Command Sets not working on ACS 5.1

I'm running ACS 5-1-0-44-3.
I have everything running properly on ACS 5.1. I'd like to implement command sets for selected users and groups. Under Access Policies -> Device Admin-> Authorization I have Command Sets selected. The cisco provided is DenyAllCommands. I have this command set running on all groups and every groups is still able to issue any command they wish. I've also created a "show_only" command set that I've issued one group and they are still able to do conf t or any other command.
Am I missing something?
Do you need to reference the command set name under the shell profiles?
Its my understanding that all you have to do is reference it in "Authorization" in the rules under Device Admin.
I can understand a custom command set not working because of user error but DenyAllCommands should work.
Anyone have any ideas?
I have already re-patched the ACS
Stopped and started services.
And it seems like Command Sets is the only not referenced in the logs

I do it a lot
could you paste screnshot of your command set?
I've recently met another issue,
with my command set definition as below (as you can see its very simple):
almost every show is blocked (as suspected) but not "show run" (which is strange for me)

Similar Messages

Cannot get restricted command set to work with ACS 5.5 and HP Procurve switches - Can anyone assist?

I have AAA authentication working with no restrictions and I have TACACS working with command restrictions for my Cisco gear.

Hi... I have created a shell profile in Policy Elements -> Authorization and Permissions -> Device Administration -> Shell Profiles which has a assigned privilege level of 15 and a max privilege level of 15. Further to this I have added a new commands set via Policy Elements -> Authorization and Permissions -> Device Administration -> commands sets.
I have referenced the shell profile via Access Policies -> Access Services -> Default Device Admin -> Authorization. And this part of it seems to work fine, but the command set I am using to restrict the commands allowed is not being used...do I need to reference the command set somewhere else within the ACS platform as well? The configuration I have added on to the Network Device is as follows: -
aaa new-model
aaa authentication login default group tacacs+
aaa authentication enable default group tacacs+
aaa authorization config-commands
aaa authorization exec default group tacacs+ local
aaa authorization commands 15 default group tacacs+ none
Can you advise what it is I am missing?

1. TACAS+ Accounting and Logged in Users report is not working on ACS 4.1(1

Hi,
I am facing problem with ACS 4.1 accounting, TACAS+ Accounting and Logged in Users report are not working, the csv file is been generated but nothing is showened in the file.
I have checked the documents related to ACS 4.1, it says that there is a bug related to command accounting âCSCsg97429 - TACACS+ Command Accounting does not work in ACS 4.1(1) Build 23â.
Tried upgrading the same with the patch applAcs-4.1.1.23.3.zip, still it is not working.
Other reports are working fine.
1. TACAS+ Accounting - not working
2. Logged in Users - not working
3. TACAS+ Administration - working
4. Passed Authentication - working
5. Failed Attempts - working
Any suggestions or any idea, please revert.
Regards
Vineet

Hi,
Thanks
Yes I have configured the command âaaa accounting exec default start-stop group tacacs+â
As I have mentioned all the other reports are working. Which user and when he has logged in and what commands he has used. Only the TACAS+ Accounting and logned user is not working.
Regards,
Vineet

6120 classic:My voice commands do not work

Please help.
Don’t know if I'm just being stupid or there is something not right with my 6120c.
My voice commands do not work.
If I press the button for a voice command, it says that there are no voice tags saved.
If I go into the voice command application (Which should create the voice tags on opening), I cant playback the voice tags, its give a 'voice system error' error message.
Is there something that is not set up properly? In the voice command settings, the synthesizer is 'on'?
Also, I don’t have voice tags on my contacts??
I read somewhere that this is a firmware problem and the phone should be taken back to nokia. Is this the case?
Somebody please help.

I formated my nokia n6120 using the code *#7370#. It deletes !everything! (settings, aplications...), but I have no voice sytem error now.

Shift+command+b not working for bold

I just updated to cs6 and my "bold" key command is not working. (shift+command+b on mac) I am using a font that has BOLD. I can select bold from the character palette and it works fine but the key command will not work. I checked my key command list and is there by default. It should work. It worked fine on cs5 for me. I even tried holding the fn key but no dice. Any ideas? I have to bold many many items so I can not possibly use the character palette....thanks.

