How to properly setup an authentication using remote_login_passwordfile

I'm running Oracle9i for study purposes in a winXP OS
I set the value of the parameter remote_login_passwordfile to EXCLUSIVE
I tried connecting using the following credentials and it was, unexpectedly, successful:
connect scott/tiger as sysdba
how do I properly setup the authentication?
thanks

You need to look into two things
1.connecting directly from the server
2.Connecting from the remote
1.If you are connecting local with the server and if the SQLNET.ora has an entry like SQLNET_AUTHENTICATION_SERVICEs=(NTS) the your OS autntication will take precedence
But when you connect from the client machine
REMOTE_LOGIN_PASSWORD file takeover and you cannot log without a password that was gebnerated during the creation of password file.
If you strictly want passwordfiel authentcation set the SQLNET_AUTHENTICATION_SERVICE=NONE in the sqlnet.ora

Similar Messages

How to properly setup LB probe for ADFS 3.0 servers

We are facing a problem during ADFS 3.0 (Windows Server 2012 R2), because we do not find a suitable URL for hardware Load Balancer probe to test ADFS nodes.
When tried with IE browser, the URL
https://sts.adfs1.ad/adfs/ls/IdpInitiatedSignon.aspx properly results in ADFS login page but, when tried the same URL with HW LB probe, the probe gets no answer from ADFS server at all.
We compared incoming traffic with network monitor in that ADFS server node (https temporary changed to http to see the traffic), a somewhat similar HTTP GET query did exist:
GET /adfs/ls/IdpInitiatedSignon.aspx HTTP/1.1..Accept: image/jpeg, image/gif, image/pjpeg, application/x-ms-application, application/xaml+xml, application/x-ms-xbap, */*..Accept-Language: fi-FI..User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows
NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E)..Accept-Encoding: gzip, deflate..Host: sts.adfs1.ad
.PV??ìà_¹«.ç..E..ð'@.ÿ.%Æ¬..ü¬..Lî¢.PL?Ëf\Mæ?...?Ä.......f;[.4..GET /adfs/ls/IdpInitiatedSignon.aspx HTTP/1.1..Connection: Close..Host: sts.adfs1.ad
How to properly monitor the ADFS 3.0 server nodes?
Br, Kari Oikkonen
MCITP/2008
Fujitsu Finland

