Issue with changing Access Service in ACS 5.2

Hi,
I am working on lab setup where I installed ACS 5.2 I created new access service and used it in existing service selection rule (Rule-2) earlier but it didn't work. Later I created new service selection rule and applied new service access rule. However even after this change it keeps applying predefined default access access service. Please refer attached picture for better understanding.
As shown, I want Aks-Rule to work and apply service 'Lab-Policy' however it keeps referring Rule-2 and applies 'Default Device Admin' access service even after I disable it.
I have to restart ACS service from CLI console to make it work. Is this a bug or am I missing anything. Please advise guys.
Regards,
Akshay

Since the policy AKS is top in sequence under service selection rule so it should hit for sure. As you wrote that even after disabling the default device admin, then also request is hitting the same and restarting the ACS services resolved the issue. The symptoms of your issue are exactly same as stated in this defect.
CSCuo93378 Certain browsers cause ACS database corruption
Due to this issue we have seen cases where request hits the disable and default policies without any reason. Actually accessing ACS via chrome mess around with all the operators in conditions.
The only workaround is to access all the rules and conditions in supported browser. Ensure all the operators are correct, save the changes and restart the ACS services.
The issue seems to be fixed in ACS 5.5 patch 5
Regards,
Jatin

Similar Messages

Are there any issues with changing IP address of an ACS v5.3 system after initial setup?

I am migrating from ACS v4.2.1 to v5.3. I want the final v5.3 system to assume the IP address of the original 4.2 machine so I don't have to change any configs on the network devices.
Are there any issues with changing the v5.3 system IP address AFTER the initial setup?

I tried it without a problem. I changed the ip address of the WLC many times.
You have to make sure though that:
1-) You change the switchport accordingly to the appropriate vlan if the new ip belongs to a subnet of a different vlan.
2-) Make sure that all AAA clients configured to use the new IP address of the ACS servers.
Here is the procedure how to change the ip of the interface (as per cisco doc):
http://goo.gl/0BYqVT
I changed also by normal ip address command and it works. but of course the server must be standalone before doing that step (i.e. no secondary ACSs registered to it and it is not registered to other ACSs in a distributoin).
HTH
Amjad

Issue with changing database location at runtime

I am having a similar issue to:
Re: Issue with changing database location at runtime
where I am using Crystal Reports 2008 SP 3 fix pack 3.3 and a OLE DB connection to a SQL 2008 R2 server. Running on a computer on the network where the report can see the original development server is fast, other computers where that server is not available are hanging 20 seconds before coming up.
I am using the same code from the Crystal Sample app to change the connection on each table. I found that the slowness comes the first time the ReportDocument object is accessed to get the collection of database tables, before the connection info is set.
Fix pack 3.4 was mentioned in that post. Does fix pack 3.4 fix that issue? I don't see fix pack 3.4 on the downloads page (https://websmp130.sap-ag.de/sap%28bD1lbiZjPTAwMQ==%29/bc/bsp/spn/bobj_download/main.htm)

I just found on the reports that were having the issue there was a SQL Expression. Per this thread:
Re: Report load is slow after changing database servers
There was an issue with that and the fix is not out til the end of Feb so I found a way not to use the SQL Expression and the speed is much better.
However, your information provided led me to this post:
Cannot Change Table Location, but Only for One Report
And I am also experiencing an issue where the table location is not changing on one subreport and I will look into that as a possible solution.
Thanks so much for your help.

