NAC 4.7.1 CAS CAM Login issues

Hello,
I upgraded from 4.5.1 to 4.7.1. I am having trouble with the communication between the CAS and the CAM
Here is an outline of the issue
1.       After Authentication, DHCP, ACS ok, WALL !!!
2.       Nac Online Users = 0
3.       Ping the CAM HA service ip
          Client = NO
          CAS = Yes
4.       Things are broken at the moment where the Agent/Web Broswer has to communicate with the Nac Manager… it just times out.
5.       Attached are pics of where it hits the 1. wall and the 2. error that pops up.
Notes
Cam Service IP Web UI > Cas Service IP is connected
Certs from the Cam imported into TCA on Cas and vice versa @ ver 4.5.1 then upgraded
DNS working
Login & remediation was working with ver 4.5.1
Any help would be greatly appreciated
Thank you Kindly

Desperately I decided to check everything et voila FIREWALL. With 4.7.1 the CAS needs access to the DNS server. I’m not sure exactly why. It was a fast one liner in the firewall among all the logging but it was the CAS being denied access to the DNS? Added the rule BANG all is good.
The problem was the login works (inconsistently) for a few moments right after I upgraded or changing the cert… this really was misleading. Just got hung up on the cert being the problem.
If anyone can tell me why the CAS need to talk to the DNS server i'd appreciate it
Cheers

Similar Messages

NAC 4.7 CAS web login page url generation

We have had third part certs generated for the CAS and the CAM and these have installed OK, along with the relevant root and intermediate certificates, and the CAS/CAM are communicating fine.
However when a user is redirected to the authentication page, the url generated is using the CN from the certificate..
https://al-nac.sitename.local.companyname.co.uk/auth/perfigo.......etc.
However the machine cannot resolve the url.
We cannot add dns entries for this url, we only administer the sitename.local domain.
Is there a way for the CAS to request the user to access a URL via an IP address?
If I requested a new certificate, but use the IP address instead of the machine name, would the auhentiation page be referenced by this?
Regards
Tony

I'll give our certificate issuer a call this morning,however I'm sure they mentioned in the past they need a resolvable name to generate the certificate?
As when we asked for certificates for al-nam.sitename.local they have been unable to generate them, hence the CN=al-nac.sitename.local.company.co.uk
Is this the same for generating certificates against IP addresses?
Regards
Tony

Groupwise Login Issue

We are having a login issue to our Groupwise system. Regardless of client or webaccess no one can successfully login. I have shutdown services, restarted servers, etc. The message we are all getting is "Please login again. You may have typed your name or password incorrectly. Remember that passwords are case sensitive."
In doing some research I came across this TID Error: LDAP SSL key file not found [D078] User:user1 (user1) It talks about the Trusted Root Certificate possibly having a bad path. So, I tried to follow the resolution. However, I am not sure which of the items located at /opt/novell/groupwise/agents/lib/nldap/ is the Trusted Root Certificate. So, I copied libldapssl.so.0.0.0 and libldapssl.so to the /opt/novell/groupwise/agents/bin and issued rcgrpwise stop/start
Do you think this is the correct TID for this issue? If so, is one of the these files the actual one I need to copy instead of the two I mentioned earlier? The other items listed in the nldap folder are: libldapsdk.so, libldapsdk.so.0.0.0, libldapx.so, and libldapx.so.0.0.0
Our current setup version is Groupwise 8.0.2-92377 on a SLES 10 server.

* dmantz
see my reply in the other forum. Please don't ask the same question in multiple forums. Thanks!
Uwe
Novell Knowledge Partner (NKP)
Please don't send me support related e-mail unless I ask you to do so.

