Per-user cronjob (somewhat automatically)

Hi all,
probably some of you have a solution for this already in place:
I have switched from fetchmail to mpop and miss the daemon feature. When I tried to launch mpop with the following mpop file in /etc/cron.d, it didn't work (I think it didn't download any messages, probably due to the fact that my mpoprc/mailbox definition is in my personal home dir. But even with su it didn't work.):
*/10 * * * * su wagner -c /usr/bin/mpop -qa
With the crontab command, however I can insert it in my personal crontab and it's working fine. Now should I put such a crontab command in my .profile or what?
Second, I would like to automatically enable/disable that cronjob dependng on whether I'm on-line or not, and
thirdly, I would like to be able to call mpop manually (I have a keybinding in mutt for that), but that should be a nop when the cronjob is just executing.
Thanks for any hints,
Andreas

First, the cron daemon executes job from the crontabs of any user: so just edit the crontab of the user with 'crontab -e -u <user>' and the cron daemon will do everything.
For the verification of the internet connection, you can use a script which pings some hosts and executes the action only if the ping is successful:
#!/bin/bash
IP1=0.0.0.0 # enter an IP address here
IP2=0.0.0.0 # enter an IP address here
IP3=0.0.0.0 # enter an IP address here
IP4=0.0.0.0. # enter an IP address here
COMMAND=$1
STATUS=Up
ping -c1 $IP1
if [ $? != 0 ]; then
ping -c1 $IP2
if [ $? != 0 ]; then
ping -c1 $IP3
if [ $? != 0 ]; then
ping -c1 $IP4
if [ $? != 0 ]; then
STATUS=Down
echo "down"
fi
fi
fi
fi
if [ $STATUS = Up ]; then
echo "up"
exec $COMMAND
fi
Call this script e.g. 'netex', and then use 'netex <yourdesiredaction>' as a cron job definition.
On the first point I do not know, but many mail fetchers use a lock to prevent a double execution (e.g. fdm). I do not know mpop so I do not know how to get the same result.

Similar Messages

  • Amount of Resources CPU and Memory per user

    Hi,
    We are looking to deploy a Line of Business Application via RemoteApp and a custom template.  The application requires a significant amount of RAM and CPU, can someone tell me who much RAM and CPUs are allocated per session \ user?  I would expect
    that we would use the Standard tier if any difference to resources available.
    Thanks
    Giles

    Hi James,
    Currently there is no way to configure resources other than selecting either Basic or Standard.  If you would like a lower per-VM user density (and thus higher resources for each user) what you can do is create more collections, and only assign
    a small number of users to each.
    For example, say you only wanted to have a maximum of 4 users on each VM, providing typically at least 1 vCPU per user.  In this case you would create collections with the Basic plan, each linked
    to the same template image, and only assign a maximum of 4 user accounts on the user access tab of each.  Assuming each user uses 80+ hours a month, the total (before discounts) cost for each collection would be $228/month, making each user
    cost about $57/month, slightly less than equivalent cost under Standard plan pricing if you factor in resources per user.
    You probably already know this, but I will explain how scaling works normally for others that may read this.  Azure RemoteApp will automatically create more VMs for each collection as needed to handle user load (Scale-Out) and shut down VMs when the
    user load is reduced (Scale-In).  The key thing that affects this scaling mechanism is the maximum concurrent users allowed on each VM, which for Standard is 10.
    In your case you are asking if you can have more resources per user, hence my instructions above for creating multiple collections and limiting the number of assigned users to less than 10 each.
    Depending on your unique needs it may make more sense to create a custom RDS deployment on Azure IaaS VMs.  In this case you could control the size/type of VM used, user density, etc.  Downside is you have to set up and manage more
    RDS components than you do if you use Azure RemoteApp.
    -TP

  • An OS-Intergrated place to store per-user application configuration files.

