OD binding and client Imaging??

Have a question about binding a client station to our OD and using that client
as the master image for our labs. Had the concern that each client that is bound to the OD might need to generate a unique GUID to identify it to the directory service.
My concern was that if a station is unbound from the OD would that unbind
all clients from the OD that were cloned with that image.
The reason i ask is because i know this is an issue with Active Directory integration and each station has to be bound to AD post imaging.
Thanks in Advance!

I'm not saying this is bad advice, just that I've never heard this suggestion. If you use an image to make, say, 100 clients, that's a lot of binding you're doing individually. I've always bound my master image before using netboot to distribute it, so I'm wondering if I've missed something.
Jeff

Similar Messages

  • "Require authenticated binding between directory and clients" missing

    A new install of 10.6, upgraded to 10.6.4 Server does not show the option "Require authenticated binding between directory and clients" under the Open Directory - Settings - Policies - Binding tab. I do see the "Enable authenticated directory binding" option. Also, the terminal command sudo slapconfig -setmacosxodpolicy -binding required does work as a workaround.
    This option is not present in both Server Admin on the server itself and one client machines I'm using to manage the server.
    Is there a way to get the graphical button to become visible?
    Thank you in advance.

    This Option is no longer available in the GUI.
    See Apple Support Article HT4068.

  • Rc.local script to bind and add ldap server

    Greetings All,
    For the past few years, I've used the script below to bind and add authentication servers to my client machines. The process is simple enough, copy the rc.local script (ref'd below) to /etc/ as root and reboot the client. The problem now, is I don't know if this will work in 10.6. As I read this script, I realized there have been enough changes in location of files and file names between 10.5 and 10.6 that this script isn't going to work.
    My question to you guys is this: Is anyone else taking care of their binding/auth services in a similar manner? If so, would you mind sharing the script you're using?
    Thanks,
    -dave
    Here's mine:
    #!/bin/sh
    # WARNING -- REMEMBER TO UNCOMMENT THE SELF-DELETING LINE!
    #Site and/or District-specific Variables
    #Local Admin in Image
    LOCADMIN="tech" # Local admin user in your image
    LOCPASSWD="techpwd" # Local admin password in your image
    #Open Directory
    ODSITESERVER="odr1.mydomain.edu" # FQDN of the Open Directory Server
    ODADMIN="diradmin" # Directory Admin for Open Directory
    ODPASSWD="diradminpwd" #Password for OD Directory Admin
    ### DO NOT EDIT BELOW THIS LINE!
    OSMAJORVER=`sw_vers | grep ProductVersion | awk '{print $2}' | cut -c 1-4`
    ENETADDRESS=`ifconfig en0 | grep ether | awk '{print $2}'`
    #Give the network time to come online
    logger "Sleeping 30 seconds"
    sleep 30
    #Set Date and Time
    case $OSMAJORVER in
    10.3) date > /Library/Logs/binder.log 2>&1
    /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/sys temsetup-panther -setusingnetworktime off >> /Library/Logs/binder.log 2>&1
    /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/sys temsetup-panther -setusingnetworktime on >> /Library/Logs/binder.log 2>&1
    date >> /Library/Logs/binder.log 2>&1 ;;
    10.4) date > /Library/Logs/binder.log 2>&1
    /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/sys temsetup-tiger -setusingnetworktime off >> /Library/Logs/binder.log 2>&1
    /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Support/sys temsetup-tiger -setusingnetworktime on >> /Library/Logs/binder.log 2>&1
    date >> /Library/Logs/binder.log 2>&1 ;;
    10.5) date > /Library/Logs/binder.log 2>&1
    /usr/sbin/systemsetup -setusingnetworktime off >> /Library/Logs/binder.log 2>&1
    /usr/sbin/systemsetup -setusingnetworktime on >> /Library/Logs/binder.log 2>&1
    date >> /Library/Logs/binder.log 2>&1 ;;
    esac
    #Set Bonjour and Computer Names
    # logger "Setting Bonjour and Computer Names"
    # SERIALNUMBER=`ioreg -l |grep IOPlatformSerialNumber | awk '{print $4}' | cut -d \" -f 2`
    # SECONDOCTET=`ifconfig -a | grep inet | grep -v inet6 | awk '{print $2}' | grep ^10\. | head -n 1 | awk 'BEGIN {FS="."}; { printf "%03d", $2 }'`
    # COMPUTERID="A""$SECONDOCTET""$SERIALNUMBER"
    # logger "Computer name is $COMPUTERID"