"Nope" the first word of my response, was to your question. It means No. Meaning "No I did not copy a custom set". I am using default set.
I wonder if some other app has taken that kb shortcut. Nothing happens when I press it though....and I wouldnt know how to find out.
edit - problem solved. Even though the font says that it has a bold face I guess that it does not. Bold still works fine for other fonts. Sorry for your time.
Message was edited by: Emperor1212 - Problem solved.

Sqlplus -prelim command is not working.

Hi ,
sqlplus -prelim command is not working for me. It is giving me the below error.
oracle@xyz: /app/oracle/product/10.2.0/bin $*sqlplus -prelim*
SQL*Plus: Release 10.2.0.3.0 - Production on Fri Aug 7 10:31:54 2009
Copyright (c) 1982, 2006, Oracle. All Rights Reserved.
Enter user-name: oracle
Enter password:
ERROR:
ORA-24300: bad value for mode.
I am solaris 5.10 and database is 10g.
Thanks
Naveen.

what -prelim command?
sqlplus -help
SQL*Plus: Release 10.2.0.4.0 - Production
Copyright (c) 1982, 2007, Oracle. All Rights Reserved.
Usage 1: sqlplus -H | -V
    -H             Displays the SQL*Plus version and the
             usage help.
    -V             Displays the SQL*Plus version.
Usage 2: sqlplus [ [<option>] [<logon>] [<start>] ]
<option> is: [-C <version>] [-L] [-M "<options>"] [-R <level>] [-S]
    -C <version>   Sets the compatibility of affected commands to the
             version specified by <version>. The version has
             the form "x.y[.z]".     For example, -C 10.2.0
    -L             Attempts to log on just once, instead of
             reprompting on error.
    -M "<options>" Sets automatic HTML markup of output. The options
             have the form:
             HTML [ON|OFF] [HEAD text] [BODY text] [TABLE text]
             [ENTMAP {ON|OFF}] [SPOOL {ON|OFF}] [PRE[FORMAT] {ON|OFF}]
    -R <level>        Sets restricted mode to disable SQL*Plus commands
             that interact with the file system.     The level can
             be 1, 2 or 3. The most restrictive is -R 3 which
             disables all user commands interacting with the
             file system.
    -S             Sets silent mode which suppresses the display of
             the SQL*Plus banner, prompts, and echoing of
             commands.
<logon> is: (<username>[/<password>][@<connect_identifier>] | /)
           [AS SYSDBA | AS SYSOPER] | /NOLOG
    Specifies the database account username, password and connect
    identifier for the database connection. Without a connect
    identifier, SQL*Plus connects to the default database.
    The AS SYSDBA and AS SYSOPER options are database administration
    privileges.
    The /NOLOG option starts SQL*Plus without connecting to a
    database.
<start> is: @<URL>|<filename>[.<ext>] [<parameter> ...]
    Runs the specified SQL*Plus script from a web server (URL) or the
    local file system (filename.ext) with specified parameters that
    will be assigned to substitution variables in the script.
When SQL*Plus starts, and after CONNECT commands, the site profile
(e.g. $ORACLE_HOME/sqlplus/admin/glogin.sql) and the user profile
(e.g. login.sql in the working directory) are run. The files may
contain SQL*Plus commands.
Refer to the SQL*Plus User's Guide and Reference for more information.

Purchase Order Goods Receipt quantity tolerance setting not working.

Team,
We are using the IS-Oil solution, ECC 6.0 REL 605 SP LEVEL 009 .
The issue that I have is as follows:
Purchase Order Goods Receipt quantity tolerance setting not working, I had set up a 10% tolerance on QTY received in the GR process via the PIR and also the Purchase Value Key in the material master and also changed the message to a warning in OMCQ for message number M0722.
I had performed a similar configuration and master data maintenance on a different NON IS-OIL client install and it worked fine.
I believe it is the IS-OIL component in the Inventory update portion of the GR process that is causing the error.
I have searched for OSS notes, however they mention that there is no solution.
Setting the PO line item as Unlimited will not be best practice for the business and will not be used.
Has anyone come across this issue? and how was it resolved, your help and guidance will be greatly appreciated.
Thanks

Hello,
Please check the Tolerance levels in O588
Also you can use the BAdI OIB_QCI_ROUND_QTY: A new method, CHECK_TOLERANCE
Best Regards,
R.Brahmankar

