OAM Webgate - webgate agent point to multiple Access Servers?

I am trying to find out if it is possible to have a single webgate agent on OHS server point to more than one OAM server.
We have multiple OAM servers (not clustered) behind a load balancer. When I set up an agent for the OHS server, I copy the cwallet.sso and ObAccessClient.xml from, for example, OAM server 1. The OAM servers are all setup the same.
It seems the cwallet.sso is tied directly to that OAM server, and if I try to point the OHS to server 2, I get errors. I change the ObAccessClient.xml to the url specified in the load balancer.
Is it possible to have one set of files (cwallet.cco and ObAccessClient.xml) that would work on different OAM servers?
thanks in advance.
Mark

In that case, the default behaviour is that a WebGate cannot connect to an OAM server in a different installation (different to the one it is registered in).
However, this functionality is available in a Multi-Data Centre architecture, details of which can be found here: Using Multi-Data Centers - 11g Release 2 (11.1.2.2)
I think this may meet your requirements?
Regards,
Colin

Similar Messages

Multiple webgates pointing to one access gate entry in OAM

Can we install webgates on multiple boxes and point to same access gate entry in OAM.
Are there any issues with this kind of configuration?
Any opinion?

Hi,
It is technically possible to do this, and makes sense when all the WebGates are logically the same (for example, they all reside on instances of load balanced web servers).
When the WebGates reside on logically different web servers, then it will be more difficult to have different policies protecting similarly named resources on the different web server. For example,eg you may want to protect /admin differently on the different web servers, and you will not be able to use Preferred HTTP Host to achieve this when they share the same AccessGate definition. Also, you will not be able to set different timeouts on the different WebGates, or have different settings for such things as IPValidation or cookie domains.
Regards,
Colin

OAM 11g Webgate 10g customized SSO logout page

As stated in the title, I am using OAM 11g and Webgate 10g. I am trying to create a customized SSO logout page but am confused on a few parts. First off, in http://docs.oracle.com/cd/E17904_01/doc.1111/e15478/logout.htm#CHDHFGJC , it states the following step for their logout.html:
Logic in logout.html redirect to the OAM Server. For example:
http://myoamserverhost:port/oam/server/logout?end_url=http://my.site.com/
welcome.htmlMy question is if this is truely required? Or is there a way to have OAM invalidate the session and do its internal part of the logout procedures without needing to force the user to redirect to the OAM server's logout URL (eg: it automatically recognizes that the Webgate URL is "...../logout.html" and handles it properly). From talking to colleagues it sounds like this should be possible, and I see some mentions of it in the above documentation, but this appears to be 11g OAM and 11g Webgate behavior. At the same time though, the line "Logout is initiated when an application causes the invocation of the logout.html file configured for any registered OAM 10g Webgate." Leads me to believe that it can work with 10g webgate as well.
Or, is there a way to have multiple valid logout pages on the OAM server? (There is currently a customized logout page that we cannot modify, and does not meet all the requirements we have for look/feel)
Thank you
Edited by: mBaldwin on Apr 12, 2013 10:30 AM

Bump Any ideas?

New Xperia Z1 wifi problem 14.4.A.0.108 (Multiple access points)

Hi,
I recently got a replacement Xperia Z1. This phone was immediately updated to the latest firmware (ending with 108) so I do not know if this problem existed prior to the update.
My problem is that the phone thinks it's still coneected to a wireless network even when it's not which prevents the phone from reconnecting when in range of a new network.
When it's working it looks like this: (same signal strenght in both the top bar and the settings)
When it's not working it looks like this (sifferent signal strenghts when compring the settings and the top bar)
And I'm 15km away from my home network
To make it work again I only have to turn off wifi and then turn it on again.
This screen shows for about 10 seconds when the problem has occured (instead of usually 1-2 seconds)
I've already tried to reset and reinstall the firmware. Is this an hardware error or has this something to do with the latest update?
//Mikael

An Update:
I've found that this problem only occurs on networks with multiple Access Points and when the phone is switching from on AP to another.
If the problem occurs the network stays "connected" even though I leave the area as described in my first post.
Does this help?
I've tested on several networks.

How to automate restart of multiple access points?

I need to restart multiple access points, at least twice a day. This is my interim solution for the dlink dap2553...simply to restart them. Each AP has the same username and password, but different IPs (of course).

Have a look a the powershell cmdlets for stopping and starting an service:
Stop-Service and
Start-Service
and put in an powershell script, e. g.:
Stop-Service -Name Service1
Stop-Service -Name Service2
Stop-Service -Name Service3
Start-Service -Name Service3
Start-Service -Name Service2
Start-Service -Name Service1
then you can put this into an scheduled task.

