Instanceconfig.xml Allow address not working

Hello all,
In our 10g installation, we limited access to our OBI using the <Listener><Firewall> tags. They had following format:
<Listener>
     <Firewall>
          <Allow address="127.0.0.1"/>
     </Firewall>
</Listener>
But moving this to our 11g installation prevents the OBIPS service to start. Does anyone know if the tags or location of this has changed? I did not find any working examples in the documentation so far...

Hi,
I found just a way to allow a particular range of IP access to OBIEE 11g.
You can use the Weblogic Connection Filter but you will stop the access for all the application on the domain.
http://weblogicissuesolutions.blogspot.it/2011/05/steps-to-configure-weblogic-connection.html
http://weblogic-wonders.com/weblogic/2011/03/03/weblogic-connection-filters/
http://jvzoggel.wordpress.com/2011/07/12/using-weblogic-network-connection-filters/
http://docs.oracle.com/cd/E13222_01/wls/docs81/security/con_filtr.html
Luigi

Similar Messages

HT5312 Rescue email address not work and I forget my security question answers

Rescue email address not work and I forget my security question answers

If you don't have access to your rescue email account (you won't be able to change it until you can answer 2 of your questions), or you aren't receiving the email to it, then you will need to contact iTunes Support or Apple to get the questions reset.
e.g. you can try contacting iTunes Support : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page, then Account Management , and then 'Forgotten Apple ID security questions'
or try ringing Apple in your country and ask to talk to the Accounts Security Team : http://support.apple.com/kb/HE57
When they've been reset you can then use the steps half-way down the page that you posted from to update your rescue email address for potential future use, or you could change to 2-step verification : http://support.apple.com/kb/HT5570

Orion-web.xml access-mask not working

Hi, I am trying to restrict access to a specific application via the orion-web.xml descriptor. This would be OC4J in OAS 10.1.3.4.
I have done this in the GUI by using the "Advanced Deployment Plan Editing -> Edit Deployment Plan" option. I thought this would be safer than editing the files by hand. The application deploys successfully, and in orion-web.xml of my deployed application, this translates into:
<orion-web-app
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/orion-web-10_0.xsd"
        deployment-version="10.1.3.4.0"
        deployment-time="1241707803607"
        jsp-cache-directory="./persistence"
        jsp-cache-tlds="standard"
        jsp-taglib-locations=""
        temporary-directory="./temp"
        context-root="MyApp"
schema-major-version="10" schema-minor-version="0" >
        <access-mask default="deny">
                <ip-access ip="127.0.0.1" mode="allow" netmask="255.255.255.255" />
                <ip-access ip="192.168.0.100" mode="allow" netmask="255.255.255.255" />
                <ip-access ip="192.168.0.101" mode="allow" netmask="255.255.255.255" />
        </access-mask>
        
        <resource-ref-mapping name="jdbc/myDB" location="jdbc/myDB" />
        <web-app>
        </web-app>
</orion-web-app>This looks OK to my eyes, but unfortunately it doesn't restrict any access at all. I have restarted the specific application, and I have also restarted the entire OC4J. No access is restricted; I can pull up the application from any IP address. My intention was to restrict access only to the 2 IP addresses (and localhost by IP) listed above.
I have reviewed multiple metalink articles on this topic:
Note 438493.1 - How to Restrict access for EM Database Control only from Specific Hosts / IPs
Note 178665.1 - How to Restrict Access to OC4J to Specific Hosts or IP Addresses
Note 311137.1 - How to restrict access to EM website based on IP Addresses/Domain Names
None of them seem to indicate that I have done anything wrong.
If anyone has any feedback on this topic, identifies a problem with my config, or has knowledge of a product bug, please respond to this thread.
Many thanks in advance for your feedback.

were you able to resolve this?

