Http proxy View access control log

Access control log is broken. I get BMON window...operation cannot be
completed.
Tried TID 10026035 which did not work at all.
Jerry Gunn

If that is the only way, I guess it OK. Do you have a procedure to
follow?
Also... why doesn't TID 10026035 work? If its a usless TID who do I
contact to get it removed or fixed?
Thanks for your help.
Jerry Gunn
> If you're ready to throw away the access rules logs, you can start from
> scratch by disabling all the components using btrieve (for instance,
not
> loading BM at the server startup, removing logging for the VPN, as
> well), then disable all the logs in CSAUDIT, delete the contents of the
> CSAUDIT directory and re-enable everything.
>
> --
> Cat
> NSC Volunteer Sysop

Similar Messages

Access controll Logs and DNS entries

Hello there,
We have upgraded from Border Manager 3.5 to Border Manager 3.8 SP4 on
new hardware. Everything runs fine except a little niggle. When we
view the Access Control logs now all we see is IP addresses there are
no host names. In real time monitoring we can click on DNS Host Name
and get some of the names but most come back Unknown. Under the logs
themselves the DNS host Name option is grayed out. Have I messed up
the configuration in some manner?
Dan

Thanks Craig, We are indeed runing the transparent proxy. Is this a
change between 3.5 and 3.8? When we ran the transparent Proxy under
3.5 we were able to see the URL's.
On Tue, 17 Jul 2007 21:36:53 GMT, Craig Johnson
<[email protected]> wrote:
>In article <[email protected]>, Dan Larson
>wrote:
>> When we
>> view the Access Control logs now all we see is IP addresses there are
>> no host names. In real time monitoring we can click on DNS Host Name
>> and get some of the names but most come back Unknown. Under the logs
>> themselves the DNS host Name option is grayed out. Have I messed up
>> the configuration in some manner?
>>
>If you have transparent proxy working, you will get IP addresses of
>hosts instead of URL's.
>
>If you are not using proxy authentication, you will get IP addresses of
>user PC's instead of user names.
>
>Craig Johnson
>Novell Support Connection SysOp
>*** For a current patch list, tips, handy files and books on
>BorderManager, go to http://www.craigjconsulting.com ***
>

SCSM View access control not working

I have 15 odd each SCSM Incident and SR roles, one for each support group. Each role contains an AD group, populated with users. No OTB roles contain any users other than the admin role.
Each role is granted access to only the views for SR and IM that they need.
All the views are stored in one MP, that is one top level folder with all the views inside it. So when they expand the folder, they should only see the views assigned to the roles of which they are a member.
However, more and more often, Users are opening their console to find that they see all the views, for all roles.
Sometime if they shut down the console, and restart it, the views will return to normal.
But that is starting not to work anymore as well. And its very odd that it will happen to one user in the role, but not the other users.
Any ideas?
SCSM2012 R2
Joshua Fuente

Never mind, I did find that they added a group to an OTB role... Removed, Fixed. Created a new role, and removed the view access....
Joshua Fuente

Http proxy for mission control?

I tried to use "Install Plugins..." functionality to use in MC 4.0.1 but I get the following error:
Network connection problems encountered during search.
Unable to access "http://www.oracle.com/technology/software/products/jrockit/missioncontrol/updates/experimental/4.0.1/rcp/".
Error parsing site stream. [Premature end of file.]
Premature end of file.
Error parsing site stream. [Premature end of file.]
Premature end of file.
I assumed this could be because of our company's webproxy. I tried to start MC with java -jar mc.jar -Dhttp.proxyHost=webproxy.xxx.com -Dhttp.proxyPort=xxx-Dhttp.proxyUser=xxx-Dhttp.proxyPassword=xxx
but still the same error occurs.
Is there another way to access the plugins?
Thanks for any hints,
Thomas

One way is to install MC plugins in Eclipse (where you have more control over the proxy settings)
In that case, use
http://download.oracle.com/technology/products/missioncontrol/updatesites/base/4.0.1/eclipse/
and
http://download.oracle.com/technology/products/missioncontrol/updatesites/experimental/4.0.1/eclipse/
If you set the proxy properties I guess they need to be set before the -jar flag so they are interpreted as flags to the jvm instead of the app.
(I will verify that I can get that to work)
Klara, Mission Control QA

