Cannot use SASL Authentication Through GSSAPI on DS 6.3

I try to kerberized DS 6.3. I do step by step instruction from "Sun Java System Directory Server Enterprise Edition 6.3" and it doesn't work.
When I try to configure the Directory Server to Enable GSSAPI I get an error:
modifying entry cn=SASL,cn=security,cn=config
ldap_modify: DSA is unwilling to perform
ldap_modify: additional info: Modification not allowed on attribute dsSaslPluginsPath
After all when I try to authenticate to the Directory Server i get response:
ldap_sasl_interactive_bind_s: Authentication method not supported
ldap_sasl_interactive_bind_s: additional info: sasl mechanism not supported
Logs file:
+[22/Sep/2008:10:28:11 +0200] conn=2 op=-1 msgId=-1 - fd=22 slot=22 LDAP connection from 10.3.233.4:33054 to 10.3.233.4+
+[22/Sep/2008:10:28:11 +0200] conn=2 op=0 msgId=1 - BIND dn="" method=sasl version=3 mech=GSSAPI+
+[22/Sep/2008:10:28:11 +0200] conn=2 op=0 msgId=1 - RESULT err=7 tag=97 nentries=0 etime=0, sasl mechanism not supported+
+[22/Sep/2008:10:28:11 +0200] conn=2 op=1 msgId=2 - UNBIND+
+[22/Sep/2008:10:28:11 +0200] conn=2 op=1 msgId=-1 - closing from 10.3.233.4:33054 - U1 - Connection closed by unbind client -+
+[22/Sep/2008:10:28:12 +0200] conn=2 op=-1 msgId=-1 - closed.+
system specyfication:
Solaris 10 x86 64-bit
DS 6.3 B2008.0311.0212 NAT

See http://forums.sun.com/thread.jspa?forumID=761&threadID=5202246 for a description of the problem and a workaround.
If you have a Sun support contract, you can request an escalation of CR 6637404.
Also, note that it looks like part of the documentation went missing. In DS5.2 the docs included an additional step
Chapter 11 Implementing Security
Configuring Client Authentication
SASL Authentication Through GSSAPI (Solaris Only)
http://docs.sun.com/source/816-6698-10/ssl.html#18500
ldapmodify -D 'cn=directory manager'
dn: cn=SASL,cn=security,cn=config
changetype: modify
add: dsSaslPluginsEnable
dsSaslPluginsEnable: GSSAPI
replace: dsSaslPluginsPath
dsSaslPluginsPath: /usr/lib/mps/sasl2/libsasl.so
modifying entry cn=SASL,cn=security,cn=config
ldap_modify: DSA is unwilling to perform
ldap_modify: additional info: Adding attributes is not allowed
-------------------------------------------------------------

Similar Messages

  • ITunes using anonymous authentication through proxy

    Hi All,
    We have a bit of an issue here at work, we are trying to update our iPads to the latest version of IOS and they get as far as verifying the update with the apple servers and then we get a 3004 error.
    Looking into this further, it seems that what is happening is that iTunes is using anonymous authentication with our proxy server (Microsoft ISA) as looking at the logs from ISA reveals it denies the connection due to anonymous authentication being used.
    Is there a way that I can make iTunes use my windows credentials when authenticating or are there any other ways around this?

    Fixed by not using a proxy. If you have a proxy, then you can't update your iPod through iTunes - and, because that is the only way you can do it now, you are stuck!

  • Help needed for using BASIC authentication through JDBCRealm

    Help needed.
    Hello,
    I am doing a degree project, so far it works fine in my local machine, I need to try it on my virtual hosting (as it is a live server).
    My project requires JDBCRealm, that is BASIC authentication loading access data from mysql database. Normally this setup can be done in Server.xml file, because my Tomcat hosting is a virtual one, I only have permission to access the web.xml file.
    My question is: is it possible to get it done in an alternative way? In web.xml? Some properties file maybe?
    Thank you very much.

