Skip to main content

Security

Permissions, roles, and administration. Security in data processing.

  • 175 Posts
  • 535 Replies
175 Posts
sameer
Supporter
sameerSupporter
 Security
J
junwenwang
 Security
rebeccagiannuzz
Contributor
rebeccagiannuzzContributor
 Security
kjetilpettersso
Contributor
kjetilpetterssoContributor
 Security
jkr_wrk
Influencer
jkr_wrk
 Security
Create OAuth2 with responseCode in header

I have a working Postman script for an OAuth2 connection.When I look at the raw headers it shows that it sends the following headers:Content-Type: application/x-www-form-urlencodedAuthorization: Basic QjIzRkI3RUU5RTZDRZZZQTRCRDJGNjVEOUM5ZZZxNjE6QzAzM0ZDOTU0RjM5NDQ1Qjg2RjdCOUQ1QzlGQzQ2MDYwM0Q1QkUwNEIzMEE3ZZZDMzFCMTI5NzM5M0MxQUMwRQ==User-Agent: PostmanRuntime/7.29.0Accept: */*Cache-Control: no-cachePostman-Token: a8126467-b10d-4a59-b116-f8a6d1160aa8Host: projectlocation.relaticsonline.comAccept-Encoding: gzip, deflate, brConnection: keep-aliveContent-Length: 182Cookie: SESSION_START_COOKIENAME_29C5C999-84D0-4D23-A8F0-F888A8C64C78=trueBut if I add a new Webservice with the OAuth2 template in FME it looks like it is sending:https://projectlocation.relaticsonline.com/oauth2/token redirect_uri=https://localhost/client_id=12345567890client_secret=ASDFJKLgrant_type=authorisation_codecode=[responseCode] Accept=application/jsonContent-Language=en-USContent-Type=application/x-www-form-urlencodedI

400
jkr_wrk
Influencer
S
sseth2011
 Security
How to call a FME workspace (as webhook) without passing security token in header?

We have a use case where we need to implement a webhook using FME. This will be called by a partner application.This webhook has a predefined URI (in partner application side) like:https://fmeserver/repo/worskapce1.fmw?attr=?attr2=?Names of parameters cannot be changed and partner application is not willing to update the webhook to pass security token in the header. We are planning to do security by only whitelisting the ip addresses of the partner application. In this case, how we do call the FME workspace? Everytime I try to call my workspace, it returns an following error"401-Unauthorized. The request has not been applied because it lacks valid authentication credentials for the Target resource" Is there no way to call FME workspaces without passing tokens in the header of the call?Is there a way to change the name of the token attribute in the header to something else? I can repurpose attr2 for this and provide a static token to the application.

1990
hkingsbury
Celebrity
bbo
Contributor
bboContributor
 Security
jvdkleijn_ehv
Contributor
jvdkleijn_ehvContributor
 Security
Necessity log4j version 1.xxxxxx

Hello all, Our IT department has the policy to remove all the vulnarible Log4j related files from the systems which came from a server scan.  We have a FME server 2020.1 with engine 2020.2.5The scan gives the following files: C:\\Program Files\\FMEServer\\Server\\fme\\plugins\\activemq-all-5.6.0.jarC:\\Program Files\\FMEServer\\Server\\fme\\plugins\\log4j-1.2.16.jarC:\\Program Files\\FMEServer\\Server\\FMEEngineUpgrade\\plugins\\activemq-all-5.6.0.jarC:\\Program Files\\FMEServer\\Server\\FMEEngineUpgrade\\plugins\\log4j-1.2.16.jarC:\\Program Files\\FMEServer\\Server\\lib\\log4j-1.2.14.jarC:\\Program Files\\FMEServer\\Utilities\\tomcat\\webapps\\fmeapiv4.warC:\\Program Files\\FMEServer\\Utilities\\tomcat\\webapps\\fmeapiv4\\WEB-INF\\lib\\logback-classic-1.2.3.jarC:\\Program Files\\FMEServer\\Utilities\\tomcat\\webapps\\fmerest.war","WEB-INF/lib/log4j-1.2.14.jarC:\\Program Files\\FMEServer\\Utilities\\tomcat\\webapps\\fmerest\\WEB-INF\\lib\\log4j-1.2.14.jar What would be the e