    # scutil --set LocalHostName "$COMPUTERID"
    # scutil --set ComputerName "$COMPUTERID"
    # sleep 3
    #Set the Open Directory Server we are binding to based on the second octet of the IP address received from the DHCP lease
    # case $SECONDOCTET in
    # 002|005|047|110|112|115|119|121|123|128|133|153|241|247|250|251|253) ODSITESERVER="a941wgm.austinisd.org" ; RING="A1N";;
    # 009|045|046|052|053|107|109|117|131|132|138|144|151|154|155|179) ODSITESERVER="a117wgm.austinisd.org" ; RING="B1N";;
    # 004|006|010|048|055|056|102|106|118|129|141|149|152|157|159|161|163|164|165|178 |189|244|249) ODSITESERVER="a006wgm.austinisd.org" ; RING="C1N";;
    # 003|012|015|044|051|105|108|111|116|122|124|125|126|127|139|142|145|150|245) ODSITESERVER="a044wgm.austinisd.org" ; RING="D1N";;
    # 007|043|049|058|103|104|114|140|146|160|162|168|171|174|175|176|185|190|246|101 ) ODSITESERVER="a007wgm.austinisd.org" ; RING="B1S";;
    # 101) ODSITESERVER="a007wgm.austinisd.org" ; RING="B2S";;
    # 008|013|017|054|059|061|120|130|136|147|156|166|172|173|182|184) ODSITESERVER="a008wgm.austinisd.org" ; RING="C1S";;
    # 057|060|113|143|148|158|170|180|181|183|248) ODSITESERVER="a008wgm.austinisd.org" ; RING="C2S";;
    # *) ODSITESERVER="a000wgm.austinisd.org" ; RING="A0N";;
    # esac
    #Remove Existing Directory Services Config
    logger "Removing existing DS Config"
    rm -R /Library/Preferences/DirectoryService/ActiveDirectory*
    rm -R /Library/Preferences/DirectoryService/DSLDAPv3PlugInConfig*
    rm -R /Library/Preferences/DirectoryService/SearchNode*
    rm -R /Library/Preferences/DirectoryService/ContactsNode*
    rm -R /Library/Preferences/edu.mit.*
    rm -R /etc/krb5.keytab
    #Enable and disable appropriate plugins
    case $OSMAJORVER in
    10.3) defaults write /Library/Preferences/DirectoryService/DirectoryService "Active Directory" "Inactive" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "LDAPv3" "Active" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "AppleTalk" "Inactive" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "SLP" "Inactive" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "BSD" "Inactive" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "SMB" "Inactive" >> /Library/Logs/binder.log 2>&1
    plutil -convert xml1 /Library/Preferences/DirectoryService/DirectoryService.plist >> /Library/Logs/binder.log 2>&1 ;;
    10.4) defaults write /Library/Preferences/DirectoryService/DirectoryService "Active Directory" "Inactive" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "LDAPv3" "Active" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "AppleTalk" "Inactive" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "SLP" "Inactive" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "BSD" "Inactive" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "SMB" "Inactive" >> /Library/Logs/binder.log 2>&1
    plutil -convert xml1 /Library/Preferences/DirectoryService/DirectoryService.plist >> /Library/Logs/binder.log 2>&1 ;;
    10.5) defaults write /Library/Preferences/DirectoryService/DirectoryService "Active Directory" "Inactive" >> /Library/Logs/binder.log 2>&1
    defaults write /Library/Preferences/DirectoryService/DirectoryService "LDAPv3" "Active" >> /Library/Logs/binder.log 2>&1 ;;
    esac
    #Copy in updated ldap.conf file for Leopard machines, which disables the verification of SSL certs used for LDAP Authentication
    case $OSMAJORVER in
    10.5) cp /etc/ldap.conf-leopard /etc/openldap/ldap.conf ;;
    esac
    #Kill Directory Services and respawn to return to DS Defaults
    logger "Respawning DS"
    killall -9 DirectoryService
    #Running "id" triggers a DS Respawn
    id "$LOCADMIN" >> /Library/Logs/binder.log 2>&1
    sleep 3
    #Fix SearchNode plist
    case $OSMAJORVER in
    10.3) logger "Disabling LDAP via DHCP"
    defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "DHCP LDAP" -dict "/Sets/0" -bool FALSE >> /Library/Logs/binder.log 2>&1
    plutil -convert xml1 /Library/Preferences/DirectoryService/SearchNodeConfig.plist >> /Library/Logs/binder.log 2>&1
    killall -9 DirectoryService >> /Library/Logs/binder.log 2>&1
    sleep 3 ;;
    10.4) logger "Disabling LDAP via DHCP"
    defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "DHCP LDAP" -dict "/Sets/0" -bool FALSE >> /Library/Logs/binder.log 2>&1
    plutil -convert xml1 /Library/Preferences/DirectoryService/SearchNodeConfig.plist >> /Library/Logs/binder.log 2>&1
    killall -9 DirectoryService >> /Library/Logs/binder.log 2>&1
    sleep 3 ;;
    esac
