BSI Config

Hi All,
Is there any information on the BSI configuration from the functional perspective. I know all the tables to be configured from SAP perspective but then there are couple of steps which need to be maintained both in SAP and BSI. The  SCN WIKI  is quite informative with one of the members Karthik gave a good over view on PY US. But there are very few sites which are giving any information on BSI. Any documentation on that would help.
Thanks in Advance

Hello Lalithaa,
You need to configure the RFC connection via transaction SM59 per SAP notes. Also make sure that you have created a dataset with the same client that you are using in R/3.
Regards,
Manny

Similar Messages

  • BSI error message in US payroll log

    Hi,
    I have updated the configuration for a new US tax authority (Mount Lebanon).  When I run payroll for the employee that the change effects, I get the following BSI error message:
    "1044        Your request to use the additional tax code 9 for the Mount Lebanon local service tax is not allowed.  This tax has been calculated using no additional tax.  BSI Tax Calculation."
    In fact, it didn't calculate the tax.  How do I resolve this?
    Thanks,
    Nic

    I'm encountering the same area for the Local Services Tax, but for a different tax authority.  I believe I have all the tax config in place, but I must have missed something.  Is there anything particular that you remember about the error or the config?

  • BSI Tax Factory Upgrade

    We are upgrading BSI Tax Factory from 8.0 to 9.0. Starting with BSI Tax Factory version 9.0 the standard schema no longer reads this parameter of the UPAR1 function. We have to  define the BSI Tax Factory version in two Customizing activities,
    Specify BSI Tax Factory version for customizing settings and Specify BSI Tax Factory version for master data and tax calculation. The second one is feature 10BSI and it looks like we have to maintain this feature when we use two versions of
    SAP.We are planning to use only 9.0 after our upgrade and still we have to maintain this feature? In the first step specify tax factory version has start date and which date we have to enter ? start of the new payroll period and if we specify start of the
    new payroll period when it retroes will it have a problem. Please explain whoever has done the upgrade.
    Thanks for your help.

    You should be fine leaving feature '10BSI' as is (return ' ' )  as it will then use BSI version defined in new config table. Retro back to period prior to BSI 90 upgrade should be OK as it will also uses BSI 90 engine (i.e. date in config  table is compared with system current date, not payroll start / end date .

  • Credit Card settlement FCC1 fails, no records in table BSIS

    Dear experts,
    I'm implementing credit card integration with a new web shop, and got stuck with FI configuration, probably since I'm brand new to FI...
    Okay, this is what happens... When I select payment by invoice, sales order gets created fine, and the invoice is created from the sales order instantaneously. Financial documents etc. all fine.
    Now when I select payment by credit card, the sales order gets created fine as well, after the credit card has been authorized. The invoice however does not get created. Warning message: "The item is not relevant for billing".
    Okay, this might or might not be the standard process. Either the invoice should be created instantly (in which case billing config is incorrect) or the invoice should be created after credit card settlement (in which case there's some other FI config not right).
    So my first question I hope someone can answer me here: When is the billing supposed to happen? Before or after the settlement? If it's before settlement, why does it say then that the item is not relevant, whereas, if I pay by invoice, it is relevant?
    For my second question, let's assume, invoicing is supposed to happen after settlement.
    If I execute the settlement process in transaction FCC1, the message I get is: FY033 "No items to be settled found"
    Digging some deeper, I found the cause for the message in table BSIS, where the items for settlement are supposed to be stored. However, they're plainly not in that table. So my second question I hope to get some insight for: How do I configure the flow so that after credit card authentication the items are ready for settlement?
    Best wishes and many thanks,
    Jan

    Solved by some trial-and-error configuration in copying control.

  • BSI no taxes withheld

    ECC 6.0
    Windows
    BSI 7.0m
    We have two development servers pointing to a sql 2000 database using the same SAP client.  BSI Server component and BSI client component installed on SAP central instance, database on remote server. Everything works on one of the development servers.
    On the second development server, sm59 works great, RPUBTCUO works great, but on a payroll run, no taxes are taken out. The output message file shows the SAP test user SAMCHEN instead of a real payroll user.
    I've read note SAP note 781272 including section 8. I think mapping has been done correctly. BSI support says mapping isn't the problem if the user is not a real payroll user: Its a SAP configuration issue.
    One issue might be the source of the problem
    I had an instance of 7.0i on this develpment server that pointed to a database on a different server. That worked fine.  I dropped the old ODBC connection when I installed 7.0m and installed a new one pointing to a database on correct server. I deleted and recreated the TF70 file in the C:\windows directory.
    Are there any other SAP or bsi components that may be bringing up the SAMCHEN test user instead of a real SAP user?

    Discovered that a consultant had made SAP config changes to this server without notifying us. It was a SAP config issue, not a BSI issue.

  • Config of free goods?

    I'm an ABAPer so forgive if my question is not clear to you SD guys. We are having an issue with creation of orders and the functional consultant might be new to this problem.
    I read several threads here regarding the config.
    1) I checked transaction VOV4 for OR-NORM-FREE-TAN-TANN. it's there
    2) Checked material master MM03 / Sales Org. 2 for category group. Group of material is NORM.
    3) Checked free goods determination in VBN3 for Customer-Material combination, there's a value there and is valid from 12/22/2008 to 12/31/9999 (valid indefinitely)
    But when we try to create an order in VA01, using the same customer and material (from number 3) and set the item category of the material to TANN, the system automatically changes it to TAN.
    (On the technical side) I checked the exits MV45AFZZ and MV45AFZB and there is no routine there that does the change from TANN to TAN so we're convinced that this is caused by some config.
    Can anyone help? How can the item stay as TANN (without having to retype. When it is retyped, it's like the item category is being forced into the system, right?)?
    Thanks in advance.

    Hi,
    What I undersatnd is , you want INCLUSIVE free good sdetermination.
    For example, for every 10 units 2 units are free. That means 20% free goods.
    If Customer has ordered for 10 units then  he has to pay for 8 units and 2 units will be free of charge.
    In standard, the free goods condition type is NA00 (with item generation).
    So, you need to create the Condition record for NA00 in transaction VBN1 and specify the free quntity properly.
    In standard, the Pricing Procedure for free goods determination is NA0000.
    You need to assign this procedure to the Sales Area in which you want to create the Sales Order (V/N6).
    Now, when you will create an order for the above material say M1 for 10 units, system will split it as two line items.
    First line item, M1 -
    8 units -
    TAN (system will calculate price for this item).
    Second line item, M1----
    2 units -
    TANN (no pricing, it is 100% free).
    You need not have to specify the Item category mannually.
    For the first item (Main item), system will automatically take the Item category as TAN and for the 2nd item (sub-item) item category will be TANN.
    Regards
    Pradyumna

  • BSI ConnectToDataSet...failed

    Hi
    We have a problem with the BSI, we had been getting a dump "RFC_ERROR_SYSTEM_FAILURE", I followed the SAP Note 1068271 for the debug, and the result is:
    =Thu Jan 22 11:53:37 2009
    =SAP AG, Walldorf - Business API for BSI TaxFactory 8.0
    =RfcAccept called
    =Mapping ABAP RFC_PAYROLL_TAX_CALC_US_80 to C function srv_Payroll_Tax_Calc_US_80
    =Mapping ABAP RFC_HR_TAXLOCATOR_US_80 to C function srv_hr_taxlocator_us_80
    =Waiting for ABAP function calls
    =Running function srv_Payroll_Tax_Calc_US_80
    =Loading import parameters
    =Loading export parameters
    =Loading internal tables
    =Calling Payroll_Tax_Calc_US
    =Running Connect_DB_Payroll_Tax_Calc_US
    BSI dataset                  -> 110
    ConnectToDataSource...Succeeded 
    ConnectToDataSet...failed 
    Error String ->  7777 - [Oracle][ODBC][Ora]ORA-00933: SQL command not properly ended
    =RFC error
    operation/code Connect_DB_Payroll_Tax_Calc_US
    key RFC_ERROR_SYSTEM_FAILURE
    status
    message See RFC trace file or SAP system log for more details
    internal status
    The RFC under sm59 is working fine, the error is on the connection to the Dataset according to the Debug log "ConnectToDataSet...failed".
    I don't know what to check about the Dataset, could you please help me?
    Best Regards

