Using SPML for Identity Management in EJB WebService

Dear All,
I have a requirement af using SPML(Service Provisioning Markup Language) for Identity management. Identity management is used to manage the user like deleting a user, modifying, adding a user etc for a application.For that the request for all these functions need to be made using the SPML. The idea is that first the data used to make any request will come from the SAP R3 using an EJB which will retrieve that data by calling a BAPI via JCO and then it is needed to be passed to the entitlement system using the SPML.Thus I have to publish a web service which will get data by calling BAPI and give it to entitlement system using SPML and how can I achieve it?. I have less knowledge about SPML, your guidence will help.
Thanks & Regards,
Samir

There is a document on the SAP Service Market Place that covers the SPML in the UME APIs. This quote is from the [UME documentation|http://help.sap.com/saphelp_nw04s/helpdata/en/5b/5d2706ebc04e4d98036f2e1dcfd47d/frameset.htm]:
SPML Support
The UME APIs support access using the Service Provisioning Markup Language (SPML). For more information, see service.sap.com/security > Security in Detail > Secure User Access > Identity Management > SAP Identity Management APIs.
-Michael
Edited by: Michael Shea on Jan 17, 2008 9:01 AM

Similar Messages

Looking for an example from app gallery that uses WAAD for identity

I'm looking for an example from the app gallery (http://azure.microsoft.com/en-us/gallery/active-directory/) that uses WAAD for identity. I need one the show our business what the process would look like for an organization signing up for a SaaS offering
via the App Gallery. I know all the Microsoft applications use WAAD but I was hoping to find a third-party example. What I mean is an app where all tenant and user identity is done using WAAD as opposed to federated identity.

I doubt that what you are looking for exists yet.
Cheers,
Markus
Markus Vilcinskas, Knowledge Engineer, Microsoft Corporation

How to repair the database used by Oracle Identity Manager 11g

Hi friends,
I have a question about Oracle Identity Manager 11g.
As I can repair the database used by Oracle Identity Manager 11g
Thanks

I think you can do if the repaired database is replica of old one.
http://download.oracle.com/docs/cd/B19306_01/server.102/b14231/repair.htm

Crawled the UCM through SES but unable to search on Search screen. I have to use OID as identity management. How to configure SES for this??

I have crawled the UCM through SES, but when I try to search on the Search screen nothing is searched.
followed the following document - http://www.oracle.com/technetwork/search/oses/stellent-white-paper-178229.pdf
But at the end I need to configure the identity management for OID not for Content Server. I have activated the OID plug-in in SES, but nothing is searched in both the foloowing cases:
1) When I login with a OID user
2) When i do not login, even the public data is not displayed.
What could be the problem??

Thanks for the reply. Authorization was use source ACL, and I tried logging in as every user that had access to the content and could not bring up anything.
However, this is no longer an issue as we are not going to be using this content database. We are going to be using the new Beehive collaboration instead. I don't know if there will be a different plugin for SES or what, but it should be interesting.
Jennifer

Error in RCU for Identity Managment

I am trying to create the schema for Oracle Identity Managment using RCU utility and I am getting following error:
RCU-6083:Failed - Check prerequisites requirement for selected component:OIM
Please refer to RCU log at C:\Oracle\Middleware\rcuHome\rcu\log\logdir.2010-09-16_23-36\rcu.log for details.
Error: JVM is not installed on the Database.
RCU-6092:Component Selection validation failed. Please refer to log at C:\Oracle\Middleware\rcuHome\rcu\log\logdir.2010-09-16_23-36\rcu.log for details
I have Sun JDK 1.6 installed on the system.
Please help in this.

