Domain Mapping

Sorry to post this many times.
How to map domains name to different applications, example how to map dns www.domain1.com to oracle application express www.domain1.com/apex/f?p=111:1 and dns www.domain2.com to oracle application express www.domain2.com/apex/f?p=222:1 ?
I have these constraints: I'm using one db server, and one web server (glassfish), and one ip address, I can't change this architecture.
thanks,

Hi,
I'm sure you can get your domain mapping up that way and if you make those rules complex enough, you'll also make it safe. But I see one major and two minor disadvantages in implementing it with such a tool:
1. You jump into an unsupported operation mode with your APEX Listener.
2. Your configuration is static, i.e. each change will need a restart of the application and each version update makes patching necessary.
3. Some web containers don't like changes of web.xml and loading additional classes at runtime, so you'll have to modify the war.
If you don't have to care about the support issue and you surely don't want a proxy for whatever reason, this might be your solution.
I didn't know the full capabilities of that library before. It has some interesting features that may help to overcome some other restrictions the APEX Listener currently has, e.g. setting headers for SSO-solutions, especially the commonly used NTLM authentication.
Thanks for pointing me to that library!
-Udo

Similar Messages

When using Craigslist I keep getting this error: Warning! Domain mapping upgrade for this domain not found. Nothing I do works to fix this.

When I use Craigslist, my personal list of things being sold, and I try and renew my listings, I periodically get this: "Warning! Domain mapping upgrade for this domain not found. Please log in and go to the Domains Upgrades page of your blog to use this domain." Usually rebooting my computer makes it go away for a short time, but today that isn't working and following the commands on the warning doesn't work either...is this truly a firefox issue? How do I fix it.

Clear the cache and the cookies from websites that cause problems.
"Clear the Cache":
*Firefox/Tools > Options > Advanced > Network > Cached Web Content: "Clear Now"
"Remove Cookies" from sites causing problems:
*Firefox/Tools > Options > Privacy > Cookies: "Show Cookies"

APEX: Internet domain mapping / URL rewrite for Apps in the cloud

Hello,
I have registered for a trial access since first day in which the cloud was launched ... But, did not get access till now ... If I were to buy it, am I going to get access right away ??
Is Oracle Cloud going to offer Internet domain name mapping to a specific APEX application ???
Is Oracle Cloud u going to offer URL rewrite where APEX URL is not Search Engine friendly.... e.g:
This site: http://www.enkitec.com/ was built on APEX, but as you can see the URL was rewritten ????
Best Regards,
Fateh

Hi,
According to your post, my understanding is that the rule was not processing for SharePoint 2013 result page.
Please make sure you add the reverse rewriting rule correctly.
For more information, you can refer to:
Add the reverse rewriting rules (in the HTML)
Setting up a Reverse Proxy using IIS, URL Rewrite and ARR
Best Regards,
Linda Li
Linda Li
TechNet Community Support

Domain Mapping Issues

Hi, Business Catalyst community.
I re-launched my website today, with Business Catalyst only a piece of the whole site. Previously, I had simply used a Tumblr blog for the bulk of my site, with a custom domain. My DNS server pointed to Tumblr's IP address and domains.tumblr.com. Now, the landing page for my site points to SmugMug's IP address and domains.smugmug.com.
Now, here's what just won't seem to work right. The Adobe Muse/Business Catalyst part of my site is run through the subdomain "pages.slowlittlephoto.com". My DNS host records point to the Business Catalyst IP address specified under Add a Domain. Now, since there's nothing like domains.businesscatalyst.com (as far as I can tell) to match my heretofore perfectly running system, I've configured a CNAME for the Pages subdomain that just says slowlittlephoto.com (the base domain). Throughout the day, after re-publishing my site from Muse, the Pages subdomain got confused and displayed Tumblr's Not Found pages. It came back, but then links from the SmugMug part of my site to pages.slowlittlephoto.com started redirecting to just slowlittlephoto.com and producing error messages. Is there something like domains.smugmug.com that I could use for the Business Catalyst portion of my site? Something that isn't just the Business Catalyst IP address since I don't believe repeating that would work. I have a feeling it could clear up the confusion for my DNS server. Using just the base domain name itself only seems to be causing problems. Any help would be greatly appreciated. Thank you kindly!

