Entitlements Server - Configuring SSM to run without an SCM

I am using the ConfigTool to create java-ssm instances. What do I need to specify to create an SSM that doesn't use an SCM? Or, how do I update the configuration of an existing ssm to shut off the need for an SCM (though the documentation says you can't switch from XML to SCM once the instance is created so I'm assuming the reverse is also true).
There are instructions for doing this from the "wizard" at [http://download.oracle.com/docs/cd/E12890_01/ales/docs32/installssms/No_SCM.html#wp1087976], however, my wizard never presents the checkbox mentioned, and the figure (10-1) appears to be missing from the documentation.
Edited by: user10437255 on Sep 3, 2009 5:14 AM

Hi
I've found on Oracle Documentation a special how-to perform the weblogic configuration to integrate with OID.
Take a look at: http://www.oracle.com/technology/products/jdev/tips/fnimphius/oidconfig/index.html.
But it's for WebLogic Server 10g Release 3.
user10510828

Similar Messages

  • Can Server Software  be installed & Running without My knowledge/Consent

    Hi, Please excuse my naivitee. I am running an old but fast G4 tower on alocal network with little sharing. After a clean install and using software update, I am seeing a repeated attempt to download and install OSX Server software throughthe logs, particulArly thE INSTALL LOGS.I don't really care to wake up one morning to learn that I've suddenly become another OS X server. Are there any steps I can take to be sure I haven't become a server bot unwittingly. Someone keeps shooting files my system flags as defective or unapproved with suggestions the files have been prevented from being downladed. I need to become aware of how diligent I need to be to thwart efforts to make me
    Thanks much for any help¡

    Hi,
    I have been seing 2 thingslately:
    After doing a clean install and using Mac's firewall, Net and Virusbarrier, and LittleSnitchas well as a TZ50 Sonicwall router.I keep seeing console and systemslogs that the system hasdetected "invalid UTF-8 code" throughout and should be fixedbut how)? This has been occurring since I connected an old Firelite external hard drive (60 GB) via firewire.Virusbarrier and MacScans of my system drive and ext,drive have yielded nothing.
    "Dec 29 06:19:42 Bobbys-Power-Mac-G4 /System/Library/CoreServices/coreservicesd[65]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "ˇˇˇˇˇˇˇˇ".
    Dec 29 06:19:42 Bobbys-Power-Mac-G4 /System/Library/CoreServices/coreservicesd[65]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "ˇˇˇˇˇˇˇˇ".
    Dec 29 06:19:42 Bobbys-Power-Mac-G4 /System/Library/CoreServices/coreservicesd[65]: FIXME: IOUnserialize has detected a string that is not valid UTF-8, "ˇˇˇˇˇˇˇˇ".
    Dec 29 06:19:42 Bobbys-Power-Mac-G4 /System/Library/CoreServices/coreservicesd[65]: FIXME: IOUnseria
    The 2nd thing is that the install, system and console logs over and over seem to be referencing efforts to intall Serversoftware found through Softwareupdate.:
    ""2007-12-29 06:26:50.613 Software Update[1581] IFPkg::_parseOldStyleForLanguage - can't find .info file (ServerSetup)
    2007-12-29 06:26:50.618 Software Update[1581] IFPkg::_parseOldStyleForLanguage - can't find .info file (ServerAdminTools)
    2007-12-29 06:26:50.803 Software Update[1581] IFPkg::_parseOldStyleForLanguage - can't find .info file (ServerSetup)
    2007-12-29 06:26:50.805 Software Update[1581] IFPkg::_parseOldStyleForLanguage -
    can't find .info file (ServerAdminTools)"
    I also did the security update and the 10.4.11 Combo update through Software Update which references downloads (but not installations of various pieces of software as follows:
    Dec 29 06:26:50 Bobbys-Power-Mac-G4 Software Update[1581]: Distribution: Security Update 2007-009 (Universal)
    Dec 29 06:26:50 Bobbys-Power-Mac-G4 Software Update[1581]: Distribution: Security Update 2007-009 (PowerPC)
    Dec 29 06:26:50 Bobbys-Power-Mac-G4 Software Update[1581]: Distribution: Mac OS X Server Update (PowerPC)
    Dec 29 06:26:50 Bobbys-Power-Mac-G4 Software Update[1581]: The package "ServerSetup" could not be opened. This can happen if the package has incorrect permissions or if the package has been renamed.
    Dec 29 06:26:50 Bobbys-Power-Mac-G4 Software Update[1581]: The package "ServerAdminTools" could not be opened. This can happen if the package has incorrect permissions or if the package has been renamed.
    Dec 29 06:26:50 Bobbys-Power-Mac-G4 Software Update[1581]: Distribution: Mac OS X Server Update Combined (PowerPC)
    Dec 29 06:26:50 Bobbys-Power-Mac-G4 Software Update[1581]: The package "ServerSetup" could not be opened. This can happen if the package has incorrect permissions or if the package has been renamed.
    Dec 29 06:26:50 Bobbys-Power-Mac-G4 Software Update[1581]: The package "ServerAdminTools" could not be opened. This can happen if the package has incorrect permissions or if the package has been renamed.
    Dec 29 06
    Thanks for any advise.

  • Running reports created with Reports 9i in client-server configuration

    I need to have users run reports created with Oracle Reports 9i on workstations without any Oracle products installed on it, (in a client-server configuration as opposed to Web based) . I am looking for a step-by-step approach to accomplish this. I looked through the installation documents in OTN and I did not see one that addressed this.
    BTW, I saw an earlier post in this form which disscussed this,indirectly, for Reports 6i but I don't think these steps will work for 9i rpeorts
    ** Earlier post
    Question:
    I have an application in Oracle 8i, Forms 6i, Reports 6i. Now I want to make executable CD which will be installable in nature. I don't know how to make it or what tools to be used for this . Kindly help me out.
    Answer:
    You can write a .bat file for installation.....
    This file should do following things.
    1. Oracle8 Personal Setup
    Install only Database (no tools)
    2. Oracle Developer200 Setup
    Install only Forms Runtime
    Reports Runtime
    Graphics Runtime
    3. Use imp/exp to put the desired database...
    4. Copy exexutables in some directory and place shortcuts in programs and destkop
    5. Make new file-types in start->setting ->folder options-> file-types
    and specify that in which runtime-application you want to open your executables....
    Thanks in advance,
    Audrey Watson

    hi audrey,
    there is no client/server runtime available for reports9i. what
    you can do is to use the rwclient executable shipped with IDS
    to submit jobs to the reports server.
    there are plans to provide a stand alone thin client in the
    future but this is not available yet.
    regards,
    christian

  • How do I configure a Sun One Web Server 6.1 to run JSP pages

    I have a Sun One Web server version 6.1 running on Solaris 10.
    The web server is not configured to run JSP pages. When I try and run a JSP page, I get an HTTP 405 error.
    Can somebody please point me to the configuration directions, including changes to the obj.conf, magnus,.conf, etc.
    Thanks

    Web Container is enabled by default.
    Here are my config files
    $tail -1 magnus.conf
    Init fn="load-modules" shlib="/export2/ws6.1sp11/bin/https/lib/libj2eeplugin.so" shlib_flags="(global|now)"$cat obj.conf
    # You can edit this file, but comments and formatting changes
    # might be lost when the admin server makes changes.
    <Object name="default">
    AuthTrans fn="match-browser" browser="*MSIE*" ssl-unclean-shutdown="true"
    NameTrans fn="ntrans-j2ee" name="j2ee"
    NameTrans fn="pfx2dir" from="/mc-icons" dir="/export2/ws6.1sp11/ns-icons" name="es-internal"
    NameTrans fn="document-root" root="$docroot"
    PathCheck fn="unix-uri-clean"
    PathCheck fn="check-acl" acl="default"
    PathCheck fn="find-pathinfo"
    PathCheck fn="find-index" index-names="index.html,home.html,index.jsp"
    ObjectType fn="type-by-extension"
    ObjectType fn="force-type" type="text/plain"
    Service method="(GET|HEAD)" type="magnus-internal/imagemap" fn="imagemap"
    Service method="(GET|HEAD)" type="magnus-internal/directory" fn="index-common"
    Service method="(GET|HEAD|POST)" type="*~magnus-internal/*" fn="send-file"
    Service method="TRACE" fn="service-trace"
    Error fn="error-j2ee"
    AddLog fn="flex-log" name="access"
    </Object>
    <Object name="j2ee">
    Service fn="service-j2ee" method="*"
    </Object>
    <Object name="cgi">
    ObjectType fn="force-type" type="magnus-internal/cgi"
    Service fn="send-cgi" user="$user" group="$group" chroot="$chroot" dir="$dir" nice="$nice"
    </Object>
    <Object name="es-internal">
    PathCheck fn="check-acl" acl="es-internal"
    </Object>JAVA settings in server.xml:
    <JAVA classpathsuffix="" debug="false" debugoptions="-Xdebug -Xrunjdwp:transport=dt_socket,server=y,suspend=n" dynamicreloadinterval="-1" envclasspathignored="true" javahome="/export2/ws6.1sp11/bin/https/jdk" nativelibrarypathprefix="" serverclasspath="/export2/ws6.1sp11/bin/https/jar/webserv-rt.jar:${java.home}/lib/tools.jar:/export2/ws6.1sp11/bin/https/jar/webserv-ext.jar:/export2/ws6.1sp11/bin/https/jar/webserv-jstl.jar:/export2/ws6.1sp11/bin/https/jar/ktsearch.jar">
            <JVMOPTIONS>-Djava.security.manager</JVMOPTIONS>
            <JVMOPTIONS>-Djava.security.policy=/export2/ws6.1sp11/https-alamanac.india.sun.com/config/server.policy</JVMOPTIONS>
        <JVMOPTIONS>-Djava.security.auth.login.config=/export2/ws6.1sp11/https-alamanac.india.sun.com/config/login.conf</JVMOPTIONS>
        <JVMOPTIONS>-Djava.util.logging.manager=com.iplanet.ias.server.logging.ServerLogManager</JVMOPTIONS>
        <JVMOPTIONS>-Xmx256m</JVMOPTIONS>
        <SECURITY anonymousrole="ANYONE" audit="false" defaultrealm="native">
          <AUTHREALM classname="com.iplanet.ias.security.auth.realm.file.FileRealm" name="file">
            <PROPERTY name="file" value="/export2/ws6.1sp11/https-alamanac.india.sun.com/config/keyfile"/>
            <PROPERTY name="jaas-context" value="fileRealm"/>
          </AUTHREALM>
          <AUTHREALM classname="com.iplanet.ias.security.auth.realm.webcore.NativeRealm" name="native">
            <PROPERTY name="jaas-context" value="nativeRealm"/>
          </AUTHREALM>
          <AUTHREALM classname="com.iplanet.ias.security.auth.realm.ldap.LDAPRealm" name="ldap">
            <PROPERTY name="directory" value="ldap://localhost:389"/>
            <PROPERTY name="base-dn" value="o=isp"/>
            <PROPERTY name="jaas-context" value="ldapRealm"/>
          </AUTHREALM>
                <AUTHREALM name="solaris" classname="com.iplanet.ias.security.auth.realm.solaris.SolarisRealm">
                  <PROPERTY name="jaas-context" value="solarisRealm"/>
                </AUTHREALM>
        </SECURITY>
        <RESOURCES>
            </RESOURCES>
      </JAVA>

