Authentication/authorization GANYMEDE + based on the subnet of the user
Hi guys/girls
We have number of speeds of production, which are configured with Ganymede cisco + and all their work very well. But now I have an obligation to implement SSH-ver2 across the network, consist of about 8000 cisco gear.
I need to develop a proof of concept (POC), that activate SSH to gears production will not affect Ganymede + existing and authorized user authentication.
In our lab cisco gear, it was already configured with Ganymede + production for authentication and authorization server. Now, I am allowed to test SSH on these machines in the lab but I without disrupting other users who use the same laboratory-gears.
So, I want to activate SSH version 2 on these machines in lab-however, when the user from a certain specific subnet, this user must be authenticated and authorized by the LABORATORY Ganymede +, but no production Ganymede +, however please note that lab-gears, that I'm testing with also already configured for production Ganymede + server as well. These devices in the laboratory must be able to do authentication and authorization of two different Ganymede + server based on subnet of users that he or she coming.
Is - this plan is feasible? I am looking for documentation to implement the test of this method, is not successful.
Your comments will be appreciated and evaluated.
Thank you
Rizwan James
Adely,
It won't work, the Ganymede authentication begins once the ssh connection is established, the n (router or switch) will open a Ganymede connection and send the start indicator to the RADIUS server in which the 'getusername' message is sent from the RADIUS server to the device and the user terminal. You cannot create an acl in order to choose which Ganymede servers you can authenticate either. When it comes to authenticate users from a specific subnet to a server specific RADIUS which is not the design of Ganymede, when you configure multiple servers in a group is to ensure high availability such that when a Ganymede server goes down you have a secondary school continue with authentication requests from the.
Here is an example of how the RADIUS authentication is performed.
http://www.Cisco.com/en/us/Tech/tk59/technologies_tech_note09186a0080094e99.shtml#comp_traffic
Thank you and I hope this helps.
Tarik Admani
* Please note the useful messages *.
Tags: Cisco Security
Similar Questions
-
Hide a metadata profile based on the user role.
Hi all
I need to hide a metadata profile (log, update) based on the user role page. I have added metadata to a rule like "change" and added the rule to the profile. Now I want the metadata submitted must be visible for couple of user roles (admin, contributor) and it should be hidden for other user roles. How to achieve this?
The content Server: 11.1.1.8
Thank you
Maury
(1) create a rule that allows you to hide the metadata for all roles
(2) create a new one which will show use the condition of activation of rule with building userHasRole("contributor")
-
Hello
Request Express 4.2.3.00.08
I created an application of multi languaguage in which the language is defined by setting: FSP_LANGUAGE_PREFERENCE
But the login page, I would like to than the login page to be displayed in the browsers language.
The url of the application connection looks like as shown below but the & BROWSER_LANGUAGE. product always (English).
f? p = & APP_ID.:LOGIN_DESKTOP: & SESSION. : FSP_LANGUAGE_PREFERENCE: & BROWSER_LANGUAGE.
LOGIN_DESKTOP is an intermediate page that has one before branch header for the page of real connection if the FSP_LANGUAGE_PREFERENCE is set prior to the loading of the page.
If I set the language set in this URL, it works as expected:
f? p = & APP_ID.:LOGIN_DESKTOP: & SESSION. : FSP_LANGUAGE_PREFERENCE:nl - page Login Show in NL
f? p = & APP_ID.:LOGIN_DESKTOP: & SESSION. : FSP_LANGUAGE_PREFERENCE:-see the login page in EN
When I put the application to choose the language based on the browser language that it works, but then I am not able to have users to save their preferences for the next time they are connected.
Any ideas on why & BROWSER_LANGUAGE. translates by "in" even though the language in the browser is different?
See you soon
Bottom
OK, he stares at me
For all those interested, this is how.
Create a page additional empy (with alias page LOGIN_FORWARD_PAGE) and set the url to connect to the application of this new page and set the value of the application on BRANCH_TO_PAGE_ACCEPT:
f? p = & APP_ID.: LOGIN_FORWARD_PAGE: & SESSION. : BRANCH_TO_PAGE_ACCEPT:
On the page to create a pl/sql process submit before calculations similar to one below which affect the en language, if the browser is not NL (in Dutch):
If upper (substr (owa_util.get_cgi_env ('HTTP_ACCEPT_LANGUAGE'), 1, 2)) = "NL" then
: FSP_LANGUAGE_PREFERENCE: = "nl";
on the other
: FSP_LANGUAGE_PREFERENCE: = 'en ';
end if;
And create a branch to submit before the treatment which redirects to the current login page (the value of FSP_LANGUAGE_PREFERENCE is then already set and the application is configured to use this setting).