    Yes, it's correct.
    I checked it's 8.0.
    I think is a problem with the parameters under tf80server.bat.
    SET
    TF80_CONNECT_STRING=DSN=;UID=;PW
    D=;
    SET TF80_SCHEMA_NAME=.TF80
    REM for SAP trace debugging, uncomment below & see file
    errors.txt in gateway working directory
    REM C:\BSI\TAXFACTORY\tf80serverdebug.exe %*
    REM else for usual operation
    C:\BSI\TAXFACTORY\tf80server.exe %*
    I don't know what is the "ODBC_DSN_NAME"
    I have the user, password, the database name...
    Best Regards

  • BSI Tax Factory Upgrade 8.0 to 9.0

    Hi BSI,
    We are upgrading our BSI tax Factory from 8.0 to 9.0. We are running:
    Windows 2008 R2
    SQL Server version 10.50.1777
    I'm able to connect to the database using login TF90 through SQL Server Management Studio, the ODBC Data Source Administrator and the TaxFactory Client is connecting fine too.
    But when running report RPUBTCU0 from the SAP system , its caught under ABAP dump-> SYSTEM FAILURE.
    Looking at the error.txt.
    =Running connect_db_taxfactory
    BSI dataset                  -> 101
    ConnectToDataSource... Starting 
    ConnectToDataSource...Succeeded 
    Connect to Dataset Error string =  101
    ConnectToDataSet... Starting 
    ConnectToDataSet...failed 
    Error String ->  4020 - THERE IS NO VALID LICENSE INSTALLED FOR HOST HCA-MSAP68:UNKNOWN.
    =RFC error
    operation/code connect_db_payroll_tax_calc_us
    key RFC_ERROR_SYSTEM_FAILURE
    status
    message See RFC trace file or SAP system log for more details
    internal status .
    The machine key is successfully installed.
    Please guide what we are missing here.
    Please contact me at +60123675076 (malaysia) at anytime.
    Thanks.
    Thava

    We managed to solve this by changing tf90server.bat file.
    from - I:
    CD I:\BSI\Server9.0
    tf90server.exe %*
    To - I:\BSI\Server9.0\tf90server.exe %*
    Now we could run report RPUBTCU0 without error.
    Thanks.
    Thava

  • Fairly new to cisco ASA 5505 - Can someone look through my config?

