Problem list access control

Similar Questions

• Problems with "security access control list '.

  Hello
  
  My system is configured as follows
  UCM - 11 GR 1 material - 11.1.1.4.0 (Build: 7.3.0.180)
  -Database 11 GR 2
  OracleTextSearch - engine is used
  RoleEntityACL - component is enabled
  -Parts of my config.cfg

  SearchIndexerEngineName=OracleTextSearch
  IndexerDatabaseProviderName=SystemDatabase
  UseEntitySecurity=true

  I want to create lists of access control for users, groups, and roles. I followed the the next page http://download.oracle.com/docs/cd/E17904_01/ documentatoindoc.1111/e10792/c03_security.htm#CDDBCIDA
  Everything seems to work fine at first, because I'm able to add users, groups, and roles to the ACL of the document. The problem is that adding a user, group or role of the ACL of a document does not affect the rights of a user a of the document.
  
  Example:
  -Wear a read access to "public"-SecurityGroup
  -UserB is to check in a "document1" to the SecurityGroup 'public' and adds UserA to the ACL of "document1" give UserA 'read' and 'write' access to "document1".
  -The result is that UserA doesn't have to 'write' access to "document1", well it is in the ACL (same problem with groups and roles)
  
  In this scenario shouldn't UserA have "write" access "document1" or I have a bad understanding of access control lists?
  
  Thanks in advance
  Brahim

  You heard wrong...

  Permissions through ACL are subject to the same rules of intersection between the permissions granted by the intermediary of roles or accounts.

  If you want write access to a document, you must have at least write access to the security group of the document, account and have RW permissions in the ACL.

  In other words work ACL on top existing accounts/groups and roles that they do not replace the existing UCM permissions. You can restrict the permissions by an ACL but not grant permissions that the user has not already set for the account or the security group.

  And by are the ACL way ugly generally impassable and unmanageable so if you have to use them all to be very careful!

  hope tha helps
  Tim

• WARNING 1336: The structure of access control list (ACL) is not valid

  Security permissions are stripped on Win 7 32 bit.  Trying to restore default

  Followed the instructions to reset default command-line following running as administrator - results to the newspaper below

  secedit / configure / db /cfg %windir%\inf\defltbase.inf defltbase.sdb / verbose

  How can I fix the structure of the access control list?

  Log file:

  December-14-10 09:38:47
  -Configuration engine was initialized successfully.-

  -Model of reading Configuration information...

  -Rights of the user to configure...
  SeImpersonatePrivilege must be attributed to administrators. This setting is defined.
  SeImpersonatePrivilege must be assigned to the SERVICE. This setting is defined.
  Configure the S-1-5-18.
  Remove SeShutdownPrivilege.
  Configure S-1-5-21-4262353681-2820704222-1343016971-1004.
  Remove SeNetworkLogonRight.
  Remove SeBatchLogonRight.
  Remove SeServiceLogonRight.
  Remove SeDenyInteractiveLogonRight.
  delete SeDenyRemoteInteractiveLogonRight.
  Remove SeImpersonatePrivilege.
  Configure S-1-5-21-4262353681-2820704222-1343016971-1005.
  Remove SeServiceLogonRight.
  Configure S-1-5-21-4262353681-2820704222-1343016971-1006.
  Remove SeServiceLogonRight.
  Configure S-1-5-21-4262353681-2820704222-1343016971-1008.
  delete SeDenyBatchLogonRight.
  Remove SeDenyInteractiveLogonRight.
  Configure the S-1-5-32.
  Remove SeServiceLogonRight.
  Configure the S-1-5-19.
  Configure the S-1-5-20.
  Remove SeServiceLogonRight.
  Configure S-1-5-32-544.
  Configure S-1-5-32-551.
  Configure S-1-5-32-559.
  Configure S-1-5-32-545.
  Configure the S-1-1-0.
  Configure the S-1-5-6.
  Configure S-1-5-21-4262353681-2820704222-1343016971-501.
  Add SeDenyNetworkLogonRight.
  Configure S-1-5-32-555.
  Configure S-1-5-80-0.
  Configure S-1-5-80-3139157870-2983391045-3678747466-658725712-1809340420.

