Different behavior with aaa configuration

Hi Guys,
Does anyone know if there is any difference in the way the following command is interpreted in different IOS release?
aaa authorization exec default local group <group-name>
I have observed different behaviour with the same set of configuration as foll0w;
- 03.03.05SE on a 3650 switch: here the switch only allow local user to login to the device, the radius user always fails( well unless i change the configuration to xx..default radius local)
- 15.0(2) on 2960: Here i can login both with local user and radius user with the same configuration.
Any thoughts?

Hi,
I would not be surprised specially since the 3560 is running IOS-XE vs the 2960 runs IOS.
HTH

Similar Messages

Different behavior with decimal data on same version of CF

I have a linux/apache/mysql/CF MX 7 Enterprise server. I insert decimal data using the cfqueryparam that looks like
<cfqueryparam value="#BudgetSet.BUD_SET_DETAIL_COST_PER#" CFSQLType="CF_SQL_DECIMAL">.
No problems the decimal data does not get rounded, 123.45 inserts as 123.45.
I'm building applications for my neighborhood association, so I'm having godaddy.com host the web site with CF and MySQL.
Like a good developer, I took code from my CF server, moved some of the more useful programs to the godaddy.com, set up the database and started testing some apps. Now any decimal data inserted gets rounded using the same cfqueryparam syntax from my CF server (like above). The decimal data on the godaaddy.com inserts as 123.00, when I'm trying to insert 123.45, of course if I insert 123.99 I get 124.00, rounding. So I called godaddy.com and of course I get the standard technical answer "its your code". So off to testing I go. Only to determine, by not using the cfqueryparam, I could stop the rounding, more testing I determined that I need to use
<cfqueryparam value="#BudgetSet.BUD_SET_DETAIL_COST_PER#" CFSQLType="CF_SQL_MONEY"> or
<cfqueryparam value="#BudgetSet.BUD_SET_DETAIL_COST_PER#" CFSQLType="CF_SQL_DECIMAL" scale="2">. The version of CF @ godaddy.com is also MX 7 Enterprise. Finally the question, what in configuration could cause such different behavior ?
Thanks for reading my short novel.

The database drivers determine how the cfqueryparam values are
interpreted (behind the scenes ColdFusion generates a prepared
statement using the driver interface and sets the values using
standard JDBC calls). Unfortunately, like you found out, not all
drivers are created equal and have slightly different behavior or
defaults.
I would check and compare the driver versions.
Mack

Need help with AAA configuration

I am trying to configure AAA on my network devices. I am using TACACS+ with an ACS (3.2) server. I have setup two user groups in the ACS server, one with enable priviledges and one without. I am able to get the AAA configuration to work when telnetting into the devices. However, when logging into the console port, the user group with enable priviledges do not go directly into enable mode as the telnetted users do. How to fix this?

Hi,
You will need to use the following command :-
aaa authorization console
This command will not show up on the help.
Regards,
Vivek

Want to see the stock of different variants with same configurable material

I have the stock for configurable material with different variants. Now I can see the cumulative stock
for that configurable material. But my requirement is that I want to see the stock for every variant
belonging to the configurable material.
How can I get it?

hello anant,
In my opinion for sure standard sap report cannot display the stock for a individual configuration.(Variant)
Reason:characteristics display/hide function is very dynamic dependeding on the dependency and interdependency.
The only option is by a report CL30N plus abap. Since we cannot keep anything in stock for a configurable material. You need to identify all open sales order and stock position OR through material movements and then find the produciton order and then read all char. values.
I assume you are not taking about variant materials.
Reg
Samson.

Weird behavior with Ctrl-Tab

Dear members,
(Forms 6i c/s)
I have two tab canvases in one form. For each one, the first tab page is a master list, and the second one is a single-record detail block.
I try to prevent the user from going to the second tab page if the list is empty, so I check the cursor-block in the When-Tab-Page-Changed trigger.
It works fine when I use the mouse, but I get a different behavior with the Ctrl-Tab keys:
In the first canvas, when WTPC trigger fires, the cursor-block is the list block, which is fine.
But in the other canvas, the cursor-block is already the detail block as soon as the trigger fires.
I don't understand where the difference comes from, and I don't really know where to search.
Does anyone have a clue ?
Thanks for your help.

