Changing policy domain timeout value

Hi Idm folks,
Can we configure a different timeout values on policy domains protecting different applications?
For example; policy domain /domain01/... has a 15 miunte idle session timeout and policy doomain02/... would have a 6 hour idle session timeout.
I don't think we can, wanted to check if anyone had ever came across this requirement?
thanks!

For different applications are you using different webgates? In that case you can think of using separate host identifiers for different webgates and create policies for host identifiers and you can have different timeout values for webgates.
BUT, in a SSO scenario what kind of complication it will bring, needs to be evaluated on the environment (mainly the central and application webgate domain for obSSOCookie) and requirements. This can be an interesting exercise, I guess. :)

Similar Messages

  • Can we programatically change the timeout value in Oracle Workflow

    Hi,
    I have a requirement for the Journal Approval Workflow
    I would like to set this to 4 days as standard and have this adjusted to 4 hours during month end close.
    Can I put in some logic in PL/SQL and so that at month end I can update this timeout value to 4 hours in the workflow itself.Is there some API to update this value in a notification.
    Please advise
    Saket

    Hi,
    Maybe, my question is not clear.
    I know on how to maintain the conditions.
    I want to maintain a final price condition, and also the discount rate will be shown in the sales order.
    discount rate= ( List Price 98- Final price 80) / List Price 98
    Or
    I want to maintain a value discount condition,and also need  the discount rate will be shown in the sales order.
    discount rate = value of the value discount condition 18 / List price 98
    The discount rate will be shown in the sales order and the discount amount will be posted to the GL account.
    Thanks&Regards,
    Don

  • General query on CSM and CSS flow timeout values

    Hi all,
    i have a SLB Application Processor Complex module on my Cisco 6504 which basically does some load balancing work. I am pretty new to this device but the configurations and setup looks somewhat similar to the Cisco ACE but i only have some experience with the Cisco CSS.
    What i would like to know is what the equivalent command to the CSS "flow timeout" is on the CSM. Would that be the "idle timeout" command? I understand that the "pending timeout" is more to governing how long it takes to setup a 3 way handshake from client to server and the "idle timeout" is what i am looking for. Please correct me if i am wrong...
    On the CSS, a flow timeout is on 16secs for most standard ports and 8 secs for HTTP. I would like to know what the default setting is for the CSM idle timeout?? Thanks alot!!
    Daniel

