Help with Class-map configuration - ZBFW

Hello,
I need some clarification regarding the class-map configuration in a ZBFW. I need to allow https,http,ftp & rdp traffic from Internet to few of the servers inside our LAN. So I put the below configuration to accomplish the task (example shows class-map for only https protocol) :
a.)
class-map type inspect match-all HTTPS-ACCESS
match protocol https
match access-group name HTTPS-SERVER-ACCESS
ip access-list extended HTTPS-SERVER-ACCESS
permit tcp any host 172.17.0.55 eq 443
permit tcp any host 172.17.0.56 eq 443
permit tcp any host 172.17.0.36 eq 443
permit tcp any host 172.17.0.45 eq 443
permit tcp any host 172.17.0.60 eq 443
Where 55,56,36,45,60 are the servers inside the LAN (12 more servers are there) that need to be accessed via https,http,ftp & rdp from Internet.
Is it a correct approach? or do I need to change my configuation so that I have to match ACL with my class-map like below:
b.)
ip access-list extended OUTSIDE-TO-INSIDE-ACL
permit tcp any host 172.17.0.55 eq 443
permit tcp any host 172.17.0.55 eq www
permit tcp any host 172.17.0.55 eq 21
permit tcp any host 172.17.0.55 eq 3389
permit tcp any host 172.17.0.56 eq 443
permit tcp any host 172.17.0.56 eq www
permit tcp any host 172.17.0.56 eq 21
permit tcp any host 172.17.0.56 eq 3389
permit tcp any host 172.17.0.36 eq 443
permit tcp any host 172.17.0.36 eq www
permit tcp any host 172.17.0.36 eq 21
permit tcp any host 172.17.0.36 eq 3389
permit tcp any host 172.17.0.45 eq 443
permit tcp any host 172.17.0.45 eq www
permit tcp any host 172.17.0.45 eq 21
permit tcp any host 172.17.0.45 eq 3389
class-map type inspect match-all OUT-IN-CLASS
match access-group name OUTSIDE-TO-INSIDE-ACL
Which one is the correct approach when we consider the performance of the firewall ? Please help me.
Regards,
Yadhu

Hey
I do not agree with Varun, I think the first approach is the best one.
Why? Because when you issue the "match protocol ..." you are usig NBAR wich is an application inspection software, which means that https or whatever protocol is inspected at layer 7, not layer 3 and 4 which the seconds approach does (IP and port-number).
Lets say you use the second approach and an attacker uses some malicious protocol that runs over port 443 or whatever (a port that you opened). That attack would be successfull because all you say, you are going to IP-address 172.17.0.56 over port 443 so go ahead.
But if you are using NBAR, this would not work because NBAR will look at layer 7, inside the protocol itself and look if this really is HTTPS (or whatever protocol).
That's my two cents. Hope it helped!

Similar Messages

Help with java mapping

PI File adapter has a processing option u2018Empty-Message Handlingu2019 to ignore or Write Empty Files. In case there is no data created after mapping on target side then this option determines whether to write an empty file or not. But there is a catch to this option when it comes to using it with File Content Conversion which is described in SAP Note u2018821267u2019. It states following:
I configure the receiver channel with File content conversion mode and I set the 'Empty Message Handling' option to ignore. Input payload to the receiver channel is generated out of mapping and it does not have any record sets. However, this payload has a root element. Why does file receiver create empty output file with zero byte size in the target directory? Example of such a payload generated from mapping is as follows:
<?xml version="1.0" encoding="UTF-8"?>
<ns1:test xmlns:ns1="http://abcd.com/ab"></ns1:test>
solution :
If the message payload is empty (i.e., zero bytes in size), then File adapter's empty message handling feature does NOT write files into the target directory. On the other hand, if the payload is a valid XML document (as shown in example) that is generated from mapping with just a root element in it, the File Adapter does not treat it as an empty message and accordingly it writes to the target directory. To achieve your objective of not writing files (that have just a single root element) into the target directory, following could be done:
Using a Java or ABAP Mapping in order to restrict the creation of node itself during mapping. (This cannot be achieved via Message Mapping)
Using standard adapter modules to do content conversion first and then write file.
can someone help with java mapping that can be used in this case?

