Stuck on remote administration

[ErnieG]

I have it working fine as long as a password is NOT required in the Web Companion Config box. So the open and close codes (whether the DB needs a password or not) all seem to be in order.

As soon as I require a password, however, I always get an error message as shown here:

I'm using FM Unlimited 6.0v4. I try with and without a "User ID." And of course I've typed the password very carefully, many times. Anyone have any ideas on what I'm missing?

Thanks.

[Anatoli]

I strongly believe that in Remote administration over web are security holes.

[ErnieG]

I've seen your strong feelings about having DBs in the Web folder, Anatoli, and I wouldn't be considering this if I had anything sensitive in the databases. But secrecy is not crucial, and I'll be away from my server for several months. I need to be able to close databases so I can download them to a remote computer, update the files, upload them, and reopen them.

Can you (or anyone) talk me into spending money on Timbuktu instead? Does anyone out there have actual knowledge of a hacker tampering with a boring database just for the fun of it? Especially if it can't be opened without a password?

As for the original question, do I need to include only the remote administration password . . . or do you need to include the "User ID." If so, would that be the "User ID" under application preferences? The thing is, I've tried that too, and no luck.

Ernie

[Steve T.]

Hi, Ernie! Anatoli's just warning you in case you didn't know but you're right... you're probably OK in that situation. I'm not familiar with Remote Administration, but can you use FMP Scripts to open/close them for you? I thought I also remembered something about using CDML commands to open/close db's but it being discontinued or something. Anyone know? It had struck me funny about how (like you said) the db's need to be stored in the Web folder for it (-dbopen?) to work but then reading later that FMP, Inc. says to never store db's in the Web folder.

You also might be able to do this outside FileMaker. If you can somehow close the db's using whatever method available (FMP, CDML, AppleScript, cron from the command line, etc.), you can use similar methods to open them up again, or if you have your machine to auto-start them on boot, just re-boot.

Hope this helps or sparks an idea!

--ST

[Anatoli]

VNC is free and great. Maybe there is also VNC for Macs. Without VNC I was using scripts to open and close other databases. Only single locked database must be visible when you connect from FMP to FM web server.

IMHO most hackers are hacking without any reason, just because

[Unable]

In my Sample Files demo of automatic password submission (the second iteration when using FileMaker access and web security in combo) a similar pop-up occurs when the client clicks the delete button. If the client enters the password "way" they are infromed they cannot delete the record. If a client (such as an administrator) enters the group and password appropriate for the administrator, the record is deleted. You may find this demo a useful guide - or not. But what you desire seems rather simple and achievable to me.

[ErnieG]

Thank you all for the input and ideas. It appears VNC is Windows-only, but I'll search for something like for the Mac. I'll check that Demo, and using scripts. I'd still like to know what the hitch was using "dbopen" and "dbclose" (you were right, Steve) with a password . . . just as an intellectual puzzle. But it's definitely safer to keep the DB's out of the web folder.

Thanks again.

Ernie

[Unable]

Re: "... an administrator) enters the group and password appropriate for the administrator, the record is deleted"

The described event occurs and can be confirmed in the db file. The solution was not designed to demonstrate this, and for that reason the results page of the demonstration could lead to confusion.

However, the basis is there to construct such password/navigation elsewhere (like at entry) within a solution. The FMP-If conditional CDML tag might prove to be useful for such a solution.I have not tried this, and after all,

[ErnieG]

Eureka!

First, for someone "Unable," you post many solutions. We should all be so humble.

For anyone who wants to close and open databases from many miles away over the Net (and upload or download new versions of the files), there's one tiny detail that the CDML Reference somehow forgets to mention in relation to the -dbOpen and -dbClose tags. Along with the password, you have to enter "admin" as the User ID!

There's an ongoing debate, it seems, between those who believe the Reference holds all the answers and those who believe it's practically worthless. My own experience is that it seems to be written by people who are so familiar with CDML that they assume a knowledge of key details, or don't know how to explain things to the true beginners. It was a painful struggle for me to grasp certain elements.

Fortunately I just upgraded to FileMaker Unlimited 6, which comes with the Web Server Connector CD . . . which I would not normally have had a reason to look at. In going through the paperwork, however, I noticed mention of an "FMU6 Admin Guide," which included the crucial piece of missing information. Someone else (sorry I can't remember who) recommended looking at this CD, and I second it.

The guide also mentions putting DBs inside a subfolder of the Web folder to hide them. In case you look at this again, Anatoli, does that do anything to answer your objection? Especially now that (in FMU6) you can put all the format files in another hidden folder?

Thanks to you all.

Ernie

[Anatoli]

RE: Especially now that (in FMU6) you can put all the format files in another hidden folder?

I never had problem like that.

The problems are FM databases -- open to the whole Internet

Search forum for D-Base download it and try on your machine.

CDML reference is the ONLY resource available from FMI.

[Unable]

re: CDML reference is the ONLY resource available from FMI.

TechInfo Knowlege searchable db is also at their website. Lots of useful ti docs - if you can find the right one. But I've also had some good serendipity there.

[Anatoli]

FMI site is the very last resource on my list

I don't like it a bit and I go there only if exhausted all other resources and paths