Remove an ACL
Another thread about Disk Utility Verify Permissions and the "ACL found but not expected on ..."
But I have not seen this particular question. Other posts have been about scanning a volume or fixing entire directory structures. I only have 13 such "errors". It would seem the least risk approach to fixing these would be one at a time. I view broad disk operations as risky.
Based on poking around it would seem that this command from terminal would do the trick. But I really do not know unix commands.
sudo chmod -N private/etc/apache2/http.conf
Before I trash my disk or something, I thought I would ask. Would this do it? Is there any risk in this? I know I could just ignore those messages, but . . .
I found my other messages in that list, but not the ACL found but not expected ones. I have read elsewhere that the ACL messages are not an issue, but I have not seen such a statement from Apple.
I had visited that page before posting the question.
And maybe ignore the messages is where I will end up, but I thought I would see what others have to say. Thank you for posting.
Similar Messages
-
Acl Entry is not removed via KM API
Hi,
I want to update or remove an ACL Entry for a user on a certain resource.
For ex. If for a resource A, User "User1" has READ permissions, now if I want to remove these read permissions for user "User1" on this resource A, I am not able to do so using KM API.
The code which i am using for this is
resourceInfo is of Type IResource.
// Get the Acl Security manager.
IAclSecurityManager aclSecurityManager = (IAclSecurityManager) returnResourceInfo.getRepositoryManager().getSecurityManager(resourceInfo);
// Get the resourceAcl manager.
IResourceAclManager resourceAclManager = aclSecurityManager.getAclManager();
// Get the resource Acl
IResourceAcl rACl = resourceAclManager.getAcl(resourceInfo);
Here i am not having any method which remove the Acl entry for the specific user ex. "User1".
Edited by: Lokesh Malik on Nov 13, 2008 9:57 AM
Edited by: Lokesh Malik on Nov 13, 2008 12:13 PMHI Lokesh,
this might help,
https://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/1070413a-29e7-2a10-cc81-cdc92cdd231b
but you have to take into account that the resource can inherit the acl from the folder, so
if the ResourceAcl is null, you can create an acl and assign the permissions you want for the resource.
IResourceAcl ra = ram.getAcl(resource);
if(ra == null){
//"inherited permissions from the folder";
// instead of taking from the folder
//ra = ram.getInheritedAcl(resource);
// create your own acl
ra = ram.createAcl(resource);
ra.addOwner(resource.getContext().getUser());
// or whatever you need for this resource....
ra.removeOwner(<IUMPrincipal>);
Hope this helps
Regards
DV -
How can I safetly remove the contents of the hidden volumes folder?
I have 149GB of backedup data eating up my laptop's hard drive space (300GB). I want that space BACK! But I'm afraid that I'll jack up my system even worse if I go in there and start deleting files.
Here's the my story...
I tried many times (unsuccessfully) to get Time Machine to work with my external WD Mybook Mirror Edition Hard Drive. It was work initially but then fail to backup and it wouldn't even really give me a reason it would just say that it was unable to back up to the drive. So I gave up, turned time machine off and tried to drag what files had been backed-up by Time Machine from my external drive to the trash. That's where my problems multiplied.
As you may know Time Machine puts some niffy locks on the files. Even holding down the option key while dragging the files didn't seem to fix things. So after doing some poking around I found this thread on the internet which showed me how to remove the ACL associated with the backup files so that they could be removed.
http://forums.appleinsider.com/showthread.php?t=80598
I preformed the following command line on my drive:
sudo fsaclctl -p /Volumes/<yourVolume> -d
Then I dragged the backup files to the trash (using the option key) and eventually the files were deleted. At least they weren't showing up on my external drive anymore.
I thought that I was in the clear, but then yesterday I got this stupid your scratch disk is full warning while trying to use Photoshop. SO I took a peak at my local disk and discovered that I only had 45MB left on a 300GB drive. I quickly went through all of my folders in the finder looking at how much disk space they were taking up. It didn't add up. There had to be some files that the finder wasn't showing me. So did some more research online and came across this little gem:
http://www.thexlab.com/faqs/maintscripts.html#Anchor-Manually-49575
And so I executed this command to manually perform Mac's maintenance scripts:
sudo periodic daily weekly monthly
This took a while but had no effect. A few hours later, I came across this utility on the internet:
http://www.omnigroup.com/applications/omnidisksweeper/
According to OmniDiskSweeper I have 149GB of files in a hidden "Volumes" folder. After looking at the files, it's pretty clear to me that I'm looking at the backups from either Carbon Copy Clone, or Time Machine (Guessing the Later). I have CCC setup to backup to the same external drive mentioned earlier, but I stopped this process when I realized that I had more files on my local drive than I should have.
