No authentication prompt using DFS links to fileserver into another domain with no trusts between both domains
Users , Fileservers and DFS root with DFS links in Domain A all work fine.
each users from Domain A have also credentials and passwords from Domain B
There is NO trust between Domain A and Domain B, both Domains are in different site connected with VPN-tunnel.
Projectdata is stored at fileservers in both Domains. Now DFS links are added in the Domain A to a fileserver from Domain B
When users from Domain A connects to fileserver in Domain B first he/she gets a prompt to authenticated, then DFS link to the fileserver in Domain B work.
When users just use DFS link they get a prompt "not accessible" + "Logon failure unknown user or bad password"
No prompt is given to users from Domain A to enter the credential for Domain B.
We cannot created a trust between these 2 Domains due other policy's
Hi,
According to your description, there is no trust between domain A and domain B, right?
Based on my research, if there is no trust between domains/forests, then it is not possible
to share information across domain boundaries, because without trust, no authentication traffic can be passed across domain/forest.
That is why the user cannot access the file he has rights to access across domain.
Here is an article below for your references:
Trust Technologies
http://technet.microsoft.com/en-us/library/cc759554(v=WS.10).aspx
I hope this helps.
Amy Wang
Similar Messages
-
I burned a playlist to a data CD using itunes 11 but what is best way to get it import it into another computer with itunes running? I get an "X" when trying to copy to the "automatically add to itunes" folder on the 2nd computer.
ok... so i i just made sure all my music is all together in 1 folder and i am going to trash my old music folder that is in the itunes folder... and follow your directions - let itunes start w/new library and bring my music in. Well, last little hurdle/question. I noticed that the place where my itunes library is - on an external drive doesnt have much space left on it. The place where i gathered all my music together in order to start fresh - is a different external drive and has LOTS of free space on it.
SO... i now would like to just keep all that freshly compiled clean music right where it is but in advanced preferences I want to point to that new folder on the drive that has so much more space. So... should i delete the old music then go into itunes with a blank library and change the folder in preferences - quit and go back in and then follow your steps to loading my music? If i change the setting of where itunes looks for the music - that doesn't wipe out the old stuff... it just mixes it all up together right? I dont want that!!
i promise this is the last question - i would love to fix this problem tonight and just be DONE!
Thanks in advance for your patience and knowledge!!
Lisa -
Can't log into BOE system using SAP Authentication when using Document Link
Hi all.
We are setting up our dev SBOP 4.0 SP2 system and are working on getting everything configured to our requirements.
What I am currently struggling with is the Document Link functionality.
If you browse to a document (WEBI or Crystal) in the folder view in the BI Launchpad and right click and select Document View, the system presents a static link to the report. The problem is, when I execute that link in another browser window, the system prompts me with the default login screen that consists of the User Name and Password which utilizes the Enterprise authentication by default. Our login authentication is set to SAP everywhere else.
I've already set the parameters for BILaunchpad.properties to allow us to log into the BOE server using our user IDs and that works without a problem. I've also configured the OpenDocument.properties file as well. Neither of these two files seem to have any impact on the screen I'm seeing when I try to use the Document Link. (And yes, I've restarted the tomcat server each time I've made a change to the config files.)
I'm running out of ideas - have any of you encountered this issue before and do you have any suggestions?
Thanks.
-BrianHi,
i saw this also a couple of times that the changes to the "custom" folder wont take affect.
Try the following:
1. Stop the Tomcat
2. Rename the properties file in the custom folder
3. take a backup of the properties file from the config folder
4. make the changes to the properties file in the config folder
5. start tomcat
Maybe this will solve the issue but if you deploy a new Fix Pack or Service Pack these Settings will get override.
If this solved your problem i would recommend you open a Support Message with the SAP Support.
Regards
-Seb. -
How to use external links to show a specific page with a parametrer ?
Hi everybody,
we discovered an annoying problem while we were developping applications who are sending emails after creating a new record. We are creating a valid APEX link which call our applications correctly, on the right page, and with the right parameter. The first time we log in, it works perfectly. The problem is when the user is trying to call an other record from the next email. It's not working unless we close our session. I guess it's a protection against hacking, but we can't ask the user to connect and disconnect every time they wants to watch a specific record directly from a mail ?
The only way I can imagin to resolve this problem, is to open a page that will show all the newest entries in the table from a parameter. It could work for our applications that requires a lot travel between records.