Hi SlowLittlePhoto. I have encountered issues with reserved sub-domains on BC in the past. I suggest you submit a support request to find out if the sub-domains you want are reserved by BC. Good luck.

[b]Web server / Domain mapping[/b]

Dear web developers,
I am using iplanet webserver 6.0.
I have two problems
1. Until now i was using the IP,
Say http://qqq.qqq.qqq.qq:port/FTP/WelcomePage.htm
but now i am going to register the domail say MyProduct.com after this i want when ever i enter MyProduct.com in address bar it should take me to welcome page. How exactly to do this??
2. Currently i have hard coded ip at many places
Say
http://qqq.qqq.qqq.qq:port/FTP/IndexPage.htm
So removing the Ip with domain name should work.
Can any one please tell me which all configuration files need to be modified. Procedure to be followed
Currently i am going through the documentation but timely help will be greatly appreciated.
Thanks in advance.
Satish

1. Until now i was using the IP,
Say http://qqq.qqq.qqq.qq:port/FTP/WelcomePage.htm
but now i am going to register the domail say
MyProduct.com after this i want when ever i enter
MyProduct.com in address bar it should take me to
welcome page. How exactly to do this??This is not really something that the server is concerned with. This is your browser and your DNS.
Still - you should look at the default virtual server, the doc root, etc. You can do this through the Admin UI or by looking at server.xml and obj.conf.
2. Currently i have hard coded ip at many places
Say
http://qqq.qqq.qqq.qq:port/FTP/IndexPage.htm
So removing the Ip with domain name should work.I'm afraid I don't understand the question. Are you asking if you need to change these hard-coded URLs? Or if you change them, will they continue to worl?

Domain mapping for the portal URL | URGENT

Hi ,
The project is expected to go live in 10 days .The user would be accessing the portal with the URL http://domain.company.com and <b>NOT</b> by http://domain:50000/irj/portal . I need to figure out how can we do that .
We have a WAN network and a public ip has been assigned to the portal production server .We have a company domain reserved to be used for portal server .
What will be required to be done on the portal side or anywhere else for the URL http://domain.company.com to translate to http://domain:50000/irj/portal
Regards
Deepak Singh

Hi Deepak,
You can achieve this by setting up Reverse Proxy in your DMZ such that all internet request hit the reverse proxy server and that re-routes request to your Portal server.
If you want to avoid all these, you can use Html Redirection or Java Script redirection features.
a. Point your request https://abc.comp.com to this html file which would inturn redirect to abc.comp.com:50001/irj/portal.
Also refer my links in this thread
Opening EP6.0 access from the Internet
Hope this helps
Regards,
venkat.
[Pls reward points if useful]

One IP for Multiple Domains

Hi,
I have installed a DB and a Glassfish on one server. The server should handle 3 domains and only one IP address available which points to this server, each domain has its own Oracle APEX application.
www.d1.com >>> One IP Address >>> APEX Application1
www.d2.com >>> One IP Address >>> APEX Application2
www.d3.com >>> One IP Address >>> APEX Application3
How can I implement this?
Thanks,

