OAM 11g "Failure URL" in Authoriztion policy not working?

Hi,
Per the subject, I am running OAM server 11g (11.1.1.3), with an OAM 10g Apache webgate.
In the OAM Authorization policy (protected), I have specified a full URL for the "Failure URL", to get the browser to redirect when an authorization failure occurs.
However, when I test with a user that does not have access (user authenticates ok, but doesn't have right to access the protected resource), instead of the browser being redirected, I am getting an "Oracle Access Manager Operations Error" page.
I've been trying to figure this out, and have found several threads about this, e.g.:
OAM 11g authz redirect URL not working?
But, as I said, I am using OAM 11g server, and there is no "Inconclusive URL" in the policy settings (I guess there was in 10g, but not in 11g).
I have trace logging enabled on the OAM server, and I can clearly see that the request is getting "results DENY", but there's no indication in the logs that OAM server is aware of any failure redirection URL.
I've also got a header trace, and I can see that the browser is simply being re-directed to the "/oberr.cgi...." URL, so it' not going "somewhere else".
So, does anyone know why the "Failure URL" is not working in OAM 11g in Authorization policies?
Thanks,
Jim
P.S. The URL that it's suppose to be re-directing the browser to is in the Public resources under Authorization, and as I said, I don't see the browser even attempting to go to the failure URL, either via header traces or the OAM server logs.
Edited by: jimcpl on Nov 5, 2011 8:53 PM

Hi,
Per the subject, I am running OAM server 11g (11.1.1.3), with an OAM 10g Apache webgate.
In the OAM Authorization policy (protected), I have specified a full URL for the "Failure URL", to get the browser to redirect when an authorization failure occurs.
However, when I test with a user that does not have access (user authenticates ok, but doesn't have right to access the protected resource), instead of the browser being redirected, I am getting an "Oracle Access Manager Operations Error" page.
I've been trying to figure this out, and have found several threads about this, e.g.:
OAM 11g authz redirect URL not working?
But, as I said, I am using OAM 11g server, and there is no "Inconclusive URL" in the policy settings (I guess there was in 10g, but not in 11g).
I have trace logging enabled on the OAM server, and I can clearly see that the request is getting "results DENY", but there's no indication in the logs that OAM server is aware of any failure redirection URL.
I've also got a header trace, and I can see that the browser is simply being re-directed to the "/oberr.cgi...." URL, so it' not going "somewhere else".
So, does anyone know why the "Failure URL" is not working in OAM 11g in Authorization policies?
Thanks,
Jim
P.S. The URL that it's suppose to be re-directing the browser to is in the Public resources under Authorization, and as I said, I don't see the browser even attempting to go to the failure URL, either via header traces or the OAM server logs.
Edited by: jimcpl on Nov 5, 2011 8:53 PM

Similar Messages

  • Import/removal policy not working javax.naming.NameNotFound

    Hi, i am experiencing some problems with my import/removal policy...more so the removal workstation policy not working.
    When the policy schedule time initiates - the following shows up on the zenworks removal workstation removal screen:
    30-Oct-2009 17:35:39 javax.naming.NameNotFoundException [Root exception is com.novell.service.jncp.NDSException: ccode = -601 (0xfffffda7)]
    I keep seeing this on the screen and in the zenwsrem.log file.
    I am running:
    Zenworks 6.5 sp2
    Netware 6.5 sp5
    Can anyone help as i want to keep my tree clean from all the thousands of workstation objects that are generating and are mostly redundant.
    Any help with this would be very helpful.
    I do not know why this is happening...i have read a few tids, but the naming of my container does not use any special characters, just "Workstations".
    regards
    Dennis