  User rights configuration was completed successfully.

  -Configure the group membership...
  Set up users.
  remove the Bob-PC\ASPNET.

  Group membership configuration was completed successfully.

  -Configure registry keys...
  Configure users\.default.
  Configure machine\software.
  WARNING 1336: Access control list (ACL) structure is not valid.
  Error setting security on machine\software\Licenses.

  Configuration of registry keys was completed by one or more errors.

  -Configure file security...
  Configure c:\program files\common files\speechengines\microsoft\tts.
  WARNING 2: The system cannot find the specified file.
  Error safe on c:\program files\common files\speechengines\microsoft\tts.
  Configure c:\programdata\microsoft\windows\drm.
  Configure c:\programdata\microsoft\windows\drm\cache.
  Configure c:\windows\repair\default.
  WARNING 3: The system does not have the specified path.
  Error setting security on c:\windows\repair\default.
  Configure c:\windows\repair\ntuser.dat.
  WARNING 3: The system does not have the specified path.
  Error setting security on c:\windows\repair\ntuser.dat.
  Configure c:\windows\repair\sam.
  WARNING 3: The system does not have the specified path.
  Error setting security on c:\windows\repair\sam.
  Configure c:\windows\repair\security.
  WARNING 3: The system does not have the specified path.
  Error setting security on c:\windows\repair\security.
  Configure c:\windows\repair\software.
  WARNING 3: The system does not have the specified path.
  Error setting security on c:\windows\repair\software.
  Configure c:\windows\repair\system.
  WARNING 3: The system does not have the specified path.
  Error setting security on c:\windows\repair\system.
  Configure c:\windows\system32\windows media.
  WARNING 2: The system cannot find the specified file.
  Error on c:\windows\system32\windows media safe.

  File security configuration was completed successfully.

  -Set up the parameters of the General Service officer...
  Configure the sysmonlog.
  Error 1060: The specified service does not exist as an installed service.
  Error opening sysmonlog.
  Configure SamSs.
  Configure ntmssvc.
  Error 1060: The specified service does not exist as an installed service.
  Error opening ntmssvc.
  Configure netddedsdm.
  Error 1060: The specified service does not exist as an installed service.
  Error opening netddedsdm.
  Configure netdde.
  Error 1060: The specified service does not exist as an installed service.
  Error opening netdde.
  Configure dmserver.
  Error 1060: The specified service does not exist as an installed service.
  Error opening dmserver.
  Configure clipsrv.
  Error 1060: The specified service does not exist as an installed service.
  Error opening clipsrv.
  Configure the browser.

  Agent of General Service configuration was completed successfully.

  -Configure available attachment engines...

  Attachment engines configuration completed successfully.

  -Configure security policy...
  Configure password information.
  The administrator account is disabled.
  Guest account is disabled.

