Using Cannibalization Group with just DP implemented
Hi
I have just implemented Demand Planning (DP) and won´t implement other APO module.
I want to use the cannibalization group (transaction /SAPAPO/MP32), but I have to click the BOM button (shift+F6) to bring and see the products. I don´t need the BOM for DP.
Can´t I use the Cannibalization group if I just implement DP or what should I do?
Thanks in advance
Hi LCD777,
If you use cannibalization, the products that you want to plan in Demand Plnning must be
defined as products in the APO master data.
To use cannibilization groups, you must include a characteristic for the product in the
planning book. If you do not use 9AMATNR for the product, you must specify which
characteristic is the product in the master planning object structure.
You specify the cannibalization group when you create a promotion for a product. The
promotions for the other products in the cannibalization group are calculated automatically.
Regards
R. Senthil Mareeswaran.
Similar Messages
-
Can i use iTunes Match with just an Ipad or Iphone? I no longer have a computer
pollyjane wrote:
Is there any way to use match without computer ?
Not really, no. I suppose in theory, but there is no way to manage the library, or retrieve the match contents for back up or other purposes. -
Using a MacBook with ONLY a Power Adapter
HI!
is it possible to use my MacBook with just the power adapter? The current batter and adapter are both dead, and I'm pretty low on cash. So I was thinking I would purchase a new adapter in Amazon. Thoughts? Thanks.Yes, you can use it on just the power adapter, without a battery installed.
There is a significant performance decrease when a functional battery is not installed, but it will still work without a battery, just not as fast.
Here is one of many links on the subject:
http://techcrunch.com/2008/11/22/macbook-performance-drops-37-percent-without-ba ttery-installed/ -
Limitation on source group with services using ip address range
Hello,
I have an interface on CSS which I regard as public and another interface I regard as private. On the private interface is a server farm with private ip addresses. Since the server admin guys insisted the servers need to access internet just for Windows Update, I made a source group to NAT the private addresses to public addresses to allow the servers to access internet.
I defined services for use by the source group. Since keepalive is not important in this case, I set keepalive none to ,I hope so, save system resources.
I have server 192.168.1.1-5 (5 servers) and 192.168.1.11-14 (4 servers), so I made a service with ip address 192.168.1.1 range 5 and another service 192.168.1.11 range 4.
But then I found that the two services cannot be put in the same source group. It is because of the different range in the service definition.
I can get it work if I define services with single ip address, but then I will have a long configuration with repetative information. And I think this may be using more system resources.
I can also get it work if I include 192.168.11.15 and define two services both with a range of 5 ip addresses. But 192.168.11.15 is not actually there.
Why is there such a limitation on source group, or services with ip address range? Is there the same limitation for content rules? Or am I getting it all wrong and should do the configuration in other ways?
Advices will be welcomed.
CT Yau
Hong KongYes you are correct. There is a limitation while adding services into source groups.
You can create as many services that share an ip range (eg. a /24 subnet range). But the trouble starts when you add them into source groups. You can not add them into a source group NOR you can add them under different source groups as well.
You mentioned that you can use single ip adress instead of range for the services...but it is not true as you will be stuck when you add them into source groups.
I can think of these following options in your case.
Option 1
Change the ip range on the servers. Use 2 different IP ranges one for those 5 servers and another for those 4 servers.
Create 2 services for each range.
Create 2 groups and add the services.
service server-out-192.168.1.1-5
ip address 192.168.1.1 range 5
active
service server-out-172.168.1.11-14
ip address 192.168.1.11 range 4
active
group server-out-192.168.1.11-14
vip address x.x.x.1
add server-out-192.168.1.1-5
active
group server-out-172.168.1.11-14
vip address x.x.x.2
add server-out-172.168.1.11-14
active
Option 2
Create a service that includes all the ip addresses starting from 192.168.1.1 through .14 using the range keyword.
Now you need to create one source group with a VIP. Add the service to the source group.