I don't, since my code has to be generic (it's the same for both canvases, and many more).
And I can only get the name of a canvas from a block, not the name of a block from a canvas.
That's why the cursor-block was the best solution.

Different behavior of movewindow with different windows is (xp or windows 7)

we have a windows wpf stand alone application which must be integrated within a windows form 2.0 stand alone application. given to the particular implementation of the windows form application we decided to use a light integration trying to change the parent
handle of the wpf main window setting as parent the handle of a windows of the windows form 2.0 application.
in order to reposition the wpf windows on top of the parent windows form window, we have a thread which keeps doing two operations: (1) invoke getwindowsrect on the parent windows form windows to get the parent absolute position and (2) invoke movewindow
on the wpf main window handle to reposition the window.
when we move the windows form window, the wpf windows follows the parent remaining in the correct position. we tested this solution with windows xp, windows 7, windows 8 in our office. when we went to the customer to complete the installation, both on a
windows xp and on a windows 7 the behavior was different. the size of the wpf window was much bigger than the size of the windows form parent window. back in office we found the same strange behavior in windows xp wirtual machine. in order to fix the problem
(at least partially) we had to change the operation sequence within our code as follows in the monitoring thread: (0) get parent windows position with getwindowrect (1) set the parent of the wpf main window to (null) 0 invoking setparent, (2) invoke the movewindow,
(3) re set the parent handler of the wpf main window to the handler of the windows form window.
with last solution it works but clearly there are more flikering when the window is moving or resizing respect to initial implementation.
any idea about this different behavior of movewindow function? any suggestion?
thanks
Paolo

Hi Paolo,
You'll need to post it in the dedicated WPF or Windows Forms forum for more efficient responses, where you can contact the experts.
http://social.msdn.microsoft.com/Forums/en-US/home?forum=wpf WPF forum
http://social.msdn.microsoft.com/Forums/windows/en-US/home?forum=winforms Windows Forms forum
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Strange window behavior with CS5

