A question about CRL retrieval over HTTP

Hello
All<o:p></o:p>
Can
someone please help me with the following question<o:p></o:p>
At the moment I have a couple of Windows 2003 R2 Servers with Microsoft
Certificate Services installed (e.g. domain joined enterprise CA infrastructure). <o:p></o:p>
The CDP extension of issued certs contains both and LDAP path and HTTP path to retrieve the CRL
the HTTP path being the standard <o:p></o:p>
URL=http://<CAServer FQDN>/CertEnroll/ENTRootCA.crl<o:p></o:p>
and LDAP being the usual location in AD<o:p></o:p>
Now I need to turn off the 2003 R2 CA in the near future and want to be sure the
clients requesting a CRL can still obtain the CRL.<o:p></o:p>
The CARoot Cert is already distributed to all the workstations (as is the SubCA cert) to the usual containers.<o:p></o:p>
The LDAP Path comes first in the list of CRL locations in the CDP extension followed by the URL location.<o:p></o:p>
I know (believe) in general a UA (user agent i.e. WEB Browser) with check the list of CRL locations in turn and as long as it can reach one of them will be OK.<o:p></o:p>
I am OK on the Windows side of things but we also have a UNIX/Linux environment (like most companies) that also utilize certificates issued by the MS CA’s therefore their respective UG will
(or should that be might) check the CRL via
the CDP.<o:p></o:p>
If I turn off the CA then the HTTP path in the CDP will no longer be available (LDAP will still be available).<o:p></o:p>
I just want to check if there are any UG out on the network using HTTP to retrieve the CRL, so I was thinking about checking one or more logs on the CA for HTTP traffic regarding CRL retrieve.<o:p></o:p>
Questions<o:p></o:p>
Is CRL retrieval from the CA (via the default HTTP path) logged in any of the CA
Logs?
If so which logs?
If not logged by default can I turn up logging (i.e. I see there is a Debug option) and if so will this then log HTTP CRL retrieval requests (e.g. clients IP address making the http request)?<o:p></o:p>
I just want to check this in case some UNIX/Linux UG are not trying LDAP first or cannot retrieve via LDAP and therefore have to reply on Http before I turn on the CA <o:p></o:p>
Thanks
all in advance<o:p></o:p>
AAnotherUser__<o:p></o:p>
AAnotherUser__

(same text, formatted better)
Hello All
Can someone please help me with the following question
At the moment I have a couple of Windows 2003 R2 Servers with Microsoft
Certificate Services installed (e.g. domain joined enterprise CA infrastructure).
The CDP extension of issued certs contains both and LDAP path and HTTP path to retrieve the CRL
the HTTP path being the standard
URL=http://<CAServer FQDN>/CertEnroll/ENTRootCA.crl
and LDAP being the usual location in AD
Now I need to turn off the 2003 R2 CA in the near future and want to be sure the
clients requesting a CRL can still obtain the CRL.
The CARoot Cert is already distributed to all the workstations (as is the SubCA cert) to the usual containers
The LDAP Path comes first in the list of CRL locations in the CDP extension followed by the URL location.
I know (believe) in general a UA (user agent i.e. WEB Browser) with check the list of CRL locations in turn and as long as it can reach one of them will be OK
I am OK on the Windows side of things but we also have a UNIX/Linux environment (like most companies) that also utilize certificates issued by the MS CA’s therefore their respective UG will
(or should that be might) check the CRL via
the CDP
If I turn off the CA then the HTTP path in the CDP will no longer be available (LDAP will still be available).
I just want to check if there are any UG out on the network using HTTP to retrieve the CRL, so I was thinking about checking one or more logs on the CA for HTTP traffic regarding CRL retrieve.
Questions
Is CRL retrieval from the CA (via the default HTTP path) logged in any of the CA
Logs?
If so which logs?
If not logged by default can I turn up logging (i.e. I see there is a Debug option) and if so will this then log HTTP CRL retrieval requests (e.g. clients IP address making the http request)?
I just want to check this in case some UNIX/Linux UG are not trying LDAP first or cannot retrieve via LDAP and therefore have to reply on Http before I turn on the CA
Thanks all in advance
AAnotherUser__
AAnotherUser__

