Referere and Client IP

Hi there,
we have the following problem.
We have an embed-object with a streaming video. We want to
get the some informations about the client with an cuepoint in the
flv. To get the IP and the referer we added clientObj.ip and
clientObj.pageUrl serverside and call it with the cuepoint. This
works great as long as there are just a few clients connected to
the embed-application.
As soon as there are ca. 20 or more connections our logs show
the same referer and ip for different referers and ips. For example
we have an embed-object on
http://www.XXXXXX.com and also on
http://www.ZZZZZ.com. There are
five people on the first and five on the second website and they
all watch the film at the same time. If this happens we reiceive
only ten times the referer
http://www.XXXXXX.com and ten
times the same ip.
Are there any possiblities to get this fixed?
Many thanks in advance!
Tobi

Assuming it really makes sense to restrict on the combination of both (that generally implies that you have other problems-- users having the passwords to application accounts, for example, that allow them to theoretically log in to the database as a privileged application user from their desktop, for example) the simplest approach would be to create a login trigger that checks both the IP address and the username (and whatever else you'd like) and to throw an error if you get an invalid combination. For most situations, that is "good enough". A login trigger won't really stop a determined attacker who can always do things like IP address spoofing to get around your trigger. But it will generally stop Timmy the Developer from logging in from his desktop "just to make a quick fix" rather than going through proper channels.
If you want to spend some money, you should also be able to implement this sort of policy using Database Vault but that's another product to license and install. If you're trying to lock down privileged user accounts (i.e. DBAs) or your policies get more involved or you need to defend against determined attackers rather than misguided users, it may be worth looking in to.
Justin

Similar Messages

Try to use one comupter as both server and client

Hello, everyone, I am just trying to use my own computer as both server and client to test some codes about networking. For example, use the sample code in java tutorial which is used to test Echo server(code is listed below). Is there anything I have to do to set my computer, such as set my hostname or something like that?
I am a pure newbie. And the purpose of this question is to test some code including socket on one PC without connect to internet.
I have tried to change the name "taranis" in the following code to the computer name of my own PC, but it doesn't work, and said: Couldn't get I/O for the connection to: (my computer name).
import java.io.*;
import java.net.*;
public class EchoClient {
public static void main(String[] args) throws IOException {
Socket echoSocket = null;
PrintWriter out = null;
BufferedReader in = null;
try {
echoSocket = new Socket("taranis", 7);
out = new PrintWriter(echoSocket.getOutputStream(), true);
in = new BufferedReader(new InputStreamReader(
echoSocket.getInputStream()));
} catch (UnknownHostException e) {
System.err.println("Don't know about host: taranis.");
System.exit(1);
} catch (IOException e) {
System.err.println("Couldn't get I/O for "
+ "the connection to: taranis.");
System.exit(1);
     BufferedReader stdIn = new BufferedReader(
new InputStreamReader(System.in));
     String userInput;
     while ((userInput = stdIn.readLine()) != null) {
     out.println(userInput);
     System.out.println("echo: " + in.readLine());
     out.close();
     in.close();
     stdIn.close();
     echoSocket.close();

Did you write the EchoServer and start it on your
machine, listening on port 7?
You can have the client and server running on the same
machine or different machines, but they have to be
separate pieces of software.
Write a separate EchoServer class that starts up and
listens on that port. Then start the EchoClient and
make the connection.
%yeah, I didn't wrote the EchoServer class. But I thought it is automaticly included and therefore has run once I start my computer.
If I write a EchoServer class, then how should I set the host name of the EchoClient, just simply change "taranis" to my computer name (change "echoSocket = new Socket("taranis", 7);" to echoSocket = new Socket("(my comptuer name)", 7);"?