  Access configuration was completed successfully.
  Search anonymous LSA appoints setting: existing SD = D: (D; 0 X 800;) (A) (; xf1fff 0;) BA) (; 0 x 20801;) WD) (; 0 x 801;) (A) (a. 0x1000;) LS) (a. 0x1000;) NS) (a. 0x1000;) S-1-5-17).
  Configure the setting LSA anonymous search.
  Set up the nt\currentversion\setup\recoveryconsole\securitylevel machine.
  Set up the nt\currentversion\setup\recoveryconsole\setcommand machine.
  Set up the nt\currentversion\winlogon\scremoveoption machine.
  Configure machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername.
  Configure machine\software\microsoft\windows\currentversion\policies\system\legalnoticecaption.
  Configure machine\software\microsoft\windows\currentversion\policies\system\legalnoticetext.
  Configure machine\software\microsoft\windows\currentversion\policies\system\scforceoption.
  Configure machine\software\microsoft\windows\currentversion\policies\system\shutdownwithoutlogon.
  Configure machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon.
  Configure machine\software\policies\microsoft\windows\safer\codeidentifiers\authenticodeenabled.
  Configure machine\system\currentcontrolset\control\lsa\auditbaseobjects.
  Configure machine\system\currentcontrolset\control\lsa\crashonauditfail.
  Configure machine\system\currentcontrolset\control\lsa\disabledomaincreds.
  Configure machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous.
  Configure machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled.
  Configure machine\system\currentcontrolset\control\lsa\forceguest.
  Configure machine\system\currentcontrolset\control\lsa\fullprivilegeauditing.
  Configure machine\system\currentcontrolset\control\lsa\nolmhash.
  Configure machine\system\currentcontrolset\control\lsa\restrictanonymous.
  Configure machine\system\currentcontrolset\control\lsa\restrictanonymoussam.
  Configure machine\system\currentcontrolset\control\print\providers\lanman printing services\servers\addprinterdrivers.
  Configure machine\system\currentcontrolset\control\session manager\kernel\obcaseinsensitive.
  Configure machine\system\currentcontrolset\control\session manager\memory management\clearpagefileatshutdown.
  Configure machine\system\currentcontrolset\control\session manager\protectionmode.
  Configure machine\system\currentcontrolset\services\lanmanserver\parameters\autodisconnect.
  Configure machine\system\currentcontrolset\services\lanmanserver\parameters\enableforcedlogoff.
  Configure machine\system\currentcontrolset\services\lanmanserver\parameters\enablesecuritysignature.
  Configure machine\system\currentcontrolset\services\lanmanserver\parameters\requiresecuritysignature.
  Configure machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess.
  Configure machine\system\currentcontrolset\services\lanmanworkstation\parameters\enableplaintextpassword.
  Configure machine\system\currentcontrolset\services\lanmanworkstation\parameters\enablesecuritysignature.
  Configure machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature.
  Configure machine\system\currentcontrolset\services\ldap\ldapclientintegrity.

  Registry values configuration completed successfully.
  Configure the log settings.

  Configuration of the audit / log has been successfully completed.

  -Configure available attachment engines...

  Attachment engines configuration completed successfully.

  Engine - UN-initialize configuration...

  Hello

  See if the continuation of the measures on this blog help repair the ACL: http://blogs.msdn.com/b/astebner/archive/2006/09/04/739820.aspx

  Diana

  Microsoft Answers Support Engineer

  Visit our Microsoft answers feedback Forum and let us know what you think.

  If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

• When you ask the ORA-24247 utl_http package: access denied by access control (ACL) of network list

  Dear all,

  Need your help please.

  Do in the face of ora 24247 network denial of access (ACL) even after following the procedure below. It was working fine until today where I did just drop and recreate again.

  BANNER

  Oracle Database 11 g Enterprise Edition Release 11.2.0.1.0 - 64 bit Production

  PL/SQL Release 11.2.0.1.0 - Production

  CORE 11.2.0.1.0 Production

  AMT for 64-bit Windows: Version 11.2.0.1.0 - Production

  NLSRTL Version 11.2.0.1.0 - Production

  Steps to follow:

  Created an ACL with a user database and awarded connect, solve privilege.

  Start

  (DBMS_NETWORK_ACL_ADMIN). CREATE_ACL

  ACL = > "utl_http.xml"

  Description = > "HTTP access.

  main = > 'TPAUSER ',.

  IS_GRANT = > TRUE,

  privilege = > 'connection ',.

  start_date = > null,

  End_date = > null);

  (DBMS_NETWORK_ACL_ADMIN). ADD_PRIVILEGE

  ACL = > "utl_http.xml"

  main = > 'TPAUSER ',.

  IS_GRANT = > TRUE,

  privilege = > 'connection ',.

  start_date = > null,

  End_date = > null);

  (DBMS_NETWORK_ACL_ADMIN). ADD_PRIVILEGE

  ACL = > "utl_http.xml"

  main = > 'TPAUSER ',.

