ACL and smb

I want to do something relatively simple (or so I thought):
- Have one volume shared (firewire drive)
- SMB read-only for that volume for guests or a specific user
- SMB complete access (read/write, etc) for that volume for a different specific user.
That's it, seriously. How can this get done with smb?

I would like to know how to do this as well. I've shared a folder on my MBP with read only permissions for everyone but I can still edit and delete files on the share from my Imac. I know I don't need smb for mac to mac file sharing but after 2 hours of googling and testing suggestions I couldn't get AFP to work.
I'll give a bit of detail about my AFP issue in case its an easier fix. Both machines have Appletalk enabled. On the MBP under system preferences, I have 2 folders, the public folder and a video folder. The public folder was shared by default but the video folder is the only thing I have added. It has afp and smb checked and read only attributes for everyone (including my username). When browsing with the imac to the MBP in finder I only see the public folder but if I connect with my username on the MBP I see my home folder, my root /, my time machine partition on my external drive and these are not shared. I don't see the video folder though. cmd-k smb://mycomputer/video gives the error the volume could not be mounted. So I tried cmd-k smb://mycomputer/video and volia I get a mounted video folder but I'm able to edit and delete files as guest or as me. Any help is greatly appreciated, and apologies if I'm hijacking this thread by posting my afp issue too.

Similar Messages

  • Files loose ACLs on SMB.

    I have noticed that all the files viewed via SMB dont have their custom attributes or metadata associated with them. i.e. they loose their ACLs.
    when I right-click on any file on the SMB drive, and check the properties then I
    get the message "Failed to load properties from server" on the iFS Attributes tab and the iFS Versioned tabs.
    Please, let me know if you are aware of this and give me an ETA on when it will be fixed. This is really important for my Company because, without ACLs via SMB then file management for our users cannot be conducted.
    Thanks..
    null

    Hi Joyce,
    I have the oracle IFS utilities installed.
    My issue doesn't have to do with using the iFS utilities. It is a general issue that I have opened a tar on and have been trying to make it a priority level 1 issue.
    None of the files that I view via SMB have any ACLs. This may have to dao with the SMB protocol or how Microsoft Office files are opened on the SMB drive. For futher clarification on this issue please, check tar # 13252436.999.
    I really think this is an issue that needs immediate attention, especiall for companies like mine who want to use this product for clients who will mostly access files via SMB.
    Thanks..

  • Performance problems with DFSN, ABE and SMB

    Hello,
    We have identified a problem with DFS-Namespace (DFSN), Access Based Enumeration (ABE) and SMB File Service.
    Currently we have two Windows Server 2008 R2 servers providing the domain-based DFSN in functional level Windows Server 2008 R2 with activated ABE.
    The DFSN servers have the most current hotfixes for DFSN and SMB installed, according to http://support.microsoft.com/kb/968429/en-us and http://support.microsoft.com/kb/2473205/en-us
    We have only one AD-site and don't use DFS-Replication.
    Servers have 2 Intel X5550 4 Core CPUs and 32 GB Ram.
    Network is a LAN.
    Our DFSN looks like this:
    \\contoso.com\home
        Contains 10.000 Links
        Drive mapping on clients to subfolder \\contoso.com\home\username
    \\contoso.com\group
        Contains 2500 Links
        Drive mapping on clients directly to \\contoso.com\group
    On \\contoso.com\group we serve different folders for teams, projects and other groups with different access permissions based on AD groups.
    We have to use ABE, so that users see only accessible Links (folders)
    We encounter sometimes multiple times a day enterprise-wide performance problems for 30 seconds when accessing our Namespaces.
    After six weeks of researching and analyzing we were able to identify the exact problem.
    Administrators create a new DFS-Link in our Namespace \\contoso.com\group with correct permissions using the following command line:
    dfsutil.exe link \\contoso.com\group\project123 \\fileserver1\share\project123
    dfsutil.exe property sd grant \\contoso.com\group\project123 CONTOSO\group-project123:RX protect replace
    This is done a few times a day.
    There is no possibility to create the folder and set the permissions in one step.
    DFSN process on our DFSN-servers create the new link and the corresponding folder in C:\DFSRoots.
    At this time, we have for example 2000+ clients having an active session to the root of the namespace \\contoso.com\group.
    Active session means a Windows Explorer opened to the mapped drive or to any subfolder.
    The file server process (Lanmanserver) sends a change notification (SMB-Protocol) to each client with an active session \\contoso.com\group.
    All the clients which were getting the notification now start to refresh the folder listing of \\contoso.com\group
    This was identified by an network trace on our DFSN-servers and different clients.
    Due to ABE the servers have to compute the folder listing for each request.
    DFS-Service on the servers doen't respond for propably 30 seconds to any additional requests. CPU usage increases significantly over this period and went back to normal afterwards. On our hardware from about 5% to 50%.
    Users can't access all DFS-Namespaces during this time and applications using data from DFS-Namespace stop responding.
    Side effect: Windows reports on clients a slow-link detection for \\contoso.com\home, which can be offline available for users (described here for WAN-connections: http://blogs.technet.com/b/askds/archive/2011/12/14/slow-link-with-windows-7-and-dfs-namespaces.aspx)
    Problem doesn't occure when creating a link in \\contoso.com\home, because users have only a mapping to subfolders.
    Currently, the problem doesn't occure also for \\contoso.com\app, because users usually don't use Windows Explorer accessing this mapping.
    Disabling ABE reduces the DFSN freeze time, but doesn't solve the problem.
    Problem also occurs with Windows Server 2012 R2 as DFSN-server.
    There is a registry key available for clients to avoid the reponse to the change notification (NoRemoteChangeNotify, see http://support.microsoft.com/kb/812669/en-us)
    This might fix the problem with DFSN, but results in other problems for the users. For example, they have to press F5 for refreshing every remote directory on change.
    Is there a possibility to disable the SMB change notification on server side ?
    TIA and regards,
    Ralf Gaudes