*So back to my original question. How do I nuke these freaking files without breaking anything. Thanks.*Niel,
Thank you for the response. I did as you suggested, and it worked. I had a few hiccups along the way:
1. Option + Dragging the files to the trash didn't work alone. I had to unlock the files:
$ chflags -R nouchg /myfiles
2. My external drive was mounted with a number after it. So I tried to eject it and it gave me some crap about it being in use (Even after I quit everything). So I shut my machine down, Disconnected the USB cable, Restarted and then reconnected the external drive. It now shows under volumes without the number after it.
Thank you for the help.
Message was edited by: strayhand -
Not able to move/rename folders despite ACL settings
I'm having a maddening issue with a Mini server running 10.6.8 (all updates installed, configuration imported from a 10.5 XServe, recently did a full reinstall of the OS due to some odd behavior and Server Admin errors/slowness).
It is sharing a few volumes on an external drive via AFP and SMB, with relatively simple permissions configured via ACLs. For practical purposes, users are in two groups: Staff and Bookkeepers (I'm simplifying names, but they're not the stock system groups). All employees are in the Staff group, a few are also in the Bookkeepers one.
A couple of folders on one share have "deny : full control" set for the Staff group, and "allow : full control" set for the Bookkeepers group above that. The intent is to allow bookkeepers access to the folder, and not general staff.
This has worked as expected for years.
Then, for no readily apparent reason, a few days ago some users lost the ability to delete folders they created within the restricted folders (other folders on the share were fine). I spent a while going around as to why this was, eventually deciding that something was wrong with either the ACLs or the groups themselves.
My final solution was to completely remove the ACL from the restricted folder via the command line, then delete both groups, create two new groups, NewStaff and NewBookkeepers (with new GIDs and shortnames), then re-add the correct ACL to the restricted folder, and propagate permissions down (done with Server Admin and Workgroup Manager, latest versions, running on a 10.6.8 workstation). I also rebooted the server and cycled AFP.
Now the problem is only slighgtly different:
Within those restricted folders, users can create new folders, but cannot rename or move any existing or newly-created folders, although now they CAN delete either. The "Effective Permissions" browser in Server Admin shows my user as having full permissions for the folder in question to do everything, I've logged out and back on to make sure it's not a cache issue, and I've run out of ideas short of an OS reinstall.
The command line says the Bookkeepers group has the following permissions for one of the folders within a restricted directory, which I cannot rename or move:
inherited allow list,add_file,search,add_subdirectory,delete_child,readattr,writeattr,readextat tr,writeextattr,readsecurity,writesecurity,chown,file_inherit,directory_inherit
versus this for a folder I CAN edit, outside one of the restricted folders:
inherited allow list,add_file,search,delete,add_subdirectory,delete_child,readattr,writeattr,re adextattr,writeextattr,readsecurity,writesecurity,chown,file_inherit,directory_i nherit
...the notable difference in there being lack of "delete" permissions on the problem directories. Which is bizarre, because that group is set to "full control", and I CAN delete it--just not move or rename. (Perhaps that's the "delete_child" of the parent directory allowing me to do that?)
(Unix permission is: rwxrwx--- admin admin Others)
Notably, when directly accessing the server, the Finder also suffers from this problem--if I try to move a folder, I'm prompted to enter an admin password before I'm allowed to, so the issue isn't restricted to just AFP. I just can't figure out where the weird permission is propagating from, or how to get rid of it.
What the heck is going on here? Any suggestions on how I might try to fix it? I'm about to upgrade to 10.8 Server, and if that doesn't work reformat the external RAID array, which will be a huge pain.This is really an OS problem as it sets permission levels for operations. What OS?
If using Win OS and an external drive, you can start Bridge by right clicking and choosing "run as administrator". -
Error code -50 ACL permission duplication
Hey there. It seems SL server and possible OSX has an ACL permission duplicaion bug. I believe it to be fixed in 10.6.8, but am unsure. I havent been able to test yet and had to send a script I made to a company to temporarily fix this issue, until I can upgrade their servers/clients.
The problem seems to happen (at least with this one company I work for) that when you copy files to and from the server, the server does not remove any acl permissions and simply adds them on top of the already existing ones. This ends up with a huge list of the same person having permissions for the file. Eventually Finder is unable to deal with this and you will receive and error
"The operation can't be completed because an unexpected error occurred (error code -50)"
http://support.apple.com/kb/TA20831
I have made a simple drag and drop script to fix this issue. If you are encountering this error with a folder or a file. Just drag the file onto this app. It will remove all ACL permissions from the file, thus allowing you to copy the file to the server share. Eventually the server will pack on the permissions again, so you will have to do it again, but as I said before I think this issue is fixed in 10.6.8.
