CSA - Network Shield Rule Triggering for IGMP Packets
Hi,
Any ideas, why this Network Shield Rule (For Malicious Packet) is getting triggered for these IGMP Packets ?
TESTMODE: A packet with malicious content was detected. Reason: Malicious packet. IGMP: 10.1.2.136->224.0.0.22 type 0x22. The operation would have been denied.
TESTMODE: A packet with malicious content was detected. Reason: Malicious packet. IGMP: 10.1.2.144->224.0.0.1 type 0x11. The operation would have been denied.
As far I researched 0x11 (Query) and 0x22 (v3Report) are Valid IGMP Packets.
Thanks,
Naman
Try these links:
http://www.cisco.com/en/US/products/sw/secursw/ps5057/products_qanda_item09186a008049ad72.shtml
http://www.cisco.com/en/US/products/sw/secursw/ps5057/products_configuration_guide_chapter09186a00805afcc5.html
Similar Messages
-
Problem with two of my business rule triggers
Good morning every one,
I have a small problem with two of my business rule triggers.
I have these tables:
pms_activity
csh_cash
csh_integrate_leh
csh_integrate_led
and my process goes like this:
upon approval of a row in my pms_activity table I have a trigger that insert a row in my csh_cash - and in the csh_cash table I have a trigger that will insert in the csh_ingerate_leh and csh_integrate_led.
my problem is pms_activity does generate a row in csh_cash but the trigger in the cash does not fire to generate a row in the csh_integrate_leh and led tables.
I have generated in the following order after I created my business rule:
I have generated the table from the designer (server module tab)
I have generated the CAPI from the head start utility
I have generated the API from the designer
I have generated the CAPI from the designer
I have run the recompil.sql
I have checked that my business rule trigger is enabled and should run on insert and no where restriction
=== this is my business rule logic ======
l_rule_ok boolean := true;
begin
trace('br_csh001_cev (f)');
csh_gl_pkg.csh_gen_integ_jvs(p_id
,p_ref_num
,p_own_id
,p_trt_id
,p_value_date
,p_description
,p_amount
,p_cur_id
,p_gla_dr
,p_gla_cr
,p_gla_pl
,p_gla_rev
,p_gla_eqt);
return l_rule_ok;
exception
when others
then
qms$errors.unhandled_exception(PACKAGE_NAME||'.br_csh001_cev (f)');
end br_csh001_cev;
==== end =======================
Any help will be appreciated as I have struggled with this for two days.
Thankshmmm...
Try resetting it again and restoring with the same backup file...
Does the phone work properly once you've reset it before you try restoring? A lot of people here have experienced problems restoring from backups... could be worth forgetting about it and starting from scratch.
You could try contacting your nearest Nokia Service Centre (www.nokia.com/repair) and see if they can do anything - it may need the firmware reinstalling or upgrading... possibly... give them a call though and see.
Nokia History: 3110, 5110, 7110, 7110, 3510i, 6210, 6310i, 5210, 6100, 6610, 7250, 7250i, 6650, 6230, 6230i, 6260, N70, N70, 5300, N95, N95, E71, E72
Android History: HTC Desire, SE Xperia Arc, HTC Sensation, Sensation XE, One X+, Google Nexus 5 -
Order type Z031 plant AT01. No checking rule mantained for operation
Hello PS Gurus,
I am trying to create a new element PEP, and when i tried to release the element PEP i get.
Order type Z031 plant AT01. No checking rule mantained for operation
Can someone tell me what is missing in our customization?
Best Regards
João FernandesI assume you are trying to attach materials to network activity which is assigned to WBS.
Your error is because of missing configuration in below mentioned node:
In SPRO maintain the 'Define Checking Control' under Project Systems->Material->Availability Check (T code OPJK)
For plant AT01 and Order Type Z031 maintain parameters which are suitable to you. Before this you need to check the node OPJJ.