Multiple access gates with one ASDK

Hello All,
We have an ASDK installed on an application and configured an access gate to talk to OAM1 with datastore1. Now we have OAM2 with datastore2 and need this application to talk to the OAM2. OAM1 and OAM2 handle different sets of users.
Can we install another access gate on the same ASDK and talk to OAM2? If not please suggest the best way to provide SSO with both OAMs to the application?
Thanks in advance.

IDMGod,
I tried setting the environment variables, oracle doc below says
http://download.oracle.com/docs/cd/E15217_01/doc.1014/e12491/as_api.htm#CHDFCJEI
OBACCESS_INSTALL_DIR = SDK_install_dir
Points to the Access Manager SDK install root. (This is necessary only if your AccessGate does not specify SDK_install_dir as part of the ObConfig.initialize method).
From what I understood, this needs to changed by defining the parameters in ObConfig.initialize method. Since I already have an Access Gate1 configured, is it possible to change this value for that Access Gate? If so where can I find this method in the AccessGate1 (I used configureaccessgate utility for this, there is no custom code used in this accessgate)
When I install Access Gate2, do I need to write custom access gate code as mentioned in the examples in the above doc? or can I use the out of box access gate by running the configureaccessgate utility?
Thank you.

Belong to Multiple Access Policies

Hello,
I am curious about everyone else's experience with access policies being maintained by groups, and some users belonging to multiple groups and multiple access policies. Example:
John Doe belongs to group1 and group2
Order
1
AccessPolicyA
Selected groups: group1
Blocks access to URL xyz.com
2
AccessPolicyB
Selected groups: group2
Allows access to URL xyz.com
Will the WSA check all access policies that John Doe authenticates to? Or will it stop and use the first access policy that he hits, in this example AccessPolicyA?

It is a bit of a hassle, but we had to reorder our access policies thinking in a top down approach as well.
Also you can create AD global security groups specifically for Internet access if you'd like. Prefix it with something that makes sense so they are all together in AD. We use IG- (IG stands for Internet Group). So we have AD groups called IG-RestrictedInternet or IG-SocialMedia.
If your in Restricted intenret, your totally restricted except for a few sites we allow. If your not in a group you have general internet access except for time wasting stuff like facebook. If your in IG-SocialMedia then you have all the general internet access PLUS social media like facebook, linkedin, etc... This is usually given to marketing or HR people.
So while annoying, there are ways to think about how to handle this. I can see your point say you are a Manager of the marketing department. Well you might be in an AD group for marketing as well as an AD group for management. In this case our Management policy would come above the marketing policy. So if your not doing specific groups then you can just order them by employee position hierarchy with usually management / hr on top.

La commande STAT à échoué: failed to lock or parse or multiple access

Hi,
I installed Thunderbird 24.4.0 and configured an account in IMAP and everything went fine. Then I configured that same account in POP3 and I'm having the message: "La commande STAT a échoué. Erreur lors de la récupération des tailles et du nombre de messages. Le serveur de courrier XXX a répondu: failed to lock or parse or multiple access." I've been searching the web for an answer and did not find any. I'm just about to remove Thunderbird.
I configured some other IMAP accounts on the same provider and everything works fine. It looks like only the POP3 doesn't work.
I installed Thunderbird 24.4.0 on a Windows 7 x64 computer. I also installed all recent patch in case, but it did not solve the problem.
Hope you can help me. Thanks for any suggestions.