Here is the content of the log file:
2010-09-22 22:31:45.562 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Check requirement for specified database
2010-09-22 22:31:45.562 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Prereq taskId = PREREQ_GLOBAL_CHECK
2010-09-22 22:31:47.703 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Execution time for Check requirement for specified database : 2141 milliseconds
2010-09-22 22:31:47.718 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Execute pre create operations
2010-09-22 22:31:47.718 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.CustomCompManager::getActionList: CustomCompManager.getActionList: CUSTOM_COMP_PRELOAD_SETUP
2010-09-22 22:31:47.828 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.AbstractCompTask::execute: ValidIf result was false. Skipping Action: oracle.ias.version.SchemaVersionUtil:utilCreateRegistryAndCopyData
2010-09-22 22:31:47.859 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.AbstractCompTask::execute: ValidIf result was false. Skipping Action: oracle.ias.version.SchemaVersionUtil:utilCreateRegistryTable
2010-09-22 22:31:47.859 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Execution time for Execute pre create operations : 141 milliseconds
2010-09-22 22:32:00.734 NOTIFICATION rcu: oracle.sysman.assistants.common.task.ProgressPanel::progressToNextTask: waiting for delegate to be visible
2010-09-22 22:32:00.750 NOTIFICATION rcu: oracle.sysman.assistants.common.task.ProgressPanel::progressToNextTask: waiting for delegate to be visible
2010-09-22 22:32:00.765 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Metadata Services
2010-09-22 22:32:00.765 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Prereq taskId = MDS
2010-09-22 22:32:00.765 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Starting component prereq check
2010-09-22 22:32:00.812 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Execution time for Metadata Services : 47 milliseconds
2010-09-22 22:32:00.812 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Audit Services
2010-09-22 22:32:00.812 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Prereq taskId = IAU
2010-09-22 22:32:00.812 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Starting component prereq check
2010-09-22 22:32:00.843 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Execution time for Audit Services : 31 milliseconds
2010-09-22 22:32:00.843 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Oracle Internet Directory
2010-09-22 22:32:00.843 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Prereq taskId = OID
2010-09-22 22:32:00.843 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Starting component prereq check
2010-09-22 22:32:00.890 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Execution time for Oracle Internet Directory : 47 milliseconds
2010-09-22 22:32:00.890 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Oracle Identity Federation
2010-09-22 22:32:00.890 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Prereq taskId = OIF
2010-09-22 22:32:00.890 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Starting component prereq check
2010-09-22 22:32:00.921 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Execution time for Oracle Identity Federation : 31 milliseconds
2010-09-22 22:32:00.921 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: Executing Task: Oracle Identity Manager
2010-09-22 22:32:00.921 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Prereq taskId = OIM
2010-09-22 22:32:00.921 NOTIFICATION rcu: oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator::executePrereqTask: Starting component prereq check
2010-09-22 22:32:01.093 ERROR rcu: oracle.sysman.assistants.rcu.backend.task.PrereqTask::execute: Prereq Evaluation Failed
oracle.sysman.assistants.rcu.backend.validation.PrereqException: RCU-6083:Failed - Check prerequisites requirement for selected component:OIM
Please refer to RCU log at C:\Oracle\Middleware\rcuHome\rcu\log\logdir.2010-09-22_22-31\rcu.log for details.
     at oracle.sysman.assistants.rcu.backend.validation.PrereqEvaluator.executePrereqTask(PrereqEvaluator.java:642)
     at oracle.sysman.assistants.rcu.backend.task.PrereqTask.execute(PrereqTask.java:68)
     at oracle.sysman.assistants.rcu.backend.task.ActualTask.run(TaskRunner.java:306)
     at java.lang.Thread.run(Thread.java:619)
2010-09-22 22:32:01.093 ERROR rcu: oracle.sysman.assistants.rcu.backend.task.ActualTask::run: RCU Operation Failed
oracle.sysman.assistants.common.task.TaskExecutionException: RCU-6083:Failed - Check prerequisites requirement for selected component:OIM
Please refer to RCU log at C:\Oracle\Middleware\rcuHome\rcu\log\logdir.2010-09-22_22-31\rcu.log for details.
Error: JVM is not installed on the Database.
     at oracle.sysman.assistants.rcu.backend.task.PrereqTask.execute(PrereqTask.java:76)
     at oracle.sysman.assistants.rcu.backend.task.ActualTask.run(TaskRunner.java:306)
     at java.lang.Thread.run(Thread.java:619)

Using Failover for DB Manager Service Objects

Michelin Tire Corporation
At Michelin, we are trying to implement a failover
service object using Oracle 7.3 on RS6000 platform (AIX 4.1.4).
We understand that we need to use HACMP (Clustering) and
Oracle's parallel server. This way the DB Service objects
on two different computer nodes can access the same database.
Has anyone used this configuration? If so, have you had any problems?
and how well does it work?
We would appreciate any information on this subject.
Thanks in advance,
Thomas Sams

