Security Manager on server with teamed NICs ?

Can anyone confirm that Security Manager will run on server with teamed NICs (i.e. 2 physical connections, but 1 logical IP address) ?
I ask because the data sheet for Security Manager 3.0.1 states :-
"100BASE-T (100 Mbps) or faster network connection; single interface only". and
"One static IP address".
I already have a server that meets all the specs, but it has dual NICs to dual switches for resilience, teamed together with a single IP. The Cisco document is open for interpretation, so has anyone got a definitive answer or is running a setup like this already ?
Thanks.
Mark.

It's recommended that you can use only one interface when installing CSM. However, if the second interface is using the same IP it should not be a problem.

Similar Messages

WOL question. SCCM server with multiple nics.

Hi,
I have a sccm server with multiple nics, I can wake up any machine using a 3ed party magic packet utility, if I set a schedule and use sccm wol functionally the machine never wakes up. As I pointed out my server has multiple nics, does anyone have a sccm
server with multiple nics with sccm built in wol functionally working?. I am curious on how you achieved this.

Hey Garth,
Yes the problem is solved but we had to buy a 3rd party power management utility to accomplish WOL. Because we have many different subnets in our environment we found that this was the fastest way to get WOL working,
So out of the box SCCM would not work for us, with a 3rd party utility that had an SCCM plugin WOL now works flawlessly.

Security manager not used with JNDI ?!

Hi,
I have a simple stand-alone java app that does a JNDI lookup
and subsequent method invocation on the returned session bean.
I never explicitly install a security manager and am wondering
why there are no security problems getting the bean proxy
and any subsequent code downloads from the WebLogic server.
Seems like this would never work under under pure RMI, so
what's going on in this case?
Thanks, Garry

Hi,
According to the screenshot, it seems like compatibility problem, What's the type of your system?
In addition, you can refer to the link below to view its compatibility list.
http://gallery.technet.microsoft.com/LocalGPOmsi-Excellent-MS-2593b2eb
Roger Lu
TechNet Community Support

Server with 3 NICs wants to connect to 2 switches

I have two 6509 on the distro layer ( distro 1 and distro2 ), running layer 2 only. They are connected to two 6509s on the core layer. One of the server admins has a 3 port NIC on his server bundled together to increase bandwidth. He wants to connect it to 2 ports on the distro1 and 1 port on the other distro2 switch. All 3 distro ports he is connecting to are in the same VLAN and the VLAN is allowed on all port channel connections between distro and core switches.
Will this even work since he is connected on different switches?

Those stating that a NIC channel is not allowed to two individual switches should know that a NIC teaming is usually not a link aggregation (port-channel). If it is an active-standby-standby NIC team then all you need is to make sure all 3 ports belong to the same VLAN. Traffic will leave the server on the active link and the switches will learn that the MAC address is on this port. No Port-channel config is necessary on the switches.
Load-balanced NIC teaming usually requires Port-channel if the same src MAC address can appear on multiple ports. In this case multichassis link aggregation is mandatory and you cannot connect to individual switches.

Windows server with one NIC and two IP address answers to ping with wrong address.

Hi,
I have Windows 2012R2 server, as a web server. It has only one NIC, and I have given it two IP addresses. 10.0.0.11 at the main Window, and under the advanced tab, I have added 10.0.0.12 as additional ip to the nic. I have even but to
host file a row, that states 10.0.0.11 server.domain.local.
Now when I ping "server.domain.local" from the server itself, it gives me 10.0.0.12 as answer.
With nslookup I can get correct address (10.0.0.11). But when I type server.domain.local to the web browser it tries to connect 10.0.0.12, which is incorrect. It should connect to 10.0.0.11 address. Could you please help me?
Regards,
Jouko

Windows does not work well with two IP addresses on the same subnet. Results are inconsistent, as you have discovered. In general, you should never try to put two IP addresses from the same subnet onto a single Windows box. That means either
multiple addresses on a single NIC or on multiple NICs.
Maybe if you tell us what you are trying to accomplish by having two addresses, we could provide better assistance.
. : | : . : | : . tim

