Challenges and limitation with ECM ?

Hi,
We are evaluating ECM (ERP2004) to automate our compensation process. The following limitations hinder us from pursuing with ECM. I wonder if any of you have experienced with these limitations and managed to overcome via some workaround solutions :
1. Salary adjustments or bonuses for a staff may be allocated from 2 or more source of budget. Example, the staff bonus (represented by Budget Type = Bonus) may be paid partially by the organization unit's budget and a central budget (another source of fund). It is not possible to allocated specific amount from the different source of budgets into a particular budget type (in this case Bonus) to be allocated to staff.
2. Our budget needs to be linked to the allocation distribution rule specified in IT27 (Cost Distribution). However, we find no linkages between the budget type with the cost distribution. Example, a staff is funded by 75% WBS A (belonging to Org Unit A) and 25% WBS B (belonging to Org Unit B). When a bonus amount is allocated to the staff, the budget from the respective Org Unit should be deducted accordingly from the budgets of the 2 Org Units.
3. A budget belonging to an Org Unit may be used to fund the bonus of a personnel or staff belonging to another Org Unit (Example, the staff belongs to another Org Unit but he is rendering his service to this Org Unit). This seems impossible with ECM.
4. Workflow, in our setup, we need 2 levels of approval. ECM only supports 1 level, and there is no underlying workflow template for us to further enhance or customize.
5. No audit trail to view who had changed the various adjustments along the way.
Will be very thankful if you can share some experiences with regards to the above challenges.
Regards
Kir Chern

Hi Kir
I didn't get a chance to test it out but I would try to create a work around based on:
1. create 2 comp wage types (one for each budget type)
2. create 2 comp wage types and custom guidelines to pick on the IT 27 %
3. this needs some business process change to ensure the funding and distribution are synced.
4. you can get experienced workflow programmer to fix it
5. I need to check this one

Similar Messages

  • Tolerance Limits with Date and quantity

    Hi Experts,
    We would like to set the GR Tolerance Limits with Date and qty.
    how to set the Tolerance Limits for Date and quantity..??
    if we created PO 100qty and date 01-05-009.
    if we receive the goods on 20-04-2009 and 50qty...
    For GR .. Migo should be give error message..
    where can i set this Tolerance Limit Configuration.... can u please explin me..
    Thanks in Advance,
    Anthyodaya .

    Go to SPRO - Material Managemetn - LIV - Invoice Block - Set Tolerence limit.
    USe company code and maintain a value for ST
    ST: Date variance (value x days)
    The system calculates for each item the product of amount * (scheduled delivery date - date invoice entered) and compares this product with the absolute upper limit defined. This allows relatively high schedule variances for invoice items for small amounts, but only small schedule variances for invoice items for large amounts.

  • Set up Tolerance Limits with Date and quantity for GR

    Hi Experts,
    We would like to set the GR Tolerance Limits with Date and qty.
    how to set the Tolerance Limits for Date and quantity..??
    if we created PO 100qty and date 01-05-009.
    if we receive the goods on 20-04-2009 and 50qty...
    For GR .. Migo should be give error message..
    where can i set this Tolerance Limit Configuration.... can u please explin me..
    Thanks in Advance,
    Anthyodaya .

    hi,
    You can do one thing...
    Activate the SLED check...
    BY this when the date goes earlier or late from the expected date, then system show you the messages like:
    1. Earliest delivery date is DD.MM.YY..
    2. Expected delivery date was DD.MM.YY...
    In std sap system, the second message is already error message...so when get late delivery then it'll not be possible to maintain the GR...
    For the qty varinace, activate the quantity variance either via over/under delievery tolerances..or
    Via SPRO settings...
    SPRO >> MM >> LIV >> Invoice block >> check for qty tolerances and make the settings as per your requirement...
    Regards
    Priyanka.P

  • My husband's only way to communicate is with ipad.  He now has double-vision.  The icons are too small.  Is Apple planning on accommodating us boomers and handicapped with a larger icons? Zooming doesn't help becuase of limited manual dexterity.  Thanks

    My husband's only way to communicate is with ipad.  He now has double-vision.  The icons are too small.  Is Apple planning on accommodating us boomers and handicapped with a larger icons? Zooming doesn't help because it's not a permanent setting and he can't change it too meet his needs because of limited manual dexterity.  I understand and appreciate the desire for consistency, couldn't they make a two or three size option setting. Small, Medium, Large and maybe Xlarge?

    Thanks.  Tried it.  The size of icons is great but now the part of the screen is missing.  For example, he likes going into his  music app, yes, it was easier for him to see and select, but once in the app he couldn't see the sides, so he couldn't select song without a double-tap to get it out of zoom.  I will see if I can arrange his pages so that all icons show.  This is a sort of work around.  Larger icons would be a better solution.  My husbands illness makes him akin to a person with ALS, so his ipad is his prized possession.

  • Limiting Tables and charts with Measures having RelativeValue

    Hallo,
    I just try to do some difficult stuff with the WebI Rich Client 4.1.
    There are two measures for each month on a time line showing year and month. Thus, I have a dimension for year and month and two different measures for each year/month combination.
    Now, e.g. I want to compare these two measures having same month and different years, say the current year and the year before. Please see the table below for a visible figure.
    I used RelativeValue([measure prior year_1];([year/month]);-12) for [measure prior year] in order to compare one 1 year older measure with the other measure.
    year/month
    measure prior year
    measure current year
    2010/10
    2010/11
    2010/12
    2011/01
    2011/02
    2011/03
    2011/04
    2011/05
    2011/06
    2011/07
    2011/08
    2011/09
    2011/10
    439
    97
    2011/11
    7.294
    2.712
    2012/02
    20.496
    13.397
    2012/05
    21.859
    12.636
    2013/01
    36.325
    27.286
    2014/08
    26.894
    17.425
    There are no values for [measure current year] before 2011/10. But, there are values for [measure prior year_1] before 2011/10. [measure prior year] is actually from 2010/10, 2010/11 and so on, as defined with RelativeValue.
    No problem here. Everything works fine. But, now, I want to start the table with the first row where [measure prior year] is not null while leaving measure current year unchanged. Just cut the table and start with 2011/10...
    And here we get the problem. Hence, RelativeValue references to values before 2011/10 all these reference will disappear for [measure prior year].
    The same is with charts. I couldn't find a way to reference to values that exist by the query but which are not displayed in a table or a chart!
    What I need is a way to reference to values which are not present in a single table or chart but in the report. I already fiddled with the display options (null values, without dimension etc.) of tables. But, no way.
    How could a accomplish this task?
    Any idea of something like "hiding" unwanted rows/bars results in "loss of data".
    Thanks for any help
    Matthias

    Well... if you think and try long enough, you may find the solution .
    The core problem is to reference to queried values not shown in the table/chart. And there IS a solution.
    Just use...
    NoFilter(RelativeValue([measure prior year_1];([year/month]);-12))
    ... instead of
    RelativeValue([measure prior year_1];([year/month]);-12)
    NoFilter enables RelativeValue to reference to values not present in a table or chart, but available in the report .
    From there on, you can define e.g. the starting point of the category axis of a chart by defining a local filter without losing values to be referenced .