    Hi.
    Can some one tell me if I did the NAT part right? Both dynamic and static.
    To be able to reach one vlan from another I created a Nat between them, is this the right way to do it?
    I can still limit the access between the vlans based on the access list.
    I also getting slow throughput over the VPN tunnel. Is there something wrong with my config. I used the wizard to set it up. There is also a cisco asa5505 on the other end.
    If there is some thing else that seems wrong, please let me know.
    Any help would be greatfully appreciated!
    Config:
    : Saved
    ASA Version 7.2(2)
    hostname ciscoasa
    domain-name default.domain.invalid
    enable password x encrypted
    names
    name 192.168.1.250 DomeneServer
    name 192.168.1.10 NotesServer
    name 192.168.1.90 OvServer
    name 192.168.1.97 TerminalServer
    name 192.168.1.98 w8-eyeshare
    name 192.168.50.10 w8-print
    name 192.168.1.94 w8-app
    name 192.168.1.89 FonnaFlyMedia
    interface Vlan1
    nameif Vlan1
    security-level 100
    ip address 192.168.200.100 255.255.255.0
    ospf cost 10
    interface Vlan2
    nameif outside
    security-level 0
    ip address 79.x.x.226 255.255.255.224
    ospf cost 10
    interface Vlan400
    nameif vlan400
    security-level 100
    ip address 192.168.1.1 255.255.255.0
    ospf cost 10
    interface Vlan450
    nameif Vlan450
    security-level 100
    ip address 192.168.210.1 255.255.255.0
    ospf cost 10
    interface Vlan460
    nameif Vlan460-SuldalHotell
    security-level 100
    ip address 192.168.2.1 255.255.255.0
    ospf cost 10
    interface Vlan461
    nameif Vlan461-SuldalHotellGjest
    security-level 100
    ip address 192.168.3.1 255.255.255.0
    ospf cost 10
    interface Vlan462
    nameif Vlan462-Suldalsposten
    security-level 100
    ip address 192.168.4.1 255.255.255.0
    ospf cost 10
    interface Vlan470
    nameif vlan470-Kyrkjekontoret
    security-level 100
    ip address 192.168.202.1 255.255.255.0
    ospf cost 10
    interface Vlan480
    nameif vlan480-Telefoni
    security-level 100
    ip address 192.168.20.1 255.255.255.0
    ospf cost 10
    interface Vlan490
    nameif Vlan490-QNapBackup
    security-level 100
    ip address 192.168.10.1 255.255.255.0
    ospf cost 10
    interface Vlan500
    nameif Vlan500-HellandBadlands
    security-level 100
    ip address 192.168.30.1 255.255.255.0
    ospf cost 10
    interface Vlan510
    nameif Vlan510-IsTak
    security-level 100
    ip address 192.168.40.1 255.255.255.0
    ospf cost 10
    interface Vlan600
    nameif Vlan600-SafeQ
    security-level 100
    ip address 192.168.50.1 255.255.255.0
    ospf cost 10
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    switchport access vlan 500
    switchport trunk allowed vlan 400,450,460-462,470,480,500,510,600,610
    switchport mode trunk
    interface Ethernet0/3
    switchport access vlan 490
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    passwd x encrypted
    ftp mode passive
    clock timezone WAT 1
    dns server-group DefaultDNS
    domain-name default.domain.invalid
    same-security-traffic permit inter-interface
    same-security-traffic permit intra-interface
    object-group service Lotus_Notes_Utgaaande tcp
    description Frim Notes og ut til alle
    port-object eq domain
    port-object eq ftp
    port-object eq www
    port-object eq https
    port-object eq lotusnotes
    port-object eq pop3
    port-object eq pptp
    port-object eq smtp
    object-group service Lotus_Notes_inn tcp
    description From alle og inn til Notes
    port-object eq www
    port-object eq lotusnotes
    port-object eq pop3
    port-object eq smtp
    object-group service Reisebyraa tcp-udp
    port-object range 3702 3702
    port-object range 5500 5500
    port-object range 9876 9876
    object-group service Remote_Desktop tcp-udp
    description Tilgang til Remote Desktop
    port-object range 3389 3389
    object-group service Sand_Servicenter_50000 tcp-udp
    description Program tilgang til Sand Servicenter AS
    port-object range 50000 50000
    object-group service VNC_Remote_Admin tcp
    description Frå oss til alle
    port-object range 5900 5900
    object-group service Printer_Accept tcp-udp
    port-object range 9100 9100
    port-object eq echo
    object-group icmp-type Echo_Ping
    icmp-object echo
    icmp-object echo-reply
    object-group service Print tcp
    port-object range 9100 9100
    object-group service FTP_NADA tcp
    description Suldalsposten NADA tilgang
    port-object eq ftp
    port-object eq ftp-data
    object-group service Telefonsentral tcp
    description Hoftun
    port-object eq ftp
    port-object eq ftp-data
    port-object eq www
    port-object eq https
    port-object eq telnet
    object-group service Printer_inn_800 tcp
    description Fra 800  nettet og inn til 400 port 7777
    port-object range 7777 7777
    object-group service Suldalsposten tcp
    description Sending av mail vha Mac Mail programmet - åpner smtp
    port-object eq pop3
    port-object eq smtp
    object-group service http2 tcp
    port-object range 81 81
    object-group service DMZ_FTP_PASSIVE tcp-udp
    port-object range 55536 56559
    object-group service DMZ_FTP tcp-udp
    port-object range 20 21
    object-group service DMZ_HTTPS tcp-udp
    port-object range 443 443
    object-group service DMZ_HTTP tcp-udp
    port-object range 8080 8080
    object-group service DNS_Query tcp
    port-object range domain domain
    object-group service DUETT_SQL_PORT tcp-udp
    description For kobling mellom andre nett og duett server
    port-object range 54659 54659
    access-list outside_access_in extended permit ip any any
    access-list outside_access_out extended permit ip any any
    access-list vlan400_access_in extended deny ip any host 149.20.56.34
    access-list vlan400_access_in extended deny ip any host 149.20.56.32
    access-list vlan400_access_in extended permit ip any any
    access-list Vlan450_access_in extended deny ip any host 149.20.56.34
    access-list Vlan450_access_in extended deny ip any host 149.20.56.32
    access-list Vlan450_access_in extended permit ip any any
    access-list Vlan460_access_in extended deny ip any host 149.20.56.34
    access-list Vlan460_access_in extended deny ip any host 149.20.56.32
    access-list Vlan460_access_in extended permit ip any any
    access-list vlan400_access_out extended permit icmp any any object-group Echo_Ping
    access-list vlan400_access_out extended permit tcp any host NotesServer object-group Lotus_Notes_Utgaaande
    access-list vlan400_access_out extended permit tcp any host DomeneServer object-group Remote_Desktop
    access-list vlan400_access_out extended permit tcp any host TerminalServer object-group Remote_Desktop
    access-list vlan400_access_out extended permit tcp any host OvServer object-group http2
    access-list vlan400_access_out extended permit tcp any host NotesServer object-group Lotus_Notes_inn
    access-list vlan400_access_out extended permit tcp any host NotesServer object-group Remote_Desktop
    access-list vlan400_access_out extended permit tcp any host w8-eyeshare object-group Remote_Desktop
    access-list vlan400_access_out extended permit tcp any host w8-app object-group Remote_Desktop
    access-list vlan400_access_out extended permit tcp any host FonnaFlyMedia range 8400 8600
    access-list vlan400_access_out extended permit udp any host FonnaFlyMedia range 9000 9001
    access-list vlan400_access_out extended permit tcp 192.168.4.0 255.255.255.0 host DomeneServer
    access-list vlan400_access_out extended permit tcp 192.168.4.0 255.255.255.0 host w8-app object-group DUETT_SQL_PORT
    access-list Vlan500_access_in extended deny ip any host 149.20.56.34
    access-list Vlan500_access_in extended deny ip any host 149.20.56.32
    access-list Vlan500_access_in extended permit ip any any
    access-list vlan470_access_in extended deny ip any host 149.20.56.34
    access-list vlan470_access_in extended deny ip any host 149.20.56.32
    access-list vlan470_access_in extended permit ip any any
    access-list Vlan490_access_in extended deny ip any host 149.20.56.34
    access-list Vlan490_access_in extended deny ip any host 149.20.56.32
    access-list Vlan490_access_in extended permit ip any any
    access-list Vlan450_access_out extended permit icmp any any object-group Echo_Ping
    access-list Vlan1_access_out extended permit ip any any
    access-list Vlan1_access_out extended permit tcp any host w8-print object-group Remote_Desktop
    access-list Vlan1_access_out extended deny ip any any
    access-list Vlan1_access_out extended permit icmp any any echo-reply
    access-list Vlan460_access_out extended permit icmp any any object-group Echo_Ping
    access-list Vlan490_access_out extended permit icmp any any object-group Echo_Ping
    access-list Vlan490_access_out extended permit tcp any host 192.168.10.10 object-group DMZ_FTP
    access-list Vlan490_access_out extended permit tcp any host 192.168.10.10 object-group DMZ_FTP_PASSIVE
    access-list Vlan490_access_out extended permit tcp any host 192.168.10.10 object-group DMZ_HTTPS
    access-list Vlan490_access_out extended permit tcp any host 192.168.10.10 object-group DMZ_HTTP
    access-list Vlan500_access_out extended permit icmp any any object-group Echo_Ping
    access-list vlan470_access_out extended permit icmp any any object-group Echo_Ping
    access-list vlan470_access_out extended permit tcp any host 192.168.202.10 object-group Remote_Desktop
    access-list Vlan510_access_out extended permit icmp any any object-group Echo_Ping
    access-list vlan480_access_out extended permit ip any any
    access-list Vlan510_access_in extended permit ip any any
    access-list Vlan600_access_in extended permit ip any any
    access-list Vlan600_access_out extended permit icmp any any
    access-list Vlan600_access_out extended permit tcp any host w8-print object-group Remote_Desktop
    access-list Vlan600_access_out extended permit tcp 192.168.1.0 255.255.255.0 host w8-print eq www
