Clear ACL entries

Hi,
I have setted ACL entries which i dont want.
Now im unable to remove the acl entries...
I tried with setfacl -d command, its given that owner and group acls cant be deleted.
If any method to do this tell me.
or. Can i change the owner and group permissions of the Directory or file with ACL entries.
Thanks in advance.
Pani

If you just read man pages for -d switch of setfacl file, you get to know that this is common for being unable to remove access control list for owner and owner's group. So chmod can change these permissions at anytime. You remove all other enties with -d and let setfacl -m change for owner group entries. ( chmod may be used but remember to use getfacl as it could change unexpectedly).
If the process is necessary, i would suggest to 'cat' this file (copy and paste text). If it is data file reopen it in application and do save as. Then you can safely delete previous file. Do not use copy command (cp) to make a new copy. It would copy ACL too.
Hope this helps.

Similar Messages

Hi I'm running Addressbook and cannot clear previous entry easily when searching my data base of around 5,000 contacts. I prefer to view in All contacts on a double page spread with details on the right page. Searching doesn't seem to work correctly i

Hi I'm running Addressbook and cannot clear previous entry easily when searching my data base of around 5,000 contacts.
I prefer to view in All contacts on a double page spread with details on the right page. Searching doesn't seem to work correctly in this view.
It's always the second search that is problematic.
I've tried typing over and all it seems to do is confine the search to the the entries that have come up for the previous search.
I've tried to use the x to clear the previous entry and then type the next search, same problem. The only way seems to be to move from "All Contacts" to "Groups". Then the searched name appears and I can return to All Contacts to see full details.
Surely three key press' are not the way it's supposed to work?
FYI
Processor 2.7 GHz Intel Core i7
Memory 8 GB 1333 MHz DDR3
Graphics Intel HD Graphics 3000 512 MB
Software Mac OS X Lion 10.7.3 (11D50d)
Address book Version 6.1 (1083)
MacBook Pro, Mac OS X (10.7.1), 8Mb RAM 2.7Ghz i7

AddressBook experts are here:
https://discussions.apple.com/community/mac_os/mac_os_x_v10.7_lion#/?tagSet=1386

QoS: Multiple acl entries cannot be used in match-any in class Match_XY

Hello All,
I'm getting below error while trying to add the two extended ACL in the class-map for classifying the traffic. Is there any way I can add two extenteded ACL in the same class-map for classifying the traffic.
Error log: "QoS: Multiple acl entries cannot be used in match-any in class Tag_AF13"
device details: cisco WS-C6506-E with Supervisor Engine 2T
IOS version -s2t54-adventerprisek9-mz.SPA.150-1.SY1.bin
R1(config)#class-map match-any Tag_AF13
#match access-group name XX
#match access-group name XY
QoS: Multiple acl entries cannot be used in match-any in class Tag_AF13
Regards,
Thiyagu

Hi Rajan,
Thats because of the logic used for ACl operations, as per your config you are class-map match-any. The match any argument says that the class map must match either of the two arguments supplied.So lets take a look at how the sequence of operations of how this will be interpreted by your class map.
1> Any particular packet will be first matched against the first ACL "XX".
2> Suppose there are 10 entries there if it matches any of those entries the appropriate action will be talen.
3> If none of those entried match the packet there will be an implicit deny at the end of the ACL( default behaviour of ACL's)
4> In that case the packet will match the implicit deny and will get dropped.
5> The packet will under no circumstances go to the next ACL "XY"
Thats the reason multiple ACL's aren't allowed by the IOS.
You can try to collate both ACL's and put them in just one ACL that should work well. If you need help please pots both the ACL's.
Please do let me know if you have any further questions
HTH
Regards
Umesh

Clearing individual entries from Google search box

Hi, I would like to know if it is possible to clear individual entries from the Google search box history using Safari. I know how to clear the entire list, but what I want is to keep some entries but not others. On IE and Firefox this is done by highlighting the entry and pressing Delete or Shift-Delete, but I've tried various permutations of these with Safari and none seem to work. Any help much appreciated - many thanks.