Cisco security manager deployment issue with invalid command

Running CSM 3.3.1, to manage an 800 series pre-configured router.
The router has a number of policy ACL's and class-maps configured. When the config is imported to CSM a number of warnings are seen reporting that some of the interfaces are unprotected by ACL's, which is correct, no serious errors are reported and the device is succesfully imported.
But, when I look at the configuration within CSM non of the ACL's or the class maps are shown.
Also, when I configure some feature on the router, during the deployment phase I get an error indicating that there is an invalid protocol under one of the class maps associated with an interface. The protocol in question is bittorrent. This error prevents depolyment of my changes. In fact this causes my client to hang, eventually if I close the application windoes reports that the issue is caused by javaw.exe faiing to respond.
If I take out the bittorrent protocol under the class map then all seems well.
So, I though flexconfigs would resolve this, enabling me to import the config with the unsupported command. I created a flexconfig with the class map and the invalid protocol. When I re-imported the device there is still a lot of configuration features that are on the router but are missing in CSM.
I'm not sure how to resolve this, the router was not configured through CSM in the first place.

Update to this, the CSM is also altering firewall configurations, if I import a configuration from an ASA running 8.0.4 code, then compare that configuration to that running on the same ASA there are quite a few differencies. Some of these are not items that CSM reports as requiring Flexconfig support, which concerns me.
This is not the first time I've seen this occur, customer is concerned about the reliability of the way this system handles configurations, and I cannot explain why it exhibits this process.
Anyone else seen this, and found a work around?

Server 2012 R2 NIC Teams

Hey guys, i was hoping someone could help me understand this. I kind of get how this teaming stuff works, but i want to make sure I'm not doing anything wrong/ not supported.
So for the past few days I've been trying to wrap my head around this stuff. And this is what I have so far.
R720 Dell Server --> 4 Teamed NICs ---> Multiplexor --> vSwitch --> VMs
So the vSwitch is connected to the multiplexor and the VMs are connected to that switch. I figured I'd try to see if i saw any performance differences. As a matter of fact I saw it got worse. Sometimes the VM on the server stays connected, other times it
gets disconnected and wont reconnect
When I do a LAN speed test to another server i get like 9 Mbps vs other servers that are connected strait from a nic to a switch and that switch to a server that gets 800 Mbps +
I did a switch independent with dynamic LB. I did some looking up on all of the settings, but I really dont understand why its so slow.
Also if i were to create vNICs based off that switch for lets say, management, cluster, live migration etc..
So, the NICs are based off that vSwitch and you can do the Qos for those NICs, but I'm confused as to how those NICs are specifically used.
If none of that made sense, i'll be around looking for some more info and i can elaborate if need be.

Hi,
In switch
independent mode, outbound traffic bandwidth could be increased. If you want improve both inbound and outbound bandwidth you could configure a switch dependent
mode. And it is recommended to choose hyper-v switch port as
Traffic distribution algorithms.
For dynamic teaming
most switches require manual administration to enable LACP on the port.
At last, you referred that VM lose connection intermittently. I wonder the VM lose connection with your virtual switch or lose connection with the other servers.
A good blog for you:
NIC teaming on Virtual Machines
http://blog.marcosnogueira.org/nic-teaming-on-virtual-machines/
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Hope this helps.

System Log file filled with arp message from teamed nics

Hello,
We are running a Win2k3 server with dual nics teamed to one IP address. All of our Mac's system logs are being filled with the following message:
Mar 28 12:48:58 Son-of-Spacedog kernel[0]: arp: 192.168.200.50 moved from 00:04:23:b9:00:4a to 00:04:23:b9:00:4b on en0
This is repeated over and over. Is there any way to get the Mac's to stop generating this message? Is the fix for this on the server side or on the Mac side? From what I have seen online in other forums, this started happening with Panther.