    A Chairde,
    I'm developing an application that could be deployed on multiple platforms. I'm looking for a location to store per-user configuration files in a OS-integrated way.
    I use a utility class to determine the OS of the users machine. I know from experience that Windows NT5+ likes to store per-user settings/configurations in the %APPDATA% path (which is usually C:\Users\<username>\Appdata\Roaming\<vendor>\<software> etc.) I'm using a call to the environment labels to determine it's location.
    I'm a linux user myself, so I'm aware that most UNIX based Operating Systems like to store personal configurations in hidden folders in the user's home directory (ex /home/<username>/.<application> etc.), Obviously, I'm using a call to the system property user.home to determine that location.
    My Question is in relation to Mac OS and Mac OS X, where would it be a safe location to store per-user configurations? I know OS X is BSD/UNIX based so is it safe to assume to store them as a hidden subfolder of the user.home directory? What about Mac OS classic? Where are per-user settings stored, or is it like Windows 9x and NT4 and lacks proper multi-user setups (although NT4 is somewhat more prepared then 9x) ?
    It would be much appreciated if anybody has any ideas.
    Is Mise,
    Seán Mac Aodha
    PS. I'm not using Javas Property files etc. I've rolled my own exchangeable format for storing key,value pairs.

    I've used databases in the past to store local files but clients have sometimes run into trouble when the database daemon goes down or doesnt start-up normally because of a "improper" shutdown etc.
    In my own implementation of "Settings Files" i have serialized hashtables marked with appropriate metadata stored to the users "application data", a backup or original copy of those settings in the common directory shared by my application framework and then in a networked enviroment, the Settings can be hosted on a database server, so the user can travel between client machines and keep their settings (and files) with them.
    I have, with a bit of googling, come across the most obvious page i should have looked at in regards to Apple Mac OS X
    http://developer.apple.com/documentation/MacOSX/Conceptual/BPFileSystem/Articles/WhereToPutFiles.html
    According to Apple's guidlines, the most suitable place to store User configuration files is in the ~/Library/Application Support/<Application Name> directory.
    and for System-wide configuration files, /Library/Application Support/<Application Name> rather then storing them with the application in the /Applications directory.

  • Using Windows Server 2012 per-User RDS CAL on Server 2008 R2 Session Host

    I have a Remote Desktop Licensing Server setup on my domain controller running Windows Server 2012 R2. I have installed a
    ’Windows Server 2012 Remote Desktop Services per-User CAL’ there and activated the licensing server already.
    Currently I use ONLY Windows Server 2008 R2 machines as RDS Session Hosts (in the future I plan to transition them to 2012 R2, hence the CAL I bought is
    already in the newest version).
    I have already configured my WS 2008 RDS Session Hosts: set
    Per-User licensing mode and specified license server address. The connectivity between my Session Host(s) and my License Server seems to be ok as the
    Remote Desktop Session Host Configuration window on the Session Host correctly lists the 2012 per-user
    license (CAL installed on server) from the license server.
    On the License Server I can also see event logs entries (in
    Microsoft-Windows-TerminalServices-Licensing/Admin), indicating that the user has been issued a license.
    The issue I am having is that the license being issued is
    2008 Per User CAL license (Build-in OverUsed - temporary) and not the 2012 Per User CAL license which is the only license installed on the server. According to the RDS CAL interoperability matrix at
    social.technet.microsoft.com/wiki/contents/articles/14988.rds-and-ts-cal-interoperability-matrix.aspx, I was expecting the 2012 license to be backward-compatible with 2008 client (and that
    in the absence of legacy licenses, the (only) 2012 license would be used for all clients connecting to the licensing server)
    Before I bought my license, I found this document: 
    download.microsoft.com/download/3/D/4/3D42BDC2-6725-4B29-B75A-A5B04179958B/WindowsServerRDS_VLBrief.pdf 
    which says that - "newer version RDS CALs can be used with an older version of the server software" (In section FAQ, Q4), which means to me that
    the 2012 license would work as-is for the 2008 Server and gives me flexibility when upgrading to the new server version.
    How can I make this CAL work in my environment? 
    Note:
    I have already explicitly disabled
    Prevent license upgrade Group Policy setting which I assumed would fix the issue but nothing has changed.
    Then I have enabled License server security group Group Polity setting
    and added computers from my domain to RDS Endpoint Servers AD group. I have also created new AD group called
    Terminal Server Computers and added the computer accounts there, but it changes
    nothing. Reference - technet.microsoft.com/en-us/library/ee791761.aspx , technet.microsoft.com/en-us/library/cc725704.aspx and blogs.msdn.com/b/rds/archive/2009/09/17/control-the-issuance-of-rds-cals.aspx.
    I found one potential ‘workaround’ which involved manually downgrading my CAL license by calling
    Microsoft Clearinghouse. I am very reluctant do to so because, as I upgrade parts of my infrastructure to Server 2012, I’d need to then ask Microsoft to manually upgrade a part of my license back as well.
    Am I missing something? What should I do to get my 2012 CAL to be issued to 2008 R2 server