Do you have any other solution we could use ?
Thanks
LeinadJan
Edited by: leinadjan on 2010-08-24 11:40Not the application, the page their are accessing.. Since you are using check-sums on the links and some sort of authentication, unless you build your authentication to allow a certain user access via e-mail, you will have issues.
Have you seen this example of doing a survey through e-mail in APEX?: http://apex.oracle.com/pls/otn/f?p=9487:28:426474841717567::NO:28::
It MIGHT offer you some help....
Thank you,
Tony Miller
Webster, TX
A lady came up to me on the street, pointed at my suede jacket and said "Do you know a cow was murdered to make that jacket?"
"I didn't know there were any witnesses", I replied " Now I'll have to kill you too" -
How to use one Web Dynpro DC into another Web Dynpro Dc
Hi All,
I am trying to learn the usage of DC but I am unable to find a basic tutorial on this topic. I found a few tutorial and few blogs too, but none of them explains topics like:
How to call child component methods from parent component and vice versa too if possible?
Can somebody please provide me with a basic tutorial on this topic.
Regards
SidHi,
Go through the Componentization tutorials
https://www.sdn.sap.com/irj/sdn/downloaditem?rid=/webcontent/uuid/bd0e0401-0801-0010-aaab-d0e1742da383 [original link is broken]
https://www.sdn.sap.com/irj/sdn/downloaditem?rid=/webcontent/uuid/751d003a-0b01-0010-8996-afbaa3fd5339 [original link is broken]
https://www.sdn.sap.com/irj/sdn/developerareas/webdynpro?rid=/library/uuid/49f2ea90-0201-0010-ce8e-de18b94aee2d#comp
Regards,Anilkumar -
How can i use calculation from one sheet into another sheet in discoverer
I have a function which has to be used for several calcualtions in discoverer report.For each row the function is called 8 times, Is there any way that i can create a caculation based on the function in one tab and use this value returned by the function in the other tabs in the discoverer so that i can eliminte the function being called 8 times for each row.
Please help.Hi Lloyd ,
Thanks for the reply. See below for the detail explanation of what i am Talking about.
I am Developing a Operational Expense Report based on a Custom Table.
I get the following columns from the custom Table - Account, Amount Manual, Amount Local, Amount Overseas.
Then I have two Functions which Calculates two different Ratios Based on the other Custom Table.
1st function - Qualifying Sales Ratio
CREATE OR REPLACE FUNCTION xxwfs_avi_q_sales_ratio (p_period VARCHAR2)
RETURN NUMBER
IS
v_q_ratio NUMBER := NULL;
BEGIN
SELECT ROUND ((a.nonqualified_ar_amount / b.nq_nq_ar_amount), 4) qualifying_sales_ratio
INTO v_q_ratio
FROM (SELECT SUM(NVL(gp.total,0)) qualified_ar_amount
FROM xxwfs_gp_table gp
WHERE gp.company = 24101
AND gp.gtp_qualified = 'Q'
AND gp.org_id = 126
AND gp.gl_date >= p_from_date
ANDgp.gl_date <= p_to_period) a,
(SELECT SUM(NVL(gp.total,0)) nq_nq_ar_amount
FROM xxwfs_gp_table gp
WHERE gp.company = 24101
AND gp.gtp_qualified in( 'Q','NQ')
AND gp.org_id = 126
AND gp.gl_date >= p_from_date
ANDgp.gl_date <= p_to_period) b;
RETURN v_q_ratio;
EXCEPTION
WHEN OTHERS
THEN
v_q_ratio := 0;
RETURN v_q_ratio;
END xxwfs_avi_q_sales_ratio;
2nd Function - Nonqualifying Sales Ratio
CREATE OR REPLACE FUNCTION xxwfs_avi_nq_sales_ratio (p_period VARCHAR2)
RETURN NUMBER
IS
v_q_ratio NUMBER := NULL;
BEGIN
SELECT ROUND ((a.nonqualified_ar_amount / b.nq_nq_ar_amount), 4) nonqualifying_sales_ratio
INTO v_q_ratio
FROM (SELECT SUM(NVL(gp.total,0)) nonqualified_ar_amount
FROM xxwfs_gp_table gp
WHERE gp.company = 24101
AND gp.gtp_qualified = 'NQ'
AND gp.org_id = 126
AND gp.gl_date >= p_from_date
ANDgp.gl_date <= p_to_period) a,
(SELECT SUM(NVL(gp.total,0)) nq_nq_ar_amount
FROM xxwfs_gp_table gp
WHERE gp.company = 24101
AND gp.gtp_qualified is not null
AND gp.org_id = 126
AND gp.gl_date >= p_from_date
AND gp.gl_date <= p_to_date) b;
RETURN v_q_ratio;
EXCEPTION
WHEN OTHERS
THEN
v_q_ratio := 0;
RETURN v_q_ratio;
END xxwfs_avi_nq_sales_ratio;
The report is Run based on the parameter for the Range of gl_date.