Error while turning on Access control for web proxy

When I try turning on access control setting for the service (using web-based server admin page: sever preferences->restrict access), i got this pop-up error message:
System Error:
The POST variables could not be read from stdin.
Environment:
Windows2000 SP2
Sun ONE WebProxy 3.6 SP1
File-System NTFS
Thx

Hi,
Please mention on which platform you have installed the iplanet web proxy server. If it is on NT then make sure it must on NTFS partition.
refer the following link for more details
http://docs.iplanet.com/docs/manuals/proxy/36/adminnt/contents.htm

Auto HTTP Proxy remembers first user credentials to access Safari

Hello
We would like to introduce iPads in the enterprise. The issue we have is after connecting it to the wireless with a static address (which it keeps no problem). We need to enter the HTTP Proxy. This is set to auto and the proxy URL is entered fine and stored.
The problem comes when we then use Safari to browse the first time you open it a box appears asking you to login. Once logged in you get the appropriate access for your login. It is not a single user who will have access to the iPad 2 and for some reason when opening safari for the 2nd time you do not get asked for login credentials. Instead you get the same access as the person who entered their details on first opening safari.
This does not work for us as didnt levels get different site access. I cannot find anywhere on the device that these details are remembered. Can someone please let me know how i get it to ask for credentials everytime safari is opened or a way that i can delete the last persons login details.
The only way i have been able to clear the user details is to 'erase all contecnt and settings' and this is not practical.
Thanks

I have exactly the same problem. After trolling the web for the last 2 hours this is the first post i have seen about the issue i can't beleive it! You can "Forget" the connection and reconnect but that's just not practical. Have you had any luck on this problem? I updated an iPad to 5.1......same problem!

Visual Composer - access Web Services using http proxy

Hi,
I want to use an external web service in the Visual Composer. I set up the service in NWA -> SOA Management -> Destination Template Management.
I defined the http proxy in System Global Settings. The proxy requires authentication so I provided username and password.
When I want to access the web service in the Visual Composer the log file shows this:
com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (407) Proxy Authentication Required ( The ISA Server requires authorization to fulfill the request. Access to the Web Proxy service is denied. ). The requested URL was:"myWSURL"
It seems that authentication is not performed although I provided the correct credentials. Using (internal) web services without the proxy works fine with the visual composer.
Any ideas? Thanks, Kevin

Hi Kevin
I have used the cglobal weather,get cities by country and Currency converter webservices in VC for CE 7.1
The pdf in the link below was of immense help..
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/90f8a753-f03d-2a10-5fb0-f14b085b4cb2
Hope this helps.

Assign Access Control HTTP 404

The assign access control throws the http 404 error when i try to provision from shared services. It however works from workspace. Is this a known issue on 11.1.2.2? If there are any ways to make it work, Please post.

ak123 wrote:
Its the same when I try from both port 28080 and 9000.So are you running the embedded http server on port 9000? if not and you are using OHS then try accessing Shared Services through that port e.g. http://<sharedservices>:19000/interop/index.jsp
Actually I am not sure that matters with HFM and you can go direct through 28080 or 19000, worth a try, if not maybe it just needs registering again as Pablo said.
Cheers
John
http://john-goodwin.blogspot.com/

SQL Developer fails to access update center via http proxy

Hi,
I've configured HTTP Proxy exactly like MS-IE. Anyway, sql developer fails to access web. This is the error message:
java.io.IOException: Server returned HTTP response code: 407 for URL: http://htmldb.oracle.com/pls/otn/f?p=38606:2
     at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:1149)
     at oracle.ideimpl.webupdate.CheckMasterListRunnable.run(CheckMasterListRunnable.java:131)
     at java.lang.Thread.run(Thread.java:595)
Using the same URL in IE gives the following result:
<?xml version="1.0" encoding="UTF-8" ?>
- <centers xmlns="http://xmlns.oracle.com/jdeveloper/update/master">
- <center id="oracle.sqldeveloper.webupdate.internal">
<url>http://htmldb.oracle.com/pls/otn/f?p=raptor:internal</url>
<name>Internal Update Cetner</name>
<domain>.*\.us.oracle.com</domain>
</center>
- <center id="oracle.sqldeveloper.webupdate.otncenter">
<url>http://htmldb.oracle.com/pls/otn/f?p=raptor:center</url>
<name>Official Oracle Extensions</name>
</center>
</centers>
What's wrong?
I'm using sql developer 1.0.0.14.22.
Martin

