Again: Policy issue with official certificate

Hi
The signer of the document in question uses an official p12 keystore issued by QuoVadis.
The receiving user then encounters a problem with the signature in adobe reader 11:
- The certificate chain is shown correctely
- The signer-certificate shows the yellow warning flag saying: The selected certificate has errors: Invalid policy constraint
This causes lot of problems in user environments now oblidged to deal with signed documents.
Since we have absolutely no influence on all the various digital ids out in the field following questions:
- Exactely hat policy constaints hurt adobe readers and why is this checked at all?
- What can/must we do on the signer's side to get a document signed with an official digital id accepted in adobe reader ?
- Is it reasonable to think a reader should accept an otherwise valid certification chains without threading the innocent receiver with "Something wrong with document credibility" ?
Thanks for yor help
Marcel

A CA may issue many different signing certificates and System Administrator may restrict which signatures signed with certificates issued by this CA should be accepted as Valid on particular Reader installations.
Policy constraints are set on individual Acrobat/Reader installations. Usually they are set by IT but can be also done manually by the users. When policy constraints are enabled Reader validates only signatures signed with DIgital IDs that meet specified policy constraints. In Reader/Acrobat policy constraints are specified per trusted root certificate. In Reader XI go to Edit->Preferences->Signatures, click on More.... in "Identities&Trusted Certificates" and select "Trusted Certificates". In the list of ttrusted certificates select the root certificate of the chain in the problem signature and click "Edit Trust" button. In the dialog that comes up select "Policy Restrictions" tab. It contains on top explanation of what policy restrictions are.
Apparently the installations that exhibit this problem have some "Certificate policies" entered for QuoVadis trusted root. When it happens Reader will mark as Valid only signatures signed with the QuoVadis-issued Digital IDs that include matching policy constraints. There is nothing you can do about it on the signer's side, because it is controlled by the preferences on the recipients' side.

Similar Messages

Issues with digital certificates - HELP!

I have no rational explanation, but this past week I was playing with the settings on my computer and deleted all the digital certificates in my computer.
Since then, everytime I want to check my Yahoo! or Gmail, or any type of secure account, there is a pop-up indicating something about not having a secure certificate. I've tried to add the X509 but it just doesn't store it and the next time I reboot the same thing happens all over again.
Can someone please help? Thank you!!

I assume you are talking about the icon on an iPad.
Not all apps have Airplay functionality, more will with time.
If it's the same app sometimes showing icon, sometimes not I would suspect transient network issues losing the connection between the devices. Some of Apple's device seem a bit slow to re-establish connections if they're lost or stubbonly refuse to reconnect - occasionally this can be down to a user's network or the device at either end losing connection even if the iPad remains connected.
There may of course be some software bugs at play.

Policy issues with new Version

I get the following error when an application has an assembly that asks for a Oracle.DataAccess version of 10.2.0.100 but the new server has 1.102.2.20 with the policies on it.
I want to avoid rebuilding assemblies with the latest version since their is a lot of them in over 50+ different applications.
Compiler Error Message: CS1705: Assembly 'SomeAssembly, Version=1.0.0.0, Culture=neutral, PublicKeyToken=null' uses 'Oracle.DataAccess, Version=10.2.0.100, Culture=neutral, PublicKeyToken=89b483f429c47342' which has a higher version than referenced assembly 'Oracle.DataAccess, Version=1.102.2.20, Culture=neutral, PublicKeyToken=89b483f429c47342'
Any suggestions? Thanks!

Thanks for the reply. I noticed that article, but didn't get any help from it. The compiler in my situation doesn't like the way the "10" was dropped off the version. I figure there is nothing I can do about that, but I guess I'm really looking for a way to tell the compiler to ignore the fact it thinks it's going to use a lower version then what the assembly is calling for.

Policy issues with RMI

I developed a client app that runs correctly on my computer but when uploaded to a remote web server, it returns no answer. I believe this is caused by SocketPermission. It appears to be making a request. Can you tell me how the socket permissions can be adjusted for my application, when it resides on a web server not owned by me.

you need to read up on the java permissions settings for RMI also.

