Forms10g Migration : Sub-Clasising Object Groups again.

While performing the forms10g migration , is it necessary to Subclass the object groups from the referenced forms in the referencing forms again. If so , what for is this necessary.
Please advise.

U dont need to subclass again. However make sure that the form from which u have subclassed is upgraded first.
Rajesh ALex

Similar Messages

Migrate network object group members; risk

       We upgraded to new 5555 hardware and jumped from 8.2 to 9.1 last year. Our objects listing is now a bit messy. I have never run the "Migrate Network Object Group Members" menu option in asdm. I see what it is going to do, I am not sure it really helps me clean old objects, it seems low risk, but when I walk up to execution, there are a lot of changes it wants to make. We always save backup configurations but, if there are "gotchas" I don't want to put the company in that position. What has been the communities, Cisco's experience? Thanks for any feedback. jc

John,
if you feel that is risky, you can always go for plan B.
- you can take closure look at the object groups and decide new object naming convention policy.
- from ASDM or CSM, you can see overlapped or duplicate rules, so you can start with reducing them
- you can see same services used in couple of rules with different service groups.
     - like object-group service WEB-PORTS tcp
                    port-object eq http
                    port-object eq https
             object-group service APPLICATION-PORTS tcp
                    port-object eq http
                    port-object eq https
               object-group service APPS-PORT tcp
                    port-object eq www
                    port-object eq https
- you can replace all these different object-group with one object group. like WEB-PORTS.
- same way you can do excercise for network group as well.
hope this helps.
JD...

Object-group with network-object containing an IP address range

Hello,
Does the ASA treat an object-group with a network-object containing a range of IP addresses as a netmask? For example, I can apply this configuration without the ASA throwing any errors though the configuration calls for a 'net mask':
object-group network test
network-object 192.168.0.0 192.168.63.255
network-object-group mode commands/options:
A.B.C.D Enter an IPv4 network mask
sh run ob id test
object-group network test
network-object 192.168.0.0 192.168.63.255
I found that in the documentation it requires a netmask as oppose to a range. Is this a bug in the code? I am running code version 8.0(5)23 on a 5520. If this is not a bug how does the ASA treat this type of configuration when applied to an access list? When I ran a quick packet trace and denied access from that range it looks like the ASA doesn't read that configuration properly. Thank you.
-John

Hello,
Thank you for your replies. In code version 8.0(5)23, it appears I am able to define a "range" of IP addresses as in:
192.168.0.0 192.168.63.255 as opposed to defining a range with a netmask like 192.168.0.0 255.255.192.0.
With the "range" of IP address applied to the "object-group network test" with sub command "network-object 192.168.0.0 192.168.63.255" the ASA does not pick up on said "range" when this object group is applied to a DENY access list. It only reads it properly when the netmask is attached, which is the correct configuration, as in: "network-object 192.168.0.0 255.255.192.0".
To clarify, I mean range as in 192.168.0.0 - 192.168.63.255.
Hope this helps to understand. I am just curious as to why this is even able to be applied in such a way or if it is a bug in this particular code version? I can also confirm that this can be done in code version 8.4(2). See below snippets of my configuration in the 8.4(2) code version:
access-list 101 line 3 extended deny ip object-group testmask any 0x577f55a8
access-list 101 line 3 extended deny ip 192.168.0.0 192.168.63.255 any (hitcnt=0) 0x0623b0c4
access-list 101 line 4 extended permit tcp any any eq 89 (hitcnt=1) 0x36f1e5cd
Packet trace results in allowing the "range" of IP address:
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: dmztest
output-status: up
output-line-status: up
Action: allow
Now with the "correct" configuration:
access-list 101 line 3 extended deny ip object-group testmask any 0x577f55a8
access-list 101 line 3 extended deny ip 192.168.0.0 255.255.192.0 any (hitcnt=1) 0xa31c6bbd
access-list 101 line 4 extended permit tcp any any eq 89 (hitcnt=1) 0x36f1e5cd
Result:
input-interface: outside
input-status: up
input-line-status: up
output-interface: dmztest
output-status: up
output-line-status: up
Action: drop
Drop-reason: (acl-drop) Flow is denied by configured rule
Thank you.
-John

