{"id":3162,"date":"2016-07-15T11:32:44","date_gmt":"2016-07-15T10:32:44","guid":{"rendered":"https:\/\/www.data-protector.org\/wordpress\/?p=3162"},"modified":"2016-07-15T11:32:44","modified_gmt":"2016-07-15T10:32:44","slug":"script-execution-dp-9-07","status":"publish","type":"post","link":"https:\/\/www.data-protector.org\/wordpress\/de\/2016\/07\/script-execution-dp-9-07\/","title":{"rendered":"Script Execution with DP 9.07 &#8211; increased security"},"content":{"rendered":"<\/p>\n<p>Mit der Einf\u00fchrung von HPE Data Protector 9.07 wurden auch in Richtung Sicherheit weitere Ma\u00dfnahmen ergriffen. So ist nach der Aktualisierung unter Umst\u00e4nden das Ausf\u00fchren von Pre- und Post-Exec Skripten nicht mehr erlaubt und stattdessen wird ein Fehler angezeigt.<\/p>\n<blockquote style=\"font: 12px Courier; background-color: #ffffff; border: 1px solid #ccc; border-radius: 6px; box-shadow: 1px 1px 1px #ccc;\">\n<pre style=\"border: 0px; background-color: #ffffff;\">\r\n[Major] From: &#x42;S&#x4d;&#64;w&#x32;&#48;1&#x32;r&#x64;&#x70;.&#x6c;&#111;c&#x61;l&#x64;&#x6f;m&#x61;&#105;n \"dbbackup\"  Time: 05.07.2016 11:35:01\r\n      Session post-exec script C:\\test\\startme.cmd failed. Exit code = 2. \r\n<\/pre>\n<\/blockquote>\n<p>Grund hierf\u00fcr: das Ausf\u00fchren von Skripten und Binaries ist nur noch im bin Verzeichnis der Installation erlaubt (\/opt\/omni\/lbin &#8211; HP-UX, Linux oder Solaris; \/usr\/omni\/bin &#8211; andere UNIX Systeme oder OMNIHOME\\bin &#8211; Windows), die Angabe von absoluten und relativen Pfaden (zum Beispiel: c:\\scripts\\test.cmd, \/home\/scripts\/test.sh oder ..\/..\/..\/home\/scripts\/test.sh) ausserhalb von <code>bin<\/code> ist nicht mehr zul\u00e4ssig. Ebenso ist auch das Ausf\u00fchren Perl nicht mehr m\u00f6glich und kann nicht als Pre- und Post-Exec Skript direkt verwendet werden (z.B.: perl.exe myscript.pl parameter1). Es ist jedoch m\u00f6glich Batch Dateien zu hinterlegen (z.B.: startme.cmd parameter1) in denen dann der eigentliche Skriptaufruf erfolgt. F\u00fcr die dazugeh\u00f6rige omnirc Variable <code>OB2OEXECOFF<\/code> wurden somit auch die m\u00f6glichen Werte angepasst &#8211; <code>0  Pre\/post-exec scripts will be ran<\/code> (mit der Beschr\u00e4nkung beim Pfad) und <code>1  Pre\/post-exec scripts disabled<\/code>.<br \/>\nMit diesen Anpassungen lassen sich die Skripte dann auch wieder ausf\u00fchren.<\/p>\n<blockquote style=\"font: 12px Courier; background-color: #ffffff; border: 1px solid #ccc; border-radius: 6px; box-shadow: 1px 1px 1px #ccc;\">\n<pre style=\"border: 0px; background-color: #ffffff;\">\r\n[Normal] From: &#x42;S&#x4d;&#64;w&#x32;&#48;1&#x32;r&#x64;&#x70;.&#x6c;&#111;c&#x61;l&#x64;&#x6f;m&#x61;&#105;n \"dbbackup\"  Time: 05.07.2016 11:55:12\r\n      The exec script \"startme.cmd\" has completed.\r\n<\/pre>\n<\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Mit der Einf\u00fchrung von HPE Data Protector 9.07 wurden auch in Richtung Sicherheit weitere Ma\u00dfnahmen ergriffen. So ist nach der Aktualisierung unter Umst\u00e4nden das Ausf\u00fchren von Pre- und Post-Exec Skripten nicht mehr erlaubt und stattdessen wird ein Fehler angezeigt. [Major] From: &#x42;&#83;M&#x40;&#x77;&#50;0&#x31;&#x32;&#114;d&#x70;&#x2e;&#108;o&#x63;&#x61;&#108;d&#x6f;&#x6d;&#97;i&#x6e; &#8222;dbbackup&#8220; Time: 05.07.2016 11:35:01 Session post-exec script C:\\test\\startme.cmd failed. Exit code = 2. [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3163,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false,"spay_email":""},"categories":[11],"tags":[],"translation":{"provider":"WPGlobus","version":"2.8.8","language":"de","enabled_languages":["en","de"],"languages":{"en":{"title":true,"content":true,"excerpt":false},"de":{"title":false,"content":true,"excerpt":false}}},"jetpack_featured_media_url":"https:\/\/www.data-protector.org\/wordpress\/wp-content\/uploads\/2016\/07\/prepost1.png","jetpack_shortlink":"https:\/\/wp.me\/p28cjj-P0","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":854,"url":"https:\/\/www.data-protector.org\/wordpress\/de\/2012\/02\/simple-media-vaulting-off-site-tape-vaulting\/","url_meta":{"origin":3162,"position":0},"title":"Simple Media Vaulting \/ Off-Site Tape Vaulting","date":"3. Februar 2012","format":false,"excerpt":"{:de}Der Wunsch die Daten seiner Server auf Medien zu sichern und somit Datensicherheit zu erhalten h\u00f6rt nicht nur bei der Datensicherung auf Band auf,\u00a0oft besteht auch der Wunsch oder Anforderung die beschriebenen B\u00e4nder vor weiterem Beschreiben zu sch\u00fctzen oder die Medien