Restrict no. of connections to DB

Guys,
I have a scenario like 'App Module A' pool cant use more than specified no. (say N) of DB connections. But there may be more than N instances requried at a time.
How this can be acheived? (using passivation it should be possible)
what is the configuration required to do this?

Dev,
[url http://download.oracle.com/docs/cd/E17904_01/web.1111/b31974/bcampool.htm#sm0299]The documentation explains it all pretty nicely. Did you have a question about something in there? What have you tried so far?
John

Similar Messages

Restricting Port 25 connections, firewall or postfix config file best?

I have all my mail sent to an email address at an external ISP that does a great job of getting rid of SPAM. Mail that passes through SPAM screening gets forwarded to an email box on my XSERVE running OS X Server 10.4.10.
Unfortunately, spammers have figured out the email address of my XSERVE so they are bypassing my spam screening service.
What is the easiest and best way to restrict inbound SMTP connections to only accept forwarded mail from the screening ISP and a few other trusted domains? Must this be done with the OS X Server firewall or should it be done in the POSTFIX configuration file? Is there a way to do this with the OS X Server ADMIN gui application?
Advice and examples would be most welcome.

I have all my mail sent to an email address at an external ISP that does a great job of getting rid of SPAM. Mail that passes through SPAM screening gets forwarded to an email box on my XSERVE running OS X Server 10.4.10.
Unfortunately, spammers have figured out the email address of my XSERVE so they are bypassing my spam screening service.
What is the easiest and best way to restrict inbound SMTP connections to only accept forwarded mail from the screening ISP and a few other trusted domains? Must this be done with the OS X Server firewall or should it be done in the POSTFIX configuration file? Is there a way to do this with the OS X Server ADMIN gui application?
Advice and examples would be most welcome.

AD "Log on to" restriction causes RDP connections with network level authentication to fail

I am running a Server 2008 R2 environment and have recently enabled network level authentication for RDP connections. Since the change, users who have their logons restricted to specific servers via AD, now get an error when logging on via RDP:
An Authentication error has occured
The Local security authority cannot be contacted
After investigating this error and reading technet I found that removing the "log on to" restriction within their user object solved the problem even tho they had rights to this server. Adding the users client PC name to the "Log on
to" list also solves this issue.
My question is, is there another way around this? We have an environment where some users may require an RDP connection from a client PC not on the same domain (over VPN) as the server. It will not be practical to add many different client PC names
to the log on to list and I don't understand why client PC's must be specified in the Log on to list and not just the actual server they are logging onto.
Any pointers appreciated

I have just come across this problem on one of my client’s domains; they have recently enforced a policy to “Allow connections only from computers running Remote Desktop with Network Level Authentication (more secure)” and users with “Log on To” restrictions
on their account are no longer able to RDP using their second account.
After a lot of fiddling around I finally resolved the problem by adding the connecting computer name into “Log on To” list. Ultimately it appears that Network Level Authentication (NLA) requires authentication to take place on both the host initiating
the connection and the remote host.

Restriction of the connection

I want to restrict the number of simultaneous connection on WeblogicServer
5.1 SP9.
Are there any methods?
Thank you in advance.

Originally posted by: none.us.ibm.com
Most people put the connections on a layer above the "big figure" so that
z-order is easily maintained.
"Cleverson Schmidt" <[email protected]> wrote in message
news:d99885c55db8d40a3d3a060b4e83b407$[email protected]..
> Hi,
>
> What are the restrictions when we will create connections among nodes? I
> mean in plain draw2D, not considering GEF stuff.
> I'm asking this question because I haven't managed yet to add connections
> among the nodes of my application. What would be the correct approach?
> I have one big Figure with all my nodes(other Figures).
> Do I have to create one outer figure and then add the big figure and
> another figure just for connections? Is there any restriction on layouts
> of the connection figure?
>
> Thank you
>
> Cleverson Schmidt
>
>

Is there a way to restrict who can connect/find a HP MFP attached to a router.

We have a HP MFP connected to a local network router. I'd like to restrict access to who can print to it. The printer is connected via ethernet. Anyone who has access to our network (wired or wirless) can find/connect to the printer. We only want certain people to have access to it. Is there a way to set up the printer to do this?