Worksapce login issue

Hi
I have installed Hyperion, and i think all is ok. All services are running.
My Hyperion is installed in:
Windows 2003 SP2
Oracle 11g
But when I run EPM System diagnostic I get a problem with login in the Workspace service/login.
This is the message that I get:
FAILED SSO Availability of login http://norhyperion:45000/workspace/browse/configInfo
Error: Could not login to workspace
Recommended Action: Check if all services run. Check user name and password
If I try to login to workspace in the page http://norhyperion:45000/workspace/browse/configInfo, I cannot login with the user(admin/password).
I try to login in the shared services page with this user, and all is working.
Any ideas what went wrong in my installation?
Thank You
NomrHyperion

Hi Norm,
This what I did when I had this issue.
First check if process manager and Workspace Agents are running. If you cant start process manager, or workspace agents, try to check the Listener and Oracle DB(if you are using Oracle) services if are running, if not started. If you still cant run the services, or have login issue, then you must reconfigure the Workspace and
Run EPM System Configurator
First reconfigure:
Hyperion Foundation
- Common Settings
- Configure Database
- Deploy Application Server
When this reconfiguration finish, run EPM System Configurator again, and reconfigure the rest of Workspace and Management Architect.
In my case I reconfigure:
Calculation Manager
Performance Management Architect
Workspace
After this I restart the server.
Then back to the first check again... check if Process Manager and Workspace Agents are running. If not:
Check the Listener and Oracle DB(if you are using Oracle) services if are running, if not started
Then try to start the Process Manager service(you can also try to start the Workspace agents in the menu. Windows -> Start Menu -> Oracle EPM System -> Workspace - > Start Workspace Agent Services
Try all this, then start the EPM System Diagnostic again and check if all services are ok(some times Essbase Studio is not started, start it on the menu -> Essbase Studio - Start server).
This is what I did to fix my problem, and fix all the problems Now all services and EPM are running.
Hope this can help you
JailBreak
IT Network Manager
If helpful Please award points
Thank You

DRM login issue

Hi Experts,
I installed Hyperion DRM 11.1.2.1 in Windows 2008 server.
Created the DRM Schema and the objects using the generated scripts.
I have entered the repository admin ID(DRM_DB in my case) and password and saved the configuration.
Test connection is successful.
I can start and stop the application.
I can also open the URL: http://localhost/drm-web-client/Logon.aspx.
But when I am entering the admin ID and password, it is saying DRM-61025:unable to create user session. Reason: Login failed. Invalid username or password.
Please help if you have faced this problem. Let me know if you need more information.
Thanks,
NS

Hi,
DRM user login issue
Please go through the above URL and the solution, hope it will solve the issue.
Thanks