You can avoid this error by minimizing your actions between the shares and you computer.
Here is the apple script.
http://www66.zippyshare.com/v/75827359/file.htmlWelcome to Apple Discussions!
This is usually an input/output error. It could be the interface of the hard drive needs resetting, the wire needs replacing, or the drive case needs a new firmware update. See my FAQ here:
http://www.macmaps.com/firewirebug2.html -
ACL - how to (easily) deny access to everthing but home directory
I was trying to set up a very restrictive drop box for users to leave and take files from. I set up a special USER and then thought I could use the ACL's to deny access to the system except for the home directory. From reading the documentation I tried the following
1) at the root level I denied read/write access for USER
2) at the home directory I allowed read/write access for USER
and then I tried to 'remove inherited' ACLs. I can't seem to get this to work. USER is always denied. Any help appreciatedNever mind. I figured out how to do this from the command line using chmod +a to do multiple directories at once. I still don't know why the top level ACL wouldn't propagate to the lower directories but once I did this on the /* directories everything was fine.
-
ACL group permissions not propagating
I have a group of designers that are connected to X Server running Snow Leopard.
I have placed them in a group, "MarComm"
I have granted everyone full read/write access. ( I can trust them all)
I have tried to propagate these permissions..I saved the changes and restarted server.
For some reason there are 2 sets of permissions.
1) full access (desired configuration)
2) "custom" access
This "custom" access does erratic things..for ex:
Allows the designer to pull off a job folder containing 12 items. He has permission to use 8 items, but not the remaining 4.
Perhaps I need a step by step tutorial on how to create a proper "group" and to propagate permissions. I understand that the ACL should take precedence over the POSIX. I am not well-versed in using the terminal, but I am a careful person, and willing to try it.
Thank you in advanceSetting up groups in WGM is pretty fool proof. What I would try first is to remove all of the ACL's for the folder in question first.
Ensure that all of the files and folders within your folder have ACL's that can be removed. If not, then you'll have to clear the ACL's on each, one at a time.
The command to clear the ACL's from a folder and it's subfile and folders looks like this:
sudo chmod -R -N /path/to/folder
If you want to just remove an ACL from one file or folder, remove the -R from the command.
To write an ACL and have it apply to all folders within looks like this: (two commands, one to add read and one to add write permissions)
sudo chmod -R +a "groupname allow read" /path/to/file/
sudo chmod -R +a "groupname allow write" /path/to/file/
HTH!
-Graham -
Leopard client, Tiger server & ACLs
I've been reading many discussions on improper ACL settings due to a Tiger client being upgraded to Leopard. I'm having a similar issue, just a different setting. I'm using a Tiger server and did a fresh install of Leopard on all the clients. Everything so far has worked beautifully for the last few weeks. Today I just having a problem with ACLs that are in place from the Tiger server on a shared drive. For example, if there's an ACL that states a particular group has Full Access to that folder, it seems to work but I still have the "You have custom access" and an "unknown" user in the Get Info in Leopard's Finder. If I remove that ACL and make that group the actual Group of the entire folder, it recognizes that perfectly and I seem to have no problems. (By the way, it only started really becoming an issue with FileMaker Pro DBs. Sometimes they couldn't open, and if they did halfway through they would stop saving.) Anyone have any thoughts on how to manage this. We don't have any particular reasons to upgrade to Leopard server yet, besides potentially this issue, so I'd rather not spend the money if I don't have to.
ThanksYou could try running the Terminal command recommended by Apple on the client machines:
http://docs.info.apple.com/article.html?artnum=307128
That might take care of the problem.
Francine
Francine
Schwieder -
ACL found by repair permissions
OK, here is what we have. Macbook 1 died. Macbook 1 was on Time Machine. Did a restore from Time Machine to MacBook 2. Every since then, when I repair permissions the following comes up:
Repairing permissions for “Macintosh HD”
ACL found but not expected on "private/etc/apache2/users".
Repaired "private/etc/apache2/users".
ACL found but not expected on "Library/Preferences/Audio".
Repaired "Library/Preferences/Audio".
ACL found but not expected on "System/Library/Keychains/X509Anchors".
Repaired "System/Library/Keychains/X509Anchors".
ACL found but not expected on "private/var/db/launchd.db/com.apple.launchd".
Repaired "private/var/db/launchd.db/com.apple.launchd".
ACL found but not expected on "private/var/yp/binding".
Repaired "private/var/yp/binding".
Permissions repair complete
My question is: How do I remove the ACL?
Repair permissions, Disk Warrior, TechTools Pro do not repair.
I would imagine that some place in the "man" pages this information could be found, but I sure cannot find it.
Thanks.
Steve HFirst of all, I should point out that I think I understand that these messages are OK to ignore.