Please note that using dns name in the url opens the metadata OK, but using IP address fails, not opposite as you mentioned.
The netsh http show sslcert lists the following:
SSL Certificate bindings:
    Hostname:port                : sts.mydomain.com:443
    Certificate Hash             : 12b510eead093f8d29db950a42ecf4940c933533
    Application ID               : {5d89a20c-beab-4389-9447-324788eb944a}
    Certificate Store Name       : MY
    Verify Client Certificate Revocation : Enabled
    Verify Revocation Using Cached Client Certificate Only : Disabled
    Usage Check                  : Enabled
    Revocation Freshness Time    : 0
    URL Retrieval Timeout        : 0
    Ctl Identifier               : (null)
    Ctl Store Name               : AdfsTrustedDevices
    DS Mapper Usage              : Disabled
    Negotiate Client Certificate : Disabled
    Hostname:port                : localhost:443
    Certificate Hash             : 12b510eead093f8d29db950a42ecf4940c933533
    Application ID               : {5d89a20c-beab-4389-9447-324788eb944a}
    Certificate Store Name       : MY
    Verify Client Certificate Revocation : Enabled
    Verify Revocation Using Cached Client Certificate Only : Disabled
    Usage Check                  : Enabled
    Revocation Freshness Time    : 0
    URL Retrieval Timeout        : 0
    Ctl Identifier               : (null)
    Ctl Store Name               : AdfsTrustedDevices
    DS Mapper Usage              : Disabled
    Negotiate Client Certificate : Disabled
    Hostname:port                : sts.mydomain.com:49443
    Certificate Hash             : 12b510eead093f8d29db950a42ecf4940c933533
    Application ID               : {5d89a20c-beab-4389-9447-324788eb944a}
    Certificate Store Name       : MY
    Verify Client Certificate Revocation : Enabled
    Verify Revocation Using Cached Client Certificate Only : Disabled
    Usage Check                  : Enabled
    Revocation Freshness Time    : 0
    URL Retrieval Timeout        : 0
    Ctl Identifier               : (null)
    Ctl Store Name               : (null)
    DS Mapper Usage              : Disabled
    Negotiate Client Certificate : Enabled
The netsh http show urlacl shows the following:
URL Reservations:
    Reserved URL            :
http://+:80/Temporary_Listen_Addresses/
        User: \Everyone
            Listen: Yes
            Delegate: No
            SDDL: D:(A;;GX;;;WD)
    Reserved URL            :
https://+:5986/wsman/
        User: NT SERVICE\WinRM
            Listen: Yes
            Delegate: No
        User: NT SERVICE\Wecsvc
            Listen: Yes
            Delegate: No
            SDDL: D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)(A;;GX;;;S-1-5-80-4059739203-877974739-1245631912-527174227-2996563517)
    Reserved URL            :
http://+:5985/wsman/
        User: NT SERVICE\WinRM
            Listen: Yes
            Delegate: No
        User: NT SERVICE\Wecsvc
            Listen: Yes
            Delegate: No
            SDDL: D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)(A;;GX;;;S-1-5-80-4059739203-877974739-1245631912-527174227-2996563517)
    Reserved URL            :
http://+:47001/wsman/
        User: NT SERVICE\WinRM
            Listen: Yes
            Delegate: No
        User: NT SERVICE\Wecsvc
            Listen: Yes
            Delegate: No
            SDDL: D:(A;;GX;;;S-1-5-80-569256582-2953403351-2909559716-1301513147-412116970)(A;;GX;;;S-1-5-80-4059739203-877974739-1245631912-527174227-2996563517)
    Reserved URL            :
http://*:2869/
        User: NT AUTHORITY\LOCAL SERVICE
            Listen: Yes
            Delegate: No
            SDDL: D:(A;;GX;;;LS)
    Reserved URL            :
http://*:5357/
        User: BUILTIN\Users
            Listen: Yes
            Delegate: No
        User: NT AUTHORITY\LOCAL SERVICE
            Listen: Yes
            Delegate: No
            SDDL: D:(A;;GX;;;BU)(A;;GX;;;LS)
    Reserved URL            :
https://*:5358/
        User: BUILTIN\Users
            Listen: Yes
            Delegate: No
        User: NT AUTHORITY\LOCAL SERVICE
            Listen: Yes
            Delegate: No
            SDDL: D:(A;;GX;;;BU)(A;;GX;;;LS)
    Reserved URL            :
https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/
        User: NT SERVICE\SstpSvc
            Listen: Yes
            Delegate: Yes
        User: BUILTIN\Administrators
            Listen: No
            Delegate: No
        User: NT AUTHORITY\SYSTEM
            Listen: Yes
            Delegate: Yes
            SDDL: D:(A;;GA;;;S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314)(A;;GR;;;BA)(A;;GA;;;SY)
    Reserved URL            :
http://+:80/adfs/
        User: NT SERVICE\adfssrv
            Listen: Yes
            Delegate: Yes
            SDDL: D:(A;;GA;;;S-1-5-80-2246541699-21809830-3603976364-117610243-975697593)
    Reserved URL            :
https://+:443/adfs/
        User: NT SERVICE\adfssrv
            Listen: Yes
            Delegate: Yes
            SDDL: D:(A;;GA;;;S-1-5-80-2246541699-21809830-3603976364-117610243-975697593)
    Reserved URL            :
https://+:49443/adfs/
        User: NT SERVICE\adfssrv
            Listen: Yes
            Delegate: Yes
            SDDL: D:(A;;GA;;;S-1-5-80-2246541699-21809830-3603976364-117610243-975697593)
    Reserved URL            :
https://+:443/FederationMetadata/2007-06/
        User: NT SERVICE\adfssrv
            Listen: Yes
            Delegate: Yes
            SDDL: D:(A;;GA;;;S-1-5-80-2246541699-21809830-3603976364-117610243-975697593)
Any idea of how to build a probe rule with IP address?

