OID and AD Exchange

Is there anyone out there using OID to mailbox enable an AD account? I'm hoping there is some attribute I can include in my DIP mapping. We want our AD users to get a mailbox created the moment their AD account is created...

You can create three access policies with three different group.
AD - AD GROUP - AD ACCESS
EXCHANGE - EXCHANGE GROUP - EXC ACCESS
OID - OID GROUPS - OID ACCESS
Add a task in AD Process Defintion which will add user to EXCHANGE GROUP
And Add a task in Exchange Process Defintion which will add USER to OID GROUP

Similar Messages

I have 4 email accounts in apple Mail. My mail is sending from the wrong account. even on "reply" it sends from a different account. I have 3 gmail accounts and one exchange server account. I choose which account to send from and it still sends from a

I have 4 email accounts in apple Mail. My mail is sending from the wrong account. even on "reply" it sends from a different account. I have 3 gmail accounts and one exchange server account. I choose which account to send from and it still sends from the same gmail account. Help.

I HAD two accounts because of this problem. I completely removed the problem account from the Apple Mail client. Guess what is happening?? That's right - Mail is still sending from the other account that no longer exists on my computer, and I have absolutely no idea how this is happening. This is incredibly frustrating. When a recipient chooses to reply to my message, quite often I won't get it now because it is going to the other account that has now been deleted from my system. COME ON APPLE!!! WHAT'S THE DEAL WITH THIS???

I am trying to build a basic TCL skeleton script that reads a remote SNMP OID and displays the value on the screen.

I am trying to build a basic TCL skeleton script that reads a remote SNMP OID and displays the value on the screen.
I don't want it to be an EEM Event, I just want to run it from the (tcl)# prompt.
So I guess I'm asking if you can use cli_exec and other commands in the "namespace import ::cisco::eem::*" in a normal non-EEM script - can I do that?
This is the error I get:
OTN.159(tcl)#source flash:TCL_SNMP_Remote_Read.tcl
invalid command name "::cisco::eem::event_register_none"             ^
% Invalid input detected at '^' marker.
What am I missing?
================= TCL_SNMP_Remote_Read.tcl ==============================
::cisco::eem::event_register_none
namespace import ::cisco::eem::*
namespace import ::cisco::lib::*
if [catch {cli_open} RESULT]
    { error $RESULT $errorInfo }
    else { array set cli1 $RESULT }
if [catch {cli_exec $cli1(fd) "snmp get v2c 192.168.1.100 public timeout 1 oid 1.3.6.1.2.1.1.1.0" } RESULT]
       { error $RESULT $errorInfo }
       else { set SnmpSysDesc $RESULT }
if [catch {cli_close $cli1(fd) $cli1(tty_id)} RESULT] {
            error $RESULT $errorInfo
puts $SnmpSysDesc
=========================================================================
In the sho-run config I have:
event manager directory user policy "flash:/"
event manager session cli username "cisco"
Any help to get me started would be greatly appreciated!
Tim

If you don't want an EEM policy, then don't use any of the EEM constructs. Instead, all you need is this:
set output [exec "snmp get v2c 192.168.1.100 public timeout 1 oid 1.3.6.1.2.1.1.1.0"]puts $output

I am using an iPad and iPhone and have exchange as my email. Both will only collect mails when I am in the wifi of the office, and not when I am out and about. I can't seem to get a fix for it.

I am using an iPad and iPhone and have exchange as my email. Both will only collect mails when I am in the wifi of the office, and not when I am out and about. I can't seem to get a fix for it.

This - https://support.mozilla.org/en-US/kb/how-make-web-links-open-firefox-default - didn't work?

How can we get ADFSecurity work when used in OC4J, OID and OAM?

I am getting error in http server log "mod_oc4j: Response status=499 and reason=Oracle SSO, but failed to get mod_osso global context."
But I am not using Oracle SSO and my client doesn't want to use it either, I am using OAM SSO(CoreIDSSO) in my configuration. Please read the details below.
I am using ADFSecurity in an app that is protected by OAM. To migrate ADFSecurity permissions from
system-jazn-data.xml to OID, I used JAZNMigrationTool to populate OID with Grantees and Permissions. OAM gives login page, and authentication works fine.
But ADFSecurity is not working. ADFComponent Delete button is enabled even for roles that dont have permissions for the iterator delete.
- The app works fine when I use without OAM. ADF Security permissions work fine.
- The app works fine when used with OAM, but with ADFSecurity disabled (enforce=false).
- When I enforce ADFSecurity alongwith OAM, ADFSecurity is not working.
In the doc "Oracle Containers for J2EE Security Guide b28957", there is a mention of use of CoreIDPrincipal for permissions. Our OID Permissions entries show
LDAPRealmRole for attribute orcljaznprincipal. I am not sure if this could be the reason.
We have configured AccessServerSDK for the SOA instance and have policy for the urls in the policy manager. We have entries in orion-application.xml, orion-web.xml and system-jazn-data.xml as per the documentations.
How can we get ADFSecurity work when used with OID and OAM?