I have begun experiencing strange behavior with PS CS5. I should begun with the machine configuration: 2.66GHz iMac (8,1) Intel Core Duo with 4GB RAM and OSX 10.6.6, Radeon HD 2600 Pro graphics card. The initial symptom showed up suddenly as an inability to display an image window; that is, I could open PS normally, everything would show up properly, but when I opened an image file of any sort, there would be no image window. Other cues indicated that the file was open; for example, the window menu would show it selected, and the layers palette would show the file's layers.
It did not seem to matter what type of file was involved: PSD, JPG, TIF, whatever. Occasionally, this behavior would begin during a session. Sometimes it would happen right off the bat. Sometimes, stopping and restarting PS seemed to clean things up; other times, this had no effect. After messing around quite a bit with different permutations and combinations, all I could say was that the problem was random.
I might add that I've had PS CS5 on this machine pretty much since it was announced, and had not had problems with it before. So this issue came along quite suddenly a couple of weeks ago. This was a little after I'd installed an update for Nik's Viveza 2; and I began to suspect that. Although why Viveza should do such a strange thing was odd, and Viveza was never part of the files I was experiencing issues with. Anyway, I went back to an earlier version of Viveza and the problem persisted.
Since I run Time Machine, I also went back to versions of the entire PS folder from a month back, and found the same problem. Along the way, I experimented with the files I was using with PS CS4 & CS3, which I also have installed on this machine. These two versions of PS run perfectly well. At least the CS4 version has precisely the same plugins as the CS5 folder, and this seems to discount the potential problem with plugins.
To be sure about CS5, I completely deactivated, deinstalled, and reinstalled it. The same issues occurred. Now, I have to admit that I let PS run its update process so that I brought it back to the most recent version in this step of my troubleshooting. So, I can't be certain that the issue isn't with some update of CS5.
I might add that I have been running CS5 in 32-bit mode, for compatibility with certain plugins. This may or may not be an issue, since I have limited experience with running in 64-bit mode. At this point, I should add a bit more about the confusing behavior.
While messing around with CS5, I also suspected the GPU support, since my problem had to do with windows. When the problem presents itself, the usual cycle through window views that you get by pressing the "F" key seems to get messed up. In particular, the "F" key doesn't work at all. Next, if you use the View menu to select different views, the full screen with menu bar view will often have garbled pixels, while the full screen view will show a blank grey screen. Then, cycling back to a window view will show a window with blank grey contents. This is interesting since the starting point was no window at all; but going into full screen and then back will produce a window with bogus contents.
Now, the next strange thing, having to do with the GPU, is that CS5 often fails to recognize the Radeon HD 2600 card. Oddly enough, it did originally. And I had it running in Basic mode. However, CS4 does recognize the GPU; and I can set it in any variety of modes: Basic, Normal, and Advanced. This behavior is not consistent at all either; that is, while CS5 almost always now fails to detect the GPU, sometimes it does. As near as I can tell, this failure to detect the card does not depend upon whether I start CS5 in 32-bit or 64-bit mode. OTOH, CS4 always recognizes the GPU.
Another form of this odd behavior arises if I start CS5 cold, and then just open a new blank window. This almost always works. I get a blank white window, and I can paint on it with a brush, etc. However, if I go ahead at this point and open a file, then the new file takes over the window; and there are no tabs. If I select the original new file, usually labelled "Untitled", the window bar will show the change of filename but the window's contents and the layers palette will continue to show the old file that I had opened. Cycling through views can sometimes get back to the new Untitled file, but just selecting file windows never works.
Yet another aspect of this messed up window behavior is that the workspace bar, which shows the Bridge, MiniBridge and view icons on the upper left and the various workspace options and CS Live on the upper right, is present but blank. OTOH, the tool bar is always displayed correctly, as is the horizontal bar that shows the various tool options. Likewise, the palettes for the workspace such as layers, swatches, adjustments, and so on, are always correctly displayed on the left.
My next steps in trying to figure this out will be to ensure that I am running the latest of all plugins so that I can get everything running in 64-bit mode and try this again. However, the single factor that seems consistent in this whole mess is that whenever I do find this odd behavior, the performance preferences window will indicate that CS5 is not detecting the GPU. Whenever this happens, if I open up CS4 and check the same performance preference in it, the GPU is detected. I can have the two preference windows side by side on the screen in fact, CS4 sees the GPU and CS5 does not. The counter-indication is that sometimes CS5 will work properly and the preferences window still shows that the GPU has not been detected. Having said that, I can add that if I have opened up CS5, and it has found the GPU, and I have set it into, say, Basic mode, and then later found CS5 messing up, and I go back and check the performance preferences again, the GPU has always been lost. So, CS5 can mess up windows with or without the GPU detected and active; but when if it started with the GPU present, it will show up as lost after the weird behavior starts.
To add one more observation, I have had Macs and other computers with failing GPUs. This computer is showing none of the typical signs of that. Every other program seems to be working just fine, and I have a lot of these, many graphics intensive; e.g., Corel Painter 11, Parallels v6 running Windows 7, PS CS4, Lightroom v3, Aperture v3, and so on. It is just CS5 that is messing up.
I could load up this message with screen shots of all this nonsense, but I'm not sure what that would add to the strange tale, other than I'm not pulling your legs. I am, however, pulling out my own hair.
As I stated before, this began quite suddenly a couple of weeks ago, early Feb 2011. My best guess as to cause is some combination of incompatible updates between CS5, OSX, and maybe some plugin or other. I found unusual behavior with onOne's FocalPoint v2 last year after Apple updated GPU drivers in some OSX update, and cratered that program. It took onOne a month or two to fix that. I have CS5 on a laptop with the same OSX version, and on that I haven't seen these issues; but then, I haven't been using it as intensely over there. Also, that machine has different CPU and GPU models than this iMac.
So, to the community: is anybody else starting to see this odd stuff? Am I alone?

