Creating Network homes for Users in AD

I am trying to create some Network Homes to use for our Macs on campus. I have created the share and everything, but when I go to "Create Home Now" inside of Workgroup Manager it always gives me an error. The error is very generic so I am not sure what it means. All of our Users are stored in AD and OD just authenticates through AD. Is this a problem? Can you not create network homes for AD users?

Here is the error I get in Console when I try:
3/8/11 8:44:37 AM Workgroup Manager[49785] void -[UserVolumesPluginView(PrivateMethods) gotServerError:forTransaction:](UserVolumesPluginView*, objc_selector*, objc_object*, XSAdminTransaction*): got error kGotAuthenticationFailure from request (null)

Similar Messages

How can I create a form for users wherein the text field will expand to accommodate additional text?

How can I create a form for users wherein the text field will expand to accommodate additional text?

You need to use LiveCycle (PC Only) to create a dynamic form like that.
The best you can do with Acrobat to view all of the text in a field is to set the field to multiline, and set the size to "Auto" (If you don't set the size to 'Auto', you can enter as much text as you wish, but the user will need to use the scrollbar to view all of the text.)

Create a screen for user input in BI

Hi Experts,
I want to know can i creat a screen for user input in BI with module pool programing
and i want to store the data in ztable in SAP-BI.
Moderator message: please search for available documentation, these forums are no substitute for ABAP training.
Edited by: Thomas Zloch on Dec 10, 2010 8:37 PM

I'm afraid that I cannot get it. I had a look at the docs you suggested before posting, and still, no luck (...)
JOptionPane.showMessageDialog(dialog, "Please input info");Can you please tell me what I'm doing wrong and I cannot add the JDialog to the JOptionPane?Re-read the API and tutorial. JOptionPane is meant specifically to spare you from instantiating manually a JDialog. The showXxxDialog(...) methods do create a JDialog of their own, based on the contents supplied as arguments.
In particular, using the 2-arguments variation showMessageDialog(Component parentComponent, Object message):
- The first argument parentComponent is not be the dialog you want to display, but the component over which you want the dialog to appear. The most typical value are this or null.
- The second argument is the "message" to display, but as described in the API, it can be a JComponent, that is, even a JPanel with child widgets (in a word, a JPanel containing the specific form you'd display in the dialog if you were writing the dialog manually).
Again, at the risk of insisting densely, I'm only quoting the API an tutorial, so please read them attentively.
Edited by: jduprez on Nov 2, 2009 2:29 PM - Sorry Kevin, hadn't seen you latest reply. I completely subscribe to the thought process you recommend.
Edited by: jduprez on Nov 2, 2009 2:32 PM
Thinking about it further, I don't completely subscribe... Indeed it looks like a bad idea to make the OP wonder about dialog.setVisible() when JOptionPane enables him to forget about the hand-made dialog. I stand by my own advice ("JDialog" should not even appear in this code extract).

ORA-31637: cannot create job SYS_IMPORT_SCHEMA_01 for user SYSTEM in impdp

Hi All,
During impdp i am getting this below error:
ORA-31626: job does not exist
ORA-31637: cannot create job SYS_IMPORT_SCHEMA_01 for user SYSTEM
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 95
ORA-06512: at "SYS.KUPV$FT_INT", line 600
ORA-39080: failed to create queues "KUPC$C_1_20090507123340" and "KUPC$S_1_20090507123340" for Data Pump job
ORA-06512: at "SYS.DBMS_SYS_ERROR", line 95
ORA-06512: at "SYS.KUPC$QUE_INT", line 1606
ORA-04031: unable to allocate 56 bytes of shared memory ("streams pool","unknown object","streams pool","fixed allocation callback")
Also increase shared memory hence creating the same problem.
Can anyone sujjest me what would be the cause?
Thanks in advance...

Increase parameter streams_pool.
Set it for example to 100MB
Then try again.