There are actually several different types of NIC Teaming Modes:
Adapter Fault Tolerance (AFT) - provides automatic redundancy for a server's network connection. If the primary adapter fails, the secondary adapter takes over. Adapter Fault Tolerance supports two to eight adapters per team. This teaming mode works with any hub or switch, and all team members must be connected to the same device.
Switch Fault Tolerance (SFT) - provides a failover relationship between two adapters when each adapter is connected to a separate switch. Switch Fault Tolerance supports two adapters per team. This feature works with any switch. Spanning Tree Protocol (STP) must be enabled when you create a team in SFT mode.
Adaptive Load Balancing (ALB) - provides load balancing for transmission traffic and adapter fault tolerance. You can also enable or disable receive load balancing (RLB) in ALB teams. This teaming mode works with any switch.
Fast EtherChannel/Link Aggregation - provides increased transmission and reception throughput in a team of two to eight adapters. This mode also includes adapter fault tolerance and load balancing (only routed protocols). This requires a switch with Link Aggregation or FEC capability.
Gigabit EtherChannel/Link Aggregation - is the gigabit extension of the FEC/Link Aggregation/802.3ad: static mode. All team members must operate at gigabit speed.
IEEE 802.3ad: dynamic mode - creates one or more teams using dynamic Link Aggregation with same-speed or mixed-speed adapters. Like the static Link Aggregation modes, Dynamic 802.3ad teams increase transmission and reception throughput and provide fault tolerance. This mode requires a switch that fully supports the IEEE 802.3ad standard.
Now, most likely, somewhere on the network a server is configured for ALB or AFT, and these are the most common methods of NIC teaming (Sadly, the XServes do not). They also do not require any certain type of switch, but they do require STP (Spanning Tree Protocol) to be turned off to function most effectively, or you will see errors on the network like the ones you are seeing in your log. Most managed switches come with STP turned on by default, so you will need to check ALL switches (as the errors will cascade throughout the network) to see if it STP is turned on. Most people do not use STP any more (it basically allows ports on one switch to appear as on another switch), so see if you can turn it off. That should stop the error messages.
-MacBoy in SLC
PowerMac G5 Dual 2.0 GHz Mac OS X (10.4.6)

Trouble with java security manager

I have set up a security manager for my webapp running on Tomcat. The application enables the user to write his own scripts using Javascript, that's why I need to set up a security manager.
Using Rhino as script interpreter, it is possible to use the standard java security mechanisms, e.g. using the security manager to handle the scripts' rights.
I've added the following lines to my policy file:
// give server all rights
grant codeBase "file:webapp/WEB-INF/-" {
     permission java.security.AllPermission;
//rights granted to scripts
grant codeBase "file:restrictedClient" {
     permission java.io.FilePermission "webapp/WEB-INF/lib/js.jar", "read";
I've assigned the scripts to the "restrictedClient" code base. However, the script execution fails as the script does not have the permission to access or define classes of any package (even standard java packages like java.lang or java.math).
In java.security, I have found the following comment:
# List of comma-separated packages that start with or equal this string
# will cause a security exception to be thrown when
# passed to checkPackageDefinition unless the
# corresponding RuntimePermission ("defineClassInPackage."+package) has
# been granted.
# by default, no packages are restricted for definition, and none of
# the class loaders supplied with the JDK call checkPackageDefinition.
#package.definition=
I now wonder, why the checkPackageDefinition is checked though there's no entry for any package to be checked.
Extending the policy file like
grant codeBase "file:restrictedClient" {
     permission java.lang.RuntimePermission "accessClassInPackage.webapp/WEB-INF/classes/org/mozilla/javascript";
     permission java.io.FilePermission "webapp/WEB-INF/lib/js.jar", "read";
     permission java.lang.RuntimePermission "defineClassInPackage.java.io";
     permission java.lang.RuntimePermission "defineClassInPackage.java.util";
     permission java.lang.RuntimePermission "defineClassInPackage.java.net";
     permission java.lang.RuntimePermission "defineClassInPackage.java.sql";
     permission java.lang.RuntimePermission "defineClassInPackage.java.lang";
     permission java.lang.RuntimePermission "defineClassInPackage.java.math";
     permission java.lang.RuntimePermission "de.methodpark.pkit.facade.impl";
works, but an unpleasant feeling remains :-).
Rhino creates an own classloader for script execution. Could that be the source of the strange behaviour?
Any help would be appreciated!
Regards,
Matthias

David,
I was glad to see your post regarding WLS 9.2 and the troubles with enabling Java Security Manager.
Were you able to learn any more on things like - why doesn't the admin console work when the security manager is enabled with the default policy file. Also, why is it so difficult to add permissions for your own applications and get them to actually work.
I'd be curious to see if you were able to get it to work or if you have any insights or resources that can help with this as we are really struggling to get a restrictive policy file that works.
Thanks,
D

WebLogic Admin Console won't work with java security manager enabled.