Hi,
    You have not mentioned the version of PI you are working in. In case you are working with PI 7.1 or above then here is the java mapping code you need to add after message mapping in the same interface mapping
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.InputStream;
import java.io.OutputStream;
import java.util.Map;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.transform.Transformer;
import javax.xml.transform.TransformerFactory;
import javax.xml.transform.dom.DOMSource;
import javax.xml.transform.stream.StreamResult;
import org.w3c.dom.Document;
import com.sap.aii.mapping.api.AbstractTransformation;
import com.sap.aii.mapping.api.StreamTransformationException;
import com.sap.aii.mapping.api.TransformationInput;
import com.sap.aii.mapping.api.TransformationOutput;
public class RemoveRootNode extends AbstractTransformation{
     public void execute(InputStream in, OutputStream out)
     throws StreamTransformationException {
// TODO Auto-generated method stub
try
     DocumentBuilderFactory factory=DocumentBuilderFactory.newInstance();
     DocumentBuilder builderel=factory.newDocumentBuilder();
     /*input document in form of XML*/
     Document docIn=builderel.parse(in);
     /*document after parsing*/
     Document docOut=builderel.newDocument();
     TransformerFactory tf=TransformerFactory.newInstance();
     Transformer transform=tf.newTransformer();
     if(docIn.getDocumentElement().hasChildNodes())
          docOut.appendChild(docOut.importNode(docIn.getDocumentElement(),true));
          transform.transform(new DOMSource(docOut), new StreamResult(out));
     else
          out.write(null);
catch(Exception e)
public void setParameter(Map arg0) {
// TODO Auto-generated method stub
public static void main(String[] args) {
// TODO Auto-generated method stub
try{
     RemoveRootNode genFormat=new RemoveRootNode();
     FileInputStream in=new FileInputStream("C:\\apps\\sdn\\rootNode.xml");
     FileOutputStream out=new FileOutputStream("C:\\apps\\sdn\\rootNode1.xml");
     genFormat.execute(in,out);
     catch(Exception e)
     e.printStackTrace();
public void transform(TransformationInput arg0, TransformationOutput arg1)
          throws StreamTransformationException {
     // TODO Auto-generated method stub
     this.execute(arg0.getInputPayload().getInputStream(), arg1.getOutputPayload().getOutputStream());
In case you are working in PI 7.0 you can use this code
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.InputStream;
import java.io.OutputStream;
import java.util.Map;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.transform.Transformer;
import javax.xml.transform.TransformerFactory;
import javax.xml.transform.dom.DOMSource;
import javax.xml.transform.stream.StreamResult;
import org.w3c.dom.Document;
import com.sap.aii.mapping.api.StreamTransformation;
import com.sap.aii.mapping.api.StreamTransformationException;
public class RemoveRootNode implements StreamTransformation{
     public void execute(InputStream in, OutputStream out)
     throws StreamTransformationException {
// TODO Auto-generated method stub
try
     DocumentBuilderFactory factory=DocumentBuilderFactory.newInstance();
     DocumentBuilder builderel=factory.newDocumentBuilder();
     /*input document in form of XML*/
     Document docIn=builderel.parse(in);
     /*document after parsing*/
     Document docOut=builderel.newDocument();
     TransformerFactory tf=TransformerFactory.newInstance();
     Transformer transform=tf.newTransformer();
     if(docIn.getDocumentElement().hasChildNodes())
          docOut.appendChild(docOut.importNode(docIn.getDocumentElement(),true));
          transform.transform(new DOMSource(docOut), new StreamResult(out));
     else
          out.write(null);
catch(Exception e)
public void setParameter(Map arg0) {
// TODO Auto-generated method stub
public static void main(String[] args) {
// TODO Auto-generated method stub
try{
     RemoveRootNode genFormat=new RemoveRootNode();
     FileInputStream in=new FileInputStream("C:\\apps\\sdn\\rootNode.xml");
     FileOutputStream out=new FileOutputStream("C:\\apps\\sdn\\rootNode1.xml");
     genFormat.execute(in,out);
     catch(Exception e)
     e.printStackTrace();
The code for PI 7.0 should also work for PI 7.1 provided you use the right jar files for compilation, but vice-versa is not true.
Could you please let us know if this code was useful to you or not?
Regards
Anupam
Edited by: anupamsap on Dec 15, 2011 9:43 AM