Similar Messages

Question about Model Driven over RTMPS configuration

I am testing model driven development features these days and encountered a problem:
When I used RTMP channel to retrieve data from the server, everything works fine, however when I tried to use RTMPS channel, I got following error:
Could not initialize DataService.
Missing or invalid configuration for destinations: ["CodeModel.Code"]
the CodeModel is the model I created by using the modler under Flash Builder4, and it simply include one table called Code. I can retrieve data, update and delete data with this model over RTMP channel, but not over RTMPS channel.
I set up my RTMPS channel by creating a self-signed certificate and installed it in the trusted area of the browser, then I referenced the keystore file in the service-config.xml, here is the snap of my configuration:
<channel-definition id="my-rtmps" class="mx.messaging.channels.SecureRTMPChannel">
        <endpoint url="rtmps://{server.name}:2099"
          class="flex.messaging.endpoints.SecureRTMPEndpoint"/>
        <properties>
            <idle-timeout-minutes>30</idle-timeout-minutes>
             <keystore-file>D:/tomcat.store</keystore-file>
            <keystore-password>password</keystore-password>
        </properties>
</channel-definition>
following is the server side log when I tried to retrieve data from server over RTMPS channel:
[LCDS]Deserializing AMF/RTMP request
Version: 0 "connect"
1.0
(Command method=connect (2) trxId=1.0)
    (Object #0)
      app = ""
      flashVer = "WIN 10,0,45,2"
      swfUrl = "http://localhost:8080/lcds/CodeDemo-debug/CodeDemo.swf"
      tcUrl = "rtmps://localhost:2099"
      fpad = false
      capabilities = 15.0
      audioCodecs = 3191.0
      videoCodecs = 252.0
      videoFunction = 1.0
      pageUrl = "http://localhost:8080/lcds/CodeDemo-debug/CodeDemo.html"
      objectEncoding = 3.0
    true
    "nil"
    (Typed Object #1 'flex.messaging.messages.CommandMessage')
      operation = 5.0
      correlationId = ""
      clientId = null
      body = (Object #2)
      headers = (Object #3)
        DSMessagingVersion = 1.0
        DSNeedsConfig = true
        DSId = "my-rtmps"
      messageId = "12B87B6D-9372-71E2-3D63-8C680CBEA8EE"
      timestamp = 0.0
      timeToLive = 0.0
      destination = ""
[LCDS]Received command: TCCommand [ Cmd: 2, MethodName: connect, TrxID: 1.0]
[LCDS]FlexSession created with id 'FECA09F0-F71A-F8ED-9E68-30B9D6609791' for a direct RTMP connection. Id value was server generated.
[LCDS]Returning service description for endpoint: my-rtmps config: {default-channels={channel={ref=my-rtmp}}, channels={channel=[{id=my-rtmps, type=mx.messaging.channels.SecureRTMPChannel, endpoint={uri=rtmps://{server.name}:2099}, properties={serialization={enable-small-messages=true}}}, {id=my-rtmp, type=mx.messaging.channels.RTMPChannel, endpoint={uri=rtmp://{server.name}:2039}, properties={serialization={enable-small-messages=true}}}]}}
[LCDS]Serializing AMF/RTMP response
Version: 0
(Command method=_result (0) trxId=1)
    (Object #0)
      id = "FECA09F0-F729-8037-075D-EDD727DDE50E"
      objectEncoding = 3.0
      level = "status"
      serverConfig = (Typed Object #1 'flex.messaging.config.ConfigMap')
        default-channels = (Typed Object #2 'flex.messaging.config.ConfigMap')
          channel = (Typed Object #3 'flex.messaging.config.ConfigMap')
            ref = "my-rtmp"
        channels = (Typed Object #4 'flex.messaging.config.ConfigMap')
          channel = (Typed Object #5 'flex.messaging.io.ArrayCollection')
            source = (Array #6)
              [0] = (Typed Object #7 'flex.messaging.config.ConfigMap')
                id = "my-rtmps"
                type = "mx.messaging.channels.SecureRTMPChannel"
                endpoint = (Typed Object #8 'flex.messaging.config.ConfigMap')
                  uri = "rtmps://{server.name}:2099"
                properties = (Typed Object #9 'flex.messaging.config.ConfigMap')
                  serialization = (Typed Object #10 'flex.messaging.config.ConfigMap')
                    enable-small-messages = "true"
              [1] = (Typed Object #11 'flex.messaging.config.ConfigMap')
                id = "my-rtmp"
                type = "mx.messaging.channels.RTMPChannel"
                endpoint = (Typed Object #12 'flex.messaging.config.ConfigMap')
                  uri = "rtmp://{server.name}:2039"
                properties = (Typed Object #13 'flex.messaging.config.ConfigMap')
                  serialization = (Typed Object #14 'flex.messaging.config.ConfigMap')
                    enable-small-messages = "true"
      details = null
      description = "Connection succeeded."
      DSMessagingVersion = 1.0
      code = "NetConnection.Connect.Success"
      DSrtmpId = "FECA09F0-F71A-F8ED-9E68-30B9D6609791"
[LCDS]Thread[my-rtmps-SocketServer-WorkerThread-2,5,main] registering write interest for Connection '26991461'.
The server side log did not show any exceptions, I am wondering is there any other settings that I need to pre-config in order to make my app run over the RTMPS channel?
Any help will be appreciated!

The problem is solved. The error message is due to the default channel was set to RTMP in my data-management-config.xml file. That's why modifing the application level default channel does not work. After I changed it to RTMPS, it worked.
One more thing to make sure though, if I want to use both of the RTMP channel and RTMPS channel in my app (not for fail over) , I have to create at least two models right? Also do I need to change the default channel in data-management-config.xml if the model I am about to deploy expects different channel than previous models?

