Support parameters for downloadable user-role in the Aruba controller

Q:
What are the supported parameter for downloadable user-role that can be pushed from the cppm to the controller?
A: The downloadable user-roles are pushed from the CPPM server to the Aruba controllers after successful authentication.
The below parameters are only supported to be pushed from the cppm to the controller and rest all are not supported.
Net service
Net destination
mac/eth/session ACL
user-role
The other parameters in the cppm are intended for MAS and not for controllers.
If we try to push the unsupported parameters from the cppm server to the controller then we will the following error logs in the controller.
Apr 24 15:55:38 authmgr[3417]: <199802> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line 'qos-profile HIGH-Q', contains unsupported keyword
Apr 24 15:55:38 authmgr[3417]: <199802> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line '^Itraffic-class 7', contains unsupported keyword
Apr 24 15:55:38 authmgr[3417]: <199802> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line '^Idrop-precedence low', contains unsupported keyword
Apr 24 15:55:38 authmgr[3417]: <199802> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line '^Idscp 63', contains unsupported keyword
Apr 24 15:55:38 authmgr[3417]: <199802> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1757: Dldb Role aruba-3106-9: Rejected line '^Idot1p 7', contains unsupported keyword
Apr 24 15:55:38 authmgr[3417]: <199802> <ERRS> |authmgr| auth_cppm.c, auth_cppm_transform_writebuf:1492: Dldb Role aruba-3106-9: Rejected line '^Ivlan 100', contains unsupported keyword 'vlan'

Similar Messages

I-Tunes stopped working - wouldn't transfer music to library or IPod. I uninstalled it. Now it's gone but won't reinstall - just says "Thanks for downloading" when I hit the download button.

Hello! I'm having a giant I-Tunes problem. It started acting up a few weeks ago - wouldn't let me add information to songs, etc. and now it's full-blown screwed up - won't transfer music into the library, won't transfer music onto my IPod from my library, etc. So I finally decided to uninstall and reinstall and hope that might help. I uninstalled it and it is no longer on my computer. When I go to download it, though, it immediately comes up with "thank you for downloading" after I hit the the button and does NOT download. I can't get it back and if I do, I don't know if it will work. Any advice? Much appreciated! Tom

I have found turingttest2 very helpful in these matters.
<<Troubleshooting issues with iTunes for Windows updates>>
Look in the "Further Information" section on how to directly download iTunes. Or here:
<<Apple - Support - Downloads>>
Also, you might find this helpful:
<<Remove and reinstall iTunes and related software components for Windows Vista, Windows 7, or Windows 8 - Apple Support>>

Can we define different session time-outs for different user types in the DD?

Hello,
Do you know a way to specify different session time-outs in deployment
descriptor for different users/roles?
For example:
Role-A should be invalidated after 10 minutes
Role-B should be invalidated after 100 minutes
Shortly, I would be grateful if you can help,
Fehmi.

"Fehmi" <[email protected]> wrote in message
news:3f50fb75$[email protected]..
>
Hello,
Do you know a way to specify different session time-outs in deployment
descriptor for different users/roles?
For example:
Role-A should be invalidated after 10 minutes
Role-B should be invalidated after 100 minutes
I don't believe you can timeout a session based on a user or a role. I think
you can just specify when
all sessions timeout (via the session descriptor). But, you may want to ask
in the weblogic.developer.interest.servlet newsgroup.

OIA webservice for removing user role

Hi,
I need information regarding web services exposed in OIA for removing roles etc. We need it in our environment wherein we may not be having priviledge to make database query directly for removing user roles.
(the use case is as follows:
when user id disabled in OIM, assosciated database resource (DBAT, OIA database is used;rbx_users) is disabled ,and user's role is to be removed)
how this can be achieved via web-service call.
any pointers will be helpful
regards,
chhavi

Hi Pallavi,
i have the same problem, can you provide me more specific details?
-exactly oimjdbc.properties location please?
-which is what I have to modify?
Thanks in advance!

BRFPlus - Possible for business users to change the rules ?

Hi,
1) Is it possible for business users to change the rules in decision table, tree, formula etc?
2) If yes, what are the steps to achieve it?
Thanks.
- julius

Hi Julius,
do you know the BRFplus knowledge center:
Business Rule Framework plus [original link is broken]
There is a video called Bonus Determination that shows the steps for a developer and a business user.
The developer may create the function, data objects and maybe the initial decision table. The business user then can create the lines in a decision table.
In the 701 version this should work fine. The 701 trail version is a pre-release CD which contains some bugs that should be gone in the latest SP of 701.
BR,
Carsten

I searched for "Download FireFox 5 - got the following results: Found 1023 results for download firefox 5 in English. Please save me from having to wade through 1023 results to locate this download!