    Hi Daniel,
    For Idle Timeout the the default is 1 hour/ 3600 sec.
    As you know for Cicso CSM thare are 2 timers per vserver.
    Idle timeout
    Pending timeout.
    If a connection is timed out it's because of one of these timers.
    Idle timeout per vserver - If there is no traffic neither from client nor server. Idle connection timer duration in seconds; the range is from 0 (connection remains open indefinitely) to 13500000. The default is 1 hour. If you do not specify a duration value, the default value is applied.
    Examples
    This example shows how to specify an idle timer duration of 4000:
    Cat6k-2(config-slb-vserver)# idle 4000
    Pending timeout per vserver - is the max time allowed to complete the 3-way handshake.The default is 30 sec.Range is from 1 to 65535. This is a SLB virtual server configuration submode command. The pending connection timeout sets the response time for terminating connections if a switch becomes flooded with traffic. If the 3-way handshake does not complete within this time, the connection is dropped.
    The CSM expect to see 2-way traffic within the pending timeout. If no traffic is received from the server, the session is removed.
    Examples
    This example shows how to set the number to wait for a connection to be made to the server:
    Cat6k-2(config-slb-vserver)# pending 300
    These are not counted as failures.
    A failure is when the server does not respond or respond with a reset.
    The CSM can hold 1 million connections in memory at the max.
    So, if you set the idle timeout to 10 hours, your max connection rate is 1 M / 10 * 3600 = ~250 conn/sec.
    Assuming they would all be open and then idle.
    When the number of pending connections exceeds a configurable threshold, the CSM begins using the SYN cookies feature, encrypting all of the connection state information in the sequence numbers that it generates. This action prevents the CSM from consuming any flow state for pending (not fully established) TCP connections. This behavior is fully implemented in hardware and provides a good protection against SYN attacks.
    Generic TCP termination
    Some connections may not require TCP termination for Layer 7 load balancing. You can configure any virtual server to terminate all incoming TCP connections before load balancing those connections to the real servers. This configuration allows you to take advantage of all the CSM DoS features located in Layer 4 load-balancing environments.
    To select the traffic type and appropriate timeout value, use the unidirectional command in the SLB virtual server submode.
    [no | default] unidirectional
    some protocol automatically set the 'unidirectional' function.
    For example : UDP.
    You can see if a vserver is unidirectional or bidirectional by doing a 'sho mod csm X vser name detail'
    When a virtual server is configured as unidirectional, it no longer uses the pending timer. Instead, the idle timer will determine when to close idle or errant flows. Because the idle timer has a much longer default duration than the pending timer, be sure to set the idle timer to an appropriate value.
    Use the command  "show module csm slot# stats" to get the details of connection.
    The statistics counters are 32-bit. Totals are accumulated since the last time the counters were cleared.
    Examples
    This example shows how to display SLB statistics:
    Cat6k-2# show module csm 4 stats
    Connections Created:       180
    Connections Destroyed:     180
    Connections Current:       0
    Connections Timed-Out:     0
    Connections Failed:        0
    Server initiated Connections:
          Created:0, Current:0, Failed:0
    L4 Load-Balanced Decisions:180
    L4 Rejected Connections:   0
    L7 Load-Balanced Decisions:0
    L7 Rejected Connections:
          Total:0, Parser:0,
          Reached max parse len:0, Cookie out of mem:0,
          Cfg version mismatch:0, Bad SSL2 format:0
    L4/L7 Rejected Connections:
          No policy:0, No policy match 0,
          No real:0, ACL denied 0,
          Server initiated:0
    Checksum Failures: IP:0, TCP:0
    Redirect Connections:0,  Redirect Dropped:0
    FTP Connections:           0
    MAC Frames:
          Tx:Unicast:1506, Multicast:0, Broadcast:50898,
              Underflow Errors:0
          Rx:Unicast:2385, Multicast:6148349, Broadcast:53916,
              Overflow Errors:0, CRC Errors:0
    Table mentioned below describes the fields in the display.
    Table for "show module csm stats" Command Field Information
    Field
    Description
    Connections Created
    Number of connections that have been created on the CSM.
    Connections Destroyed
    Number of connections that have been destroyed on the CSM.
    Connections Current
    Number of current connections at the time the command was issued.
    Connections Timed-Out
    Number of connections that have timed out, which can occur for the following reasons:
    •connection has been idle (in one or both directions) for longer than the configured idle timeout.
    •TCP connection setup not completed successfully.
    Connections Failed
    Number of connections failed because the server did not respond within the timeout period, or the server replied with a reset.
    Server initiated Connections
    Number of connections created by real servers, the number of current connections, and the number of connections that failed (because the destination is unreachable).
    L4 Load-Balanced Decisions
    Number of Layer 4 load-balancing decisions attempted.
    L4 Rejected Connections
    Number of Layer 4 connections rejected because no real server was available
    L7 Load-Balanced Decisions
    Number of Layer 7 load-balancing decisions attempted.
    L7 Rejected Connections: Total
    Number of Layer 7 connections rejected.
    L7 Rejected Connections: Parser
    Number of Layer 7 connections rejected because the Layer 7 processor in the CSM ran out of session buffers to save the parsing state for multi-packet HTTP headers. The show module csm tech-support proc 3 command will show detailed buffer usage.
    L7 Rejected Connections: Reached max parse len
    Number of Layer 7 connections rejected because the HTTP header in the packet is longer than max-parse-len. When a virtual server is configured with HTTP persistent rebalancing or cookie matching/sticky, the CSM must parse to the end of HTTP header. The default max-parse-len value is 2000 bytes.
    L7 Rejected Connections: Cookie out of mem:
    Number of Layer 7 connections rejected because of no memory to store cookies. When a virtual server is configured with cookie matching, the CSM must save the cookie contents in memory.
    L7 Rejected Connections: Cfg version mismatch
    Number of Layer 7 connections rejected because part of the request was processed with an older version of the configuration. This counter should only increase after configuration changes.
    L7 Rejected Connections: Bad SSL2 format:
    Number of Layer 7 connections rejected because the request is using an unsupported SSL format or the format is not valid SSL.
    L4/L7 Rejected Connections
    Number of Layer 4 and Layer 7 connections rejected for policy related reasons:
    No policy: connection rejected because the request matched a virtual server, but this virtual server did not have a policy configured.
    No policy match: connection rejected because the request matched a virtual server, but the request did not match any policy configured on the virtual server.
    No real: connection rejected because no real server was available to service the request
    ACL denied: connection rejected because a request matched a policy with a client-access-list entry and the entry is configured to deny the request.
    Server Initiated: connection initiated by a real server is rejected.
    Checksum Failures
    Number of checksum failures detected (there are separate counters for IP and TCP failures).
    Redirect Connections
    Number of connections redirected, and the number of redirect connections dropped.
    FTP Connections
    Number of FTP connections opened.
    MAC Frames
    Number of MAC frames received and transmitted on the CSM backplane connection.
    For getting details on all of these commands kindy refer Catalyst 6500 Series Switch Content Switching Module Command Reference, 4.2 URL mentioned below:
    http://cisco.biz/en/US/docs/interfaces_modules/services_modules/csm/4.2.x/command/reference/cmdrfIX.html
    Kindly Rate.
    HTH
    Sachin Garg