How to properly setup photostream across devices

I currently have several apple devices (iPhone, iPad, and Apple TV) and I also use iCloud on my PC, where I have all of my photos as well. The question I have is how do I set up and sync all of my PhotoStream photos so that my entire library will be available on my AppleTV as the slideshow? It seems that every time I try to set it up, I only get a subset of my photos (the most recent ones on my iPhone) and I can't figure out how to get all of them available to my AppleTV.
Does anyone know how to properly set this up so I can see ALL of my photos on my AppleTV screensaver?
Thanks!

As long as you are signed into iCloud with the same Apple ID on all devices and have Photo Stream enabled then it is set up.
Photo Stream is not infinite. It only holds 30 days of Photos on the server and 1000 photos on iOS devices.

How to properly create disk iimages using Disk Utility?

Can some one help explain how to properly use Disk Utility? When making an image of a CD, should I click on the CD drive and click on NEW IMAGE, or should I click on the mount name, which is indicate just beneath the CD drive?
Thanks!

"read only" means just that that the disk image is read only and you can't add files to it once the disk image is mounted. but as I said, if you want to make a backup of the original CD then you have to choose "CD/DVD master". then, when you burn the disk image to a blank CD it will be formatted properly.

How to properly setup Home Sharing with iPhone and iPad

Hi, In our home we have both an iPhone and an iPad, but with different user ID's for iTunes etc.
I just now seen that there is the Home Sharing feature, but looking up info on it I'm a bit scared that people are saying if you log in to another device with the same ID you get locked out of the original.
How could I properly setup Home Sharing on both devices, while being 100% positive that I keep my original device ID's in place?

Hi there,
I would recommend taking a look at the article below for more information about home sharing.
Understanding Home Sharing
http://support.apple.com/kb/ht3819
-Griff W.

How would i setup certificate authenticated activesync on a windows phone 8 device? Without intune or sccm?

I've searched all over for this and can find no clues in the interface.
We have certificate authentication to activesync, via tmg working well for IOS devices and android, we issue the user a certificate, they use it to authenticate, boom no problems.
We're considering a move to issuing windows phone 8 devices as well, yet i see no way, or instructions on how to actually set these things up to authenticate with a certificate? I see some rumblings about airwatch and sccm with intune, but i don't want to
pay for a subscription just to use this when it works fine without on other platforms.
Can anyone shed any light?
Many thanks,
Jim

Hi - we're authenticating with internally issued certificates against a TMG listener, not sure if that is or isn't mutual certification - I have installed the root on the devices so they are trusted, works great with ios, android etc.
The main issue is there is no place in the setup where you can specify the certificate to use, i have a feeling they (like blackberry) are railroading you into using a paid for mdm solution for cert auth. Be delighted if that isn't the case tho. It is easy
enough to do this for WP8 with SCCM and InTune but i'm not keen on taking out a subscription just for WP8 devices when we can do it gratis with ios and android.
Thanks for the reply.
Jim

How to properly setup domain name ISP v. Registrar

Mac OS Server 10.6 (SLS). I have a static IP which my ISP assigned an alias for ease of their management. I have a domain name from a registrar (not from the same ISP) which is registered using their DNS with an MX record, A records, etc (they do not offer PTR records). When I install SLS and enter the route IP address, it picks up the alias of my ISP which is not my domain name. I am using OpenDNS as my DNS server.
When I ping my domain, it properly resolves to my IP address. When I nslookup my ip address, it non-authoriatively tells me the alias assigned by my ISP (and not my registrar). When I dig my IP address, it shows me my registrars name. Regardless, under Server Admin the ethernet says my DNS is the ISPs.
Help! Should I setup the DNS server so I can manage locally? I do not want to have to pay my ISP additional fees for DNS nor domain name management / transfers? What am I doing wrong, it can't be this hard?
Thanks,
Jas