Here's the reason I say that the same plugins exist for both CS4 & CS5. Sometime last year, the internal hard drive on this computer died (as they so often do), and it was replaced under the Apple care warranty. As a consequence, I decided to rebuild the OS and applications from scratch and bring back my user files from backup. I among other things, I reinstalled all of CS4 as well as CS5 (and I had to put CS3 back too for reasons having to do with printing calibration images for Quad Tone RIP). Then, I went to reinstall the plugins that I needed. I use Nik Software, onOne, Portrait Professional and various Topaz plugins. To my recollection, most of these install in PS CS3, CS4, CS5, Aperture, and Lightroom. In short, it is not that I've copied or moved plugin folders from one application folder to another, just that the installers automatically detect the presence of the various applications and put the various plugins into each, as appropriate.
The only 32-bit plugins that I have that don't fit into this category are from Vincent Versace. He provides special versions of certain Nik plugins (Tonal Contrast, Contrast Only, etc) that function with some Acme Educational extensions for performing B&W conversion, sharpening, blah blah blah. These plugins are only 32-bit and the extensions are only CS5 compatible. I've installed these ones only into CS5; so, you've got me. OTOH, I've had these from Vincent as soon as CS5 was available; and they've worked so far without problems. Perhaps I should just edit the extensions so I could use the latest plugins direct from Nik instead of the Versace special editions...
I've checked fonts and repaired permissions. I am presently going through the rather tedious process of disabling plugins and extensions to see if anything yields consistent results. The rather random arrival of the strangeness makes ensuring that a change is really having an effect more difficult to validate, as you will appreciate.
I apologize for my long-winded original post. I add all of the detail so that anyone who'd experienced similar strange behaviors might properly pattern-match what they were seeing. On the one hand, in finding the cause of a problem, you look for what's changed; and theoretically nothing is new. On the other hand, there's always so much changing behind the scenes with automatic updates of this, that, and the other thing that it's impossible to make the claim that nothing's new.

ESS Benefits Generic Enrollment - Different behavior backend v/s portal

We are using the ESS Benefits generic enrollment service for enrollment kicking off the adjustment reasons on IT 0378.
Here is the configuration set up, trying to simplify to explain the matter. We are on ECC 6.0 with EHP2.
1. Configured one plan type in savings category.
2. Within this plan type, configured 2 plans.
3. Configured all other related configuration to set up the 2 plans.
4. Configured the adjustment reason and the appropriate plan type created in step 2.
5. Created the required adjustment reason on 378.
In HRBEN0001 transaction via backendwe can see the 2 plans configured within the plan type.
But when Trying to enroll from ESS - only one plan can be seen for that plan type, the other plan is not shown at all.
OK - eventually, debugged and found this piece of code in FM HR_BEN_ESS_FILL_SELECTION_DISP. The 2 different plans are there until this piece of code takes one of them Off...
CODE -
3.) Reduce entries to one entry per type and period
delete adjacent duplicates from selection_display_gt
    comparing pernr
              barea
              bpcat
              pltyp
              begda
              sprps.
CODE -
This FM is called only for ESS application and not for backed program.
What we do not understand is why is it behaving differntly on backend v/s portal.
Any information or experience with this form any one of you will be highly appreciated.
Thanks.

Siddharth,
Thanks for your reply. Yes ESS has its own FMs. The UI, user exits, BADIs etc are different for backend v/s front end.
What we are not clear with, is the different behavior in core functionality -- i.e. When the adjustment reason is processed from the backend using HRBEN0001 - The 2 plans within the Plan Type are available for elections. BUT the same adjustment reason for the same penr when processed from ESS - there is just one plan available for elections.
It's clear from the code, that it is deleting one plan and this code is within the FM which is called only from ESS. But we are still not sure why it should behave differently i.e. 2 plans via backend v/s one plan via ESS.
Wanted to see if anyone can share any information if they have a similar benefits set up .. 2 plans within one plan type FOR savings plan category and then having a adjustment reason set up.
Regards.