  • Install instructions for Search Modeler and integrating with Apps 11i

    Below are all the steps I took for creating integrating Search Modeler with an Oracle E-Business Suite 11.5.10.2 ATG RUP 7 instance called ERNIE.
    Much thanks to Oracle Support ( Rajesh Ghosh, Vikas Soolapani and Roger Ford), as this simply wouldn't have been possible without them.
    There are a few things in this document that may not be pertinent to your environment if you're doing this. I've made attempts to clarify those possibly optional sections in the documentation.
    I've broken the document down into the following multiple parts
    o Setting up a new RedHat 4.8 x86 server called ausSEARCHdev (The server is in AUStin, TX, is dedicated to SEARCH, and is for our DEV environment)
    o SES (Secure Enterprise Search 10.1.8.2 install
    o SES 10.1.8.4 patchset install
    o SES CPU patch apply
    o Standalone OC4J and ADF installation
    o Search Modeler installation and configuration
    o Configure ERNIE Apps instance to be on valid self-signed SSL certificate
    o Import ERNIE SSL certificate into SES and Search Modeler
    using aussearchdev initially
    rh4 x86, default oracle build
    ** htop and collectl are open source free performance monitoring packages we utilize**
    --start
    install htop and collectl
    wget http://dag.wieers.com/rpm/packages/htop/htop-0.7-1.el4.rf.i386.rpm
    rpm -ivh htop-0.7-1.el4.rf.i386.rpm
    wget http://downloads.sourceforge.net/project/collectl/collectl/collectl-3.4.0-4/collectl-3.4.0-4.noarch.rpm?use_mirror=voxel
    rpm -ivh collectl-3.4.0-4.noarch.rpm
    chkconfig collectl on
    service collectl start
    **We still need to install the necessary rpms so that collectl logs are compressed
    --end
    useradd -u 501 oracle
    groupadd -g 504 dba
    usermod -G 504 oracle
    verification:
         [root@aussearchdev ~]# su - oracle
         [oracle@aussearchdev ~]$ id
         uid=501(oracle) gid=501(oracle) groups=501(oracle),504(dba)
    passwd oracle
    ** /mnt/oraclebackup is a network dumpspot we use to hold Software installs, RPMs, etc
    ** /mnt/rpms is a network dumpspot we use to hold ISOs for OS software such as Redhat Linux
    mkdir /mnt/oraclebackup
    mkdir /mnt/rpms
    add the following to /etc/fstab
    XXXXXXX:/patches/oraclebackup /mnt/oraclebackup nfs defaults,hard,nolock 0 0
    XXXXXXX:/esxpress/nfs /mnt/rpms nfs rw,addr=XXX.XXX.XXX.XXX 0 0
    mount /mnt/rpms
    Next need to install various oracle needed RPMs.
    cd /mnt/rpms/rh40_upd8/RedHat/RPMS/
    rpm -ivh perl-Compress-Zlib-1.42-1.el4.i386.rpm
    rpm -ivh libaio-devel-0.3.105-2.i386.rpm
    rpm -ivh sysstat-5.0.5-25.el4.i386.rpm
    rpm -ivh unixODBC-devel-2.2.11-1.RHEL4.1.i386.rpm
    service collectl restart
    cd /tmp
    wget http://oss.oracle.com/el4/oracle-validated/oracle-validated-1.0.0-18.el4.i386.rpm
    rpm -ivh oracle-validated-1.0.0-18.el4.i386.rpm
    Now we should have all the RPMs we need.
    cd /etc/sysconfig/oracle-validated
    ./oracle-validated-verify
    cd /var/log/oracle-validated/results
    more orakernel.log
    uname -a
    should return 2.6.9 or higher
    rpm -qa|grep gcc-
    should return 3.4.3 or higher
    rpm -qa|grep glibc
    should return 2.3.4-2.9 or higher
    rpm -qa|grep make
    should return 3.80 or higher
    rpm -qa|grep binutils
    should return 2.15.92.0.2 or higher
    rpm -qa|grep openmotif
    should return 2.2.3-9.RHEL4.1 or higher
    rpm -qa|grep compat-db
    should return 4.1.25-9 or higher
    rpm -qa|grep setarch
    should return 1.6-1 or higher
    cat /proc/sys/kernel/sem
    should return 250 32000 100 128 or higher (250 32000 100 142 in our case)
    cat /proc/sys/kernel/shmall (1073741824 in our case)
    should return 2097152 or higher
    cat /proc/sys/kernel/shmmax
    should return half the size of physical memory (4294967295 in our case - NO LARGER on 32-bit OS)
    cat /proc/sys/kernel/shmmni
    should return 4096
    cat /proc/sys/fs/file-max
    should return 65536 (327679 in our case)
    cat /proc/sys/net/ipv4/ip_local_port_range
    should return 1024 65000
    values in /etc/security/limits.conf set by oracle-validated rpm, no changes necessary
    add the following line to /etc/pam.d/login
    session required /lib/security/pam_limits.so
    add the following to /etc/profile
    if [ $USER = "oracle" ]; then
    if [ $SHELL = "/bin/ksh" ]; then
    ulimit -p 16384
    ulimit -n 65536
    else
    ulimit -u 16384 -n 65536
    fi
    fi
    mkdir -p /d01/oracle
    chmod 777 /d01/oracle
    init 6 the box (aka reboot)
    Time to start the SES 10.1.8.2 installer
    running SES 10.1.8.2 installer
    as oracle
    cd /mnt/oraclebackup/deathstar_patches/SES/SES10182
    ./runInstaller
    search server name sesprod
    administrative password XXXXXXXX for dev,
    http port 7777
    destination path /d01/oracle/10.1.8/sesdev (dev)
    data storage path /d01/oracle/sesdevdata (dev)
    next
    inventory /d01/oracle/oraInventory
    dba group
    run orainstroot.sh as requested
    continue
    all tests should pass, continue
    finished clean
    tried logging in to admin console at http://aussearchdev:7777/search/admin - worked fine
    tried bringing up search query at http://aussearchdev:7777/search/query/search - worked fine
    Now we need to get to 10.1.8.4 of SES
    (yes, you need to keep the system up)
    cd /mnt/oraclebackup/deathstar_patches/SES/SES10184/ses_10184pst_linux/
    ./runInstaller
    Destination, choose sesdev
    Next
    Patchset successful
    tried logging in to admin console at http://aussearchdev:7777/search/admin - worked fine
    tried bringing up search query at http://aussearchdev:7777/search/query/search - worked fine
    Apply CPU Patch to SES
    CPU JAN 10 says patch 9119261 is required - but patch requires extended support contract
    CPU OCT 09 says patch 8836540 is required - but patch requires extended support contract
    CPU JUL 09 says patch 8534394 is required - but patch requires extended support contract
    CPU APR 09 says patch 8290534 is required - and you can actually download it
    Need opatch from 6880880
    cp -r /mnt/oraclebackup/deathstar_patches/SES/CPUAPR09/OPatch $ORACLE_HOME
    export PATH=$ORACLE_HOME/OPatch:$PATH
    shut down everything
    cd $ORACLE_HOME/bin
    ./searchctl stopall
    cd /mnt/oraclebackup/deathstar_patches/SES/CPUAPR09/8290534
    opatch apply
    cd $ORACLE_HOME/cpu/CPUApr2009
    **Note: your sys password is what you set for your administrative password above
    sqlplus "sys/XXXXXX" as sysdba;
    startup
    @catcpu
    @?/rdbms/admin/utlrp
    shutdown immediate
    exit
    cd /d01/oracle/10.1.8/sesdev/cpu/view_recompile/
    sqlplus "sys/XXXXXXX" as sysdba;
    startup upgrade;
    @view_recompile_jan2008cpu.sql
    @?/rdbms/admin/utlrp
    shutdown immediate
    cd /d01/oracle/10.1.8/sesdev/jdk/jre/lib/ext
    mv mail.jar $HOME/mail.jar.backup02222010
    mv mailapi.jar $HOME/mailapi.jar.back02222010
    cp /d01/oracle/10.1.8/sesdev/search/lib/mail.jar .
    SES 10.1.8.4 is now installed and updated with latest available CPU
    tried logging in to admin console at http://aussearchdev:7777/search/admin - worked fine
    tried bringing up search query at http://aussearchdev:7777/search/query/search - worked fine
    we're going to go with the standalone OC4j 10.1.3.3 and Oracle ADF 10.1.3.3 method
    The URLs for these products are
    http://blogs.oracle.com/ebssearch/2009/10/available_now_oracle_search_modeler_11_for_oracle_e-business_suite_11i.html
    and specifically
    OC4J - http://download.oracle.com/otn/java/oc4j/101330/oc4j_extended_101330.zip
    ADF - http://www.oracle.com/technology/software/products/jdev/htdocs/adfinstaller10133.html
    OC4J install
    First you need to have Java 1.5 on the machine. Latest is 1.5.0_22. Package is in /mnt/oraclebackup/deathstar_patches/SES
    as root on aussearchdev
    cd /usr/local
    cp /mnt/oraclebackup/deathstar_patches/SES/jdk-1_5_0_22-linux-i586.bin .
    chmod 700 jdk-1_5_0_22-linux-i586.bin
    ./jdk-1_5_0_22-linux-i586.bin
    yes
    install OC4J just by copying over the directory
    as oracle on aussearchdev
    mkdir -p /d01/oracle/oc4j
    cd /d01/oracle/oc4j
    cp -r /mnt/oraclebackup/deathstar_patches/SES/oc4j/* .
    ADF install
    vi /mnt/oraclebackup/deathstar_patches/SES/adf/adfinstaller.properties
    change the following
    OracleHome = /mnt/oraclebackup/deathstar_patches/SES/adf
    DesHome = /d01/oracle/oc4j/
    type = OC4J
    as root
    cd /usr/bin
    rm java
    (yes)
    ln -s /usr/local/jdk1.5.0_22/bin/java
    su - oracle
    java -version     should now return 1.5.0_22
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    cd /mnt/oraclebackup/deathstar_patches/SES/adf
    java -jar runinstaller.jar -version
    returns The version for the ADF libraries being installed is 10.1.3.41.57 - yes, that is apparently 10.1.3.3.
    java -jar runinstaller.jar adfinstaller.properties
    output looks good, do not be concerned by
    WARNING: 'Could not delete: /d01/oracle/oc4j/BC4J/redist/bc4j' whilst deleting bc4j application
    WARNING: 'Could not delete: /d01/oracle/oc4j/BC4J/redist/datatags' whilst deleting datatags application
    as it was trying to delete the old version that didn't exist
    Start OC4J
    as oracle on aussearchdev
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export ORACLE_HOME=/d01/oracle/oc4j
    cd $ORACLE_HOME/bin
    ./oc4j -start
    you will be prompted for password - we're setting it. use XXXXXXXXXX
    after it's up, kill it (ctrl-c) and restart it with
    nohup ./oc4j -start &
    last lines in nohup.out is
    Starting OC4J from /d01/oracle/oc4j/j2ee/home ...
    10/02/23 03:22:38 Oracle Containers for J2EE 10g (10.1.3.3.0) initialized
    So now on to search modeler installation, going by Installation steps in Note 781366.1
    8326128 - This is not a patch to be applied to the Apps, keep reading
    as oracle on aussearchdev
    cd /mnt/oraclebackup/deathstar_patches/SES/8326128
    mkdir -p /d01/oracle/oc4j/uploaded
    vi build.properties, changing
    installation.type=OC4J
    oracle.home=/d01/oracle/oc4j
    deploy.server=aussearchdev.domainname.com
    deploy.port=23791
    web.port=7777
    password=XXXXXXXXX
    extra.classpath=/d01/oracle/oc4j/uploaded
    now set the following environment values in your ssh session
    export ORACLE_HOME=/d01/oracle/oc4j
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export PATH=$ORACLE_HOME/ant/bin:$ORACLE_HOME/bin:$PATH
    ant main
    whole bunch of stuff to screen, errors due to undeploy something that doesn't exist. Finished after a minute with
    BUILD SUCCESSFUL
    Total time: 58 seconds
    Now on to post install steps
    restart OC4j
    cd $ORACLE_HOME/bin
    ./modeler.sh -shutdown -port 23791 -password r*l*r*0*
    export ORACLE_HOME=/d01/oracle/oc4j
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export PATH=$ORACLE_HOME/ant/bin:$ORACLE_HOME/bin:$PATH
    nohup ./modeler.sh -start &
    end of nohup.out should show
    Starting OC4J from /d01/oracle/oc4j/j2ee/home ...
    Try going to http://aussearchdev:8888/modeler/faces/ModelerHome.jsp
    Should get login screen, but wait, we haven't installed Oracle Apps interface yet...
    Next let's do the Apps side of things
    Going by note 953378.1