Certificate Host Naming Issue with WRVS4400N

When accessing the WRVS4400N v1.00.16 for Remote Administration or QuickVPN, I get an error indicating that the certificate host name does not match the host name of the WRVS4400N. Is this a an issue with the certificate generated by the WRVS4400N or is there a method of changing the host name of the WRVS4400N to match that of the certificate? I noticed that the name on the certificate is WRVS4400N and the router name is linksys.

I have not been able to generate a certificate to place in the QuickVPN directory. I must be missing something. I looked in the VPN Tab, VPN advanced settings button and VPN Client Accounts tab. I can not find a button to generate a certificate to place in the QuickVPN directory. The only way I get a certificate is by https of the router from the LAN or WAN and exporting it from Internet Explorer. In the mean time, I placed the certificate in my certificate stores under the trusted authority store. Is there a button missing to generate a certificate or do I simply not get it? Both are possible.
PS> Thank you for your reply.

VMQ issues with NIC Teaming

Hi All
Apologies if this is a long one but I thought the more information I can provide the better.
We have recently designed and built a new Hyper-V environment for a client, utilising Windows Server R2 / System Centre 2012 R2 however since putting it into production, we are now seeing problems with Virtual Machine Queues. These manifest themselves as
either very high latency inside virtual machines (we’re talking 200 – 400 mSec round trip times), packet loss or complete connectivity loss for VMs. Not all VMs are affected however the problem does manifest itself on all hosts. I am aware of these issues
having cropped up in the past with Broadcom NICs.
I'll give you a little bit of background into the problem...
Frist, the environment is based entirely on Dell hardware (Equallogic Storage, PowerConnect Switching and PE R720 VM Hosts). this environment was based on Server 2012 and a decision was taken to bring this up to speed to R2. This was due to a number
of quite compelling reasons, mainly surrounding reliability. The core virtualisation infrastructure consists of four VM hosts in a Hyper-V Cluster.
Prior to the redesign, each VM host had 12 NICs installed:
Quad port on-board Broadcom 5720 daughter card: Two NICs assigned to a host management team whilst the other two NICs in the same adapter formed a Live Migration / Cluster heartbeat team, to which a VM switch was connected with two vNICs exposed to the
management OS. Latest drivers and firmware installed. The Converged Fabric team here was configured in LACP Address Hash (Min Queues mode), each NIC having the same two processor cores assigned. The management team is identically configured.
Two additional Intel i350 quad port NICs: 4 NICs teamed for the production VM Switch uplink and 4 for iSCSI MPIO. Latest drivers and firmware. The VM Switch team spans both physical NICs to provide some level of NIC level fault tolerance, whilst the remaining
4 NICs for ISCSI MPIO are also balanced across the two NICs for the same reasons.
The initial driver for upgrading was that we were once again seeing issues with VMQ in the old design with the converged fabric design. The two vNics in the management OS for each of these networks were tagged to specific VLANs (that were obviously accessible
to the same designated NICs in each of the VM hosts).
In this setup, a similar issue was being experienced to our present issue. Once again, the Converged Fabric vNICs in the Host OS would on occasion, either lose connectivity or exhibit very high round trip times and packet loss. This seemed to correlate with
a significant increase in bandwidth through the converged fabric, such as when initiating a Live Migration and would then affect both vNICS connectivity. This would cause packet loss / connectivity loss for both the Live Migration and Cluster Heartbeat vNICs
which in turn would trigger all sorts of horrid goings on in the cluster. If we disabled VMQ on the physical adapters and the team multiplex adapter, the problem went away. Obviously disabling VMQ is something that we really don’t want to resort to.
So…. The decision to refresh the environment with 2012 R2 across the board (which was also driven by other factors and not just this issue alone) was accelerated.