    Hi, I have tried several other possibilities.
    I change expire date for my temporary assigned license (2008 CAL overused). It can be done, by changing Active Directory user properties – msTSExpireDate. When I restart my Session Host server and logged again, my license was renewed
    for next 60 days (event ID - 4145).
    I also delete information about license for this user (clear msTSExpireDate and msTSLicenseVersion). And the license was successfully removed from License Manager. After another SH restart it gets the same – 2008 overused – license
    (event ID 4143 - license server has successfully issued …)
    I now, that changing info in AD attributes is a little trick, and this is not a real value - only a reference, but it was useful to delete or change expiration date of license. But it didn’t change type of license as I expected.
    Reference -
    http://discussions.citrix.com/topic/243320-windows-2008-licensing-questions/
    To TP:
    I have found your post with information:
    If you have a Server 2012 RD Licensing server you may install your 2012 RDS CALs on it (no downgrade necessary) and then set your Server 2008 R2 RDSH to
    use the 2012 RDL server.  The 2012 RD Licensing server will automatically issue the CALs as 2008. -
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/6046ded1-96bf-4d79-89ce-38aac2a6694e/can-we-use-windows-server-2012-rds-cal-license-in-rds-2008-r2-server?forum=winserverTS
    And it showing my situation in brief. I also found
    similar problems, but the solutions don’t meet my expectations.
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/dcfb1966-89a8-4b5d-bf5a-ff03ac0b7a66/rds-cal-licenses-not-recognized?forum=winserverTS
    – “sudden all of the CALS were available”
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/f1228599-8452-4a3e-a263-061de14bfcfe/server-2012-rds-builtin-overused-cals-issue?forum=winserverTS
    – “this should go away after a while”
    Is there a way to determine this time you mentioned before? Or should I just wait patiently…

  • "Make proxy settings per-machine (rather than per user)" Group Policy setting not applied until login as a local Administrator

    We want to deploy to all our desktop the pac file to configure proxy. We have a Windows 2008 R2 server, and i've enabled the GPO "Make proxy settings per-machine (rather than per user)", and i've add a registry key AutoConfigURL in "HKLM\Software\Microsoft\Windows\Current
    Version\Internet Settings" with the pac file link.
    I've tested on my pc, and all was configured without any problem. I've try to login to my computer with another user (without admin rights) and the automatic configuration proxy was compiled and not modificable. It's seems that all works.
    But, our users are not local admin, so i've tried to deploy the GPO in a collegue computer. I've forced the update of GPO, checked on registry that all new keys are added, and i've reboot the pc. When i've check on IE settings, autoconfig URL was empty and
    grey. I'm disconnected from user and i've login to the pc with a local admin. With my surprise, the IE settings was compiled. When i'm come bac to the user profile the IE settings was compiled and not modificable.
    The problem is: i've over 750 users in 3 countries, and i don't want grant them the local admin permissions. How can i configure proxy settings via GPO without login to every machine at least one time?