RE: Case 59063: performance issues w/ C TLIB and Forte3M

Hi James,
Could you give me a call, I am at my desk.
I had meetings all day and couldn't respond to your calls earlier.
-----Original Message-----
From: James Min [mailto:jminbrio.forte.com]
Sent: Thursday, March 30, 2000 2:50 PM
To: Sharma, Sandeep; Pyatetskiy, Alexander
Cc: sophiaforte.com; kenlforte.com; Tenerelli, Mike
Subject: Re: Case 59063: performance issues w/ C TLIB and Forte 3M
Hello,
I just want to reiterate that we are very committed to working on
this issue, and that our goal is to find out the root of the problem. But
first I'd like to narrow down the avenues by process of elimination.
Open Cursor is something that is commonly used in today's RDBMS. I
know that you must test your query in ISQL using some kind of execute
immediate, but Sybase should be able to handle an open cursor. I was
wondering if your Sybase expert commented on the fact that the server is
not responding to commonly used command like 'open cursor'. According to
our developer, we are merely following the API from Sybase, and open cursor
is not something that particularly slows down a query for several minutes
(except maybe the very first time). The logs show that Forte is waiting for
a status from the DB server. Actually, using prepared statements and open
cursor ends up being more efficient in the long run.
Some questions:
1) Have you tried to do a prepared statement with open cursor in your ISQL
session? If so, did it have the same slowness?
2) How big is the table you are querying? How many rows are there? How many
are returned?
3) When there is a hang in Forte, is there disk-spinning or CPU usage in
the database server side? On the Forte side? Absolutely no activity at all?
We actually have a Sybase set-up here, and if you wish, we could test out
your database and Forte PEX here. Since your queries seems to be running
off of only one table, this might be the best option, as we could look at
everything here, in house. To do this:
a) BCP out the data into a flat file. (character format to make it portable)
b) we need a script to create the table and indexes.
c) the Forte PEX file of the app to test this out.
d) the SQL staement that you issue in ISQL for comparison.
If the situation warrants, we can give a concrete example of
possible errors/bugs to a developer. Dial-in is still an option, but to be
able to look at the TOOL code, database setup, etc. without the limitations
of dial-up may be faster and more efficient. Please let me know if you can
provide this, as well as the answers to the above questions, or if you have
any questions.
Regards,
At 08:05 AM 3/30/00 -0500, Sharma, Sandeep wrote:
James, Ken:
FYI, see attached response from our Sybase expert, Dani Sasmita. She has
already tried what you suggested and results are enclosed.
++
Sandeep
-----Original Message-----
From: SASMITA, DANIAR
Sent: Wednesday, March 29, 2000 6:43 PM
To: Pyatetskiy, Alexander
Cc: Sharma, Sandeep; Tenerelli, Mike
Subject: Re: FW: Case 59063: Select using LIKE has performance
issues
w/ CTLIB and Forte 3M
We did that trick already.
When it is hanging, I can see what is doing.
It is doing OPEN CURSOR. But not clear the exact statement of the cursor
it is trying to open.
When we run the query directly to Sybase, not using Forte, it is clearly
not opening any cursor.
And running it directly to Sybase many times, the response is always
consistently fast.
It is just when the query runs from Forte to Sybase, it opens a cursor.
But again, in the Forte code, Alex is not using any cursor.
In trying to capture the query,we even tried to audit any statementcoming
to Sybase. Same thing, just open cursor. No cursor declaration anywhere.==============================================
James Min
Technical Support Engineer - Forte Tools
Sun Microsystems, Inc.
1800 Harrison St., 17th Fl.
Oakland, CA 94612
james.minsun.com
510.869.2056
==============================================
Support Hotline: 510-451-5400
CUSTOMERS open a NEW CASE with Technical Support:
http://www.forte.com/support/case_entry.html
CUSTOMERS view your cases and enter follow-up transactions:
http://www.forte.com/support/view_calls.html

Earthlink wrote:
Contrary to my understanding, the <font face="courier">with_pipeline</font> procedure runs 6 time slower than the legacy <font face="courier">no_pipeline</font> procedure. Am I missing something? Well, we're missing a lot here.
Like:
- a database version
- how did you test
- what data do you have, how is it distributed, indexed
and so on.
If you want to find out what's going on then use a TRACE with wait events.
All nessecary steps are explained in these threads:
HOW TO: Post a SQL statement tuning request - template posting
http://oracle-randolf.blogspot.com/2009/02/basic-sql-statement-performance.html
Another nice one is RUNSTATS:
http://asktom.oracle.com/pls/asktom/ASKTOM.download_file?p_file=6551378329289980701

Multi Cam Flicker Issue - Premiere Pro CC 2014

Multi Cam Flicker Issue - Premiere Pro CC 2014 can any one help me pls

Hi,
This might help :
Go to File > Project Settings > General and change the Video Renderer to Mercury Playback Engine software only. Click OK and select Delete Previews.
Thanks,
Rameez

