Can the ACE bind (probe) to a Openldap with ssl?

We current have a unencrypted LDAP and I use the LDAP script probe from cisco for the probe.
We are moving to OPENLDAP with SSL, is there a way of binding with a probe SSL OpenLdap configured.

Hi Cecil,
It does not have a probe like that but you can create a custom TCL to accomplish this behavior. I'll recommend you to contact your Cisco Account Manager or Cisco System Engineer, they can help you with this
Cesar R
ANS Team

Similar Messages

Can the hard drive in my macbook pro with retina be upgraded?

Can the hard drive in my macbook pro with retina display be upgraded to a larger hard drive? I have a 2.6 Ghz processor, 8 GB of Memory. I have a 250 GB drive and would like a larger drive. Thx.

There are two answers to this:
No, if you want to keep your warranty on your product by doing it yourself.
Yes, if you consider using a IT pro (not Apple) which can give you an warranty on the work done.
Official bottom line: Apple does not support this.

Can the Canon Pixma iP 5000 be used with Mac OS X Version 10.5.8 ?

Can the Canon Pixma iP 5000 be used with Mac OS X Version 10.5.8 ? Thank you

Mail updates are usually part of OSX System Updates and no stand-alone updates.
Try downloading and installing the 10.6.8 Combo Updater from here http://support.apple.com/kb/DL1399
Stefan

Can the iSight built in camera be used with msn messenger?

if so. how can i make it work?!?!

Hello jellosaladE
can the iSight built in camera be used with msn messenger?
An iNtel Mac can use its built-in iSight "with" MSN Messenger.
For how, see this thread:
http://discussions.apple.com/thread.jspa?messageID=5087786&#5087786
(Also at your other post of this same question:
http://discussions.apple.com/thread.jspa?threadID=1134579)
EZ Jim
PowerBook 1.67 GHz Mac OS X (10.4.10) G5 DP 1.8 External iSight

Can the Gigabit Ethernet LAN Port be used with a Thunderbolt to Gigabit Ethernet adaptor and then to a Thunderbolt Hard Drive as a back up drive?

Can the Gigabit Ethernet LAN Port be used with a Thunderbolt to Gigabit Ethernet adaptor and then to a Thunderbolt Hard Drive as a back up drive?

If you use ethernet to connect the two AirPort Extremes together, you'll have Gigabit speeds available at all of the ethernet ports on both routers.
If you connect the second AirPort Extreme using wireless only and configure the Extreme to "extend a wireless network", then the maximum speeds that the second router can attain will be limited to the capability of the wireless connection. So, if you connect at normal "n" wireless speeds of say 130 Mbps, that will be the maximum speed available at the ethernet ports on the second AirPort Extreme.
I think you can easily see the difference between Gigabit ethernet, which is 1000 Mbps compared to "n" wireless at 130 Mbps. Even if you can manage to connect at 5 GHz speeds for wireless, the max speed will be in the 300 Mbps range, more than 3 times slower than Gigabit ethernet. Normal "n" speeds will be about 7 times slower than ethernet.
For streaming high definition video and other demanding sources, you'll need as much bandwidth (speed) as you can get. Ethernet is always the best choice if you can possibly use it. And...there's no wireless interference on an ethernet connection.
Message was edited by: Bob Timmons

Can the ACE bleed off users based on http probe?

We need to have our ACE look at our two servers, and based on the text it sees on a predetermined page, take an action.
Example 1: ACE looks at web page on server1, and sees "maintenance". Desired action - send all users to server2, & wait for server1 to bleed off all users.
Example 2: ACE looks at web page on server1, and sees "online". Desired action - allow users to go back to server1.
current config:
probe http HTTP-Server1
interval 15
passdetect interval 2
request method get url /maintenance.htm
expect status 200 200
probe http HTTP-Server2
interval 15
passdetect interval 2
request method get url /maintenance.htm
expect status 200 200
Thanks.

if you are looking at content for maintenance and online you need to do 2 things
1. make sure server uses content length header in reply to probe
2. construct probe to look for content as the criteria for probe success or failure so probe would be:
probe http HTTP-Server1
interval 15
passdetect interval 2
request method get url /maintenance.htm
expect regex "online"
if content does not have online probe will fail new connections would go to other server existing connections will be maintained.
Regards

Can the ACE module or 4700 server up webpage.

Hello.
Is it possible for the ACE to serve up a web page to a VIP when the VIP is OUTOFSERVICE?
Any capability for that at all?

Hi,
The ACE can redirect it to the server which hosts the web page stating content is unavailable , under maintenance etc but no option to do it on ACE itself. If you like to use the former, please look at the option of sorry server and serverfarm.
Regards,
Kanwal

Can the ACE be configured for logging configuration changes to syslog server ?