A very odd question about accessing cube via HTTP PUMP

hi there:
Everything was fine a couple of days ago when I used excel to connect to cube. Today, when I use excel -> from Other sources, I can select the AS database but can not see the cube at all... The odd thing is that if I choose to use Existing Connections
which contains the connection to the CUBE before, after put my user id and password, I am able to connect and navigate cube data.
There is a role for the AS database and myself has been granted as Full control ( administrator). I've also switched to SSMS and access cube over there directly, no issues at all.
Question: why excel is not allowing me to see the list of cubes for an AS database???
Thanks
--Currently using Reporting Service 2000; Visual Studio .NET 2003; Visual Source Safe SSIS 2008 SSAS 2008, SVN --

Hello,
How have you setup permissions for the HTPP access. If e.g. IIS and SSAS running on different machines, the permissions settings are a little bit difficult. So may a different user is used and that one may don't have permissions to access the cube.
See Configure HTTP Access to Analysis Services on Internet Information Services (IIS) 7.0 => Step 3: Configure IIS authentication and add the extension + Step 5: Grant data access
permissions
Olaf Helper
[ Blog] [ Xing] [ MVP]

Need opinions about RMI tunneling over HTTP please

My Tomcat Server wants to talk with a JBoss Server.
This communication has to go through a firewall, and I want to use
the HTTP tunneling function.
Can anybody please tell me if the HTTP tunnel has any disadvantages?
How big is the performanceloss?
Can anybody please give me a link how to do this? What configurations
do I have to do where?
Thanks!

you do not have to do anything special for this, if you do not want to.
All yours questions are answered here :
http://java.sun.com/j2se/1.3/docs/guide/rmi/spec/rmi-arch6.html

Question about calls rolling over

Sorry for the noob question but here goes. I have Call Manager v7. My question is if I have 3 phones with one ext 0009 and I want the calls to go to the first phone and if that person isn't there go to the next phone and then if that person isn't there go to the last phone. If the last person isn't there, have it go to vm. Hopefully that made sense. These are all 7941 phones.

Hi yulook,
You would need to take the Shared Support Line/DN 0009 and make
it a new Hunt Pilot DN. Then on the Level 1,2 & 3 phones you would put
a new DN on Line button 1. Shared lines like 0009 will always ring all
phones simultaneously in your current config.
In the Line Group that is associated with the new Shared Support Hunt
Pilot you can then set a Top Down algorithm that routes to Level 1, Level 2
and Level 3 DN Line Group members in the chosen order
Line Groups
Line groups contain one or more directory numbers. A distribution algorithm, such as Top Down, Circular, Longest Idle Time, or Broadcast, associates with a line group. Line groups also have an associated Ring No Answer reversion timeout value.
The following descriptions apply to the members of a line group:
An idle member designates one that is not serving any call.
An available member designates one that is serving an active call but can accept a new call(s).
A busy member cannot accept any calls.
For information on configuring line groups,
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/4_2_3/ccmcfg/b03lngrp.html
Hunt Lists
Hunt lists comprise ordered groupings of line groups. A line group may belong to more than one hunt list. Hunt pilots associate with hunt lists. A hunt list may associate with more than one hunt pilot.
For information on configuring hunt lists,
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/4_2_3/ccmcfg/b03htlst.html
Hunt Pilots ..this is what 0009 would become.
Hunt pilots are sets of digits. They comprise lists of route patterns that are used for hunting. A hunt pilot can specify a partition, numbering plan, route filter, and hunt forward settings. A hunt pilot must specify a hunt list.
For information on configuring hunt pilots,
http://www.cisco.com/en/US/docs/voice_ip_comm/cucm/admin/4_2_3/ccmcfg/b03htpil.html
Cheers!
Rob

Question about iMessage retrieval when messages are visible with "Search" feature

Hello everyone,
Today when I got off of work, I noticed that over 1,000 iMessages from my girlfriend had been deleted, dating as far back as when I purchased my iPhone 4 in June. Of course, I am in the process of freaking out, as we had some great conversations in there that I would like to save. The last time I backed up my iPhone was in September.
The thing is, when I search for her name with the iPhone "Search" function, all of those conversations appear as if they should be in the iMessage list, but they are not. Is there anyway for me to exploit this and restore these iMessages onto my phone?
I'm an Air Force pilot in Texas and don't get to see her much, so I would love to be able to save these messages. I also went to school for electrical engineering, and I'm stumped.
tl;dr iMessages accidentally deleted but still appear in the iPhone "Search" function - is there anyway to restore them?

Unfortunately, not that I'm aware of. The cached data you are seeing in Spotlight search is separate from the messages data on your phone, and you can't restore from one to the other.
Messages are, however, included in the iPhone backup (whether done with iTunes or iCloud). If these messages were on your phone when you last backed up, restoring to the entire backup should recover them.

Question about layering text over an image

Hi -- I am trying to place a layer of text over a ghosted image that I've imported into ID from Photoshop. By "ghosted" I mean that the image has a layer of white fill over it that has been set at 50% opacity. ID won't let text be layered on top of the imported image, no matter how many different ways I've tried to accomplish this. It will allow another image to be layered on top, but not text. If I place a text frame over the ghosted image and type even one letter, the red text overset warning icon appears.
I tried applying the text in Photoshop and that works just fine until the file gets imported into ID, at which point the text looks terrible, having become somehow degraded in transit. I am fairly new to ID and PS, and would appreciate any helpful input.
Thanks!
~Artemis

Sounds like text wrap is applied to either the image or the frame above it, or both. Eihter turn it off if you don't need it for other reasons, or for the frame you want to use on top of it open the Text Frame Options and check the Ignore Text Wrap box in the lower left corner.