Regards
Sreenivas
Pls close this post if satisfied. -
Missing privilege:NO TRIGGERS FOR REPLICATION USER
Hello,
I'm configuring the Synchronization Manager following the steps on the SAP MaxDB Library 7.6. I've done every step until the activation of the Replication Units, where the Synchronization Manager GUI give me the following error:
+Create MaxDB Trigger
com.sap.dbtech.jdbc.exceptions.DatabaseException: [-5001]: Missing privilege:NO TRIGGERS FOR REPLICATION USER
at com.sap.dbtech.jdbc.packet.ReplyPacket.createException(ReplyPacket.java:65)
at com.sap.dbtech.jdbc.ConnectionSapDB.throwSQLError(ConnectionSapDB.java:1061)
at com.sap.dbtech.jdbc.ConnectionSapDB.execute(ConnectionSapDB.java:689)
at com.sap.dbtech.jdbc.ConnectionSapDB.execute(ConnectionSapDB.java:563)
at com.sap.dbtech.jdbc.StatementSapDB.sendCommand(StatementSapDB.java:855)
at com.sap.dbtech.jdbc.StatementSapDB.sendSQL(StatementSapDB.java:919)
at com.sap.dbtech.jdbc.StatementSapDB.execute(StatementSapDB.java:266)
at com.sap.dbtech.jdbc.StatementSapDB.execute(StatementSapDB.java:234)
at com.sap.dbtech.jdbc.trace.Statement.execute(Statement.java:79)
at com.sap.sdb.syncMan.util.SQLBuilder.markMaxDBTableForRep(SQLBuilder.java:301)
at com.sap.sdb.syncMan.design.DesignSQLLayer.installTableOfParticipant(DesignSQLLayer.java:2427)
at com.sap.sdb.syncMan.design.DesignSQLLayer.installReplicationUnit(DesignSQLLayer.java:1493)
at com.sap.sdb.syncMan.gui.jface_controls.UnitControl.internalActivateParticipant(UnitControl.java:1165)
at com.sap.sdb.syncMan.gui.jface_controls.UnitControl.internalActivateSelectedParticipant(UnitControl.java:1067)
at com.sap.sdb.syncMan.gui.jface_controls.UnitControl.access$000(UnitControl.java:98)
at com.sap.sdb.syncMan.gui.jface_controls.UnitControl$WorkerThread.run(UnitControl.java:125)+
Question:
1. What privilege should I give to the Synchronization User? It's already a DBA user.
2. Could it be a library problem?. According to the documentation installed with the application, the Mysql connector jdbc should be used instead of the sapdbc.jar; but doing this the Synchronization Manager GUI doesn't start.
Regards!
MYHello,
you can create the replication user like this.
"create user dbservice password <your password> dba not exclusive replication"
Did you grant the tables you want to replicate to the replication user?
The replication user itself must not own triggers or tables. It owns special system triggers and repliaction meta tables.
Best Regards
Wolfgang -
Asymmetric NAT rules matched for forward and reverse flows - NAT Issue
Having a problem with a VPN site trying to communicate to a subnet off my ASA 5505. The network is simple, VPN IPSEC remote site is 192.168.6.0/24 and I can ping and access hosts on 192.168.10.0/24 (called InfraNet). I am now trying to allow communications between 192.168.6.0/24 (called FD_net) to 192.168.9.0/24 (called Inside)
The Error:
5 Nov 12 2012 13:52:50 192.168.9.19 Asymmetric NAT rules matched for forward and reverse flows; Connection for icmp src outside:192.168.6.11 dst inside:192.168.9.19 (type 8, code 0) denied due to NAT reverse path failure
I understand this is a NAT issue; but I not seeing the error and could use a second set of eyes. Here's my current running configuration.