    Hi,
    Thanks for posting in Microsoft Technet Forums.
    I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
    Thank you for your understanding and support.
    Regards.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • XSAN, ACLs and new OD users.

    I have xSAN FS with enabled ACLs and OD.
    If i create ACL for existing folders and assign groupe(A) permissions to it. Rules work perfect. But only for usesr in this group (A) which was added before ACL was assigned.
    If i create new OD user and add it into group A after ACLs was configured. User have no group permisions to this folder.
    Anybody meet this issue?

    So do you want to have this new server running alongside the old one - or set up the new server for a subset of users and then decommission the SL server? If alongside, is it for redundancy or to provide a sperate set of services for a subset of users?
    If alongside for redundancy, thne it makse sense to let it use the existing OD.
    If it's for one of the other purposes, you'll need to:
    1. Set the new server up in islation from the old one (this allows you to create a new OD master)
    2. Configure services
    3. If you need to copy/move user data from the SL server, you'll have to take services on the SL server offline for the time it takes to copy/move.

  • I don't understand correlation between ACL and dACL. If dACL is downloaded to the Catalyst switch what is the status of the ACL

    Understanding  ISE and dACL.
     I don't understand correlation between ACL and dACL.
     If dACL is downloaded to the Catalyst switch what is the status of the ACL attached to physical port. Is dACL appended to the existing ACL? When I typed ‘sh ip access-list int fa0/1’ I can see only dACL for access domain and dACL for voice domain appended to the previous dACL and no ACL lines.
     Regards,
    Vice

    Hi,
    Downloadable ACLs (dACL) are applied from your RADIUS server based on authentication and authorization policies.  It overrides any standard interface ACL.
    Standard interface ACLs are in place to limit traffic on the port before 802.1x or MAB authentication.
    When an authenticated session terminates on the interface the standard ACL will be re-applied until the next authentication.

  • Named ACL and ACE numbering

    I created a new extended named ACL and enter a few ACEs numbered 10,20,30,100,110,1000 to give them plenty of space apart. When I reload the switch, the numbering has disappeared and they are all spaced 10 apart. Why does this happen and is there a way to maintain larger spaces? I am thinking that in time I may come to make many modifications to the ACL and the gap between two entries may reduce to nothing. I am not going to reload my switch just to reset the gaps and I would rather not remove the ACL completely and replace it to achieve the same.
    thanks for any advice
    Chris

    The ACL is stored in RAM initially. When you display your access-list for instance you see the seqeunce numbers. When you display your're running configuration you don't see them.
    Are you using ip access-list or the traditional access-list?
    ip access-list extended Popey
    10 permit ip host 10.10.10.10 any
    100 permit ip 10.10.20.0 0.0.0.255 any
    1000 deny ip any any

  • Possible to automatize the creation of ACL and subfolders in KM ?