Hi rross3,
Depending on which printer you have, this may be possible through the printer's EWS (embedded web server). To access the EWS, open a browser on your computer and type the IP address of the printer into the address field. If you can access the EWS, then check for Settings tab>Firewall Rules. If this exists, you can create a new rule to allow only certain IP's the ability to print to the printer. It would probably be best to assign static IPs to the computers you want to be able to print.
Alternately, if you have access to the network's router, it may have a similar function. You would also want to assign a static IP to the printer (as well as the computers), then allow access to only the computers you want to be able to print (following the same instructions above).
If I have helped in any way, just click the Kudos star on the left. Also, if your issue has been resolved, don't forget to select Accept as Solution

WRT54GS Access Restriction for WiFi Connected Devices

I have the WRT54GS v4 running with the latest Firmware Version: v1.06.3 -- I am attempting to add Access Restrictions for a few MAC addresses and IP addresses (my kids iPod Touch and laptop).
I am simply wanting to deny total internet access from 9pm to 7am. I have gotten it to work but ONLY for computers that are actually plugged into the router (cat 5 internet cables). All the computers/devices that connect to the router via wifi do not seem to be restricted at all. I am thinking this is an issue with the router in that it ONLY seems to apply the Access Restriction rules to those devices that are actually directly connected by hardwire.
Has any one else noticed this issue for WiFi connected devices? Access Restrictions do not seem to apply to WiFi connected devices.
Please help -- I would hate to have to buy another router.

Are you sure you have enter the correct MAC address or IP address? Wired connections use different MAC and IP addresses then wireless connection...

WRT54G v6 Access Restrictions killing router connection

I've posted this question elsewhere, but an answer never came up, so I'm hoping to find a solution here
I have a number of sites I'm looking to block on my home network. I set four access restriction policies (since you're limited on how many each policy can block), and it worked just fine. The sites were blocked and everything went well for about an hour (give or take, I can't recall). Then, my internet connection became erratic and started continually dropping.
The problem was that it wasn't my actual internet connection, but the router doing what appeared to be like a power-off refresh - the Power light would start blinking rapidly, and then it would either eventually reconnect on its own, or I'd have to reset the router. No matter what, though, after enabling the access restrictions, I couldn't maintain a stable connection for very long. I know that these restrictions are the issue, because if I turned them off, it was fine.. and if I turn them back on, it acts up again. I downloaded the latest firmware, but that did not help.
The router didn't feel exceptionally hot (as I thought that might've been it), but the system allows for 10 policies to be enabled, so I don't think 4 should kill the whole system. I didn't see any type of other options in the access restriction policy panel that might be causing some type of internet connection interference, but I could be wrong. I'd really love to have these blocks in place, but I'd also love to be able to still access the internet at the same time
Any help or passed-on knowledge of what's going on would be extremely appreciated

It seems defective. But you can try reflashing the firmware and then holding the reset button for 30seconds after that. If that doesn't work then do a 30-30-30 reset. You might just have to use Open Dns if those suggestions don't fix the issue.
I don't work for Cisco. I'm just here to help.

How to restrict an edge connection to core server

Hi,
I want to restrict unauthorised edge servers connecting to my core server . How do i do it?
Any help is appreciated.
PS

Consider restricting the unauthorized IP address using "deny" or only allow the authorised IP address usign "allow" in the core Adaptor.xml
Read
Adaptor/Allow: If the target customer IPs for connecting to FMS are known in advance, consider locking down those connections via adding them to the Allow/Deny elements here.
in following document: http://www.adobe.com/devnet/flashmediaserver/articles/hardening_guide.html

Restrict Users To Connect Database

Dear All,
Actually I am working in oracle ERP R12 and I want to control users to connect database only invited nodes are connected to database through sqlnet.ora file. I set parameter in sqlnet.ora file below:
SQLNET.AUTHENTICATION_SERVICES = (NTS)
TCP.VALIDNODE_CHECKING = YES
#tcp.excluded_nodes = {list of IP addresses}
TCP.INVITED_NODES = {172.16.72.63}
this is working in database but in erp environment this is not working any one please help me!!!
Regards,
Muhammad Zubair
DBA Warid Telecom Pakistan
00923244509956

Can you elaborate a bit on "not working"? What, exactly, is the behavior you're seeing? What is the behavior you expect? Are you getting errors? If so, what errors?
In the "ERP environment", are users connecting via a client/ server application? Or via a three-tier application? Assuming a three-tier application, are you trying to invite the nodes of the application servers? Or of the end clients (or, potentially, the web servers)?
Justin