Question about Sharing folders over network

Alright, i have a mac and a PC, on the same network. I have a folder on my PC thats shared, and i can access it via the network tab in finder. The network icon thingy appears on the desktop, and it acts like a folder on my mac. Is there anyway i can move this "folder" to another location? Also, when i restart my mac, i have to conncet to the same folder again via the network tab. Is there anyway to have the folder stay there, even when restart my mac?

Create an alias or a symbolic link would be the normal manner so you can access a folder/directory from another location.
Can't help on the log-in automatically but perhaps SharePoints or something will let you. Do you use Samba to connect?

Using Business Service that supports XML over HTTP in OSB

Hi,
I needed to integrate my system with another legacy system that supports communication only through XML over HTTP. I am just trying to understand much about this XML over HTTP. I think in OSB, this is possible only possible through REST interfaces.
Is there any other way and what about HTTP bindings in WSDLs? can you please let me know if you have any insights.
I have gone through the urls about REST interfaces given in these forums. But just wanted to confirm the following scenaiors possible in OSB.
- Client will connect to SOAP based proxy service which will in turn call REST based business service.
- Client will connect to REST base proxy service which will in turn call SOAP based business service.
Following point is not clear from the URLs i went through so just wanted to confirm the following too:
- Client will connect to REST base proxy service which will in turn call SOAP based business service. And is it possible to add anything in soap header before calling soap based business service..
Thanks & Regards
Siva

Hi Siva,
XML over HTTP is a general use case and OSB supports it very well. REST is a special case and should be used when required. To know more about REST you may refer -
http://www.infoq.com/articles/rest-introduction
Now coming to OSB, SOAP and simple XML are two different cases. If you are creating XML type service then it is not binded to a WSDL/XSD but SOAP based service should always be binded with a WSDL. You may add/modify transport headers in OSB.
Evaluate your requirements and then decide what exactly you need to use. Few links which may be of your use -
http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/userguide/configuringandusingservices.html#wp1150438
http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/userguide/configuringandusingservices.html#wp1154255
http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/userguide/configuringandusingservices.html#wp1141071
section "Configuring Business Services using the HTTP Transport" here - http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/httppollertransport/transports.html#wp1083292
http://blogs.oracle.com/jeffdavies/2009/06/restful_services_with_oracle_s_1.html
http://blogs.oracle.com/jamesbayer/2008/07/using_rest_with_oracle_service.html
Regards,
Anuj