    You can set this up for your context using META-INF/context.xml instead of working with server.xml.
    Make a directory called META-INF under your webapp ( it'll be at the same level as WEB-INF ). Under this, add a context.xml with all your context specific configuration including the realm. A sample is below
    <?xml version="1.0" encoding="UTF-8"?>
    <Context path="/myApp" reloadable="true">
        <Realm
            className="org.apache.catalina.realm.JDBCRealm"            
            driverName="com.microsoft.jdbc.sqlserver.SQLServerDriver"         
            connectionURL="jdbc:microsoft:sqlserver://127.0.0.1:1433;DatabaseName=myDB;SelectMethod=Cursor;"
            connectionName="username" connectionPassword="password"
            digest="MD5" userTable="users" userNameCol="userid" userCredCol="userpassword"
            userRoleTable="user_roles" roleNameCol="rolename"
        />
    </Context>Hope this helps.
    People on the forum help others voluntarily, it's not their job.
    Help them help you.
    Learn how to ask questions first: http://faq.javaranch.com/java/HowToAskQuestionsOnJavaRanch
    ----------------------------------------------------------------

  • Cannot integrate SASL/GSSAPI with SunOne 5.2

    Hi Sir
    I am using following configuration
    1. iPlanet directory server 5.2
    2. Solaris 9.0
    3. KDC available with solaris
    4. I am not using any SSL certificates
    Goal: To be able to authenticate a ldap user thru kerberos
    I have been successfully able to import all the /etc files and merge them with iplanet database. All the users are able to login as well as authenticate also.
    I am facing a huge problem when I try to integrate kerberos with ldap. I have done identitymapping of GSSAPI. Also I have moved up kerberos in /etc/gss/mech. But now am I supposed to add userPassword: {KERBEROS} password ???? or to add what attributes in ldap. I am too confused. Suns own documentation is far incomplete to talk about all this. I can very well authenticate kerberos users (seperately in kerberos releam) very well but not in integration with LDAP. A new user with posix attributes can login into the system and work also. But how to get him authenticated thru kerberos ????
    The result of "ldapclient list" is
    NS_LDAP_FILE_VERSION= 2.0
    NS_LDAP_SERVERS= 10.91.198.100
    NS_LDAP_SEARCH_BASEDN= dc=quark,dc=co,dc=in
    NS_LDAP_SEARCH_REF= FALSE
    NS_LDAP_SEARCH_SCOPE= one
    NS_LDAP_SEARCH_TIME= 30
    NS_LDAP_PROFILE= default
    NS_LDAP_CREDENTIAL_LEVEL= anonymous
    NS_LDAP_BIND_TIME= 10
    NS_LDAP_SERVICE_AUTH_METHOD= pam_ldap:simple
    Can u please guide me.
    Regards
    Vikas

    Hi,
    I have problem with connecting DS 5.2 server using SASL GSSAPI from OpenLDAP client.
    I have configured GSSAPI identity mappings on the DS and have KDC running on the same solaris machine.
    When I do ldapsearch from the openLDAP client, I am getting the following error :
    ldapsearch -h 10.7.30.16 -Y GSSAPI -U tester1
    SASL/GSSAPI authentication started
    ldap_sasl_interactive_bind_s: Local error (-2)
    additional info: SASL(-1): generic failure: GSSAPI Error: Miscellaneous failure (Ticket expired)
    Do I need to configure anything else on the client side (OpenLDAP client on the linux machine) ?? Can you please give me the steps to make this work ??
    Thanks,
    Radhakrishnan

  • After upgrading to mountain lion I cannot use my HD TV as a display through my thunder port and HDMI cable ???

    after upgrading to mountain lion I cannot use my HD TV as a display anymore using thunderport and HDMI , which worked before , does this mean I have to buy apple tv to mirror onto my HD TV

    can it be something related to wi-fi?  I have read other posts talking about loss of connection using wifi.  I'm connecting my G5 through an airport express which is expanding my wifi generated from my Apple Time Capsule. It is quite difficult for me to relocate the server close to the Time Capsule and vice versa but if it works, at least that would be something.  It was working with Lion about 3 months ago - showing up in Finder, etc.