: Saved
ASA Version 8.3(2)
hostname fw1
domain-name xxxxxxxx.xxx
enable password <removed>
passwd <removed>
names
interface Vlan1
description Town Internal Network
nameif inside
security-level 100
ip address 192.168.9.1 255.255.255.0
interface Vlan2
description Public Internet
nameif outside
security-level 0
ip address 173.xxx.xxx.xxx 255.255.255.248
interface Vlan3
description DMZ (CaTV)
nameif dmz
security-level 50
ip address 192.168.2.1 255.255.255.0
interface Vlan10
description Infrastructure Network
nameif InfraNet
security-level 100
ip address 192.168.10.1 255.255.255.0
interface Vlan13
description Guest Wireless
nameif Wireless-Guest
security-level 25
ip address 192.168.1.1 255.255.255.0
interface Vlan23
nameif StateNet
security-level 75
ip address 10.63.198.2 255.255.255.0
interface Vlan33
description Police Subnet
shutdown
nameif PDNet
security-level 90
ip address 192.168.0.1 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
switchport trunk allowed vlan 1,5,10,13
switchport trunk native vlan 1
switchport mode trunk
speed 100
duplex full
interface Ethernet0/2
switchport access vlan 3
interface Ethernet0/3
interface Ethernet0/4
switchport trunk allowed vlan 1,10,13
switchport trunk native vlan 1
switchport mode trunk
interface Ethernet0/5
switchport access vlan 23
interface Ethernet0/6
shutdown
interface Ethernet0/7
switchport trunk allowed vlan 1
switchport trunk native vlan 1
switchport mode trunk
shutdown
banner exec Access Restricted to Personnel Only
banner login Access Restricted to Personnel Only
ftp mode passive
clock timezone EST -5
clock summer-time EDT recurring
dns server-group DefaultDNS
domain-name xxxxxxx.xxx
same-security-traffic permit inter-interface
object network obj_any
subnet 0.0.0.0 0.0.0.0
object service IMAPoverSSL
service tcp destination eq 993
description IMAP over SSL
object service POPoverSSL
service tcp destination eq 995
description POP3 over SSL
object service SMTPwTLS
service tcp destination eq 465
description SMTP with TLS
object network obj-192.168.9.20
host 192.168.9.20
object network obj-claggett-https
host 192.168.9.20
object network obj-claggett-imap4
host 192.168.9.20
object network obj-claggett-pop3
host 192.168.9.20
object network obj-claggett-smtp
host 192.168.9.20
object network obj-claggett-imapoverssl
host 192.168.9.20
object network obj-claggett-popoverssl
host 192.168.9.20
object network obj-claggett-smtpwTLS
host 192.168.9.20
object network obj-192.168.9.120
host 192.168.9.120
object network obj-192.168.9.119
host 192.168.9.119
object network obj-192.168.9.121
host 192.168.9.121
object network obj-wirelessnet
subnet 192.168.1.0 255.255.255.0
object network WirelessClients
subnet 192.168.1.0 255.255.255.0
object network obj-dmznetwork
subnet 192.168.2.0 255.255.255.0
object network FD_Firewall
host 74.94.142.229
object network FD_Net
subnet 192.168.6.0 255.255.255.0
object network NETWORK_OBJ_192.168.10.0_24
subnet 192.168.10.0 255.255.255.0
object network obj-TownHallNet
subnet 192.168.9.0 255.255.255.0
object network obj_InfraNet
subnet 192.168.10.0 255.255.255.0
object-group service EmailServices
description Normal Email/Exchange Services
service-object object IMAPoverSSL
service-object object POPoverSSL
service-object object SMTPwTLS
service-object tcp destination eq https
service-object tcp destination eq imap4
service-object tcp destination eq pop3
service-object tcp destination eq smtp
object-group service DM_INLINE_SERVICE_1
service-object object IMAPoverSSL
service-object object POPoverSSL
service-object object SMTPwTLS
service-object tcp destination eq pop3
service-object tcp destination eq https
service-object tcp destination eq smtp
object-group service DM_INLINE_SERVICE_2
service-object object IMAPoverSSL
service-object object POPoverSSL
service-object object SMTPwTLS
service-object tcp destination eq https
service-object tcp destination eq pop3
service-object tcp destination eq smtp
object-group network obj_clerkpc
description Clerk's PCs
network-object object obj-192.168.9.119
network-object object obj-192.168.9.120
network-object object obj-192.168.9.121
object-group network TownHall_Nets
network-object 192.168.10.0 255.255.255.0
network-object object obj-TownHallNet
