LDAP access levels for wireless users

How is it possible if I want my Directory Server 5.2 to authenticate only few number of users to have wireless and dial-up access. LDAP should not permit the other users when they try to login by wireless or dial-up. But everyone should be authenticated when they try to login through a direct ethernet connection. Currently all my users are under ou=people.
Joshua

Hi,
Directly-connected APs are supported in 7.4 code, if you are not on that code then
The PoE Ports are not for the APs
Ports 3 and 4 are PoE only ports; do not connect access point devices to these ports. The ports can be used for infra-switch connection using multiple an AP-Manager or data interface
Connect port 1 to a trunk port on the switch.
configure the native vlan ON THE TRUNKPORT only eg vlan 10
Let's assume your wireless is on vlan 10 and your WLC2504 is 10.10.10.20 /24 gateway 10.10.10.1
Enable and Configure DHCP scope for vlan 10
The APs are then connected to a vlan 10 access port on the switch
Configure the SSID
DHCP server tips
- enable bridging mode if using the controller as the DHCP server, otherwise disable it.
- if using other DHCP server and the DHCP server is in the same vlan as the controller, nothing further is needed.
- if DHCP server is on another vlan, you will need to configure option 43 (vendor specific into)
Check with these configuration it will hopefully fix your issue.

Similar Messages

Access control for different user groups in APEX 4.0

Hi guys,
in Apex 4.0, is there any way to use the access control page to configure access control for different user groups?
The access control page currently only has an access control list by users with 3 privileges namely, Administrator, Edit & View where Administrator has the highest access level & View the lowest. Therefore 1 user cannot have more than 1 different privilege, however if the user belongs to 2 or more different groups then we can control what access he can have in a more fine grained manner. We also want to have more than the 3 privileges given.
Can we assign different groups to different users and let them have different privileges to be configured by page, region, process or item level?
Now Apex will create 2 tables, Apex_Access_Control & Apex_Access_Setup to store the application access control mode & access control list. It will also create 3 authorization schemes "access control - administrator", "access control - edit" & "access control - view" based on the 2 tables.
Does this mean we have to change the table structures & edit the authorization schemes to suit our usage? We are reluctant to do this because if we upgrade to a newer version of Apex then we would have to merge our pl/sql coding with Apex's updated code.
How can we auto-configure more than the 3 authorization schemes in the access control page? Is there any way to achieve a finer grain of access control based on the current access control administration page given by Apex without writing it ourselves?
We are afraid that we may have missed something on Apex access control & do not want to reinvent the wheel.

Hi Errol,
to build your own application authorization scheme around the security model supplied by Apex for administration of the Apex environment would be a bad idea.
This was never intended for authorization scheme management in custom built Apex applications, it was solely intended to control access in the Apex environment overall. The API for it is not published, and making changes to it, such as adding more roles, would run the risk of breaking the overall Apex security model. It would not be supported by Oracle and Oracle would not guarantee the upwards compatibility of any changes you make in future versions of Apex.
In short, you should follow Tyson's advice and build your own structure. As he indicated, there are plenty of examples around and provided your requirements are not too complicated, it will be relatively simple.
Regards
Andre

Can not assign custom access level with a user login

Hi,
I am using Business objects XiR3. When I am loging in with a user having full control access and then I select a folder added a principal from user sercurity and when I am trying to add custom access level it gave me error
An error occurred at the server during security batch commit: Request 0 of type 38 failed with server error : You do not have sufficient rights to make the requested security changes.
it allow me to give access to standard access levels. also when I tried to assign custom access level with administrator user, it assigns custom access level to a principal without error.
Can any body tell me what I am doing wrong?
Thanks in advance,
Rajendra

Hi Rajendra,
You have to make sure that the user group has the right 'Use access level for security assignment' assigned as granted on the access level you created. You can find this right under System / Access Level. That should do the trick!
Hope this helps...
Martijn van Foeken
Focuzz BI Services
http://www.focuzz.nl
http://nl.linkedin.com/in/martijnvanfoeken
http://twitter.com/mfoeken

Activate Accessibility Features for all users?