Creating SMB shares for users

Hello,
I am the sole IT person at a Highschool of about 500+ kids. We just bought a new mac mini server with a pegasus 12tb add on. We always used mac but the students data has been stores locally on computers. We would like to keep their accounts stored locally on a computer but give each student ~10gb of data in their own personal share that only they and administration can access. Is there a setting in workgroup manager for this? Obviously creating individual folders and configuring permisisions is not an option. Of couse this would be over smb so that the very few pc's we have could also access these shares in a pinch. Any ideas? I thought for sure this was possible via mac server.
Thanks for the help,
Lloyd

So essentially you were storing data locally and are looking to migrate that data to your raid/storage and give them access to that storage or start new/fresh with access for them to their own directories on the raid/storage if I'm reading this correctly? I'm confused when you state:
Obviously creating individual folders and configuring permisisions is not an option.
Essentially what I am assuming you could do, taking you are not binding into the mini server, is create network accounts (need to enable/configure Open Directory prior), or in your sitation even create local accounts via Server. OSX will by default create them a user folder on the Server HD, you can also create your own custom share(s) and enable those as home folders independantly for each user, again it depends upon your configuration(s) and growth plan(s). I believe the users directories have afp and smb enabled by default. You can then drill down into the user directories permissions via Server in Storage and customize permissions as needed for your situation (ie. user r/w admin(group etc) r/w everyone and others no access etc). I know I've read that Apple is doing away completely with AFP and migrating to SMB2 with Mavericks, though I have not "seen" this, not sure if it's already happening in the background and they are allowing AFP for legacy currently or what. I also know in previous versions of Server (10.6) you could more granularly enable/disable SMB access for user accounts as well so you could allow the protocol on various shares and also the protocol itself on specific user accounts. I don't see that in 3.1.1 (if anyone knows if this exists any more or has been removed that would be great). I do believe if you are creating local accounts, you will then be able to turn SMB on/off for that user via the System Preferences > Sharing > File Sharing > Options button.
Once this is all established you can then authenticate via Windows with the proper UNC path ie. \\myserver-1\Users\usera and authenticate as usera. Anyway hope this helps, think it shoud give you some direction or answer(s)?