Breaking Subclass/Removing Object Group/Without loss of code for child form

Hi all..
This is regarding Forms 10g (breaking inheritance)
I have a base form as well as client form.
The child form is having some properties as common to the base form. so child form is having sub class(inheritance) from the base class with the help of Object Group. This is the exiting setup
Now, client wants the same information as child form with out link with base form.
i.e., they want to remove the Object Group with out distrubing the child form.
Finally, they want the child form as independant from base form. i.e., child form should not have inheritance from the base form and at the same time they don't want to loss of any code to the child form.
There are 1000's of forms like that are need to re-work.
Is there any tool/script available to do this process of work automatically.
Please provide the necessary deatils and help me regarding this.
Regards
Madhava

You CAN add new items to the subclassed block or change triggers code or even add new triggers. Form Builder won't let you create items in-between existing subclassed items or triggers. So if you need to create a new item, create at the end of subclassed item or trigger...
You can not DELETE items of subclassed block or the block itself if it is subclassed. But you can remove the subclassed object from your child module --- by removing class info from the object group in child module --- but it will also remove all the subclassed child objects.
If you delete or change anything in master object, it will directly affect the subclassed object and you can see the change immediatly in the child modules.
When you drag the master object to child, it asks you if you need to subclass or copy, selecting copy will create a separate copy which you can play with in the child module.
And below is brief help on the matter:
If you don't want all the objects in the subclassed object group, then you might consider either subclassing the desired objects individually, or creating an object group which contains only the desired objects.
Edited by: Zaafran Ahmed on Oct 13, 2010 12:41 PM

ICR 002 - Object Groups and Sets

Hi,
Tcode here is FBCR009.
I need one help on the PROCESS 002 for ICR. In the current system, we have implemented the Object groups and Sub groups as mentioned below:
Object Group - 100
Object Subgroup 100
Object group Sequence      Company Field Company Set   Description                   Partner Field     Partner Set    description
100     1     RACCT     RULE2A     B/S Cash Management     RACCT     RULE2B     B/S Cash Management
100     2     RACCT     RULE3A     B/S ST Interest Bearing     RACCT     RULE3B     B/S ST Interest Bearing
100     3     RACCT     RULE4A     B/S ST Non-Interest Bearing     RACCT     RULE4B     B/S ST Non-Interest Bearing
100     4     RACCT     RULE5A     B/S ST Non-Interest Bearing Derivatives     RACCT     RULE5B     B/S ST Non-Interest Bearing Derivatives
100     6     RACCT     RULE7A     P&L LT Interest     RACCT     RULE7B     P&L LT Interest
100     7     RACCT     RULE8A     P&L ST Interest     RACCT     RULE8B     P&L ST Interest
100     8     RACCT     RULE9A     P&L Toll     RACCT     RULE9B     P&L Toll
100     9     RACCT     RULE10A     P&L Royalties     RACCT     RULE10B     P&L Royalties
100     10     RACCT     RULE11A     P&L Rent     RACCT     RULE11B     P&L Rent
100     11     RACCT     RULE12A     P&L Brokerage Commission     RACCT     RULE12B     P&L Brokerage Commission
100     12     RACCT     RULE13A     P&L Warehousing     RACCT     RULE13B     P&L Warehousing
100     13     RACCT     RULE14A     P&L Misc/Other     RACCT     RULE14B     P&L Misc/Other
100     14     RACCT     RULE15A     P&L Insurance     RACCT     RULE15B     P&L Insurance
100     15     RACCT     RULE16A     B/S LT     RACCT     RULE16B     B/S LT
I am a little confused here. The following sets under the sub-group has a logical u201CANDu201D . the customer corporate reporting group would like to see the Config to allow each group of accounts defined as ruleXa reconciled to group of accts defined as ruleXb, e.g.
Rule 2A with Rule 2B
Rule 3A with Rule 3B etc
Each Company set should only reconcile with the partner set.
looked at this OSS Note 1499183 - ICR: Documents are not assigned to the object groups & got even more confused.
Request if you can advice here.
Regarzds
Aahish

