Doubt about the creation MARS rule ??

Hello,
My question is the following one: I have a double authentication system (already created) to which a Juniper FW as well as a Cisco ASA 8.0 equipment are related as (Secure Access). This is the process:
a)      From his pc, the user accesses an authentication website. It is in the FW Juniper (that information is verified in a radiator).
b)      If the identity is the correct one, the second step would be in the Cisco ASA, in which, to validate, the user has to enter his user LDAP.
My idea is to register those events (rule) in Cisco MARS in the best/clear way possible. The equipments are already configured to inform to the MARS, and they are already included.
Thanks in Advance.

Please clarify what do you intend to accomplist with this rule, the post is not clear.
Regards
Farrukh

Similar Messages

  • I have a doubt about The Single-Thread Rule

    The [url http://java.sun.com/docs/books/tutorial/uiswing/overview/threads.html#rule]Single Thread Rule states:
    Rule: Once a Swing component has been realized, all code that might affect or depend on the state of that component should be executed in the event-dispatching thread.
    I began to wonder about this because so much code seems to work just fine when it isn't executed in the event dispatching thread. Why are there exceptions? I went looking for some code which acted differently when executed on the event thread than when it was not. I found this
    http://forum.java.sun.com/thread.jsp?forum=57&thread=410423&message=1803725#1803725
    Now I started wondering why this was the case. What I found was that DefaultCaret adds a document listener to the document of the JTextComponent. In this listener, the insertUpdate() method specifically tests if it is running on the event dispatch thread and if it is, it updates the caret position.public void insertUpdate(DocumentEvent e) {
        if (async || SwingUtilities.isEventDispatchThread()) {
            // ... update the caret position ...
    }I then copied the code from DefaultCaret and made a MyCaret. I needed to tweek the code a little bit, but it ran. I removed the event thread test. It worked outside the event thread. There was a small difference in the results though. The textarea did not scroll all the way to the bottom. Almost, but not quite. I didn't test enough to make sure this was the only problem, but there was at least one problem.
    Now I started think about why this would be. The thought crossed my mind that the order of the events which were posted to the event queue were probably important. Sun found bugs when components were updated out of the event thread, so they essentially ignored events which weren't on the event thread and created the The Single-Thread Rule.
    A few days pass. I'm starting to wonder if Sun could have done a better job making Swing components thread safe. I also don't know that this specific case I found was the rule or the exception to the rule. But without insight into the design philosopy of Swing, I would have to examine all their components and see how they have written them and see if I can come up with a better design. That sound like a lot of work. Especially without getting paid for it.
    But wait a second, all you have to do is call the append() method of JTextArea on the event thread. If that is the case, why didn't they write the freakin component that way? Well, I'll try itclass MyTextArea extends JTextArea {
      public MyTextArea(int rows, int columns) { super(rows,columns); }
      public void append(final String text) {
        if (SwingUtilities.isEventDispatchThread()) super.append(text);
        else {
          SwingUtilities.invokeLater(new Runnable() {
            public void run() { myAppend(text); }
      private void myAppend(String text) { super.append(text); }
    }I change [url http://forum.java.sun.com/thread.jsp?forum=57&thread=410423&message=1803725#1803725]camickr's code to use a MyTextArea and it works fine without calling from the event thread. I've essentially moved The Single-Thread Rule to the component itself rather than relying on each and every one of the [url http://www.aboutlegacycoding.com/default.htm?AURL=%2FSurveys%2FSurvey6intro%2Easp]2.5 million Java programmers worldwide to use SwingUtilities.invaokeLater().
    Now for my question...
    Why didn't Sun do this?