Login issue in OIM11g due to oim credsmap error

We have OIM 11gR2PS1 installed on unix box. We have AD connector 11.1.1.5.0 installed on it .Also,peoplesoft recon connector PSFT_ER-11.1.1.5.0 is installed
In our scenario,we have webservice code in which using recon event we are creating users in OIM environment
This is hosted on same OIM server unix box.Inside webservice code we have refred oimclient.jar file to work with OIM APIs and Recon Service class.
When i tested webservice for first time it was unable to load OIM API classes as it was unable to find oimclient.jar in classpath.
So to resolve this issue i kept oimclient.jar in location- "WL_HOME/server/lib/" and also added following entry in setDomainEnv.sh to load oimclient.jar explicitly in classpath
CLASSPATH="WL_HOME/server/lib/oimclient.jar:${CLASSPATH}"
export CLASSPATH
and made entry in system-jazn-data.xml present in DOMAIN_HOME//config/fmwconfig/ as :
<grant>
            <grantee>
                <codesource>
                    <url>file:${domain.home}/servers/oim_server1/stage/*</url>
                </codesource>
            </grantee>
            <permissions>
   <permission>
               <class>oracle.security.jps.service.credstore.CredentialAccessPermission</class>
                     <name>context=SYSTEM,mapName=oim,keyName=*</name>
                     <actions>read,write</actions>
    </permission>
            </permissions>
        </grant>
After this change, webservice was working as expected and OIM related things were working fine.
But,when we tried to run schedule task "Active Directory Group Lookup Recon" for AD, we are getting error message as :
java.lang.LinkageError: loader constraint violation: loader (instance of com/thortech/xl/dataobj/tcADPClassLoader) previously initiated loading for a different type with name "com/thortech/xl/dataaccess/tcDataProvider"
So,to resolve this AD schedule task issue,we rolled back changes made for webservice in setDomainEnv.sh and system-jazn-data.xml file
and removed explicit classpath entry line of oimclient.jar from setDomainEnv.sh
But after restrating all admin and managed servers,we are currently facing issue in logging into OIM idenity/syadmin or design console with xelsyadm credentials
we have never made any changes of password for xelsyadm account or not made any change in any authenticatorproviders in weblogic console
we tried everything form reverting all changes to original setup without webservice or peoplesoft listener implementation
removed all explicit classpath entries or grant entry for oim credsmap from system-jazn-data.xml.
But still same issue persists
Any helpful suggestion is appreciated on this ASAP.
issue logs are:
TaskFlow Registration: TaskFlowDeployerThread.registerTaskFlowWithTask - Error while setting task display, this can happen with app loading issue, trying to load for 2
<Nov 11, 2013 11:24:20 PM EST> <Warning> <oracle.soa.services.workflow.worklist> <BEA-000000> <<.> Error while setting task display, this can happen with app loading issue, trying to load for 2>
<Nov 11, 2013 11:24:24 PM EST> <Error> <XELLERATE.ACCOUNTMANAGEMENT> <BEA-000000> <Class/Method: tcDefaultDBEncryptionImpl/initKeyStore encounter some problems: access denied ("oracle.security.jps.service.credstore.CredentialAccessPermission" "context=SYSTEM,mapName=oim,keyName=.xldatabasekey" "read")
java.security.AccessControlException: access denied ("oracle.security.jps.service.credstore.CredentialAccessPermission" "context=SYSTEM,mapName=oim,keyName=.xldatabasekey" "read")
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:372)
at java.security.AccessController.checkPermission(AccessController.java:559)
at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:458)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:518)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:544)
at oracle.security.jps.internal.credstore.util.CsfUtil.checkPermission(CsfUtil.java:643)
at oracle.security.jps.internal.credstore.ldap.LdapCredentialStore.containsCredential(LdapCredentialStore.java:214)
at oracle.iam.platform.utils.config.OIMPrivilegedExceptionAction.run(CSFCredentialProvider.java:236)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.iam.platform.utils.config.CSFCredentialProvider.getPassword(CSFCredentialProvider.java:79)
at oracle.iam.platform.utils.config.standalone.StandAloneCryptoConfig.getPassword(StandAloneCryptoConfig.java:76)
at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.initKeyStore(tcDefaultDBEncryptionImpl.java:67)
at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.getCipher(tcDefaultDBEncryptionImpl.java:96)
at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.encrypt(tcDefaultDBEncryptionImpl.java:193)
at com.thortech.xl.crypto.tcCryptoUtil.encrypt(tcCryptoUtil.java:118)
at com.thortech.xl.crypto.tcCryptoUtil.encrypt(tcCryptoUtil.java:275)
at oracle.iam.platform.auth.impl.Authenticator.encrypt(Authenticator.java:188)
at oracle.iam.platform.auth.impl.Authenticator.authenticateWithPassword(Authenticator.java:161)
at oracle.iam.platform.auth.impl.Authenticator.authenticate(Authenticator.java:134)
at oracle.iam.platform.auth.providers.wls.OIMAuthLoginModule.login(OIMAuthLoginModule.java:46)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor951.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:784)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:203)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:698)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:696)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:695)
at javax.security.auth.login.LoginContext.login(LoginContext.java:594)
at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
at sun.reflect.GeneratedMethodAccessor961.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at com.sun.proxy.$Proxy16.login(Unknown Source)
at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(WLSJAASLoginServiceImpl.java:89)
at com.bea.common.security.internal.service.JAASAuthenticationServiceImpl.authenticate(JAASAuthenticationServiceImpl.java:82)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at com.sun.proxy.$Proxy34.authenticate(Unknown Source)
at weblogic.security.service.WLSJAASAuthenticationServiceWrapper.authenticate(WLSJAASAuthenticationServiceWrapper.java:40)
at weblogic.security.service.PrincipalAuthenticator.authenticate(PrincipalAuthenticator.java:338)
at weblogic.servlet.security.internal.SecurityModule.checkAuthenticate(SecurityModule.java:252)
at weblogic.servlet.security.ServletAuthentication.login(ServletAuthentication.java:466)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at oracle.idm.common.login.SignInBean.handleWeblogicAuthn(SignInBean.java:131)
at oracle.idm.common.login.SignInBean.doLogin(SignInBean.java:97)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.sun.el.parser.AstValue.invoke(AstValue.java:187)
at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:297)
at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:53)
at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1256)
at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:183)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
>
<Nov 11, 2013 11:24:24 PM EST> <Error> <OIM Authenticator> <BEA-000000> <Error encrypting password>
java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at oracle.idm.common.login.SignInBean.handleWeblogicAuthn(SignInBean.java:131)
at oracle.idm.common.login.SignInBean.doLogin(SignInBean.java:97)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.sun.el.parser.AstValue.invoke(AstValue.java:187)
at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:297)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Caused by: javax.security.auth.login.FailedLoginException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied
at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.login(LDAPAtnLoginModuleImpl.java:261)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor951.invoke(Unknown Source)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at com.sun.proxy.$Proxy34.authenticate(Unknown Source)
at weblogic.security.service.WLSJAASAuthenticationServiceWrapper.authenticate(WLSJAASAuthenticationServiceWrapper.java:40)
at weblogic.security.service.PrincipalAuthenticator.authenticate(PrincipalAuthenticator.java:338)
at weblogic.servlet.security.internal.SecurityModule.checkAuthenticate(SecurityModule.java:252)
at weblogic.servlet.security.ServletAuthentication.login(ServletAuthentication.java:466)
... 72 more