  IS_GRANT = > TRUE,

  privilege = > 'address');

  (DBMS_NETWORK_ACL_ADMIN). ASSIGN_ACL

  ACL = > "utl_http.xml"

  Home = > ' *',

  lower_port = > 80,

  upper_port = > 80);

  commit;

  end;

  Confirmed the ACL configuration.

  Select * from dba_network_acls;

  HOST

  LOWER_PORT

  UPPER_PORT

  ACL

  ACLID

  
  Select the hosts, lower_port, upper_port, acl in dba_network_acls where ACL='/sys/acls/utl_http.xml';

  HOST LOWER_PORT UPPER_PORT ACL

  * 80 80 /sys/acls/utl_http.xml

  
  SELECT the ACL, PRINCIPAL, PRIVILEGE, IS_GRANT FROM dba_network_acl_privileges where main = "TPAUSER."

  
  

  ACL

  MAIN

  PRIVILEGE

  IS_GRANT

  /sys/ACLs/utl_http.XML	TPAUSER	connect	true
  /sys/ACLs/utl_http.XML	TPAUSER	solve the	true

  
  

  
  

  -grant execute on utp_http to TPAUSER;

  
  

  The performance of the procedure I have encountered the error message below. Don't know what step i missed here.

  
  

  ORA-29261: bad argument

  ORA-06512: at "SYS." UTL_HTTP", line 1525

  ORA-06512: at "TPAUSER. SEND_SMS_NEW', line 70

  ORA-24247: network access denied by access control list (ACL)

  ORA-06512: at line 18 level

  Your valuable support and help to get this issue resolved will be highly appreciated.

  Kind regards

  Syed

  Thank you for all.

  Problem solved in giving a superior port 8080.

  (DBMS_NETWORK_ACL_ADMIN). ASSIGN_ACL

  ACL-online "utl_http.xml."

  the host => ' *'.

  lower_port-online 80

  upper_port-online 8080

• UTL_MAIL - access denied by network access control list

  Hello
  
  I ran the scripts initjvm.sql, utlmail.sql and prvtmail.plb. Then run to the public.
  
  When I am logged in as SYSTEM this script sends a message without problem. its ok...!
  
  BEGIN
  EXECUTE IMMEDIATE 'ALTER SESSION SET smtp_out_server = "mymailserver.com" ';
  UTL_MAIL. Send (sender = > '[email protected]',)
  recipients = > "[email protected]"
  subject = > "Test Mail"
  message = > "Hello World"
  mime_type = > ' text; charset = us-ascii ");"
  END;
  /
  
  When I try to pass under the package or the package as a procedure with the owner of the system user that I get
  
  ORA-24247: network access denied by access control list (ACL)
  ORA-06512: at "SYS." UTL_TCP", line 17
  ORA-06512: at "SYS." UTL_TCP", line 246
  ORA-06512: at "SYS." UTL_SMTP", line 115
  ORA-06512: at "SYS." UTL_SMTP", line 138
  ORA-06512: at "SYS." UTL_MAIL", line 386
  ORA-06512: at "SYS." UTL_MAIL", line 599
  ORA-06512: at "KOM_BULLETIN. KOM_BULLETIN_PKG', line 29
  ORA-06512: at line 2
  
  
  my package is here:
  
  CREATE or REPLACE package KOM_BULLETIN body. "' KOM_BULLETIN_PKG ' is
  ...
  ...
  
  procedure send_smtp_without_attachment (p_sender varchar2, varchar2, varchar2, varchar2 p_message p_subject p_recipients) is
  BEGIN
  EXECUTE IMMEDIATE 'ALTER SESSION SET smtp_out_server = "mymailserver.com" ';
  UTL_MAIL. Send (sender = > p_sender,)
  recipients = > p_recipients,
  subject = > p_subject,
  message = > p_message,
  mime_type = > ' text; charset = us-ascii ");"
  END;
  
  ...
  ...
  
  Runner script is:
  
  BEGIN
  () kom_bulletin_pkg.send_smtp_without_attachment
  p_sender = > '[email protected] ',.
  p_recipients = > '[email protected] ',.
  p_subject = > 'Test Mail. "
  p_message = > "Hello World");
  END;
  /
  
  What is the problem?