    Using ERNIE (a development instance of E-Business Suite running 11.5.10.2 ATG RUP 7)
    as applmgr on ausernieapp (ausernieapp is our app tier)
    shut down apps services
    apps patch 8225631
    verify all the pre-req patches are in ERNIE
    select * from ad_bugs where bug_number = '5903765';
    select * from ad_bugs where bug_number = '6372396';
    select * from ad_bugs where bug_number = '3219567';
    select * from ad_bugs where bug_number = '3264822';
    select * from ad_bugs where bug_number = '3261254';
    select * from ad_bugs where bug_number = '5161676';
    select * from ad_bugs where bug_number = '3036401';
    select * from ad_bugs where bug_number = '3263588';
    select * from ad_bugs where bug_number = '3264818';
    select * from ad_bugs where bug_number = '3218526';
    select * from ad_bugs where bug_number = '3263645';
    select * from ad_bugs where bug_number = '4206794';
    select * from ad_bugs where bug_number = '3262486';
    select * from ad_bugs where bug_number = '3261243';
    select * from ad_bugs where bug_number = '2614213';
    select * from ad_bugs where bug_number = '3262159';
    select * from ad_bugs where bug_number = '2819091';
    select * from ad_bugs where bug_number = '3412795';
    patch went in smooth
    Log in to ERNIE Apps GUI as sysadmin user responsibility
    Give users such as sysadmin FND Search Crawler responsibility
    Go to system profile options, set
    set FND: Search Enabling Flag to Y at site level
    as applmgr on ausernieapp
    cd /d01/oracle/ernieappl/fnd/11.5.0/patch/115/sql
    sqlplus apps/$APPS_PWD @AFSRCHCF
    Enter SES endpoint URL [e.g. http://ap637atg.us.oracle.com:7780]: http://aussearchdev.domainname.com:7777
    Enter Apps Admin username [e.g. sysadmin]: sysadmin
    Enter Apps Admin password: sysadmin_password
    Enter SES Admin username [e.g. eqsys]: eqsys
    Enter SES Admin password: eqsyspassword <-- This is the same as sys's password
    on aussearchdev as oracle
    had to kill modeler and start all the processes, so
    kill -9 the modeler oc4j process, then
    cd $ORACLE_HOME/bin
    ./searchctl startall
    enter the password when prompted
    in IE browser go to
    http://aussearchdev.domainname.com:7777/search/admin
    log in with eqsys password
    global settings tab
    identity management setup
    click circle next to oracle.search.plugin.security.identity.ebs.EBS12IdentityPliginMgr
    (yes, we're going with 12 even though we use Oracle Apps 11i)
    http end point https://ausernieapp.domainname.com:8443/webservices/AppSearch/SecurityService
    username sysadmin
    password XXXXXXX
    finish
    Global Settings
    Federation Trusted Entitites
    ####entity name sysadmin
    ####Entity Password XXXXXXXX
    According to web conference with Oracle, this should NOT be eqsys but instead be sysadmin from above.
    Select the Use Entity Plug-in for authentication check box
    add
    Trying to go to http://aussearchdev.domainname.com:7777/search/query/search and login (sysadmin / password)
    stop midtier on both SES and Apps
    cd $ORACLE_HOME/bin
    ./searchctl stopall
    ./adstpall.sh apps/$APPS_PWD on EBS app tier
    start midtier on both SES and Apps
    cd $ORACLE_HOME/bin
    ./searchctl startall
    ./adstrtal.sh apps/$APPS_PWD on EBS app tier
    Now try and log in to Oracle SES user interface to verify the configuration
    http://aussearchdev.domainname.com:7777/search/query
    Now start up modeler again
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export ORACLE_HOME=/d01/oracle/oc4j
    export PATH=$ORACLE_HOME/bin:$PATH
    cd $ORACLE_HOME/bin
    nohup ./modeler.sh -start &
    Works now.
    Now go to http://aussearchdev.domainname.com:8888/modeleradmin/AdminHome.jsp log in as oc4jadmin/XXXXXXX
    Configure new target
    Target Type 11i
    Description ERNIE
    Name ERNIE
    EBS Database Host Name auserniedb
    EBS Database Port 1521
    EBS Database SID ERNIE
    username apps
    password XXXXXXXXx
    oc4jadmin XXXXXXXx
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export ORACLE_HOME=/d01/oracle/oc4j
    export PATH=$ORACLE_HOME/bin:$PATH
    cd $ORACLE_HOME/j2ee/home
    java -jar admin_client.jar deployer:oc4j:aussearchdev oc4jadmin XXXXXXXXX -addDataSourceConnectionPool -name "ERNIE2-pool" -factoryClass "oracle.jdbc.pool.OracleDataSource" -dbUser "apps" -dbPassword "XXXXXXX" -url "jdbc:oracle:thin:@auserniedb.domainname.com:1521:ERNIE" -applicationName appsearch
    java -jar admin_client.jar deployer:oc4j:aussearchdev oc4jadmin XXXXXXX -addManagedDataSource -name "ERNIEDS" -jndiLocation "jdbc/ERNIEDS" -connectionPoolName "ERNIE2-pool" -applicationName appsearch
    http://aussearchdev.domainname.com:8888/modeler/faces/ModelerHome.jsp
    So, creating a self signed SSL certificate for ERNIE EBS instance (this will not work if you use an SSL certificate for another server like say, PROD)
    doing this on ausernieapp
    openssl genrsa -des3 -out ausernieapp.key 1024
    PEM key is ausernieapp
    openssl req -new -key ausernieapp.key -out ausernieapp.csr
    PEM key is ausernieapp
    Country US
    State Texas
    Locality Austin
    Organization Name Corporation
    Organizational Unit Name Information Technology
    Common Name ausernieapp.domainname.com
    Email address [email protected]
    No challenge password
    No optional company name
    Now let's remove the passphrase from the key
    cp ausernieapp.key ausernieapp.key.orig
    openssl rsa -in ausernieapp.key.orig -out ausernieapp.key
    Now let's generate a self-signed certificate
    openssl x509 -req -days 1000 -in ausernieapp.csr -signkey ausernieapp.key -out ausernieapp.crt
    Install the private key and certificate
    cd $IAS_ORACLE_HOME/Apache/Apache/conf/ssl.crt
    cp server.crt server.crt.backup.03102010
    chown applmgr:applmgr server.crt.backup.03102010
    cp $HOME/ausernieapp.crt /d01/oracle/ernieora/new/iAS/Apache/Apache/conf/ssl.crt/server.crt
    cd $IAS_ORACLE_HOME/Apache/Apache/conf/ssl.key/
    cp server.key server.key.backup.03102010
    cp $HOME/ausernieapp.key /d01/oracle/ernieora/new/iAS/Apache/Apache/conf/ssl.key/server.key
    chown applmgr:applmgr server.key.backup.03102010
    bounce apache as applmgr
    cd /d01/oracle/erniecomn/admin/scripts/ERNIE_ausernieapp
    ./adapcctl.sh stop
    ./adapcctl.sh start
    In IE
    https://ausernieapp.domainname.com:8443
    Continue
    Click on Certificate Error next to URL bar
    Install Certificate -> Next-> Place all certificates in the following store -> trusted root certificate authorities ->finish
    close browser, back to https://ausernieapp.domainname.com:8443
    no errors,
    Next step will be to import key into the SES and Search modelers
    as oracle on aussearchdev
    cd /d01/oracle/10.1.8/sesdev/jdk/jre/lib/security/
    cp cacerts cacerts.backup.03102010
    scp root@ausernieapp:/root/ausernieapp.crt .
    export LANG=c
    export PATH=$ORACLE_HOME/jdk/bin:$PATH
    keytool -keystore ./cacerts -storepass changeit -alias rootausernieapp -import -trustcacerts -file ausernieapp.crt
    --output
    Owner: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Issuer: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Serial number: b4e92089cf73076f
    Valid from: Wed Mar 10 13:22:38 CST 2010 until: Tue Dec 04 13:22:38 CST 2012
    Certificate fingerprints:
    MD5: 2C:6B:EE:1A:63:6D:XX:A6:05:90:F6:XX:DD:88:F7:80
    SHA1: F8:DC:E5:2A:3E:68:XX:E1:EA:E4:75:AE:CC:4F:4A:10:2F:8A:FE:9B
    Trust this certificate? [no]: yes
    Certificate was added to keystore
    Now load our cert
    keytool -keystore ./cacerts -import -trustcacerts -file ausernieapp.crt
    keytool -list -v -keystore ./cacerts now shows
    Alias name: rootausernieapp
    Creation date: Mar 10, 2010
    Entry type: trustedCertEntry
    Owner: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Issuer: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Serial number: b4e92089cf73076f
    Valid from: Wed Mar 10 13:22:38 CST 2010 until: Tue Dec 04 13:22:38 CST 2012
    Certificate fingerprints:
    MD5: 2C:6B:EE:1A:63:6D:CB:XX:05:90:F6:78:DD:88:F7:80
    SHA1: F8:DC:E5:2A:3E:68:9C:CE:EA:4E:75:AE:CC:FA:9E:10:2F:8A:FE:9B
    Now we need to load it into the search modeler keystore
    as root on aussearchdev
    export JAVA_HOME=/usr/local/jdk1.5.0_22/
    export PATH=$JAVA_HOME/bin:$PATH
    cd /usr/local/jdk1.5.0_22/jre/lib/security/
    scp root@ausernieapp:/root/ausernieapp.crt .
    output
    keytool -keystore ./cacerts -import -trustcacerts -file ausernieapp.crt
    Enter keystore password: changeit
    Owner: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Issuer: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Serial number: b4e92089cf73076f
    Valid from: Wed Mar 10 13:22:38 CST 2010 until: Tue Dec 04 13:22:38 CST 2012
    Certificate fingerprints:
    MD5: 2C:6B:EE:1A:63:6D:CB:A1:05:90:F6:78:DD:88:F7:80
    SHA1: F8:DC:E5:2A:3E:68:9C:CE:EA:4E:75:AE:CC:4F:9E:10:2F:8A:FE:9B
    Trust this certificate? [no]: yes
    Certificate was added to keystore
    [root@aussearchdev security]#
    output
    For troubleshooting, if you go to end of /d01/oracle/10.1.8/sesdev/search/data/config/crawler.dat
    you can modify the logLevel from the default of 4 to 2 to get better debug data. No services need to be restarted, it will become active with the next crawl.
    While talking with Oracle, they mentioned the following patches
    The patches identified 8321527 and 7586924 are SES patches to help with indexing
    They also identified patch 9103851 which is an apps patch dealing with responsibilities <-- This is not yet available
    Applying patch 7586924
    as oracle on aussearchdev
    cd $ORACLE_HOME/bin
    ./searchctl stopall
    cd /mnt/oraclebackup/deathstar_patches/SES/post_patches/7586924
    opatch apply
    cd $ORACLE_HOME/bin
    ./searchctl startall
    sqlplus eqsys/XXXXXX@SESDEV
    define SCH_NAME=EQSYS
    define PROXY_USER=EQPROXY
    define INST_USER=EQ_TEST
    @$ORACLE_HOME/search/admin/eq0pkh.sql
    @$ORACLE_HOME/search/admin/eq0plb.sql
    @$ORACLE_HOME/search/admin/eq0bug_7586924.sql
    cd $ORACLE_HOME/search/data/config/
    cp crawler.dat crawler.dat.backup.03102010
    vi crawler.dat
    We're using the Oracle E-Business Suite R12 crawler, so we will add the line
    USE_IN_MEMORY_QUEUE Oracle E-Business Suite R12
    as the line immediately preceding IMPORT -
    so the end of the file looks like this:
    # system properies: separated by space for multiple system properties or define multiple SYSTEM_PROPERTIES
    # logLevel values: DEBUG(2), INFO(4), WARN(6), ERROR(8), FATAL(10)
    SYSTEM_PROPERTIES -Doracle.search.logLevel=4 -Doracle.search.log=oracle.search.util.Log4jImpl
    USE_IN_MEMORY_QUEUE Oracle E-Business Suite R12
    IMPORT -
    Now on to patch 8321527
    cd /mnt/oraclebackup/deathstar_patches/SES/post_patches/8321527
    cd $ORACLE_HOME/bin
    ./searchctl stopall
    cd -
    opatch apply
    cd $ORACLE_HOME/bin
    ./searchctl startall
    sqlplus eqsys/XXXXXXX@SESDEV
    define SCH_NAME=EQSYS
    define PROXY_USER=EQPROXY
    select object_name from user_objects where status = 'INVALID';
    --should be no rows selected
    @$ORACLE_HOME/search/admin/eq0pkh.sql
    @$ORACLE_HOME/search/admin/eq0plb.sql
    --should be no rows selected
    restart SES
    cd -
    ./searchctl stopall
    ./searchctl startall

