password Policy Enforcer
Self-Service Password Reset
Logfile Concentrator

SysGem is a trademark of Sysgem AG. Other brands and products are registered trademarks of their respective holder/s.
© 2010 Sysgem AG, Lavaterstrasse 45, 8002 Zürich, Switzerland; +41 (0)44 204 60 23. All rights reserved.
Websolution by www.scofiej.co.uk