Filter based group - viewing contents

Hi,
I'm trying to figure out how to see if a filter defined group on a Sun One 5.2 Directory server is getting the objects required.
The filter group was defined by someone else. I've got several LDAP search tools available to me, but can't get results that I expect.
The group is defined as:
objectClass: top
objectClass: groupofuniquenames
objectClass: groupofurls
memberURL: ldap:///ou=People,dc=app,dc=sample,dc=com??sub?(&(objectclass=person)(uid=*)(ntuserdomaindi=*sample*))
cn=Employees
The group is defined in the tree as:
cn=Employees,ou=Groups,dc=app,dc=sample,dc=com
My expectation, using ldp, ldapsearch, or Softerra's LDAP Browser, is that when I attempt to open the tree looking at the 'Employees' group, I would see a list of the objects that the filter selected. I Don't see any thing.
Am I looking this in a WRONG way, or is my query not working?
TIA, Scott

That's correct, senderbase reputation filtering occurs very early on. At the IP/TCP level of a connection. To get more info on this, check out the user guide on HAT Overview.
Since senderbase reputation filtering occurs early on, even before the mail-from/rcpt-to/subject information are obtained, it is too late to enforce LDAP settings.
However, what you can do with ldap is verify if the sender or recipient are a member of a certain group and then disable anti-spam/anti-virus/content filtering from their email. You would use ldap-from-group in conjunction with incoming or outgoing mail policies.
To make an email immune from senderbase reputation filtering, you would need to know the IP/hostname/partial hostname of where their message is coming from and add that info to the whitelist sendergroup in the HAT overview.
Is it possible to completely disable the reputation filter based on whether the recipient is in a certain LDAP group?
I'm currently thinking no as LDAP groups are assigned a message filter and by this point in the pipeline the reputation filter has already been applied.
Perhaps someone more experienced can confirm/disprove this for me?

Similar Messages

Create a group based on file contents

Hello!
I'm investigating options to create a dynamic group based on periodic check of file content. I have a Shavlik updater which is patching custom groups based on file contents. I would like to create a dynamic group which should return all Windows Computer
classes that are found from this file. Anything close to sensible was found at https://www.youtube.com/watch?v=gxASdzHFTOU where author created an attribute of based on "SELECT * FROM CIM_DataFile" and then created a group out from it - but it checks
file existence, not content, would launch against all Windows Clients (and we have 1000+ of these monitored) - certainly not a valid way.
Is there any way I could do that in a simple, straightforward way?
Thanks in advance

Ok, I got it. Have you tried modifying the group membership with powershell?
Modifying Explicit Group Membership in SCOM 2012 with PowerShell
http://blogs.msdn.com/b/rslaten/archive/2013/06/27/modifying-explicit-group-membership-in-scom-2012-with-powershell.aspx
Automate your group creation with Powershell
http://blog.coretech.dk/kra/automate-your-group-creation-with-powershell/
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

How to create LDAP filter-based rule to check Group membership in OAM

Hi folks,
I'm having hard time creating an authorization rule to verify ldap group membership. I've followed "Configure User Authorization" article from Oracle website (http://download.oracle.com/docs/cd/E10761_01/doc/oam.1014/b32420/v2authz.htm#BABHBFEJI) and created an Authorization scheme w ldap_attribute_name as User Parameter and ruleExpression as Required Parameter. Then, inside my policy I created an Authorization Rule based on my Authz scheme w Allow Access attrib filter-based Rule which looks like this:
ldap://ldap_server:port/ou=People,o=Company,c=US??sub?(ldap_attribute_name=ldap_attribute_value)
This works fine.
Now, I've added another filter-based rule under the same Authz Rule/Allow Access:
ldap://ldap_server:port/ou=Groups,o=Company,c=US?uniqueMember?sub?(&(objectClass=groupOfUniqueNames)(cn=ldap_group_name))
While query looks somewhat correct and works as a command-line argument (slightly modified format), it does not work in OAM (meaning people w out req-d group membership can still login).
Can someone steer me to the right direction as to what do I need to do:
1. Change/fix the ldap query
2. Create new Authz scheme with uniqueMember userParameter; create new Authz rule based on new authz scheme; create new Allow Access filter rule with the ldap query I have
3. Do smth else
Any help is greatly appreciated.
Thank you, Roman

You can create two authorization rules
First for user with attribute
and second for group
and then in authorization expression you can have AND of these two.
Regarding your query...
First ... If your requirement is to give access to all the members of a particular group then you don't require any ldap filters
All you have to do is in the authorization rule -> Allow access -> Select People (here you have to select group so click on the group tab, its little hard to see but its there in light blue color on dark blue tab) -> select the group you want to give access
Second.. If your requirement is such that you want to give access to a member of a group which has certain attribute lets say group with status active ( In this case you are not aware of the name of the group because user can be a member of any group but you want to give access only to the group with specific attribute.) then you have to write custom authorization plugin.
If the option is second let me know i can give you a solution which will work for a single domain without any effort of developing a major plugin.
Hope this helps,
Sagar

Can Data Links be established between Data sets based on View Objects?