In the new environment, we replaced the Quad Port Broadcom 5720 Daughter Cards in the hosts with new Intel i350 QP Daughter cards to keep the NICs identical across the board. The Cluster heartbeat / Live Migration networks now use an SMB Multichannel configuration,
utilising the same two NICs as in the old design in two isolated untagged port VLANs. This part of the re-design is now working very well (Live Migrations now complete much faster I hasten to add!!)
However…. The same VMQ issues that we witnessed previously have now arisen on the production VM Switch which is used to uplink the virtual machines on each host to the outside world.
The Production VM Switch is configured as follows:
Same configuration as the original infrastructure: 4 Intel 1GbE i350 NICs, two of which are in one physical quad port NIC, whilst the other two are in an identical NIC, directly below it. The remaining 2 ports from each card function as iSCSI MPIO
interfaces to the SAN. We did this to try and achieve NIC level fault tolerance. The latest Firmware and Drivers have been installed for all hardware (including the NICs) fresh from the latest Dell Server Updates DVD (V14.10).
In each host, the above 4 VM Switch NICs are formed into a Switch independent, Dynamic team (Sum of Queues mode), each physical NIC has
RSS disabled and VMQ enabled and the Team Multiplex adapter also has RSS disabled an VMQ enabled. Secondly, each NIC is configured to use a single processor core for VMQ. As this is a Sum of Queues team, cores do not overlap
and as the host processors have Hyper Threading enabled, only cores (not logical execution units) are assigned to RSS or VMQ. The configuration of the VM Switch NICs looks as follows when running Get-NetAdapterVMQ on the hosts:
Name                           InterfaceDescription
Enabled BaseVmqProcessor MaxProcessors NumberOfReceive
Queues
VM_SWITCH_ETH01                Intel(R) Gigabit 4P I350-t A...#8 True    0:10             1
7
VM_SWITCH_ETH03                Intel(R) Gigabit 4P I350-t A...#7 True    0:14             1
7
VM_SWITCH_ETH02                Intel(R) Gigabit 4P I350-t Ada... True    0:12             1
7
VM_SWITCH_ETH04                Intel(R) Gigabit 4P I350-t A...#2 True    0:16             1
7
Production VM Switch           Microsoft Network Adapter Mult... True    0:0
28
Load is hardly an issue on these NICs and a single core seems to have sufficed in the old design, so this was carried forward into the new.
The loss of connectivity / high latency (200 – 400 mSec as before) only seems to arise when a VM is moved via Live Migration from host to host. If I setup a constant ping to a test candidate VM and move it to another host, I get about 5 dropped pings
at the point where the remaining memory pages / CPU state are transferred, followed by an dramatic increase in latency once the VM is up and running on the destination host. It seems as though the destination host is struggling to allocate the VM NIC to a
queue. I can then move the VM back and forth between hosts and the problem may or may not occur again. It is very intermittent. There is always a lengthy pause in VM network connectivity during the live migration process however, longer than I have seen in
the past (usually only a ping or two are lost, however we are now seeing 5 or more before VM Nework connectivity is restored on the destination host, this being enough to cause a disruption to the workload).
If we disable VMQ entirely on the VM NICs and VM Switch Team Multiplex adapter on one of the hosts as a test, things behave as expected. A migration completes within the time of a standard TCP timeout.
VMQ looks to be working, as if I run Get-NetAdapterVMQQueue on one of the hosts, I can see that Queues are being allocated to VM NICs accordingly. I can also see that VM NICs are appearing in Hyper-V manager with “VMQ Active”.
It goes without saying that we really don’t want to disable VMQ, however given the nature of our clients business, we really cannot afford for these issues to crop up. If I can’t find a resolution here, I will be left with no choice as ironically, we see
less issues with VMQ disabled compared to it being enabled.
I hope this is enough information to go on and if you need any more, please do let me know. Any help here would be most appreciated.
I have gone over the configuration again and again and everything appears to have been configured correctly, however I am struggling with this one.
Many thanks
Matt