    Below are all the steps I took for creating integrating Search Modeler with an Oracle E-Business Suite 11.5.10.2 ATG RUP 7 instance called ERNIE.
    Much thanks to Oracle Support ( Rajesh Ghosh, Vikas Soolapani and Roger Ford), as this simply wouldn't have been possible without them.
    There are a few things in this document that may not be pertinent to your environment if you're doing this. I've made attempts to clarify those possibly optional sections in the documentation.
    I've broken the document down into the following multiple parts
    o Setting up a new RedHat 4.8 x86 server called ausSEARCHdev (The server is in AUStin, TX, is dedicated to SEARCH, and is for our DEV environment)
    o SES (Secure Enterprise Search 10.1.8.2 install
    o SES 10.1.8.4 patchset install
    o SES CPU patch apply
    o Standalone OC4J and ADF installation
    o Search Modeler installation and configuration
    o Configure ERNIE Apps instance to be on valid self-signed SSL certificate
    o Import ERNIE SSL certificate into SES and Search Modeler
    using aussearchdev initially
    rh4 x86, default oracle build
    ** htop and collectl are open source free performance monitoring packages we utilize**
    --start
    install htop and collectl
    wget http://dag.wieers.com/rpm/packages/htop/htop-0.7-1.el4.rf.i386.rpm
    rpm -ivh htop-0.7-1.el4.rf.i386.rpm
    wget http://downloads.sourceforge.net/project/collectl/collectl/collectl-3.4.0-4/collectl-3.4.0-4.noarch.rpm?use_mirror=voxel
    rpm -ivh collectl-3.4.0-4.noarch.rpm
    chkconfig collectl on
    service collectl start
    **We still need to install the necessary rpms so that collectl logs are compressed
    --end
    useradd -u 501 oracle
    groupadd -g 504 dba
    usermod -G 504 oracle
    verification:
         [root@aussearchdev ~]# su - oracle
         [oracle@aussearchdev ~]$ id
         uid=501(oracle) gid=501(oracle) groups=501(oracle),504(dba)
    passwd oracle
    ** /mnt/oraclebackup is a network dumpspot we use to hold Software installs, RPMs, etc
    ** /mnt/rpms is a network dumpspot we use to hold ISOs for OS software such as Redhat Linux
    mkdir /mnt/oraclebackup
    mkdir /mnt/rpms
    add the following to /etc/fstab
    XXXXXXX:/patches/oraclebackup /mnt/oraclebackup nfs defaults,hard,nolock 0 0
    XXXXXXX:/esxpress/nfs /mnt/rpms nfs rw,addr=XXX.XXX.XXX.XXX 0 0
    mount /mnt/rpms
    Next need to install various oracle needed RPMs.
    cd /mnt/rpms/rh40_upd8/RedHat/RPMS/
    rpm -ivh perl-Compress-Zlib-1.42-1.el4.i386.rpm
    rpm -ivh libaio-devel-0.3.105-2.i386.rpm
    rpm -ivh sysstat-5.0.5-25.el4.i386.rpm
    rpm -ivh unixODBC-devel-2.2.11-1.RHEL4.1.i386.rpm
    service collectl restart
    cd /tmp
    wget http://oss.oracle.com/el4/oracle-validated/oracle-validated-1.0.0-18.el4.i386.rpm
    rpm -ivh oracle-validated-1.0.0-18.el4.i386.rpm
    Now we should have all the RPMs we need.
    cd /etc/sysconfig/oracle-validated
    ./oracle-validated-verify
    cd /var/log/oracle-validated/results
    more orakernel.log
    uname -a
    should return 2.6.9 or higher
    rpm -qa|grep gcc-
    should return 3.4.3 or higher
    rpm -qa|grep glibc
    should return 2.3.4-2.9 or higher
    rpm -qa|grep make
    should return 3.80 or higher
    rpm -qa|grep binutils
    should return 2.15.92.0.2 or higher
    rpm -qa|grep openmotif
    should return 2.2.3-9.RHEL4.1 or higher
    rpm -qa|grep compat-db
    should return 4.1.25-9 or higher
    rpm -qa|grep setarch
    should return 1.6-1 or higher
    cat /proc/sys/kernel/sem
    should return 250 32000 100 128 or higher (250 32000 100 142 in our case)
    cat /proc/sys/kernel/shmall (1073741824 in our case)
    should return 2097152 or higher
    cat /proc/sys/kernel/shmmax
    should return half the size of physical memory (4294967295 in our case - NO LARGER on 32-bit OS)
    cat /proc/sys/kernel/shmmni
    should return 4096
    cat /proc/sys/fs/file-max
    should return 65536 (327679 in our case)
    cat /proc/sys/net/ipv4/ip_local_port_range
    should return 1024 65000
    values in /etc/security/limits.conf set by oracle-validated rpm, no changes necessary
    add the following line to /etc/pam.d/login
    session required /lib/security/pam_limits.so
    add the following to /etc/profile
    if [ $USER = "oracle" ]; then
    if [ $SHELL = "/bin/ksh" ]; then
    ulimit -p 16384
    ulimit -n 65536
    else
    ulimit -u 16384 -n 65536
    fi
    fi
    mkdir -p /d01/oracle
    chmod 777 /d01/oracle
    init 6 the box (aka reboot)
    Time to start the SES 10.1.8.2 installer
    running SES 10.1.8.2 installer
    as oracle
    cd /mnt/oraclebackup/deathstar_patches/SES/SES10182
    ./runInstaller
    search server name sesprod
    administrative password XXXXXXXX for dev,
    http port 7777
    destination path /d01/oracle/10.1.8/sesdev (dev)
    data storage path /d01/oracle/sesdevdata (dev)
    next
    inventory /d01/oracle/oraInventory
    dba group
    run orainstroot.sh as requested
    continue
    all tests should pass, continue
    finished clean
    tried logging in to admin console at http://aussearchdev:7777/search/admin - worked fine
    tried bringing up search query at http://aussearchdev:7777/search/query/search - worked fine
    Now we need to get to 10.1.8.4 of SES
    (yes, you need to keep the system up)
    cd /mnt/oraclebackup/deathstar_patches/SES/SES10184/ses_10184pst_linux/
    ./runInstaller
    Destination, choose sesdev
    Next
    Patchset successful
    tried logging in to admin console at http://aussearchdev:7777/search/admin - worked fine
    tried bringing up search query at http://aussearchdev:7777/search/query/search - worked fine
    Apply CPU Patch to SES
    CPU JAN 10 says patch 9119261 is required - but patch requires extended support contract
    CPU OCT 09 says patch 8836540 is required - but patch requires extended support contract
    CPU JUL 09 says patch 8534394 is required - but patch requires extended support contract
    CPU APR 09 says patch 8290534 is required - and you can actually download it
    Need opatch from 6880880
    cp -r /mnt/oraclebackup/deathstar_patches/SES/CPUAPR09/OPatch $ORACLE_HOME
    export PATH=$ORACLE_HOME/OPatch:$PATH
    shut down everything
    cd $ORACLE_HOME/bin
    ./searchctl stopall
    cd /mnt/oraclebackup/deathstar_patches/SES/CPUAPR09/8290534
    opatch apply
    cd $ORACLE_HOME/cpu/CPUApr2009
    **Note: your sys password is what you set for your administrative password above
    sqlplus "sys/XXXXXX" as sysdba;
    startup
    @catcpu
    @?/rdbms/admin/utlrp
    shutdown immediate
    exit
    cd /d01/oracle/10.1.8/sesdev/cpu/view_recompile/
    sqlplus "sys/XXXXXXX" as sysdba;
    startup upgrade;
    @view_recompile_jan2008cpu.sql
    @?/rdbms/admin/utlrp
    shutdown immediate
    cd /d01/oracle/10.1.8/sesdev/jdk/jre/lib/ext
    mv mail.jar $HOME/mail.jar.backup02222010
    mv mailapi.jar $HOME/mailapi.jar.back02222010
    cp /d01/oracle/10.1.8/sesdev/search/lib/mail.jar .
    SES 10.1.8.4 is now installed and updated with latest available CPU
    tried logging in to admin console at http://aussearchdev:7777/search/admin - worked fine
    tried bringing up search query at http://aussearchdev:7777/search/query/search - worked fine
    we're going to go with the standalone OC4j 10.1.3.3 and Oracle ADF 10.1.3.3 method
    The URLs for these products are
    http://blogs.oracle.com/ebssearch/2009/10/available_now_oracle_search_modeler_11_for_oracle_e-business_suite_11i.html
    and specifically
    OC4J - http://download.oracle.com/otn/java/oc4j/101330/oc4j_extended_101330.zip
    ADF - http://www.oracle.com/technology/software/products/jdev/htdocs/adfinstaller10133.html
    OC4J install
    First you need to have Java 1.5 on the machine. Latest is 1.5.0_22. Package is in /mnt/oraclebackup/deathstar_patches/SES
    as root on aussearchdev
    cd /usr/local
    cp /mnt/oraclebackup/deathstar_patches/SES/jdk-1_5_0_22-linux-i586.bin .
    chmod 700 jdk-1_5_0_22-linux-i586.bin
    ./jdk-1_5_0_22-linux-i586.bin
    yes
    install OC4J just by copying over the directory
    as oracle on aussearchdev
    mkdir -p /d01/oracle/oc4j
    cd /d01/oracle/oc4j
    cp -r /mnt/oraclebackup/deathstar_patches/SES/oc4j/* .
    ADF install
    vi /mnt/oraclebackup/deathstar_patches/SES/adf/adfinstaller.properties
    change the following
    OracleHome = /mnt/oraclebackup/deathstar_patches/SES/adf
    DesHome = /d01/oracle/oc4j/
    type = OC4J
    as root
    cd /usr/bin
    rm java
    (yes)
    ln -s /usr/local/jdk1.5.0_22/bin/java
    su - oracle
    java -version     should now return 1.5.0_22
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    cd /mnt/oraclebackup/deathstar_patches/SES/adf
    java -jar runinstaller.jar -version
    returns The version for the ADF libraries being installed is 10.1.3.41.57 - yes, that is apparently 10.1.3.3.
    java -jar runinstaller.jar adfinstaller.properties
    output looks good, do not be concerned by
    WARNING: 'Could not delete: /d01/oracle/oc4j/BC4J/redist/bc4j' whilst deleting bc4j application
    WARNING: 'Could not delete: /d01/oracle/oc4j/BC4J/redist/datatags' whilst deleting datatags application
    as it was trying to delete the old version that didn't exist
    Start OC4J
    as oracle on aussearchdev
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export ORACLE_HOME=/d01/oracle/oc4j
    cd $ORACLE_HOME/bin
    ./oc4j -start
    you will be prompted for password - we're setting it. use XXXXXXXXXX
    after it's up, kill it (ctrl-c) and restart it with
    nohup ./oc4j -start &
    last lines in nohup.out is
    Starting OC4J from /d01/oracle/oc4j/j2ee/home ...
    10/02/23 03:22:38 Oracle Containers for J2EE 10g (10.1.3.3.0) initialized
    So now on to search modeler installation, going by Installation steps in Note 781366.1
    8326128 - This is not a patch to be applied to the Apps, keep reading
    as oracle on aussearchdev
    cd /mnt/oraclebackup/deathstar_patches/SES/8326128
    mkdir -p /d01/oracle/oc4j/uploaded
    vi build.properties, changing
    installation.type=OC4J
    oracle.home=/d01/oracle/oc4j
    deploy.server=aussearchdev.domainname.com
    deploy.port=23791
    web.port=7777
    password=XXXXXXXXX
    extra.classpath=/d01/oracle/oc4j/uploaded
    now set the following environment values in your ssh session
    export ORACLE_HOME=/d01/oracle/oc4j
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export PATH=$ORACLE_HOME/ant/bin:$ORACLE_HOME/bin:$PATH
    ant main
    whole bunch of stuff to screen, errors due to undeploy something that doesn't exist. Finished after a minute with
    BUILD SUCCESSFUL
    Total time: 58 seconds
    Now on to post install steps
    restart OC4j
    cd $ORACLE_HOME/bin
    ./modeler.sh -shutdown -port 23791 -password r*l*r*0*
    export ORACLE_HOME=/d01/oracle/oc4j
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export PATH=$ORACLE_HOME/ant/bin:$ORACLE_HOME/bin:$PATH
    nohup ./modeler.sh -start &
    end of nohup.out should show
    Starting OC4J from /d01/oracle/oc4j/j2ee/home ...
    Try going to http://aussearchdev:8888/modeler/faces/ModelerHome.jsp
    Should get login screen, but wait, we haven't installed Oracle Apps interface yet...
    Next let's do the Apps side of things
    Going by note 953378.1
    Using ERNIE (a development instance of E-Business Suite running 11.5.10.2 ATG RUP 7)
