Users authentication type problem

Dears,
I'm working on ISE 1.1 version, am facing the following problem:
When the user turn on the PC , he can access to the network via Dot1x , but when the PC go to the sleeping mode , the Dot1x timed out , and the authentication type become mab , so that the user access as guest , and he need to restart the dot1x service manually to get the access again .
Below is a port switch configuration:
interface FastEthernet0/X
switchport access vlan 22
switchport mode access
switchport voice vlan 110
authentication port-control auto
mab
dot1x pae authenticator
spanning-tree portfast
any idea? please advice.
Thank you in advance
Zahi

A suggestion since this is not something I can test
Should be able to distinguish the case of guest access from employee access since in the case of guest the endpoint will not exist in the database and create authoirzations accordingly
Can distinguish the case of whether endpoint was found using the following attribute in the authorization policy
Attribute: NetworkAccess.AuthentictionStatus
value: UnknownUser indicates that record was not found during the authentication

Similar Messages

Dreamweaver Server Bahavior, User Authentication, Logout User Problem

Hi! I want to add a 'logout user' functionality to the PHP
page using Server Behavior, User Authentication, Logout User option
in Dreamweaver CS3.
I highlight the text, Logout, then clicked on the above
mentioned option and I get an error message:
While executing onLoad in Log Out User.htm, the following
JavaScript error(s) occurred:
At line 603 of file "C:\Program Files\Adobe\Adobe Dreamweaver
CS3\Configuration\Shared\Controls\Script\TagMenu.js": The object is
not currently contained in a document.
In the Log Out User form, the "link clicked" is blank and
"when done" is not selectable.
Can anyone help me out? Thanks!

Hi! I'm not using Javascript. I'm using PHP to log in and log
out a user. The log in implementation works fine. It's the log out
that is giving me problems.
Below is the code:
<?php
if (!isset($_SESSION)) {
session_start();
$MM_authorizedUsers = "admin";
$MM_donotCheckaccess = "false";
// *** Restrict Access To Page: Grant or deny access to this
page
function isAuthorized($strUsers, $strGroups, $UserName,
$UserGroup) {
// For security, start by assuming the visitor is NOT
authorized.
$isValid = False;
// When a visitor has logged into this site, the Session
variable MM_Username set equal to their username.
// Therefore, we know that a user is NOT logged in if that
Session variable is blank.
if (!empty($UserName)) {
// Besides being logged in, you may restrict access to only
certain users based on an ID established when they login.
// Parse the strings into arrays.
$arrUsers = Explode(",", $strUsers);
$arrGroups = Explode(",", $strGroups);
if (in_array($UserName, $arrUsers)) {
$isValid = true;
// Or, you may restrict access to only certain users based
on their username.
if (in_array($UserGroup, $arrGroups)) {
$isValid = true;
if (($strUsers == "") && false) {
$isValid = true;
return $isValid;
$MM_restrictGoTo = "denied.html";
if (!((isset($_SESSION['MM_Username'])) &&
(isAuthorized("",$MM_authorizedUsers, $_SESSION['MM_Username'],
$_SESSION['MM_UserGroup'])))) {
$MM_qsChar = "?";
$MM_referrer = $_SERVER['PHP_SELF'];
if (strpos($MM_restrictGoTo, "?")) $MM_qsChar = "&";
if (isset($QUERY_STRING) && strlen($QUERY_STRING)
> 0)
$MM_referrer .= "?" . $QUERY_STRING;
$MM_restrictGoTo = $MM_restrictGoTo. $MM_qsChar .
"accesscheck=" . urlencode($MM_referrer);
header("Location: ". $MM_restrictGoTo);
exit;
?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0
Transitional//EN" "
http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="
http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8" />

<title>Admin</title>



<link href="../twoColFixLtHdr.css" rel="stylesheet"
type="text/css" />
<style type="text/css">

</style></head>
<body class="twoColFixLtHdr">
<div id="container">
<div id="header">
<h1 class="style1">Welcome to EMART</h1>
</div>

<div id="sidebar1">
<h3 class="style1">Emart</h3>
<ul type="square">
<li><a href="../index.php"
class="style1">Home</a> </li>
<li><a href="admin.php"
class="style1">Admin</a> </li>
<li><a href="add_product.php" class="style1">Add
Product</a> </li>
<li><a href="edit_product.php"
class="style1">Edit Product</a> </li>
<li><a href="delete_product.php"
class="style1">Delete Product</a> </li>
<li>Logout</li>
</ul>
<p> </p>

</div>

<div id="mainContent">
<h1>Admin</h1>
<p>
Logout</p>
<p> </p>
</div>

<br class="clearfloat" />
<div id="footer">
<p>© 2008
</p>
</div>
</div>
</body>
</html>