    Did any of the removals succeed?
    i.e.
    20-Sep-2009 23:00:31 Removed workstation:T82715.Workstations.BilletRd.WF
    20-Sep-2009 23:00:32 Removed workstation:T87490.Workstations.BuxtonRd.WF
    20-Sep-2009 23:00:32 Removed workstation:T87810.Workstations.BuxtonRd.WF
    Are they still in eDir?
    I'm assuming that edir is clean.. so the only other thing that would come to
    mind is that the server/workstation policy doesn't have rights to delete
    from the OU's your workstations are in?
    I didn't go thru the log exactly line by line, but it looks like its always
    bombing on workstations in
    your BuxtonRd.WF and CecilRd.WF containers.
    >>> On 11/5/2009 at 10:26 AM, in message
    <[email protected]>,
    dchitolie<[email protected]> wrote:
    > In relation to the tid, i do not have any / in my containers?
    > Here is my Zenwsrem.log:
    >
    > NameNotFoundException [Root exception
    > iscom.novell.service.jncp.NDSException: ccode = -601 (0xfffffda7)]
    > 27-Dec-2008 23:00:04 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 03-Jan-2009 23:00:03 Removed
    workstation:T87306.Workstations.BuxtonRd.WF
    > 03-Jan-2009 23:00:04 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 10-Jan-2009 23:00:50 Removed
    workstation:T84740.Workstations.BilletRd.WF
    > 10-Jan-2009 23:00:50 Removed
    workstation:T87424.Workstations.BilletRd.WF
    > 10-Jan-2009 23:00:50 Removed
    workstation:T87324.Workstations.BuxtonRd.WF
    > 10-Jan-2009 23:00:51 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 17-Jan-2009 23:00:16 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 31-Jan-2009 23:00:07 Removed
    workstation:T85290.Workstations.BilletRd.WF
    > 31-Jan-2009 23:00:08 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    >
    > 14-Mar-2009 23:00:36 Removed
    workstation:T87327.Workstations.BuxtonRd.WF
    > 14-Mar-2009 23:00:37 Removed
    workstation:T87484.Workstations.BuxtonRd.WF
    > 14-Mar-2009 23:00:39 Removed workstation:T93380.Workstations.CecilRd.WF
    > 14-Mar-2009 23:00:39 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 22-Mar-2009 23:00:04 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 28-Mar-2009 23:00:48 Removed workstation:T88849.Workstations.CecilRd.WF
    > 28-Mar-2009 23:00:49 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 29-Mar-2009 23:00:27 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 02-Apr-2009 17:51:08 Could not authenticate as policy:
    > 05-Apr-2009 23:00:31 Removed workstation:T8102T.Workstations.CecilRd.WF
    > 05-Apr-2009 23:00:32 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 12-Apr-2009 23:00:23 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 17-Apr-2009 11:12:04 Could not authenticate as policy:
    > 19-Apr-2009 23:00:23 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 26-Apr-2009 23:00:21 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 03-May-2009 22:59:55 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 10-May-2009 23:00:04 Removed workstation:T88842.Workstations.CecilRd.WF
    > 10-May-2009 23:00:04 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 17-May-2009 23:00:22 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 24-May-2009 22:59:47 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 31-May-2009 23:00:15 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 07-Jun-2009 23:00:49 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 14-Jun-2009 23:00:04 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 21-Jun-2009 23:00:38 Removed workstation:T88834.Workstations.CecilRd.WF
    > 21-Jun-2009 23:00:38 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 28-Jun-2009 08:09:11 No removal policy found.
    > 28-Jun-2009 09:08:54 No removal policy found.
    > 28-Jun-2009 10:08:37 No removal policy found.
    > 28-Jun-2009 11:08:20 No removal policy found.
    > 28-Jun-2009 12:08:03 No removal policy found.
    > 28-Jun-2009 13:07:45 No removal policy found.
    > 28-Jun-2009 14:07:28 No removal policy found.
    > 28-Jun-2009 15:07:11 No removal policy found.
    > 28-Jun-2009 16:06:55 No removal policy found.
    > 28-Jun-2009 17:06:37 No removal policy found.
    > 28-Jun-2009 18:06:20 No removal policy found.
    > 28-Jun-2009 19:06:03 No removal policy found.
    > 28-Jun-2009 20:05:46 No removal policy found.
    > 28-Jun-2009 21:05:29 No removal policy found.
    > 28-Jun-2009 22:05:12 No removal policy found.
    > 28-Jun-2009 22:55:58 No removal policy found.
    > 28-Jun-2009 23:04:55 No removal policy found.
    > 29-Jun-2009 00:04:38 No removal policy found.
    > 29-Jun-2009 01:04:21 No removal policy found.
    > 29-Jun-2009 02:04:04 No removal policy found.
    > 29-Jun-2009 03:03:47 No removal policy found.
    > 29-Jun-2009 04:03:30 No removal policy found.
    > 29-Jun-2009 05:03:13 No removal policy found.
    > 29-Jun-2009 06:02:56 No removal policy found.
    > 29-Jun-2009 07:02:38 No removal policy found.
    > 29-Jun-2009 08:02:22 No removal policy found.
    > 29-Jun-2009 09:02:05 No removal policy found.
    > 05-Jul-2009 23:00:30 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 12-Jul-2009 23:00:44 Removed workstation:T82363.Workstations.CecilRd.WF
    > 12-Jul-2009 23:00:44 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 19-Jul-2009 23:00:28 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 26-Jul-2009 23:00:19 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 02-Aug-2009 23:00:41 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 09-Aug-2009 23:00:22 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 16-Aug-2009 23:00:22 Removed
    workstation:T85264.Workstations.BuxtonRd.WF
    > 16-Aug-2009 23:00:22 Removed
    workstation:T85266.Workstations.BuxtonRd.WF
    > 16-Aug-2009 23:00:24 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 23-Aug-2009 23:00:20 Removed
    workstation:T85261.Workstations.BuxtonRd.WF
    > 23-Aug-2009 23:00:21 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 30-Aug-2009 23:00:02 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 06-Sep-2009 23:00:19 Removed workstation:T82722.Workstations.CecilRd.WF
    > 06-Sep-2009 23:00:20 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 13-Sep-2009 23:00:13 Removed
    workstation:T85336.Workstations.BilletRd.WF
    > 13-Sep-2009 23:00:15 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 20-Sep-2009 23:00:31 Removed
    workstation:T82715.Workstations.BilletRd.WF
    > 20-Sep-2009 23:00:32 Removed
    workstation:T87490.Workstations.BuxtonRd.WF
    > 20-Sep-2009 23:00:32 Removed
    workstation:T87810.Workstations.BuxtonRd.WF
    > 20-Sep-2009 23:00:33 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 27-Sep-2009 23:00:03 Removed
    workstation:T85179.Workstations.BilletRd.WF
    > 27-Sep-2009 23:00:04 Removed
    workstation:T87494.Workstations.BuxtonRd.WF
    > 27-Sep-2009 23:00:05 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 04-Oct-2009 23:00:22 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 11-Oct-2009 23:00:03 javax.naming.NamingException [Root exception
    > iscom.novell.service.jncp.NDSException: ccode = -637
    > (0xfffffd83)];remaining name 'T87395'
    > 11-Oct-2009 23:00:04 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 18-Oct-2009 23:00:35 Removed
    workstation:T87395.Workstations.BuxtonRd.WF
    > 18-Oct-2009 23:00:36 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 30-Oct-2009 17:30:31 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    > 30-Oct-2009 17:35:39 javax.naming.NameNotFoundException [Rootexception
    > is com.novell.service.jncp.NDSException: ccode = -601(0xfffffda7)]
    >
    > Any ideas.....
    > thanks
    > regards
    >
    > Dennis--
    dchitolie-------------------------------------------------------------------
    -----dchitolie's Profile:
    > http://forums.novell.com/member.php?userid=4304View this thread:
    > http://forums.novell.com/showthread.php?t=391202