Tommy Sams wrote:
>
Michelin Tire Corporation
At Michelin, we are trying to implement a failover
service object using Oracle 7.3 on RS6000 platform (AIX 4.1.4).
We understand that we need to use HACMP (Clustering) and
Oracle's parallel server. This way the DB Service objects
on two different computer nodes can access the same database.
Has anyone used this configuration? If so, have you had any problems?
and how well does it work?
We would appreciate any information on this subject.
Thanks in advance,
Thomas SamsAt CSI, we have planned to use HACMP with Forte' failover to provide a
high availability architecture for one of our customer.
There are a lot of stuff to consider, some related to hacmp
configuration, some to forte' mechanisms.
In particular we should use HACMP for managing RDBMS backup and Forte'
capabilities to deal with partitions/envs/nodemgrs failover. We have not
take into account Oracle's parallel server at the moment ( althought it
could be a good solution ) because we don't really need to access oracle
from 2 different nodes at the same time, but "just" to have a "realtime"
dbms backup in case of primary server fault.
The architecure we choosen is based on tre AIX server ( 1 application
server, 1 main dbms server, 1 backup server ( oracle failover, envs
failover).
We have started testing it using forte 2.0.h, but we realized that a
more complete functionality will be offered using 3.0 KEEP_ALIVE
features. So I could give you more feedback in the near future.
What type of solution have you in mind ?
Regards
Fabrizio Barbero
Barbero Fabrizio
CSI-PIEMONTE
Cso Unione Sovietica 216
10134 Torino ITALY
tel: +39 11 3168515
fax: +39 11 3168212
e-mail: [email protected]

Architecture for Identity Management

I have to install the sun identity management platform and configure it.
Is there a recommended architecture for the installation of components in high availability?
Thanks in advance

There is some advice in the documents. I'd look through the Installation Guide and the Deployment Guide.
At a very high-level, to achieve high-availability, you want to make both the REPO (data tier) layer highly available and make the Application tier (e.g. IdM in an App Server) highly-available.
There are many questions you have to ask yourself in doing this. Are you making the solution highly-available against the loss of a Data Center, the loss of a Server or some thing else entirely. This also plays into how you want to size the servers.
Net -- I'd poke through the documents to educate yourself, but would engage someone who has "been there, done that" a few times to make sure you're approaching it correctly and such that you can make simple adjustments in the future based on load predictions.
Good Luck!

Problem Web Services for Identity Manager deployed on WebSphere

Hi, I've a problem with the Web Services. I'm tryng to lunch a JAVA class that execute this called: "http://localhost:9080/idm/servlet/rpcrouter2". This error return me: "No registered SPML handler".
Identity Manager 5.0 sp4 is deployed on WebSphere 5..1
I've just configured the SPML importing the spml.xml file and I've added tha jar package "openspml.jar" to WEB-INF/lib directory. I've also added to the CLASSPATH the link to this jar and the link to WEB-INF\lib.
How can I do??

You will have to include the servlet(SPML Handler) in your web.xml.

UME authorizations for Identity Management

HI:
In order to set up access to allow users to access RAR, I have been placed in GROUP: Administrators in the UME. This provides me the access to go to the Identity Management area and administer users. However, it also allows me acces to EVERYTHING in the SAP Netweaver (WAS).
I would like to create a group called "Security Admin" and restrict it so that I can only access the User Management link. Does anyone know how to do this? I can create the group and assign it to myself, but where do I define what actions are allowed....based on group?
It is very different than adding or removing "actions" from a Role.
When I look at the Administrator group - I do not see where the access is defined so I assume it is hardcoded somewhere.
Thanks,
Margaret

Question figured out. Please ignore.

What are you using for identity managment--windows?

We have windows iis, active directory. if anyone has developed detailed instsructions for this it would be greatly appreciated.

If you search this discussion for "C#" you will find some example code for a C# based transfer script. I'm not sure its specific to Active Directory, but it should get you started.
I don't know much about Active Directory, but I assume that it has APIs that you can call from C# to get authorization information.