Paramètres de base de l'application
Nom: Thunderbird
Version: 24.4.0
Agent utilisateur: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
Dossier de profil: Ouvrir le dossier correspondant
(Lecteur local)
Identifiant de compilation de l'application: 20140316131045
Plugins activés: about:plugins
Configuration de compilation: about:buildconfig
Rapports de plantage: about:crashes
Utilisation mémoire: about:memory
Comptes courrier et groupes
account1:
INCOMING: account1, , (none) Local Folders, plain, passwordCleartext
account2:
INCOMING: account2, , (imap) imap-mail.outlook.com:993, SSL, passwordCleartext
OUTGOING: smtp-mail.outlook.com:587, alwaysSTARTTLS, passwordCleartext, true
account9:
INCOMING: account9, , (pop3) 207.134.105.7:110, plain, passwordCleartext
OUTGOING: relais.videotron.ca:587, plain, passwordCleartext, true
Extensions
Préférences modifiées importantes
Nom: Valeur
browser.cache.disk.capacity: 358400
browser.cache.disk.smart_size.first_run: false
browser.cache.disk.smart_size.use_old_max: false
browser.cache.disk.smart_size_cached_value: 358400
extensions.lastAppVersion: 24.4.0
font.name.monospace.el: Consolas
font.name.monospace.tr: Consolas
font.name.monospace.x-baltic: Consolas
font.name.monospace.x-central-euro: Consolas
font.name.monospace.x-cyrillic: Consolas
font.name.monospace.x-unicode: Consolas
font.name.monospace.x-western: Consolas
font.name.sans-serif.el: Calibri
font.name.sans-serif.tr: Calibri
font.name.sans-serif.x-baltic: Calibri
font.name.sans-serif.x-central-euro: Calibri
font.name.sans-serif.x-cyrillic: Calibri
font.name.sans-serif.x-unicode: Calibri
font.name.serif.el: Cambria
font.name.serif.tr: Cambria
font.name.serif.x-baltic: Cambria
font.name.serif.x-central-euro: Cambria
font.name.serif.x-cyrillic: Cambria
font.name.serif.x-unicode: Cambria
font.name.serif.x-western: Cambria
font.size.fixed.el: 14
font.size.fixed.tr: 14
font.size.fixed.x-baltic: 14
font.size.fixed.x-central-euro: 14
font.size.fixed.x-cyrillic: 14
font.size.fixed.x-unicode: 14
font.size.fixed.x-western: 14
font.size.variable.el: 17
font.size.variable.tr: 17
font.size.variable.x-baltic: 17
font.size.variable.x-central-euro: 17
font.size.variable.x-cyrillic: 17
font.size.variable.x-unicode: 17
font.size.variable.x-western: 12
mail.openMessageBehavior.version: 1
mailnews.database.global.datastore.id: 655e8821-60e3-4b55-887b-e0a2779889e
network.cookie.prefsMigrated: true
places.database.lastMaintenance: 1398527739
places.history.expiration.transient_current_max_pages: 49654
plugin.importedState: true
plugin.state.java: 0
Accélération graphique
Description de la carte: Intel(R) HD Graphics 4000
ID du vendeur: 0x8086
ID du périphérique: 0x0166
RAM de la carte: Unknown
Pilotes de la carte: igdumd64 igd10umd64 igd10umd64 igdumd32 igd10umd32 igd10umd32
Version du pilote: 8.15.10.2712
Date du pilote: 3-26-2012
Direct2D activé: false
DirectWrite activé: false (6.2.9200.16571)
Paramètres ClearType: Paramètres ClearType introuvables
Rendu WebGL: false
Fenêtres avec accélération graphique: 0
AzureCanvasBackend: skia
AzureFallbackCanvasBackend: cairo
AzureContentBackend: none
JavaScript
Ramasse-miettes incrémentiel: 1
Accessibilité
Activée: 0
Empêcher l'accessibilité: 0
Versions des bibliothèques
Version minimale attendue
Version utilisée
NSPR
4.10.2
4.10.2
NSS
3.15.4 Basic ECC
3.15.4 Basic ECC
NSS Util
3.15.4
3.15.4
NSS SSL
3.15.4 Basic ECC
3.15.4 Basic ECC
NSS S/MIME
3.15.4 Basic ECC
3.15.4 Basic ECC

Use AGENT through dynamic attribute access

I'm working with some persistent objects, but don't know the actual persistent class until runttime. To get the agent, I've coded this
DATA: l_agntclass TYPE classname,
     lr_det_agent TYPE REF TO cl_os_ca_common.
FIELD-SYMBOLS <lr_det_agent> TYPE any.
l_agntclass = me->derive_agent_classname( ).
ASSIGN (l_agntclass)=>agent to <lr_det_agent>.
lr_det_agent ?= <lr_det_agent>.
Now I can call the methods of lr_det_agent. All well and good, and it works, but is this the right way? I tried defining <lr_det_agent> as TYPE REF TO. But that failed in the assign. And I tried CASTING TYPE on the assign, but that doesn't accept classes.
Am I missing something obvious?
Thanks
matt

Hello Matt
The solution is quite simple (see below):
*& Report ZUS_SDN_PERSISTENT_CLASS
*& Thread: Use AGENT through dynamic attribute access
*& <a class="jive_macro jive_macro_thread" href="" __jive_macro_name="thread" modifiedtitle="true" __default_attr="1143122"></a>
REPORT zus_sdn_persistent_class.
DATA: gd_clsname    TYPE classname,
      gd_method     TYPE string,
      gd_attribute TYPE string.
DATA: go_obj        TYPE REF TO object, " root object
      go_os_common TYPE REF TO cl_os_ca_common.
DATA: go_persist    TYPE REF TO cb_alert,
      go_agent      TYPE REF TO ca_alert.
FIELD-SYMBOLS <go_det_agent> TYPE ANY.
START-OF-SELECTION.
BREAK-POINT.
gd_attribute = 'CA_ALERT=>AGENT'.
" In your case: CONCATENATE l_agntclass '=>AGENT' ...
ASSIGN (gd_attribute) TO <go_det_agent>.
go_os_common ?= <go_det_agent>.
BREAK-POINT.
END-OF-SELECTION.
Regards
Uwe

How can I set up a guest access point with a Time Capsule and an Airport Extreme? I am using a Telus router with the Time Capsule used as a wireless access point (bridge mode). I don't want the guest access point to have access to my network.