  • WinRM cannot process the request. The following error occured while using Kerberos authentication: The network path was not found.

    I have two forests with a transitive on-way trust between them: PROD -> TEST (test trusts PROD). I had previously had kerberos authentication working with winrm from PROD to machines in TEST. I have verified the trust is healthy, I also verified users
    in TEST can use WINRM with kerberos just fine. Users from PROD cannot connect via kerberos to machines in TEST with winrm.
    I have verified the service has registered the appropriate SPNs. I ran dcdiag against all my PROD and TEST domain controllers and didn't find anything that would prevent kerberos from happening. I even tried disabling the firewall entirely on my TEST dcs
    but that didn't gain me anything.
    I've enabled kerberos logging but only see the expected errors such as it couldn't find a PROD SPN for the machine, which it shouldn't from what I understand, it should go to the TEST domain and find the SPN from there.
    I'm really out of next steps before I call PSS and hope someone here has run into this and could provide me some next steps.
    PowerShell Error:
    Connecting to remote server failed with the following error message : WinRM cannot process the request. The following error occured while using Kerberos authentication: The network path was not found.  
     Possible causes are:
      -The user name or password specified are invalid.
      -Kerberos is used when no authentication method and no user name are specified.
      -Kerberos accepts domain user names, but not local user names.
      -The Service Principal Name (SPN) for the remote computer name and port does not exist.
      -The client and remote computers are in different domains and there is no trust between the two domains.
     After checking for the above issues, try the following:
      -Check the Event Viewer for events related to authentication.
      -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport.
     Note that computers in the TrustedHosts list might not be authenticated.
       -For more information about WinRM configuration, run the following command: winrm help config. For more information, see the about_Remote_Troubleshooting Help topic.
        + CategoryInfo          : OpenError: (:) [], PSRemotingTransportException
        + FullyQualifiedErrorId : PSSessionStateBroken
    winrs Error:
    Winrs error:
    WinRM cannot process the request. The following error occured while using Kerberos authentication: The network path was not found.  
     Possible causes are:
      -The user name or password specified are invalid.
      -Kerberos is used when no authentication method and no user name are specified.
      -Kerberos accepts domain user names, but not local user names.
      -The Service Principal Name (SPN) for the remote computer name and port does not exist.
      -The client and remote computers are in different domains and there is no trust between the two domains.
     After checking for the above issues, try the following:
      -Check the Event Viewer for events related to authentication.
      -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport.
     Note that computers in the TrustedHosts list might not be authenticated.
       -For more information about WinRM configuration, run the following command: winrm help config.

    Hi Adam,
    I'm a little unclear about which SPNs you were looking for, in which case could you confirm you were checking that on the computer object belonging to the actual destination host it has the following SPNs registered?
    WSMAN/<NetBIOS name>
    WSMAN/<FQDN>
    If you were actually trying to use WinRM to connect to the remote forest's domain controllers, then what you said makes sense, but I was caught between assuming this was the case or you meant another member server in that remote forest.
    Also, from the client trying to connect to this remote server, are you able to telnet to port 5985? (If you've used something other than the default, try that port)
    If you can't, then you've got something else like a firewall (be that the Windows firewall on the destination or a hardware firewall somewhere in between) blocking you at the port level, or the listener on the remote box just isn't working as expected. I
    just replied to your other winrm post with steps for checking the latter, so I won't repeat myself here.
    If you can telnet to it and the SPNs exist, then you might be up against something called selective authentication which has to do with how the trust was defined. You can have a read of
    this to learn a bit more about selective trusts and whether or not it's affecting you.
    Cheers,
    Lain

  • HT2458 Has anyone else who uses AT&T as their carrier been told if you cannot access your voicemail through your iPhone that there is no way to check your voicemails? This is an issue since I had to send my phone in for repair. Thank you

    Has anyone else who uses AT&amp;T as their carrier been told if you cannot access your voicemail through your iPhone that there is no way to check your voicemails? This is an issue since I had to send my phone in for repair. Thank you

    You received incorrect information from AT&T.  You can indeed access your voicemail without your iPhone.
    Call AT&T at (800) 331-0500 (assuming you're in the U.S.).  This is a 24 hour a day, 7 day a week number.  Ask them how to access your voicemail.  Normally, you would just do this by dialing your number from another phone, typing "*" once your voicemail recording starts, and entering your password.  You don't know your password, so it's probably the last four digits of your phone number or perhaps the seven - or ten-digit phone number.  Let the AT&T person tell you.