Hi All,
I have tried out option of adding authwl.conf in java argument as mentioned. But,still same issue persists. I think it will be same whether we refer authwl.conf file from OIM_ORACLE_HOME/server/config or OIM_ORACLE_HOME/designconsole/config/ location.
We havent made any changes in USR table for xelsysadm user
Even system-jazn-data.xml is intact.
Actually,when i removed following classpath entry from setDomainEnv.sh file
CLASSPATH="WL_HOME/server/lib/oimclient.jar:${CLASSPATH}"
export CLASSPATH
Its working fine and i am not facing any login issue in OIM console.Also the Active Directory connector scheduled task are running fine without giving earlier error whic is becaus of explicit classpath addition in setDomainEnv.sh.This error was
java.lang.LinkageError: loader constraint violation: loader (instance of com/thortech/xl/dataobj/tcADPClassLoader) previously initiated loading for a different type with name "com/thortech/xl/dataaccess/tcDataProvider" .
This error was arising since i have explicitly mentioned oimclient.jar again in classpath and as OIM server also will load it at OIM server startup time. So it was finding two instance of tcDataProvider and was not able to decide to refer to which one of them.
But, I have to refer oimclient.jar in my webservice code to work.If we dont add classpath entry explicitly for oimclient.jar then it will throw error..that it is unable to load OIMClient class.
Webservice is deployed in OIM serveer . Is there any other way by which i can refer oimclient class in webservice code without causing this classpath conflict issue. ?
Also.is it correctthat for first time when we load Classpath explicitly like i did in my scenario,then it will always try to refer same classpath for that jar always.
For ex: in my env i made changes in setDomainEnv.sh and modifed classpath enrty as :
CLASSPATH="${OIM_ORACLE_HOME}/server/client/oimclient.jar:${CLASSPATH}"
export CLASSPATH
but this time it will start throwin the exception as :
<Nov 11, 2013 11:24:24 PM EST> <Error> <XELLERATE.ACCOUNTMANAGEMENT> <BEA-000000> <Class/Method: tcDefaultDBEncryptionImpl/initKeyStore encounter some problems: access denied ("oracle.security.jps.service.credstore.CredentialAccessPermission" "context=SYSTEM,mapName=oim,keyName=.xldatabasekey" "read")
java.security.AccessControlException: access denied ("oracle.security.jps.service.credstore.CredentialAccessPermission" "context=SYSTEM,mapName=oim,keyName=.xldatabasekey" "read")
Do i need to reinstall OIM setup to resolve this issue or is there any other way to refer oimclient.jar in my webservice code deployed in OIM env ?
Please suggest.
Thanks,
RPB