After that loging in you can extract the FSP_LANGUAGE_PREFERENCE based on the user.
BTW, I had to switch to 4.2.5 there in 4.2.3 is a bug preventing to set session state when you use BRANCH_TO_PAGE_ACCEPT!
-
How to highlight a line in IR based on the user name
Hello
What is the best way to highlight a line in an IR, based on the user name. IE APP_USER.
Suppose that if an APP_USER connect to the application, the line corresponding to the APP_USER international registration should only be highlighted.
(The button change is not visible in IR)Hello
Value of APP_USER is uppercase. Your name column values are lowercase.
Example of code I have after string comparison is case-sensitive.I don't have to change your action Dynamics example JavaScript to convert the value of the cell uppercase
this.affectedElements.find('table.apexir_WORKSHEET_DATA td[headers="NAME"]').each(function(i){ var lThis=$(this); if(lThis.text().toUpperCase()=="&APP_USER."){ lThis.parent().children().css({"background-color":"#55A955"}); } });
Now, it should work
Kind regards
Jari
-----
My Blog: http://dbswh.webhop.net/htmldb/f?p=BLOG:HOME:0
Twitter: http://www.twitter.com/jariolai -
Based on the user dashboard sign on
Hello
I have to design a dashboard page that loads based on Department and users. The modules is in a table, the table has two columns, username and the Department.
NOTE: There must be a dashboard page, but the content must be different depending on the user that connects.
Department of user name
User1 sales
User2 sales
The util_3 sales
ACCT user4
USER5 Acct
Utilisateur6 Mktg
USER7 Mktg
.....
How to start this project? Help, please.
Thank you.Hello
Create groups based on departments to the RPD, to groups such as sales, accounting, marketing etc... Assign users to specific groups (this means Department underspecific users). Create these groups in the web under manage Presentation catalog groups and users.
Now, create a page with section per group.
I mean
Section1 - sales
Section 2 - accounts
Section3 - Marketing
etc...
I mean applying security for sections (section per group) properties of the section-> permissions and give access to a section specific to the specific group (remove the Everyone group) as I mentioned above.
Now place the tha reports in sections according to your requirement. Sales in the sales section reports, accounts in the section and so on.If you want to create a report based on this table (user & dept). Apply security at the level of the table data in the presentation layer of RPD (right click-> properties -? permissions-> Filter tab), the value of dept assignment specific to a specific group, that filters the data in the dept column based on the user login.
Hope this helps you :-)
Kind regards
Srikanth -
Show/Hide button, based on the user variable
I have a variable "videoDone" which is set to 1 when the SWF on my Captivate slide is completed.
My next button is hidden when the slide is displayed (Next hidden if the button videoDone = 0)
How to make the next visible button without having the user to interact with something on the slide? I want to not visible when videoDone = 1?
I can make it appear if I add a button to the screen that has a fast action (if videoDone = 1 show Next_button) but I want the next button to simply appear.
You need an event to trigger an action, and Captivate has no time-based events. It is impossible with the timeline?
-
Change the command prompt based on the user login
Hello
I work in 11.1.1.5(11g) OBIEE. In my environment, OBIEE is integrated with OAM and user gets if authenticate in the OID Database.I a requirement where in cases that we have two users(user1,user2) and guest (prompt1, 2 guest)
Example:
If 1 1 user login prompt should get the display and 2 2 so quick connection of the user should get a good view.
Can anyone help on this?
Thank you
PadminiWith the help of the Administration-> catalog manage set permissions at the prompt and add the page. Based on the permissions that they might see respective guests
If brand aid
-
Hi Experts,
I have a requirement where I need to show the screen based on the logged in user.
http://localhost:9000 web /-determinations9000/enquete/customrule/fr-u.s./attribut ~ interview_complete ~ global ~ global? user = comments
If the user is prompted then 1 SCREEN appears
If the user is not prompted SCREEN 2 is displayed.