Issue with assistive access not keeping permissions

Since a recent upgrade (likely from OS X 10.9.x to 10.10.2) I've had issues with Assistive Access blocking Automator and Applescript from interaction with dialogs.
If I run my script or my Automator workflow (which basically has the same script in it) I get the error:
System Events got an error: Automator is not allowed assistive access. (in the case of Automator).
If I open Automator, and then untick and retick the Automator entry in the Accessibility options within Security & Privacy (System Preferences), then workflow can run again. It continues to work until I Quit Automator. Then it's as if OS X no longer trusts Automator to be the same app I gave Accessibility permissions to. And the situation repeats. It's much as if it were not code-signed. The exact same issue plays out with Apple Script.
I came across this info, which I hoped would solve the problem, but it made no difference: http://macscripter.net/viewtopic.php?id=43394 and http://bit.ly/1x3SRmc
In my Accessibility permissions I now have:
Script Editor
Automator
1Password 5 (which the script interacts with)
com.apple.security.agentStub.xpc (in case that's being called up and triggering the Accessibility issue)
osascript (in case that's handling the script and triggering the Accessibility issue)
SecurityAgent.xpc (in case that was triggering the Accessibility issue)
I added all these because the post at http://bit.ly/1x3SRmc indicated that anything Apple Script is interacting with needs Accessibility access permissions.
My script is as follows:
set appName to "SecurityAgent"
set passApp to "1Password 5" (* set this to the name of your password manager *)
tell application "System Events"
if not (exists window 1 of process appName) then -- test if SecurityAgent window exists
set answer to display dialog "The password dialog was not found. Please check." buttons {"Ok"}
return -- abort if SecurityAgent window does not exist
end if
end tell
tell application "System Events"
set position of window 1 of process appName to {10, 10}
-- move SecurityAgent window out of the way
end tell
activate application passApp
tell application "System Events"
tell application "SystemUIServer"
set answer to display dialog "Make sure correct 1Password item is actively selected (i.e. click it again if it was previously selected), then click “Continue” to proceed." buttons {"Continue"}
end tell
tell process passApp
(* If you are not using 1Password, you may need to change the menu item clicks, below, to whatever is correct in your particular password manager *)
click menu item "copy password" of menu "item" of menu bar 1
delay 1
set appData to the clipboard
end tell
tell application "System Events"
tell process appName
set value of text field 1 of window 1 to appData
if exists (text field 2 of window 1) then
set value of text field 2 of window 1 to appData
if exists checkbox 1 of window 1 then
if value of checkbox 1 of window 1 is 1 then
click checkbox 1 of window 1
end if
end if
set value of checkbox 1 of window 1 to 0
delay 1 (* gives a moment to see what's going on *)
click button "OK" of window 1
else
if value of checkbox 1 of window 1 is 1 then
click checkbox 1 of window 1
end if
delay 1 (* gives a moment to see what's going on *)
click button "OK" of window 1
end if
end tell
end tell
end tell
In Automator it would appear the script is generating an error as soon as it reaches line 5, "if not (exists window 1 of process appName) then"
I would greatly appreciate some assistance in resolving this issue.

Starting with Mavericks, Apple changed the way that the accessibility works (see Using AppleScript with Accessibility and Security features in Mavericks) - each individual application needs to be given access, instead of a global option. A regular AppleScript application saves properties and global variables with the script, which makes it a new application as far as the system security is concerned, so it needs to be re-added to the accessibility list. To work with this new security feature, you need to code-sign your AppleScript application or make the script(s) in the bundle read-only so that they don't get changed (note that an AppleScript-based project in Xcode does not modify the application bundle by saving properties and globals).

Issue with web access in view administrator console after connection server 5.5 installation.

Hi All,
I am trying to bring up my setup with ESXi 5.5 and vcenter 5.5 U2. I made a DNS server and made two 2008 R2 machines and launched vcentre and connection manager on them.
After installing connection server 5.5, I am unable to open the web UI by clicking "view administrator console" icon on my desktop! I installed proper certificated and iis module too and confirmed that my https certificate is properly working. (snapshot attached, filename - snapshot_view_webpage.jpeg)
I google for the possible error and tried below mentioned links but none of them worked.
1.)    http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2004759
Corrected this error but still system is in same shape and i am unable to get the console's admin webpage.
2.)    http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2001277
In this method, my admin folder didn't got recreated as the service restart got stuck for a long time and throws error that service restart got time out!!(snapshot attached)
Can some one please help me to move forward. Please let me know if you need more information from my end.
Thanks,
Jeevan

Since the policy AKS is top in sequence under service selection rule so it should hit for sure. As you wrote that even after disabling the default device admin, then also request is hitting the same and restarting the ACS services resolved the issue. The symptoms of your issue are exactly same as stated in this defect.
CSCuo93378    Certain browsers cause ACS database corruption
Due to this issue we have seen cases where request hits the disable and default policies without any reason. Actually accessing ACS via chrome mess around with all the operators in conditions.
The only workaround is to access all the rules and conditions in supported browser. Ensure all the operators are correct, save the changes and restart the ACS services.
The issue seems to be fixed in ACS 5.5 patch 5
Regards,
Jatin