Problem creating Network ACL for a ROLE in Oracle 11gR2

According to Oracle Documentation when you create a new Network ACL you can add privileges to a user or role. I need to create a new ACL for the UTL_SMTP package for a specific role, but when I granted it the users who have that role are still getting the "ORA-24247: network access denied by access control list (ACL)" error when they try to send an email. If I grant the ACL privilege to the same users directly it works fine. Is there any step I'm missing? This is the test I have made on my Solaris 10 - Oracle 11gR2 (11.2.0.3) Standard Edition server:
SQL*Plus: Release 11.2.0.1.0 Production on Wed Aug 21 09:31:52 2013
Copyright (c) 1982, 2010, Oracle. All rights reserved.
SQL> CONNECT system/******@testdb
Connected.
SQL> SET LINES 1000
SQL> SELECT * FROM v$version;
BANNER
Oracle Database 11g Release 11.2.0.3.0 - 64bit Production
PL/SQL Release 11.2.0.3.0 - Production
CORE    11.2.0.3.0      Production
TNS for Solaris: Version 11.2.0.3.0 - Production
NLSRTL Version 11.2.0.3.0 - Production
SQL> COLUMN host FORMAT A20
SQL> COLUMN lower_port FORMAT 99999
SQL> COLUMN upper_port FORMAT 99999
SQL> COLUMN acl FORMAT A40
SQL> COLUMN acl FORMAT A40
SQL> COLUMN principal FORMAT A15
SQL> COLUMN privilege FORMAT A10
SQL> COLUMN is_grant FORMAT A8
SQL> COLUMN status FORMAT A10
SQL> SELECT host, lower_port, upper_port, acl FROM dba_network_acls;
no rows selected
SQL> SELECT acl,principal,privilege,is_grant FROM dba_network_acl_privileges;
no rows selected
SQL> CREATE USER testacl IDENTIFIED BY testacl;
User created.
SQL> GRANT CONNECT TO testacl;
Grant succeeded.
SQL>
SQL> BEGIN
2     dbms_network_acl_admin.create_acl('test_smtp.xml','TEST SMTP ACL','TESTACL',true,'connect');
3     dbms_network_acl_admin.assign_acl('test_smtp.xml','localhost',25);
4     commit;
5 END;
6 /
PL/SQL procedure successfully completed.
SQL> SELECT host, lower_port, upper_port, acl FROM dba_network_acls;
HOST                 LOWER_PORT UPPER_PORT ACL
localhost                    25         25 /sys/acls/test_smtp.xml
SQL> SELECT acl,principal,privilege,is_grant FROM dba_network_acl_privileges;
ACL                                      PRINCIPAL       PRIVILEGE IS_GRANT
/sys/acls/test_smtp.xml                  TESTACL         connect    true
After creating this ACL I test it like this:
SQL> CONNECT testacl/testacl@testdb
Connected.
SQL> SELECT host, lower_port, upper_port, privilege, status FROM user_network_acl_privileges;
HOST                 LOWER_PORT UPPER_PORT PRIVILEGE STATUS
localhost                    25         25 connect    GRANTED
SQL> DECLARE
2     c utl_smtp.connection;
3 BEGIN
4     c := utl_smtp.open_connection('localhost', 25); -- SMTP on port 25
5     utl_smtp.helo(c, 'localhost');
6     utl_smtp.mail(c, 'Oracle11.2');
7     utl_smtp.rcpt(c, '[email protected]');
8     utl_smtp.data(c,'From: Oracle'||utl_tcp.crlf||'To: [email protected]'||utl_tcp.crlf||'Subject: UTL_SMTP TEST'||utl_tcp.crlf||'');
9     utl_smtp.quit(c);
10 END;
11 /
PL/SQL procedure successfully completed.
SQL>
This works fine and I receive the email correctly. Now if I try to do the same thing for a role:
SQL> CONNECT system/******@testdb
Connected.
SQL> BEGIN
2     dbms_network_acl_admin.drop_acl('test_smtp.xml');
3     commit;
4 END;
5 /
PL/SQL procedure successfully completed.
SQL> SELECT host, lower_port, upper_port, acl FROM dba_network_acls;
no rows selected
SQL> CREATE ROLE testacl_role;
Role created.
SQL> GRANT testacl_role TO testacl;
Grant succeeded.
SQL> ALTER USER testacl DEFAULT ROLE ALL;
User altered.
SQL>
SQL> BEGIN
2     dbms_network_acl_admin.create_acl('test_smtp.xml','TEST SMTP ACL','TESTACL_ROLE',true,'connect');
3     dbms_network_acl_admin.assign_acl('test_smtp.xml','localhost',25);
4     commit;
5 END;
6 /
PL/SQL procedure successfully completed.
SQL> SELECT host, lower_port, upper_port, acl FROM dba_network_acls;
HOST                 LOWER_PORT UPPER_PORT ACL
localhost                    25         25 /sys/acls/test_smtp.xml
SQL> SELECT acl,principal,privilege,is_grant FROM dba_network_acl_privileges;
ACL                                      PRINCIPAL       PRIVILEGE IS_GRANT
/sys/acls/test_smtp.xml                  TESTACL_ROLE    connect    true
SQL>
And now I test it again with the same user:
SQL> CONNECT testacl/testacl@testdb
Connected.
SQL>
SQL> SELECT host, lower_port, upper_port, privilege, status FROM user_network_acl_privileges;
no rows selected
SQL> DECLARE
2     c utl_smtp.connection;
3 BEGIN
4     c := utl_smtp.open_connection('localhost', 25); -- SMTP on port 25
5     utl_smtp.helo(c, 'localhost');
6     utl_smtp.mail(c, 'Oracle11.2');
7     utl_smtp.rcpt(c, '[email protected]');
8     utl_smtp.data(c,'From: Oracle'||utl_tcp.crlf||'To: [email protected]'||utl_tcp.crlf||'Subject: UTL_SMTP TEST'||utl_tcp.crlf||'');
9     utl_smtp.quit(c);
10 END;
11 /
DECLARE
ERROR at line 1:
ORA-24247: network access denied by access control list (ACL)
ORA-06512: at "SYS.UTL_TCP", line 17
ORA-06512: at "SYS.UTL_TCP", line 267
ORA-06512: at "SYS.UTL_SMTP", line 161
ORA-06512: at "SYS.UTL_SMTP", line 197
ORA-06512: at line 4
SQL>
I'm aware that role privileges doesn't apply inside procedures, functions or packages by default, but this is an anonymous block so it should use the active roles for the user. I also tried adding a "dbms_session.set_role('TESTACL_ROLE');" at the beggining of the anonymous PL/SQL block but I got the same access error.
Thanks in advance for any help you can give to me on this question, it would be very hard to grant the ACL to all the individual users as they are more than 1000, and we create more regularly.