Ovi Download and Login Issue

"Ovi Download and Login Issue" i have nokia 5530xm, I am unable to login through ovi app it says sign in failed check your username and password. And when i browse the web it logs in but when itry to download it take back to main page. Please light on this issue. Thanks for help.
If you like my post or think it was useful then please hit the star button. Thanks :-)

now whenever i plug in my ipod to sync i get an offer to download and install or just download a something for itunes that i am not quite sure what it is.
hmmm. can you post a screenshot of the box containing the offer?
there's instructions on how to do that in the following user tip:
hudgie: Taking screenshots to help with problems

APPLICATION LOGIN ISSUE

We installed Vision on WINDOWS. IT was working fine but not sure what has changed...recently we see login issues...
When we bounce the system it works fine i can login using SYSADMIN (but any report i submit errors out).
When i go to othe PC and login as different user it works fine and can submit the report they run BUT can NOT see the out/log.
After some time if anyone tries to connect (put the login id and password) it just hangs there forever....
just crazy.... not sure what to do...really appreciate any help on this.
Thanks...Raj

When we bounce the system it works fine i can login using SYSADMIN (but any report i submit errors out).
When i go to othe PC and login as different user it works fine and can submit the report they run BUT can NOT see the out/log.Check the status of the CM and the application listener, are they up and running?
After some time if anyone tries to connect (put the login id and password) it just hangs there foreverAny errors in the alert_<SID>.log file? Any errors in Apache log files?

AD users login issue.

Hi All,
We are getting login issue on our UAT server. AD users are not able to login into share point,it again prompting login box after entering correct username and password.
When we add that user to local admin group then it works.