Problem with Afaria and LDAP user authentication in Android device

Hi all,
I have a server with Afaria 7 (SP4, hotfix3) installed. In this Afaria there is a tenant (system) without LDAP/AD integration working correctly. I need to have other tenant with LDAP integration in which the users must be authenticated.
I know that for iOS devices is necessary reinstall the iphoneserver selecting "Afaria Server managed authentication" but at first I want to make run the Android devices. For this reason I don't do this yet.
I follow the next steps:
1-Create a new tenant
2- Configure LDAP integration
3-Create a inventory policy with authentication required
4-Create a static group associated to the inventory policy
5-Create a enrolment policy associated to the static group.
When I launch the Afaria agent on the device, the user/password parameters are required. After fill the user/password parameters, the device connect to the server and then is show the message "user or password incorrects".
I have seen the log and seem the problem is that Afaria can't authenticate this user.
I validate that Afaria can "see" the LDAP users creating a user group that contains this user(JimenM99)
The problem is autentication, because if I remove "autentication required" of the inventory policy, the device enrol correctly.
Could you please help to solve this problem?
Thanks in advance.

Hi all,
I have a server with Afaria 7 (SP4, hotfix3) installed. In this Afaria there is a tenant (system) without LDAP/AD integration working correctly. I need to have other tenant with LDAP integration in which the users must be authenticated.
I know that for iOS devices is necessary reinstall the iphoneserver selecting "Afaria Server managed authentication" but at first I want to make run the Android devices. For this reason I don't do this yet.
I follow the next steps:
1-Create a new tenant
2- Configure LDAP integration
3-Create a inventory policy with authentication required
4-Create a static group associated to the inventory policy
5-Create a enrolment policy associated to the static group.
When I launch the Afaria agent on the device, the user/password parameters are required. After fill the user/password parameters, the device connect to the server and then is show the message "user or password incorrects".
I have seen the log and seem the problem is that Afaria can't authenticate this user.
I validate that Afaria can "see" the LDAP users creating a user group that contains this user(JimenM99)
The problem is autentication, because if I remove "autentication required" of the inventory policy, the device enrol correctly.
Could you please help to solve this problem?
Thanks in advance.

Problem in CMC login with SAP authentication type

Hi,
We have installed the SAP Integration kit successfully for BO XI R2 & when I logon to CMC i am able to enable the SAP authentication and import the roles from the SAP BW system as well. But when I try to login into CMC using the 'Authentication type' as SAP it doesn't display the textboxes for entering System ID and Client details. Can you please tell me how to fix this?
Also I see that the CMC & Infoview authentication type drop down list are not the same. The CMC has the authentication types available as 'SAP,LDAP & Enterprise' where as Infoview has 'Enterprise, LDAP & AD'.
Is this an issue with the Plugins? do i need to do some settings on the Tomcat ?
Please help me out in this..
Thanks in advance!
Phani.

Thanks for your update Jac...yes thats correct. Also I had to include authPlugExt.properties file in the tomcat/shared/classes, which i did not include previously. The SAP infoview is working fine now.
Just one more question, in CMC login doesn't the SAP authentication require sap system & client id as its inputs? (in XI R2). I noticed that I was able to login with SAP user id's (without mentioning system details) , that have been added when I have imported the SAP roles to BO.

User domain\SPFservice is not authorized to perform request using authentication type Negotiate

Hi,
I have installed WAP/SPF in the same domain via express installation. The SPF domain service account is sysadmin on the SPF database. The SPF domain service account is running as identity in IIS application pool. I have registered SPF in
WAP via SPFcomputeraccount\LocalSPFaccount. The LocalSPFaccount is member of the 4 local groups created by the SPF setup. The domain SPF service account is member of the VMM administrators.
When a new tenant want to subscribe to a hosting plan I get an error "One or more errors occurred while contacting the underlying resource providers. The operation may be partially completed. Details: Failed to create subscription".
When I look in the eventviewer of the SPF server in ManagementODataService, I can see "User domain\SPFservice is not authorized to perform request using authentication type Negotiate".
SPF/VMM are both on the latest update rollup. The VMM console is also updated on the SPF server.
I can successfully reproduce the troubleshooting steps from http://blogs.technet.com/b/privatecloud/archive/2013/11/08/troubleshooting-windows-azure-pack-spf-amp-vmm.aspx.