Hi all,
In the BI Publisher Documentation it's given that Datasets based on view object queries do not support Data Links / Group Links. We found out that only way to establish relationship between view object Datasets is to create a view link and then upload it to create a Dataset.
1. Is there any other way to establish relationship between view objects Datasets in DataModel editor itself just as in the case of data sets based on (SQL queries e.t.c.)?
2. If so can View object Datasets be linked to Datasets based on other Datasources?
3. Will the Datalinks for View object Datasets be supported in any of the upcoming releases. Is there any ER logged for this case?
Any insight on the above issues will be really helpful.
Thanks

Enhance the data source with date and time and populate these fields in the user exit using the function module IB_CONVERT_FROM_TIMESTAMP .
OR
You can create Z function module IB_CONVERT_FROM_TIMESTAMP in BW side and write a routine in update rules/transfer rules to populate date and time.
hope this helps ...
Ravi

Out of memory Error while querying SQL Script based Calculation View

Hi All,
I wanted to test the performance of Graphical and SQL Script based Calculation views.
Created Graphical (CA_GRPH) and SQL Script (CA_SQL) Calculation views.
Analytic View (AN_GRPH) for both Calculation views are the same which is Graphical based (90 Attributes and 5 Measures)
In Analytic View data foundation I have a Fact table which has 1.5 Billion records and 9 Dimension Tables –collectively 500 million records (7 Attribute Views). 9 Referential joins with cardinality N:1 and 1 Referential join with cardinality N:N.
I wanted to keep (CA_GRPH) and (CA_SQL) as a base Calculation views and leverage those to create various calculation views (Will be creating different Calc views for respective Business segments)
In order to test this I have created below calc views on top of base calc views.
Graphical Based: Created (CA_GRAPH_XYZ) by having CA_GRPH in projection with 30 Calculated Columns. – This retrieves data in 13 secs
SQL Script Based: Created (CA_GRPH_ABC) by having CA_SQL in projection view with 30 calculated columns – This errors out after 1.50 mins.
Could not execute 'SELECT "COLUMN_A","COLUMN _B"," COLUMN _C"," COLUMN _D", SUM("COLUMN _REVENUE") AS ...' in 1:50.480 minutes .
SAP DBTech JDBC: [2048]: column store error: [2048] column store error: search table error: [1000002] Error executing physical plan: exception 1000002:
ltt/impl/memory.cpp:63
Out of memory ; $size$=1507711; $name$=ihm; $type$=pool; $inuse_count$=170104; $allocated_size$=219215007925
exception 1000002:
Any suggestion / help in fixing this issue will be greatly appreciated.
Regards,
Av

Hi Raj,
Thanks for your time, please find edited snap hot of Analytic View (AN_GRPH) below,
Calculation view(CA_SQL)
        /********* Begin Procedure Script ************/
BEGIN
       var_out =
     SELECT
            "COLUMN_1"
            "COLUMN_2",
            "COLUMN_84",
            "COLUMN_85;",
            SUM("REVN") AS "REVN",
            SUM("MGN") AS "MGN",
            SUM("ORD_QTY") AS "ORD_QTY",
            SUM("SYS_QTY1") AS "SYS_QTY1",
            SUM("SYS_QTY") AS "SYS_QTY"
FROM
      "_SYS_BIC"."XYZ/AN_GRPH"
GROUP BY
            "COLUMN_1"
            "COLUMN_2",
            "COLUMN_84",
            "COLUMN_85";
END
/********* End Procedure Script ************/
Later i have built one more Calculation view(CA_GRPH_ABC) using (CA_SQL)in projection. i have 30 calculated measures in this final calc view. this final calc view is throwing above mentioned error.
Not sure if i can use SQL script based calc view in graphical based calc views?
Regards,
AV

How to open network tab in developer tool and filter based on a value in C# selenium webdriver

Hi,
I am using selenium webdriver in c#, is there any way i can open the network tab of developer tool for the opened page, filter based on a value, and click on the event where i can check the value of the variable
Sample code woulb b helpful
Thanks,
Prahal
if not possible wat is the best way to automate web analytics

Hi Prahal,
Thank you for posting in MSDN forum.
Since you are using Selenium WebDriver which is third-party product, the issue is out of support range of Visual Studio testing forum. I suggest that you can consult your issue on Selenium support:
http://docs.seleniumhq.org/support/ for better response.
Thanks for your understanding.
Best Regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Role-Based CLI Views with AAA method