Remote Delta link setup problem with Bean / Access Service

Hello,
I am trying to setup Remote Delta Link (RDL) between two portals. (Both portals same version - EP 7.0 EHP1 SP 05 - are in the same domain)
I already have the Remote Role Assignment working without any issues.
The following have been done successfully:
1. Same user repository has been setup for both the portals
2. Setup trust between producer and consumer (SSO working fine)
3. Producer added and registered succesfully on consumer
4. Permissions setup on producer and consumer
4. pcd_service user with required UME actions setup
I am able to see all the remote content in the Consumer portal.
When I try to copy the remote content and paste it as local content, I am getting the following error:
Could not create remote delta link to object 'page id'. Could not connect to the remote portal. The remote portal may be down, there may be a network problem, or your connection settings to the remote portal may be configured incorrectly.
After increasing the log severity, I am able to see the following in Default Trace:
com.sap.portal.fpn.transport.Trying to lookup access service (P4-RMI) for connecting to producer 'ess_int' with information: com.sap.portal.fpn.remote.AccessServiceInformation@31c92207[connectionURL=hostname.mycompany.com:50004, shouldUseSSL=false, RemoteName=AccessService]
com.sap.portal.fpn.transport.Unable to lookup access service (P4-RMI) with information: com.sap.portal.fpn.remote.AccessServiceInformation@31c92207[connectionURL=hostname.mycompany.com:50004, shouldUseSSL=false, RemoteName=AccessService]
AbstractAdvancedOperation.handleDirOperationException
[EXCEPTION]
com.sap.portal.pcm.admin.exceptions.DirOperationFailedException: Could not retrieve the bean / access service to connect with producer
Could not retrieve the bean / access service to connect with producer
Like you can see above, there is some bean / access service which is not retrieved successfully. I am not sure if this is a permission problem on the consumer.
I have checked that the P4 ports are configured correctly (standard - not changed) and I am able to telnet from producer to consumer (and vice versa) on the P4 port.
I am stuck at this point and am not able to find any information on this.
I would really appreciate if some one can point me in the right direction.
Thank you for reading.
- Raj

Hi Raj,
Please check your config of the P4 port on the producer. Is it really 50004 (check SystemInfo of the producer)?
I do think there's a problem with the P4 communication since RDL requires P4 connection.
Do you have load balanced consumer-producer connection? Please refer to this blog for further details
Little known ways to create a load balanced Consumer Producer connection in a FPN scenario
Regards,
Dao

SCOM 2012 Issue The Data Access service is either not running or not yet initialized