  • Throttling policy not working on Exchange 2013 CU6

    Hi,
    We have a test throttling policy to restrict a mailbox to send at most 2 messages
    per minute in our live Exchange 2013 CU6 enviroment. It was associated to a test mailbox. We have separated installed 2 mailboxe and 2 cas server roles in our enviroment. I have checked latest CU-s (7 & 8) but these are
    not fixing any related bugs.
    We tried lots of workaround (see below list) and solutions to fix this but it is still not working with outlook MAPI and OWA client.
    Throttling policy not working
    smtp service restart
    RPC Client Acces service restart
    The policy details:
    Get-ThrottlingPolicy  low_rate_limit |fl *limit*
    MessageRateLimit   : 2
    RecipientRateLimit : 1000
    Get-mailbox [email protected] | fl ThrottlingPolicy
    ThrottlingPolicy           : low_rate_limit
    Do you have any idea what is the problem?
    Thank you in advance.
    br,
    Zoltan

    Hi Zoltan,
    Base on my research, you need to configure the MessageRateLimit parameter on receive connector also.
    The MessageRateLimit parameter specifies the maximum number of messages that can be sent by a single client IP address per minute. The default value for a Receive connector configured in the Transport service on a Mailbox server is
    unlimited. The default value for a Receive connector configured on an Edge server is 600 messages per minute. The valid input range for this parameter is 1 to 2147483647. To remove the message rate limit on a Receive connector, enter a value of
    unlimited.
    https://technet.microsoft.com/en-us/library/bb125140(v=exchg.150).aspx
    Best regards,
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected]
    Niko Cheng
    TechNet Community Support

  • Retention Policy not working for OWA accounts

    I have Exchange 2010 running, with 100% of users using OWA, not Outlook as their mail client.
    I have one use that wants to have messages in all his folders deleted at the end of each day.  Specifically, these folders are under the Inbox, but are subfolders in the Inbox, not the Inbox itself.
    I set up a retention policy tag with the Tag Type "All other Folders in the Mailbox", with age limit for retention for 1 day, and the action to delete and allow recovery.
    Then I applied the Retention policy just to that one users.
    The next morning, all the messages from the day before were still there.  Did I miss something in the setup?
    Does the "1 day" retention delete messages after 24 hours of the message being there, or at the end of each day can I have it delete all the previous messages?
    Does this have something to do with the fact that we are running OWA, not Outlook?  I can right click on the folders and view retention policy...it just says "Use Parent Folder Policy"...nowhere can I find the parent folders policy.
    Any advice would be appreciated.