I need help with my mapping - CL_MAPPING_XMS_PLSRV3-ENTER_PLSRV

hi, guys, i need help with my mapping, i dont know this error (i not speak english)
<Trace level="1" type="B">CL_MAPPING_XMS_PLSRV3-ENTER_PLSRV</Trace>
<Trace level="2" type="T">......attachment XI_Context not found </Trace>
<Trace level="3" type="T">Mapping already defined in interface determination </Trace>
<Trace level="3" type="T">Object ID of Interface Mapping 4B903E2DDC853C1493E1DED5C5ED70A3 </Trace>
<Trace level="3" type="T">Version ID of Interface Mapping 88D96A70BAAE11DFAE5EE925C0A800C2 </Trace>
<Trace level="1" type="T">Mapping-Object-Id:4B903E2DDC853C1493E1DED5C5ED70A3 </Trace>
<Trace level="1" type="T">Mapping-SWCV:88D96A70BAAE11DFAE5EE925C0A800C2 </Trace>
<Trace level="1" type="T">Mapping-Step:1 </Trace>
<Trace level="1" type="T">Mapping-Type:JAVA_JDK </Trace>
<Trace level="1" type="T">Mapping-Program:com/sap/xi/tf/_mm_sgipi_fi001_vta_clientes_ </Trace>
<Trace level="3" type="T">MTOM Attachments Are Written to the Payload </Trace>
<Trace level="3" type="T">Dynamic Configuration Is Empty </Trace>
<Trace level="3" type="T">Executing multi-mapping </Trace>
<Trace level="1" type="E">CL_XMS_PLSRV_MAPPING~ENTER_PLSRV</Trace>
help me please

you can use the sharedobject to record a user/computer has taken your quiz, the session data and record their results. at the start of your quiz, check for the sharedobject and, if it exists, check the other data and take appropriate action.

Source ip filtering with class map on cisco ace30

Hello ,
I would like to know if it is possible to filter source ips connecting to a virtual ip within a class map configuration ( or something else ) ?
access-list S_IP_FILTERING line 8 extended permit ip host 1.1.1.1 any
class-map match-all S_IP_FILTERING_XVIP
2 match access-list S_IP_FILTERING
3 match virtual-address 2.2.2.2 any
Error: Only one match access-list is allowed in a match-all class-map and it cannot mix with any other match type
thanks for your support
Case,

Hi,
Yes, it is possible to do this. Use the ACL filter for the source IP address under the policy-map type loadbalance. Then you would call that load balance policy in your multi-match policy under the appropriate class.
for example:
class-map type http loadbalance match-any LOADBALANCE-FILTER
2 match source-address X.X.X.X 255.255.255.255
class-map match-any TEST-CLASSMAP
2 match virtual-address Y.Y.Y.Y tcp eq www
policy-map type loadbalance first-match LOADBALANCE
class LOADBALANCE-FILTER
    serverfarm TEST-SERVERFARM
policy-map multi-match UTC-PM
class TEST-CLASSMAP
    loadbalance policy LOADBALANCE
    loadbalance vip inservice
-Alex

Looking for help with respect to configuring MS Exchange server to handle attachments over 10 MB for forwarding to Salesforce (Email-to-case).