If you do not want to cover the unassigned ip addresses just move them up and use consecutive ones.
service server-out-192.168.1.1-14
ip address 192.168.1.1 range 14
active
group server-out-192.168.1.11-14
vip address x.x.x.x
add service server-out-192.168.1.1-14
active
thanks -
You can download past purchases on this computer with just one Apple ID every 90 days. This computer can be used with a different Apple ID in 71 days. Whats the deal???
You can use multiple AppleIDs to purchase new music but you are limited as to how frequently you can change authorizations for re-downloading past purchases. It may well be a measure to deter piracy by stopping a group of people from going around to a friend's computer and downloading purchases on the other person's computer. It is easy to avoid by making sure you have backup copies on drives at home so you never need to redownload anything.
-
I can't pull up purchased content without this - You can download past purchases on this computer with just one Apple ID every 90 days. This computer can be used with a different Apple ID in 60 days. - my ID hasn't changed
You can use multiple AppleIDs to purchase new music but you are limited as to how frequently you can change authorizations for re-downloading past purchases. It may well be a measure to deter piracy by stopping a group of people from going around to a friend's computer and downloading purchases on the other person's computer. It is easy to avoid by making sure you have backup copies on drives at home so you never need to redownload anything.
-
I have a problem with my white macbook, this message keeps popping up when I start the laptop " no matching processes belonging to you were found " even though I didn't mess up with the system or even use terminal. It just appeared without Doing anything!!
And now I can't use the " tap an click " from my tack-board and no nothing was spilled on my mac.
Please helpCheck your login items in the Users & Groups preference pane. Remove any that you don't recognize.
-
We are a Global group, with divisions using a single instance of Eloqua
Any advice on this would be great.
We are a Gloabl group, with a number of different divisions, offering different I.T services and solutions. Each has its own marketing roadmap to which a single database will be used to target and segment via marketing activity.
Just after some advice and best practice I suppose, hopefully there is someone out there who has tackled a similar problem ...
i) What is the best way to target these divisions within a single database, without causing too much of a headache.
ii) As we have a single instance of ELQ, in terms of differentiating the divisions, is the easy approach to simply set up different email groups for camapigns? I.E, Different Headers, footers and preference centres etc... ???
Haven't started to consider the ELQ side of things as yet, but was wondering if anyone has tackled this recently, before I deep dive in, and if they have any advice?
Thanks in advance.I agree with all of the above! I will just add a couple of additional suggestions:
I would really put some effort in your preference center. Make sure you clearly define your opt-in/opt out strategy and the priority of messages to avoid redundancy and unnecessary overlaps. This may require collaboration with other teams upfront but can save you time and headaches in the long run.
Along with this, your content strategy can benefit from a regular review at a global level to ensure you are still relevant at the division level (which I would assume you already do )
If you have customers who are likely to be member of multiple divisions, I would also make sure to run some filters or have a program that checks your set of rules in order to manage email frequency.
Like Marian suggested, adherence and reinforcement of a solid naming convention for everything will be key.
Cheers! -
Creating a material with just the basic view using BAPI
Hi
I intend to create a new material with just the basic view using BAPI BAPI_MATERIAL_SAVEDATA -
To do this - I believe I have to fill in the structure HEADDATA data - ( mandatory ) with the required values - I fill values for fields IND_SECTOR, MATL_TYPE & basic view ( check this field ) and leave the MATERIAL field as blank (assuming internal numbering ) and then fill values of the CLIENTDATA structure with values for the basic data view.
Is this correct ? Will my material number created be returned in the RETURN structure - how do I look for the material number exclusively in my RETURN structure ?hi
good
go through this progarm which ll give you detail idea about BAPI_MATERIAL_SAVEDATA
REPORT ZBAPIMM01 LINE-SIZE 255 NO STANDARD PAGE HEADING
LINE-COUNT 065(001).
TABLES: T001L, "Storage Locations
MARA, "General Material Data
MAKT, "Material Descriptions
MBEW, "Material Valuation
MARC. "Plant Data for Material
DATA: BAPI_HEAD LIKE BAPIMATHEAD,
BAPI_MAKT LIKE BAPI_MAKT, "Material Description
BAPI_MARA1 LIKE BAPI_MARA, "Client Data
BAPI_MARAX LIKE BAPI_MARAX,
BAPI_MARC1 LIKE BAPI_MARC, "Plant View
BAPI_MARCX LIKE BAPI_MARCX,
BAPI_MBEW1 LIKE BAPI_MBEW, "Accounting View
BAPI_MBEWX LIKE BAPI_MBEWX,
BAPI_RETURN LIKE BAPIRET2.