Second, I ran your/Kappy's Terminal command suggestion and now the message I should ignore and gone. (yippie) Many thanks to the Florida contingent.
My point is, why should you keep getting the same message, over and over if you should ignore them? If we should ignore them, stop showing them to us. It drives some of us crazy. And for some of us, it's a very short drive.
If you shouldn't really ignore the messages, then either actually do something to address them, or tell us what to do. Which hopefully for most it's not running Terminal commands.
The other thing is, Disk Utility does say it repaired something.
Repaired "private/etc/apache2/users".
Did it really repair something?
If so, why does it constantly repair the same reported issue, over and over?
It appears as if it didn't really repair something.
I'm not trying to be a pain on this issue. lt's just that it seems this is how Disk Utility has worked for some time. I've always wondered why someone at Apple doesn't do something about it.
It's like the old joke, "Doctor it hurts when I do this."
Doctor, "Dont' do that."
Either way, thanks. -
Restrictions ACL for Wireless AP to WLC in HREAP Desgin Setup
Hello, Everyone I have Wireless HREAP setup in which the Wireless LAN Controllers (WLC) are located across the WAN in DataCenter while the Wireless Access Points (AP) are located within the branches, so setup is fine but as security requirement mandates that the APs VLAN in the branch should be restricted from accessing any thing except neccessary communication to WLC across the WAN so on the interface VLAN assigned for the APs in the branch i Applied an inbound ACL as below and it works fine but after some times my be days i found that the Access points are not present in the WLC GUI and it will appear only if i removed the ACL...............So question here what else is missing in my ACL which is neccessary for AP communication to WLC?
Extended IP access list HO_AP_Restrictions
10 permit udp any host (WLC 1 IP) eq 12222
20 permit udp any host (WLC 1 IP) eq 12223 (58563 matches)
30 permit udp any host (WLC 1 IP) eq 5247
40 permit udp any host (WLC 1 IP) eq 5246 (58563 matches)
50 permit udp any host (WLC 2 IP) eq 12222
60 permit udp any host (WLC 2 IP) eq 12223 (22270 matches)
70 permit udp any host (WLC 2 IP) eq 5247
80 permit udp any host (WLC 2 IP) eq 5246 log (22270 matches)
90 permit udp any host (ap-manager 1 IP) eq 12222
100 permit udp any host (ap-manager WLC 1 IP) eq 12223
110 permit udp any host (ap-manager WLC 1 IP) eq 5247 (440902 matches)
120 permit udp any host (ap-manager WLC 1 IP) eq 5246 (1950854 matches)
130 permit udp any host (ap-manager WLC 2 IP) eq 12222
140 permit udp any host (ap-manager WLC 2 IP) eq 12223
150 permit udp any host (ap-managerWLC 2 IP) eq 5247 (360037 matches)
160 permit udp any host (ap-manager WLC 2 IP) eq 5246 (1484968 matches)Thanks Amjad Abdullah and sorry for late reply i was on sick leave
Actually the issue was due to the ACL, which was blocking the DHCP (how stupidly I overlooked that)
I have did the same command as you instructed and it reveal that AP has timed out, so I have enabled debugging on ACL to see what kindly of communication is going on and I found many communication which I was keep allowing it based try and error till I found this log that Some APs IP address are trying to communicate to the default VLAN gateway IP address on port 67 which is DHCP then I realized this is the issue.....
In brief....the APs are assigned to a dynamic VLAN (DHCP-enabled) so when I apply the old ACL, the APs already has obtained an IP addresses and they work fine with WLC, but when the DHCP lease timer expires, the APs try to send DHCP renew to the default gateway in which no ACE inside the ACL is matching so that request being denied and therefore doesn't get an IP address so it loses communication with the WLC....
So I added the following ACE at the end of the above ACL
permit udp host 0.0.0.0 any eq bootps
NowI will always remember.......Security comes with cost -
I created a new extended named ACL and enter a few ACEs numbered 10,20,30,100,110,1000 to give them plenty of space apart. When I reload the switch, the numbering has disappeared and they are all spaced 10 apart. Why does this happen and is there a way to maintain larger spaces? I am thinking that in time I may come to make many modifications to the ACL and the gap between two entries may reduce to nothing. I am not going to reload my switch just to reset the gaps and I would rather not remove the ACL completely and replace it to achieve the same.
thanks for any advice
ChrisThe ACL is stored in RAM initially. When you display your access-list for instance you see the seqeunce numbers. When you display your're running configuration you don't see them.
Are you using ip access-list or the traditional access-list?
ip access-list extended Popey
10 permit ip host 10.10.10.10 any
100 permit ip 10.10.20.0 0.0.0.255 any
1000 deny ip any any -
How do ACL's work on the WLC?