Hello Johannes,
Unfortunately what you are trying to do is not possible.
Object groups are defined using the information in the totals table. Therefore fields only available in the line item table cannot be used when setting up object groups. Unfortunately it is also not possible to set up status fields on the totals level because of the standard update process of those fields when setting a status (the line item table is modified directly, there is no totals update). Depending on the details of your setup you might be able to simply add a "normal" field on the totals level and then fill it via BADI. This would probably work quite well if the field does not have to be set manually - and in this case you do not really need the functionality of setting a status manually either.
I hope this helps you in your efforts!
Ralph

Problem subclassing an object group from an object library

Hi
I've created an object group using Forms 6i (can't tell you the exact version just now) containing a number of objects, including a couple of alerts, a couple of data blocks, canvas, window, program units etc. I've saved the object group into an object library and used it successfully for some time. Now I've gone to a new job, I suspect that I'm using a subtly different version of Forms 6i (6.0.8.16.1), but I'm finding a strange behaviour when I try to add the object group to a form.
Dragging the object group over, I get the 'Do you want to copy or subclass the object?' message. If I select 'Copy', everything gets copied across fine - the datablocks have all the items in them and the program units are fine. However, if I select 'Subclass', the items all appear in the object navigator, but are 'empty', so the data blocks contain no items and the program units are just 'begin' and 'end' statements with nothing in between.
Funnily enough, if I 'copy' the object group into a form (so everything's present), then create another copy of the object group in the current version of Form Builder and save it in a (new) object library, the behaviour is still the same.
Has anyone come across this situation before (I couldn't find anything exactly comparable on Metalink), and what workaround (if any) did you find?
regards
Andrew
UK

Hi again
The answer to this strange behaviour became apparent when I found bug 2772326 on Metalink.
Basically, either the OLB has to be on the FORMS60_PATH, or the option in Forms Builder under Tools->Preferences->Access->Subclassing Path has to be set to 'Keep' rather than 'Remove'. Doing either of these things solves the problem.
regards
Andrew

Where can I find information on migrating from Business Objects 5 to XI R2?

We want to migrate several Business Objects implementations - some of which are Business Objects 5 and some Business Objects 6 to consolidate them into a XI R2 environment.
I have the document that describes migration from 6.x to XI R2 but what is the process for migrating from Business Objects 5. Do I need to migrate from 5 to 6 and then follow the 6.x to XI R2 migration?
Any pointers to additional hints and tips on migration or how to estimate how much effort is involved would also be welcome.
Thanks in advance for your help.

