Hi everyone,

I have under my control more than 20 different databases which are all
of them related each other. The databases are being logged in using FM
Server 10. Depending on the computer or username, the client will
enter automatically with specific privileges. I am the Administrator,
and theoretically I have access to everything, able to change
everything until yesterday. I am puzzled, I have one database out of
more than 20 that has decided to enter always as "Username", being
"Username" a username with few privileges. This username was created
by me many weeks ago. There is not way to enter to the database using
other way. I am going to show some examples:
1. If I enter as usual from my computer, the FM server automatically
will open the database using the parameter set in the server. However,
this "fuc.." database considers that I am always "Username". I know
that because I have a Get(username) field saying that.
2. If I put the database out the server, and the database asks me
about how I want to enter (username and password), even if I use my
all privileged username (Administrator), the database decides that I
am "Username" without privileged.
Of course, I do not have access to any change. It's crazy...
Please, help me!!!
Jokin

On Nov 4, 12:36*pm, Jokin <joaquin.casti... (AT) gmail (DOT) com> wrote:

Hi Jokin

That sounds really nasty Jokin. Could you have a go at recovering a
copy of the problem file. Once you've created a recovered version of
the file, try login with the administrator name and password again.

Remember, FileMaker recommend never to use a recovered file as your
primary file for serving to user. But don't worry about the details
now, lets just see if we can narrow down the problem first.

Regards
Kevin Smith

On Nov 4, 3:36*pm, KevinSmith <pleasedonotusethisaddr... (AT) gmail (DOT) com>
wrote:
Thanks Kevin. I did it but I mentioned to say. The result was the same
than the original one. I agree that it is a nasty problem.
Best,
Jokin

OK Jokin, I've reached the limits of my knowledge. I don't know how it
happened and I don't know how to get that file back into good health.
I hope someone else on the forum has got some knowledge to pass on.

Here are two further considerations though:
1) Identify all the backup copies that you have of that file. Check to
see if any of them are accessible at Administrator level. Firstly, you
can use the most recent good copy of the file and import all the very
latest data into it. After that, you can add any changes to layout and
schema you've lost as a result of the roll-back of code.

2) Hack into your file. http://www.lostpassword.com/filemaker.htm. Go
to this site and buy FileMaker Key. It will allow you to get into a
file at administrator level even if you don't know the password. Even
though your file is obviously not behaving normally, you might still
be able to get in. Hacking in will allow you to see how many user
groups you have setup in the file and what access rights they have.
Once you're in the file at administrator level you can use it to copy
across all the latest scripts and layouts, allowing you to develop on
an older copy of the system to match the features on the corrupted
file. If on the other hand you want to just use the hacked file
(assuming you can get in) as it is, do some web searching to make sure
it's safe/advisable to use it in a production system.

Good luck.

Regards Kevin Smith

On Nov 4, 5:36*am, Jokin <joaquin.casti... (AT) gmail (DOT) com> wrote:
I'm a little confused.

What does "open the database using the parameter set in the server"
mean? You can't open a database to develop in it using Server, you
can only host dbs with Server. You should never open a database
locally (not via Open Remote...) when it's being hosted by FMS.

You said in your post that files log into different accounts depending
on the computer name. That's pretty unsecure, because it means you're
storing passwords in a script. And it's the likely cause of what
you're experiencing.

If you're admining 20 dbs with FMS, you should have a copy of FMP
Advanced. Use the script debugger to see which script is running on
startup that Re-logins to a different account. Change that script
accordingly.

G

Jokin wrote:

If you are using a script to determine the machine or get(username), and
then basing the login on that, perhaps the user name on your machine got
changed?

On the other hand, you say that get(username) always shows you as
"Username", which has me confused on what you are doing. The name you
set in the application preferences is what will show for get(username).
The actual account that it gets logged in as will be displayed using
get(accountname).

While corruption might be the case if it were one database giving you
trouble, I highly doubt that all 20 files decided to poop out on you all
at one time. Perhaps someone changed your script, or the user name on
your computer, or the default account in File Options (File menu). Do
you know that you can always open the file holding down the shift key
(windows) or option key (mac) and it will ask you for an account name
and password at that time? If the account changes after you enter the
database that way, then you have a script doing something funky with a
re-login script step.

Someone else recommended using a password cracker to gain access. That
is fine if you are the owner, but those programs hack your files and
replace the original password with a new one. Continued use of such a
file seems dangerous to me, as a hacked file can lead to corruption and
problems.

