Apex3 on XE over SSL for internet users

Folks,
I've been thrown in the deep end - I've created an Intranet in Apex3 on XE and now I need to make it available to outside parties over the internet. Due to the nature of the content it really should be only be available over SSL.
I have seen by other posts that suggest running Apache as a proxy for XE/Apex is the way to go and found what I thought was the answer on Apache's site (http://httpd.apache.org/docs/2.2/ssl/ssl_howto.html) as well as defaulting Apache to an Apex site (APEX charts and reverse proxy (Houston we have a problem!!)
However I don't seem to be able to marry up these settings (not being an Apache guru) into one solution for Apache defaulting to an Apex app (for intranet users) AND the same app but running under SSL for internet users !
Any assistance would be greatly appreciated !!

Wayne,
This is discussed on the XE forum over here:
How to Enable SSL in Oracle XE
Joel

Similar Messages

EP implementation for Internet users

Hello,
I need to Implement EP for internet and intranet users, in which for internet users I need to fetch the summary data of R/3 applications.
how shall we proceed with the implmentation of portal for internet users, pls suggest some blogs showing portal implementation for internet users.
Regards
Vishal

Hi,
To make available portal for both internal and external users, you've to setup a reverse proxy in DMZ. Your portal will reside in intranet and external (internet users) will access portal via reverseproxy.
For reverseproxy there are 3 main options.
- Apache as a ReverseProxy
- ReverseProxy with IIS and ISAPI Filter
- Using Web Dispatcher as reverse proxy.
Now look at the following diagram;
    EXTERNAL USERS                INTERNET
          |
     REVERSEPROXY                 DMZ
PORTAL SERVER                     INTRANET
Internal Users will access portal normally with/without SSL. External Users will access portal with/without SSL via RProxy.
This is how we setup and working well. We Used Apache as ReverseProxy on SuSe with SSL enabled.
But testing WebDispatcher on SuSe for load balancing.

ISA B2B logon Error: No valid private connection for internet user

Hello ,
i used isauseradm to create a user zzweb with all authorizations for B2B..
now when i try to log to
http://host:port/b2b/b2b/init.do with the user zzweb
i have a runtime error with the logs :
EXCEPTION]
#1#com.sap.isa.businessobject.BORuntimeException: Error getting private connection for internet user:com.sap.isa.core.eai.BackendException: Error: No valid private connection for internet userzzweb
     at com.sap.isa.businessobject.BusinessObjectHelper.splitException(BusinessObjectHelper.java:78)
     at com.sap.isa.user.businessobject.UserBase.login(UserBase.java:313)
     at com.sap.isa.businessobject.User.login(User.java:143)
     at com.sap.isa.user.action.UserActions.performLogin(UserActions.java:295)
     at com.sap.isa.user.action.UserActions.performLogin(UserActions.java:368)
     at com.sap.isa.user.action.UserBaseAction.performLogin(UserBaseAction.java:126)
     at com.sap.isa.user.action.LoginBaseAction.ecomPerform(LoginBaseAction.java:77)
     at com.sap.isa.isacore.action.EComBaseAction.doPerform(EComBaseAction.java:353)
     at com.sap.isa.core.BaseAction.execute(BaseAction.java:211)
     at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
     at com.sap.isa.core.RequestProcessor.processActionPerform(RequestProcessor.java:674)
     at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
     at com.sap.isa.core.RequestProcessor.process(RequestProcessor.java:391)
     at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
     at com.sap.isa.core.ActionServlet.process(ActionServlet.java:243)
     at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
     at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
     at com.tealeaf.capture.LiteFilter.doFilter(Unknown Source)
     at com.sap.isa.isacore.TealeafFilter.doFilter(TealeafFilter.java:61)
     at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:373)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
what does this error means..?
i also realised that zzweb was not created in CRM backen? should it be created ?
many thnx for help ..
Message was edited by: Blackman

Its a late response... but if someone gets the same issue here is the solution.
When you register try uppercase password . That should take care of that issue.
The problem is with function module CRM_ISA_IUSER_SWITCH , Note 946536.
Although the note says 5.0 the problem exists with ISA 4.0 too