object-group network DM_INLINE_NETWORK_1
network-object 192.168.10.0 255.255.255.0
network-object 192.168.9.0 255.255.255.0
access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_2 any interface outside
access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any host 192.168.9.20
access-list StateNet_access_in extended permit ip object-group obj_clerkpc any
access-list outside_2_cryptomap extended permit ip object-group DM_INLINE_NETWORK_1 object FD_Net
pager lines 24
logging enable
logging asdm debugging
logging mail errors
logging from-address hostmaster@xxxxxxxxx
logging recipient-address john@xxxxxxxxx level errors
mtu inside 1500
mtu outside 1500
mtu dmz 1500
mtu Wireless-Guest 1500
mtu StateNet 1500
mtu InfraNet 1500
mtu PDNet 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-635.bin
no asdm history enable
arp timeout 14400
nat (InfraNet,outside) source static TownHall_Nets TownHall_Nets destination static FD_Net FD_Net
nat (inside,outside) source static TownHall_Nets TownHall_Nets destination static FD_Net FD_Net
object network obj_any
nat (inside,outside) static interface
object network obj-claggett-https
nat (inside,outside) static interface service tcp https https
object network obj-claggett-imap4
nat (inside,outside) static interface service tcp imap4 imap4
object network obj-claggett-pop3
nat (inside,outside) static interface service tcp pop3 pop3
object network obj-claggett-smtp
nat (inside,outside) static interface service tcp smtp smtp
object network obj-claggett-imapoverssl
nat (inside,outside) static interface service tcp 993 993
object network obj-claggett-popoverssl
nat (inside,outside) static interface service tcp 995 995
object network obj-claggett-smtpwTLS
nat (inside,outside) static interface service tcp 465 465
object network obj-192.168.9.120
nat (inside,StateNet) static 10.63.198.12
object network obj-192.168.9.119
nat (any,StateNet) static 10.63.198.10
object network obj-192.168.9.121
nat (any,StateNet) static 10.63.198.11
object network obj-wirelessnet
nat (Wireless-Guest,outside) static interface
object network obj-dmznetwork
nat (any,outside) static interface
object network obj_InfraNet
nat (InfraNet,outside) static interface
access-group outside_access_in in interface outside
access-group StateNet_access_in in interface StateNet
route outside 0.0.0.0 0.0.0.0 173.166.117.190 1
route StateNet 10.0.0.0 255.0.0.0 10.63.198.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
http server enable 5443
http 192.168.9.0 255.255.255.0 inside
http 74.xxx.xxx.xxx 255.255.255.255 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto map outside_map 2 match address outside_2_cryptomap
crypto map outside_map 2 set pfs
crypto map outside_map 2 set peer 173.xxx.xxx.xxx
crypto map outside_map 2 set transform-set ESP-3DES-SHA
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
telnet 192.168.9.0 255.255.255.0 inside
telnet timeout 5
ssh 192.168.9.0 255.255.255.0 inside
ssh timeout 5
console timeout 0
dhcpd dns 208.67.222.222 208.67.220.220
dhcpd lease 10800
dhcpd auto_config outside
dhcpd address 192.168.2.100-192.168.2.254 dmz
dhcpd dns 8.8.8.8 8.8.4.4 interface dmz
dhcpd enable dmz
dhcpd address 192.168.1.100-192.168.1.254 Wireless-Guest
dhcpd enable Wireless-Guest
threat-detection basic-threat
threat-detection statistics host number-of-rate 2
threat-detection statistics port
threat-detection statistics protocol
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ntp server 63.240.161.99 source outside prefer
ntp server 207.171.30.106 source outside prefer
ntp server 70.86.250.6 source outside prefer
webvpn
group-policy FDIPSECTunnel internal
group-policy FDIPSECTunnel attributes
vpn-idle-timeout none
vpn-tunnel-protocol IPSec l2tp-ipsec
username support password <removed> privilege 15
tunnel-group 173.xxx.xxx.xxx type ipsec-l2l
tunnel-group 173.xxx.xxx.xxx general-attributes
default-group-policy FDIPSECTunnel
tunnel-group 173.xxx.xxx.xxx ipsec-attributes
pre-shared-key *****
smtp-server 192.168.9.20
prompt hostname context
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:e4dc3cef0de15123f11439822880a2c7
: end
Any ideas would be appreciated.
JohnI don't see any inspection-commands in your config. Is there a reason for not using any of them?