OSX 10.8 server Set VPN server in Local net, How to restrict the Local some IP connect to the VPN server?(noob,so need clearly)

the tittle is my question. I am noob , so I hope i can make my question clear. Now i 'd like to tell you more about my question:
My aim is to set a VPN server in Local lan, then ppl can connect to the VPN server, But I dont wanna all of the Local lan IP cant connet to it. So I neet to set a rule to restrick some local Ip to connect failure, just like banning so IP in a rule.such as: just like the "192.168.4.3~192.168.4.20 ; 192.168.7.3~192.168.7.20 " IPs can connect . the IPs which outside the rules can not do.
my step is following:
1) install server app
2)and then i set a VPN server , finally the VPN server can be connected successfully by local lan computer(PC or Mac)
3)But i found no restrict IP founction in Server app panel.
4)then i down load workgroup manager, and found nothing there about such a founction about IP restriction.
so can you tell me how to aproach my aim?
Please tell me in a clear detail,I am noob
thank you

Won't the password restrict everyone from connecting unless they know the password?
I have never worked with a VPN server, so I can't really add any suggestions. Below are links to Apple support articles, but I'm not sure they will help you:
VPN - Set up Connection
VPN - Advanced Setup
VPN - Connect
VPN - Connect Automatically

Allow connection to RDS applicatoins and restrict RDP connection for domain users

I have configured RDS setup, with the following Roles: RD Web Access, RD Gate Way, RD Connection Broker, RD Session Host and RD Licensing.
the problem is that the domain users can't run the published applications unless I add the "Domain Users" group into the remote desktop users on the RDS servers, but now all domain users can connect RDP to the RDS servers.
so we need domain users to connect to the RDS published applications and restricting them from connecting RDP to the RDS servers, in addition I can see that internal servers are accessible from outside through the RD gateway server.
any ideas ?

Hi,
Thank you for posting in Windows Server Forum.
For a test you can create one group, assign the specified user under that group. Add that group under “Remote Desktop User” local group. For getting access to published Remote Application you can simply assign\add the group under collection properties of the
application and that user can get access.
For restricting user to server remotely, you can add that group of user under “Deny logon through remote desktop service” under User Rights assignment. Also you can check “Deny
New User Logons to an RD Session Host Server” settings.
Hope it helps!
Thanks.
Dharmesh Solanki

[Fwd: Re: rdbms realm and connection pool]

Hi,
One reason why I would like to use the connection pool for the RDBMS
realm is because there is the retry machanism built into the connection
pool. With this retry, I don't need to re-start WebLogic if the DB
server is somehow re-started. With the current implementation, all the
connections maintained by the realm will become invalid if the DB server
has been restarted independently.
-------- Original Message --------
Subject: Re: rdbms realm and connection pool
Date: Wed, 27 Sep 2000 09:32:47 +0100
From: "Terry" <[email protected]>
Reply-To: "Terry" <[email protected]>
Organization: BEA SYSTEMS Inc
Newsgroups: weblogic.developer.interest.security
References: <[email protected]>
I believe not- the realm restricts access to connection pools to those
who
are allowed it, so if the realm needs the connection pool to start up,
and
you can't open the connection pool without the realm then you have a bit
of
a no-chicken and no-egg situation, which is I believe one of the reasons
why
there is no use of connection pools, ejbs, jndi, servlets etc. in the
realm
(along with other reasons, like why would it be provided with a servlet)
The delegate pool acts somewhat similarly to a connection pool, and can
even
use the same database, so I'm not sure what the advantage would be
Terry
Nirmala devi <[email protected]> wrote in message
news:[email protected]..
>
I think the rdbms realm uses different connection as it need to be setbefore
the connection pool for Database.Is there any that i can point my rdbmsrealm to use
the connection pool for Database instead
Thanks in advance
Nirmala

I believe not- the realm restricts access to connection pools to those who
are allowed it, so if the realm needs the connection pool to start up, and
you can't open the connection pool without the realm then you have a bit of
a no-chicken and no-egg situation, which is I believe one of the reasons why
there is no use of connection pools, ejbs, jndi, servlets etc. in the realm
(along with other reasons, like why would it be provided with a servlet)
The delegate pool acts somewhat similarly to a connection pool, and can even
use the same database, so I'm not sure what the advantage would be
Terry
Nirmala devi <[email protected]> wrote in message
news:[email protected]..
>
I think the rdbms realm uses different connection as it need to be setbefore
the connection pool for Database.Is there any that i can point my rdbmsrealm to use
the connection pool for Database instead
Thanks in advance
Nirmala

Connecting through my personal home office to internet when I'm in China?