LDAP over SSL for Solaris 9 / Solaris 10

I have successfully configured Solaris-10 clients to use Windows 2003 R2 Active Directory for LDAP authentication over SSL. However, my production environment is still running on Solaris-9. I am able to make Kerberos and ldapsearch working on Solaris-9, but I am still NOT able to use PuTTY to make authentication with AD.
I reviewed all my steps that I configured on Solaris-10, but somewhat I could not make it work on Solaris-9. If anybody sucessfully deployed on Solaris-9, please advices! Any helps greatly appreciated.
Here are what I got so far on Solaris-9
=======================================================
KERBEROS
=======================================================
#getent passwd aduser
aduser:1000:1000:aduser:/export/home/aduser:/bin/sh
#kinit [email protected]
Password for [email protected]:
#klist
Ticket cache: /tmp/krb5cc_0
Default principal: [email protected]
Valid starting Expires Service principal
Fri Jan 04 17:22:34 2008 Sat Jan 05 03:22:34 2008 krbtgt/[email protected]
renew until Fri Jan 11 17:22:34 2008
=======================================================
LDAPSEARCH / SSL
=======================================================
#ldapsearch -v -h sundc1.consoto.com -p 636 -Z -P /var/ldap/cert8.db -D cn=administrator,cn=users,dc=consoto,dc=com -w - -b "dc=consoto,dc=com" -v -s base "objectclass=*"
Enter bind password:
ldapsearch: started Fri Jan 4 17:23:52 2008
LDAP Library Information -
Highest supported protocol version: 3
LDAP API revision: 2005
API vendor name: Sun Microsystems Inc.
Vendor-specific version: 5.08
LDAP API Extensions:
SERVER_SIDE_SORT (revision 1)
VIRTUAL_LIST_VIEW (revision 1)
PERSISTENT_SEARCH (revision 1)
PROXY_AUTHORIZATION (revision 1)
X_LDERRNO (revision 1)
X_MEMCACHE (revision 1)
X_IO_FUNCTIONS (revision 1)
X_EXTIO_FUNCTIONS (revision 1)
X_DNS_FUNCTIONS (revision 1)
X_MEMALLOC_FUNCTIONS (revision 1)
X_THREAD_FUNCTIONS (revision 1)
X_EXTHREAD_FUNCTIONS (revision 1)
X_GETLANGVALUES (revision 1)
X_CLIENT_SIDE_SORT (revision 1)
X_URL_FUNCTIONS (revision 1)
X_FILTER_FUNCTIONS (revision 1)
ldap_init( sundc1.consoto.com, 636 )
ldaptool_getcertpath -- /var/ldap/cert8.db
ldaptool_getkeypath -- .
ldaptool_getdonglefilename -- (null)
filter pattern: objectclass=*
returning: ALL
filter is: (objectclass=*)
version: 1
dn: dc=consoto,dc=com
objectClass: top
objectClass: domain
objectClass: domainDNS
distinguishedName: DC=consoto,DC=com
instanceType: 5
whenCreated: 20071220204021.0Z
whenChanged: 20071226231851.0Z
subRefs: DC=ForestDnsZones,DC=consoto,DC=com