DATA: BEGIN OF INT_MAKT OCCURS 100.
INCLUDE STRUCTURE BAPI_MAKT.
DATA: END OF INT_MAKT.
DATA: BEGIN OF INT_MAT OCCURS 100,
WERKS(4), "Plant
MTART(4), "Material type
MATNR(18), "Material number
MATKL(9) , "Material group
MBRSH(1), "Industry sector
MEINS(3), "Base unit of measure
GEWEI(3), "Weight Unit
SPART(2), "Division
EKGRP(3), "Purchasing group
VPRSV(1), "Price control indicator
STPRS(12), "Standard price
PEINH(3), "Price unit
SPRAS(2), "Language key
MAKTX(40), "Material description
END OF INT_MAT.
SELECT-OPTIONS:
PLANT FOR MARC-WERKS OBLIGATORY MEMORY ID PLT,
MATERIAL FOR MARA-MATNR MEMORY ID MAT,
MATLTYPE FOR MARA-MTART MEMORY ID MTY,
DIVISION FOR MARA-SPART MEMORY ID DIV.
PARAMETERS: F_FILE LIKE RLGRAP-FILENAME
DEFAULT 'C:\DATA\ZMATERIAL.XLS' MEMORY ID F_FILE,
GETDATA AS CHECKBOX, "Tick to download materials data to local harddisk
UPDDATA AS CHECKBOX. "Tick to update date to Materials Master
IF GETDATA = 'X'.
PERFORM DOWNLOAD_DATA.
PERFORM DOWNLOAD_FILE.
ENDIF.
IF UPDDATA = 'X'.
PERFORM UPLOAD_FILE.
PERFORM UPDATE_MM.
ENDIF.
FORM DOWNLOAD_DATA.
SELECT * FROM MARC WHERE LVORM EQ ' '
AND WERKS IN PLANT
AND MATNR IN MATERIAL.
CLEAR MARA.
SELECT SINGLE * FROM MARA WHERE MATNR = MARC-MATNR.
CHECK MATLTYPE.
CHECK DIVISION.
CLEAR MBEW.
SELECT SINGLE * FROM MBEW WHERE MATNR = MARC-MATNR
AND BWKEY = MARC-WERKS.
CLEAR MAKT.
SELECT SINGLE * FROM MAKT WHERE SPRAS = 'EN'
AND MATNR = MARC-MATNR.
WRITE:/ MARC-WERKS, "Plant
MARA-MTART, "Material type
MARA-MATNR, "Material number
MARA-MATKL, "Material group
MARA-MBRSH, "Industry sector
MARA-MEINS, "Base unit of measure
MARA-GEWEI, "Weight Unit
MARA-SPART, "Division
MARC-EKGRP, "Purchasing group
MBEW-VPRSV, "Price control indicator
MBEW-STPRS, "Standard price
MBEW-PEINH, "Price unit
MAKT-SPRAS, "Language key
MAKT-MAKTX. "Material description
INT_MAT-WERKS = MARC-WERKS. "Plant
INT_MAT-MTART = MARA-MTART. "Material type
INT_MAT-MATNR = MARA-MATNR. "Material number
INT_MAT-MATKL = MARA-MATKL. "Material group
INT_MAT-MBRSH = MARA-MBRSH. "Industry sector
INT_MAT-MEINS = MARA-MEINS. "Base unit of measure
INT_MAT-GEWEI = MARA-GEWEI. "Weight Unit
INT_MAT-SPART = MARA-SPART. "Division
INT_MAT-EKGRP = MARC-EKGRP. "Purchasing group
INT_MAT-VPRSV = MBEW-VPRSV. "Price control indicator
INT_MAT-STPRS = MBEW-STPRS. "Standard price
INT_MAT-PEINH = MBEW-PEINH. "Price unit
INT_MAT-SPRAS = MAKT-SPRAS. "Language key
INT_MAT-MAKTX = MAKT-MAKTX. "Material description
APPEND INT_MAT.
