ACS 5.2 assignment of authorization with nested groups in LDAP

Similar Questions

• Planning security with nested groups

  Hi all

  We have a CapEx Planning Application and have a problem with the security of the entity. We have users within their own groups of HSS. Some groups are nested in other groups. For example

  User1 is in Analyst_Group and Analyst_Group is in another group, Operations_Group.

  On a specific entity (11122), we give the Analyst_Group and Operations_Group write access no access.

  Planning should take the least restrictive security (for User1 in this case should be writable by 11122), but taking the security defined for Operations_Group. If set to None, then he cannot see this entity. If his game to play, then he gets only read access.

  Does anyone know why it does not work the way in which the Admin planning guides say it should (IE its not to take the least restrictive permissions)?

  We use the 11.1.2.1.0 planning.

  Thank you!

  Good read on the nested groups

  So in your case Operations_Group is the parent, then Analyst_Group will inherit the parent's access.

  Concerning

  Celvin

  http://www.orahyplabs.com

• RTF model: are with nested groups

  Hi all
  
  I have a certain pickle of a problem that apparently...
  
  my data structure looks like this:
  
  <>COMPANY
  -< STORE >
  -Department < AND >
  -< ITEM > < / ITEM >
  -< / DEPARTMENT >
  -< / STORE >
  < / COMPANY >
  
  several companies may have several banks, which in turn have several departments, which, in turn, may also have several elements.
  
  my select statement looks like this:
  
  Select company_id,
  store,
  Department,
  agenda,
  Sum (Qty) as my_sum
  Of
  table_1, table_2, table_n
  where the...
  Group of...
  company_id order;
  
  my xml data model gathering looks something like this:
  
  < name of the group = "G_company"...
  -< element name = "E_company"...
  -name of the group = "G_store"...
  -< element name = "E_store"...
  -name of the group = "G_department"...
  -< element name = "E_department"...
  -name of the group = "G_item"...
  -< element name = "E_item"...
  -< element name = "E_item_total" value = "my_sum"...
  -< / Group >
  -< element name = "E_department_total" value = "G_item. E_item_total"function =" SUM () "/ >"
  -< / Group >
  -< element name = "E_store_total" value = "G_department. E_department_total"function =" SUM () "/ >"
  -< / Group >
  < / Group >
  
  my report currently looks like this:
  
  -< /B > < b > store-Dept of < b > < /b > - Dept of < b > < /b > - < b > point < /b > - < b > < /b > - point store < b > < /b > - Dept of < b > < /b > - < b > < /b > - < b > < /b >
  ---Townsville---TDept_1---TDept_2---TDItm1---TDItm2---Newcastle---NDept1---NDItm1---NDItm2 company < /b > < b >
  ---CompanyA------2----------------4------------3---------------2---------------1------------------1-------------------3----------------2-------------------4
  ---CompanyB------1----------------2------------4---------------5---------------2------------------1-------------------6----------------3-------------------1
  
  
  If I focus just on the Store-> Department-> order of the day, I realized that in my RTF using the template as follows:
  
  < table >
  -< tr >
  -< td > <? for-each-group@column:G_store; E_store? > shop < table > < td > <? for-each-group@column:G_department; E_department? > Department < table > < td > <? for-each-group@column:G_item; E_item? > element <? end for each group -? > <? end for each group -? > <? end for each group -? > < table >
  -< /tr >
  -< tr >
  -< td > <? for-each-group@column:G_store; E_store? > <? E_store_total? > < table > < td > <? for-each-group@column:G_department; E_department? > <? E_department_total? > < table > < td > <? for-each-group@column:G_item; E_item? > <? E_item_total? > <? end for each group -? > <? end for each group -? > <? end for each group -? > < table >
  -< /tr >
  < /table >
  
  
  as you can see, the store-> Department-> point go through the report horizontally.
  My problem is I want to have the totals for each column, such as:
  