    access-list Vlan600_access_out extended permit tcp 192.168.202.0 255.255.255.0 host w8-print eq www
    access-list Vlan600_access_out extended permit tcp 192.168.210.0 255.255.255.0 host w8-print eq www
    access-list Vlan600_access_in_1 extended permit ip any any
    access-list Vlan461_access_in extended permit ip any any
    access-list Vlan461_access_out extended permit icmp any any object-group Echo_Ping
    access-list vlan400_nat0_outbound extended permit ip 192.168.1.0 255.255.255.0 192.168.77.0 255.255.255.0
    access-list outside_20_cryptomap_1 extended permit ip 192.168.1.0 255.255.255.0 192.168.77.0 255.255.255.0
    access-list outside_20_cryptomap extended permit ip 192.168.1.0 255.255.255.0 192.168.77.0 255.255.255.0
    access-list Vlan462-Suldalsposten_access_in extended permit ip any any
    access-list Vlan462-Suldalsposten_access_out extended permit icmp any any echo-reply
    access-list Vlan462-Suldalsposten_access_out_1 extended permit icmp any any echo-reply
    access-list Vlan462-Suldalsposten_access_in_1 extended permit ip any any
    pager lines 24
    logging enable
    logging asdm informational
    mtu Vlan1 1500
    mtu outside 1500
    mtu vlan400 1500
    mtu Vlan450 1500
    mtu Vlan460-SuldalHotell 1500
    mtu Vlan461-SuldalHotellGjest 1500
    mtu vlan470-Kyrkjekontoret 1500
    mtu vlan480-Telefoni 1500
    mtu Vlan490-QNapBackup 1500
    mtu Vlan500-HellandBadlands 1500
    mtu Vlan510-IsTak 1500
    mtu Vlan600-SafeQ 1500
    mtu Vlan462-Suldalsposten 1500
    no failover
    monitor-interface Vlan1
    monitor-interface outside
    monitor-interface vlan400
    monitor-interface Vlan450
    monitor-interface Vlan460-SuldalHotell
    monitor-interface Vlan461-SuldalHotellGjest
    monitor-interface vlan470-Kyrkjekontoret
    monitor-interface vlan480-Telefoni
    monitor-interface Vlan490-QNapBackup
    monitor-interface Vlan500-HellandBadlands
    monitor-interface Vlan510-IsTak
    monitor-interface Vlan600-SafeQ
    monitor-interface Vlan462-Suldalsposten
    icmp unreachable rate-limit 1 burst-size 1
    asdm image disk0:/asdm-522.bin
    no asdm history enable
    arp timeout 14400
    global (outside) 1 interface
    nat (vlan400) 0 access-list vlan400_nat0_outbound
    nat (vlan400) 1 0.0.0.0 0.0.0.0 dns
    nat (Vlan450) 1 0.0.0.0 0.0.0.0 dns
    nat (Vlan460-SuldalHotell) 1 0.0.0.0 0.0.0.0
    nat (Vlan461-SuldalHotellGjest) 1 0.0.0.0 0.0.0.0
    nat (vlan470-Kyrkjekontoret) 1 0.0.0.0 0.0.0.0
    nat (Vlan490-QNapBackup) 1 0.0.0.0 0.0.0.0 dns
    nat (Vlan500-HellandBadlands) 1 0.0.0.0 0.0.0.0
    nat (Vlan510-IsTak) 1 0.0.0.0 0.0.0.0
    nat (Vlan600-SafeQ) 1 0.0.0.0 0.0.0.0
    nat (Vlan462-Suldalsposten) 1 0.0.0.0 0.0.0.0
    static (vlan400,outside) 79.x.x.x DomeneServer netmask 255.255.255.255
    static (vlan470-Kyrkjekontoret,outside) 79.x.x.x 192.168.202.10 netmask 255.255.255.255
    static (vlan400,outside) 79.x.x.x NotesServer netmask 255.255.255.255 dns
    static (vlan400,outside) 79.x.x.231 TerminalServer netmask 255.255.255.255
    static (vlan400,outside) 79.x.x.234 OvServer netmask 255.255.255.255
    static (vlan400,outside) 79.x.x.232 w8-eyeshare netmask 255.255.255.255
    static (Vlan490-QNapBackup,outside) 79.x.x.233 192.168.10.10 netmask 255.255.255.255 dns
    static (Vlan600-SafeQ,outside) 79.x.x.235 w8-print netmask 255.255.255.255
    static (vlan400,outside) 79.x.x.236 w8-app netmask 255.255.255.255
    static (Vlan450,vlan400) 192.168.210.0 192.168.210.0 netmask 255.255.255.0
    static (Vlan500-HellandBadlands,vlan400) 192.168.30.0 192.168.30.0 netmask 255.255.255.0
    static (vlan400,Vlan500-HellandBadlands) 192.168.1.0 192.168.1.0 netmask 255.255.255.0
    static (vlan400,Vlan450) 192.168.1.0 192.168.1.0 netmask 255.255.255.0
    static (vlan400,outside) 79.x.x.252 FonnaFlyMedia netmask 255.255.255.255
    static (Vlan462-Suldalsposten,vlan400) 192.168.4.0 192.168.4.0 netmask 255.255.255.0
    static (vlan400,Vlan462-Suldalsposten) 192.168.1.0 192.168.1.0 netmask 255.255.255.0
    static (vlan400,Vlan600-SafeQ) 192.168.1.0 192.168.1.0 netmask 255.255.255.0
    static (Vlan600-SafeQ,vlan400) 192.168.50.0 192.168.50.0 netmask 255.255.255.0
    static (Vlan600-SafeQ,Vlan450) 192.168.50.0 192.168.50.0 netmask 255.255.255.0
    static (Vlan600-SafeQ,vlan470-Kyrkjekontoret) 192.168.50.0 192.168.50.0 netmask 255.255.255.0
    static (Vlan450,Vlan600-SafeQ) 192.168.210.0 192.168.210.0 netmask 255.255.255.0
    static (vlan470-Kyrkjekontoret,Vlan600-SafeQ) 192.168.202.0 192.168.202.0 netmask 255.255.255.0
    access-group Vlan1_access_out out interface Vlan1
    access-group outside_access_in in interface outside
    access-group outside_access_out out interface outside
    access-group vlan400_access_in in interface vlan400
    access-group vlan400_access_out out interface vlan400
    access-group Vlan450_access_in in interface Vlan450
    access-group Vlan450_access_out out interface Vlan450
    access-group Vlan460_access_in in interface Vlan460-SuldalHotell
    access-group Vlan460_access_out out interface Vlan460-SuldalHotell
    access-group Vlan461_access_in in interface Vlan461-SuldalHotellGjest
    access-group Vlan461_access_out out interface Vlan461-SuldalHotellGjest
    access-group vlan470_access_in in interface vlan470-Kyrkjekontoret
    access-group vlan470_access_out out interface vlan470-Kyrkjekontoret
    access-group vlan480_access_out out interface vlan480-Telefoni
    access-group Vlan490_access_in in interface Vlan490-QNapBackup
    access-group Vlan490_access_out out interface Vlan490-QNapBackup
    access-group Vlan500_access_in in interface Vlan500-HellandBadlands
    access-group Vlan500_access_out out interface Vlan500-HellandBadlands
    access-group Vlan510_access_in in interface Vlan510-IsTak
    access-group Vlan510_access_out out interface Vlan510-IsTak
    access-group Vlan600_access_in_1 in interface Vlan600-SafeQ
    access-group Vlan600_access_out out interface Vlan600-SafeQ
    access-group Vlan462-Suldalsposten_access_in_1 in interface Vlan462-Suldalsposten
    access-group Vlan462-Suldalsposten_access_out_1 out interface Vlan462-Suldalsposten
    route outside 0.0.0.0 0.0.0.0 79.x.x.225 1
    timeout xlate 3:00:00
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout uauth 0:05:00 absolute
    username x password x encrypted privilege 15
    aaa authentication ssh console LOCAL
    http server enable
    http 192.168.210.0 255.255.255.0 Vlan450
    http 192.168.200.0 255.255.255.0 Vlan1
    http 192.168.1.0 255.255.255.0 vlan400
    no snmp-server location
    no snmp-server contact
    snmp-server community public
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
    crypto map outside_map 20 match address outside_20_cryptomap_1
    crypto map outside_map 20 set pfs
    crypto map outside_map 20 set peer 62.92.159.137
    crypto map outside_map 20 set transform-set ESP-3DES-SHA
    crypto map outside_map interface outside
    crypto isakmp enable outside
    crypto isakmp enable vlan400
    crypto isakmp policy 10
    authentication pre-share
    encryption 3des
    hash sha
    group 2
    lifetime 86400
    tunnel-group 62.92.159.137 type ipsec-l2l
    tunnel-group 62.92.159.137 ipsec-attributes
    pre-shared-key *
    telnet 192.168.200.0 255.255.255.0 Vlan1
    telnet 192.168.1.0 255.255.255.0 vlan400
    telnet timeout 5
    ssh 171.68.225.216 255.255.255.255 outside
    ssh timeout 5
    console timeout 0
    dhcpd update dns both
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan1
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface outside
    dhcpd address 192.168.1.100-192.168.1.225 vlan400
    dhcpd option 6 ip DomeneServer 81.167.36.11 interface vlan400
    dhcpd option 3 ip 192.168.1.1 interface vlan400
    dhcpd enable vlan400
    dhcpd address 192.168.210.100-192.168.210.200 Vlan450
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan450
    dhcpd option 3 ip 192.168.210.1 interface Vlan450
    dhcpd enable Vlan450
    dhcpd address 192.168.2.100-192.168.2.150 Vlan460-SuldalHotell
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan460-SuldalHotell
    dhcpd option 3 ip 192.168.2.1 interface Vlan460-SuldalHotell
    dhcpd enable Vlan460-SuldalHotell
    dhcpd address 192.168.3.100-192.168.3.200 Vlan461-SuldalHotellGjest
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan461-SuldalHotellGjest
    dhcpd option 3 ip 192.168.3.1 interface Vlan461-SuldalHotellGjest
    dhcpd enable Vlan461-SuldalHotellGjest
    dhcpd address 192.168.202.100-192.168.202.199 vlan470-Kyrkjekontoret
    dhcpd option 3 ip 192.168.202.1 interface vlan470-Kyrkjekontoret
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface vlan470-Kyrkjekontoret
    dhcpd enable vlan470-Kyrkjekontoret
    dhcpd option 3 ip 192.168.20.1 interface vlan480-Telefoni
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface vlan480-Telefoni
    dhcpd address 192.168.10.80-192.168.10.90 Vlan490-QNapBackup
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan490-QNapBackup
    dhcpd option 3 ip 192.168.10.1 interface Vlan490-QNapBackup
    dhcpd address 192.168.30.100-192.168.30.199 Vlan500-HellandBadlands
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan500-HellandBadlands
    dhcpd option 3 ip 192.168.30.1 interface Vlan500-HellandBadlands
    dhcpd enable Vlan500-HellandBadlands
    dhcpd address 192.168.40.100-192.168.40.150 Vlan510-IsTak
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan510-IsTak
    dhcpd option 3 ip 192.168.40.1 interface Vlan510-IsTak
    dhcpd enable Vlan510-IsTak
    dhcpd address 192.168.50.150-192.168.50.199 Vlan600-SafeQ
    dhcpd option 6 ip 81.167.36.3 81.167.36.11 interface Vlan600-SafeQ
    dhcpd enable Vlan600-SafeQ
    dhcpd address 192.168.4.100-192.168.4.150 Vlan462-Suldalsposten
    dhcpd option 6 ip DomeneServer 81.167.36.11 interface Vlan462-Suldalsposten
    dhcpd option 3 ip 192.168.4.1 interface Vlan462-Suldalsposten
    dhcpd enable Vlan462-Suldalsposten
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum 512
    prompt hostname context
    Cryptochecksum:x
    : end