Hi,
Following are the detailed steps for migration via Import Wizard:
1] Go to Start > Programs > Business Objects XI Release 2 > BusinessObjects Enterprise > Import Wizard.
2] The Welcome dialog box appears. Click Next.
Setting source and destination environments:
3] In the Specify source environment dialog box, set the following:
u2022 Source: Business Objects Enterprise BO 6.5.x.
u2022User Name:
u2022 Password: visor
BOMain key
Note: Do not check the Import Application Foundation contents option since you are not performing Performance Management migration at this time.
Click Next.
4] The Warning page appears. Click Next.
Note: The source repository can store any file, not just supported agnostic documents. Since the BusinessObjects XI Release 2 architecture requires a plug-in for each file extension, it does not import unsupported files (for example, .zip files and as .svg documents used in corporate dashboards).
5] The Specify destination environment page appears. Set the:
u2022 Destination: Business Objects Enterprise BOXI R2
u2022 User Name:
u2022 Password:
u2022 Domain key file to: Default drive: \Business Objects\BusinessObjects Enterprise XI R2
Click Next.
6] Select the types of objects you want to import in this stage of the importing process. At a later stage, you select the objects themselves.
u2022 Select the option u2018Import universes u2018.
Click Next.
7] Import options for universes and connections dialog box appears.
Select the third option: Import all the universes and connections that the selected Web Intelligence and Desktop Intelligence documents use directly.
8] The Please choose a merge scenario dialog box appears. Select I want to merge the source system to destination system and check the automatically rename top-level folders that match top-level folder on the destination system option.
Click Next.
9] The Incremental Import dialog box appears.
You may need to import some objects more than once from the source repository to the destination repository.
In this situation, you have the following update options:
u2022 Overwrite object contents
You select the types of objects for which the content overwrite applies:
u2022 Documents (including dashboards and analytics)
u2022 Universes
u2022 Connections
When you re-import an object, it will completely overwrite and replace the matching object (and its associated files) that you imported earlier.
u2022 Overwrite object rights
When you re-import an object, its associated security rights will overwrite the rights of the matching object you imported earlier.
If you decided not to import security in the Security Migration Options dialog box, then the Overwrite object rights option is not relevant, and is therefore not available.
If you don't select any overwrite options, the matching object in the destination repository will not change when you try to import it again.
Note: This dialog box appears only if you select update as the import scenario.
Click Next.
10] Select the specific universe
Click Next
11] Information Collection complete dialog box appears.
Click Finish
12] Import Progress dialog box appears.
Click Done
Hope this helps !!
Please revert in case of any queries.
Regards,
Deepti bajpai

Copy Object group

Hi
Forms Builder (9.0.4.2.0) DB - 10gR2
I just want to copy one object group from one form to another.
Only thing source object group also sub classed. I tried copy/paste and drag and drop
It didn't work.
Then I tried copy from the original form which is not sub classed from any. Still didn't work.
What's the concept behind.
rgds
shabar

Hi Magoo
When check the subclass information of object group
there could see
Object
Object Name - Obj1
Module - Mod1
But I need the same object group (OG1) in form1 to be placed in the Form2.
When I check the Mod1 it's a another Form where it has a object group (Obj1) which is not sub class to any
How could this be done
rgds
shabar

Pers Area, Sub area, Emp Group & Emp Subgroup to which user is authorized

Hi Experts,
I'm working on an issue right now and it involves fetching the Personel Area, Sub Area, Employee Group, Employee Subgroup to which a user authorization to while hiring an employee.
Any idea how i can get this information from the Authorization Objects? I tried searching for some tables where the user authorizations are stored but no luck.
Any inputs on this will be greatly appreciated.
Thank you.
Regards,
Seema Rane

Hi Seema,
To see access details at PA, PSA, EG & ESG level,. go to SU01 > give user ID > click on display icon > click on roles tab > you can see all roles which have been assigned to this user(Role cab created via Tcode PFCG) > double click on role > click on roles tab (if it is composite role) or click on authorization (if it is single role) > click on authorization > click on display > Then expand by clciking on + button > you can see all PA, PSA, EG & ESG details what user is having access.
Note:- To see technical name go to Utilities > Technical names on
To see error details go to SU53 from error screen
Regards,
Purnima

Easy way to detect unused network objects/groups on ASA

Hello,
I find that every 6-12 months I will log on to the ASDM and go to the Network Objects/Groups section and spend ages right clicking on each object and seeing if it is still being used and if it isn't I then delete it. It can take a long time as our config is large, are there any better ways of keeping the ASA update to date?
Thanks

Hello,
I know that this is a very old post, however, starting in ASDM 7.1(3), there is a "Not Used" button in the app. Click it and it will provide you list of objects/groups that are not being used in ACLs. You can then choose which objects to delete (they're all checked by default).
As of 7.1(4), however, there is no such feature for protocols/protocol groups.
Hopefully this helps someone - I know that it saved me a lot of time in a few firewall migration projects!
Rob.

Will these object-group cause override in CSM?