  • Problem with Configuring Tomcat for running jsp web applications..Plz HELP

    I am using Tomcat 5.5 and Jdk 1.5.0_12 and Oracle 10g. I am using jdbc-odbc bridge connection
    to connect to the database. I have placed my project folder called
    tdm under the webapps folder in Tomcat. This 'tdm' folder consists of
    a collection of html pages,jsp pages and images of my project. Also I created a
    WEB-INF folderand in that I have lib folder which contains catalina-root.jar
    , classes12.jar and nls_charset.jar files. And also in the WEB-INF folder I have the web.xml
    file which looks like this
    <?xml version="1.0" encoding="ISO-8859-1"?>
    <!--
    Copyright 2004 The Apache Software Foundation
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
    You may obtain a copy of the License at
    http://www.apache.org/licenses/LICENSE-2.0
    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
    -->
    <web-app>
    <resource-ref>
    <description>Oracle Datasource example</description>
    <res-ref-name>jdbc/gdn</res-ref-name>
    <res-type>javax.sql.DataSource</res-type>
    <res-auth>Container</res-auth>
    </resource-ref>
    </web-app>
    My Server.xml file in Tomcat\conf folder is as follows
    <!-- Example Server Configuration File -->
    <!-- Note that component elements are nested corresponding to their
    parent-child relationships with each other -->
    <!-- A "Server" is a singleton element that represents the entire JVM,
    which may contain one or more "Service" instances. The Server
    listens for a shutdown command on the indicated port.
    Note: A "Server" is not itself a "Container", so you may not
    define subcomponents such as "Valves" or "Loggers" at this level.
    -->
    <Server port="8005" shutdown="SHUTDOWN">
    <!-- Comment these entries out to disable JMX MBeans support used for the
    administration web application -->
    <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener" />
    <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
    <!-- Global JNDI resources -->
    <GlobalNamingResources>
    <!-- Test entry for demonstration purposes -->
    <Environment name="simpleValue" type="java.lang.Integer" value="30"/>
    <!-- Editable user database that can also be used by
    UserDatabaseRealm to authenticate users -->
    <Resource name="UserDatabase" auth="Container"
    type="org.apache.catalina.UserDatabase"
    description="User database that can be updated and saved"
    factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
    pathname="conf/tomcat-users.xml" />
    <Resource name="jdbc/gdn" auth="Container"
    type="javax.sql.DataSource" driverClassName="sun.jdbc.odbc.JdbcOdbcDriver"
    url="jdbc:odbc:gdn"
    username="system" password="tiger" maxActive="20" maxIdle="10"
    maxWait="-1"/>
    </GlobalNamingResources>
    <!-- A "Service" is a collection of one or more "Connectors" that share
    a single "Container" (and therefore the web applications visible
    within that Container). Normally, that Container is an "Engine",
    but this is not required.
    Note: A "Service" is not itself a "Container", so you may not
    define subcomponents such as "Valves" or "Loggers" at this level.
    -->
    <!-- Define the Tomcat Stand-Alone Service -->
    <Service name="Catalina">
    <!-- A "Connector" represents an endpoint by which requests are received
    and responses are returned. Each Connector passes requests on to the
    associated "Container" (normally an Engine) for processing.
    By default, a non-SSL HTTP/1.1 Connector is established on port 8080.
    You can also enable an SSL HTTP/1.1 Connector on port 8443 by
    following the instructions below and uncommenting the second Connector
    entry. SSL support requires the following steps (see the SSL Config
    HOWTO in the Tomcat 5 documentation bundle for more detailed
    instructions):
    * If your JDK version 1.3 or prior, download and install JSSE 1.0.2 or
    later, and put the JAR files into "$JAVA_HOME/jre/lib/ext".
    * Execute:
    %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (Windows)
    $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA (Unix)
    with a password value of "changeit" for both the certificate and
    the keystore itself.
    By default, DNS lookups are enabled when a web application calls
    request.getRemoteHost(). This can have an adverse impact on
    performance, so you can disable it by setting the
    "enableLookups" attribute to "false". When DNS lookups are disabled,
    request.getRemoteHost() will return the String version of the
    IP address of the remote client.
    -->
    <!-- Define a non-SSL HTTP/1.1 Connector on port 8080 -->
    <Connector
    port="5050" maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
    enableLookups="false" redirectPort="8443" acceptCount="100"
    connectionTimeout="20000" disableUploadTimeout="true" />
    <!-- Note : To disable connection timeouts, set connectionTimeout value
    to 0 -->
         <!-- Note : To use gzip compression you could set the following properties :
                   compression="on"
                   compressionMinSize="2048"
                   noCompressionUserAgents="gozilla, traviata"
                   compressableMimeType="text/html,text/xml"
         -->
    <!-- Define a SSL HTTP/1.1 Connector on port 8443 -->
    <!--
    <Connector port="8443"
    maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
    enableLookups="false" disableUploadTimeout="true"
    acceptCount="100" scheme="https" secure="true"
    clientAuth="false" sslProtocol="TLS" />
    -->
    <!-- Define an AJP 1.3 Connector on port 8009 -->
    <Connector port="8009"
    enableLookups="false" redirectPort="8443" protocol="AJP/1.3" />
    <!-- Define a Proxied HTTP/1.1 Connector on port 8082 -->
    <!-- See proxy documentation for more information about using this. -->
    <!--
    <Connector port="8082"
    maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
    enableLookups="false" acceptCount="100" connectionTimeout="20000"
    proxyPort="80" disableUploadTimeout="true" />
    -->
    <!-- An Engine represents the entry point (within Catalina) that processes
    every request. The Engine implementation for Tomcat stand alone
    analyzes the HTTP headers included with the request, and passes them
    on to the appropriate Host (virtual host). -->
    <!-- You should set jvmRoute to support load-balancing via AJP ie :
    <Engine name="Standalone" defaultHost="localhost" jvmRoute="jvm1">
    -->
    <!-- Define the top level container in our container hierarchy -->
    <Engine name="Catalina" defaultHost="localhost">
    <!-- The request dumper valve dumps useful debugging information about
    the request headers and cookies that were received, and the response
    headers and cookies that were sent, for all requests received by
    this instance of Tomcat. If you care only about requests to a
    particular virtual host, or a particular application, nest this
    element inside the corresponding <Host> or <Context> entry instead.
    For a similar mechanism that is portable to all Servlet 2.4
    containers, check out the "RequestDumperFilter" Filter in the
    example application (the source for this filter may be found in
    "$CATALINA_HOME/webapps/examples/WEB-INF/classes/filters").
    Request dumping is disabled by default. Uncomment the following
    element to enable it. -->
    <!--
    <Valve className="org.apache.catalina.valves.RequestDumperValve"/>
    -->
    <!-- Because this Realm is here, an instance will be shared globally -->
    <!-- This Realm uses the UserDatabase configured in the global JNDI
    resources under the key "UserDatabase". Any edits
    that are performed against this UserDatabase are immediately
    available for use by the Realm. -->
    <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
    resourceName="UserDatabase"/>
    <!-- Comment out the old realm but leave here for now in case we
    need to go back quickly -->
    <!--
    <Realm className="org.apache.catalina.realm.MemoryRealm" />
    -->
    <!-- Replace the above Realm with one of the following to get a Realm
    stored in a database and accessed via JDBC -->
    <!--
    <Realm className="org.apache.catalina.realm.JDBCRealm"
    driverName="org.gjt.mm.mysql.Driver"
    connectionURL="jdbc:mysql://localhost/authority"
    connectionName="test" connectionPassword="test"
    userTable="users" userNameCol="user_name" userCredCol="user_pass"
    userRoleTable="user_roles" roleNameCol="role_name" />
    -->
    <!--
    <Realm className="org.apache.catalina.realm.JDBCRealm"
    driverName="oracle.jdbc.driver.OracleDriver"
    connectionURL="jdbc:oracle:thin:@ntserver:1521:ORCL"
    connectionName="scott" connectionPassword="tiger"
    userTable="users" userNameCol="user_name" userCredCol="user_pass"
    userRoleTable="user_roles" roleNameCol="role_name" />
    -->
    <!--
    <Realm className="org.apache.catalina.realm.JDBCRealm"
    driverName="sun.jdbc.odbc.JdbcOdbcDriver"
    connectionURL="jdbc:odbc:CATALINA"
    userTable="users" userNameCol="user_name" userCredCol="user_pass"
    userRoleTable="user_roles" roleNameCol="role_name" />
    -->
    <!-- Define the default virtual host
    Note: XML Schema validation will not work with Xerces 2.2.
    -->
    <Host name="localhost" appBase="webapps"
    unpackWARs="true" autoDeploy="true"
    xmlValidation="false" xmlNamespaceAware="false">
    <!-- Defines a cluster for this node,
    By defining this element, means that every manager will be changed.
    So when running a cluster, only make sure that you have webapps in there
    that need to be clustered and remove the other ones.
    A cluster has the following parameters:
    className = the fully qualified name of the cluster class
    name = a descriptive name for your cluster, can be anything
    mcastAddr = the multicast address, has to be the same for all the nodes
    mcastPort = the multicast port, has to be the same for all the nodes
    mcastBindAddr = bind the multicast socket to a specific address
    mcastTTL = the multicast TTL if you want to limit your broadcast
    mcastSoTimeout = the multicast readtimeout
    mcastFrequency = the number of milliseconds in between sending a "I'm alive" heartbeat
    mcastDropTime = the number a milliseconds before a node is considered "dead" if no heartbeat is received
    tcpThreadCount = the number of threads to handle incoming replication requests, optimal would be the same amount of threads as nodes
    tcpListenAddress = the listen address (bind address) for TCP cluster request on this host,
    in case of multiple ethernet cards.
    auto means that address becomes
    InetAddress.getLocalHost().getHostAddress()
    tcpListenPort = the tcp listen port
    tcpSelectorTimeout = the timeout (ms) for the Selector.select() method in case the OS
    has a wakup bug in java.nio. Set to 0 for no timeout
    printToScreen = true means that managers will also print to std.out
    expireSessionsOnShutdown = true means that
    useDirtyFlag = true means that we only replicate a session after setAttribute,removeAttribute has been called.
    false means to replicate the session after each request.
    false means that replication would work for the following piece of code: (only for SimpleTcpReplicationManager)
    <%
    HashMap map = (HashMap)session.getAttribute("map");
    map.put("key","value");
    %>
    replicationMode = can be either 'pooled', 'synchronous' or 'asynchronous'.
    * Pooled means that the replication happens using several sockets in a synchronous way. Ie, the data gets replicated, then the request return. This is the same as the 'synchronous' setting except it uses a pool of sockets, hence it is multithreaded. This is the fastest and safest configuration. To use this, also increase the nr of tcp threads that you have dealing with replication.
    * Synchronous means that the thread that executes the request, is also the
    thread the replicates the data to the other nodes, and will not return until all
    nodes have received the information.
    * Asynchronous means that there is a specific 'sender' thread for each cluster node,
    so the request thread will queue the replication request into a "smart" queue,
    and then return to the client.
    The "smart" queue is a queue where when a session is added to the queue, and the same session
    already exists in the queue from a previous request, that session will be replaced
    in the queue instead of replicating two requests. This almost never happens, unless there is a
    large network delay.
    -->
    <!--
    When configuring for clustering, you also add in a valve to catch all the requests
    coming in, at the end of the request, the session may or may not be replicated.
    A session is replicated if and only if all the conditions are met:
    1. useDirtyFlag is true or setAttribute or removeAttribute has been called AND
    2. a session exists (has been created)
    3. the request is not trapped by the "filter" attribute
    The filter attribute is to filter out requests that could not modify the session,
    hence we don't replicate the session after the end of this request.
    The filter is negative, ie, anything you put in the filter, you mean to filter out,
    ie, no replication will be done on requests that match one of the filters.
    The filter attribute is delimited by ;, so you can't escape out ; even if you wanted to.
    filter=".*\.gif;.*\.js;" means that we will not replicate the session after requests with the URI
    ending with .gif and .js are intercepted.
    The deployer element can be used to deploy apps cluster wide.
    Currently the deployment only deploys/undeploys to working members in the cluster
    so no WARs are copied upons startup of a broken node.
    The deployer watches a directory (watchDir) for WAR files when watchEnabled="true"
    When a new war file is added the war gets deployed to the local instance,
    and then deployed to the other instances in the cluster.
    When a war file is deleted from the watchDir the war is undeployed locally
    and cluster wide
    -->
    <!--
    <Cluster className="org.apache.catalina.cluster.tcp.SimpleTcpCluster"
    managerClassName="org.apache.catalina.cluster.session.DeltaManager"
    expireSessionsOnShutdown="false"
    useDirtyFlag="true"
    notifyListenersOnReplication="true">
    <Membership
    className="org.apache.catalina.cluster.mcast.McastService"
    mcastAddr="228.0.0.4"
    mcastPort="45564"
    mcastFrequency="500"
    mcastDropTime="3000"/>
    <Receiver
    className="org.apache.catalina.cluster.tcp.ReplicationListener"
    tcpListenAddress="auto"
    tcpListenPort="4001"
    tcpSelectorTimeout="100"
    tcpThreadCount="6"/>
    <Sender
    className="org.apache.catalina.cluster.tcp.ReplicationTransmitter"
    replicationMode="pooled"
    ackTimeout="15000"/>
    <Valve className="org.apache.catalina.cluster.tcp.ReplicationValve"
    filter=".*\.gif;.*\.js;.*\.jpg;.*\.htm;.*\.html;.*\.txt;"/>
    <Deployer className="org.apache.catalina.cluster.deploy.FarmWarDeployer"
    tempDir="/tmp/war-temp/"
    deployDir="/tmp/war-deploy/"
    watchDir="/tmp/war-listen/"
    watchEnabled="false"/>
    </Cluster>
    -->
    <!-- Normally, users must authenticate themselves to each web app
    individually. Uncomment the following entry if you would like
    a user to be authenticated the first time they encounter a
    resource protected by a security constraint, and then have that
    user identity maintained across all web applications contained
    in this virtual host. -->
    <!--
    <Valve className="org.apache.catalina.authenticator.SingleSignOn" />
    -->
    <!-- Access log processes all requests for this virtual host. By
    default, log files are created in the "logs" directory relative to
    $CATALINA_HOME. If you wish, you can specify a different
    directory with the "directory" attribute. Specify either a relative
    (to $CATALINA_HOME) or absolute path to the desired directory.
    -->
    <!--
    <Valve className="org.apache.catalina.valves.AccessLogValve"
    directory="logs" prefix="localhost_access_log." suffix=".txt"
    pattern="common" resolveHosts="false"/>
    -->
    <!-- Access log processes all requests for this virtual host. By
    default, log files are created in the "logs" directory relative to
    $CATALINA_HOME. If you wish, you can specify a different
    directory with the "directory" attribute. Specify either a relative
    (to $CATALINA_HOME) or absolute path to the desired directory.
    This access log implementation is optimized for maximum performance,
    but is hardcoded to support only the "common" and "combined" patterns.
    -->
    <!--
    <Valve className="org.apache.catalina.valves.FastCommonAccessLogValve"
    directory="logs" prefix="localhost_access_log." suffix=".txt"
    pattern="common" resolveHosts="false"/>
    -->
    <Context path="/tdm" docBase="tdm" debug="0" reloadable="true" />
    </Host>
    </Engine>
    </Service>
    </Server>
    I have set the context path to /tdm in the server.xml file. Should this be placed in context.xml?
    My first page in the project is called Homepage.html. To start my project I give http://localhost:5050/tdm/homepage.html
    in a browser. Here I accept a username and password from the user and then do the validation in
    a valid.jsp file, where I connect to the database and check and use jsp:forward to go to next pages
    accordingly. However when I enter the username and password and click Go in the homepage, nothing is
    displayed on the next page. The URL in the browser says valid.jsp but a blank screen appears.
    WHY DOES IT HAPPEN SO? DOES IT MEAN THAT TOMCAT IS NOT RECOGNIZING JAVA IN MY SYSTEM OR IS IT A PROBLEM
    WITH THE DATABASE CONNECTION OR SOMETHING ELSE? I FEEL THAT TOMCAT IS NOT EXECUTING JSP COMMANDS?
    IS IT POSSIBLE?WHY WILL THIS HAPPEN?
    I set the JAVA_HOME and CATALINA_HOME environment to the jdk and tomcat folders resp.
    Is there any other thing that I need to set in classpath? Should I have my project as a
    WAR file in the webapps of TOMCAT or just a folder i.e. directory structure will fine?