subRefs: DC=DomainDnsZones,DC=consoto,DC=com
subRefs: CN=Configuration,DC=consoto,DC=com
uSNCreated: 4098
uSNChanged: 16663
name: consoto
objectGUID:: bM0hWw8HKEOYCFN3yQ==
creationTime: 128426572605937500
forceLogoff: -9223372036854775808
lockoutDuration: -18000000000
lockOutObservationWindow: -18000000000
lockoutThreshold: 0
maxPwdAge: -37108517437440
minPwdAge: -864000000000
minPwdLength: 7
modifiedCountAtLastProm: 0
nextRid: 1003
pwdProperties: 1
pwdHistoryLength: 24
objectSid:: AQQAAAAAAAUAAYA4LaLGUspxVHsMP
serverState: 1
uASCompat: 1
modifiedCount: 129
auditingPolicy:: AAE=
nTMixedDomain: 0
rIDManagerReference: CN=RID Manager$,CN=System,DC=consoto,DC=com
fSMORoleOwner: CN=NTDS Settings,CN=SUNDC1,CN=Servers,CN=Default-First-Site-Nam e,CN=Sites,CN=Configuration,DC=consoto,DC=com
systemFlags: -1946157056
wellKnownObjects: B:32:6227F0AF1FC2410D8E3BB10615BB5B0F:CN=NTDS Quotas,DC=sunl
ab,DC=com
wellKnownObjects: B:32:F4BE92A4C777485E878E9421D53087DB:CN=Microsoft,CN=Progra
m Data,DC=consoto,DC=com
wellKnownObjects: B:32:09460C08AE1E4A4EA0F64AEE7DAA1E5A:CN=Program Data,DC=sun
lab,DC=com
wellKnownObjects: B:32:22B70C67D56E4EFB91E9300FCA3DC1AA:CN=ForeignSecurityPrin
cipals,DC=consoto,DC=com
wellKnownObjects: B:32:18E2EA80684F11D2B9AA00C04F79F805:CN=Deleted Objects,DC=
consoto,DC=com
wellKnownObjects: B:32:2FBAC1870ADE11D297C400C04FD8D5CD:CN=Infrastructure,DC=s
unlab,DC=com
wellKnownObjects: B:32:AB8153B7768811D1ADED00C04FD8D5CD:CN=LostAndFound,DC=sun
lab,DC=com
wellKnownObjects: B:32:AB1D30F3768811D1ADED00C04FD8D5CD:CN=System,DC=consoto,DC
=com
wellKnownObjects: B:32:A361B2FFFFD211D1AA4B00C04FD7D83A:OU=Domain Controllers,
DC=consoto,DC=com
wellKnownObjects: B:32:AA312825768811D1ADED00C04FD8D5CD:CN=Computers,DC=consoto
,DC=com
wellKnownObjects: B:32:A9D1CA15768811D1ADED00C04FD8D5CD:CN=Users,DC=consoto,DC=
com
objectCategory: CN=Domain-DNS,CN=Schema,CN=Configuration,DC=consoto,DC=com
isCriticalSystemObject: TRUE
gPLink: [LDAP://CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=Syste
m,DC=consoto,DC=com;0]
masteredBy: CN=NTDS Settings,CN=SUNDC1,CN=Servers,CN=Default-First-Site-Name,C
N=Sites,CN=Configuration,DC=consoto,DC=com
ms-DS-MachineAccountQuota: 10
msDS-Behavior-Version: 2
msDS-PerUserTrustQuota: 1
msDS-AllUsersTrustQuota: 1000
msDS-PerUserTrustTombstonesQuota: 10
msDs-masteredBy: CN=NTDS Settings,CN=SUNDC1,CN=Servers,CN=Default-First-Site-N
ame,CN=Sites,CN=Configuration,DC=consoto,DC=com
dc: consoto
1 matches
I am thinking about pam.conf file or ldapclient's configuration file, any suggestion?

