No authentication prompt using DFS links to fileserver into another domain with no trusts between both domains

Users  , Fileservers  and DFS root with DFS links in Domain A all work fine.
each users from Domain A have also credentials and passwords from Domain B
There is NO trust between Domain A and Domain B, both Domains are in different site connected with VPN-tunnel.
Projectdata is stored at fileservers in both Domains. Now DFS links are added in the Domain A to a fileserver from Domain B
When users from Domain A connects to fileserver in Domain B  first he/she gets a prompt to authenticated, then DFS link to the fileserver in  Domain B work.
When users just use DFS link they get a prompt "not accessible" + "Logon failure unknown user or bad password"
No prompt is given to users from Domain A to enter the credential for Domain B.
We cannot created a trust between these 2 Domains due other policy's

Hi,
According to your description, there is no trust between domain A and domain B, right?
Based on my research, if there is no trust between domains/forests, then it is not possible
to share information across domain boundaries, because without trust, no authentication traffic can be passed across domain/forest.
That is why the user cannot access the file he has rights to access across domain.
Here is an article below for your references:
Trust Technologies
http://technet.microsoft.com/en-us/library/cc759554(v=WS.10).aspx
I hope this helps.
Amy Wang

Similar Messages

  • I burned a playlist to a data CD using itunes 11 but what is best way to get it import it into another computer with itunes running?

    I burned a playlist to a data CD using itunes 11 but what is best way to get it import it into another computer with itunes running?  I get an "X" when trying to copy to the "automatically add to itunes" folder on the 2nd computer.

    ok... so i i just made sure all my music is all together in 1 folder and i am going to trash my old music folder that is in the itunes folder... and follow your directions - let itunes start w/new library and bring my music in. Well, last little hurdle/question. I noticed that the place where my itunes library is - on an external drive doesnt have much space left on it. The place where i gathered all my music together in order to start fresh - is a different external drive and has LOTS of free space on it.
    SO... i now would like to just keep all that freshly compiled clean music right where it is but in advanced preferences I want to point to that new folder on the drive that has so much more space. So... should i delete the old music then go into itunes with a blank library and change the folder in preferences - quit and go back in and then follow your steps to loading my music? If i change the setting of where itunes looks for the music - that doesn't wipe out the old stuff... it just mixes it all up together right? I dont want that!!
    i promise this is the last question - i would love to fix this problem tonight and just be DONE!
    Thanks in advance for your patience and knowledge!!
    Lisa

  • Can't log into BOE system using SAP Authentication when using Document Link

    Hi all.
    We are setting up our dev SBOP 4.0 SP2 system and are working on getting everything configured to our requirements.
    What I am currently struggling with is the Document Link functionality.
    If you browse to a document (WEBI or Crystal) in the folder view in the BI Launchpad and right click and select Document View, the system presents a static link to the report. The problem is, when I execute that link in another browser window, the system prompts me with the default login screen that consists of the User Name and Password which utilizes the Enterprise authentication by default. Our login authentication is set to SAP everywhere else.
    I've already set the parameters for BILaunchpad.properties to allow us to log into the BOE server using our user IDs and that works without a problem. I've also configured the OpenDocument.properties file as well. Neither of these two files seem to have any impact on the screen I'm seeing when I try to use the Document Link. (And yes, I've restarted the tomcat server each time I've made a change to the config files.)
    I'm running out of ideas - have any of you encountered this issue before and do you have any suggestions?
    Thanks.
    -Brian

    Hi,
    i saw this also a couple of times that the changes to the "custom" folder wont take affect.
    Try the following:
    1. Stop the Tomcat
    2. Rename the properties file in the custom folder
    3. take a backup of the properties file from the config folder
    4. make the changes to the properties file in the config folder
    5. start tomcat
    Maybe this will solve the issue but if you deploy a new Fix Pack or Service Pack these Settings will get override.
    If this solved your problem i would recommend you open a Support Message with the SAP Support.
    Regards
    -Seb.

  • How to use external links to show a specific page with a parametrer ?