Hi,
On all our routers, switches and firewalls we've configured syslog so we get logs when configuration changes occur.
Is this possible on the ACE too ?
regards,
Sebastian

Hi Sebastian,
Yes it is possible but depends upong the logging level you have set. So logging trap 5 should be able to get you the configuration changes or command execution logs.
Nov 1 2013 11:20:33 : %ACE-5-111008: User 'admin' executed the 'logging buffered 6' command.
Nov 1 2013 11:20:48 : %ACE-5-111008: User 'admin' executed the 'no rserver testlog' command.
So you should see these level 5 logs on syslog if logging trap 5 is configured.
Let me know if you have any questions.
Regards,
Kanwal

Can the rescue and recovery function be infect with a trojan virus?

I had some trouble with trojan viruses. My scan software detected malware on my system which I deleted with the help of the antivirus software antivir (free version) and with the software malwarebytes.
My thinkpad r51 is still running and virus scans do not show any problems any more. But I am not quite sure if I can trust the scans. So I am thinking about to format the harddisk and setup a new system. Or to use the rescue and recovery function which says that the system will be put back to its initial state. Is it really possible to bring the system back to its original state with help of rescue and recovery? ? I am a little bit afraid that the rescue and recovery function might be infected too? How does the function work? Can the system really be put back to its original state?
Any help appreciated, thanks!
Tom
Solved!
Go to Solution.

Hi,
if you have a virus on your system, then there is a realy small chance, that the virus got also into the Service Partition.
So in this situation if you want to restore the system , then after the restore finish, the virus should surely be gone.
Service partition is a protected partition, which content can not be accessed just like that .
Rgrds

Can the Groupware connector use XI to communicate with CRM2007 ?

Hi,
     Can the latest CRM groupware connector be used to connect to SAP CRM2007 using XI
     instead of communicating directly with SAP CRM2007?
     The current system landscape regarding the exchange server and CRM systems is such that
     it would not be feasible to connect the connector directly to the CRM server.
    Any help would be highly appreciated.
Kind Regards,
Sunil

Sunil,
Well technically if you make XI talk the same language that CRM talks to the groupware connector then your scenario is possible. Now the problem would be knowing the "format" of the communication that comes out of CRM to the groupware connector. If you can figure that out, then you could probably custom build the scenario you are talking about.
I'm just not sure if you will get any type of positive ROI by doing this method. Personally it just looks like something that would be costly and probably something that you will not get a lot of support. It might be easier to keep "one" CRM system that talks to groupware. Then that CRM distributes the data back from the groupware outbound to XI and then in XI you can send back to CRM. You could do the reverse where your CRM system feeds it to XI and it sends it to the CRM groupware connector system, which then feeds the groupware.
It involves a few more hops, but elminates the needs to figure out the SOAP protocol building between XI and the connector. You can then "hop" on the standard middleware adapter to distribute changes outbound using XIF plus XI and evenutally wind up in the groupware.
The drawback is one of your CRM systems, needs to have at least a global view of all business partners and activities. Which might not be desired by your business.
Take care,
Stephen

ACE 3.0(0) SW / LB with SSL Session-ID

Hello!
I want to use "SSL Session-ID" sticky method in load-balancing, but can't find any info about it in 3.0(0)A1(2) sw configuration guides. Where i can find info about it? Or this method is supported only in old A2(1.0) release?
Thanks.

SSL Session ID Sticky to ensure Client Persistence
1. Demonstrate the ability to provide stickiness using SSL
Session ID. To do this you will need to the Generic Protocol Parsing
framework on ACE. With the right regular expression you will be successful!!
2. Before you begin to configure the SSL Sticky group, be sure that
you have allocated resources to the sticky group. Note this done in the
Admin context.
resource-class cart
limit-resource all minimum 0.00 maximum unlimited
limit-resource sticky minimum 1.00 maximum equal-to-min
context Lab-Cart-11
allocate-interface vlan 211
allocate-interface vlan 411
member cart
3. Create an SSL-v3 sticky group and associate the serverfarm. Good
idea to configure a sticky timeout value. This specifies the period of time
that the ACE keeps the sticky information in the sticky table. Note the ACE
resets the timer each time ACE opens connections matching that entry. Also
configure the Layer 4 sticky parameters for 32 bytes session ID.
sticky layer4-payload ssl-v3
timeout 600
serverfarm HTTPS-FARM
response sticky
layer4-payload offset 43 length 32 begin-pattern "\x20"
When a new session is established between client and server, the server
generates a session id. The session id is an arbitrary sequence of bytes.
The length of the session id is 16 bytes for SSLv2 sessions and between 1
and 32 bytes for SSLv3/TLSv1. The session id is not security critical but
must be unique for the server. Additionally, the session id is transmitted
in the clear when reusing the session so it must not contain sensitive
information.
4. Create a class-map to match the layer 4 payload.
class-map type generic match-any SSL-v3-32
2 match layer4-payload regex "\x16\x03\x00..\x01.*"
3 match layer4-payload regex "\x16\x03\x01..\x01.*"
5. Create a new generic load balance policy map and assoiciate the
sticky-serverfarm understand the class.
policy-map type loadbalance generic first-match SSL-v3-Sticky
class SSL-v3-32
sticky-serverfarm ssl-v3
6. Change to the client-vips policy map to represent the new
SSL-v3-Sticky policy you just created
policy-map multi-match client-vips
class VIP-HTTPS
loadbalance vip inservice
loadbalance policy SSL-v3-Sticky
loadbalance vip icmp-reply active
7. Verify the VIP is accessible by trying to hit the VIP.
8. View the connection using the show cons command.
Pod1-ACE/Lab-Cart-11# show conn
total current connections : 1
conn-id np dir proto vlan source destination
state
----------+--+---+-----+----+---------------------+---------------------+---
---+
10 1 in TCP 211 209.165.201.11:1115 172.16.11.190:443
ESTAB
9. Interesting I can see that the first connection has been setup. Why
is ACE not load balancing the connection to the server?
10. Great I need to configure a L7 parameter map with a max parse-length
parameter-map type generic SSL-v3
set max-parse-length 70
11. Associate the parameter map to the client-vips policy map
policy-map multi-match client-vips
class VIP-HTTPS
loadbalance vip inservice
loadbalance policy SSL-v3-Sticky
loadbalance vip icmp-reply active
appl-parameter generic advanced-options SSL-v3
12. Verify the VIP is now accessible by trying to hit the VIP.