aus der Bandlibrary zu entfernen und an einem sicheren\u2026","rel":"","context":"In &quot;HowTo&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1947,"url":"https:\/\/www.data-protector.org\/wordpress\/de\/2014\/04\/eadr-cell-server-dp-8-1x-windows-2012-r2\/","url_meta":{"origin":3162,"position":1},"title":"EADR for Cell Server &#8211; DP 8.1X on Windows 2012 R2","date":"4. April 2014","format":false,"excerpt":"{:en}With Data Protector 8.XX the process to create disaster recovery images has been changed. Since the new version, the backup of the internal database is separated from the filesystem backup of the cell server. Hence, the \"makeiso.cmd\" (see https:\/\/www.data-protector.org\/wordpress\/2011\/03\/recover-cell-server-with-enhanced-automated-disaster-recovery\/) is no longer working. With the separation it is necessary to\u2026","rel":"","context":"In &quot;HowTo&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1919,"url":"https:\/\/www.data-protector.org\/wordpress\/de\/2014\/03\/omnispeed-2-0-data-protector-8-xx-hp-ux-linux-windows\/","url_meta":{"origin":3162,"position":2},"title":"OMNISPEED 2.0 for Data Protector 8.XX on HP-UX, Linux and Windows","date":"27. M\u00e4rz 2014","format":false,"excerpt":"{:en}The new version of OMNISPEED is available. Version 2.0 was especially developed for Data Protector 8.XX environments and supports HP-UX (Itanium) 11.31, Linux (RedHat and SUSE Linux Enterprise Server) and Microsoft Windows (2008 R2, 2012 and 2012 R2) for the Data Protector versions 8.00, 8.01 and 8.1X. The most important\u2026","rel":"","context":"In &quot;SCD&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":1003,"url":"https:\/\/www.data-protector.org\/wordpress\/de\/2012\/08\/brick-backup-related-information-collector-keeper\/","url_meta":{"origin":3162,"position":3},"title":"BRICK &#8211; Backup Related Information Collector and Keeper","date":"24. August 2012","format":false,"excerpt":"{:en}BRICK - A new tool for Data Protector!!! Interested? Continue to read here:https:\/\/www.data-protector.org\/wordpress\/brick\/. Update 2012\/08\/21: new version (v0.11) released, for more information please refer to the ChangeLog, a lot of enhancements were done. Please use link above. Please see screenshot below. Please comment on page: https:\/\/www.data-protector.org\/wordpress\/brick\/. Enhanced Help: The help\u2026","rel":"","context":"In &quot;BRICK&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":694,"url":"https:\/\/www.data-protector.org\/wordpress\/de\/2011\/07\/data-protector-migration-unix-to-other-os\/","url_meta":{"origin":3162,"position":4},"title":"Data Protector Migration Unix to other OS","date":"29. Juli 2011","format":false,"excerpt":"{:de}Ich kenne nicht viele gute Gr\u00fcnde warum man eine Data Protector Installation von HP-UX auf ein anderes Betriebssystem wechseln sollte,\u00a0dennoch gibt es viele Kunden die diesen Schritt gehen wollen und zum Beispiel auf Windows oder Linux wechseln;\u00a0meist noch verbunden mit einem Upgrade auf eine aktuelle Version von Data Protector.\u00a0Und hier\u2026","rel":"","context":"In &quot;HowTo&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":431,"url":"https:\/\/www.data-protector.org\/wordpress\/de\/2011\/03\/recover-cell-server-with-enhanced-automated-disaster-recovery\/","url_meta":{"origin":3162,"position":5},"title":"Recover Cell Server with Enhanced Automated Disaster Recovery","date":"29. M\u00e4rz 2011","format":false,"excerpt":"{:en}In article EADR with Windows 2008 R2 I described how to use Data Protector EADR for a Windows 2008 R2 server. I also described in former articles that you should be prepared when your Cell Server crashs. To be able to do EADR for your Cell Server I wrote a\u2026","rel":"","context":"In &quot;HowTo&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/posts\/3162"}],"collection":[{"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/comments?post=3162"}],"version-history":[{"count":4,"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/posts\/3162\/revisions"}],"predecessor-version":[{"id":3168,"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/posts\/3162\/revisions\/3168"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/media\/3163"}],"wp:attachment":[{"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/media?parent=3162"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/categories?post=3162"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.data-protector.org\/wordpress\/de\/wp-json\/wp\/v2\/tags?post=3162"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}