Hi,
I actually had the same problem: I have one oracle instance (11gXE2) with Glassfish and the APEX Listener. I'm hosting different applications (in different workspaces) on this instance. The whole configuration is accessible by one fixed IP adres from the internet. I further have several domains (and sub-domains) mapped to this one IP. To ensure that a request for www.d1.com is routed to Application1 and www.d2.com to Application2 I wrote a smal plsql-"proxy (or multiplexer) using the OWA_UTIL.get_cgi_env ('HOST') variable to determine the requested domain and then redirect to an application that belongs to it.
The configuration I have stored in a table, for matching I use LIKE patterns:
Table for my "proxy":
{code}
CREATE TABLE "PROXY_RULES"
(     "ID" NUMBER,
     "SEQ" NUMBER,
     "HOST_PATTERN" VARCHAR2(1000),
     "REDIR_URL" VARCHAR2(1000),
     CONSTRAINT "PROXY_RULES_PK" PRIMARY KEY ("ID") ENABLE
{code}
filling for your example:
{code}
ID SEQ HOST_PATTERN REDIR_URL
1 5 %.d1.com http://www.d1.com/apex/f?p=App1:Home:0
3 10 %.d2.com http://www.d1.com/apex/f?p=App2
2 15 %.d3.com http://www.d1.com/apex/f?p=App3:1:0
0 99 % http://www.d1.com/apex/f?p=App1:Home:0
{code}
and the actual procedure to redirect calls:
{code}
PROCEDURE redirect IS
t_host varchar2 (250);
t_redir varchar2 (250);
BEGIN
t_host := OWA_UTIL.get_cgi_env ('host');
SELECT redir_url
INTO t_redir
FROM (SELECT redir_url
FROM proxy_rules
WHERE UPPER (t_host) LIKE UPPER (host_pattern)
ORDER BY seq, id)
WHERE ROWNUM < 2;
OWA_UTIL.redirect_url (curl => t_redir, bclose_header => TRUE);
EXCEPTION
WHEN OTHERS
THEN
OWA_UTIL.redirect_url (curl => 'http://www.d1.com', bclose_header => TRUE);
END redirect;
{code}
Grant execute on this procedure to the APEX_PUBLIC_USER, create a public synonym on it and make sure all requests without a path get redirected to it, for example with a simple index.html containing a redirect to "/apex/redirect":
<meta http-equiv="refresh" content="0; url=/apex/redirect">
This works fine, but doesn't check that App2 is accessed through www.d1.com. I still have to add this functionality.
I'm using the method on my sites [url http://www.rokit.nl]rokit.nl, [url http://www.fifapex.net]www.fifapex.net, [url http://m.fifapex.net]m.fifapex.net, [url http://www.themes4apex.com]www.themes4apex.com and [url http://www.themes4apex.com]www.themes4apex.nl. Try it!
I hope this helps.
Regards,
Christian Rokitta
Edited by: crokitta on Feb 28, 2012 1:38 PM
Edited by: crokitta on Feb 28, 2012 1:39 PM

BI Configuration manger Error while mapping Workforce Event Reason Combination → Workforce Event Detail