Can the usb sync/power cable that came with the iPhone 3g and 4 handle the 2.1 amps drawn by the ipad 2 (if used with the 10w plug) without risk of overheating?

I recently made the mistake of buying a cheap sync cable from a well known auction site becuase I wanted a longer cable than comes in the box for my ipad 2.
Whilst my iPad will sync OK, it takes an age to charge (using the standard 10w plug in the wall). I don't fully understand the science in the cables, but assume it is not a big enough cable to handle the current/2.1 amps?.
If like house wire you send too much current through a cable that is to small for the job it risks overheating and causing a fire.
Does this same principle apply to the iPad power lead?
Anyway back to the question, can I use other leads I have hanging around the house from my previous iphones and ipods to charge my ipad (again still using the 10w plug in the wall) or will the cable in these be too small to handle the 2.1 amps required by the ipad?
I don't want to risk overheating the cables and causing a short to break my beloved iPad 2...!

Thanks for your replies.
Not sure they entirely answer my question though.
I have used my different cables and can see that they are actually working (charging and syncing etc), but am i using old cable that was not intended to draw 2.1 amps and so may overheat and cause damage in the long run?
Or did apple deliberately over engineer the original cables which were only needed to supply 1 amp and they can actually be used to draw 2.1 amps comfortably?
Whilst the 30 pin connectors and usb points are identical, is the internal cable thickness/awg gauge the same?
Thanks

Can the OBI welcome/spash screen be replaced with a custom web page?

Thanks

Yes, you can do so by customizing a copy of the logoncontrolmessages.xml located in the <OracleBI Home>\web\msgdb\messages folder.
For steps on how to customize the messages, look up Chapter 10 in the Presentation Services Admin Guide.
Good luck,
Son Ly

Can the Mavericks dictation and speech app coexist with Dragon Dictate?

I just turned on the dictation and speech app. I already had dragon dictate installed. Now nothing works for dictation. Can they exist together? How? Thanks for the help.

I too have Dragon Dictate. There appear to be some low-level device driver conflicts between Mavericks Dictate and Dragon Dictate, especially when using the Plantronics BT300 wireless headset. The Plantronics BT300 unit has a pre-paired bluetooth USB attachment that connects with the wireless headset.
Usually the Dragon Dictate software works when I launch it.
When I try to use the BT300 headset with certain other apps, sometimes it hangs.
In particular, when using GoToMeeting, the Plantronics BT300 microphone works, but the Plantronics BT300 audio does not work. I am able to use the built-in Mac speakers on my iMac to receive the audio.
In trying to set up the BT300 headset for both microphone and audio output to the BT300 headset, the system displays the "beach ball" for lengthy periods of time. A couple of times the entire iMac system hung, and I had to do a force power-off, then reboot.
Today was the first time I attempted to turn on the Mavericks Dictate. The entire system appeared to slow down around the attempt to use the Plantronics BT300 headset. I will next turn off Dragon Dictate, and see if Mavericks Dictate will accept the BT300 unit.
I have also a wired Plantronics headset, and will unhook the bluetooth headset and plug in the wired headset and see if that combination works any better.
Just to complicate things, I have also installed Parallels Desktop for Mac (and keep it updated to the current version and update level for Mavericks). Parallels has a virtual audio adapter, and I have NOT yet tried using either version of Dictate with a Windows guest operating system.
Advice and comments are appreciated.

Can the new Macbook Air and Macbook Pro with retina display that run OS X Lion or Mountain Lion run Windows through bootcamp?

I was just wondering.. since the new macs have omitted the optical disk drives is it still possible to install windows on a mac running OSX Lion and Mountain Lion?

Yes. Read the Boot Camp Install instructions for the MacBook Air which also does not have an optical drive. Put Windows onto a thumb drive or external optical drive and make these bootable. Then follow the instructions for installation from the thumb drive or external optical drive.
http://www.apple.com/support/bootcamp/

Can the ACE bind (probe) to a Openldap with ssl?

Similar Messages

Maybe you are looking for