    I was just wondering if this is the way to do the "connection" between vlans.. or should it be routed?
    The traffic between the vlan is working as intended. There are not much traffice only some RDP connection and some printing jobs.
    But i'm getting some of these errors: (not alle like this, but portmap translation creation failed)
    305006    192.168.10.200 portmap translation creation failed for udp src Vlan460-SuldalHotell:192.168.2.112/59133 dst Vlan490-QNapBackup:192.168.10.200/161
    I did the sh interface commends:
    Result of the command: "sh interface"
    Interface Vlan1 "Vlan1", is down, line protocol is down
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.200.100, subnet mask 255.255.255.0
      Traffic Statistics for "Vlan1":
        0 packets input, 0 bytes
        0 packets output, 0 bytes
        0 packets dropped
          1 minute input rate 0 pkts/sec,  0 bytes/sec
          1 minute output rate 0 pkts/sec,  0 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  0 bytes/sec
          5 minute output rate 0 pkts/sec,  0 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Interface Vlan2 "outside", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 79.x.x.226, subnet mask 255.255.255.224
      Traffic Statistics for "outside":
        1780706730 packets input, 1221625431570 bytes
        1878320718 packets output, 1743030863134 bytes
        5742216 packets dropped
          1 minute input rate 558 pkts/sec,  217568 bytes/sec
          1 minute output rate 803 pkts/sec,  879715 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 621 pkts/sec,  482284 bytes/sec
          5 minute output rate 599 pkts/sec,  428957 bytes/sec
          5 minute drop rate, 1 pkts/sec
    Interface Vlan400 "vlan400", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.1.1, subnet mask 255.255.255.0
      Traffic Statistics for "vlan400":
        1093422654 packets input, 1191121436317 bytes
        784209789 packets output, 374041914789 bytes
        11465163 packets dropped
          1 minute input rate 751 pkts/sec,  870445 bytes/sec
          1 minute output rate 462 pkts/sec,  116541 bytes/sec
          1 minute drop rate, 11 pkts/sec
          5 minute input rate 474 pkts/sec,  415304 bytes/sec
          5 minute output rate 379 pkts/sec,  197861 bytes/sec
          5 minute drop rate, 7 pkts/sec
    Interface Vlan450 "Vlan450", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.210.1, subnet mask 255.255.255.0
      Traffic Statistics for "Vlan450":
        139711812 packets input, 27519985266 bytes
        202793062 packets output, 233679075458 bytes
        12523100 packets dropped
          1 minute input rate 68 pkts/sec,  9050 bytes/sec
          1 minute output rate 83 pkts/sec,  88025 bytes/sec
          1 minute drop rate, 6 pkts/sec
          5 minute input rate 145 pkts/sec,  15068 bytes/sec
          5 minute output rate 241 pkts/sec,  287093 bytes/sec
          5 minute drop rate, 6 pkts/sec
    Interface Vlan460 "Vlan460-SuldalHotell", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.2.1, subnet mask 255.255.255.0
      Traffic Statistics for "Vlan460-SuldalHotell":
        177971988 packets input, 161663208458 bytes
        193137004 packets output, 137418896469 bytes
        4003957 packets dropped
          1 minute input rate 13 pkts/sec,  2295 bytes/sec
          1 minute output rate 14 pkts/sec,  15317 bytes/sec
          1 minute drop rate, 2 pkts/sec
          5 minute input rate 4 pkts/sec,  794 bytes/sec
          5 minute output rate 1 pkts/sec,  477 bytes/sec
          5 minute drop rate, 2 pkts/sec
    Interface Vlan461 "Vlan461-SuldalHotellGjest", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.3.1, subnet mask 255.255.255.0
      Traffic Statistics for "Vlan461-SuldalHotellGjest":
        332909692 packets input, 351853184942 bytes
        312038518 packets output, 156669956740 bytes
        583171 packets dropped
          1 minute input rate 0 pkts/sec,  6 bytes/sec
          1 minute output rate 0 pkts/sec,  0 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  6 bytes/sec
          5 minute output rate 0 pkts/sec,  0 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Interface Vlan462 "Vlan462-Suldalsposten", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.4.1, subnet mask 255.255.255.0
      Traffic Statistics for "Vlan462-Suldalsposten":
        33905 packets input, 14303320 bytes
        28285 packets output, 27536357 bytes
        10199 packets dropped
          1 minute input rate 0 pkts/sec,  6 bytes/sec
          1 minute output rate 0 pkts/sec,  0 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  6 bytes/sec
          5 minute output rate 0 pkts/sec,  0 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Interface Vlan470 "vlan470-Kyrkjekontoret", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.202.1, subnet mask 255.255.255.0
      Traffic Statistics for "vlan470-Kyrkjekontoret":
        12176257 packets input, 4305665570 bytes
        10618750 packets output, 5982598969 bytes
        974796 packets dropped
          1 minute input rate 2 pkts/sec,  770 bytes/sec
          1 minute output rate 1 pkts/sec,  861 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 2 pkts/sec,  708 bytes/sec
          5 minute output rate 1 pkts/sec,  980 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Interface Vlan480 "vlan480-Telefoni", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.20.1, subnet mask 255.255.255.0
      Traffic Statistics for "vlan480-Telefoni":
        246638 packets input, 43543149 bytes
        10 packets output, 536 bytes
        226674 packets dropped
          1 minute input rate 0 pkts/sec,  126 bytes/sec
          1 minute output rate 0 pkts/sec,  0 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  56 bytes/sec
          5 minute output rate 0 pkts/sec,  0 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Interface Vlan490 "Vlan490-QNapBackup", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.10.1, subnet mask 255.255.255.0
      Traffic Statistics for "Vlan490-QNapBackup":
        137317833 packets input, 6066713912 bytes
        223933623 packets output, 263191563744 bytes
        531738 packets dropped
          1 minute input rate 0 pkts/sec,  135 bytes/sec
          1 minute output rate 0 pkts/sec,  0 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  68 bytes/sec
          5 minute output rate 0 pkts/sec,  0 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Interface Vlan500 "Vlan500-HellandBadlands", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.30.1, subnet mask 255.255.255.0
      Traffic Statistics for "Vlan500-HellandBadlands":
        30816778 packets input, 4887486069 bytes
        42403099 packets output, 47831750415 bytes
        948717 packets dropped
          1 minute input rate 3 pkts/sec,  707 bytes/sec
          1 minute output rate 3 pkts/sec,  3459 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  23 bytes/sec
          5 minute output rate 0 pkts/sec,  31 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Interface Vlan510 "Vlan510-IsTak", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.40.1, subnet mask 255.255.255.0
      Traffic Statistics for "Vlan510-IsTak":
        1253148 packets input, 245364736 bytes
        1225385 packets output, 525528101 bytes
        161567 packets dropped
          1 minute input rate 0 pkts/sec,  6 bytes/sec
          1 minute output rate 0 pkts/sec,  0 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  6 bytes/sec
          5 minute output rate 0 pkts/sec,  0 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Interface Vlan600 "Vlan600-SafeQ", is up, line protocol is up
      Hardware is EtherSVI
        MAC address 001d.453a.ea0e, MTU 1500
        IP address 192.168.50.1, subnet mask 255.255.255.0
      Traffic Statistics for "Vlan600-SafeQ":
        1875377 packets input, 1267279709 bytes
        1056139 packets output, 290728055 bytes
        521943 packets dropped
          1 minute input rate 0 pkts/sec,  165 bytes/sec
          1 minute output rate 0 pkts/sec,  0 bytes/sec
          1 minute drop rate, 0 pkts/sec
          5 minute input rate 0 pkts/sec,  178 bytes/sec
          5 minute output rate 0 pkts/sec,  9 bytes/sec
          5 minute drop rate, 0 pkts/sec
    Interface Ethernet0/0 "", is up, line protocol is up
      Hardware is 88E6095, BW 100 Mbps
        Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
        Available but not configured via nameif
        MAC address 001d.453a.ea06, MTU not set
        IP address unassigned
        1782670655 packets input, 1256666911856 bytes, 0 no buffer
        Received 95709 broadcasts, 0 runts, 0 giants
        1978 input errors, 1978 CRC, 0 frame, 0 overrun, 1978 ignored, 0 abort
        0 L2 decode drops
        17179928790 switch ingress policy drops
        1878320261 packets output, 1778955488577 bytes, 0 underruns
        0 output errors, 0 collisions, 0 interface resets
        0 babbles, 0 late collisions, 0 deferred
        0 lost carrier, 0 no carrier
        0 rate limit drops
        0 switch egress policy drops
    Interface Ethernet0/2 "", is up, line protocol is up
      Hardware is 88E6095, BW 100 Mbps
        Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
        Available but not configured via nameif
        MAC address 001d.453a.ea08, MTU not set
        IP address unassigned
        1790819459 packets input, 1783854920873 bytes, 0 no buffer
        Received 27571913 broadcasts, 0 runts, 0 giants
        614 input errors, 614 CRC, 0 frame, 0 overrun, 614 ignored, 0 abort
        0 L2 decode drops
        19768 switch ingress policy drops
        1547507675 packets output, 991527977853 bytes, 0 underruns
        0 output errors, 0 collisions, 0 interface resets
        0 babbles, 0 late collisions, 0 deferred
        0 lost carrier, 0 no carrier
        0 rate limit drops
        0 switch egress policy drops
    Interface Ethernet0/3 "", is up, line protocol is up
      Hardware is 88E6095, BW 100 Mbps
        Auto-Duplex(Full-duplex), Auto-Speed(100 Mbps)
        Available but not configured via nameif
        MAC address 001d.453a.ea09, MTU not set
        IP address unassigned
        137318166 packets input, 9176625008 bytes, 0 no buffer
        Received 290030 broadcasts, 0 runts, 0 giants
        0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
        0 L2 decode drops
        335 switch ingress policy drops
        223933623 packets output, 267222625073 bytes, 0 underruns
        0 output errors, 0 collisions, 0 interface resets
        0 babbles, 0 late collisions, 0 deferred
        0 lost carrier, 0 no carrier
        0 rate limit drops
        0 switch egress policy drops

