Multiple DNS Search Suffixes

Does anyone know whether it is possible to set more than one DNS search domain for a dial in VPN user?
We currently have a group policy setting below and would like to add domain-b.co.uk to the list of search domains
group-policy RemoteUsers attributes
wins-server value x.x.x.x y.y.y.y
dns-server value a.a.a.a b.b.b.b
vpn-idle-timeout 30
vpn-session-timeout 300
vpn-filter value vpn-filter
vpn-tunnel-protocol IPSec
split-tunnel-policy tunnelspecified
split-tunnel-network-list value RemoteUsers_splitTunnelAcl
default-domain value domain-a.co.uk

Hi,
According to your description, my understanding is that tool SIEM prompts multiple DNS error NO SUCH NAME for Local IP.
I am wondering which SIEM tool have you used. If it is a 3rd-party tool, I recommend you to contact the vendor/supporter for detailed information about this error.
I am not sure about the environment you have configured and which version of OS used. In general, for windows system, we may use built-in tool, such as event viewer, performance monitor to collect detailed information about error or warning. Besides, monitor
tool such as Network Monitor(http://www.microsoft.com/en-us/download/details.aspx?id=4865) is also helpful to capture packets for further troubleshooting.
Best Regards,
Eve Wang
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Similar Messages

Multiple Search Suffixes

Our internal network is comprised of multiple companies purchased over the past couple of years. Unfortunately we still have a lot of legacy DNS going on and like 6 different domains on the inside. Is there a good way to push all 6 dns search suffixes out to the AnyConnect VPN Client? I tried the split DNS method I found online but when I did it broke DNS completely. The client was using the local hosts preconfigured DNS servers and not getting the internal network ones.
Thanks
Michael

Hi Terence,
Thanks for the tip. It's a nice way to do it, I didn't know it was possible and this could save me some time.
Still, I don't think that creating a smart mailbox is an ideal way to do a search but this could do the trick for now. I hope that multiple search will be integrated in next Mail.
Laurent

ASA Remote Access VPN Clients - Multiple DNS Suffixes?

Hi community!
I am setting up a new remote access VPN using the traditional IPSec client via ASA 5515-X runnning OS 8.6.1(5).
We require to provide each client multiple DNS suffixes, but are only to provide a single DNS suffix in the grouip policy.
I have tested using an external DHCP server, but using our Windows Server 2008 infrastructure and Option 119 the list is not provided to clients, and I have read that Windows 7 clietns may ignore this option anyway.
Other than umanually configuring the clients , does anybody have any other suggestions on how we may get this to work?
Full marks for helpful posts!
Kind regards, Ash.

Hi
I am looking into the same issue, and I am finding conflicting documentation about this and wondered if you got the answers you were looking for.
I have a remote access requirement for users from separate AD's to authenticate through an ASA.
I was reading about Global Catalogue Server but this is not specifically what I want; and also creating a new AAA server group but the user would need to accept which group to use when they log in
Regards

Adding multiple dns suffix

hello
is it possible to add an ADDITIONAL dns domain suffix to my W7 and maybe some XP machines, via GPO?
thank you

Hi Christopher Ream,
As the Help of this setting says,
the value of the DNS suffixes in this setting may be set using comma-separated strings.
As RFC 398 document says, This specification uses the Augmented Backus-Naur Form (ABNF) notation of [RFC2234],
including the following core ABNF syntax rules defined by that specification: ALPHA (letters), CR (carriage return), DIGIT (decimal digits), DQUOTE (double quote), HEXDIG (hexadecimal digits), LF (line feed), and SP (space). Personally speaking, space
is a reserved character which is not recommended to be used in the domain name to avoid misunderstanding. What's more, this setting doesn't use comma+space as separated strings which can help to reduce the workload of resolving package.
However, these are my personal guess. Hope that helps!
For your information, please refer to the following article to get more help:
http://tools.ietf.org/html/rfc3986#page-11
Regards,
Lany Zhang

