kibana dashboard limit user access? without xpack - kibana

I'm using ELK stack 7.4 OSS (open source) version.I have already created a dashboard and i want to give 'read only permission' to dashboard to user. But the xpack role creation wasn't working with OSS(Open source) version. Is there and alternative you can suggest?

To get user management access in Kibana/Elastic you need to move to xpack based version of the software. In OSS you will not get those features.
Role based access is enabled in the Basic version which is also free.
https://www.elastic.co/subscriptions
You can move to Basic version of the ELK and try out the role based access.

Related

How to create about 60 users with installation power in remote linux webserver?

We are about 60 students in our class. Our course teacher provide a remote pc that have public IP. He suggested us to host our web projects on that machine. So, we have to need about 60 user on that machine so that each one can able to access his/her data, modify, remove, install new software etc.
That also be possible making a admin. So that admin can install any software. But problem is when admin have to manage all users requests to installing new software it is burden for admin because man have different choice.
So, we want to make about user so that each user can customize his/her environment easily.
Please give me the idea and solution on this situation.
I will add the system configuration of the machine after knowing from my teacher. As far I know the RAM is 64GB.
Admin user is always present in every Linux installation - that will be your teacher. To add a user, use adduser command: https://www.debian.org/doc/manuals/debian-handbook/sect.creating-accounts.en.html
To connect, following link may be helpful: https://openvpn.net/index.php/access-server/docs/admin-guides/182-how-to-connect-to-access-server-with-linux-clients.html
There should not be any problem in creating web projects on your own machine and them hosting them on the central server.
On Linux desktops, one needs to provide superuser (admin) password to install and remove applications to the system (see https://www.wikihow.com/Install-Software-in-Debian-Linux ). However, one can manually install and run portable applications from one's own home directory (e.g. /home/user_a ).
For portable Linux applications see: https://www.maketecheasier.com/portable-apps-for-linux/ and https://appimage.org/ . They can be installed and run without need for admin privileges.
ISPconfig ( https://www.ispconfig.org/ ) looks good but I do not have any experience with it. Other similar tools may also be of interest to you: https://en.wikipedia.org/wiki/Comparison_of_web_hosting_control_panels

Build Kaa from source code - missing panels from Admin UI

I have built a Kaa server from the source code using the guide at the following link. After which, I followed the guide at the following link to install the Kaa node service.
I am deploying the build on Ubuntu 16.04 and using MariaDB and MongoDB as the SQL and NoSQL databases respectively. I followed every step from both the guides and the server starts successfully.
I am able to navigate to the Kaa admin page using the link http://YOUR_SERVER_HOST:8080/kaaAdmin, and have created an admin user as well.
However, when I log in, I don't see all the panels. I only see the following panels.
I don't see the user, tenant or the application management panels. The tenant section only allows me to add a new tenant where I can only enter the tenant name and nothing else.
Is there additional step to be performed to enable the other panels? I am not sure what I am missing.
Any help is appreciated.

box_auth() without localhost

I'm trying to use the boxr package to link my box account to R-Server.
I get as far in the box_auth() instructions as step 3 from the box pdf https://cran.r-project.org/web/packages/boxr/boxr.pdf
A window pops up and I authorise connection then I get the error 'Safari can't connect to the server'.
I have no knowledge of how apache or web development works so forgive my naivety, I've come to understand the problem is I don't have localhost set up on my Mac.
I'm unable to turn these features on because it requires admin rights and my company won't allow users to have this.
Is there something else I can put in the redirect_uri box apart from localhost that will allow this to authenticate?
Thanks
The issue i had was mostly that authenticating box through R-Server isn't supported. https://github.com/brendan-r/boxr/issues/23
To get around this I used my personal laptop to authenticate locally then uploaded the .Renviron and .boxr-oauth files to R server (which is the advice in the github post)
This was slightly tricky as R wasn't showing the .boxr-oauth file but I managed to copy it to a folder, zip the folder, then upload that to R-Server.
Now running the box_auth() function authenticates as it should.
As of v0.3.5 (November 2019) boxr has a new alternative authentication method designed for remote servers, box_auth_service(), that closes issue 23. It's slightly is different than the oAuth way, because it uses "Service" accounts as the actors instead of the "User" account. But the "Service" accounts are what's needed to maintain security within a organization, so we opted for that. Please open an issue on the repo if you run into any issues.

I am using Alfresco 5.0.d Community Edition and mysql as database. I am creating user through Admin Tools -> Users -> Create User

I am using Alfresco 5.0.d Community Edition and mysql as database. I am creating user through Admin Tools -> Users -> Create User. But when I am trying to invite these users, they are not searchable. They are also not searchable in People section but they are searchable in Admin Tools -> Users.
No error is coming in server logs.
I have even deleted previous indexing and created new indexing many times.
Any help would be appreciated.
Thanks
You can try by changing a property in alfresco-global.propeties file
### Solr indexing ###
index.subsystem.name=solr4
to
### Solr indexing ###
index.subsystem.name=solr
This issue is related with indexing.

InstallShield 2010 with license - no license for automatic build system (CI) as Windows service

I really need help here.
We are using CI build-process (Hudson) as an automated build system using Msbuild.
The CI run in Apache Tomcat 6 that run under the credentials of a domain user (not a local Windows user ).
Every time the CI try to build an InstallShield project (using isproj files) we get a license error message:
" C:\Program Files\MSBuild\InstallShield\2010\InstallShield.targets(62,3): error : -7159: The product license has expired or has not yet been initialized. You must launch the IDE to configure the product license in order to proceed.
C:\Program Files\MSBuild\InstallShield\2010\InstallShield.targets(62,3): error : Exception Caught".
If I log in to the same machine with the same domain user credentials and build the InstallShield project there is a license and it is working well.
Adding the user to the local Users group doesn't help (no license).
Adding the user to the local Administrators group helps and it is working.
We do not want the user to be in the local Administrators group - for various reasons.
What do I need to do to make it work?
Do I need to add permissions to the use?
Help will be highly appreciated.
Gilad
Is your build calling isSaBld.exe or isCmdBld.exe? InstallShield changed their policy in 2010 so that the standalone build functionality (isSaBld) is only available with a top-tier license. In previous versions it was usable in Pro too. Maybe this has something to do with it?
We have a similar build system - Hudson in tomcat 6, IS2010, but with Ant scripts - and calling IsCmdBld.exe is working for us.
If you are using Hudson as a service, try running the service as an administrator. But you need to make sure the administrator succees to build the project from the InstallShield IDE first.
We do not want the user to be in the local Administrators group
To my knowledge there is no way around this requirement. InstallShield's product licensing runs low-level system checks that require that the running user be in the Administrators group to succeed. That's why when you start the InstallShield IDE the UAC prompt appears. That way they can verify that the license they granted you hasn't been moved to a different machine. Without being privy to exactly how they do this, imagine e.g. direct disk sector access, CPU serial number reads, hard drive firmware access, etc. You just can't do those things without Admin rights.
However to ensure that every build can be reproduced, a build machine should be sacrosanct, and access to it should only be granted to trusted build users. It's standard for them to be Administrators on the build machine.
Can you give more details about why you need to keep the user from being an Administrator? That would enable us to give you better input.

Resources