Hi Richard,
Your recent search items are located in the 'RecentSearchStrings' array within com.apple.Safari.plist. It's a file located in ~/Library/Preferences/, where the ~ is your user home folder. Note, if you wish to edit this file within OS X, you will require the Property List Editor which comes as part of Developer Tools (it's on your OS X installation CD as an optional installation).
I'm sure someone more knowledgeable can put together a neat command you can issue in the Terminal (/Applications/Utilities/) which will serve the same purpose.
Yang

Clearing the entries of SDCR transcation types in crm_dno_monitor

Hi all,
In the phase of charm configuration i tried to check the flow with the several request and the flow is successful . Now the charm flow is working fine. Very happy from that
Now the probelm is there are many SDCR request in crm_dno_monitor. I need to clear this entries. Is there anyway to clear the entries or hide the existing one.
Regards
Vijay
Edited by: vijay on Jul 14, 2008 9:38 AM

Hey Vijay,
Unfortunately you cannot Delete Test transaction type( SDCR) created..
As this Solman basically uses the CRM functionality only, so deleting is not possible... But archiving is possible... However archiving itself is one huge project.......
So better dont opt for it..
An alternate solution would be that you use BADI CRM_DNO_MONITOR to exclude the Test tickets that were created.. This way you wont find the test tickets after executing that transaction......
You might require services of an ABAP consultant to get this thing done......
Inspire by rewarding
Regards,
Anand Rangarajan

Cisco 6500 --ACL entries showing incorrect order.

Hi guys,
I need your suggestion on my following issue:
I have configure the ACL entries on my cisco 6500 series box but I see the ACL entries showing incorrect order when I check for the same.
Eg:
Europebox#show access-list 50
10 permit 192.50.20.2 (10 matches)
15 permit 192.52.0.134 (98 matches)
75 permit 198.29.232.23 (38 matches)
80 permit 10.96.127.14
90 permit 192.22.2.10
40 permit 192.22.0.76
anyhelp would be appriciated
regards
neha

Hi neha,
This is the expected behaviour that you see for the standard access-lists.
Regards
Inayath

When is acl entry created on router?? troubleshooting

Hello,
I need to know what exactly constitutes a hit on an access-list. I was doing some troubleshooting and I
did not get the expected results. I thought the first packet to match would be equal but it looks like it
may require a 3-way handshake.
I have an extended access-list in place on a 2811 router for troubleshooting/logging. I was troubleshooting inbound traffic so I stripped
away the cbac and existing ACLs from the interface. I then began doing a telnet test such as "telnet
192.168.2.80 80" from windows machine and then I would review the log to verify it got hit by the ACL. This
test worked. I then set up a dummy NAT entry with port 27. I do not have a service running on port 27 (of
course) but i wanted to see if the initial SYN packet would cause it log a hit. It never did. So does the
ACL entry create require a 3-way handshake.?
My original goal was to determine why smtp (port 25) traffic isn't hitting my mail server. I never see any
hits. Thank you.
interface FastEthernet0/1
ip address dhcp client-id FastEthernet0/1
ip access-group 124 in
no ip redirects
no ip unreachabes
no ip proxy-arp
ip flow ingress
ip nat outside
ip virtual-reassembly in
duplex auto
speed auto
no mop enabled
ip nat inside source static tcp 192.168.2.41 25 interface FastEthernet0/1 25
ip nat inside source static tcp 192.168.2.34 1723 interface FastEthernet0/1 1723
ip nat inside source static tcp 192.168.2.34 3389 interface FastEthernet0/1 3389
ip nat inside source static tcp 192.168.2.34 80 interface FastEthernet0/1 80
ip nat inside source static tcp 192.168.2.34 25 interface FastEthernet0/1 25
ip nat inside source static tcp 192.168.2.34 27 interface FastEthernet0/1 27
ip nat inside source route-map test_pmap interface FastEthernet0/1 overload
ROUTER01#sh log | inc 24.201.81.44
037251: Mar 18 20:05:08.467 PCTime: %SEC-6-IPACCESSLOGP: list 124 permitted tcp 24.201.81.44(17743) ->
134.134.134.134(1723), 1 packet
037358: Mar 18 20:08:32.052 PCTime: %SEC-6-IPACCESSLOGP: list 124 permitted tcp 24.201.81.44(17850) ->
134.134.134.134(80), 1 packet
ROUTER01#
access-list 124 permit udp any gt 0 any gt 0 log
access-list 124 permit tcp any gt 0 any gt 0 log