How this functionality can be achieved.
The pointers will be of great help.
Kind regards
SameerYou are right to make this need to enter the user name in the session of rules somehow. So, there are 2 problems:
1. the representation of the user in the session of rules
2. how to manage the display of the different screensAbout 1, create a global attribute for the user name. The "user = comments" you see in the URL for OWD is not really used for anything anyone internally. The SecurityService does not work in the OPA at the present time. The user name (security token) is passed to the InterviewEngine at the time of session creation, but is not used. So to access that piece of information you can possibly create an OnRequireSessionEventHandler that you provide the user information and then create your own session and fill the username in the new session. (Ideally, you would use an OnSessionCreatedEventHandler but you do not have access to the SecurityToken recalled). Another option is to set up an OnRequestEventHandler and direct access to the web query to get the user name and write it in the session.
2, regarding if it is a question that should be displayed differently for users, and then as you suggest a screen flow branching on the user name could then be used, or if you do not use the screen flows and instead to use attribute goals then use procedural rules to manage navigation. If this is the summary screen which should vary then, you place all the controls for each user in folders and apply attributes of visibility to the folder level to achieve the desired effect. (depending on how complicated and different screens 2 question are that you can use attributes of visibility on every control, i.e. to put the two logical screens in 1 OPA screen, just hide the irrelevant controls for specific user)
Hope that helps.
-
Approver dynamic groups based on the user of the input values
Hi all
I need to create groups for approval in SOUL based on the input values by the user in a special SIT.
For Ex: If the user eneters 'Yes' for a particular segment, I need to send a set of approvers and the user eneters 'no', so I need to send another group of approvers. Please let me know how it can be obtained by the SOUL.
Thank you
REDAHello
1 define an attribute in the SOUL who reads this segment of the table of transactions of SSHRC.
2. create the conditions and rules based on this attribute to change permissions.Kind regards
Laulagnet -
Hide sections in the dashboard based on the user group
Hello everyone
Can I find out if certain sections of the dashboard can be hidden using guided the usergroup-based navigation? Links to this topic... I appreciate.
Thanks in advanceHello
guided navigation is the way to go. Now, you think to demand that triggers the guided navigation.
Now, you can not use double in a normal request in OBIEE. If you need to use an existing column in a topic area:
(1) for example, add column 'Calendar year' of the size of your time at your request.
(2) add the same column at your request.
3) click on the fx in the second column column, to change the formula.
(4) modify the formula to: LOCATE ('GroupName', VALUEOF (NQ_SESSION. GROUP OF))
The value in this column will be 0 when the user is not a member of GroupName and > 0 when it is a member of GroupName.
(5) add a filter on the column: LOCATE ('GroupName', VALUEOF (NQ_SESSION. GROUP)) is equal to 0.Check the results:
When the X user is member of GroupName, demand will cause no line. When the user X is not a member of GroupName, it won't.A note: when using 'A' as a groupname, you will have problems with this, because 'A' is also in "Administrators".
-
Dynamic columns based on the user login
Dear Experts,
Is it possible to display the columns dynamically according to the connection of the BI Publisher user?
For example, if the report of RTF model has 10 columns in total and if I connect with a user named "abc", I should be able to see, say 6 columns containing information about the user "abc".
And if I have connection with "xyz", I should be able to see, say 7 columns containing information about the user "xyz".
I will be able to assign to which column should be displayed to the user who?
If there is a way to achieve this scenario, please let me know as soon as possible, since there is an urgent need.
Your help will be very appreciated.
Thanks in advance!
Yes, using: xdo_user_name in the SQL data model, you can get the details for user identification.
Then use this model column RTF for display of the dynamic columns.
Example:
Select: xdo_user_name as USER_ID of the double
In RTF
Column header Column data -
Show/hide fields based on the user's selection
I know little of Javascript, but my first attempts to integrate it in Acrobat are bothersome. I have created a simple form where the user via a check box the number of people that he or she must register, then the form shows that several fields to complete. I tried to make it work with a single field, before I add more.
In this example, I'm trying just to get the second hidden registered field if the user checks only 1 person to register. (I already know that I have issues when it comes to hide several fields).