I have a domain name from a registrar (not from the same ISP) which is registered using their DNS with an MX record, A records, etc (they do not offer PTR records)
Sure. The registrar has no control over the IP address(es) you get from your ISP. They can't handle reverse DNS for you.
When I nslookup my ip address, it non-authoriatively tells me the alias assigned by my ISP (and not my registrar)
That's correct - the IP address you're using is 'owned' by your ISP. Therefore any reverse lookup will ultimately query your ISP's servers and return whatever name your ISP has defined.
Should I setup the DNS server so I can manage locally?
Generally you don't manage the reverse DNS unless you have your own IP addresses. The easiest solution by far would be to ask you ISP to change the reverse DNS entries for your IP address(es).
Failing that, they can SWIP your IP addresses to you DNS server - this makes your DNS server authoritative for those IPs (in the same way you can be authoritative for your domain), but that's more work, and many ISPs refrain from doing that.
I do not want to have to pay my ISP additional fees for DNS nor domain name management / transfers?
Are they charging you for this? Then change ISPs. I'm not aware of any ISP that charges for setting up reverse DNS for clients.

How to handle Client Certificate authentication using URLRequest/URLLoader

Hi All,
I developed an AIR Application which communicates with a server. Protocol used for communication is HTTPS, and server has a valid certificate.
So whenever AIR App, communicates with the server, a dialogue box prompts to select the client certificate just as show below.
So here what I am looking at is, Any method is available to prevent this prompt.
I have already tried the method of Enabling "Dont Prompt for client certificate selection when only one certificate exists", Of course this method will work only if multiple certificate exists, so what if multiple certificate exists.
How an air application can handle that?
So any one find any way to handle this. I am using URLRequest for commnicating with server.
Here is the code snippet I have used.
var request:URLRequest = new URLRequest(url);
request.method = URLRequestMethod.GET;
var urlLoader:URLLoader = new URLLoader();
urlLoader.dataFormat = URLLoaderDataFormat.TEXT;
urlLoader.addEventListener(Event.COMPLETE, loaderCompleteHandler)
urlLoader.addEventListener(Event.OPEN, openHandler);
urlLoader.addEventListener(HTTPStatusEvent.HTTP_STATUS, httpStatusHandler);
urlLoader.addEventListener(SecurityErrorEvent.SECURITY_ERROR, securityErrorHandler);
urlLoader.addEventListener(IOErrorEvent.IO_ERROR, ioErrorHandler);//, false, 0, true);
Please help me...
Thanks
Sanal

Yes it is possible. Refer
Using Certificates for Authentication [http://docs.sun.com/app/docs/doc/820-7985/ginbp?l=en&a=view]
SSL Authentication section in [http://docs.sun.com/app/docs/doc/820-7985/gdesn?l=en&a=view]
client-auth element in server.xml [http://docs.sun.com/app/docs/doc/820-7986/gaifo?l=en&a=view]
certmap.conf [http://docs.sun.com/app/docs/doc/820-7986/abump?l=en&a=view]
certmap.conf should have verifycert "on", and lets say this certmap is called "cmverify" :
certmap cmverify    default
cmverify:DNComps
cmverify:FilterComps    uid
cmverify:verifycert onIn serve.xml we should have <client-auth> "required" and lets say we have an auth-db named "ldapregular":
<http-listener>...
<ssl>...
    <client-auth>required</client-auth>
</ssl>
</http-listener>
<auth-db>
<name>ldapregular</name><url>ldap://myldap:369/o%3DTestCentral</url>
<property><name>binddn</name><value>cn=Directory Manager</value></property>
<property><name>bindpw</name><value...</value><encoded/></property>
</auth-db>In ACL file we should have method = "ssl", database = "ldapregular" and certmap = "cmverify" :# clientauth against LDAP database with special certmap which has verifyCert on
acl "uri=/";
authenticate (user,group) {
    prompt = "Enterprise Server";
    method = "ssl";
    database = "ldapregular";
    certmap = "cmverify";
deny (all) user = "anyone";
allow (all) user = "alpha,beta,gamma";

How do i setup my iphone using an imac

I have a new iPhone 4GS and previously setup and synched everthing on my MacBook Pro, but want to use my iMac moving forward. However, the first step on setting up the iPhone ask for me to plug it into my computer. The iMac doesn't have a port to plug into? How do i create the initial synch? Moving forward I can do it wirelessly, but don't know how to set it up initially. any help is appreciated.