Hi Gleb
I can't seem to attach any images / links until my account has been verified.
There are a couple of entries in the ndisplatform/Operational log.
Event ID 7- Querying for OID 4194369794 on TeamNic {C67CA7BE-0B53-4C93-86C4-1716808B2C96} failed. OidBuffer is failed. Status = -1073676266
And
Event ID 6 - Forwarding of OID 66083 from TeamNic {C67CA7BE-0B53-4C93-86C4-1716808B2C96} due to Member NDISIMPLATFORM\Parameters\Adapters\{A5FDE445-483E-45BB-A3F9-D46DDB0D1749} failed. Status = -1073741670
And
Forwarding of OID 66083 from TeamNic {C67CA7BE-0B53-4C93-86C4-1716808B2C96} due to Member NDISIMPLATFORM\Parameters\Adapters\{207AA8D0-77B3-4129-9301-08D7DBF8540E} failed. Status = -1073741670
It would appear as though the two GUIDS in the second and third events correlate with two of the NICs in the VM Switch team (the affected team).
Under MSLBFO Provider/Operational, there are also quite a few of the following errors:
Event ID 8 - Failing NBL send on TeamNic 0xffffe00129b79010
How can I find out what tNIC correlates with "0xffffe00129b79010"
Without the use of the nice little table that I put together (that I can't upload), the NICs and Teams are configured as follows:
Production VM Switch Team (x4 Interfaces) - Intel i350 Quad Port NICs. As above, the team itself is balanced across physical cards (two ports from each card). External SCVMM Logical Switch is uplinked to this team. Serves
as the main VM Switch for all Production Virtual machines. Team Mode is Switch Independent / Dynamic (Sum of Queues). RSS is disabled on all of the physical NICs in this team as well as the Multiplex adapter itself. VMQ configuration is as follows:
Interface Name          -      BaseVMQProc          -        MaxProcs
-      VMQ / RSS
VM_SWITCH_ETH01                  10
     1                           VMQ
VM_SWITCH_ETH02                  12
1                           VMQ
VM_SWITCH_ETH03                  14
   1                           VMQ
VM_SWITCH_ETH04                16
    1                           VMQ
SMB Fabric (x2 Interfaces) - Intel i350 Quad Port on-board daughter card. As above, these two NICs are in separate, VLAN isolated subnets that provide SMB Multichannel transport for Live Migration traffic and CSV Redirect / Cluster
Heartbeat data. These NICs are not teamed. VMQ is disabled on both of these NICs. Here is the RSS configuration for these interfaces that we have implemented:
Interface Name         -      BaseVMQProc         -        MaxProcs
-      VMQ / RSS
SMB_FABRIC_ETH01                18                                   2
RSS
SMB_FABRIC_ETH02                18                                   2
RSS
ISCSI SAN (x4 Interfaces) - Intel i350 Quad Port NICs. Once again, no teaming is required here as these serve as our ISCSI SAN interfaces (MPIO enabled) to the hosts. These four interfaces are balanced across two physical cards as per
the VM Switch team above. No VMQ on these NICS, however RSS is enabled as follows:
Interface Name          -      BaseVMQProc        -         MaxProcs
   -        VMQ / RSS
ISCSI_SAN_ETH01                    2                                    2
RSS
ISCSI_SAN_ETH02                    6                                    2
RSS
ISCSI_SAN_ETH03                    2
2                            RSS
ISCSI_SAN_ETH04                   6
2                            RSS
Management Team (x2 Interfaces) - The second two interfaces of the Intel i350 Quad Port on-board daughter card. Serves as the Management uplink to the host. As there are some management workloads hosted in this
cluster, a VM Switch is connected to this team, hence a vNIC is exposed to the Host OS in order to manage the Parent Partition. Teaming mode is Switch Independent / Address Hash (Min Queues). As there is a VM Switch connected to this team, the NICs
are configured for VMQ, thus RSS has been disabled:
Interface Name        -         BaseVMQProc        -         MaxProcs
-      VMQ / RSS
MAN_SWITCH_ETH01                 22                                  1
VMQ
MAN_SWITCH_ETH02                 22                                  1                           VMQ
We are limited as to the number of physical cores that we can allocate to VMQ and RSS so where possible, we have tried balance NICs over all available cores where practical.
Hope this helps.
Any more info required, please ask.
Kind Regards
Matt