    I am using Tomcat 5.5 and Jdk 1.5.0_12 and Oracle 10g. I am using jdbc-odbc bridge connection
    to connect to the database. I have placed my project folder called
    tdm under the webapps folder in Tomcat. This 'tdm' folder consists of
    a collection of html pages,jsp pages and images of my project. Also I created a
    WEB-INF folderand in that I have lib folder which contains catalina-root.jar
    , classes12.jar and nls_charset.jar files. And also in the WEB-INF folder I have the web.xml
    file which looks like this
    <?xml version="1.0" encoding="ISO-8859-1"?>
    <!--
    Copyright 2004 The Apache Software Foundation
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
    You may obtain a copy of the License at
    http://www.apache.org/licenses/LICENSE-2.0
    Unless required by applicable law or agreed to in writing, software
    distributed under the License is distributed on an "AS IS" BASIS,
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
    -->
    <web-app>
    <resource-ref>
    <description>Oracle Datasource example</description>
    <res-ref-name>jdbc/gdn</res-ref-name>
    <res-type>javax.sql.DataSource</res-type>
    <res-auth>Container</res-auth>
    </resource-ref>
    </web-app>
    My Server.xml file in Tomcat\conf folder is as follows
    <!-- Example Server Configuration File -->
    <!-- Note that component elements are nested corresponding to their
    parent-child relationships with each other -->
    <!-- A "Server" is a singleton element that represents the entire JVM,
    which may contain one or more "Service" instances. The Server
    listens for a shutdown command on the indicated port.
    Note: A "Server" is not itself a "Container", so you may not
    define subcomponents such as "Valves" or "Loggers" at this level.
    -->
    <Server port="8005" shutdown="SHUTDOWN">
    <!-- Comment these entries out to disable JMX MBeans support used for the
    administration web application -->
    <Listener className="org.apache.catalina.mbeans.ServerLifecycleListener" />
    <Listener className="org.apache.catalina.mbeans.GlobalResourcesLifecycleListener" />
    <!-- Global JNDI resources -->
    <GlobalNamingResources>
    <!-- Test entry for demonstration purposes -->
    <Environment name="simpleValue" type="java.lang.Integer" value="30"/>
    <!-- Editable user database that can also be used by
    UserDatabaseRealm to authenticate users -->
    <Resource name="UserDatabase" auth="Container"
    type="org.apache.catalina.UserDatabase"
    description="User database that can be updated and saved"
    factory="org.apache.catalina.users.MemoryUserDatabaseFactory"
    pathname="conf/tomcat-users.xml" />
    <Resource name="jdbc/gdn" auth="Container"
    type="javax.sql.DataSource" driverClassName="sun.jdbc.odbc.JdbcOdbcDriver"
    url="jdbc:odbc:gdn"
    username="system" password="tiger" maxActive="20" maxIdle="10"
    maxWait="-1"/>
    </GlobalNamingResources>
    <!-- A "Service" is a collection of one or more "Connectors" that share
    a single "Container" (and therefore the web applications visible
    within that Container). Normally, that Container is an "Engine",
    but this is not required.
    Note: A "Service" is not itself a "Container", so you may not
    define subcomponents such as "Valves" or "Loggers" at this level.
    -->
    <!-- Define the Tomcat Stand-Alone Service -->
    <Service name="Catalina">
    <!-- A "Connector" represents an endpoint by which requests are received
    and responses are returned. Each Connector passes requests on to the
    associated "Container" (normally an Engine) for processing.
    By default, a non-SSL HTTP/1.1 Connector is established on port 8080.
    You can also enable an SSL HTTP/1.1 Connector on port 8443 by
    following the instructions below and uncommenting the second Connector
    entry. SSL support requires the following steps (see the SSL Config
    HOWTO in the Tomcat 5 documentation bundle for more detailed
    instructions):
    * If your JDK version 1.3 or prior, download and install JSSE 1.0.2 or
    later, and put the JAR files into "$JAVA_HOME/jre/lib/ext".
    * Execute:
    %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA (Windows)
    $JAVA_HOME/bin/keytool -genkey -alias tomcat -keyalg RSA (Unix)
    with a password value of "changeit" for both the certificate and
    the keystore itself.
    By default, DNS lookups are enabled when a web application calls
    request.getRemoteHost(). This can have an adverse impact on
    performance, so you can disable it by setting the
    "enableLookups" attribute to "false". When DNS lookups are disabled,
    request.getRemoteHost() will return the String version of the
    IP address of the remote client.
    -->
    <!-- Define a non-SSL HTTP/1.1 Connector on port 8080 -->
    <Connector
    port="5050" maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
    enableLookups="false" redirectPort="8443" acceptCount="100"
    connectionTimeout="20000" disableUploadTimeout="true" />
    <!-- Note : To disable connection timeouts, set connectionTimeout value
    to 0 -->
         <!-- Note : To use gzip compression you could set the following properties :
                   compression="on"
                   compressionMinSize="2048"
                   noCompressionUserAgents="gozilla, traviata"
                   compressableMimeType="text/html,text/xml"
         -->
    <!-- Define a SSL HTTP/1.1 Connector on port 8443 -->
    <!--
    <Connector port="8443"
    maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
    enableLookups="false" disableUploadTimeout="true"
    acceptCount="100" scheme="https" secure="true"
    clientAuth="false" sslProtocol="TLS" />
    -->
    <!-- Define an AJP 1.3 Connector on port 8009 -->
    <Connector port="8009"
    enableLookups="false" redirectPort="8443" protocol="AJP/1.3" />
    <!-- Define a Proxied HTTP/1.1 Connector on port 8082 -->
    <!-- See proxy documentation for more information about using this. -->
    <!--
    <Connector port="8082"
    maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
    enableLookups="false" acceptCount="100" connectionTimeout="20000"
    proxyPort="80" disableUploadTimeout="true" />
    -->
    <!-- An Engine represents the entry point (within Catalina) that processes
    every request. The Engine implementation for Tomcat stand alone
    analyzes the HTTP headers included with the request, and passes them
    on to the appropriate Host (virtual host). -->
    <!-- You should set jvmRoute to support load-balancing via AJP ie :
    <Engine name="Standalone" defaultHost="localhost" jvmRoute="jvm1">
    -->
    <!-- Define the top level container in our container hierarchy -->
    <Engine name="Catalina" defaultHost="localhost">
    <!-- The request dumper valve dumps useful debugging information about
    the request headers and cookies that were received, and the response
    headers and cookies that were sent, for all requests received by
    this instance of Tomcat. If you care only about requests to a
    particular virtual host, or a particular application, nest this
    element inside the corresponding <Host> or <Context> entry instead.
    For a similar mechanism that is portable to all Servlet 2.4
    containers, check out the "RequestDumperFilter" Filter in the
    example application (the source for this filter may be found in
    "$CATALINA_HOME/webapps/examples/WEB-INF/classes/filters").
    Request dumping is disabled by default. Uncomment the following
    element to enable it. -->
    <!--
    <Valve className="org.apache.catalina.valves.RequestDumperValve"/>
    -->
    <!-- Because this Realm is here, an instance will be shared globally -->
    <!-- This Realm uses the UserDatabase configured in the global JNDI
    resources under the key "UserDatabase". Any edits
    that are performed against this UserDatabase are immediately
    available for use by the Realm. -->
    <Realm className="org.apache.catalina.realm.UserDatabaseRealm"
    resourceName="UserDatabase"/>
    <!-- Comment out the old realm but leave here for now in case we
    need to go back quickly -->
    <!--
    <Realm className="org.apache.catalina.realm.MemoryRealm" />
    -->
    <!-- Replace the above Realm with one of the following to get a Realm
    stored in a database and accessed via JDBC -->
    <!--
    <Realm className="org.apache.catalina.realm.JDBCRealm"
    driverName="org.gjt.mm.mysql.Driver"
    connectionURL="jdbc:mysql://localhost/authority"
    connectionName="test" connectionPassword="test"
    userTable="users" userNameCol="user_name" userCredCol="user_pass"
    userRoleTable="user_roles" roleNameCol="role_name" />
    -->
    <!--
    <Realm className="org.apache.catalina.realm.JDBCRealm"
    driverName="oracle.jdbc.driver.OracleDriver"
    connectionURL="jdbc:oracle:thin:@ntserver:1521:ORCL"
    connectionName="scott" connectionPassword="tiger"
    userTable="users" userNameCol="user_name" userCredCol="user_pass"
    userRoleTable="user_roles" roleNameCol="role_name" />
    -->
    <!--
    <Realm className="org.apache.catalina.realm.JDBCRealm"
    driverName="sun.jdbc.odbc.JdbcOdbcDriver"
    connectionURL="jdbc:odbc:CATALINA"
    userTable="users" userNameCol="user_name" userCredCol="user_pass"
    userRoleTable="user_roles" roleNameCol="role_name" />
    -->
    <!-- Define the default virtual host
    Note: XML Schema validation will not work with Xerces 2.2.
    -->
    <Host name="localhost" appBase="webapps"
    unpackWARs="true" autoDeploy="true"
    xmlValidation="false" xmlNamespaceAware="false">
    <!-- Defines a cluster for this node,
    By defining this element, means that every manager will be changed.
    So when running a cluster, only make sure that you have webapps in there
    that need to be clustered and remove the other ones.
    A cluster has the following parameters:
    className = the fully qualified name of the cluster class
    name = a descriptive name for your cluster, can be anything
    mcastAddr = the multicast address, has to be the same for all the nodes
    mcastPort = the multicast port, has to be the same for all the nodes
    mcastBindAddr = bind the multicast socket to a specific address
    mcastTTL = the multicast TTL if you want to limit your broadcast
    mcastSoTimeout = the multicast readtimeout
    mcastFrequency = the number of milliseconds in between sending a "I'm alive" heartbeat
    mcastDropTime = the number a milliseconds before a node is considered "dead" if no heartbeat is received
    tcpThreadCount = the number of threads to handle incoming replication requests, optimal would be the same amount of threads as nodes
    tcpListenAddress = the listen address (bind address) for TCP cluster request on this host,
    in case of multiple ethernet cards.
    auto means that address becomes
    InetAddress.getLocalHost().getHostAddress()
    tcpListenPort = the tcp listen port
    tcpSelectorTimeout = the timeout (ms) for the Selector.select() method in case the OS
    has a wakup bug in java.nio. Set to 0 for no timeout
    printToScreen = true means that managers will also print to std.out
    expireSessionsOnShutdown = true means that
    useDirtyFlag = true means that we only replicate a session after setAttribute,removeAttribute has been called.
    false means to replicate the session after each request.
    false means that replication would work for the following piece of code: (only for SimpleTcpReplicationManager)
    <%
    HashMap map = (HashMap)session.getAttribute("map");
    map.put("key","value");
    %>
    replicationMode = can be either 'pooled', 'synchronous' or 'asynchronous'.
    * Pooled means that the replication happens using several sockets in a synchronous way. Ie, the data gets replicated, then the request return. This is the same as the 'synchronous' setting except it uses a pool of sockets, hence it is multithreaded. This is the fastest and safest configuration. To use this, also increase the nr of tcp threads that you have dealing with replication.
    * Synchronous means that the thread that executes the request, is also the
    thread the replicates the data to the other nodes, and will not return until all
    nodes have received the information.
    * Asynchronous means that there is a specific 'sender' thread for each cluster node,
    so the request thread will queue the replication request into a "smart" queue,
    and then return to the client.
    The "smart" queue is a queue where when a session is added to the queue, and the same session
    already exists in the queue from a previous request, that session will be replaced
    in the queue instead of replicating two requests. This almost never happens, unless there is a
    large network delay.
    -->
    <!--
    When configuring for clustering, you also add in a valve to catch all the requests
    coming in, at the end of the request, the session may or may not be replicated.
    A session is replicated if and only if all the conditions are met:
    1. useDirtyFlag is true or setAttribute or removeAttribute has been called AND
    2. a session exists (has been created)
    3. the request is not trapped by the "filter" attribute
    The filter attribute is to filter out requests that could not modify the session,
    hence we don't replicate the session after the end of this request.
    The filter is negative, ie, anything you put in the filter, you mean to filter out,
    ie, no replication will be done on requests that match one of the filters.
    The filter attribute is delimited by ;, so you can't escape out ; even if you wanted to.
    filter=".*\.gif;.*\.js;" means that we will not replicate the session after requests with the URI
    ending with .gif and .js are intercepted.
    The deployer element can be used to deploy apps cluster wide.
    Currently the deployment only deploys/undeploys to working members in the cluster
    so no WARs are copied upons startup of a broken node.
    The deployer watches a directory (watchDir) for WAR files when watchEnabled="true"
    When a new war file is added the war gets deployed to the local instance,
    and then deployed to the other instances in the cluster.
    When a war file is deleted from the watchDir the war is undeployed locally
    and cluster wide
    -->
    <!--
    <Cluster className="org.apache.catalina.cluster.tcp.SimpleTcpCluster"
    managerClassName="org.apache.catalina.cluster.session.DeltaManager"
    expireSessionsOnShutdown="false"
    useDirtyFlag="true"
    notifyListenersOnReplication="true">
    <Membership
    className="org.apache.catalina.cluster.mcast.McastService"
    mcastAddr="228.0.0.4"
    mcastPort="45564"
    mcastFrequency="500"
    mcastDropTime="3000"/>
    <Receiver
    className="org.apache.catalina.cluster.tcp.ReplicationListener"
    tcpListenAddress="auto"
    tcpListenPort="4001"
    tcpSelectorTimeout="100"
    tcpThreadCount="6"/>
    <Sender
    className="org.apache.catalina.cluster.tcp.ReplicationTransmitter"
    replicationMode="pooled"
    ackTimeout="15000"/>
    <Valve className="org.apache.catalina.cluster.tcp.ReplicationValve"
    filter=".*\.gif;.*\.js;.*\.jpg;.*\.htm;.*\.html;.*\.txt;"/>
    <Deployer className="org.apache.catalina.cluster.deploy.FarmWarDeployer"
    tempDir="/tmp/war-temp/"
    deployDir="/tmp/war-deploy/"
    watchDir="/tmp/war-listen/"
    watchEnabled="false"/>
    </Cluster>
    -->
    <!-- Normally, users must authenticate themselves to each web app
    individually. Uncomment the following entry if you would like
    a user to be authenticated the first time they encounter a
    resource protected by a security constraint, and then have that
    user identity maintained across all web applications contained
    in this virtual host. -->
    <!--
    <Valve className="org.apache.catalina.authenticator.SingleSignOn" />
    -->
    <!-- Access log processes all requests for this virtual host. By
    default, log files are created in the "logs" directory relative to
    $CATALINA_HOME. If you wish, you can specify a different
    directory with the "directory" attribute. Specify either a relative
    (to $CATALINA_HOME) or absolute path to the desired directory.
    -->
    <!--
    <Valve className="org.apache.catalina.valves.AccessLogValve"
    directory="logs" prefix="localhost_access_log." suffix=".txt"
    pattern="common" resolveHosts="false"/>
    -->
    <!-- Access log processes all requests for this virtual host. By
    default, log files are created in the "logs" directory relative to
    $CATALINA_HOME. If you wish, you can specify a different
    directory with the "directory" attribute. Specify either a relative
    (to $CATALINA_HOME) or absolute path to the desired directory.
    This access log implementation is optimized for maximum performance,
    but is hardcoded to support only the "common" and "combined" patterns.
    -->
    <!--
    <Valve className="org.apache.catalina.valves.FastCommonAccessLogValve"
    directory="logs" prefix="localhost_access_log." suffix=".txt"
    pattern="common" resolveHosts="false"/>
    -->
    <Context path="/tdm" docBase="tdm" debug="0" reloadable="true" />
    </Host>
    </Engine>
    </Service>
    </Server>
    I have set the context path to /tdm in the server.xml file. Should this be placed in context.xml?
    My first page in the project is called Homepage.html. To start my project I give http://localhost:5050/tdm/homepage.html
    in a browser. Here I accept a username and password from the user and then do the validation in
    a valid.jsp file, where I connect to the database and check and use jsp:forward to go to next pages
    accordingly. However when I enter the username and password and click Go in the homepage, nothing is
    displayed on the next page. The URL in the browser says valid.jsp but a blank screen appears.
    WHY DOES IT HAPPEN SO? DOES IT MEAN THAT TOMCAT IS NOT RECOGNIZING JAVA IN MY SYSTEM OR IS IT A PROBLEM
    WITH THE DATABASE CONNECTION OR SOMETHING ELSE? I FEEL THAT TOMCAT IS NOT EXECUTING JSP COMMANDS?
    IS IT POSSIBLE?WHY WILL THIS HAPPEN?
    I set the JAVA_HOME and CATALINA_HOME environment to the jdk and tomcat folders resp.
    Is there any other thing that I need to set in classpath? Should I have my project as a
    WAR file in the webapps of TOMCAT or just a folder i.e. directory structure will fine?