Hi
we installed OBIA 11.1.1.7.1 and we are performing configuraiton for HRMS / HCM.
In configuration manager when we try to map "Domain member mappings for domain map Source Workforce Event Reason Combination → Workforce Event Detail"
we get error "Java.lang.NullPointerExecption: ADF_FACES-60097: For more information please see the server error log"
when i check server log i am getting following error.
Need your input please.
i check in database such a object does not not exists
"invalid name pattern: DEV_BIACOMP.FND_TABLE_OF_VARCHAR2_120"
[ecid: bec22a6ffc2aafb0:-2f0779d2:141da31bf5d:-8000-0000000000004cc7,0]
[APP: oracle.biacm#11.1.1.7.1] [DSID: 0000K7QDhdLF4EWFLzmJOA1IPEbf000005]
getRoles W1tsL6Nt4L0vLEDBaul+/L4iuRiuUrka, obi raised java.sql.SQLException: invalid name pattern: DEV_BIACOMP.FND_TABLE_OF_VARCHAR2_120[[
java.sql.SQLException: invalid name pattern: DEV_BIACOMP.FND_TABLE_OF_VARCHAR2_120
at oracle.jdbc.oracore.OracleTypeADT.initMetadata(OracleTypeADT.java:599)
at oracle.jdbc.oracore.OracleTypeADT.init(OracleTypeADT.java:506)
at oracle.sql.ArrayDescriptor.initPickler(ArrayDescriptor.java:2152)
at oracle.sql.ArrayDescriptor.<init>(ArrayDescriptor.java:260)
at oracle.sql.ArrayDescriptor.createDescriptor(ArrayDescriptor.java:167)
at oracle.sql.ArrayDescriptor.createDescriptor(ArrayDescriptor.java:135)
at oracle.sql.ArrayDescriptor.createDescriptor(ArrayDescriptor.java:117)
at oracle.sql.ArrayDescriptor.createDescriptor(ArrayDescriptor.java:75)
at oracle.jdbc.driver.NamedTypeAccessor.otypeFromName(NamedTypeAccessor.java:89)
at oracle.jdbc.driver.TypeAccessor.initMetadata(TypeAccessor.java:96)
at oracle.jdbc.driver.T4CCallableStatement.allocateAccessor(T4CCallableStatement.java:759)
at oracle.jdbc.driver.OracleCallableStatement.registerOutParameterInternal(OracleCallableStatement.java:196)
at oracle.jdbc.driver.OracleCallableStatement.registerOutParameter(OracleCallableStatement.java:258)
at oracle.jdbc.driver.OracleCallableStatementWrapper.registerOutParameter(OracleCallableStatementWrapper.java:1783)
at weblogic.jdbc.wrapper.CallableStatement_oracle_jdbc_driver_OracleCallableStatementWrapper.registerOutParameter(Unknown Source)
at oracle.apps.fnd.applcore.common.ApplSession.getRoles(ApplSession.java:706)
at oracle.apps.fnd.applcore.common.ApplSession.attachSession(ApplSession.java:2436)
at oracle.apps.fnd.applcore.oaext.model.OAApplicationModuleImpl.prepareSession(OAApplicationModuleImpl.java:979)
at oracle.jbo.server.ApplicationModuleImpl.prepareSession(ApplicationModuleImpl.java:6918)
at oracle.jbo.server.ApplicationPoolMessageHandler.doPoolMessage(ApplicationPoolMessageHandler.java:182)
at oracle.jbo.server.ApplicationModuleImpl.doPoolMessage(ApplicationModuleImpl.java:9316)
at oracle.jbo.common.ampool.ApplicationPoolImpl.sendPoolMessage(ApplicationPoolImpl.java:4530)
at oracle.jbo.common.ampool.ApplicationPoolImpl.prepareApplicationModule(ApplicationPoolImpl.java:2460)
at oracle.jbo.common.ampool.ApplicationPoolImpl.doCheckout(ApplicationPoolImpl.java:2270)
at oracle.jbo.common.ampool.ApplicationPoolImpl.useApplicationModule(ApplicationPoolImpl.java:3169)
at oracle.jbo.common.ampool.SessionCookieImpl.useApplicationModule(SessionCookieImpl.java:592)
at oracle.jbo.http.HttpSessionCookieImpl.useApplicationModule(HttpSessionCookieImpl.java:234)
at oracle.jbo.common.ampool.SessionCookieImpl.useApplicationModule(SessionCookieImpl.java:525)
at oracle.jbo.common.ampool.SessionCookieImpl.useApplicationModule(SessionCookieImpl.java:520)
at oracle.jbo.client.Configuration.getApplicationModule(Configuration.java:1609)
at oracle.jbo.client.Configuration.createRootApplicationModule(Configuration.java:1514)
at oracle.jbo.client.Configuration.createRootApplicationModule(Configuration.java:1485)
at oracle.apps.fnd.applcore.Profile.getNonBindingContainerProfileService(Profile.java:341)
at oracle.apps.fnd.applcore.Profile.getService(Profile.java:318)
at oracle.apps.fnd.applcore.Profile.get(Profile.java:223)
at oracle.apps.fnd.applcore.common.ApplSessionUtil.getProfileValue(ApplSessionUtil.java:3295)
at oracle.apps.fnd.applcore.patterns.uishell.internal.ExternalServicesAdapter.getProfileValue(ExternalServicesAdapter.java:385)
at oracle.apps.fnd.applcore.patterns.uishell.ui.bean.ManageSandboxesBean.getSandboxCheckActive(ManageSandboxesBean.java:314)
at oracle.apps.fnd.applcore.patterns.uishell.ui.bean.ManageSandboxesBean.isRenderFlag(ManageSandboxesBean.java:1248)
at sun.reflect.GeneratedMethodAccessor912.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.el.BeanELResolver.getValue(BeanELResolver.java:293)
at com.sun.faces.el.DemuxCompositeELResolver._getValue(DemuxCompositeELResolver.java:173)
at com.sun.faces.el.DemuxCompositeELResolver.getValue(DemuxCompositeELResolver.java:200)
at com.sun.el.parser.AstValue.getValue(AstValue.java:138)
at com.sun.el.ValueExpressionImpl.getValue(ValueExpressionImpl.java:206)
at org.apache.myfaces.trinidad.bean.FacesBeanImpl.getProperty(FacesBeanImpl.java:68)
at org.apache.myfaces.trinidad.component.UIXComponentBase.getBooleanProperty(UIXComponentBase.java:1363)
at org.apache.myfaces.trinidad.component.UIXComponentBase.isRendered(UIXComponentBase.java:496)
at org.apache.myfaces.trinidad.component.UIXComponent.processFlattenedChildren(UIXComponent.java:154)
at org.apache.myfaces.trinidad.component.UIXComponent.processFlattenedChildren(UIXComponent.java:290)
at org.apache.myfaces.trinidad.component.UIXComponent.processFlattenedChildren(UIXComponent.java:213)
at oracle.adfinternal.view.faces.renderkit.rich.PanelGroupLayoutRenderer.encodeAll(PanelGroupLayoutRenderer.java:343)
