ACS 5.2 Import Internal Hosts

Tyring to use the "File Operations" option to import hosts into ACS. I go through the wizard and click "Finish", the pop up goes blank and just hangs there. No errors are genereated. Anyone ever come accros this?

Which browser version are you using? Do you have popups enabled?

Similar Messages

[ACS 5.4] Add Internal hosts using API

Hi,
I tried Machine authentication after importing MAC Address in internal hosts.
Is it possible to use ACS API to import those MAC Address?
I want to develop a specific web interface for support to do this action.
Thanks for your help,
Patrick

Hi Horst,
Currently this feature is not there, you cannot use filters based on admin created attrbutes,
An enhancement is already open:
CSCui17182 ACS user filtering using custom attribute
Supposed to be included in 5.5, but it was not, so you can look forward to it on future ACS patch.
Save this ID on the bug search and you will get a notification.
**Share your knowledge. It’s a way to achieve immortality.
--Dalai Lama**
Please Rate if helpful.
Regards
Ed

Maximum "Internal Hosts accounts" on ACS 5.2

Is there a maximum number of "Internal Hosts account" IDs that the local database in a ACS 5.2 can handle?
Thanks....

I hope you're right, jrabinow
Because I have 7,000 hosts that I need to add. I dont want to find out that max number of host is less than 7,000..that would be really frustrating..lol
@ ewood2624
you are referring to max number to import using csv, not max number of hosts that could reside internally.

Python Script to add internal hosts on ACS 5.2

Hi,
is there any example how to add/remove a internal host via python script, like you would do it via the GUI under "User and Identity Stores -> Internal Identity Stores -> Hosts" ?
regards
Dirk

Hi Dirk,
where do you plan to run your script ? on a server external to the ACS I guess right ?
Then the question is more "is there a way to add a user through CLI on ACS" because that is what the script would be using right ? And there isn't such a way to my knowledge.
Nicolas
===
don't forget to rate answers that you find useful

How can I map SSH from an outside network range to an internal host (ASA 5505)

Cisco Adaptive Security Appliance Software Version 7.2(4)
Device Manager Version 5.2(4)
- External network range that needs SSH access: 8.8.8.0/24
- Outside interface: 10.1.10.2 (NAT'd from 7.7.7.7)
- Inside Network: 192.168.100.0/24
- Inside host to redirect external SSH to: 192.168.100.98
Hi All,
I have a Cisco ASA 5505 (version above) and I have someone that needs to SSH into a box behind the ASA. I'm having a few issues trying to configure this access-list and NAT. I've tried many combinations and clearly my IOS is not as good as I thought.
Can anyone help with this? What commands should I enter to accomplish mapping SSH from an outside network range to an internal host?
Many thanks,
Tarran

This may or may not work depending on how your modem handles the natting. On your firewall try this -
static (inside,outside) tcp interface 22 192.168.100.98 22
then add this to your acl on the outside interface of your ASA -
access-list outside_in permit tcp 8.8.8.0 255.255.255.0 host 10.1.10.2 eq 22
if you don't have an acl applied then add this extra step -
access-group outside_in in interface outside
Jon

Importing internal table in Adobe Interactive Forms

Hi all,
at the moment I do my first steps in AIF.
I have created a report and select dd02l, dd03l and dd04l.
dd02l is a structure. dd03l and dd04l are internal tables.
How can I import internal tables into my function module with getting a runtime error? Fields and structures are no problem?
I have defined both internal tables as importing parameter in my form interface because I cannot define internal tables ;o(
Thx 4 help & regards
Michael

hi,
find attached document it will helpful for u go to link
1.https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/c2567f2b-0b01-0010-b7b5-977cbf80665d
2.https://www.sdn.sap.com/irj/sdn/abap-elearning
thanks reward if helpful

Export & Import internal table data across the programs

Hi All,
I have two different reports,let say ZPRO1 & ZPRO2. I want to export internal table data of ZPRO1 to ZPRO2 and then I want to do some calculations in ZPRO2 with the imported internal table data(ZPRO1).
If I use 'SUBMIT' or CALL TRANSACTION syntax ZPRO1 is displaying..but I want to use only internal table data of ZPRO1.
Pls advise.
Pranitha.