Host command is not working on linux

Hi
I m using linux for application server n windows for client. I need to create folder from client machine by cliking a button of forms10g runtime.HOST command is not working which was working fine in windows.
Any help is appriciateable.
kazi mokarem

Hi
I had the same issue on linux a few weeks back. What tuned out was, when you install the Oracle app svr it does not include the system paths by default.
The path where mkdir is located may not be visible to the app.
Try to hardcode the path for mkdir as /bin/mkdir .... and seee if that works.
If the above statement works then add that path in the paths variable in default.env file located in $ORACLE_HOME/forms/server directory
HTH
Arvind

External command is not working in File Receiver Adapter

Hi,
   I have tried to copy the file which is mentioned in my File Adapter (Receiver) to 3 different folders thru OS command. The purpose is to save time. I have created one CC for Source(File) and one CC for target(File). After the target file is created, I want to copy this file in 3 folders. For this I have written one batch file in my system.
File Name: copy1.bat
@ECHO OFF
COPY %1 C:\TEST1\arch_t1
COPY %1 C:\TEST2\arch_t2
COPY %1 C:\TEST3\arch_t3
DEL %1
The command which I entered in the Receiver CC (File Adatper is)
Run Operating System Command After Message Processing
Command Line: C:\FILES\copy1.bat %F %f
Timeout(secs): 60
Terminate Program After Timeout - Check box is selected.
But, this external command is not working. (because the target files are not created in those directories C:\TEST1, C:\TEST2, C:\TEST3)
   I did this scenario by refering the Michael'w weblog:
/people/michal.krawczyk2/blog/2007/02/08/xipi-command-line-sample-functions
   In this blog, he has also given how to troubleshoot external command. I tried this also. It is not working.
    I use Windows XP OS. XI 3.0 SP 18.
   Friends, Could you kindly tell why this external command is not working? What could be the problem?
Thanks in advance.
Kind Regards,
Jeg P.

Hi, Jeg.
As the note says, please check the java Runtime.exec behavior
with the proper user.
If in doubt, check if the command can be successfully run through
the Java Runtime.exec(...) API. Also note that the command is run
as user "<sid>adm" (Unix) / "SAPService<SID>" (Windows).
So, Could you check the following(very dirty one!) Java in your
XI server and check if it works? For simulating %F, create a test
file C:\FILES\test.txt whatever the content is.
import java.util.*;
import java.io.*;
public class ExecJava {
public static void main(String args[]) {
    try {
      Runtime rt = Runtime.getRuntime();
      Process proc = rt.exec("C:/FILES/copy1.bat C:
FILES
test.txt");
    } catch (Exception e) {
      e.printStackTrace();
Good Luck.
Sejoon

Why export audio to movie command not visible and detect cuts command is not working in 64bit mode?

Does anyone know why export to audio disappear from menu in 64bit mode?
Why detect cuts command is not working well in 64 bit mode?
I tested on several machines (brand-new iMac, brand-new MacPro with 10.8 OS, MacPro with 10.6.8),and everythig wotks in 32 bit mode. As I switch to 64 bit mode detect cuts only put one marker at the begening of film.
I also noticed that Firewire output option in 64bit mode is not avaible.
Is there a certain film format that I have to use to make it work? I tried DV PAL, but I had ther same result.
Thanks a lot.

Hi
Those functions are not available when Logic is running in 64bit mode
http://support.apple.com/kb/TS3171
CCT

Java command still not working - please help

i have installed jdk1.6.0_05. The javac command works fine but the java command does not work at all. even when i try java HelloWorld i receive this exception message
Exception in thread "main" java.lang.NoClassDefFoundError: HelloWorld
Caused by: java.lang.ClassNotFoundException: HelloWorld
at java.net.URLClassLoader$1.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at sun.misc.Launcher$AppClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClass(Unknown Source)
at java.lang.ClassLoader.loadClassInternal(Unknown Source)
please help (you to SUN)!!