Issue with Lockout Duration in Password Policy in OAM

Hi,
We are facing an issue with the lockout duration configuration in the password policies in the identity manager interface for our OAM setup.
Oracle Access Manager 10g version 10.1.4
User/Policy Store: ADAM Ldap [Microsoft ADAM 2003]
After we lock out a user in our LDAP after 5 wrong attempts, the two attribute values in ADAM get updated to 5:
oblogintrycount
badPwdCount
Also I see that "oblockouttime" gets updated with an unix timestamp.
Now, we have set the "Lockout Duration" in the password policy as 1 hour. So, after 1 hour, the user should be unlocked in ADAM.
However, after 1 hour when the user tries to login, he/she gets the error that a wrong password has been entered for the userID.
When we check in ADAM, we see that the value of "oblogintrycount" was indeed reset. However the value of "badPwdCount" did not get reset and is still stuck at 5.
If we reset both these attribute values to 0, the user can login again.
Now, is OAM expected to reset both these attribute values to 0, or does it only reset the oblix attributes?
If it is the latter, is there a way around to resolve this issue? Or are we doing something wrong here?
Please let us know your feedback.
Thanks!
Abhishek.

OAM only works with the ob* attributes, and not with badPwdCount attribute of the AD (ADAM). I think for some reason the password and account policies of the AD is being triggerred. Disable the AD password policy and it will be Ok.
Hope this helps. Let us know.

Intel vPro AMT integration with SCCM 2012R2 - Issues with SCCM finding the "ConfigMgr AMT Web Server Certificate"

Good evening all,
I'm attempting to get Intel SCS integrated with SCCM 2012 R2 and I have both sides working, doing what they do best, however, I have issues when I try to mate the two. I started with a single server for the site and then tackled the Intel side with success,
then I added another site server to run the Out of Band service point and Enrollment point. Up until this point I've had no issues with certificate templates, or issuance of those certs.
I have re-read the TechNet documents a few times regarding the PKI setup, some Intel documentation and three step by step articles and non of them seem to differ so I can't understand why I'm unable to choose my "ConfigMgr AMT Web Server Certificate"
when configuring the Out of Band Management Component Properties page. The "AMT web server certificate template:" dialog shows my CA FQDN and CA name, but the certificate template list is always blank. I've tried this from both the remote
and local ConfigMgr consoles. The site servers have rights on the CA to manage and issue certs, is there something I'm missing that isn't in the documentation or buried somewhere that I missed? Is there a Application policy that should be on the
cert that isn't mentioned anywhere?
Thanks in advance!
Tesfaye

Hi Joyce,
Thanks for responding. I pretty much have this error repeating in the log file and not much else:
[28, PID:13388][05/21/2014 15:17:15] :System.DirectoryServices.DirectoryServicesCOMException\r\nThere is no such object on the server.
   at System.DirectoryServices.DirectoryEntry.Bind()
   at System.DirectoryServices.DirectoryEntry.get_AdsObject()
   at System.DirectoryServices.DirectorySearcher.FindAll(Boolean findMoreThanOne)
   at System.DirectoryServices.DirectorySearcher.FindAll()
   at Microsoft.ConfigurationManagement.AdminConsole.Common.ADUtils.EnumEnterpriseCACertificateTemplates(String domainEntryName, String certAuthorityFqdn, Boolean isServerAuthen)\r\n
I will look into this, but another hint would be greatly appreciated!
Thanks,
Tesfaye

Issue with self signed certificates on jetdirect J7949E

I'm having a baffling issue with certificates generated internally for use with some HP printers. I can create certificates and install them on J8003E model jetdirect cards and they work fine. When I try to install certs on any of the J7949E cards they fail with an invalid file message. This applies to the root cert as well.
I'm using the Microsoft cert. authority to generate the files.
The printers with the problematic jet direct cards are 4700 Color laserjets and the working models are 4015x monochrome laser printers. Has anyone had this problem and what was done to resolve it? I'm running the latest version of the firmware on the jetdirect cards but the problem existed with older versions as well.

Ok, I've validated my html and I'm getting a few errors related to Angular. They're all one of two types of errors
Error 1:
<div ng-controller="ExampleController">
Gets the following error:
Attribute ng-controller not allowed on element div at this point.
Error 2:
<my-directive></my-directive>
Gets the following error:
Element my-directive not allowed as child of element div in this context. (Suppressing further errors from this subtree.)
Error 1 is for any Angular related thing...ng-click, ng-controller, ng-show, etc.
Error 2 appears where all my custom directives are.
I did a comparison between the not-working extension and a working one that also uses Angular (without any custom elements). When I validated the working extension, it returned a bunch of Error 1's but no Error 2's (this is expected, seeing as there are no custom elements).
To your question about dynamic HTML - there is none. All of the files are static after they're installed. I double checked this by running a diff-merge between the extension before and after it has been run once. They are exactly the same, so no files are changing.
There are known issues with custom directives in older browsers like IE8 - http://www.befundoo.com/blog/angularjs-directives-in-ie8/
Out of curiosity, I tried adding elements in the head, as described in the above blog, inside my extension. This did not have any effect, and the extension still fails.
I'm considering rewriting my directives as attributes instead of elements, and seeing if that does it. That would take some time though, so if the above info helps narrow down the problem or raises other questions of yours, I'm all ears! Thanks again for all the replies!