Looking for help with respect to configuring MS Exchange server to handle attachments over 10 MB for forwarding to Salesforce (Email-to-case).
Problem - SFDC does not create cases from emails that have more than 10 MB of attachments. Our clients will not go-live if their clients cannot send in emails with attachments over 10 MBs
Potential resolution - Configure MS exchange to strip off the attachments(if over 10 MB) and store it in a public folder, forward the email to Salesforce (so the case gets created or the email
is associated to an existing case), the client should have some way to know if the attachments were stripped off and should be able to dlownload the attachments and continue with case resolution.
Any help is appreicated!
Thanks

Hi,
From your description, you want to achieve the following goal:
Configure Exchange to filter the attachments if the size is over 10 MB and store it in a public folder, and then forward the email to Salesforce.
Based on my knowledge, I'm afraid that it can't be achieved. Exchange can filter messages with attachments, but it couldn't store these attachments on public folder automatically. Also, I don't see any transport rule can do it.
Hope my clarification is helpful.
Best regards,
Amy Wang
TechNet Community Support

ACE - HTTPS CLASS MAP CONFIGURATION

Hi,
We have a secured web site (HTTPS) currently fronted by Cisco ACE 4170, running version A5(1.2). We are trying to use the http class map to manipulate the traffic flow in the following manner:
https://abc.com/ABC/* -> serverfarm#1
https://abc.com/* -> serverfarm#2           (Default)
Tecnically this should not be difficult and below is a sample of our configuration. We have similar configuration working on our non-secured web site (HTTP) However for the secure web site, the https request https://abc.com/ABC/xxx is continued being routed to serverfarm#2 instead of serverfarm#1 which is very frustrating.
We can easily get this working on my F5 LTM within 5 minutes but this Cisco ACE continue to frustrate me...Appreciate if any expert on Cisco ACE can help to advise on our configuration.. Thanks.
=========================================================
serverfarm host serverfarm#1
predictor leastconns
probe https_probe
rserver rs_server#1
inservice
rserver rs_server#2
inservice
serverfarm host serverfarm#2
predictor leastconns
probe https_probe
rserver rs_server#3
inservice
rserver rs_server#4
inservice
sticky http-cookie STICKY_HTTPS_serverfarm#1
cookie insert browser-expire
timeout 15
replicate sticky
serverfarm serverfarm#1
sticky http-cookie STICKY_HTTPS_serverfarm#2
cookie insert browser-expire
timeout 15
replicate sticky
serverfarm serverfarm#2
class-map type http loadbalance match-any class-map-serverfarm#1
2 match http url /ABC/.*
policy-map type loadbalance first-match vs_serverfarm_https
class class-map-serverfarm#1
sticky-serverfarm STICKY_HTTPS_serverfarm#1
insert-http x-forward header-value "%is"
ssl-proxy client ssl_serverfarm
class class-default
sticky-serverfarm STICKY_HTTPS_serverfarm#2
insert-http x-forward header-value "%is"
ssl-proxy client ssl_serverfarm
=========================================================