    #Configure LDAPv3 Plugin -- fix with site-specific data
    logger "Configuring LDAPv3 Plugin"
    case $OSMAJORVER in
    10.4) dsconfigldap -v -l "$LOCADMIN" -q "$LOCPASSWD" -a "$ODSITESERVER" -n "Open Directory" >> /Library/Logs/binder.log 2>&1 ;;
    10.5) dsconfigldap -v -l "$LOCADMIN" -q "$LOCPASSWD" -a "$ODSITESERVER" -n "Open Directory" >> /Library/Logs/binder.log 2>&1 ;;
    esac
    sleep 3
    #Make sure we init DS and confirm connectivity to each LDAP directory
    logger "Checking OD Node Connectivity"
    date >> /Library/Logs/binder.log
    echo "Checking OD Node Connectivity" >> /Library/Logs/binder.log
    dscl localhost -list /LDAPv3/$ODSITESERVER/Groups >> /Library/Logs/binder.log 2>&1
    #Configure Search Path
    logger "Configuring Search Nodes"
    date >> /Library/Logs/binder.log
    echo "Configuring Search Nodes" >> /Library/Logs/binder.log
    dscl localhost -read /Search >> /Library/Logs/binder.log 2>&1
    case $OSMAJORVER in
    10.3) defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "Search Policy" -int 3
    defaults write /Library/Preferences/DirectoryService/SearchNodeConfig "Search Node Custom Path Array" -array "/LDAPv3/$ODSITESERVER"
    killall -9 DirectoryService ;;
    10.4) dscl /Search -append / CSPSearchPath "/LDAPv3/$ODSITESERVER" >> /Library/Logs/binder.log 2>&1
    dscl /Search -create / SearchPolicy CSPSearchPath >> /Library/Logs/binder.log 2>&1 ;;
    10.5) dscl /Search -append / CSPSearchPath "/LDAPv3/$ODSITESERVER" >> /Library/Logs/binder.log 2>&1
    dscl /Search -create / SearchPolicy CSPSearchPath >> /Library/Logs/binder.log 2>&1 ;;
    esac
    date >> /Library/Logs/binder.log
    echo "Confirming Search Nodes" >> /Library/Logs/binder.log
    dscl localhost -read /Search >> /Library/Logs/binder.log 2>&1
    #Remove any stale computer records from Open Directory
    logger "Removing stale computer records from OD"
    dscl /LDAPv3/"$ODSITESERVER" -search Computers ENetAddress "$ENETADDRESS" | awk 'BEGIN {FS="\t\t"}; { print $1 }' | while read COMPNAME
    do
    dscl -u "$ODADMIN" -P "$ODPASSWD" /LDAPv3/"$ODSITESERVER" -delete Computers/"$COMPNAME" >> /Library/Logs/binder.log 2>&1
    done
    #Add computer record to Open Directory
    logger "Adding new Computer Record to OD"
    dscl -u "$ODADMIN" -P "$ODPASSWD" /LDAPv3/"$ODSITESERVER" -create Computers/`scutil --get LocalHostName` ENetAddress "$ENETADDRESS" >> /Library/Logs/binder.log 2>&1
    #Add to designated computer list - this is ONLY for 10.4 server. This will need to be replaced for 10.5 server.
    COMPUTERGROUP="Unprovisioned" # Computer List
    logger "Adding to Computer List: $COMPUTERLIST"
    dscl -u "$ODADMIN" -P "$ODPASSWD" /LDAPv3/"$ODSITESERVER" -create Computers/"$COMPUTERID" ENetAddress "$ENETADDRESS"
    dscl -u "$ODADMIN" -P "$ODPASSWD" /LDAPv3/"$ODSITESERVER" -append ComputerLists/"$COMPUTERGROUP" Computers "$COMPUTERID"
    #Refresh the MCX Cache
    logger "Refeshing the MCX Cache"
    case $OSMAJORVER in
    10.3) /System/Library/LoginPlugins/MCX.loginPlugin/Contents/MacOS/MCXCacher -f >> /Library/Logs/binder.log 2>&1
    /System/Library/LoginPlugins/MCX.loginPlugin/Contents/MacOS/MCXCacher >> /Library/Logs/binder.log 2>&1 ;;
    10.4) /System/Library/CoreServices/mcxd.app/Contents/Resources/MCXCacher -f >> /Library/Logs/binder.log 2>&1
    /System/Library/CoreServices/mcxd.app/Contents/Resources/MCXCacher >> /Library/Logs/binder.log 2>&1 ;;
    esac
    #Disable automatic login on the client
    defaults write /Library/Preferences/.GlobalPreferences com.apple.userspref.DisableAutoLogin -bool TRUE
    #Enable login hooks on the client
    case $OSMAJORVER in
    10.4|10.5) defaults write /var/root/Library/Preferences/com.apple.loginwindow EnableMCXLoginScripts -bool true
    defaults write /var/root/Library/Preferences/com.apple.loginwindow MCXScriptTrust Anonymous ;;
    esac
    #Enable Directory Services Status by default on loginwindow
    # case $OSMAJORVER in
    # 10.4|10.5) defaults write /Library/Preferences/com.apple.loginwindow AdminHostInfo DSStatus ;;
    #esac
    #Modify the binder log so that only admin viewers may access the file
    chmod u=rw,go= /Library/Logs/binder.log
    sleep 5
    #killall loginwindow
    sleep 5
    #Comment the lines below, until shutdown if you do not want the script to replace itself with a 30 second delay on startup to ensure the client receives a DHCP lease before loginwindow appears
    case $OSMAJORVER in
    10.3|10.4) echo sleep 30 > /etc/rc.local ;;
    *) srm /etc/rc.local ;;
    esac
    shutdown -r now
    #Exit
    exit 0

