# \#customer-questions **URL:** https://community.sonatype.com/tag/customer-questions/26.md [Latest](https://community.sonatype.com/latest.md) · [Categories](https://community.sonatype.com/categories.md) · [Tags](https://community.sonatype.com/tags.md) --- ## [STIG V-69567 finding application must only store cryptographic representations of passwords](https://community.sonatype.com/t/stig-v-69567-finding-application-must-only-store-cryptographic-representations-of-passwords/12763)
**Author:** [@adam.s.gantt.ctr](https://community.sonatype.com/u/adam.s.gantt.ctr)\ **Replies:** 0\ **Last updated:** [June 19, 2024, 5:33pm UTC](https://community.sonatype.com/t/stig-v-69567-finding-application-must-only-store-cryptographic-representations-of-passwords/12763 "2024-06-19T17:33:05Z")
We manage and operate Nexus service in a federal environment. Recent STIG audit found vulnerability regarding our use of local Nexus users. We are looking for evidence to support the finding is invalid as the application… --- ## [Best Practice - Waivers for Environment Specific Vulnerabilities](https://community.sonatype.com/t/best-practice-waivers-for-environment-specific-vulnerabilities/958)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 1\ **Last updated:** [January 5, 2023, 11:42pm UTC](https://community.sonatype.com/t/best-practice-waivers-for-environment-specific-vulnerabilities/958 "2023-01-05T23:42:26Z")
One of the most common types of questions that we get asked is “Every version is vulnerable. What should I do?” In many cases this is cited as a reason for delaying the upgrade of a project dependency. Even when this si… --- ## [How to indicate success or failure from the IQ CLI?](https://community.sonatype.com/t/how-to-indicate-success-or-failure-from-the-iq-cli/394)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 5\ **Last updated:** [April 30, 2021, 9:20am UTC](https://community.sonatype.com/t/how-to-indicate-success-or-failure-from-the-iq-cli/394 "2021-04-30T09:20:02Z")
Following command line exit code conventions, the IQ CLI java jar will return a code of 0 upon a successful scan and a code of 1 upon a “failed” scan. The meaning of a “failed” scan can be adjusted in a couple ways. T… --- ## [Downloading the Eclipse IQ Plugin behind a corporate network](https://community.sonatype.com/t/downloading-the-eclipse-iq-plugin-behind-a-corporate-network/727)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [October 26, 2018, 5:24pm UTC](https://community.sonatype.com/t/downloading-the-eclipse-iq-plugin-behind-a-corporate-network/727 "2018-10-26T17:24:29Z")
com.sonatype.clm.ide.eclipse.site-2.13.0.20171117-1940.zip (3.4 MB) com.sonatype.clm.ide.eclipse.site-2.13.1.20180926-1000.zip (3.6 MB) --- ## [Nexus Repository Manager - Private Repositories and Anonymous User Permissions](https://community.sonatype.com/t/nexus-repository-manager-private-repositories-and-anonymous-user-permissions/4455)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [June 18, 2020, 6:50pm UTC](https://community.sonatype.com/t/nexus-repository-manager-private-repositories-and-anonymous-user-permissions/4455 "2020-06-18T18:50:57Z")
I received this customer question today. When adding a private repository, how can I require authentication for that repository? There are two parts to the answer: Requiring Authentication Once authenticated, requi… --- ## [Integration API with Nexus Repository 3](https://community.sonatype.com/t/integration-api-with-nexus-repository-3/161)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 5\ **Last updated:** [May 19, 2020, 5:54pm UTC](https://community.sonatype.com/t/integration-api-with-nexus-repository-3/161 "2020-05-19T17:54:22Z")
Nexus Repository supports new repository formats such as Docker and Bower and introduces a fresh, clean user interface among other advantages. Adopting or upgrading repository manager often means that you need to update … --- ## [Best Practice - Enforce Downloading from Nexus Repository Manager and Nexus Firewall](https://community.sonatype.com/t/best-practice-enforce-downloading-from-nexus-repository-manager-and-nexus-firewall/3542)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [February 20, 2020, 5:15pm UTC](https://community.sonatype.com/t/best-practice-enforce-downloading-from-nexus-repository-manager-and-nexus-firewall/3542 "2020-02-20T17:15:45Z")