Erec - leaving action deleted internal candidate email address not working

Good morning
We have the following situation:
1. A person was made a leaver in HR with future leaving date.
2. Decision was made that the person could actually stay so the leaving action was deleted in HR.
3. In erec in SU01 person still showing as role RCF_INT however the email address (produced from IT105 subtype 0010 in HR) was blank and his Alias field populated with his employee number ie: as if he was a leaver still.
4. I have manually updated the email address in erec for his internal email address - this did not let him apply for an internal job. I then deleted it in IT105 in HR and then recreated it in IT105 - this has gone across to Erec however he still cannot apply and the Alias field is still being populated.
So erec is behaving as if he is part internal and part external! How can I stop the Alias field being populated for him and how can I then get the email address to work?
many thanks
Dawn

Hi Nicole
Thank you. The order of events was as follows:
a. On 25.01.11 a leaving action was done to start 01.04.11
b. A decision made in March that the individual could stay however the leaving action was not deleted until 08.04.11
c. This meant that he became a leaver in erec and due to subsequently deleting the leaving action he has reverted to INT_CAND (which is what we want).
I have managed to get the email address to work by deleting the IT105 subtype 0010 in HR, I then recreated it in HR and it has PFAL'd over to erecruitment so the user is now able to apply for jobs.
However the Alias field is still populated and the user has an additional employee number in erecuitment. Are you able to advise how the alias field can be depopulated?
Many thanks
Dawn

A STANDARD XML TAG IS NOT WORKING PROPERLY WHEN USED IN RTF FILE FOR XML RE

Hi,
I am using the following tag :
<?if:TASK_STATUS='Open'?><xsl:attribute xdofo:ctx="block“name="color">red</xsl:attribute>
<?end if?>
for changing foreground color of text which depending on certain conditiosi need to print in
pdf format using xml reports and rtf files.
But i was able to get only 3 colors (Red,Blue,Green) for use, other colors such as orange,cyan etc are not
working.
Please let me know what all colors are supported by oracle in printing in pdf format using xml reports.
Suggest if we need to do some settings related stuff or so.
I am usning XML 5.6.3 version.
Regards,
Amar

Colors can be expressed by known name and by a hex value. The hex value format is widely used in HTML programming, and has a format of #abcdef, and "abcdef" can be values like aaddcc and so on. For some primary colors, you can get away with #abc, but that is not very common.
You should always design with Web-safe colors in mind. That limits you to 16, but should be plenty for most purposes (plus all 16 have known names like red, cyan, yellow, etc.).
http://www.w3schools.com/Html/html_colors.asp has a good explanation of the standards.

Oracle Service Bus 11g omit-xml-declaration="yes" not working in XSL-T

I have the requirement of removing the XML header from xsl output.
eg: <?xml version="1.0" encoding="UTF-8" ?> this part has to removed
I tried using the following in XSLT:
<xsl:output indent="yes" omit-xml-declaration="yes" />.
It seems to work in all online xml compilers. It does not work in work in OSB.
I posted the message in a JMS Queue and it contains the xml header.
Is this a work around for this issue?

I'm pretty sure XSLT has nothing to do with that PI.
After all, XSLT in OSB doesn't format text, it generates an XmlObject. The formatting (including adding the <?xml?> PI) are done by other parts of the engine. Probably the XmlBeans serializator.
The only option I see is to serialize the XML, then cut off everything until first ?>.
Why would you need that, I wonder? May be there is a better way.
Vlad @ genericparallel.com