Kanwaljeet,
Yes, we are using ACE for SSL termination i.e. front end is https and back-end is also https.
We are doing end-to-end encryption as our IT security and audit wanted end-to-end encryption between the client and servers. ACE should be able to look at the HTTP header at the front end since the client SSL session is terminate on the ACE.
Below is an extract of the configuration, I've leave out the remaining configuration which is not required.
=========================================================
serverfarm host serverfarm#1
predictor leastconns
probe https_probe
rserver rs_server#1
inservice
rserver rs_server#2
inservice
serverfarm host serverfarm#2
predictor leastconns
probe https_probe
rserver rs_server#3
inservice
rserver rs_server#4
inservice
sticky http-cookie STICKY_HTTPS_serverfarm#1
cookie insert browser-expire
timeout 15
replicate sticky
serverfarm serverfarm#1
sticky http-cookie STICKY_HTTPS_serverfarm#2
cookie insert browser-expire
timeout 15
replicate sticky
serverfarm serverfarm#2
class-map match-all vs_serverfarm
2 match virtual-address 10.178.50.140 tcp eq https
class-map type http loadbalance match-any class-map-serverfarm#1
2 match http url /ABC/.*
policy-map type loadbalance first-match vs_serverfarm_https
class class-map-serverfarm#1
sticky-serverfarm STICKY_HTTPS_serverfarm#1
insert-http x-forward header-value "%is"
ssl-proxy client ssl_serverfarm
class class-default
sticky-serverfarm STICKY_HTTPS_serverfarm#2
insert-http x-forward header-value "%is"
ssl-proxy client ssl_serverfarm
policy-map multi-match PRODWEB_POLICY
class vs_serverfarm
    loadbalance vip inservice
    loadbalance policy vs_serverfarm_https
    loadbalance vip icmp-reply active
    nat dynamic 100 vlan 100
    ssl-proxy server ssl_serverfarm
=========================================================

Need help with instruments mapping

I have Korg PA80 and i hooked up midi out from it to midi in to Logic8, I have some nice realtime accompaniment tunes i can play on that keyboard, what i want to do is to play on my PA80 accompaniment tracks but replace all sounds with my custom sounds from my Logic plug ins, right now when I hit play all i hear is some garbage playing because no instruments properly mapped on Logic, I even created all 16 instrument tracks and set them all on all 16 channels, drums on 10 and so on, but when i start play on PA80 in Logic I still hear like bass trying to play all parts and not bass part only, same for drums when i press Am or Dm drums will play properly with some another drums sounds that trying to play all other instruments parts, need to separate them so the bass will play only bass part, drums will play drum part and so on, need help on how can i do that, lets say for drums i will choose logic drums sounds, for base Logic bases and so on, so Logic will become something like sound module for my PA80 instead of internal sounds I would like to use my virtual instruments sounds, thanks a lot

Thanks for your reply Dave.
I have no answer to your question but I found a way to create my SQL code with OWB mapping operators. Unfortunately it is very very slow compared to the execution of the SQL code and therefore not useful at all. I connected the following steps all in one mapping:
1. Table operator(T006_SITE) -> Filter(T006A01PK_SITEID where T006A11FK_COUNTRYID IS NULL)
2. Table operator(T002_COUNTRY) -> AGG (MAX T002A01PK_COUNTRYID)
3. JOIN the output from 1. and 2.(T006A01PK_SITEID and T002A01PK_COUNTRYID))
4. UPDATE T006_SITE with the output from 3. (T006A01PK_SITEID as matching column and T006A11FK_COUNTRYID as column to be updated)
The execution mode of the mapping should be set-based fail over to row-based, but it used row-based mode even without getting an error. Are UPDATE mappings only executable in row-based mode or is there a way to change that?
Does anyone have an idea how I can speed up that mapping or integrate my SQL code in the OWB?
Thanks in advance,
Dirk

Freely programmed search help with external mapping

Hi all.
I have a freely programmed search help to search for physical inventory items.
I map some data from the component where i use this search help to this search help via external mapping. This works fine.
But in the search help I want to be able to change the mapped data to perform a new serach. When I change the data and start the action to search again (in the serach help component) I still get the old field value from context so that the search returns the same result. When I close the search help afterwards the changes are suddenly visible in the using component. So my entered data are somehow transfered to the original context but not to the context of the used component.
Any ideas?
Thanks
Sascha
Message was edited by:
Sascha Dingeldey

Hi Sascha,
I would suggest, that you do not work with the externally mapped attribute.
Try to copy the value to a "local" attribute in the searchhelp context while WDDOINIT of the component.
This is the attribute you should use for the search.
When you change the searchvalue, it is only changed in the comnponent.
To get the values back to the calling component you need to copy it back while you call the action submit or exit.
Hope this helps
Best regards, Matthias