A recent customer question highlighted a couple important points: Developers will unknowingly, or knowingly, end up working around any blockers to getting their job done. To all my friends managing Nexus Repository and… --- ## [Adding Roles to Users in IQ Server via REST API](https://community.sonatype.com/t/adding-roles-to-users-in-iq-server-via-rest-api/821)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 2\ **Last updated:** [July 25, 2019, 9:15pm UTC](https://community.sonatype.com/t/adding-roles-to-users-in-iq-server-via-rest-api/821 "2019-07-25T21:15:13Z")
I frequently get asked by our customers how to they can programmatically manage user permissions in IQ Server. You will first need to understand the Organization and Application 404 Page not found. Once you have a good … --- ## [Automation the Provisioning of Nexus RBAC Model - Content Selectors, Permissions, Roles, Users](https://community.sonatype.com/t/automation-the-provisioning-of-nexus-rbac-model-content-selectors-permissions-roles-users/778)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 1\ **Last updated:** [November 8, 2018, 2:53pm UTC](https://community.sonatype.com/t/automation-the-provisioning-of-nexus-rbac-model-content-selectors-permissions-roles-users/778 "2018-11-08T14:53:55Z")
Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: Companies with many development teams often ask us how to automate the creation of the permission model inside of Nexus Repository … --- ## [How to retrieve a list of IQ Server roles and associated users?](https://community.sonatype.com/t/how-to-retrieve-a-list-of-iq-server-roles-and-associated-users/552)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 1\ **Last updated:** [September 19, 2018, 3:02pm UTC](https://community.sonatype.com/t/how-to-retrieve-a-list-of-iq-server-roles-and-associated-users/552 "2018-09-19T15:02:58Z")
Is there an API that allows me to retrieve a list of IQ Server roles and associated users for e.g. Auditing purposes? --- ## [Tech Resource - Best Practice - Configuring a Least-Privilege Firewall User](https://community.sonatype.com/t/tech-resource-best-practice-configuring-a-least-privilege-firewall-user/356)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [August 9, 2018, 10:42pm UTC](https://community.sonatype.com/t/tech-resource-best-practice-configuring-a-least-privilege-firewall-user/356 "2018-08-09T22:42:31Z")
Problem Statement Given NXRM Firewall configuration using an “admin” user, all the applications are displayed in the CIP: 404 Page not found Sample: Solution Define a specific user (“nxrmfirewall” in the example bel… --- ## [Advanced Use Cases for the Nexus Repository Manager API](https://community.sonatype.com/t/advanced-use-cases-for-the-nexus-repository-manager-api/80)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 1\ **Last updated:** [June 6, 2018, 6:45pm UTC](https://community.sonatype.com/t/advanced-use-cases-for-the-nexus-repository-manager-api/80 "2018-06-06T18:45:21Z")
One of the most frequent area of questions related to Nexus Repository Manager is how to integrate with other tools via the API. Integrations API Nexus Repository Manager 2 only contained a formal REST API. This require… --- ## [Reusable Scripts with the Execute Script Scheduled Task](https://community.sonatype.com/t/reusable-scripts-with-the-execute-script-scheduled-task/82)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [June 1, 2018, 10:33pm UTC](https://community.sonatype.com/t/reusable-scripts-with-the-execute-script-scheduled-task/82 "2018-06-01T22:33:01Z")
Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: One of the lesser known scheduled tasks in Nexus Repository Manager 3 is the “Execute Script”. This utilizes the same API as the gr… --- ## [Which users are Nexus Repository Manager Admins?](https://community.sonatype.com/t/which-users-are-nexus-repository-manager-admins/81)
**Author:** [@mworthington](https://community.sonatype.com/u/mworthington)\ **Replies:** 0\ **Last updated:** [June 1, 2018, 10:29pm UTC](https://community.sonatype.com/t/which-users-are-nexus-repository-manager-admins/81 "2018-06-01T22:29:21Z")
Continuing the discussion from Advanced Use Cases for the Nexus Repository Manager API: An important piece of information for Nexus Administrators is understanding what users have access to which parts of the applicatio…