Hi Everyone,
Currently i can not make changes in live network to test the options below.
Say we have Fw1 with object group below
sh run object-group id Test
object-group network Test
network-object 10.0.0.0 255.0.0.0
network-object 172.16.0.0 255.240.0.0
network-object 192.168.0.0 255.255.0.0
Fw2 shows below
sh run object-group id Test
object-group network Test
network-object object 10.0.0.0
network-object object 172.16.0.0
network-object object 192.168.0.0
Will above cause overiide in CSM ver4.2?
Also if i have object group below on fw1
sh run object-group Test_all
object-group network Test_all
network-object host 192.168.50.0
Fw2 shows
sh run object-group Test_ALL
object-group network Test_all
network-object host 192.168.50.0
Will above also cause override as names are different?
Regards
Mahesh

David, I think what you are referring to are nested structures, or in some cases "Deep" Structures.   I have tested this senario in my Netweaver 2004s system and there are no problems with this coding.    However, this does not mean all will be ok in your case. I think that it really depends on how the structure(or deep structure) is used in the program and if the unicode checker is turned on.
REPORT zrich_0001.
TYPES: BEGIN OF t_sub,
       sub(10) TYPE c,
       END OF t_sub.
TYPES: BEGIN OF t_object,
       object TYPE t_sub,
       END OF t_object.
TYPES: BEGIN OF t_main,
       main TYPE t_object,
       END OF t_main.
data: xvar type t_main.
CHECK xvar-main-object-sub IS INITIAL.
Regards,
Rich Heilman

EEM to update an object group

Hello Cisco!
I've been playing around with EEMs on and off for a few months now, and I'm enjoying it quite a bit! A recent issue at work got me thinking, and I thought I'd try and solve the problem with a new EEM. It's really quite simple, but I'm having trouble getting it to work as intended.
Device Specs:
On a CISCO881-SEC-K9 running:
Embedded Event Manager Version 4.00
Component Versions:
eem: (rel6)1.0.0
eem-gold: (rel1)1.0.2
eem-call-home: (rel2)1.0.4
Problem:
I'd like to create an EEM that checks the IP of a website a few times a day, and cross references the results with the IPs listed in an object group. If the new IP isn't listed, it will add it to the object group. If it is detected, it won't do anything. (I have this e-mailing either way right now, to assist me with debugging)
Reasoning:
I'd like to see if this is something I can do with an EEM. It would be nice to have something dynamically configured to make updates like this. At the end of the day, It mimics a feature on some firewalls. I'd like for this to get around the limitations of a static ACL entry. I haven't looked into TCL scripting, as It would be a new language that I'd have to learn. The beauty of EEM, is that it builds off of what a technician already knows. If you understand IOS, EEM is relatively easy to pickup and run with.
Side Note: If you see something in my script that could be consolidated, or just doesn't make much sense; please let me know. There is a really good chance that I don't know of the alternative method. This is especially true in terms of my regular expression knowledge. That's an ongoing battle :)
Thanks in advance everyone.
Your assistance and constructive criticism is more than welcome and is greatly appreciated.
Here is what I have right now:
event manager applet update_my_object_group
event timer cron cron-entry "* * * * *" maxrun 9999999
action 1.0 cli command "enable"
action 1.1 cli command "ping www.google.com"
action 1.2 wait 5
action 1.3 regexp "to ([0-9.]+)," "$_cli_result" match new_ip
action 1.4 cli command "show object-group self_building"
action 1.5 regexp "([0-9.]+)" "$_cli_result" match current_ips
action 2.0 if $new_ip ne "$current_ips"
action 3.0 cli command "conf t"
action 3.1 cli command "object-group network self_building"
action 3.3 cli command "host $new_ip"
action 3.4 cli command "end"
action 3.5 cli command "show object-group self_building"
action 3.6 regexp "([0-9.]+)" "$_cli_result" match new_current_ips
action 4.1 mail server "$_email_server" to "$gmail" from "$_email_from" subject "EEM: Successfully Updated Object Group" body "Added new IP: $new_ip\n to Object Group: self_building\n $current_ips"
action 5.0 else
action 5.1 mail server "$_email_server" to "$gmail" from "$_email_from" subject "EEM: Object Group Failure" body "I couldn't update the object group: self_building. Debug:\n New IP: $new_ip\nCurrent: $current_ips\nWhat it is now: $new_current_ips"
action 5.2 end
Here is an example I built up for a single ACL. Same concept, just a single line gets updated. I was using this as a reference for my object group script.
event manager applet update_my_acl
event timer cron cron-entry "0 * * * *" maxrun 9999999
action 1.0 cli command "enable"
action 1.1 cli command "ping www.msn.com"
action 1.2 wait 5
action 1.3 regexp "to ([0-9.]+)," "$_cli_result" match new_ip
action 1.4 cli command "show access-lists | sec test_acl"
action 1.5 regexp "10 permit tcp any host ([0-9.]+) eq www" "$_cli_result" match current_ip
action 2.0 if $new_ip ne "$current_ip"
action 3.0 cli command "conf t"
action 3.1 cli command "ip access-list extended test_acl"
action 3.2 cli command "no 10"
action 3.3 cli command "10 permit tcp any host www.msn.com eq www"
action 3.4 cli command "end"
action 4.0 cli command "show access-lists | sec test_acl"
action 4.1 mail server "$_email_server" to "$_email_to" from "$_email_from" subject "EEM: Successfully Updated ACL" body "New IP: $new_ip\nOld IP: $current_ip"
action 5.0 else
action 5.1 mail server "$_email_server" to "$_email_to" from "$_email_from" subject "EEM: ACL NOT updated" body "New IP: $new_ip\nOld IP: $current_ip"
action 5.2 end