    The first thing I would verify is if you can connect and traverse your Active Directory/Domain Controller using Softerra's free ldap browser.
    1. Softerra ldap browser link
    http://download.softerra.com/files/ldapbrowser26.msi
    Put in the IP/hostname of the domain controller, use the same BASE DN, and user credentials that you used on the IronPort appliance.
    I would highly recommend that you create a separate account for the IronPort. (i.e. ironportldap). Do this so that you don't have to worry about accidentially resetting the password and then forgetting to update the IronPort appliance.
    2. Once you've verified that you can connect and see your tree, use the same settings from Softerra ldap browser and put them in the IronPort ldap interface.
    Try this for your Accept query string
    (|(mail={a})(proxyAddresses=smtp:{a}))
    3. If it still fails, enable the ldap debug log if you haven't already and paste in the error.
    We are trying to add an LDAP Server Profile but everytime we try to test the Accept Query we get an
    "Error - Error: configuration error" message.
    We are using AD, top of the tree for base DN. dc=domain, dc=local.
    We tried communicating with 2 different servers via telnet on ports 389, 3268, both are open.
    Tried port 389 and 3268, no SSL, Anynomous and User Password authentication methods.
    The error left us clueless since we followed the instructions on the user manual.
    For the accept query we tried this query string: (proxyAddresses=smtp:{a})
    Any ideas or pointers to what could be causing this are very appriciated.
    Thanks.
    Ed.