  -< /B > < b > store-Dept of < b > < /b > - Dept of < b > < /b > - < b > point < /b > - < b > < /b > - point store < b > < /b > - Dept of < b > < /b > - < b > < /b > - < b > < /b >
  ---Townsville---TDept_1---TDept_2---TDItm1---TDItm2---Newcastle---NDept1---NDItm1---NDItm2 company < /b > < b >
  ---CompanyA------2----------------4------------3---------------2---------------1------------------1-------------------3----------------2-------------------4
  ---CompanyB------1----------------2------------4---------------5---------------2------------------1-------------------6----------------3-------------------1
  ---<b>Total</b>------------3----------------6------------6---------------7---------------3------------------2-------------------9----------------5-------------------5
  
  so I did a SUM on each of the Department/E_store/item_totals as:
  
  <? sum (current - group () / E_store_total)? >
  
  who now works for E_store_total... but not for E_department_total and E_item_total!
  It seems that BI Publisher does not like used money with inner loops.
  because if I extract only the column for E_department, the total value down is correct!
  but once I put the outside loop store, it breaks.
  
  what I get now with is:
  
  -< /B > < b > store-Dept of < b > < /b > - Dept of < b > < /b > - < b > point < /b > - < b > < /b > - point store < b > < /b > - Dept of < b > < /b > - < b > < /b > - < b > < /b >
  ---Townsville---TDept_1---TDept_2---TDItm1---TDItm2---Newcastle---NDept1---NDItm1---NDItm2 company < /b > < b >
  ---CompanyA------2----------------4------------3---------------2---------------1------------------1-------------------3----------------2-------------------4
  ---CompanyB------1----------------2------------4---------------5---------------2------------------1-------------------6----------------3-------------------1
  ---<b>Total</b>------------3----------------4------------3---------------2---------------1------------------1-------------------3----------------2-------------------4
  
  It makes the total general store correctly, but it gives me just the first line for the other totals.
  
  I tried:
  
  1 using the CUBE function in my SQL query, which gives me the results I want with all the totals I want, but I can't translate it into XML.
  2. try to use the pivot table option, but I can't always make it work as I want.
  3. using a separate sql query to retrieve the grandtotals but cela does not either because the required multiple looping.
  
  I am at a complete impasse, any help would be really appreciated!
  PS. I'm a very cool beginner

  Sent the hotfix.

  You must use the current group.

• Secure ACS Authentication and Authorization with SecurID

  I am able to authenticate connection attempts using an external database (RSA SecurID).  The problem is that everyone with a token is authorized to connect on any switch with priv15 or whatever I put (but no way to control who gets what access).  How can I allow users based on a certain type of belonging to a group?  The SecurID server is already integrated with LDAP, it only checks to see if the user exists in the database.

  I need to create two groups, or even only allow a single group and deny everyone, but anyone in the organization with a token is allowed to connect.  I can't find guides who do anything beyond authentication when you use a SecurID token.

  Thank you.

  Hello

  Have routers and switches, you given the command "authorization exec default group aaa GANYMEDE", it seems that you have only defined authentication on devices. When the control is in place, user access privileges may be governed by the ACS. In network administrator access by default policy (if you are using the default strategy for GANYMEDE), to set the authorization rule to verify membership in a user group and provide the appropriate profile of shell. Make the default rule to give DenyAccess shell profile to other users.

• Does Cisco ACS 1113 v4.2 device work with Windows 2008

  Hello

  I have a wireless currently in production infrastructure. All my Cisco LWAP is managed by Cisco WLC. Authentication is done via RADIUS through my device Cisco ACS 1113 running on version 4.2. The Cisco ACS 1113 device communicates with my Windows 2003 Active Directory. Everything is good now.

  Next month, we plan to update Active Directory from Windows 2003 to Windows 2008? Will be all fine and good, or will it be questions? Please advice kindly.

  I saw another post in this community that the States https://supportforums.cisco.com/thread/1003597?tstart=0. I am now confused. Help, please.

  Kind regards

  RAM

  + 60122918870

  ACS 4.2 does not work with Windows 2008R2.  I had a case of TAC open about this, and basically, they told me that I had to switch to 5.2 ACS.   I've been doing demonstrations there and it authenticates with Windows2008R2 very well.