at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1432)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:358)
at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:840)
at javax.faces.component.UIComponent.encodeAll(UIComponent.java:937)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeChild(CoreRenderer.java:422)
at oracle.adf.view.rich.render.RichRenderer.encodeChild(RichRenderer.java:2788)
at oracle.adfinternal.view.faces.renderkit.rich.PanelBorderLayoutRenderer.renderSideFacet(PanelBorderLayoutRenderer.java:316)
at oracle.adfinternal.view.faces.renderkit.rich.PanelBorderLayoutRenderer._renderRightFacets(PanelBorderLayoutRenderer.java:384)
at oracle.adfinternal.view.faces.renderkit.rich.PanelBorderLayoutRenderer._encodeAllWithSideFacets(PanelBorderLayoutRenderer.java:227)
at oracle.adfinternal.view.faces.renderkit.rich.PanelBorderLayoutRenderer.encodeAll(PanelBorderLayoutRenderer.java:83)
at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1432)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:358)
at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:840)
at javax.faces.component.UIComponent.encodeAll(UIComponent.java:937)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeChild(CoreRenderer.java:422)
at oracle.adf.view.rich.render.RichRenderer.encodeChild(RichRenderer.java:2788)
at oracle.adfinternal.view.faces.renderkit.rich.PanelGroupLayoutRenderer._encodeChild(PanelGroupLayoutRenderer.java:432)
at oracle.adfinternal.view.faces.renderkit.rich.PanelGroupLayoutRenderer.access$300(PanelGroupLayoutRenderer.java:30)
at oracle.adfinternal.view.faces.renderkit.rich.PanelGroupLayoutRenderer$EncoderCallback.processComponent(PanelGroupLayoutRenderer.java:682)
at oracle.adfinternal.view.faces.renderkit.rich.PanelGroupLayoutRenderer$EncoderCallback.processComponent(PanelGroupLayoutRenderer.java:601)
at org.apache.myfaces.trinidad.component.UIXComponent.processFlattenedChildren(UIXComponent.java:170)
at org.apache.myfaces.trinidad.component.UIXComponent.processFlattenedChildren(UIXComponent.java:290)
at org.apache.myfaces.trinidad.component.UIXComponent.encodeFlattenedChildren(UIXComponent.java:255)
at oracle.adfinternal.view.faces.renderkit.rich.PanelGroupLayoutRenderer.encodeAll(PanelGroupLayoutRenderer.java:358)
at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1432)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:358)
at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:840)
at javax.faces.component.UIComponent.encodeAll(UIComponent.java:937)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeChild(CoreRenderer.java:422)
at oracle.adf.view.rich.render.RichRenderer.encodeChild(RichRenderer.java:2788)
at oracle.adfinternal.view.faces.renderkit.rich.PanelStretchLayoutRenderer.encodeTopFacet(PanelStretchLayoutRenderer.java:781)
at oracle.adfinternal.view.faces.renderkit.rich.PanelStretchLayoutRenderer._encodeHorizontalPane(PanelStretchLayoutRenderer.java:1255)
at oracle.adfinternal.view.faces.renderkit.rich.PanelStretchLayoutRenderer.encodeAll(PanelStretchLayoutRenderer.java:298)
at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1432)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:358)
at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:840)
at javax.faces.component.UIComponent.encodeAll(UIComponent.java:937)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeChild(CoreRenderer.java:422)
at oracle.adf.view.rich.render.RichRenderer.encodeChild(RichRenderer.java:2788)
at oracle.adf.view.rich.render.RichRenderer.encodeStretchedChild(RichRenderer.java:2150)
at oracle.adfinternal.view.page.editor.renderkit.PageCustomizableRenderer.encodeAll(PageCustomizableRenderer.java:330)
at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1432)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:358)
at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:840)
at javax.faces.component.UIComponent.encodeAll(UIComponent.java:937)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeChild(CoreRenderer.java:422)
at oracle.adf.view.rich.render.RichRenderer.encodeChild(RichRenderer.java:2788)
at oracle.adfinternal.view.faces.renderkit.rich.PanelStretchLayoutRenderer.encodeCenterFacet(PanelStretchLayoutRenderer.java:769)
at oracle.adfinternal.view.faces.renderkit.rich.PanelStretchLayoutRenderer._encodeCenterPane(PanelStretchLayoutRenderer.java:1146)
at oracle.adfinternal.view.faces.renderkit.rich.PanelStretchLayoutRenderer._encodeMiddlePanes(PanelStretchLayoutRenderer.java:348)
at oracle.adfinternal.view.faces.renderkit.rich.PanelStretchLayoutRenderer.encodeAll(PanelStretchLayoutRenderer.java:313)
at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1432)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:358)
at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:840)
at javax.faces.component.UIComponent.encodeAll(UIComponent.java:937)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeChild(CoreRenderer.java:422)
at oracle.adf.view.rich.render.RichRenderer.encodeChild(RichRenderer.java:2788)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeAllChildren(CoreRenderer.java:438)
at oracle.adfinternal.view.faces.renderkit.rich.FormRenderer.encodeAll(FormRenderer.java:220)
at oracle.adf.view.rich.render.RichRenderer.encodeAll(RichRenderer.java:1432)
at org.apache.myfaces.trinidad.render.CoreRenderer.encodeEnd(CoreRenderer.java:358)
at org.apache.myfaces.trinidad.component.UIXComponentBase.encodeEnd(UIXComponentBase.java:840)
at javax.faces.component.UIComponent.encodeAll(UIComponent.java:937)