MDOP 2013: App-V 5 SP2 Application Publishing and Client Interaction Guide Now Available

Hello App-V forum users,
Do you want to understand the details of how App-V publishes and runs applications? See
this Springboard Series blog post, which describes the newly available App-V 5 SP2 Application Publishing and Client Interaction Guide.
Enjoy!
-Tony
IT Pro Audience Manager for Web Forums

Hello,
I am truely confused by how you are attempting to achieve things.
1. The Office 2013 package is only supported if deployed globally
2. AppLocker is the way to restrict users from starting different applications
3. Office 2013 is not supported to be published to users
It seems you have issues with #3. Which is not supported. I am not saying it "doesn't" work, but considering you have issues with it - perhaps we can start by not doing it?
Ok, so what do we have left;
Per your statement, Office 2013 is published globally. Ergo, all shortcuts and applications should be available to all users.
Is this true?
Nicke Källén | The Knack| Twitter:
@Znackattack

Can i use same Server for server side and client??

Hi,
i m developing webservices in java and using two different server for server side and client.
e.g. i m using one tomcat server on a machine to run webservice and again using one more tomcat server on client side at different machine.
and hence it need two tomcat server.
But i want only one server to run webservice and client.
So please help me out...
Thanks

Hi,
It is always recommended to maintain different servers
REgards,
Ravi.

What is the difference between ojvm and client versions?

Changing the java vm from client to ojvm result in the following error:
Errormessage:
java.lang.UnsatisfiedLinkError: no UniqueC in java.library.path
Project Settings -> Configurations -> Development -> Runner -> Virtual Machine -> ojvm FAILS
Project Settings -> Configurations -> Development -> Runner -> Virtual Machine -> ojvm      RUNS OK.
Project Settings -> Configurations -> Development ->Paths ->Additional Classpath:
C:\jars\xerces.jar;C:\jars\UniqueC.dll;C:\jars\log4j-1.2.8.jar
What is the difference between ojvm and client versions? How can I make ojvm to find UniqueC.dll?
Various version info:
Output from program:
java version:1.4.2_01
java home:C:\programfiler\JAVA\2sdk1.4.2_01\jre
java vm version:9.0.3.738 cdov
Taken from JDeveloper Help About:
Oracle IDE     9.0.3.10.35
UML Modelers Version     9.0.3.9.4
Business Components Version     9.0.3.10.7
java.version     1.3.1_02
java.vm.name     OJVM Client VM
java.vm.version     9.0.3.738 o

However, Adobe offers extra paid services to create PDF or to export PDF to other formats. You are not required to buy them, however.