    Hi,
    I would like to create following folder structure
    /root
       /subfolder elec/
             /subfolder user1/
             /subfolder user2/
       /subfolder documents/
       /subfolder LMS/
    Subfolder user 1 : only user1 may have autorisations to this folder.
    Subfolerd user 2 : only user2 may have autorisations to this folder
    I can manage this autorisations by creating an ACL map -> details -> settings -> permissions
    This is a good solution if therer were only a few subfolders to manage but I have to create +/- 9000 subfolders, for every user his own subfolder.
    Does anybody knows if you there is a possibility to automatize the creation of those ACL and also the creation of the subfolder ?
    Kind regards
    Pascale Thys

    Hi Pascale!
    Here is a static method to create directories and provide them with permissions. It takes a resource residing in a directory called  and creates new sub dirs for every iso language in the array languages. Then it copies the source resource into those new sub dirs.
    It has everything you need to know about creation of dirs and files in km via API. Just adapt it to your needs.
         private static void createLanguages(
              IResource resource,
              String[] languages)
              throws ResourceException, WcmException {
              // iterate through languages and create copies of the original document
              // pattern is "com.xxx.<foldername><n>_<language id> with n >= 0
              // Folder of newly created document
              ICollection sourceDir = resource.getParentCollection();
              RID sourceDirRID = sourceDir.getRID();
              // Name (plus extension) of document
              RID resourceRIDName = resource.getRID().name();
              // Name of parent folder
              RID sourceDirRIDName = sourceDirRID.name();
              // source directory of new resource without language shortcut
              String sourceDirRIDNameBase =
                   sourceDirRIDName.toString().substring(
                        0,
                        sourceDirRIDName.toString().length() - 2);
              ICopyParameter copyParams = new CopyParameter();
              RID destination = null;
              for (int i = 0; i < languages.length; i++) {
                   String newDir = sourceDirRIDNameBase + languages<i>;
                   destination =
                        sourceDirRID.parent().addPathSegment(
                             sourceDirRIDNameBase + languages<i>);
                   // Create language dependend directory parallel to original, if not existing
                   ICollection newCollection = null;
                   try {
                        newCollection =
                             sourceDir.getParentCollection().createCollection(
                                  newDir,
                                  null);
                   } catch (NameAlreadyExistsException e) {
                        logger.info(
                                                    "directory "
                                  + newDir
                                  + " already exists.");
                   // Even if directory exists, add permissions
                   try {
                        if (newCollection == null) {
                             IResourceFactory resourceFactory =
                                  ResourceFactory.getInstance();
                             newCollection =
                                  (ICollection) resourceFactory.getResource(
                                       destination,
                                       sourceDir.getParentCollection().getContext());
                        newCollection.setProperty(
                             Property.createDisplaynameProp(
                                  destination.name().toString()));
                        // Setting ACLs on newly created directory
                        ISecurityManager sm =
                             newCollection.getRepositoryManager().getSecurityManager(
                                  newCollection);
                        if (sm != null && sm instanceof IAclSecurityManager) {
                             IAclSecurityManager asm = (IAclSecurityManager) sm;
                             IResourceAclManager ram = asm.getAclManager();
                             // Inheritance has to be broken to include new permissions
                             // Get a copy parent ACL
                             IResourceAcl ra = ram.getAcl(newCollection);
                             if (ra == null) {
                                  ra = ram.getInheritedAcl(newCollection);
                             // Still no acl found? Permissions cannot be set
                             if (ra == null) {
                                  logger.severe(
                                                          " - no ACL found for "
                                            + newCollection
                                            + " no permission has been set!");
                             } else {
                                  // Remove old ACL
                                  ram.removeAcl(newCollection);
                                  // create new ACL for current directory
                                  IResourceAcl raNew = ram.createAcl(newCollection);
                                  // Copy all acl entries from inherited acl to new acl
                                  IResourceAclEntryList rel = ra.getEntries();
                                  IResourceAclEntryListIterator it = rel.iterator();
                                  IResourceAclEntry aclEntry = null;
                                  while (it.hasNext()) {
                                       aclEntry = it.next();
                                       raNew.addEntry(aclEntry);
                                  IUMPrincipal allCountriesPrincipal =
                                       WPUMFactory.getGroupFactory().getGroup(
                                            "XXX_EDITOR_"
                                                 + "ALL");
                                  // Editor for specific country
                                  IUMPrincipal thisCountryPrincipal =
                                       WPUMFactory.getGroupFactory().getGroup(
                                            "XXX_EDITOR_"
                                                 + languages<i>.toUpperCase());
                                  raNew.addEntry(
                                       ram.createAclEntry(
                                            allCountriesPrincipal,
                                            false,
                                            ram.getPermission(
                                                 IAclPermission.ACL_PERMISSION_READ),
                                            0));
                                  raNew.addEntry(
                                       ram.createAclEntry(
                                            thisCountryPrincipal,
                                            false,
                                            ram.getPermission(
                                                 IAclPermission.ACL_PERMISSION_READWRITE),
                                            0));
                                  // Now copy permission owners
                                  IUMPrincipalList permissionOwners = ra.getOwners();
                                  IUMPrincipalListIterator permissionOwnersIt = permissionOwners.iterator();
                                  IUMPrincipal principal = null;
                                  while (permissionOwnersIt.hasNext()) {
                                       principal = permissionOwnersIt.next();
                                       raNew.addOwner(principal);
                   } catch (AclPersistenceException e) {
                        logger.severe(