  • RDS and Gateway issues: Cannot get remoteapps to run without opening port 3389 on firewall

    I am testing the setup of a small RDweb server to host QuickBooks for some remote sales users (4 users). For the most part, I have everything installed on one virtual server (using 2012r2 "Quick Start" session host deployment with the additional
    Licensing and Gateway server roles added to the same server).
    Everything works excellent with one exception. External clients cannot launch published apps without having port 3389 open on the firewall, even with the gateway role installed and the 'Deployment Properties' set to use the gateway. They can properly connect
    to the RDweb site and view the published apps. The only way it works is open the firewall port (at which time I can disable the gateway or leave it configured and it works either way). Internally, everything works accordingly. I have followed the steps outlined
    on many sites and have combed though the forum here to no avail.
    Error received (summarized but is a well documented error):
    remote desktop can't connect to the remote computer: 1- Your user account is not listed (it actually is) or 2- You might have specified the remote computer in NetBios format . . etc.
    This is an existing SBS 2011 environment with additional virtual servers setup to host QuickBooks as outlined below:
    Current setup:
    Used Quick Start to install Remote Desktop Services in hosted sessions mode
    Installed the additional roles for Licensing and Gateway server on same server
    Configured wild card public certificates on all four services (Connection Broker(2), Web Access and Gateway)
    Configured internal DNS to properly lookup our external FQDN of this server (ex. quickbooks.contoso.com points to quickbooks.contoso.local
    One thing I noticed (just now) when I launch a published app and the firewall has port 3389 closed, a dialog box pops up directly after launching the app that warns about running a RemoteApp program and mentions the Remote Computer and the Gateway Server
    as both the same (which it is); however, I would have assumed one would have listed the internal server's name while, instead, both are listed as the external FQDN. Either way, internal DNS should still allow it to properly route . . no? I don't know . . I'm
    sure I am just missing something in a routing configurations somewhere. The gateway service is not properly looking up the RDweb service and then seeming not routing the encapsulated RDP session through HTTPS. . .. is my guess . .
    I was reading about the "set published name" commandlet; however, I am not experiencing a certificate name mismatch; however, the certificate name does show up as *.contoso.com versus the actual name. I may just be grasping as straws now . . :)

    Ok, while I was in the server and looking over the BPA scans: "The Remote Desktop Gateway (RD Gateway) server Secure Sockets Layer (SSL) certificate may not have a valid certificate subject name." This may be due to it showing up as *.companyname.com
    versus quickbooks.companyname.com. Anyhow. .. on to the list of actions above:
    Changed RD RAP from "Select Active Directory" group to "Allow any network resource" and tested with port 3389 closed on firewall:
    Worked. Initially it did not as I had used a custom shortcut created from earlier; however, after logging into the RDweb site again, the application loaded fine now (after the RD RAP change)
    No error message appeared; however, I did notice that for a split second, the word Error did appear in the browser's tab title, but only very shortly. The app launch does take a bit longer too now (about 10-15 seconds, up from about 4 seconds with the port
    open). This, I could care less about so long as we are properly forwarding the traffic through the gateway.
    As for log entries, I had spend quite a bit of time in there and only had minor issues with loading user profile setting taking too long and policy settings preventing the redirection of USB devices. Looking again, no issues still. Just a bunch of informational
    entries where I would connect before (and disconnect) but only with the port on the firewall open; otherwise, there was not an entry corrolating to when I would receive an error before. Now though, I am connecting after the RD RAP change and logs are showing
    connections even with the port closed. These are in "operational", the "admin" log only shows the update to the RD RAP configuration.
    Yes, the LAN's DNS server does relay the lookup information for my public FQDN as the local LAN address. No need for a local host record.
    I have now added a new rule in our firewall to allow and forward UDP port 3391 traffic to the internal server hosting remote services
    Thank you very much for your assistance on this matter. The RD RAP rule was default built during the creation of this services. Why is the resource not cross-referencing AD security groups? I could have sworn I created a group for that . . .

  • Sql server Configuration option when moving packages from dev env to production env

    hi folks:
      Our SSIS engine is SQL2008R2 and I am in charge of ssis package development and deployment from dev env to production env. 
      This is what I've done using configurations to move packages from dev to production.
      1. on my local machine, I've created a database called SSIS_Config and a table that stores all 
      configration settings
      CREATE TABLE [dbo].[SSIS Configurations]
    ConfigurationFilter NVARCHAR(255) NOT NULL,
    ConfiguredValue NVARCHAR(255) NULL,
    PackagePath NVARCHAR(255) NOT NULL,
    ConfiguredValueType NVARCHAR(20) NOT NULL
    2. on dev ssis server, there is the same table [dbo].[SSIS Configurations] on SSIS_Config db which stores all configurations
    Once package has been deployed to dev env and run with success, I'll move it from dev to prod
    3. On Prod ssis server, there is the same table [dbo].[SSIS Configurations]  on SSIS_COnfig db which stores all configurations
    once ssis pkg has been deployed using deployment manifest, it runs without errors as all production db connection
    will be updated manually in the table [dbo].[SSIS Configurations] 
    Our production env is unique as it's completely locked down and the only way to connect is through remote in session. 
    At this moment, I am maintaining three [dbo].[SSIS Configurations]  tables : on my local machine, on SSIS dev server and on SSIS prod server. 
    This works fine so far as I am the sole developer... Soon, we will have more developers joined to develop ssis package .
    I am wondering if there is anyway to cut the table maintained on my local machine and only use ones on dev server and prod server ? 
    I've tried using the table on dev server to disperse connectionstrings, it works file on dev env.  However, when I deployed to product server,
    since there is no sql connection between dev and prod, the configuration information can not be retrieved and theirfore package is failed.
    Any ideas on how to move packages from local to dev to prod env.? 
     Thanks
     Hui
    --Currently using Reporting Service 2000; Visual Studio .NET 2003; Visual Source Safe SSIS 2008 SSAS 2008, SVN --