I searched for "Download FireFox 5 - got the following results: Found 1023 results for download firefox 5 in English. Please save me from having to wade through 1023 results to locate this download!

Why do you want the 5.0 version and not the just released Firefox 6 version?
*Firefox 6.0.x: http://www.mozilla.com/en-US/firefox/all.html
*Firefox 3.6.x: http://www.mozilla.com/en-US/firefox/all-older.html
*http://releases.mozilla.org/pub/mozilla.org/firefox/releases/latest-5.0/

Can't get super drive to play disc in dvd player it states disc not supported that for any disc inserted into the player

can't get super drive to play disc in dvd player it states disc not supported that for any disc inserted into the player

Hi, not sure it works in 10.9, but...
DVD Player doesn't like external players, use VLC Player...
http://www.videolan.org/vlc/
http://hints.macworld.com/article.php?story=20100208120847220
http://hints.macworld.com/article.php?story=20111107064435227

How to make Adobe acrobat feature to convert SAP Pages to PDF available for multiple users connected to the same Citrix server

Hi,
In my previous endeavours to solve this business requirement where multiple users will be able to use the Adobe acrobat feature to convert SAP pages inside SAP to PDF, I was told that it is not possible to do this for multiple users at the same time. However I have found an article according to which it says it is possible. Could you check it once and let me know if this article can be used for implementing the requirement stated above as this link clearly indicates that Adobe Acrobat is supported on Citrix.
Please find the link below where it states it is adobe acrobat is supported in Citrix for multiple users.
http://www.adobe.com/devnet-docs/acrobatetk/tools/AdminGuide/citrix.html.

1. What is the Acrobat feature that you mean? There's nothing specific to SAP included with Acrobat.
2. Yes, some Terminal Server configurations appear supported (check carefully). All users of the terminal server will need a license, so far as I know - total licenses = total individual people using.

How do I install a Thunderbird add-on for all users? Putting the XPI file into Extensions folder didn't work.

I'm trying to install Enigmail 1.8.2 for all users. I thought I read somewhere that you don't need to unpack the XPI file.
Whilst writing this, I did some experimenting and found a solution, but it's messy (see below). Is there an easier way?
Fresh install of Thunderbird 31.6 on Windows 7 x64. Have observed the following:
1. If I install the extension for one user via the Add-Ons GUI (from the marketplace, not from a local file), it does work. The Appdata\Roaming\Mozilla\Extensions folder is empty. Folder {847b3a00-7ab1-11d4-8f02-006008948af5} is created in Appdata\Roaming\Thunderbird\Profiles\xxxxxxxx.default\extensions\staged\ and moved from staged to extensions when TB is restarted.
2. If I download the XPI file from Enigmail site and copy it to Program Files(x86)\Mozilla Thunderbird\Extensions folder, then Thunderbird's Extensions screen says "You don't have any add-ons of this type installed".
3a. If I rename the xpi to zip (e.g. enigmail-1.8.2-tb+sm.xpi.zip) then I can open it and see that the contents are similar to what was created at point (1). If I unzip the contents, then Thunderbird doesn't recognise the add-on, unless I rename the folder to the GUID above (which could be found in install.rdf or chrome.manifest, once you know what you're looking for).
Presumably I could also have done a per-user install, copied the folder from the profile, removed the extension, then pasted the copy into the program folder. That would save looking up the GUID but is only a little less fiddly.
3b. After renaming the folder and restarting TB, it gives me a new tab "Install Add-on" which says "Another program on your computer would like to modify Thunderbird with the following add-on: ... Location: C:\Program Files (x86)". Once I allow the add-on, it is listed in Profiles\xxxxxxxx.default\extensions.ini.
Aside: Disabling the add-on simply removes the line from extensions.ini, so how does TB distinguish between an unapproved add-on and a disabled one? It seems to be in extensions.json.

Is Thunderbird already installed in the computers? If so, you could download the .xpi file and drag and drop it into the extensions window (after opening that) to install it in all the computers, following which you click the Install buttons when they become enabled, and you might have to restart Tbird afterwards.