  • Efficiency of decoding and displaying image files?

    BRIEF SUMMARY
    My question is this: can Flash Player download JPG and GIF
    files from a server and rapidly open/decode them, ready for
    display, efficiently and
    entirely 'in memory'?
    Would Flex be a good choice of language for developing a RIA
    that needs to continually download lots of JPG and GIF images
    on-the-fly from the server and render them on the screen? I *don't*
    want my application to thrash the hard disc.
    BACKGROUND
    I am designing a 'rich' web app, and I'm investigating
    whether Flex is the right tool for the job.
    Although Flash's animation features are an obvious selling
    point for implementing my user interface, I also need to do some
    server-side rendering. What I want to do is perhaps a little
    unorthodox: I will be generating lots of GIF and JPG files on the
    fly and these will be streamed to the client (along with other
    application data, e.g. in XML format) to update different parts of
    the on-screen document. In need this to happen very quickly (in
    some cases, creating the effect of animation).
    It happens that JPGs and 16-colour GIFs will be, by far, the
    most efficient formats for streaming the images, because of the
    nature of the application. I could of course send the images in
    some proprietary format, geared for my application, but presumably
    decoding the images would be slow as I would have to implement this
    myself in ActionScript, and so I would be limited by the speed of
    Flex 'bytecode'. (I realise Flash is a lot more optimised than it
    once was, but I am hoping to see a gain from using image formats
    that Flash natively understands!)
    Naturally the internet bandwidth should (in principle) be the
    bottleneck. However, assuming I can get my image files to the
    client on time, want I want to know is:
    how efficient is Flash at loading such files?
    Bearing in mind that I'm not just displaying the occasional
    image -- I will be doing this continuously. Most of the images
    won't be huge, but there will be several separate images per
    second.
    The image files will be a mixture of normal colour JPGs and
    4-bit colour GIFs (LZW-compressed). I know that Flash natively
    supports these formats, but depending on how Adobe have implemented
    their LZW/Huffman decoding and so on, and how much overhead there
    is in opening/processing downloaded image files before they are
    ready to 'blit' to the screen, I imagine this could be pretty fast
    or pretty slow!
    If my client only has a modest PC, I don't want the JPG/GIF
    decoding alone to be thrashing his CPU (or indeed the disc) before
    I've even got started on 'Flashy' vector stuff.
    I'm new to Flash, so are there any 'gotchas' I need to know
    about?
    E.g. Would it be fair to assume Flash Player will do the
    decoding of the downloaded image entirely 'in memory' without
    trying to do anything clever like caching the file to disc, or
    calling any libraries which might slow down the whole process? It
    would be no good at all if the images were first written to the
    client's hard disc before being ready to display, for example.
    Further, if I'm doing something a little out-of-the-ordinary,
    and there is no 'guarantee' that images will be loaded quickly,
    what I'm doing might be a bad idea if a later version of Flash
    Player may (for example) suddenly start doing some disc access in
    the process of opening a newly downloaded image. So, while I could
    just 'try it and see', what I really need is some assurance that
    what I'm doing is sensible and is likely to carry on working in
    future.
    Finally, I imagine JPG/GIF decoding could be something that
    would vary from platform to platform (e.g. for the sake of
    argument, Flash Player for Windows could use a highly-optimised
    library, but other versions could be very inefficient).
    This could be the 'make or break' of my application, so all
    advice is welcome! :) Thanks in advance.

    You need a servlet/jsf component to render the image in the response.
    Look at this: http://www.irian.at/myfaces-sandbox/graphicImageDynamic.jsf

  • Make the link from the single cell of Bex Report and the image of bill

    Hi guys,
    my client scan every bill and archive the image by File.net technology.
    In our Bex Report we have the Bill number and we want to make the link from the single cell and the image of bill.
    The possible paths to solve the problem are:
           Replicate the image in BW and crate a link from the single cell and the image of document.
           Create an URL link from the single cell and the image of document archived on File.net server.
    In witch way we can to implement the two paths?
    Thank you.
    Alessandro

    Hi Alessandro,
    Have you seen "How To…Enhance your Web Query with the Table Interface"?
    You can find it in media library:
    https://websmp105.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000194044
    Best regards,
    Eugene

  • Bridge Viewer/Client image rating prog.