Help with Message Mapping - Context Change

I need help with the following message mapping. I am filtering by EMP_STAT in the Message Mapping. I have this working for the ROW structures, but I can get the HEADER/REC_COUNT field to calculate. I can do just a record count of ROW and get it to work, but I can't get it to work with the filter EMP_STAT = 'REG' added. I get a context error. Could someone send me the mapping code.
Sender XML----
<RECORD>
<ROW>
<EMPLOYEE>111</EMPLOYEE>
<EMP_STAT>REG</EMP_STAT>
</ROW>
<ROW>
<EMPLOYEE>222</EMPLOYEE>
<EMP_STAT>PT</EMP_STAT>
</ROW>
<ROW>
<EMPLOYEE>333</EMPLOYEE>
<EMP_STAT>REG</EMP_STAT>
</ROW>
</RECORD>
Receiver XML----
<RECORD>
<HEADER>
<REC_COUNT>2</REC_COUNT>
</HEADER>
<ROW>
<EMPLOYEE>111</EMPLOYEE>
<EMP_STAT>REG</EMP_STAT>
</ROW>
<ROW>
<EMPLOYEE>333</EMPLOYEE>
<EMP_STAT>REG</EMP_STAT>
</ROW>
</RECORD>

Hello,
You can use this mapping
For REC_COUNT:
EMP_STAT -> equalsS: constant:REG -> ifWithoutElse -> removeContext -> count -> REC_COUNT
                                 EMPLOYEE -> /
For ROW:
EMP_STAT -> equalsS: constant:REG -> ifWithoutElse -> removeContext -> ROW
                                 EMPLOYEE -> /
For EMPLOYEE:
EMP_STAT -> equalsS: constant:REG -> ifWithoutElse -> removeContext -> SplitByValue -> EMPLOYEE
                                 EMPLOYEE -> /
For EMP_STAT:
Constant: REG -> EMP_STAT
Hope this helps,
Mark

Need help with classes

I''ve just started out with Java and I need help with my latest program.
The program looks someting like this:
public class MultiServer {
   public static void main(Straing[] args) {
      ServerGUI GUI = new ServerGUI();
public class ServerGUI extends JFrame implements ActionListener {
   private TextArea textArea;
   public ServerGUI() {
      //setting up the JFrame and stuff like that
   public void actionPerformed(ActionEvent event) {
      if(button == addButton) {
         addGUI add = new addGUI();
public class addGUI extends JFrame implements ActionListener {
    private TextField t1 = new TextField(25);
    public addGUI() {
      //setting up the JFrame and stuff like that
   public void actionPerformed(ActionEvent event) {
      if(button == printButton) {
         textArea.append("THIS DOES NOT WORK!");
}   The problem is as follows: I want to be able to write text in the textArea in class ServerGUI from the class addGUI, but I can't. I hope you understand what I mean.
How is this fixed? Please help me!

public void actionPerformed(ActionEvent event) {
      if(button == addButton) {
         addGUI add = new addGUI(textArea);
public class addGUI extends JFrame implements ActionListener {
    private TextArea textArea;
    public addGUI(TextArea textArea) {
        this.textArea = textArea;
    }/Kaj

