Proxy.CFG file

The the revision 30 PROXY.CFG file from Craig Johnson, there appears to
be a duplicate entery for the "enableCacheInVersionDowngrade" switch.
Is this correct, or should one be deleted?
;New parameter from BM3.9SP1. Set this option to allow caching in
proxy ;when browser is set to http 1.1 and web server responds with
http 1.1
enableCacheInVersionDowngrade=1
;New parameter (from BM38SP5_IR1.ZIP) to allow
enableCacheInVersionDowngrade=1

In article <Gh1Km.1589$[email protected]>, Chris Premo
wrote:
> The the revision 30 PROXY.CFG file from Craig Johnson, there appears to
> be a duplicate entery for the "enableCacheInVersionDowngrade" switch.
> Is this correct, or should one be deleted?
>
Typo I missed. You can delete one of them, but it won't hurt to have it
in there twice. I'll try to correct it for rev 31!
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Similar Messages

BM 3.9 Block source and proxy.cfg

Hi All,
With BM 3.8 I used to block some internal computers from browsing by adding a deny access rule. I am trying to get the same rule put in using Imanager on bm 3.9 and it doesn't work. Is anyone else doing this. I add an access rule that has 2 conditions(I want to add one with just one condition for computer name but it won't let me), the first is the source hostname starts with and I put in the computer/dns name I then have to put in a codition for origin server port and I list port 80(I have tried 443 and 8080 also) I select deny access and the computer can still connect.
I can easily block urls and I figured it would be just as easy to block internal computers from going out, does anyone know of an easier way to block computers, I don't use filters at the moment.
Also I was going to use the proxy.cfg file from Craig Johnson but I am not sure if those settings are applicable to bm 3.9
Thanks for any help, has anyone found bm 3.9 to be better than the other versions?
Mike

In article <469B4EB3.2D81.003B.0@nospam_cancercare.mb.ca>, Mike Gerolami wrote:
> can easily block urls and I figured it would be just as easy to block internal computers from going out,
does anyone know of an easier way to block computers, I don't use filters at the moment.
>
Can you block dest=any url, source=pc IP address?
> Also I was going to use the proxy.cfg file from Craig Johnson but I am not sure if those settings are
applicable to bm 3.9
Yes, they are.
>
> Thanks for any help, has anyone found bm 3.9 to be better than the other versions?
Aside from bug fixes to come, and some new VPN features, there is not a great deal of difference in how BMgr
works. Most of the change was in getting rid of NWADMN32, so you can administer BMgr without needing
windows, or client32. There is one useful bug fix in there now, for sure: proxy unloads reliably now.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Proxy.cfg skipAuthForViaHeader parameter

TID 3988333 says:
skipAuthForViaHeader=1 (0 to disable)(Default=0)
// Authentication to proxy bypassed when coming through another proxy.This setting must be configured in the proxy.cfg file to enable proxy to skip the authentication when the request is coming through another proxy.By default, proxy will request for authentication.
This means to me that if I don't want authentication skipped if the NBM proxy is accessed by another proxy, then I would want this set to 0.
Craig, in his Proxy.cfg says:
; New parameter from BM3.9SP1
; =1 prevents authentication from being bypassed when proxy accessed
; from another proxy. (Schools, take note!)
skipAuthForViaHeader=1
I read Craig's note as meaning that if I don't want authentication skipped if the NBM proxy is accessed by another proxy, then I would want this set to 1.
Which is correct?
Dan

Luckily I don't have to deal with those in this environment; just adults that are not too savvy. However, It might be good to include as well just in case.
Thanks, Craig. This is the kind of supporting information that might be useful to administrators so they can see 'why' you want to use the switch; not just what the states of the switch are. Of course I think I am 'preaching to the choir' as you have by far written the most on NBM and provided supporting documentation. Maybe a white paper on Proxy.cfg settings, when they are best used, whether they apply to just the forward proxy or reverse proxy or both, etc would be useful.
I just found out the other day from Gonzalo that the Virus Definition patterns only apply to the reverse proxy. Therefore if I am not using a reverse proxy, I don't want to turn on that switch so I don't incur the additional overhead.
Dan
Originally Posted by Craig Johnson
In article <[email protected]>, Dchunt wrote:
> BTW, this parameter only comes into play if you have a proxy hierarchy,
> right? IE, if you have a large organization and one part of it is using
> a squid proxy then the output of that goes to an NBM proxy then the
> output of that goes to the Internet, right? It doesn't come into play
> if you have a single NBM proxy between you and the Internet, even if
> you are going through the Internet to a site with a reverse proxy at
> the far end, right?
>
I'll tell you when it comes into play... When you have some smart-*ssed
teenager who finds out that without that switch he can run his own proxy
(perhaps off a thumb drive) in a cache hierarchy, and completely bypass
BMgr access rules.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to Craig Johnson Consulting - BorderManager, NetWare, and More ***