  • Cannot use Mouse Scroll to Navigate Through Library Folders ?!?!?!

    Just like the title says, I cannot use my mouse scroll to navigate up and down the numerous folders I have in my library.  I can grab the page bar and move up and down (and while I'm hovering over the page bar, I can scroll up and down with the mouse wheel) - but only when I'm actually over the folders, the mouse wheel doesn't work!
    Very strange. It works fine when I'm in develop mode and I can scroll through all the presets and history.
    But when I'm in library mode, the mouse scroll doesn't move my folders up and down ?
    Anyone?

    IIRC, there is a known problem scrolling with the mouse wheel in the panels across certain "borders", i.e. into the folders section, into the collections section. You have to use the scroll bar to get across those "borders".
    See here:
    http://feedback.photoshop.com/photoshop_family/topics/lr_scrolling_over_folders_in_library _module_doesnt_work?from_gsfn=true
    Beat
    Message was edited by: b_gossweiler: added link

  • Hi - I cannot upload my emails through the mail icon.  The first time I tried it only loaded very old emails, I then tried the whole process again and it has not imported a single email.  I use hotmail, and have had no problems with my iPhone or iPad.

    Hi - I cannot upload my emails through the mail icon.  The first time I tried it only loaded very old emails, I then tried the whole process again and it has not imported a single email.  I use hotmail, and have had no problems with my iPhone or iPad.  So the only way I can check my emails on my mac is to go through the internet.  Can anyone help?

    Hello, do you mean Download?
    In Mail's Window Menu, choose Connection Doctor, any red dots for status, if so what is the message?
    Then click the Show Details button & Check again.

  • Outlook 2010 cannot use Secure Password Authentication

    I am the administrator of the server running Microsoft Windows 2003 Server POP3 service since 2008. It hosts my email account. Nobody but me manages the settings of the server and the client side. Until the moment I decided to install Microsoft Outlook
    2010 as a client there was Secure Password Authentication working between Outlook 2003 and Windows 2003 Server. After installing of Outlook 2010, when I try to sync, the SPA authentication doesn't work. Nothing is changed on the server side.
    Enabling the SPA authentication on the both sides results a communicaton problem between Microsoft Windows 2003 Server POP3 service and Microsoft Outlook 2010 client. When I disable SPA on both sides the connection works but password is sent
    as plain text. Actually I started a discussion on
    http://answers.microsoft.com/en-us/office/forum/office_2010-outlook/outlook-2010-cannot-use-secure-password/66dafd66-1b00-43b5-96fb-b8a26254fc77 but I didn't receive an answer with a solution.

    Snefels,
    This is actually a known issue that Outlook 2010 doesn't work well with Windows Server 2003 POP services.
    Here is the blog post for the issue:
    http://blogs.msdn.com/b/jjameson/archive/2010/04/26/outlook-2010-does-not-work-with-windows-server-2003-pop3-service.aspx
    If you read the comments below, you'll found that some readers' shared some workaround/solutions, which reportedly works for others. So you might want to have a look.
    Disable SPA on the Windows 2003 POP3 server and do the same in Outlook 2010 POP setup.. using the full email address, "[email protected]" instead of just doug (if using the Secure Password Authentication).
    Aravindhan Battepati

  • I have purchased Photoshop and it went through the download process.  I cannot use the software, however.  I keep getting a "Trial Expired" message & it will not launch from my desktop.

    I purchased Photoshop CC and downloaded it.  I keep getting a message that my trial has expired and cannot use the software.  Have I missed a step, or is something not working properly?