    Swing is slow enough as it is. Lets not make it slower
    just
    because dense "programmers" don't know what they are
    doing.I agree with you in defending the current model, but aren't you a bit harsh there?!? ;-)
    Well, there are a number of not-so-dense programmers that expect such high-level components to be thread-safe. The question is worth asking whether Sun intentionally favor the explicit thread management for performance reasons, or whether this was an oversight.
    I'd go for the former (intentional) : indeed any GUI toolkit is inherently thread-based; there is always a distinction between the graphical thread(s) and the application threads - and the programmer always has to manage explicit thread creation to handle long-running event handlers without blocking the event dispatching thread. Extending thread concerns to the updating of components is therefore not a big move.
    So it seems fair that a core GUI toolkit does not hide thread issues (though to the best of my knowledge there is no such limitation in updating AWT components), or at least that's what Sun deemed.
    An ease-of-use-focused toolkit wrapping the core toolkit for thread-safety can be provided as a third-party product. Though I agree that wrapping the dozens of existing widgets and hundreds of methods is cumbersome - and the lack of such products probably shows it would have a low added value to trained developpers.
    Because your way is an extra method call and if
    statement, neither of which is necessary if you already know you
    are in the correct thread. Now count the number of methods
    which will need to be changed (and add up the extra cost).Indeed it's quite common to update several properties of several widgets in one bulk (when user clicks "OK", add a row to the table, change the title of the window, update status bar, re-enable all buttons, change some color,...).
    In this case explicit thread management doesn't spare one if but a dozen of redundant ifs!
    Note that there could have been if-less ways to cope for thread safety, such as creating a copy of the component's model when a change is made to a component, and switching the model only before paint() is called in the event-dispatching - of course coalescing all changes into the same "updated" model until paint() is called.
    But this would trade ease of use for redundant memory consumption, especially for some components with potentially huge models (JTree, JTable, JTextArea,...). And Swing appears to be already quite memory-greedy!

  • When I complete my information about the creation of the apple Id, the screen show a message I have to find the support of Itunes. Help me

    When I complete my information about the creation of the apple Id, the screen show a message I have to find the support of Itunes. Help me

    Have you done a Disk Repair and a Disk Permissions Repair?
    If that doesn't resolve the problem I would suggest calling customer support about this issue as it is most likely on their (Apple's) end that the problem exists. 

  • Doubt about the sizing in the CPH

    Hi gurus!
    I have the following doubt about the sizing in the CPH.  I'm going to implement the CCMS BI CONTENT, i read the Note 979581 - Installing and configuring the CCMS BI Content, but in the document called "IT Performance Reporting Using SAP NetWeaver Business Intelligence" you can see images in this link:
    http://www.servidor-imagenes.com/show-image.php?id=050236bd91654e16c94a559350611dff
    here said how I can calculate the sizing based in Data Record Size per each Metric stored, but in specific,  about the example: 20 systems, 17 CPH metrics. are included SCM, BI, ECC, SOLMAN in this 20 systems? And about the 17 CPH Metrics is talking about ratios? what's mean the CPH metrics?, How can I know what is my CPH metrics?
    I hope can help me
    Best Regards
    Ramon Sanchez

    this theme has been closed on our enterprise

  • Doubt about the distribution system

    I have a doubt about the distribution system.
    We have made a publication and download it and have it in our iPad. The client does not want tosell or that anyone other than its 15 commercial rest her ipad. How can we host it in those 15ipads?, Do I need any of the subscription programs adobe?
    Thanks!

    function(){return A.apply(null,[this].concat($A(arguments)))}
    function(){return A.apply(null,[this].concat($A(arguments)))}Matthew Laun wrote:
    Yeah... Someone did that yesterday with 70-something users all trying to get the updated folio at once, and it caused server outages. I've got a feeling we may modify the user agreement to limit this. Not saying for sure, just a word of caution.
    Matthew
    I don't understand this reply at all.  Many of us have been using acrobat.com in exactly this fashion, and I've posted about it many times; including a full review:
    http://forums.adobe.com/message/3853106#3853106
    Did Adobe not see this coming? How would you limit the download amount without gutting the functionality?  Would this apply to paid acrobat.com accounts as well?
    I'm about to upgrade my acrobat.com account this week to host more than 1 folio.  You need to clarify what you mean by 'modify the user agreement' ASAP.