    as applmgr on ausernieapp (ausernieapp is our app tier)
    shut down apps services
    apps patch 8225631
    verify all the pre-req patches are in ERNIE
    select * from ad_bugs where bug_number = '5903765';
    select * from ad_bugs where bug_number = '6372396';
    select * from ad_bugs where bug_number = '3219567';
    select * from ad_bugs where bug_number = '3264822';
    select * from ad_bugs where bug_number = '3261254';
    select * from ad_bugs where bug_number = '5161676';
    select * from ad_bugs where bug_number = '3036401';
    select * from ad_bugs where bug_number = '3263588';
    select * from ad_bugs where bug_number = '3264818';
    select * from ad_bugs where bug_number = '3218526';
    select * from ad_bugs where bug_number = '3263645';
    select * from ad_bugs where bug_number = '4206794';
    select * from ad_bugs where bug_number = '3262486';
    select * from ad_bugs where bug_number = '3261243';
    select * from ad_bugs where bug_number = '2614213';
    select * from ad_bugs where bug_number = '3262159';
    select * from ad_bugs where bug_number = '2819091';
    select * from ad_bugs where bug_number = '3412795';
    patch went in smooth
    Log in to ERNIE Apps GUI as sysadmin user responsibility
    Give users such as sysadmin FND Search Crawler responsibility
    Go to system profile options, set
    set FND: Search Enabling Flag to Y at site level
    as applmgr on ausernieapp
    cd /d01/oracle/ernieappl/fnd/11.5.0/patch/115/sql
    sqlplus apps/$APPS_PWD @AFSRCHCF
    Enter SES endpoint URL [e.g. http://ap637atg.us.oracle.com:7780]: http://aussearchdev.domainname.com:7777
    Enter Apps Admin username [e.g. sysadmin]: sysadmin
    Enter Apps Admin password: sysadmin_password
    Enter SES Admin username [e.g. eqsys]: eqsys
    Enter SES Admin password: eqsyspassword <-- This is the same as sys's password
    on aussearchdev as oracle
    had to kill modeler and start all the processes, so
    kill -9 the modeler oc4j process, then
    cd $ORACLE_HOME/bin
    ./searchctl startall
    enter the password when prompted
    in IE browser go to
    http://aussearchdev.domainname.com:7777/search/admin
    log in with eqsys password
    global settings tab
    identity management setup
    click circle next to oracle.search.plugin.security.identity.ebs.EBS12IdentityPliginMgr
    (yes, we're going with 12 even though we use Oracle Apps 11i)
    http end point https://ausernieapp.domainname.com:8443/webservices/AppSearch/SecurityService
    username sysadmin
    password XXXXXXX
    finish
    Global Settings
    Federation Trusted Entitites
    ####entity name sysadmin
    ####Entity Password XXXXXXXX
    According to web conference with Oracle, this should NOT be eqsys but instead be sysadmin from above.
    Select the Use Entity Plug-in for authentication check box
    add
    Trying to go to http://aussearchdev.domainname.com:7777/search/query/search and login (sysadmin / password)
    stop midtier on both SES and Apps
    cd $ORACLE_HOME/bin
    ./searchctl stopall
    ./adstpall.sh apps/$APPS_PWD on EBS app tier
    start midtier on both SES and Apps
    cd $ORACLE_HOME/bin
    ./searchctl startall
    ./adstrtal.sh apps/$APPS_PWD on EBS app tier
    Now try and log in to Oracle SES user interface to verify the configuration
    http://aussearchdev.domainname.com:7777/search/query
    Now start up modeler again
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export ORACLE_HOME=/d01/oracle/oc4j
    export PATH=$ORACLE_HOME/bin:$PATH
    cd $ORACLE_HOME/bin
    nohup ./modeler.sh -start &
    Works now.
    Now go to http://aussearchdev.domainname.com:8888/modeleradmin/AdminHome.jsp log in as oc4jadmin/XXXXXXX
    Configure new target
    Target Type 11i
    Description ERNIE
    Name ERNIE
    EBS Database Host Name auserniedb
    EBS Database Port 1521
    EBS Database SID ERNIE
    username apps
    password XXXXXXXXx
    oc4jadmin XXXXXXXx
    export JAVA_HOME=/usr/local/jdk1.5.0_22
    export ORACLE_HOME=/d01/oracle/oc4j
    export PATH=$ORACLE_HOME/bin:$PATH
    cd $ORACLE_HOME/j2ee/home
    java -jar admin_client.jar deployer:oc4j:aussearchdev oc4jadmin XXXXXXXXX -addDataSourceConnectionPool -name "ERNIE2-pool" -factoryClass "oracle.jdbc.pool.OracleDataSource" -dbUser "apps" -dbPassword "XXXXXXX" -url "jdbc:oracle:thin:@auserniedb.domainname.com:1521:ERNIE" -applicationName appsearch
    java -jar admin_client.jar deployer:oc4j:aussearchdev oc4jadmin XXXXXXX -addManagedDataSource -name "ERNIEDS" -jndiLocation "jdbc/ERNIEDS" -connectionPoolName "ERNIE2-pool" -applicationName appsearch
    http://aussearchdev.domainname.com:8888/modeler/faces/ModelerHome.jsp
    So, creating a self signed SSL certificate for ERNIE EBS instance (this will not work if you use an SSL certificate for another server like say, PROD)
    doing this on ausernieapp
    openssl genrsa -des3 -out ausernieapp.key 1024
    PEM key is ausernieapp
    openssl req -new -key ausernieapp.key -out ausernieapp.csr
    PEM key is ausernieapp
    Country US
    State Texas
    Locality Austin
    Organization Name Corporation
    Organizational Unit Name Information Technology
    Common Name ausernieapp.domainname.com
    Email address [email protected]
    No challenge password
    No optional company name
    Now let's remove the passphrase from the key
    cp ausernieapp.key ausernieapp.key.orig
    openssl rsa -in ausernieapp.key.orig -out ausernieapp.key
    Now let's generate a self-signed certificate
    openssl x509 -req -days 1000 -in ausernieapp.csr -signkey ausernieapp.key -out ausernieapp.crt
    Install the private key and certificate
    cd $IAS_ORACLE_HOME/Apache/Apache/conf/ssl.crt
    cp server.crt server.crt.backup.03102010
    chown applmgr:applmgr server.crt.backup.03102010
    cp $HOME/ausernieapp.crt /d01/oracle/ernieora/new/iAS/Apache/Apache/conf/ssl.crt/server.crt
    cd $IAS_ORACLE_HOME/Apache/Apache/conf/ssl.key/
    cp server.key server.key.backup.03102010
    cp $HOME/ausernieapp.key /d01/oracle/ernieora/new/iAS/Apache/Apache/conf/ssl.key/server.key
    chown applmgr:applmgr server.key.backup.03102010
    bounce apache as applmgr
    cd /d01/oracle/erniecomn/admin/scripts/ERNIE_ausernieapp
    ./adapcctl.sh stop
    ./adapcctl.sh start
    In IE
    https://ausernieapp.domainname.com:8443
    Continue
    Click on Certificate Error next to URL bar
    Install Certificate -> Next-> Place all certificates in the following store -> trusted root certificate authorities ->finish
    close browser, back to https://ausernieapp.domainname.com:8443
    no errors,
    Next step will be to import key into the SES and Search modelers
    as oracle on aussearchdev
    cd /d01/oracle/10.1.8/sesdev/jdk/jre/lib/security/
    cp cacerts cacerts.backup.03102010
    scp root@ausernieapp:/root/ausernieapp.crt .
    export LANG=c
    export PATH=$ORACLE_HOME/jdk/bin:$PATH
    keytool -keystore ./cacerts -storepass changeit -alias rootausernieapp -import -trustcacerts -file ausernieapp.crt
    --output
    Owner: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Issuer: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Serial number: b4e92089cf73076f
    Valid from: Wed Mar 10 13:22:38 CST 2010 until: Tue Dec 04 13:22:38 CST 2012
    Certificate fingerprints:
    MD5: 2C:6B:EE:1A:63:6D:XX:A6:05:90:F6:XX:DD:88:F7:80
    SHA1: F8:DC:E5:2A:3E:68:XX:E1:EA:E4:75:AE:CC:4F:4A:10:2F:8A:FE:9B
    Trust this certificate? [no]: yes
    Certificate was added to keystore
    Now load our cert
    keytool -keystore ./cacerts -import -trustcacerts -file ausernieapp.crt
    keytool -list -v -keystore ./cacerts now shows
    Alias name: rootausernieapp
    Creation date: Mar 10, 2010
    Entry type: trustedCertEntry
    Owner: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Issuer: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Serial number: b4e92089cf73076f
    Valid from: Wed Mar 10 13:22:38 CST 2010 until: Tue Dec 04 13:22:38 CST 2012
    Certificate fingerprints:
    MD5: 2C:6B:EE:1A:63:6D:CB:XX:05:90:F6:78:DD:88:F7:80
    SHA1: F8:DC:E5:2A:3E:68:9C:CE:EA:4E:75:AE:CC:FA:9E:10:2F:8A:FE:9B
    Now we need to load it into the search modeler keystore
    as root on aussearchdev
    export JAVA_HOME=/usr/local/jdk1.5.0_22/
    export PATH=$JAVA_HOME/bin:$PATH
    cd /usr/local/jdk1.5.0_22/jre/lib/security/
    scp root@ausernieapp:/root/ausernieapp.crt .
    output
    keytool -keystore ./cacerts -import -trustcacerts -file ausernieapp.crt
    Enter keystore password: changeit
    Owner: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Issuer: [email protected], CN=ausernieapp.domainname.com, OU=Information Technology, O=Corporation, L=Austin, ST=Texas, C=US
    Serial number: b4e92089cf73076f
    Valid from: Wed Mar 10 13:22:38 CST 2010 until: Tue Dec 04 13:22:38 CST 2012
    Certificate fingerprints:
    MD5: 2C:6B:EE:1A:63:6D:CB:A1:05:90:F6:78:DD:88:F7:80
    SHA1: F8:DC:E5:2A:3E:68:9C:CE:EA:4E:75:AE:CC:4F:9E:10:2F:8A:FE:9B
    Trust this certificate? [no]: yes
    Certificate was added to keystore
    [root@aussearchdev security]#
    output
    For troubleshooting, if you go to end of /d01/oracle/10.1.8/sesdev/search/data/config/crawler.dat
    you can modify the logLevel from the default of 4 to 2 to get better debug data. No services need to be restarted, it will become active with the next crawl.
    While talking with Oracle, they mentioned the following patches
    The patches identified 8321527 and 7586924 are SES patches to help with indexing
    They also identified patch 9103851 which is an apps patch dealing with responsibilities <-- This is not yet available
    Applying patch 7586924
    as oracle on aussearchdev
    cd $ORACLE_HOME/bin
    ./searchctl stopall
    cd /mnt/oraclebackup/deathstar_patches/SES/post_patches/7586924
    opatch apply
    cd $ORACLE_HOME/bin
    ./searchctl startall
    sqlplus eqsys/XXXXXX@SESDEV
    define SCH_NAME=EQSYS
    define PROXY_USER=EQPROXY
    define INST_USER=EQ_TEST
    @$ORACLE_HOME/search/admin/eq0pkh.sql
    @$ORACLE_HOME/search/admin/eq0plb.sql
    @$ORACLE_HOME/search/admin/eq0bug_7586924.sql
    cd $ORACLE_HOME/search/data/config/
    cp crawler.dat crawler.dat.backup.03102010
    vi crawler.dat
    We're using the Oracle E-Business Suite R12 crawler, so we will add the line
    USE_IN_MEMORY_QUEUE Oracle E-Business Suite R12
    as the line immediately preceding IMPORT -
    so the end of the file looks like this:
    # system properies: separated by space for multiple system properties or define multiple SYSTEM_PROPERTIES
    # logLevel values: DEBUG(2), INFO(4), WARN(6), ERROR(8), FATAL(10)
    SYSTEM_PROPERTIES -Doracle.search.logLevel=4 -Doracle.search.log=oracle.search.util.Log4jImpl
    USE_IN_MEMORY_QUEUE Oracle E-Business Suite R12
    IMPORT -
    Now on to patch 8321527
    cd /mnt/oraclebackup/deathstar_patches/SES/post_patches/8321527
    cd $ORACLE_HOME/bin
    ./searchctl stopall
    cd -
    opatch apply
    cd $ORACLE_HOME/bin
    ./searchctl startall
    sqlplus eqsys/XXXXXXX@SESDEV
    define SCH_NAME=EQSYS
    define PROXY_USER=EQPROXY
    select object_name from user_objects where status = 'INVALID';
    --should be no rows selected
    @$ORACLE_HOME/search/admin/eq0pkh.sql
    @$ORACLE_HOME/search/admin/eq0plb.sql
    --should be no rows selected
    restart SES
    cd -
    ./searchctl stopall
    ./searchctl startall