Vpn-framed-ip-address not working with anyconnect

Hi Folks, please help me to verify if this case is a bug or a "not valid scenario".
Scenario:
ASA 5520, OS 9.1, SSL VPN with Anyconnect v3.x, static ip address for the client, and RSA token authentication (all the users/pin/passwords are in the RSA server, not in the ASA, but i need to create some users in the ASA in order to apply the vpn-framed-ip-address attribute for specific users).
In fact the anyconnect ssl vpn with RSA auth works fine, the ssl connection works, the user is authenticated, the anyconnect works, traffic passing, BUT.. the anyconnect its getting an ip address from the ip local pool INSTEAD of the static ip defined with the vpn-framed-ip-address command.
I'm trying to assign a static ip address for a user (defined locally on the ASA) that performs auth via RSA (aaa-server), by using the vpn-framed-ip-address command as an attribute for this local user. But it seems the command is not working.
Already I´ve tried to resolve (with no success) by entering the
no vpn-addr-assign aaa
no vpn-addr-assign dhcp
vpn-addr-assign local
Also i´ve tried by removing the pool from tunnel-group in order to force all the connection session to use the static ip address, but in this case, the anyconnect sends a message "No Address Available for SVC Connection". Meaning the ASA simply is ignoring the vpn-framed-ip-address command.
Its supposed the ASA implement the policies in this order, DAP > User policy > UserGrp policy > ConnProfile > DefGrpPolicy, and according to this, the vpn-framed-ip-address command should take effect first since its specified as User policy, overriding everything else. But its not working.
At this point i think the issue is... since the user is locally defined but its password its being authenticated via RSA (not local), the user attributes (static ip) are being ignored by the ASA because its not expecting to receive an ip address from the aaa server (RSA), so jumps to the next policies falling to the pool. Anyway the user policies attributes SHOULD work according to cisco.
Please your advise, or tell if its a bug? or a not valid scenario for this command to work with the ASA.
This is the current config:
ip local pool PoolSSL 192.168.229.10-192.168.229.19 mask 255.255.255.0
aaa-server RSA protocol sdi
aaa-server RSA (inside) host 192.168.12.1
retry-interval 5
no vpn-addr-assign aaa
no vpn-addr-assign dhcp
group-policy GroupPolicyABC internal
group-policy GroupPolicyABC attributes
wins-server none
dns-server value 192.168.61.1 192.168.61.2
vpn-tunnel-protocol ssl-client
group-lock value TunnelGroupABC
split-tunnel-policy tunnelspecified
split-tunnel-network-list value ServersDB
default-domain value my.domain.com
split-tunnel-all-dns disable
webvpn
anyconnect ask none default anyconnect
username USER1 password xHhacRZ56Uadqoq encrypted
username USER1 attributes
vpn-framed-ip-address 192.168.229.7 255.255.255.0
group-lock value TunnelGroupABC
tunnel-group TunnelGroupABC type remote-access
tunnel-group TunnelGroupABC general-attributes
address-pool PoolSSL
authentication-server-group RSA
default-group-policy GroupPolicyABC
tunnel-group TunnelGroupABC webvpn-attributes
group-alias AccessToDB enable
I´ll wait for your answers, regards!

https://tools.cisco.com/bugsearch/bug/CSCtf71671/
you need AAA assignment, or at least you needed to have it a couple of years back.

XML Template was not working correctly in 11.5.9

Hi
I am currently working on XML rtf template for Invoice. And the rtf XML template is working fine (getting results as expected) in 11.5.10 but the same rtf is not working fine in 11.5.9( not getting the results as expected). My current version of XML Publisher in 11.5.9 is 4.5 and in 11.5.10 is 5.6. My question is there any to make the rtf work correctly in 11.5.9 aslo.
Thanks,
Ram.

I have seen such issues earlier. What you can do is to either upgrade xml publisher version or you have to play around with template a bit like adding dummy rows with lines invisible and consume very less space, dummy columns etc to get desired results

XML Data Button Not working when Exported onto BusinessObjectEnterprise

I have an XML data button on a dashboard. It works fine in preview and on web. It does not work if it is exported onto Business Object server using XCelsius' Export to BusinessObjectEnterprise.
In the InfoView, I double click on the flash file, the flash files opens as expected, but when XML Data button is clicked, no new data seem to come in...
If I export as Adobe file, and then post it onto the server, and view it using Info View, the XML data button works just fine.
Please advise.