• How to assign values to the nested table and passes as a parameter for the procedure?

  How to assign values to the nested table and passes as a parameter for the procedure?
  
  Here are the object and its type
  
  create or replace type test_object1 as an object
  (
  val1 varchar2 (50).
  val2 varchar2 (50).
  VARCHAR2 (50) val3
  );
  
  
  create or replace type test_type1 is table of the test_object1;
  
  
  create or replace type test_object2 as an object
  (
  val1 varchar2 (50).
  val2 varchar2 (50).
  VARCHAR2 (50) val3
  );
  
  
  create or replace type test_type2 is table of the test_object2;
  
  
  GRANT ALL ON test_object1 to PUBLIC;
  
  
  GRANT ALL ON test_type1 to PUBLIC;
  
  
  GRANT ALL ON test_object2 to PUBLIC;
  
  
  GRANT ALL ON test_type2 to PUBLIC;
  
  Here is the table object type:
  
  create the table test_object_tpe
  (
  sl_num NUMBER,
  Description VARCHAR2 (100),
  main_val1 test_type1,
  main_val2 test_type2
  )
  
  
  NESTED TABLE main_val1 STORE AS tot1
  NESTED TABLE main_val2 STORE AS earlier2;
  
  
  -----------------------------------------------------------------------------------------------------------
  
  Here is the procedure that inserts values into the nested table:
  
  PROCEDURE INSERT_TEST_DATA (sl_num in NUMBER,
  Description in VARCHAR2,
  p_main_val1 IN test_type1,
  p_main_val2 IN test_type2
  )
  IS
  BEGIN
  
  FOR rec in p_main_val1.first... p_main_val1. Last
  LOOP
  
  INSERT INTO xxdl.test_object_tpe
  (
  sl_num,
  Description,
  main_val1,
  main_val2
  )
  VALUES
  (
  sl_num
  description
  test_type1 (test_object1)
  p_main_val1 .val1 (CRE),
  p_main_val1 .val2 (CRE),
  p_main_val1 .val3 (rec)
  )
  )
  test_type2 (test_object2 (p_main_val2 .val1 (CRE),
  p_main_val2 .val2 (CRE),
  p_main_val2 .val3 (rec)
  )
  )
  
  );
  
  END LOOP;
  
  commit;
  
  END INSERT_TEST_DATA;
  
  -------------------------------------------------------------------------------------------
  
  Here are the block anonymoys what values attributed to the object type and pass values in the procedure:
  
  Set serveroutput on;
  
  declare
  
  p_sl_num NUMBER: = 1001;
  p_description VARCHAR2 (50): = 'Test Val1;
  
  inval1 test_type1: = test_type1();
  inval2 test_type2: = test_type2();
  
  Start
  
  
  inval1 (1) .val1: = "testx1";
  inval1 (1) .val2: = "testx2";
  inval1 (1) .val3: = "testx3";
  
  inval2 (1) .val1: = "testy1";
  inval2 (1) .val2: = "testy2";
  inval2 (1) .val3: = "testy3";
  
  CSI_PKG. INSERT_TEST_DATA (sl_num = > p_sl_num,)
  Description = > p_description,
  p_main_val1 = > inval1,
  p_main_val2 = > inval2
  );
  
  end;
  /
  Someone can correct me.
  
  Thank you
  Lavan

  Thanks for posting the DOF and the sample code but whenever you post provide your Oracle version 4-digit (result of SELECT * FROM V$ VERSION).
  >
  How to assign values to the nested table and passes as a parameter for the procedure?
  >
  Well you do almost everything bad that could be hurt.