  • How to set up a FTP and web server and integrate with DMM 5.2

    Hi All ...
    I need to set up a external server only for content publishing to reduce the overhead of the DMM server .
    can anyone guide me on how to set up the external server and intergrate it with the DMM 5.2
    Thanks

    semuthu,
    Notes from the Release Notes:
    Compatibility Limitations with Microsoft Internet Information Server (IIS)
    DMPs that use firmware release 5.2 are compatible with only one version of Microsoft Internet Information Server.
    That supported version is IIS 6.0 for Windows 2003 Enterprise. If you do not have the supported IIS version but
    want your DMPs to retrieve assets from a webserver, we recommend that you use Apache instead of IIS.
    I would suggest using Apache instead of IIS for the webserver service. IIS can be used as FTP if needed.
    There are plenty of Documents on the Web about setting up Apache and FTP for servers.
    Using Apache with Microsoft Windows
    http://httpd.apache.org/docs/2.0/platform/windows.html
    Quick HOWTO : Ch20 : The Apache Web Server
    http://www.linuxhomenetworking.com/wiki/index.php/Quick_HOWTO_:_Ch20_:_The_Apache_Web_Server
    Once the Webserver is setup and operational. You simply store your media content on the Webserver
    and then have your DMS assets in the media library use an external URL address for its location.
    If you want to use external server for other features in the DMM, you can can see how to configure
    here:
    http://www.cisco.com/en/US/partner/docs/video/digital_media_systems/5_x/5_1/dmm/user/guide/dsm+etv.html#wp1073210
    Goto the section right below ACNS & WAAS..
    If this answers your question, Please take time to mark this
    discussion answered & rate the response.
    Thank You!
    T.

  • Hp 550 upgrade of memory and cpu with possible unconventi​onal tweaks. not ideal, but no other choice

    HI guys, I hope you can help or at least give a point in the right direction.I'm a freelance photographer using much of the Adobe CS6 creative suite. After a disaster of a week I came home to find that the mother board on my editing workstation somehow is fried. I have no idea what happened though i wouldn't put it past my roommates carelessness.
    I'm desperate. I need to finish my current job before I am able to afford to buy a replacement. So I am forced to rely on stopgap measures, out of desperation to finish my project, which are less than ideal, but so far are faring better than I'd hoped.
    Im a photographer, Capture One, Adobe Photoshop Lightroom, Adobe Photoshop and Premiere Pro are the go to workhorse applications i need to work. without them i have no income. in order to have this machine run these apps,
    the machine i have left is an old hp 550 which was gathering dust in the closet. It was built for 32 bit Win XP and in no way is intended to run the power hog adobe products I use, especially Lightroom.
    Unfortunately Lightroom PS, and Premiere are 64 bit programs and LR and Premiere are hyper threaded. so I did research, and with the help of the windows 7 upgrade adviser utility's list of instructions I was able to get windows 7 Pro 64 bit to install and run.
    I know this isnt the ideal machine or situation but for a few weeks, i need to make it work.
    I really just have 2 simple questions. I had first gone to HP tech support. but they were not helpful. since the Laptop's warranty is long gone, they wouldnt even be polite and basically told me to shove off. Then on another forum, I argued back and forth with a know it all who consistently insisted that there was no way no how this pc could run 64 bit win 7, to which i thought what am i seeing things? its been running fine for 3 months. so i decided to come to you. your forums have been helpful on many occassions.
    basically I need this machine to be able to run these programs for the next month or so, until i can purchase a new machine.
    essentially, what I would like to know is will the motherboard support an upgrade of the processor? and if it will, what would you suggest as a replacement, considering my needs? The Core 2 duo is the barest minimum of what i can limp along with as photo/video rendering times are excessively slow.
    next I was talking to the crucial tech support staff about memory upgrades. and possibly tweaking the bios to force it to run 8 gigs of ram. they said they cold find no version of bios that would make that possible, but that by already forcing it to run 64 bit, that already allowed the pc to utilize the full 4 gigs of ram, which had been impossible in the 32 bit format. He then suggested that i buy 2 4 gig modules such as 4GB DDR2 PC2-5300 Unbuffered NON-ECC 1.8V 512Meg x 64 which can be seen at http://www.crucial.com/usa/en/memory/ct51264ac667 and try installing the full 8 gigs and see what would happened, saying he had a feeling i could get lucky. his logic being that the 64 bit system already opened up the ram limitations and who knows, you cant make an omelette without cracking some egg shells! he seemed very optimistic. So what do you think? does this seem likely to you because i would love it to work. or do you think the guy was a quack? and this whole endeaver is a waste of time and money?
    also any other suggestions about how to weather this month long storm that dont involve suggestions of buying new machines would be appreciated!
    so that you have exact details below are my system specs.
    Hewlett-Packard HP 550 F.05
    System Serial Number: CNU90716GN
    Asset Tag: CNU90716GN
    Chassis Serial Number: CNU90716GN
    Enclosure Type: Notebook
    Windows 7 Professional (x64) Service Pack 1 (build 7601)
    Install Language: English (United States)
    System Locale: English (United States)
    Installed: 8/4/2014 6:21:11 PM
    Boot Mode: BIOS (Secure Boot not supported)
    Processor a Main Circuit Board b
    1.80 gigahertz Intel Core2 Duo
    64 kilobyte primary memory cache
    2048 kilobyte secondary memory cache
    64-bit ready
    Multi-core (2 total)
    Not hyper-threaded Board: Hewlett-Packard 3618 KBC Version xx.xx
    Bus Clock: 200 megahertz
    BIOS: Hewlett-Packard 68MVU Ver. F.05 01/19/2009
    Drives Memory Modules c,d
    2320.47 Gigabytes Usable Hard Drive Capacity
    959.16 Gigabytes Hard Drive Free Space
    HL-DT-ST DVDRAM GSA-T50L ATA Device [Optical drive]
    Hitachi HTS543216L9A300 [Hard drive] (160.04 GB) -- drive 0, s/n 090108FB0200VCCPYM3B, rev FB2OC40F, SMART Status: Healthy
    ST1000LM 024 HN-M101MBB USB Device [Hard drive] (1000.20 GB) -- drive 3
    ST310005 28AS USB Device [Hard drive] -- drive 1
    WD 1600JS External USB Device [Hard drive] (160.04 GB) -- drive 2, s/n WD-WCANM2342148 4088 Megabytes Usable Installed Memory
    Slot 'DIMM #1' has 2048 MB (serial number 0000202A)
    Slot 'DIMM #2' has 2048 MB (serial number 00004042)
    thanks friends! i look forward to reading your advice!
    jodie
    This question was solved.
    View Solution.

    Here is the Manual:
    Service Manual
    Unfortunately the maximum configuration is a T5670 processor 1.8 ghz and 4 gigs of DDR2-667 memory which you already have. The CPU includes the 64 bit instruction set so it is not surprising it can run 64 bit Windows 7. My best advice is to save your money for when you can get a real working machine. The only other upgrade likely to help at all is a solid state drive, which you could use in the laptop and then also use in the new computer you are going to buy. 
    If this is "the Answer" please click "Accept as Solution" to help others find it.

  • Xperia Z3v - Lack of support and synergy with existing Xperia software

    So far I like my Xperia Z3v but don't love it. Among the reasons, the most glaring one is the disconnect from Sony Mobile Support and Verizon Wireless, neither cares about owners of the Z3v...
    I understood that the Z3v was a re-branded and modified Z3 for the Verizon network, so some minor differences (size, battery, etc.) would be present. I was unaware, however, that Sony would basically turn a blind eye to the phone and Verizon wouldn't do more than basic support (if it 'aint broken, we don't care).
    Here's what I mean:
    - No PC companion support (Z3v will not be recognized by the program. I've done a support chat with Sony Care and they said that was because Z3v is only supported by Verizon and not Sony....Imagine if Apple said that about the 'Verizon' version of iphones...no itunes integration, users just had to upload files directly to iphone with no programs or interface... )
    - No Media Go support (same as above)
    - No Wireless connect to computer (it's tied to the PC Companion issues, I believe)
    - No way to transfer contacts or files from previous phone (again, PC Companion) without buying an extra connector
    For a company that is seemingly struggling to stay afloat in anything besides Playstation related stuff, you would think Sony would try a little harder to be there for customers who took a gamble and bought their product.
    I have a few days to decide if I want to keep this phone and if I don't hear any noise about Sony working on a way to get the Z3v to play nicely with their PC Companion and related software, I will likely return it and pay the re-stocking fee to get a phone that is actually supported by the company who made it.