    Hi everybody,
    we discovered an annoying problem while we were developping applications who are sending emails after creating a new record. We are creating a valid APEX link which call our applications correctly, on the right page, and with the right parameter. The first time we log in, it works perfectly. The problem is when the user is trying to call an other record from the next email. It's not working unless we close our session. I guess it's a protection against hacking, but we can't ask the user to connect and disconnect every time they wants to watch a specific record directly from a mail ?
    The only way I can imagin to resolve this problem, is to open a page that will show all the newest entries in the table from a parameter. It could work for our applications that requires a lot travel between records.
    Do you have any other solution we could use ?
    Thanks
    LeinadJan
    Edited by: leinadjan on 2010-08-24 11:40

    Not the application, the page their are accessing.. Since you are using check-sums on the links and some sort of authentication, unless you build your authentication to allow a certain user access via e-mail, you will have issues.
    Have you seen this example of doing a survey through e-mail in APEX?: http://apex.oracle.com/pls/otn/f?p=9487:28:426474841717567::NO:28::
    It MIGHT offer you some help....
    Thank you,
    Tony Miller
    Webster, TX
    A lady came up to me on the street, pointed at my suede jacket and said "Do you know a cow was murdered to make that jacket?"
    "I didn't know there were any witnesses", I replied " Now I'll have to kill you too"

  • How to use one Web Dynpro DC into another Web Dynpro Dc

    Hi All,
    I am trying to learn the usage of DC but I am unable to find a basic tutorial on this topic. I found a few tutorial and few blogs too, but none of them explains topics like:
    How to call child component methods from parent component and vice versa too if possible?
    Can somebody please provide me with a basic tutorial on this topic.
    Regards
    Sid

    Hi,
    Go through the Componentization tutorials
    https://www.sdn.sap.com/irj/sdn/downloaditem?rid=/webcontent/uuid/bd0e0401-0801-0010-aaab-d0e1742da383 [original link is broken]
    https://www.sdn.sap.com/irj/sdn/downloaditem?rid=/webcontent/uuid/751d003a-0b01-0010-8996-afbaa3fd5339 [original link is broken]
    https://www.sdn.sap.com/irj/sdn/developerareas/webdynpro?rid=/library/uuid/49f2ea90-0201-0010-ce8e-de18b94aee2d#comp
    Regards,Anilkumar

  • How can i use calculation from one sheet into another sheet in discoverer

    I have a function which has to be used for several calcualtions in discoverer report.For each row the function is called 8 times, Is there any way that i can create a caculation based on the function in one tab and use this value returned by the function in the other tabs in the discoverer so that i can eliminte the function being called 8 times for each row.
    Please help.