  Here is the code that works to insert data into your table (the procedure is not even necessary).

  declare
  p_sl_num NUMBER := 1001;
  p_description VARCHAR2(50) := 'Testing Val1';
  inval1 test_type1 := test_type1();
  inval2 test_type2 := test_type2();
  begin
  inval1.extend();
  inval1(1) := test_object1('testx1', 'testx2', 'testx3');
  inval2.extend();
  inval2(1) := test_object2('testy1', 'testy2', 'testy3');
  
  INSERT INTO test_object_tpe
  (
  sl_num,
  description,
  main_val1,
  main_val2
  )
  VALUES
  (p_sl_num, p_description, inval1, inval2);
  commit;
  end;
  /
  

  See example 5-15 making reference to an element of nested Table Chapter 5 using PL/SQL collections and records in the PL/SQL doc
  http://docs.Oracle.com/CD/B28359_01/AppDev.111/b28370/Collections.htm#CJABEBEA

  1. you don't even have the procedure because it is a simple INSERTION in the table you can do directly (see my above code)

  inval1(1).val1 := 'testx1';
  

  Since you have not yet created all the elements, there is no element 1 "inval1". You need EXTEND the collection to add an element

  inval1.extend();
  

  And then, there is an empty element, but "inval1" is a container for objects of type 'test_object1' not for scalars as "val1", "val2", and "val3".
  If you can not do

  inval1(1).val1 := 'testx1';
  

  You must create an instance of 'test_object1 '.

  inval1(1) := test_object1('testx1', 'testx2', 'testx3');
  

  And so on for the other collection

  You don't need the procedure (as my code example shows), but once you fill in the variables correctly it will work.

• Is it possible with nested folders to show al images when the level folder highlight superior?

  Is it possible with nested folders to show al images when the level folder highlight superior? I thought that I used to be able to do, but I can't find a way to do it now.

  Mark,

  menu: Library-Online Show pictures in subfolders.

  Ja.

• ORA-00904 with nested tables

  Hello. I have a problem of creating tables with nested tables.
  After you have created a few types, I would create a table based on these, but I get
  
  SQL error: ORA-00904: invalid identifier
  + 00904. 00000 - '% s: invalid identifier ' +.
  
  over and over again. This is my SQL code:
  
  1 create or replace TYPE t_indirizzo () AS OBJECT
  via VARCHAR (45), 2
  3 NUMBER,
  4 cap INTEGER (5).
  5 Città varchar (30),
  6 provincia varchar (30),
  region 7 varchar (30)
  )
  
  8 create or replace TYPE t_telefono () AS OBJECT
  9 num_tel Number (15)
  )
  
  10 create or replace TYPE t_listaTelefono AS TABLE OF THE t_telefono
  
  11 create or replace TYPE t_cliente () AS OBJECT
  12 cod_cliente NUMBER (8).
  13 address t_indirizzo,
  14 email varchar (30),
  Telefono 15 t_listaTelefono
  (16) NOT FINAL
  
  17 CREATE TABLE client (t_cliente)
  18 cod_cliente NOT NULL,
  19 address NOT NULL,
  email 20 NOT NULL,
  21 PRIMARY KEY (cod_cliente)
  (22) TABLE IMBRIQUE 'telefono' STORE AS 'numTelCli_tab '.
  23 RETURN VALUE
  
  My version of Oracle is 10.2.0. Thank you in advance.
  
  Published by: user11231503 on 2.35 giu-8-2009

  so, just to be sure, run this:

  create or replace TYPE t_indirizzo AS OBJECT (
  via VARCHAR(45),
  numero NUMBER,
  cap INTEGER(5),
  citta VARCHAR(30),
  provincia VARCHAR(30),
  regione VARCHAR(30)
  );
  / 
  
  create or replace TYPE t_telefono AS OBJECT (
  num_tel NUMBER(15)
  );
  / 
  
  create or replace TYPE t_listaTelefono AS TABLE OF t_telefono
  / 
  
  create or replace TYPE t_cliente AS OBJECT (
  cod_cliente NUMBER(8),
  indirizzo t_indirizzo,
  email VARCHAR(30),
  telefono t_listaTelefono
  ) NOT FINAL;
  / 
  
  CREATE TABLE cliente OF t_cliente(
  cod_cliente NOT NULL,
  indirizzo NOT NULL,
  email NOT NULL,
  PRIMARY KEY (cod_cliente)
  ) nested table telefono store as numTelCli_tab
  return as value
  /
   
  

• Cisco ACS 4.2 a user in several local groups

  Currently, I like this group map

  ACS groups window

  GRP of GRP-A-B-1 and PDM - 2
  GRP - A. GRP - 1

  GRP - Grp-2 B

  For example currently a user test1 is part of two groups 1 and 2 under windows and is mapped to the Grp-A-B of the CSA. Is it possible if I delete the mapping of Grp-A-B in ACS and can see the user test1 speratley in both groups (Grp - A and Grp - B) to GBA?