On 4 nov, 16:28, KevinSmith <pleasedonotusethisaddr... (AT) gmail (DOT) com>
wrote:
Thanks again Kevin, the first consideration is a good option in order
to avoid data lost. I will do it.
Regarding to the second consideration, I tried another kind of hacking
software to know the passwords from different levels of priviledges.
In this case, the software just indicated me the password and the kind
of access that I had (I knew it because I created the database).
However, the hacking software did not repair the problem because
aparentely there is not problems, just that the database (maybe alive
database) has decided to bypass the entering process.
Are you sure that the software that you are recommend me is able not
just to show the password, even to remove the passwords?

Thanks,
Jokin

On 5 nov, 05:21, Grip <g... (AT) cybermesa (DOT) com> wrote:
Hi Grip,
The meaning of "open the database using the parameter set in the
server" for me is that even if I have full of diferent ways to enter
to the databases, I never introduce any password, the client FM has
the option when the databases are in a FM server to see which computer
(username) is trying to open the database and just enter directly.
This is a very good option when you have new people in your work and
you do not want to create new usernames all the time in all the
database. You can create a group with specific priviledges and then
the new people is added to the group without changes in any database.
I agree that I can not open the database locally if is open in a FMS.
Anyway, I tried all the option, one it was to close it from the FMS
and open locally, and again the "alive" database avoid all the process
and decided to be opened as a Username without many priviledges.

Regarding:
You said in your post that files log into different accounts depending
on the computer name. That's pretty unsecure, because it means you're
storing passwords in a script. And it's the likely cause of what
you're experiencing.

I dont agree, in fact, this is a wonderful and safe way to control the
access through the server.

Yes, I have FMP advanced. As you know the debugger works when you are
already in the database, however the problem is before I can check it
with the script debugger.
The database is not so high, I can send it to you giving all the
passwords, and if you are able to open with full privilegdes, I will
invite you to a Starbucks coffe.

Thanks,
Jokin

On 5 nov, 06:06, Howard Schlossberg <how... (AT) nospam (DOT) fmprosolutions.com>
wrote:
Thanks Howard,

The username did not change because under the same server, other
related databases are showing the real Username. It is just this
database which is saying that the username is other. I understand that
get(username) is showing the username that you used to enter. Since
this database is entering using another username, that's the reason
way the get(username) from the rest of the databases are equal by each
other and diferent to this problematic database.

Regarding to:
On the other hand, you say that get(username) always shows you as
"Username", which has me confused on what you are doing. The name you
set in the application preferences is what will show for get
(username).
The actual account that it gets logged in as will be displayed using
get(accountname).

I am going to give you more data. The application preferences is set
in grey (I cannot change it) and it is true that the username that I
have in that preferences is the same that I see in the get(username)
field. However, since this username does not have priviledge, I cannot
change anything. If I use the shift key in order to force that the
database asks me again for what username and password I want to use,
if I introduce an Administrator username with my password, instead of
enter as an Administrator, AGAIN the database is saying that I have
entered using the username without priviledges. And this is the real
problem, the database does not care what username I am using to enter,
she/he has decided to enter always in a way that I cannot modify
anything. And this is happening locally or through a server. It is
crazy. I fact, I can send you the database, give all the usernames and
passwords able to enter in the database but you will not be able to
get all the priviledges. The hacked software just confirmed me what
usernames and passwords that I had, something knew for me since I am
the owner.
What about a Starbuck coffe if you can open the database

Regarding your comment:
If the account changes after you enter the database that way, then you
have a script doing something funky with a re-login script step.

Is there anyway to stop this kind of re-login scripts? Maybe, as other
person suggests, using the scripps debugger but I think that the
debugger will start working after the access is complete, am I right?

Thanks,
Jokin

On Nov 5, 2:18*am, Jokin <joaquin.casti... (AT) gmail (DOT) com> wrote:

Absolutely not. All a client has to do to change their privileges is
change the name of their machine. If someone can get onto your network
then they can get any access they want. If your files are accessible
outside your local network, then anyone can do this. It may be
convenient, but safe, no.

I someone gets a hold of your physical file, they don't need a
password cracker, they can pretty easily extract the passwords in
other ways.

Please be open-minded here and read up on FMP security.


I think what is happening is the username and password are being auto
entered by the machine's keychain system. Then upon opening, a script
changes the login to match the computer's name. Turn on the debugger.
While opening the file, hold down the Shift (Windows) or the Option
(Mac) key. Enter your admin password. You should now be logged in as
admin and have the re-log script paused. Cancel the opening script
and you should be in.

This approach assumes your admin user/pass is correct and the file is
not already open by another file.

I don't know much about your situation in general, but if you have 20
dbs, your either need to optimize your structure or you're running a
good-size operation. Either way, you really need to learn more about
Filemaker Server and Filemaker Pro.