    Hi,
    Please refer to the help document below:
    Creative Cloud applications unexpectedly revert to trial mode | CS6, CCM
    Regards,
    Sheena

  • Cannot connect to VPN through NetworkManager anymore.

    I cannot connect to VPN through networkmanager anymore. Last time used it, it worked perfectly but I don't use it so often and last time was 2-3 months ago. So I don't know what went wrong, or which package upgrade broke it.
    I switched to systemd a month ago, it may or may not be related.
    I can still connect from the commandline using the vpn/vpn-disconnect tools.
    All that happens is an alert windows saying: "The VPN connection '......' failed because there were no valid VPN secrets." And here is the journal:
    NetworkManager[355]: <info> Starting VPN service 'vpnc'...
    NetworkManager[356]: <info> VPN service 'vpnc' started (org.freedesktop.NetworkManager.vpnc), PID 9214
    kernel: tun: Universal TUN/TAP device driver, 1.6
    kernel: tun: (C) 1999-2004 Max Krasnyansky <[email protected]>
    NetworkManager[356]: <info> VPN service 'vpnc' appeared; activating connections
    NetworkManager[356]: <error> [1349687970.426748] [nm-vpn-connection.c:1405] get_secrets_cb(): Failed to request VPN secrets #3: (6) No agents were available for this request.
    NetworkManager[356]: <info> Policy set 'MYSSIDOMITTED' (wifi0) as default for IPv4 routing and DNS.
    NetworkManager[356]: <error> [1349687973.943758] [nm-vpn-connection.c:1405] get_secrets_cb(): Failed to request VPN secrets #3: (6) No agents were available for this request.
    NetworkManager[356]: <info> Policy set 'MYSSIDOMITTED' (wifi0) as default for IPv4 routing and DNS.
    NetworkManager[356]: <info> VPN service 'vpnc' disappeared
    All neccessary vpn packages for networkmanager are installed.
    Google did not turn up any useful info other than a few year old threads saying "upgrade your networkmanager".

    Well, I managed to get the auth dialog to show up reliably by applying a couple patches from this Bugzilla: https://bugzilla.gnome.org/show_bug.cgi?id=679212
    Still getting breakage in that it's not properly authenticating:
    Attempting to connect to redacted:443
    Using client certificate '/CN=redacted'
    Client certificate expires soon at: Dec 5 02:57:05 2012 GMT
    SSL negotiation with somesite.somedomain.com
    Connected to HTTPS on somesite.somedomain.com
    GET https://somesite.somedomain.com/
    Got HTTP response: HTTP/1.0 302 Object Moved
    SSL negotiation with somesite.somedomain.com
    Connected to HTTPS on somesite.somedomain.com
    GET https://somesite.somedomain.com/+webvpn+/index.html
    GET https://somesite.somedomain.com/CACHE/sdesktop/install/binaries/sfinst
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Refreshing +CSCOE+/sdesktop/wait.html after 1 second...
    GET https://somesite.somedomain.com/+CSCOE+/sdesktop/wait.html
    Failed to read from SSL socket
    Error fetching HTTPS response
    This behavior is not what I'm getting from the command-line client, of course, so... still digging.

  • How to capture userinfo after a partner application is authenticated through SSOSDK?

    I have successfully installed and deployed the Partner application for Portal using SSOSDK. My question is, once the user is authenticated through SSOPartnerServlet.java and gets thrown back to the partner app(PAPP), how do we get the user info(i.e. username) from the PAPP?
    Is there an API?
    I have already asked this question from oracle tech and they told me to post it
    Thanks,
    Hamid

    Pass the name of a subrotine to handle your user commands to the fm parameter.
    I_CALLBACK_USER_COMMAND = 'USER_COMMAND'.
    Then code for the user command function,
    form user_command using r_ucomm type sy-ucomm.
    case r_ucomm.
    when '<FCODE of your button>'.
    Code your logic....
    endcase.
    endform.
    To add your button using your own pf-status, you should copy a standard gui status and modify it.
    To trigger this pf-status you should pass routine name to I_CALLBACK_PF_STATUS_SET.(I_CALLBACK_PF_STATUS_SET = 'SET_PF_STATUS..)
    form set_pf_status.
    set pf-status 'ZSTAT'.  "THis ZSTAT must be created by copying a STANDARD pf-status of say some std program like SAPLKKBL. and then modifying it.
    endform.