I am using 4.X ver of software for the WLC with LWAPP APs, like there is any other way.
I have a guest VLAN setup and when I apply an ACL to it, it stops responding. I would think that that ACLs work like ACLs, but that is not the case...and of course, the documentation lacks.I have applied an acl that allows access to one server as well as ICMP. When I apply it to the guest VLAN, I have connectivity issues. As in I cannot access the servers to which I gave explicit permission to access.
When I remove the ACL, I can connect to the remote servers.
I finally decided that a ACL on the WLC was not the way to go as I could not find supporting docos on the WLC 4.X software. So, I applied VACLs to the VLAN for the Guest WLAN and it works. -
Possible to automatize the creation of ACL and subfolders in KM ?
Hi,
I would like to create following folder structure
/root
/subfolder elec/
/subfolder user1/
/subfolder user2/
/subfolder documents/
/subfolder LMS/
Subfolder user 1 : only user1 may have autorisations to this folder.
Subfolerd user 2 : only user2 may have autorisations to this folder
I can manage this autorisations by creating an ACL map -> details -> settings -> permissions
This is a good solution if therer were only a few subfolders to manage but I have to create +/- 9000 subfolders, for every user his own subfolder.
Does anybody knows if you there is a possibility to automatize the creation of those ACL and also the creation of the subfolder ?
Kind regards
Pascale ThysHi Pascale!
Here is a static method to create directories and provide them with permissions. It takes a resource residing in a directory called and creates new sub dirs for every iso language in the array languages. Then it copies the source resource into those new sub dirs.
It has everything you need to know about creation of dirs and files in km via API. Just adapt it to your needs.
private static void createLanguages(
IResource resource,
String[] languages)
throws ResourceException, WcmException {
// iterate through languages and create copies of the original document
// pattern is "com.xxx.<foldername><n>_<language id> with n >= 0
// Folder of newly created document
ICollection sourceDir = resource.getParentCollection();
RID sourceDirRID = sourceDir.getRID();
// Name (plus extension) of document
RID resourceRIDName = resource.getRID().name();
// Name of parent folder
RID sourceDirRIDName = sourceDirRID.name();
// source directory of new resource without language shortcut
String sourceDirRIDNameBase =
sourceDirRIDName.toString().substring(
0,
sourceDirRIDName.toString().length() - 2);
ICopyParameter copyParams = new CopyParameter();
RID destination = null;
for (int i = 0; i < languages.length; i++) {
String newDir = sourceDirRIDNameBase + languages<i>;
destination =
sourceDirRID.parent().addPathSegment(
sourceDirRIDNameBase + languages<i>);
// Create language dependend directory parallel to original, if not existing
ICollection newCollection = null;
try {
newCollection =
sourceDir.getParentCollection().createCollection(
newDir,
null);
} catch (NameAlreadyExistsException e) {
logger.info(
"directory "
+ newDir
+ " already exists.");
// Even if directory exists, add permissions
try {
if (newCollection == null) {
IResourceFactory resourceFactory =
ResourceFactory.getInstance();
newCollection =
(ICollection) resourceFactory.getResource(
destination,
sourceDir.getParentCollection().getContext());
newCollection.setProperty(
Property.createDisplaynameProp(
destination.name().toString()));
// Setting ACLs on newly created directory
ISecurityManager sm =
newCollection.getRepositoryManager().getSecurityManager(
newCollection);
if (sm != null && sm instanceof IAclSecurityManager) {
IAclSecurityManager asm = (IAclSecurityManager) sm;
IResourceAclManager ram = asm.getAclManager();
// Inheritance has to be broken to include new permissions
// Get a copy parent ACL
IResourceAcl ra = ram.getAcl(newCollection);
if (ra == null) {
ra = ram.getInheritedAcl(newCollection);
// Still no acl found? Permissions cannot be set
if (ra == null) {
logger.severe(
" - no ACL found for "
+ newCollection
+ " no permission has been set!");
} else {
// Remove old ACL
ram.removeAcl(newCollection);
// create new ACL for current directory
IResourceAcl raNew = ram.createAcl(newCollection);
// Copy all acl entries from inherited acl to new acl
IResourceAclEntryList rel = ra.getEntries();
IResourceAclEntryListIterator it = rel.iterator();
IResourceAclEntry aclEntry = null;
while (it.hasNext()) {
aclEntry = it.next();
raNew.addEntry(aclEntry);
IUMPrincipal allCountriesPrincipal =
WPUMFactory.getGroupFactory().getGroup(
"XXX_EDITOR_"
+ "ALL");
// Editor for specific country
IUMPrincipal thisCountryPrincipal =
WPUMFactory.getGroupFactory().getGroup(
"XXX_EDITOR_"
+ languages<i>.toUpperCase());
raNew.addEntry(
ram.createAclEntry(
allCountriesPrincipal,
false,
ram.getPermission(
IAclPermission.ACL_PERMISSION_READ),
0));
raNew.addEntry(
ram.createAclEntry(
thisCountryPrincipal,
false,
ram.getPermission(
IAclPermission.ACL_PERMISSION_READWRITE),
0));
// Now copy permission owners
IUMPrincipalList permissionOwners = ra.getOwners();
IUMPrincipalListIterator permissionOwnersIt = permissionOwners.iterator();
IUMPrincipal principal = null;
while (permissionOwnersIt.hasNext()) {
principal = permissionOwnersIt.next();
raNew.addOwner(principal);
} catch (AclPersistenceException e) {
logger.severe(
"I raised an AclPersistenceException @"
+ (new Date()).toString()
+ ": "
+ LoggingFormatter.extractCallstack(e));
} catch (ResourceException e) {
logger.severe(
"I raised a ResourceException @"
+ (new Date()).toString()
+ ": "
+ LoggingFormatter.extractCallstack(e));
} catch (NotAuthorizedException e) {
logger.severe(
"I raised a NotAuthorizedException @"
+ (new Date()).toString()
+ ": "
+ e.getMessage()
+ "**"
+ LoggingFormatter.extractCallstack(e));
// } catch (AclExistsException e) {
// logger.severe(
// "I raised an AclExistsException @"
// + (new Date()).toString()
// + ": "
// + LoggingFormatter.extractCallstack(e));
} catch (UserManagementException e) {
logger.severe(
"I raised a UserManagementException @"
+ (new Date()).toString()
+ ": "
+ LoggingFormatter.extractCallstack(e));
} catch (InvalidClassException e) {
logger.severe(
"I raised an InvalidClassException @"
+ (new Date()).toString()
+ ": "
+ LoggingFormatter.extractCallstack(e));
} catch (AlreadyAssignedToAclException e) {
logger.severe(
"I raised an AlreadyAssignedToAclException @"
+ (new Date()).toString()
+ ": "
+ LoggingFormatter.extractCallstack(e));
} catch (PermissionNotSupportedException e) {
logger.severe(
