@@ -1638,17 +1638,19 @@ determines whether or not Linux shell commands will be used when managing certif
16381638This is useful for environments where shell access is limited or even not allowed. In those scenarios setting this value to ' N'
16391639will substitute SFTP commands for certain specific Linux shell commands. The following restrictions will be in place when
16401640using RemoteFile in this mode:
1641- 1. The config.json and custom field options SeparateUploadFilePath, DefaultLinuxPermissionsOnStoreCreation, DefaultOwnerOnStoreCreation,
1641+ 1. The config.json option SeparateUploadFilePath must NOT be used (option missing from the config.json file or set to empty) for shell
1642+ commands to be suppressed for all use cases.
1643+ 2. The config.json and custom field options SeparateUploadFilePath, DefaultLinuxPermissionsOnStoreCreation, DefaultOwnerOnStoreCreation,
16421644LinuxFilePermissionsOnStoreCreation, and LinuxFileOwnerOnStoreCreation are not supported and will be ignored. As a result, file
1643- permissions and ownership when creating a certificate store or adding a certificate to an existing store will be based
1644- on the user assigned to the Command certificate store and other Linux environmental settings.
1645- 2 . Discovery jobs are excluded and will still use the ` find` shell command
1646- 3 . A rare issue exists where the user id assigned to a certificate store has an expired password causing the orchestrator to hang
1645+ permissions and ownership when creating certificate stores will be based on the user assigned to the Command certificate store and
1646+ other Linux environmental settings.
1647+ 3 . Discovery jobs are excluded and will still use the ` find` shell command
1648+ 4 . A rare issue exists where the user id assigned to a certificate store has an expired password causing the orchestrator to hang
16471649when attempting an SFTP/SCP connection. A modification was added to RemoteFile to check for this condition. Running RemoteFile
16481650with Use Shell Commands = N will cause this validation check to NOT occur.
1649- 4 . Both RFORA and RFKDB use proprietary CLI commands in order to manage their respective certificate stores. These commands
1651+ 5 . Both RFORA and RFKDB use proprietary CLI commands in order to manage their respective certificate stores. These commands
16501652will still be executed when Use Shell Commands is set to Y.
1651- 5 . If executing in local mode (' |LocalMachine' at the end of your client machine name for your certificate store), Use Shell
1653+ 6 . If executing in local mode (' |LocalMachine' at the end of your client machine name for your certificate store), Use Shell
16521654Commands = ' N' will have no effect. Shell commands will continue to be used because there will be no SSH connection
16531655available from which to execute SFTP commands.
16541656
0 commit comments