  Salam Muhammad,

  If you have a local user in ACS, this user cannot be a member of both groups at the same time.

  The same concept applies to external users. They cannot be mapped to two different groups at the same time.

  If you delete the configuration of Grp-A-B, the test1 user will be mapped to the first group in the list because ACS 4.2 process mapping group in the order:

  ' the snip "'

  Order of group mapping

  ACS always maps users to a single group of TISA. However, a user can belong to several groups the group mapping. For example, a user named John could be a member of the ensemble of the engineering group and California, and at the same time be a member of the combination of Group Engineering and management. If the value of group ACS mappings exist for these two combinations, ACS must determine what group John should be affected.

  ACS prevents contradictory group set mappings by assigning an order of mapping for the whole group maps. When a user who is authenticated by an external user database is assigned to a group of ACS, ACS begins at the top of the list of groups for this database mappings. ACS sequentially checks group memberships of user in the database of the external user against each group mapping in the list. Where to find the first set group mapping corresponding memberships to external users in the user database, ACS assigns the user to the group this group map ACS and ends the process of mapping.

  ' the snip "'

  Reference:http://goo.gl/cvc474

  HTH

  Amjad

  Rating of useful answers is more useful to say "thank you".

• Transform a shape layer with several groups/paths in another?

  Hello

  I'm trying to turn the form A B-shaped into aftereffects.

  

  Both are drawn in illustrator, and I imported into aftereffects and diverted path to forms.

  At the moment I do a key framing color and the path in the sticky on the form A and form B. From there I will meet with two questions.

  (1) for now I have to manually open each group, every path, every feature of color until I'm able to keyframe them. After that I have to paste the keyframe of the track and keyframe colors individually to the corresponding group. It's doable, but I have to turn the form in 10 more other variants. Just want to check is there a shorter way to the key all the way to access and color properties frame. And then copy all of the keyframes from one form to the other.

  

  (2) I noticed that not all the points on the path are created equal. I think that the "starting point" is noted with an extra box compared to other points.

  

  As the "starting point" of a path is different from the rest, the transition has become weird.
  Can I check if someone knows how to change the "starting point" to another point on the same path? Or y at - it another way of fixing?

  Finally, if there is more easy morphing shapes to another, I'll be happy to listen. Thanks a lot ~

  I would do this kind of thing differently and 90% of the work in Illustrator.

  I would like to begin by drawing a path in Illustrator, to duplicate the path and to change the size and position and change the color of the outline of the color I wanted for the inside of the first form at the beginning of the animation.

  

  I use then the gradient tool to create a blend between the two forms specifying the number of steps, so my first form duly filled out for one frame looked like this:

  

  I would then do the same for my second form by using different colors, so I got this:

  

  With the two mixtures on you will see this:

  

  The upper mixing layer is where your animation will start and the bottom is where your animation should end.

  The next step is to select Merge layers and spread the mixture, if you find yourself with two groups:

  

  Here comes the fun part. Select groups, and then specify the number of steps you want as long as the number of images that you want in your animation. In this case, I want a second 1 transition and my comp is 29.97 FPS, so I selected 30.

  

  Now spread the mixture:

  

  We should end up with a group at layer 1 with 30 subgroups:

  

  Ungroup the higher group only then deselect all layers and select a single layer, then choose release to layers (sequence).