bart@kerberos:~$ javac -help
Usage: javac <options> <source files>
where possible options include:
-g                         Generate all debugging info
-g:none                    Generate no debugging info
-g:{lines,vars,source}     Generate only some debugging info
-nowarn                    Generate no warnings
-verbose                   Output messages about what the compiler is doing
-deprecation               Output source locations where deprecated APIs are used
-classpath <path>          Specify where to find user class files and annotation processors
-cp <path>                 Specify where to find user class files and annotation processors
-sourcepath <path>         Specify where to find input source files
-bootclasspath <path>      Override location of bootstrap class files
-extdirs <dirs>            Override location of installed extensions
-endorseddirs <dirs>       Override location of endorsed standards path
-proc:{none,only}          Control whether annotation processing and/or compilation is done.
-processor <class1>[,<class2>,<class3>...]Names of the annotation processors to run; bypasses default discovery process
-processorpath <path>      Specify where to find annotation processors
-d <directory>             Specify where to place generated class files
-s <directory>             Specify where to place generated source files
-implicit:{none,class}     Specify whether or not to generate class files for implicitly referenced files
-encoding <encoding>       Specify character encoding used by source files
-source <release>          Provide source compatibility with specified release
-target <release>          Generate class files for specific VM version
-version                   Version information
-help                      Print a synopsis of standard options
-Akey[=value]              Options to pass to annotation processors
-X                         Print a synopsis of nonstandard options
-J<flag>                   Pass <flag> directly to the runtime systemSee the bold part.
More information: [http://java.sun.com/docs/books/tutorial/java/package/managingfiles.html]

Command S not working in Dreamweaver CS6

Command S not working in Dreamweaver CS6

Every time I've run into an issue like this, clearing the cache file has repaired it...
http://forums.adobe.com/thread/494811
As long as it's not a system wide issue that is.

Some commands are not working nor in illustrator nor photoshop, any advice better than Adobe?

Illustrator is not fuctioning at 100%, some commands do not work ( eg - command open, nor place etc ) and same with photoshop....
Any advice

pcmyhre,
You may try the list, possibly starting with item 7) in 5), which is a list of the usual suspects, which may disturb and confuse Illy so she fails to do even simple things.
The following is a general list of things you may try when the issue is not in a specific file, and when it is not caused by issues with opening a file from external media, see below. You may have tried/done some of them already; 1) and 2) are the easy ones for temporary strangenesses, and 3) and 4) are specifically aimed at possibly corrupt preferences); 5) is a list in itself, and 6) is the last resort.
If possible/applicable, you should save current artwork first, of course.
1) Close down Illy and open again;
2) Restart the computer (you may do that up to at least 5 times);
3) Close down Illy and press Ctrl+Alt+Shift/Cmd+Option+Shift during startup (easy but irreversible);
4) Move the folder (follow the link with that name) with Illy closed (more tedious but also more thorough and reversible);
5) Look through and try out the relevant among the Other options (follow the link with that name, Item 7) is a list of usual suspects among other applications that may disturb and confuse Illy, Item 15) applies to CC, CS6, and maybe CS5);
Even more seriously, you may:
6) Uninstall, run the Cleaner Tool (if you have CS3/CS4/CS5/CS6/CC), and reinstall.
http://www.adobe.com/support/contact/cscleanertool.html
External media: It is always recommended here to open/save from/to own hard disk, and to copy from/to networks and removable media. You may be lucky (for a while), but the chances of file corruption and other unpleasantnesses are immensely greater when you use anything but the harddisk, and it is better to be safe than sorry.
In addition to the (far greater) risk of file corruption, some issues are mentioned here:
http://helpx.adobe.com/illustrator/kb/illustrator-support-networks-removable-media.html

Ctrl-T command do not work in website with flash

Ctrl-T command do not work in website with flash
== URL of affected sites ==
http://

If the Flash object has focus then key presses are processed by that plugin.
In such cases you need to click outside that plugin (e.g. the menu bar if you can't click on the website) to make the keyboard work.

Shudown command is not working in Solaris 10

I have two Sun Fire V890 server with Solaris 10 Operating System. In both the servers shutdown command is not working. if i am giving shutdown -y -g0 command means server is not responding, at the same time its proceeding init commands.. if i am giving init5 means, server is getting powered off. please give a solution. Thanks in Advance,

Note: This thread was originally posted in the [Servers - General Discussion|http://forums.sun.com/forum.jspa?forumID=830] forum, but moved to this forum for closer topic alignment.

Command Sets not working on ACS 5.1

Similar Messages

Maybe you are looking for