Default proxy.cfg

I may have a potential problem at a customer site, the customer running
BM3.9 with proxy enabled. They also have Citrix servers which using
proxy authentication. We used Craig's proxy.cfg and modified it to fit
the customers enviroment and it has been running fine since then.
The other day I was going through the customer enviroment and found
that the proxy.cfg only contained about 20 rows (default one perhaps).
When checking at the server console there were still configuration
settings for terminal servers. So my question is does the server save
the configuration settings and load them if proxy.cfg should be
"zeroed"?
Today the server was rebooted and still all seems to be working witout
the settings in proxy.cfg.
My next question is if it's possible to make a new proxy.cfg from the
actual settings on the running server?
//FCA68

In article <DSRZk.5386$[email protected]>, Fca68 wrote:
> So my question is does the server save
> the configuration settings and load them if proxy.cfg should be
> "zeroed"?
>
If you have no proxy.cfg and load BMgr, I think it does create a raw
.cfg file with a few settings in it.
> Today the server was rebooted and still all seems to be working witout
> the settings in proxy.cfg.
A BMgr server will run without all the extra settings in proxy.cfg.
(Late version BMgrs with patches probably have many of those settings as
defaults now, but not all). But there are definitely some non-default
settings in the proxy.cfg from my web site, and I still recommend using
it.
>
> My next question is if it's possible to make a new proxy.cfg from the
> actual settings on the running server?
>
Well, yes I think it will create a bare minimum one if there is no
proxy.cfg at all, but that does you no particular good. You can only
change those settings by putting entries into the proxy.cfg file, so
saving the proxy would normally only get you just what you started with
when you loaded proxy.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

Mozilla.cfg file is not loading in my 21.0 version; how can I customize deployment?

I need to deploy a customized configuration for a limited access network, and have created a custom mozilla.cfg file. It appears as though mozilla.cfg is not being read. I have intentionally created errors in the local-settings.js file, and it will throw errors (even when it cannot find the mozilla.cfg file). When I create errors in the mozilla.cfg file, however, no errors are thrown and no changes are made to the applications configuration.

Some remarks:
*You wrote 'Try {' with a capital.
*The value of these prefs is a string value and thus requires quotes: lockPref("network.proxy", 192.168.100.1); lockPref("network.proxy.http_port", 8080);
* true/false also need to be lowercase.
toolkit.telemetry.prompted is an integer pref as you can see on the about:config page
* lockPref("toolkit.telemetry.prompted", 2);
Note that you have this line twice:
*lockPref("browser.startup.homepage_override.mstone", "ignore");
<pre><nowiki>
//Firefox Settings
try {
// set Firefox Default homepage
lockPref("browser.startup.homepage_override.mstone", "ignore");
lockPref("browser.startup.homepage","file:///c:/dvinst/ie/localpage.html");
// default proxy settings
lockPref("network.proxy.type", 1);
lockPref("network.proxy.http", "192.168.100.1");
lockPref("network.proxy.http_port", 8080);
lockPref("network.proxy.share_proxy_settings", true);
// disable default browser check
lockPref("browser.shell.checkDefaultBrowser", false);
//lockPref("browser.startup.homepage_override.mstone", "ignore");
// disable password caching
lockPref("signon.rememberSignons", false);
lockPref("signon.prefillForms", false);
// disable application updates
lockPref("update_notifications.enabled", false);
lockPref("app.update.auto", false);
lockPref("app.update.enabled", false);
lockPref("app.update.service.enabled", false);
// disables the 'know your rights' button from displaying on first run
lockPref("browser.rights.override", true);
// disables the request to send performance data from displaying
lockPref("toolkit.telemetry.prompted", 2);
lockPref("toolkit.telemetry.rejected", true);
} catch(e) {
displayError("Mozilla: ", e);
}</nowiki></pre>