  • How to change the domain name

    Our company was bought in an acquisition and for a long time we kept out domain and firewall. Now, we have to move the servers physically and on the new domain. All Oracle servers have been installed with the service of ORANAME.usdv.sdv.com and the TNS names use the same Service tag. The databases created with dbca also get this service extension on install.
    I did not find a lot to read about a domain change in Oracle. Looking for an idea on what complications I may expect and how to actually perform the domain change, tips and tricks, some materials to read, etc.
    It looks that I have to change the tnsnames.ora on all clients,but is this going to be enough? Do I need to redo netca on clients and servers?
    Thanks a lot, mj

    Thanks a lot. I'm sorry I did not specify that in my initial post - this was actually what I read but could not find anything more on that...
    I have a couple of questions like:
    When do I have to alter the database to change tha name - before or after to join to the new domain?
    Also, is the statement "ALTER DATABASE RENAME GLOBAL_NAME TO <dbname.new.domain>" the only thing I need to do? It looks that this command never changes the v$parameter value. Do I need to change it and how to do that?
    The doc said :"DB_DOMAIN has no effect on the global database name" but it this true?
    Also, is this valid for both 10.2.0.2 and above and 9.2.0.7?
    Thanks a lot,mj
    Message was edited by:
    user494147

  • Pop up warning when creating policy domain in OAM 10g

    Has anyone seen below pop up warning when creating a policy domain in OAM 10g Policy manager?
    Warning:
    This policy domain controls the access to the URI you are currently accessing
    /access/oblix/apps/policyservcenter/bin/policyservcenter.cgi
    Are you sure you want to commit these changes?

    Hi,
    Does Note 842378.1 look like a match for you? Maybe the obcompounddata attribute is missing for some odd reason.
    Regards,
    Colin

  • Changing dynamicly the timeout before calling a proxy

    Hi.
    I am consuming a web service in an ABAP program and i want to know if it's possible to dynamicly change the timeout value.
    According to the sales organization, we want to set different timeout values.
    So i've seen than this value is defined in the logical port for the consumer proxy. My question now is to understand if we can change this value when we create the proxy in the abap coding or if i have to create several logical ports.
    Thanks for your suggestions.
    Regards,
    Helder

    Hi.
    I am consuming a web service in an ABAP program and i want to know if it's possible to dynamicly change the timeout value.
    According to the sales organization, we want to set different timeout values.
    So i've seen than this value is defined in the logical port for the consumer proxy. My question now is to understand if we can change this value when we create the proxy in the abap coding or if i have to create several logical ports.
    Thanks for your suggestions.
    Regards,
    Helder

  • Automatically Lock the Computer After a Specified Timeout Value

    Is there any way to set a Win 7 box to automatically lock after a set timeout value with either GPO or the registry
    without having to enable a screensaver? All my searching has come up with using the screensaver to accomplish this. We do not use a screensaver but instead turn the monitors off, screensavers are so 90's. Thanks.