"I raised a PermissionNotSupportedException @"
+ (new Date()).toString()
+ ": "
+ LoggingFormatter.extractCallstack(e));
destination = destination.add(resourceRIDName);
try {
IResource newResouce = resource.copy(destination, copyParams);
} catch (NameAlreadyExistsException e) {
logger.info("file "
+ destination
+ " already exists.");
Imports needed:
import java.util.Date;
import com.sapportals.portal.prt.logger.ILogger;
import com.sapportals.portal.security.usermanagement.IUMPrincipal;
import com.sapportals.portal.security.usermanagement.UserManagementException;
import com.sapportals.wcm.WcmException;
import com.sapportals.wcm.repository.CopyParameter;
import com.sapportals.wcm.repository.ICollection;
import com.sapportals.wcm.repository.ICopyParameter;
import com.sapportals.wcm.repository.IResource;
import com.sapportals.wcm.repository.IResourceFactory;
import com.sapportals.wcm.repository.NameAlreadyExistsException;
import com.sapportals.wcm.repository.Property;
import com.sapportals.wcm.repository.ResourceException;
import com.sapportals.wcm.repository.ResourceFactory;
import com.sapportals.wcm.repository.manager.IAclSecurityManager;
import com.sapportals.wcm.repository.manager.ISecurityManager;
import com.sapportals.wcm.repository.security.IResourceAcl;
import com.sapportals.wcm.repository.security.IResourceAclEntry;
import com.sapportals.wcm.repository.security.IResourceAclEntryList;
import com.sapportals.wcm.repository.security.IResourceAclEntryListIterator;
import com.sapportals.wcm.repository.security.IResourceAclManager;
import com.sapportals.wcm.util.acl.AclPersistenceException;
import com.sapportals.wcm.util.acl.AlreadyAssignedToAclException;
import com.sapportals.wcm.util.acl.IAclPermission;
import com.sapportals.wcm.util.acl.IUMPrincipalList;
import com.sapportals.wcm.util.acl.IUMPrincipalListIterator;
import com.sapportals.wcm.util.acl.InvalidClassException;
import com.sapportals.wcm.util.acl.NotAuthorizedException;
import com.sapportals.wcm.util.acl.PermissionNotSupportedException;
import com.sapportals.wcm.util.logging.LoggingFormatter;
import com.sapportals.wcm.util.uri.RID;
import com.sapportals.wcm.util.usermanagement.WPUMFactory;
This is my .classpath variable for this projekt (for the necessary JARs):
<?xml version="1.0" encoding="UTF-8"?>
<classpath>
<classpathentry kind="src" path="src.api"></classpathentry>
<classpathentry kind="var" path="JRE_LIB" sourcepath="JRE_SRC"></classpathentry>
<classpathentry kind="src" path="src.core"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/prtapi.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/prttest.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/com.sap.portal.runtime.application.soap_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.tssap.ext.libs.j2ee_1.3.0/lib/activation.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.security_2.0.0/lib/com.sap.security.api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ext.libs.webservices_2.0.0/lib/jaxm-api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.tssap.ext.libs.j2ee_1.3.0/lib/mail.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ext.libs.webservices_2.0.0/lib/saaj-api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.tssap.sap.libs.xmltoolkit_2.0.0/lib/sapxmltoolkit.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.engine.webservices_2.0.0/lib/webservices_lib.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.crt_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/prtapi.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/logging.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.exception_2.0.0/lib/exception.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.common_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/com.sap.security.api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/com.sap.security.api.ep5.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.util.public_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.sf.framework_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.util_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.runtime_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.repository.service.serviceacl_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.mi_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.urlgenerator_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.urimapper_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.rtr_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.relation_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.pipeline_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.oth_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.notificator_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.mime_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.global.service.appproperties_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.rf.framework_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.util.kmmonitor_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.netweaver.bc.uwl.plugin_1.0.0/lib/bc.uwl.service.api_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.tc.ap_2.0.0/comp/CAF/DCs/sap.com/caf/api/_comp/gen/default/public/default/lib/java/sap.com~caf~eu~gp~api~default.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.tc.ap_2.0.0/comp/CAF/DCs/sap.com/caf/api/wd/_comp/gen/default/public/default/lib/java/sap.com~caf~eu~gp~api~wd~default.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/bc.wdf.ui.framework_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.base_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.enum_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.event_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.generic_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.util_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/com.sap.portal.htmlb_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.command_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.base_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.screenflow_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.uicommand_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.util_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/htmlb.