Security

I have 3 different servers for development, testing, and production. What is the best way to duplicate user accounts across all 3 servers?

Hello,I upgraded FME Server from 2019.2 to 2020.0, and restored the configuration by importing the backup file which has been downloaded before uninstalling the previous version.Some of existing workspaces are run via API (request from a web page) and access a PostgreSQL database to read features with a FeatureReader, execute a SQL query with a SQLExecutor and so on.What I observed is, after upgrading to 2020.0, the workspaces failed to access the PostgreSQL database and logged this error message.FME Server error: `FME Server error: `Unauthorized request by user due to lack of proper permissions.'I was able to resolve the failure by manually adding access permission for the database connection to the API token, but it's a bit troublesome if you need to check and fix permissions of every Token whenever upgrading FME Server.I upgraded the FME Server several times before (FME 2019.0 -> 2019.1 -> 2019.2), but I didn't need to modify permissions of the API token.Is it an i

Hello, I was looking into FME Server when I noticed that there was a vulnerability listed for the software. It can be found here: https://nvd.nist.gov/vuln/detail/CVE-2018-20402  Has this been acknowledged?

Hi all,  I have noticed every few hours the token on my topics webhook keeps changing, which causes the webhook to no longer fire. I have tried to set the token to one i have generated in the account that lasts for several years, but this still does not work. Any ideas on how to resolve this? 

Hi,Managing Tokens has changed in FME Server 2019 vs 2018 and I noticed the url for generating a Token with an expiration of 3 days without an update does not deliver the same token in 2019 in contrast to version 2018.The url used has the format:https://<fmeserver>/fmetoken/generate.json?user={{FMEUSER}}&password={{FMEPW}}&expiration=3&timeunit=day&update=falseand creates a new token (with a new 3 days expiration) every time in FME Server 2019 in contrast to 2018 where is returns the same token within the expiration period.I’ve searched for some kind of equivalent url, but haven’t found it yet.Is it still possible to get the same token during the expiration period in 2019 and what (service( url should I use?Kind regards, Krien Guijt

Can you connect to ADFS (Active Directory Federation Services (ADFS) is a(SSO) solution created by Microsoft ) and handle login on FMECloud through this? Similar to connecting to AD on FME Server

FME Server throws this error when I try to create a new user account: Error: org.postgresql.util.PSQLException: ERROR: duplicate key value violates unique constraint "fme_useraccount_pkey" Detail: Key (useraccount_id)=(#) already exists. where "#" increments after every attempt. It seems to be getting hung up on this user account id every time I try to create a new user. There is no such user already created. Background: we recently migrated FME Server to a new hosting environment and the issue only appeared after the migration. version: FME Server 2016.1.2.1 - Build 16674 - win64Any idea what could be going wrong here?

I'm testing FME Server 2019.1, We created a test workbench that does nothing really and created a server app for users to test. We get an error. "There was an error submitting the job. " Anyone know what i should look at and/or the help documents relating to this configuration?

Hello,Is there anyway to generate token id from postman?Thanks.

Following an upgrade to a new FME Cloud instance, my previous parent and child workspaces which ran under the same user account now run on different logins. My parent workbench runs on the correct login whilst all of the child workspaces run on a master login.I have checked the credentials and re-published all workbenches with the correct user account details but still hit this issue. If I add a grandparent workbench over both of these, it then runs on the correct login whilst the parent and child jobs run on the master login.

I can make an OAuth App in Github and generate the client ID and secret but the authorization callback URL has me stumped. The documentation talks about URLs that don't exist in my 'app', unless its somewhere in the Github API I don't know about. Anyone got this going before?

Is there any official documentation that specifies the encryption specification used by FME desktop to store passwords (e.g. ORACLE connection string passwords)? Specifically what encryption algorithms and keys length combinations are available? Only a few combination are acceptable to the Australian Federal Government. This is required for my organisation security section to sign off on the future use of FME.