Hi,
Please follow the simple code and try to solve your issue.
Code in program1
types: begin of ty_itab,
       matnr type matnr,
       end of ty_itab.
data: it_itab type table of ty_itab,
      wa_itab type ty_itab,
      it_itab1 type table of ty_itab.
select matnr from mara into table it_itab.
export it_itab to shared buffer indx(st) id 'ABC'.
Code in program2
types: begin of ty_itab,
       matnr type matnr,
       end of ty_itab.
data: it_itab type table of ty_itab,
      wa_itab type ty_itab.
import it_itab from shared buffer indx(st) id 'ABC'.
loop at it_itab into wa_itab.
write:/ wa_itab-matnr.
endloop.
Please delete shared buffer indx(st) id 'ABC', once we don't need the internal table data.
Regards
Dande

ASA 8.2(1) Global and NAT statements, natting certain internal hosts

Hi, I have what I believe will be an easy question, but I cannot find the answer and cannot afford to test it on our production ASA.
I am running an ASA firewall, we are performing PAT with one Public IP Address for all inside traffic accessing the Internet. We need to implement a solution where whenever two or three internal hosts/servers access the Internet, they need to appear to come from a unique public IP, different than the current Global IP for all other internal traffic. I understand I could Nat thier Internal IP Address to a public IP, but I don't need each server to have it's own public IP, I'd like for all of them to share one.
Thoughts on how to accomplish this? Thanks!

Hi,
To my understanding you would just create a new Dynamic PAT configuration using different NAT ID for these hosts.
Though when you create a separate Dynamic PAT for some hosts with a new NAT ID you will have to make sure that this NAT ID has a rule towards any interface they had before.
In a very basic setup there should only be Dynamic PAT between your "inside" and "outside" interfaces (presumed thats what they are called on your firewall)
This would mean that if you had for example a network 10.10.10.0/24 and you performed Dynamic PAT for that network using the "outside" interface IP address you would then configure the following
global (outside) 1 interface
nat (inside) 1 10.10.10.0 255.255.255.0
So the above is probably the type of configuration you have at the moment?
For the 2/3 hosts you have that need a different PAT IP address you could probably configure something like this (1.1.1.1 is just an example IP instead of the actual public IP address that is different from the interface IP address)
global (outside) 2 1.1.1.1
nat (inside) 2 10.10.10.1
nat (inside) 2 10.10.10.2
nat (inside) 2 10.10.10.3
If the original ID 1 NAT rule had "global" statements for some other interface then you would most likely need ID 2 configurations for those too. Though generally Dynamic PAT is only performed towards other external networks which usually means only the "outside" interface.
Without seeing the configurations I dont think I can say much more.
Naturally "packet-tracer" is an excellent command to confirm what what NAT/PAT is applied for a hosts connection.
For example if you wanted to test host 10.10.10.1 applied ASA configurations/rules towards some external hosts you could issue this command
packet-tracer input inside udp 10.10.10.1 12345 8.8.8.8 53
This should tell you what NAT translation is performed for this traffic (it simulates a destination port UDP/53 connection towards 8.8.8.8). Naturally you can also confirm things through firewall logs and the translation table of the device.
Active translations on the firewall you can show with the command
show xlate
It does have a lot of additional parameters after the "xlate" if you want to have more specific output
Hope this helps
Please do remember to mark a reply as the correct answer if it answered your question.
Feel free to ask more if needed
- Jouni

Outbound web request to internally hosted (natted server)

Hi, I've got an issue with hairpining traffic on the ASA, it's a bit different to the usual VPN in/out query, not sure of the best way to approach this:
[example names/IPs used]
a)Web server hosted in dmz. External DNS resolves www.example.com to 8.8.8.10, ASA NATs 8.8.8.10 (outside) to 192.168.1.10 (DMZ)
b)Outbound web request (from internal network client) 10.0.0.1 is natted to source 8.8.8.9 (outside) - doesn't use a proxy and uses external DNS.
Web browsing to externally hosted sites works fine (as you'd expect), inbound web requests from foreign addresses works fine. When internal client browses to www.example.com, request fails.
I assume this is because the outbound request is Natted to originate from 8.8.8.9 and destined for 8.8.8.10 which is on the same interface on the ASA.
As the client is not using a proxy I cannot manipulate or redirect the request at this level.
What would be the best way to address this issue? Would I create some kind of NAT exception/configuration like :
source=10.0.0.x destination=8.8.8.10 NAT to source=10.0.0.x destination=192.168.1.10? meaning I would have multiple NAT rules (for multiple internally hosted servers) or is there a better way of doing this (given I am working with the outside interface which will include public traffic)?