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/com.sap.workflow.wcm_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.actioninbox_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.cachecontrol_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.checkout_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.collaboration_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.crawler_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.efp_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.expimp_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.ice_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.indexmanagement_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.propertyconfig_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.propertystructure_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.quickpoll_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.reporting_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.resourcefilter_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.resourcelistfilter_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.template_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.xcrawler_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.service.xmlforms_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.acl_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.actioninbox_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.applog_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.cache_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.classification_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.classificationtest_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.collaboration_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.config_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.crawler_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.crawlerindexmon_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.demo_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.edit_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.collaboration_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.collection_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.component_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.config_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.control_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.detailsoverview_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.detailsproperties_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.expimp_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.property_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.resource_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.flex.uicommand_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.ice_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.indexadmin_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.layout_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.navigation_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.oth_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.quickpoll_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.reporting_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.scheduler_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.search_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.security_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.settings_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.statemanagement_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.subscription_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.user_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.websiteimport_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.xcrawler_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.appl.ui.xmlforms_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.rep.util.rfadapter_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.actioninbox_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.cachecontrol_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.checkout_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.collaboration_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.crawler_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.efp_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.expimp_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.ice_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.indexmanagement_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.propertyconfig_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.propertystructure_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.quickpoll_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.reporting_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.resourcefilter_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.resourcelistfilter_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.template_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.xcrawler_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.service.xmlforms_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.fields_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.collection_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.control_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.detailsoverview_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.detailsproperties_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.enum_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.layout_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.property_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.readymades_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.flex.resource_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.released_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.ui.search_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/com.sap.portal.usermanagementapi.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/com.sap.security.api.ep5.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/org.eclipse.tomcat_4.0.6.2/servlet.jar"></classpathentry>
<classpathentry kind="lib" path="dist/PORTAL-INF/lib/commons-lang-2.4.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/km.shared.ui.event_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.portal.runtime.config/lib/bc.cfg_api.jar"></classpathentry>
<classpathentry kind="var" path="KMC_LIBS/km.appl.ui.flex.control_api.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.km.cm.ui.flex/private/lib/km.appl.ui.flex.control_core.jar"></classpathentry>
<classpathentry kind="var" path="ECLIPSE_HOME/plugins/com.sap.ep.applicationDevelopment_7.00/libs/km.shared.repository.service.layout_api.jar"></classpathentry>
<classpathentry kind="output" path="classes.api"></classpathentry>
</classpath>
You probably don't need all of them.
Cheers,
Jürgen -
Hi, how are you?. Sorry by my questions and thanks for the patience.
I have a doubt. CPU ACL affects only the traffic of the management interface?.