LDAP supporting multiple DNS domains

I have an environment with multiple DNS domains, and am configuring a Directory server (DS 6.3.1) to centralize various OS configuration maps including user authentication. None of the DNS domains have unique data, so I'd like to do something like storing all the real data in one suffix, then somehow have all clients look to that primary suffix. I am aware that the Solaris Native LDAP client wants to bind to a nisDomainObject that matches its DNS domain. I'm just having a hard time believing that I really need to manage all those individual suffixes when they don't have unique data requirements.
Take as an example the following domains to be supported: foo.example.com, bar.example.com, dev.example.com, qa.example.com, prd.example.com (no hosts are actually in "example.com", they are all in subdomains). Again, all share common configuration data, same user IDs, etc - no unique maps are required.
I created a suffix, "dc=example, dc=com", set it up with idsconfig. All is well there.
[A] My first thought is to bind all Solaris clients, regardless of their DNS domain, to the baseDN of "dc=example, dc=com" in order to avoid having a separate suffix for each DNS domain. I tried to do this using "-a defaultSearchPath=dc=example,dc=com" with ldapclient init, but it failed with an error indicating it wants to see the nisDomainObject of its real DNS domain.
The second though I had, which I don't believe is possible, is to find some sort of a LDAP equivalent of a symbolic link so that I could actually have an object for each DNS domain, but it would simply point back to "dc=example,dc=com". I can't find anything in the documentation which suggests this is possible, but I'd love to be wrong!
[C] Perhaps this could be somehow done with a rats nest of SSDs, but that really seems unwieldy, right? I plan on using a fair amount of the available objects, so it would be many SSDs per suffix. Yuck.
Can anyone comment on my above thoughts, or provide how they would go about supporting multiple DNS domains that have common configuration data?
Thank you,
Chris

Ok, I answered my own question. Turns out it's pretty easy. Just use the "-a domainName=example.com" option with `ldapclient` then make sure that the FQDN of the LDAP server is available (or use its IP address). My problem was that the ldapclient overwriting nsswotch.conf was clobbering the SSL session because I used the FQDN which couldn't resolve.
This leaves an interesting condition of having the output of "domainname" not match the DNS domain. I'm testing now to see if this causes any unexpected issues with our environmnet, but I suspect it's not a problem.

HT1218 I'm trying to set up a new iPad..it asks for my WiFi network.. I find the network..then it asks for information that I have no idea about: IP address, Subnet Mask, Routet, DNS, Search Domains, Client ID..also the headings are: DHCP,BootP, Static..c

I am trying to set up my new iPad. it asks for a WiFi connection.. I have one..then the next page asks for these things:DHCP,BootP,Ststic then IP address, Subnet Mask, Router, DNS, Search Domain, Client ID then HTTP Proxy I have no idea what any of this means...can someone please help me???

Thank you sooo much. I was so disappointed...I couldn't wait to get started with the new iPad..then ran into the problem. So simple. You made my day. Thank you for your expertise!!

Multiple DNS Domain support in Single instance of Portal

Can BEA portal support multiple DNS domains in a single instance of BEA Portal.
For example can I setup portal to respond as bothe www.xxx.com and www.yyy.com
and keep those urls as trhough the entire portal?

Hi,
thanks for your quick response. You mean we should run only one copy of the package I mentioned and seperate the plants and machines by logic implemented in the package? Well, I think this is critical in case of deploying a new version, since all machines at all sites won't have the system available at the same time. At the moment we do not have things in the system that are needed to go on with production, but we have planned to implement some things that will be indispensable and in this stage we need a clear seperation of the plants to minimize the risk of a simultaneous stand at all plants.
Thanks for your suggestion and best regards,
Matthias

Multiple Keyword Searching

I am having trouble doing multiple keyword searches in aperture. Say for instance I tagged a photo with the word "Bob" and then with the word "Park". If I search for just Bob or just Park, I get all photos tagged with one or the other keyword. But if type into the keyword search bar: Bob, Park. No photos come up. I have tried several different ways of searching keywords. Anyone having the same problem or know how to fix it?

The same is written in the [Aperture3 User Manual|http://documentation.apple.com/en/aperture/usermanual/index.html#chapter =14%26section=7%26tasks=true]; it doesn't work in Ap3 either. (The comma seems to be taken a literal character, not as a separator.)
Ap3 lets one add additional filter rules, so that one could have two Text rules. (I never used Ap2.)
Ap3 limits the keyword list to those keywords present in the currently selected container(s). So to at least check what you are doing -- if Ap2 does the same -- select or filter to a number of images with just a handful of keywords total, and see what you find out.
Nice to see the sun for once.