    Hi Brad5689,
    There is a group policy we can have a try .
    Computer Configuration | Administrative Templates | System | Power Management|Video and display
    Conserving Energy with Group Policy(It is also applied to Windows 7)
    https://technet.microsoft.com/en-us/magazine/cc462804.aspx
    Best regards
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • How to decrease timeout value when there is no response from BOE server?

    We are using BOE XI R2 .NET SDK to logon BOE XI R2 Server as below as well as using Infoview/CMC logon BOE:
    set boSessionManager = Server.CreateObject("CrystalEnterprise.SessionMgr")
    set boEnterpriseSession = boSessionManager.Logon(boUserID, boPassword, boCMS, boAuthType)
    There is no response for long time from BOE server after I excuting log on BOE using .NET SDK or Infoview/CMC App for more than one minute.
    So I want to timeout the logon atction after a certain time such as one minute if there is no response from BOE server.
    My question comes:
    1. What is the default timeout value for this operation?
        Where can I find it and how to modify it?
    2. I found ther are some registry keys on .NET APP Server:
        HKEY_LOCAL_MACHINE\SOFTWARE\Business Objects\Suite 12.0\Report Application Server\InprocServer\EnterpriseRequestTimeout
        HKEY_LOCAL_MACHINE\SOFTWARE\Business Objects\Suite 12.0\Report Application Server\Client SDK\CorbaAdapter\WaitReplyTimeout
    Are they for the action timeout I mentioned above? If not, what do they work for?
    It seems that WaitReplyTimeout is for report data retrieval timeout according to Kbase article 1199286 and which registry setting to change for long running reports, is it correct?
    Thanks for any response.
    Thanks,
    Sunny

    I don't think there is a setting available for this.  The timeouts you are looking at are essentially how long to wait for a report to process.
    My concern about trying to find a setting like this is that if you do get the client (aka SDK) to timeout after one minute, the CMS may still recieve this request shortly after and logon, creating a session that no longer has a handle to it and will then have to wait for it to timeout because of inactivity which would tie up a license.

  • Timeout value while providing Webservice

    I am exposing a Web service in abap which has to be consumed in .net framework.
    I need to know where in SOAMANAGER should i set maximum Timeout value which would determine how long the consumer should wait for response.
    And where to set maximum message size in SOAMANAGER.
    Edited by: anshulkaistha on Apr 6, 2011 7:18 AM

    at the oc4j directory you can find in j2ee\home\config the file transaction-manager.xml where you can change the value of transaction-timeout
    cumps
    DnlCY

  • Can I specify a timeout value for an RMI call?

    Is it possible to specify a timeout value when a client makes a remote
    RMI call to a WL
    EJB? If the server method hangs does the client call hang forever with it?
    - Rick Holland OO/Distributed Systems Consultant
    - ObjectAge Inc.
    - [email protected]
    "Logic is a wreath of pretty flowers, that smell bad"

    That's what I did to try this. weblogic.ejbc knows how to pass -dispatchPolicy to
    the weblogic.rmic, so in the RMI descriptor it creates:
    <method
    name="*"
    dispatch-policy="queueName"
    >
    </method>
    so, maybe there is a command-line option for the timeout as well. Anyway, extracting
    xxxRTD.xml and adding
    <method
    name="*"
    timeout="xxx"
    >
    </method>
    works just fine.
    Rick Holland <[email protected]> wrote:
    So all I have to do is build my EJB jar, extract the *RTD.xml file, hack
    it, stuff it back into the jar and deploy (all within my Ant script).
    Sounds fairly straight forward.
    Thanks again
    [email protected] wrote:
    It gets there from the server. If you look inside ejbc'ed ejb-jar you'll find
    RMI descriptors there (they are named like xxx.RTD.xml)
    Rick Holland <[email protected]> wrote:
    Thank you Dimitri, but I have one more dumb question, since I need these
    timeouts
    on the client side where does an RMI descriptor go? I have never used
    one of these.
    Thanks
    [email protected] wrote:
    AFAIK, you can specify it in the RMI descriptor :
    <rmi Name=".....">
    <cluster
         clusterable="true"
    </cluster>
    <method
         name="methodname"
         timeout="timeoutinmilliseconds"
    </method>
    </rmi>
    And, if there is timeout, method invocation will fail with exception like this:
    weblogic.rmi.extensions.RequestTimeoutException: RJVM response timed out after: '1000' milliseconds.
    at weblogic.rmi.internal.BasicOutboundRequest.sendReceive(BasicOutboundRequest.java:85)
    at weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteRef.java:262)
    at weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteRef.java:229)
    at weblogic.rmi.internal.ProxyStub.invoke(ProxyStub.java:35)
    at $Proxy2.testTimeout(Unknown Source)
    Rick Holland <[email protected]> wrote:
    Is it possible to specify a timeout value when a client makes a remote
    RMI call to a WL
    EJB? If the server method hangs does the client call hang forever with it?
    - Rick Holland OO/Distributed Systems Consultant
    - ObjectAge Inc.
    - [email protected]
    "Logic is a wreath of pretty flowers, that smell bad"
    - Rick Holland OO/Distributed Systems Consultant
    - ObjectAge Inc.
    - [email protected]
    "Logic is a wreath of pretty flowers, that smell bad"
    - Rick Holland OO/Distributed Systems Consultant
    - ObjectAge Inc.
    - [email protected]
    "Logic is a wreath of pretty flowers, that smell bad"
    Dimitri