If (event.target.value == "0") {}
this.getField("Registrant2").display = display.hide;
}
Given that I do not know what is the value of exports, try this:
If (event.target.value! == 'Off') {}
this.getField("Registrant2").display = display.hidden;
}
You can add an else clause so that the field is displayed when the check box is not selected:
If (event.target.value! == 'Off') {}
this.getField("Registrant2").display = display.hidden;
} else {}
this.getField("Registrant2").display = display.visible;
}
If this does ' t work, you don't maybe not the correct domain name. Verify that the console (Ctrl + J) to see all JavaScript errors are reported.
-
Home page by default for OBIEE 11 g based on the users and the wise group
Hi all
I'm using OBIEE 11 g.
I need set the page default dashboard for the user and the wise group.
EX:
User1 is belongs to Group1 and Role1 - they need to see the default homepage as Dashboard1.
User2 is belongs to the Group 2 and Role2 - they need to see the default homepage as Dashboard2.
Kindly guide me to achieve.
Please answer as soon as POSSIBLE.
Thanks in advance.
It is generally considered poor form to scream as soon as POSSIBLE to a question. http://www.CatB.org/ESR/FAQs/smart-questions.html
As far as your question goes, it is that the CHEMINPORTAIL variable is for:
http://docs.Oracle.com/CD/E23943_01/bi.1111/e10540/variables.htm#i1013436
-
Filter drop-down list based on the user's input:
Hello
I have the list of the 50 States of the United States in the drop-down list.
Ex: alabama
Alaska
Arizona
Arkansas
Lousiana
When the user types 'a' in the drop down menu, the drop-down list should automatically expand and list only in alabama, alaska, arizona.
When the user types "al", the drop-down list should be further refined to alabama and alaska.
What I see is when the user types 'al', the list of jumps to lousiana and I won't.
I think I should fight with javascript written on the drop-down list change event. It would be awesome if someone already have the solution to filter the list according to the user types in each letter.
Thank you
KC
Hello
Bruce has a very good explanation about it.
This thread may help you. http://forums.Adobe.com/thread/518910?TSTART=0
Thank you
Sidonie.
-
Tax calculation based on the user in the box input and displaying the result.
Thanks to WhyIsThisMe for starting me on my first draft script & Jono! I'm almost there with my purchase requisition form (90% manufactured from the tutorial). Everything works except for the taxable column
I can't understand the correct syntax to check the value of the checkbox in the column taxable and then do the math for the tax based on user input in the field % tax
(total * stateTaxPercent / 100)
Essentially, I want to make the calculation only the taxable = 1, and then display the cumulative tax in the tax field.
Should I use mouseup as trigger to perform the calculation of the tax and save the result as a variable and displays the variable in the tax field? Then if another taxable box gets checked, I could add the new calculation of the variable. Not sure whether in an elegant way to get there.
?
I would put the following text in the change event of each taxable check box (in formcalc):
If ($ == 1) then
tax = tax + (amount * 0,0825)
ElseIf ($ == 0) then
tax = tax - (quantity * 0,0825)
endif
(where 'tax' is what you called your total tax box and the 'amount' is what you called your box of price).
Maybe you are looking for
-
rescue used as additional e-mail email?
See: If you cannot send or receive messages on your iPhone, iPad or iPod touch - Apple Support Can I use the 'rescue' as an 'additional email address"address (as defined above)?
-
I develop Firefox addons. Since the update to Firefox 18.0 removes my development extensions/files in the profile folder loading firefox, how can I stop this, I lose the job!
-
Can not see picture in Apple TV
My Apple TV show in the PHOTO app "your photo stream is empty. I have a photo library iCloud I can see (pictures + album) on my iPad and my 2 computer iMac. Also I can access my 'Photo' via my iCloud account in any other computer. Finally 'home shari
-
HP Envy 4500: HP Envy 4500 - photo print half off the page. Print very well.
All of a sudden, my HP Envy 4500 failed to print all the images; documents continue to print OK. For photos, the printer acts like it's works fine to start, but print only about half of the photo on the paper - it seeks to print the rest on the back
-
I get error (blue screen) system, laptop restarts automatically
OS: XP SP3 Recently, I reloaded the OS and downloaded/installed all the patches and SP3. I installed all the drivers for audio/video/network/...etc that are provided by the manufacturer / intel... I installed need or Speed SHIFT and when running the