If your problem is only with ICMP, then you should enable at least icmp-inspection. You can do that easiely with the legacy command " fixup protocol icmp"
Sent from Cisco Technical Support iPad App -
Hi,
I have an ASA5510 running version 8.2(5). I have set up a new network on interface Ethernet0/1.777 of the fwl. The firewall works perfectly with remote access VPNs but has now given me the error with the new network that has been set up:
%ASA-5-305013: Asymmetric NAT rules matched for forward and reverse flows; Connection for tcp src outside:10.159.159.3/49204 dst tru777:10.1.34.19/3389 denied due to NAT reverse path failure
The difference between the other networks and the new one that I have set up is that this is the first one using a private addressing scheme. I understand that NAT is not allowing something along the way but I cant figure out what needs to change in order to get it to work. My config is as follows:
interface Ethernet0/1.777
description TRU 777
vlan 777
nameif tru777
security-level 50
ip address 10.1.34.17 255.255.255.240 standby 10.1.34.18
access-list acl_tru777 remark * ALLOW ALL OUTBOUND *
access-list acl_tru777 extended permit ip any any
access-list RA-VPN extended permit ip 10.1.34.16 255.255.255.240 10.159.159.0 255.255.255.0
access-list acl_no-nat extended permit ip 10.1.34.0 255.255.255.0 10.0.0.0 255.0.0.0
access-list acl_no-nat extended permit ip 10.1.34.0 255.255.255.0 172.16.0.0 255.240.0.0
access-list acl_no-nat extended permit ip 10.1.34.0 255.255.255.0 192.168.0.0 255.255.0.0
access-list acl_ra-lock-tru777 extended permit ip 10.1.34.16 255.255.255.240 10.159.159.0 255.255.255.0
access-list acl_ra-lock-tru777 extended permit ip 10.159.159.0 255.255.255.0 10.1.34.16 255.255.255.240
ip local pool ra-pool 10.159.159.0-10.159.159.254 mask 255.255.255.0
nat (tru777) 4 access-list acl_no-nat
nat (tru777) 2 10.1.34.16 255.255.255.240
global (outside) 2 x.x.x.x
crypto isakmp nat-traversal 20
I think that is everything you should need, if not please just ask.
Thank you very much in advance,
ChrisHi Julio,
Here you go:
FWL01# sh nameif
Interface Name Security
Ethernet0/0 outside 0
Ethernet0/1 CLIENTS 50
Ethernet0/1.314 tru01 50
Ethernet0/1.313 dmz01 50
Ethernet0/1.316 tru02 50
Ethernet0/1.776 dmz776 50
Ethernet0/1.777 tru777 50
Management0/0 management 100
FWL01# sh run nat
nat (tru02) 1 192.168.3.0 255.255.255.240
nat (tru777) 4 access-list acl_no-nat
nat (tru777) 2 10.1.34.16 255.255.255.240
FWL01# sh run glob
global (outside) 1 interface
global (outside) 2 x.x.x.x
Thanks,
Chris -
When is/are the Assignment Rules triggered ?
Documentation mention that assignment rules are run when the reassign flag is flagged.
Pls. when are the assignment rules triggered other than that... I mean: a) During Opportunity import f.example ? b) When a new Opportunity is created ?
Txs. for any help.
AntonioHi Bob,
Txs. for your help.
In the import case, I suppose that I should have the re-assing flag as part of the import data... Pls. is that correct ?
Antonio -
How can calculate Bandwidth for ACS packet
Dear All !
My network : AS5400 at remote site sent ACS information (only VoIP Accounting information: CDR-Call detail record) to Center site via IP WAN link (512k).
How can I know how much Bandwidth need for ACS packets/ 1 call ?
Anyone help me some idea to calculate this BW
Thansk so muchHi ,
There are many bandwidth monitor available that you can set up on acs sever. This will give you idea how much traffic is received by acs during the particular call.
Also you can try sniffing acs port to get an rough idea about the traffic generated.
Regards,
~JG -
DSCP (Differentiated Services Code Point) value always set to '0' for outgoing packet on win 7
DSCP (Differentiated Services Code Point)
value always set to ‘0’ for outgoing packet on win 7
I have setup – Controller (Win 7) and Responder (Win XP)
In controller I setup DSCP value to something – ‘50’ (in hex 0x32) and perform RTP call
Then I sniff packets using ‘Wireshark’ where I found DSCP value from Controller to Responder not able to set but which is able to set in packet from Responder to Controller.