                             "I raised an AclPersistenceException @"
                                  + (new Date()).toString()
                                  + ": "
                                  + LoggingFormatter.extractCallstack(e));
                   } catch (ResourceException e) {
                        logger.severe(
                             "I raised a ResourceException @"
                                  + (new Date()).toString()
                                  + ": "
                                  + LoggingFormatter.extractCallstack(e));
                   } catch (NotAuthorizedException e) {
                        logger.severe(
                             "I raised a NotAuthorizedException @"
                                  + (new Date()).toString()
                                  + ": "
                                  + e.getMessage()
                                  + "**"
                                  + LoggingFormatter.extractCallstack(e));
                        //                    } catch (AclExistsException e) {
                        //                         logger.severe(
                        //                              "I raised an AclExistsException @"
                        //                                   + (new Date()).toString()
                        //                                   + ": "
                        //                                   + LoggingFormatter.extractCallstack(e));
                   } catch (UserManagementException e) {
                        logger.severe(
                             "I raised a UserManagementException @"
                                  + (new Date()).toString()
                                  + ": "
                                  + LoggingFormatter.extractCallstack(e));
                   } catch (InvalidClassException e) {
                        logger.severe(
                             "I raised an InvalidClassException @"
                                  + (new Date()).toString()
                                  + ": "
                                  + LoggingFormatter.extractCallstack(e));
                   } catch (AlreadyAssignedToAclException e) {
                        logger.severe(
                             "I raised an AlreadyAssignedToAclException @"
                                  + (new Date()).toString()
                                  + ": "
                                  + LoggingFormatter.extractCallstack(e));
                   } catch (PermissionNotSupportedException e) {
                        logger.severe(
                             "I raised a PermissionNotSupportedException @"
                                  + (new Date()).toString()
                                  + ": "
                                  + LoggingFormatter.extractCallstack(e));
                   destination = destination.add(resourceRIDName);
                   try {
                        IResource newResouce = resource.copy(destination, copyParams);
                   } catch (NameAlreadyExistsException e) {
                        logger.info("file "
                                  + destination
                                  + " already exists.");
    Imports needed:
    import java.util.Date;
    import com.sapportals.portal.prt.logger.ILogger;
    import com.sapportals.portal.security.usermanagement.IUMPrincipal;
    import com.sapportals.portal.security.usermanagement.UserManagementException;
    import com.sapportals.wcm.WcmException;
    import com.sapportals.wcm.repository.CopyParameter;
    import com.sapportals.wcm.repository.ICollection;
    import com.sapportals.wcm.repository.ICopyParameter;
    import com.sapportals.wcm.repository.IResource;
    import com.sapportals.wcm.repository.IResourceFactory;
    import com.sapportals.wcm.repository.NameAlreadyExistsException;
    import com.sapportals.wcm.repository.Property;
    import com.sapportals.wcm.repository.ResourceException;
    import com.sapportals.wcm.repository.ResourceFactory;
    import com.sapportals.wcm.repository.manager.IAclSecurityManager;
    import com.sapportals.wcm.repository.manager.ISecurityManager;
    import com.sapportals.wcm.repository.security.IResourceAcl;
    import com.sapportals.wcm.repository.security.IResourceAclEntry;
    import com.sapportals.wcm.repository.security.IResourceAclEntryList;
    import com.sapportals.wcm.repository.security.IResourceAclEntryListIterator;
    import com.sapportals.wcm.repository.security.IResourceAclManager;
    import com.sapportals.wcm.util.acl.AclPersistenceException;
    import com.sapportals.wcm.util.acl.AlreadyAssignedToAclException;
    import com.sapportals.wcm.util.acl.IAclPermission;
    import com.sapportals.wcm.util.acl.IUMPrincipalList;
    import com.sapportals.wcm.util.acl.IUMPrincipalListIterator;
    import com.sapportals.wcm.util.acl.InvalidClassException;
    import com.sapportals.wcm.util.acl.NotAuthorizedException;
    import com.sapportals.wcm.util.acl.PermissionNotSupportedException;
    import com.sapportals.wcm.util.logging.LoggingFormatter;
    import com.sapportals.wcm.util.uri.RID;
    import com.sapportals.wcm.util.usermanagement.WPUMFactory;
    This is my .classpath variable for this projekt (for the necessary JARs):
    <?xml version="1.0" encoding="UTF-8"?>
    <classpath>
        <classpathentry kind="src" path="src.api"></classpathentry>
        <classpathentry kind="var" path="JRE_LIB" sourcepath="JRE_SRC"></classpathentry>
        <classpathentry kind="src" path="src.core"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/prtapi.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/prttest.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/com.sap.portal.runtime.application.soap_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.tssap.ext.libs.j2ee_1.3.0/lib/activation.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.security_2.0.0/lib/com.sap.security.api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ext.libs.webservices_2.0.0/lib/jaxm-api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.tssap.ext.libs.j2ee_1.3.0/lib/mail.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ext.libs.webservices_2.0.0/lib/saaj-api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.tssap.sap.libs.xmltoolkit_2.0.0/lib/sapxmltoolkit.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.engine.webservices_2.0.0/lib/webservices_lib.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.crt_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/prtapi.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/logging.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.exception_2.0.0/lib/exception.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.common_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/com.sap.security.api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/com.sap.security.api.ep5.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.util.public_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.sf.framework_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.util_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.runtime_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.repository.service.serviceacl_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.mi_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.urlgenerator_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.urimapper_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.rtr_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.relation_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.pipeline_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.oth_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.notificator_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.mime_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.appproperties_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.rf.framework_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.util.kmmonitor_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.netweaver.bc.uwl.plugin_1.0.0/lib/bc.uwl.service.api_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.tc.ap_2.0.0/comp/CAF/DCs/sap.com/caf/api/_comp/gen/default/public/default/lib/java/sap.com~caf~eu~gp~api~default.