Have you been able to successfully integrate OAS with OAM & OID? We have similar requriement and so far we have not been able to get it working.
We have application specific roles which we map to OID roles using orion-application.xml.
Any pointers to achieve this would be greatly appreciated.
thanks,
Dipal

MAJOR PROBLEMS WITH IPHONE 3G AND MICROSOFT EXCHANGE!!!! PLEASE HELP!!!!

Ok,
My exchange server at work was synced to my iphone and has worked with no issues. I then exchanged my phone because there were issues with my bluetooth not syncing properly. So with this new phone, it prompts me to enter in my exchange server password every few days. I contacted my IT department as well and microsoft to get this issue resolved because I assume that there were issues with the exchange server. They were both able to see an event viewer and it showed that my iphone was attempting to log in numerous amounts of times, which locks out my account after 3 incorrect log ins. Even when I erased the exchange account from my phone, it still showed that the phone in the event viewer was trying to log in over and over again. I then did a master clear and restore and the process was removed in the event viewer. So then I called my IT department to unlock my account after I cleared everything. I was able to sync everything again with it working properly. Now its a day later and the my exchanger server prompts me to enter in the password AGAIN and my exchange account is locked AGAIN because the event viewer at work is showing the same issues. Is my Iphone not saving the password correctly? What do I do? My IT department even created a dummy account to see if a new account would fix the issues but yet no cigar! HELP!!

The iPhone you returned is still syncing against your server and locking out your account. Someone possibly has access to your mail data. I'd recommend having your Exchange Administrator install the Microsoft Exchange Server ActiveSync Web Administration Tool (http://www.microsoft.com/downloads/details.aspx?FamilyID=E6851D23-D145-4DBF-A2CC -E0B4C6301453&displaylang=en) and attempt to wipe/delete/block that other iPhone.
Message was edited by: ethanm

Creating a new context in OID and extending DIT

I am developing a portal. I need to create a new context in the OID and extend the DIT so that i can store Subscriber information in it. Please help me with the procedure, and sample schema.
thanks in advance,
udai.

Hello JB-Baby
You can't create a subfolder in Sent. Mail does this automatically for each account you set up. If you wish to organise messages you send by some criteria or other, why not consider a Smart Mailbox?
I assume by your second question you mean can you change the columns in the message viewer? Yes you can. You select View -> Columns and check the ones you want. You can adjust the order of the columns by dragging the titles around in the message viewer.
If you didn't mean this, maybe you could explain what you are after in a little more detail.

Link b/w orclIsEnabled on OID and portal API calls wwsec_api.activate_user

Hi Folks,
I am just curious about the account status on OID and access on portal user profiles.
Is account activation or deactivation in OAS portal (using wwsec_api.activate_portal_user/ deactivate_portal_user calls) related to the OID enable/ disable of an account using orclIsEnabled field?
i think the portal api calls control the portal access in the wwsec_person$ tables. but does it also reflect on to the orclIsEnabled field?
any guidance will be highly appreciated!
AMN

I'm not 100% positive but I do not think the portal account activation/deactivation calls change the orclIsEnabled attribute in OID since there are times when a user in OID may still be enabled for SSO purposes but that same user may be deactivated as a portal user.

OID and Oracle Forms in 9iAS Release 2

Whenever I bring up a first form in 9iAS forms over the web scenario, I am forced to log into the database through a pop up login box in IE. This is so even though I have a perfectly valid "userid=user/pwd@database" value in the URL. I have tried moving the userid value to the formsweb.cfg group and it helps not a whit. Once I log on everything works hunkydory. I am figuring there is some issue with OID. Is this a valid assumption?
How, exactly, does the OID and forms over the web interact. Do I need to create an OID user that has resource access to the database and then use that id in the userid variable in the URL? If so, how do I do this. Please feel free to be specific as if you were talking to an idiot or a small child...type very slowly and enunciate as you go. Not being able to log in from the formsweb.cfg and the URL is an irritant, not a showstopper, but it is a big irritant.