    Thanks Nearby BI guy. Am I correct  that  in your SSIS packages, there is only one connection manager which gets ConnectionStr  populated from package configurations which is .xmlconfig
    file and  you then use expressions to populate  connectionStrs of other connection managers through the ssisconfiguration tables? 
    Also for the one on Production environment, the contents of .xmlconfig has to be manually
    changed in order to match the one on production env.
    Is that correct?
    I am thinking about using environment variables to point to the Config Database on each
    local/dev/prod environment, but some environments may have strict policy on the usage of environment variables.
     thanks
     Hui
    --Currently using Reporting Service 2000; Visual Studio .NET 2003; Visual Source Safe SSIS 2008 SSAS 2008, SVN --

  • How can i copy a dbx executable to other machine to run without installion

    How can i copy a dbx executable to other machine to run without installion whole workshop
    packet??? how to generate a configuration for dbx alone???
    thanks

    Hi, thanks for you help.
    actually, I have once copied dbx to other machine. certainlly, it needs a license. But when I copied
    a license file from the directory /opt/SUNWspro/license-dir/ of machine that installed Workshop
    to another machine that i want to run dbx. dbx starts correctly. but when i type
    $ dbx ipCentrex
    it prints following message:
    dbx: warning: cannot find global initialization file: dbxrc
    /opt/wacos/./.dbxrc[1]: syntax error
    dbx: installation problem, can't find help file: ./SUNW_SPRO_Dbx_help.info
    _find_executable: not found
    To suppress this message, add the following line to your .dbxrc file:
    dbxenv suppress_startup_message 6.2
    Reading ipCentrex
    dbx: warning: setuid program exec()ed. Reattaching
    There might be too many LWP's in this process.
    See `help dbxenv' under mt_scalable.
    dbx: Cannot open lwpstatus.
    dbx: warning: process initialization failed
    dbx: warning: can't find file "/opt/wacos/server/feature_server/bin/obj/ipCentre
    x/ipcentrex_main.o"
    dbx: warning: see `help finding-files'
    when it says that has errors in .dbxrc file, I can remove this file. But the critical error is why it says
    too mamy LWP's in this process? when I debug it at a machine that installed workshop, this error not occurs.
    anyone have answer?

  • Integrating Apahce HTTP server with Oracle Entitlement Server

    Hi,
    In our project we are trying to protect a applicaiton via Oracle entitlement server. And the login page for the same is hosted on the Apache server. But we are facing issue with the Log In page.
    My apache is installed int he c:\apache folder.
    The ssm folder for apache is c:\bea\ales32-ssm\apache-ssm\instance\asm1\config
    the wles_module is at c:\bea\ales32-ssm\apache-ssm\lib\mod_wles.dll
    I have added the follwoing lines in my httpd.conf file
    LoadModule wles_module c:\bea\ales32-ssm\apache-ssm\lib\mod_wles.dll
    <IfModule mod_wles.cpp>
    WLESConfigDir c:\bea\ales32-ssm\apache-ssm\instance\asm1\config
    </IfModule>
    But while access the Apache home page I am gettign the error saying -
    [Mon Mar 02 17:50:46 2009] [error] Unable to get HTTPServer instance, please check configuration.
    [Mon Mar 02 17:50:46 2009] [error] WLESConfigDir=c:\\bea\\ales32-ssm\\apache-ssm\\instance\\asm1\\config
    Please let me knwo if I am missing any.

    I am trying to access the URL -
    http://<servername>:8080/test/foo.html where test/foo.html is located at c:\apache\apache2 (the docroot of Apache)
    The Default.properties is as follow -
    # Default policydomain settings for this runtime. Each policydomain can override these settings by creating their own
    # configuration file named after the policydomain - if the policydomain is named "mydomain" then it's properties is named
    # "mydomain.properties"
    # All of these settings persist until the server which uses this runtime is shut down and restarted (loaded once on startup)
    ### Authentication settings
    # Order in which authentication methods are valued. First mechanism takes precedence over the latter. Valid values are
    # FORM - authenticate the user by collecting credentials (asking the user questions)
    authentication.precedence=FORM
    authentication.initialForm=/test/NamePasswordForm.html
    authentication.nameCallback[]=username:/test/NamePasswordForm.html
    authentication.passwordCallback[]=password:/test/NamePasswordForm.html
    authentication.onatnfailure=/test/atnfailure.html
    authentication.onatzfailure=/test/atzfailure.html
    authentication.default.resultform=/test/loggedin.html
    ### Single-sign on domain. Must include at least 2 dots. For example: .bea.com
    authentication.cookiedomain=.bea.com
    ### SAML Identity Transfer settings
    # If this is set to true, SAML identity transfer is accepted in the post handler
    saml.incoming.enable=false
    # The URL that consumes SAML Browser/POST data -- SAMLIn.html is a sample
    saml.incoming.url=<SAMLAssertionConsumerServiceURL>/test/SAMLIn.html
    # If this is set to true, SAML SSIs are enabled, allowing for outgoing identity transfer via the SAML template
    saml.outgoing.enable=false
    ### Role Mapping Settings
    # Any value other than "true" is false and disables role mapping
    rolemapping.enable=false
    # The name of the variable injected into the request stream which contains a comma seperated list of roles
    rolemapping.name=WLES_ROLES
    ### Credential Mapping Settings
    # Any value of than "true" is false and disables credential mapping
    credentialmapping.enable=false
    # A comma seperated list of credentials to query the runtime for on each request. If the examples
    # exist they will be added into the request stream and made availble to subsequant cgis
    # If the credentials don't exist or are not defined no credentials are injected into the request stream
    credentialmapping.credtypes=weblogic.UserPassword
    # The name prepended to the credential before it is added to the request stream. A number may be added to make the name
    # unique - i.e. CRED1=B64(SAMLResponse) CRED2=DBPassword etc
    credentialmapping.prefix=CRED
    ### Session settings
    # Session inactivity timeout in seconds
    session.inactivity.timeout=600
    # Session absolute timeout in seconds - causing the user to re-authenticate - zero means never
    session.absolute.timeout=86400
    # Session logoff URL
    session.forcedlogoffURL=/test/logoff.html
    # Session cookie prefix - used to create a unique session cookie - any string including null will do - a unique code is attached to the prefix
    session.cookie.name=ALESIdentityAssertion
    # Session cookie prefix - used to create a session cookie for non sensitive data
    session.misc.cookie.name=WLES_MISC
    # The SSM WS Configuration ID
    ssmconfig.default=asm1
    ### Naming Authorities
    namingauthority.resource=ARME_RESOURCE_AUTHORITY
    namingauthority.action=ARME_ACTION_AUTHORITY
    namingauthority.audit=AUDITBASE
    webservice.registry.url=http://192.168.179.130:9000/ServiceRegistry
    ### SSL Settings
    # Directory that contains ssl PEM and configuration files (such as wles-ssm.pem).
    # Use forward slashes (/) even on Windows. For example: c:/path1/path2/ssl
    ssl.directory=C:/bea/ales32-ssm/apache-ssm/instance/asm1/ssl
    ### Debug Settings
    # The log level (Possible values are error or debug)
    log.level=error

  • SQL Server Configuration Tools Disappeared

    I know I used to have Server Configuration Tools, but when I just looked for it, it seems like it has disappeared.  I'm looking at this.
    I'm getting this login error.
    I used to be able to reset SQL Server using the Configuration Tools, but now I can't reset it, and I can't login.
    Please help!!
    Knowledge is the only thing that I can give you, and still retain, and we are both better off for it.

    Hello,
    When you connect using SSMS ( SQL server management studio) in server name give like 
    hostname\mssqlserver--if it is default instance
    hostanme\instancename if it is named instance
    hostname\SQLEXPRESS is it is express edition
    now go to run tyoe services.msc look for SQL server services check if it starte dor not if not please start in try connection using above information
    Please mark this reply as the answer or vote as helpful, as appropriate, to make it useful for other readers

  • OS X 10.4.11 Server - configured name and reverse DNS do not match / DNS

    Hi all,
    I have looked for similar posts but all seem to have different scenarios, hoping to get an answer from someone more experienced than myself before I do anything silly.
    Help much appreciated!
    Scenario:
    We run a 10.4.11 OS X Server on an XServe, hosted at an ISP. ISP provides all DNS services, incl. the reversed DNS entry.
    I am currently only running the following services (based on the display in ServerAdmin):
    AFP
    Firewall
    iChat
    Mail
    QuickTimeStreaming
    Web
    All others (incl. DNS) are grayed out. (As ISP instructed us not to add a DNS service on our box, that's "normal" according to my experiences with dedicated /co-location server hosting).
    We never used changeip after the initial setup, meaning the server's
    Current Hostname = somename.local and
    DNS Hostname = mail.ourdomainname.net
    So in system.log I find this re-occuring entry:
    Jul 8 11:41:22 somename servermgrd: servermgr_dns: configured name and reverse DNS name do not match (somename.local != mail.ourdomainname.net), various services may not function properly - use changeip to repair and/or correct DNS
    Finally, my question:
    As Mail and Web services etc. are currently running OK from what I can tell,
    1) do I HAVE to change this at all?
    2) Would it be much better / why?
    3) Could I change this using the following command
    (111.11.111.1 indicating the server's IP address)
    changeip 111.11.111.1 111.11.111.1 somename.local mail.ourdomainname.net
    4) without running a DNS server on the machine, i.e. DNS service is not required for this to work?
    5) obviously I want to be able to use Server Admin after I issue this command...
    6) can I fall back easily in case this would screw it up, or is there no risk whatsoever doing this in my case?
    THANK YOU so much for any help!