Hi All,
Even I have similar requirement.
Any work around is appreciable.
Thanks
Vinod

Dynamic IP Address not working on MBP

Hello:
I am experiencing a problem with my MacBook Pro not being able to assign an IPv4 IP Address when "Using DHCP" is selected for either a wifi or ethernet connection. In order to be able to connect either device, I have to manually add an address (i.e., 192.168.0.36) & use "Using DHCP with manual address" instead.
It is interesting to note that all other devices on my home network work perfectly and all use DHCP and have addresses assigned to them. These devices include iPad's, iPhone's, AppleTV, etc... The only device that does not work is my MacBook Pro. Thinking it was a network issue, I reset my DSL router as well as my Airport Extreme to default settings and re-configured my network. This proved to be of no use.
Has anyone else expierienced this issue and know a possible solution?
Thanks in Advance.

If you have the public on the WAN of the router, you do not need it on the server. The server wants to be a static on the same range as the LAN of the router. If you have the router LAN set as 192.168.1.1 (which is the default of most out there)
you want the IP of the server to be something like 192.168.1.10, with the same subnet mask of the LAN of the router (Usually 255.255.255.0) and the Default Gateway of the server to be the LAN IP of the router (in this example: 192.168.1.1). For DNS,
you probably want to set the LAN IP of the router, as the router should send any requests to the public DNS set by the ISP.
This should get the server back online.

Manually set IP addresses not working as needed

We have setup our DCHP server in that we manually not dynamically give IP addresses to workstations according to there mac addresses. But most of the time the the workstations go and get the IP addresses dynamically, and in this case most of the time we get IP conflict. Does it mean the giving IP addresses manually does not work properly in the DHCP configuration. For reasons, we need to use Manually assigned IP addresses not dynamically. And how can I trace why the manually configured workstation go and get IP addresses dynamically ?

It should work properly. Please post your configuration.

Hello World XML/XSL example not working in IE

I am trying to get the "Hello World" XML/XSL example to work in IE.
Could anyone help me out?
The code follows:
hello.xml
<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" href="hello.xsl"?>
<hello-world>
<greeter>An XSLT Programmer</greeter>
<greeting>Hello, World!</greeting>
</hello-world>
hello.xsl
<?xml version="1.0"?>
<xsl:stylesheet
xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
version="1.0">
<xsl:template match="/hello-world">
<HTML>
<HEAD>
<TITLE></TITLE>
</HEAD>
<BODY>
<H1><xsl:value-of select="greeting"/></H1>
<xsl:apply-templates select="greeter"/>
</BODY>
</HTML>
</xsl:template>
<xsl:template match="greeter">
<DIV>from
<I><xsl:value-of select="."/></I>
</DIV>
</xsl:template>
</xsl:stylesheet>
Both files are in the same directory.
When hello.xml is opened in IE, the output displayed is just, "from".
What's wrong, and where?
Please help!
- Edwin.

Hi edwinwaz,
In response to your question, pls refer to this url
http://www.w3schools.com/xsl/el_template.asp
and take a look at the "note" in red.
It says that IE5.X have non-standard behavior on the element <xsl:template>
In addition, I have tested your code it works fine.
Just to add something on your code here.
I noticed that you do this
<xsl:apply-templates select="greeter"/>
and then in another template you do this
<xsl:template match="greeter">

</xsl:template>
In this case, it does work because "greeter" is a top-level element but if "greeter" is anything underneath the top-level element. It won't work.
Actually, I discovered this after taking a look at your example and
I was surprised that the code above worked and then I did some testing and discovered this.
I am learning XML too now... So, I am happy to know this :).
regards

