Re: ITSM 7.6.04 SIT:Site related filter SIT:STE:ChkStatusRuleRead_105... [[UPDATE]]

[Joe D'Souza]

Just an FYI for those interested.

 

BMC Software has created a SW bug defect for this which will be applied to a
later release / patch of either supported versions that would require this
fix.

 

The SW bug ID is SW00477529.

 

Cheers

 

Joe

 

  _  

From: Joe D'Souza [mailto:jdso...@shyle.net] 
Sent: Thursday, October 16, 2014 2:53 PM
To: ARS Discussion List
Subject: RE: ITSM 7.6.04 SIT:Site related filter
SIT:STE:ChkStatusRuleRead_105...

 

Just got a response from BMC as well stating the exact same thing that it is
so on version 8.x too and that it might be a bug.

 

Joe

 

  _  

From: Action Request System discussion list(ARSList)
[mailto:arslist@ARSLIST.ORG] On Behalf Of Thad Esser
Sent: Thursday, October 16, 2014 2:33 PM
To: arslist@ARSLIST.ORG
Subject: Re: ITSM 7.6.04 SIT:Site related filter
SIT:STE:ChkStatusRuleRead_105...

 

** 

Joe,

 

I just checked our 8.1 no patch system, and it says "CTM:Site" still.  I
hadn't noticed it before.

 

Thad

 

On Thu, Oct 16, 2014 at 10:52 AM, Joe D'Souza  wrote:

** 

I was wondering if anyone else had noticed this and brought this up with BMC
Software. It looks like a bug with a filter named
SIT:STE:ChkStatusRuleRead_105 that has two Set Fields action.

 

The first Set Field action is fine and is looking for the existing Status
integer and character value and setting them to the respective temp fields.

 

The second Set Field action has a weird qualification. It is looking up the
SYS:Status Transition LookUp form which is a join form and is using the
qualification:

 

('Form Name' = "CTM:Site") AND ('System Role' = $z1D System Role$) AND ('To
Status Int' = $Status$) AND ('From Status Int' = $z1D Integer01$) AND
('Status' = "Enabled")

 

Because the form name sounded weird (CTM:Site and there is no such form on
the server) I looked up the SYS:Status Transition LookUp join to see if
there are any matching requests for CTM:Site and found none there either.
There are 50 matching requests for SIT:Site.

 

So basically it means that with no matches found for CTM:Site, this Set
Field action will ALWAYS set z1D Char01 to null. I think it might be a bug
(typo while developing that filter). I accidentally found it when looking
through OTB workflow since I was troubleshooting another unrelated issue on
some customization we are working on.

 

The qualification should have been:

 

('Form Name' = "SIT:Site") AND ('System Role' = $z1D System Role$) AND ('To
Status Int' = $Status$) AND ('From Status Int' = $z1D Integer01$) AND
('Status' = "Enabled")

 

Its impact would be that the Status field value would be set to whatever
value the user selects irrespective of the results of a check for if the
user belongs to Contact Location Admin or General Access.

 

Has anyone noticed this and raised it to BMC Support and is there a hot fix
available for this? I have just raised a ticket with BMC Support a couple of
hours ago and yet to hear back from them.

 

Cheers

 

Joe

_ARSlist: "Where the Answers Are" and have been for 20 years_ 

 

_ARSlist: "Where the Answers Are" and have been for 20 years_ 


___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
"Where the Answers Are, and have been for 20 years"

Atrium Integrator and AROutput plugin

[Janie Sprenger]

Has anyone worked with the AROutput plugin in Pentaho spoon/AI to know if
the plugin will separate Transformation Run Detail results between Records
Created and Records Updated when the output either creates or updates
records in the DB?

What I am observing is that the output is recording everything as 'Record
Created' even when the Step is set to update matching IDs and is actually
doing so.

Wondering if others are seeing the same or have been able to configure
something that allows for the differentiation in Run Details.