Hi,
I'm configuring Role-Based CLI Views on a router for limiting access to users.
My criteria:
- There should be a local user account on the router that has the view 'service' attached to it
- If the router is online and can reach the radius server, people in the correct group are assigned the view 'service'
My configuration:
aaa new-model
enable secret 1234
username service view service secret 1234
aaa group server radius my_radius
server-private 10.1.1.1 auth-port 1645 acct-port 1646 timeout 3 retransmit 2 key 0 1234
server-private 10.1.1.2 auth-port 1645 acct-port 1646 timeout 2 retransmit 1 key 0 1234
aaa authorization console
aaa authentication login mgmt group my_radius local
aaa authorization exec mgmt group my_radius local
line con 0
authorization exec mgmt
logging synchronous
login authentication mgmt
line vty 0 4
authorization exec mgmt
logging synchronous
login authentication mgmt
transport input ssh
The ERROR
Now I want to go configure the cli view 'service'...
# enable view
Password: 1234
*Jun 1 08:00:02.991: AAA/AUTHEN/VIEW (0000000D): Pick method list 'mgmt'
*Jun 1 08:00:02.991: RADIUS/ENCODE(0000000D): ask "Password: "
*Jun 1 08:00:02.991: RADIUS/ENCODE(0000000D): send packet; GET_PASSWORD
*Jun 1 08:00:21.011: RADIUS: Received from id 1645/13 10.1.1.1:1645, Access-Reject, len 20
The Questions
Why does the 'enable view' try to pick a method list when you have to supply the enable secret to access the root view?
Can you change this behaviour to always use the enable secret?
The TEMP Solution
If you're logged on to the router via telnet or SSH, the solution or workaround to this issue is:
aaa authentication login VIEW_CONFG local
line vty 0 4
login authentication VIEW_CONFG
Do your configuration of the view and re-configure the line to use the correct (wanted) method of authentication.
Thanks so much for the suggestions
/JZN

hi,
You have the following configured:
aaa authentication login mgmt group my_radius local
aaa authorization exec mgmt group my_radius local
line con 0
authorization exec mgmt
logging synchronous
login authentication mgmt
line vty 0 4
authorization exec mgmt
logging synchronous
login authentication mgmt
transport input ssh
Hence every time you try to login to the console or try the ssh the authentication will head to the radius server because of the following command "login authentication mgmt".
You cannot make it locally. Whatever defined on the method list mgmt first will be taking the precedence.
enable seceret will be locally defined. but you have the following configured:
aaa authorization exec mgmt group my_radius local
line con 0
authorization exec mgmt
line vty 0 4
authorization exec mgmt
Hence exec mode will also be done via radius server.
when you configure:
aaa authentication login VIEW_CONFG local
line vty 0 4
login authentication VIEW_CONFG
You are making the authentication local, hence it is working the way you want.
In short, whatever authentication is defined 1st on the method list will take precendence. the fallback will be checked only if the 1st aaa server is not reachable.
Hope this helps.
Regards,
Anisha
P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.

Datetime filter in Power View

Hello,
I have made a power view report from an ssas cube. Despite the fact that the attribute fulldate (see following image)
has date type on the cube when I choose advanced on the filter it is being treated like string. I would like this to be treated as date (see following image, I apologize for being in Greek)
What should I do?
Thank you very much,
Andreas

Hi Sagar,
Based on my test, it is not support to use custom filter in Power View report. However, powerview provides advanced filter mode to filter our field. Please refer to the following steps:
In Excel, select the Power View tab, click Filters Area.
In the Filters area, click Advanced filter mode.
Then, we can according to our requirement to set the filter conditions.
Please refer to the following screenshot:
There is an article about Filtering in Power View, you can refer to it.
http://office.microsoft.com/en-in/excel-help/filtering-in-power-view-HA104040684.aspx
Regards,
Alisa Tang
If you have any feedback on our support, please click
here.
Alisa Tang
TechNet Community Support

Displaying task in timeline webpart based on view from task list

I have added one custom column in task list called category and created different view based on different values of category.
when I display a view and select show timeline, it display all the task and does not filter the task based on view. Is there any possbilty to achieve this?

Hi Ashish, if you click to modify the view, scroll down to "Style." You'll see the different styles in there, and below those, you'll see "Show timeline above the view." Select that box and the timeline will be included with your view.
cameron rautmann

Can we create Criteria based groups of computers?