PSE8 Oraganizer, multiple tag search AND OR

I'm trying to figure out what logic multiple tag searches is using. Just when I think I have it figured out I find something different.
For instance the People and Places categories behave differently. Selecting multiple tags within the same People category behaves like a Boolean AND. Multiple tags in the Places category act as an OR. Selecting a subcategory in the People category will select all the keywords in the sub-category and perform an OR. Selecting a sub-category as an Exclude will only exclude the sub-category as a keyword. It does nothing with the keywords in the sub-category.
I haven't finished testing all the other possiblities with the other categories, like; Events, Other, Animals.
I guess my question is; Where is the Adobe full description on how this works?
My request would be to have the ability to construct a more advanced Boolean expression. Perhaps in a manual mode by typing in a Boolean string.
Thanks, -phil

Thanks for the reply John,
I doubled checked multiple tags selected in either the People category or the Places category and it is doing an AND in People and an OR in Places.
Here's my test:
People category with 2 keywords; Phil, Kristi.
Phil selected, returns 223 items with Phil in them
Kristi selected returns 510 items with Kristi in them
Phil and Kristi selected returns 109 items with Phil AND Kristi tags applied to them.
Places category with 2 keywords Aruba, Bad Axe
Aruba selected, returns 50 items, looks like all my Aruba shots
Bad Axe selected, returns 26 items, looks all my Bad Axe shots
Aruba and Bad Axe selected, returns 76 items, looks like all my images with Aruba OR Bad Axe shots.
These catagories came defined with PSE8. Must be something built in??. I quickly looked at my other Categories and they all appear to be doing OR logic with mukltiple keywords. Looks like it's just the People category that behaves as an AND.
In Preferences the, "Show Closely Matching Sets for Searches" is unchecked. When I check this it does change the behavior. For my people test it now returns 624 with Phil and Kristi selected. The Aruba, Bad Axe selection returned the same number.
While testing this and writing it down a thought came to me. With my People tags there are images that are tagged with multiple People tags. Like pictures of Kristi and Phil together have both tags. However, my Places tags never have more than one tag applied. I looked in my Pets category and it is behaving like my People category because it will have multiple pet keywords in some photos.
So, in conclusion, the program is looking at how you've used the keywords. If there are images in the catalog that have multiple keywords from a particular Category tagged to them it will act as an AND search when you select multiple tags from that Category. On the other hand, if there are no images with the multiple tags applied to them then the search behaves as an OR when you select those tags. So it just depends.
One more example. When I select Phil and Kristi and Aruba, I get back the 6 shots that have those tags. When I select Phil and Kristi and Bad Axe I get back 650 shots. I would rather get back 0 because there are no shots that have all 3 of those tags. The preference is unchecked for the closely match option.
-phil

Does endeca support multiple keyword search

Am new to endeca.
Does endeca support multiple keyword search in atg crs.
an eg can we search for "shirt,shoes" and get results for both

How specifically to implement this depends on how you are querying Endeca. With a simple URL parameter query using the UrlENEQuery object you would set the parameter of Ntx=mode+matchany, and if you were using the ENEQuery class you would set it like:
ENEQuery query = new ENEQuery();
ERecSearchList searchList = new ERecSearchList();
String matchMode = searchTerms.contains(",") ? "mode+matchany" : "mode+matchallpartial";
ERecSearch search = new ERecSearch( "your-search-interface", searchTerms, matchMode );
searchList.add( search );
query.setNavERecSearches( searchList );
If you are using the Assembler Service, you can include the Ntx parameter in the call, so you would wrap your call with some conditional logic, e.g.:
String serviceCall = null;
if( searchTerms.contains(",") ) {
serviceCall = "assember/xml/browse?Ntt=shirt,shoes&Ntx=mode+matchany";
} else {
serviceCall = "assember/xml/browse?Ntt=shirt,shoes&Ntx=mode+matchallpartial";
If you are using the Content Assembler API within your application, it will depend on how you are invoking it but some of the above should help you customise appropriately.
HTH
Michael

Endeca:Multiple keyword search

I have integrated atg application with endeca and i implemented multiple keyword search.Now i am getting combined results.For eg:if i search for ice and shampoo i am getting combined results for both.I want to separate the results based on the search term in the front end?Please help.I am using atg10.1.2
Thanks in advance

Hi KannanMN,
We will be getting the meta data related to the record in the results list saying why that particular record matched and retrieved. Using this information, you can populate or separate the results to go into two different div containers in the front end.
Hope this helps.
Keep posting the updates or questions.
Thanks,
Gopinath Ramasamy

Multiple criteria search with 4 dropdown lists

I want to perform a multiple criteria search on a MySQL
database. Users should be able to use from 4 dropdown lists in a
form only one criterium, all 4 of them or 2 or 3.
Each used dropdown list gives a numeric variable: Fvar1 ...
Fvar4. The variables from the dropdown lists used should be matched
with numeric fields in the database: DBvar1...DBvar4
The numeric variables from the dropdown lists that are not
used, should be ignored.
Example: a user selects a value in dropdown list 2 and 3 and
does not use dropdown lists 1 and 4. Fvar1 and Fvar 4 should then
be ignored for the search, that has to be performed with Fvar2 and
Fvar3, who have to be matched with DBvar2 and DBvar3.
Anyone who can help me out with the WHERE statement in my SQL
query?
Your help will be greatly appreciated.
Erik