    > have a Windows 2008 R2 server, and i've enabled the GPO "Make proxy
    > settings per-machine (rather than per user)", and i've add a registry
    > key AutoConfigURL in "HKLM\Software\Microsoft\Windows\Current
    > Version\Internet Settings" with the pac file link.
    In the past, we experienced various issues with machine proxy settings,
    so we don't use them anymore. The simple approach:
    Block access to the connections page through ADM template settings and
    deploy the proxy through GPP Internet Settings.
    This is what we do (with a pac file, too), and it works well :)
    Martin
    Mal ein
    GUTES Buch über GPOs lesen?
    NO THEY ARE NOT EVIL, if you know what you are doing:
    Good or bad GPOs?
    And if IT bothers me - coke bottle design refreshment :))

  • Permit only one access per user on guest portal Cisco ISE

    Hi,
    Could you please help me to figure it out if it´s possible to create a guest account on cisco ISE which permit only one concurrent access?
    We don't want to have multiple devices registering with the same account, just one different account for each device.
    Thanks,

    Hi Gino,
    You  can restrict guests to having only one device connected to the network  at a time. When guests attempt to connect with a second device, the  currently-connected device is automatically disconnected from the  network.
    This is a global setting affecting all Guest portals.
    Step 1 Choose Administration > Web Portal Management > Settings > Guest > Portal Policy.
    Step 2 Check the Allow only one guest session per user option.
    Step 3 Click Save.

  • TV Access Connection​s per-user settings?

    I needed to set up a 2nd user acct profile on my T500 (Win XP Pro) to use for a special purpose and need for the Wireless Radio to be powered off when this user's desktop loads (same as clicking the TVAC icon in the system tray and choosing Power Off Wireless Radio).
    So far my experience has been that any TVAC changes made while using the 2nd user account are carried over to the 1st user acct, and vice-versa.  I would like settings to be on a per-user basis and not applied globally to all users.  Is this possible, and if so how can I do it?
    Using the system tray icon, I was able to have the radio powered off in the 2nd acct and powered on in the 1st acct.  And when the 2nd user's desktop loads the icon is in fact powered off, at least initially, but then the auto-connect popup appears and automatically powers on the radio.  If I could configure the 2nd acct to not attempt to connect automatically that would work for me, but I can't figure out how that is possible.
    Any help is appreciated.
    Regards,
    Frank

    It is not possible to do per user setting in Access Connections.

  • Auto logout time different per users

    Hello
    we are using almost all modules in ECC. So we have 2 kinds of SAP users, the administrative ones and the operational ones.
    The administrative ones is using SAP all the day by creating purchase orders, process orders or recording control results by example. When they make an activities in SAP they can completed the task without any interruption.
    But we have as well operational users who are using SAP to make physical activities like to place pallet in the warehouse with WM functions and to weight a drum from the PI-sheet in PPPI.
    The auto logout is after 15 minutes of inactivity and I don't find how to set it up per users. In deed, the operator in production needs time between each weighing meaning stick label, remove the previous drum, take the new one, write information on the paper batch record, ... The time between 2 actions in SAP is more than 15 minutes. So the operator is automatically logout between each weighing and it takes around 2 minutes to log again and reload the Pi-sheet. By example, to weight 46 drums the operator will lost more than 1,5 hour. It's not acceptable by the production.It increases the production time of 16%.
    How can I set up a auto logout time to 15 minutes or less for the administrative users and 1 hour for the production users located in a protected area ( no access by external people) ?
    thanks in advance for your answer
    regards
    V Noirot
    PPPI team lead

    Hi,
    You can increase the logout time for the endusers. But the power users, throughout the day they will be using the system. This time increase will not affect much on the power users. If you are saving some productive hours by increasing this time out means, you can do this. But it will act similar for both the users.
    regards,
    V. Suresh

  • RDS (2012 R2, Per User) client issues after moving from TS Licesning (Win 2K3, Per Device)