AS with all the downloads on otn this is a full version with no
time limit. But you are under the OTN license which says that
you have to purchase the product if you are developing
production applications with it. Its free for evaluation and
personal education purposes.

Differences between OID and OUD

Hello gurus,
What are the differences between OID and OUD.
Why Oracle release two LDAP directories. Please let me know.

These two are two LDAP directories.
Where OID is database dependent and OUD is not.

Suggestion for Pricing Type and Pricing Exchange Rate Type

Dear All,
Good Day,
what would be your recommendation to maintain Pricing type and Pricing exchange rate type for below process.
1. Invocie.
2. Cancellation of Invoice.
3. Return Invoice.
4. Credit Note.
5. litigious Invoice.
Best Regards,
KSK

Thanks sam,
I have configured the same but now problem is Billing Header Exchange rate is not changing. Because of that Accounting document also doesn't have new exchange rate,.
1. Is there any another config needs to be maintain.
Example:
Sale order Exchange rate              10.45           Order date : 01.11.2008
Billing Header Exchange Rate         10.45           Billing date : 05.11.2008
Billing Line item Exchange Rate      11.00           Billing date : 05.11.2008 base on VTFL Config
Account Document Exchange Rate 10.45          Posting date : 05.11.2008 because of Billing Header exchange Rate
I need Accounting document also to carry New exchange rate 11.00 . suggest me.
Best Regards,
KSK

Oracle Forms 11g SSO with OID and IAM

What versions of OID and Access Manager are required to get an Oracle Forms and Reports 11.1.1.2 application
on Weblogic 10.3.2 configured for Oracle SSO using OID authentication?
We want the OID to store and authenticate Users for username and password logins to the database, then
ultimately by user Certificate authentication in OID. I have OID 11.1.1.2 installed and SSO enabled for Forms
in Enterprise Manager.
Is Access Manager required for Forms SSO with OID authentication to work or just to allow user interaction
for registration and Password reset?
Things mention OAM 10.4.3 and others talk about IAM 11g for Forms 11.1.1.2 SSO to work with OID.
We did this back in Oracle Forms and OID 10g with JSP and LDAP to setup users but I understand 11g is
different and IAM can help or is required for this type of SSO to work.
Any help?
Edited by: Kirch on Apr 30, 2013 7:39 AM

Hi,
According to Oracle's certification matrix found at http://www.oracle.com/technetwork/middleware/downloads/fmw-11gr1certmatrix.xls, Oracle Forms 11.1.1.2 is not supported to use any Oracle Access Manager (OAM) version. OAM is a component of IAM. It is only supported with Oracle SSO 10.1.4.x. The best solution would be to upgrade the Forms and Reports environment to either 11gR2 (11.1.2.1) or to the latest 11gR1 patchset 11.1.1.7. Both versions are compatible with OAM 11.1.1.7.0 and OID 11.1.1.7.0 where only Forms 11gR2 (11.1.2.1) is compatible with OAM 11.1.2.0 and OID 11.1.1.7.0. That would be the best solution as we have ran into configuration problems in the past with using Oracle SSO 10.1.4.x.
Since OID 11.1.1.2.0 is already installed, you should be able to patch it up to 11.1.1.7.0.
For user authentication in OID, it is required to have OAM or Oracle SSO as both products use WebGate or mod_osso agents for authentication and authorization. For purposes of allowing end users to register accounts and password reset, you will either need to also install another IAM component called Oracle Identity Manager (OIM) or create a customized SSO login page that can be coded to perform these actions. I believe there are some examples available on the Internet.
Thanks,
Scott
http://pitss.com/us

OID and MS Active Directory LDAP information Synchronization

Do you know have to do the integration between OID and MS active Directory? How to synchronize the LDAP information between two?

Hi, I have the same question.
Thanks,
Malin

Issue while integrating OID and BPEL.