Erik61 wrote:
> I want to perform a multiple criteria search on a MySQL
database. Users should
> be able to use from 4 dropdown lists in a form only one
criterium, all 4 of
> them or 2 or 3.
Start by using the Advanced Recordset dialog box to create a
query that
looks for all four variables. Then switch to Code view and
start carving
up the code created by Dreamweaver.
The query will look something like this:
$query_getProducts = sprintf("SELECT product_name, price
FROM products
WHERE prod_type = %s AND colour = %s AND size = %s AND range
= %s
ORDER BY price ASC",
GetSQLValueString($var1_getProducts, "text"),
GetSQLValueString($var2_getProducts, "text"),
GetSQLValueString($var3_getProducts, "text"),
GetSQLValueString($var4_getProducts, "text"));
Change it like this:
$query_getProducts = "SELECT product_name, price
FROM products
WHERE ";
$where = false;
if (!empty($_GET['prod_type')) {
$query_getProducts .= sprintf("prod_type = %s ",
GetSQLValueString($var1_getProducts, "text"));
$where = true;
if (!empty($_GET['colour'])) {
if ($where) {
$query_getProducts .= 'AND ';
$query_getProducts .= sprintf('colour = %s ',
GetSQLValueString($var2_getProducts, "text"));
$where = true;
if (!empty($_GET['size'])) {
if ($where) {
$query_getProducts .= 'AND ';
$query_getProducts .= sprintf('size = %s ',
GetSQLValueString($var3_getProducts, "text"));
$where = true;
if (!empty($_GET['range'])) {
if ($where) {
$query_getProducts .= 'AND ';
$query_getProducts .= sprintf('range = %s',
GetSQLValueString($var4_getProducts, "text"));
That builds the query in stages using $where to decide
whether to add
"AND" in front of the second, third, and fourth variables.
David Powers, Adobe Community Expert
Author, "The Essential Guide to Dreamweaver CS3" (friends of
ED)
Author, "PHP Solutions" (friends of ED)
http://foundationphp.com/

Getting single "generic" WLS 4.5.1 app to serve multiple DNS names, including SSL

Hi everybody,
I am trying to figure out a strategy to enable a single web application
based on WLS 4.5.1 (SP13) running on Linux to serve multiple DNS
names, with some specific pages to be transmitted using SSL.
While the JSP pages differ in colouring and screen layout (but not in
logic),
the entire EJB business logic is identical for all DNS names. So are the
servlets.
The application data to be presented to the user can easily be mapped,
and presently (with the application responding to a single DNS name)
it is cached using a JNDI tree. To minimize coding effort, and
to continue utilizing the present caching concept, only expanding it to
support
multiple similar "virtual" applications, I would prefer to
continue using a single WLS instance when making the application "generic".
But as a consequence of this, I could only present a single SSL certificate
to the user if I had WLS answer internet HTTP requests directly.
What would you think should be done to get the browsers
"display the closed padlock while in the order form" for multiple DNS names
served by this same application instance?
One approach might be to put Apache in front of WLS, and configure it
to serve multiple virtual hosts (one for each DNS name to be served,
encoding the differences between the request URLs somehow in the ServerPath
directive, and providing a separate SSL certificate for each of those
virtual
hosts).
Does this make sense to you? Any experience in this area? Which Apache
and WL modules should I be using - which combination
of mod_proxy, mod_ssl (by Apache), mod_wl, mod_wl_ssl[_raven] ?
Any input would be greatly appreciated! Thanks in advance!
Ruben
[A minor add-on question is: Is the situation truly different with
WLS 6.0? I understand it supports virtual hosting on its own. Can multiple
(web) applications running under a single common WLS "umbrella" server
instance share the same application data? I would expect so - is this true?]