How can I set up a guest access point with a Time Capsule and an Airport Extreme? I am using a Telus router with the Time Capsule used as a wireless access point (bridge mode). I don't want the guest access point to have access to my network.

The Guest Network function of the Time Capsule and AirPort Extreme cannot be enabled when the device is in Bridge Mode. Unfortunately, with another router...the Telus...upstream on your network, Bridge Mode is indicated as the correct setting for all other routers on the network.
If you can replace the Telus gateway with a simple modem (that performs no routing functions), you should be able to configure either the Time Capsule or the AirPort Extreme....whichever is connected to the modem....to provide a Guest Network.

Using table comparison transform can you point to multiple tables as target

Using table comparison transform can you point to multiple tables as target tables?
Thank you very much for the helpful info.

If you want to feed the output to multiple tables, you can do so, but you have to be cautious enough on which table to be used as a comparison table in this case. The comparison table provided inside Table Comparison will be compared against the input data set for generating opcodes (Insert / Update / Delete) to input rows.

Multiple access or multiple statement

In our scenario we have multiple records coming from SAP and we have to INSERT into Database.
We have modeled a XML-SQL jdbc document format in the target data type. There is one issue that we need to clarify here.This would be regarding the occurence of the the STATEMENT node vis-a-vis the ACCESS node.Two options which we have are:
1) Make the Statement unbounded and access as occurrence 1. Generate a new statement for each record and map the access for each record.
2) Make the Statement as 1..1, and make the ACCESS as 1..unbounded. The next step would be to generate the ACCESS node as many times as the number of records to be inserted.
Is there a difference here? or is there an advanatage or disavantage among the above two options.

What is the difference between having the STATEMENT tab as unbounded or the access being unbounded.
If you have only one table with one insert statement, then there is no need to create Statement and access node as unbounded. Its occurrence could be one. If there are multiple tables to be used, you should make occurrence of Statement as unbounded. Similarly in case of multiple insert on same table, you will have to create access node as unbounded.
Would there be muliple database queries triggered on the database in case the STATEMENT is set to unbounded?
Yes.
Would a case with muliple ACCESS tags and one STATEMENT tag generate just one SQL statement.
Both will generate multiple SQL statements. Statement will create altogether a new transaction.
The problem with multiple access could be that either all insertion would be committed or all would be rolled back. And the problem with multiple Statement would be that each insert will act as a separate transaction which surely hampers performance.
Regards,
Prateek

Is there a way to acquire a set number of points from multiple channels?

I had set up a VI to use AI ONE POINT.VI for multiple channels. Getting one data point for me is useless. I need, say, 100 data points from multiple channels at once. Is there a way to do that? Is there an example program I'm not seeing that already does that?
Thanks!
p.s. I have Labview 6.1

Hello,
Thank you for contacting National Instruments.
As Dennis had mentioned, there are many example programs that ship with LabVIEW that demonstrate how to take measurements from multiple channels with either a finite or continuous amount of data to be acquired. In LabVIEW 6.1 you can find these examples by going to Help >> Find Examples >> Hardware Input and Output >> DAQ >> Analog Input >> General.
In these examples, if you would like to sample multiple channels, you simply need to add the physical channels separated by a comma for example: 1,3,5 would sample channels one, three, and five. You can also use a colon to sample a sequence of channels for example: 4:6 would sample channels four, five, and six. This makes it easy for you to choose the chann
els that you would like to sample without having to make any modifications to your code.
Regards,
Bill B.
Applications Engineer
National Instruments

One Shipping Point for Multiple Storage Location

Hi
How to ship a sales order from Multiple storage location.The system is not accepting .Can any one tell us the missing portion ?
Thanks

We want to assign Shipping Point to Multiple Storage Location.It is all batch Managed ..The Material will available in two or three location.We don't want the stock to move to shipping location.We want to confirm at the time of creating sales order with the available location to one shipping point

Can one Condition type can have multiple access sequence?

hi,
Can one Condition type can have multiple access sequence?

Hello,
You can have one access sequence for condition type, but an access sequence can have more than one accesses.
Prase

OAM Webgate - webgate agent point to multiple Access Servers?

Similar Messages

Maybe you are looking for