Richard Huggins/Art ? email address not working Reply here

I received this email.
The return address does not work.
On 13 Mar 2006, at 22:51, art wrote:
On 3/13/06 1:13 PM, Richard Huggins wrote:
My daughter has the world's cutest toddlers and a PC. I, grand-dad, live 300
miles away and have a MacBook Pro with the built-in camera. So you now
understand my subject topic!
I'm new to the video chat stuff, so I'd appreciate help with what she could
use and I could use and us both see/hear each other. (She mentioned that She
has Skype, but Skype's Mac version does not yet support video.) I'm thinking
that I can't use iChat for this, but if I'm wrong let me know.
Thanks,
Richard
Sent using the Microsoft Entourage 2004 for Mac Test Drive.
Richard,
This might be possible depending on the configurations of the computers and the speeds of the communications links that you both have. iChat can be a bit tricky to set up for audio/video sessions, especially if there are one or more firewalls involved.
There's an excellent narrative on the specific topic of iChatPC at:
http://www.ralphjohnsuk.dsl.pipex.com/page12.html
You might check out the iChat forums in the Apple discussion groups at:
http://discussions.apple.com/category.jspa?categoryID=139
There is a wealth of knowledge and assistance about iChat related issues on these forums. There tends to be more active discussions regarding iChat related issues then here in the Usenet groups.
If you are unsuccessful with iChat, try Sight Speed (www.sightspeed.com). There are free clients for both Mac and PC. Unlike iChat, it is client-server based (iChat is peer-to-peer) so there are less obstacles to success.
It doesn't have as good video/audio quality as iChat and the echo suppression isn't as advanced, but it is much easier to set up. Also, unlike iChat, the conferencing capabilities (more than two users) are not included with the free versions.
HTH...
Regards,
Art
My reply was
Hi,
iChat will Video chat to the AIM 5.9 Application or Trillian Pro ($25) run on a XP PC.
Both ends need some settings up. The AIM application more, with an extra "Tuning" stage.
The AIM application needs the Tuning and Enabling through the XP firewall (links to Tuning and an Explanation of the Firewall stuff on the Page 12 link)
The Trillian needs just enabling though the XP firewall.
Both ends also need to make sure the applications involved can also get through the routers and modems involved.
This page has links to Real People testers and some Autoresponding test accounts. Both ends should try contacting the autoresponding accounts and then with a selection of the Real People, to see where they are up to. Then Try PC to PC and Mac to Mac before trying Mac to PC (Or the other way round).
This list has some cross platform stuff
There is also YakforFree iVisit and others out there.
I hope this helps whoever sent the email.
4:58 PM Thursday; March 16, 2006

Hi ernestw31,
First make sure that you're using the email address that you used to set up your subscription. If you are and still can't sign in, please contact Adobe Customer Support; an agent can help you resolve your account issue.
Click the Chat link at https://www.acrobat.com/misc/en/contact-support.html. Chat is available from 5am – 7pm PST.
Please let us know if you need further assistance.
Best,
Sara

Answer-address not work

Dear Admin,
I have tried few day already to match inbound call base on Calling number.
Call made from calling number range 8000-9 and try to terminate the call by prefix 332168 thru TDM link but it was not work.
Below is my scenario and configuration detail. Please advice if anything wrong.
Partner A ( Over SIP protocol ) ------> ( Inbound SIP ) AS5400 ( TDM )----->PSTN
dial-peer voice 332855 pots
description Outbound to TDM-A
max-conn 1
answer-address 800[0-9]
destination-pattern 332168.
progress_ind alert enable 8
port 6/7:D
dial-peer voice 3328551 voip
description Inbound Sip from KZ
voice-class codec 1
session protocol sipv2
answer-address 800[0-9]
Best Regards,
Daneth

Call Apple Care and ask for the Account Security Team. They can assist you with your issue.

VPN pw mgmt plus framed IP address not working

I am trying to configure AAA for an SSL VPN (ASA, 8.x) to support both password management and a framed IP address. Authentication server is AD.
I can get the pw mgmt to work when using LDAP authentication against AD, and I can get the framed IP address to work with IAS (RADIUS on AD). But, I cannot get both to work at the same time with either method.
Any help appreciated.

The security appliance can use one or more of the following methods for assigning IP addresses to remote access clients. If you configure more than one address assignment method, the security appliance searches each of the options until it finds an IP address. By default, all methods are enabled. The following URL will help you
http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/vpnadd.html
http://www.cisco.com/en/US/docs/security/asa/asa71/configuration/guide/svc.html

Instanceconfig.xml Allow address not working

Similar Messages

Maybe you are looking for