Issue with Site Configuration / Load Balancing

Were noticing strange behavior with our servers that are configured behind a load balancer. Weve got two servers with different ports and a load balancer:
Server1: https://host1:30003/opensso
Server2: https://host2:30103/opensso
Load Balancer: https://loadbalancer:30003/opensso
When we go to the admin console, we can access Server1 without a problem, but the second time we go the load balancer sends us to Server2, and our browser returns a page not found error. Weve traced the HTTP traffic and discovered that every other time we go to the admin console (the load balancers are configured round robin), Server2 always returns a bogus HTTP found URL. The response it provides is something like https://loadbalancer:*30103*/opensso/UI/Login (just an example).
The issue here is that it is properly directing the end users browser to the load balancer DNS entry. It is not however directing the end users browser to the proper port. It seems to sends its own port value to the browser. Obviously when the browser tries to access this URL the Load Balancer rejects the request because it is not listening on port 30103.
Can Multiple OpenSSO application servers (configured as a site) run from behind a load balancer when they are listening on different ports? If so, why is the application server responding to the user request with its own port, rather than that of the load balancer, yet still providing the DNS hostname entry for the load balancer the whole time.

Major updates of Muse are targeted to release roughly every quarter. The 1.0 release was in mid-May. The 2.0 release was in mid-August. A fundamental change to image loading would only appear as part of a major update due to the engineering and testing efforts required.
As provided in your previous thread http://forums.adobe.com/message/4659347#4659347 the only workaround until then is to reduce the number of images in the slideshow.

WCS Lobby Ambassador with AAA Authentication

We are using WCS 7.0.164.0. I configured a user as local lobby ambassador with special defaults and also with a special guest login logo. If I use this user to create guest accounts everything is alright. Now I want to change the authentication to radius, so I export the cisco lobby ambassador attributes to the radius server and extend these network policies. Now I can login as user, authenticated from the radius server and I create guest accounts in the same way as before with local login, BUT !!! Our special guest login logo isn't shown and there is now way to upload or configure this special logo. Is there a way to configure these options for users authenticated with AAA ? Thanks for any Help Bernhard

Hi Bernhard,
I used following doc-link: http://www.cisco.com/en/US/customer/tech/tk722/tk809/technologies_tech_note09186a0080851f7c.shtml
The trick I used is to configure same username on tacacs+ and local, but different passwords.
local-user: configure your special attributes like logo
tacacs+: configure the authentication and group
local-user password is not the same like tacacs+ password.
I configured Authentication in WCS section: Administration > AAA > AAA Mode Settings
Enable fallback to local == on auth failure or no server response
Maybe if you deselect Enable fallback to local you can only authenticate to tacacs+. But now I can authenticate with local user/password and tacacs+ user/password.
Attributes for tacacs+ or radius server can be exported in WCS section: Administration > AAA > All Groups; Export Task List
Attributes for tacacs+ server:
virtual-domain0=root
role0=LobbyAmbassador
task0=Configure Guest Users
task1=Lobby Ambassador User Preferences
Attributes for Radius (I never tried radius):
Wireless-WCS:role0=LobbyAmbassador
Wireless-WCS:task0=Configure Guest Users
Wireless-WCS:task1=Lobby Ambassador User Preferences
==> I think also virtual-domain can be set.

Can I run 2 different domains with same name but on 2 different machines?

I am trying to setup 2 domains with same name (sharedcds1) on 2 different machines (Machine1 and Machine2).
          When I start the weblogic managed server 1 (sharedcds1managedserver1) on Machine2, it throws an error saying it has some conflicts with the managed server 1 running on Machine1. How did the managed server of one machine know about the other server. Can I run 2 different domains with same name but on 2 different machines?
          Here is the error in the log -
          <Jun 14, 2005 10:53:29 AM EDT> <Error> <Cluster> <BEA-000123> <Conflict start: You tried to bind an
          object under the name weblogic.transaction.coordinators.sharedcds1managedserver1 in the JNDI tree.
          The object from 4596206652609838848S:130.170.61.153:[9505,9505,-1,-1,9505,-1,-1,0,0]:sharedcds1:s
          haredcds1managedserver1 is non-clusterable, and you have tried to bind more than once from two or m
          ore servers. Such objects can only be deployed from one server.>
          <Jun 14, 2005 10:53:29 AM EDT> <Error> <Cluster> <BEA-000123> <Conflict start: You tried to bind an
          object under the name weblogic.transaction.coordinators.sharedcds1managedserver1 in the JNDI tree.
          The object from 8842351474821025197S:130.170.61.154:[9505,9505,-1,-1,9505,-1,-1,0,0]:sharedcds1:s
          haredcds1managedserver1 is non-clusterable, and you have tried to bind more than once from two or m
          ore servers. Such objects can only be deployed from one server.>
          Thanks
          Satish

Yes you can. Make sure that domains configured to use different multicast address. WLS uses multicast for communications between nodes in domain.
          although your configuration will work, you could have troubles if you going to execute inter-domain calls between domains/servers with the same names.