CLEAR INT_MAT.
ENDSELECT.
ENDFORM.
FORM DOWNLOAD_FILE.
call function 'WS_DOWNLOAD'
EXPORTING
FILENAME = F_FILE
FILETYPE = 'DAT'
FILETYPE = 'WK1'
tables
data_tab = INT_MAT
EXCEPTIONS
FILE_OPEN_ERROR = 1
FILE_WRITE_ERROR = 2
INVALID_FILESIZE = 3
INVALID_TYPE = 4
NO_BATCH = 5
UNKNOWN_ERROR = 6
INVALID_TABLE_WIDTH = 7
GUI_REFUSE_FILETRANSFER = 8
CUSTOMER_ERROR = 9
OTHERS = 10.
IF SY-SUBRC = 0.
FORMAT COLOR COL_GROUP.
WRITE:/ 'Data Download Successfully to your local harddisk'.
SKIP.
ENDIF.
ENDFORM.
FORM UPLOAD_FILE.
call function 'WS_UPLOAD'
EXPORTING
FILENAME = F_FILE
FILETYPE = 'DAT'
FILETYPE = 'WK1'
tables
data_tab = INT_MAT
EXCEPTIONS
FILE_OPEN_ERROR = 1
FILE_WRITE_ERROR = 2
INVALID_FILESIZE = 3
INVALID_TYPE = 4
NO_BATCH = 5
UNKNOWN_ERROR = 6
INVALID_TABLE_WIDTH = 7
GUI_REFUSE_FILETRANSFER = 8
CUSTOMER_ERROR = 9
OTHERS = 10.
IF SY-SUBRC = 0.
FORMAT COLOR COL_GROUP.
WRITE:/ 'Data Upload Successfully from your local harddisk'.
SKIP.
ENDIF.
ENDFORM.
FORM UPDATE_MM.
LOOP AT INT_MAT.
Header
BAPI_HEAD-MATERIAL = INT_MAT-MATNR.
BAPI_HEAD-IND_SECTOR = INT_MAT-MBRSH.
BAPI_HEAD-MATL_TYPE = INT_MAT-MTART.
BAPI_HEAD-BASIC_VIEW = 'X'.
BAPI_HEAD-PURCHASE_VIEW = 'X'.
BAPI_HEAD-ACCOUNT_VIEW = 'X'.
Material Description
REFRESH INT_MAKT.
INT_MAKT-LANGU = INT_MAT-SPRAS.
INT_MAKT-MATL_DESC = INT_MAT-MAKTX.
APPEND INT_MAKT.
Client Data - Basic
BAPI_MARA1-MATL_GROUP = INT_MAT-MATKL.
BAPI_MARA1-BASE_UOM = INT_MAT-MEINS.
BAPI_MARA1-UNIT_OF_WT = INT_MAT-GEWEI.
BAPI_MARA1-DIVISION = INT_MAT-SPART.
BAPI_MARAX-MATL_GROUP = 'X'.
BAPI_MARAX-BASE_UOM = 'X'.
BAPI_MARAX-UNIT_OF_WT = 'X'.
BAPI_MARAX-DIVISION = 'X'.
Plant - Purchasing
BAPI_MARC1-PLANT = INT_MAT-WERKS.
BAPI_MARC1-PUR_GROUP = INT_MAT-EKGRP.
BAPI_MARCX-PLANT = INT_MAT-WERKS.
BAPI_MARCX-PUR_GROUP = 'X'.
Accounting
BAPI_MBEW1-VAL_AREA = INT_MAT-WERKS.
BAPI_MBEW1-PRICE_CTRL = INT_MAT-VPRSV.
BAPI_MBEW1-STD_PRICE = INT_MAT-STPRS.
BAPI_MBEW1-PRICE_UNIT = INT_MAT-PEINH.
BAPI_MBEWX-VAL_AREA = INT_MAT-WERKS.