    Hi Lloyd ,
    Thanks for the reply. See below for the detail explanation of what i am Talking about.
    I am Developing a Operational Expense Report based on a Custom Table.
    I get the following columns from the custom Table - Account, Amount Manual, Amount Local, Amount Overseas.
    Then I have two Functions which Calculates two different Ratios Based on the other Custom Table.
    1st function - Qualifying Sales Ratio
    CREATE OR REPLACE FUNCTION xxwfs_avi_q_sales_ratio (p_period VARCHAR2)
    RETURN NUMBER
    IS
    v_q_ratio NUMBER := NULL;
    BEGIN
    SELECT ROUND ((a.nonqualified_ar_amount / b.nq_nq_ar_amount), 4) qualifying_sales_ratio
    INTO v_q_ratio
    FROM (SELECT SUM(NVL(gp.total,0)) qualified_ar_amount
    FROM xxwfs_gp_table gp
    WHERE gp.company = 24101
    AND gp.gtp_qualified = 'Q'
    AND gp.org_id = 126
    AND gp.gl_date >= p_from_date
    ANDgp.gl_date <= p_to_period) a,
    (SELECT SUM(NVL(gp.total,0)) nq_nq_ar_amount
    FROM xxwfs_gp_table gp
    WHERE gp.company = 24101
    AND gp.gtp_qualified in( 'Q','NQ')
    AND gp.org_id = 126
    AND gp.gl_date >= p_from_date
    ANDgp.gl_date <= p_to_period) b;
    RETURN v_q_ratio;
    EXCEPTION
    WHEN OTHERS
    THEN
    v_q_ratio := 0;
    RETURN v_q_ratio;
    END xxwfs_avi_q_sales_ratio;
    2nd Function - Nonqualifying Sales Ratio
    CREATE OR REPLACE FUNCTION xxwfs_avi_nq_sales_ratio (p_period VARCHAR2)
    RETURN NUMBER
    IS
    v_q_ratio NUMBER := NULL;
    BEGIN
    SELECT ROUND ((a.nonqualified_ar_amount / b.nq_nq_ar_amount), 4) nonqualifying_sales_ratio
    INTO v_q_ratio
    FROM (SELECT SUM(NVL(gp.total,0)) nonqualified_ar_amount
    FROM xxwfs_gp_table gp
    WHERE gp.company = 24101
    AND gp.gtp_qualified = 'NQ'
    AND gp.org_id = 126
    AND gp.gl_date >= p_from_date
    ANDgp.gl_date <= p_to_period) a,
    (SELECT SUM(NVL(gp.total,0)) nq_nq_ar_amount
    FROM xxwfs_gp_table gp
    WHERE gp.company = 24101
    AND gp.gtp_qualified is not null
    AND gp.org_id = 126
    AND gp.gl_date >= p_from_date
    AND gp.gl_date <= p_to_date) b;
    RETURN v_q_ratio;
    EXCEPTION
    WHEN OTHERS
    THEN
    v_q_ratio := 0;
    RETURN v_q_ratio;
    END xxwfs_avi_nq_sales_ratio;
    The report is Run based on the parameter for the Range of gl_date.
    I registered these functions in discoverer and passing the parameter values to calculate the ratios. The 2 ratios are just one time calculations for the range of gl_date the report is run.
    The i mulitiply Qualifying Sales Ratio with the columns Amount Manual, Amount Local and Amount Overseas to get Qualifyied Amount Manual, Qualified Amount Local , Qualifyied Amount Overseas and the Nonqualifing Sales Ratio with the same Amount Manual, Amount Local and Amount Overseas columns to get NonQualifyied Amount Manual, NonQualified Amount Local , NonQualifyied Amount Overseas.
    This is the design i am approching now. For each record the function is called 8 times to calculates the qualifying and Non qualifying Sales ratios Ato caculate the other 6 columns based on these Ratio Calculations.
    So i was thinking if there is any way that i can get the Ratios for a specific date range in the First tab and usethe Value of the ratios in the other tab so that the function call is minimized.
    Waiting for your replies.

  • Using results of different reports into another

    Hi,
    I have two reports which two different subject areas
    SA1 and SA2
    I have a report R1 in SA1 which gives productid and stocklevel based on some conditions
    I have a report R2 in SA2 which gives productid and stocklevel based on different conditions for the same productid which is used in R1
    Now i need to subtract the stocklevel for the products
    that is i have to match the R1.productid with the R2.productid and find R1.stocklevel- R2.stocklevel.
    Is there any way of finding them in the answers...
    Thanks,
    Akila Manikandan.

    hi Akila,
    I guess u need to go with Direct Database Request
    http://gerardnico.com/wiki/dat/obiee/direct_database_request
    http://108obiee.blogspot.com/2009/11/variables-in-direct-database-requests.html
    else filter based on other request in advanced properties use that on R1.productid filter try it out
    Thanks,
    Saichand.v

  • HOW TO USE OGR2OGR  TO CONVERT DGN  INTO SHAPE FILES WITH MSLINK

    hi Friends...
    i had a requirement to convert the dgn file into shape files with its mslink and entity number. can any body give guidelines .........pls
    Rajanikanthc

    Bentley Map will do this for you.
    Open the DGN, connect to the database for the attribute
    Export->GIS Datatype,
    pick export, right click, new export
    pick directory if you have mulitple level
    pick export, right click and export

  • ISE 1.2 Authentication fails for 2nd AD domain with the forest trust relation

    We are running cisco ISE 1.2, we have new AD domain with forest trust relation between both the new and the old. authentication to with the new domain fails.
    Is there any requirements or configurations change needs to be done to make it success?