ARS/Atrium Core/AI 8.1


Thanks,
Janie

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
"Where the Answers Are, and have been for 20 years"

Re: Demo Login Name has been Changed (finding who is connecting as Demo)

[Mueller, Doug]

Claire,

There are a couple of things you can do to isolate who is connecting.


1)  API log includes the "client type".  This will tell you (for well 
behaved clients) what type of client it is.
if it is 0, you have a client that has chosen not to identify themselves (rude 
behavior).


2)  API log includes the IP Address of where the communication comes from.  
So, you should be able to
take that and tell where things are from.  Note that the IP address for things 
like the mid-tier are
the mid-tier machine,  but the client type does tell that it is mid-tier and 
that is not the type of thing
you are trying to track down here.

But, hopefully between the client type and the IP address, you can tell where 
things come from.

Now, the User log tells you user connect attempts and bad password.  So, you 
may want User and API logging
on and direct to the same file then you can find the failed password stuff and 
the API call that includes the
user using the call is right next to it and then you can find out where it is 
from….

Good luck isolating your errant connections,

Doug Mueller

From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of Sanford, Claire
Sent: Tuesday, November 04, 2014 10:36 AM
To: arslist@ARSLIST.ORG
Subject: Re: Demo Login Name has been Changed

**
Sort of along the same lines…

At some point one of the consultants that graced us with their presence used 
Demo to install something.  At some point afterwards, we actually gave Demo a 
password.

We see a lot of “Demo” failed logins now.  How do I determine what used Demo 
without a password so that I can correct it…

From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of Ken Pritchard
Sent: Tuesday, November 04, 2014 10:53 AM
To: arslist@ARSLIST.ORG
Subject: Re: Demo Login Name has been Changed

**
Didn’t sound like this was a person’s, well, person record – was just the login.

I think the bigger issue you’ll encounter is if/when you switch the login ID 
anything that currently runs with this ID may break.  If you have a handle on 
anything that is running under this ID and can change it to whatever login ID 
you use, then you can basically change it to whatever you want it to be.

From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of Rick Westbrock
Sent: Tuesday, November 4, 2014 10:41 AM
To: arslist@ARSLIST.ORG
Subject: Re: Demo Login Name has been Changed

**
Two other reasons to not use an individual’s login:


1.   When the person leaves the company or transfers to another 
department/division their account either be locked or permissions changes which 
would break your install.

2.   Security audits. In many cases if someone has left the company leaving 
their accounts active is a violation (which leads back to #1 in a way).

Service accounts are definitely the way to go as mentioned by others. They will 
usually have different security policies, not be subject the same periodic 
password change requirements as individual accounts etc.


-Rick

From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of Rick Cook
Sent: Tuesday, November 04, 2014 6:20 AM
To: arslist@ARSLIST.ORG
Subject: Re: Demo Login Name has been Changed

**
I'm with Ken.  First thing I do is set up Service Accounts that aren't subject 
to people leaving, or passwords that expire, etc.  Use them for system 
functions.  I keep Demo (with a pw) as kind of a back door in for the 
Administrators.

Rick Cook

On Tue, Nov 4, 2014 at 6:17 AM, Ken Pritchard 
mailto:pri...@ptd.net>> wrote:
**
Not everyone gets overly concerned about ‘security’ when it comes to the Demo 
password in a Remedy environment.  I personally don’t think it should be a 
personal login – so even if you don’t want it to be Demo (which I’ve always 
found a bit hokey anyway) I would make it a system acct / login.

From: Action Request System discussion list(ARSList) 
[mailto:arslist@ARSLIST.ORG] On Behalf Of LJ 
LongWing
Sent: Tuesday, November 4, 2014 9:15 AM
To: arslist@ARSLIST.ORG
Subject: Re: Demo Login Name has been Changed

**
Sandra,
Personally, I think it's a security risk to leave a 'Demo' account in place, 
even if you set the password.  So, noI don't personally think you should 
put it back.