Hello All,
My SCOM 2012 console all of sudden stopped working when I changed the size of the SQL database for the SCOM server.
The setup is all on a virtual machine running windows 2012, with SQL 2012 running SCOM 2012 SP1. Everything was working until I made the SQL server database size change.
Now I am getting an error when I try to open the SCOM 2012 console. It just says Failed to connect to server servername.internaldomain.com The Data Access service is either not running or not yet initialized. Check the event log for more information.
here is the logs from the console app (the application logs are below this)
Date: 2/11/2013 12:16:45 PM
Application: Operations Manager
Application Version: 7.0.9538.0
Severity: Error
Message: Failed to connect to server 'servername.internaldomain.com'
Microsoft.EnterpriseManagement.Common.ServiceNotRunningException: The Data Access service is either not running or not yet initialized. Check the event log for more information. ---> System.ServiceModel.EndpointNotFoundException: Could not connect to
net.tcp://servername.internaldomain.com:5724/DispatcherService. The connection attempt lasted for a time span of 00:00:02.0956135. TCP error code 10061: No connection could be made because the target machine actively refused it 192.168.X.X:5724. --->
System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 192.168.X.X:5724
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   --- End of inner exception stack trace ---
Server stack trace:
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
   at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)
   at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Microsoft.EnterpriseManagement.Common.Internal.IDispatcherService.Connect(SdkClientConnectionOptions connectionOptions)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Initialize(EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
   --- End of inner exception stack trace ---
   at Microsoft.EnterpriseManagement.Common.Internal.ExceptionHandlers.HandleChannelExceptions(Exception ex)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.ConstructEnterpriseManagementGroupInternal[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore clientCallback)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.RetrieveEnterpriseManagementGroupInternal[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore callbackDispatcherService)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Connect[T,P](EnterpriseManagementConnectionSettings connectionSettings, ClientDataAccessCore callbackDispatcherService)
   at Microsoft.EnterpriseManagement.ManagementGroup.InternalInitialize(EnterpriseManagementConnectionSettings connectionSettings, ManagementGroupInternal internals)
   at Microsoft.EnterpriseManagement.ManagementGroup.Connect(ManagementGroupConnectionSettings connectionSettings)
   at Microsoft.EnterpriseManagement.Mom.Internal.UI.Common.ManagementGroupSessionManager.Connect(String server)
   at Microsoft.EnterpriseManagement.Monitoring.Console.Internal.ConsoleWindowBase.TryConnectToManagementGroupJob(Object sender, ConsoleJobEventArgs args)
System.ServiceModel.EndpointNotFoundException: Could not connect to net.tcp://servername.internaldomain.com:5724/DispatcherService. The connection attempt lasted for a time span of 00:00:02.0956135. TCP error code 10061: No connection could be made because
the target machine actively refused it 192.168.X.X:5724. ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 192.168.X.X:5724
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   --- End of inner exception stack trace ---
Server stack trace:
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.ServiceModel.Channels.BufferedConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
   at System.ServiceModel.Channels.ConnectionPoolHelper.EstablishConnection(TimeSpan timeout)
   at System.ServiceModel.Channels.ClientFramingDuplexSessionChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.OnOpen(TimeSpan timeout)
   at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.CallOnceManager.CallOnce(TimeSpan timeout, CallOnceManager cascade)
   at System.ServiceModel.Channels.ServiceChannel.EnsureOpened(TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
   at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
   at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
   at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
   at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
   at Microsoft.EnterpriseManagement.Common.Internal.IDispatcherService.Connect(SdkClientConnectionOptions connectionOptions)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.Initialize(EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
   at Microsoft.EnterpriseManagement.Common.Internal.SdkDataLayerProxyCore.CreateEndpoint[T](EnterpriseManagementConnectionSettings connectionSettings, SdkChannelObject`1 channelObjectDispatcherService)
System.Net.Sockets.SocketException (0x80004005): No connection could be made because the target machine actively refused it 192.168.X.X:5724
   at System.Net.Sockets.Socket.DoConnect(EndPoint endPointSnapshot, SocketAddress socketAddress)
   at System.Net.Sockets.Socket.Connect(EndPoint remoteEP)
   at System.ServiceModel.Channels.SocketConnectionInitiator.Connect(Uri uri, TimeSpan timeout)
Application Error: Event ID:1000
Faulting application name: Microsoft.Mom.Sdk.ServiceHost.exe, version: 7.5.2808.0, time stamp: 0x5082b3a5
Faulting module name: KERNELBASE.dll, version: 6.2.9200.16451, time stamp: 0x50988aa6
Exception code: 0xe0434352
Fault offset: 0x000000000003811c
Faulting process id: 0xb28
Faulting application start time: 0x01ce088d19221739
Faulting application path: C:\Program Files\System Center 2012\Operations Manager\Server\Microsoft.Mom.Sdk.ServiceHost.exe
Faulting module path: C:\Windows\system32\KERNELBASE.dll
Report Id: 5a80a27e-7480-11e2-93fc-00155d01651b
Faulting package full name:
Faulting package-relative application ID
.NET Runtime Error Event ID: 1026
Application: Microsoft.Mom.Sdk.ServiceHost.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: Microsoft.EnterpriseManagement.ConfigurationReaderException
Stack:
   at Microsoft.EnterpriseManagement.ServiceDataLayer.DispatcherService.Initialize(Microsoft.EnterpriseManagement.InProcEnterpriseManagementConnectionSettings)
   at Microsoft.EnterpriseManagement.ServiceDataLayer.DispatcherService.InitializeRunner(System.Object)
   at System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   at System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   at System.Threading.ThreadHelper.ThreadStart(System.Object)
I tried to reinstall the console and some of other mentioned things from the other posts but I think that there is a SQL issue here that I am not seeing. Can someone please help.
Thanks
Robert Lavigne Network Operations Manager - Kilobytes Data Solutions.

Hi
The issue got resolved after refresh the SCOM Data base access service account in SQL 2012.
Unable to launch the operations manager 2012 R2 console after extended the C drive of the SQl server ,getting error "The Data
Access service is either not
running or not yet initialized.
Got to your SQL server -->databases-operationsmanager--security-users--locate the daa service account and refresh.issue fixed and am able to luanch.

Does anyone else have issues with Verizon LTE service on the new iPad?

I have the new iPad. I have noticed that issues with the LTE signal have gotten progressively worse. When my iPad is sitting in 1 spot it will switch from 3 bars, to no service, to 3 bars, and so fourth. I might be on a website, or in an app that is using data and it works great. Then at random it says No Service again. I just added my iPad to my Verizon account with their new family data plan, so they sent me a brand new SIM card. I feel like I can rule that out.
I just want to know if anybody else has an issue with their iPad dropping service at random and jumping all over the board. I also have an iPhone on Verizon and it is with me always, I never have this problem with the iPhone. My iPad will say No Service but my iPhone will show nearly full service.
Just to add, I have switched off LTE for periods of time to see if things change. (that way both my iPhone and iPad are on 3G so I can compare) Things are no different when just running LTE.
Any thoughts would be appreciated. I am under warrenty and I have Apple Care. I hate taking stuff in and replacing it if I don't need to.
I am also signed up with a developer account through Apple, and my iPad has iOS 6 beta. This problem did not start with the beta software. It was the case before and after. I guess I was hoping if it was an issue Apple would address it with one of the revisions in iOS 6, but now I am starting to wonder if it is hardware.
Thank you.