    I run a XenApp environment (mixed Presentation Server 4.5, XA6.5, XA7.6... I know).
    I've somewhat recently moved our RDS/TS licensing from an old 2K3 TS licensing vm that needed to go to a 2012 R2 RDS licensing vm.
    The 2K3 vm ran with a Per Device mode, and the 2012 R2 vm is using a Per User model.
    RDS is working fine as far as I can tell - handing out licenses to their RD Session hosts, in the proper security group which has the ability to Read/Write the MSLicensing user attributes (Terminal Server License Servers). By GPO, I am telling (and they are
    applying) my XenApp servers to use their new RDS Licensing server and with a Per User model. The issue I
    am seeing is this:
    On a give XenApp server, the eventID 1011 - TerminalServicesRemoteConnectionManager
    The remote session could not be established from remote desktop client
    computername because its temporary license has expired.
    When I hit the Details tab,
    Windows Server 2003 - Terminal Server Per Device CAL Token.
    Which then results in having to remove the MSLicensing registry key. Which is annoying. Anyone else run into this after moving licensing servers and/or models? Feedback would be awesome, danke!

    Hi,
    According to your description, it sounds like a known issue. The workwgoup is to delete the MSLicensing key under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSLicensing. (Note: please create a backup of the MSLicensing registry key and its subkeys on the
    client before you remove the original key and subkeys.)
    For more detailed information, you can refer to the similar thread below:
    https://social.technet.microsoft.com/Forums/windowsserver/en-US/9eb42798-e75e-4693-9a5d-9e96895e16c8/remote-desktop-license-server-problem?forum=winserverTS
    Best regards,
    Ssie
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

  • How to set session timeout per user

    Hi,
    Ho do I set the session timeout per User in the
    Application.cfm File??
    I tried using
    <cfif SESSION.UID EQ 1>
    <CFAPPLICATION NAME="appControl" SESSIONMANAGEMENT="Yes"
    sessiontimeout="#CreateTimeSpan(0,0,20,0)#">
    </cfelse>
    <CFAPPLICATION NAME="appControl" SESSIONMANAGEMENT="Yes"
    sessiontimeout="#CreateTimeSpan(1,0,0,0)#">
    </cfif>
    But this didnt work because the cfapplication seems to have
    to be at the top before I call the variable SESSION.UID which
    I set on my login page..
    Someone know how to do this??
    Regards
    Martin

    Martin,
    Your code example cannot work because the "session" scope
    doesn't exist until your application scope is defined. So you have
    to handle this manually. Here's how you can get it done. First,
    define your application to the maximum sessiontimeout you want to
    have.
    <CFAPPLICATION NAME="appControl" SESSIONMANAGEMENT="Yes"
    SESSIONTIMEOUT="#CreateTimeSpan(1,0,0,0)#">
    Then, I don't know how you are doing your login
    authentication but when you have authenticated the user, you need
    to define the userid and the most recent activity in the session.
    Also determine your timeout value based on the userid. See example:
    <CFIF IS_AUTHENTICATED>
    <CFSET session.user.uid = form.userid>
    <CFSET session.user.most_recent_activity = now()>
    <CFIF session.user.id eq 1>
    <CFSET session.user.timeout_mins = 20>
    <CFELSE>
    <CFSET session.user.timeout_mins = 1440>
    </CFIF>
    </CFIF>
    Now, all you have to do is check whether the user has been
    idle for too long and kill the session by purging all session
    variables. For example:
    <!--- if user id is defined, this means user is logged in
    --->
    <CFIF structKeyExists(session, "user") and
    structKeyExists(session.user, "id")>
    <!--- check if timeout has expired --->
    <CFIF datediff("n", session.user.most_recent_activity,
    now()) gt session.user.timeout_mins>
    <!--- timeout has expired, kill the session and log the
    user out --->
    <CFSET StructClear(session)>
    <!--- insert your logout code here --->
    <CFELSE>
    <!--- user hasn't timed out, so reset the most recent
    activity to now --->
    <CFSET session.user.most_recent_activity = now()>
    </CFIF>
    </CFIF>