JMS Foreign Provider using XAConnectionFactory for Container Managed Trans

Hello, we've been running some proof of concepts using Weblogic 10.3 with a JMS Foreign Provider attached to MQSeries 7.
We created a very simple MDB to read a message and output it's content.
We created a bindings file with a Connection Factory (without XA)
The question I have is that when I set the Transaction Management to Container and Transaction Attribute to "Required" , does Weblogic automatically look for a XAQueueConnectionFactory? We get the error below:
[EJB:011013]The Message-Driven EJB attempted to connect to the JMS connection factory with the JNDI name: OP_CF. However, the object with the JNDI name: OP_CF is not a JMS connection factory. NestedException Message is :com.ibm.mq.jms.MQQueueConnectionFactory cannot be cast to javax.jms.XAConnectionFactory>
When we set the transacation to Bean Managed or we set to Container Managed but set the attribute to "NotSupported" it works fine.
My goal is to have a MDB that has Container Managed Transactions and "Requires" Attribute, but only particpates in a local transaction and does not need the overhead of XA. It will read from a Foreign MQ manager Queue, process and then write back to the same Foreign MQ manager(different queue), so only one resource (MQ) is used.
If we set the above settings, it seems that a XAConnectionFactory is required. Is that true?

-- If you do not enable the container transaction, then the MDB connection factory does not need to be an XA connection factory.
-- If the application is performing messaging operations, and wants to use locally managed transactions, then you have a variety of options. These are all standard JMS:
* Use an XA connection and XA session. Begin JTA transactions before performing JMS operations, and call commit or rollback on the JTA transaction after performing the JMS operations. For foreign vendors, you must take extra steps to ensure that the vendor enlists with the WebLogic transaction -- typically by using WebLogic resource reference wrappers.
* Use the standard JMS API "transacted session" on a non-XA session -- the transaction will be local to the session (this is extremely similar to JDBC local transactions).
* Use a non-transacted session. Sends will occur immediately. Receive messages will be acknowledged immediately for auto-ack sessions, or will not for non-ack.
-- Note that if a transaction only includes a single operation, there's no need for XA or non-transacted sessions.
-- For more information on transactions and integration, I highly recommend reading our [ Integrating Remote JMS Providers | http://download.oracle.com/docs/cd/E15523_01/web.1111/e13727/interop.htm#JMSPG553 ] FAQ. I also very highly recommend purchasing a copy of [ Professional Oracle WebLogic Server | http://www.amazon.com/Professional-Oracle-WebLogic-Server-Patrick/dp/0470484306/ref=sr_1_1?ie=UTF8&s=books&qid=1252088885&sr=8-1 ], and of course reviewing our [ JMS Information Roadmap | http://download.oracle.com/docs/cd/E15523_01/web.1111/e14529/messaging.htm#sthref23 ].
-- Finally, you may also want to consider replacing some MQ usage with WebLogic JMS. WL JMS is a heavily adopted messaging vendor, and for obvious reasons, tends to integrate especially well with the WebLogic app server.
Hope this helps,
Tom

Custom Login using the Pluggable Identity Management Framework

Hi all,
We are trying to establish 2 ways into our application:
1. via a login form
2. seamless login from an external application
To achieve this we are trying to build our own custom authentication using the pluggable IDM framework.
Basically if a secure page is requested, we want to check the header/cookie/request (don't mind which) for a key which is provided by the external application. If present, the key is validated against a web service provided by the external app, the identity is asserted and the user is entered seamlessly into the application. If the header/cookie/request does not contain a key the user is to be redirected to a login page, where they can input username and password which will be validated against our database.
We've created a Token Collector and Token Asserter class, we've modified our custom Login Module to retrieve the identity created by the Token Asserter but we haven't worked out how to get the alternate login page working for users which don't come through the external application.
Has anybody built anything similar? From the documentation it appears we should be able to achieve our goal using the pluggable IDM, but we're going around in circles a bit at the moment.
Any help/sample code would be greatly appreciated.
thanks.

