How to make system appear "offline" - TM1Web login unavailable
-
- Posts: 62
- Joined: Wed Sep 02, 2009 11:33 am
- OLAP Product: TM1
- Version: PA 2.0.9.4
- Excel Version: 2016
- Location: Australia
How to make system appear "offline" - TM1Web login unavailable
What methods do people use for taking their system "offline" such that non admin users cannot login via TM1Web (or perspectives)?
At certain times we want to take the system offline while TM1 Administrators perform certain tasks and at present even though we lock the system and advise the users it is unavailable they will still try to login so long as they can access the login page (or perspectives)....
I've been thinking about various ways to make the system appear offline and wondering what approaches others have used?
At certain times we want to take the system offline while TM1 Administrators perform certain tasks and at present even though we lock the system and advise the users it is unavailable they will still try to login so long as they can access the login page (or perspectives)....
I've been thinking about various ways to make the system appear offline and wondering what approaches others have used?
-
- Posts: 62
- Joined: Wed Sep 02, 2009 11:33 am
- OLAP Product: TM1
- Version: PA 2.0.9.4
- Excel Version: 2016
- Location: Australia
Re: How to make system appear "offline" - TM1Web login unavailable
Nah, that's changing the homepage after the users have logged in which we do already. I need to prevent them from logging in.
macsir wrote: ↑Fri Aug 23, 2019 2:19 am maybe this one?
https://www.ibm.com/support/knowledgece ... 509d6.html
- orlando
- Community Contributor
- Posts: 167
- Joined: Fri Aug 04, 2017 8:27 am
- OLAP Product: TM1
- Version: PAL 2.0.8
- Excel Version: Office 365
Re: How to make system appear "offline" - TM1Web login unavailable
One quick thought:
Unfortunately there is no login possible/not possible switch - at least I haven't met one yet.
Maybe it could go over the rights.
Use TI to read out all user rights and save them to a file or cube. Remove the rights from all users or create a group that is not allowed to do anything and assign the group to the users.
After maintenance, restore the rights.
Then the users can log in, but see nothing and do not disturb.
Unfortunately there is no login possible/not possible switch - at least I haven't met one yet.
Maybe it could go over the rights.
Use TI to read out all user rights and save them to a file or cube. Remove the rights from all users or create a group that is not allowed to do anything and assign the group to the users.
After maintenance, restore the rights.
Then the users can log in, but see nothing and do not disturb.
- gtonkin
- MVP
- Posts: 1199
- Joined: Thu May 06, 2010 3:03 pm
- OLAP Product: TM1
- Version: Latest and greatest
- Excel Version: Office 365 64-bit
- Location: JHB, South Africa
- Contact:
Re: How to make system appear "offline" - TM1Web login unavailable
If you are using authentication, other than TM1, you could try overwriting the UniqueID with a rule triggered by a flag - Invalidating this should prevent integrated logins.
-
- MVP
- Posts: 3652
- Joined: Fri Mar 13, 2009 11:14 am
- OLAP Product: TableManager1
- Version: PA 2.0.x
- Excel Version: Office 365
- Location: Switzerland
Re: How to make system appear "offline" - TM1Web login unavailable
Have you looked at this?
Please place all requests for help in a public thread. I will not answer PMs requesting assistance.
-
- MVP
- Posts: 2832
- Joined: Tue Feb 16, 2010 2:39 pm
- OLAP Product: TM1, Palo
- Version: Beginning of time thru 10.2
- Excel Version: 2003-2007-2010-2013
- Location: Atlanta, GA
- Contact:
Re: How to make system appear "offline" - TM1Web login unavailable
If you are already using security mode 1 you could put a rule on the }ClientProperties cube that assigned a crazy password like 7dhsye4$2Hu7)d or similar to every client except ADMIN. No one would be able to login unless they could guess the password. When you want to go back simply remove the rule.