Need help with class design

I want to design and use one or more classes for a particular project I am working on.
I need some advice hopefully from someone who has experience in this area. Basically,
for this particular problem I have two database tables. I want the first class to
represent the first database table and the second class to represent the second
database table. An object of the first class will be created first, and then if certain
criteria are met then an object of the second class will be created.
Question:
Should I use classical inheritance and let the first class inherit from the second class?
Or should I use the containment delegation model and embed an object of the second
class in the first class?
----Tables------
For example, my first table ET_UserData looks something like this:
ET_UserData
(PK)UserName
Password
FirstName
LastName
My second table ET_DetailedUserData looks like this
ET_DetailedUserData
(FK)UserName
WorkAddress
WorkPhoneNumber
CityWhereEmployed
SocialSecurityNumber
City
State
StreetAdress
PrimaryTelephoneNumber
AlternatePhoneNumber
HasRegistered
RegistrationDate
RegistrationTime
CreditCardNumber
NameOfPrimaryContact
DateOfBirth
Weight
EyeColor
Height
Member
Here is are some pseudo classes for the two classes.
Class UserData
string UserName
string FirstName
string LastName
Class DetailedUserData /* For a classical approach, sub class off of class UserData */
/* UserData ThisUser --> Containment delegation model */
string (FK)UserName
string WorkAddress
string WorkPhoneNumber
string CityWhereEmployed
string SocialSecurityNumber
string City
string State
string StreetAdress
Int PrimaryTelephoneNumber
Int AlternatePhoneNumber
Bool HasRegistered
Int RegistrationDate
Int RegistrationTime
Int CreditCardNumber
String NameOfPrimaryContact
Int DateOfBirth
Int Weight
Int EyeColor
Int Height
bool Member
}

Thank you for your help. If you can continue to help me I would appreciate it.
I and another developer did the database design. Pretty solid design. Plus we have all of the requirements
which are very good too.
Originally I wanted just one table to contain all of the data associated with a user. Instead of ET_UserData and ET_Detailed user data I wanted just one table. But I decided to break this table up into the two tables for the following reason.
1.) This is a web application where each user logs into a web form. At a minimum, in order to use the website the session associated with each user needs the UserName, Password, First and last name.
This is the data in the first table.
If they choose to do more specialized functions on this website, then they will need all of the information (Attributes) that are located in the second table. In general 40% of the time all users will need information located in the second table.
My reasoning for breaking the table into two seperate tables is that I wanted to minimize the amount of data involved in a result set, created from the sql query. The math tells me that 60% of the time most of the data in the result set will not be used.
2.) If I create one class to represent all of the data/attributes in both tables, then my reasoning is that their will be alot of overhead in the single class because 60% of the time, a majority of the attributes are not needed and used.
I would deeply appreciate your help with this. You seem to have great insight and advice. Please help me as I increase the duke dollars Sir.

Need help with a mapping

Hi,
I have problems to create an update on the NULL values in a table with the mapping operators of the OWB mapping editor. The SQL syntax is the following:
UPDATE T006_SITE
SET T006A11FK_COUNTRYID = (select MAX(T002A01PK_COUNTRYID) from T002_COUNTRY)
WHERE T006A11FK_COUNTRYID IS NULL;
Any suggestions which mapping operators I should use? Or is there even a way that I can use my SQL code?
Thanks in advance,
Dirk

Thanks for your reply Dave.
I have no answer to your question but I found a way to create my SQL code with OWB mapping operators. Unfortunately it is very very slow compared to the execution of the SQL code and therefore not useful at all. I connected the following steps all in one mapping:
1. Table operator(T006_SITE) -> Filter(T006A01PK_SITEID where T006A11FK_COUNTRYID IS NULL)
2. Table operator(T002_COUNTRY) -> AGG (MAX T002A01PK_COUNTRYID)
3. JOIN the output from 1. and 2.(T006A01PK_SITEID and T002A01PK_COUNTRYID))
4. UPDATE T006_SITE with the output from 3. (T006A01PK_SITEID as matching column and T006A11FK_COUNTRYID as column to be updated)
The execution mode of the mapping should be set-based fail over to row-based, but it used row-based mode even without getting an error. Are UPDATE mappings only executable in row-based mode or is there a way to change that?
Does anyone have an idea how I can speed up that mapping or integrate my SQL code in the OWB?
Thanks in advance,
Dirk

