12-12-2012 09:07 AM
I wold like to stop users to loging to SM7 except some particular users.
Let me know if someone knows the way.
Thanks in Advance.
12-12-2012 11:29 AM
I'm not exactly sure what you're trying to do and why...
If you're trying to lock specific users out of the tool, you can lock their operator record. There's a field 'man.lockout.user'. Set that to true, and the operator can't log in.
If you're talking about during a release or maintenance or something, when you need the sys admins to be able to log in while the other users can't get in, we do it by starting up a debug node, rather than the load balancer, and then telling the users who need to connect what the debug server/port is. They can modify their connections to log into the open servlet, while other users who try to access the load balancer won't be able to get in.
12-12-2012 01:47 PM
If you are looking to prevent all but Admin users from logging in, the best option would be to use the "sm -quiesce:x" commandline call to do this.
For example, to quiesce to admin only on a single server instance, you would use:
and to return it to all users it would be:
If you need to prevent ALL users, including admins from logging in, use:
There are additional options when using quiesce from the Load Balancer node in a server group. See the Helpserver documentation under "quiesce". There's lots of good detail there.
12-12-2012 07:01 PM - edited 12-12-2012 07:09 PM
Thanks Jacob and Randall for the response.
Let me explain the exact scenario.
There are some migrations going on due to which we are doing some tests in the SM prodcution server.
There are some 350+ users for the SM. And there are 10 people(including non-admins) who will be part of this testing team. The testing period will be around 2 weeks. So I want to prevent all the users EXCEPT those 10 testing team operators to access SM7 during that 2 weeks.
Let me know if you need any further clarity.
Thanks in Advance.
12-13-2012 05:56 AM
Then I'd go with my option. If you don't start the load balancer, and only start up a debug node, you can give the server port combination to any user who would need to connect. Even via the web client, you can redirect users to the specific port, assuming you've configured the following parameters in the web.xml -
Then, users can modify the service manager link to access your debug port. Fro the help documentation on the Web tier parameters:
You can provide connection-specific Web tier parameters from the Web browser URL that override the current web.xml values. For example, the following URL changes the connection to host mycompany on port 13082 for this client session.