Given that the update centre worked for me with proxy authentication in v1422 (and Production v1467 - I would recommend that you upgrade to this with a full download if you can't sort out your proxy issues), I would assume that it is not a SQL Developer bug.
Are you still getting HTTP 407 errors when you have entered your username and password?
Unfortunately, I don't know what username/password expectations a RADIUS based proxy authentication would expect. The only thing I can suggest to try is to explicitly put your username/password in your MS-IE proxy setup and see if you can still access the http://htmldb.oracle.com/pls/otn/f?p=38606:2 URL through IE. If this fails through IE, the username/password that you are supplying are not what the proxy is expecting.

Assign access control,http 404 error

Hi,
when i right click on assign access control,i receive the following error:
The page cannot be found
The page you are looking for might have been removed, had its name changed, or is temporarily unavailable.
Please try the following:
If you typed the page address in the Address bar, make sure that it is spelled correctly.
Open the server111:19000 home page, and then look for links to the information you want.
Click the Back button to try another link.
Click Search to look for information on the Internet.
HTTP 404 - File not found
Internet Explorer
Can you help me in this regard ?
Thanks,
ColDFire

ak123 wrote:
Its the same when I try from both port 28080 and 9000.So are you running the embedded http server on port 9000? if not and you are using OHS then try accessing Shared Services through that port e.g. http://<sharedservices>:19000/interop/index.jsp
Actually I am not sure that matters with HFM and you can go direct through 28080 or 19000, worth a try, if not maybe it just needs registering again as Pablo said.
Cheers
John
http://john-goodwin.blogspot.com/

Specific WiFi access point HTTP proxy always turning off?

Hello,
My corporate - issued iPhone 4S which is currently sporting 6.1.1 has a weird issue - the corporate WiFi access point HTTP proxy setting always defaults to Off after trying to set it up with a Auto setting and entering a URL to our company's PAC file. My colleagues do not have the same issue - they are able to setup HTTP Proxy to Auto and enter the URL to the PAC file. I tried this with other access points (non-corporate) and it works fine. Is this something specific to the WiFi profile pushed to my device? I've tried contacting our company's IT personnel in charge and they weren't able to give me an answer. Hoping someone here can. Thanks in advance!
Cheers

To remove access poit, go to settings>connectivity>settings>Destination>Internet>long hold access point and select delete.
For Gmail, don't use it, but if you remove/delete mailbox and then set it up again it should work fine, also heard that during set up if you reject terms and conditions and set up manually it works better ?
http://asimag.wordpress.com/2007/06/22/how-to-configure-gmail-account-on-your-n95n73/
If I have helped at all, a click on the White Star is always appreciated :
you can also help others by marking 'accept as solution'

Continous HTTP access error logged when using Weblogic Cluster

I am not sure if this is the right forum for this discussion, but here we go anyways.
We have created a Weblogic Cluster with one Administration Server and up to 12 Managed Servers. Our Weblogic version is 9.2.
SSL has been enabled for all Servers and the HTTP Listen Ports are all turned off. The cluster and all applications are working fine and communicating over HTTP as expected, however the logs grow 3MB+ per hour due to an error that repeatedly logged. This error appears to be an attempt by an internal Weblogic process to access some resource over HTTP.
Here are the various messages received in the logs. There are 3 messages logged per error occurred.
This first log message is from the domain log (I replaced the hostname/IP info with <PEER>):
####<Aug 11, 2008 12:08:46 PM GMT+00:00> <Warning> <Security> <PEER> <ManagedServer7> <[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1218456526962> <BEA-090475> <Plaintext data for protocol HTTP was received from peer <PEER> instead of an SSL handshake.>
This second log message is from the ".out" log from the Administration Server:
####<Aug 11, 2008 12:08:58 PM GMT+00:00> <Info> <ServletContext-/bea_wls_internal> <PEER> <AdminServer> <[ACTIVE] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'> <<anonymous>> <> <> <1218456538658> <000000> <HTTPClntLogin: Login rejected with code: 'Failed', reason: java.net.ProtocolException: HTTP tunneling is disabled
at weblogic.rjvm.http.HTTPServerJVMConnection.acceptJVMConnection(HTTPServerJVMConnection.java:88)
at weblogic.rjvm.http.TunnelLoginServlet.service(TunnelLoginServlet.java:80)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
at weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)
at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:283)
at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:175)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3231)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:121)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2002)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:1908)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1362)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:209)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:181)
This last message is from the access.log for the Admin Server:
<PEER> - - [11/Aug/2008:12:08:58 +0000] "GET /bea_wls_internal/HTTPClntLogin/a.tun?wl-login=https+dummy+WLREQS+9.2.2.0+dummy+%0A&rand=8038349418070109915&AS=2048&HL=19 HTTP/1.1" 200 1337
I have searched all over trying to find a solution but with no luck thus far. I have seen some posts about turning on HTTPTunneling and this does seem to prevent the error from occurring, but this is not a solution for us.
I could really use some help in understanding whats going on and trying to resolve this issue. Our client will make a big deal out of this and will want a solution. Any help would be greatly appreciated.
Message was edited by:
user651444