    Hi,
    For your retention policy not working issue, we can try the following troubleshooting:
    1. Please check whether it has Event ID 9017 and 9018, to make sure the MRM working well.
    2. Please check the Managed Folder Assistant service is working well.
    3. Please use MFCMAPI Tool to check the "PR_MESSAGE_DELIVERY_TIME" and "PR_CREATION_TIME" properties on the items that should be removed.
    If you have any question, please feel free to let me know.
    Thanks,
    Angela 
    Angela Shi
    TechNet Community Support

  • OBIEE 11g - Navigation in Parent Child Hiearchy not working

    Hi All,
    I have a employee parent child hierarchy and I want to show revenue for each employee in the report. I have modeled my revenue as a measure like case 4 shown in the following link
    http://www.rittmanmead.com/2010/11/oracle-bi-ee-11g-parent-child-hierarchies-multiple-modeling-methods/
    So for example this is my report ,
    --David (30)
    ---Sandra (15)
    -----Joe (10)
    Joe'e revenue is 10, Sandra's is 5 (showing her 5 Joe's revenue) and David's is 5 (showing his 5 Sandra's revenue)
    Issue :
    Now what I want is to provide action link on the revenue column so that when user would click on revenue for any employee it would direct them to a detail report showing the bifurcation.
    For ex, I want that when user click on 15 which is Sandra's revenue, he would be redirected to a detailed report for Sandra and similary for Joe and David
    MY ISSUE IS that the navigation is NOT working for sandra and Joe. It is only working for David (who is the ancestor of sandra and Joe). When I click on 15 to see sandra's detail report, it doesn't do anything and in the bottom left corner of the browser status bar below I see an ERROR saying
    (same for Joe but David work's fine)
    Message: 'getLevelInfo(...)' is null or not an object
    Line: 1
    Char: 11142
    Code: 0
    URI: http://localhost:7001/analytics/res/b_mozilla/answers/selectionsmodel.js
    Why is that happening? Is that because I have modeled the revenue as an measure and not attribute. Is navigation not possible in this case?
    Anybody has any solution or workaround for this, it will be highly appreciated.
    Thanks,
    Ronny

    Ok, so let me explain this in detail and give the structure of my tables and the data,
    There are three tables.
    1.Parent Child relationship table - pctable
    2.Closure table which OBIEE creates through a script - reltable
    3.Fact table which contains the revenue - facttable
    This is the data
    pctable
    personid | managerid
    David | NULL
    Sandra| David
    Joe|Sandra
    reltable
    memberkey | ancestorkey |distance |is_leaf
    David|NULL|NULL|0
    David|David|0|0
    Sandra|Sandra|0|0
    Joe|Joe|0|0
    Sandra|David|1|0
    Joe|Sandra|1|1
    Joe|David|2|1
    facttable
    personid|revenue
    David|5
    Sandra|5
    Joe|10
    and my joins conditions are, I join pctable to reltable and then reltable is joined to facttable like this.
    pctable.personid = reltable.ancestorkey
    reltable.memberkey = facttable.personid
    and then in the report, when I pull up the pchierarchy build from pctable and revenue , I get as below and like I said, when I click on Sandra to see the revenue she contributes, I am not able to navigate. Can you let me know what modifications needs to be done?
    ---David(20)
    ----Sandra(15)
    ------Joe(10)

  • GPP Delete policy not working on Windows Server 2008 R2 RDS when deleting shared printers with status access denied.

    Hi!
    I Have one AD Security group for each shared printer, I have one GPP that map the printer if the user is in the security group that belong to the printer. And one GPP to delete the printer if the user is NOT member of the security group. The security group
    is also applied in “Security” tab on the printsrv with PRINT rights  and “everyone” is removed. This works 100 % on Windows 7 clients and Windows 2003 Terminal Servers. But on Windows 2008 R2 RDS this dont work.The Delete Policy will not delete the shared
    printer. No warning in any logs, and the gpresult shows that the gpo setting applyed sucessfully. The only way I can make the Delete policy work is if i give the user print rights on the printer on the printsrv. Looks like for the policy to work on 2008
    R2 the user must have print rights on the printer object on the printserver. The GPP Delete Policy will not delete printers that have status : access denied. Anyone else had this problem?

    Hi,
    Based on your description, it seems that we need to give users appropriate permissions, for the error
    Access is denied is more or less related to permissions.
    However, we can avoid deploying the GPP printer delete policy. As far as I know, we can use Item-Lvel Targeting of GPP to push the shared printers
    to the targeted users or groups.
    Regarding ILT, the following articles can be referred to for more information.
    Preference Item-Level Targeting
    http://technet.microsoft.com/en-us/library/cc733022.aspx
    Security Group Targeting
    http://technet.microsoft.com/en-us/library/cc772471.aspx
    Best regards,
    Frank Shen

  • Group Policy not work in some client machine.

    Hello All,
    Existing environment is AD 2012. gpupdate /force command does not working in some client machine. And it's occur randomly. Error shown about 15-20% of client machine. Please suggest. Hopefully this time get reply from community.
    The Error:
    User policy could not be updated successfully. The following errors were encount
    ered:
    The processing of Group Policy failed. Windows attempted to read the file \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
    984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
    tings may not be applied until this event is resolved. This issue may be transie
    nt and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.
    b) File Replication Service Latency (a file created on another domain controller
     has not replicated to the current domain controller).
    c) The Distributed File System (DFS) client has been disabled.
    Computer policy could not be updated successfully. The following errors were enc
    ountered:
    The processing of Group Policy failed. Windows attempted to read the file \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
    984F9}\gpt.ini from a domain controller and was not successful. Group Policy set
    tings may not be applied until this event is resolved. This issue may be transie
    nt and could be caused by one or more of the following:
    a) Name Resolution/Network Connectivity to the current domain controller.