Can you tell why the page is not working? I mean, any errors ? What happens when you try to open the protected resource?
Here is an example of the code, I removed some part of the code specific to the bussines so if you have doubts just let me know
token collector
import java.io.IOException;
import java.io.UnsupportedEncodingException;
import java.net.URLEncoder;
import java.util.Hashtable;
import java.util.List;
import java.util.Map;
import java.util.Properties;
import javax.servlet.http.Cookie;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import oracle.security.jazn.collector.CollectorException;
import oracle.security.jazn.collector.TokenCollector;
import oracle.security.jazn.sso.SSOTokenFormatException;
import oracle.security.jazn.token.IdentityToken;
import oracle.security.jazn.token.TokenNotFoundException;
public class MyTokenCollector implements TokenCollector
private Properties _properties;
public void fail(HttpServletRequest request,
HttpServletResponse response, int reason)
throws CollectorException
String loginURL = _properties.getProperty("custom.sso.url.login");
String urlParam = _properties.getProperty("custom.sso.url.param");
String idParam = _properties.getProperty("custom.sso.id.param");
Log.Info("Token collection failed (" + reason + ")");
StringBuffer requestURL = request.getRequestURL();
String queryString = request.getQueryString();
requestURL = requestURL.append("?").append(queryString);
StringBuffer sb = new StringBuffer();
try
sb = sb.append(urlParam).append("=");
String encodedStr =
URLEncoder.encode(requestURL.toString(), "UTF-8");
sb = sb.append(encodedStr);
sb = sb.append("#").append(request.getServerName()).append("#").append(request.getServerPort());
String redirectQueryString = sb.toString();
String rurl = loginURL + "?" + redirectQueryString;
response.sendRedirect(response.encodeRedirectURL(rurl));
catch (UnsupportedEncodingException uee)
SSOTokenFormatException stfe =
new SSOTokenFormatException(uee, 4);
Log.Error(stfe.getMessage());
throw new CollectorException(stfe);
catch (IOException ioe)
Log.Error("IOException occured: " + ioe);
throw new CollectorException(ioe);
public IdentityToken getToken(String tokenType,
HttpServletRequest request,
List tokenNames, Properties properties)
throws TokenNotFoundException, CollectorException
_properties = properties;
String valor = null;
Log.Info("URL: "+request.getRequestURI());
if ( tokenType. equalsIgnoreCase("HTTP_COOKIE"))
valor = procesarCookie(request, tokenNames);
}else if (tokenType.equalsIgnoreCase("HTTP_HEADER"))
valor = procesarHeader(request, tokenNames);
}else
throw new CollectorException("token type not supported");
MyIdentityToken token = new MyIdentityToken(valor);
token.setTokenType(tokenType);
token.setPropiedades(properties);
return token;
private String procesarCookie(HttpServletRequest request, List tokenNames)
throws TokenNotFoundException
if (1 != tokenNames.size())
//Only one cookie can be handled
String error = "Invalid number of cookies check jazn.xml";
throw new TokenNotFoundException(error);
Map cookies = new Hashtable();
Cookie allCookies[] = request.getCookies();
if (allCookies != null)
String cookieName = (String) tokenNames.get(0);
Log.Info( "Searching for cookie: " + cookieName);
Cookie cookie;
for(int i = 0; i < allCookies.length; i++)
cookie = allCookies;
if (cookie.getName().equals(cookieName))
return cookie.getValue();
String error = "Rquired cookie not found";
Log.Error(error);
throw new TokenNotFoundException(error);
}else
String error = "No cookie on request";
throw new TokenNotFoundException(error);
private String procesarHeader(HttpServletRequest request, List tokenNames)
throws TokenNotFoundException
String nombreHeader = (String) tokenNames.get(0);
String header = request.getHeader(nombreHeader);
if (header != null)
return header;
}else
String error = "Request doesn't have the requierd header";
throw new TokenNotFoundException(error);
Token Asserter Example
import java.util.Properties;
import javax.security.auth.Subject;
import oracle.security.jazn.asserter.AsserterException;
import oracle.security.jazn.asserter.TokenAsserter;
import oracle.security.jazn.callback.IdentityCallbackHandler;
import oracle.security.jazn.callback.IdentityCallbackHandlerImpl;
import oracle.security.jazn.token.IdentityToken;
public class MyTokenAsserter
implements TokenAsserter
public void finalize()
throws Throwable
public IdentityCallbackHandler assertIdentity(String tokenType,
IdentityToken token,
Properties properties)
throws AsserterException
InversuraIdentityToken idToken = (InversuraIdentityToken) token;
String valorToken = idToken.getValorToken();
InversuraToken invToken;
try {
invToken = new InversuraToken(valorToken);
if (verificarVigencia(invToken))
IdentityCallbackHandlerImpl idcb = new IdentityCallbackHandlerImpl(invToken.getLogin());
idcb.setAuthenticationType("InversuraSSO");
idcb.setIdentityAsserted(true);
MyPrincipal ppal = new MyPrincipal(invToken.getLogin());
Subject subj = new Subject();
subj.getPrincipals().add(ppal);
idcb.setSubject(subj);
return idcb;
throw new AsserterException("Token expired");
}catch (Exception e)
String error = e.getMessage();
throw new AsserterException(error, e);
public boolean verificarVigencia(InversuraToken token)
return token.estaVigente();