    Use the license that is currently on your ISE.  If your account has access to download the software, then you are good.  The license will not change during the upgrade.  If you are using ISE 1.2 Patch 8 or above, then you are using the same Base/Plus?Apex Licensing model. 
    If you are not yet on Patch 8, the you are using Base/Advanced and these will be converted during the upgrade.
    Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.
    Charles Moreton

  • Using Multiple AD domains with ACS

    Hi,
    Is it possible to use multiple domains for authentication with ACS? I need to use AAA to authenticate remote users into a centralised location but the users will be from different domains and I was hoping to use a single applicance to cater for all domains. Can this be achieved using LDAP? I understand that ACS can only be part of one AD domain.....
    In essence I am hoping that I will be able to authenticate the user based on their domain\credentials.
    Thanks in advance
    Jason

    Hi Javier,
    I understand that ACS can only join a single AD domain - but can it use LDAP to authenticate users from different AD domains - I don't want to have to established trusts between different domains.
    Kind regards
    Jason

  • Show prompts before opening a new report using action links

    Hi,
    I have a report that's grouped on a particular GROUP_ID and the current month. On clicking the GROUP_ID on the report, I need to open a new report that displays data for that month but on date level. Since we have a lot of data at date level (>100,000), I wanted a drop down on the top of the report that has all dates in that month and clicking on a particular date, the data in the pivot table is fetched.
    I tried using the pivot table prompt but that seems to fetch all the data first and then creates a drop down prompt. Is there a way where we could fire the query only on choosing a particular date.
    Is there any other way we could do this?
    Regards.

    You're saying to add a dashboard prompt for Month and Date? When opening reports using Action links, I am not able to see the prompts.
    I am using Go URLs in Action links and that data for a month is >100,000. So, I want to show the data for the month and the first date of that month.
    I really don't know whether such thing is possible or not. I just want to restrict the data to the first day of the month. Rest of the data is queried when user selects a different date from the drop down.

  • DFS and Windows 7 x64 strange behavior when trying to access a DFS link through mapped drive

    I've manually mapped a network drive (Q Drive) to a DFS location. Whenever I go into "My Computer" and open the Q Drive it shows the DFS links but when I double click one of the links it randomly takes me back to the "My Computer" starting point showing my standard drive letters. If I click through the Q drive and the DFS several time it all of the sudden works. Sometimes this circle of clicking can go on for 5-10 times before it works properly.
    I'm running the x64 edition of Windows 7.  Any suggestions on how to make this work properly? Its very annoying.

    GPO mapped namespace where you can't connect through the mapped drive letter but can connect through the DFS UNC namespace? Do you use access based enumeration?
    I personally think it has something to do with network bandwidth, the security token and offline files. =)
    You can access the namespace itself but not any of the linked shares (try checking the ACL:s on the shares and you get permission denied, but you still see them, ie they are listed).
    I found a post sometime ago about corrupted/trunkated security tokens. If the member was part of too many AD groups the token was trunkated and corrupted. That was going to be my next move. Sniff the traffic and see what actually happens when the issue occur
    if theres something to be learnt there. Since it works correctly through the UNC adress but not through the drive letter you ough to be able to see what is different between the two requests.
    http://blogs.technet.com/b/askds/archive/2008/05/14/troubleshooting-kerberos-authentication-problems-name-resolution-issues.aspx
    One thing I noted was that it only happened to remotely connected computers on slow 3G connections (we use Direct Access). Never on LAN-connected computers with GB access or remote computers with fast (>15Mbps) access. We also use folder redirection,
    which I think could be part of the problem, ie the share never goes online, atleast for us the issue was itermittent, it never happend all of the time, just from time to time. And if I disconnected and reconnected it could fix the issue for that particular
    sessions, usually it didn't but occasionally it did (just pulling the network cable and put it back). Check the offline/online status the folders show up as offline even though they are online.
    Enough of my ramblings. Sorry to hear you still have the problem and I hope you find a way to solve it.

  • Outlook 2010 Authentication prompt

    I have OUTLOOK 2010 connecting to Exchange 2010 (fully patched/etc. with proper CAS array settings/etc.).
    We are seeing Password Authentication prompts from Outlook clients as they transition between a LAN connection to a Wireless connection. I have always attributed this to the client moving from MAPI mode to "Outlook Anywhere" mode, which in "Outlook
    Anywhere" mode we have BASIC authentication enabled, so a prompt is expected (offsite is the concept).
    HOWEVER since the workstation is moving from a LAN connection to a WIRELESS internal connection and the CAS array is available, WHY would I be seeing this prompt? My expectation is the workstation would stay in MAPI connectivity mode as it transitions from
    the LAN connection to the wireless connection and no prompt would be expected?? Is it a "timing" issue?
    THANKS