Try looking/posting here.
Adobe Support
Adobe Forums

PXE boot issues with Windows Deployment Services

I am trying to move from FOG to WDS after running in to serious UEFI issues with FOG.Right now I'm stuck with machines PXE booting to WDS server.I keep getting the message ProxyDHCP service didn't reply to request on port 4011.WDS and DHCP are on different servers. There are plenty of IP addresses available, and they are on the same subnet. I did originally configure DHCP option 60, but deleted that option after troubleshooting. I have configured Windows Firewall to allow inbound and outbound connections on UDP ports 67-69 and 4011 on both DHCP server and WDS server. I have also tried just using IP address in DHCP option 66. As for option 67, I don't even know the right bootfile name to use at this point, figured I'd tackle that if I ever get past this error message.I have tried restarting the WDS service several times, as well as the...
This topic first appeared in the Spiceworks Community

After working with many companies in their Office 365 Change Management and End User Adoption strategies, we’ve found that companies who make it fun have very high success rates. So what can you to make it fun?Host an Office 365 Showcase.We’ve helped companies produceOffice 365 Showcases, which have a lively, trade show flair. Kiosks are set up in a cafeteria, meeting room or other convenient location. Hosting each kiosk is a departmental Office 365 Power User who demonstrates a unique aspect of the software to everyone who stops by.Read more about how to make Office 365 Change Management and End User Adoption Fun

Issue with changing ZeroViewForNonAdj and ZeroViewForAdj

Hi,
We have an issue with ZeroViewForNonAdj and ZeroViewForAdj settings.
Our goal is to load every third month from Planning to the forecast scenario. We started with April and had the ZeroViewForNonAdj and ZeroViewForAdj settings as YTD. When we loaded July we realized that the settings were wrong so we changed them to Periodic. This however didn't change the way the zeros are presented in HFM.
Do you have any solution to this on how we can get the periodic zeros to be visible?
- Nicklas

Hi Nicklas,
If you change the scenario settings you really need to clear out the scenario and re-load all the data in the scenario to allow HFM to re-derive the periodic values.
--Chris

Roles with Change Access to Table Maintenance

Hello,
We have many roles that have S_TABU_DIS-Table Maintenance, 02-Change access, *-Auth. Group. Many of these roles have very few transactions and are not Basis\Development related. My questions are what transactions do I need to make sure these roles don't have to so they can't change data in Tables? I know SM30 and SE16, any others? Also second question, should I be worried if these roles do not have the access to start these transactions but do have the access given in the S_TABU_DIS object?
Thank You,
Alex

1. Asides from SM30 and SE16 you already mentioned, 'SE16N' and 'N' come to mind. Maybe there are others.
2. Yes. You should be worried. Users could get authorizations for any of the aforementioned transactions from another role and get authorization to change all the tables from this role. Bad Stuff.
I suggest that you figure out why exactly these roles includes S_TABU_DIS object with change authorizations for all table groups. Once you have that figured out - you can take appropriate actions. In my mind, it would be very hard to justify having S_TABU_DIS with 02/* in any role.