Thanks for the review!
Well, it's technically "working", but not in the way that it's designed. It checks the object group, but it only finds the first IP listed. I'll provide you with the object group it's generated so far, and what I'm receiving in my e-mails.
(I don't think my regular expressions are working correctly.)
The Object Group:
object-group network self_building
host 10.9.8.20
host 74.125.225.114
host 173.194.46.115
host 74.125.225.148
host 173.194.46.116
host 173.194.46.112
host 74.125.225.81
host 74.125.225.83
host 173.194.46.84
host 74.125.225.17
host 74.125.225.20
host 173.194.46.80
host 74.125.225.19
host 173.194.46.83
host 173.194.46.114
host 74.125.225.116
host 74.125.225.51
host 74.125.225.52
host 173.194.46.113
host 74.125.225.145
host 74.125.225.144
host 74.125.225.49
host 74.125.225.82
host 74.125.225.146
host 74.125.225.84
host 74.125.225.112
host 173.194.46.82
host 173.194.46.81
host 74.125.225.18
Here are the successful e-mails sent to me. As you'll see, I've had the EEM include the $current_ips in the e-mail. This should be all of the IPs in the group, but it's just the first one listed (found). So, because it doesn't match, it adds the newly found IP to the group.
But, as you can see in my emails, that IP has been found before and added already. The desired behavior is it for it to see that the entry already exists, and not apply it.
Edit: Thought this would help:
Step 1: Ping www.google.com.
Step 2: Use regular expression to capture the IP found.
Step 3: Run a show command, and find all of the IPs currently listed inside the object group: self_building
Step 4: Cross reference the newly found IP, with the IPs found in the object group.
Step 5: If it's already there, then discard it and end the EEM.
Step 5 (a) If it's not there, then add it to the object group, and then end the EEM.
Thanks again!

Creation of Sub-Totals within Groups

Hi - hope this is me just being a plank but I've hit a brick wall whilst trying to recreate a set of management accounts. So far the report has just two Groups - call them A & B for ease. Group B summarizes the detail and Group A neatly collects the results from Group B.
Group A comprises 6 parts all doing their bit and all the standard Crystal Sub-Totals (Summaries) work just fine. The problem I encounter is when I need to insert another Sub-Total into Group A which summarizes multiple parts of Group A e.g. Part 1 is Sales, Part 2 is Cost of sales, Part 3 is Labour, Part 4 is Expenses, Part 5 is Other and Part 6 is Depreciation. I need to insert a Sub-Total between Parts 3 and 4 which basically gives a total of Sales minus Cost of Sales minus Labour and to then continue with Parts 4 to 6. This is obviously a huge simplification of the issue but an answer to this would let me proceed with everything else.
I've tried creating an line so I can add a formula for this by giving it a name of its own in Group A but it fails to appear on the report. I've also tried the 'Insert Section Below' option and whilst I can suppress it where necessary the formula just picks up values from the last entry on the Detail Section.
Any ideas where I am making some elementary mistakes and is there an easy solution? Many thanks