    Thanks for your reply. basically this error occurs with in same location as well as branch location. i have check event log in AD but not got any specific error. AD health status is ok. AD to AD synchronization also working well. All the client machine running
    on windows 7 64 bit and few of them are windows 8. 
    Please suggest. if you need any event log for analysis i can send you.
    Thanks
    I recommend you examine the event logs upon an affected client machine. Specifically, look for the surrounding events on that machine (both System, and Application logs), for the hours previous and the hour after.
    The time period may vary according to your environment (e.g. what is expected/normal for your environment, your configured GP refresh cycle-time).
    e.g., are there network drops, or power drops, or system crashes, restarts at the similar time.
    if it's a laptop, is it wireless? Was there a transition from wireless to wired operation?
    Is there VPN in use?
    If you are able to compare with another machine (I would encourage that), to understand what "normal" looks like in the logs, so that you have some kind of baseline data for comparison.
    Other checks, maybe confirm that the machines are updating as required (have the relevant WindowsUpdates etc), and consider if some security/protection/firewall software might be interfering with normal Windows operations.
    Also the potential for malware or virus, which can disturb many basic services (ensure a scan is performed and returns clean).
    If you have the opportunity for an affected user to contact you urgently when the symptom occurs, check that the gpt.ini file is accessible from their PC.
    e.g.: \\example.net\sysvol\example.net\Policies\{31B2F340-016D-11D2-945F-00C04FB
    984F9}\gpt.ini
    This file is hosted within the replicated SYSVOL share on your DC's, so check that it is accessible.
    You might also validate the particular GPO this refers to, and check each of your DC's holds the correct copy of the files for that GPO GUID.
    If you open that GPO, and perform a minor change to it (e.g. add a comment), then click Apply, OK, this should cause the GPO contents to replicate an updated version (be cautious, depending upon the nature of that GPO !!!)
    Don
    (Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
    This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

  • Windows 2008 Group Policy not working in Windows 8.1

    Hi ,
    We found that the GPO settings created in Windows 2008 is not working in a Windows 8.1 machine.
    One example is the proxy settings.
    We confirmed from gpresult that the GPO is in the list but checking the actual proxy settings, it is not applied.
    Regards,
    Jhun

    Hi,
    How did we configure the proxy settings, using Internet Explorer Maintenance? If it is this case, just as Martin suggested, we can’t use IEM to manage
    IE 10 and IE 11.  However, we can configure the proxy setting via Group Policy Preferences (GPP).
    Regarding this point, the following blog can be referred to for more information.
    Configuring Internet Explorer 10′s
    Proxy Via Group Policy
    http://johnfail.wordpress.com/2013/06/15/configuring-internet-explorer-10s-proxy-via-group-policy/
    In addition, when we use this GPP extension, pay attention to GPP F5-F8 keys.
    Regarding this point, the following blog can be referred to for more information.
    Group Policy Preferences F5 F6 F7 F8 “documentation”
    http://msitpros.com/?p=1014
    Please Note: Since the above two websites are not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy
    of this information.
    In addition, regarding the deprecation of IEM, the following article can be referred to for more information.
    Appendix B: Replacements for Internet Explorer Maintenance
    http://technet.microsoft.com/en-us/library/jj890998.aspx
    Best regards,
    Frank Shen

  • OBI 11g Enterprise Manager (EM Website) does not work with IE8 (v8.0.6)

    I am unable to login to the 11g EM website on Windows x64 2003 server. I get the below error:
    Webpage error details
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.2; WOW64; Trident/4.0)
    Timestamp: Wed, 6 Oct 2010 10:41:18 UTC
    Message: Object doesn't support this property or method
    Line: 4354
    Char: 1
    Code: 0
    URI: http://YZU-1:7001/em/afr/partition/ie/default/opt/boot-11.1.1.3.0-0084.js
    Any help is appreciated.
    Thanks
    B

    Hi,
    OBIEE 11g does not work with IE8.
    Check this......What's wrong in OBIEE 11g
    Regards,
    Srikanth

  • [HELP] [BPEL 11g] Customized BPEL worklist app could not work on JBoss

    Dear all,
    We are developing the customized Human Worklist app based on BPEL HW API 11g.
    The application (some jsp pages) works fine in JDeveloper 11g. However, after deploy to JBoss, it always prompt with "NoClassDefFoundError" exception, although we have already add following 7 jar files into Classpath:
    ${jdeveloper.home}\Middleware\wlserver_10.3\server\lib\weblogic.jar
    ${jdeveloper.home}\Middleware\jdeveloper\modules\oracle.jrf_11.1.1\jrf.jar
    ${jdeveloper.home}\Middleware\jdeveloper\modules\oracle.webservices_11.1.1\wsclient.jar
    ${bea.home}/AS11gR1SOA/soa/modules/oracle.soa.fabric_11.1.1/bpm-infra.jar
    ${bea.home}/AS11gR1SOA/soa/modules/oracle.soa.workflow_11.1.1/bpm-services.jar
    xml.jar
    xmlparserv2.jar
    Then we manually copy many other jars (nearly 100) under Weblogic server, but it still prompt lacking of some jar file with "NoClassDefFoundError" exception.
    So, does BPEL 11g support deploy HW app outside weblogic, like JBoss? If so, what we need to set at JBoss side to run our app?
    Thanks a lot.