I have now sat down and looked at your suggestion and I am pretty certain we can't implement it ... :( I was hoping it was just going to be configuration files that were copied (maybe a naive hope, but there you go!) This system is going to be deployed as a live service for a government agency so I do not think we can, in all good conscience, have binaries from two different OS releases residing on the same server as it will make the system nigh-on non-patchable.
Let's hope Sun have somethig constructive to say about our issue which, I am slowly beginning to think, is related to the password.
If I su to the test AD user we have whilst logged in as a root user (which does not, of course, prompt for a password) it all works nicely - home directory, shell, the id command gives all that is expected of uid and gid. Now, should I be in a as a non-root user and try the same I get prompted for a password and it all fails - despite me providing what should be the correct password.
If I do a getent for the user the returned data has a blank for the password field (as opposed to the usual x).
I think that somewhere, somehow, in the transmission of data that the password is getting a level of encryption that the AD is not setup to unravel. The packets are all encrypted through ldap (we are using tls simple) but what of the password within the packet? Does anything encrypt that first, and if so, does AD know how to decrypt it?

Profile issue for internet user

Hi,
I am new to ICH. I have an issue with the internet user of the supplier. The issue is
"When user connects to ICH portal, he can able see all the orders and not only the orders sent to his company". He should not see all other orders which are not relevant to him.
I checked the roles and profiles for this user and also relation ship with the BP. He has assigned only to his company.
Can anyone suggest/ advice the solution how to resolve. what are the other checks to be done to restrict this user.
Please help me out on this issue.
Regards
Kishore

Hi Kishore
Check if supplier Business partner (Org Type) has been assigned in supplier location.
Then assign the supplier internet user to supplier BP (Org Type). Please confirm that Supplier business partner is not assigned to any other location. He should be assigned to only his location.
Use the std roles provided by SAP for supplier users. This set up should solve your purpose.
Best Luck
Pravin

SICF settings for internet users

Hi All,
Can anyone tell how to configure hrrcf services in SICF for maintaining logon data as internet users. Now we are maintaining Standard SAP User and it works. Example: Service "hrrcf_start_int" in the logon data table rather than using Standard System User we would like to configure Internet User.
Thx
Anand

Hello Prajesh,
please try out this little ABAP coding which should return something like
<html><head><meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">...
or "HTTP Connection error":
REPORT z_google_http_test.
DATA: client TYPE REF TO if_http_client,
      html TYPE string.
****Create the HTTP client
TRY.
    CALL METHOD cl_http_client=>create_by_url
      EXPORTING
        url    = 'http://www.google.com/'
      IMPORTING
        client = client
      EXCEPTIONS
        OTHERS = 1.
    client->send( ).
    client->receive( ).
    html = client->response->get_cdata( ).
    write: / html.
    client->close( ).
CATCH cx_root.
    WRITE: / 'HTTP Connection error'.
ENDTRY.
Regards
Gregor

Exposing OIM functionality for internet users

We have a plan to upgrade IAM components to 11g release and leverage some of the functionality/service of OIM like self service and delegated admin for external users through internet. It is a obvious security concern to expose the OIM app as such to the internet users to achieve the same. And I believe our requirement is sure not one-off case.
Considering this, few queries to all the experts
1. What should be the ideal approach to achieve this?
2. Any recommended architectural docs/links/discussion thread for similar requirements and solutions?
3. I can think of one approach to achieve this would be to build an app integrating same with OIM using APIs.
Regards,
bkalita

Hi Kevin,
you NEED to work with the UME action Manage_My_Profile in order to enable user to view and modify their profile.
Any user with a role that has this UME Action can do the above. You assign UME actions to portal roles in the portal in the PCD Studio. Here a short description:
1. Go to Content Administration -> Portal Content
2. Change the super_admin_role for example by navigating to Portal Content -> Portal Administrators -> Super Administrators -> Super Administration
3. On the right pane switch the Property Category to "User Management Permissions"
4. Look for Manage_My_Profile and set it to "Yes"
5. Save the role and check your profile again
Hope this helps,
Robert
PS: Unfortunately there is no possibility to only view the user attributes, yet. This should be possible with the UME action Read_My_Profile introduced with NW2004s.
Only by integrating the LDAP read-only you would be able on other releases to achieve the same.

How to Change the Alias name for Internet user in SU01 tr code through cod?

Hi Guys,
             My req is we have to change the Alias name(SU01 tr code) for the existing users thru code.So can anybody tell me how to change the Alias name like which we do it in SU01 tr code thru code or FM.?
            Is there any FM for tha changing Alias Name?
Thanks,
Gopi.

Hello Gopi Anne ,
                             You can use the following FM / BAPI :
BAPI_USER_CHANGE
MY_BAPI_USER_CHANGE
For BAPI_USER_CHANGE :
You need to make use of the IMPORT parameter :
ALIAS     TYPE     BAPIALIAS                               User Name Alias
ALIASX     LIKE     BAPIALIASX                               User alias change flag
Thanks,
Greetson

How to publish a sharepoint web application to internet for external users.