Controller to Responder
Responder to Controller
When I run same application under same network, where Controller and Responder are having Win XP, then DSCP value appear in layer 3 protocol.
When I googled then learned I need to do some registry changes mentioned in below links -
http://technet.microsoft.com/en-us/library/cc758910(WS.10).aspx
http://support.microsoft.com/kb/2733528/en-us
But this solution did not help to resolve my problem.
Later I did followed changed in Local Group Policy Editor but which was also fruitless.
I do not want to set some fix DSCP value for all outgoing traffic, as my application has provision to take an input for DSCP value from user.
http://technet.microsoft.com/en-us/library/cc771283.aspxHi,
I'll involved another engineer who had more knowledge with your problem. Thanks for your understanding.
Roger Lu
TechNet Community Support -
I updated yesterday, and afterward nothing seemed amiss. This morning one of my eths was unable to get a dhcp lease. Eventually I realized it was because the names got mixed up; eth0 (the one I was trying to activate) and eth2 got swapped. Apparently 10-network.rules is being ignored.
I seem to recall that another network rules file (70-persistent-net.rules [?]) was mentioned recently. I used that back in my Ubu days and for a while in Arch, but eventually transitioned to 10-network.rules. Also, I don't see 70-..., 10-..., or any other network related rules files in /usr/lib/udev/rules.d.@jjacky
I didn't see anything during boot, but output of dmesg contains:
[ 28.920102] systemd-udevd[241]: renamed network interface eth2 to eth3ACPI Warning: 0x0000000000000400-0x000000000000041f SystemIO conflicts with Region \SMRG 1 (20120320/utaddress-251)
[ 28.996255] ACPI: If an ACPI driver is available for this device, you should use it instead of the native driver
Interestingly, I also have a NIC using the sky2 driver.
OT: Is 'arch' the hostname of the machine from which the log excerpts (post #3 of that thread) were pulled? I'm curious because all of my logs just say 'localhost'.
@brebs
Yes, that's where my 10-network.rules file is located. There's nothing else there.
Last edited by alphaniner (2012-08-02 14:34:10) -
Network Setting/Event triggered actions
Is there any way to set up network setting/event triggered system actions on the iPhone?
Let's say as soon as I get disconnected from wireless network "OfficeXXX" automatically initiate VPN connection?
There is no sense in Push mail for Exchange via VPN is you have to constantly manually start VPN (every time you change network while wondering in the city 3GPublic Wi fi VPN drops).
Then without this event triggering whole Exchange Push VPN marketing thing is worthless because you have to manually start VPN all the time.
Anybody found workarounds?
Anybody can write an app to do these things? I would pay $100 for that app at no time.I have the same issue. WindowsMobile did this with a simple host entry. There is no workaround, and somewhere I saw a post from Apple saying that the VPN has to be manually initiated.
-
Enter event not triggering for read-only checkbox
I have some objects in a form that get "locked" when the user signs the form. I'm not using the digital signatures. Instead, when the user types their name into the signature text field, a script runs on the change event that makes all of the fields in the form read only. It also unlocks the fields if the signature is deleted.
I was worried that we would get a lot of phone calls with users that didn't understand that the form had locked ("Why doesn't this form work?!"), so I added some code to the enter event for all of the fields that would pop up a messagebox to explain to people trying to edit a signed form that the form was locked and that they would need to delete the signature to edit the form.
This plan works perfect for my text fields and decimal fields. It does NOT work at all for my checkboxes. For some reason, the enter event is never triggered for read-only checkboxes. I don't see any other events that would obviously work for me though. Any ideas?
ThanksThanks, those are reasonable suggestions.
In the first suggestion, I'm unclear about one aspect of how I would accomplish this. I assume I would allow people to modify fields in the form, but that when they did, a msgbox would pop up that would inform them that, if they continued with this modification to a signed form, the signature would be removed. I'm all good to that point. But if they answered that they do not want to continue modifying that field and removing the signature, how can I code it to set the value back to what it was before the change? Is there some method that will give me access to the value of the field BEFORE the attempted modification? I went looking for something like $.previousvalue, but found nothing.
I'd suggest that I could use a two-stage solution, in which I store the previous value on the enter event, and save it just in case they do not want to change the field when prompted by the msgbox, but since the enter event does not exist for checkboxes (my original problem), that seems like it won't work.
