nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

obtain superuser session without password

anujgarg

Hi All,

i need to create a superuser session in a component class.

The current approach i am following is by hardcoding the superuser credentials in my code.

however this is working fine but i dont want the password to be hardcoded anywhere.

I don't want to place my superuser password in the properties file also.

since this is a component class so i cannot assume the session from my method server .

Is there any way by which i can obtan the Super user session without passing the super user password.

Please help me with this.

Thanks in advance,

Anuj Garg

Find more posts tagged with

Note:

If there are Accepted Answers, those will be shown by default. You can switch to 'All Replies' by selecting the tab below.

Button

Accepted answers

sivarry

Hi Anuj Garg,

Try this,

IDfList argList = new DfList();
IDfList typeList = new DfList();
IDfList valueList = new DfList();
argList.appendString("METHOD");
typeList.appendString("S");
valueList.appendString("CUSTOM_METHOD_NAME");
argList.appendString("ARGUMENTS");
typeList.appendString("S");
valueList.appendString("-arg1 value1 -arg2 value2 -method_trace_level 10");
argList.appendString("RUN_AS_SERVER");
typeList.appendString("B");
valueList.appendString("T");
argList.appendString("SAVE_RESULTS");
typeList.appendString("B");
valueList.appendString("F");

IDfCollection results = getSession().apply(null, "DO_METHOD", argList, typeList, valueList);

//Check the results here
if (results.next()) {
  int res = results.getInt("result");
}

-Siva

All comments

msroth

You can encrypt the password in the properties file using dm_encrypt_password (see D6.5 Admin Guide, page 354). This is the same approach the DFC uses for the dm_bof_registry user. This approach ensures security of the password and the flexibility of changing it without requiring a recompile of your component.

mszurap

You can obtain superuser session without password with "trusted login" in case your application (or application server) runs in the name of installation owner for example (it is superuser with os authentication) AND you have enabled trusted login in dfc.properties. You can find more details in "Content Server Administrator's guide".

Note that this is insecure, as anyone can access the repository, you cannot validate the user's credetials.

Atom

Why you need superuser session in component ?

DCTM_Guru

Similar to what Miklos has suggested, you can write a server method and have your component call the server method using IDfSession.apply(). If you configure the server method to "Run As Server", the method will execute the code using superuser session.

anujgarg

Hi Johny,

Thnanks a lot fr the response.

Can you please provide me any sample code for the same .

sivarry

Hi,

Check this sample,

https://developer.emc.com/developer/UnlockZipInfo.htm?sURL=/developer/downloads/WF_PromoteLifecycle.zip

Refer the section "Creating a method to be executed by the Java method server" in Content Server Admistration guide for step by step instructions

-Siva

anujgarg

Hi Siva,

Thanks for the sample code.

Could you please let me know how to call this sample method by the IDfSession.apply().mentioned above by Johny.

from the component class .

Thanks ,

Anuj garg

sivarry

Hi Anuj Garg,

Try this,

IDfList argList = new DfList();
IDfList typeList = new DfList();
IDfList valueList = new DfList();
argList.appendString("METHOD");
typeList.appendString("S");
valueList.appendString("CUSTOM_METHOD_NAME");
argList.appendString("ARGUMENTS");
typeList.appendString("S");
valueList.appendString("-arg1 value1 -arg2 value2 -method_trace_level 10");
argList.appendString("RUN_AS_SERVER");
typeList.appendString("B");
valueList.appendString("T");
argList.appendString("SAVE_RESULTS");
typeList.appendString("B");
valueList.appendString("F");

IDfCollection results = getSession().apply(null, "DO_METHOD", argList, typeList, valueList);

//Check the results here
if (results.next()) {
  int res = results.getInt("result");
}

-Siva

anujgarg

hi siva,

Thanks a lot fr the quick response.

i will revert back and mark the answer as correct as soon i am able to test the implement the code.

Thanks a lot again