  • Increase timeout value for webservice

    Hello,
    I have a stateless session bean webservice that times out when running long queries.
    Caught exception while handling request: oracle.oc4j.rmi.OracleRemoteException: An exception occurred during transaction completion: ; nested exception is:
         javax.transaction.RollbackException: Timed out
    How can I increase the timeout value for this webservice?
    Thanks!

    at the oc4j directory you can find in j2ee\home\config the file transaction-manager.xml where you can change the value of transaction-timeout
    cumps
    DnlCY

  • Timeout value for remote service

    We are running Tuxedo 6.5 on a Unix Sun Solaris system. We are also
    using the SNA eLink Facility to access
    CICS Transactions on a OS/390 Host System. We have Remote Domain
    Service Definitions
    (DM_REMOTE_SERVICES) for each CICS Transaction.
    In the UBBCONFIG file we did define a application-wide timeout
    value of 90 seconds (BLOCKTIME). But
    a few transactions can run up to 4 Minutes. I don't really want
    to increase the Blocktime value.
    Does anybody know, if there is a way to specify a timeout value
    for specific remote services.

    Hi Richard,
    Thanks for your answer.
    I did some testing with the TRANTIME parameter, but
    our application is still acting the same way.
    I think the TRANTIME parameter only works with AUTOTRAN
    set to Y.
    Any other ideas ?
    "Richard C. Harrelson, Jr." <[email protected]> wrote:
    Jurgen,
    I believe the TRANTIME parameter for the remote service
    in the DMCONFIG (DM_REMOTE_SERVICES) sets the timeout
    value. An example from mine:
    GY550_SE AUTOTRAN=N
    CONV=N
    LDOM=VTM4R22
    LOAD=50
    PRIO=66
    RDOM=FRITZ22R31
    RNAME="ASERIESOLTP"
    TRANTIME=30
    API=ATMI
    FUNCTION=APPC
    "Jürgen Voss" wrote:
    We are running Tuxedo 6.5 on a Unix Sun Solaris system.We are also
    using the SNA eLink Facility to access
    CICS Transactions on a OS/390 Host System. We have RemoteDomain
    Service Definitions
    (DM_REMOTE_SERVICES) for each CICS Transaction.
    In the UBBCONFIG file we did define a application-widetimeout
    value of 90 seconds (BLOCKTIME). But
    a few transactions can run up to 4 Minutes. I don'treally want
    to increase the Blocktime value.
    Does anybody know, if there is a way to specify a timeoutvalue
    for specific remote services.

  • Oracle access manager - Policy domain - Return Type

    Hi,
    I have a requirement where I need to return few LDAP parameter values through Policy domain while redirecting. But the return type should be propertytype and not headervar or cookie. This is SSO integration with websphere using JAAS subject. We have inhouse TAI connector developed for integration between websphere and oracle access manager.
    Please help me to resolve this issue.
    Regards,
    Prashant

    Hi Prashant,
    OAM can return any type that you want, and OAM will set the name/value for that type - you can put "propertytype" in the type column, and the name and return attribute in the respective fields. "Cookie" and "HeaderVar" are the only types used by OAM WebGates, but your AccessGate (custom in-house connector) should be able to retrieve the values of propertytype that OAM sets.
    Regards,
    Colin

  • Changing TCP/IP timeout conditions?