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.tc.ap_2.0.0/comp/CAF/DCs/sap.com/caf/api/wd/_comp/gen/default/public/default/lib/java/sap.com~caf~eu~gp~api~wd~default.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/bc.wdf.ui.framework_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.base_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.enum_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.event_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.generic_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.util_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/com.sap.portal.htmlb_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.command_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.base_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.screenflow_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.uicommand_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.util_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/htmlb.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/com.sap.workflow.wcm_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.actioninbox_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.cachecontrol_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.checkout_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.collaboration_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.crawler_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.efp_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.expimp_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.ice_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.indexmanagement_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.propertyconfig_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.propertystructure_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.quickpoll_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.reporting_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.resourcefilter_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.resourcelistfilter_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.template_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.xcrawler_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.xmlforms_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.acl_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.actioninbox_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.applog_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.cache_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.classification_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.classificationtest_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.collaboration_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.config_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.crawler_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.crawlerindexmon_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.demo_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.edit_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.collaboration_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.collection_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.component_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.config_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.control_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.detailsoverview_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.detailsproperties_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.expimp_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.property_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.resource_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.uicommand_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.ice_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.indexadmin_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.layout_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.navigation_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.oth_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.quickpoll_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.reporting_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.scheduler_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.search_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.security_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.settings_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.statemanagement_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.subscription_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.user_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.websiteimport_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.xcrawler_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.xmlforms_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.rep.util.rfadapter_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.actioninbox_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.cachecontrol_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.checkout_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.collaboration_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.crawler_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.efp_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.expimp_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.ice_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.indexmanagement_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.propertyconfig_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.propertystructure_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.quickpoll_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.reporting_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.resourcefilter_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.resourcelistfilter_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.template_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.xcrawler_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.xmlforms_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.fields_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.collection_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.control_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.detailsoverview_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.detailsproperties_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.enum_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.layout_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.property_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.readymades_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.resource_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.released_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.search_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/com.sap.portal.usermanagementapi.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/com.sap.security.api.ep5.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/org.eclipse.tomcat_4.0.6.2/servlet.jar"></classpathentry>
        <classpathentry kind="lib" path="dist/PORTAL-INF/lib/commons-lang-2.4.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/km.shared.ui.event_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.portal.runtime.config/lib/bc.cfg_api.jar"></classpathentry>
        <classpathentry kind="var" path="KMC_LIBS/km.appl.ui.flex.control_api.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.km.cm.ui.flex/private/lib/km.appl.ui.flex.control_core.jar"></classpathentry>
        <classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.repository.service.layout_api.jar"></classpathentry>
        <classpathentry kind="output" path="classes.api"></classpathentry>
    </classpath>
    You probably don't need all of them.
    Cheers,
      Jürgen

