Why does PolicyAgent need access to Directory Server behind AM

hi,
we are installing PolicyAgent2.1 on tomcat server.
The AM deployment shows arrows between web application and AM, and no arrows between PA2.1 and Directory.
But Pagent install fails if u dont provide DS host and port and the troubleshooting doc for Pagent says it needs access to DS.
Can someone help me understand why PAgent needs access to DS. It is a issue for us, as Pagent gets deployed on App in dmz, and DS is in a different subnet the the firewalls restrict access from dmz to DS.
V

Jerry,
Got the following info from a Sun internal engineer......
if u can provide me more abt the Agent-->Directory dependency, it will be helpful. ......
Here's quotes from the agent technical staff.
"The 2.1 J2EE agents rely on direct ldap connectivity in order to
support some of its core functionality such as J2EE policy support and LDAP attribute fetch etc...
Note that the customer can choose not to supply the amadmin password and still use the agent in either SSO_ONLY or URL_POLICY modes, as long as LDAP attribute fetch functionality is disabled."
*****

Similar Messages

Why do apps need access to the microphone on the iPhone?

why do apps need access to the microphone on the iPhone?

Kind of depends on the App.
If its a dictation App it needs to hear your voice. If its a souind recorder it needs it to record audio.
What App is asking for it?
What does the App do?

Why does EJB needs two interface???

Hi All,
This has been asked by many ppl and many of you might be having
the correct answer for it. Please tell me....
Why does EJB needs two interface (Home and Remote Interface)?. Why not one?
Thanx to all...
Regards
GoodieGuy

Hi Goodie ,
Its good question and its a very valid one , one has to have doubt
why two , why not one ..
Here the answer goes ..
First of all you need to understand that its a distributed computing technique ie I mean lot of people will be accessing the bean at the same time , right ? OK , you cann't access the bean directly.
and lastly the stateless and entity beans do instance pooling.
The very purpose of having two interfaces is
1) To differnentiate the bussiness logic and life cycle methods .
2) The home interface inititates life cycle methods like creation , destruction etc .
3) There are lot of beans in the container , and through home you are
creating the instance or accessing one of them .
4) Once you have home object using it we get the remote object ie the instance of the bean that you want to access if stateless any bean can be called , if statefull depending upon the parameter in create method that respective bean is created and invoked .
In ejb 1.0 and 1.1 even though the bean and the client are in same jvm its assumed that they are remote and in 2.0 Ver we have local this is to avoid network traffic .
Hope you have got the answer , but if u still need clarification
read EBRoman book first and second chapters thoroughly and then proceed
a head.
Bye
Mahesh L.
============

Why does Bridge Need Illustrator to Save as PDF compatible file?

1. Why does Bridge need Illustrator files to be saved as PDF files? "PDF Compatible File" ticked in the save menu.
2. Why does saving with this info take so long, even on decent fast modern systems?
3. Why does Bridge not consistently render the Illustrator files in FULL RESOLUTIONS, seemingly shooting for half resolution much of the time, and simply stopping at that?
4. Why does "clicking" on the preview inside Bridge bring up the full resolution?
5. How do I shortcut this process so that every file is previewed in Full RESOLUTION, instantly?
What is the point of Bridge? What's its reason for existence?
First time user of Bridge.

Since someone is bound to say that this should be asked in the Bridge section... it already is. And has been referenced back over here.
You can find it here:
http://forums.adobe.com/message/5655632#5655632
Answer wherever you see fit, if you're up to the task of dealing with someone attempting to have a broader view, perhaps also suffering from somewhat objective analysis that sometimes contains direct criticism of the way Adobe does things.

Can't access my Directory Server using the Console installed on a machine

can't access my Directory Server using the Console installed on a remote server, lookied into knowledge base article 4693, but still same any idea ?