So inside hosts are trying to access www.example.com using an external DNS. is the 8.8.8.10 address being fully NATed to the 192.168.1.10 address or is PAT being used (only specific ports being NATed). the reason I ask is that an option would be to use DNS doctoring but this is not supported when using PAT. this is done by adding the dns keyword at the end of the NAT statement.
What version ASA are you running?
Another option would be to NAT the 8.8.8.10 to 192.168.1.10 from the inside to the DMZ. NAT exemption will not work as that just prevents NATing from taking place. You would need to NAT traffic destined for 8.8.8.10 on the inside interface to the DMZ.
Both options are good options, but if possible I would go with the first option.

Is there a way to internally host a form?

Hi Adobe
I want to know if it's possible to internally host a form instead of using the adobe site.
Is there a way to convert the form into html and have it uploaded to my own server?
We are using the form to register students coming into our facility, we want to make sure that information is not accessed by third party and that even when the adobe servers are down we can still access the form.
Thanks

Sorry you can't host the HTML yourself. Storing the data on our system is pretty secure (see http://forums.adobe.com/docs/DOC-1384) and we are rarely down. You can also export the data once in a while to a local system so you can access it when offline.
But if this doesn't work for you then one thing I can proposed to you (if you really want to take care of the data yourself) is to generate a PDF form instead of an HTML form. You will need a paid subscription for this. Then you can generate the PDF without a submit button. FormsCentral then won't collect data for this PDF. You can then use Adobe Acrobat to add a submit button to email the completed form to you via email. This way you are in charge of the data. See http://forums.adobe.com/message/5417336#5417336 for help on how to do this.
Hope this helps
Gen

Two port bootable SATA PCIe internal Host adapter

Hi
My first post.
Who make a Two port bootable SATA PCIe internal Host adapter.
What I would like to do is add two Intel 80GB SSD's in the open optical bay and set them up as Raid 0 for booting and applications. Is this even possible??
Other info:
Bay 1 scratch disk. Bay 2, 3, and 4 are set up with 3 WD RE3 in a Raid 0 for data. For booting I am using a Guardian MAXimus RAID-1 [MIRROR] External eSATA/FireWire 800.
And yes I have back up systems. LaCie 5big Network, Time Machine 2TB and a Seagate free agent. Paranoid Yes, I have lost stuff.....
Message was edited by: fxdxt

Cool. Welcome to the Apple Discussions. You should like it here, for nothing else but the diversity of opinion.
In my case, if I were you, I'd get one of these, and put your two Intel's in the optical bay. Native and bootable... Eh, Voila!
http://eshop.macsales.com/item/Other%20World%20Computing/MRSFW8U2OB/
Wait a minute, I did do that...

Unable to Import Internal Certificate to Lync Deployment wizard Local Store

hi,
While installing Edge server. i imported internal certificate to Certificate local store. But when i tried to assign those certificate i did not see any imported certificate. I have installed Lync and Edge server several times but this is the 1st time, i m
facing this issue.
FYI,
Its Lync 2010 Standalone Server. Also i have installed, domain’s root certificate to Edge server ” trusted root authority”.
Kindly suggest.
Thanks and Regards,
Ankit

Hi Ankkit18,
You can download the Certificate Chain from CA and import it to Edge Server using MMC (Computer Account ->
Trusted Root Certification Authorities).
And in certificate request step, make sure that you have selected the
Mark certificate private key as exportable check box.
For more details, please refer to the following article.
Set up certificates for the internal edge interface in Lync Server 2013
Best regards,
Eric

Internally hosted sites slow to load through proxy...