How to use a macro with AAA Authorization set?

So!
We have ACS version 4.1, and one goal is to start working on authorization sets for groups. I am able to get basic commands to work, but was curious about making a macro work without having to allow all of the commands that are actually contained wihtin the macro itself.
I'm looking into this to promote standardization and minimize confiugration issues/inconsistencies on ports accross swtiches in our environment.
The macro I created is used for configuring a port on a swtich to change its VLAN. Basically as follows:
macro name T2
Description $DESC
switchport mode access
no cdp enable
switchport access vlan $STATIC
switchport port-security
switchport port-security aging time 2
switchport port-security violation restrict
switchport port-security aging type inactivity
storm-control broadcast level 25.00
storm-control action trap
switchport nonegotiate
no lldp transmit
no lldp receive
#macro keywords $DESC $STATIC
In ACS I've created a shell command authorization set, and allowed 'macro' with 'permit apply T2' and 'permit trace T2'. This works fine and allows me to use those macro commands. The problem I'm having is that every command in the macro is not allowed in the authorization set, so when I run the macro it fails for each command.
I don't want to allow each individual command in the authorization set as it would then allow jr. admins the ability to make config changes on ports that would be outside of our standard. For example they could get into a port and forget to disable CDP and LLDP, casuing inconsistencies accross the envrionment. Is there a way to run these macros without putting all of the commands in the authorization set?

Hello Eric,
Please see the below link for configuring Macro and how you can use them with AAA
http://www.cisco.com/en/US/docs/switches/lan/auto_smartports/12.2_55_se/configuration/guide/configure.html

Strange Permissions Behavior with Public/Private Drop Box

Strange Permissions Behavior with Non-Course Drop Box
In an effort to promote iTunes U on campus this semester (and to get people working with audio and video more) we're having a contest in which people can submit personal or group audio/video projects.
This being an iTunes promo, we intend for students to submit their contributions via a drop box.
To that end, I began experimenting with drop boxes in iTunes U, which I haven't done much of previously. I've created a course called "iTunes U Drop Box Test" under "Campus Events". Within that, I have two tabs: "Featured Submissions" and "Dropbox". My goal with this drop box was to allow faculty, students and college folks the ability to use the drop box ("college" being a role I've defined for those who don't fit into the faculty/student roles).
When I first started experimenting, access to the "iTunes U Drop Box Test" course looked like this:
--- Credentials (System) ---
Edit: Administrator@urn:mace:itunesu.com:sites:lafayette.edu
Download: Authenticated@urn:mace:itunesu.com:sites:lafayette.edu
Download: Unauthenticated@urn:mace:itunesu.com:sites:lafayette.edu
Download: All@urn:mace:itunesu.com:sites:lafayette.edu
--- Credentials ----
Download: College@urn:mace:lafayette.edu
Download: Instructor@urn:mace:lafayette.edu
Download: Instructor@urn:mace:lafayette.edu:classes:${IDENTIFIER}
Download: Student@urn:mace:lafayette.edu
Download: Student@urn:mace:lafayette.edu:classes:${IDENTIFIER}
For the "Featured" Submissions tab, I gave the non-system credentials the "download" right, and for the "Dropbox" tab I gave the non-system credentials the "dropbox" right.
My understanding of this setup is that everyone should have had the ability to view the course and the contents of the "Featured Submissions" tab and that those in the College/Instructor/Student roles would be able to upload files via the "Dropbox" tab ... but not see the contents of said tab after the files were uploaded (aside from any files they uploaded themselves).
This is not the behavior we saw however. While the College/Instructor/Student roles could upload files to the dropbox, everyone (including the unauthenticated public) was able to see all of the contents of the dropbox.
The only way I could get this to work as advertised was to change all of the system credentials save the "Administrator" to "No Access":
--- Credentials (System) ---
Edit: Administrator@urn:mace:itunesu.com:sites:lafayette.edu
No Access: Authenticated@urn:mace:itunesu.com:sites:lafayette.edu
No Access: Unauthenticated@urn:mace:itunesu.com:sites:lafayette.edu
No Access: All@urn:mace:itunesu.com:sites:lafayette.edu
Once I did this, everything worked as advertised: College/Instructor/Student roles could upload tracks, and the "Dropbox" tab would only display tracks they uploaded.
So my question is ... is this the correct behavior for the drop box? It looks like when the system credentials are in play, they're simply overriding whatever the normal "view" rule is for the drop box, which doesn't seem right.

