Security

We get the error "Can't connect to HTTPS URL because the SSL module is not available." when running a workspace on FME Server but the same workspace run from FME Desktop is okay. FME Desktop 2020.2.1.0 (20201130 - Build 20806 - WIN64)FME Server 2020.2 Build 20787 - win64 ```2021-1-26 19:19:35 | ArcGIS Feature Service Reader: Requesting metadata for Feature Service at 'http://mapservices.gov.yk.ca/arcgis/rest/services/GeoYukon/GY_Biophysical/MapServer'2021-1-26 19:19:48 | ArcGIS Feature Service Reader: Could not connect to server. Check that you are connected to the internet and that no firewall is blocking outbound connections. The error was 'HTTPSConnectionPool(host='mapservices.gov.yk.ca', port=443): Max retries exceeded with url: /arcgis/rest/services/GeoYukon/GY_Biophysical/MapServer?f=json (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available."))' ```Digging around on Stack Overflow and similar s

I have a customer that 4-5 times a year need to run an fme workspace on an offline computer. This computer can not be connected to any network at all.They have floating licenses and now would like to borrow a license without connecting to client to the license server.Is this possible?

Hi, I followed this guide: Sending email, Part 1: Setting up a topic and an email subscriber (safe.com) And we know our port is 25. I followed the guides and troubleshooting, turned the Allow Less Secure apps ON in gmail as well. But still I get stuck on the Creating the email subscription step, the validate gets this error:SSL error occurred. Ensure connection security and port are correct. Unrecognized SSL message, plaintext connection? I am on company server via VPN so I cannot access the services.msc or make changes to the firewall. Any idea if I entered something wrong? 

Hello, I'm curious if there are any potential security issues with a data download application via the result download link. How long do these download links last? Can they be scraped by bad actors? It seems even with an authenticated application the results URL is still publicly accessible in this format: https://[servername]/fmedatadownload/results/FME_[A-Z0-9staticstring]_[0-9string(datestamp perhaps?)]_[0-9]*4.zipIs this already an encoded token? Thanks!

We cannot access an FME Desktop floating license from a remote computer. The remote computer locates the license server and requests a license, but the license server returns the error message, "FME floating license system failure: no SERVER lines in license file(-13)". Accessing FME Desktop on the license server itself is successful, however, and the license file appears to be correct (safe.lic in the C:\\FlexServer folder). Unfortunately, the FlexNET documentation does not provide a solution or troubleshooting options to the error message.

I am using the Directory and File Pathnames reader and I receive the warning. No files found in folder '____' using glob pattern '**/*' with glob filter 'ANY'. No features will be read.However, there are clearly folders in this location   To ensure it wasn't security issues, I tested the Adobe Geospatial PDF reader to read a PDF within the folder and it can read the contents perfectly. Does anyone have any idea why I can't read any directories or pathnames?  

I have 3 different servers for development, testing, and production. What is the best way to duplicate user accounts across all 3 servers?

Hello,I upgraded FME Server from 2019.2 to 2020.0, and restored the configuration by importing the backup file which has been downloaded before uninstalling the previous version.Some of existing workspaces are run via API (request from a web page) and access a PostgreSQL database to read features with a FeatureReader, execute a SQL query with a SQLExecutor and so on.What I observed is, after upgrading to 2020.0, the workspaces failed to access the PostgreSQL database and logged this error message.FME Server error: `FME Server error: `Unauthorized request by user due to lack of proper permissions.'I was able to resolve the failure by manually adding access permission for the database connection to the API token, but it's a bit troublesome if you need to check and fix permissions of every Token whenever upgrading FME Server.I upgraded the FME Server several times before (FME 2019.0 -> 2019.1 -> 2019.2), but I didn't need to modify permissions of the API token.Is it an i

Hello, I was looking into FME Server when I noticed that there was a vulnerability listed for the software. It can be found here: https://nvd.nist.gov/vuln/detail/CVE-2018-20402  Has this been acknowledged?

Hi all,  I have noticed every few hours the token on my topics webhook keeps changing, which causes the webhook to no longer fire. I have tried to set the token to one i have generated in the account that lasts for several years, but this still does not work. Any ideas on how to resolve this? 