I too am having problems accessing Directory server from Netscape Console installed on Winxp.
If I try to open Directory server it doesn't give any error. No windows nothing.
If I try th same from the machine on which it is installed everything is fine. What is strange is that it did open a couple of times. But at the same time I can open the admin server, Netscape Messaging server from the xp box. Searching all over for a solution. Any help/pointers would be greatly appreciated.
Config details:
iDS4.13, iMS 5.0, running on Sol 8 box
Netscape Console 4.2 on WinXP.
Thanks

HT201250 If time machine backups hourly. Why does it need to backup daily, weekly and monthly

If time machine backups hourly. Then why does it need to backup daily, seekly, and monthly?

It doesn't.
What it does is discard intermediate backups at the end of 24 hrs and keep just three spaced backups from the previous day.
At the end of the next day, that day's will be reduced to 3, and the previous 3 trimmed to one; the last backup of that day.
Daily backups are kept for a month, then trimmed to the last backup of the week.
The weekly backups are kept until the disc runs out of space and TM starts deleting the oldest ones.

Why does m4v need to be converted again

Hi. I converted a dvd movie I bought into the ipod format .m4v using another converting software program I have. I then imported it into the videos section of my itunes. It would not load into my ipod unless i convertd it again using the itunes conver for ipod option. Why does this need to be converted again for ipod if its already in a .m4v and is there any way i can fix this so when im originally converting my movie with my converting software I can eliminate this last step in itunes. It takes up to 5 hours to convert in itunes. thanks

I should also add that I am using a AVS video converter which has an IPod 5.5 converting option that makes my movies Highest available quality H.264, 30fps 640x480
There are more Ipod options availble but im using the Highest quality available one. Maybe I should be using one of these:
ipod 5x- NTFS Standard quality H.264 29.97fps, 320X240
ipod 5x- PAL standard quality H.264 24fps, 320X240
ipod 5x- low quality H264., 20fps, 320X240
ipod 5x - Best quality (MPEG4, 24fps, 320X240)
ipod 5x- economy quality (MPEG4, 20fps, 176X144)
ipod 5x- for tv output (MPEG4, 24fps, 512X384)

Disabling anynomous access in directory server 5.2_Patch_3

Dear All,
Would anyone help me out on how to disable anonymous access in directory server 5.2?
Thanks,
Lewis

Try removing following line from dse.ldif [of that instance of directory server]
aci: (targetattr != "aci")(version 3.0; aci "rootdse anon read access"; allow(
read,search,compare) userdn="ldap:///anyone";)
If there is no exact match you will find a similar entry.. its at the begining of dse.ldif.
You can read more about aci in Directory Server Developer's Guide.
I hope this fixes you problem

Why does my laptop use a proxy server for mozilla or chrome when i check in internet explorer it sais my system isnt but it is it jumps back to a proxy server in mozille when i tick no proxy ?? help please im not wizzy thanks

Why does my laptop use a proxy server for mozilla or chrome when i check in internet explorer it sais my system isnt but it is it jumps back to a proxy server in mozille when i tick no proxy ?? help please im not wizzy thanks

Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.com/kb/Safe+Mode
See also:
*http://kb.mozillazine.org/Preferences_not_saved
*https://support.mozilla.com/kb/Preferences+are+not+saved

HT1766 If in App Store and things are free or already downloaded why does it need my bank info

If in App Store and things are free or already downloaded why does it need my bank info

ITunes/App Store needs verification.
Put in your valid credit card details associated with your Apple ID.
You won't be charged if it's free.

When I import a Quick Time movie into the timeline using Final Cut Express, why does it need rendering?

when I import a Quick Time movie into the timeline using Final Cut Express, why does it need rendering?