Client dependent and client independent in ALE

I am going through pdf learning of an ALE scenario,i couldnot get wat is meant by client Independent and client dependent.
How can i conclude
Create message type (WE81){color:green} Client independent {color}
To create a new message type, follow these next few steps:
u2022 Enter transaction WE81 (ALE -> Extensions -> IDoc types -> Maintain message type for intermed. Structure -> Create logical message type)
u2022 Choose Create logical message type by double clicking on it
u2022 Click on change icon to enter change mode
u2022 Click on New entries to add a new type
u2022 Enter the required message type, in our case it is ZINVRV and an appropriate description
u2022 Save and exit.
Your message type has now been created. The next step will be to link it to the IDoc.
2.2.1. Link message to IDoc type (WE82 & BD69) {color:green} Client independent {color}
To link the message type to the IDoc type follow these next few steps:
u2022 Enter transaction WE82 (ALE -> Extensions -> IDoc types -> Maintain message type for intermed. Structure -> EDI: Message Types and Assignment to IDoc Types)
u2022 Click on change icon to enter change mode
u2022 Click on New entries to create the link
u2022 Enter the message type ZINVRV and the BasicIDoc type as ZINVRV01
u2022 Save and exit
u2022 Enter transaction BD69 (ALE -> Extensions -> IDoc types -> Maintain message type for intermed. Structure -> Assign message type to IDoc for ALE)
u2022 Click on change icon to enter change mode
u2022 Click on New entries to create the link
u2022 Enter the message type ZINVRV and the BasicIDoc type as ZINVRV01
u2022 Save and exit
Your IDoc is now linked to your message type. We still need to link object types and add the message to the model before we can use the message.
2.2.2. Maintain object type for message type (BD59) Client independent
The ALE objects are used to create links between IDocs and applications objects, to control the serialisation, to filter messages in the customer model and to use listings.
For our own message type and IDoc you must maintain object types for the links.
If you want to check the serialisation for the message type, then you must maintain object types for the serialisation. If no serialisation object has been maintained for a given message type, then the serialisation will not be checked for this message type.
To add an object type to our message type, follow these next few steps:
u2022 Enter transaction BD59 (ALE -> Extensions -> ALE object maintenance -> Maintain object types)
DOC NAME: ALE_SCENARIO_DEVELOPMENT_PROCEDURE
Version 1 Page 6 of 16
ALE Scenario Development Guide
u2022 Type in your message type ZINVRV and press enter
u2022 Click on New entries
u2022 Enter your object type, LIFNR (We need to use the vendor as a filter object), the segment name where LIFNR resides, Z1INVRV, a number 1 for the sequence followed by the actual field name LIFNR
u2022 Save and exit.
You have now created an object that weu2019ll use as a filter object in the customer model to direct the flow of messages to the various logical systems based on the vendors in the filter of the message type ZINVRV.
We now need to add our new message type to the distribution model.
2.3. Configuring the Distribution Model
This task is performed on your ALE reference client.
2.3.1. Manual Configuration (BD64) {color:green} Client dependent {color}
To manually configure the customer distribution model, read the ALE configuration procedure, and follow these steps:
u2022 Perform the Maintain customer distribution model directly function. (ALE -> Distribution customer model -> Maintain customer distribution model directly)
u2022 Specify the customer model you want to maintain and the logical system that is to be the sender of the messages OR create a new model. (Create model ALE with logical system ALELS1C400)
u2022 Choose the receiving systems to which the sending system must forward message type ZINVRV to.
u2022 For each receiving logical system allocate the message type necessary for communication to the receiving systems as per ALE configuration procedure.
u2022 Create filter objects (in our case LIFNR as the object type with the associated vendor number, 0000018001 with leading zeros, in the object area) for the message types.
u2022 Save the entries.
Refer my query within color:green
Edited by: aditya sharma on Jul 14, 2010 12:57 PM
Edited by: aditya sharma on Jul 14, 2010 1:01 PM

A client is an independent business unit within an R/3 System, Data in the R/3 are classified as cleint-Dependent and client-independent.
Client-independent data such as ABAP Programs, R/3 repository objects throught the entire system. Other data is client-dependent. meaning, it can be viewed from one client. Cleint-dependent data includes customizing application and user data.
Eg.
Scripts are client dependent, means the changes done to SAP scripts in particular client will not be reflected in other client.
Smartforms are client independent, means changes done in one client will be reflected in all the clients.
Server : ECC6
Client : 100 , 200 , 300 , 400
Now suppose you have developed report in DV server client 100.
Then you will be able to see that in all clients.
Hence this is called as client independent. You can change anywhere and changes will be reflected to all ...
Now suppose you have developed a script in DV client 100.
You will not be able to see that in client 200 or 300 or 400 unless ytou copy that from client since it is client dependent.

Ags_work_incident_create_app - Unable to maintain system and client

Hi,
When creating a support message from the Incident work center, the fields system and client are greyed out and thus not maintainable.
I have no problems creating support messages using the SAPWEBGUI or through transaction NOTIFCREATE, it is only when using the work center. I do not have any other issues in the workcenter, I can display and change support messages.
I have check the security settings and run a security trace which did not come up with anything.
Any advice as to why these fields are greyed out would be greatly appreciated.
Thomas

Authorization problem, issue solved.

Post-install of SSM 4.0 and client-copy

We finished the installation of Sol. Man. 4.0 on a linux/oracle platform. At what point in the post install do we do the client copy of client 000 for data and client 001 for users to a new client? Before, during or after all the img config in 000?
thanks in advance,
Steven McElwee, Duke University
PS- Sap's install docs for SolMan 4.0 leaves much to be desired ...