Hi,
sorry, but this forum cannot assist in issues that include Oracle Fusion Applications as we don't have the same JDeveloper version publicly available.
Frank

Question about mapping AD to OID

I'm trying to determine the correct entries for the activechg.map file.
I have 2 issues to resolve:
1. Most of the user accounts are in the AD users folder but I also have user accounts in an AD OU named "Cust Ser Reps". So do I need the following entires in the map file?
CN=Users,DC=norris,DC=intra:cn=Users,dc=norris,dc=intra
OU=Cust Ser Reps,DC=norris,DC=intra:cn=Users,dc=norris,dc=intra
2. I have a second AD domain (swtp.intra) that resides in a different forest from norris.intra. There is a 2-way external trust between them. How do I map this domain to OID? The OID is only setup for dc=norris,dc=intra.
Thanks for your help.
Tom

Hi Thomas
The answer to question one is "yes" that is exaclty how you do it. If you have users in different parts of the tree you can modify your Domain mapping rules by adding the second tree and both will be synced with OID.
To answer your second question, if you have a forest of AD servers then you should only sync with the Global Catalog Server. This will ensure that all changes made to any of the AD servers in the forest are synced with OID. You can read more about this in Chapter 43 of the OID admin guide.
If you have multiple independant AD servers then you need to create a new DIP profile for each one that you want to sync with using ODM to create the new profiles.
Jay

Overlapping OAM policy domains

The OAM documentation addresses overlapping policies within a single policy domain, but I haven't been able to find anything about overlaps between different domains.
I have a policy domain for a host that protects everything under the root "/". However, I want the "access" virtual directory to be handled the same as the access directory on all of the other hosts, so I added the access resource to a domain that defines the policy for all of the access directories.
The result is an overlap-- the access directory for that host is protected in the specific "access" domain, and it's also protected under the domain that protects everything under the root for that host.
Is this a problem for OAM? Does OAM apply the most-specific policy domain for a resource, as hoped in this case? OAM allows me to explicitly order policies within a domain, but I don't see any way to order domains themselves.
Thanks,
Matthew