Hi,
We had this problem with WebLogic Platform 9.2 MP2, running on Solaris. The patch CR344429 worked fine. The corresponding patch for 9.2 MP3 is CR370091. You can get these patches through Oracle Support.
A couple of points:
1. We did not have to set StartScriptEnabled=true for the patch to work. We use the SSL Niode manager.
2. Using the t3: protocol (-Dweblogic.management.server=t3://<admin server listen address>:<admin server listen port) does stop these exceptions, but causes these warning messages to appear in the administration server log file:
<Warning> <[STANDBY] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <...> <BEA-002637> <Failed to register a disconnect listener because of weblogic.rmi.extensions.DisconnectMonitorUnavailableException: Could not register a DisconnectListener for [weblogic.rmi.internal.BasicRemoteRef ......>
<Warning> <[STANDBY] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <...> <BEA-002637> <Failed to register a disconnect listener because of weblogic.rmi.extensions.DisconnectMonitorUnavailableException: Could not register a DisconnectListener for [weblogic.rmi.internal.BasicRemoteRef ......>
Hope these comments help.

Https proxy logs

folks
i have a query on https proxy logs
i'm piloting a https proxy configruation and i have a question on the logs generated
i'm decrypting and then encrypting traffic but i'm curious about what the appliance does with the logs showing the unencrypted content, i.e. passwords, credit card number etc
i'm curious cos i want to make sure this content is not available to anyone and is secured or overwritten
thanks to anyone taking the time to reply

The https proxy logs don't contain any of that data.

NWA Log Viewer Access

Hello
Is there a way of giving someone access to log viewer in NWA and nothing else, not in NWA and not in the poprtal?
Thanks
Roy

Try assigning the role "SAP_JAVA_NWADMIN_LOGVIEWER_ONLY" .. user should see only log viewer through NWA.
Mahesh

An access control proxy in front of my JSP pages

Hi All,
I want to protect the access to my jsp pages. If for example the user types in his browser www.abc.com/page1.jsp, I want to capture that request and pass it to an access control engine. If the user is authorized then he should get that page if not he should be directed to another page.
any answers will be appreciated ... I'm using tomcat 5.5.

For example the user types in his browser www.abc.com/page1.jsp, I want to capture that request and pass it to an access control engine. If the user is authorized then he should get that page if not he should be directed to another page.
Focus a bit on your design: Ask yourself how will the whole world accessing the page can be identified?
It is via machine to machine authentication and handshake or user authentication and authorisation?
Machine to machine will happen on a VPN infrastracture where specified connections are directed to a host port else the other, or user authentication and authorisation where user login to determine which bit of yourr page he has access to, then using MVC framework you can say hang-on! base on your credential you're authorised to use this page instead.
Note if no one is identifying him/herself on your system before having access to the required resource then your design aim sounds excuse me to say abit difficult to achieve. Again from the look at things you're trying to achieve this using acccess router, please if that is the case then think otherwise because it is not possible,
Edited by: bidox on Mar 29, 2008 9:25 AM

Http proxy View access control log

Similar Messages

Maybe you are looking for