BAPI_MBEWX-PRICE_CTRL = 'X'.
BAPI_MBEWX-STD_PRICE = 'X'.
BAPI_MBEWX-PRICE_UNIT = 'X'.
WRITE:/ BAPI_HEAD, BAPI_MARC1.
call function 'BAPI_MATERIAL_SAVEDATA'
exporting
HEADDATA = BAPI_HEAD
CLIENTDATA = BAPI_MARA1
CLIENTDATAX = BAPI_MARAX
PLANTDATA = BAPI_MARC1
PLANTDATAX = BAPI_MARCX
FORECASTPARAMETERS =
FORECASTPARAMETERSX =
PLANNINGDATA =
PLANNINGDATAX =
STORAGELOCATIONDATA =
STORAGELOCATIONDATAX =
VALUATIONDATA = BAPI_MBEW1
VALUATIONDATAX = BAPI_MBEWX
WAREHOUSENUMBERDATA =
WAREHOUSENUMBERDATAX =
SALESDATA = BAPI_MVKE1
SALESDATAX = BAPI_MVKEX
STORAGETYPEDATA =
STORAGETYPEDATAX =
IMPORTING
RETURN = BAPI_RETURN
TABLES
MATERIALDESCRIPTION = INT_MAKT
UNITSOFMEASURE =
UNITSOFMEASUREX =
INTERNATIONALARTNOS =
MATERIALLONGTEXT =
TAXCLASSIFICATIONS =
RETURNMESSAGES =
PRTDATA =
PRTDATAX =
EXTENSIONIN =
EXTENSIONINX =
IF BAPI_RETURN-TYPE = 'E'.
WRITE:/ 'Error Message ', BAPI_RETURN.
ENDIF.
ENDLOOP.
ENDFORM.
*---End of Program
thanks
mrutyun^ -
Can I sync my phone with just certain contact groups?
We have two iphones that are linked to one apple id. i have had to turn off cloud contact syncing as it was syncing both phones with all contacts
Syncing with my mac allows syncing with specifc contact groups, is this possible with cloud syncing?iCloud will not sync specific contact folders like iTunes. The only way to separate your contacts is to set up different iCloud accounts on both phones. If you want to do this, first decide which phone will be moving to the new account, then on the phone that will be moving, go to Settings>iCloud and turn all data that is syncing with iCloud (contacts, calendars, etc.) to Off. When prompted choose to keep the data on the iPhone. After everything is turned off, scroll to the bottom and tap Delete Account. (This will only delete the account from this phone, not from iCloud. The other phone will not be effected by this.) Next, set up a new iCloud account on this phone using a different Apple ID and turn iCloud data syncing for contacts, etc. back to On. When prompted, choose Merge. This will upload the data to this new account. At this point you will have two different iCloud accounts, one for each phone, with identical data on them.
You will then have to go to icloud.com on your computer and sign into each iCloud account separately and manually delete the unwanted data (such as deleting the other phone's contacts from your account, and vice versa). These changes will be reflected on each phone. When finished you will have individual iCloud accounts with just your own data on them. -
Css is it possible to use two VIPs with one source group?
I have separate VIPs defined for balancing dns and radius. Both services are being balanced behind the CSS between two servers running both services. Is there a way, using source groups, to have the outbound dns udp lookups go out the associated dns VIP and a client's returning radius udp traffic sourced from the associated radius VIP?
Just a note for clarity: both services defined for dns and radius have the same ip addresses. I can only define one of the services(i.e. dns) in a single source group which automatically associates the other service (i.e. radius) to that group.If I understand your question correctly, you want to have the same real server respond with a different source address based on with VIP was used to get to it.
You can only put on instance of the server's ip address into a source group. That is you can't add the service name used for one rule into one group, and the service used in the other rule into another group, since the CSS only looks at the source address when it is determining to use the source group based on the service named in it. In order to have the same server use two different source groups, you would need ACL clause with the sourcegroup option, like
permit any 10.0.0.1 eq 53 dest any sourcegroup
permit any 10.0.0.1 dest any sourcegroup
Michael -
I purchase a new album on my phone but then cannot download it to my laptop - I get the message:
"You can use iTunes Match on this computer with just one Apple ID every 90 days. All I can think is that the problem stems from purchasing a mobileme family & some of the music being my daughters. (she is 9 & I need to be ble to listen to more than Katy Perry & Justin Bieber) Please help! :-(Welcome to the Apple Community.