Request Offerings not showing up for custom User role in SMPortal

Hello All,
I've created a custom End User role and scoped it to the domain users group.
To this role I want to show a specific set of Request Offerings on the portal
For that Purpose I created a new Service Offering and added these Request Offerings to it.
I then went on to create a Catalog Group and added the Service Offering to it.
I then created the custom user role based on the EndUser role and allowed them to see all Forms, all Queues, All CI's and on the Catalog group I select that they could only see the Catalog Group which I just created.
I then logged in into the SMPortal and was expecting that my Service Offering would be shown to them.
However, they don't see the service offering.
What could cause this?
Is there something I'm missing?
Thanks in advance!
Filip

You have to add the Service Offerings and the Request Offerings in the Catalog Group. Nesting doesn't work because Service Offerings and Request Offerings are different types of objects.
This offers the option the manage the access to Service Offerings and Request Offerings very granular if needed. For instance you can control access to a Service Offering in one Catalog Group related to one user role (A) and use two additional Catalog Groups
with different Request Offerings related to other user roles (B) and (C). Result will lead to:
User in Role A and B -> Can see Service Offerings A containing Request Offerings B
User in Role A and C -> Can see Service Offerings A containing Request Offerings C
User in Role A, B and C -> Can see Service Offerings A containing Request Offerings B and C
User in Role A only -> Don's see anything because of the missing permission on any Request Offering. So the "empty" Service Request won't show up in the portal.
Hope his helps.
Andreas Baumgarten | H&D International Group

Where is the "Prevent Active Directory synchronization for this user" stored in the Project 2010 DB tables?

I would like to create a report from the DB that gives me all users in Project/PWA 2010 where the "Prevent AD sync..." box has been checked in the user/resource configuration, but I cannot find where this is in the Project databases. Our
DB is SQL 2008 R2.
Thanks,
Marty Hadden
MS Project Administrator

Hi Marty,
I might be wrong but the Prevent AD Sync details are not available in the Reporting db. Maybe you can check the published/draft databases (not supported) or you can configure a separate custom field and you can duplicate the information for each user
into this field. The custom field can be used in the reports based on the reporting database.
Hope this helps
Paul

Obtaining url patterns for a user Role/Group

I am looking for a way to find out how to obtain a the list of accessible urls (url
patterns) for a role/group defined in weblogic.
I have gotton as far as if checking if a user is in a group using: javax.ejb.SessionContext
isCallerInRole(java.lang.String roleName)
After checking if a user is in a role/group I want to access the url pattern authorised
for a particular role under weblogic.
Can this be done.

I am looking for a way to find out how to obtain a the list of accessible urls (url
patterns) for a role/group defined in weblogic.
I have gotton as far as if checking if a user is in a group using: javax.ejb.SessionContext
isCallerInRole(java.lang.String roleName)
After checking if a user is in a role/group I want to access the url pattern authorised
for a particular role under weblogic.
Can this be done.

Weblogic API for modifying users/roles

I need to write an application which will enable adding users to weblogic
domain and configuring roles.
Does Weblogic provide such API?
If so, what are the relevant packages?
P.S.
I wasn't sure which exact newsgroup my question belongs to.
If anyone has a better suggestions please provide it.