Issue while integrating OID and BPEL.
We followed steps mentioned in for integration. WE have two SoA instances, home, oc4j_soa.
http://download-uk.oracle.com/docs/cd/B31017_01/integrate.1013/b28982/service_config.htm#BABIBGFF
Before running configure_oid.bat script, we changed jazn.xml to include the contents that are available in home\jazn.xml.
The contents we replaced contain
<jazn xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/jazn-10_0.xsd" schema-major-version="10" schema-minor-version="0" provider="LDAP" location="ldap://myhost:389" default-realm="my-realm" >
     <property name="custom.sso.url.login" value="/jsso/SSOLogin" />
     <property name="ldap.user" value="orclApplicationCommonName=jaznadmin2,cn=JAZNContext,cn=products,cn=OracleContext" />
     <property name="ldap.password" value="{903}dA0r1HydR5qIhjAn2OCLMSWlFXeLdV//sCLFNwSfWhE=" />
     <property name="custom.sso.key.alias" value="ssoSymmetricKey" />
     <property name="idm.token.asserter.class" value="oracle.security.jazn.sso.SSOCookieTokenAsserter" />
     <property name="idm.token.collector.class" value="oracle.security.jazn.sso.SSOCookieTokenCollector" />
     <property name="idm.token.type" value="HTTP_COOKIE" />
     <property name="idm.token.collector.cookie.1" value="ORA_OC4J_SSO" />
     <property name="custom.sso.url.logout" value="/jsso/SSOLogout" />
     <property name="ldap.protocol" value="no-ssl" />
     <property name="idm.authentication.name" value="JavaSSO" />
</jazn>
configure_oid.bat ran successfully.
But when we try restarting SoA, it gives error. If we replace the above to point to XML-based jazn then SoA starts succcessfully.
Please let us know if we are missing anything.
Regards
Yatan