Proxy.cfg [Object Cache] section

In the [Object Cache] section of Proxy.cfg I have questions on two parameters:
cut thru no CLH length - The default is 51200 (Proxy Console #63) but Craig's Proxy.cfg sets it to 0. TID 10063926 talks about this but I wonder if this problem isn't fixed in NBM 3.9 SP1 and therefore doesn't need to be set to 0 now? Other TID's (10075563, 10069305 for instance) talk about setting it to 5120. What should be the correct setting for 3.9 SP1?
disk management factor - the default is 400 (Proxy Console #63) but Craig's Proxy.cfg sets it to 4000. Can someone tell me what this does and why it should be set to 4000 instead of 400?
thanks,
dan

Originally Posted by Craig Johnson
In article <[email protected]>, Dchunt wrote:
> [Object Cache]
> dirsBasedOnVolumeSize = 0
> cacheVolumeOnTradiitonal = 1
> purgeVolumeAgressiveMode = 0
> CacheNormalUsage = 85
> CacheNormalUsageValue = -1
> CacheHighUsage = 92
> CacheHighUsageValue = -1
> number of cache directories = 256
> cut thru no CLH length = 51200
> disk management factor = 400
> max hot unreferenced time = 1800
> nax hot nodes = 7000
> size cahce hash table = 262144
>
> I mis-spoke when I said that you had the 'disk management factor' set
> to 4000 in your proxy.cfg. It is not in there.
OK - this is not something that is in proxy.cfg at all. These are
settings in NWADMN32/iManager. For instance, the max hot nodes @ 7000
is a default value that is too low for busy servers. (Recommended is
50000). This sounds like you have not configured the server per the
proxy tuning tid, or my BMgr books.
> It is another
> Proxy.cfg from one of our servers I was looking at. I was hoping to
> find out what its use was, not to mention what the use was for the
> other parameters in this section.
Find the parameters in NWADMN32 (or iMan in BM 3.9) and check the help
there. Also see the proxy tuning tid.
>
> Also, doesn't seem strange that the default for "cut thru no CLH
> length" is 51200 but in TID 3988333 it is set to 0? That's a pretty
> big differernce! This is also mentioned in TID 10063926, FWIW.
>
It seems odd at the moment - I've not really looked into it. I know
that when the proxy.cfg setting came out, it fixed a lot of problem
sites at the time. I've left it at the setting which worked for the
time.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to Craig Johnson Consulting - BorderManager, NetWare, and More ***
Got it, Craig. I did forget to update some of the settings for the Proxy Cache in iManager. I'll leave the cut thru no CLH length at 0 for now.
Dan

Proxy.cfg - Correct setting for ResolveProxyIPAddress

According to TID 3988333 the description of this parameter is "Default behaviour is to send an SSL authentication redirect to a host name instead of a IP address. 0 to disable the same. Requires PXY023 or later."
Also, the default setting in Proxy.nlm is 1. However, in Craig's Proxy.cfg he has it set to 0. I would think you would want this to be set to 1, no?
Dan

OK, I had no idea that that is what this parameter pertained to. Now I see what you are talking about with the BorderManager SSL login as an alternative to Client Trust. We don't use that so that is why I didn't understand.
To me this again proves that we need more documentation on what these parameters are and why you would use them. I would agree with you after hearing more background that it should be set to 0.
FYI, the default for 3.9 SP1 proxy is 1! I wonder why Gonzalo thinks this is preferred?
Dan
Originally Posted by Craig Johnson
In article <[email protected]>, Dchunt wrote:
> Also, the default setting in Proxy.nlm is 1. However, in Craig's
> Proxy.cfg he has it set to 0. I would think you would want this to be
> set to 1, no?
>
If that's what I think it is, no. I think that has to do with how the
SSL login page shows up on the browser. Default would have it show up
with the server name as a URL. Unfortunately, that also means you need
a DNS entry for the server name. The IP address has always worked,
which is why I set that to 0. (It may be that the problems I've seen
with SSL login failing with server name are related to incorrect host
file entries, but I think it was more widespread than that).
I definitely want the ssl logins redirected to IP address by default. I
might go to a URL if I had purchased a 3rd party certificate,
particularly if using authentication with reverse proxy. But I would be
ironing out DNS issues as well.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to Craig Johnson Consulting - BorderManager, NetWare, and More ***

Proxy.cfg IgnoreContent length vs IgnoreContentLengthCheck

In Craig's Proxy.cfg he has both 'IgnoreContentLength' and 'IgnoreContentLengthCheck'. In TID 3988333 and in the default Proxy.cfg settings from Proxy Console Screen 63 it only shows 'IgnoreContentLengthCheck'.
Apparently 'IgnoreContentLength' was used in BM 3.6 (bm36c02 TID 10072012). Are these both the same parameter but only 'IgnoreContentLengthCheck' applies to BM 3.9 SP1?
If not, then what is the difference between the two?
Dan