For policy domain mapping, the basic algorithm OAM follows is to use the host and path elements of the URI to 'map' into the 'most specifically relevant' policy domain.
As far as the path is concerned, OAM tries to match the path beginning with the most strict pattern and then working backwards to achieve a match.
For example, consider the following configuration:
Policy Domain A protects MY_HOST/access/bin
Policy Domain B protects MY_HOST/access
If a request for MY_HOST/access/bin/foo?param=1 comes in...
OAM looks for a policy domain protecting a resource MY_HOST/access/bin/foo and can't find one.
Next, OAM looks for a policy domain protecting a resource MY_HOST/access/bin and finds it and processing continues from there.
So, in the case you illustrate, /access is simply a 'more strict' pattern than / which will catch all requests that match that pattern.
As you noted, the evaluation of 'Policies (exceptions to the default rules)' is managed by explicit order.
It is also important to note, in this discussion, that OAM does not tolerate ambiguity on the HOST element of a protected resource. Configuring OAM to map the same hostname variation to more than one host identifier will produce unpredictable results. Validation in the admin application is in place to help avoid this.
Hope that helps.
Cheers,
Mark

SSL and custom domain configuration for cloud service

Hi,
I am doing custom domain mapping and SSL configuration for a cloud service web role. Another important aspect is Cloud service web role uses ADFS in between for authentication.
I have custom domain mapped, SSL uploaded on cloud services Certificates
tab in management portal, certificate .pfx and chaining certs .CER are added as below -
<Certificate name="UATCert" thumbprint="A" thumbprintAlgorithm="sha1" />
<Certificate name="Certificate1" thumbprint="B" thumbprintAlgorithm="sha1" />
<Certificate name="Certificate2" thumbprint="C" thumbprintAlgorithm="sha1" />
I see these certificates getting added properly to Azure cloud service web role instance VM.
The problem is, when I access the custom domain,
https://mysite.com/default.aspx in the browser ultimately after ADFS login I see
https://cloudservice.cloudapp.net/default.aspx. My understanding is, cloudapp.net should not be seen in the browser to the client. Also I keep getting error of certificates stating "There is
a problem with this website’s security certificate" when browser shows cloudapp.net url.
How can I avoid display of cloudapp.net in browser and show only custom domain Url. Also how can I avoid this certificate error ?
Thoughts?
http://sanganakauthority.blogspot.com/

Hi kunal,
Based what you described, I understand that you want to use the custom domain for cloud service web role and apply azure active directory authentication to the web role application.
>>>The problem is, when I access the custom domain,
https://mysite.com/default.aspx in the browser ultimately after ADFS login I see
https://cloudservice.cloudapp.net/default.aspx.
As for above issue, I think you should make sure you have registered the web application in azure AD both "SIGN-ON URL" and "Reply URL" are
https://mysite.com/default.aspx
>>>Also I keep getting error of certificates stating "There is a problem with this website’s security certificate" when browser shows cloudapp.net url.
Try to upload a valid certificate (provided by CA) to cloud service for your custom domain.
Best Regards,
Fuxiang
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place. <br/> Click <a
href="http://support.microsoft.com/common/survey.aspx?showpage=1&scid=sw%3Ben%3B3559&theme=tech"> HERE</a> to participate the survey.

Is it OK to have two SBS Servers with same name, on different subnets but connected over a VPN?

Hi Everyone,
I'm just about to connect up two SBS 2011 Servers with the same server name but on different subnets & domains over a VPN.
So for example both servers will have the name Server01, one would have an ip address of 192.168.85.5, the other 192.168.86.5, they both then would be connected over a VPN.
Can anyone foresee any issues with this configuration, like DNS & DHCP requests, adding new machines to the domain, mapping drives etc.
Many thanks,
Nick

Hi Larry & Strike First,
Thank you for your responses. I understand that this is an unusual situation. Basically I've recently taken over the IT support for this client. The client has just had a new phone system installed
& are asking if they can speak to each office internally, which can easily be done once I setup the VPN.
However I noticed whilst looking at this further that the Server names are the same, hence my question?
Am I right in saying that providing the workstations have a trust relationship with their own domain controllers through their individual domains on separate subnets, that hopefully there shouldn't be any DNS issues between the two domains and Servers?
I could build a new VM if you feel it would be better practice to do so?
Many thanks for your assistance,
Nick

