DSfW and eDirectory Network Address attribute

Hi,
In a DSfW environment, with Windows only clients, we lose the update of the attribute "network address". We need it to provide SSO with the proxy authorization.
Does anyone know if is possible to have the same behaviour than with the Novell Client? Any idea to have the windows client logon to DSfW updating the network attribute on eDirectory?
Regards
Jose Luis

I am pretty sure, that the SSO agent/application of the Fortinet is
able to use AD as a SSO source to the proxy. That can't be done in the
same way as against Edir, but it does work well.
I have a Sonicwall SSO based on the AD of DSfW and it works great.
Based on the complexity of my setup, where the connection to the
internet runs on a physical and logical network, which is completely
different and separated from the local network connections to the DSfW
and all other servers I am quite sure, that it would work in a less
complex setup just out of the box without big configuratrion hassles.
W. Prindl
jlrodriguez wrote:
>
>Thanks for your answer. But the problem is that who has to read for
>the IP Address is the proxy (PaloAlto/Fortinet). It does it searching
>in eDirectory the user that has in the "network address" attribute
>the IP address of the workstation trying to access Internet, and
>applying then the corresponding policies.
>It works perfectly if the workstation has the Novell Client, but not
>without it.
>Regards

Similar Messages

On UPnP and NAT (Network Address Translation)

Why UPnP is an often asked Question.
This article goes a long way to say why.
A couple of Quotes
*What is UPnP?*
Universal Plug and Play (UPnP) is an architecture for pervasive peer-to-peer network connectivity of PCs and intelligent devices or appliances, particularly within the home. UPnP builds on Internet standards and technologies, such as TCP/IP, HTTP, and XML, to enable these devices to automatically connect with one another and work together to make networking - particularly home networking - possible for more people.
*Are there other ways to solve the problem of NAT traversal? If so, why is using UPnP the best choice?*
Yes, there are other ways to solve this problem, but no other mechanism currently exists as an industry standard to address this problem in an automatic way for the consumer and in such a universally-applicable way for the developer.
Simply Automated Starter Package
Other approaches require either manual intervention by the user or they require special development efforts by the Internet gateway device vendor and the software developer to handle the NAT traversal needs of specific applications. As a result, UPnP is uniquely able to solve this important problem.
*Consumer does the work.* The manual intervention methods of NAT traversal require a consumer to use a browser, a graphical user interface-based tool on the PC, or a command line interface tool on the PC to change some settings on the Internet gateway device in the home. While some technical enthusiast users have little difficulty with this, many consumers do not feel comfortable doing this. Further, many consumers may not even realize that NAT traversal problems are interfering with their use of services across the Internet. _The user may be attempting to play a multi-player game or engage in some other peer-to-peer service but find he or she cannot connect for some reason._ This leads to troubleshooting, support calls, customer dissatisfaction, and reluctance on the part of the user to try new services or experiences in the future.
*Developer does the work.* To avoid requiring the consumer to solve this NAT traversal problem manually, some Internet gateway device vendors have written and included application layer gateway support into their devices. This application layer gateway software is designed with specific applications in mind. In other words, the device vendor writes and tests specific code that will automatically enable one application to go through the NAT. If the application software is updated, the application layer code the device vendor wrote may have to be updated and tested again. This one-at-a-time way of chasing the NAT traversal problem is manageable for device vendors when there are only a few peer-to-peer or relevant applications to consider, but this approach does not scale well to 100s or 1000s of applications, can be very expensive to pursue, and likely requires specific knowledge of how each of these applications function. The better way to approach this problem is to have the device vendor add software or firmware to their device once to understand UPnP and have other devices and software be able to communicate with the NAT device using this same technology. UPnP is uniquely able to fulfill this role today.
I have underlined a passage in the last.
I hope this helps in some way.
6:58 PM Tuesday; January 1, 2008

          Look for bindAddr in the weblogic.properties doc.
          weblogic.system.bindAddr
          You can use a dns name instead of an ip address
          Mike
          David Chen <[email protected]> wrote:
          >We are planning to add a client that needs to access our weblogic cluster
          >through firewalls with IP address translation. According to the WebLogic
          >(5.1) documentation, this could be done by opening port 7001 in the
          >firewalls, and BIND WebLogic SERVER INSTANCES TO DNS NAMES. Does anyone
          >know how to bind WebLogic server instances to DNS names? Should it be
          >done in weblogic.properties?Thanks in advance,David [email protected]

Finding & setting network address for WRT54GL v1.1

G'day -
I'm generally successful using a WRT54GL in a small home office network, but want to determine it's LAN and WAN network address and then set them manually. How can I search for this? It is no longer default 192.168.1.1 because that's being used by my DSL modem. Both are wired to a gigbit network switch, and connected via both wired LAN computers and WAN laptop.
My specific trouble of is that I'm having trouble getting a WAN Squeezebox to see the router. I suspect it's trouble with floating network addresses, so I'm wanting to do manual assignments. My first reaction is to not to reset the router because I figure it will want to take on the address of the DSL modem. Of course I could change the modem address, but since it's not broke...
WRT54GL is running Tomato 1.21. I'm a network novice. I tried to no avail following another post: http://forums.linksysbycisco.com/linksys/board/message?board.id=Access_Points&message.id=9160&query....
Thanks!
Solved!
Go to Solution.

To determine the LAN Address, on a hard wired computer click Start >> All Programs >> Accessories >> Command Prompt...A black box will appear(Command Prompt)...In the Command Prompt window type ipconfig and press 'Enter'...Look for Ethernet Adapter Local Area Connection IP Address , Subnet Mask and Default Gateway...
Default Gateway address is your router's default ip address, Open an Internet Explorer browser page on your wired computer(desktop).In the address bar type - 192.168.2.1(assuming the default gateway address is 192.168.2.1)...Leave username blank & in password use admin in lower case...
Click on the router Status tab and check for Internet/WAN IP Address, however you cannot change the WAN IP Address if it is Dynamic as it changes automatically...If you have Static IP Address then you need to ask your ISP to change the WAN IP address...You can indeed change the LAN IP Address of your router...

HH4 and static IP addresses on home network

I want to assign a static IP outside the DHCP range to a server on my home network. I know I've done this in the past as I already have another server on the network which the HH4 recognises as having a static IP (and not in the DHCP range) but I can't for the life of me remember how to do it now.
I do recall that it wasn't obvious last time, but I've looked repeatedly through the HH config options and can't find it. The only place that looks likely is the Device Information page, where if "IP address assignment" is DHCP then you can select "Always use this IP address" and type an IP address, but only addresses within the DHCP range are accepted (this is reasonable). But there seems no way to provide a non-DHCP address.
I've read elsewhere that I should allocate the static IP on the device itself, but this doesn't work - while the device is able to connect to the LAN and can ping/can be pinged by other devices, the HH doesn't recognise the device and it's unable to connect to the internet.
I've constantly been frustrated by the non-standard interface of the HH4, and the fact that BT will provide little information on how to configure it (no manual is available). I called BT just hours ago to ask their tech support the same question I'm asking here, and their response was that "they don't have that information". When I said I was amazed that they don't know how to support their own hardware, they replied that it came ready configured and I shouldn't need to change it. Unbelievable. I was invited to subscribe to their tech expert support for £8 per month to get the answer, so I suspect that the claimed ignorance is just a revenue-earning opportunity.
Anyhow, any help will be very welcome.
Solved!
Go to Solution.

licquorice wrote:
Hmm, as far as I'm concerned the only 'true' static address is one configured on the device itself. Anything else is a non-changing dynamic address which is still at the mercy of the router dishing it out correctly.
That's a fair point. Perhaps I'm not used to routers (or just never used the feature) that allow "sticky" allocations within the DHCP range. So I see (saw?) DHCP and non-DHCP addresses as different.
However, I have to admit to feel a bit stupid at this point. I've just looked at the HH display and now I can see my device in all its static glory! This is after a number of days of testing and experimentation and getting nowhere (and before you ask, yes, regular refreshing). It's puzzling - perhaps it takes time for the HH to pick up a static allocation and I just didn't give it long enough.
So it does appear to be working now. I can confirm that your advice of just defining the address on the device is the way to go, and eventually the HH will recognise it.
Thanks to all for your patience!

Tuxedo and Network Address Translation(NAT) at Firewall

We made a sucessful connection through the firewall without Network Address Translation
(NAT)on the firewall, from one network to the other and what we found happened
was that the client machine makes a connection on port 8090 and then sets up a
successful connection to the server (WSL).The client then very soon afterward
makes another connection on
another high-port and everything works (WSH connection).
Whats not happening with NAT is that the second connection is not being made to
the firewall. The firewall and the router are not blocking the call. It is just
not being made.
Thanking you in advance!!!
Nathaniel

Nathaniel,
Take a look at the WSL -H option at
http://edocs.bea.com/tuxedo/tux80/atmi/rf540.htm#1534543
Regards,
Peter.
Got a Question? Ask BEA at http://askbea.bea.com
The views expressed in this posting are solely those of the author, and BEA
Systems, Inc. does not endorse any of these views.
BEA Systems, Inc. is not responsible for the accuracy or completeness of
the
information provided
and assumes no duty to correct, expand upon, delete or update any of the
information contained in this posting.
Nathaniel Sebolai wrote:
We made a sucessful connection through the firewall without Network Address Translation
(NAT)on the firewall, from one network to the other and what we found happened
was that the client machine makes a connection on port 8090 and then sets up a
successful connection to the server (WSL).The client then very soon afterward
makes another connection on
another high-port and everything works (WSH connection).
Whats not happening with NAT is that the second connection is not being made to
the firewall. The firewall and the router are not blocking the call. It is just
not being made.
Thanking you in advance!!!
Nathaniel

My keyboard and mouse are connected via bluetooth to my iMac, both work. but under network preferences bluetooth PAN is showing with a yellow dot and no ip address. is this normal?

my keyboard and mouse are connected via bluetooth to my iMac, both work. but under network preferences bluetooth PAN is showing with a yellow dot and no ip address. is this normal?

Yes.
Bluetooth PAN refers to a BT personal area network
http://en.wikipedia.org/wiki/Personal_area_network
Barry

GC 11G AND Network Address Translation

HI,
I have simple question , Is Network Address Translation supported with GC 11g. I know it is not on 9i.
thanks.

I can't find anything on this on the internet. So creating a SR is an option.
The only note I found was: Agent Fails to Upload Through Load Balancer, Secures Successfully [ID 1149610.1] suggesting you can use NAT.
Eric

[ASK] Set Network Address Restriction With Script

Hi all, i have a question about set network address restriction.. if i post in wrong category i'm very sorry about it because i don't know where i supposed to post this..
i need to set network address restriction to every user in my tree..
the problem is there is hundreds of user that i need to set the restriction.. i think it will take a lot of time if i do it one by one..
i created the user with script, and i want to ask whether there is a command to set network address restriction with script or maybe there is another simple way to set network address restriction..
thanks..

Is the restriction going to be the same for all users? Depending on what
"script" you use, you should be able to also set the restriction at the
same time - its just another attribute value to set.
Peter
eDirectory Rules!
http://www.DreamLAN.com

LDAP Lookup / Network Address sometimes populates with TCP

Our development team has configured our local intranet to do LDAP searches against our tree, thus eliminating the need for users to login. They're doing an IP lookup and then retrieving the user name. What happens very rarely is the the "Network address" field under the Environment tab within ConsoleOne will display "TCP:" followed by the users IP address.
When this hapens (it's rare), the lookup fails. The typical results display "IP:" followed by the users IP address. This always works. Here's the code that is doing the LDAP query:
$sLDAPQuery = ldap_search($sLDAPConn, "o=XYZ", "(networkaddress=1#$sIPAddress)")
Where "(networkaddress=1#$sIPAddress)" is the search string, $sIPAddress being the HEX value of the IP.
My question is, is there a way for me to eliminate the return value of TCP? Does anyone have any other pointers or potential workarounds for this? Like something that would still allow the IP lookup to succeed when TCP is presented instead of IP?
Thanks for your help,
Ryan

ryan r sd 2 wrote:
> My question is, is there a way for me to eliminate the return value of
> TCP? Does anyone have any other pointers or potential workarounds for
> this? Like something that would still allow the IP lookup to succeed
> when TCP is presented instead of IP?
There are different types of network addresses (as defined by that first
number in the returned string). So, your dev folks need to decode
according to the type of address that is being returned, and not just
assume its always IP (ie 1).
Peter
eDirectory Rules!
http://www.DreamLAN.com

Subscriber Network Address

In order to use installed subscriber portion on a server successfully using
a distributor in one tree to be able to use another distributor created in
the other tree, I had to create its subscriber object in the other tree but
got the following error when trying to resolve new certificates:
Subscriber does not have a valid Network Address
So, I manually added this attribute on the Other page putting the server's
IP address. However, I still cannot resolve new certificates now getting
Sig5 failure error.
That's why I found TID 3978165 and stuck at the point 6 where I don't have
'...' button in Net Address section. Also, I cannot choose the NetAddress
type_13 in order to put the server's dns name.
I obviously need help in order to use installed subscriber portion on a
server with the other distributor without having to reinstall subscriber
modules.
Sinisa

Sinisa,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

PL/SQL Network Address Type Functions

Hi,
I'm wondering if anyone knows of a PL/SQL package(s) that provides similar capabilities as the following postgreSQL network address type functions:
http://www.sql.org/sql-database/postgresql/manual/functions-net.html
I don't see anything in the standard Oracle 10g packages, so I'm wondering if anyone else has dealt with this problem and posted the package.
Thanks,
- Greg.

I think the easiest way of getting some of this functionality would be to write a PL/SQL wrapper to a Java Stored Procedure that implements calls to the Java InetAddress class. It doesn't haven't the full set of operators but I'm not sure what 'less than' actually means in the context of an IP address . If you really need them you could always extend the InetAddress class to implement such tests.
Cheers, APC

Make sure your network settings are correct and your network connection is active, or try again later; Have been trying to fix for ages.

Hi Everyone, been struggling all day to restore my settings on my ipod, as my little brother has put a restriction password in place and made me not able to get into Safari, iTunes, Camera which I really need. I have tried everything, resetting my proxy settings, turning off the firewall, changing my network location, ran diagnostics. Everything seems fine on that, I post below my results. I also tried restoring from the device, but with the restrictions code in place I can not do so. And everytime I am dowloading the software update before the restore it comes up with 'Make sure your network settings are correct and your network connection is active, or try again later'. I have been using google for ages and am not sure what I have missed.
I am using Windows 7 with an Acer Notebook.
DIAGNOSTICS:
Microsoft Windows 7 Enterprise Edition Service Pack 1 (Build 7601)
Acer Aspire One 753
iTunes 11.0.2.26
QuickTime 7.7.3
FairPlay 2.3.31
Apple Application Support 2.3.3
iPod Updater Library 10.0d2
CD Driver 2.2.3.0
CD Driver DLL 2.1.3.1
Apple Mobile Device 6.1.0.13
Apple Mobile Device Driver 1.64.0.0
Bonjour 3.0.0.10 (333.10)
Gracenote SDK 1.9.6.502
Gracenote MusicID 1.9.6.115
Gracenote Submit 1.9.6.143
Gracenote DSP 1.9.6.45
iTunes Serial Number 00BCBEE0093E4EF0
Current user is not an administrator.
The current local date and time is 2013-04-05 19:32:36.
iTunes is not running in safe mode.
WebKit accelerated compositing is enabled.
HDCP is supported.
Core Media is supported.
Video Display Information
Intel Corporation, Intel(R) HD Graphics
**** External Plug-ins Information ****
No external plug-ins installed.
**** Network Connectivity Tests ****
Network Adapter Information
Adapter Name:     {E1CB97AA-CDFF-4C43-8F63-658D7E70A39F}
Description:     Intel(R) Centrino(R) Advanced-N 6205
IP Address:     172.16.42.14
Subnet Mask:     255.255.255.0
Default Gateway:     172.16.42.1
DHCP Enabled:     Yes
DHCP Server:     172.16.42.1
Lease Obtained:     Fri Apr 05 19:01:59 2013
Lease Expires:     Fri Apr 05 20:01:59 2013
DNS Servers:     172.16.42.1
Adapter Name:     {44D6CC7B-1F1E-4F26-BBB8-18F98A868E2B}
Description:     Atheros AR8151 PCI-E Gigabit Ethernet Controller (NDIS 6.20)
IP Address:     0.0.0.0
Subnet Mask:     0.0.0.0
Default Gateway:     0.0.0.0
DHCP Enabled:     Yes
DHCP Server:
Lease Obtained:     Thu Jan 01 11:00:00 1970
Lease Expires:     Thu Jan 01 11:00:00 1970
DNS Servers:
Active Connection:     LAN Connection
Connected:     Yes
Online:          Yes
Using Modem:     No
Using LAN:     Yes
Using Proxy:     No
Firewall Information
Windows Firewall is on.
iTunes is enabled in Windows Firewall.
Connection attempt to Apple web site was successful.
Connection attempt to browsing iTunes Store was successful.
Connection attempt to purchasing from iTunes Store was successful.
Connection attempt to iPhone activation server was successful.
Connection attempt to firmware update server was successful.
Connection attempt to Gracenote server was successful.
Last successful iTunes Store access was 2013-02-14 17:34:33.
**** Device Connectivity Tests ****
iPodService 11.0.2.26 is currently running.
iTunesHelper 11.0.2.26 is currently running.
Apple Mobile Device service 3.3.0.0 is currently running.
Universal Serial Bus Controllers:
Intel(R) 5 Series/3400 Series Chipset Family USB Enhanced Host Controller - 3B34. Device is working properly.
Intel(R) 5 Series/3400 Series Chipset Family USB Enhanced Host Controller - 3B3C. Device is working properly.
No FireWire (IEEE 1394) Host Controller found.
Connected Device Information:
Daniel Pugh's Ipod, iPod touch (4th generation) running firmware version 6.1.3
Serial Number:     C3XDN3C5DCP7
Most Recent Devices Not Currently Connected:
iPhone 4S running firmware version 5.0.1
Serial Number:     C38GKQWZDT9Y
**** Device Sync Tests ****
Sync tests completed successfully.
Kindest Regards
Daniel (Puggy858)

Hi Diesel vdub,
Did that and I tried again, download stops halfway through and comes up with same message I have already quoted. Wifi Signal is 5/5, network is working, just not letting me download via iTunes.

IPod Touch 4gen disabled "The iPod Software update server could not be contacted" Make sure your network settings are correct and your network connection is active or try again later. Please help!

My daughter forgot her passcode. Her iPod Touch 4gen is disabled. I've tried everything I've read online. I get to the "Restore" part on iTunes and then I get the message, "The iPod Software update server could not be contacted. Make sure your network connections are correct and your network connection is active or try again later." How can this be so hard to do? Why isn't there a simpler solution. I live 2 hours from the nearest Apple store. Any advice you may offer would be very much appreciated.

Update Server
Try:
- Powering off and then back on your router.
- iTunes for Windows: iTunes cannot contact the iPhone, iPad, or iPod software update server
- Change the DNS to either Google's or Open DNS servers
Public DNS — Google Developers
OpenDNS IP Addresses
- Try on another computer/network
- Wait if it is an Apple problem

Wireless and Ethernet Network Do Not Work Other Than SpeedTest

I have been having major problems with my Mac's Internet. Whenever I connect to my Wireless or Ethernet Connection, the signal start out strong and dies down to almost nothing (around .4 kbps) immediatly. I have been having this problem for a couple of weeks now. However, when I run SpeedTest.net, I get the connection speeds which I should be getting. My Network Application thingy (iStat Menus) shows a major increase from .4kbps to 6MBps when the speedtest in running. Any ideas on how I can fix this problem?

It's a router all right. The next question is what is the "downstairs" device? Router or...?
The Aliant is configured through a browser interface and its IP address ought to be 192.168.2.1. Put those numbers in Safari's URL field and see if its webpage loads. If it does, you might be able to find a setting called "bridge mode".
Beware that I'm way out in the weeds with this suggestion - changing things in that unit may cause you even more problems. Since you said it is connected to a "wall Ethernet plug" I'm concluding that it should not be acting as a router, but that depends on what is upstream of that wall plug, and what functions the downstairs device is performing.
If the "wall Ethernet plug" is in fact a phone line and not an Ethernet LAN port then it is your router and you won't want to change that.

AirPort Extreme 802.11n as a wireless router and local network switch?

Good afternoon,
I'm curious if its possible to have the APE in wireless network mode and connect systems via hard line as well?
I have an AirPort Extreme 802.11n set to "Create a Wireless Network" mode that is attached directly to a cable modem for internet connectevity. My issue is that while all wireless devices (several iPods, two iPhones and three laptop computers) connect to the APE without issue (and have internet access), when I try to plug in a Windows 7 desktop computer via one of the ethernet jacks, Windows is unable to connect and shows the network as "unidentified," spitting back a private IP address as opposed to a local LAN (this behavior repeats for an Ubuntu Linux box as well).
Not sure if the APE is misconfigured, this is a Windows 7 issue or if its improper use on my part (though this also precludes me from connecting a gigabit switch to the APE).
Thank you,
Nathan

Properly configured, the AirPort should provide both wired and wireless network client with Internet access.
At this point, I would recommend that you do the following as a minimum:
Power-down the modem, AirPort base station, and computer(s).
Power-up the modem; wait at least 10-15 minutes to allow it adequate time to initialize.
Power-up the AirPort base station; wait at least 5-10 minutes. Note: The AirPort's status light may continue to flash amber after it has intialized. That is because, there may be some additional configuration items necessary, like setting up wireless security, before the overall setup is completed to get a green status.
Power-up your computer(s).
If the above steps do not solve the problem, start over with step 1 above, but then perform the next steps between steps 1 & 2. above.
Disconnect the AirPort base station from the Internet broadband modem.
While all of the devices are powered-down, perform a "factory default" reset on the base station. This will get it back to its "out-of-the-box" configuration and make setting it up much easier, especially if you use the "Assist me" process within the AirPort Utility. (ref: Resetting an AirPort Base Station or Time Capsule)
After the base station resets, go ahead and power it back down.
Reconnect the AirPort base station to the Internet broadband modem. For the Extreme and Time Capsule, be sure to connect the cable to the base station's WAN (circle-of-dots) port.
Continue with step 2 in the first set of steps.
In this basic configuration, the AirPort base station will broadcast an unsecured wireless network with a Network Name (SSID) of Apple Network NNNNNN. Network clients, connected to the base station either by wire or wireless, should now be able to access the Internet through the ISP's modem. Once Internet connectivity has been verified, you can use the AirPort Utility to configure the base station for wireless security and any other desired options. Please post back your results.

DSfW and eDirectory Network Address attribute

Similar Messages

Maybe you are looking for