  • Doubt about the settlement rule of the Production ORder

    The only default distribution rule allowed for a PP order is PP1 or PP2.  We would need to change that to allow settlement to multiple receivers as a default. If that is the case, we may want to look into a user exit to update the settlement rule during production order creation instead so that the G/L account is correct from the beginning.
    Currently when we create the production order, the settlement rule will default the below, I am not sure if a user exit is able to maintain the Source as 200 (Materials)?
    If yes, we can then add the second rule for Source 100 (Labor and Mfg) via the user exit as well.
    In this case, SAP will not prompt us error of settlement with 200%, as they are from difference Sources.
    now anybody can explain me about the User EXit we have to correct this

    any help on this.. please its very urgent
    thanks in advance

  • Doubts about the advantages and disadvantages of BEx Analyzer

    Hi people!
    Do you know in specific. What are the advantages and disadvantages of BEx Analyzer?
    and Do you know the limitations and scope of the bex analyzer?
    Talking about the security issue. What kind of resticciones be applied to end-users to control information. Protecting system
    resources and the information that the user uses, not be manipulated.
    I hope you could answer my doubts
    Ramon
    Thanks

    Hi!
    The standard BEx BI 3.x tools, is no longer available with the SAP NetWeaver 7.0 BI tools; however, it is part of the SAP BI add-on installation that, by default, will install the BW 3.x tools along with the newer BI 7.0 tools.
    We want to prevent unauthorized download of data to excel sheets from users who have installed bex analyzer but are not authorized to do that. Certain users only have to access querys from web and shouldn't have to use reports from bex analyzer.
    The only accepted way to access reports for all users is by using web querys published in our intranet. But many users have bex analyzer installed and we don't want that an unauthorized user download data to a excel sheet via bex analyzer.
    I'm testing with one user with this roles, but bex web template and bex analyzer have similiar object authorizations, and i don't know if is possible prevent unauthorized download of data from excel sheets.
    Final users don't access to bex analyzer by rrmx transaction
    Until know i'm testing with this user roles:
    1. ZBW:BEX_WEB:RFC (for web templates)
    S_RFC:
    ACTVT:     16
    RFC_NAME:
    RFC1
    RSBOLAP_BICS
    RSBOLAP_BICS_CONSUMER
    RSBOLAP_BICS_PROVIDER
    RSBOLAP_BICS_PROVIDER_VAR
    RSOBJS_RFC_INTERFACE
    RSRCI_LOCAL_VIEW
    RSWRTEMPLATE
    SDIFRUNTIME
    SYST
    RFC_TYPE:  FUGR
    2. ZBW:BEX:RFC (for Bex Analyzer):
    ACTVT:     16 
    RFC_NAME:
    RSOBJS_RFC_INTERFACE
    RSR_XLS_RFC
    RZX0
    SDIFRUNTIME
    SM02
    SUNI
    SYST
    RFC_TYPE:  FUGR
    please take in count this points:
    1. Prevent unauthorized download of data to excel sheets from users that should have accees only querys from web not bex analyzer (very important this point)=
    2. what are the disadvantages of BEx Analyzer, if only if limited by excel...from other point like performance, workprocess with long runtimes, memory issues, for said something.
    I don't know if i'm going by good way.
    Somebody could help me?
    Ramon

  • Three questions about the creation of secondary indexes in ODS design mode

    1. When we right click the Indexes folder in ODS design to select Create to create the Index folder 010, a small window pops up with a check box called "Unique", do we have to check this checkbox to create folder 010?
    2. If we would like to include 3 InfoObjects into the secondary indexes, then how many folders we need to create? Need to create 3 folders like 010, 020, and 030 and place the 3 InfoObj. into the 3 folder respectively or create only one folder 010 and place all the 3 InfoObj. into this one folder 010?
    3. In SAP documentation titled "BW Performance Tuning" about the Indices, it says "If the (uncompressed) F fact table is small, it is usually faster to drop the secondary (bitmap) indices before the load and build them up after the load"
    Someone here says secondary index is only for ODS other than for cubes, but from the above statement, F fact table is related to cubes, then how to explain it? Also the above statement is talking above the variant in process chain that when you bring in a variant to load data to cube, then the drop index and generate index variants will be automatically created, does it refer to this? And what's bitmap index?
    Thanks in advance and we will continue to give you reward points!

    Hi Kevin,
    Cube has Secondary index's. The index's that we find in the Manage of the Cube are the Secondary Index's. Please check the following link for more information.
    http://help.sap.com/saphelp_erp2004/helpdata/en/80/1a6473e07211d2acb80000e829fbfe/frameset.htm
    Also, to know about Unique indexes, use the following link
    http://help.sap.com/saphelp_erp2004/helpdata/en/9b/c743f5b40711d194f900a0c929b3c3/frameset.htm
    "The indexes displayed are the secondary indexes of the F and E fact tables for the InfoCube. The primary indexes and those defined by the user are not displayed. " (SAP help).
    This should answer your questions.
    Regards,
    Praveen.