Hi Everyone,
We're having some issues with internally hosted sites and apps loading slowly while on the internal network. We host a Moodle site, a Joomla site, an Exchange 2007 mail server (sorry, no more GW), and a Senior Systems server. All of these, except for the Joomla site, have an SSL cert from either GoDaddy or Verasign. If you're outside of our network the sites load just fine.
We're running a Netware 6.5 SP2 box with BM 3.8 on it and use the proxy. We use both IE 8 and Firefox (from 3.0 to 3.6) with either manual proxy settings with exemptions for the above sites, or a PAC file with the same exemptions. I don't believe the PAC file is the issue as the slowness still happens when configuring the proxy manually within the browsers. When a user tries to go to one of the above sites while on our network, the pages won't load for around 5-10 seconds. The browser will say it's connected to the site, but it just sits - and then the page will just pop into place. The Senior Systems server is particularly bad, as at times only the background color loads and a few minutes later the login box will load.
We have our DNS and DHCP servers running on Windows Server 2003 boxes.
Thanks in advance,
-CR Hiestand

On 01/21/2010 02:36 PM, hiestandc wrote:
>
> Thanks for the reply.
>
> 1. No, we don't use the reverse proxy. External users go through the
> firewall, but not the proxy. We currently use the forward proxy for
> anything going over a web protocal, but have exempted the internally
> hosted servers within the browsers from doing so - which works, but it
> extremely slow.
>
> 2. No, they resolve to the local IP address.
>
> 3. We do use filters, but nothing related to internal sites.
>
>
so if i understood correctly, you do not use proxy to access this sites
from inside, correct?
But traffic is still going thru bm, correct?
otherwise i do not understand why bm is on blame of the slowness. As
logn as you do not use the proxy, bm is not involved.
Best approach will be to take a lan trace and see where the delay happens.

Regarding Exporting and Importing internal table

Hello Experts,
I have two programs:
1) Main program: It create batch jobs through open_job,submit and close job.Giving sub program as SUBMIT.
I am using Export IT to memory id 'MID' to export internal table data to sap memory in the subprogram.
The data will be processed in the subprogram and exporting data to sap memory.I need this data in the main program(And using import to get the data,but it is not working).
Importing IT1 from memory id 'MID' to import the table data in the main program after completing the job(SUBMIT SUBPROGRAM AND RETURN).
Importing is not getting data to internal table.
Can you please suggest something to solve this issue.
Thank you.
Regards,
Anand.