Is there a way to activate Accessibility Features for all users by editing a table on the Portal side?
EP6 SP2 and NW04S.
Thanks
Jean Seguin

Hi Jean,
not that I would know of. But you can easily write a small portal component which sets the accessibility level of all users to your preferred level.
The code snippet below should give you an idea of what I mean
IUserFactory userFactory = UMFactory.getUserFactory();
IUserSearchFilter filter = userFactoy.getUserSearchFilter();
ISearchResult result = userFactory.searchUsers(filter);
while (result.hasNext()){
String userId = (String)result.next();
IUserMaint user = userFactory.getMutableUser(userId);
user.setAccessibilityLevel(IUser.SCREENREADER_ACCESSIBILITY_LEVEL);
user.commit();
Best regards,
Martin

URGENT : How to retrieve Last Accessed Timestamp for all Users in GRC

Dear Experts,
Please help me with this urgent request. Appreciate your help in advance.
My client is trying to understand the usage of the GRC application and would like to know information regarding the Last Accesse Time for all users who have logged into the Oracle's Governance, Risk and Compliance applcaition.
Thank You,
Rakesh

If you still need the solution,
Have a callback on OnSubtaskUpdated in your BPEL. This call back will be called for any updates in parallel approval pattern.
Thanks
--Sreeny

Authority Check at the T.Code level for the user in particular User Group

Hi Friends,
I have created a ZREPORT and assigned this report to a ZTRANSACTION CODE.
Need to give Authority Check at the T.Code level for the user in particular User Group.
I have searched in SCN, but not get suitable pages.
How to solve this?
Regards,
Viji.

Hi Viji.
Saha way is actual way for authority tcode but user authority in TCODE:- SE38 he/she can run report(ZREPORT) wise program is run is no authority check.
Another way is you have also check authority in program level.
DATA: T_ROLE_USERS TYPE STR_AGRS OCCURS 0 WITH HEADER LINE.
   INITIALIZATION.
CALL FUNCTION 'ESS_USERS_OF_ROLE_GET'
    EXPORTING
      ROLE       = 'ZROLE'' " Role define
    TABLES
      ROLE_USERS = T_ROLE_USERS.
READ TABLE T_ROLE_USERS WITH KEY UNAME = SY-UNAME.
   IF SY-SUBRC NE 0.
   RETURN.
   ENDIF.
Thanks & Regards
Rahul

Display Stock level for every user

Hi
I need to display the stock level for each user (partdetail.aspx). So they know how many they can order.
I know it is only displaying for the superusers. Is there anyway of display the stock level for other users as well rather than just showing the message "in stock"
Thanks
Sanjaya

Hey Sanjaya, that would probably require writing your own control ... but even if you do it, remember that stock levels in WebTools are not immediately reduced when an order is placed. For example if you have 10 in stock and someone places an order for 5, another customer will still see 10 in stock. It isn't until the next synch when the order is placed in SBO and its inventory is affected that the new inventory numbers are reflected in WebTools.
I guess you could write a smarter control that looked up the last inventory and subtracted any orders that haven't synched yet to get a better "real-time" inventory count. However this still doesn't help if an order is placed directly in SBO and WebTools doesn't know about it.
At least this is the way it worked the last time I looked into it.
Steve

Project authorization at task level for a user

Dear friends,
I have created one project called TEST in solution manager. I am have assigned standard ASAP methodology as a road map for that project. I wants to restrict my user to do business blueprinting only for particular business process. I wants to restrict him to access other processes related to the same project.
How to restrict authorization in individual task level (lower level) in solution manager for an user or team member?
How is it possible?
Thanks
Senthil