Well, we had a chicken-and-egg issue here. Let me explain. By default, the SSM 4.0 SR2 install is at SP9, which gave it a somewhat simpler IMG. However, we gave in to the temptation of installing SP11 since this SPs were obtainable without Maintenance Optimizer, which gave us a more complicated IMG which includes, at some point, the client copy as mentioned above. We went through most of the IMG resulting from SP11 until we had Maintenance Optimizer working and then downloaded SP12.
I am in the process of installing the ABAP SP12 packages now and plan tomorrow to deploy the JAVA SP12 .SCA files. The IMG looks better and less confusing at SP12 than at SP11 or SP9. I think this calls for another IMG pass.
The $100 question - which parts of the IMG need to be done in client 000 and which to do in our client 100 (copied from client 000 after SP11 was applied). We are really confused on this point. If anyone can shed some light on this, i would very much appreciate it.
Sincerely,
Steven McElwee, Duke University

No F4 value for system and client field for create job request

Hi,
While creating a job request in Solution manager system filed and client filed F4 is not working , it does not show any value.
Do you have any idea regarding this issue.
Thansk & Regards,
kaushal

Hello Kaushal,
you habe to link user, key user i.e. a business partner (BP), and managed system and this work like this:
a) User <-> BP: start transaction BP, assign role Employee to your business partner and enter the user name on tab Identification
b) BP <-> managed system: start transaction BP, select role General and enter the External System Identifier (format: <managed system ID> <installation number> <client> <user in managed system>) on tab Identification
Alternative: Use transaction BP_GEN to create valid business partners for managed systems
See also the Solution Manager Implementation Guide (IMG):
-> transaction SPRO
.> SAP Solution Manager Implementation Guide
-> SAP Solution Manager
-> Cross-Scenario Settings
then
-> Business Partners
and
-> iBase
(Note that IMG path (and labels) might vary in between support packages)
Kind regards,
Martin
http://service.sap.com/jsm

Service Desk: System and client missing when creating a message.

Hi Experts,
I would like to find out if anyone has encountered this problem before. The system and client fields were blanked out and I am unable to select/create the system when creating a message. Thanks!

Hello Wein,
If the system/client are grayed out in the workcenters, it is because when creating your BP you've probably created it only for a single system/client. Try to update your BP with another system (tx. BP_GEN).
Hope this will help.
Regards,
Stéphane.
Oups didn't see that the question was marked as answered...
Edited by: Stephane BUSTARRET on Aug 5, 2010 2:40 PM

Business System and Client

Hi
I checked many treads and still I couldn't get a satisfactory explanation to the difference between Business System and Client. I read in help.sap site that multiple business systems can be assigned to a single technical system and also each numbered client of an SAP system is a Unique Business System ? So are client and business system one ? If so why use it interchangably ? And if many business systems can be assigned to the technical system how do we specify a related Integration Server ? As I understand only one Business System can be assigned Integration server. So if we assign many business systems to one technical system then how can we have related Integration server for all ? I couldn't get a satisfactory explanation to this doubt in any thread in this forum
Midhun

>>each numbered client of an SAP system is a Unique Business System ?
It could be. But it is not necessary that each client of SAP system is communicating with PI. If it is then there will be one Business System for each client.
>> So are client and business system one ?
No. Client is more substantial category in SAP system. Business system just defines the logical name to these clients if they communicate with PI.
>> If so why use it interchangably ?
Actually they can't be used interchangably always. The only relation is that for each client of SAP system, there could be only one Business system.
>>And if many business systems can be assigned to the technical system how do we specify a related Integration Server ?
For related Integration Server name, you need to select the PI Business system name which would communicate with your business system. For a single SLD scenario you will see PI Dev, Q and Prod business systems.
>> As I understand only one Business System can be assigned Integration server.
Correct. Its a PI Business system.
>> So if we assign many business systems to one technical system then how can we have related Integration server for all ?
For all Business systems of 1 technical system, you need to select the same PI Business system name.
Regards,
Prateek