Thanks for your quick reply... I don't have a problem creating the basic ACL with the privileges granted for a user. The problem appears when I try to create an ACL with privileges for a ROLE. You can see here http://docs.oracle.com/cd/E11882_01/appdev.112/e25788/d_networkacl_adm.htm#BABIGEGG than the official Oracle documentation states that you can assign the ACL principal to be a user or role:
Parameter
Description
acl
Name of the ACL. Relative path will be relative to "/sys/acls".
description
Description attribute in the ACL
principal
Principal (database user or role) to whom the privilege is granted or denied. Case sensitive.
My issue is that when I try to create the ACL for a role it doesn't work.
Have you ever created an ACL for a role? if so please send me an example or let me know which step I might be missing. Cheers.

How to create fillable forms for users of reader IX or X in acrobat pro XI?

I created fillable forms in Acrobat Pro XI. How can i make them fillable also for users with Reader IX or X? As Adobe Reader für Vista or Linux is only available in version IX or X, it is not possible for these users to fill in the forms?

Open PDF Form in Acrobat XI then choose File > Save As Other > Reader Extended PDF > Enable More Tools (inclues form fill-in & save)...
Then, save the form with new name and it's gonna work.
Message was edited by: Anoop9178
Edited the option.

Auto create profile page for users that register? Please help!

Hi everyone,
I am building a site along with other people and I am the main web designer. I need to know how to have my site automatically create a users profile page when the said user registers on the site. Something very similar to YouTube or MySpace. Example: If a user where to create an account with the username bob678 the site/code would a page called examplesite.com/userid/bob678 (like I said before very similar to YouTube). I cant seem to find the answer to this anywhere but I know it is possible. Any and all help is very appreciated!
PS. I already know how to allow people to register, I just need it to create a page for them.