brain ****, found the connection. Solved

How to properly setup virtual hosts on leopard server

I am not just new to leopard server but new to “server” as a whole. I have bought a 10-client leopard server and installed it on my old macbook couple of days ago because of the gui and seemingly ease-of-setup of a leopard server. I have watched and followed a tutorial on Lynda.com to install my server. Unfortunately, that tutorial focuses mainly on running a single web server. My main purpose of setting up the leopard server is to run multiple virtual hosts. Now my server (which has its own public ip address and I shall refer to it as just IP) is up and running but I seem not to be able to get virtual hostings to work properly. Below is a summary of what I have setup and I hope somebody from the community can take a look and point out what I have done wrong (thanks in advance):
- server setup as advanced
- dns settings:
o I am not sure whether a different zones should be setup for each domain, so I have opted to define 1 primary zone only and then define the other domain as a machine. For simplicity sake, I have only used two domains in the example below. I actually need to setup at least half a dozen.
o primary zone
• my1stdomain.com. is the primary zone name
• ns.my1stdomain.com. is the only nameserver
• mail.my1stdomain.com. is the only mail exchanger
• www.my1stdomain.com. as machine and IP as value
• www.my2nddomain.com. as machine and IP as value
• mail.my1stdomain.com. as machine and IP as value
• server.my1stdomain.com. as machine and IP as value
• ns.my1stdomain.com. as machine and IP as value
o reverse zone
• ip reverse mapping ns.my1stdomain.com.
- web settings:
o sites:
• I have defined the following 2 sites and point each of them to a different folder:
• my1stdomain.com
• my2nddomain.com
- I have setup dns at my domain registrar to reference ns.my1stdomain.com for both my1stdomain.com and my2nddomain.com,
I have no problem accessing www.my1stdomain.com but I couldn’t reach www.my2nddomain.com. and I have a hunch it has to do with my dns settings.

It sounds like there are two compounding errors here.
• www.my1stdomain.com. as machine and IP as value
• www.my2nddomain.com. as machine and IP as value
By definition, www.my2nddomain.com cannot be a record in my1stdomain.com's zone.
You MUST have one zone for my1stdomain.com (that contains my1stdomain.com's NS, MX, mail, www etc. records) and a SECOND, separate zone for my2nddomain.com that contain's its records.
Now the records in my2nddomain.com's zone may contain the same data (e.g. the same A record), or even reference my1stdomain.com (e.g. 'www.my2nddomain.com is a CNAME to www.my1stdomain.com), but they are separate zones.
Secondly.
I have defined the following 2 sites and point each of them to a different folder:
• my1stdomain.com
• my2nddomain.com
If you want to access the site via 'www.my1stdomain.com' (or 'www.my2nddomain.com') then your site needs to be setup for www.my1stdomain.com, not my1stdomain.com
As far as the web server is concerned, 'my1stdomain.com' is a completely different address (and therefore a different site) from 'www.my1stdomain.com. While most poeple set them to the same it is entirely appropriate and valid for them to be two different sites as far as the web server is concerned.
Therefore you need to change your sites' configuration to reference the 'www' version of its hostname.
If you want to run both 'my1stdomain.com' and 'www.my1stdomain.com' as the same site then add the other hostname under Aliases (this tells Apache what hostnames should map to this virtual host).
Try fixing those two elements and try again.
Finally, it's often far easier for others to debug this kind of problem when you talk in real names, not dummy ones. Telling us what the domains in question are, for example, would allow others to query DNS to see what values you're actually publishing, and would go a long way to answering the question for sure, as opposed to just speculation.

On a Mac, how do I setup Firefox to use Command+Enter to open a new tab from the address bar?

I tried this extension (https://addons.mozilla.org/en-US/firefox/addon/customizable-shortcuts/) , but it doesn't appear to support editing the current "Alt+Enter" to change to "Command+Enter".
I have a decade plus of muscle memory using the key next to the space bar + enter to open a new tab. Please help!

There is an older extension named keyconfig (last updated in 2011) which might be able to do it. I haven't used it for quite a while so I'm not sure how well it works any more.
http://forums.mozillazine.org/viewtopic.php?f=48&t=72994 (link in first post)

On a Mac, how do I setup Firefox to use Command+Enter to open a new tab from the address bar? Safari and Chrome do this by default.