-
- Posts: 119
- Joined: Mon Oct 27, 2014 10:50 am
- OLAP Product: TM1
- Version: 10.2.2
- Excel Version: 2013
Re: How to make system appear "offline" - TM1Web login unavailable
If you dont need TM1Web/Applicaiton Web to check your admin changes. It would be a possibility to just stop those services.
Another solution I have used once was to close the firewall on the web-server so noone could access it. This way I could use the system since I was on the server. But noone else could access it from an external laptop.
Another solution I have used once was to close the firewall on the web-server so noone could access it. This way I could use the system since I was on the server. But noone else could access it from an external laptop.
-
- Regular Participant
- Posts: 159
- Joined: Fri Aug 12, 2016 10:02 am
- OLAP Product: tm1
- Version: 10.2.0 - 10.3.0
- Excel Version: 2010
Re: How to make system appear "offline" - TM1Web login unavailable
Hello
We use for this 2 step:
1 tm1kill.exe to kick all users from model.
2 run process append to all users *LOCK* string to passworh hash.
I would like to warn you against using this approach. if you delete the line * LOCK * and insert the old password hash, we encounter a problem, cellpuss uses the trimm function, which leads to problems for some users.
Now we are considering a situation with password rules and there is also a more elegant solution that we will implement a bit later:
to OFFLINE
1 savedataall
2 copy file cube }ClientsProperties to temp folder (via executecommnd)
3 change password hash for all users exclude 'admins'
to ONLINE
1 cubeunload(}ClientsProperties)
2 copy file cube from temp folder to datafolder
enjoy
We use for this 2 step:
1 tm1kill.exe to kick all users from model.
2 run process append to all users *LOCK* string to passworh hash.
I would like to warn you against using this approach. if you delete the line * LOCK * and insert the old password hash, we encounter a problem, cellpuss uses the trimm function, which leads to problems for some users.
Now we are considering a situation with password rules and there is also a more elegant solution that we will implement a bit later:
to OFFLINE
1 savedataall
2 copy file cube }ClientsProperties to temp folder (via executecommnd)
3 change password hash for all users exclude 'admins'
to ONLINE
1 cubeunload(}ClientsProperties)
2 copy file cube from temp folder to datafolder
enjoy
-
- MVP
- Posts: 3652
- Joined: Fri Mar 13, 2009 11:14 am
- OLAP Product: TableManager1
- Version: PA 2.0.x
- Excel Version: Office 365
- Location: Switzerland
Re: How to make system appear "offline" - TM1Web login unavailable
This sounds useful! But does unload work for }ClientProperties?
Please place all requests for help in a public thread. I will not answer PMs requesting assistance.
-
- Posts: 62
- Joined: Wed Sep 02, 2009 11:33 am
- OLAP Product: TM1
- Version: PA 2.0.9.4
- Excel Version: 2016
- Location: Australia
Re: How to make system appear "offline" - TM1Web login unavailable
So, in this scenario if the users keeps trying to login they will lock their account given their password has changed?? Does copying the }ClientProperties cube back resolve the fact that MaximumLoginAttempts has been reached? Because normally a locked account can only be reset but changing the password (or restarting the TM1 service).to OFFLINE
1 savedataall
2 copy file cube }ClientsProperties to temp folder (via executecommnd)
3 change password hash for all users exclude 'admins'
to ONLINE
1 cubeunload(}ClientsProperties)
2 copy file cube from temp folder to datafolder
I feel like this method might be a bit flawed (what about if integrated login is used?)...but maybe a variation on this could be applied....
-
- Regular Participant
- Posts: 159
- Joined: Fri Aug 12, 2016 10:02 am
- OLAP Product: tm1
- Version: 10.2.0 - 10.3.0
- Excel Version: 2010
Re: How to make system appear "offline" - TM1Web login unavailable
Yep you right. MaximumLoginAttempts it's dynamic params you cn change it anytime.
integratedmode dinamic params only in PA not in TM1/.
integratedmode dinamic params only in PA not in TM1/.