    Not sure it is available yet as I have not seen any doc for 11g.
    here is the 10g instructions which may provide some pointers.
    http://download-east.oracle.com/docs/cd/B31017_01/web.1013/b25947/deployment_topics012.htm
    cheers
    James

  • Click to URL on RSS text not working on node variable.

    Hi.
    I have a RSS feed parsed into one text box and am using imported CSS to format the text in one Textfield that was created with as3.
    Problem is my roll over and click handler functions for making each text variable a link to the XML URL link will not work unless I point the function at the entire text field. I just want the individual text variables made from the RSS Title nodes, to be set to react to my handleFHTClicked, rollOutHandler and rollOverHandler functions. The movie runs Ok parsing the nodes and picking up the CSS, but I get this error in the output window when it reaches the aformentioned functions...
    TypeError: Error #1006: value is not a function.
         at AS3_CSS_external_file2_fla::MainTimeline/onLoaded()
         at flash.events::EventDispatcher/dispatchEventFunction()
         at flash.events::EventDispatcher/dispatchEvent()
         at flash.net::URLLoader/onComplete()
    Here is the code....
    var cssLoader:URLLoader;
    //load the fake preloader
    var preLoader = new loading_mc();
    preLoader.x = 170;
    preLoader.y = 50;
    preLoader.scaleX = .7;
    preLoader.scaleY = .7;
    addChild(preLoader);
    //This code loads and Parses the RSS feed
    var loader:URLLoader = new URLLoader();
    loader.addEventListener(Event.COMPLETE, onLoaded);
    var dotExtension:String = "...";
    var maxLength:Number = 0;
    var xml:XML;
    function onLoaded(e:Event):void {
         removeChild(preLoader);
         xml = new XML(e.target.data);
         var firstheadtext = xml.channel.item[0].title;
         var firstbodytext = xml.channel.item[0].description;
         var secondheadtext = xml.channel.item[1].title;
         trace(firstheadtext);
         trace(firstbodytext);
         trace(secondheadtext);
         //dtfa.htmlText = "<p align='left'>"+firstheadtext+"</p>"+"</br>"+ "<p align='left'>"+firstbodytext+"</p>";
         var myText:String = "<p>"+firstheadtext+"</p>"
         +"<span class='myTextStyle1'>"+firstbodytext+"</span><br/>"
         +"<br/>"
         +"______________________________________________________________________________<br/>"
         +"<br/>"
         +"<span class='myTextStyle2'>"+secondheadtext+"</span><br/>";
         function cssLoadComplete(event:Event):void {
              var sheet:StyleSheet = new StyleSheet();
              sheet.parseCSS(cssLoader.data);
              myTextField.styleSheet=sheet;
              myTextField.htmlText=myText;
         var myTextField:TextField = new TextField();
         myTextField.width = 500;
         myTextField.height = 240;
         myTextField.multiline = true;
         myTextField.wordWrap = true;
         addChild(myTextField);
         var req:URLRequest = new URLRequest("myStyleSheet.css");
         cssLoader = new URLLoader();
         cssLoader.addEventListener(Event.COMPLETE, cssLoadComplete);
         cssLoader.load(req);
         //This code handels the click through
         firstheadtext.addEventListener(MouseEvent.CLICK, handleFHTClicked);
         function handleFHTClicked(e:MouseEvent):void {
              navigateToURL(new URLRequest(xml.channel.item[0].link));
           firstheadtext.addEventListener(MouseEvent.MOUSE_OVER , rollOverHandler);
           firstheadtext.addEventListener(MouseEvent.MOUSE_OUT, rollOutHandler);
           import flash.text.TextFormat;
              // create the text format objects
              var overTextFormat:TextFormat = new TextFormat();
              overTextFormat.underline = true;
              var defaultTextFormat:TextFormat = new TextFormat();
              defaultTextFormat.underline = false;
         // add the event handlers
              function rollOverHandler(e:MouseEvent):void
               TextField(e.target).setTextFormat(overTextFormat);
              function rollOutHandler(e:MouseEvent):void
              TextField(e.target).setTextFormat(defaultTextFormat);
    loader.load(new URLRequest("http://www.calgaryheraldonline.com/rss_echo.php"));
    Any assistance would be appreciated.
    Cheers
    Forrest