Help using workflow for import manager

hi all,
assumes import server is used for automation creation/update of records,
i need to design a workflow to verify existing record that:
if a validation pass: update all fields + update mapping key
if a validation fail : update mapping key only
can anyone provide good suggestion on how it can be done via workflow?
MDM API is out of scope...
thanks,
Shanti

Hello Shanti
Import manager and import server launch workflow after data loading is finished.
You cannot manage loading rules from workflow.
You can create two inbound ports:
one for keys loading
another one for keys+fileds loading
Regards
Kanstantsin Chernichenka

Should a graphic designer use Iphoto for file management ?

I am a designer who is overwhelmed by too many images from different sources (scan, online, art, photos) that need to be organized by themes (animals, flowers, calligraphy, projects, etc) so I tried transferring all my ps and tif and jpg files into iphoto (hoping to avoid using bridge, which I don't like).
I noticed after I drug some them into iphoto, I reopened them in PS (drug file to the PS software Logo in dock), all the layers were had been flattened and the file went from 600 dpi to 72! EEEEK!
I am a graphic designer and need large files with layers. Is iphoto a bad way to organize images? The orginal reason I like iphoto is because you can just drag out a file, and the original remains. In bridge, the original actually MOVES OUT.
(I posted this in the wrong forum before, so this is a repeat posting)

kidquotes:
I would seriously look into a more robust DAM (digital asset management) application. The one that I use is Media Expression. It allows you to manage your folder system, move image files between folders from within the application, rename files, add metadata and write them to the files so they travel with them.
Go go The DAM Forum where professional photographers discuss the various DAM applications and their relative merits, etc. Expression Media was originally iView MediaPro and, at the time, was consdered one of the very best. EM was bought by Microsoft (ugh) but has evolved into am improved product but is more expensive.
As far as the dpi the resolution didn't change. iPhoto displays all at 72 dpi but if you were to look at the file in Photoshop it's print size would be nearly 9 times larger. It's all relative. SeeThe Myth of DPI.
TIP: For insurance against the iPhoto database corruption that many users have experienced I recommend making a backup copy of the Library6.iPhoto (iPhoto.Library for iPhoto 5 and earlier) database file and keep it current. If problems crop up where iPhoto suddenly can't see any photos or thinks there are no photos in the library, replacing the working Library6.iPhoto file with the backup will often get the library back. By keeping it current I mean backup after each import and/or any serious editing or work on books, slideshows, calendars, cards, etc. That insures that if a problem pops up and you do need to replace the database file, you'll retain all those efforts. It doesn't take long to make the backup and it's good insurance.
I've created an Automator workflow application (requires Tiger or later), iPhoto dB File Backup, that will copy the selected Library6.iPhoto file from your iPhoto Library folder to the Pictures folder, replacing any previous version of it. It's compatible with iPhoto 6 and 7 libraries and Tiger and Leopard. Just put the application in the Dock and click on it whenever you want to backup the dB file. iPhoto does not have to be closed to run the application, just idle. You can download it at Toad's Cellar. Be sure to read the Read Me pdf file.
Note: There's now an Automator backup application for iPhoto 5 that will work with Tiger or Leopard.

Use m1 for appliance managment only option in ironport email vmaware platform

can anybody let me know this question in vmware??? i cannot see this option

You can change the route that the update and upgrades use by going to System Adminstration>Upgrade and Update Settings. Then click on the "Edit Update Settings". You can pick the routing table/interface here. By default its set to the managment interface.
I'm fairly sure that the NTLM traffice from the WSA to the domain is via the managment interface.
P1 is for the proxy traffic. Whatever way you get internet traffice to the box, it goes through P1, in and out (unless you use P2)
M1 is for all of the other stuff: web management, ssh, updates, ldap/ntauth, etc.

Using SPML for Identity Management in EJB WebService

Similar Messages

Maybe you are looking for