  • CUPS 8.6 - Supporting Multiple SIP Domains on a per-user basis

    Working on a CUPS 8.6 PoC with a customer who currently is running a deployed OCS environment. 
    Users all sign into a single domain internally but have multiple SMTP domains for email as this customer has many different companies they have aquired.
    OCS  is able to support and route multiple SIP domains by specifing the SIP address under AD User settings such that two users both signed into the same OCS server can send IM's to each other even though they have different SIP addresses.  sip:[email protected] , sip:[email protected]
    CUPS on the other hand does not seem to allow this on a per-user basis.  It places every user in the sip domain that the server is a member of.
    The Jabber client allows you to specify a domain but I am not how this is used as the actual user account in CUPS is only ever the one domain and if you try and specify a different domain in the Jabber Connection Settings, it will not allow you to login.
    It is not a big deal for internal communications if everyone is on the same domain, but where it is important is for future B2B IM.  Users need to be able to give out THEIR IM address with THEIR respective domain.
    Does anyone else know for a fact that I will only be able to have one domain per CUP cluster?
    Any thoughts on this design?

    Not sure on the design perspective but as for CUPS Domain, we can only have single domain per cluster. As you have already found out that for any user licensed for CUPS, their IM address would be userid@CUPSDomain
    CUPS does have funtionality of federating with foreign domains such as AOL/GoogleTalk/WebEx Connect.

  • Installed the RDS 2012 Server License per user CAL (5pcs) after not allow over two users remote desktop connection problem

    I have successfully to installed the RDS 2012 Server R2 per user CAL (5pcs) Open License after is found not allow over two users to remote desktop connection on this Server problem, I try to uninstall the license and then (internet on-line & telephone
    call Microsoft Activate Center get the activate key) to reinstall is still same of the result on below problem.
    Select a user disconnect so that you can sign in.
    There are too many users signed in
    User1 Active
    User2 Active
    () Force disconnect of the user

    Hi,
    In addition you can also refer following article for RDL configuration.
    RD Licensing Configuration on Windows Server 2012
    http://blogs.technet.com/b/askperf/archive/2013/09/20/rd-licensing-configuration-on-windows-server-2012.aspx
    Hope it helps!
    Thanks.
    Dharmesh Solanki
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • What is the user exit for automatic account determination in PO

    Hi Experts
       I ned to know  what is the user exit for automatic account determination in PO
    my client needs the document type to defines Account Assignment Category.
    choosen a document type Account Assignment Category is defined automatically.  you can't choose
    a wrong  Account Assignment Category from the drop down list.
    thanks form you help.

    If this is the case than why don't you use the Transaction variant
    SHD0: http://www.mortenhjorthnielsen.dk/Security/transactionvariants.htm
    If you have knowledge of Transaction variant then you can use SHD0 tcode and generate the transaction using default type and give that transaction to user instead of ME21N so they will not have the issue.
    The exact solution for your problem is as follows
    Go to Tcode SHD0 and enter the transaction variant
    In T code field enter ME21N and then enter the ZXXXX or the name you want to keep in transaction variant field and hit create button
    This will take you to ME21N transaction and here you just enter the data but make sure you enter the A/c which you want to default.
    Once you finish system will save this one as a variant
    Every time you hit or enter the pop up screen comes here you just hit enter and whichever data you want to default that you have to select in the Popup by checking the Box
    W content and output only for your case the field XXXXXXXX should be selected for W content and output only
    Make sure you have value 1 in contents field
    If not then restart the variant again and on the ME21Nscreen reselect the invoice field
    Later exit and save (save in the object which you can transport)
    Then from SHD0 transaction select GOTO create variant transaction and here you careate the tcode and use that tcode for ME21N (e.g ZTRAN - For specifix sto)