Issues with changing connection at run-time

Post Author: dmazourick
CA Forum: Data Connectivity and SQL
Weu2019ve tried a lot of different ways to resolve this issue, but are getting every time the different result.
Probably someone deal with that issue before and know how to correctly resolve it.
Weu2019re using Crystal Reports Runtime Components X+ (X, XI, XI R2) u2013 all of them has this issue.
We need client application to connect to multiple data sources u2013 user chooses report, chooses data source and we show the report for specified data source.
The data sources are tables or stored procedures stored in different databases on different servers.
For sure, every data source for a single report has the same structure, but that doesnu2019t matter.
The issue is: when the name of the database on one server is the same as the name of database on second server, the connection caching occurs.
How we can check that:
1.       Weu2019re running report for Server1:<DBN> - report shows data from Server1.
2.       Weu2019re opening second report for Server2:<DBN> - report shows data from Server1.
3.       Weu2019re closing application and run 1-2 in opposite order, now both reports show data from Server2.
Weu2019ve tried different approaches u2013 below is a code sample that opens the report for specific connection.
Juts to be sure that no one will ask u2013 u201CAre you sure youu2019re passing the correct connection info etc.u201D. Yes! We are sure because weu2019re trying to fix this issue for a long time and tried a lot of different approaches and still cannot find the right solution.
The code looks like below. This is VB6 code, but also the same situation was tried on VC++ 6.0
Weu2019re not looking into CR.NET solution for now.
=================================================
Sub DisplayReport(Server as String, DB as String, UID as String, PWD as String, viewer as Object)
    Dim app As New CRAXDRT.Application
    Dim report As CRAXDRT.report
    Dim database As CRAXDRT.database
    Dim table As CRAXDRT.DatabaseTable
    Dim par As CRAXDRT.ParameterFieldDefinition
    Set report = app.OpenReport("D:\TestReport_X.rpt")
    report.database.LogOnServer "pdssql.dll", Server, DB, UID, PWD
    Set table = report.database.Tables(1)
    table.SetLogOnInfo Server, DB, UID, PWD
    table.Location = table.Name
    report.database.Verify
    viewer.ReportSource = report
    viewer.ViewReport
end sub
=================================================
The result of above code is the following:
1.       If we will pass the same viewer and will use different Server u2013 the report will be displayed correctly
2.       If we will pass different viewers and will use different Server u2013 the reports will contain same data
The result of above code also depends from the version of Crystal Reports the report was designed in:
1.       For Report designed in 8.5 u2013 passing of the same viewer with same connection info second time will refresh report
2.       For Report designed in X, XI, XI R2 u2013 no refresh
Also, a slight modification of the above code helps for reports designed in XI to work properly, but not for reports designed in X and 8.5:
1.       Before calling LogonServer, make the following: DB = DB & u201C;u201D & Int(rnd()*32767)
That makes report designed in XI to display properly in different viewers, but doesnu2019t have any impact to X and no any impact to 8.5
Weu2019re really looking for any help in this question