You're welcome.
Going back to your original post:
5) Tried running Itunes in 'safe mode', running itunes as an administrator..nothing.
Was that iTunes' safe mode as opposed to Windows' safe mode? iTunes safe mode is invoked by holding down CTRL+SHIFT immediately after clicking the icon to launch iTunes and continuing to hold until this message pops up:
Click continue, then close iTunes and reopen. With luck iTunes now opens normally every time.
tt2

Acl Entry is not removed via KM API

Hi,
I want to update or remove an ACL Entry for a user on a certain resource.
For ex. If for a resource A, User "User1" has READ permissions, now if I want to remove these read permissions for user "User1" on this resource A, I am not able to do so using KM API.
The code which i am using for this is
resourceInfo is of Type IResource.
// Get the Acl Security manager.
IAclSecurityManager aclSecurityManager = (IAclSecurityManager) returnResourceInfo.getRepositoryManager().getSecurityManager(resourceInfo);
// Get the resourceAcl manager.
IResourceAclManager resourceAclManager = aclSecurityManager.getAclManager();
// Get the resource Acl
IResourceAcl rACl = resourceAclManager.getAcl(resourceInfo);
Here i am not having any method which remove the Acl entry for the specific user ex. "User1".
Edited by: Lokesh Malik on Nov 13, 2008 9:57 AM
Edited by: Lokesh Malik on Nov 13, 2008 12:13 PM

HI Lokesh,
this might help,
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/1070413a-29e7-2a10-cc81-cdc92cdd231b
but you have to take into account that the resource can inherit the acl from the folder, so
if the ResourceAcl is null, you can create an acl and assign the permissions you want for the resource.
IResourceAcl ra = ram.getAcl(resource);
               if(ra == null){
                    //"inherited permissions from the folder";
// instead of taking from the folder
//ra = ram.getInheritedAcl(resource);
// create your own acl
ra = ram.createAcl(resource);
ra.addOwner(resource.getContext().getUser());
// or whatever you need for this resource....
ra.removeOwner(<IUMPrincipal>);
Hope this helps
Regards
DV

ASDM _ref ACL Entries

Can someone explain to me how ASDM handles the _ref ACL entries, it appears to me that it will create them automatically, and sometimes replace my original entry with _ref appended. For instance if I create an ACL sql_servers and then later make changes it appears to create an ACL sql_servers_ref, and then I end up with two ACL's. This gets a little annoying. How should I handle this??

ASDM has a paradigm of real object-groups XXX and mapped object-groups XXX_ref.
The real object-group XXX is created via ASDM GUI. When a real object-group is used in ACL, ASDM automatically calculates the required translations and creates and uses XXX_ref in the ACL.
When configuration is parsed by ASDM, it check that all XXX and XXX_ref are is sync because the relationship might be broken if user changes them via CLI.

Clear Text Entry after wrong answer

Hello,
I'm searching a way for clearing text entry box after the
user entered a wrong answer.
If this it's not possible to do that with text entry, is it
possible to do that with captivate question quiz, or somthing else?
Thank you
Miky Aviel

The problem is that the text-entry object is a "scoring
object" and it is considered best practice NOT to allow movement to
and fro once a scoring object has been answered.
The solution is to move forward through the eLearning
experience, not back and forth. So how does that apply? Well, one
way is to duplicate the slide, including the text-entry object, so
the same problem can be offered for solution in the slide(s)
following the failed effort. The same principals apply to question
slides ... if you want the user to retake a failed effort, you
should add (for instance) an "explanation" slide after the question
slide and route the use to that following failure; then the
following slide can be a re-creation of the question slide if you
want to give the student a second chance at the same question.
There are problems with doing it this way - for one, the
scoring is going to be "skewed" - or could be unless the second
attempt is weighted at "zero". But since the basic learning concept
of asking each question only once is being thrown out anyway, the
skewed scoring may not be a big deal (?).

"Extra" ACL entries appearing

It seems that whenever a windows xp user accesses a file on our 10.5 server, it adds its own odd ACL entries to the file.
For example - a Folder with ACL Workgroup Allow Full Control, This folder, Child Files, Child Folders, All descendants will have a file inside with the same permissions...
Until a Windows PC get hold of it - then the ACL may look like this..
Mich, Allow, Custom, This File
Everyone, Allow, Custom, This File
Workgroup, Allow, <Custom>, <This File> .... denotes grey text
Workgroup, Allow, <Custom>, <This File>
Workgroup, Allow, <Custom>, <This File>
What the heck! What's causing this and how do I fix it?