Issue with cisco acs 4.2.Users unable to login aaa client but after restarting group policy able to login

issue with cisco acs 4.2.Users unable to login aaa client but after restarting group policy able to login

issue with cisco acs 4.2.Users unable to login aaa client but after restarting group policy able to login

I've been having an issue with assistive touch, every time I open an app. the AT disappears the from the screen and I have to turn it off and ON again. Is there a way to fix this?

I've been having an issue with assistive touch, every time I open an app. the AT disappears the from the screen and I have to turn it off and ON again. Is there a way to fix this?

Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Reset all settings
Go to Settings > General > Reset and tap Reset All Settings.
All your preferences and settings are reset. Information (such as contacts and calendars) and media (such as songs and videos) aren’t affected.
- Restore from backup. See:
iOS: How to back up
- Restore to factory settings/new iOS device.

Mapping issue with context again

I again need help with a mapping issue. I dont know how to handle the contexts to get this working in the xi graphical mapping tool. I have previously logged a question regarding this structure but the requirements have now changed.
I have a source document that has multiple delivery line items and for each delivery line item, there are multiple handling units. Each handling unit contains the line number of the delivery line item it belongs to. This structure has been simplified below.
Source Sample
<DOCUMENT>
<DELIVERY_LINEITEM>
<LINENUMBER>10</LINENUMBER>
<MATERIAL>mat 1</MATERIAL>
</DELIVERY_LINEITEM >
<DELIVERY_LINEITEM >
<LINENUMBER>20</LINENUMBER>
<MATERIAL>mat 2</MATERIAL>
</DELIVERY_LINEITEM >
<HANDLING_UNITS>
<HU_LABEL>123</HU_LABEL>
<HU_ITEM>
<LINENUMBER>10</LINENUMBER>
</HU_ITEM>
</HANDLING_UNITS>
<HANDLING_UNITS>
<HU_LABEL>456</HU_LABEL>
<HU_ITEM>
<LINENUMBER>10</LINENUMBER>
</HU_ITEM>
</HANDLING_UNITS>
<HANDLING_UNITS>
<HU_LABEL>789</HU_LABEL>
<HU_ITEM>
<LINENUMBER>20</LINENUMBER>
</HU_ITEM>
</HANDLING_UNITS>
</DOCUMENT>
Source Structure
DOCUMENT 1..1
DELIVERY_LINEITEM 1..unbounded
LINENUMBER 1..1
MATERIAL 1..1
HANDLING_UNITS 1..unbounded
HU_LABEL 1..1
HU_ITEM 1..1
LINENUMBER 1..1
In the target structure, I need to output each handling unit along with the corresponding DELIVERY_LINEITEM material. Target structure has been simplified below:
Target Sample
<DOCUMENT>
<ROW>
<PACKAGING>
<HU_LABEL>123</HU_LABEL>
</PACKAGING>
<PACKAGING_ITEM>
<LINENUMBER>10</LINENUMBER>
<MATERIAL>mat 1</MATERIAL>
</PACKAGING_ITEM>
</ROW>
<ROW>
<PACKAGING>
<HU_LABEL>456</HU_LABEL>
</PACKAGING>
<PACKAGING_ITEM>
<LINENUMBER>10</LINENUMBER>
<MATERIAL>mat 1</MATERIAL>
</PACKAGING_ITEM>
</ROW>
<ROW>
<PACKAGING>
<HU_LABEL>789</HU_LABEL>
</PACKAGING>
<PACKAGING_ITEM>
<LINENUMBER>20</LINENUMBER>
<MATERIAL>mat 2</MATERIAL>
</PACKAGING_ITEM>
</ROW>
</DOCUMENT>
Target Structure
DOCUMENT 1..1
ROW 1..unbounded
PACKAGING 1...1
HU_LABEL 1..1
PACKAGING_ITEM 1..1
LINENUMBER 1..1
MATERIAL 1..1
Note, 1 ROW in the target structure = 1 HANDLING_UNITS from the source structure.
Can anyone help me to achieve this? I do not know how to map the relevant DELIVERY_LINEITEM\MATERIAL from the source structure to the target structure.