    Hi Jonas
    If port 443 is already being used on the same box as KMS then it will complain and probably not start the service? I've seen this with LDAP port 636. This is when Kerio is installed on a server configured as an OD Master. Clearly the port can't be used by both servers.
    It might be easier to change the port your sites are currently using to something else? Although don't do anything yet. Pose the question to Kerio Support and see what advice they offer.
    Yes moving the mail to a local folder on the mail client will do it.
    Is Kerio going on the same box? If its a different box (presumably different IP address?) Then what you can do is to port forward to the new server's IP address instead of disabling it. This way while you are bringing the new server on line users can still send mail right up until the time you give instructions on changing their inbound/outbound mail server details. Of course they won't be able to receive but if you time it right they may not even get an error message? Depends on what their schedules are.
    If it was me I would choose IMAP every time. As the mail admin you have full control and a central location for easy backup. KMS has a built in archiving feature that makes this a simple process. This is an easier option than going round individual client machines and making sure mail held locally in POP accounts are backed up. Besides there is always someone who falls through the loop and I'm not taking into account drive failures. It makes good sense anyway as there is talk of legislation being introduced to make this a requirement for businesses who run their own mail servers. This is certainly true for certain parts of the US and what usually happens there is generally taken up in the UK and most parts of Europe.
    Kerio's WebMail Client means users don't even have to have their own computer. Just as long as they have access to one that has access to the internet they can send/receive mail. No need for dedicated mail applications such as Apple Mail, Thunderbird, Entourage etc. How mail is uses remains consistent for all users.
    Yes. I did this not so long ago with Leopard's built in Mail Server. I sent an e-mail defining a time when no inbound mail would be received. Disabled port forwarding for SMTP port 25 and approx 30 minutes after that another mail stating no outbound mail should be sent. Once everything was swopped over (we were changing from a G4 10.4 server to a G5 10.5 Server) port 25 was enabled, new server brought online and everyone was mailing again with no appreciable downtime.
    These boxes were to have the same IP address hence the slightly different approach.
    Does this help?
    Tony

  • BP &C upgrade to version 7 failing, server configuration file missing.

    Anyone,
    When I run the version 7 Startup.exe, the only options are to Prepare or Other.  I think the server configuration file is missing.  Is there a way to create/recreate one without using the insight export feature (that appset is not installed or enabled).
    Thanks in advance.

    Your flame is not at all helpful. After digging into the problem for a couple hours I was able to discover EXACTLY what had happened.
    Thank you
    For everyone else, here is what the upgrade has done:
    Under the "iTunes\iTunes Music" folder there used to be a "Downloads" folder that was deleted by the 7.0 upgrade.
    It looks like this folder was used for the recovery of failed downloads, but the previous versions of iTunes were not managing this folder very well. There were several folders containing just 1 media file. Most of the media files were 0 bytes long, except for the 2 files that I had lost during the upgrade. Apparently, iTunes was using these 2 files. The upgrade to version 7.0 caused this folder to be deleted; thus the links were broken. Anyone else who had a failed download, in particular a video download, may have the same issue.

  • Oracle Entitlements Server - Training/Education Question

    Is developer or administrator training available for Oracle Entitlements Server (formerly AquaLogic Enterprise Security)?
    I was unable to find any training for this product.
    If training is not available for this product then is there a timeframe when it would be available?
    I did find a 1 day policy modeling course. I was more interested on product installation, administration, configuration and application integration (e.g. usage from WebLogic Portal or ALSB or ALDSP) tasks.
    Thanks
    Edited by: user651936 on Sep 28, 2008 11:00 AM

    Martin , i have some question about the product (you have my private contact if you can't answer with too much details)
    Can we share oracle database with OES and other product like IDM or OIM? We have some issues with OIM and IDM in the same database we can't install in the same database because there are some requirement about NLS_LENGTH_SEMANTICS (OIM char, IDM byte)
    About integration with OAM, is there some out of the box connector? Can we use only OES without OAM?
    About provisioning users in OES repository, is there some integration out of the box with OIM?
    About platform and application integration which is your experience about heterogenous enviroment (jboss, tomcat, oas, bea with and without apache in the front end, linux, solaris, and windows) and application already deployed in customer enviroment?
    Regards