I registered these functions in discoverer and passing the parameter values to calculate the ratios. The 2 ratios are just one time calculations for the range of gl_date the report is run.
The i mulitiply Qualifying Sales Ratio with the columns Amount Manual, Amount Local and Amount Overseas to get Qualifyied Amount Manual, Qualified Amount Local , Qualifyied Amount Overseas and the Nonqualifing Sales Ratio with the same Amount Manual, Amount Local and Amount Overseas columns to get NonQualifyied Amount Manual, NonQualified Amount Local , NonQualifyied Amount Overseas.
This is the design i am approching now. For each record the function is called 8 times to calculates the qualifying and Non qualifying Sales ratios Ato caculate the other 6 columns based on these Ratio Calculations.
So i was thinking if there is any way that i can get the Ratios for a specific date range in the First tab and usethe Value of the ratios in the other tab so that the function call is minimized.
Waiting for your replies. -
Using results of different reports into another
Hi,
I have two reports which two different subject areas
SA1 and SA2
I have a report R1 in SA1 which gives productid and stocklevel based on some conditions
I have a report R2 in SA2 which gives productid and stocklevel based on different conditions for the same productid which is used in R1
Now i need to subtract the stocklevel for the products
that is i have to match the R1.productid with the R2.productid and find R1.stocklevel- R2.stocklevel.
Is there any way of finding them in the answers...
Thanks,
Akila Manikandan.hi Akila,
I guess u need to go with Direct Database Request
http://gerardnico.com/wiki/dat/obiee/direct_database_request
http://108obiee.blogspot.com/2009/11/variables-in-direct-database-requests.html
else filter based on other request in advanced properties use that on R1.productid filter try it out
Thanks,
Saichand.v -
HOW TO USE OGR2OGR TO CONVERT DGN INTO SHAPE FILES WITH MSLINK
hi Friends...
i had a requirement to convert the dgn file into shape files with its mslink and entity number. can any body give guidelines .........pls
RajanikanthcBentley Map will do this for you.
Open the DGN, connect to the database for the attribute
Export->GIS Datatype,
pick export, right click, new export
pick directory if you have mulitple level
pick export, right click and export -
ISE 1.2 Authentication fails for 2nd AD domain with the forest trust relation
We are running cisco ISE 1.2, we have new AD domain with forest trust relation between both the new and the old. authentication to with the new domain fails.
Is there any requirements or configurations change needs to be done to make it success?Use the license that is currently on your ISE. If your account has access to download the software, then you are good. The license will not change during the upgrade. If you are using ISE 1.2 Patch 8 or above, then you are using the same Base/Plus?Apex Licensing model.
If you are not yet on Patch 8, the you are using Base/Advanced and these will be converted during the upgrade.
Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.
Charles Moreton -
Using Multiple AD domains with ACS
Hi,
Is it possible to use multiple domains for authentication with ACS? I need to use AAA to authenticate remote users into a centralised location but the users will be from different domains and I was hoping to use a single applicance to cater for all domains. Can this be achieved using LDAP? I understand that ACS can only be part of one AD domain.....
In essence I am hoping that I will be able to authenticate the user based on their domain\credentials.
Thanks in advance
JasonHi Javier,
I understand that ACS can only join a single AD domain - but can it use LDAP to authenticate users from different AD domains - I don't want to have to established trusts between different domains.
Kind regards
Jason -
Show prompts before opening a new report using action links
Hi,
I have a report that's grouped on a particular GROUP_ID and the current month. On clicking the GROUP_ID on the report, I need to open a new report that displays data for that month but on date level. Since we have a lot of data at date level (>100,000), I wanted a drop down on the top of the report that has all dates in that month and clicking on a particular date, the data in the pivot table is fetched.