    For us, the changes made in IIS are permanent, there quite possibly is a powershell way of doing it but I am still getting to grips with PS myself so I don't know.
    I wont plagiarise others work but these two links here give a good explanation between Basic and NTLM. personally, I have always used basic because I always seem to get problems with NTLM, though one time it did work as expected but I forgot what I did to
    get it working now.
    https://social.technet.microsoft.com/Forums/exchange/en-US/92178beb-3310-4363-8848-d022a6e2a77f/basic-vs-ntlm-authentication-outlook-anywhere
    http://www.sysadminlab.net/exchange/outlook-anywhere-basic-vs-ntlm-authentication-explained  

  • Safari continuous authentication prompt and video streaming issue

    Hi All, 
    I have a user who is using Mac machines and reported that he is
    not able to login into SharePoint 2013 production site and wants to upload
    .mp4 media files. There are other users who are using iPad. 
    While logging using Safari browser and enter he his credentials, SharePoint authentication prompt continuously and freezes. After the video play icon is shown but video is not shown.
    But using Chrome Browser he can login with only 1 authentication prompt, able to upload .mp4 files and able to stream the video as shown below: 
    SharePoint authentication is NTLM and chrome works perfectly fine for the user. But other users cannot view on Safari browser at all.  
    I did my initial research and discovered that SharePoint 2013 does not support Safari as links below: 
    https://social.technet.microsoft.com/Forums/en-US/e3d42a62-1ba9-4c69-97fc-d357d01bd486/sharepoint-2013-is-not-compatible-with-ios-8?forum=sharepointgeneral 
    https://social.technet.microsoft.com/Forums/en-US/6ef10633-0b01-4572-8f27-5395463d3895/safari-multiple-login-prompts  (Microsoft reply)
    • Does SharePoint 2013 not support Safari browser out the box? http://blog.christian-heindel.de/2013/01/17/office-for-mac-2011-and-sharepoint-2013/ 
    • Why user can still able to login using Chrome on Mac machines and not Safari which should be default browser MAC machine? 
    Any help would be greatly appreciated. 
    Thanks in advance. 
    Cheers, 
    --Aaroh      
    Aroh Shukla

    Thanks Baba and others,
    Before your reply with a MAC user and he was using Safari v.7.1.2. 
    I also received from some users about different browser Safari versions.
    Safari with: v6.x on OS X 10.8, v7.x on OS X v10.9
    NOT working for users (watching .mp4 videos on SharePoint)
    Safari with:   v8.0 on OS X 10.10,Chrome v40.x  WORKING
    for users. (watching .mp4 videos on SharePoint)
    Does SharePoint 2013 supports older safari versions like Safari v6.x, v7.x on OS X 10.8 and OS X 10.9. 
    I can test with users only next week as its holiday seasons here in Singapore.
    Thanks for your help. 
    Cheers,
    --aaroh 
    Aroh Shukla

  • Multiple proxy authentication prompts

    When some particular sites are visited, multiple proxy authentication prompts are received. After canceling these pop-up windows the page can be finalized visited, we have observed that this issue is happening when Adobe Flash player is involved.
    This has been an intermittent issue over the last months, however there is a site that can be used to reproduce the problem.
    http://tv.adobe.com/watch/accessibility-adobe/preparing-indesign-files-for-accessibility/
    Google chrome and IE are not affected

    Hi Tylerdowner,
    Thanks for your response. I should have mentioned two things, I am already using a recent firefox version (16.0.1) and these authentication prompts are for proxy user and password, these are not related with digital certificates as suggested in the first answer provided.
    The problem that we are experiencing it is pretty similar to a well-known behaviour experienced in previous firefox versions. This can be replicated as follow:
    0) Start firefox .
    1) Open several sites in different tabs.
    2) Close firefox selecting "Save and quit"
    3) Start firefox again. Multiple authentication prompts (user and password) will be required.
    Our current situation is pretty similar but it is happening when some sites with adobe flash player content is visited. For instance when this site is visited [[link text|http://tv.adobe.com/watch/accessibility-adobe/preparing-indesign-files-for-accessibility/ ]] multiple authentication prompts are poped-up
    It seems to me (speculating) that adobe flash plugin may be sending a burst of hits through the proxy, as none of them has been previously authenticated, one username/password request is being sent to the browser one for each "hit" that was simultaneously sent through the proxy.
    Thanks for your feedback.

Maybe you are looking for