    Thank you Rickard for your response, but the standalone installation did not result in any changes.
    I recognize it was probably Verizon's fault to some extent with their desire to create a custom version of the Xperia Z3 instead of just using the standard model, but I still cannot see why the PC Companion or Media Go cannot be updated to recognize and work with the Z3V system and structures.
    I have been a life-long sony fan and have been happy with the way Sony reacts and supports their users for the most part. That is probably why I feel this slide in support is so discouraging.
    Again, I don't see any other brand of phone makers (that I know of) turning a blind eye to their newest phones just because it's on a different network or a slightly different build (mechanicaly and software wise). My understanding is that all i-phones must be different slightly for Verizon and AT&T networks due to the network and setup requirements, but Apple doesn't limit itunes compatibility with just one network's version of the phone, it works across all Apple products. I made the leap from Apple to Sony because I like Sony, but this is not a good start for my experience with this phone and Sony's software.
    I do appreciate your support and recognize you have limited ability to fix the situation, so I do hope you forward my sentiments to the appropriate internal teams.
    thanks again.

  • PI 7.1 "stateless" service interfaces prerequisites and limitations

    are there  any prerequisites and limitations for "stateless" Service interfaces.
    We are directly implementing PI 7.1, (i.e not upgrading form 7.0 or 3.0).
    so for all our service interfaces, shall we safely use tne interface pattern "statelss" instead of "Stateless(xi 3.0 compatible)".
    if use the "stateless", are there any addition prerequisites or constraints/limitations.
    can we use abap proxies, java proxies, providing webservices via xi, and consuming other webserivces in xi, all adapters, asynch, synch scenarios with "stateless" interface patterns.
    In short, are there any things that can be done using "Stateless(xi 3.0 compatible)" and cannot be done using  "stateless" interface
    are there any specific requirements for using "Stateless(xi 3.0 compatible)" even in newly implemented PI 7.1
    thanks in advance,
    Madhu.

    When it is an upgrade from 7.0 to 7.1 the default Interface pattern is Stateless (XI 30 Compatible)
    Using Stateless Interface Patterns wont cause any harm/ restriction on any of the development.
    The only twist will be in the way a condition is specified in the Receiver Determination.
    For any Interface pattern (other than Stateless(XI30 Compatible)) you wont be able to see the message structure in the Condition Editor of Receiver Determination. All other functionality (Async, Sync, Proxy) will be available.
    In such a case Condition should be specified as shown in this blog: /people/abhishek.salvi/blog/2009/07/15/sap-pi71-receiver-determination-xpath-and-you
    Regards,
    Abhishek.

  • Ask the Expert: ISE 1.2: Configuration and Deployment with Cisco expert Craig Hyps

    Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about how to deploy and configure Cisco Identity Services Engine (ISE) Version 1.2 and to understand the features and enhanced troubleshooting options available in this version, with Cisco expert Craig Hyps.
    October 27, 2014 through November 7, 2014.
    The Cisco Identity Services Engine (ISE) helps IT professionals meet enterprise mobility challenges and secure the evolving network across the entire attack continuum. Cisco ISE is a security policy management platform that identifies users and devices using RADIUS, 802.1X, MAB, and Web Authentication methods and automates secure access controls such as ACLs, VLAN assignment, and Security Group Tags (SGTs) to enforce role-based access to networks and network resources. Cisco ISE delivers superior user and device visibility through profiling, posture and mobile device management (MDM) compliance validation, and it shares vital contextual data with integrated ecosystem partner solutions using Cisco Platform Exchange Grid (pxGrid) technology to accelerate the identification, mitigation, and remediation of threats.
    Craig Hyps is a senior Technical Marketing Engineer for Cisco's Security Business Group with over 25 years networking and security experience. Craig is defining Cisco's next generation Identity Services Engine, ISE, and concurrently serves as the Product Owner for ISE Performance and Scale focused on the requirements of the largest ISE deployments.
    Previously Craig has held senior positions as a customer Consulting Engineer, Systems Engineer and product trainer.   He joined Cisco in 1997 and has extensive experience with Cisco's security portfolio.  Craig holds a Bachelor's degree from Dartmouth College and certifications that include CISSP, CCSP, and CCSI.
    Remember to use the rating system to let Craig know if you have received an adequate response.
    Because of the volume expected during this event, Ali might not be able to answer each question. Remember that you can continue the conversation on the Security community, sub-community shortly after the event. This event lasts through November 7, 2014. Visit this forum often to view responses to your questions and the questions of other community members.
    (Comments are now closed)

    1. Without more specifics it is hard to determine actual issue. It may be possible that if configured in same subnet that asymmetric traffic caused connections to fail. A key enhancement in ISE 1.3 is to make sure traffic received on a given interface is sent out same interface.
    2. Common use cases for using different interfaces include separation of management traffic from user traffic such as web portal access or to support dedicated profiling interfaces. For example, you may want employees to use a different interface for sponsor portal access. For profiling, you may want to use a specific interface for HTTP SPAN traffic or possibly configure IP Anycast to simplify reception and redundancy of DHCP IP Helper traffic. Another use case is simple NIC redundancy.
    a. Management traffic is restricted to eth0, but standalone node will also have PSN persona so above use cases can apply for interfaces eth1-eth3.
    b. For dedicated PAN / MnT nodes it usually does not make sense to configure multiple interfaces although ISE 1.3 does add support for SNMP on multiple interfaces if needed to separate out. It may also be possible to support NIC redundancy but I need to do some more testing to verify. 
    For PSNs, NIC redundancy for RADIUS as well as the other use cases for separate profiling and portal services apply.
    Regarding Supplicant Provisioning issue, the flows are the same whether wireless or wired. The same identity stores are supported as well. The key difference is that wireless users are directed to a specific auth method based on WLAN configuration and Cisco wired switches allow multiple auth methods to be supported on same port. 
    If RADIUS Proxy is required to forward requests to a foreign RADIUS server, then decision must be made based on basic RADIUS attributes or things like NDG. ISE does not terminate the authentication requests and that is handled by foreign server. ISE does support advanced relay functions such as attribute manipulation, but recommend review with requirements with local Cisco or partner security SE if trying to implement provisioning for users authenticated via proxy. Proxy is handled at Authentication Policy level. CWA and Guest Flow is handled in Authorization Policy.  If need to authenticate a CWA user via external RADIUS, then need to use RADIUS Token Server, not RADIUS Proxy.
    A typical flow for a wired user without 802.1X configured would be to hit default policy for CWA.  Based on successful CWA auth, CoA is triggered and user can then match a policy rule based on guest flow and CWA user identity (AD or non-AD) and returned an authorization for NSP.
    Regarding AD multi-domain support...
    Under ISE 1.2, if need to authenticate users across different forests or domains, then mutual trusts must exist, or you can use multiple LDAP server definitions if the EAP protocol supports LDAP. RADIUS Proxy is another option  to have some users authenticated to different AD domains via foreign RADIUS server.
    Under ISE 1.3, we have completely re-architected our AD connector and support multiple AD Forests and Domains with or without mutual trusts.
    When you mention the use of RADIUS proxy, it is not clear whether you are referring to ISE as the proxy or another RADIUS server proxying to ISE.  If you had multiple ISE deployments, then a separate RADIUS Server like ACS could proxy requests to different ISE 1.2 deployments, each with their own separate AD domain connection.  If ISE is the proxy, then you could have some requests being authenticated against locally joined AD domain while others are sent to a foreign RADIUS server which may have one or more AD domain connections.
    In summary, if the key requirement is ability to join multiple AD domains without mutual trust, then very likely ISE 1.3 is the solution.  Your configuration seems to be a bit involved and I do not want to provide design guidance on a paper napkin, so recommend consult with local ATP Security SE to review overall requirements, topology, AD structure, and RADIUS servers that require integration.
    Regards,
    Craig