Hi Team,
We have imported the computer objects to FIM portal and it has few attributes which can help creating the criteria based group of computers.
But when we tried creating the criteria based security group, we were not able to select any custom object other than Users,Groups in the filter builder.
We have added the computer objects in the Filter permission as well, but no luck.
Any suggestions?
Thanks and Regards, Siva Kumar Balaguru

Hi Siva
you definitely can do so.
You have to modify the RCDC for Group creation. Look for "GroupingCalculatedMembers". within this section you will find a "FilterBuilder" section and here you Change "PermittedObjectTypes" to the list of your object types you
want to be able to include in your Groups.
Henry

OLAP objects based on Views

Hi
I am creating OLAP objects (Dimension and Fact) based on views. Log generated by validation API showing that all objects (dimension, cube and catalog) in catalog are valid. But when I am using Jdev to create presentation based on that it is giving me following error. I am using JDev 9.0.4.0 Build (1419).
oracle.dss.dataSource.common.QueryRuntimeException: BIB-9509 Oracle OLAP did not create cursor.
oracle.express.ExpressServerExceptionError class: OLAPI
Server error descriptions:
DPR: Unable to create server cursor, Generic at TxsOqDefinitionManagerSince9202::crtCurMgrs2
OES: ORA-00979: not a GROUP BY expression
, Generic at TxsRdbSelectStatement:execute()
Can you provide some input on this if something special is required to create catalog based on views? If you can give me sample script or any online resource that I can try in my env it would be helpful.
Thanks in advance.
regards
Prakash

I would recommend posting this on the OLAP forum.
Business Intelligence Beans Product Management Team
Oracle Corporation

Running 10.6.8. Trying to open and view contents of a CD (of an MRI) and getting message 'This program cannot be run in DOS mode' Is there a way? Thanks for the help.

Running 10.6.8. Trying to open and view contents of a CD (of an MRI) and getting message 'This program cannot be run in DOS mode' Is there a way? Thanks for the help.

Go to the support site for the provider of the MRI software.
Sounds like it windows/PC. I have ran across that for the CDs that veterinarians provide for digital x-rays.
I would try on a PC or on yuur Mac with Windows via BootCamp or a virtual machine like VirtualBox

Web Server Filter Based SSO to Non-SAP Apps

Hi,
I am following SAP Note 442401 for configuring the Non-SAP App for Web Server Filter based SSO using SAP Logon Ticket. Also, I have downloaded the 5_0_2_8.zip file.
The Readme doc of this zip file says:
"<b>Changes in Web server filter plugins
The Web server filter plug ins and the Ticket Toolkit now were separated.
See subdirectories for further information:
"C" the Ticket Toolkit
"filter" the Web server filter plug ins
This is the last released version (5.0.2.8) on SAPSERV.
Pleaser refer for newer versions to SAP Service Marketplace (http://service.sap.com/patches)
Technology Components-> SAP SSOEXT -> SAP SSOEXT</b>"
Zip file has two folders named "C" and "filter".
"C" folder has cpp code to varify the ticket.
"Filter" folder has DLLs for the different web servers.
So far so good . Now, what I want to know is that is placing the DLL from the Filter folder onto the respective web server and doing some configs, as per the PDF provided with ZIP file, enough?
Or do I need to do anything else, like writing any class to read and validate the Ticket?
Thanks,
Vivek

See Web Server Filter Based SSO to Non-SAP Apps

Filter Based on other report not working

Hi Gurus,
I am using OBIEE 10g.
I have a Dashboard page in that i have a prompt and 2 reports,(A, B reports). Report B is using the same columns as prompt where as report A not.
Report A has columns which hold the same data as report B, so i thougt to pass the values based on Report B column using the filter based on other report. I am able to complete it succssfuly but Report A is not having amount of data that i was excepting. When i started investigating i found out that the column which i am using in the prompt and report B have values ( NEW, OLD, NULL) report A able to take the values NEW and OLD but the NULL values are not passing to report A. In report B it is taking null value as it has filter as prompted.
Is it any way to have the values (NEW, OLD, NULL) in report A?
Thanks in Advance.
Regards
Ali

Hi Deep,
Thanks for taking time to answer my question.
I have to display null. If i Mask with something then i dont get proper data in report A, couse in the table it is null.
Thanks
Ali

How to create a Filter based on 2 or more columns

Hi Folks,
We have a requirement to filter based on 1 column, 2 columns and 3 columns values to an analysis with measures.
So my question is whether we can acheive this in OBIEE, If so then what would be the best way to implement it.
Thanks,
Vj

Hi Vj,
This we can leverage using BINS,But i have never tried that.
Check this
http://www.onyxtraining.com/blog/bid/92181/Multiple-Conditions-and-Filtering-in-OBIEE
Mark if helps.
Thanks,

Filter based group - viewing contents

Similar Messages

Maybe you are looking for