*1.) No I am not able to complete 2.1.3.3 step 3 the*
work list application is showing "authentication fail"
user look up is showing "unable to find the realm with name my-realm "
*2.) After 2.1.3.3 step 2, if I try restarting the SOA suite, it throws following error.*------------------------------------------------------------------------------------------------------------------------------------------------------------
Configuration information
Running in C:\product\10.1.3.1\OracleAS_1
Operation mode:Startup, App Server, No Enterprise Manager, Single Instance
Oracle home:C:\product\10.1.3.1\OracleAS_1
Oracle home name:Unnamed
Instance name:ias_soa.myhost
Instance type:allProducts
Version:10.1.3.1.0
Uses infrastructure:false
Not an infrastructure instance, no infrastructure information available
Components:[j2ee, apache, orabpel, oraesb, owsm, Wsil]
2009-06-29 04:10:49.962--Begin log output for Mid-tier services (ias_soa.myhost)
2009-06-29 04:10:49.962--Processing Step: starting OPMN
2009-06-29 04:10:57.493--Processing Step: starting OPMN managed processes
2009-06-29 04:11:22.806--End log output for Mid-tier services (ias_soa.myhost)
An unknown OPMN error has occured
oracle.appserver.startupconsole.model.ConsoleException: An unknown OPMN error has occured
     at oracle.appserver.startupconsole.control.OPMNController.doStart(OPMNController.java:140)
     at oracle.appserver.startupconsole.control.Controller.start(Controller.java:69)
     at oracle.appserver.startupconsole.control.GroupController.doStart(GroupController.java:47)
     at oracle.appserver.startupconsole.control.Controller.start(Controller.java:69)
     at oracle.appserver.startupconsole.view.controller.ControllerAdapter.start(ControllerAdapter.java:30)
     at oracle.appserver.startupconsole.view.controller.MasterControlAdapter.run(MasterControlAdapter.java:94)
     at oracle.appserver.startupconsole.view.Runner.main(Runner.java:39)
Caused by: oracle.appserver.startupconsole.model.ConsoleException: There are some errors while stopping the following components. Refer to the generated error report for more details.
==================================================
ias-component: default_group
process-type: oc4j_soa
process-set: default_group
Error Message:failed to start a managed process after the maximum retry limit
==================================================
     at oracle.appserver.startupconsole.control.OPMNController.doStart(OPMNController.java:139)
     ... 6 more
Caused by: oracle.ias.opmn.optic.OpticControlException: Error from opmn during process control operation
     at oracle.ias.opmn.optic.AbstractOpmnEntity.runCommand(AbstractOpmnEntity.java:174)
     at oracle.ias.opmn.optic.AbstractOpmnEntity.start(AbstractOpmnEntity.java:110)
     at oracle.appserver.startupconsole.control.OPMNController.doStart(OPMNController.java:97)
     ... 6 more
Exception caused by
There are some errors while stopping the following components. Refer to the generated error report for more details.
==================================================
ias-component: default_group
process-type: oc4j_soa
process-set: default_group
Error Message:failed to start a managed process after the maximum retry limit
==================================================
oracle.appserver.startupconsole.model.ConsoleException: There are some errors while stopping the following components. Refer to the generated error report for more details.
==================================================
ias-component: default_group
process-type: oc4j_soa
process-set: default_group
Error Message:failed to start a managed process after the maximum retry limit
==================================================
     at oracle.appserver.startupconsole.control.OPMNController.doStart(OPMNController.java:139)
     at oracle.appserver.startupconsole.control.Controller.start(Controller.java:69)
     at oracle.appserver.startupconsole.control.GroupController.doStart(GroupController.java:47)
     at oracle.appserver.startupconsole.control.Controller.start(Controller.java:69)
     at oracle.appserver.startupconsole.view.controller.ControllerAdapter.start(ControllerAdapter.java:30)
     at oracle.appserver.startupconsole.view.controller.MasterControlAdapter.run(MasterControlAdapter.java:94)
     at oracle.appserver.startupconsole.view.Runner.main(Runner.java:39)
Caused by: oracle.ias.opmn.optic.OpticControlException: Error from opmn during process control operation
     at oracle.ias.opmn.optic.AbstractOpmnEntity.runCommand(AbstractOpmnEntity.java:174)
     at oracle.ias.opmn.optic.AbstractOpmnEntity.start(AbstractOpmnEntity.java:110)
     at oracle.appserver.startupconsole.control.OPMNController.doStart(OPMNController.java:97)
     ... 6 more
<?xml version='1.0' encoding='WINDOWS-1252'?>
<response>
<msg code="-82" text="Remote request with weak authentication.">
</msg>
<opmn id="bg1ws0008:6201" http-status="206" http-response="2 of 3 processes started.">
<ias-instance id="ias_soa.myhost">
<ias-component id="default_group">
<process-type id="home">
<process-set id="default_group">
<process id="91427687" pid="4148" status="Alive" index="1" log="C:\product\10.1.3.1\OracleAS_1\opmn\logs\\default_group~home~default_group~1.log" operation="request" result="success">
<msg code="0" text="">
</msg>
</process>
</process-set>
</process-type>
<process-type id="oc4j_soa">
<process-set id="default_group">
<process id="91427688" pid="5856" status="Init" index="1" log="C:\product\10.1.3.1\OracleAS_1\opmn\logs\\default_group~oc4j_soa~default_group~1.log" operation="request" result="failure">
<msg code="-21" text="failed to start a managed process after the maximum retry limit">
</msg>
</process>
</process-set>
</process-type>
</ias-component>
<ias-component id="HTTP_Server">
<process-type id="HTTP_Server">
<process-set id="HTTP_Server">
<process id="91427686" pid="5140" status="Alive" index="1" log="C:\product\10.1.3.1\OracleAS_1\opmn\logs\\HTTP_Server~1.log" operation="request" result="success">
<msg code="0" text="">
</msg>
</process>
</process-set>
</process-type>
</ias-component>
</ias-instance>
</opmn>
</response>
*3.) opmnctl status -all ?*
C:\product\10.1.3.1\OracleAS_1\opmn\bin>opmnctl status -all
Usage:
opmnctl [<scope>] status [<options>] [host port]
Notes:
- if host,port is specified, contact opmn on host,port;
otherwise, contact opmn in local ias instance.
scope:
@instance(:name)*|@cluster
scope specifies how far to apply the query. To apply the query to
all known iAS Instances, specify "cluster". To apply the query
to a specific set of 1 or more iAS Instances, specify
"instance(:instname(:instname...))". If no names are supplied
in an instance scope string then the request is applied to the
"local" instance. In this context, "local" means the instance
containing the opmn server handling the request.
Default: local iAS Instance.
Options:
[ias-component|oc4j-group]=id
- filter output by ias-component name
- i.e. filter output by oc4j-group name
-l - pre-selected long output format:
%cmp32%prt18%pid7R%sta8%uid10R%mem8R%utm9R%por
-fmt <fmtlist> - output format (see details below)
Option "-fmt <fmtlist>" and "-l" are mutually exclusive
-fsep <string> - field separator (default:" | ")
-rsep <string> - record separator (default:"\n")
-noheaders - don't print a header
-c <count> - number of times to print status (default:1)
-i <nsecs> - seconds between each print (default:5)
-app [-l] - application status (optional long format)
-port - opmn "request" host and port (scope
argument invalid)
Format String Syntax:
<fmtlist> - A single string containing one or more statistic
identifiers concatenated together where each identifier has
the following format: %<statname>[<width>[<justification>]]
default: %cmp32%prt18%pid7R%sta8
<statname> - Must be one of the following:
ins - iAS Instance Name
cmp - iAS Component Id
prt - Process Type Id
prs - Process Set Id
idx - Index of process in Process Set
pid - OS Process Identifier
uid - Opmn Unique Id
typ - Name for this kind of process
sta - Process status
stm - start time (ms)
utm - up time (ms)
cpu - cpu time (ms)
mem - memory used (Kb)
pme - private memory (Kb)
sme - shared memory (Kb)
hpz - heap size (Kb)
por - Port List
<width> - The number of columns to use for this field. Output
less than this value will receive padding according to the
specified justification. Output more than this value will
be truncated and terminated with '~'.
default: the width of each datum
<justification> - How to justify output when less than the width.
Must be L, R, or C (left, right, or center justification).
default: L
4.) SOA Suite version ? *10.1.3.1.0*
5.) Did you manually tweak some configuration file or followed the documentation as it is ? I have followed the document as it is.
I have changed only jazn.xml available in ..j2ee/oc4j_soa suite to have the below section: This section was copied from jazn.xml of ..j2ee/home directory that has been automatically updated after running configure_oid.bat file
<jazn xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/jazn-10_0.xsd" schema-major-version="10" schema-minor-version="0" provider="LDAP" location="ldap://myhost:389" default-realm="myrealm" >
     <property name="custom.sso.url.login" value="/jsso/SSOLogin" />
     <property name="ldap.user" value="orclApplicationCommonName=jaznadmin2,cn=JAZNContext,cn=products,cn=OracleContext" />
     <property name="ldap.password" value="{903}dA0r1HydR5qIhjAn2OCLMSWlFXeLdV//sCLFNwSfWhE=" />
     <property name="custom.sso.key.alias" value="ssoSymmetricKey" />
     <property name="idm.token.asserter.class" value="oracle.security.jazn.sso.SSOCookieTokenAsserter" />
     <property name="idm.token.collector.class" value="oracle.security.jazn.sso.SSOCookieTokenCollector" />
     <property name="idm.token.type" value="HTTP_COOKIE" />
     <property name="idm.token.collector.cookie.1" value="ORA_OC4J_SSO" />
     <property name="custom.sso.url.logout" value="/jsso/SSOLogout" />
     <property name="ldap.protocol" value="no-ssl" />
     <property name="idm.authentication.name" value="JavaSSO" />
</jazn>
instead of
<jazn xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/jazn-10_0.xsd" schema-major-version="10" schema-minor-version="0" provider="XML" location="./system-jazn-data.xml" default-realm="jazn.com">