When traveling on business in China I often can't get to certain websites and have been told that I should set up a network or server using my personal home computer & router which is always on. I'm on a very fast DSL though my home router. I don't know how to go about setting the parameters so when I'm traveling and on a high speed internet connection at my hotel in China I can use my home computer and router to surf the internet and bypass their restrictions & censors. Would like to know how to set up the computer and the router. Step by step if possible or is there a program that would set up my Mac or a set of published directions that I can set my browser to go to and read or printout the diections. I would be most grateful for help with this.
[email protected]
Powerbook G4, iMac, eMac Mac OS X (10.4.6)

Perhaps what they meant was to have a system connected and running at home and then to use a program such as Apple's Remote Desktop, or Timbuktu, or VNC, etc, to remotely operate the system at home which will not have the same restrictions as your connection in China.
Or - if you setup a VPN connection at home (if your hardware/software can do so) then perhaps getting an IP throught he VPN and using that as a gateway migth get you around the restriction.

Certificates in lieu of Oracle connection Manager for our Applets -- Help!!

I support an application named IDEA out of New York. The IDEA application is an INTRANET application for use within our company Firewall.
Currently, the IDEA application's front end resides on a Windows 2000 Server running IIS 5 and JRun 3.0. The back-end runs on Oracle 8.1.7 database on a UNIX Database Hosting Utility (DHU). Our applets communicate with the back-end database using Oracle Connection Manager that is installed on the Web Host.
We are trying to migrate to the DWeb environment (Linux cluster). The linux cluster is running Apache Tomcat. We have been told that installing Oracle connection manager is not a viable solution (our company does not support it). Because of this our applets cannot communicate with our database. Below is a brief description of this limitation and also the work-around.
====================================================================================================================================================
Connecting to the Database through the Applet
The most common task of an applet using the JDBC driver is to connect to and query a database. Because of applet security restrictions, unless particular steps are taken an applet can open TCP/IP sockets only to the host from which it was downloaded (this is the host on which the Web server is running). This means that without these steps, your applet can connect only to a database that is running on the same host as the Web server.
If your database and Web server are running on the same host, then there is no issue and no special steps are required. You can connect to the database as you would from an application.
As with connecting from an application, there are two ways in which you can specify the connection information to the driver. You can provide it in the form of host:port:sid or in the form of a TNS keyword-value syntax.
For example, if the database to which you want to connect resides on host prodHost, at port 1521, and SID ORCL, and you want to connect with user name scott with password tiger, then use either of the two following connect strings:
using host:port:sid syntax:
String connString="jdbc:oracle:thin:@prodHost:1521:ORCL";
conn = DriverManager.getConnection(connString, "scott", "tiger");
using TNS keyword-value syntax:
String connString = "jdbc:oracle:thin:@(description=(address_list=
(address=(protocol=tcp)(port=1521)(host=prodHost)))
(connect_data=(sid=ORCL)))";
conn = DriverManager.getConnection(connString, "scott", "tiger");
If you use the TNS keyword-value pair to specify the connection information to the JDBC Thin driver, then you must declare the protocol as TCP.
However, a Web server and an Oracle database server both require many resources; you seldom find both servers running on the same machine. Usually, your applet connects to a database on a host other than the one on which the Web server runs. There are two possible ways in which you can work around the security restriction:
You can connect to the database by using the Oracle8 Connection Manager.
or:
You can use a signed applet to connect to the database directly.
These options are discussed in the next section, "Connecting to a Database on a Different Host Than the Web Server".
Connecting to a Database on a Different Host Than the Web Server
If you are connecting to a database on a host other than the one on which the Web server is running, then you must overcome applet security restrictions. You can do this by using either the Oracle8 Connection Manager or signed applets. ====================================================================================================================================================
It was suggested that we implement signed applets (it is our only alternative at this time). This is where, hopefully, you can help me. We are unfamiliar with using certificates and signing applets. We need to obtain certificates that will allow our applets to connect to our oracle database on the DHU. What kind of certificates do we use? Are their coding examples of how to use these certificates? We have a CA within our company but they cannot tell us what kind of certificates we need. How many certificates do we need? Do we install any certificates on the backend database server? Any information would be greatly appreciated. We are basically trying to get our applet to work outside the sandbox by establishing a connection to the database server.Thanks in advance for your time.