Ok here it is. How to create the profile page automatic after registering. I'm assuming you have created a "register.php" page and a "login.php" page. Both pages have a relationship with your database tables using PHPMySQL as well. When you created the login.php page a session variable was created. You can find it on the login page only when viewing the page in code view. The session variable will be named "MM_Username" this is case sensitive. Remember this variable.
Step 1-
        Create a new blank.php page. and save it as myprofile.php
Step 2-
        In the bindings menu under applications on the side click the + and choose "Recordset Query". Then stay in the Simple Mode and choose the database connection. Then choose the table containg the columns that you created for your register.php page. Keep the all radio button too. Then choose the database column you designated to be used for storing the username and proceed to:
                                                                                     Filter: "username"              =
                                                                                               "Session Variable"    "MM_Username"
                                                                                               "Sort"                       "None"
Step 3-
       In the Server Behaviors menu click +, User Authentication- Restrict Access to Page. Set "If access denied, go to: login.php". Then click + again, User Authentication- Log Out User.
Step 4- Insert a table on the page body. Then In the Bindings menu open the + sign of your created recordset. This will display all the columns in your database table. Place the cursur inside the page body table. Then highlight the "username" column from the Bindings menu and click the insert button. This will display the username. Repeat with all columns you wish to be displayed. Save this page.
(Remeber to edit your login.php page by setting "If login succeeds, go to: myprofile.php)
Step 5- "Synchronize Sitewide".
Step 6- Now test the function you just created by starting from the top:
Register as a new user. Once you have submitted your user information go to your login page and login with your new username and password. And if login succeeds, you will go to: myprofile.php. Once the myprofile.php page loads, your username and all the columns you inserted will be displayed. Try registering a second user and see the automatic profile page create.
The secrete in this process is the recordset query being:
                                                  Filter: "username column" = "SESSION VARIABLE" "MM_Username"
Setting up th recordset to be filtered by username tells the page to only display the records of the username that is logged in. If you were to keep the recordset query filter to "None" then every user records will be displayed on the page creating like a directory/phone book page.
To sum things up make sure to save the page as a .php first thing. Then create the recordset query. Then restrict access to the page. Then add the log out to the page. This must be done in that order before anything else.

Security Group Creation in Specific OU and Create Network Share For the Security Group

Hi,
We would really want to create a PowerShell script that creates a specific Security Group within a selected Organisation Unit.
Brief Scenario;
We have created several Organisation Units. Each Organisation Unit contains another Organisation Unit called users.
+OU=Netherlands
++OU=Company A
+++OU=users
++OU=Company B
+++OU=users
And so forth.
If we run the PowerShell script it should create a list of all the Companies in container Netherlands. After the list is created it creates an output like 1. Company A; 2. Company B. (Forearch ..)
The script asks for user input where to create the Security Group. If user selects option 2, a security group Called "Company B" is being created. All the users located in the Organisation Unit users within Company B are joined to that group. (Sets
option 2 as a value like Security Group = "$Company B", create Security Group "Universal, Global (option), and get all users from container users and join them)
Then without user interaction a share is being created. Granting Domain Administrators full access and the Security Group which has just been created.
Is somebody able to help me with this kind of script?
Thank you in advance,
With kind regards,
Danny Locorotondo

Already gathered some information. Have this as a result. Now I need to figure out how to put the results into a list, so the user can select the group. As far as now I am stuck.
Import-Module ActiveDirectory
Function SelectCollectionRelease
[CmdletBinding()]
Param
[Parameter(Mandatory=$true,
Position=0,
HelpMessage='Enter the Release of the Collection. By example: Alfa,Beta or Charlie')]
$CollectionRelease
IF(!$CollectionRelease)
write-host "`n You did not select a proper Collection Release" -foregroundcolor "red"
SelectCollectionRelease
Elseif($CollectionRelease)
[string] $OUPath = "OU=$CollectionRelease,OU=VDI,OU=carsystems,DC=carsysdev,DC=local"
if (!([adsi]::Exists("LDAP://$OUPath")))
write-host "`n Collection Release does not exists" -foregroundcolor "red"
SelectCollectionRelease
else
write-host "`n Collection Release exists." -foregroundcolor "green"
write-host "`n Selected $OUPath ..." -foregroundcolor "yellow"
Get-ADGroup -SearchBase "OU=$CollectionRelease,OU=VDI,OU=carsystems,DC=carsysdev,DC=local" -filter {GroupCategory -eq "Security"} | Format-List -Property Name
Else
//$SecurityGroup = Get-ADGroup -SearchBase "OU=$CollectionRelease,OU=VDI,OU=carsystems,DC=carsysdev,DC=local" -filter {GroupCategory -eq "Security"} -and (ObjectClass -eq "user")
SelectCollectionRelease

How do I create an "executable" for users to run calcs?