Because your clip properties do not match your sequence settings.
It will help a lot if you provide details ...
FCE Easy Setup
Sequence settings (vid rate, frame size, compressor)
Source of your clips (camcorder make/model, etc)
Clip properties (vid rate, frame size, compressor)

I cannot install apps that are upgraded to ios4.. im using iphone 2g 3.1.3 this makes me sad.. why does apple need to updates many apps when we cannot update an iphone 2g anymore..

i cannot install apps that are upgraded to ios4. im using iphone 2g 3.1.3 this makes me sad.. why does apple need to updates many apps when we cannot update an iphone 2g anymore..

I am having the exact same problem with trying to sync my iPad with my computer. To make a long story short, I had to reinstall Windows for my computer and therefore had to reinstall itunes.
I have done back ups in the past for my ipod touch and other ipods with no problems, but unfortunately I have never been able to back up my iPad. During a sync, the iPad would always disconnect from my computer and it would never finish. it would say the connection was lost, but nothing is wrong with the connection.
So now I have over 100 apps and thousands of pictures that I am afraid will be deleted if I run the sync in itunes. I have tried to transfer purchases and it goes through the list of apps, but nothing is ever transferred.
Any help would be appreciated. I am not interested in jailbreaking my iPad to solve this problem. There should be a fix for this and I want to upgrade to ios 4.3 as the original poster. Please help

After an update to firefox I keep getting a warning from my Firewall (McAfee) "Program wants internet access". I have permission set at outgoing for firefox and updates checking off, to check that request is valid so what does it need access for

After an update to firefox I keep getting a warning from my Firewall (McAfee) "Program wants internet access". I have permission set at outgoing for firefox and updates checking off, to check that request is valid so what does it need access for

This was not a Firefox update, but a piece of malicious software you have inadvertently downloaded from a site called http://ffftp.co.cc/ which is impersonating Firefox. I discovered this as soon as my Zonealarm requested permission for "Golds" to access the internet. Golds??!! However I couldn't find a file with this name installed on my computer.
You should delete the file you downloaded and certainly do not allow internet access to any suspicious program. If you have already given permission, scan your PC immediately for any virus, malware, etc. Best of luck.

Installing Iplanet web server and directory server behind a firewall

When installing iplanet web server and directory server behind a firewall - should the interal ip address be used or the external ip address?

Hello,
When you are installing iplanet web server behind a firewall,you should use the internal ip address in the firewall.
1. The external ip address connection to the Internet. The type of IP address used?dynamic (commonly used for standard
modems) or static (commonly used for cable modems) is dictated by the ISP to which you connect and the type of service it provides.
2. The internal ip adress connection. This connection must be a static IP assignment, and it must be assigned by you.
obviously it depends on the type of firewall setup you have.
Thanks
Selva

Why does comments.vi stop working when server directory changes?

With web server root directory set to "C:\Program Files\National Instruments\LabVIEW 8.2\www",
I point my browser to "http://localhost/cgi-bin/examples/comments.vi" and I get the comment form.
Next, I quit the G Web Server, set the server root to "c:\ats\www",
I copy the comments.vi and comments.llb files to c:\ats\www\cgi-bin and point my browser to http://localhost/cgi-bin/comments.vi. Instead of showing the form as before, I get a dialog box prompting me to either "Open with..." or "Save to disk". I'm using Firefox. Why does this happen? Is there a configuration that I must set up to get the G Web Server to work at other than the default location?

kc64,
To your browser, you're looking at a website (served on localhost in this case) and pointing to a specific file (in this case a VI). Just as if you point your browser to an address of the form www.website.com/file.pdf it will ask you what you want to do with the file--open or save it. In this dialog box, you should have the option to automatically do what you select for the file type from now on.
The dialog box itself has nothing to do with changing your server root, it has to do with what your browser is configured (or not configured) to do with the VI file type. As for why this didn't happen the first time and it's prompting you now, maybe the action got changed for the VI file type. This can be configured in Firefox by going to the content tab of tools->options.
Regards,
Craig D
Applications Engineer
National Instruments

Why does PolicyAgent need access to Directory Server behind AM

Similar Messages

Maybe you are looking for