    I think I may have mentioned something similar in part of another post regarding how useful distributed cache could be. But a big workflow problem has arisen, so I shall specifically request this 'feature'.
    At the moment I have over 50G of images to be sorted thru. They are all stills from a film I worked just worked on as well as the behind the scenes stuff. All shot in Canon RAW. The various producers and director want to look at images and select what they want further work on.
    I will name, label, keyword [and preselect images I think are best], but still give them everything to choose from. They will then sort out what they want me to process/composite b4 outputting into PSDs, JPEGs, TIFFs etc for various media distributions. They are several hundred miles away so sitting around a computer whilst 3 people argue over which images to select is impractical, nor something I need/have time to partake in.
    For the producers to view files they need a cut down Bridge that simply allows them to look at the various digital image file formats [with new types updated automatically] and rate/label/annotate images, in essence Acrobat Reader but for image folders. Bridge Browser maybe, Extensis I believe has a Browser to go with Portfolio, which seems to be like what I mean. Just had a brief try of Portfolio, yuk.
    There is no way they will buy Bridge as you can only do so as part of PS which they don't want or even have any use/need for. All they need to do is look at images and place a ranked tick or cross next to them, maybe add a note and send just the amended cache/info back. This could then be added to my own sorting and most definitely not replacing it - Photographer Sort, Producer Sort, Director sort. And maybe the sorts could be combined Venn diagram style to quickly see what we all agreed on.
    Many of the people I deal with do not have/need PS, in fact that's why they employ me, hence the need to have some simple, idiot proof way of them viewing images and labelling/annotating them. Being able to view keywords used with all folders to quickly search for say all Tom Cruise but not Jamie Foxx pics they can.
    The only other option is to JPEG everything into separate folders and send them down, they shortlist images and stick them in a folder and send them back. I then have to match them with original RAW files. A couple of tedious unnecessary days wasted file sorting.
    Any workflow suggestions gratefully received.

    You did not mention what version you are using?
    In CS3 use the filterpanel and in top of this panel select the small icon
    with up and down arrow, in this drop down menu choose sort by date created.
    This will give you the natural sort order with date including time in hours
    minute and seconds.
    In CS4 you can also use the filter panel and choose date created from the
    list or use the path bar and click on the sort by line to choose from date
    created.
    One condition is essential for a correct sort order, the time and date set
    on the different camer's should be correct and identical
    Excuse the cross-posting on two forums -- I didn't realize Bridge has a
    separate forum....
    I'd like to sort a large folder full of files by the time of image creation. 
    Files were made of an event on several cameras and I'd like to synch them in
    order to create a slideshow that makes sense to the viewer/client.  Many
    thanks in advance for help.

  • ISE 1.0 Posture and Client provisioning

    I've configured 802.1x with dynamic VLAN for users and MAB for phones - it works fine. Now I wanna to implement client provisioning and posture validation for users. After reading ISE user guide there are still several big questions:
    1. Is it possible to combine 802.1x and posture? (it was not recommended with NAC)
    2. How can I bind existing 802.1x authorization profile and posture policy?
    3. What is a switch configuration for client provisioning to work(redirect, quarantine zone, download NAC agent)?
    4. Do ISE posture and client provisioning have L2 virtual gateway, trusted and untrusted ports, as in NAC?

    With ISE you can perform 802.1x first and after that optionally you can perform posture. This is done with Radius, that's why it's really and completely out of band, and there's no such concept of trusted or untrusted port because the traffic is never inline.
    Still, with ISE you have another option of "inline Posture", in which there's trusted and untrusted ports. I guess that's for some specific cases in which you can't go out-of-band.
    On the other hand, so called "out-of-band" NAC was really always an inline solution, only after the user has authenticated and security policies have been verified then the user goes "out-of-band".

  • How to create a single action for adding a border and signature for portrait AND landscape images???

    i would love to be able to create a single photoshop action for adding a border, plus a signature in the bottom right corner, that works for both portrait and landscape images.
    need i say more?!
    i already have an action that adds a signature in the centre of the border at the bottom of the image e.g. the image below. what i want though is for that signature to be on the RHS and for the same action to work for portrait images as well.
    supplementary info: reason for this is that I want to be able to export 300 wedding images (mix of landscape and portrait images) from lightroom in my pre-selected order (meaning the files are labelled from 001 to 300, ordered according to how the wedding day unfolded) and then use PS to add the border and the signature, in the same place, and for it to work for both orientations.
    i need this to work for full sized exported jpeg images, i.e. i want the files that i give on CD to my clients to include my signature in this manner. so I don't want to copy the initial layer and then reduce the second layer size to leave a border around the second layer.
    i hope i've been clear and that someone can help me here. I think that this sort of presentation makes such a difference to final printed image, and I DONT want to have to go to all 300 images picking out the landscape from portrait ones (although this may be what I have to do and wouldn't really take that long but surely there's a better way!!!!).
    Thanks in advance photoshoppers ...