I searched the newsgroup and found that somebody addressed this issue.
"Andrey" <[email protected]> wrote in message
news:[email protected]...
>
WebLogic 7.0
I have read a number of questions on how to do these but not many answers,so
after figuring it all out, I thought I would post a message describing allthese
tasts (It would be great if BEA would start something like 'HOW-TOs forLinux'
for WebLogic)
-1. Imports required :
import weblogic.jndi.Environment;
import weblogic.management.MBeanHome;
import weblogic.management.WebLogicObjectName;
import weblogic.management.configuration.DomainMBean;
import weblogic.management.configuration.SecurityConfigurationMBean;
import weblogic.management.security.RealmMBean;
importweblogic.management.security.authentication.AuthenticationProviderMBean;
import weblogic.management.security.authentication.GroupEditorMBean;
import weblogic.management.security.authentication.UserEditorMBean;
importweblogic.management.security.authentication.UserPasswordEditorMBean;
import weblogic.security.providers.authentication.*;
0. Code to retrieve DefaultAuthenticatorMBean (this code is running insideWebLogic
server - I have it inside EJB):
DefaultAuthenticatorMBean authBean;
Context ctx = new InitialContext();
MBeanHome mbeanHome = (MBeanHome)ctx.lookup(MBeanHome.ADMIN_JNDI_NAME);
>
//Find UserEditorMBean
DomainMBean dmb = mbeanHome.getActiveDomain();
SecurityConfigurationMBean scmb =dmb.getSecurityConfiguration();
RealmMBean rmb = scmb.findDefaultRealm();
AuthenticationProviderMBean[] providers =rmb.getAuthenticationProviders();
>
for (int i = 0; i < providers.length; i++) {
if (providers[i] instanceof DefaultAuthenticatorMBean) {
authBean = (DefaultAuthenticatorMBean) providers;
break;
1. Create/Drop/Update users
to perform these tasks, the user must be logged in into weblogic and be in
Administrators
group. Then, the code is as follows:
create user: authBean.createUser(username, password, description);
remove user: authBean.removeUser(username);
change user's description: authBean.setUserDescription(username,newDescription);
>
remove user from group: authBean.removeMemberFromGroup(groupname,username);
>
add user to group: authBean.addMemberToGroup(groupname,username);
>
2. Change other users' passwords (MUST BE ADMIN TO DO THIS - by Admin Imean be
a member of Administrators group)
authBean.resetUserPassword(username, newPassword);
3. Change your own password:
this is a bit trickier, because if you are not an admin, you can't changeyour
own password!!!! This is a part that I personally don't understand - seemslike
a screw up on BEA's part. So, to allow users to change their ownpasswords, you
must change security context in the middle of processing to that of Adminuser
and run this function as Admin user. Although a bit ackward, it's veryeasy to
do. Suppose you have two EJBs - EJB A and EJB B. EJB A does normalprocessing
for the user and always runs in logged in user's security context. Now,suppose
you want to add a method to EJB A to change current password. The methodmay
look like:
public void changePassword(String logon, String oldpwd, String newpwd)
throws some exceptions
Now, there is no way to do it in EJB A, because for most users, it willrun in
a 'non-admin' security context. So, to get around it, you create another
EJB - EJB B. This EJB has one method:
public void changePassword(String logon, String oldpwd, String newpwd)
throws some exceptions
and one major difference - this EJB always runs in a secrity context ofadmin
user. To get an EJB B running 'as admin user', all you have to do in EJBA is
the following
EJB A:
public void changePassword(String logon, String oldpwd, String newpwd)
Hashtable props = new Hashtable();
props.put(Context.SECURITY_PRINCIPAL, "wlmanager");
props.put(Context.SECURITY_CREDENTIALS, "password");
// get context that with different credentials
Context ctx = new InitialContext(props);
EJBBHome home = (EJBBHome) ctx.lookup("EJBBHome");
EJBBLocal adminEJB = home.create();
adminEJB.changePassword(logon, oldpwd, newpwd);
adminEJB.remove();
of course, this poses a problem of hardcoding user id and password foradmin user
in your application - you can come up with your own ways to secure that.
THAT's IT!!! You can use the method explained in part 3 to allownon-admin users
to do pretty much everything, however for the sake of security, I woulddefinetly
vote against it and use part 3 to ONLY allow users change their ownpasswords
>
Enjoy
Andrey
"Yonatan Taub" <[email protected]> wrote in message
news:[email protected]...
I need to write an application which will enable adding users to weblogic
domain and configuring roles.
Does Weblogic provide such API?
If so, what are the relevant packages?
P.S.
I wasn't sure which exact newsgroup my question belongs to.
If anyone has a better suggestions please provide it.

How do i enable office applications for all user accounts on the same machine?

Hi All,
I just purchased a new MBA and Office Hame & Business. Coming from the windows world I thought that one installation of office should be available to all accounts that I set up on the same machine. I set-up the user accounts then installed office 2011 for MAC and tried to access office from my daughters account -> can not locate office? Does MS expect that you need to purchase a separate copy of office for each user on the same machine?? I also don't want to waste precious harddrive space in the MBA to have separate copies of the same application installed.
Any help would be appreciated....
Andrew

One install allows all your users to use Office. All your users have access to the Applications folder where the office apps are installed. Do you see the office folder from your daughters account in applications?

How to make Adobe acrobat feature to convert SAP Pages to PDF available for multiple users connected to the same server

We have installed Adobe Acrobat X Pro- English,Francais,Deutsch version 10.1.9 in our test environment and tried testing it for converting SAP pages into PDF with a few pilot users. In doing so we faced a challenge, where only one user at a time can use Adobe Acrobat PRO to convert SAP pages in to PDF.As long as the first user who is connected to Adobe Acrobat Pro via SAP isn’t logged off, other users connected to the same server are not being able to get the “Save As” dialog box to save the PDF in their preferred location.
This is a business requirement and we need an urgent solution for the same. Can anyone help us in telling us if this is possible and if yes the how to go about?

It's not something we deal with here, the LiveCycle products are a different world. Key points: Adobe LiveCycle is a range of products, some desktop, some server. LiveCycle PDF Generator is the one you should look at, it comes in 3 editions. License terms are by negotiation. Key management is via its Java API.

Support parameters for downloadable user-role in the Aruba controller

Similar Messages

Maybe you are looking for