Troubleshooting for RPC over https (Outlook Anywhere) connection issue

RPC over https (ROH), well known as Outlook Anywhere, is more frequently used. Even in Exchange 2013, Outlook no longer connects CAS server via MAPI.
In this thread, we will discuss about the troubleshoot checklist about the RPC over https (Outlook Anywhere) connection issue. In order to make it more logical, I’d like to divide the whole troubleshooting to the following processes:
1. Client side to CAS side
2. CAS side to MBX side
[Issues between Client side to CAS side]
In Exchange 2013, Outlook Anywhere is enabled by default. Different from this, Outlook Anywhere in Exchange 2007 and 2010 need to be manually enabled. Thus, please firstly check if the RPC over HTTP component has been installed:
Click Start, and then click Control Panel.
Double-click Programs and Features.
In the left pane of Server Manager, click Features.
In the right pane, click Add Features.
Check if the RPC over HTTP component has been selected.
If the ROH connectivity issue only happens on certain users, the property MAPIBlockOutlookRpcHTTP can be checked:
Get-CASMailbox name | fl MAPIBlockOutlookRpcHttp
2. Confirm if Exchange server is blocked. Ping the Exchange server FQDN on client machine and confirm if it can return the proper IP address.
3. Check if the RPC Proxy server is responding correctly:
rpcping -t ncacn_http -s ExchServer -o RpcProxy=RPCProxyServer -P "user,domain,*" -I "user,domain,*" -H 2 -u 10 -a connect -F 3 -v 3 -E -R none
If 200 code returns, the test is successful.
4. Check if Outlook Anywhere host names are added in the certificate:
To get host names, the following command can be used: get-outlookanywhere |fl *hostname
5. To use the Shell to test Outlook Anywhere connectivity, use the
Test-OutlookConnectivity cmdlet.
[Issues between CAS side to Mailbox side][RZ1]
A. Check if it can connect to store’s port:
RpcPing –t ncacn_http –s ExchangeMBXServer -o RpcProxy=RpcProxyServer -P "user,domain,password" -I "user,domain,password" -H 1 –F 3 –a connect –u 10 –v 3 –e 6001
If it returns as following: Completed 1 calls in 60 ms 16 T/S or 60.000 ms/T, it means the RPC Ping Utility test succeeds.
B. Check if it can Connect to DsProxy Service:
RpcPing –t ncacn_http –s ExchangeMBXServer -o RpcProxy=RpcProxyServer -P "user,domain,password" -I "user,domain,password" -H 2 –F 2 –a connect –u 10 –v 3 –e 6004
If it returns as following: Completed 1 calls in 60 ms 16 T/S or 60.000 ms/T, it means the RPC Ping Utility test succeeds.
C. Check the following registries:
[Disable the auto update]
1).Open Regedit and navigate to:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeServiceHost\RpcHttpConfigurator\RpcHttpConfigurator
2).Set the PeriodicPollingMinutes value to 0.
[Check the RpcProxy ValidPorts]
1).On the RPC proxy server, start Registry Editor (Regedit).
2). In the console tree, locate the following registry key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\RpcProxy
3). In the details pane, right-click the ValidPorts subkey, and then click Modify.
4). In Edit String, in the Value data box, type the following information:
ExchangeServer :6001-6002; ExchangeServerFQDN :6001-6002; ExchangeServer :6004; ExchangeServerFQDN :6004
Note:
ExchangeServer is the NetBIOS name of your Exchange server. ExchangeServerFQDN is the fully qualified domain name (FQDN) of your Exchange server. If the FQDN that is used to access the server from the Internet differs from the internal FQDN, you must use
the internal FQDN.
[Check the 6004 port settings in registry]
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeSA\Parameters
Value name: HTTP Port
Value type: REG_DWORD
Value data: 0x1772 (Decimal 6002)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\MSExchangeSA\Parameters
Value name: Rpc/HTTP NSPI Port
Value type: REG_DWORD
Value data: 0x1774 (Decimal 6004)
D. Check if the RPC ports are used by other applications instead of Exchange by using : netstat –o
Then it will return all active TCP connections and the process ID (PID) for each connection.
After that, please check the application based on the PID on the Processes tab in Windows Task Manager and confirm if it’s Exchange server.
Additionally, ExRCA is a perfect tool to test the whole connection between client side and Mailbox side:
https://testconnectivity.microsoft.com/
1. On the ExRCA website, under Microsoft Office Outlook Connectivity Tests, select Outlook connectivity, and then select Next at the bottom of the page.
2. Enter the required information on the next screen, including email address, domain and user name, and password.
3. Choose whether to use Autodiscover to detect server settings or to manually specify server settings.
4. Accept the disclaimer, enter the verification code, and then select Verify.
5. Select Perform Test.
<Resource for reference>
How does Outlook Anywhere work (and not work):
http://blogs.technet.com/b/exchange/archive/2008/06/20/3405633.aspx
How to use the RPC Ping utility to troubleshoot connectivity issues with the Exchange over the Internet feature in Outlook 2007 and in Outlook 2003:
http://support.microsoft.com/kb/831051
Test Outlook Anywhere Connectivity:
http://technet.microsoft.com/en-us/library/ee633453(v=exchg.150).aspx
[RZ1]It’s part, please re-layout
Please click to vote if the post helps you. This can be beneficial to other community members reading the thread.

I've just restored the M11 to Windows XP with the disks provided and Outlook Anywhere connected without issue. As strange as it sounds, this looks to be isolated to this particular model of laptop and Windows 7.
I've used the same Enterprise copy of Windows 7 and Office on a variety of laptops and pc's and none have come across this problem. The only commonality I can see is the hardware and OS.
Aftery trying to troubleshoot this unsuccessfully with Microsoft tech support for a few hours, they eluded to the fact that this +could+ be a hardware related problem. (driver, adapter properties, etc)

AS2 over HTTP Send port question.

I have an application that builds and sends flat and EDI files to FTP, FILE, SqlAdapter send ports and now they want AS2 over an HTTP port, I understand the AS2 settings (using party resolution, etc.) what I don't get is how/what exactly is receiving
the message on the other side... They don't have a web service nor a page, I created a site to test but what do I do? Send an edi file to a url????
Bico Bielich

From your question I understand, you have been asked to send message through AS2. Do they also going to receive message through AS2 from their party? Is your question is about how to receive the message through AS2 which you also want to send over AS2?
You can configure
BTSHTTPReceive.dll to receive messages over HTTP and configure the Receive location with AS2 EDI pipeline component to receive messages over AS2 into BizTalk which can be subscribed by your send port filter or Orchestration ( if you have any process
to be applied before sending the message over AS2 send).
Check the Tutorial-3 part of AS2 which illustrate an example which receives an AS2 message through BTSHTTPReceive.dll.
Tutorial 3: AS2 Tutorial
And following references shall help you configure the BTSHTTPReceive.dll:
How to Configure IIS for an HTTP Receive Location
Configuring BTSHTTPReceive.dll to work on IIS 7
If this answers your question please mark it accordingly. If this post is helpful, please vote as helpful by clicking the upward arrow mark next to my reply.

Basic Question: plain XML over HTTP

I would be getting messages in plain XML over HTTP. What should I use to receive those messages. Server is not SOAP based, so client cannot be SOAP based. Should I use JAX-RPC, but when I looked at the documentation, it is giving info regarding SOAP and plain xml over http. Can anyone help me?
Thanks

From my understanding, you would be getting a plain xml string by connecting to a server over http.
You can is DOM or SAX apis to parse this xml input stream.
For eg: if you are using DOM apis, then you can pass the input stream of the HttpURLConnection as follow...
     DocumentBuilderFactory buildFactory = DocumentBuilderFactory.newInstance();
     buildFactory.setIgnoringElementContentWhitespace(false);
     buildFactory.setValidating(false);
     DocumentBuilder docBuilder = buildFactory.newDocumentBuilder();
     URL url=new URL("http://someserver.com/abc.jsp");
     HttpURLConnection conn= (HttpURLConnection)url.openConnection();
     InputStream in= conn.getInputStream();
     Document doc = docBuilder.parse(in);
     ..Hope this helps...