By just enabling the security manager on the command line with -Djava.security.manager and using the default weblogic.policy in the server/lib directory, the admin console will not work. I just see a blank page when I try to access the admin console with permission errors all over on the server console.
In looking at the admin console's weblogic.xml it should have access to everything since it contains:
grant {
permission java.security.AllPermission;
Are there known issues with this? If I add this permission to the weblogic.policy file everything works fine but then I might as well not turn on the security manager.
Thanks,
Dave

David,
I was glad to see your post regarding WLS 9.2 and the troubles with enabling Java Security Manager.
Were you able to learn any more on things like - why doesn't the admin console work when the security manager is enabled with the default policy file. Also, why is it so difficult to add permissions for your own applications and get them to actually work.
I'd be curious to see if you were able to get it to work or if you have any insights or resources that can help with this as we are really struggling to get a restrictive policy file that works.
Thanks,
D

CSA 5.1 Agent Installation on Microsoft Clusters with Teamed Broadcom NICs

I'm searching all over Cisco.com for information on installing CSA 5.1 agent on Microsoft Clusters with Teamed Broadcom NICs, but I can't find any information other than "this is supported" in the installation guide.
Does anyone know if there is a process or procedure that should be followed to install this? For example, some questions that come to mind are:
- Do the cluster services are needed to be stopped?
- Should the cluster be broken and then rebuilt?
- Is there any documentation indicating this configuration is approved by Microsoft?
- Are there case studies or other documentation on previous similar installations and/or lessons learned?
Thanks in advance,
Ken

Ken, you might just end up being the case study! Do you have a non-production cluster to with?
If not and you already completed pilot testing, you probably have an idea of what you want to do with the agent. Do you have to stop the cluster for other software installations? I guess you might ask MS about breaking the cluster it since it's their cluster.
The only caveat I've seen with teamed NICs is when the agent tries to contact the MC it may timeout a few times. You could probably increase the polling time if this happens.
I'd create an agent kit that belongs to a group in test mode with minimal or no policies attached to test first and install it on one of the nodes. If that works ok you could gradually increase the policies and rules until you are comfortable that it is tuned correctly and then switch to protect mode.
Hope this helps...
Tom S