I need to create an executable that users can launch. I would like it to 1) log in as a "test" user that I have set up in Native Directory, 2) select app/database then 3) launch a series of calcs. I had something set up previously in an earlier version of Essbase but I can't get it to run on Essbase 11.
Here's what I had previously:
Login "servername" "TestUser" "Password" ;
Select "App" DataBase;
RunCalc 2 "Calc 1" ;
RunCalc 2 "Calc 2" ;
RunCalc 2 "Calc 3" ;
Maybe the user's machines don't have all the files needed to run this? It's just flashes and doesn't give me any messages. I'm stumped.

If you are using 11.1.2.1 you would need to set the execution based off the startESSCMD.bat/sh. Here is an example. Check that the startESSCMD script works first so you can get the command line up.
Does startESSCMD work on the machine?
@ECHO OFF
REM --------------------------------------------------------------
REM --                                 --
REM --                        --
REM --                                 --
REM --                                 --
REM --------------------------------------------------------------
@REM This file is created to use essmsh in batch
@REM Set ESSBASEPATH to the setEssbaseEnv in your system
call "C:\Oracle\Middleware\user_projects\epmsystem1\EssbaseServer\essbaseserver1\bin\setEssbaseEnv.bat"
set PATH=%ESSBASEPATH%;%PATH%
%ESSBASEPATH%\bin\esscmd.exe E:\Oracle\Backup\backup\scripts\script.msh

Can't create an alias for User home folder for a second user

Please help:
I can't make an alias of a User home folder of a second user. I can successfully make an alias of a home folder of the first user. The computer says the folder is in use and to wait for some activity to complete, or that I don't have enough privileges. There are no activities happening and both accounts are administrator level. Is this a behavior of OS 10.5.6? I created alias for the two users before, but had unrelated problems and wiped the drive, re-installed 10.5.6 and now I can't do it.
Much thanks and aloha - Rocky

hi Petar,
Wish it was that simple where i can just change the ID to ACT but unfortunately alot of our users like to hardcode there currentview and changing the scenario dimensions would take a big effort and alot of support work. We had changed one of the dimension members before and we got phone calls asking why the report doesn't work for weeks. Do you know if the NW version of BPC has that capability?
Thanks,
Elmer

Create FTP account for user in Solaris 10

Hi,
I am new to Solaris and I need to create a n FTP account so user can have access to certain folder ie /opt/www/docs/newfiles/ (only for upload or download).
user should not be able to go up the defined folder and have access to upper folders.
I tried # useradd -d /opt/www/docs/newfiles/ testuser and then # passwd testuser but this user can navigate up and also can telnet to server.
Please help me to fix the problem. I may not even doing the right thing.
Thanks

Hi.
You can configure the /etc/ftpd/ftpaccess file, to do that, an a lot of things more.
Check ftpaccess man page.
Don´t forget restart your ftp service when you made changes to this file.
For example, modify the following lines, previos backup of the file:
Declare a guestuser:
guestuser testuser
The
user's home directory must be set up exactly as
anonymous FTP would be. The home directory field of the
passwd entry is divided into two directories. The first
field is the root directory that will be the argument to
the chroot(2) call. The second field is the user's home
directory, relative to the root directory. Use a "/./"
to separate the two fields. For example, the following
is the real entry in /etc/passwd:
testuser:x:100:92:Guest FTP:/opt/www/docs/./newfiles:/bin/false
Check for permission capabilities.
The following permission capabilities are supported
chmod yes|no typelist
delete yes|no typelist
overwrite yes|no typelist
rename yes|no typelist
umask yes|no typelist
Example:
delete yes guestusers
Define a directory with dirglob that permits or denies uploads.
upload absolute [class=classname]... [-]
root-dir dirglob yes|no owner group mode
dirs [d_mode]
Example:
upload class=guestuser * /opt/www/docs/newfiles yes testuser nodirs

Controlling network access for user accounts

Can anyone suggest a way to control airport access to a wireless network?
I have an iMac G4 with AirPort running Tiger that I'd like to set up for a young teen to practice doing some video editing. I'd like to have network access disabled under normal circumstances, but be able to enable it easily during times when there is supervision.
Ideally, I'd like to have the airport icon in the menubar and select a network to join causing a prompt for an administrator password. I can't seem to get anywhere close to that. Any help would be appreciated.
Thanks.