Hi
how to publish a share point site to internet,
In test server : we branded a publishing enabled site and uploaded content and want to publish for internet users
we have a production sharepont server,
1) how to configure alternate access mappings in default zone,internet zone when we create new web application in prod share point server.
adil

For internet publishing ifyou want or need change the authentication method you need to EXTEND the website and enable the CLAIM authentication so the user can login using a HTML form for username and password.
SharePoint make a url parsing to identify the content
to display so you need to explain all the server name used for contacting the WebApplication. You can use 5 different name for the same server
(AAM Alternate Access Mapping).
N.B. http and https are different name (AAM Alternate Access Mapping)Lorenzo
LSo Lorenzo Soncini Trento TN - Italy

FM for populating internet user details in the internet user tab of a BP

Hi Everyone urgent requirement ,
I have a unique requirement , I have created a BP and assigned it with internet user role which as usual has Internet user TAB where a Internet user details have to be assigned . I have a creted a user also but can some one tell me which FM i can use to link the user created with the BP.
any help or suggestions are highly appreciated and will reward the points .

Hi Ram,
Sorry for the delay but I was on holiday . If you still want the solution here it is :
FM that has to be used is : COM_BPUS_INTERNETUSER_CREATE for internet user creation .
And to update the internet user details in the internet user tab use : CRM_BUPA_CREATECENTRALPERSON .
Regards,
Reddy.

Internet user mode for ISA

I heard that there are two modes for internet user logon in ISA.
The first is we give each partner an user name,and he can logon using this user and deal with the orders.However he can not create user.
The other one is the partner can create other users belong to him.
My question is how to config the second mode?
Best regards,
chen

Hi Chen,
The second option is the superuser concept in B2B. You have to deploy the web app for user maintenance and assign the relevant authorisation to their user.
Check out user management at:
http://help.sap.com/saphelp_crm50/helpdata/en/16/cfa34273f60b31e10000000a1550b0/frameset.htm
Cheers
Andrew

Printing with IPP (SSL) and job user names

Hi,
Environment: Windows 2008 R2 Servers, WIN 7 and WIN 8.1 clients, all 64 Bit
I setup a printing environment including a FollowYou solution. To realize data encryption from end2end, we decide to use IPP over SSL for Printing. Everything works fin, IIS is installed, all certificates are in place and the necessary clients are enabled/
installed.
Because of the FollowYou solution, i need the origin user who sent the Job from his client via the print server to the printer. Thats where my problem is. I tried three ways to print from the client: SMB, IPP and IPP over SSL. Just if i use SMB, the username
is transferred correctly with the Job and can be seen in the job list in the stopped printer queue. Neither with IPP nor with IPP over SSL the jobname is coming with the job (i see nt authority/IUSR instead).
Is there something i can do to see the username within the job using IPP?
Thanks and regards,

You have posted your question in a user forum dedicated to Project
Server/MS project.
Also, looks like you have posted this question
here and got some answers. If anything, that is the correct forum to post further quuestions.
Cheers,
Prasanna Adavi, Project MVP
Blog:
Podcast:
Twitter:
LinkedIn:

OIM 9102 , AD Password Sync 91x, JBoss 423GA - issue over SSL port.

Followed the steps describe in "Deploying the connector"
http://download.oracle.com/docs/cd/E11223_01/doc.910/e11218/install_config.htm#insertedID0
section
Pre-Installation both SSL n non-SSL works for SPML verification.
For JBoss Application Server:
http://IP ADDRESS:8080/spmlws/services/HttpSoap11
https://IP ADDRESS:8443/spmlws/services/HttpSoap11
Post Installation - configured SSL.
On AD machine logs following error message is displayed:
MAX_RETRY LIMIT count is not updated: OIM is down
Following meta-link ID 1073889.1
https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=PROBLEM&id=1073889.1
explains to verify 'oimhost and oimport' - oimhost is machine ip address ( AD machine is able to ping OIM machine through ip address and machine name )
oimport is 8443
Any suggestion.
Or anyone previously successfully deployed password sync over SSL for OIM 9102 and AD Password sync 91x,
as i found a similar thread in OTN forum where user had issues over SSL.