  

  now select all sub layers in the layer panel and drag it above layer 1. Layer 1 is now empty, so you can delete:

  

  Save the file HAVE and import into AE as a model with the size of the layer keeps selected:

  

  [Open the model, select all layers, move the a CTI frame to the right by pressing Ctrl/Cmnd + arrow to the right, then press Alt/Option +] to set the out point of all layers and then the wizard from keyframe to the layers in sequence without overlapping:

  

  I usually go to the point of exit of the background layer and press N to set the work area exit point, then cut the comp to work area.

  

  This model is then nested in your main comp and you can activate the time-remapping, so you can change the speed and use CC force motion blur to smooth animation.

  

  You will find it much easier to create the morph to a shape layer in Illustrator those in AE, you don't need to convert anything to forms and most of the work is done for you before you start. Total time to create this project with about 1/4 of the time it took to create this post.

• assign a contract to a group

  How can I assign a specific to a group e-sign agreement.  I see I can assign to "all members of my group", or "entire organization" or 'me', but I would like to assign it to a different group.

  Hi Kendall,

  By default, you can only share the model in a group associated with you. If you are not part of this group, you cannot share the model with it.

  Kind regards

  -Usman-

• Access control with custom groups

  I'm rather new to APEX. I'm trying to implement access control/authorization using custom groups (not built-in groups View, Edit and administrator). I search the web and the forums of discussion, in general, but so far I came up empty. I was hoping someone could point me in the right direction on how to start. Is there stored procedures that need to be adapted and implemented? Where should I keep the user groups? Can I use tables integrated or we can develop custom security group tables? These are some of the questions that I tried to be and any help would be appreciated.
  
  And BTW, due to the customer's requirements, we currently use version 3.2. Not sure if there are significant changes between this version and the latest version.
  
  Thanks to you all!
  Mischa

  Custom authentication is easy enough to put up with your own tables, here's an example
  http://djmein.blogspot.com.au/2007/07/custom-authentication-authorisation.html

  This brings to authorization, using your own tables. It must focus on the use of the authorisation schemes
  http://docs.Oracle.com/CD/E37097_01/doc/doc.42/e35125/sec_authorization.htm#BABEDFGB
  This can simply be queries on the tables of your own group, which probably would control membership by username.

  You ask a question about the use of built-in tables, but do not want the built-in administrator groups?

  Many important changes, but none that should affect you in what concerns the authentication/authorization.

  Scott

• Cancel the assignment of users to a group of IOM using the API/Java Code

  Hello OIMers,
  
  Can you please tell me how can I delete the assignment a belonging to a group through code?
  
  This is the case:
  
  When the user is deleted from Active Directory, I want to cancel the user from a group, assumes that the name of the group is "employed full-time."
  
  Currently how do is click the profile in the administration Console, then select group of drop down and then select Cancel this group assignment.
  
  Please tell me how to do the above tasks programmatically, it would solve my problem.
  
  
  Thanks to all in advance.
  
  Kind regards
  
  VSN

  Have you tried findGroups?

  You get a result set with only one entry and then just do a:

  long groupKey = groups.getLongValue("Groups.Key");

  Hope this helps
  -Martin

• How to associate policies crypto with tunnel-group?

  Hi, when I review the configuration of the VPN from point to point, I have a question. The ASA has three peer-to-peer VPN configuration. So, there are also three groups of tunnel in there. My question is how each VPN to ensure encryption policy tunnel-group? In the anther Word, what encryption policy associated with tunnel-group? Thank you.

  This is the phase 1, they work from top to bottom.  When you try to negotiate the tunnel between two counterparts, in the background, they send all of your policies and according to which is first (from top to bottom) is used.

  For example.

  If your counterpart device uses (3des, md5, pre-shared key and group 2), it will not match the policy 1 and the rest of the policy will not be considered.

  Kind regards

  Sandra

• Power CLI script to add multiple VLANs with port group name in an ESX cluster

  Hi all

  Can someone help me get a script adds several VLANs with port group name in an ESX cluster?

  Kind regards

  Suresh

  OK, so you just need to do an Import-Csv inside the loop and change the variables accordingly.

  What is the provision of this CSV file?