  • Create a Subscription without Notification Mail about the Creation

    Hi,
    we have developed a room extension which automatically creates subscriptions for new room members for all room stores; the target channel is (and should be) the EMAIL channel.
    The problem now is that when a user is added to the room as a member, he gets n+1 notification mails where n = # of room stores: one mail notifying about the room membership (that mail is OK) and one mail per room store notifying about the created subscription; these mails are not wanted.
    Question: Is it possible to create subscriptions per API (it's a service user who creates them and then passes over the ownership to the recepient) using the EMAIL channel but avoiding the notification mails about the created subscriptions?!
    Thanks in advance
    Detlev

    Hi,
    thanks for attending this interesting topic
    "Solution": It's not possible by standard means to reach this aim <i>only</i> in the situation described (but: globally for all subscriptions).
    Reason: <i>createSubscription</i> on the SubscriptionManager implementation calls <i>sendAdminNotification</i> internally, which calls <i>sendByNotificator</i> internally, which again calls <i>send(recipients, channel, notification)</i> on the <i>INotificatorService</i>. All these calls are unconditioned ...
    ... except for: The decision if an admin notification is sent depends on the "Allowed AdminNotifications" (System Admin, System Config, KM, CM, Repository Services, Subscription Service, subscription). Removing "create" will have the desired effect - but globally.
    See http://help.sap.com/saphelp_nw04/helpdata/en/6e/798e04b33b11d5993800508b6b8b11/frameset.htm for further details.
    Thanks for listenting
    hope it helps someone
    Detlev

  • Slight doubt about the downloading shown on Launchpad mac.

    hello folks!
    I have been worried about the downloading process shown in launchpad's first page is happening instead of second page like in lion! is it happening to you people too?

    It is in the first page.
    # 8
    http://support.apple.com/kb/HT5548

  • About the process determine rule

    I'd like to have different approval process of requesting resource for different user type, and I know that we can implement it using process determine rule.Everything goes well if the requester is the user himself.But if a manager requests resource for his employees,we can't obtain the employees' info,as we have to use the user type as rule,so all of them have the same approval process.In this circumstances,What should I do in order to have different approval process according their user type ?
    Thanks in advance!

    As the target user is not known until the request is submitted you will not be able to invoke the approval based on identity type if anyone other than the user requests a resource for the end user.
    in your default approval process you can have a task which will check for the identity type of the user and then according insert an approval task in the workflow that is required when the identity type is a specific value.
    e.g. if identity type is employee approval by security dept is needed
    Have the porcess determination rule that will serve if users place requests for themselves. if others place a request on behalf of the user then the process determination rule will evaluate to false and the default approval associated with the ro will get kicked off. It is in the default approval that you write the above mentioned adp that checks for id type and invokes / injects approvals tasks dynamically into the workflow. check the api's for instantiating an approval task. you will need to have uncheck the set disable insert checkbox on the approval task.

  • Doubt about the concept of HashSet and LinkedHashSet

    I read one of the SCJP 6 exam book, when talking about Set, it gives one definition:
    When using HashSet or LinkedHashSet, the objects you add to them must override hashCode(). If they don't override hashCode(), the default Object. hashCode() method will allow multiple objects that you might consider "meaningfully equal" to be added to your "no duplicates allowed" set.
    What I am getting confused is that IF the objects we add to them must override hashCode(), we must override equals() method also! Isn't it?
    Edited by: roamer on 2009?10?23? ??10:29