    I am running LV8.5 across several different platforms (Mac, Linux, Windows).  I am using the standard LV TCP/IP listen/connect vi's within a larger custom network communication vi, and I am trying to make my application both platform-independent and robust against various types of network and/or LabVIEW failure.  I am encountering a problem after I either stop the vi which controls the network connection or kill LV to simulate an overall "crash" of the application.  After the stop/crash, I want to restart the network connection vi immediately; however, I am running up against the OS's built-in "Timed Wait", in which the stale socket connection is not immediately killed.  If I restart the vi too soon, the TCP/IP Listen vi returns "Error 60", since, obviously, the port I have chosen is still reserved by the system for the previous socket connection.  The idea behind the "Timed Wait" is to avoid killing active sockets that just don't happen to be passing any messages within a (presumably short) period of time, but the forced wait I am experiencing prior to reconnection is not optimal for my application.  Furthermore, the amount I have to wait is platform-dependent--there is a noticeable difference between Unix-based systems and Windows, for example.  Among other requirements, I would like uniform reconnection behavior regardless of platform, so what I am trying to do is find a way to set the timeout condition just for this socket, while leaving the overall "Timed Wait" for the system at the default value.  If the "socket timeout" value is in fact user-definable within LV, then I can determine by trial and error the optimal value that allows me to reconnect in a timely fashion while still avoiding timeouts on an active connection.  But at this point I don't see how to set this value at all, since the relevant TCP/IP vi's do not have the appropriate input wires.  They do have inputs that determine their own timeout conditions, but this is only for determining after what amount of time, for example, the Connect vi returns a failure to connect, not the timeout value that determines when to kill a stale socket after a previously-successful connection has been terminated.
    A solution that was offered to a previous discussion board request based on the same Timed Wait/Error 60 problem was to change/increment the port for the new connection so that it is not attempting to use exactly the same resources as the old connection.  I do not want to do this, since
    other aspects of my program currently require the port to be set to a specific
    value (in addition to the lesser concerns I have about using up the available port resourcess if the vi experiences multiple failures in rapid succession).  So again, what I am hoping to find is a way to change socket-specific timeout conditions within LV.  If the answer is, in fact, "LabVIEW does not support this feature", that is OK--as long as I know that for sure, then I can implement other work-arounds.  For example, I've already build a "While Error...wait N seconds" into the reconnect step of my network communication vi; however, having the ability to define for myself the interval after which I can reconnect would still be preferable.
    Thank you,
    Kyler

    Hi kkuehn,
    I've talked to a few more application engineers here, and this issue sounds like it's an operating system setting.  Could you change this setting?  ...potentially, yes.  The hard part would be in finding out where to change it for each operating system.  I don't really have any paths to point you down though in your search.
    There's one option you could investigate.  Before trying to reopen the "stale" port, you could try closing that port at the beginning of the program.
    Perhaps someone from the community, who has more operating system knowledge as to this option, could respond to this post as well.
    I hope this helps,
    Kevin S.
    Applications Engineer
    National Instruments

  • Simple menu timeout value CVP 8.0

    Hello,
    I am just getting started with CVP development for simple ACD call flows (ICM). I am using the basic things, like the menu elements for prompting callers.
    Most everything appears to be working OK, except the timeout and no match values associated with the menu options.
    I can get around the nomatch path by using 10 element menus and catching all values, but the noinput (i.e. timeout) values don't seem to be used.
    As I test, and don't input anything from the phone keypad it just continuously loops around on the audio and never returns control to ICM.
    I have tried shortening the timoue value and maxnoinput, but still it just loops. I know I am just beginning, but is there something I am missing?
    I've attached a screenshot of what I am looking at for values and call flow in CVP / Call Studio.
    Thanks for any assistance.
    Greg

    Nevermind, all. Just a simple 'change' did the trick.
    :)

Maybe you are looking for