    If I un-nest the functions from the RSS loader, I get many more errors.
    Here is my un-nested code;
    import flash.text.TextFormat;
    var cssLoader:URLLoader;
    //load the fake preloader
    var preLoader = new loading_mc();
    preLoader.x = 170;
    preLoader.y = 50;
    preLoader.scaleX = .7;
    preLoader.scaleY = .7;
    addChild(preLoader);
    //This code loads and Parses the RSS feed
    var loader:URLLoader = new URLLoader();
    loader.addEventListener(Event.COMPLETE, onLoaded);
    var xml:XML;
    function onLoaded(e:Event):void {
         removeChild(preLoader);
         xml = new XML(e.target.data);
         var firstheadtext = xml.channel.item[0].title;
         var firstbodytext = xml.channel.item[0].description;
         var secondheadtext = xml.channel.item[1].title;
         trace(firstheadtext);
         trace(firstbodytext);
         trace(secondheadtext);
         //dtfa.htmlText = "<p align='left'>"+firstheadtext+"</p>"+"</br>"+ "<p align='left'>"+firstbodytext+"</p>";
         var myText:String = "<p>"+firstheadtext+"</p>"
         +"<span class='myTextStyle1'>"+firstbodytext+"</span><br/>"
         +"<br/>"
         +"______________________________________________________________________________<br/>"
         +"<br/>"
         +"<span class='myTextStyle2'>"+secondheadtext+"</span><br/>";
    function handleFHTClicked(e:MouseEvent):void {
         navigateToURL(new URLRequest(xml.channel.item[0].link));
    firstheadtext.addEventListener(MouseEvent.MOUSE_OVER , rollOverHandler);
    firstheadtext.addEventListener(MouseEvent.MOUSE_OUT, rollOutHandler);
    // create the text format objects
    var overTextFormat:TextFormat = new TextFormat();
    overTextFormat.underline = true;
    var defaultTextFormat:TextFormat = new TextFormat();
    defaultTextFormat.underline = false;
    //This code handels the click through
    firstheadtext.addEventListener(MouseEvent.CLICK, handleFHTClicked);
    // add the event handlers
    // you only need these two functions
    function rollOverHandler(e:MouseEvent):void {
         TextField(e.target).setTextFormat(overTextFormat);
    function rollOutHandler(e:MouseEvent):void {
         TextField(e.target).setTextFormat(defaultTextFormat);
    function cssLoadComplete(event:Event):void {
         var sheet:StyleSheet = new StyleSheet();
         sheet.parseCSS(cssLoader.data);
         myTextField.styleSheet=sheet;
         myTextField.htmlText=myText;
    var myTextField:TextField = new TextField();
    myTextField.width = 500;
    myTextField.height = 240;
    myTextField.multiline = true;
    myTextField.wordWrap = true;
    addChild(myTextField);
    var req:URLRequest = new URLRequest("myStyleSheet.css");
    cssLoader = new URLLoader();
    cssLoader.addEventListener(Event.COMPLETE, cssLoadComplete);
    cssLoader.load(req);
    loader.load(new URLRequest("http://www.calgaryheraldonline.com/rss_echo.php"));
    And now the errors are telling me it cannot access the undefined property of myText and firstheadtext.
    I just don't understand what needs to be inside the onLoaded function and what has to be outside.

  • Software restriction policy not working correctly

    Ladies and Gents,
    we run a windows server 2008r2 environment.
    we have a software restriction policy in place for quite some time now and it's been working fine until about a week ago. here's how we have it setup:
    Enforce = All Software files except libraries (such as DLLs). + All Users.
    Security Level = Disallowed
    Designated File Types= 
    Defaults
    Additional Rules:
    C:\* = Disallow.
    The rest of the rules are paths for files and folders that we have set as Unrestricted.
    Since about a week ago, our security team discovered that they can open any allowed file type such as text file, and then go to file and click on open. In the open dialog box they would type
    in C:\Windows\System32\drivers\etc\hosts and then click and open it would actually open the hosts file.
    I even tried adding a path rule for C:\Windows\System32\drivers\etc\hosts with Disallow, and it’s still allows opening this file for non admins.
    Any ideas as to why is software restriction policy not blocking access to any files or folders that are not explicitly allowed via a path rule?
    Any help or comments are much appreciated.
    Mohsen Almassud

    You are moving in a wrong way. Software Restriction Policies are designed to prevent users to launch executables/applications. It cannot prevent you from opening TXT file, because it is not an executable. In order to prevent TXT files, you have to block
    notepad.exe executable. It is very different technology.
    You must move to a permission configuration. If there are folders users should not access, remove them from respective folder's ACL. You must be careful with restricting user access to system folders (%systemroot%), because you may block critical applications
    and eventually no one will be able to log on to server, because logon-dependant paths are not accessible due to restrictions in the ACL.
    My weblog: http://en-us.sysadmins.lv
    PowerShell PKI Module: http://pspki.codeplex.com
    Check out new:
    PowerShell FCIV tool.