    It is actually quite easy to do if you have a good understanding of how Photoshop works.  To be able to handle any size Landscape and Portrait you need to scale the document to a known width or height.  Once the document is resized to the width or height it easy.  When yot resize the document you use Image size with resample NOT checked.  Not a single image pixels is changed all the happens is the documents DPI is set to the proper DPI resolution to print that size.  This lets you add a border sized for and document.  You can use Canvas Size check relative and  leatve the anchor point centered and set width and height to 2" this will add 1"on all sides. Use Canvas size a second time move the anchor point to the top center check relative and set height 1" the will add an additional 1" border on the bottom.  You then record a text layer with your Name title or what ever to the top left of the image. Select all ant the align the text layer to the selection to move it to the bottom right.
    Adding a couple of scripts to the action you can make sure there is a background layer so the added canvas will be filled with pixels.  You can restore the document to its original DPI resolution to retain the images print size. Down load my crafting actions package it contains a dozen scripts to be used within actions. There are text file with tips and guidelines additionaly there is one on dealing with document size and includes a sample action set with a watermarking action the can watermark and size image. The Action set is also saved as a text file with additional comments I added my downloads can be found here http://mouseprints.net/Photoshop.html

  • Web Gallery - need file name on thumbnail and large image

    I think I have tried all the CS3 templates, but haven't found what our client is requesting. Is there a template that shows the file name on both the thumbnail and large image, and will make large images of 600-800 pixels (long dimension)?
    Thanks in advance,
    Dan Clark

    Thanks for your reply Nini. Yes, I had gone through all the presets and options. Was hoping I might have missed something, or that someone knew a trick/workaround. We've been using Table-Minimal for years, which is my overall favorite. I like to ability to make a large image, but it can't do what the client is requesting. They've made a list of selects from some very large galleries (200-300 shots each), and now want to jump directly to the shots they've previously chosen, in order to show their coworkers. I've also considered "Add Numeric Links", but I find that either confuses people, or they give me that number, instead of the file name/number, which makes a lot of extra work for us.

  • Content server and Dynamic image in PDF

    Hi all,
    I am trying to make up a PDF through SFP transaction in ABAP that has a photograph included in it. This photograph is saved in the content server. The photograph that is inserted depends on a certain number of data and the URL of the picture is dynamically set using function : ARCHIVOBJECT_GET_URI.
    The URL is ok but when I bind this to image object in PDF, the picture does not appear !
    Has anyone dealt with a simlilar problem ????
    Nicolas

    up

  • Custom Cursor and Drag Image in 1.4 DnD

    What is the proper way to provide a custom cursor and drag image in 1.4 DnD? Say we initiate the drag on a component that supports data transfer (such as a JTree).

    Well, this is strange. My app was locking up (100% CPU) when using DND from windows Explorer.
    I noticed that another part of the same appliction was working perfictly. The difference: JFrame .vs. JDialog. I switched the offending JDialog to a JFrame and all works perfictly now!
    java version "1.4.0"
    Java(TM) 2 Runtime Environment, Standard Edition (build 1.4.0-b92)
    Java HotSpot(TM) Client VM (build 1.4.0-b92, mixed mode)
    I would like to switch back at some point, but my g.setXORMode() problem is a much bigger issue for us. (That is, once you enter the XOR mode, you can not go back!)