As far as radio button suggestion, I like radio buttons very much except for one fatal flaw: they aren't (as far as I can tell) clearable. That is a shame. Clearly some people (like me) want both exclusivity AND clearability. And we'd like the controls to have an enter event. But I know I'm demanding Anyway, as it is, I just end up having to use checkboxes and create a boatload of silly code to make them exclusive.
Emily -
PO Release Strategy not triggerred for particular Total Net Order Value
Dear,
I am currently facing the issue where release strategy for purchase orders is not getting triggered for a particular value or lower.
For order value 1 INR or less, no release strategy is triggered for new created PO. And for value > 1 INR release strategy is getting triggered.
All otehr PO characterstics are the same, I mean to say the values for other characterstics such as plant material group are identical.
But the characterstics for release for Total net order value are <= 30000 INR. There are two system copies, where in one system the same release strategy is working as expected. But in other system the above mentioned issue occurs. There is no differnce which I can see in the release strategy setup.
Please suggest for solution.
Thank you.
Warm Regards.Dear All,
While looking further into the issue by going into debugging mode, we have found that in include LCLSCF2I, Internal table p_selection_criteria_tab , the value for ATFLV (Internal Floating point from) gets different values in the two systems. For example, in the affected system, for PO with 1INR tottal value, for one of the Total value chaaracterstics before INR characterstic, ATFLV value is 0,0000000000000000E+00, hence it gets out of loop and doesn't trigger release strategy.
But in another system for same PO values and release setup, ATFLV value is 1,0000000000000000E+00 for that characterstic.
May I know how the value for this field gets calculated.
Thank you.
Warm Regards. -
Event not getting triggered for PR generated through MRP run
Hi All,
Could anyone let me know how to get a workflow triggered for the ReleaseStepCreated event (obj - bus2105) when the PR is created through MRP run. The MD02 control paramters have the value '1'.
Interstingly the workflow triggers when the value is set to '2' or '3'.
Thanks,
AmeekarThanks Aman,
I checked field restrictions but there are none there. Actually i checked them for other object 'AOOMARA' which is being thrown as an exception when i am creating the PR through MRP run.
Exception says -> field not maintained.
So i guess, i need to maintain the field for Change Document but i am not sure how. COuld you please aid me with that.
Thanks A lot !! -
Posting rules exist for account key
Hi ,
I got the message while creating PO AND WHEN I try to enter Tax code and Tax Jurisdiction i am getting the following error message :
No posting rules exist for account key
Message no. FF714
Diagnosis
No posting rules have been defined for the account key in the tax table in table T007B.
Procedure
Change the tax table, enter an account key already defined for the transaction in question or define the posting rules for a new account key in table T007B.
can any one give me solution to solve this issue !!!
Thanks & Regards,
senthil.Hi Senthil
Based on your explanation I can understand that the Configuration settings for Automatic Account Determination is not done perfectly for the Account Ket vs GL Account. Do cneck this process carefully because here we define the posting rule, posting keys for the determined account key and later assign the same to the GL Account.
regards
Murali Kanth Natti
Maybe you are looking for
-
Hi, I am working for production support project.I want to delete the data(error data) from ODS and willing to reload the data again to ODS with different data(Corrected data). Can any body throw some light on this please. karunakar reddy
-
How do I grant non-logged in user access to application component?
I want to make the customization page for a report available on our portal available to users without them having to log on to our portal. I thought I set up the access rights to the application component correctly, but the link takes them to the log
-
How can I save preview files to other than C: drive?
My development machine has multiple drives and network drives. The C:/ drive is the oldest, slowest and fullest. I am using Elements, but have used Premiere over the years. Back then, we could make the program work better by off-loading files from C:
-
SEEBURGER/MSGSPLITTER: There is no attachment to split.
Hi, I have the following scenario. 1) An EDI File is placed in a File location. 2) A File adapter picks the file. 3) The file adapter has a module Processing Sequence of Classifer, converter and splitter. 4) After picking the EDI File, we should g
-
Syncing TO the Macbook FROM Apple TV
Simple question.... If I log on to the Apple store vie my ATV and buy a song.....does it automatically sync back to iTunes on my Macbook when I do a new sync?