  • The front camera on my iPod touch 4th generation is frozen. I cannot use it. Updating software does not help. This started right after I bought it, new from BestBuy. What can I do?

    The front camera on my iPod touch 4th generation is frozen. I cannot use it. Updating software does not help. This started right after I bought it, new from BestBuy. What can I do? When i go to the camera, it is stuck on a black screen. the only way to use my camera is through other camera apps, but if I try to switch it to the front camera, it freezes again.

    If you still have the problem after retoring the iPOd to factory defaults/new iPod then The iPod is likely defective and replacement is required.  You can make an appoinment at the Genius Bar of an APple store or take it back to BestBuy if within warranty

  • Remote Desktop Connection - cannot proceed because authentication is not enabled

    Hello,
    I try to connect via RDP from a Windows Server 2008 R2 to another 2008 R2 Server.
    I always get the error message.
    The connection cannot proceed because authentication is not enabled and the remote computer requires than authentication be enabled to connect.
    On the target machine the Remote Settings are set to:
    Allow connections from computers running any version of Remote Desktop.
    Firewall is disabled on both servers.
    Therefor I do not understand why I get an error message, that authentication is required.
    The target box is a nearly fresh syspreped machine with all current Hotfixes installed.
    I already found a lot of people having that problem by using XP (old RDP client), but no one seems to have this problem when connecting from 2008 R2 to 2008 R2.
    Thank you very much in advance for every hint.
    BR
    Matthias

    Hi Matthias,
    First I would like to confirm if you have deployed RDS (Remote Desktop Services) and you got the error, if so, please check this option
    TS Configuration, >> RDP-Tcp Properties >> change the Security Layer to "Negotiate"
    Then Recycle the TS Gateway service.
    Refer to:
    Unable to connect to Server using the Remote Web Workplace (RWW) Small Business Server 2008
    If this issue has nothing to do with RDS, and I suppose you used the cmd "mstsc" to remote access. This issue may also occur because of the version of mstsc, please make sure it has been upgraded to the new version.
    In addition, Did you have another newer server available like Server 2012? So we can test and try to use Server 2012 to remote access Server 2008 R2, and check if the issue persists.
    If there is anything else regarding this issue, please feel free to post back.
    If you have any feedback on our support, please click here.
    Best Regards,
    Anna Wang
    TechNet Community Support

Maybe you are looking for

  • Mac Os 10.6.8 Crash and video freeze, Mac Pro

    Hi, I just installed Mac OS 10.6 on my old Mac Pro, early 2009 (8 gib of Ram installed). I still have my old Mac OS10.5.8 on another internal boothable disk. It went well the first day or so but now I'm experiencing some major video problems: picture

  • Anctivesync error 503 service unavailable

    Hello I have two exchange server 2013 with DAG. in coexistency with an exchange 2007. It is working since a month but yesterday evening all of my smartphone (iPhone and Samsung) are not syncronized. I very close time windows the devices can syncroniz

  • ALL QUEUE messages are in memory? = OutOfMemoryError

    I have very large queue about which contains messages about 1GB in size and above. Can I configure Sun Java System Message Queue to swap incomming messages to disk if system has already NO FREE MEMORY. I use "-Xmx600m -Xms400m" and when I still sendi

  • How to hide the report progress window

    hii all i am running a report using a run_product builtin from a form but i want to hide the report progress window how can i do that thanks

  • Potential virus, MBR, system recovery

    Dear ThinkPad experts, I might have a virus on my ThinkPad T60, and as the Windows XP on it is already messed up, I would like to recover the ThinkPad to original status using the built-in recovery functions. I now have two questions concerning that: