Encrypted MAPI on WAAS 5.0.3a I need a little help with troubleshooting

So, I stumbled upon this portion of the 5.0.1 configuration guide that spells out step by step how to configure encrypted mapi acceleration:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v501/configuration/guide/policy.html#wp1260556
1. Configure DNS settings - Done
2. Configure NTP settings - Done
3. Verify WAE devices are registered and online with the WAAS Central Manager - Done
4. Configure SSL Peering Service - Did this, seems to be working, but it would be great if someone could provide me with some show commands that will verify this is configured properly.
5. Verify WAN Secure mode is enabled - Did this, but the command "show accelerator wansecure" shows it is enabled and running, but seems like useless information, anyone know any better commands to verify this? No tcp session are coming up wansecure...
6. Configure windows domain settings and perform domain join - I did this on the Data Center WAE-674 only, the computer account was created in the domain.
7. Configure domain identities - Ok, I was a little confused here, but I used the machine account name that I created in the previous step, seems to be working, the lack of explanation/troubleshooting at this point is very frustrating. The image shown uses a different name than the device name in the picture...
8. Enable Windows Domain Encrypted Service - Done, very strait forward
9. Enable Encrypted MAPI Traffic Optimization - Done, also very strait forward
So, from the WAE, I run the command "show stat conn" I still see the TG connections with 0.00% to the mail server. Called user, had them exit from (and I verified session closed) and reconnect to exchange, still TG 0.00%. Not sure if this one was useful or not, but "show stat conn | inc W" no sessions with W.
I did find that this command "show windows-domain encryption-service keylist" seems to be the most useful (even though I didn't find it on any Cisco support page, found it by stumbling through available commands, trying each one in turn) showing the two requests to the two exchange servers were successful. Which makes me think I did something right, who knows exactly what since the EMAPI is still not decrypted.
I have no errors showing on the CM Management console. I did have some errors pop up when I was generating the self signed certificates, but they all cleared when I finished all the devices. I am going to reboot the WAE tonight and see if things start picking up tomorrow or if I get any errors after reboot.
I am hoping that someone has some good show commands or debug commands that will point to where or what the problem is.

Ok, I got it working. Well, it is meeting the criteria I specified above anyway.
1. to verify your SSL is working properly: "show crypto ssl services host peering"
2. Wansecure is enabled/disabled, there is no verification, very strait forward.
3. DO use the computer account you create when you join the domain as the machine account.
Show commands to verify you did everything correctly:
"accelerator mapi verify encryption-settings"
"show windows-domain encryption-service keylist"
If you did everything correctly, you should get keys from the exchange server(s).
Now, the issue I ran into. Our 2 exchange servers are both behind a Citrix Netscaler for load balancing. If a user connects directly to the exchange servers, it works, if they connect to the netscaler, it fails to accelerate. I can not get a key from the netscaler, not sure if there is a way to manually exchange keys and force the to devices to trust each other. Anyone who may have seen this, your help would be greatly appreciated.
Just to clarify, MAPI acceleration works fine through the netscaler, it is just the EMAPI that fails. EMAPI and MAPI both work fine through exchange, but then I lose the load balancing the netscaler provides.

Similar Messages

Power Map has encountered an error and it needs to close, after changing the graphic settings

I've been using the updated Power Map tool successfully over the past few days.
Last night I was playing around with the graphics settings that can be found under the File Tab (I know that should teach me from playing around and following the user guide :-) ) and I changed the detail from Medium to High (I think) and now all that happens
when I click on create a new tour or select an existing tour is
"Power Map has encountered an error and it needs to close. Power Map can collection information about the error and create an e-mail which you will be able to send to Microsoft and help us fix the problem. Do you want to do this?"
The error that gets generated can be seen below.
Thank you for submitting this error information to Microsoft. We appreciate your help!
System.Exception: Could not create the render target shared resource.
   at Microsoft.Data.Visualization.Engine.Graphics.Internal.D3DImage11.SetBackBuffer11(IntPtr pResource)
   at Microsoft.Data.Visualization.Engine.Graphics.D3DImage11.SetBackBuffer(RenderTarget renderTarget)
   at Microsoft.Data.Visualization.VisualizationControls.GlobeViewModel.CompositionTarget_Rendering(Object sender, EventArgs e)
   at System.Windows.Media.MediaContext.RenderMessageHandlerCore(Object resizedCompositionTarget)
   at System.Windows.Media.MediaContext.AnimatedRenderMessageHandler(Object resizedCompositionTarget)
   at System.Windows.Threading.ExceptionWrapper.InternalRealCall(Delegate callback, Object args, Int32 numArgs)
   at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(Object source, Delegate method, Object args, Int32 numArgs, Delegate catchHandler)
I've removed Power Map from the system, restarted, repaired Office, restarted and reinstalled Power Map but the problem remains. So i'm guessing that the setting I changed are stored in the Registry or File System somewhere.
Any help would be gratefully received.
Regards
Rob Ireland

Is this still an issue?
This also might be worthy to send to the team as a bug.
You can send it in email using the Smile/Frown feature in the UI.
Thanks!
Ed Price, Power BI & SQL Server Customer Program Manager (Blog,
Small Basic,
Wiki Ninjas,
Wiki)
Answer an interesting question?
Create a wiki article about it!

A little help needed in message mapping

a little help needed in message mapping
I have to map one of the idoc header segments as many times as it occurs to each Idoc when using the split message funcionality
let us say we have the segment seg1 and there is a QUALF in it
<seg1>
<qualf>001</qualf>
</seg1>
<seg1>
<qualf>002</qualf>
</seg1>
then we use the vbeln to split the idoc into 2.
so if we have
<vbeln> 1 </vbeln>
and
<vbeln>2 </vbeln>
then 2 Idocs should be created like this
<Idoc>
<vbeln> 1 </vbeln>
<seg1>
<qualf>001</qualf>
</seg1>
<seg1>
<qualf>002</qualf>
</seg1>
</Idoc>
<Idoc>
<vbeln> 2 </vbeln>
<seg1>
<qualf>001</qualf>
</seg1>
<seg1>
<qualf>002</qualf>
</seg1>
</Idoc>
it is easy to create the segment by using createif with the QUALF field but my problem how to map the qualf twice for each idoc
Thanks.

UseOneAsMany is the function you need to use.
It takes three parameters:
1 --- The node you want to duplicated
2 --- How many times you want to duplicated
3 --- The context you want to place for it.
Regards
Liang

Need help with mapping( UDF)

Hi,
I had a mapping requirement where i need to transfer data with double quotes
suppose data is
sap-labs
i need to send as "sap-labs".
The main problem is when ever there is '-'(it can be any where in the string) I need to modify as above, otherwise data can be sent directly.
I know how to do this requirement using Standard Functions.But, I am trying to use UDF so try to help me out with the code.
and also what i have to import for this UDF. and why i have to import them?
Thanks in advance,
Siva.

Hi Siva Bonthala,
Note: - quote ("), apostrophe ('), ampersand (&), less than (<), greater than (>) are special characters in XML. They should not be present in data. [Link1|http://www.w3.org/TR/REC-xml/] [Link2|Re: Special Character Handling (&) in the payload content in PI 7.1]
When you writing Java code to insert these special characters, you should use escape scequence characters.
Test it for your self, in graphical mapping, use 'concat' function and type Delimiter String as ". Then check output XML, it will contain &quot ;.
If you have to replace sap-labs with "sap-labs" for many element, I recomand you to use Java Mapping instead of UDF's for every field.
Regards,
Raghu_Vamsee

I need help with my mapping - CL_MAPPING_XMS_PLSRV3-ENTER_PLSRV

hi, guys, i need help with my mapping, i dont know this error (i not speak english)
<Trace level="1" type="B">CL_MAPPING_XMS_PLSRV3-ENTER_PLSRV</Trace>
<Trace level="2" type="T">......attachment XI_Context not found </Trace>
<Trace level="3" type="T">Mapping already defined in interface determination </Trace>
<Trace level="3" type="T">Object ID of Interface Mapping 4B903E2DDC853C1493E1DED5C5ED70A3 </Trace>
<Trace level="3" type="T">Version ID of Interface Mapping 88D96A70BAAE11DFAE5EE925C0A800C2 </Trace>
<Trace level="1" type="T">Mapping-Object-Id:4B903E2DDC853C1493E1DED5C5ED70A3 </Trace>
<Trace level="1" type="T">Mapping-SWCV:88D96A70BAAE11DFAE5EE925C0A800C2 </Trace>
<Trace level="1" type="T">Mapping-Step:1 </Trace>
<Trace level="1" type="T">Mapping-Type:JAVA_JDK </Trace>
<Trace level="1" type="T">Mapping-Program:com/sap/xi/tf/_mm_sgipi_fi001_vta_clientes_ </Trace>
<Trace level="3" type="T">MTOM Attachments Are Written to the Payload </Trace>
<Trace level="3" type="T">Dynamic Configuration Is Empty </Trace>
<Trace level="3" type="T">Executing multi-mapping </Trace>
<Trace level="1" type="E">CL_XMS_PLSRV_MAPPING~ENTER_PLSRV</Trace>
help me please

you can use the sharedobject to record a user/computer has taken your quiz, the session data and record their results. at the start of your quiz, check for the sharedobject and, if it exists, check the other data and take appropriate action.

Help with java mapping

PI File adapter has a processing option u2018Empty-Message Handlingu2019 to ignore or Write Empty Files. In case there is no data created after mapping on target side then this option determines whether to write an empty file or not. But there is a catch to this option when it comes to using it with File Content Conversion which is described in SAP Note u2018821267u2019. It states following:
I configure the receiver channel with File content conversion mode and I set the 'Empty Message Handling' option to ignore. Input payload to the receiver channel is generated out of mapping and it does not have any record sets. However, this payload has a root element. Why does file receiver create empty output file with zero byte size in the target directory? Example of such a payload generated from mapping is as follows:
<?xml version="1.0" encoding="UTF-8"?>
<ns1:test xmlns:ns1="http://abcd.com/ab"></ns1:test>
solution :
If the message payload is empty (i.e., zero bytes in size), then File adapter's empty message handling feature does NOT write files into the target directory. On the other hand, if the payload is a valid XML document (as shown in example) that is generated from mapping with just a root element in it, the File Adapter does not treat it as an empty message and accordingly it writes to the target directory. To achieve your objective of not writing files (that have just a single root element) into the target directory, following could be done:
Using a Java or ABAP Mapping in order to restrict the creation of node itself during mapping. (This cannot be achieved via Message Mapping)
Using standard adapter modules to do content conversion first and then write file.
can someone help with java mapping that can be used in this case?

Hi,
    You have not mentioned the version of PI you are working in. In case you are working with PI 7.1 or above then here is the java mapping code you need to add after message mapping in the same interface mapping
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.InputStream;
import java.io.OutputStream;
import java.util.Map;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.transform.Transformer;
import javax.xml.transform.TransformerFactory;
import javax.xml.transform.dom.DOMSource;
import javax.xml.transform.stream.StreamResult;
import org.w3c.dom.Document;
import com.sap.aii.mapping.api.AbstractTransformation;
import com.sap.aii.mapping.api.StreamTransformationException;
import com.sap.aii.mapping.api.TransformationInput;
import com.sap.aii.mapping.api.TransformationOutput;
public class RemoveRootNode extends AbstractTransformation{
     public void execute(InputStream in, OutputStream out)
     throws StreamTransformationException {
// TODO Auto-generated method stub
try
     DocumentBuilderFactory factory=DocumentBuilderFactory.newInstance();
     DocumentBuilder builderel=factory.newDocumentBuilder();
     /*input document in form of XML*/
     Document docIn=builderel.parse(in);
     /*document after parsing*/
     Document docOut=builderel.newDocument();
     TransformerFactory tf=TransformerFactory.newInstance();
     Transformer transform=tf.newTransformer();
     if(docIn.getDocumentElement().hasChildNodes())
          docOut.appendChild(docOut.importNode(docIn.getDocumentElement(),true));
          transform.transform(new DOMSource(docOut), new StreamResult(out));
     else
          out.write(null);
catch(Exception e)
public void setParameter(Map arg0) {
// TODO Auto-generated method stub
public static void main(String[] args) {
// TODO Auto-generated method stub
try{
     RemoveRootNode genFormat=new RemoveRootNode();
     FileInputStream in=new FileInputStream("C:\\apps\\sdn\\rootNode.xml");
     FileOutputStream out=new FileOutputStream("C:\\apps\\sdn\\rootNode1.xml");
     genFormat.execute(in,out);
     catch(Exception e)
     e.printStackTrace();
public void transform(TransformationInput arg0, TransformationOutput arg1)
          throws StreamTransformationException {
     // TODO Auto-generated method stub
     this.execute(arg0.getInputPayload().getInputStream(), arg1.getOutputPayload().getOutputStream());
In case you are working in PI 7.0 you can use this code
import java.io.FileInputStream;
import java.io.FileOutputStream;
import java.io.InputStream;
import java.io.OutputStream;
import java.util.Map;
import javax.xml.parsers.DocumentBuilder;
import javax.xml.parsers.DocumentBuilderFactory;
import javax.xml.transform.Transformer;
import javax.xml.transform.TransformerFactory;
import javax.xml.transform.dom.DOMSource;
import javax.xml.transform.stream.StreamResult;
import org.w3c.dom.Document;
import com.sap.aii.mapping.api.StreamTransformation;
import com.sap.aii.mapping.api.StreamTransformationException;
public class RemoveRootNode implements StreamTransformation{
     public void execute(InputStream in, OutputStream out)
     throws StreamTransformationException {
// TODO Auto-generated method stub
try
     DocumentBuilderFactory factory=DocumentBuilderFactory.newInstance();
     DocumentBuilder builderel=factory.newDocumentBuilder();
     /*input document in form of XML*/
     Document docIn=builderel.parse(in);
     /*document after parsing*/
     Document docOut=builderel.newDocument();
     TransformerFactory tf=TransformerFactory.newInstance();
     Transformer transform=tf.newTransformer();
     if(docIn.getDocumentElement().hasChildNodes())
          docOut.appendChild(docOut.importNode(docIn.getDocumentElement(),true));
          transform.transform(new DOMSource(docOut), new StreamResult(out));
     else
          out.write(null);
catch(Exception e)
public void setParameter(Map arg0) {
// TODO Auto-generated method stub
public static void main(String[] args) {
// TODO Auto-generated method stub
try{
     RemoveRootNode genFormat=new RemoveRootNode();
     FileInputStream in=new FileInputStream("C:\\apps\\sdn\\rootNode.xml");
     FileOutputStream out=new FileOutputStream("C:\\apps\\sdn\\rootNode1.xml");
     genFormat.execute(in,out);
     catch(Exception e)
     e.printStackTrace();
The code for PI 7.0 should also work for PI 7.1 provided you use the right jar files for compilation, but vice-versa is not true.
Could you please let us know if this code was useful to you or not?
Regards
Anupam
Edited by: anupamsap on Dec 15, 2011 9:43 AM

Help with Class-map configuration - ZBFW

Hello,
I need some clarification regarding the class-map configuration in a ZBFW. I need to allow https,http,ftp & rdp traffic from Internet to few of the servers inside our LAN. So I put the below configuration to accomplish the task (example shows class-map for only https protocol) :
a.)
class-map type inspect match-all HTTPS-ACCESS
match protocol https
match access-group name HTTPS-SERVER-ACCESS
ip access-list extended HTTPS-SERVER-ACCESS
permit tcp any host 172.17.0.55 eq 443
permit tcp any host 172.17.0.56 eq 443
permit tcp any host 172.17.0.36 eq 443
permit tcp any host 172.17.0.45 eq 443
permit tcp any host 172.17.0.60 eq 443
Where 55,56,36,45,60 are the servers inside the LAN (12 more servers are there) that need to be accessed via https,http,ftp & rdp from Internet.
Is it a correct approach? or do I need to change my configuation so that I have to match ACL with my class-map like below:
b.)
ip access-list extended OUTSIDE-TO-INSIDE-ACL
permit tcp any host 172.17.0.55 eq 443
permit tcp any host 172.17.0.55 eq www
permit tcp any host 172.17.0.55 eq 21
permit tcp any host 172.17.0.55 eq 3389
permit tcp any host 172.17.0.56 eq 443
permit tcp any host 172.17.0.56 eq www
permit tcp any host 172.17.0.56 eq 21
permit tcp any host 172.17.0.56 eq 3389
permit tcp any host 172.17.0.36 eq 443
permit tcp any host 172.17.0.36 eq www
permit tcp any host 172.17.0.36 eq 21
permit tcp any host 172.17.0.36 eq 3389
permit tcp any host 172.17.0.45 eq 443
permit tcp any host 172.17.0.45 eq www
permit tcp any host 172.17.0.45 eq 21
permit tcp any host 172.17.0.45 eq 3389
class-map type inspect match-all OUT-IN-CLASS
match access-group name OUTSIDE-TO-INSIDE-ACL
Which one is the correct approach when we consider the performance of the firewall ? Please help me.
Regards,
Yadhu

Hey
I do not agree with Varun, I think the first approach is the best one.
Why? Because when you issue the "match protocol ..." you are usig NBAR wich is an application inspection software, which means that https or whatever protocol is inspected at layer 7, not layer 3 and 4 which the seconds approach does (IP and port-number).
Lets say you use the second approach and an attacker uses some malicious protocol that runs over port 443 or whatever (a port that you opened). That attack would be successfull because all you say, you are going to IP-address 172.17.0.56 over port 443 so go ahead.
But if you are using NBAR, this would not work because NBAR will look at layer 7, inside the protocol itself and look if this really is HTTPS (or whatever protocol).
That's my two cents. Hope it helped!

Freely programmed search help with external mapping

Hi all.
I have a freely programmed search help to search for physical inventory items.
I map some data from the component where i use this search help to this search help via external mapping. This works fine.
But in the search help I want to be able to change the mapped data to perform a new serach. When I change the data and start the action to search again (in the serach help component) I still get the old field value from context so that the search returns the same result. When I close the search help afterwards the changes are suddenly visible in the using component. So my entered data are somehow transfered to the original context but not to the context of the used component.
Any ideas?
Thanks
Sascha
Message was edited by:
Sascha Dingeldey

Hi Sascha,
I would suggest, that you do not work with the externally mapped attribute.
Try to copy the value to a "local" attribute in the searchhelp context while WDDOINIT of the component.
This is the attribute you should use for the search.
When you change the searchvalue, it is only changed in the comnponent.
To get the values back to the calling component you need to copy it back while you call the action submit or exit.
Hope this helps
Best regards, Matthias

Help with Message Mapping - Context Change

I need help with the following message mapping. I am filtering by EMP_STAT in the Message Mapping. I have this working for the ROW structures, but I can get the HEADER/REC_COUNT field to calculate. I can do just a record count of ROW and get it to work, but I can't get it to work with the filter EMP_STAT = 'REG' added. I get a context error. Could someone send me the mapping code.
Sender XML----
<RECORD>
<ROW>
<EMPLOYEE>111</EMPLOYEE>
<EMP_STAT>REG</EMP_STAT>
</ROW>
<ROW>
<EMPLOYEE>222</EMPLOYEE>
<EMP_STAT>PT</EMP_STAT>
</ROW>
<ROW>
<EMPLOYEE>333</EMPLOYEE>
<EMP_STAT>REG</EMP_STAT>
</ROW>
</RECORD>
Receiver XML----
<RECORD>
<HEADER>
<REC_COUNT>2</REC_COUNT>
</HEADER>
<ROW>
<EMPLOYEE>111</EMPLOYEE>
<EMP_STAT>REG</EMP_STAT>
</ROW>
<ROW>
<EMPLOYEE>333</EMPLOYEE>
<EMP_STAT>REG</EMP_STAT>
</ROW>
</RECORD>

Hello,
You can use this mapping
For REC_COUNT:
EMP_STAT -> equalsS: constant:REG -> ifWithoutElse -> removeContext -> count -> REC_COUNT
                                 EMPLOYEE -> /
For ROW:
EMP_STAT -> equalsS: constant:REG -> ifWithoutElse -> removeContext -> ROW
                                 EMPLOYEE -> /
For EMPLOYEE:
EMP_STAT -> equalsS: constant:REG -> ifWithoutElse -> removeContext -> SplitByValue -> EMPLOYEE
                                 EMPLOYEE -> /
For EMP_STAT:
Constant: REG -> EMP_STAT
Hope this helps,
Mark

Help with mapping the mod_plsql path with Apache

Hi,
I need help with mapping my pl/SQL Handler path.
Currently i have an URL like this :
http://myhost.com/pls/DADUSER/PLSQLPROC?param1=123
But I need something like :
http://myhost.com/d/PLSQLPROC?param1=123
I tried to rename the "Location Handler" from "pls" to "d", works great, but it always appends my Default DAD User to the URL.
And I tried to map my PL/SQL Handler to "/" and create a DAD User called "d" and set it to default. Didn't worked...
Any help is appreciated....
Bye,
Oliver
null

Oliver,
try to use the rewrite directive or the
rewrite engine (mod_rewrite).
Please see the Online documentation for how
to do this:
http://technet.oracle.com/docs/products/ias/doc_library/1021doc_otn/comm.102/a87562/apptroub.htm
Hope it helps
-Stefan

Help With ASE Encryption

Hello friends,
Can anyone out there tell me or point me to information on how to set up the ASE_ENCRYPTION option for version 15.7?
I have an existing ASE installation for testing purposes. I want to install the encryption option there but I cannot locate any
step-by-step documentation on how to do that. The ASE 15.7 Encrypted Columns Users Guide simply states:
"Install the license option ASE_ENCRYPTION. See the Adaptive Server Enterprise Installation Guide."
and when I go to the ASE Installation Guide it refers me to the SySam User's Guide...
and when I go to the SySam User's Guide it gives no instructions on *how* to install the encryption option.
So, to summarize:
1.) Do I need to generate a license file that includes the ASE_ENCRYPTION option and start ASE with this license file? I was
told by someone at SAP that there should be a way to get and use this option for thirty days (grace license) while we test
and evaluate.
2.) If above is true, will this work with the Developer's Edition of ASE or do I have to get a Enterprise Edition SR or SV
license? (By the way, I do have an available SV license for Enterprise. I generated the license file and it shows that this license includes
a package of Components= ASE_CORE Options=SUITE)
Any help with this will be appreciated.

Thanks for your help Ajit,
I believe you are correct. I was told that the ASE_ENCRYPTION option was already packaged with the software so all I had to do was "turn it on". For some reason I was thinking it had to be installed via a script or something.
Anyway, I have successfully "turned on" the option using :
sp_configure "enable encrypted columns", 1
go
I will now attempt to create an encryption key and go forward with data encryption.
Thanks again for your input

Powerbook G4 10.4.11 won't start from hard drive . Tried repair, " The underlying task reported failure on exit (-9972).Invalid sibling link,invalid B tree header, invalid map node,invalid record type,the volume needs to be repaired.

Powerbook G4 10.4.11 won't start from hard drive . Tried repair, " Invalid sibling link,invalid B tree header, invalid map node,invalid record type,the volume needs to be repaired.Powerbook G4 10.4.11 won't start from hard drive . Tried repair, " The underlying task reported failure on exit (-9972).Invalid sibling link,invalid B tree header, invalid map node,invalid record type,the volume needs to be repaired.
The underlying task reported failure on exit (-9972).

kauribill wrote:
" The underlying task reported failure on exit (-9972).Invalid sibling link,invalid B tree header, invalid map node,invalid record type,the volume needs to be repaired.
The underlying task reported failure on exit (-9972).
This is a directory issue that Disk Utility cannot fix. Although it manifests itself as a software issue sometimes it may be hardware based. See DiskUtility reports "Underlying task reported failure" when repairing avolume http://support.apple.com/kb/TS1901?viewlocale=en_US". You can try using a utility like TechTool Pro, Drive Genius or Disk Warrior to repair and replace the directory. Another option would be to use the Archive and Install feature to reinstall. If the problem returns after correction you may have a failing or failed HDD.
cornelius

Encrypting file folders on OS X Server but needs to be cross plateform

We have OS X server 10.4 and 10.5. We have been asked by our client to implement some demanding security policies. One is to have our files encrypted on our file server for more sensitive files. This is in case there is a breach in the network and access is gained to the server the data is still secure. Well we work in a mix platform environment but there are very few options on the Mac for encyrpting folders that aslo work on the PC. PGP desktop looks to be the only option but from some of the reviews looks kinda buggy and there network version is only for the PC.
Anyone else run into this problem and what was your solution?
Thanks!
Steve
Message was edited by: Steve Burns1

This is certainly an interesting problem and an interesting requirement. On the face of it, a quite difficult problem.
As for your requested approach here, I don't know of an available and cross-platform distributed authentication and distributed encryption and distributed auditing scheme.
I'd expect most folks presented with this problem and with this requirement would carefully control access onto the LAN and into the data, and would encrypt the traffic. And would bury the data inside a secured server or secured server farm.
There's a particular and fundamental consideration here. If the client or the server security is breached, then folder or file encryption is itself vulnerable each and every time the folder or file contents are decrypted for use. (It's the system that allows you to decrypt and access the folder and file data. If you don't trust the client or the server, then you'll have to consider whether or not you trust providing your key(s) for decryption. And what happens when a user's key is exposed.)
With cross-platform or client-server remote file access operations as proposed in your approach, you've just extended the security perimeter around all the boxes involved, and it's wicked hard to revoke the data access keys in these sorts of environments.
Most folks will "bunker" the critical data, rather than spreading the perimeter around, and will manage and maintain and audit the (encrypted) channels into the data. More copies of the data -- whether currently encrypted or otherwise -- means more headaches. Keeping the data close and being able to remotely revoke the access keys is invaluable.
As for remote access, you might find an encrypting or kerberized NFS (krb5p being the gonzo setting) useful. This encrypts the traffic. And you can zonk the access keys via the KDC.
ZFS (and encryption is itself just starting to be being baked into ZFS) is just starting to come on-line, and likely isn't fully and sufficiently widely available for your needs yet. ZFS might eventually provide what you want here. But again, auditing client access is hairy. It only takes one bone-headed clear-text data export from one client, or one compromised client or lost password, after all.
Or the classic pgp or zip can be used to toss the files around, and with varying degrees of cryptographic security. Of course everybody ends up with the keys to the kingdom pretty quickly, with the difficulties in auditing and revoking data access that are inherent in distributed access, and one compromised client or one lost laptop can potentially ruin the whole plan.
A custom solution build on NFS or such is very likely feasible, but it won't be cheap. You'd likely need to insert your own network-capable "disk" drivers into the Windows I/O stack, for instance. (This has been done before...)
Don't forget to consider password recovery, too. Both to permit it or to have a carefully controlled "back-door" into the data (which has its own risks), and to avoid the social engineering attacks that can arise here.
(I'd be interested to hear more about this and whatever solution you might eventually choose here, too. This looks to be a very knotty problem.)
And OK, so I'm over-thinking it all.

Help with JPA Inheritance Relationship Mapping

Perhaps someone can help with this. I'm trying to figure out how to map what seems like a simple data model using JPA. But it is not working.
@Entity
public class Account {
    @OneToOne(cascade=CascadeType.ALL)
    private AbstractPaymentMethod paymentMethod;
@Entity
@MappedSuperClass
@Inheritance(strategy=InheritanceType.SINGLE_TABLE)
@DiscriminatorColumn(name="__CLASS__", discriminatorType=DiscriminatorType.STRING, length=20)
@DiscriminatorValue("AbstractPaymentMethod")
public abstract class AbstractPaymentMethod {
@Entity
@Table(name="payment_method")
@Inheritance(strategy=InheritanceType.SINGLE_TABLE)
@DiscriminatorColumn(name="__CLASS__", discriminatorType=DiscriminatorType.STRING, length=20)
@DiscriminatorValue("CreditCardPaymentMethod")
@SuppressWarnings("serial")
@Cache(usage = CacheConcurrencyStrategy.READ_WRITE)
public class CreditCardPaymentMethod extends AbstractPaymentMethod {
    @Column
    private String expirationDate;
}The problem is, when I add a CreditCardPaymentMethod to an account like this...
Account account = new Account();
CreditCardPaymentMethod m = new CreditCardPaymentMethod();
account.setPaymentMethod(m);
em.persiste(account);... The entity manager attempts to save account.creditCardPaymentMethod as an AbstractPaymentMethod.
Surely I'm doing something horribly wrong. Is there something I'm missing here?
Thanks for any help.

Thank you! You saved my life. After removing @MappedSuperClass, all is well.
The entity manager is now saving my CreditCardPaymentMethod objects as CreditCardPaymentMethod classes instead of AbstractPaymentMethod classes.

HELP with mapping between event_class SLA R12 and ap_invoices_all

Hi Gurus!!
I have to do a query that obtain the event class (XLA_ACCOUNTING_CLASS lookup code) of an invoice that this invoice is pending to be posted. The question is how do i do a mapping between AP_INVOICES_ALL table and the EVENT_CLASS ???
For example... i have a class named "DEBIT MEMOS" but in the AP_INVOICES_ALL the INVOICE_TYPE_LOOKUP_CODE is DEBIT...
hope someone could help me,
PS: Application is R12
Thanks!!
Pablo.-

Hi Tarun,
Yes I am aware of that, but I just thought someone would which fields to join between the AP and the XLA tables as I can't find anything on the eTRM. So I do know that those are the tables to link, but I'm just not sure of the fields to join.

Encrypted MAPI on WAAS 5.0.3a I need a little help with troubleshooting

Similar Messages

Maybe you are looking for