No problem. The clip is an MPEG4 and the link is http://www.archive.org/details/linktv_globalpulse20090731 The frame that reappears seems to be always one from 20 or so frames before the point at which you cut.

Invoice cancellation not clearing original entry at FBL5N

Hi Experts,
When we are doing a sales Invoice cancellation scenario the reversal accounting document is not getting cleared automatically, further it is posting as seperate line item at FBL5N. The requirement is to offset the entry of customer debit at FBL5N. Since the customer account debit is not getting cleared it is showing as due item.
At billing document settings we have maintained SD Doc category 'N',
It is picking up posting key 11 (credit memo) instead of 12 (Reverse Invoice) when I'm reversing the Invoice.
Where do we define posting key 12 for this scenario and do we need to create a separate document type for this or any other setting needs to be configured.
Thanks in Advance

Hi
See Note 309208 - Negative posting not performed to know the possible reasons for not clearing. As SAP Note 1259505 - FAQ: New cancellation procedure in SD says:
"The most evident effect of the new cancellation procedure is the automatic
clearing of the accounting documents."
So, search in note 309208 why it happens
I hope this helps you
Regards
Eduardo

Clear the entry for killed/sniped session in v$session

Dear all,
In our production database(11.2.0.1.0) running on windows 2008 server many client session showing inactive from last 4-5 hour and I want to kill those session because all sessions are dedicated so for this I created a resource plan set its idle time after certain interval session status is showing killed but it is not removing entries from v$session but our client demand is it must be clear from v$session so for this i was using DOS command taskkill utility to kill particular os process so I want to know what is the smartest way to do this.

This is known behavior, not an issue.
In a dedicated server environment when the session is killed and the rollback completes the process goes away so a join between v$session and v$process will fail. The v$session entry also usually goes away rather quickly, though I have seen cases where the v$session entry hung around till the instance was bounced. But normally Oracle will overlay the v$session entry with a new session using the same sid but a different serial# within seconds on a busy system.
Mark @ http://dbaspot.com/oracle-server/40419-killed-sessions.html
Metalink doc id 1023442.6 is also something confirming it.
See also below link and last reply by Mr. Braj Kishore Mahto.
http://dbaforums.org/oracle/index.php?showtopic=3039
Regards
Girish Sharma
Edited by: Girish Sharma on Nov 21, 2012 5:35 PM
So, what is best in this regard :
ALTER SYSTEM DISCONNECT SESSION
The ALTER SYSTEM DISCONNECT SESSION syntax is an alternative method for killing Oracle sessions. Unlike the KILL SESSION command which asks the session to kill itself, the DISCONNECT SESSION command kills the dedicated server process (or virtual circuit when using Shared Sever), which is equivalent to killing the server process from the operating system. The basic syntax is similar to the KILL SESSION command with the addition of the POST_TRANSACTION clause. The SID and SERIAL# values of the relevant session can be substituted into one of the following statements.
SQL> ALTER SYSTEM DISCONNECT SESSION 'sid,serial#' POST_TRANSACTION;
SQL> ALTER SYSTEM DISCONNECT SESSION 'sid,serial#' IMMEDIATE;
http://www.oracle-base.com/articles/misc/killing-oracle-sessions.php#disconnect_session

Clear/empty entry of field after validation pattern message

Can anyone help me please with the following:
Now when user fills a field a validation pattern message shows when entry is not according to validation. BUT...the entry remains.
Do you know how to remove the entry from the field after clicking OK on the validation pattern message box?

I don't know how to do that, but I think it would be user abuse to clear out the field. If I mistype a date or an SSN for example, I don't want to have to type it all over again, just correct my mistake.
Jared

Logging ACL entry to Syslog server

I have a simple access-list configured on the outside of an ASA
access-list outside_in permit tcp any host x.x.x.x eq 80
access-list outside_in permit tcp any host x.x.x.x eq 443
access-list outside_in deny ip any any
Could someone please post a sample config showing how I can log all entries that hit the deny statement, and send them to a syslog server?
Thanks in advance

Hi,
You just need to add a "log" key word after the ACL and then it would be sent to your syslog server.
access-list outside_in deny ip any any log
Hope that helps,
Thanks,
Varun

Clear ACL entries

Similar Messages

Maybe you are looking for