  • Office 2013 - OSD - Specify different config xml

    Hi Guys
    I want to deploy Office 2013 in different languages to different users. It seems there are a few ways to do this. But I am thinking I want to package all languages I need into one Office install package and then in the task sequence have groups for countries.
    Each country has a variable to specify which config.xml to use. Is this possible or is there a better way?
    (I just need to know how to point to the correct xml in the package, kind of like the unattend file) I know the rest if this is the way.
    ie.
    -France
    ---ConfigFR.xml
    -Germany
    ---ConfigGe.xml
    Sweden
    ---ConfigSE.xml
    Thanks
    NN

    Hi
    I know the original question has been answered, but I have a follow up question.
    I am deploying Windows 8.1 Update using custom variables to install Windows language packs and Office Language packs dynamically based on rules. Running just one language works fine. But if I have a multiple language package deployed to Windows the
    Office DTs do not pick this up (each DT is currently working of one language per DT and using operating system language to install the correct xml).
    See here:
    These are the DTs
    After doing a bit more reading. I now know I need to setup the rules differently. Can I set the rules to be English and Swedish install DT1, and English and Romanian install DT 2, English alone install DT 3 etc?
    I basically need an "AND" rule.
    thanks again
    NN
    *you may have to zoom to see the larger image.

  • Possible to have two login configs in same web app?

    Sorry for not having tried this first, my server and webapp are in a state
    of flux at this moment, but I wanted to see what the consensus is out there,
    not just whether I can or cannot make something work quickly.
    If I have two types of things that might be called in my Web App (WAR) in
    different ways (eg, browser accessing via HTTP by users that want to login
    via pretty forms, and SOAP clients that may access functionality through the
    same servlets (but with alternate Servlet Path Info after the servlet name
    in the URL)), is there ANY way I can have multiple login configs, each tied
    to a different security constraint within that web app?
    In other words, with a servlet of /frazzleblitz and security constraints
    like:
    <security-constraint>
    <web-resource-collection>
    <web-resource-name>Foo</web-resource-name>
    <url-pattern>/frazzleblitz/doFooBar</url-pattern>
    </web-resource-collection>
    <auth-constraint>
    <role-name>FoobarBrowserUsers</role-name>
    </auth-constraint>
    </security-constraint>
    and the SOAP constraint (for all users of incoming SOAP requests):
    <security-constraint>
    <web-resource-collection>
    <web-resource-name>Foo</web-resource-name>
    <url-pattern>/frazzleblitz/doFooBar</url-pattern>
    </web-resource-collection>
    <auth-constraint>
    <role-name>FoobarBrowserUsers</role-name>
    </auth-constraint>
    </security-constraint>
    where my frazzleblitz controller knows whether the incoming request is
    browser vs SOAP based by the path info after the servlet name
    Can I associate the first security constraint with a FORM based login
    config, and the second security constraint with a BASIC AUTH login config
    since I could in theory require SOAP clients to send in credentials in a
    HTTP BasicAuth header, but I can't expect a SOAP client to be HTTP
    Redirected to a login form and then to enter the right credentials into a
    user type form and then be redirected back to an app...
    Seems to me the J2EE Security spec is really lacking in the area of
    programmatic authentication (allowing my SOAP code to get credentials out of
    the request envelope and call an API to login myself). Yeah, WebLogic has
    the ServletAuthentication weak() API, but these apps need to be J2EE
    compliant and work across J2EE servers... Anybody know of any improvements
    coming in the J2EE security space to address such functionality needs?
    Thanks in advance
    Mike