Hi,I´m currently working on a custom webpage for data delivery.  I´ve used some code from the following example in FME Playground: https://playground.fmeserver.com/javascript/data-delivery/open-layers-integration/  I´m wondering how it´s possible to change the token in the FMEServer.init below, to a token that is generated thru the example here: https://playground.fmeserver.com/javascript/authorization/request-a-token/ Pre-generated setup for the token:FMEServer.init({ server : "https://demos-safe-software.fmecloud.com", token : "568c604bc1f235bbe137c514e7c61a8436043070" }); I want to use the "guestToken" thats been generated in the Javascript below instead:function processToken(token) { if( typeof token == 'string' ){ guestToken = token.trim(); } else { guestToken = "<pre>"+JSON.stringify(token, undefined, 4)+"</pre>"; } Both

Hi,I have setup a really nice example of the data delivery on FME server using this example code - https://knowledge.safe.com/articles/1117/data-distribution-with-web-maps.html. Ihave also made the guest account token the init for the FME javascript.I have setup a simple form to authenticate in the example the user using the token service however struggling to replace the init token with the users token when the FMEServer.runDataDownload method runs.Any attempt to overwrite the variable token resorts to running the job under the guest account.Any suggestions?Thanks

I want to change the name of a user in FME server? Is this possible. If not, can I create a new user and transfer ownership of items (resources, repositories, topics) to the new user?

Hi there,I can generate Token from FME Server2017 using C#, tested with postman, see attached image, but when I try to use same method from FME Server2016, it gives me error: Both user ID and password need to be specified for viewing/generating token. So what's the correct way to generate Token in FME Server2016.1 using postman or C#. Thank you very much.

Hi,I started restore in FME Server UI (Overwrite Existing Items was unchecked), then I immediatelly canceled it. After some time I realised my token is not same. Does restore create new token? Even if the process is canceled? What will happen with token if you run whole restore option?Thank you

I am using third party tool which will interact with box enterprise account and there is no configuration are available to configure redirect URL.For this, first time when my app will try to access account it will be redirected to Box page. Box finally redirects user to my redirected URL after acceptin user credentials. This redirected URL will have a authorization code.is this possible to get authorization code by Javascript?Below is how i am trying to authorising:https://account.box.com/api/oauth2/authorize?response_type=code&client;_id=33232323&redirect;_uri=https:0.0.0.0&state;=authenticationAnd below how i will get code:https://0.0.0.0/?state=authentication&code;=a88pdfff18kxsrr9bt

Hi, me and @thomas_merkus have this simple question on configuring FME Server to receive e-mails. If we wanted to configure FME Server to receive mail, we end up with a notification content that possibly contains a reference to an e-mail attachment, which is stored somewhere on the local system. But if that attachment contains a virus, how secure is that? As a human it is possible that I recognize the danger and thus I do not open the attachment. But for a machine as FME Server is, that could be not as simple as that, so the question is: how can we ensure that FME Server is not storing malicious software on the local disk?

Hi,Is it possible to enforce the minimum password length for FME server from application? If yes, what is password policy and how to enforce?

I changed the FME Server token MAX_EXPIRATION parameter to 20 years based on the steps outlined in this help page: https://knowledge.safe.com/articles/919/setting-the-maximum-expiration-for-fme-token-servi.htmlHowever, the token that I set a month ago has now changed to a new token. I have two questions:1. Is it valid to set the MAX_EXPIRATION parameter greater than two years as the above article suggests?2. Is changing the token the desired behaviour by FME Server? I would expect that when a token expires it simply becomes invalid, and does not create a new token.I am using FME Server 2016.1.3.1.Thanks

I recently transferred MapInfo v15.2 from a computer with Windows 10 to a computer with Windows 7. I am trying to run the Universal Translator, but it gives me the following error:File C:\\Users\\Name could not be openedProgram terminating.I have been searching through the forums and throughout the documentation FME has, but I am unable to find a solution SO FAR. I am wondering if it is a security issue with Windows 7; I have multiple users set up on this computer. I will continue to search for answers, but if anyone on this forum can help me, I would be very grateful.Regards

Hi,  I'm on FME Desktop 2013 and am trying to use the Socrata Writer. The documentation says that I need to provide a host, username, password, and app token to access the Socrata dataset, but I can't find an input for my app token. Could anyone help me out to find where it's located?

Hi,  I've just been trying to play with the google engine api, and the FME 2014 reader/writer functionlity.  I'm stuggelling a bit with the oAuth refreash token.  the dialog that FME provides is blank, (white and empty) so I can't use it to generate a token for me, so.  1) can some one debug why my dilog is empty (i suspect proxy issues, i have set my paswords in the tools>options) 2) how can i generate a code to paste in to here outside of FME....  and maybe  3)  ideally this would be for deploying onto server in the end, what ports do I need open to support oAuth and googles spatial engine.  Nick