  Read on DBMS_NETWORK_ACL_ADMIN

• An another ORA-24247: network access denied by access control list (ACL)

  Hello
  
  We have just improved 10g and 11g (DB version is 11.2.0.1.0), and I have nothing but problems with ACL.
  
  I tried:
  
  Creation (as user dba) code:
  
  Start
  
  DBMS_NETWORK_ACL_ADMIN. CREATE_ACL ('netacl.xml',
  ('Allow its use at the UTL network packets', 'ACLTEST', 'connect', TRUE);
  
  DBMS_NETWORK_ACL_ADMIN. ADD_PRIVILEGE ('netacl.xml', 'ACLTEST', TRUE, 'solve');
  
  DBMS_NETWORK_ACL_ADMIN. ASSIGN_ACL('netacl.) XML ',' *');
  commit;
  
  end;
  
  Code execution (such as ACLTEST):
  declare
  l_conn UTL_TCP.connection;
  v_file ftp.TStringTable;
  l_list ftp.t_string_table;
  
  Start
  l_conn: = ftp.Logind ('DOMAIN', 21, 'USERNAME', 'PASSWORD');
  FTP.Logout (l_conn);
  end;
  
  Error stack
  ORA-24247: network access denied by access control list (ACL)
  ORA-06512: at "SYS." UTL_TCP", line 17
  ORA-06512: at "SYS." UTL_TCP", line 246
  ORA-06512: at the ' COMMON. ' " "FTP", line 784
  ORA-06512: at line 7
  
  I tried to add the domain in the list full acl with port range with no luck:
  Start
  DBMS_NETWORK_ACL_ADMIN. ASSIGN_ACL('netacl.) XML ',' DOMAIN', 1, 65000);
  commit;
  end;

  Hello

  See the TechNote MOS:

  * ORA-24247: network access denied by access (ACL) control list [ID 1229769.1] *.

  Thank you
  A H E E R X

• Airport network guess without the access control list.

  In fact, on the page AirPort base stations: on the guest network feature, Apple write this:

  "If enabled, access control lists will be applied to both the main Wi - Fi network and the network of comments. If you use Access Control Lists, you will need to add your comments network clients to the list so that they can join. »

  I think that on previous versions of the airport, it was possible to use the network to guess without the access control list.

  The idea is that only the (primary) private network should use this access control list.

  The network presupposes that is give for direct and temporary access (not necessary to access Airport utility, ask your friend and note its Mac address, restart the resort from the airport... for every friend who invited you to home)!

  Is there a workaround resolution?

  Unless you have set up a default rule 'No access' in the timed access settings, then it is not necessary to set up a rule for each "guest." Just give them the password for the network of comments and they will be able to access the network.

  IF... you have set a default rule 'No access' in the timed access settings, then you must also configure a rule for each device that you want to allow to connect with the settings for the time that the device is allowed to access the network.

• Repair Windows scam - cannot control panel access control or workstation "Windows Explorer has encountered a problem and needs to close."

  Original title: repair Windows scam - Can can't Access Control Panel or workstation

  My system has been recently infected with "Windows" repair"virus. I managed to delete using Super Anti-Spyware, but all my desktop shortcuts are gone (hidden) so I downloaded "Unhide.exe" and get all my shortcuts. Most of them seems to be working as before, but there are a few, such as 'My Computer', ' Panel, "My Documents", or even "Windows Explorer", which I can't access.» When I try to open them, I get this popup box saying "Windows Explorer has encountered a problem and needs to close" how much he out me of my office of kicks.

  Any suggestions?

  Thank you!

  Brian

  The best way to solve this maybe just create a new user account, transfer your personal data to this account, and then delete the old account. Make sure that you perform the system restore after you did the new account and everything works fine. To purge the system restore, simply disable it then again. Be aware that the creation of a new user account is not the means to get rid of malware. But it is perhaps the best way to get rid of some of the after effects. However, I recommend you scan with Malwarebytes before running these instructions. After scanning you may not create the new account.