Question about Kurts comments discussing the seperation of AIA & CDP - Test Lab Guide: Deploying an AD CS Two-Tier PKI Hierarchy - Kurt L Hudson MSFT

Question about the sentence in bold. What is the meaning behind this comment?
How would you separate the role of the AIA and CDP from a CA subordinate server? I can see where I add a CES and CEP server which has those as well, but I don't completely understand his comment. Because in this second step, (http://technet.microsoft.com/en-us/library/tlg-key-based-renewal.aspx)
he shows how to implement CES and CEP.
This is from the guide located at: http://technet.microsoft.com/library/hh831348.aspx
Step 3: Configure APP1 to distribute certificates and CRLs
In the extensions of the root CA, it was stated that the CRL from the root CA would be available via http://www.contoso.com/pki. Currently, there is not a PKI virtual directory on APP1, so one must be created.
In a production environment, you would typically separate the issuing CA role from the role of hosting the AIA and CDP.
However, this lab combines both in order to reduce the number of resources needed to complete the lab.
Thanks,
James

My concern is, they have a 2-3k base of xp systems, over this year they are migrating them to Windows 7. During this time they will also be upgrading hardware for the existing windows 7 machines. The turnover of certificates are going to be high, which
from what I've read here, it worries me.
http://blogs.technet.com/b/askds/archive/2009/06/24/implementing-an-ocsp-responder-part-i-introducing-ocsp.aspx
The application then can go to those locations to download the CRL. There are, however, some potential issues with this scenario. CRLs over time can get rather large
depending on the number of certificates issued and revoked. If CRLs grow to a large size, and many clients have to download CRLs, this can have a negative impact on network performance. More importantly, by
default Windows clients will timeout after 15 seconds while trying to download a CRL. Additionally,
CRLs have information about every currently valid certificate that has been revoked, which is an excessive amount of data given the fact that an application may only need the revocation status for a few certificates. So,
aside from downloading the CRL, the application or the OS has to parse the CRL and find a match for the serial number of the certificate that has been revoked.
With the above limitations, which mostly revolve around scalability, it is clear that there are some drawbacks to using CRLs. Hence, the introduction of Online Certificate
Status Protocol (OCSP). OCSP reduces the overhead associated with CRLs. There are server/client components to OCSP: The OCSP responder, which is the server component, and the OCSP Client. The OCSP Responder accepts status
requests from OCSP Clients. When the OCSP Responder receives the request from the client it then needs to determine the status of the certificate using the serial number presented by the client. First the OCSP Responder determines if it has any cached responses
for the same request. If it does, it can then send that response to the client. If there is no cached response, the OCSP Responder then checks to see if it has the CRL issued by the CA cached locally on the OCSP. If it does, it can check the revocation status
locally, and send a response to the client stating whether the certificate is valid or revoked. The response is signed by the OCSP Signing Certificate that is selected during installation. If the OCSP does not have the CRL cached locally, the OCSP Responder
can retrieve the CRL from the CDP locations listed in the certificate. The OCSP Responder then can parse the CRL to determine the revocation status, and send the appropriate response to the client.

Design Choices and is LiveCycle needed? best practices for using RTMP/AMF over HTTP/XML communicatio

Hi,
I am new to flex/RIA. I am exploring different design choices especially in client server communication. On client side we will be using Flash based RIA (using Actions scripts).
There will be some simple forms (like for login, registration, payments etc) and some simple reports including with several graphs and charts. Each chart might have 1000 to 1500 data points etc. There are not video or audio content as such. On server side we have Servlets, java API and some EJBs to provide the business logic and real time prices/content (price update is usually every 10 seconds) /data. Some of the content will be static as well.
I have following questions in my mind. Is it worth it to use RTMP/AMF channels for the followings?
1. For simple forms processing (Mapping Actions scripts classes to Java classes). Like to display/retrieve/update data for/from registration forms.
a. If yes, why? Am I going to be stuck with LCDS? Is it worth it? What could be the cons for heavy usage/traffic scenarios
b. If not what are the alternates? Should I create the web services? Or only servlets are sufficient (ie. Only HTTP+Java based server side with no LCDS+RTMP+AMF)? All forms need to communicate on secure channel.
2. For pushing the real time prices/content which we may need to update every 15 seconds on user interface using graphs and charts. Can I do it with some standard J2EE/JMS way with RIA (Flex) on front-end? i.e. Flash application will keep pulling data from some topic. Data can be updated after few secs or few minutes which cant be predicted.
3. Are there any scalability issues for using RTMP? What happens if concurrent users increase 10 times within a year?
4. What are the real advantages of using RTMP/AMF instead of simple HTTP/HTTPS probably using xml based objects
5. Do I need to use LCDS if I am using AMF only on client side? Basically I mean if I am sending an object in form of xml from a servlet. Can some technology in Flash (probably AMF) in client side map it an Action script object?
6. What are the primary advantages of using LCDS in a system? Is there any alternate solutions? Can I use some standard solutions for data push technologies?
I would like that my server side implementation can be used by multiple types of clients e.g. RIA browser based, mobile based, third party software (any technology) etc.
I appreciate if you can kindly refer me to some reading materials which can help me deciding the above. If this is not the right place to post this message then please do refer me to the place where I can post such questions.
Thanks and Kind regards,
Jalal