Hi,
Try to create a manual running total formula for summing the fields with a condition.
Create a @reset formula and place it report header:
formula:
whileprintingrecords;
numbervar i:=0;
Create a @eval formula and place it in group header A:
formula:
whileprintingrecords;
numbervar i;
if {groupname.field} = 'Labour' or {groupname.field} = 'Expenses' then
i:= i + {summary.field};
Create a @display formula and place it in report footer;
formula:
whileprintingrecords;
numbervar i;
Hope this helps!
Regards,
Vinay

**** Migration of Custom Objects in R12 ****

Hello All,
We have to migrate our custom objects from 11i to 12.
I have no idea or document on this.
Please answer on
a) is it possible to migrate our custom objects from 11i to 12 ???
b) since R12 is java based, do we need to create custom objects from scratch ???
Example 11i is using a rdf report, so how this will be migrated ??? or we need to create some jaba based report in R12 ????
c) ALso about forms - are they JSP pages in R12???
Please reply .
Thanks
Anand

Anand,
Your work demands much more analysis. Migration will depend on a lot many factors like the kind of objects you have used, whether the customization done on a page/form has changed or not, any functionality/seeded code/database object changes which might directly affect your customizations.
One thing for sure is that mod pl/sql is not supported by oracle in R12.
rdf reports should be fine. some forms have been converted to OAF pages.
You will have to go through the readme of technology patches and product patches for a complete analysis.
--Shiv

Implementing "object-group service"

Running 8.2(3) on an ASA 5510
I have created the two following object groups.
object-group service gatewayTCP tcp
port-object eq 88
port-object eq 135
port-object eq 445
port-object eq ldaps
port-object eq 3268
port-object eq 3269
object-group service gatewayTCP-UDP tcp-udp
port-object eq domain
port-object eq 389
port-object eq 464
port-object range 49152 65535
I have run into an issue with "domain" working in the tcp-udp type. The following access-list does not work without explicitly calling out "domain" for both TCP and UDP. Everywhere I looked I appear to be doing it right so what am I missing. Does "permit tcp" need to be "permit ip" to cover both tcp and udp? I found one article with someone suggestiong just make it "permit tcp" and it will work. Not in a position to test at the moment so figured I'd ask here. Want to be sure I'm not getting bit anywhere else related to these object groups in case I am not implementing them correctly?
access-list dmzAccess extended permit tcp host 172.26.11.10 host 10.16.11.203 object-group gatewayTCP
access-list dmzAccess extended permit tcp host 172.26.11.10 host 10.16.11.203 object-group gatewayTCP-UDP
Is this a bug with service object groups? Is there some place I need to enable this feature?

Hi,
Have you tried configuring it like this
object-group service GATEWAY-SERVICES
service-object tcp eq 88
service-object tcp eq 135
service-object tcp eq 445
service-object tcp eq ldaps
service-object tcp eq 3268
service-object tcp eq 3269
service-object tcp eq 53
service-object udp eq 53
service-object tcp eq 389
service-object udp eq 389
service-object tcp eq 464
service-object udp eq 464
service-object tcp range 49152 65535
service-object udp eq 49152 65535
access-list dmzAccess permit object-group GATEWAY-SERVICES host 172.26.11.10 host 10.16.11.203
I am not sure if it was only after software 8.3+ that the command under the actual "object-group" was of format "service-object tcp source" / "service-object tcp destination" (or the same for UDP)
- Jouni

Forms10g Migration : Sub-Clasising Object Groups again.

Similar Messages

Maybe you are looking for