Hi,
This is the code i am using.
DO g_f_packets TIMES.
* Start Immediately
       IF NOT p_imm IS INITIAL .
         g_flg_start = 'X'.
       ENDIF.
       g_f_jobname = 'KZDO_INHERIT'.
       g_f_jobno = g_f_jobno + '001'.
       CONCATENATE g_f_jobname g_f_strtdate g_f_jobno INTO g_f_jobname
                                              SEPARATED BY '_'.
       CONDENSE g_f_jobname NO-GAPS.
       p_psize1 = p_psize1 + p_psize.
       p_psize2 = p_psize1 - p_psize + 1.
       IF p_psize2 IS INITIAL.
         p_psize2 = 1.
       ENDIF.
       g_f_spname = 'MID'.
       g_f_spid = g_f_spid + '001'.
       CONDENSE g_f_spid NO-GAPS.
       CONCATENATE g_f_spname g_f_spid INTO g_f_spname.
       CONDENSE g_f_spname NO-GAPS.
* ... (1) Job creating...
       CALL FUNCTION 'JOB_OPEN'
         EXPORTING
           jobname          = g_f_jobname
         IMPORTING
           jobcount         = g_f_jobcount
         EXCEPTIONS
           cant_create_job = 1
           invalid_job_data = 2
           jobname_missing = 3
           OTHERS           = 4.
       IF sy-subrc <> 0.
         MESSAGE e469(9j) WITH g_f_jobname.
       ENDIF.
* (2)Report start under job name
       SUBMIT (g_c_prog_kzdo)
              WITH p_lgreg EQ p_lgreg
              WITH s_grvsy IN s_grvsy
              WITH s_prvsy IN s_prvsy
              WITH s_prdat IN s_prdat
              WITH s_datab IN s_datab
              WITH p1      EQ p1
              WITH p3      EQ p3
              WITH p4      EQ p4
              WITH p_mailid EQ g_f_mailid
              WITH p_psize EQ p_psize
              WITH p_psize1 EQ p_psize1
              WITH p_psize2 EQ p_psize2
              WITH spid     EQ g_f_spid
              TO SAP-SPOOL WITHOUT SPOOL DYNPRO
              VIA JOB g_f_jobname NUMBER g_f_jobcount AND RETURN.
*(3)Job closed when starts Immediately
       IF NOT p_imm IS INITIAL.
         IF sy-index LE g_f_nojob.
           CALL FUNCTION 'JOB_CLOSE'
             EXPORTING
               jobcount             = g_f_jobcount
               jobname              = g_f_jobname
               strtimmed            = g_flg_start
             EXCEPTIONS
               cant_start_immediate = 1
               invalid_startdate    = 2
               jobname_missing      = 3
               job_close_failed     = 4
               job_nosteps          = 5
               job_notex            = 6
               lock_failed          = 7
               OTHERS               = 8.
           gs_jobsts-jobcount = g_f_jobcount.
           gs_jobsts-jobname = g_f_jobname.
           gs_jobsts-spname   = g_f_spname.
           APPEND gs_jobsts to gt_jobsts.
         ELSEIF sy-index GT g_f_nojob.
           CLEAR g_f_flg.
           DO.                         " Wiating untill any job completion
             LOOP AT gt_jobsts into gs_jobsts.
               CLEAR g_f_status.
               CALL FUNCTION 'BP_JOB_STATUS_GET'
                 EXPORTING
                   JOBCOUNT                         = gs_jobsts-jobcount
                   JOBNAME                          = gs_jobsts-jobname
                IMPORTING
                   STATUS                           = g_f_status
*            HAS_CHILD                        =
*          EXCEPTIONS
*            JOB_DOESNT_EXIST                 = 1
*            UNKNOWN_ERROR                    = 2
*            PARENT_CHILD_INCONSISTENCY       = 3
*            OTHERS                           = 4
               g_f_mid = gs_jobsts-spname.
               IF g_f_status = 'F'.
                 IMPORT gt_final FROM MEMORY ID g_f_mid .
                 FREE MEMORY ID gs_jobsts-spname.
                 APPEND LINES OF gt_final to gt_final1.
                 REFRESH gt_prlist.
                 CALL FUNCTION 'JOB_CLOSE'
                   EXPORTING
                     jobcount             = g_f_jobcount
                     jobname              = g_f_jobname
                     strtimmed            = g_flg_start
                   EXCEPTIONS
                     cant_start_immediate = 1
                     invalid_startdate    = 2
                     jobname_missing      = 3
                     job_close_failed     = 4
                     job_nosteps          = 5
                     job_notex            = 6
                     lock_failed          = 7
                     OTHERS               = 8.
                 IF sy-subrc = 0.
                   g_f_flg = 'X'.
                   gs_jobsts1-jobcount = g_f_jobcount.
                   gs_jobsts1-jobname = g_f_jobname.
                   gs_jobsts1-spname   = g_f_spname.
                   APPEND gs_jobsts1 TO gt_jobsts.
                   DELETE TABLE gt_jobsts FROM gs_jobsts.
                   EXIT.
                 ENDIF.
               ENDIF.
             ENDLOOP.
             IF g_f_flg = 'X'.
               CLEAR g_f_flg.
               EXIT.
             ENDIF.
           ENDDO.
         ENDIF.
       ENDIF.
       IF sy-subrc <> 0.
         MESSAGE e539(scpr) WITH g_f_jobname.
       ENDIF.
       COMMIT WORK .
     ENDDO.

Memory Limitation on EXPORT & IMPORT Internal Tables?

Hi All,
I have a need to export and import the internal tables to memory. I do not want to export it to any data base tables. is there a limitation on the amount of memroy that is can be used for the EXPORT & IMPORT. I will free the memory once I import it. The maximum I expect would be 13,000,000 lines.
Thanks,
Alex (Arthur Samson)

You don't have limitations, but try to keep your table as small as possible.
Otherwise, if you are familiar with the ABAP OO context, try use Shared Objects instead of IMPORT/EXPORT.
<a href="http://help.sap.com/saphelp_erp2004/helpdata/en/13/dc853f11ed0617e10000000a114084/frameset.htm">SAP Help On Shared Objects</a>
Hope this helps,
Roby.

ACS 5.2 Import Internal Hosts

Similar Messages

Maybe you are looking for