or:
You can use a signed applet to connect to the database directly.
These options are discussed in the next section, "Connecting to a Database on a Different Host Than the Web Server".
If you want to connect to the database from the applet there is a third option.
Since this is an intranet application you have control over the desktops using this
application. In our company the jre ignores signed applets (as it should) because
it gives control to the user to run potentially harmfull applets from the Internet.
The way to dish out special privileges to applets is the policy, put a policy file on
you intranet and have the jre use it by specifying its URL in the java.security.
Here is some more info about security configuration of the jre:
http://forum.java.sun.com/thread.jspa?threadID=646161&tstart=45
reply 3
We use Oracle jinitiator to run Oracle forms but I am not involved in that project
and do not know a lot about it. It does perform quite good though.

Certificates in lieu of Oracle connection Manager for our Applets

I support an application named IDEA out of New York. The IDEA application is an INTRANET application for use within our company Firewall.
Currently, the IDEA application's front end resides on a Windows 2000 Server running IIS 5 and JRun 3.0. The back-end runs on Oracle 8.1.7 database on a UNIX Database Hosting Utility (DHU). Our applets communicate with the back-end database using Oracle Connection Manager that is installed on the Web Host.
We are trying to migrate to the DWeb environment (Linux cluster). The linux cluster is running Apache Tomcat. We have been told that installing Oracle connection manager is not a viable solution (our company does not support it). Because of this our applets cannot communicate with our database. Below is a brief description of this limitation and also the work-around.
====================================================================================================================================================
[i][i][i]Connecting to the Database through the Applet
The most common task of an applet using the JDBC driver is to connect to and query a database. Because of applet security restrictions, unless particular steps are taken an applet can open TCP/IP sockets only to the host from which it was downloaded (this is the host on which the Web server is running). This means that without these steps, your applet can connect only to a database that is running on the same host as the Web server.
If your database and Web server are running on the same host, then there is no issue and no special steps are required. You can connect to the database as you would from an application.
As with connecting from an application, there are two ways in which you can specify the connection information to the driver. You can provide it in the form of host:port:sid or in the form of a TNS keyword-value syntax.
For example, if the database to which you want to connect resides on host prodHost, at port 1521, and SID ORCL, and you want to connect with user name scott with password tiger, then use either of the two following connect strings:
using host:port:sid syntax:
String connString="jdbc:oracle:thin:@prodHost:1521:ORCL";
conn = DriverManager.getConnection(connString, "scott", "tiger");
using TNS keyword-value syntax:
String connString = "jdbc:oracle:thin:@(description=(address_list=
(address=(protocol=tcp)(port=1521)(host=prodHost)))
(connect_data=(sid=ORCL)))";
conn = DriverManager.getConnection(connString, "scott", "tiger");
If you use the TNS keyword-value pair to specify the connection information to the JDBC Thin driver, then you must declare the protocol as TCP.
However, a Web server and an Oracle database server both require many resources; you seldom find both servers running on the same machine. Usually, your applet connects to a database on a host other than the one on which the Web server runs. There are two possible ways in which you can work around the security restriction:
You can connect to the database by using the Oracle8 Connection Manager.
or:
You can use a signed applet to connect to the database directly.
These options are discussed in the next section, "Connecting to a Database on a Different Host Than the Web Server".
Connecting to a Database on a Different Host Than the Web Server
If you are connecting to a database on a host other than the one on which the Web server is running, then you must overcome applet security restrictions. You can do this by using either the Oracle8 Connection Manager or signed applets. ====================================================================================================================================================
It was suggested that we implement signed applets (it is our only alternative at this time). This is where, hopefully, you can help me. We are unfamiliar with using certificates and signing applets. We need to obtain certificates that will allow our applets to connect to our oracle database on the DHU. What kind of certificates do we use? Are their coding examples of how to use these certificates? We have a CA within our company but they cannot tell us what kind of certificates we need. How many certificates do we need? Do we install any certificates on the backend database server? Any information would be greatly appreciated. We are basically trying to get our applet to work outside the sandbox by establishing a connection to the database server.
Thanks in advance for your time.

Eston,
Have you searched SUN's java Web site? Maybe this article will help:
http://java.sun.com/developer/technicalArticles/Security/Signed/index.html
Good Luck,
Avi.

Restrict no. of connections to DB

Similar Messages

Maybe you are looking for