  • Windows Installer repair issue for per-user folders/files

    Intro:
    I have doubts that this is the right place to ask about this, since this issue has existed for me on many windows platforms, please suggest where this should be forwarded if this is an inappropriate place to ask.
    Please do not be confused by the directory paths for XP, this issue is also true for Windows 7.
    Description:
    Windows Installer does not repair files in per-user directories, such as [AppDataFolder], when initial installation is performed using system account (for example - distributing the package through SCCM or using psexec) and repairing under a user with administrative
    privileges (limited user repair works fine).
    Example.
    .msi installation installs a custom .xml configuration file to "[AppDataFolder]". We're installing .msi by using psexec /s. log output:
    MSI (s) (D8:F0) [15:19:01:214]: Executing op: FileCopy(SourceName=SETTIN~2.CON|customXML,SourceCabKey=customXML,DestName=customXML,Attributes=16384,FileSize=2633,PerTick=32768,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=58982400,HashOptions=0,HashPart1=-1992414570,HashPart2=1238809189,HashPart3=-80616146,HashPart4=146746036,,)
    MSI (s) (D8:F0) [15:19:01:214]: File: c:\WINDOWS\system32\config\systemprofile\Application Data\customXML;
    To be installed; Won't patch;
    No existing file
    MSI (s) (D8:F0) [15:19:01:214]: Source for file 'customXML' is compressed
    MSI (s) (D8:F0) [15:19:01:230]: Note: 1: 2318 2: c:\WINDOWS\system32\config\systemprofile\Application Data\customXML
    When a user with administrative credentials accesses the advertised shortcut repair is run on the component that has the .xml configuration file, event viewer has an entry about this.
    The verbose repair log file shows the following entry:
    MSI (s) (D8:E4) [15:22:27:667]: Executing op: FileCopy(SourceName=SETTIN~2.CON|customXML,SourceCabKey=customXML,DestName=customXML,Attributes=16384,FileSize=2633,PerTick=32768,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=16908288,HashOptions=0,HashPart1=-1992414570,HashPart2=1238809189,HashPart3=-80616146,HashPart4=146746036,,)
    MSI (s) (D8:E4) [15:22:27:667]: File: c:\WINDOWS\system32\config\systemprofile\Application Data\customXML;
    Won't Overwrite; Won't patch;
    Existing file is unversioned and unmodified - hash matches source file
    Limited user repair log reads:
    MSI (s) (78:8C) [15:26:27:406]: Executing op: FileCopy(SourceName=SETTIN~2.CON|customXML,SourceCabKey=customXML,DestName=customXML,Attributes=16384,FileSize=2633,PerTick=32768,,VerifyMedia=1,,,,,CheckCRC=0,,,InstallMode=16908288,HashOptions=0,HashPart1=-1992414570,HashPart2=1238809189,HashPart3=-80616146,HashPart4=146746036,,)
    MSI (s) (78:8C) [15:26:27:406]: File: c:\Documents and Settings\test\Application Data\customXML;
    To be installed; Won't patch;
    No existing file
    Your suggestions will be very much appreciated.

    Hello,
    Did you ever get to the root cause of this?
    I have a similar problem with a custom XML that is reported as "empty or is not a xml file." in the logs.
    Wondered if you had found the root cause?
    Kind regards,
    Sio.

  • ISE 1.2 & AD & Meraki - Per User Group Policy ?