Youll get that message when you change the iTunes account you are logged into, you can't keep changing it. -
To save time, could I get away with just using ProRes Proxy?
Might be a dumb question. But please play along with me...
I've been battling with FCP-X since it first came out. Beach balls, crashes, failed auto saves, you name it. Sluggishness is my middle name. But I think it might be because I'm trying to force too much quality through my older, less powerful machines and my little firewire 400 hard drive. All three of my Mac are 3-4 years old, all are from the old "Core 2 Duo" era (not quad core processors), and are all maxed out at 4GB of RAM. While I've read that many people are having performance problems with FCP-X even on brand spankin' new suped-up Mac Pros with lots more horsepower than I'm running, I've long thought that my machines and their lack of power by today's standards may be at the heart of my sluggishness problem, especially given that most of the material I work with is shot in 1080 HD. (I've never actually tested it in FCP-X, but I'm assuming that things would speed along more like I've been used to in the past if I would just do everything in Standard Definition 480, but that ain't gonna happen.)
Like many, I shoot most everything in 1080 HD (usually 24p, sometimes 30), unless I'm occasionally shooting 720 HD at 60i for later slowing down to slo-mo.
Here's my question: Most everything I edit is for web delivery, and 99 percent of it is for my own use (not clients). Mostly podcast-like stuff, although occasionally I'll create something for my business website. Most of what I do is talking head type stuff, not a lot of motion (except for the 720/60i slo-mo stuff, which usually has some motion, which is why I shoot it at 60i for slowing down). Most of what I shoot is green screen talking heads, intended to be keyed in front of some innocuous background like some of the generators in FCP-X. I want it to look good. Even great. But given the limitations of power on my machines, I also don't want to invest an eternity in rendering and processing time. The work I'm doing with video just isn't that important. It's mostly for grins.
Until last night, I had been working exclusively in ProRes422 (aka "Optimized"). But last night I shot some footage and imported it into FCP-X, encoding it ONLY in ProRes Proxy. And frankly, I couldn't discern any difference. It looked every bit as good as the 422 stuff I'd shot before. There was absolutely no difference to my naked eye. That said, the footage I shot last night to test this out was not shot in front of the green screen (I'll test that out today or tonight), so maybe the Proxy footage won't key as well. (I've been stunned at how good the keyer is in FCP-X, but up to this point I've only been keying ProRes422 footage, not Proxy.) But really, based on just eyeballing the footage, I couldn't tell the difference between the Proxy footage and all the other footage I'd shot previously that had been imported and converted to "Optimized" ProRes422.
I'm not looking to deliver anything for broadcast television (if I were, I'd for sure use 422). I'm not doing any feature film type stuff. My video work consists mainly of stuff just for me, for my own personal amusement (and for the amusement of anyone who might watch it on the web). It's intended for YouTube, Vimeo, or occasionally (in smaller dimensions than 1920x1080) for deployment on my company website. Mostly, it's just me doing podcast-type stuff. Occasionally I'll shoot and edit something for church, or for friends. I like to think the production values of my stuff tend to be higher than, say, the footage Aunt Delores shot at Uncle Ralph's birthday party (okay, A LOT higher than that!). But my stuff isn't going to air on "Good Morning Flatbush" either (unless, on the off chance it should happen to go viral).
So let me make my question as clear as possible: Could I not get away with just using ProRes Proxy throughout my entire work flow, end to end, never switching over to ProRes 422 even when exporting? Honestly, it has taken hours just to render the keyed green screen footage on a 15 minute video, and just the other night, it took the better part of 4 hours (after it was already rendered) to export a 15 minute ProRes422 sequence to YouTube (and then the darn thing timed out, essentially wasting all my time). I'd rather just stay in Proxy the whole way through if doing so would streamline my workflow without compromising too much quality in the "look" of the video. Based on my very limited use of Proxy (just testing it out last night for the first time), I couldn't tell the difference. Maybe for web deployment, Proxy is all I really need.