Setting Security in Internet Zone to High affects Trusted Sites

In response to the recent Security Advisory, we recommended our users set the Internet Zone security to High.
However, this is causing our local Intranet site which is in every users Trusted Sites Zone (set at Medium-Low) to not function.
I was under the impression that Trusted Sites are treated different than Internet Sites.
What security settings do they share that would be affected by setting the Internet Zone to High?
Thank you.
Jeremy Leigh

Hi
f12>Console tab, refresh the page to show suppressed error messages, warnings, blocked content warnings.
A 'High' security zone settings is equivalent to the Restricted Zones default setting.
by default Active Scripting, scripting of ActiveX and applets and xss is disabled in the Restricted Zone.... basically domains mapped to the Restricted sites zone will be useless without active scripting.
Rob^_^

Ideas for features needed in new Conversational LDAP Accept

Mark, sorry should have given you this list months ago. My guess is you've already thought of all of these and more.
Everyone else, feel free to add to the list or tell me I'm nuts... or better yet ask what for.
1) A good DHAP (directory harvest attack prevention) solution. I'm guessing this would be along the same lines as current post-conversation LDAP Accept. - completely obvious
2) Sender Group specific settings, also like the current DHAP. This allows for different bounce/drop rates based on Sender Group or SRBS. Also the ability to Drop vs. Bounce based on Sender Group, not just a global setting.
3) The ability to do conversational bounces based on the MAIL FROM: in addition to the RCPT TO:. This allows for conversational bounces for Internet inbound emails where the MAIL FROM: may be your own domain (spoofed).
4) LDAP Accept still needs to be post HAT, Domain Map and RAT processing.
5) Rates and counts added to the Mail Flow monitor stats, specifically: Invalid LDAP rates: Total, Bounce and Drop.
6) LDAP lookup status, very much like DNS with cache hit/miss rates, number of lookups, etc. Also rates along with counts.
7) Warnings when LDAP lookup timeout is exceeded, vs. server connection failures. Configurable LDAP lookup timeout.
8) If connection to LDAP server fails or times out, emails are accepted by default.

Erich,
This is all very good feedback. The vast majority of it will be included in the conversational LDAPACCEPT feature coming in a maintenance release in the short term.
There are a couple items that we'll have to get to in a later release:
- Drop vs. bounce in the sender group. Good idea, beyond what we'll be able to do in this release. But you'll be able to enable/disable and set thresholds per sender group.
- Conversational bounces on the Envelope Sender. This is coming in the Hard Rock release, planned for Q405.
- LDAP lookup status will be in the Hard Rock release
Everything else looks to be in there.
Peter Schlampp
Sr. Dir., Product Management
IronPort Systems

AD Query String for Group Membership

Hi
I have found that inbound mail to distributions groups (Ex07) are not being delivered. Running a trace, I am seeing they are failing on LDAP match. I tracked it down to the qroup query not working. We are using the default query. Running a test, it fails. I think that is the problem. I can mail the group internally just fine.
Anyone have a good query string that will check for distribution groups? Below is the query being used. Thanks for the help.
(&(memberOf={g})(proxyAddresses=smtp:{a}))

Can you go to the LDAP section and provide all the fields that are relevant?
I'll need the LDAP configuration fields (minus the password of course) and what you're using for the LDAP Accept.
Well I opened a ticket with support, and it appears that I have them stumped. From what they tell me it isn't the ldap group query that is failing, but rather the ldap accept query failing.
Sending to the group does work internally so It looks like ldap is good with the the proxy address, but ironport is failing on the query.
Snippit from trace:
Envelope Recipient Processing
Envelope Recipient: [email protected]
LDAP Accept Lookup: Result: failed
Default Domain Processing: No Change
Domain Map Processing: No Change
Recipient Access Table Processing: Behavior: ACCEPT Matched On: [email protected]
Alias Expansion: No Change

Domain Mapping

Similar Messages

Maybe you are looking for