Post Author: fburch
CA Forum: Data Connectivity and SQL
I am having similar problems and some successes.
I have 70+ reports and now suddenly I want to point them at two different servers, but at databases with the same name like you talked about.
I first just tried the following:
#1. Load report:
Dim myReport As New ReportDocument
myReport.Load(filename)
#2. Pass in parameter values
''Get the collection of parameters from the report
Dim crParameterFieldDefinitions As ParameterFieldDefinitions = r.DataDefinition.ParameterFields
''Access the specified parameter from the collection
Dim crParameter1 As ParameterFieldDefinition = crParameterFieldDefinitions.Item(ParamName)
''Get the current values from the parameter field. At this point
''there are zero values set.
'crParameter1Values = crParameter1.CurrentValues
''Set the current values for the parameter field
Dim crDiscrete1Value As New ParameterDiscreteValue
If crParameter1.ValueType = FieldValueType.DateField Or crParameter1.ValueType = FieldValueType.DateTimeField Then
If ParamValue Is System.DBNull.Value Then
crDiscrete1Value.Value = CDate("1/1/1900")
ElseIf ParamValue Is Nothing Then
crDiscrete1Value.Value = CDate("1/1/1900")
Else
crDiscrete1Value.Value = ParamValue
End If
ElseIf crParameter1.ValueType = FieldValueType.StringField Then
If ParamValue Is Nothing Then
crDiscrete1Value.Value = ""
Else
crDiscrete1Value.Value = ParamValue
End If
ElseIf crParameter1.ValueType = FieldValueType.BooleanField Then
If ParamValue Is Nothing Then
crDiscrete1Value.Value = False
ElseIf ParamValue.ToString.ToUpper = "TRUE" Then
crDiscrete1Value.Value = True
Else
crDiscrete1Value.Value = False
End If
ElseIf crParameter1.ValueType = FieldValueType.NumberField Then
If ParamValue Is Nothing Then
crDiscrete1Value.Value = 0
Else
crDiscrete1Value.Value = ParamValue
End If
Else
If ParamValue Is System.DBNull.Value Then
crDiscrete1Value.Value = Nothing
ElseIf ParamValue Is Nothing Then
crDiscrete1Value.Value = Nothing
Else
crDiscrete1Value.Value = ParamValue
End If
End If
''Add the first current value for the parameter field
Dim crParameter1Values As New ParameterValues
crParameter1Values.Add(crDiscrete1Value)
''All current parameter values must be applied for the parameter field.
crParameter1.ApplyCurrentValues(crParameter1Values)
#3 Set "Table Log in info" (most of my reports using stored procedures, but I guess I still needed this step).
Dim CrTables As Tables = r.Database.Tables
Dim CrTable As Table
Dim crtableLogoninfos As New TableLogOnInfos()
Dim crtableLogoninfo As New TableLogOnInfo()
With crConnectionInfo
.ServerName = connectionParser.GetServerName(connectionString)
.DatabaseName = connectionParser.GetDatabaseName(connectionString)
If connectionParser.DoesUseIntegratedSecurity(connectionString) = True Then
.IntegratedSecurity = True
Else
.UserID = connectionParser.GetServerUserName(connectionString)
.Password = connectionParser.GetServerPassword(connectionString)
.IntegratedSecurity = False
End If
End With
For Each CrTable In CrTables
crtableLogoninfo = CrTable.LogOnInfo
crtableLogoninfo.ConnectionInfo = crConnectionInfo
CrTable.ApplyLogOnInfo(crtableLogoninfo)
If InStr(CrTable.Location, ".dbo.") = 0 Then
CrTable.Location = crConnectionInfo.DatabaseName + ".dbo." + CrTable.Location
End If
Next
If r.Subreports.Count > 0 Then
Dim crSections As Sections
Dim crSection As Section
Dim crReportObjects As ReportObjects
Dim crReportObject As ReportObject
Dim crSubreportObject As SubreportObject
Dim crDatabase As Database
Dim subRepDoc As New ReportDocument()
'SUBREPORTS
'Set the sections collection with report sections
crSections = r.ReportDefinition.Sections
'Loop through each section and find all the report objects
'Loop through all the report objects to find all subreport objects, then set the
'logoninfo to the subreport
For Each crSection In crSections
crReportObjects = crSection.ReportObjects
For Each crReportObject In crReportObjects
If crReportObject.Kind = ReportObjectKind.SubreportObject Then
'If you find a subreport, typecast the reportobject to a subreport object
crSubreportObject = CType(crReportObject, SubreportObject)
'Open the subreport
subRepDoc = crSubreportObject.OpenSubreport(crSubreportObject.SubreportName)
crDatabase = subRepDoc.Database
CrTables = crDatabase.Tables
'Loop through each table and set the connection info
'Pass the connection info to the logoninfo object then apply the
'logoninfo to the subreport
For Each CrTable In CrTables
crtableLogoninfo = CrTable.LogOnInfo
crtableLogoninfo.ConnectionInfo = crConnectionInfo
CrTable.ApplyLogOnInfo(crtableLogoninfo)
If InStr(CrTable.Location, ".dbo.") = 0 Then
CrTable.Location = crConnectionInfo.DatabaseName + ".dbo." + CrTable.Location
End If
Next
End If
Next
Next
#4 go get the data
crv.ReportSource = myReport
crv.Refresh()
#5 Call export to disk function.
This was not changing server - did not realize it was a caching problem as you suggested. That makes sense. So anyway, then of course I threw a verify database statement on there, before I get the data. Now looks like this:
#1 Load Report
#2. Pass in parameter values (dummy values that will generate schema of table without having to actually run long running procedures, i.e. select (cast 1 as int) as somefield1, cast(2.0 as numeric(10,0)) as somefield2
#3 Set "Table Log in info"
#3b Verify the database which seems to be a necessity:
myReport.VerifyDatabase()
#3c Re-populate the report with real parameter values, same as #2 but this time with the ones that will generate the real data
#4 go get the data
#5 Call export to disk function.
This does work, some of the time. When the datasource underlying report are tables, it works. I made a dummy crystal report with lots of different types of params (stored procedure underlying database) - this also worked!
Unfortunately, when I run this against the majority of my reports, I get this stupid "invalid mapping type value", for which I have not been able to resolve yet.
I also tried putting a myreport.SetDatabaseLogon("","") -- what would this do, clear it out? (saw this referenced somewhere).
Then I tried putting the real connection info in there as well ...
myReport.SetDatabaseLogon(uid, pwd, serverName, DBname)
I put this setdatabase thing before I called verifydatabase, which is where the process is bombing out and giving me invalid mapping type for the reports that do not run.
At this point I am still working on solution. I have tried creating dummy report that used same parameter types as a report that was failing and voila - the dummy report worked. Anyway, let me know if you get your problem fixed and I will do the same. Looks like you are using a different method that I didn't notice "LogOnServer"