     <property name="idm.authentication.name" value="JavaSSO"/>
     <property name="idm.token.asserter.class" value="oracle.security.jazn.sso.SSOCookieTokenAsserter"/>
     <property name="idm.token.collector.class" value="oracle.security.jazn.sso.SSOCookieTokenCollector"/>
     <property name="idm.token.type" value="HTTP_COOKIE"/>
     <property name="idm.token.collector.cookie.1" value="ORA_OC4J_SSO"/>

     <property name="custom.sso.url.login" value="/jsso/SSOLogin"/>
     <property name="custom.sso.url.logout" value="/jsso/SSOLogout"/>
     <property name="custom.sso.key.alias" value="ssoSymmetricKey"/>
</jazn>

How can i split Client Network traffic and My exchange traffic with two differnet ip address?

Hello Everyone
sorry for my bad English and also my bad explaine
here is my network looks like
all the client on one subnet and network is 192.168.0.0
i have Dsl router that connect to Tmg server
i have Tmg with two NIC
1-192.168.0.4
2- 2 Public Ip address
i want to do this
i want to split user's traffic and my exchange traffic
i mean i want to route user's traffic with one public ip addresss
and my exchange server's traffic with another public address
but when i add additional ip address at Tmg or create new NIC card
all of my traffic route with one public ip Address what should i do?

Hi Uhan,
You need to use ENAT fuction on TMG to achive this
On the External NIC assing the Second IP as Additionl IP address (VIP)
Create a network Rule to NAT traffice From Exchange server IP address to the required Public IP which you need the E NAT.
Ensure you are creating rule only from Exchange server IP and not all INternal.
Look at the below Doc you step by step config
http://www.isaserver.org/articles-tutorials/configuration-general/Configuring-One-to-One-NAT-TMG-2010.html

OID and AD Exchange

Similar Messages

Maybe you are looking for