Hi Arkadiy,
I wants to maintain dependency for my project execution. Let me explain in detail.
My project name is TEST, it follows ASAP methodology, contains five phases namely,
1. Project preparation
2. Business Blueprint
3.Realization
4. Final Preparation
5. Golive & support
In each phase, some specific tasks to be completed.
Let us consider, in Project preparation phase, i am having tasks of following:
A. Define Project scope
B. Define Project Plan
C. Define project team members
D. Project charter sign off
My question is:
without completing( means status should be "Complete") Project scope (Task "A"), the system should NOT allow the team member to jump into next task ( Define Project plan). Like that i wants to maintain dependency for individual each task.
Is it possible?
Your answer will be very much appreciated.
Thanks
Senthil

OBIEE access denied for some users only

Hi All,
we are using OBIEE 10.1.3.4 version on windows envorinment .The users can access the OBIEE reports using 'PORTALPATH' session varible in RPD.For some of the users are got "access denied" while they are accessing for thir particular dashboard.Eariler these user got access this dashboard with out any errors.We dnt changed in our system anything from last three months.
We have no idea why we are getting these error for particular users only.Its Prod issue we need to reslove these error ASAP.
we are getting these error"acess denied for user to path/shared/shared/_test/testdashboard
Error Codes:09XNZMXB"
but last one year its working without any issues .From our side we dnt did any changes in production like RPD level,Catalog level and config file changes , we have no idea why suddenly we are getting these kind of error for some users only not for all users.
Could u please advice me how to reslove this PROD issueASAP.
Thanks,

Well its Prod (you have a dashboard called testdashboard in Prod?) anyway - someone might have changed the presentation catalogue permissions on the dashboard. All it takes is for someone to remove 'Everyone' or change a Group permission and it could effect.
If they changed the Parent folder and cascaded the changes down this might cause this issue.
You have a folder called 'Shared' - check the groups that the people are in have 'Traverse' , 'Read' or higher. Also chek dashboard permissions themselves from Settings-Manage Interactive Dashboards - Check the Padlock icon.
Are you users getting allocated into the correct WEBGROUPS ? Is this assisngment done explicitly in the webcat or via an RPD Variable ? Have you checked NQQueryl.log to make sure any init blocks are completing successfully?
Either persmissions have changed or group memebership is not completing.
Good luck
Alastair

SharePoint 2013 check permissions unable to find permission level for AD user

In our environment for SharePoint AD groups are associated with individual AD members and AD group is given access to SharePoint group with a permission level. When I want to check for a user who are part on the AD group using check permission to find their
SharePoint permission level it returns "none", but when I check what permission level the AD group has check permission returns correct permission level.
I am not sure if this is the right behavior for SharePoint 2013 not to display individual AD user permission using check permission, business users have to request IT every time they have to find a user permission level.

Hi,
As far as I know, the user permissions which set in AD Groups is not updated immediately to SharePoint Site. The AD group informations are converted into claims and packed into security token issued by the STS (Security Token Service).
For troubleshooting your issue,you can configure the Token Cache to a smaller value and check the permission level of the user who is granted permissions through AD group:
https://sergeluca.wordpress.com/2013/07/06/sharepoint-2013-use-ag-groups-yes-butdont-forget-the-security-token-caching-logontokencacheexpirationwindow-and-windowstokenlifetime/
Thanks,
Eric
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Default Privilege Level for ASA users authenticated by Radius or TACACS when using ASDM

Hello,
I'm trying to figure out what the default privilege level is for users that are authenticated to the ASA via a remote authentication server when using the ASDM.
the command "aaa authentication http console TACACS+ LOCAL" is used in the ASA config.
The remote server is NOT setting any privilege levels for users. There are also no aaa authorization commands present in the config.
So what privilege level do the users receive when they login with the ASDM? I'm being told that the users receive admin access which includes config write, reboot, and debug. But I cannot find any documentation stating hte default level.
Please advise. And providing links to cisco documentation would be great too.
Thanks,
Brendan