On Tue, Nov 4, 2014 at 7:08 AM, Hennigan, Sandra, CTR, DSS 
mailto:sandra.hennigan@dss.mil>> wrote:
**
All,

I have inherited an 8.1.01 new install, just about ready for UAT.

The previous administrator renamed the "Demo user for startup" with her 
personal login name. This was recently discovered during troubleshooting when 
some of the integrations stopped working. Specifically, “Demo” was the user 
entry in a couple of the Configuration files. To resolve the issues with 
integration

Re: ARS Remedy to MySQL

[Jason Miller]

We also have a few instances where we  cache the remote data and sync it a
few times a day.

A specific example that comes to mind is HR department/cost center data. We
have a form where people can choose from a menu of cost centers or HR
departments. The menus use to pull data across the db link via View Form.
It was too slow to use in a customer facing UI though. We found we could
truncate and recache a few complete remote tables in the same time it took
for the user to open the menu once. If they selected an option and then
changed their mind they would wait again (although it would be a bit
faster).

The othere benefit is our Remedy process still works if the HR db is down.

Jason
On Nov 4, 2014 7:44 AM, "Grooms, Frederick W" 
wrote:

> **
>
> Question … do you need the data with real-time updates?
>
>
>
> We have a couple of tables used for querying against that are refreshed
> once a day (using a Perl Script to pull the remote database and insert into
> a table in our Oracle).  We then have a View Form in ARS to use the data
> in our system.
>
>
>
> Fred
>
>
>
>
>
> *From:* Action Request System discussion list(ARSList) [mailto:
> arslist@ARSLIST.ORG] *On Behalf Of *Wesley Reyes
> *Sent:* Monday, November 03, 2014 8:24 PM
> *To:* arslist@ARSLIST.ORG
> *Subject:* ARS Remedy to MySQL
>
>
>
> **
>
> Hi would anyone have an idea how can I connect my Remedy ARS to mysql db?
> As of current we need a record from the mysql db but our ARS Remedy DB is
> in Oracle.
>
>
>
> Thanks :)
>
>
>
>
>  _ARSlist: "Where the Answers Are" and have been for 20 years_

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
"Where the Answers Are, and have been for 20 years"

Re: Atrium Integrator and AROutput plugin

[Jean-Louis Halleux]

Hello Janie,

The AROutput plugin behaves exactly as the old Remedy Import Tool. It does a 
Merge action, which either creates or updates data. If you select the “Matching 
Request ID” option (which is done by default I guess), you must map the Request 
ID field in the output mapping. If you provide your own qualification to match 
the inserted data to the existing one, you are not obliged to do so. 
Be aware that when you import data in a join form (like the 
BMC.CORE:BMC_ComputerSystem form), you must map the Request ID (I have spent 
some hours trying to find why my mapping did not work, and my conclusion was 
that inserting data in a join only work when matching request ID).

Best regards,

Jean-Louis Halleux
supp...@arsmarts.com
Looking for a way to understand your ARS worklfow ? Go to 
http://mailtrack.me/tracking/raWzMz50paMkCGR1BGZjAGZ4ZmVzMKWjqzA2pzSaqaR9ZGRjZmpmAGt2Way2LKu2pG0mZGVkZmx4AGRjBt

On 05 Nov 2014, at 19:41, Janie Sprenger  wrote:

> **
> Has anyone worked with the AROutput plugin in Pentaho spoon/AI to know if the 
> plugin will separate Transformation Run Detail results between Records 
> Created and Records Updated when the output either creates or updates records 
> in the DB?
>  
> What I am observing is that the output is recording everything as 'Record 
> Created' even when the Step is set to update matching IDs and is actually 
> doing so.
>  
> Wondering if others are seeing the same or have been able to configure 
> something that allows for the differentiation in Run Details.
>  
> ARS/Atrium Core/AI 8.1
>  
>  
> Thanks, 
> Janie
> _ARSlist: "Where the Answers Are" and have been for 20 years_

___
UNSUBSCRIBE or access ARSlist Archives at www.arslist.org
"Where the Answers Are, and have been for 20 years"