Issue with web publisher services

hello,
i try to use the bi publisher services and in particulary SecurityService(Jdeveloper 11.1.2.0.0 and publisher 11.1.1.5) .
the security model is setting on Bi publisher security.
i use the http://bipconsulting.blogspot.com/2010/04/how-to-use-bi-publisher-web-service.html for help
when i run this code
package com.oracle.xmlns.oxp.service.v2;
import java.net.URL;
import java.util.ArrayList;
import java.util.List;
import javax.xml.namespace.QName;
// This source file is generated by Oracle tools.
// Contents may be subject to change.
// For reporting problems, use the following:
// Generated by Oracle JDeveloper 11g Release 2 11.1.2.0.0.6017
public class SecurityServiceClient
public static void main(String [] args)
try {
SecurityService_Service securityService_Service = new SecurityService_Service();
SecurityService securityService = securityService_Service.getSecurityService();
String sess_id=securityService.login( "Administrator", "password");
System.out.println(sess_id);
securityService.createUser("jean", "jean", "Administrator", "password");
} catch (Exception ade_e) {
System.out.println(ade_e);
i have the following output
3447993075936D60EEF980C3472AC415
javax.xml.ws.soap.SOAPFaultException: java.lang.SecurityException: Security violation: /~jean; administrator does not have permission to create this folder.
Process exited with exit code 0.
If someone can help me,it would be great.
best regards
jean marc

i try with soapui for the method createuser,
i have the same issue.
any help ?

Security issues with calling web services from within Oracle?

I'd like to use a trigger to initiate pushing data to a web service, so I thought we should call the web service from PL/SQL in a DBMS job, or perhaps create a .NET stored proc to call the service. Our DB Lead is concerned about security, since the standard model is for clients to call the database, and not for the database to function as a client.
Does this pose any security risk? Can you refer me to any best practices or articles on this?
Thanks in advance.
Edited by: Kit.net on Nov 9, 2010 11:28 AM

First, a trigger is there to for a single sole purpose - guaranteeing the integrity of the data and the transaction. It is not there to interact with external services and processes (like mail, web and other services). Doing that exposes the transaction to those other processes/services. The transaction can now fail. not because of a business rule validation, but because of a network error when the trigger accesses an external service. How on earth can a business transaction fail when the transaction is valid, but a the transaction's trigger hit an external access error!?
And what happens do that event you have fired off in the trigger, when the transaction is rolled back? How do you undo that event you have created in the trigger that was based on uncommitted data?
So using a trigger like this is simply stupid (and yes, I have seen it too often in practice with horrible results to sugarcoat such an idiotic approach).
As for calling a web service from the database, using the database as the client in such a case. This is not a security risk. This is not unusual. In fact, it is very common in my experience. We have a lot of databases, ranging from SE to EE and several RAC clusters. All of them function as a client at some stage during processing. Some use a db link - and as a client fire off a SQL via that db link to a database server to obtain data. Some use ftp and act as a ftp clients, transferring processed data (XML format) to a server. Some call web services to extract data from 3rd party systems to reconcile the differences between local data sets and 3rd party data sets..
This is common between server and server. I do not see anything unusual in the database server using another server (and acting as a client when it does). Security between servers should not be a major problem (in fact, it can easily be done in a very robust way using trusted and encrypted communication).
The problem occurs when a client connects to the server and client and server roles are swapped at some stage (like the server "writing" a file directly to the client's filesystem). This very seldom makes any sense. And this is where authentication and security become an issue.

Issue with Teradata access from Business Objects AIX Machine

Hi,
I am using BO XI.31 which is installed on AIX 5.3 machine. I have installed Teradata driver on the machine and I have created the require ODBC.ini entry to point Teradata database. While refreshing the report I am getting below error message.
A database error occured .The database error test is (CS) "DBDriver failed ot load: /BOBJ/xi_3.1...Connectionserver/libdbd_tdodbc.so
0509-022 Cannot load module/BOBJ/xi_3.1....ConnectionServer/libdbd_tdodbc.so
0509-150 Dependent module libodbc.a(odbc.so) Could not be loaded.
0509-022 Cannot load module libodbc.a(odbc.so)
0509-022 System error:A file or directory in the path name does not exist.
Any body know what are the steps require to access teradata database from AIX box

Hi Jacks,
Following information might help you to resolve the issue.
This is caused by a wrong HOME environment variable of the user that starts the BO processes.
Resolution
Check the correct path of your BO 3.1 installation and export it as HOME environment variable:
Example:
BO 3.1 installation path: /home/<bouser>/bo3.1/Enterprise12.0../...
Type in the command line:
export HOME=/home/<bouser>/boversion
You can also change this environment variable permanently if you edit the .profile file of the BO user (home/<username>/.profile), adding the above line into the file, then source it again with:
. .profile
or with a logoff/logon of the session.
Check if the path of your HOME is correct with:
env | grep HOME
Now you can run the installation setup without any error.
Regards,
Sarbhjeet Kaur

Issue with changing Access Service in ACS 5.2

Similar Messages

Maybe you are looking for