I tried this extension (https://addons.mozilla.org/en-US/firefox/addon/customizable-shortcuts/), but it doesn't appear to support editing the current "Alt+Enter" to change to "Meta+Enter" where Meta = Command on a Mac.
I want to switch to Firefox, but this is the one and only thing preventing me from doing so! I have a decade plus of muscle memory using the key next to the space bar + enter to open a new tab. Please help!

There is an older extension named keyconfig (last updated in 2011) which might be able to do it. I haven't used it for quite a while so I'm not sure how well it works any more.
http://forums.mozillazine.org/viewtopic.php?f=48&t=72994 (link in first post)

How to properly create a calendar using OMB*Plus, to schedule a workflow ?

Hello all,
I want to schedule a workflow when deploying via OMB*Plus.
It looks like I have a syntax error, but this happens even with the example given on
[the OMBCREATE CALENDAR documentation|http://download-uk.oracle.com/docs/cd/B31080_01/doc/owb.102/b28225/omb_4create_1.htm#sthref1427]
My code is:
OMBCREATE CALENDAR 'SCH_DELTA_test2' ADD SCHEDULE \
SET PROPERTIES (REPEAT_EXPRESSION)\
VALUES ('FREQ=WEEKLY;INTERVAL=1;BYDAY=TUE WED THU FRID SAT;BYHOUR=12;BYMINUTE=0;BYSECOND=0') ]
If I copy-paste an example from the doc, the last line becomes :
VALUES ('FREQ=MINUTELY;INTERVAL=20') ]
The result is:
OMB00001: Encountered \' at line: 1, column: 95. Was expecting one of: <INTEGER_LITERAL> ...
<FLOATING_POINT_LITERAL> ...
<QUOTED_STRING> ...
The position line: 1, column: 95 is the opening quote of the last line, just before FREQ=
I can't find any way to get this working. If anyone see something wrong or missing, please advise. Thanks in advance.
Cedric.

Hello Oleg,
I followed your advice, but OMB*Plus doesn't like it, as it seems :
the code:
OMBCREATE CALENDAR 'CAl_SCH_DELTA' ADD SCHEDULE 'SCH_DELTA' SET PROPERTIES (REPEAT_EXPRESSION) VALUES ('FREQ=MINUTELY;INTERVAL=20')
the error:
OMB00001: Encountered SCH_DELTA at line: 1, column: 49. Was expecting one of: <E
OF>
"SET" ...
Regards
Cedric.

Shared Services External Authentication using LDAP in 9.3.1

Hi,
I have installed Hyperion Shared Services with native directory. And now planning to setup external authentication using LDAP. I need some guidance to understanding how the external authentication works.
Questions:
1. Is it possible to setup Shared Services to use both Native and LDAP user directory? What I mean is some users will be able to login using Native directory, and some others will need to login using User Directory (external authentication).
2. For User Directory (say we use LDAP), when the user is added into Shared Services, can they be assigned with Groups created in Native directory? We want to explore to use just the external authentication and define all of the groups within shared services.
If not possible, can we manage the Groups of the User directory using shared services? How is the groups work with external authentication?
Any feedback would be much appreciated.
Thanks,
Lian

Hi,
Yes you can use both Native and external authentication. When you add the external provider the native is left by defaut anyway.
Yes you can add your external users to native groups. You can also provision the groups in the AD if you wish.
Gee

How to properly configure a home network using both Mac and PC computers

Is there a book or set of guidelines that can tell me how to properly configure (exact specifications) my computers in a home network? Here is what I am trying to do and using:
1) Three computers: iMac (late 06 ver), Macbook (newest version), Dell laptop. The two Macs are using Leopard and the PC is XP.
2) Bellsouth modem which feeds into the Airport Extreme Base Station (AEBS)
3) The AEBS has a USB hub which is connected to a external hard drive and two inkjet printers. A third laser printer/scanner/fax machine is connected to the AEBS via ethernet.
4) All three computers use a wireless connection to the AEBS.
I would like the following:
1) Have a secured and password driven network - don't want outsiders connecting to the nework without permission.
2) All computers to be able to access the USB printers and ext HD.
3) The two Macs to read/write to each other with password access
4) The iMac to have read/write capabalities over the PC via VSFusion or Bootcamp if possible.
Currently, all three have Internet access via the AEBS and can print on the ethernet printer. Both Macs can see the Bonjour USB printers and print (however they to do not display on the AEBS configuration display utility and neither does the ext HD). The USB ext HD is shown on the iMac desktop and I have access to it, but does not display on the MacBook. I have not checked if the PC sees the external HD and it really does not matter if it ever does, although it would be nice.
I am hoping that there is some standard configuration that I can "cut and paste" that is generally used to allow a home network to share resources while still being secure.
Any advice and help is greatly appreciated.
Thanks,
Andrew