  In addition, Jose is correct. Good number of new forms of malware prevent the start in safe mode. Trying to force booting in SafeMode with msconfig, you end up with a boot loop.

• Account administrator and user, Windows 7 Premium access control problems

  We have a problem with a HP/Compaq Windows 7 Premium machine 4 months old and we cannot allow any request of the UAC.

  An account on the machine is a "Standard user" without password, but when we do something like put to day or what the icon shield it and require permission from the Admin we cannot.  The alert box will appear asking you to Admin password (with no box to type, besides whom there is no account active Admin but maybe only the Super Admin account 'hidden' which is off), but also the 'Yes' button is gray and only 'no' can be clicked.

  Support PC World were unnecessary, saying full install, their stock response.  Tried enabling the 'super administrator' hidden account think it worked once before when I need administrator rights to install the software, but as unable to run CMD prompt as administrator (again because UAC comes into play), I can't seem to do.

  So now stuck with the new machine and messing around on the fighting with the OS: s I thought rightly or wrongly that the activation of the hidden Admin account would do, I'm sure that's what I did before, but I keep hitting the problem guest UAC as described above.  Therefore, the following does not work:

  ______________________________________

  Click Start, type: CMD
  In the results, click on the right button CMD
  Click on "Run as Administrator"
  at the command prompt, type: net user administrator / active: yes

  Log off, and then log on to the administrator account
  Make the appropriate changes to your accounts

  Log on to your account
  Click Start, type: CMD
  In the results, click on the right button CMD
  Click on "Run as Administrator"
  at the command prompt, type: net user administrator / active: No.

  ______________________________________

  I tried to click with the right button on CMD prompt and checking run them as administrator on the drop down menu, but UAC prompt comes up, no luck.  Also tried setting to "Run as Administrator" when raising the properties by right-clicking... same result.

  Also tried cursing at the machine... same result: o

  Any help appreciated because I'm sure that I've done it before, and there is a way to pass the CMD prompt.

  Ah finally solved.

  HP Compaq machines have their own start to use for recovery etc. software (accessible by pressing the ESC key), so I went into the system recovery using the backup utility to make sure that the external hard drive was last week 'missing' files, and then cancelled rather than clicking on the side to supplement a system recovery.

  This gave me the traditional options of safe mode,... networks, prompt etc.  Choose Mode safe mode with command prompt and Super Administrator hidden account was visible as well as the Standard user.  Choose the account super administrator, connected, activated the password protect and define it.

  At the command prompt enter:

  NET user administrator / Active: Yes

  Restarted as Standard and UAC user now works fine.

  It all started because of a need to install Open Office and then down the line a cutting machine, interrupting a Microsoft Backup, which could not be restarted without password Admin and user access control issues as described above.

  Is not to hide the Admin user at all now!

• N2848 - MAC access control lists

  Hello

  Our network uses multiple switches Dell 2848 and we want to restrict access to the network to a certain group of MAC addresses.

  Someone at - it experience of this?  In the menu, I see this option ' home > switch > Network Security > Access Control Lists > MAC Access Control Lists'.  I can't find any explanation of this function in the manuals PDF I downloaded wasn't so not sure if I was in the right place.

  Any help would be greatly appreciated.

  This allows in fact to only allow the MAC addresses you want. There is an inherited deny this rule at the end of the ACL.

  You must first make a MAC ACL rule and then apply this rule to the desired interface. You can learn more on page 657: http://dell.to/1WFiTWT

  It can also be configured through the CLI. The CLI guide includes some info and examples onpPage 276: http://dell.to/1SVu3Bp

  I hope this helps.

• The issue of logging of access control list name.

  Hello

  I've used ACL for many years and had not too many questions. I am a new client site and a project of Port authentication that we planned on using extanded access control lists to control traffic entirely open to help write the correct ACL for services using the ACL. The issue I have found is using the ACL below-> syslog logging does not show the port number which is exactly what we are after. We have not named ACL extended that record the port number as well.