    Sorry, hit send accidentally before finishing the second security
    constraint - I've fixed it up below to reflect what I meant...
    "Mike" <[email protected]> wrote in message
    news:[email protected]...
    Sorry for not having tried this first, my server and webapp are in a state
    of flux at this moment, but I wanted to see what the consensus is outthere,
    not just whether I can or cannot make something work quickly.
    If I have two types of things that might be called in my Web App (WAR) in
    different ways (eg, browser accessing via HTTP by users that want to login
    via pretty forms, and SOAP clients that may access functionality throughthe
    same servlets (but with alternate Servlet Path Info after the servlet name
    in the URL)), is there ANY way I can have multiple login configs, eachtied
    to a different security constraint within that web app?
    In other words, with a servlet of /frazzleblitz and security constraints
    like:
    <security-constraint>
    <web-resource-collection>
    <web-resource-name>Foo</web-resource-name>
    <url-pattern>/frazzleblitz/doFooBar</url-pattern>
    </web-resource-collection>
    <auth-constraint>
    <role-name>FoobarBrowserUsers</role-name>
    </auth-constraint>
    </security-constraint>
    and the SOAP constraint (for all users of incoming SOAP requests):
    <security-constraint>
    <web-resource-collection>
    <web-resource-name>Bar</web-resource-name>
    <url-pattern>/frazzleblitz/doSOAPRequest</url-pattern>
    </web-resource-collection>
    <auth-constraint>
    <role-name>SOAPUsers</role-name>
    </auth-constraint>
    </security-constraint>
    where my frazzleblitz controller knows whether the incoming request is
    browser vs SOAP based by the path info after the servlet name
    Can I associate the first security constraint with a FORM based login
    config, and the second security constraint with a BASIC AUTH login config
    since I could in theory require SOAP clients to send in credentials in a
    HTTP BasicAuth header, but I can't expect a SOAP client to be HTTP
    Redirected to a login form and then to enter the right credentials into a
    user type form and then be redirected back to an app...
    Seems to me the J2EE Security spec is really lacking in the area of
    programmatic authentication (allowing my SOAP code to get credentials outof
    the request envelope and call an API to login myself). Yeah, WebLogic has
    the ServletAuthentication weak() API, but these apps need to be J2EE
    compliant and work across J2EE servers... Anybody know of anyimprovements
    coming in the J2EE security space to address such functionality needs?
    Thanks in advance
    Mike

  • Remote system reboots due to error when exporting config.

    I have a PXI-8196 controller operating on a network in a PXI-1052 chassis.  I am trying to export the config and the remote system reboots due to system error.

    Your Computer looks to be a Late 2010 iMac, if so is the RAM spec as shown below?
    Maximum Memory
    16 GB
    Memory Slots
    4 - 204-pin PC3-10600 (1333 MHz) DDR3 SO-DIMM

  • Using a variable in Struts config, to redirect

    In the struts-config file,
    to redirect to a different site, I can use
    redirect="true"
    and mention full path, in my <forward path=
    variable.
    1. Is there a better way to do it?
    2. Since I have to do it in multiple places, is it possible to use a variable? I mean, something like this
    <forward
    name="success"
    path="URL/abc.html" />
    Where URL is a variable name that the site path? This way, I can reuse the variable to redirect to other pages too (xyz.html, for example)

    Hi there,
    I don't know...is there only one URL you are using ore are there more than one? Because if it's the same path everytime you can try using this:
    <forward
    name="success"
    path="./abc.html" />
        ./               // This is the shortcut for the directory you are currently using.
        ../              // This is the shortcut for the directory above the one you are currently using.This code should do it. If not, try to create a var named for example "vpath" and put it like this:
    <forward
    name="success"
    path=vpath+"abc.html" />Try and tell if it worked ;)
    X--spYro--X