  • Server Configuration Error

    I'm setting up 10.4.5 Server for the first time, and I've managed to get all of my services running correctly except the mail server. I've searched the discussions and tried some of the suggestions without success.
    Briefly, I cannot receive mail from outside of my network. I can send mail out, I can send and receive mail within the network, the email client authenticates and checks the accounts, and I can access everything via WebMail (thanks to the suggestions here). Multiple tests from DNStuff haven't been helpful to me.
    I'm adding the postconf -n results as well as a rejected email and some log entries.
    powermacg4:/ erick$ postconf -n
    command_directory = /usr/sbin
    config_directory = /etc/postfix
    content_filter = smtp-amavis:[127.0.0.1]:10024
    daemon_directory = /usr/libexec/postfix
    debugpeerlevel = 2
    enableserveroptions = yes
    html_directory = no
    inet_interfaces = all
    localrecipientmaps =
    luser_relay = postmaster
    mail_owner = postfix
    mailboxsizelimit = 0
    mailbox_transport = cyrus
    mailq_path = /usr/bin/mailq
    manpage_directory = /usr/share/man
    mapsrbldomains =
    messagesizelimit = 10485760
    mydestination = $myhostname,localhost.$mydomain,localhost,kaisernetwork.us
    mydomain = kaisernetwork.us
    mydomain_fallback = localhost
    myhostname = mail.kaisernetwork.us
    mynetworks = 127.0.0.1/32,66.93.12.106,192.168.225.192/26,17.250.248.44
    mynetworks_style = host
    newaliases_path = /usr/bin/newaliases
    queue_directory = /private/var/spool/postfix
    readme_directory = /usr/share/doc/postfix
    sample_directory = /usr/share/doc/postfix/examples
    sendmail_path = /usr/sbin/sendmail
    setgid_group = postdrop
    smtpdclientrestrictions = permit_mynetworks sbl-xbl.spamhaus.org rejectrblclient dnsbl.sorbs.net rejectrblclient sbl-xbl.spamhaus.org permit
    smtpdpw_server_securityoptions = cram-md5,login
    smtpdrecipientrestrictions = permitsasl_authenticated,permit_mynetworks,reject_unauthdestination,permit
    smtpdsasl_authenable = yes
    smtpdtls_certfile = /etc/certificates/Server.crt
    smtpdtls_keyfile = /etc/certificates/Server.key
    smtpduse_pwserver = yes
    smtpdusetls = yes
    unknownlocal_recipient_rejectcode = 550
    Return-path:
    Received: from mac.com (smtpin09-en2 [10.13.10.79])
    by ms22.mac.com (iPlanet Messaging Server 5.2 HotFix 2.08 (built Sep 22 2005))
    with ESMTP id <[email protected]> for [email protected]; Sun,
    26 Mar 2006 14:05:40 -0800 (PST)
    Received: from smtpout.mac.com (smtpout05-en1.mac.com [17.250.248.87])
    by mac.com (Xserve/smtpin09/MantshX 4.0) with ESMTP id k2QM5cEd014984 for
    <[email protected]>; Sun, 26 Mar 2006 14:05:40 -0800 (PST)
    Received: from localhost (localhost)
    by smtpout.mac.com (Xserve/8.12.11/smtpout05/MantshX 4.0)
    id k2QM40Ya000383; Sun, 26 Mar 2006 14:05:40 -0800 (PST)
    Date: Sun, 26 Mar 2006 14:05:40 -0800 (PST)
    From: Mail Delivery Subsystem <[email protected]>
    Subject: Warning: could not send message for past 4 hours
    To: [email protected]
    Message-id: <[email protected]>
    Auto-submitted: auto-generated (warning-timeout)
    MIME-version: 1.0
    Content-type: multipart/report;
    boundary="k2QM40Ya000383.1143410740/smtpout.mac.com";
    report-type=delivery-status
    Original-recipient: rfc822;[email protected]
    This is a MIME-encapsulated message
    --k2QM40Ya000383.1143410740/smtpout.mac.com
    ** THIS IS A WARNING MESSAGE ONLY **
    ** YOU DO NOT NEED TO RESEND YOUR MESSAGE **
    The original message was received at Sun, 26 Mar 2006 09:34:26 -0800 (PST)
    from smtpin03-en2 [10.13.10.148]
    ----- Transcript of session follows -----
    ... while talking to mail.kaisernetwork.us.:
    DATA
    <<< 451 Server configuration error
    <[email protected]>... Deferred: 451 Server configuration error
    <<< 554 Error: no valid recipients
    Warning: message still undelivered after 4 hours
    Will keep trying until message is 4 days old
    --k2QM40Ya000383.1143410740/smtpout.mac.com
    Content-Type: message/delivery-status
    Reporting-MTA: dns; smtpout.mac.com
    Arrival-Date: Sun, 26 Mar 2006 09:34:26 -0800 (PST)
    Final-Recipient: RFC822; [email protected]
    Action: delayed
    Status: 4.3.0
    Remote-MTA: DNS; mail.kaisernetwork.us
    Diagnostic-Code: SMTP; 451 Server configuration error
    Last-Attempt-Date: Sun, 26 Mar 2006 14:05:40 -0800 (PST)
    --k2QM40Ya000383.1143410740/smtpout.mac.com
    Content-Type: message/rfc822
    Return-Path: <[email protected]>
    Received: from mac.com (smtpin03-en2 [10.13.10.148])
    by smtpout.mac.com (Xserve/8.12.11/smtpout05/MantshX 4.0) with ESMTP id k2QHYQq5016724
    for <[email protected]>; Sun, 26 Mar 2006 09:34:26 -0800 (PST)
    Received: from [192.168.225.195] (dsl093-012-143.cle1.dsl.speakeasy.net [66.93.12.143])
    (authenticated bits=0)
    by mac.com (Xserve/smtpin03/MantshX 4.0) with ESMTP id k2QHYM4o005075
    (version=TLSv1/SSLv3 cipher=DES-CBC3-SHA bits=168 verify=NO)
    for <[email protected]>; Sun, 26 Mar 2006 09:34:25 -0800 (PST)
    User-Agent: Microsoft-Entourage/11.2.3.060209
    Date: Sun, 26 Mar 2006 12:34:22 -0500
    Subject: Test
    From: Eric Kaiser <[email protected]>
    To: <[email protected]>
    Message-ID: <C04C3ACE.746D%[email protected]>
    Thread-Topic: Test
    Thread-Index: AcZQ+4Szwz53xLzuEdqN/QAKlbRzag==
    Mime-version: 1.0
    Content-type: multipart/alternative;
    boundary="B32262212662452496"
    This message is in MIME format. Since your mail reader does not understand
    this format, some or all of this message may not be legible.
    --B32262212662452496
    Content-type: text/plain;
    charset="US-ASCII"
    Content-transfer-encoding: 7bit
    Test
    --k2QM40Ya000383.1143410740/smtpout.mac.com--
    Mar 26 18:36:12 powermacg4 postfix/smtpd[9633]: NOQUEUE: reject: RCPT from test.dnsstuff.com[66.36.241.109]: 451 Server configuration error; from= to=<postmaster@[66.93.12.106]> proto=SMTP helo=<test.DNSreport.com>
    Mar 26 18:36:12 powermacg4 postfix/smtpd[9633]: warning: unknown smtpd restriction: "sbl-xbl.spamhaus.org"
    Mar 26 18:36:12 powermacg4 postfix/smtpd[9633]: NOQUEUE: reject: RCPT from test.dnsstuff.com[66.36.241.109]: 451 Server configuration error; from= to=<[email protected]m> proto=SMTP helo=<test.DNSreport.com>
    Mar 26 18:36:12 powermacg4 postfix/cleanup[9635]: B8AD84507A: message-id=<[email protected]>
    Mar 26 18:36:12 powermacg4 postfix/smtpd[9633]: disconnect from test.dnsstuff.com[66.36.241.109]
    Mar 26 18:36:12 powermacg4 postfix/qmgr[8260]: B8AD84507A: from=<[email protected]>, size=982, nrcpt=1 (queue active)
    Mar 26 18:36:12 powermacg4 postfix/local[9636]: B8AD84507A: to=<[email protected]>, orig_to=<postmaster>, relay=local, delay=0, status=sent (delivered to file: /dev/null)
    Mar 26 18:36:12 powermacg4 postfix/qmgr[8260]: B8AD84507A: removed
    Mar 26 18:44:50 powermacg4 postfix/smtpd[9746]: connect from smtpout.mac.com[17.250.248.97]
    Mar 26 18:44:50 powermacg4 postfix/smtpd[9746]: warning: unknown smtpd restriction: "sbl-xbl.spamhaus.org"
    Mar 26 18:44:50 powermacg4 postfix/smtpd[9746]: NOQUEUE: reject: RCPT from smtpout.mac.com[17.250.248.97]: 451 Server configuration error; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<smtpout.mac.com>
    Mar 26 18:45:08 powermacg4 postfix/cleanup[9751]: 0ADFF45096: message-id=<[email protected]>