JM,
Please find the solution. Reply back if it helps or not
http://www.flickr.com/photo_zoom.gne?id=1045178998&size=o
http://www.flickr.com/photo_zoom.gne?id=1045179010&size=o
http://www.flickr.com/photo_zoom.gne?id=1045179022&size=o
Results :http://www.flickr.com/photo_zoom.gne?id=1045179134&size=o
Code used:
for(int j=0;j<Handling_Linenum.length;j++)
for(int k=0;k<Delivery_Linenum.length;k++)
if(Handling_Linenum[j].equals(Delivery_Linenum[k]))
result.addValue(""Material[k]"");
result.addContextChange();
Best regards,
raj.

SSL certificate issue with WLS 10.3

Hi All,
I am facing this issue with my WLS cluster.
<21-Apr-2010 10:42:00 o'clock BST> <Warning> <Security> <BEA-090482> <BAD_CERTIF
ICATE alert was received from system.core.com - 10.15.135.30.
Check the peer to determine why it rejected the certificate chain (trusted CA co
nfiguration, hostname verification). SSL debug tracing may be required to determ
ine the exact reason the certificate was rejected.>
<21-Apr-2010 10:42:00> <Warning> <Uncaught exception in server handler: javax.ne
t.ssl.SSLKeyException: [Security:090482]BAD_CERTIFICATE alert was received from
system.core.com - 10.15.135.30. Check the peer to determine wh
y it rejected the certificate chain (trusted CA configuration, hostname verifica
tion). SSL debug tracing may be required to determine the exact reason the certi
ficate was rejected.>
Please suggest. I have also tried the below settings.
Node Manager:
-Dweblogic.nodemanager.sslHostNameVerificationEnabled=false
Admin Server:
-Dweblogic.security.SSL.ignoreHostnameVerification=true
Many thanks in advance.

Hi Sandip,
I am facing this issue right after when I have configured the listen address to my system IP in Machine(NodeManager), earlier it was "localhost".
Also I have tried to generate the certificates e.g.
C:\bea\wlserver_10.3\server\bin>java utils.CertGen -cn system.core.com -keyfilepass DemoIdentityPassPhr
ase -certfile mycertificate -keyfile .keystore
Generating a certificate with common name system.core.com and key strength 1024
issued by CA with certificate from C:\bea\WLSERV~1.3\server\lib\CertGenCA.der file and key from C:\bea\WLSERV~1.3\server
\lib\CertGenCAKey.der file
C:\bea\wlserver_10.3\server\bin>java utils.ImportPrivateKey -keystore DemoIdentity.jks -storepass DemoIdentityKeyStorePa
ssPhrase -keyfile .keystore.pem -keyfilepass DemoIdentityPassPhrase -certfile mycertificate.pem -alias demoidentity
No password was specified for the key entry
Key file password will be used
Imported private key .keystore.pem and certificate mycertificate.pem
into a new keystore DemoIdentity.jks of type jks under alias demoidentity
Tried the above but not wokring. Please advise.
Edited by: R Vashi on 21-Apr-2010 03:38

Has anyone had issues with Microsoft Word or Excel requiring initial set-up again after a software update?

Has anyone had issues with Microsoft Word or Excel requiring a set-up after software udates? I do not have product key, so unable to set up again.

This laptop has original Microsoft word & excel provided by Mac when purchased and is legal copy.
Do I understand you bought a Mac and it came with Microsoft Office? I could be wrong, but I wasn't aware that was an option. Or am I not parsing that sentence correctly and you bought a Mac and bought a legal copy of Office to install on it? In which case, never mind.

HT4623 iPhone 4s will not boot after trying to install ios7 beta 4. Stops at apple logo with progress line under it. how can I reset it or get it back up to do a restore then try the iOS 7 beta 4 install again. Issue was probably caused by disconnection

iPhone 4s will not boot after trying to install ios7 beta 4. Stops at apple logo with progress line under it. how can I reset it or get it back up to do a restore then try the iOS 7 beta 4 install again. Issue was probably caused by disconnection

Obviously since you have iOS 7 you're a developer. As a developer, you signed a NDA with Apple not to discuss the iOS on a public forum. Please log in to the Developer Forum using your credentials and ask for help there, lest you risk having your credentials terminated.
Thanks, and best of luck to you.
GDG

Again: Policy issue with official certificate

Similar Messages

Maybe you are looking for