Did anyone resolve this issue? I have the same running SSL Password Sync on OAS 10.1.3.4 and OIM 9.1.0.2 BP09a with AD 2003.
Debug [7/8/2010 6:35:45 AM] oimport is
Debug [7/8/2010 6:35:45 AM] 4443
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] oimsslclient is
Debug [7/8/2010 6:35:45 AM] nw-dc-01.nwocaland.nwoca.org
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] oimuserattr is
Debug [7/8/2010 6:35:45 AM] USR_UDF_SAM_ACCTNAME
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] oimusessl is
Debug [7/8/2010 6:35:45 AM] Y
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] oimappservertype is
Debug [7/8/2010 6:35:45 AM] 2
Debug [7/8/2010 6:35:45 AM]
Debug [7/8/2010 6:35:45 AM] End of sgsloidi::getConfigParamters
Debug [7/8/2010 6:35:45 AM] Inside sgsloidi::setParameters
Debug [7/8/2010 6:35:45 AM] The SOAP start element is
Debug [7/8/2010 6:35:45 AM] <SPMLv2Document xmlns="http://xmlns.oracle.com/OIM/provisioning">
Debug [7/8/2010 6:35:45 AM] The SOAP end element is
Debug [7/8/2010 6:35:45 AM] </SPMLv2Document>
Debug [7/8/2010 6:35:45 AM] The path is
Debug [7/8/2010 6:35:45 AM] /spmlws/HttpSoap11
Debug [7/8/2010 6:35:45 AM] End of sgsloidi::setParameters

Same EP instance for Internet as well as Intranet use

Hi Experts,
Can we use a single EP Server installation for hosting WebDynpro applications for internet users and some WebDynpro applications for Intranet users? If yes then technically how do I achieve that?
Any help is appreciated.
Thanks & Regards,
Shobhit

Hi Shobhit,
of course, this is possible. all you need to do is expose the portal to the internet through an intermediary like SAP Web Dispatcher and make the proper roles. you can even define access tables to control that the external requests are filtered.
if you need more information, then just search for SAP Web Dispatcher in http://help.sap.com
cheers,
Shantanu

Home pc is under my husband's user id, I have an iPad and iPhone under my apple id. I have more music on my iPad then on pc or iPhone. If I set up synching over wifi for my devices... What do they sync to? Will the songs on iPad be added to phone/pc?

Home pc is under my husband's user id, I have an iPad and iPhone under my apple id. I have more music on my iPad then on pc or iPhone. If I set up itunes synching over wifi for my devices... What do they sync to? Will the songs on iPad be added to phone/pc? Or will the iPad and iPhone be synced (matched) to pc and reflect what is on that device?

Home Sharing is designed to work on your local network not across the internet/cloud.
Stuff is accessed under the Computers column where your local iTunes library on a local computer would appear.
Home Sharing would share your iTunes content (i.e. stuff stored in itunes on the computer, not in the cloud) with AppleTV or an iPad etc on the SAME network.
AppleTV2 will not be able to see itunes content on the work computer over the internet. It's not designed to. if the work computer was on the home network it would.
iCloud is in it's infancy and is not a mature product - iTunes TV Show purchases appear on AppleTV, but currently music does not unless you are subscribed to iTunes Match. I find this rather odd to be honest, along with the inability to buy music on AppleTV2. Movies purchased in iTunes are not authorised for iCloud viewing currently either.
Maybe it has something to do with iTunes Match 'getting in the way' - i think they assume you'll use that whereas you really want to be able to access Purchased music from the cloud without subscribing to itunes Match which is overkill for some.
AC

Apex3 on XE over SSL for internet users

Similar Messages

Maybe you are looking for