  • Error while running config.sh to configure OIM 11.1.1.5.0

    Hi
    I have installed all the required SW to run OIM 11.1.1.5.0
    - DB 11.2.0.1
    - WLS 10.3.5.0
    - RCU 11.1.1.5.0
    - SOA 11.1.1.5.0
    - OIM 11.1.1.5.0
    I was able to create the WLS domain and to start the AdminServer.
    But when I try to run *~oracle/Middleware/Oracle_IDM1/bin/config.sh* to configure OIM, I get an error in the UI.
    If I look at the the log file, I see this error:
    [OIM_CONFIG] MBeanServerConnection to Domain Runtime Server established ....
    [2013-02-13T11:11:02.659-08:00] [as] [NOTIFICATION] [] [oracle.as.provisioning] [tid: 12] [ecid: 0000JnKxtFqFW7WFLzqIOA1H6yIm000003,0] [[
    [OIM_CONFIG] Permission for OIM Authenticator not set in system-jazn-data.xml.Hence setting it.
    [2013-02-13T11:11:02.668-08:00] [as] [ERROR] [] [oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager] [tid: 12] [ecid: 0000JnKxtFqFW7WFLzqIOA1H6yIm000003,0] One or More configurations failed. Exiting
    [2013-02-13T11:11:02.669-08:00] [as] [NOTIFICATION] [] [oracle.as.install.engine.modules.statistics] [tid: 12] [ecid: 0000JnKxtFqFW7WFLzqIOA1H6yIm000003,0] Install Adapter: Mark End for:CONFIG
    And this is the content of the output file
    [oracle@vm logs]$ cat install2013-02-13_11-06-46AM.out
    Setting UnixGroups to "{dba,}"
    Setting ORACLE_HOME to /mnt/ORACLE/Middleware/Oracle_IDM1
    Setting Doracle.config.mode to true
    Adding /tmp/OraInstall2013-02-13_11-06-46AM for deletion.
    Adding to classpath:file:/tmp/OraInstall2013-02-13_11-06-46AM/ext/jlib/oim/oim.jar
    Adding to classpath:file:/tmp/OraInstall2013-02-13_11-06-46AM/ext/jlib/oim/template.jar
    Adding to classpath:file:/tmp/OraInstall2013-02-13_11-06-46AM/ext/jlib/handlers/oimQueriesHandler.jar
    [email protected]ScreenRes
    configFileName:/oracle/as/install/oim/ui/xml/footprint.xml
    Setting current page standalone validations to true
    Setting current page standalone validations to true
    resultset.getStatus() : true
    Setting current page standalone validations to true
    In processFieldStringPassword
    In processFieldStringConnect String
    In processFieldStringMDS Password
    In processFieldStringMDS User
    In processFieldStringUser Name
    ORACLE_HOME:/mnt/ORACLE/Middleware/Oracle_IDM1
    LOCALE_PROPERTIES FILE LOCATION:/mnt/ORACLE/Middleware/Oracle_IDM1/inventory/Scripts/ext/jlib/oim/OIMLocales.properties
    LOCALE_LANG:en
    LOCALE_COUNTRY:US
    resultset.getStatus() : true
    Setting current page standalone validations to true
    In processFieldStringWebLogic Admin Server URL
    In processFieldStringWebLogic Administrator UserName
    In processFieldStringWebLogic Administrator Password
    connection obtained successfully...javax.management.remote.rmi.RMIConnector$RemoteMBeanServerConnection@759f31de
    resultset.getStatus() : true
    connection obtained successfully...javax.management.remote.rmi.RMIConnector$RemoteMBeanServerConnection@679e3bdd
    OIM Managed Server URL: http://vm.com:14000
    Setting current page standalone validations to true
    In processFieldStringConfirm User Password
    In processFieldStringOIM Administrator Password
    ResultSet : [System, Administrator, XELSYSADM]
    In processFieldStringKeyStore Password
    In processFieldStringConfirm KeyStore Password
    In processFieldStringProxy URL for OIM
    In processErrorMsgStringKeyStore Password
    resultset.getStatus() : true
    Setting current page standalone validations to true
    resultset.getStatus() : true
    ********Print out of data model is as follows******
    ------Page Variables of DomainSelectionOptionsWLSPage----
    In doFinish method checking for inventory lock...ConfigurationPage
    Setting current page standalone validations to true
    Oracle Home in OIMInstallActionProvider= /mnt/ORACLE/Middleware/Oracle_IDM1
    JAVA.LIBRARY.PATH:/tmp/OraInstall2013-02-13_11-06-46AM/jre/lib/amd64/server:/tmp/OraInstall2013-02-13_11-06-46AM/jre/lib/amd64:/tmp/OraInstall2013-02-13_11-06-46AM/jre/../lib/amd64:/mnt/ORACLE/Middleware/Oracle_IDM1/lib:/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib:/mnt/ORACLE/Middleware/Oracle_IDM1/lib/:/mnt/ORACLE/Middleware/Oracle_IDM1/jdk/jre/lib/i386/
    ORACLE_HOME = /mnt/ORACLE/Middleware/Oracle_IDM1
    domainHome :/u01/app/oracle/Middleware/user_projects/domains/oim_domain
    soaURL: t3://vm.com:8001
    providers.size[]...1
    providers Type...Server
    java.lang.NoClassDefFoundError: oracle/security/jps/mas/mgmt/jmx/policy/PortableCodeSource
    at oracle.as.install.oim.config.mbeans.ConfigureOIMAuthenticator.grantCSFReadWritePerms(ConfigureOIMAuthenticator.java:295)
    at oracle.as.install.oim.config.mbeans.ConfigureOIMAuthenticator.configureAuthenticatorMbean(ConfigureOIMAuthenticator.java:109)
    at oracle.as.install.oim.config.OIMConfigManager.configureOIM(OIMConfigManager.java:614)
    at oracle.as.install.oim.config.OIMConfigManager.doExecute(OIMConfigManager.java:538)
    at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:335)
    at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:87)
    at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:104)
    at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
    at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:63)
    at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:158)
    at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
    at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:83)
    at java.lang.Thread.run(Thread.java:662)
    Caused by: java.lang.ClassNotFoundException: oracle.security.jps.mas.mgmt.jmx.policy.PortableCodeSource
    at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionClassLoader.loadClass(StandardConfigActionClassLoader.java:75)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
    ... 13 more
    java.lang.IllegalStateException: Action:OIM Configuration failed with error:interrupted
    at oracle.as.install.engine.modules.configuration.client.ConfigAction.fail(ConfigAction.java:227)
    at oracle.as.install.oim.config.OIMConfigManager.doExecute(OIMConfigManager.java:554)
    at oracle.as.install.engine.modules.configuration.client.ConfigAction.execute(ConfigAction.java:335)
    at oracle.as.install.engine.modules.configuration.action.TaskPerformer.run(TaskPerformer.java:87)
    at oracle.as.install.engine.modules.configuration.action.TaskPerformer.startConfigAction(TaskPerformer.java:104)
    at oracle.as.install.engine.modules.configuration.action.ActionRequest.perform(ActionRequest.java:15)
    at oracle.as.install.engine.modules.configuration.action.RequestQueue.perform(RequestQueue.java:63)
    at oracle.as.install.engine.modules.configuration.standard.StandardConfigActionManager.start(StandardConfigActionManager.java:158)
    at oracle.as.install.engine.modules.configuration.boot.ConfigurationExtension.kickstart(ConfigurationExtension.java:81)
    at oracle.as.install.engine.modules.configuration.ConfigurationModule.run(ConfigurationModule.java:83)
    at java.lang.Thread.run(Thread.java:662)
    In Config Module Finish Event...
    In doCancel method ...
    Yes option....
    inventoryLocation: /u01/app/oraInventory
    outputFile:/u01/app/oraInventory/logs/installProfile2013-02-13_11-06-46AM.log
    in writeProfile method..
    [ENGINE] Adding /tmp/OraInstall2013-02-13_11-06-46AM for deletion.
    Any suggestion ?
    Thanks a lot

    Never mind
    I have figured it out.
    I had to create few symbolic links under $HOME/Middleware
    In particular Oracle_IDM1
    The config.sh script is setting ORACLE_HOME based on pwd.
    And pwd is returning the path of the linked directory and not $HOME/Middleware/Oracle_IDM1
    Once I fixed the script to simple use the correct ORACLE_HOME, it finishes correctly

  • HP LaserJet p1102w with Mac OS X10.6.8 HTML config issue

    Hello, 
    I have been using this printer for a few years now and have moved house a few times and successfully updated the wireless settings on the printer through HTML config. Lately, in printer utilities the HTML config button does not show up where it is meant to.
    I have installed / uninstalled the latest firmware, software drivers, printers and made sure they were platform specific.
    This is really annoying. 
    Is there old software available for download? it was working fine until the recent update - which I did so I could use the eprint features.
    Best regards
    Costas
    Printer: 
    HP LaserJet p1102w, Firmware datacode = 20130213
    Computer:
    Macbook white, late 2008 model: 2.4Ghz Core2Duo, 4G RAM with OS X 10.6.8

    From the name of the printer, it looks like you have it installed through a USB connection. 
    Here is what I would. First go into “System Preferences” and then select either  “Print & Scan” or "Print & Fax".
    Right click (or control + click) on the rectangle listing your printers and then select “Reset Printing System”.  
    NOTE: This will delete all printers. 
    After you have reset the printing system, let's make sure you have the most recent HP driver package installed. 
    You can download it here: http://support.apple.com/downloads/DL907/en_US/HPPrinterDrivers2.14.dmg
    Once you have downloaded the driver package and completed the installation, go into your print settings under System Preferences > Print & Scan. To add the printer, click the plus (+) sign. You should see your printer listed here. If not, click "Add Printer or Scanner." Click the name of your printer and then click "Use:” box.  Make sure that says the name of your printer and not AirPrint. Next make sure that the printer "Kind:" is set to Bonjour or Bonjour Multifunction. Click "Add" down in the bottom right hand corner.
    This will add your printer back using the most recent HP print driver available through Apple. Let me know if this helps resolve your issue or not. If it doesn't, let me know I will see what else I can do.
    Best of luck,
    Kyle
    -------------How do I give Kudos? | How do I mark a post as Solved? --------------------------------------------------------

Maybe you are looking for

  • Faulty line for over a month now but BT says it is...

    Has anyone got any suggestions, please?  I reported a faulty line on 22nd April - it had an increasing amount noise on it (which it has had for ages but had become unbearable) including clicking, and my broadband kept dropping.  I had done all the us

  • If I move from Firewire 400 to 800 will download speed of video increase?

    Hi, I have just upgraded from a MacMini (which had firewire 400) to a new iMac which only has firewire 800. I have a 3 year old JVC digital camcorder (GR-D340EK) with ilink out and previously used a Belkin cable to connect to my Macmini. My question

  • ERROR:  cannot find information from the FND_FORM_FUNCTIONS table

    Hi, I am in CU2, i have created my project, set the right responsibility in Project property panel of my Jdeveveoper. When i run the first page all is ok, but if i click on a h-grid link , i receive the following error: "Your system has not been prop

  • Af:column af:inputComboboxListOfValues Not Rendering as LOV

    I have an updateable af:table UI Component based on a View Object (which is a child of another VO). Both VOs are based on Entities. There are 3 attributes in the ViewObject the table is based on, that have LOVs defined - with the hint set to Combo Bo

  • Create Organization Data programatically

    I am using ALBPM 5.7 Studio and trying to create Organization data programatically - OU, Participant, Role etc. I am able to fetch data but not able to create OU. For the following code DirOrganizationalUnit dirOrgUnit; dirOrganizationalUnit = dirOrg