Hi,Managing Tokens has changed in FME Server 2019 vs 2018 and I noticed the url for generating a Token with an expiration of 3 days without an update does not deliver the same token in 2019 in contrast to version 2018.The url used has the format:https://<fmeserver>/fmetoken/generate.json?user={{FMEUSER}}&password={{FMEPW}}&expiration=3&timeunit=day&update=falseand creates a new token (with a new 3 days expiration) every time in FME Server 2019 in contrast to 2018 where is returns the same token within the expiration period.I’ve searched for some kind of equivalent url, but haven’t found it yet.Is it still possible to get the same token during the expiration period in 2019 and what (service( url should I use?Kind regards, Krien Guijt

Can you connect to ADFS (Active Directory Federation Services (ADFS) is a(SSO) solution created by Microsoft ) and handle login on FMECloud through this? Similar to connecting to AD on FME Server

FME Server throws this error when I try to create a new user account: Error: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "fme_useraccount_pkey" Detail: Key (useraccount_id)=(#) already exists. where "#" increments after every attempt. It seems to be getting hung up on this user account id every time I try to create a new user. There is no such user already created. Background: we recently migrated FME Server to a new hosting environment and the issue only appeared after the migration. version: FME Server 2016.1.2.1 - Build 16674 - win64Any idea what could be going wrong here?

I'm testing FME Server 2019.1, We created a test workbench that does nothing really and created a server app for users to test. We get an error. "There was an error submitting the job. " Anyone know what i should look at and/or the help documents relating to this configuration?

Hello,Is there anyway to generate token id from postman?Thanks.

Following an upgrade to a new FME Cloud instance, my previous parent and child workspaces which ran under the same user account now run on different logins. My parent workbench runs on the correct login whilst all of the child workspaces run on a master login.I have checked the credentials and re-published all workbenches with the correct user account details but still hit this issue. If I add a grandparent workbench over both of these, it then runs on the correct login whilst the parent and child jobs run on the master login.

I can make an OAuth App in Github and generate the client ID and secret but the authorization callback URL has me stumped. The documentation talks about URLs that don't exist in my 'app', unless its somewhere in the Github API I don't know about. Anyone got this going before?

Is there any official documentation that specifies the encryption specification used by FME desktop to store passwords (e.g. ORACLE connection string passwords)? Specifically what encryption algorithms and keys length combinations are available? Only a few combination are acceptable to the Australian Federal Government. This is required for my organisation security section to sign off on the future use of FME.

Hi,I´m currently working on a custom webpage for data delivery.  I´ve used some code from the following example in FME Playground: https://playground.fmeserver.com/javascript/data-delivery/open-layers-integration/  I´m wondering how it´s possible to change the token in the FMEServer.init below, to a token that is generated thru the example here: https://playground.fmeserver.com/javascript/authorization/request-a-token/ Pre-generated setup for the token:FMEServer.init({ server : "https://demos-safe-software.fmecloud.com", token : "568c604bc1f235bbe137c514e7c61a8436043070" }); I want to use the "guestToken" thats been generated in the Javascript below instead:function processToken(token) { if( typeof token == 'string' ){ guestToken = token.trim(); } else { guestToken = "<pre>"+JSON.stringify(token, undefined, 4)+"</pre>"; } Both

Hi,I have setup a really nice example of the data delivery on FME server using this example code - https://knowledge.safe.com/articles/1117/data-distribution-with-web-maps.html. Ihave also made the guest account token the init for the FME javascript.I have setup a simple form to authenticate in the example the user using the token service however struggling to replace the init token with the users token when the FMEServer.runDataDownload method runs.Any attempt to overwrite the variable token resorts to running the job under the guest account.Any suggestions?Thanks

I want to change the name of a user in FME server? Is this possible. If not, can I create a new user and transfer ownership of items (resources, repositories, topics) to the new user?

Hi there,I can generate Token from FME Server2017 using C#, tested with postman, see attached image, but when I try to use same method from FME Server2016, it gives me error: Both user ID and password need to be specified for viewing/generating token. So what's the correct way to generate Token in FME Server2016.1 using postman or C#. Thank you very much.

Hi,I started restore in FME Server UI (Overwrite Existing Items was unchecked), then I immediatelly canceled it. After some time I realised my token is not same. Does restore create new token? Even if the process is canceled? What will happen with token if you run whole restore option?Thank you

I am using third party tool which will interact with box enterprise account and there is no configuration are available to configure redirect URL.For this, first time when my app will try to access account it will be redirected to Box page. Box finally redirects user to my redirected URL after acceptin user credentials. This redirected URL will have a authorization code.is this possible to get authorization code by Javascript?Below is how i am trying to authorising:https://account.box.com/api/oauth2/authorize?response_type=code&client;_id=33232323&redirect;_uri=https:0.0.0.0&state;=authenticationAnd below how i will get code:https://0.0.0.0/?state=authentication&code;=a88pdfff18kxsrr9bt

Hi, me and @thomas_merkus have this simple question on configuring FME Server to receive e-mails. If we wanted to configure FME Server to receive mail, we end up with a notification content that possibly contains a reference to an e-mail attachment, which is stored somewhere on the local system. But if that attachment contains a virus, how secure is that? As a human it is possible that I recognize the danger and thus I do not open the attachment. But for a machine as FME Server is, that could be not as simple as that, so the question is: how can we ensure that FME Server is not storing malicious software on the local disk?