  • Router WebVPN and client certificate

    Hello!
    In my test lab I can't to make work my webvpn configuration =\
    I have several components: MS AD, MS CS (but without NDES), router 2911 and client computer. Client and router have a certificate from MS CS. In my configuration I use authentication by certificate or aaa (LDAP) and authentication by aaa working good. But authentication by client certificate doesn't work. And my internal https services don't work also -  "Invalid or no certificate", but this strange because I imported CA certificate for this.
    Can you help me make it works?
    My 2911 version:
    Cisco IOS Software, C2900 Software (C2900-UNIVERSALK9-M), Version 15.1(3)T, RELEASE SOFTWARE (fc1)
    My Config:
    aaa authentication login webvpn group ldap local
    ip local pool webvpn 192.168.200.1 192.168.200.254
    bind authenticate root-dn cn=webvpn,ou=staff,dc=domain,dc=com password P@ssw0rd
    webvpn gateway vpn
    ip address <ip address> port 4443
    ssl trustpoint root-ca
    inservice
    webvpn install svc flash0:/webvpn/anyconnect-dart-win-2.5.3055-k9.pkg sequence 1
    webvpn context employee
    ssl authenticate verify all
    login-message "VPN Portal"
    policy group policy1
       url-list "inside"
       functions svc-enabled
       filter tunnel VPN-SPLIT
       svc address-pool "webvpn" netmask 255.255.255.0
       svc default-domain "domain.com"
       svc keep-client-installed
       svc split dns "domain.com"
       svc split include 192.168.0.0 255.255.0.0
       svc dns-server primary 192.168.1.1
       svc dns-server secondary 192.168.1.2
       citrix enabled
    virtual-template 1
    default-group-policy policy1
    aaa authentication list webvpn
    gateway vpn
    authentication certificate
    username-prefill
    ca trustpoint root-ca
    user-profile location flash0:/userprof
    inservice
    crypto pki trustpoint root-ca
    enrollment terminal
    revocation-check none
    rsakeypair root-ca
    I imported certificate from pkcs12 with CA certificate.
    From my debug (this is happend then i try to access to my webvpn portal and I choose my certificate from MS CS for access)
    Jun  5 11:22:39: WV: validated_tp :  cert_username :  matched_ctx :
    Jun  5 11:22:39: WV: failed to get sslvpn appinfo from opssl
    Jun  5 11:22:39: WV: failed to get sslvpn appinfo from opssl
    Jun  5 11:22:39: WV: Error: No certificate validated for the client
    Can anybody explain me why it doesn't work?

    Hi,
    did you find any solution for this? As I am in it seems the same situation now.
    I am testing it with Cisco 2911 - IOS version 151-3.T4 and last anyconnect client for Android (Samsung Galaxy S III mobile)
    Thanx for any advice/help
    Pavel

  • Get Uploaded File Mime Type and Client Filename

    Anyone know how to recover an uploaded file MIME type and
    client file name?
    I'm writing my own cfx tag to process file uploads and pretty
    much have it figured out except to determine the name of the client
    file and mime type. The formfield file variable value contains the
    path/filename to the CF temp directory, but I need the MIME type,
    filename, etc. that is contained int he HTTP Header
    (e.g. Content-Disposition: form-data; name="Image";
    filename="C:\test.JPG"
    Content-Type: image/pjpeg
    [empty line])
    I'm using the getHttpRequestData() functiont, but it only
    gives me the content-type multipart/form-data, leaving out the Mime
    type and Content-Disposition (which contains the client file name).

    Hi Daniel,
    do you use EPG, mod_plsql or APEX Listener? Have you changed the connection mechanism after upgrading to 4.2.1?
    If you use the APEX Listener, which version do you use? Which browser and version do you use to upload the file? Does it reproduce with other browsers as well?
    Regards
    Patrick
    Member of the APEX development team
    My Blog: http://www.inside-oracle-apex.com
    APEX Plug-Ins: http://apex.oracle.com/plugins
    Twitter: http://www.twitter.com/patrickwolf

  • I want to bind my client certificate with machine certificate in order to bind user with dedicated one machine. Kindly help

    I have created one dedicated root CA for domain and auto enrollment has been enabled through Group Policy.
    I want to bind my client certificate with machine certificate in order to bind user with dedicated with one machine. In order to prevent duplicate logins

    Hi,
    How about using
    User Rights Assignment?
    You can deny all other users’
    log on locally right on the machine.
    User Rights Assignment
    http://technet.microsoft.com/en-us/library/cc780182(v=WS.10).aspx
    Best Regards,
    Amy Wang

  • Illegible text and blurred images

    Hopefully there is a simple answer to this because I am having trouble finding it!
    I created a presentation in Keynote and all looked good. Decided to send it to iDVD so that I could burn it onto DVD for distribution to clients. When opened in iDVD, both in preview and once burnt to disc, the text becomes illegible and the images blurred. I looked at the .mov file in Quicktime and the presentation looked fine there too. It is only once it gets into iDVD that it deteriorates.
    Can anyone help please? As usual there is nothing in the Apple Help files to assist!
    Would greatly appreciate any help you guys can give.
    Cheers....Scotty

    Try this one in the iDVD forum....
    http://discussions.apple.com/category.jspa?categoryID=128

Maybe you are looking for