Hi Jalal,
Let me see if I can help with some of your questions
1. Yes, you can use LCDS for simple forms processing. Any time you want to
move data between the Flex client and the server, LCDS (or its free Open
source cousin BlazeDS) is going to help. I would expect you would use the
mx:RemoteObject MXML tag to invoke server side code, passing it the form
data input by the application user.
2. If you need to push near real-time data, LCDS gives you the RTMP channel
which can scale quite nicely. You can then use the mx:Consumer MXML tag to
subscribe the clients to the messages, which can come from almost anywhere,
include JMS topics or queues.
3. RTMP (included in LCDS) is the best option for scaling to tens of
thousands of users and the LCDS servers can be clustered to proved better
scaling.
4. The AMF3 protocol used over the RTMP channels performs much faster than
simple XML over HTTP. See this blog posting for some tests:
http://www.jamesward.org/census/.
5. If you are sending a Flex application XML, then I would recommend using
the E4X API to work with the XML. This is a pretty nice and powerful way to
work with XML. If you want Actionscript objects (and probably better
performance), then using AMF serialization to Actionscript objects is the
way to go.
6. Primary advantages? There are many, but mainly you can avoid thinking
about the plumbing and concentrate on solving your application and business
logic problems.
Hope this helps you a little
Tom Jordahl
Adobe