Maybe that does make sense as 3.9 is significantly different than 3.8 and below. I was just trying to clean things up for my own proxy.cfg so that I knew what the various parameters were for. That is when I came across some of these anomalies. I understand what you were trying to do in terms of making a 'universal' proxy.cfg.
Dan
Originally Posted by Craig Johnson
In article <[email protected]>, Dchunt wrote:
> Apparently 'IgnoreContentLength' was used in BM 3.6 (bm36c02 TID
> 10072012). Are these both the same parameter but only
> 'IgnoreContentLengthCheck' applies to BM 3.9 SP1?
>
Very likely. Which makes it worriesome to remove entries that appear
not to be needed in 3.9, if the proxy.cfg is to be used in other
versions.
I'm starting to think about creating a new version, for BM 3.9 only...
Leave the old one as-is for 3.8 and earlier, and just put in new stuff
for 3.9, with unnecessary settings removed. Should be the best of
both worlds.
Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to Craig Johnson Consulting - BorderManager, NetWare, and More ***

IIS Proxy SAR file needed

Hi all:
   I would like to implement the IIS Proxy SSO solution. Is there anybody can send me the IIS Proxy SAR file ?
   I cannot find it in service.sap.com/patches
   my mail : [email protected]
   I will give you the reward points.
   thanks.

Hi,
To my knowledge IISProxy is not supported/delivered by SAP anymore. See the OSS note 886214 for details. You can use WebDispatcher as reverse proxy and SPNego for SSO authentication. They are supposed to be replacements for what you could do with IISProxy.
So I doubt you will find IIS Proxy inside Service Marketplace. Doesn't mean that you cannot get it anywhere else though.
Regards,
Mike

Problem with Configuration in Production ( ABAP Proxy - XI - FILE)

Hi All,
I have a ABAP Proxy -> XI -> FILE scenario wich is working perfectly in DEV and QAS environment.
When the person responsible for transporting tried to transport the objects in QAS to PRD, the following error happened:
Direction of communication channel |BS_MA_FileServer_PRD | CC_File_PedidosServ_MA_FileServer_IA is incorrect.
Correct the direction or choose another communication channel
BS_MA_FileServer_PRD - Business System (FILE)
CC_File_PedidosServ_MA_FileServer_IA - My FILE Communication Channel
This was what the Basis person sent to me. I don't have access to know exactly what happened. And I really don't know what could be wrong or if maybe a component was created wrongly in Production.
Hope you can help.
Points will be given.
tks.. Daniela

You have mentioned FILE is on the receiving side and ABAP proxy is on sender side.
But the error pasted by you clearly shows syntax of a Sender Agreement .
For receiver agreement it should be |<Sender Service>| |BS_MA_FileServer_PRD | CC_File_PedidosServ_MA_FileServer_IA
Bipin

Can XML Publisher add a digital certificate (cert.pfx) via the xdo.cfg file or do I need to upgrade and use BI Publisher instead?

Hi Guys
I need to add a digital certificate to a clients customer statements and invoices. XML Publisher 5.6.3 has been used originally to design the templates as RTF. I have the following questions please...
1. Can an RTF template be used or do I need to convert it to a pdf template?
2. Can XML publisher even be used or do I need to get the DBAs to install BI Publisher. XML Publisher doesn't even have the signature properties in the admin screens that BI Publisher has.
Below is a copy of the xdo.cfg file which currently does not add the pfx file...
<config version="1.0.0" xmlns="http://xmlns.oracle.com/oxp/config/">
<properties>
 <property name="system-temp-dir">/tmp</property>
 <property name="pdf-security">false</property>
 <property name="pdf-open-password">testpass</property>
 <property name="pdf-permissions-password">testpass</property>
 <property name="pdf-encryption-level">1</property>
 <property name="pdf-no-printing">true</property>
 <property name="pdf-no-changing-the-document">true</property>
 <property name="signature-enable">true</property>
 <property name="signature-pkcs12-path">/app/oracle/product/appldev/apps/apps_st/appl/xdo/12.0.0/resource/digcert.pfx</property>
 <property name="signature-pkcs12-password">testpass</property>
 <property name="signature-field-location">top-left</property>
 <property name="signature-reason">taxreasons</property>
 <property name="signature-signed-at">Cape Town</property>
 <property name="signature-display-style">detailed</property>
</properties>
</config>
Any help will be greatly appreciated.

thanks for the summary of the many posts and threads describing all of these steps.