  • Is there a fix for terrible performance of file transfers using finder via CIFS and SMB?

    I am connecting to an EMC VNXe running Celera file server and am getting abysmal file transfer performance using both CIFS and SMB-  what gives? This seems to be a long-standing issue- any good work-arounds or solutions?

    I rarely see cover art issues unless the cover art embedded in the file is poor to begin with.
    1000x1000 is probably overkill anyway (and if you had several 1000 large cover art images, could eat at AppleTV's memory) though I must admit I always try to get good hi-res images and don't like anything much below 500x500 or 600x600.  There's no hard and fast rule but even a few 300x300 images I have look reasonable at normal viewing distance.
    I wonder as you say if it might be an issue with iTunes for Windows as I'm on OS X.  Actually that reminds me of another issue I have.
    AC

  • ACL and sequence numbers

    I had the first two lines in the access list and all was well, I then added the 3rd. From what I need to put the 3rd entry (deny host 10.1.30.51) after the second entry and before the permit any. Even though I created sequence numbers in order of the 3 entries (10,20,30) the sequence numbers didnt put them in order and they dont even show up in the show run. What went wrong? How is it possible to edit an acl without sequence numbers also?
    Cause if I had:
    10 deny x.x.x.x
    20 deny x.x.x.x
    30 permit any
    Then I could add say 15 deny x.x.x.x, but now I cant and I dont even know what happened to the sequence numbers when I created them.
    Thanks.
    Standard IP access list 1
        deny host 10.1.30.50 (4 match(es))
        permit any (8 match(es))
        deny host 10.1.30.51
    Router#

    Hi Milan,
    Sequence numbers are indeed not supported if you define a numbered access list. With both standard and extended numbered ACLs, however, it is possible to do a trick: if you refer to them as named ACLs (use their number as their name), you actually are able to use the sequence numbers.
    For example:
    R1(config)# do show run | i access-listaccess-list 1 deny   192.0.2.1access-list 1 permit anyaccess-list 100 deny   ip host 192.0.2.1 anyaccess-list 100 permit ip any anyR1(config)# do show ip access-lStandard IP access list 1    10 deny   192.0.2.1    20 permit anyExtended IP access list 100    10 deny ip host 192.0.2.1 any    20 permit ip any anyR1(config)# ip access-list standard 1R1(config-std-nacl)# 15 deny 192.0.2.15R1(config-std-nacl)# exitR1(config)# do show access-listStandard IP access list 1    10 deny   192.0.2.1    15 deny   192.0.2.15    20 permit anyExtended IP access list 100    10 deny ip host 192.0.2.1 any    20 permit ip any anyR1(config)# ip access-list extended 100R1(config-ext-nacl)# 15 deny ip host 192.0.2.15 anyR1(config-ext-nacl)# exitR1(config)# do show access-lStandard IP access list 1    10 deny   192.0.2.1    15 deny   192.0.2.15    20 permit anyExtended IP access list 100    10 deny ip host 192.0.2.1 any    15 deny ip host 192.0.2.15 any    20 permit ip any any
    The router is even smart enough to disallow to refer to a named ACL whose name is a number of the opposite type than stated on the command line:
    R1(config)# ip access-list standard 101% % Invalid access list name.R1(config)# ip access-list extended 2% % Invalid access list name.
    What Collin may have in mind, though, is that host entries in standard ACLs are reorganized to a different order than entered:
    R1(config)# ip access-list standard TestR1(config-std-nacl)# permit 10.0.0.1R1(config-std-nacl)# deny 10.0.0.2R1(config-std-nacl)# permit 10.0.0.3R1(config-std-nacl)# deny 10.0.0.4R1(config-std-nacl)# permit 10.0.0.5R1(config-std-nacl)# deny 10.0.0.6R1(config-std-nacl)# permit 10.0.0.7R1(config-std-nacl)# deny 10.0.0.8R1(config-std-nacl)# permit anyR1(config-std-nacl)#exitR1(config)# do show access-list TestStandard IP access list Test    80 deny   10.0.0.8    20 deny   10.0.0.2    30 permit 10.0.0.3    10 permit 10.0.0.1    60 deny   10.0.0.6    70 permit 10.0.0.7    40 deny   10.0.0.4    50 permit 10.0.0.5    90 permit anyR1(config)# do show run | section Testip access-list standard Test deny   10.0.0.8 deny   10.0.0.2 permit 10.0.0.3 permit 10.0.0.1 deny   10.0.0.6 permit 10.0.0.7 deny   10.0.0.4 permit 10.0.0.5 permit any
    This reordering happens only with standard ACLs and is a result of indexing the host entries in the ACL into a hash table (the hash function being XOR of individual octets of the IP address in the host entry) for faster access. When printing out the ACL, first the host items are printed out in the order they are stored in the hashing table, and only then the remaining entries that use wildcards. Wildcard entries are not reordered.
    The funny thing is that the ACL is actually even stored in the configuration in the reordered form, and thus evaluated in a reordered form, which can be confusing. However, you may have noticed that the router will prohibit you from entering a host ACL after entering a wildcard ACL that also matches the IP address in a wildcard entry:
    R1(config)# ip access-list standard Test2R1(config-std-nacl)# permit 10.0.1.0 0.0.0.255R1(config-std-nacl)# deny 10.0.1.1% Access rule can't be configured at higher sequence num as it is part of the existing rule at sequence num 10R1(config-std-nacl)#
    Why is this? Obviously, a host entry can  either select the same action for a packet that would be taken by a more  general wildcard entry (in which case it is not necessary for the  host entry to be entered at all), or  it can override the action that would be chosen by a more general  wildcard entry. In this second case, it is necessary for this host entry  to be placed in the ACL first, otherwise it would never be reached. Ordering of host entries themselves can be arbitrary, as they do not influence each other.  This leads us to a general logic in standard ACLs - it is required to put  all host entries first, and wildcard entries last. Now it is completely logical to visit all host entries first (indexed by a hash for rapid access), and then visit the wildcard entries.
    Quite a long post... sorry for that. Hopefully, we've resolved some of the doubts.
    Best regards,
    Peter

