Skip to content

Commit 1e10d80

Browse files
author
Lee Fine
committed
2 parents 98567e4 + fa165a1 commit 1e10d80

File tree

1 file changed

+10
-9
lines changed

1 file changed

+10
-9
lines changed

README.md

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1632,22 +1632,23 @@ For agent mode (accessing stores on the same server where Universal Orchestrator
16321632
## Use Shell Commands Setting
16331633

16341634
The Use Shell Commands Setting (orchestrator level in config.json and per store override of this value as a custom field value)
1635-
determines whether or not Linux shell commands will be used when managing certificate stores on Linux-based servers.
1636-
This is useful for environments where shell access is limited or even not allowed. Keep in mind that the following
1637-
restrictions will be in place when using RemoteFile in this mode:
1635+
determines whether or not Linux shell commands will be used when managing certificate stores on Linux-based servers.
1636+
This is useful for environments where shell access is limited or even not allowed. In those scenarios setting this value to 'N'
1637+
will substitute SFTP commands for certain specific Linux shell commands. The following restrictions will be in place when
1638+
using RemoteFile in this mode:
16381639
1. The config.json and custom field options SeparateUploadFilePath, DefaultLinuxPermissionsOnStoreCreation, DefaultOwnerOnStoreCreation,
16391640
LinuxFilePermissionsOnStoreCreation, and LinuxFileOwnerOnStoreCreation are not supported and will be ignored. As a result, file
16401641
permissions and ownership when creating a certificate store or adding a certificate to an existing store will be based
16411642
on the user assigned to the Command certificate store and other Linux environmental settings.
1642-
2. Discovery jobs are excluded and will still use the shell `find` command
1643-
3. A rare issue exists where a certificate store user id having an expired password causes the orchestrator to hang when attempting an
1644-
SFTP/SCP connection. A modification was added to check for this condition. Running RemoteFile with Use Shell Commands = N will
1645-
cause this validation check to NOT occur.
1643+
2. Discovery jobs are excluded and will still use the `find` shell command
1644+
3. A rare issue exists where the user id assigned to a certificate store has an expired password causing the orchestrator to hang
1645+
when attempting an SFTP/SCP connection. A modification was added to RemoteFile to check for this condition. Running RemoteFile
1646+
with Use Shell Commands = N will cause this validation check to NOT occur.
16461647
4. Both RFORA and RFKDB use proprietary CLI commands in order to manage their respective certificate stores. These commands
16471648
will still be executed when Use Shell Commands is set to Y.
1648-
5. If executing in local mode (|LocalMachine at the end of your client machine name for your certificate store), Use Shell
1649+
5. If executing in local mode ('|LocalMachine' at the end of your client machine name for your certificate store), Use Shell
16491650
Commands = 'N' will have no effect. Shell commands will continue to be used because there will be no SSH connection
1650-
available to use SFTP with.
1651+
available from which to execute SFTP commands.
16511652

16521653
## Developer Notes
16531654

0 commit comments

Comments
 (0)