  • Workflow and problems with labels

    Hello!
    I've been testing out some things in Edge and I've noticed a few things that I've been trying to find some documentation and information about, I would greatly appreciate any enlightenment on the following observations:
    Frame labels do not work for me - both with files created from scratch in Edge and ones made of existing HTML + CSS files. I tried the in app lesson on looping the counter and the 'Play from (loop)' doesn't work, I thought it might have been because of an error in the instructions telling users to play from a frame label that exists at the same point in the timeline where there is a 'stop' trigger but even offsetting the 'loop' label would not work. The final sample file works as intended when previewed.
    I tried a few tests with new files consisting of really basic stuff - one symbol with an 'on-click' > play from (go/start/in/one/etc) and another symbol simply animated on the x and y axis with an animation to the opacity with a stop trigger placed on the timeline and tested with the play from label placed both at the same time as the stop trigger and offset after the trigger - neither works it has no effect when clicked. (I know about what scripts to do on completion to get it to play from the start) Interestingly play from (milliseconds*) *0.125/1001/2000000 etc does work for me but this is not ideal as it is far more useful to be able to play from labels.
    Animating existing HTML - I've got a simple html page set up consisting of a container div with a number of other divs inside which I have been animating in Edge. The Edge file is set up so the container CSS overflow is hidden. Now can someone please clarify if the following method of workflow is a mistake on my part, limitation in HTML+DOM, bugs in edge or combination/none of those things?
    Workflow - bring in the html file to edge do simple animated opacity etc on the various elements start adding keyframes and labels etc - the label problems as above.  Now my intent is to have each of the div's in the container be clicked on and bring in the next one - in the same place in the viewport. I've noticed that when changing various elements visibility after tweaking animation to look good and then subsiquently setting on-off keyframes for visibility it would suddenly cause all elements lower in the DOM to move position and suddenly have what looked like keyframes for y axis position/transform? Is this bad practice to use the on-off visibility for elements? It meant that what should be a really simple and quick 10 second animation took about 3 hours to make, should we be not using the on-off keyframes for showing/hiding buttons that are in divs that sit on top of each other? Should i set up z-index values for all elements in the CSS files? (I saw a reference to you can assign z-index values in the 'elements' panel but I can only see 'arrange' - is this a different term for z-index?)
    I'm a long time user of flash, maya, after effects, digital fusion, combustion, and many other timeline based software tools - it is fairly intuitive to me picking up new systems but the issues with on-off visibility and keyframes below in the timeline really was a very frustrating workflow. I'm used to changing and editing the whole animation on the timeline seeing what works and doesn't - deleting layers, changing timings etc, i found this way of working really slow due to changes to elements position when ones above in the flow were turned on or off. Please do suggest what I should change in my approach to using edge as compared to other animation tools as it looked great on preview but I'm a bit frustrated in using the release. Is this a bug in my release?
    Where is the help and reference files for Edge? - is this screen shot it? -
    I can't find any info on basic definitions of the tools and options anywhere, and can't find much on anything to do with using edge in production with existing HTML documents, please send me some links if you have them. I've seen the edge javascript API thing but is there anything else?
    Cheers.
    Here is the approximate code of the page for reference - I actually got the file working in the end but using 'play from (miliseconds)' instead of play from (label) and much frustration slowly editing the timeline and elements visible/hidden status and redoing animation on elements below in the timeline to get them placed correctly.
    HTML:
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="http://www.w3.org/1999/xhtml">
    <head>
    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
    <title>Master Document with base styles</title>
    <link href="css/master_styles.css" rel="stylesheet" type="text/css" />
    <!--<link href="css/ipadV.css" rel="stylesheet" media="only screen and (min-device-width:  768px) and (max-device-width: 1024px) and (orientation: portrait)" />
    <link href="css/ipadH.css" rel="stylesheet" media="only screen and (min-device-width: 768px) and (max-device-width: 1024px) and (orientation: landscape)" />
    <link href="css/iphoneV.css" rel="stylesheet" media="only screen and (min-device-width: 320px) and (max-device-width: 480px) and (orientation: portrait)" />
    <link href="css/iphoneH.css" rel="stylesheet" media="only screen and (min-device-width: 320px) and (max-device-width: 480px) and (orientation: landscape)" /> (Commented out for testing on desktop)-->
    <link rel="stylesheet" media="only screen and (min-width: 320px) and (max-width: 480px)" href="css/mobile.css" />
    <link rel="stylesheet" media="only screen and (min-width: 768px) and (max-width: 1024px)" href="css/tablet.css" />
    <link href="css/desktop.css" rel="stylesheet" media="only screen and (min-width: 1025px) and (max-width: 3000px)" />
    <style type="text/css">
    <!--
    a:visited {
        color: #00FF00;
    a:hover {
        color: #FF0000;
    a:active {
        color: #0033FF;
    -->
    </style>
    </head>
    <body>
    <div id="container">
             <!-- start Level 1-->
                <div id="mainContent">
                    <div id="mainlogo">
                    </div>
                </div>
                <div id="firstButton">
                      <div id="Abutton1">
                      <p><img src="img/a_72_off.png" width="72" height="72" /></p>
                     </div>
                </div>
                <div id="transition1">
                       <p>Wipe transition 1</p>
                </div>
                <div id="secondButton">
                        <div id="Abutton2">
                       <p><img src="img/a_72_off.png" width="72" height="72" /></p>
                       </div>
                </div>
                <div id="secondContent">
                    <div id="Abutton3">
                    <p><img src="img/a_72_off.png" width="72" height="72" /></p>
                    </div>
                <div id="text1">
                      <h1>Heading </h1>
                      <p>Byline</p>
                    </div>
                 </div>
      <div id="transition2">
        <p>Transition 2 - TBC</p>
    </div>
          <div id="thirdContent">
          <div id="lastbutton">
            <p><img src="img/end_icon_crop.png" width="150" height="150" border="0" /></p>
          </div>
          <div id="text2">
            <h1>Heading</h1>
            <p>Byline</p>
          </div>
    </div>
        <div id="transition3">
            <h4>Small print</h4>
    </div>
    </div>
    </body>
    </html>
    CSS:
    (master_styles.css)
    @charset "utf-8";
    body {
        margin: 0; /* it's good practice to zero the margin and padding of the body element to account for differing browser defaults */
        padding: 0;
        text-align: center; /* this centers the container in IE 5* browsers. The text is then set to the left aligned default in the #container selector */
        color: #19171B;
        font-family: AFBattersea;
        font-size: 100%;
    #container  { /* the main holder for all of the viewport content - an image frame */
        text-align: left;
        margin-top: 0;
        margin-right: auto;
        margin-bottom: 0;
        margin-left: auto;
    #mainContent  {
        z-index: -1;
    #firstButton {
    #transition1 {
        color: #FFF;
    #secondButton {
    #secondContent {
    #transition2 {
        color: #FFF;
        height: 100%;
    #thirdContent {
    #transition3 {
        color: #FFF;
    #mainlogo {
        background-repeat: no-repeat;
        background-position: center center;
        background-image: url(../img/960_off.png);
    #Abutton1 {
    #Abutton2 {
    #Abutton3 {
    #text1 {
    #text2 {
    #lastbutton {
    #text3 {
    (desktop.css) - I've not included the other css files referenced in the media queries as they only contain names of elements for this purpose
    @charset "utf-8";
    #container  { /* the main holder for all of the viewport content - an image frame */
        text-align: center;
        margin-top: 0;
        margin-right: auto;
        margin-bottom: 0;
        margin-left: auto;
        height: 700px;
        width: 1024px;
    .mainContent  {
        height: 100%;
    #firstButton {
        height: 100%;
    #transition1 {
        height: 100%;
    #secondButton {
        height: 100%;
    #secondContent {
        height: 100%;
    #transition2 {
        height: 100%;
    #thirdContent {
        height: 100%;
    #transition3 {
        height: 100%;
    #mainlogo {
        background-image: url(../img/960_off.png);
        height: 72px;
        width: 960px;
        margin-top: 364px;
        margin-right: 36px;
        margin-left: 36px;
    #Abutton1 {
        height: 72px;
        width: 72px;
        margin-top: 364px;
        margin-right: auto;
        margin-left: auto;
    #Abutton2 {
        height: 72px;
        width: 72px;
        margin-top: 364px;
        margin-right: auto;
        margin-left: auto;
    #Abutton3 {
        height: 72px;
        width: 72px;
        margin-top: 364px;
        margin-right: auto;
        margin-left: auto;
    #text1 {
        text-align: left;
        margin-top: 16px;
        margin-left: 320px;
    #text2 {
        text-align: left;
        margin-top: 16px;
        margin-right: 330px;
        margin-left: 360px;
    #text3 {
        text-align: center;
        text-indent: -192px;
        width: 320px;
    #lastbutton {
        margin-top: 364px;
        margin-right: auto;
        margin-left: auto;
        height: 150px;
        width: 150px;

    Hi,
    I wonder if it's related to the multilingual capability of BPM Object presentations.
    Could you:
    1. right mouse click the project in the Project Navigator tab.
    2. click "Project Preferences"
    3. click "Languages"
    Do you see multiple languages? Is English (or whatever language you're using inside Studio) the default?
    When you log into the WorkSpace, could you double check the language you are using (log in -> click "Settings" in the upper right corner) -> with the "Display" tab selected, is the language you chose as the default in Studio selected?
    I suspect the reason you see some but not all of the labels is because you have defined some of those labels in the language selected in the Workspace. You can add the addtional labels for the various languages you want to support if you:
    1. Open a presentation
    2. Click one of the labels
    3. In the properties tab on the right, click the field beside the "Display" property
    4. Click the button with the "..." on the right side of this field
    Hope this helps,
    Dan

  • ABAP and fields with NULL on a table

    If a table has columns where some rows contains NULL values and a SELECT * is done on that table, what values are returned to the ABAP program for those rows that contain NULL at the database level?
    Example:
    TABLE_A
    COL_A CHAR(20) NOT NULL
    COL_B CHAR(10) NULLS ALLOWED.
    If a SELECT * FROM TABLE_A is done, what is in the value of TABLE_A-COL_B when there are nulls in the database for that column?

    Yes, its a limitation with replicat since the row is not technically unique on source since there are 2 rows with the same value although null
    and its not unique so to say.
    I will check with dev to get their feedback. The issue is same on latest versions. i tested with ogg v12 on oracle 11g
    Thanks,
    Raj

  • What are the key benefits and limitations of new pricing model of X5-2?

    What are the key benefits and limitations of new pricing model that started with X5 version?

    1. Elastic Configurations
    Size/price hardware by the number of servers; Fixed configs no longer required
    Start with 2 Database Servers and 3 Storage Servers. Incrementally add database or storage servers online.
    2. Capacity-on-Demand (CoD)
    Upon installation, activate 40-100% of the cores per server and reduce software licenses; Applies to Eighth Rack now too
    Activate and license more cores when needed; Active cores may not be deactivated
    3. OVM and Trusted Partitions
    License software on Virtual CPUs within a VM; Ideal for special-purpose DB options
    You can mix different combination of options for different DB on one Exadata.
    OVM has no License cost; support is included with premier hardware support
    Limitation:
    At least 40% of usable cores on the machine must be licensed for Oracle software
    Cannot use both OVM and CoD to license less than 40% of cores
    A server must be virtualized or non-virtualized – not mixed
    A RAC cluster can mix virtualized and non-virtualized servers
    4. “Flash Drive” License Metric for EF Storage Server Software
    $20K/drive; 8 flash drives/EF server vs 12 disk drives/HC server = 33% higher list
    Can transfer licenses between Flash Drive (2 licenses/drive) and Disk Drive (1 license/drive) – part # is the same

  • HT201303 How can I reset my security answers ? I do not remember them, and Apple support just can help me if I remember one o more answers. I already have three Follow-ups: 237312883, 374526499 and 239690719 with no solution.

    How can I reset my security answers ? I do not remember them, and Apple support just can help me if I remember one o more answers. I already have three Follow-ups: 237312883, 374526499 and 239690719 with no solution.

    Reset Security Questions
    Frequently asked questions about Apple ID
    Manage My Apple ID
    Or you can email iTunes Support at iTunes Store Support.
    If all else fails:
      1. Go to: Apple Express Lane;
      2. Under Product Categories choose iTunes;
      3. Then choose iTunes Store;
      4. Then choose Account Management;
      5. Now choose iTunes Store Security and answer the bullet questions, then click
          Continue;
      6. Sign in with your Apple ID and press Continue;
      7. Under Contact Options fill out the information and advise iTunes that you would
          like your security/challenge questions reset;
      8. Click Send/Continue.
    You should get a response within 24 hours by email.
    In the event you are unsuccessful then contact AppleCare - Contacting Apple for support and service.
    Another user had success doing the following:
    I got some help from an apple assistant on the phone. It is kind of round about way to get in.
    Here is what he said to do and it is working for me...
      a. on the device that is asking you for the security questions go to "settings", > "store" >
          tap the Apple ID and choose view"Apple ID" and sign in.
      b. Tap on payment information and add a credit/debit card of your preference then select
          "done", in the upper right corner
      c. sign out and back into iTunes on the device by going to "settings"> "store" > tap the
          Apple ID and choose "sign-out" > Tap "sign -in" > "use existing Apple ID" and you
          should be asked to verify your security code for the credit /debit card and NOT the
          security questions.
      d. At this time you can remove the card by going back in to edit the payment info and
          selecting "none" as the card type then saving the changes by selecting "done". You
          should now be able to use your iTunes store credit without answering the security
          questions.
    It's working for me ...I just have to put in my 3 digit security pin from the credit card I am using.
    Good Luck friends!

Maybe you are looking for

  • I movies synced to cloud do not show up on all devices

    I have been putting old home videos into iMovie and some show up in my theater on my Mac, others on my iPad and still others on my Apple TV.  Not all videos in all places.  Some duplicates, but others only show up on one device.  When I try to downlo

  • Error downloading XML schema processor for java from OTN

    I'm getting error downloading this product from otn site. http://technet.oracle.com/tech/xml/schema_java/index.htm I login to OTN, go to this site, enter registration information and then I get the following error when I try to submit my info. Runtim

  • Error when Exporting DDL script for whole schema

    When I right click connection, Select "Export" then "DDL Script", the following error occur (Exception Stack Trace) java.lang.ClassNotFoundException: oracle.dbtools.raptor.dialogs.actions.UserDDLExport      at java.net.URLClassLoader$1.run(URLClassLo

  • RSBBS - generel information

    Hello, I'm just trying to jump from a bex query into a transaction in ERP. While doing it I receive an error message ("..Source system ... is not assigned to InfoSource...") as well as a dialog screen which is saying s. th. like ".. transformation of

  • How to assign characteristic to Dimension ( Advices)

    Hello Experts, I need small clarification from your side. When assigning the characterstic to perticular dimension (What are the precautions we have to take care). how to deside this characterstic has to be  assign to this dimension , i confused many