    jverd wrote:
    endasil wrote:
    When using HashSet or LinkedHashSet, the objects you add to them must override hashCode(). If they don't override hashCode(), the default Object. hashCode() method will allow multiple objects that you might consider "meaningfully equal" to be added to your "no duplicates allowed" set.This really is completely wrong. Duplicates being added to your set has nothing to do with not overriding hashCode, and everything to do with not overriding equals. No, if you override equals but not hashCode, you can get dupes. That is, two items that your equals method says are equal can make it into the Set.Sorry, to clarify, what I meant by that was that to avoid duplicates of meaningfully equal objects, you must override equals, and overriding hashCode is just a consequent of overriding equals (to maintain the equal objects have equal hashcodes invariant). Overriding hashCode alone will not, and cannot, prevent meaningfully equal duplicates if you don't first define meaningfully equal by overriding equals.
    In summary, it's wrong because
    1) You don't have to override hashCode() if you don't override equals (or rather, don't deviate from the default "two objects are equal if and only if they are the same object").
    2) If you have any other definition of meaningfully equal that you want enforced in a Set, you must override equals to correspond to that definition.
    3) If you override equals, you must override hashCode by the contract of hashCode and equals.
    That's why I was saying that the statement was completely wrong. It's taking a backwards approach.
    By not overriding equals, you're saying that no two separate instances can be meaningfully equal, so the default hashCode is fine. Yeah, I kind of figured for the statement to be meaningful, it is assumed that you have already overridden equals. Otherwise what's the point of even mentioning something two objects "meaningfully equal"?All this talk of "meaningfully equal" makes me think the opposite: that they haven't overridden equals, or haven't discussed it yet. Otherwise you could just say that the objects are equal, or are equal according to equals().
    I would question the authority of the source that said that.I would quesiton the source's ability to express himself clearly. :-)Yeah, maybe that's all it is. In that case, I suggest (to the OP) reading [Effective Java, Chapter 3|http://java.sun.com/developer/Books/effectivejava/Chapter3.pdf]. Best source I've seen for beginners to make sense of all this.
    Edited by: endasil on 26-Oct-2009 1:11 PM

  • One last doubt about the Verification Required message when trying to download anything.

    Hello guys, so this is the thing.
    Like a lot of people here I'm getting the annoying message "Verification Required: Before you can make purchases, you must tap Continue to sign in, then verify your payment info". OK right now my son is using my iPad and I setted my credit card payment info to None, so he can't purchase anything. He's just trying to install free apps like messengers, alarms, free games and other free stuff, but so far he only installed Yahoo Messenger, which is a free app like everybody knows. However we haven't be able to download anything else because that message which prevents to download anything. Also I'm in a new address and can't update my personal data because I have selected the None option in credit cards.
    So this is my doubt: If I checked None, it's suppossed I can't pay for anything, which is good to me right now because my son is ussing my iPad so, why I can't even download the free ones? I mean that's not logical to me.
    Why I can't navigate through the App Store getting free apps without this annoying message which prevents me to install even free apps?
    I just don't understand it.
    I hope anyone can help me.
    Best regards.

    Try 3 things -
    1. Double tap on the Home button, scroll through the appas until you get to the Apps Store one, press on it until the minus sign appears on it and then press of the minus sign. Go back to your Home page, selec the Apps store nd try again.
    2. Do a Reset [Hold the Home and Sleep/Wake buttons down together for 10 seconds or so (until the Apple logo appears) and then release. When the screen goes blank power On again in the normal way.] It is absolutely/appsolutely safe!
    3. Delete your card details in your Account details and try again.

  • Doubt about the flow...

    HI all
    i have the following piece of code, please explain me how the logic works..
      LOOP AT T_BAL INTO V_H_BALANCES.
        MOVE V_H_BALANCES TO V_TEMP_BALANCES.
        AT END OF MATNR.
          SUM.
          MOVE V_H_BALANCES-KSPEM TO V_TEMP_BALANCES-KSPEM.
          MOVE V_H_BALANCES-SPEME TO V_TEMP_BALANCES-SPEME.
          MOVE V_H_BALANCES-BOTH_QTY TO V_TEMP_BALANCES-BOTH_QTY.
          APPEND V_TEMP_BALANCES TO T_TEMP_BALANCES.
        ENDAT.
        CLEAR V_H_BALANCES.
      ENDLOOP.
    and my T_BAL internal table contains these feilds.
    TYPES: BEGIN OF TY_BAL,
           WERKS TYPE MARD-WERKS,
           MATNR TYPE MARD-MATNR,
           LGORT TYPE MARD-LGORT,
           SPEME TYPE MARD-SPEME,  " Owned Blocked
           KSPEM TYPE MARD-KSPEM,  " Consigned Blocked
           MEINH TYPE MARM-MEINH,
           MAKTX TYPE MAKT-MAKTX,
           MATKL TYPE MARA-MATKL,
           MVGR4 TYPE MVKE-MVGR4,
           PRAT2 TYPE MVKE-PRAT2,
           COST  TYPE MBEW-VMSAL,
           STPRS  TYPE MBEW-VMSAL,
           PEINH TYPE MBEW-PEINH,
           PH_MATNR TYPE MVKE-MATNR,
           MENGE(16) TYPE P DECIMALS 0, "STPO-MENGE,
           TOT_SPEME(16) TYPE P DECIMALS 0, "MARD-SPEME,
           TOT_KSPEM(16) TYPE P DECIMALS 0, "MARD-KSPEM,
           BOTH_QTY(16) TYPE P DECIMALS 0, "MARD-SPEME,  "SPEME & KSPEM
           END OF TY_BAL.
    thanks in advance.