Thank you for your quick response.
5. Click the checkbox under Require Administrator
password to:
The two choices I have are:
- when changing networks
- when creating a computer-to-computer network
The first almost gets me what I want, there are two problems with this as I see it.
1. when the computer comes up and automatically logs in, the user is greeted by authentication dialogs. (AirPort trying to connect?) I'd like to configure AirPort not to automatically try to connect and therefore not produce these dialogs.
2. once approved, the network stays approved until the next reboot. I'd like to not be forced to reboot just to "lock down" the network again.
Any help on those two points?

Create a variable for user input entry to act as i/p to anothr variable

Hi,
I have a requirement in my report where i have two variables one is user entry called "A" the a other user exit "B" and the query is based on an ods.
<b>
Scenario:</b> If the user were to enter a string XXX in A, i need to do a search on certain columns in ODS and store the corresponding keys (single column) in an internal table and the internal table column will act as multiple single values for variable B .
<b>Questions:</b>
1. How to get the value entered in A.(so i can do select statement on ODS table).
2. In the select statement we need to specify FROM table, so what would the ods table name be.
3. How to store the values from the select statement into the internal table.
4.How to populate the values in internal table into variable B.
5.Once all this is done i need to reset the variable A to empty.
p.s: ABAP code for any of the following would be highly appreciated.

hi Karthik,
1. you can try
LOOP AT I_T_VAR_RANGE INTO LOC_VAR_RANGE
              WHERE VNAM = 'varA'.
              l_var = LOC_VAR_RANGE-LOW.
2. ods table name = /bic/a[odsname]00 or /bi0/a[odsname]00
3. use select .... from... into table ...
4. loop at that internal table and populate as sample code
5. try to create a RKF with restriction to variable A, and hide this keyfigure,
    not use in reporting.
hope this helps.
Populating material numbers from a table to customer exit bex variable
tables : /bic/azods00.
DATA: it_ods like /bic/azods00 occurs 0 with header line.
CLEAR L_S_RANGE.
WHEN 'varB'.
    IF I_STEP = 2.
      LOOP AT I_T_VAR_RANGE INTO LOC_VAR_RANGE
              WHERE VNAM = 'varA'.
              l_odsfield = LOC_VAR_RANGE-LOW.
SELECT * FROM /bi INTO TABLE it_ods
WHERE odsfield = l_odsfield.
loop at it_ods.
L_S_RANGE-LOW = it_ods-fieldselected.
L_S_RANGE-SIGN = 'I'.
L_S_RANGE-OPT = 'EQ'.
APPEND L_S_RANGE TO E_T_RANGE.
endloop.
      ENDLOOP.

ASA 5520: Create Network Object for range of hosts?

Hi,
I'm new to Cisco Firewalling. I'm migrating our network objects from our current firewall to a new ASA 5520 configuration. I'm using ASDM 6.4 for configuration.
We have a range of IP addresses for hosts that we need to add to a firewall rule/ACL. In the previous FW software I could create an object that was a range of IP address. For example there is an object called emailservers that is defined as 192.168.2.25-192.168.2.50.
Is there a way to do a similar thing on the ASA 5520?
I can see how to create subnets, but in this case I only have a range of IP addresses, no subnet mask.
Any help greatly appreciated.

Sure there is,
hostname(config)# object network TEST2
hostname(config-network-object)# range 10.1.2.1 10.1.2.70
No need for subnet masks, this will be a Object network, not an Object-group of type network. Now in 8.3 they are a lot different.
http://www.cisco.com/en/US/docs/security/asa/asa83/configuration/guide/nat_objects.html
Check this doc for reference.
Cheers,
Mike

Creating Network homes for Users in AD

Similar Messages

Maybe you are looking for