Hi Berendan,
Hope the below exerpt from document clarifies your query. also i have provided the link to refer.
About Authorization
Authorization controls access per user after users authenticate. You can configure the security appliance to authorize the following items:
•Management commands
•Network access
•VPN access
Authorization controls the services and commands available to each authenticated user. Were you not to enable authorization, authentication alone would provide the same access to services for all authenticated users.
If you need the control that authorization provides, you can configure a broad authentication rule, and then have a detailed authorization configuration. For example, you authenticate inside users who attempt to access any server on the outside network and then limit the outside servers that a particular user can access using authorization.
The security appliance caches the first 16 authorization requests per user, so if the user accesses the same services during the current authentication session, the security appliance does not resend the request to the authorization server.
http://www.cisco.com/c/en/us/td/docs/security/asa/asa80/asdm60/user/guide/usrguide/aaasetup.html
Regards
Karthik

Access level for Tab

Hi,
How can i define security level for each tab?
i have set of users and i want a particular tab to be displayed to certain users only not to all users.
i have already defined access privilege for the particular tab in the Advance option for tab granting privilege to specific user and also specified that this particular tab should not inherit privilege from the page, but still the tab is displayed to all the users.
regards,
Sunil
null

I also have this problem. I am using Portal 10.1.2.0.2.
I've set up two groups (systema_users and systemb_users) and have set up two tabs, each of which should be only accessible to one of these groups. However, no matter which user I log in as, I can see both tabs regardless of which group the user belongs to. On each tab I have set access to 'Specify Access Settings' and have specified the appropriate group, with the Customize Portlets (Full) privilege, since I need them to be able to customise the content of the tab. What am I missing here?

Access Level for Nutrient Profile

I have a question for Nutrient Profile. According to the User Manual, in the Summary Tab in the Summary Information section there is a field called ‘Access Level’. What is this used for?
Our users have concerns over using the Nutrient Profile and LIO because it can be changed in so many places and there is no versioning/revision info associated with that. So, if there was some access security built around it that could control who could change this data where it might make it a more attractive feature to the users.

I believe that the Access Level field is used as part of the Object Level Security functionality.
If you are wanting to lock down Edit permissions for certain sections of the Nutrient Profile, you can look at the Section Level Editing feature. This is documented, along with reference examples, in the Extensibility Pack, in the ReferenceImplementations\SectionLevelEditing folder.

Turn off log level for Individual Users

Hi,
we want to turn off logging level of individual users. We usually go to Identity and click on the user to set log level '0' but we have LDAP security setup so don't have idea how to do it.
Any Ideas
Thxs
SYK

Ok I will try to Set System Variable LOGLEVEL
As we are using LDAP security we will not have users in RPD so i cant set to'0' in rpd.
New Question: Suppose If I am able to set log level to '0' for a user i.e User1 and when he logs into OBIEE and get's a error while running report like say table or view doesn't exist or non of fact table is compatible or number records exceed etc... and Error will show to user as Error Number and says "Please contact System Administrator for more details".
Me considering as Admin if i want to debug that error that User1 is getting from above scenario and when i open nqquery log file will I be able to see the log for that report which User1 is getting error or will it show NO LOGLEVEL Found.
Thxs
SYK

How to retrieve access rights for an user/usergroup ?

Hello everybody.
I'm working on BO XI 3.1. And I have to develop with the .NET SDK package an application that retrieves the following data :
- the access rights to WEBI application and properties for each user/user group.
- the access rights to each folder and properties for each user/user group.
etc
The idea is to retrieve for an user/usergroup the access right on each property of WEBI application and softwares. and same thing for folders....
I'm looking at the .NET SDK package contents but it takes me a lot of time, even too compared to my deadlines. So I'm looking for help.
Does anyone have an idea about class of objects, properties and methods to use ?
Thank you in advance for your help.

Thanks for these samples.
The list of user and usergroups is very interesting to audit CMC but my need is different : for example, I'm looking a method to retrieve the level access (full control, no access, ...) of an usergoup on each webi's property. The reason ? To know for example which usergroups have fullcontrol access on the right name "edit SQL" ?
I think it's hard to retrieve but very interesting to audit CMC...

LDAP access levels for wireless users

Similar Messages

Maybe you are looking for