Help with Images Maps,

Hi,
I have an HTML page where an IMG is loaded:
<img src="images/renders/Main_Image.jpeg" alt="Main Image" name="Main_IMG" width="800" height="600" border="0" usemap="#Main_MAP" id="Main_IMG" />
Then I have 4 images maps laid on top of the image:
<map name="Main_MAP" id="Main_MAP">
<area shape="poly" coords="--some numbers--" href="Area1.html" target="_parent" alt="Area1 Button" />
<area shape="poly" coords="--some numbers--" href="Area2.html" target="_parent" alt="Area2 Button" />
<area shape="poly" coords="--some numbers--" href="Area3.html" target="_parent" alt="Area3 Button" />
<area shape="poly" coords="--some numbers" href="Area4.html" target="_parent" alt="Area4 Button"/>
</map>
See Example:
Each area is essentially an invisible button. I want to make it so when the mouse hovers over the areas, I want the background image to display something different. On mouse out of the area, I want the image to go back. When the user clicks the Area, the user is moved to another part of the site.
Area 1 should change Main_Image.jpeg to Main_Image1.jpeg
Area 2 should change Main_Image.jpeg to Main_Image2.jpeg
etc.
I thought I could do this with Images Maps, but I can't figure out how. Is there an easier way? I have Dreamweaver CS4.
Thank you in advance!

Hey CF. Thank you very much for the reply! I thought I was losing my mind trying to figure out a way.
I'll try out the slice and dice approach... where's a turtle when you need one.
Cheers Dude.
S

Need help with gradient map

Hello All,
Please can someone please advice me how to get the following gradient, I have tried but with no luck I am not good with gradient map!

Hello!
What part do you have trouble with? the recreation of the gradient, or how it affects the image?
In the gradient map editor, you can double-click on the bottom markers (called gradients stops) to change their color, and drag them around to re-create what you see... Click between two markers to add one, drag a gradient stop down to remove it.
In fact, you do not need the fourth gradient stop, the white one on the right side.
The top markers control the transparency (in regular gradients, gradient maps are unaffected)
With such a gradient map, the dark areas of the image will be white, neutrals will be black and light areas will be white.

Newbie help with Fixed IP configuration / Machine Record

I have a Mac Mini running Snow Leopard Server. It has a fixed IP, and runs a variety of web services, iCal Server and Address Book Server. I've been having problems getting VPN to work (can connect from client OK, but not able to get any traffic through the VPN subsequently).
In the process of trying to work out what is wrong with VPN, I noticed an oddity with the 'machine record' in DNS. The server was configured initially while connected to a LAN, but now runs with a fixed IP / FQDN outside the LAN.
DNS is set up with the original machine name (sls.2gc.org) assigned to the original 192.x.x.x address it had when first configured. The reverse entry is also based on this 192. number.
This name and 192.x.x.x number also appears in the 'Workgroup Manager' in the machine record.
The new configuration has the machine assigned to a FQDN that is not the same as the original machine name (2gc.org, rather than sls.2gc.org), and a different IP address (77.44.50.51).
Question is do I need to do anything (does the mapping to 192.x.x.x matter). If so, do I simply run changeip to correct the number / name, or do I have to also manually change the Workgroup Manager and DNS entries too?
Thanks in advance for any help.

You need a second IP for the server which you can use to get at services in the server itself.
If you try to use the main IP, even when the VPN is up, the traffic will not go through the VPN but direct and will then be stopped by the firewall.
From what IP-range does the VPN client get it's IP?
If you need to go through the VPN and then to Internet (via the server) you need to have NAT running.
NAT requires the firewall running and you'd also need ipforwarding (automatically on when firewall/NAT is on).
The server can have a second (private) IP added to an alias en0 ethernet interface.
I'd prefer using a NAT router/firewall between server and Internet or a second (LAN) interface in the server. Some use Apple USB -> ethernet adapter but you also have the AirPort one (but it won't make a good AP and you only get WEP encryption).

Help with Class-map configuration - ZBFW

Similar Messages

Maybe you are looking for