    Hi,
    In this piece of code, the developer is trying to do the following:
    - Loop at every record of the internal table(T_BAL) and get it into  a work area (V_H_BALANCES ).
    - Mode the field contents of the work area(V_H_BALANCES ) into another work area (V_TEMP_BALANCES).
    - Then for every change of MATNR field he is adding all the numeric fields.
    - Then transfering all the fields ( i.e. added fields ) in to another work area (V_TEMP_BALANCES) .
    - Adding this new set of record( added values ) from one internal table ( V_TEMP_BALANCES)to the other internal table (T_TEMP_BALANCES).
    The result would be somthing as :
    Old Internal table(T_BAL):
    werks matnr   lgort
    0001  screw1 20
    0001  screw1 30
    0001  screw2 10
    0001  screw2  20
    Then after you run this piece of code then, the contents of the new interna table (T_TEMP_BALANCES) would be :
    werks matnr   lgort
    0001  screw1 50
    0001  screw2 30
    Hope that makes the picture a lil clear.
    Award points if founf useful.
    Best Regards.
    Ashish Singhal.

  • Question about the html5 display rule

    /*html5 display rule*/
    article, aside canvas, details, figcaption, figure, header, hgroup, menu, nav, section, summary {
         display:  block;
    I have an html5 site that has both and internal and external style sheet.  Does the above rule need to be in BOTH style sheets, or just the external one...?

    I'm sorry, the point I was trying to make was it honestly doesn't matter "where" you put it (external or embedded), as long as it's there  and isn't being overwritten by css from another source.
    Which stylesheet do you use for the actual layout of the page?
    That's where I would put it. Whether you want it there is up to you, it could be in either, but it's not needed in both. Your code will be lighter if you put it in the external file, since you would use the same file on every page, seems a waste to have to paste it into every page in the head section.
    I usually put all of my css in one external file. Unless that file gets huge, then I will separate out layout from content style and have two external files.
    There is literally no reason I can find to have your css embeeded in the <head> section of a page.

Maybe you are looking for

  • Control key combinations in Keyboard Shortcuts

    I want to use the Control key plus letters, such as Ctrl-H, for shortcuts within Keyboard Shortcuts. I appreciate that such combinations are normally used by EMACS but I fail to understand what's happening in the Keyboard Shortcuts section of my Keyb

  • Where do I find the disc number for my macbook A1278?

    Help! I can't find my original install discs for my Macbook A1278 and cannot find anywhere on apple site a cross reference as to which disc I need to replace system. My hard drive died and I bought a new one, but my book wants install disc. Which mod

  • Possible values for WDY_ATTRIBUTE_FORMAT_PROP-DATE_FORMAT?

    Hi, where can I lookup possible values for formatting a date typed field using WDY_ATTRIBUTE_FORMAT_PROP-DATE_FORMAT? I did not find any documentation so far.

  • Linking files on my iDisk

    Hi, I need to create a simple page with links to some files residing on my iDisk. How do i do that? There are templates with video, photos and podcasts, but no templates to include links to music files. How can I solve that? Thank you.

  • How to create groups with non-local addresses

    I want to create a mailing group that consists of non-local addresses like [email protected], [email protected] How to do this ? I know that editing /etc/aliases redirects to local accounts only. The above is possible by editing /etc/postfix/virtual and do