May be you are try it on same sharepoint machine. If you try some other machine it will work fine. You need to create a registry key for that. This is a known issue with sharepoint
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
DWORD DisableLoopbackCheck
Value. 1
http://support.microsoft.com/kb/896861

Login Issues: Win7, Skype 6.14

Hi
I've had login issues since just after I accepted a windows update last night. (no idea if that's just a coincidence?)
I've read thru several other posts here, tried re-installing skype several times (also re-installed an older version), checked compatability mode and still no joy. oh, I rebooted a few times too.
I'm trying to login using my skype username and password (I don't have a ms account) but the screen is just stuck there, it says signing in and the whirly thing (techy term lol) is just whirling round and round.
I luuuurv my skype, absolutely essential for me as I work from home, so I hope someone can help. Pleeeease
thanks
Solved!
Go to Solution.

ah, surprise, still no joy.
downloaded trillian too but that won't let me create an acount and just supplies error messages with no explanation to enable me to correct whatever the (well hidden) error is.
just think, i could be working in a cubicle instead of this high stress work from home life!
if skype access is my biggest stress i'm pretty sure I'm still happy doing what i do lol
added bonus - i'm often on the phone 3-4 hours a day so with no skype it's got very quiet here lol
(can ya tell i'm bored though with no one on skype to talk to? lol)

Business Objects XIR2 Infoview login issue

Hello -
I have a typical issue with BO Infoview login screen where the system name is showing incorrectly. The value should be coming from the configuration from web.xml file but it shows a totally different name with no option to update it. I checked the windows registry and system valiarbles but I haven't found anywhere on the system. Any ideas where this value is coming from ? Thanks.

Thanks Denis. I see that the login issue has been resolved, but I noticed a different error when I login and logout from CMC. Here's the error message... not sure if this is connected to the previous one.
D:\Program Files\Business Objects\Tomcat\work\Catalina\localhost\jsfadmin\org\apache\jsp\adminPages\Common\PreLogoff_jsp.java:78: as of release 1.5, 'enum' is a keyword, and may not be used as an identifier
(try -source 1.4 or lower to use 'enum' as an identifier)
while (enum.hasMoreElements()) {
^
An error occurred at line: 17 in the jsp file: /adminPages/Common/PreLogoff.jsp
Generated servlet error:

User Id Case Insensitive Login

Hi All,
I am using jdev version 11.1.1.6.0.
My use case is I want to do use ID case insensitive login.
In weblogic Console Security Realms>myrealm >Providers , we used Providers to do authentication in sequence as below.
1)DefaultAuthenticator-WebLogic Authentication Provider
2)DefaultIdentityAsserter-WebLogic Identity Assertion provider
3)AlfaAesarADAuthenticator-Provider that performs LDAP authentication
4)AlfaAesarDBAuthenticator-Provider that performs DBMS authentication
Is there any configuration option in weblogic console to do user ID Case Insensitive login.
Please help me out in this regard.

Hi, Vivek
In Portal Go to System Administration->System Configuration->UM Configuration->Direct Editing
find out following
ume.logon.security_policy.userid_lowercase=0
and change to
ume.logon.security_policy.userid_lowercase=1
save and restart the server.
regards,
kaushal

Project Server Cumulative Update August 2013 install failed due to login issue/interruption

Hi all,
I was in the process of running the installer (exe) for the August 2013 Cumulative update "uber" hotfix for SharePoint 2013 and Project Server today (KB2817615) on three servers. I was connected to the servers via Remote Desktop, logged in as the
Farm account.
On one of the servers, somewhere during the installation, my Remote Desktop session got "hijacked" by another user who was not aware of the ongoing process..so he was logged in as the Farm account for a few minutes.
I logged back in and found that the install dialog was gone...apparently the install stopped due to the interruption in logins. So I attempted to re-run the hotfix installer, but it now says "There are no products affected by this package installed
on this system."
I've tried clearing the timer cache and running the installer using "PACKAGE.BYPASS.DETECTION.CHECK=1" but neither has worked.
Any ideas on how this can be fixed or re-run?
Thank you for your assistance!
Regards,
Kevin Worthington

Hi Kevin,
Were you able to resolve this issue. I didn't have any interruptions or login issue, the installation cancelled itself!
Any help will be highly appreciated.
Thanks
SJ

NAC 4.7.1 CAS CAM Login issues

Similar Messages

Maybe you are looking for