  Running: Cisco IOS Software, s72033_rp (s72033_rp-IPSERVICESK9_WAN-M), Version 12.2 (33) SXH3a, RELEASE SOFTWARE (fc1)

  IP extended Access-list-example access list

  IP enable any any newspaper
  deny ip any any newspaper

  The log output:

  Mar 22 11:23:46: % s-6-IPACCESSLOGP: the list of access-list-example permit tcp nnn.nnn.nnn.nnn (0)-> xxx.xxx.xxx.xxx (0), 1 packet

  On a normal extended access list, we get this in a log output:

  access-list 120 allow host ip nnn.nnn.nnn.nnn xxx.xxx.xxx.0 0.0.0.7 Journal

  Mar 22 09:31:46: % s-6-IPACCESSLOGP: list 120 permit tcp nnn.nnn.nnn.nnn (3874)-> xxx.xxx.xxx.xxx (5001), 1 packet

  This shows the port numbers - I was wondering what small thing that I missed on logging for what I checked: http://www.cisco.com/web/about/security/intelligence/acl-logging.html and I see that the use of the switch of newspaper should do this because it shows the port numbers in their example.

  I'm sure it'll be something simple but I can't figure it out - I searched all odd Cisco cautions for ACL named which connect to port numbers, but can't find anything easily. Just wondering if anyone else has experienced this.

  Thank you

  Z.

  For the port number appear in the newspapers, you must create the list of access as follows:

  IP extended Access-list-example access list

       permit tcp any gt 0 any gt 0 log
  
       permit udp any gt 0 any gt 0 log
  
  Hope that helps.
  
  

• Access control lists

  Hi all! Can someone tell me abt good documentation to implement ACLs (Access Control Lists)...? Standard and...

  Thank you!

  IP Access Lists configuration

  http://www.Cisco.com/en/us/customer/products/sw/secursw/ps1018/products_tech_note09186a00800a5b9a.shtml#Netdiag

  Configuring commonly used IP ACLs

  http://www.Cisco.com/en/us/Tech/tk648/tk361/technologies_configuration_example09186a0080100548.shtml

  If you find this article useful, remember to evaluate our positions as a result.  Thank you.

• Needing ACL Manager - Access control list manager is EOL

  Hi everyone;

  CiscoWorks access control list manager is an excellent tool for the management and optimization of the ACL (removing covered ACEs, fusion maskable ACE face beaches, covered fusion ACE port ranges, removing the redundant ACEs, deleting double ACE and ACL Hits Optimizer)

  But now, it is not available more :(

  Does anyone know any similar tool or script?

  Thank you

  As much I know there no current Cisco product specially designed to manage ACL switch, such as a point solution or a feature of a product of greater reach.

  I don't see many customers with complex or extensive ACLs on the switches and the lack of tools available on the market to manage probably reflects this observation as well.

• ORA-24247: network access denied by access control list (ACL)

  I use the function UTL_MAIL to send an attachment using PL/SQL. When I run the code, I get an error message. Why this is happening and how I can fix it. It was working before.
  
  I'm running on a DB v. 11.1.0.7
  

  SQL> @c:\report_usc2_test.sql
  DECLARE
  *
  ERROR at line 1:
  ORA-24247: network access denied by access control list (ACL)
  ORA-06512: at "SYS.UTL_TCP", line 17
  ORA-06512: at "SYS.UTL_TCP", line 246
  ORA-06512: at "SYS.UTL_SMTP", line 115
  ORA-06512: at "SYS.UTL_SMTP", line 138
  ORA-06512: at "SYS.UTL_MAIL", line 386
  ORA-06512: at "SYS.UTL_MAIL", line 631
  ORA-06512: at line 23

  Here is my code:
  

  DECLARE
     fhandle                       UTL_FILE.file_type;
     vtextout                      VARCHAR2 (32000);
     text                          VARCHAR2 (32000);
     v_message                     VARCHAR2 (2000);
     v_output_file_path            VARCHAR2 (200);
  