  • Effect of Disabling NetBIOS and SMB in Financial Reporting

    HI-
    I've done testing for some times, I haven't encountered any errors but I'm still curious does anyone ever do disabling NetBIOS and SMB on windows server, and encountered problem with workspace, FR, or HFM?
    Regards,
    Will

    Hi,
    Here is the possible way to achieve it:
    1. Insert a row (may be as row 1) in the report which has product as "User prompt".
    2. mark this row as hidden always
    3. User other rows as level0 of product in row 1
    4. Use MEMBERALIAS in your header to use product as dimension & row as row1
    Hope it helps !!
    Edited by: user8628169 on Jun 22, 2011 10:53 AM

  • RVS4000 IP Based ACL and NAT

    Hi,
    I'm having an issue with a Linksys RVS4000 which doesn't appear to be behaving as I think it should.
    I need to forward a port (Single Port Forwarding) through to an internal NAT host. However, I only want that host/port to be accessible from one host on the internet, for security reasons.
    I have created the port forwarding entry and this works fine. I then created two rules in IP Based ACL - one to block all access to that port from the WAN interface and one to allow access from a single host.
    However, it appears that when a port forwarding entry is added, it will completely bypass the ACL and allow all traffic for that port/host by default.
    Is this the correct behaviour?
    Firmware version is v1.2.11
    Regards,
    Adam

    Hi,
    Thank you for replying. However I have already tried as you have suggested and it is still not working.
    My Single Port Forwarding looks like this:
    Application: SMTP External Port: 25 Internal Port: 25 Protocol: TCP IP Address: 192.168.xxx.xxx Enabled: Yes
    My rules in IP Based ACL look like this (columns from left to right):
    1 YES Allow SMTP WAN 203.xxx.xxx.xxx 192.168.xxx.xxx Any Time Every Day  
    2 YES Deny SMTP WAN ANY ANY Any Time Every Day 
    My goal is to only allow 203.xxx.xxx.xxx to have access to port 25 on 192.168.xxx.xxx. However, even with the rules above enabled, all external hosts have access to port 25 on 192.168.xxx.xxx.

  • DHCP and SMB service failing

    We have a X server with 10.5.5 installed.
    This server is our main server with active settings for OD, SMB, DNS, DHCP and AFP.
    At variable intervals the DHCP and SMB service gets corrupt.
    here's excerpt from the server log:
    Nov 15 04:19:59 FileServer servermgrd[54]: pipe(status) error: 24
    Nov 15 04:19:59 FileServer servermgrd[54]: servermgrd: readFile File /etc/ipfilter/ipaddressgroups.plist is not a valid plist
    Nov 15 04:19:59 FileServer servermgrd[54]: Exception in doCommand: couldn't spawn task: path = /usr/sbin/sso_util, errno 24
    Nov 15 04:19:59 FileServer Server Admin[81743]: * -[ServiceEntry sessionHost]: unrecognized selector sent to instance 0x2a9040
    Nov 15 04:20:29: --- last message repeated 1 time ---
    Nov 15 04:23:30 FileServer servermgrd[54]: pipe(stdout) error: 24
    Nov 15 04:23:30 FileServer servermgrd[54]: Exception in doCommand: couldn't spawn task: path = /usr/bin/smbstatus, errno 24
    Nov 15 04:24:08 FileServer servermgrd[54]: pipe(stdout) error: 24
    Nov 15 04:24:08 FileServer servermgrd[54]: Exception in doCommand: couldn't spawn task: path = /usr/bin/smbstatus, errno 24
    Nov 15 04:24:08 FileServer servermgrd[54]: pipe(status) error: 24
    Nov 15 04:24:08 FileServer servermgrd[54]: Exception in doCommand: couldn't spawn task: path = /usr/bin/smbstatus, errno 24
    Now this only happens when we leave the server admin app open on the specific server.
    If we close the application the server seems to be working fine (for at least 3 weeks...).
    We even reinstalled the server from scratch, but this problem is persistent...
    Is this a bug en the Server Admin app?