I tried using the pivot table prompt but that seems to fetch all the data first and then creates a drop down prompt. Is there a way where we could fire the query only on choosing a particular date.
Is there any other way we could do this?
Regards.You're saying to add a dashboard prompt for Month and Date? When opening reports using Action links, I am not able to see the prompts.
I am using Go URLs in Action links and that data for a month is >100,000. So, I want to show the data for the month and the first date of that month.
I really don't know whether such thing is possible or not. I just want to restrict the data to the first day of the month. Rest of the data is queried when user selects a different date from the drop down. -
DFS and Windows 7 x64 strange behavior when trying to access a DFS link through mapped drive
I've manually mapped a network drive (Q Drive) to a DFS location. Whenever I go into "My Computer" and open the Q Drive it shows the DFS links but when I double click one of the links it randomly takes me back to the "My Computer" starting point showing my standard drive letters. If I click through the Q drive and the DFS several time it all of the sudden works. Sometimes this circle of clicking can go on for 5-10 times before it works properly.
I'm running the x64 edition of Windows 7. Any suggestions on how to make this work properly? Its very annoying.GPO mapped namespace where you can't connect through the mapped drive letter but can connect through the DFS UNC namespace? Do you use access based enumeration?
I personally think it has something to do with network bandwidth, the security token and offline files. =)
You can access the namespace itself but not any of the linked shares (try checking the ACL:s on the shares and you get permission denied, but you still see them, ie they are listed).
I found a post sometime ago about corrupted/trunkated security tokens. If the member was part of too many AD groups the token was trunkated and corrupted. That was going to be my next move. Sniff the traffic and see what actually happens when the issue occur
if theres something to be learnt there. Since it works correctly through the UNC adress but not through the drive letter you ough to be able to see what is different between the two requests.
http://blogs.technet.com/b/askds/archive/2008/05/14/troubleshooting-kerberos-authentication-problems-name-resolution-issues.aspx
One thing I noted was that it only happened to remotely connected computers on slow 3G connections (we use Direct Access). Never on LAN-connected computers with GB access or remote computers with fast (>15Mbps) access. We also use folder redirection,
which I think could be part of the problem, ie the share never goes online, atleast for us the issue was itermittent, it never happend all of the time, just from time to time. And if I disconnected and reconnected it could fix the issue for that particular
sessions, usually it didn't but occasionally it did (just pulling the network cable and put it back). Check the offline/online status the folders show up as offline even though they are online.
Enough of my ramblings. Sorry to hear you still have the problem and I hope you find a way to solve it. -
Outlook 2010 Authentication prompt
I have OUTLOOK 2010 connecting to Exchange 2010 (fully patched/etc. with proper CAS array settings/etc.).
We are seeing Password Authentication prompts from Outlook clients as they transition between a LAN connection to a Wireless connection. I have always attributed this to the client moving from MAPI mode to "Outlook Anywhere" mode, which in "Outlook
Anywhere" mode we have BASIC authentication enabled, so a prompt is expected (offsite is the concept).
HOWEVER since the workstation is moving from a LAN connection to a WIRELESS internal connection and the CAS array is available, WHY would I be seeing this prompt? My expectation is the workstation would stay in MAPI connectivity mode as it transitions from
the LAN connection to the wireless connection and no prompt would be expected?? Is it a "timing" issue?
THANKSFor us, the changes made in IIS are permanent, there quite possibly is a powershell way of doing it but I am still getting to grips with PS myself so I don't know.
I wont plagiarise others work but these two links here give a good explanation between Basic and NTLM. personally, I have always used basic because I always seem to get problems with NTLM, though one time it did work as expected but I forgot what I did to
get it working now.
https://social.technet.microsoft.com/Forums/exchange/en-US/92178beb-3310-4363-8848-d022a6e2a77f/basic-vs-ntlm-authentication-outlook-anywhere
http://www.sysadminlab.net/exchange/outlook-anywhere-basic-vs-ntlm-authentication-explained -
Safari continuous authentication prompt and video streaming issue
Hi All,
I have a user who is using Mac machines and reported that he is
not able to login into SharePoint 2013 production site and wants to upload
.mp4 media files. There are other users who are using iPad.
While logging using Safari browser and enter he his credentials, SharePoint authentication prompt continuously and freezes. After the video play icon is shown but video is not shown.