Can not connect to ther admin server with t3s in the WLST

Hi,
Our server face a strange problem.
We want to add SSL to our server, and I have set the SSL linsten port enabled, an we can access the admin console with https protocol and SSL listen port.
Then I want to manage the server with
##start WLST with DemoTrust enable
java -Dweblogic.security.SSL.ignoreHostnameVerification=true -Dweblogic.security.TrustKeyStore=DemoTrust weblogic.WLST
##connect
If I use
connect('system','testAdmin','t3://xxxx:10001')
##this can connect successful.
If I use
connect('system','testAdmin','t3s://xxxx:10002')
It will cause an error
WLSTException: Error occured while performing connect : Error getting the initial context. There is no server running at t3s://xxxx:10002 Use dumpStack() to view the full stacktrace
I both enabled plain and SSL listen port and I can access the admin console with http and https without problem. But why I just can not use t3s to connect the server in the WLST? Is there any setting related this? Please advise, thanks.
Here is the dumpStack()
javax.naming.CommunicationException [Root exception is java.net.ConnectException: t3s://xxxx:10002: Destination unreachable; nested exception is:
java.io.IOException: Stream closed.; No available router to destination]
at weblogic.jndi.internal.ExceptionTranslator.toNamingException(ExceptionTranslator.java:40)
at weblogic.jndi.WLInitialContextFactoryDelegate.toNamingException(WLInitialContextFactoryDelegate.java:783)
at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:365)
at weblogic.jndi.Environment.getContext(Environment.java:315)
at weblogic.jndi.Environment.getContext(Environment.java:285)
at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:117)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
at javax.naming.InitialContext.init(InitialContext.java:223)
at javax.naming.InitialContext.<init>(InitialContext.java:197)
at weblogic.management.scripting.WLSTHelper.populateInitialContext(WLSTHelper.java:512)
at weblogic.management.scripting.WLSTHelper.initDeprecatedConnection(WLSTHelper.java:565)
at weblogic.management.scripting.WLSTHelper.initConnections(WLSTHelper.java:305)
at weblogic.management.scripting.WLSTHelper.connect(WLSTHelper.java:203)
at weblogic.management.scripting.WLScriptContext.connect(WLScriptContext.java:60)
at weblogic.management.scripting.utils.WLSTUtil.initializeOnlineWLST(WLSTUtil.java:125)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.python.core.PyReflectedFunction.__call__(PyReflectedFunction.java:160)
at org.python.core.PyMethod.__call__(PyMethod.java:96)
at org.python.core.PyObject.__call__(PyObject.java:248)
at org.python.core.PyObject.invoke(PyObject.java:2016)
at org.python.pycode._pyx4.connect$1(<iostream>:16)
at org.python.pycode._pyx4.call_function(<iostream>)
at org.python.core.PyTableCode.call(PyTableCode.java:208)
at org.python.core.PyTableCode.call(PyTableCode.java:404)
at org.python.core.PyTableCode.call(PyTableCode.java:287)
at org.python.core.PyFunction.__call__(PyFunction.java:179)
at org.python.pycode._pyx15.f$0(<console>:1)
at org.python.pycode._pyx15.call_function(<console>)
at org.python.core.PyTableCode.call(PyTableCode.java:208)
at org.python.core.PyCode.call(PyCode.java:14)
at org.python.core.Py.runCode(Py.java:1135)
at org.python.core.Py.exec(Py.java:1157)
at org.python.util.PythonInterpreter.exec(PythonInterpreter.java:148)
at org.python.util.InteractiveInterpreter.runcode(InteractiveInterpreter.java:89)
at org.python.util.InteractiveInterpreter.runsource(InteractiveInterpreter.java:70)
at org.python.util.InteractiveInterpreter.runsource(InteractiveInterpreter.java:44)
at weblogic.management.scripting.WLST.main(WLST.java:178)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at weblogic.WLST.main(WLST.java:29)
Caused by: java.net.ConnectException: t3s://xxxx:10002: Destination unreachable; nested exception is:
java.io.IOException: Stream closed.; No available router to destination
at weblogic.rjvm.RJVMFinder.findOrCreate(RJVMFinder.java:203)
at weblogic.rjvm.ServerURL.findOrCreateRJVM(ServerURL.java:153)
at weblogic.jndi.WLInitialContextFactoryDelegate$1.run(WLInitialContextFactoryDelegate.java:344)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
at weblogic.security.service.SecurityManager.runAs(Unknown Source)
at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:339)
... 43 more
Caused by: java.rmi.ConnectException: Destination unreachable; nested exception is:
java.io.IOException: Stream closed.; No available router to destination
at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:464)
at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:315)
at weblogic.rjvm.RJVMManager.findOrCreateRemoteInternal(RJVMManager.java:251)
at weblogic.rjvm.RJVMManager.findOrCreate(RJVMManager.java:194)
at weblogic.rjvm.RJVMFinder.findOrCreateRemoteServer(RJVMFinder.java:225)
at weblogic.rjvm.RJVMFinder.findOrCreate(RJVMFinder.java:188)
... 48 more
Edited by: Kaos on Feb 25, 2010 12:06 AM

Jai/Faisal,
One strange thing i observe, i tried connecting to admin server through WLST, it works for first time and again it gave me the error next (Connecting alternatively).
the error message which i am getting:
This Exception occurred at Thu Jun 10 08:19:39 CDT 2010.
javax.naming.CommunicationException [Root exception is java.net.ConnectException: t3s://mo8xdwls0018.bankofamerica.com:8933: Destination unreachable; nested exception is:
java.io.IOException: Stream closed.; No available router to destination]
at weblogic.jndi.internal.ExceptionTranslator.toNamingException(ExceptionTranslator.java:40)
at weblogic.jndi.WLInitialContextFactoryDelegate.toNamingException(WLInitialContextFactoryDelegate.java:783)
at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:365)
at weblogic.jndi.Environment.getContext(Environment.java:315)
at weblogic.jndi.Environment.getContext(Environment.java:285)
at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:117)
at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:667)
at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:288)
at javax.naming.InitialContext.init(InitialContext.java:223)
at javax.naming.InitialContext.<init>(InitialContext.java:197)
at weblogic.management.scripting.WLSTHelper.populateInitialContext(WLSTHelper.java:512)
at weblogic.management.scripting.WLSTHelper.initDeprecatedConnection(WLSTHelper.java:565)
at weblogic.management.scripting.WLSTHelper.initConnections(WLSTHelper.java:305)
at weblogic.management.scripting.WLSTHelper.connect(WLSTHelper.java:203)
at weblogic.management.scripting.WLScriptContext.connect(WLScriptContext.java:60)
at weblogic.management.scripting.utils.WLSTUtil.initializeOnlineWLST(WLSTUtil.java:125)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.python.core.PyReflectedFunction.__call__(PyReflectedFunction.java:160)
at org.python.core.PyMethod.__call__(PyMethod.java:96)
we are connecting to t3s://mo8xdwls0018.bankofamerica.com:8933.
Any help would be appreciated.
-Vishal Iyer