Some questions about Muse

First of all, I would like to say that I am very impressed with how well Muse works and how easy it was to create a website that satisfies me. Before I started a daily updated website I thought I would encounter many problems I will not be able to solve. I have only had a few minor issues which I would like to share with you.
The most problems I have with a horizontal layouts (http://www.leftlane.pl/sty14/dig-t-r-3-cylindrowy-silnik-nissana-o-wadze-40-kg-i-mocy-400- km.html). Marking and copying of a text is possible only on the last (top) layer of a document. The same situation is with widgets or anything connected with rollover state - it does not work. In the above example it would be perfect to use a composition/tooltip widget on the first page. Unfortunately, you cannot even move the cursor into it.
It would be helpful to have an option of rolling a mouse to an anchor (like in here http://www.play.pl/super-smartfony/lg-nexus-5.html and here http://www.thepetedesign.com/demos/onepage_scroll_demo.html). I mean any action of a mouse wheel would make a move to another anchor/screen. It would make navigation of my site very easy.
Is it possible to create a widget with a function next anchor/previous anchor? Currently, in the menu every button must be connected to a different anchor for the menu to be functional.
A question about Adobe Muse. Is it possible to create panels in different columns? It would make it easier to go through all the sophisticated program functions.
The hits from Facebook have sometimes very long links, eg.
(http://www.leftlane.pl/sty14/mclaren-p1-nowy-krol-nurburgring.html?fb_action_ids=143235557 3667782&fb_action_types=og.likes&fb_source=aggregation&fb_aggregation_id=288381481237582). If such a link is activated, the anchors in the menu do not work on any page. I mean the backlight of an active state, which helps the user to find out where on page they currently are. The problem also occurs when in the name of a html file polish fonts exist. And sometimes the dots does not work without any reason, mostly in the main page, sometimes in the cooperation page either (http://www.leftlane.pl/wspolpraca/). In the first case (on main page), I do not know why. I have checked if they did not drop into a state button by accident, moved them among the layers, numbered them from scratch and it did not help. In the cooperation page, the first anchor does not work if it is in Y axle set at 0. If I move it right direction- everything is ok.
The text frame with background fill does not change text color in overlay state (http://www.leftlane.pl/sty14/nowe-mini-krolestwo-silnikow-3-cylindrowych.html). I mean a source button at the beginning of every text. I would like a dark text and a light layer in a rollover, but the text after export and moving cursor into it does not change color for some reason.
I was not sure whether to keep everything (whole website) in one Muse file (but I may be mistaken?). I have decided to divide it into months. Everyone is in a different Muse file. If something goes wrong, I will not have any trouble with an upload of a whole site, which is going to get bigger and bigger.
The problem is that every file has two master pages. Everything works well up to the moment when I realize how many times I have to make changes in upper menu when I need to add something there. I have already 5 files, every with 2 masters. Is there any way to solve this problem? Maybe something to do with Business Catalyst, where I could connect a menu to every subpage independently, deleting it from Muse file? Doing so I would be able to edit it everywhere from one place. It would make my work much easier, but I have no idea jendak how to do it.
The comments Disqus do not load, especially at horizontal layouts (http://www.leftlane.pl/sty14/2014-infiniti-q50-eau-rouge-concept.html). I have exchanged some mails and screenshots with Disqus help. I have sent them a screenshot where the comments are not loaded, because they almost never load. They have replied that it works at their place even with attached screenshot. I have a hard time to discuss it, because it does not work with me and with my friends either. Maybe you could fix it? I would not like to end up with awful facebook comments ;). The problem is with Firefox on PC and Mac. Chrome, Safari and Opera work ok.
YouTube movie level layouts do not work well with IE11 and Safari 7 (http://www.leftlane.pl/sty14/wypadki-drogowe--004.html). The background should roll left, but in the above mentioned browsers it jumps up. Moreover the scrolling with menu dots is not fluent on Firefox, but I guess it is due to Firefox issues? The same layout but in vertical version rolls fluently in Firefox (http://www.leftlane.pl/sty14/polskie-wypadki--005.html).
Now, viewing the website on new smartphones and tablets. I know it is not a mobile/tablet layout, but I tried to make it possible to be used on mobile hardware with HD (1280) display. I mean most of all horizontal layouts (http://www.leftlane.pl/sty14/2015-hyundai-genesis.html), where If we want to roll left, we need to roll down. Is there a way to make it possible to move the finger the direction in which the layout goes?
On Android phones (Nexus 4, Android 4.4.2, Chrome 32) the fade away background effect does not work, although I have spent a lot of time over it (http://www.leftlane.pl/lut14/koniec-produkcji-elektrycznego-renault-fluence-ze!.html). It is ok on PC, but on the phone it does not look good. A whole picture moves from a lower layer instead of an edge which spoils everything.
This layout does not look good on Android (http://www.leftlane.pl/sty14/nowe-mini-krolestwo-silnikow-3-cylindrowych.html#a07). The background does not fill the whole width of a page. There are also problems with a photo gallery, where full screen pictures should fill more of a screen.
Is it possible to make an option of scroll effects/motions for a fullscreen slideshow widget thumbnails (http://www.leftlane.pl/sty14/2014-chevrolet-ss%2c-rodzinny-sedan-z-415-konnym-v8.html#a06)? It would help me with designing layouts. Currently, it can go from a bottom of a page at x1 speed or emerge (like in this layout) by changing opacity. Something more will be needed, I suppose.
Sometimes the pictures from gallery (http://www.leftlane.pl/sty14/2014-chevrolet-ss%2c-rodzinny-sedan-z-415-konnym-v8.html#a06 download very slowly. The website is hosted at Business Catalyst. I cannot state when exactly it happens, most of the time it works ok.
I really like layouts like this (http://www.leftlane.pl/sty14/2014-chevrolet-ss%2c-rodzinny-sedan-z-415-konnym-v8.html#a03). On the top is a description and a main text, and the picture is a filled object with a hold set at the bottom edge. That is why there is a nice effect of a filling a whole screen- nevertheless the resolution that is set. It works perfect on PC, but on Android the picture goes beyond the screen. You can do something about it?
In horizontal layouts (http://www.leftlane.pl/sty14/dig-t-r-3-cylindrowy-silnik-nissana-o-wadze-40-kg-i-mocy-400- km.html) holding of a filling object does not work. Everything is always held to upper edge of a screen regardless the settings. Possibility of holding the picture to the bottom edge or center would make my work much easier.
According to UE regulations we have to inform about the cookies. I do not know how to do it in Muse. I mean, when the message shows up one time and is accepted, there would be no need to show it again and again during another visit on the website. Is there any way to do it? Is there any widget for it maybe?
The YouTube widget sometimes changes size just like that. It is so when the miniature of the movie does not load, and the widget is set to stroke (in our case 4 pixels, rounded to 1 pixel). As I remember ( in case of a load error) it extends for 8 pixels wide.
Last but not least - we use the cheapest hosting plan in Business Catalyst. The monthly bandwidth is enough, although we have a lot of pictures and we worried about it at first. Yet we are running out of the disk storage very quickly. We have used more than a half of a 1 GB after a month. We do not want to change BC for a different one, because we like the way it is connected with Muse. But we do not want to buy the most expensive package - but only this one has more disk space. We do not need any other of these functions and it would devastate our budget. Do we have any other option?
I’m using Adobe Muse 7.2 on OS X 10.9.1.
and I'm sending Muse file to <[email protected]>

Unfortunatley, there is no way to get a code view in Muse. I know quite a few people requested it in the previous forum, but not really sure where that ended up. Also, you may not want to bring the html into DW unless you only have 1 or 2 small changes 2 make. Two reasons. First, it isnt backwards compatible, so if you are planning on updating that site in Muse, you will need to make those changes in DW everytime you update. Second, by all accounts the HTML that Muse puts out is not pretty or easy to work with. Unlike you, I am code averse, but there was a lenghty discussion on the previous forum on this topic. I know they were striving to make it better with every release, just not sure where it is at this point.
Dont think I am reading that second question right, but there was a ton of info on that old site. You may want to take a look there, people posted a ton of great unique solutions, so it worth a look.
Here is the link to the old forums- http://support.muse.adobe.com/muse

A question about CRL retrieval over HTTP

Similar Messages

Maybe you are looking for