Adding system and client specific TMS approval steps

Hello,
In defining QA approval steps, how to define a step which is not system and client wide?
When adding a new step, it is automaticaly defined with * in the client and system fields, and when changing the steps, these fields are not editable. However, there are several approval steps for which a specific system and client are entered, but this was done by a consultant, who was here some years ago.
Does anyone know how to do this?
Thanks in advance,
A

Hi Aleksandra,
Did you ever find a solution to this issue. I too have multiple QA systems in our landscape (4 system landscape), and yet I can not defined system/client specific approval procedures in STMS.
The system and client options don't even appear when I go into change mode, yet table TMSQASTEPS has the options available. Direct table update works fine, but it would be nice to know the "SAP standard" way of doing this.
Cheers
Shaun

ISE 1.0 Posture and Client provisioning

I've configured 802.1x with dynamic VLAN for users and MAB for phones - it works fine. Now I wanna to implement client provisioning and posture validation for users. After reading ISE user guide there are still several big questions:
1. Is it possible to combine 802.1x and posture? (it was not recommended with NAC)
2. How can I bind existing 802.1x authorization profile and posture policy?
3. What is a switch configuration for client provisioning to work(redirect, quarantine zone, download NAC agent)?
4. Do ISE posture and client provisioning have L2 virtual gateway, trusted and untrusted ports, as in NAC?

With ISE you can perform 802.1x first and after that optionally you can perform posture. This is done with Radius, that's why it's really and completely out of band, and there's no such concept of trusted or untrusted port because the traffic is never inline.
Still, with ISE you have another option of "inline Posture", in which there's trusted and untrusted ports. I guess that's for some specific cases in which you can't go out-of-band.
On the other hand, so called "out-of-band" NAC was really always an inline solution, only after the user has authenticated and security policies have been verified then the user goes "out-of-band".

[jsr82] can a j2me app be a Bluetooth server and client role in parallel?

I want to make my j2me app register a special service channel and listen to it, meanwhile, I also want to start a client to connect to other handset which has the same services. In Bluetooth protocol side, this is obviously OK, but in J2me is this design possible? some people said that in jsr82, the Bluetooth device is exclusive for J2me app, app cannot be both server role and client role at the same time. Can anybody give me a definite answer?

No this design is not possible with JSR 82. Because when the device acts as a server it can't be used as a client as whenever you will run the client code the server mode will disappear.
But what maximum you can do is when you need the client to run close the server and switch into the client mode but I think you don't need this solution.
Shan!!!

[vmware] Best way to share files between host and client

Good afternoon!
I have successfully installed VMware server on my machine and set up a virtual machine, powering Windows XP for study issues (emulation via wine does not do the trick for me). The virtual machine runs fast and stable but does not meet my requirements unless I have two issues faced:
First:
How to access a USB pendrive monunted by the host system properly within the client?
Second:
What is the best way to share file system space between host and client? Should I set up a Samba share which is accessible for both host and client or is it save to grant my VM access to my physical hard disc as a whole (using it as a partition)?
Thanks for answers in advance, I have still quite a lot to learn, when it comes to VMs.
Regards,
~cg

Do not setup your VMware to be able to access your physical disk as a whole. This would have you mounting the filesystem twice, corrupting it in the process.
You /can/ setup VMware with Sharing Folders that lets you share your filesystem (either / or just /home or something else) and that is what I would recommend.
As for accessing the pen drive from both operating systems at once, I'd say use the same Sharing Folders method. I always share /mnt so that I can access my cdrom/USB/etc from the vmware OS.
The sharing folders is basically the same as a samba share, but uses vmware's own method (HGFS). Samba is more secure (if you are worried about your VMware OS breaking from it's shell and attacking your real filesystem, which is unlikely). You need the vmware tools installed to make use of it.

Referere and Client IP

Similar Messages

Maybe you are looking for