Very slow network performance with Intel NIC when TCP Large Send Offload is enabled

I have a Windows 2008 server with two NIC's (Intel PRO/1000 PL and Intel PRO/1000 PM), and one virtual external switch connected to each NIC.
With the 01/14/08 network driver, I get very low throughput on both NIC's (~10KB/sec when downloading from my server when it should be around 11MB/sec).
I've found that disabling "TCP Large Send Offload (IPv4)" on the virtual switch and "Large Send Offload v2 (IPv4)" on the physical adapters solves the problem.
Is this a bug in the driver?
Thank you,
Ricardo Costa

2 years later, I was able to get that machine to work with Hyper-V under Windows Server 2008 R2, but only after disabling everything that had anything to do with TCP or IP offloading. I think that I had to turn off 4 settings on one controller,
and 5 settings on the other controller. Once that was done, everything worked flawlessly. It is very apparent that the Virtual Controllers do not properly use many of the features of non-Intel devices (not all Intel devices work either), and
that Hyper-V does not completely uninstall if you remove it.
If you have any problems, start turning off the features that your adapter supports, until it starts working. You'll need to weight the cost of replacing the controller with a fully supported controller, of which there is no list, or using your existing
controller at a capacity lower than it physically supports. This has been an elusive issue with Microsoft's Virtual Server projects since they were first in beta, so don't expect a fix anytime soon.
P.S. For those who don't know, the settings are on the actual device and can be changed in the Device Manager. If you are still having trouble after turning off all the settings, then you will need to replace the controller(s) with a different
make/model.
Bill Bosacker's Blog @ http://www.openSourceC.org/

Ccms agent on server with : FreeBSD, Linux ?

Hi.
i want to know if it's possible to manage a server with OS :
- FreeBSD
- SuSe
- RedHat
with SAP ccms agent.
For example : it's possible to install a ccmsping on a server that have a FreeBSD like OS ?
i know that it's possible with ubuntu.
Thanks in advance.
Regards.

> For example : it's possible to install a ccmsping on a server that have a FreeBSD like OS ?
With the FreeBSD Linux emulation layer it can be possible but the agent may read data hard coded from /proc filesystem and expecting a Linux output. FreeBSD is (how the name says) a BSD based system whereas Linux is more SVR4 based and has thus other structures.
Try it!
Markus

BO Security Management within CMC

Hi,
I have two similar questions regarding the security management using InfoView with a hierarchical folder structure.
1) At the very moment when a new Folder is created, all the system users are able to see the newly created folder as per inheritance from the top-level security (view access). In order to hide this new folder from some users, the security of this Folder has to be manually updated. Is there a way to avoid this manual interaction with the system?
2) I would also like to use the "send to inbox" feature of infoview, but not all users are supposed to send reports to all other users. As per inheritance from top-level security, all users are able to see all users. Is there a way to adjust the security only for some users (view access), so that I do not have to adjust the security of all users (no access)?
Regards
Victor

What version of business objects you are using?
1) if it is XI R2. there is no way. you have to do it for every folder you create. you have to manually set no access to everyone on that folder and add groups that you want to give them access and assign access level.
if it is XI3x, you can create one custon access level with only one right that is on the folder rights, for view select granted and make it to Object only. then goto all folders in CMC, for everyone change the access level to the one you have created.
here you are breaking the inheritance. by default new folders that you create are not given access to anyone. you just need to add the groups that you want and assign access.
2) create 2 different groups. one groups for users whom you want to enable send to option. other group with remaining users.
depending the version of the business objects you can either a new access control list or goto advanced and enable rights.

Security Manager on server with teamed NICs ?

Similar Messages

Maybe you are looking for