    Hi
    Get into the habit of not leaving either of the two applications (Server Admin and WorkGroup Manager) open. Especially Server Admin. When you've done with the application quit out of it. If you can develop your command line skills (man serveradmin is useful), try and use these where possible instead. Best advice I can give you.
    If your server is not configured as Advanced please ignore this advice.
    Tony

  • ACL and Discover Permissions

    Can someone give me some advice regarding the removal of Discover permissions - it doesn't seem to work as I would expect it to.
    My requirement is quite simple. Out of the box I am attempting to enable a folder only to be seen/accesible by a one set of users and not be visible by all others. In order to do this I have done the following:
    Created a group containing the users to are to see the folder('Secure Users').
    Created a ACL that has 'Secure Users' at the bottom of the list (grant all) and above it 'World' (revoke all).
    Applied ACL to the appropriate folder.
    However when I log in (thru WEBUI) using 'normal' user (not in Secure Users group) I can still see the folder. When I click on it I get the following error:
    'java.lang.Exception: The Folder you specified does not exist'.
    I was under the impression that the 'ALL' permission bundle contained 'Discover' permissions. I actually want to make this folder invisible to all users that are not in the Secure Users group. Is this possible?
    Thanks
    Chris

    Essentially Posix permssions are old and limited to three people: an owner, a group, and "everyone else". For each of these you have the option to set combinations of "read", "write", or "execute". Ultimately this is very limited, and ACLs expand on this with a vast array of possibilities (too many to list here). One example, though, is that ACLs would allow you to create only files within a specific directory and not create folders, whereas Posix permissions do not allow for this specification. You can also set these for multiple groups and multiple owners with ACLs, and also have numerous inheritance options for directory trees so files and folders within hierarchies get specific permissions properties when they are created.

  • How to fiter packet in router exept the acl and firewall?

    Subject is intact.
    I found something interesting while trying to perform a process.
    To be filtered by the ICMP protocol, where the ACL and Firewall, was that you should not use it.
    But no matter how these ideas to Google, there was no answer to this.
    Please share reference about this or more keywords, and your knowledge.

    you are not clear on what you are trying to do.. 
    You want to block all icmp without using access-lists? 
    I think an intrusion prevention system is a very expensive solution for this.. 
    technically any device that can drop traffic is a firewall. So I don't see much other option for you. You could use a linux box running ip tables to do the same thing however that is still a firewall.. 

  • Router ACL and Port ACL

    how to find out after looking at the ACl that this is router acl and this is port acl.
    is there is any syntax difference between these two acl's? or these two look the same.

    how to find out after looking at the ACl that this is router acl and this is port acl.
    It depends on where the ACL is applied:
    Layer-3 interface (SVI, routed port): Router ACL
    Layer-2 interface (physical switch interfaces): Port ACL
    is there is any syntax difference between these two acl's?
    Both support Standard and Extended ACLs, the Port ACLs support MAC Extended ACLs in addition.
    Link: c3560 Configuring Network Security with ACLs

Maybe you are looking for

  • ITunes doesn't sync any of my apple products and ONLY CDs are not appearing on iMac

    This has been happening for a while now and I haven't been able to sync my iPhone to my iMac and that applies to my iPod too. Anybody know a way to Fix this because I really need to sync them. Also NO CDs are appearing on the mac or on iTunes but DVd

  • ITunes 11.1.2 Painfully Slow

    When I insert a CD to copy it to my iTunes it takes 1 minute and 40 seconds of spinning beach ball until the CD starts to be copied. This issue has just started since I updated to the latest version of iTunes a day or so ago. Is there anyone else exp

  • WRT54G v6 Unstable connection

    Hello! If you need any other information than I will be providing, please feel free to request it.  As noted, I'm using a WRT54G v6 router that is connected to 3 PC's. Two of the PCs are wireless, one is directly connected to the router. I am using t

  • How SAP HANA is helpful in motorracing or F1?? Need Help.

    Hi everyone, I am a Graduating Student. Looking for a career in Motorsports. I got to know that SAP HANA is much helpful in motorracing. My question is how it is helpful and what is the present value and what will be the importance of HANA in Future.

  • Palm, Have a request if you can add the option on webOS 1.4, PLEASE!

    Please add a simple feature.. well two. 1) Please allow us to turn off auto-dim. I want my screen on my Pixi to be full blast. You give us these wonderful high-res screens, and they can only be used to their fullest potential during bright lights? No