920
jvdkleijn_ehv
Contributor
jvdkleijn_ehv
Contributor
jvdkleijn_ehvContributor
 Security
D
dgfip-fr
 Security
hkingsbury
Celebrity
hkingsburyCelebrity
 Security
Y
ymotake
 Security
john.beck
Contributor
john.beckContributor
 Security
jbradfor
Contributor
jbradforContributor
 Security
oliver.morris
Contributor
oliver.morrisContributor
 Security
francis
Contributor
francisContributor
 Security
Security issue with database connections/web connections

You can set security on database/web connections but the admin user has the permission to view, use and execute by default. Assume that a user knows the name of a secure database connection on the server and use that same name in his workbench as a private parameter with different parameters but with the same as the secure connection on the server. When the user upload his workbench to the server, he will not be able to execute the workbench on the server because he doesn't have the permission to use the database connection on the server. But he asks to schedule his workbench and the admin user configures the schedule for this workbench. From that moment the workbench is able to use the database connection on the server because the admin user has the permission to use the secure database connection.A solution could be that the schedule is configured by another user than admin. Is there any other way to handle this security issue?We are running FME Server 2020.1.3 and our engines ar

520
david_r
Celebrity
M
misazab95
 Security
How can i upload license file via API?

I´m executin this command to upload the FME license: curl -X POST "https://localhost:443/licensing/license?filetype=fmelic" -H "Authorization: fmetoken token=****" -H "Content-type: application/octet-stream" -H "Accept: application/json" --data "@fme_license.fmelic" But i got this error:<!doctype html><html lang="en"><head><title>HTTP Status 404 – Not Found</title><style type="text/css">body {font-family:Tahoma,Arial,sans-serif;} h1, h2, h3, b {color:white;background-color:#525D76;} h1 {font-size:22px;} h2 {font-size:16px;} h3 {font-size:14px;} p {font-size:12px;} a {color:black;} .line {height:1px;background-color:#525D76;border:none;}</style></head><body><h1>HTTP Status 404 – Not Found</h1><hr class="line" /><p><b>Type</b> Status Report</p><p><b>Message</b> The requested resource [/licensing/license] is not available</p><p><b>Description&

700
H
B
bgogulapati
 Security
adamdunlap
adamdunlap
 Security
mattwilkie
Enthusiast
mattwilkieEnthusiast
 Security
SSL error on FME Server but Desktop is fine.

We get the error "Can't connect to HTTPS URL because the SSL module is not available." when running a workspace on FME Server but the same workspace run from FME Desktop is okay. FME Desktop 2020.2.1.0 (20201130 - Build 20806 - WIN64)FME Server 2020.2 Build 20787 - win64 ```2021-1-26 19:19:35 | ArcGIS Feature Service Reader: Requesting metadata for Feature Service at 'http://mapservices.gov.yk.ca/arcgis/rest/services/GeoYukon/GY_Biophysical/MapServer'2021-1-26 19:19:48 | ArcGIS Feature Service Reader: Could not connect to server. Check that you are connected to the internet and that no firewall is blocking outbound connections. The error was 'HTTPSConnectionPool(host='mapservices.gov.yk.ca', port=443): Max retries exceeded with url: /arcgis/rest/services/GeoYukon/GY_Biophysical/MapServer?f=json (Caused by SSLError("Can't connect to HTTPS URL because the SSL module is not available."))' ```Digging around on Stack Overflow and similar s

3870
mattwilkie
Enthusiast
nissedahlsten
Contributor
nissedahlstenContributor
 Security
clowncutie
Contributor
clowncutieContributor
 Security
langdonms
Contributor
langdonmsContributor
 Security
M
melvin
 Security
lobsterboy
lobsterboy
 Security
Show more activity

Badge Winners

  • English Speaker
    alihossain96969has earned the badge English Speaker
  • FME Form Advanced Training
    lekhanjhas earned the badge FME Form Advanced Training
  • Welcome Back
    johnny_ajrhas earned the badge Welcome Back
  • Student (Grey)
    angeybhas earned the badge Student (Grey)
  • FME Certified Professional
    jluglohas earned the badge FME Certified Professional
Show all badges

Community Stats

32,758
Posts
124,227
Replies
41,281
Members
Terms & ConditionsAccessibility statement
A product of
Safe Software respectfully acknowledges that we live, learn and work on the traditional and unceded territories of the Kwantlen, Katzie, and Semiahmoo First Nations.