Ruben, I can't help you with the specifics of the configuration but your
general strategy seems correct to me. WLS does not handle multiple certs
and one must front it with a Web server if multiple certs are required.
Neil Smithline
WLS Security Team
BEA Systems
"Ruben-B Reincke" <[email protected]> wrote in message
news:[email protected]...
Hi everybody,
I am trying to figure out a strategy to enable a single web application
based on WLS 4.5.1 (SP13) running on Linux to serve multiple DNS
names, with some specific pages to be transmitted using SSL.
While the JSP pages differ in colouring and screen layout (but not in
logic),
the entire EJB business logic is identical for all DNS names. So are the
servlets.
The application data to be presented to the user can easily be mapped,
and presently (with the application responding to a single DNS name)
it is cached using a JNDI tree. To minimize coding effort, and
to continue utilizing the present caching concept, only expanding it to
support
multiple similar "virtual" applications, I would prefer to
continue using a single WLS instance when making the application"generic".
>
But as a consequence of this, I could only present a single SSLcertificate
to the user if I had WLS answer internet HTTP requests directly.
What would you think should be done to get the browsers
"display the closed padlock while in the order form" for multiple DNSnames
served by this same application instance?
One approach might be to put Apache in front of WLS, and configure it
to serve multiple virtual hosts (one for each DNS name to be served,
encoding the differences between the request URLs somehow in theServerPath
directive, and providing a separate SSL certificate for each of those
virtual
hosts).
Does this make sense to you? Any experience in this area? Which Apache
and WL modules should I be using - which combination
of mod_proxy, mod_ssl (by Apache), mod_wl, mod_wl_ssl[_raven] ?
Any input would be greatly appreciated! Thanks in advance!
Ruben
[A minor add-on question is: Is the situation truly different with
WLS 6.0? I understand it supports virtual hosting on its own. Can multiple
(web) applications running under a single common WLS "umbrella" server
instance share the same application data? I would expect so - is this
true?

How do I get DNS searchs to span multiple network interaces?

Each of our developer machines have two network cards. One is attached to the corporate network the other to a private network. There is a DNS server running on both networks. On our windows boxes we have no trouble doing something like
ping <device-name-on-corporate-network>
ping <device-name-on-private-network>
On our newly purchased Mac Minis running Mavericks 10.9.2 it doesn't work the same way.
If the service order has the corporate network above the private network then the ping of the corporate device name works but the ping of the private device name doesn't.
If I swtich the service order so the private network is above the corporate network then the ping of the private device name works but not the coporate one.
From what I am seeing I believe that on the Macs when a DNS lookup request failure is returned by the DNS server associated with highest active network in the service order list the DNS server associated with next highest active network in the service order is not being sent a DNS lookup request. Is this correct or am I missing a setting someplace?

I found another the solution was already posted in response to the following question in the discussions group.
https://discussions.apple.com/message/15095747#15095747
"Network Service Order Causing Conflict with Private DNS on Local Network"
KJB_

How to setup multiple DNS zones in a single domain

We have a small charter school running a Mac Open Directory network on a single subnet with a single registered FQDN for its internal domain. We are about to open a second school within a wing of the same building which will also be on a Mac Open Directory domain, but since it is legally a separate school (just administered by the same staff) it needs to be on it's own subnet and have its own LDAP directory.
Is there a way to program DNS between the two schools so that DNS traffic can be routed between them without breaking the DNS and Open Directory/Kerberos realms of either? Both schools will share the same internal domain name. Is it as simple as creating two primary DNS zones on each other's nameservers, both using the same domain name but each having its own designated nameserver for that particular subnet?
For instance, the existing school is running DNS on server1.example.com within the 10.39.54.0/23 subnet. The second school will be running DNS on server2.example.com within the 10.39.56.0/23 subnet. Would I then simply create two primary zones within each subnet, one referring to its own with itself as the nameserver and one within the neighbor subnet referencing that subnet's server as the designated nameserver.
Or would I do this with each schools DNS servers searching through its own subnet as its primary zone with the neighbor zone being added as a secondary zone?
Thanks!

You have two options.
Use a DNS server with a single internal domain example.com and have (as you said) server1.example.com
If the two subnets are on separate networks either via a router or VLAN, then you could run a separate DHCP server on each and advertise the appropriate DNS server for that subnet.
Otherwise you could have a single DNS server and either single DHCP advertising that single DNS server and have both server1 and server2 in the single DNS zone, or a DHCP server in each subnet but still pointing to the same single DNS server.
Each of these two servers would be an Open Directory Master
Note: in DNS terminology a DNS 'zone' is the same thing as a Domain Name.
The second option which if you want to keep the two 'schools' completely separate is to do the following
Use a DNS server per subnet
Use a DHCP server per subnet
Use a different domain name per school e.g. school1.com and school2.com
Create a server record on each as appropriate e.g. server1.school1.com and server2.school2.com
You cannot have a single DNS server have two identical zones e.g. example.com and example.com as they are of course the same thing.
If the two schools will merge officially at some point it might be better to use the same domain name, if they are going to fully split then definiately it is going to be better to use two different domain names.

Multiple DNS Search Suffixes

Similar Messages

Maybe you are looking for