But using Chrome Browser he can login with only 1 authentication prompt, able to upload .mp4 files and able to stream the video as shown below:
SharePoint authentication is NTLM and chrome works perfectly fine for the user. But other users cannot view on Safari browser at all.
I did my initial research and discovered that SharePoint 2013 does not support Safari as links below:
https://social.technet.microsoft.com/Forums/en-US/e3d42a62-1ba9-4c69-97fc-d357d01bd486/sharepoint-2013-is-not-compatible-with-ios-8?forum=sharepointgeneral
https://social.technet.microsoft.com/Forums/en-US/6ef10633-0b01-4572-8f27-5395463d3895/safari-multiple-login-prompts (Microsoft reply)
• Does SharePoint 2013 not support Safari browser out the box? http://blog.christian-heindel.de/2013/01/17/office-for-mac-2011-and-sharepoint-2013/
• Why user can still able to login using Chrome on Mac machines and not Safari which should be default browser MAC machine?
Any help would be greatly appreciated.
Thanks in advance.
Cheers,
--Aaroh
Aroh ShuklaThanks Baba and others,
Before your reply with a MAC user and he was using Safari v.7.1.2.
I also received from some users about different browser Safari versions.
Safari with: v6.x on OS X 10.8, v7.x on OS X v10.9
NOT working for users (watching .mp4 videos on SharePoint)
Safari with: v8.0 on OS X 10.10,Chrome v40.x WORKING
for users. (watching .mp4 videos on SharePoint)
Does SharePoint 2013 supports older safari versions like Safari v6.x, v7.x on OS X 10.8 and OS X 10.9.
I can test with users only next week as its holiday seasons here in Singapore.
Thanks for your help.
Cheers,
--aaroh
Aroh Shukla -
Multiple proxy authentication prompts
When some particular sites are visited, multiple proxy authentication prompts are received. After canceling these pop-up windows the page can be finalized visited, we have observed that this issue is happening when Adobe Flash player is involved.
This has been an intermittent issue over the last months, however there is a site that can be used to reproduce the problem.
http://tv.adobe.com/watch/accessibility-adobe/preparing-indesign-files-for-accessibility/
Google chrome and IE are not affectedHi Tylerdowner,
Thanks for your response. I should have mentioned two things, I am already using a recent firefox version (16.0.1) and these authentication prompts are for proxy user and password, these are not related with digital certificates as suggested in the first answer provided.
The problem that we are experiencing it is pretty similar to a well-known behaviour experienced in previous firefox versions. This can be replicated as follow:
0) Start firefox .
1) Open several sites in different tabs.
2) Close firefox selecting "Save and quit"
3) Start firefox again. Multiple authentication prompts (user and password) will be required.
Our current situation is pretty similar but it is happening when some sites with adobe flash player content is visited. For instance when this site is visited [[link text|http://tv.adobe.com/watch/accessibility-adobe/preparing-indesign-files-for-accessibility/ ]] multiple authentication prompts are poped-up
It seems to me (speculating) that adobe flash plugin may be sending a burst of hits through the proxy, as none of them has been previously authenticated, one username/password request is being sent to the browser one for each "hit" that was simultaneously sent through the proxy.
Thanks for your feedback.
Maybe you are looking for
-
Logical operations on binary columns
We need to store approx 200 bitfields so we thought we'd use a binary datatype. We can set the bit fields easily using set bitfield = bitfield | 1 set bitfield = bitfield | 2 set bitfield = bitfield | 4 However we don't want to hard-co
-
Multiple inputs in NI usb 6008
I have to measure phase difference between two analog input signals. I did this by using two Ni daq assisstants but at a time I could only read one and an error comes. Kindly help me with examples if any of you have them.
-
Mac, OSX 10.6.8 (up to date), Firefox 28.0 (up to date). Adobe Flash was downloaded and no videos will run on any web pages using Firefox. I reset Firefox to default settings and restarted. I get the message that Adobe Flash has crashed. Shut compute
-
Solaris 8 (I know not 9): Equivalent "GHOST" or "Ignite" product?
Is there any product for Solaris 8 that is similar to the "Ghost" product for PCs OR for HP-UX's Ignite product. We use both of these products here at work but will be getting a Blade 100 system with Solaris 8 on it and I want to be able to image it
-
New email with selection Services problem
When I select text and choose "New email with selection" under Services, at least half the time, a new Mail message window opens, blank. Then, that blank Message window stays open, can't be closed, and the only way I can get out of it is to Force Qu