For example:
Controller WLC 5508 version 7.0.98.0
Interface management IP address 186.108.26.2/24
Interface XX IP address 190.139.109.101
I have configured the following ACL and applied to CPU ACL:
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >
(Cisco Controller) >show acl cpu
CPU Acl Name................................ ACL
Wireless Traffic............................ Enabled
Wired Traffic............................... Enabled
(Cisco Controller) >show acl summary
ACL Counter Status Enabled
ACL Name Applied
ACL Yes
(Cisco Controller) >show acl detailed ACL
Source Destination Source Port Dest Port
Index Dir IP Address/Netmask IP Address/Netmask Prot Range Range DSCP Action Counter
1 In 1.1.1.0/255.255.255.0 1.1.1.115/255.255.255.255 6 0-65535 443-443 Any Permit 0
2 Any 0.0.0.0/0.0.0.0 100.100.100.100/255.255.255.255 6 0-65535 443-443 Any Permit 0
3 Any 0.0.0.0/0.0.0.0 0.0.0.0/0.0.0.0 Any 0-65535 0-65535 Any Deny 51
DenyCounter : 27
(Cisco Controller) >
I have the following doubts
It is not necessary to allow the ports of tunnel capwap?.
I have applied this ACL and traffic from Interface XX to 190.139.109.101 is filter. If I remove CPU ACL traffic to interface XX is permit. Then CPU ACL affect all interfaces???.Hi,
better a late reply than no reply at all ...
The CPU ACL actually filters traffic that is destined to one of the WLC ip addresses, so it works on all interfaces, but does not filter all types of traffic. Only traffic that is destined to the WLC itself.
So if you apply a CPU ACL, it is likely you need to either allow capwap ports or allow everything in the subnet where APs are.
Regards,
Nicolas -
Cisco 3850 Switch Management Port - ACL on VTY
Hi,
I got these switches.
Switch Ports Model SW Version SW Image Mode
* 1 32 WS-C3850-24T 03.03.02SE cat3k_caa-universalk9 INSTALL
2 32 WS-C3850-24T 03.03.02SE cat3k_caa-universalk9 INSTALL
SSH access to Management port G0/0 with an ACL applied on line vty 0 4 is failing, even through the ACL is permiting traffic.
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
ip address 172.16.12.3 255.255.255.0
negotiation auto
ip access-list standard ACLVTY
permit any log
line vty 0 4
access-class ACLVTY in
exec-timeout 15 0
length 0
history size 64
transport preferred ssh
transport input ssh
transport output telnet ssh
037599: *Mar 28 2014 04:59:49.919 AEDT: %SEC-6-IPACCESSLOGS: list permit-any permitted 172.16.12.100 1 packet
# show ip access-list permit-any
Standard IP access list permit-any
10 permit any log (3 matches)
If I remove the ACL under VTY "no access-class ACLVTY in", then SSH to the management port works. If I don't use the management port and use a normal port say G1/0/1 configured on management VLAN and assigned the same IP address, then SSH works with the VTY ACL still existing.
Any ideas ?
Thanks,
Rick.Hi,
IOS will accept all VTY connections by default. However, if an access-class is used, the assumption is that connections should only arrive from the global VRF. If you need control the IP source while allowing VTY connections from VRF instances, you have a try configuration option "vrf-also"
So, you should get something like this:
line vty 0 4
access-class ACLVTY in vrf-also
Maybe you are looking for
-
Tracking Internet/ Network Activity
Conky is showing me that I have a network activity of around 16 k/s, but I have no clue where that is coming from. I have a script running in conky which is supposed to get emails from Gmail, but it should only be fetching them in time periods of abo
-
Somebody correct my code Iam trying to create an applet which connects DB
This is throwing many mistakes iam trying to create an applet like an airplace booking which shows combo box of the available aircrafts and when selected it should show the no of available seats import javax.swing.*; import java.awt.*; //<applet code
-
How to control the sleep time exactly
i have a thread that sleeps for 15 minutes and wakes up does some thing( send some mails ) and sleep. the problem i am facing is the thread is not running exactly in 15minutes intervals. EX: 14:12:06 ( no mails sent ) 14:27:06 ( no mails sent ) 14:42
-
Time Machine not deleting to provide adequate free space
This is similar, but not identical to the recent post. I am backing up my internal system hard drive, which contains 111 GB, to a 1 TB external. But the disk has filled up to the point that I now get a TechTool Protection Alert every few minutes warn
-
Unable to create application -2147024891
<p>I am setting up Planning v4.1.1.1 on a windows server 2003machine and get errors when trying to create anapplication in the planning desktop. Theerror code I get is as follows:</p><p> </p><p>Unable to create application</p><p>Error Number: -21470