Your current configuration where things work as you wanted does seem correct to me. You are not using any System Credentials to accomplish the functionality and that's fine.
Here's some more info to clarify how / why this is working for you and why you had to set "No Access" for the System Credentials:
The System Credential "Authenticated@..." is going to get assigned to any user that goes through your transfer script. Even if you transfer script assigns no credentials to a user, upon entering iTunes U they will have at least 1 - the "Authenticated@..." credential. Therefore, unless you block access using "No Access", any user that passes through your transfer script is going to be able to access the area in question.
When you change values for "Unauthenticated@..." or "All@..." you are defining what someone that DOES NOT pass through your transfer script can do. You want both of those to be "No Access" at the top level of your site if you do not want unauthenticated visitors.
The distinction between "Unauthenticated" and "All" is that "All" applies to all users whether they pass through the transfer script or not.
Here's another way to remember things:
User passes through your transfer script, iTunes U automatically assigns:
Authenticated@....
All@....
User does not pass through your transfer script and instead access your iTunes U site through derivable URL*, they get assigned:
Unauthenticated@....
All@....
*The derivable URL for a site is: http://deimos.apple.com/WebObjects/Core.woa/Browse/site-domain-name
Mac OS X (10.4.6)

FBZP transfers to different banks with 1 payment method

Hi Experts,
I have the following requirement in society, we have several payment method for do the electronic transfers for each bank:
Payment method                    Bank
            T                           Bank transfer X
            V                           Bank transfer Y
            Z                           Bank transfer W
My question is, Is it possible to make transfers to any bank only using 1 payment method, which could be the T?,
If this is possible could you help me visualize how it could be.
Awaiting your valuable support, thanks in advance.

Hi,
You can do that but please read the below.
1. You have the House bank of "SBI' and making the online payment to few of your vendors.
2. The payment method is T (Bank transfer)
3. You would need to maintain the Payment method "T" in all those vednor masters.
4. You need to have invoices raised for those vendors who are using online payment.
5. F110 - APP : Parameters: You need to specify the Company code, Payment method and next due date
6. List of those vendors who are overdue and have the facility of Online payment.
7. Payment/Media: You need to configure a variant with Hose bank, Account ID , Payment method, and Printing para,meters.
8. Once you run this, if you are using the EDI-IDOC procedure, this will send an online message to SBI in order to process the payments of Different Vendors with Different banks.
So, one go......SBI making the payment to diffrent banks pertaining to different Vendors
Hope it helps
Thanks

With MSCHAPv2 configuration wireless network not able to connect

Hi
When working on PXA270 Development Board ,we have customized Driver for WiFi on windows embedded CE 6.0 R2 The configurations i have done is follows:
dhcp checked
username xxx
password xxx
domain name xxx
wireless on
authentication wpa2 enterprise
encryption aes and tkip
eaptype MSCHAPV2
with the above configurations, i seen a different behaviour
1) after configuring MSCHAPv2 , and rebooting the PXA270 target board, my wifi is not connected. may be we are getting after many reboots sometime ( once in 50 times)
2) with the default PEAP or Tls configuration it is working fine please let me know where can i find source code of MSCHAPV2 and why the behaviour is in this way?? please help me in MSCHAPv2
Ravikanth Varigonda

Above mentioned configuration are done through WZCtool.c which inherently uses WZC API to configure the parameters into WIFI stack.
When we configure these value and reboot the system (manually), we get connected to the network. But if we reboot the system again, we
cannot connect back to the same network.
Ravikanth Varigonda
Ravikanth Varigonda

Different behavior with aaa configuration

Similar Messages

Maybe you are looking for