Andrew,
What you would like is fairly complicated so this will probably be a lengthy post, but hopefully I can assist you.
As others here have pointed out, networks can vary widely, but the best networks have one element in common: planning. The first thing you need to think about is how you would like all of these systems to cooperate. For instance, do you want one of the machines to serve files to the others and be a central repository, or are you just interested in having them share documents on occasion so that you don't have to carry around, say, a USB key all the time? That said, here is a basic list of things I think you should look into.
1. Network Basics
First step is to get your local network set up. I'd go for WPA or WPA2 wireless security as they are relatively strong standards and you can use human-readable passwords. Additionally, unless you have an explicit need for someone outside your network to initialize a connection (Windows' RDP for instance), do not allow any passthroughs or port redirects on your AEBS.
2. Network Topology
Decide how you want computers and networked devices to identify themselves and their relative locations in the network: in short, do you want static ip's or dynamic ip's? Most of the time, static IP's can be assigned on a DHCP router, the trick is to assign the statics higher than your number of devices (or lower on some routers - for instance Linksys routers start DHCP at 192.168.1.100 but you could have statics from 192.168.1.2 to 192.168.1.99). For instance, it is impractical to set a laptop to static because I'm often in coffee shoppes and other environments that assign via DHCP; on the other hand, it's a good idea to have a printer be static so that you always know where to find it. So, I have 10.0.1.x network (default on AEBS), and the printer is 10.0.1.24, since the likelihood of my encountering an IP conflict with 4 computers on the subnet is virtually zero. If you configure a static device behind your AEBS, defaults are usually
Default Gateway 10.0.1.1
IP Address 10.0.1.(your choice)
Subnet Mask 255.255.255.0
3. File-sharing.
3a) Mac OS X has a built-in SMB/CIFS (Windows file & printer sharing protocol) client, and a basic SMB [samba] server can be enabled in the sharing preference panel (enable file and/or printer sharing). Windows XP can use these shares, but must authenticate. For that reason, you may not be able to see your shares in the Network Places browser, however you should be able to get to them by mapping the network drive (tools menu) or executing RUN with \\computer.name\share.name. You will then be able to type in your credentials. I would also suggest relatively simple names for the Macs in question (set in Sharing preference pane). Typing Andrew's-iMac-G4 in every time you want to find it will get irritating after a while to say the least, especially if you need to troubleshoot.
3b) The reverse works similarly. You can Connect to Server... from Finder to get to the Windows shares. To do this you must have Windows File and Printer sharing enabled (most easily through the Network Setup Wizard in Control Panels - Use Classic View). It's really easy if your account names and passwords are identical on the Mac and PC, because when loading user profiles, the Mac will generally automatically try to authenticate against the Windows machine with your Mac logon credentials. (Windows seems to do this against the Mac as well) You can write an Applescript or there are some PLIST modifications you can make to mount Windows shares at login.
4. Printing
I'm not exactly sure what you had in mind here since I'm not sure what's connected to which computer or directly to the network. If it is possible, I personally find putting my printers directly on the network to be the easiest thing. Especially if printing large PDF or graphics files, the spooling on the host system can really slow the computer down, and slow down printing. For example, I used to have a laserjet on a Windows box and had to print a very large file. Going through a Win print server, it only printed a page every 30 seconds, but when I got a jetdirect adapter, the whole thing was done in under two minutes. If you have HP Printers, I would recommend the jetdirect print servers (I have used with both a laserjet and a supposedly unsupported color inkjet).

How to properly setup an authentication using remote_login_passwordfile

Similar Messages

Maybe you are looking for