    Mar 26 18:45:08 powermacg4 postfix/smtpd[9746]: disconnect from smtpout.mac.com[17.250.248.97]
    Mar 26 18:45:08 powermacg4 postfix/qmgr[8260]: 0ADFF45096: from=<[email protected]>, size=935, nrcpt=1 (queue active)
    Mar 26 18:45:08 powermacg4 postfix/local[9752]: 0ADFF45096: to=<[email protected]>, orig_to=<postmaster>, relay=local, delay=0, status=sent (delivered to file: /dev/null)
    Mar 26 18:45:08 powermacg4 postfix/qmgr[8260]: 0ADFF45096: removed
    Mar 26 18:50:44 powermacg4 postfix/smtpd[9828]: connect from mail2.sea5.speakeasy.net[69.17.117.4]
    Mar 26 18:50:45 powermacg4 postfix/smtpd[9828]: warning: unknown smtpd restriction: "sbl-xbl.spamhaus.org"
    Mar 26 18:50:45 powermacg4 postfix/smtpd[9828]: NOQUEUE: reject: RCPT from mail2.sea5.speakeasy.net[69.17.117.4]: 451 Server configuration error; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<mail2.sea5.speakeasy.net>
    Mar 26 18:50:45 powermacg4 postfix/cleanup[9830]: 32EC9450A8: message-id=<[email protected]>
    Mar 26 18:50:45 powermacg4 postfix/smtpd[9828]: disconnect from mail2.sea5.speakeasy.net[69.17.117.4]
    Mar 26 18:50:45 powermacg4 postfix/qmgr[8260]: 32EC9450A8: from=<[email protected]>, size=1127, nrcpt=1 (queue active)
    Mar 26 18:50:45 powermacg4 postfix/local[9831]: 32EC9450A8: to=<[email protected]>, orig_to=<postmaster>, relay=local, delay=0, status=sent (delivered to file: /dev/null)
    Mar 26 18:50:45 powermacg4 postfix/qmgr[8260]: 32EC9450A8: removed
    Mar 26 19:01:40 powermacg4 postfix/postfix-script: refreshing the Postfix mail system
    Mar 26 19:01:40 powermacg4 postfix/master[8258]: reload configuration
    Mar 26 19:02:01 powermacg4 postfix/smtpd[9970]: connect from test.dnsstuff.com[66.36.241.109]
    Mar 26 19:02:02 powermacg4 postfix/smtpd[9970]: warning: unknown smtpd restriction: "sbl-xbl.spamhaus.org"
    Mar 26 19:02:02 powermacg4 postfix/smtpd[9970]: NOQUEUE: reject: RCPT from test.dnsstuff.com[66.36.241.109]: 451 Server configuration error; from=<[email protected]> to=<[email protected]> proto=SMTP helo=<test.DNSreport.com>
    Mar 26 19:02:02 powermacg4 postfix/smtpd[9970]: lost connection after RCPT from test.dnsstuff.com[66.36.241.109]
    Mar 26 19:02:02 powermacg4 postfix/cleanup[9972]: 4E106450DE: message-id=<[email protected]>
    Mar 26 19:02:02 powermacg4 postfix/smtpd[9970]: disconnect from test.dnsstuff.com[66.36.241.109]
    Mar 26 19:02:02 powermacg4 postfix/qmgr[9956]: 4E106450DE: from=<[email protected]>, size=741, nrcpt=1 (queue active)
    Mar 26 19:02:02 powermacg4 postfix/local[9973]: 4E106450DE: to=<[email protected]>, orig_to=<postmaster>, relay=local, delay=0, status=sent (delivered to file: /dev/null)
    Mar 26 19:02:02 powermacg4 postfix/qmgr[9956]: 4E106450DE: removed
    Mar 26 19:04:48 powermacg4 postfix/smtpd[10003]: connect from smtpout.mac.com[17.250.248.97]
    Mar 26 19:04:48 powermacg4 postfix/smtpd[10003]: warning: unknown smtpd restriction: "sbl-xbl.spamhaus.org"
    Mar 26 19:04:48 powermacg4 postfix/smtpd[10003]: NOQUEUE: reject: RCPT from smtpout.mac.com[17.250.248.97]: 451 Server configuration error; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<smtpout.mac.com>
    Mar 26 19:04:54 powermacg4 postfix/cleanup[10007]: 1868B450E6: message-id=<[email protected]>
    Mar 26 19:04:54 powermacg4 postfix/smtpd[10003]: disconnect from smtpout.mac.com[17.250.248.97]
    Mar 26 19:04:54 powermacg4 postfix/qmgr[9956]: 1868B450E6: from=<[email protected]>, size=935, nrcpt=1 (queue active)
    Mar 26 19:04:54 powermacg4 postfix/local[10008]: 1868B450E6: to=<[email protected]>, orig_to=<postmaster>, relay=local, delay=0, status=sent (delivered to file: /dev/null)
    Mar 26 19:04:54 powermacg4 postfix/qmgr[9956]: 1868B450E6: removed
    I know there is a lot of info, and I greatly appreciate the time and effort of anybody willing to look at this. I'm trying to be complete with my first post.
    Thanks in advance.
    Eric
    PowerMac G5 2GHz DP   Mac OS X (10.4.5)  

    Well, spamhaus is listed twice, the first time incorrectly as noted.
    You can use the "mapsrbldomains = " syntax, but your Postfix logs themselves will tell you this is now deprecated.
    Agreed though: a good idea to separate the rbl options on their own line.
    smtpdclientrestrictions = permit_mynetworks
    rejectrblclient sbl-xbl.spamhaus.org rejectrblclient dnsbl.sorbs.net
    If you indent with whitespace then the line will not be interpreted as a new restriction but part of the prior one.
    So you could even format it as:
    smtpdclientrestrictions = permit_mynetworks
    rejectrblclient sbl-xbl.spamhaus.org
    rejectrblclient dnsbl.sorbs.net
    If you're serious about taking full advantage of the anti-UCE abilities of Postfix, I suggest reading at http://www.postfix.org/docs.html
    starting at UCE/Virus. Ignore linux and other OS-specific tips, or proceed with caution.
    http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt
    http://www.mengwong.com/misc/postfix-uce-guide.txt
    http://www.mengwong.com/misc/postfix-uce-guide.txt
    http://sbserv.stahl.bau.tu-bs.de/~hildeb/postfix/
    Of course, use at your own risk. But if used judiciously, also your benefit. Backup all config files before editing.

  • About DPS (mutifolio + Entitlement server) App and AppStore approuval

    Hi,
    We are building a Mutlifolio+Entitlement application to be distributed for free throught the Apple AppStore.
    When getting the app, customers without user/password won't be able to see any folios until they get appropriate credentials.
    In this case the folios are to be published as "retail" in order to be managed by the entitlement server (right?)
    Do I have to create inApp purchase in this application even if the folios to be shared are free ?
    thanks

    Only create in-app purchase for retail content and not for free content but entitlement only applies to retail folios. Once customer with sign in with their credentials they can download entitled content.
    You also need to make these available for in-app purchase, so also configure the in-app purchase product IDs within iTunesConnect.

Maybe you are looking for

  • How do you type in Adobe forms

    How do you type in Adobe forms without converting them. Several times I was on an Adobe page where one could click on a tab to do just that and now I cannot remember how I got there. Please help if you can. [contact information removed by moderator f

  • Error"Max no of gateways exceeded (100)

    Hi All, We have two apps servers on our sap production system. I couldn't  login in one of the app server through SM51 .when I tested the Internal RFC in SM59 I got this error-: Logon     Connection Error Error Details     Error when opening an RFC c

  • Alternative ways to use NAS with FCPX

    So here is my dilemma, I would like to use my NAS to have an "archived" library of all my video files that I've worked on in FCPX. Thing is I've tried opening the library file directly from my NAS, but FCPX will not recognize it.  It give me an error

  • How to extract a generic Datasource (Typ: Hier) in SAP 7.0?

    Hi at all, could me anyone help ? I am very grateful for any response.

  • Query on HR_Maintain_Masterdata

    Hi All, I am developed an RFC which uses FM HR_MAINTAIN_MASTERDATA to update infotypes 0000 , 0001 and 0041 . The action type is termination. Now for eg , I get error while maintaining record in 0041 , is there any way that the IT 0000 and IT 0001 ca