  • ISE authorization Policy not working

    Hi ,
    I have configured the ISE as per the belwo link 
    https://supportforums.cisco.com/document/110031/central-web-authentication-cwa-guests-ise
    but my authorization policy is not working as when user get connected to guest wlan it get authneticated but when it look for authorization
    it going to default policy it should hit on above policy created screen shot as below

    What version of ISE + patch are you running?. Could you please send an screenshot of AUTH policies including the default --- > USE part?. Are you using customized portal for the first authentication process?
    CWA is pretty straightforward. Only issues I faced was multiple VM (ISE Personas) running on one single server was not replicating properly the AUTHZ policies so I added the PSN persona into the PAN Node and everything worked fine immediately. In addition to that, I realized that I needed at least ONE ENTRY into the ISE PAN Internal Endpoints DB so I could hit the AUTH Policy for MAB & user not found condition which sent me to the AUTHZ = User Unknown + Redirect. Once I authenticated the user using the Default Portal that meant I hit the GUEST FLOW policy. If you are using customized portals for the first authentication process, check: web portal mgmt. --- > Guest --- > MultiPortal Configurations --- > Customized Portal -- > Authentication part.

  • URL redirect over is not working..

    Redirecting URL appended with querystring parameters for community is not working on SSO? We have SSO set up using Intergrated Windows Authetication.
    When I launch new browser and request portal over SSO , works. Then I go to a community and copy the URL from browser. When I open new window and paste the URL extracting UserID from it, it gives me login screen and sso won't work.
    If I do the same action twice in same window(for which I got the login screen firsttime), it works second time. How can I resolve this? Is anybody had this problem before?
    Thanks!!
    Sanjay

    CaptureDeviceInfo di=null;
                   Vector deviceList = CaptureDeviceManager.getDeviceList(new VideoFormat(VideoFormat.RGB));
                   if (deviceList.size() > 0)
                             di = (CaptureDeviceInfo)deviceList.elementAt(0);
                             if(di==null) System.exit(-1);
                                  System.out.println("devicelist2");
                        else
                             System.out.println("exit");
                             System.exit(-1);
                   MediaLocator mediaURL = di.getLocator();
    create medialocator by using datasouce object's mehtod getLocator();
    anoop

  • Search Google from the URL bar in safari not working, Help...

    Hi to everyone,
    im stuck here trying to find out why i can't search more in the url bar in safari. Just happened few weeks ago and i most use bing or yahoo.
    I did try to delete cache and plist etc, everything i read in the net but still not working. I have mac pro 2011, and I'm not sure but i think this happened after i open a second account for my girlfriend in my mac, so she can have her own account. I check and in the other account happen the same...some ideas?

    Please read this whole message before doing anything.
    This procedure is a diagnostic test. It’s unlikely to solve your problem. Don’t be disappointed when you find that nothing has changed after you complete it.
    The purpose of the test is to determine whether the problem is caused by third-party software that loads automatically at startup or login, by a peripheral device, by a font conflict, or by corruption of the file system or of certain system caches.
    Disconnect all wired peripherals except those needed for the test, and remove all aftermarket expansion cards, if applicable. Start up in safe mode and log in to the account with the problem. You must hold down the shift key twice: once when you turn on the computer, and again when you log in.
    Note: If FileVault is enabled, or if a firmware password is set, or if the startup volume is a Fusion Drive or a software RAID, you can’t do this. Ask for further instructions.
    Safe mode is much slower to start up and run than normal, with limited graphics performance, and some things won’t work at all, including sound output and Wi-Fi on certain models. The next normal startup may also be somewhat slow.
    The login screen appears even if you usually login automatically. You must know your login password in order to log in. If you’ve forgotten the password, you will need to reset it before you begin.
    Test while in safe mode. Same problem?
    After testing, restart as usual (not in safe mode) and verify that you still have the problem. Post the results of the test.

Maybe you are looking for

  • Error in creating Java Users during Solution Manager installation

    Hi gurus, First time trying to install SAP. Red Hat Linux 4 Oracle jdk 1.4.2_11 While installing the Solution Manager, it errored when it was creating Java Users, SAPJSF, J2EE_ADMIN and J2EE_GUEST. The error description read "jco$exception: rfc_error

  • Buttons not working on published SWF Captivate 2 project

    I have published a daisychained Captivate 2 project in three pieces, all published as SWF. The first piece plays fine, but a user has to push a button to choose to either go to the second piece OR the third piece. The button was designed so that when

  • Should I use a shared library?

    Hi, This is the setup. I am working in two different applications, one to be compiled for desktop use (AIR) and one to be compiled for the web. They are part of the same project and use the same visual components, but they are completely different ap

  • Can I read the length of audio file?

    Any java technology is welcome.

  • Backup and restoration of weblogic server (alongwith its domain)

    Hello Everyone, I want to change node 1 hardware due to some technical issues. Currently im using weblogic 10.3.6 with Oracle forms and Reports 11gR2 (only forms reports on HA) on Windows Server 2008 R2 After changing hardware im planning to use the