   /* Open the output file in Read mode */
  BEGIN
     fhandle := UTL_FILE.fopen ('/appl/custom', 'REPORT_USC2.txt', 'r');
     LOOP
        BEGIN
           UTL_FILE.get_line (fhandle, vtextout);
           text := text || vtextout || UTL_TCP.crlf;
     EXCEPTION
           WHEN NO_DATA_FOUND  THEN
              EXIT;
        END;
     END LOOP;
     UTL_FILE.fclose (fhandle);
  
      /*Calling UTL_MAIL.send_attach_varchar2 to send the output as Email attachment */
     UTL_MAIL.send_attach_varchar2
     (
       sender          => '[email protected]',
       recipients      => '[email protected]',
       subject         => 'Report Created - USC2',
       MESSAGE         => 'A Report for USC2 has been generated.  Please do not reply or respond to this e-mail, as it has been automatically generated.',
       attachment      => text,
       att_inline      => FALSE,
       att_filename    => 'REPORT_USC2.txt'
      );
  END;
  /

  oerr ora 24247
  24247, 00000, "network access denied by access control list (ACL)"
  // *Cause:    No access control list (ACL) has been assigned to the target
  //            host or the privilege necessary to access the target host has not
  //            been granted to the user in the access control list.
  // *Action:   Ensure that an access control list (ACL) has been assigned to
  //            the target host and the privilege necessary to access the target
  //            host has been granted to the user.
  

  I don't see anywhere in your code when you add a user to the ACL...

  You can read about this feature of security here
  http://www.Oracle.com/technology/pub/articles/Oracle-database-11g-top-features/11g-security.html

  "UTL_TCP/HTTP/SMTP access control lists.

• Access OWB11g ACL process flows Email Network denied by access control list

  Hello
  
  I created an ACL to the e-mail server host and user OWBSYS
  
  I can test this by creating an e-mail package test in the OWBSYS schema and execute it successfully.
  
  However, when I deploy a workflow process with an operator of mail I get the following error.
  
  ORA-24247: network access denied by access control list (ACL)
  ORA-06512: at "SYS." UTL_TCP", line 17
  ORA-06512: at "SYS." UTL_TCP", line 246
  ORA-06512: at "SYS." UTL_SMTP", line 115
  ORA-06512: at "SYS." UTL_SMTP", line 138
  ORA-06512: at line 8 level
  
  This is a check on the ACL
  
  SQL > select acl, main, privilege, dba_network_acl_privileges is_grant;
  
  ACL
  --------------------------------------------------------------------------------
  MAIN
  --------------------------------------------------------------------------------
  PRIVILEGES IS_GR
  ------- -----
  / sys/ACLs/acl_for_owb5_cc. XML
  CONNECT
  Connect the true
  
  / sys/ACLs/acl_for_owb5_cc. XML
  OWBSYS
  Connect the true
  
  What Miss me? Any ideas greatly appreciated. Thank you.
  
  Fahd

  Read the note 470920.1 on metalink:
  Activity in the process Flow fails with ORA-24247 e-mail: network access denied by the ACLs ACL (OWB 11.1.0.6)

  It is the part of the Cause of the doc:

  Oracle Database 11 g Release 1 (11.1) includes a fine grain to the UTL_TCP access control.
  Packages UTL_SMTP, UTL_MAIL, UTL_HTTP and UTL_INADDR using Oracle XMLDB.
  If your application uses one of these packages, then install DB OracleXML if it is not already
  installed and configure network Access Control Lists (ACL) in the database before these packages
  can function as they were in earlier versions.

  And it's the solution according to Oracle:

  Set the ACL for the OWBSYS scheme:

  1. connect to the base with the SYS as SYSDBA user
  2. run the script after updating the mail server name and port number:

  SQL > EXECUTE DBMS_NETWORK_ACL_ADMIN. CREATE_ACL ('acl_for_owb_cc.xml', 'ACL to Control Center', 'OWBSYS', TRUE, "connect");
  SQL > EXECUTE DBMS_NETWORK_ACL_ADMIN. ASSIGN_ACL ('acl_for_owb_cc.xml', 'mail_server.domain.com', 25);
  SQL > COMMIT;

  HTH,
  Robert