    I am working on a PoC for a deployment in an MDU. We are using Meraki switches and access points. There are 250 units in the building, each unit will have it's own subnet. The goal is to have the tenant be able to connect to a common building SSID and be placed into their assigned VLAN. There will also be physical ports in each unit that will need to do the same. I am trying to figure out a way to use ISE to authorize on a per user basis and not based on groups of users. On the Meraki system there are group policies that will assign the VLAN for the user as well as any type of layer 7 firewalling and bandwidth control. So there will be 250 group policies, one for each unit. There is a deployment guide that shows how to setup ISE for use with Meraki and it is great but it assumes that there will be large groups like Employees, Contractors, etc.. that will be used. This is where I'm being tripped up, also... this is my first swing at a NAC deployment so I have a lot to learn.
    1.Can I setup each user in Active Directory to have a tag that ISE can then forward on to Meraki for the group policy? Say it's unit 101 and I have a group policy called 101 in Meraki, Meraki documentation says to use the Airespace-ACL-Name attribute in ISE to indicate the group policy to use. This gives me the ability to place a group into that policy but not an individual. Or would this be better done by creating the users in ISE directly? Omit AD entirely?
    2. Each unit will have devices that will need MAB because they are not 802.1x compatible. I need to do the same as above with them. I would create a separate SSID for these devices but then use the MAC address to authenticate them but will need to authorize them to go into a specific group policy.
    I know this isn't a typical ISE application but I think that this will work really well in the end, just need to iron out these details and get a test system functioning. Any help would be greatly appreciated!!!
    Thanks,
    Nathan

    Please find the Meraki_ISE integration doc. in attachment.
    When VLAN tagging is configured per user, multiple users can be associated to the same SSID, but their traffic is tagged with different VLAN IDs. This configuration is achieved by authenticating wireless devices or users against a customer-premise RADIUS server, which can return RADIUS attributes that convey the VLAN ID that should be assigned to a particular user’s traffic.
    In order to perform per-user VLAN tagging, a RADIUS server must be used with one of the following settings:
    MAC-based access control (no encryption)
    WPA2-Enterprise with 802.1x authentication
    A per-user VLAN tag can be applied in 3 different ways:
    The RADIUS server returns a Tunnel-Private-Group-ID attribute in the Access-Accept message, which specifies the VLAN ID that should be applied to the wireless user. This VLAN ID could override whatever may be configured in the MCC (which could be no VLAN tagging, or a per-SSID VLAN tag). To have this VLAN ID take effect, “RADIUS override” must be set to “RADIUS response can override VLAN tag” under the Configure tab on the Access Control page in the “VLAN setup” section.
    The RADIUS server returns a group policy attribute (e.g., Filter-ID) in the Access-Accept message. The group policy attribute specifies a group policy that should be applied to the wireless user, overriding the policy configured on the SSID itself. If the group policy includes a VLAN ID, the group policy’s VLAN ID will be applied to the user.
    On the Client Details page, a client can be manually assigned a group policy. If the group policy includes a VLAN ID, the group policy’s VLAN ID will be applied to the user. 

Maybe you are looking for

  • Create EJB 3.0 Message Driven Bean on a Oracle JMS (AQ)

    Hi, I need to develop a EJB 3.0 Message Driven Bean. The MDB has to work on a Oracle AQ using Oracle JMS. Is there any how-to document giving an example about this issue. Can you give an example how to create the JMS destination in OC4J (how to confi

  • ORA-16401: archivelog rejected by RFS

    Hello, here are the logs and initialisation parameters. It is not applying the logs. Am running XXXXP and the standby and the primary are on the same server. Please, I need help. Thanks RFS[1]: Assigned to RFS process 216 RFS[1]: Identified database

  • Having domain name without all the jargon before it.

    If I use iWeb to create my website. Is there anyway that I can ommit this from appearing before my name: http://web.mac.com/irisag/iWeb/irisag/Home.html I was unable to find another person who has iWeb as their webdesign program on Google because of

  • Simple Teststand UI API for LabVIEW

    Like many people I know how painful it is to program a Teststand user interface in LabVIEW. To combat that I have developed a new API which wraps the ActiveX calls into modern object oriented code which follows proper LabVIEW programming paradigms. P

  • 5g or not 5g that is my question

    I already own a 2g and by now its becoming more obvious that its coming to the end of its compatability, although its still in perfect working order Anyway my dilema is this. Is there a new iTouch likely to appear. Ive read in many places that the 4g