Is there a way to edit the saved StartCfg.cfg file on a Linksys SRW switch?

I have a SRW248G4 switch that I want to edit the StartCfg.cfg file to use as a template for several new switches. The content of the startcfg.cfg file looks to be binary or mostly binary. Is there a way to get the switch to save and load the file in text format similar to the Cisco switches?
An alternate option is to create a templete config on one of the new switches with all the standard settings, save it, upload that template config to the other new switches and change the things that are different/unique from the web interface. This is possible but will take a lot longer.
Thanks,
Kerry Melcher, CCNP

You cannot edit the library file itself, but you could perhaps edit the XLM file and then import that, basically following the procedure you use when the library file has been damaged:
http://support.apple.com/kb/HT1451
You'll need to be very careful about editing the XML, though, as it's really easy to completely mess up your library if you edit the wrong thing. Make absolutely sure you have backup copies of the original iTunes library file and XML file, so you can put them back just in case something does go wrong.
Hope this helps.

Getting error when testing Proxy to File interface

Hi Guru's,
While I am testing a Proxy to File Interface, using SPROXY transaction i am sending a message from R/3 to PI.
the message showing successful in R/3 Moni,but in PI moni I am getting the following Error..
<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
- 
- <SAP:Error SOAP:mustUnderstand="" xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/">
<SAP:Category>XIServer</SAP:Category>
<SAP:Code area="RCVR_DETERMINATION">NO_RECEIVER_CASE_ASYNC</SAP:Code>
<SAP:P1 />
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText />
<SAP:Stack>No receiver could be determined</SAP:Stack>
<SAP:Retry>M</SAP:Retry>
</SAP:Error>
In this inreface, I am suppose to send the mesasage to only one Target system(ftp server) . i have checked in ID part also,
every thing is clear in ID. Can any body please tell where the mistake might exists...
Thanks in advance..
Regards
Raj

Hi,
No receiver could be found means Check your Receiver Determination. Activate and update cache. Asysnchronous messages can be manually restarted.
have you seen this threads,
NO_RECEIVER_CASE_ASYNC
No receiver could be determined
regards,
ganesh.

Proxy to File using EOIO

Hi Experts,
I have a scenario where I need to send data from SAP to PI so I am using proxy to file scenario. Here i need to send huge amount of data.
In some blog i saw that proxy can handle only some maximum amount of data.(but not 100% sure how much size of data the proxy can handle)
So i decided to call the proxy multiple times by sending only some 'n' no. of records and kept the receiver file adapter in append mode.
The problem here is the data is not appending in the order in which i am sending from SAP. In sxmb_moni the messages were showing the QoS as 'EO'.
Is it possible to change the QoS to EOIO?
Thanks & Regards
Stephen Rouvier

From SAP documentation:
"The sender of a message uses the attribute Quality of Service (QoS) to determine how a message is delivered"
hence ..as the File adapter supports all Qos, the Proxy can be called with Qos EOIO and the adapter will maintain the Qos as requested.
You should how ever try and send the data in a bulk and see how the Proxy handle it.
What is the nature of the data exported and for what purpose?

Why mozilla.cfg file is not working with Firefox 21

<pre><nowiki>//@line 2 "e:\builds\moz2_slave\rel-m-rel-w32-bld\build\browser\app\profile\channel-prefs.js"
user_pref("browser.startup.homepage","https://www.mytest.com");
lockpref("browser.shell.checkDefaultBrowser", false);
lockpref("app.update.enabled", false);
lockpref("browser.rights.3.shown", true);
lockpref("startup.homepage_welcome_url", "https://www.mytste.com");
lockpref("network.automatic-ntlm-auth.trusted-uris", "https://www.mytest.com");
lockpref("extensions.checkCompatibility.nightly", false);</nowiki></pre>

user_pref doesn't work in mozilla.cfg 
Also the proper name of the function is lockPref() and not lockpref().
See:
*http://kb.mozillazine.org/Locking_preferences
These functions can be used in the mozilla.cfg file:
defaultPref(); // set new default value
pref(); // set pref, but allow changes in current session
lockPref(); // lock pref, disallow changes

Proxy.CFG file

Similar Messages

Maybe you are looking for