Have any of you just stayed in Proxy the whole way through, never switching to 422 even when exporting? Might this be an acceptable work flow for some of us, especially those of us on older, less powerful machines? Is this a viable solution? Do any of you work this way? What's your level of satisfaction?
Thoughts?A lot of what I'm shooting is being shot on a Canon XA-10. Some (and certainly all of the 720 footage, but some of the 1080) is shot on a 7D. And still more is shot on either an iPhone 4S, or even on a Flip Ultra (720p, 30fps).
Most is shot on the XA-10.
What I'm trying to avoid is the excessive render times (doesn't the ProRes 422 footage have to render as well?), and the ridiculously long times it takes to export. Would all that not be reduced significantly by sticking to Proxy the whole way? And what would the trade-off be? I mean, I honestly can't see any discernible difference. Maybe I will when I try to pull a decent key. (Haven't gotten that far yet in my Proxy experimentation.)
Of course, editing in Proxy and outputting using 422 requires that FCP-X encode to BOTH when importing, right? Doesn't that add yet another bit of time to the overall process?
I'm trying to streamline, and to reduce the overall amount of time I'm spending doing this stuff. -
ACS 5.3 Authorization problem with using Identity Groups in Access Policy Rule
Hello guys, I am found a problem which I can't solve regarding authorization with using Identity Groups in Access Policy rule.
ACS version: 5.3.0.40.6 (internal build B.839)
I have very simple RADIUS Authorization rule which authorize user on behalf of right Identity Group.
Requested Identity Group exist
Testing user is created in Internal Users and has assigned requested Identity Group
Radius Access Policy:
Authentication against Identity Store Sequence, where authorization server is external RSA SecurID device and additional attributes retrieval is configured from Internal Users.
Authorization is very simple – One Rule with only one Condition which is: Identity Group - in - Requested_Testing_Rule. Then Default rule is set to Deny.
When I will try login with my testing user then authentication against RSA SecurID is OK, but authorization will be denied by Default rule – It looks like my Rule with Identity Group is totally omitted.
I am managing several other ACS servers (version 5.3 but with older patches) where similar rules are working without problem.
What I am tested:
Remove testing user and create his account again.
Rename Identity Group
Use another Identity Group
Remove Access Policy rule and create it again
Use Compound Condition: System:Identity Group
Use Compound Condition: System:UserID instead of Identity Group in Rule (it is working without problem)
Do you have any idea where problem can be?OK guys, it started working yesterday without any configuration change. Maybe it was some database inconsistence wich was solved by ACS itself.
-
I have OS 10.8.2 and use wireless at home just fine.
When I visit a friend with only a cable modem internet my Mac Book Pro will not connect.
I see that the Mac Book Pro is picking up the internet when I check the internet preference section but it will not open Safari.
What do I need to do connect via a cable modem?You need to power off the modem for 15-30 seconds, then power back up and then connect. The modem is remembering the last connection (your friend).
Maybe you are looking for
-
How to delimit Relation b/w Pers# & Position in PP01 in sap HR
Hi Experts, in PA30, while creating the record for my custom infotype, in my custom infotype i am providing Position. once save the record i am trying to create the custom(AZ08)relation with Pers# and Position. it is working fine. For creating Relati
-
Hey guys, Can anyone please help me find out what is the JDBC url for Yahoo Finance Database that stores the values of the historical stock quotes . I desperately need it for my java application in which I require to access the database in order to g
-
Impdp specific schema from dump which has been created using full=y
Hi, I have received a dump (expdp) which has been created using the parameter FULL=Y. I just want to import (impdp) only one schema into my database. I have used remap_schema and exclude=grants. The schema i want to import is carried out successfully
-
Student Edition CS6 Illustrator install failed
Why did everything in my son's Student Edition CS6 install on the Mac (10.8) except Illustrator?
-
Is adobe creative suite version1 compatible with windows 7
is adobe creative suite version1 compatible with windows 7