Hi,
During the install it is also asking you to specify groups during the installation (4 x) Is the user you specified als spf runas account also member of those group in the AD?
So you have 4 groups created on the local box by the installation. But also 4 specified during the installation. Check if the account is member of those group(s) as well, reboot the spf and you should be up and running.
Best regards, Mark Scholman. Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Oracle 11g AQ : problem enqueue user-defined type with varchar2 attribute

Hello.
I have a problem enqueuing a user-defined type to the queue on Oracle 10g.
I'm using jdbc driver (ojdbc5.jar, version 11.1.0.6.0) as they provide oracle.jdbc.aq package.
The type is following:
CREATE OR REPLACE TYPE FIXED_T5 AS OBJECT
(id integer,
label varchar2(100),
code integer,
today date
)I have created a java class for this type with jpub utility supplied with oracle 11g client package:
jpub -user=scott/tger -url=jdbc:oracle:thin:@host:sid-sql=FIXED_T5:ru.invito.FixedType -compile=falseIt generated FixedType.java and FixedTypeRef.java files. Don't understand why i need the latter (FixedTypeRef).
Then in test app:
package ru.invito;
import java.io.IOException;
import java.net.InetAddress;
import java.net.UnknownHostException;
import java.sql.SQLException;
import java.sql.Timestamp;
import java.util.Date;
import java.util.Properties;
import java.util.UUID;
import junit.framework.TestCase;
import oracle.jdbc.aq.AQAgent;
import oracle.jdbc.aq.AQEnqueueOptions;
import oracle.jdbc.aq.AQFactory;
import oracle.jdbc.aq.AQMessage;
import oracle.jdbc.aq.AQMessageProperties;
import oracle.jdbc.aq.AQEnqueueOptions.DeliveryMode;
import oracle.jdbc.aq.AQEnqueueOptions.VisibilityOption;
import oracle.jdbc.driver.OracleConnection;
import oracle.jdbc.driver.OracleDriver;
import oracle.sql.Datum;
import oracle.sql.STRUCT;
import oracle.sql.StructDescriptor;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
public class AqTest extends TestCase {
     protected Log logger = LogFactory.getLog(getClass());
     public void testEnqueue() throws Exception {
          OracleDriver dr = new OracleDriver();
          Properties prop = new Properties();
          prop.setProperty("user", Config.USERNAME);
          prop.setProperty("password", Config.PASSWORD);
          OracleConnection connection = (OracleConnection) dr.connect(Config.JDBC_URL, prop);
          assertNotNull(connection);
          connection.setAutoCommit(false);
          enqueueMessage(connection, "INVITO.FIXED_T5Q", null);
          connection.commit();
     private void enqueueMessage(OracleConnection conn, String queueName, AQAgent[] recipients) throws SQLException,
               IOException {
          logger.debug("----------- Enqueue start ------------");
          AQMessageProperties props = makeProps(queueName);
          AQMessage mesg = AQFactory.createAQMessage(props);
          String msqText = String.format("Hello, %s!", queueName);
          FixedType data = createData(36, msqText);
          Datum d = data.toDatum(conn);
          STRUCT s = (STRUCT) d;
          debugStruct("s", s);
          String toIdStr = byteBufferToHexString(s.getDescriptor().getOracleTypeADT().getTOID(), 20);
          logger.debug("s.toIdStr: " + toIdStr);
          StructDescriptor sd = StructDescriptor.createDescriptor("INVITO.FIXED_T5", conn);
          logger.debug("sd.toXMLString(): " + sd.toXMLString());
          mesg.setPayload(s);
          AQEnqueueOptions opt = makeEnqueueOptions();
          logger.debug("sending............");
          // execute the actual enqueue operation:
          conn.enqueue(queueName, opt, mesg);
          debugMessageId(mesg);
          logger.debug("----------- Enqueue done ------------");
     private void debugMessageId(AQMessage mesg) throws SQLException {
          byte[] mesgId = mesg.getMessageId();
          if (mesgId == null) {
               throw new IllegalStateException("message id is NULL");
          String mesgIdStr = byteBufferToHexString(mesgId, 20);
          logger.debug("Message ID from enqueue call: " + mesgIdStr);
      * @return
      * @throws SQLException
     private FixedType createData(int ID, String label) throws SQLException {
          FixedType data = new FixedType();
          data._struct.setNChar(1);// initializes the flag for 'label' field
          data.setId(ID);
          data.setLabel(label);
          data.setCode(1);
          Date today = new Date();
          data.setToday(new Timestamp(today.getTime()));
          return data;
      * @param string
      * @param s
      * @throws SQLException
     private void debugStruct(String string, STRUCT s) throws SQLException {
          logger.debug(s + ".debugString(): " + s.debugString());
          logger.debug(s + "s.dump(): " + s.dump());
      * @return
      * @throws SQLException
     private AQAgent makeAgent() throws SQLException {
          AQAgent ag = AQFactory.createAQAgent();
          ag.setName("AQ_TEST");
          String agentAddress = null;
          try {
               agentAddress = InetAddress.getLocalHost().getHostAddress();
          catch (UnknownHostException e) {
               logger.error("cannot resolve localhost ip address. will not set it as AQ Agent address");
               agentAddress = "NA";
          ag.setAddress(agentAddress);
          return ag;
     private AQMessageProperties makeProps(String queueName) throws SQLException {
          final String EXCEPTION_Q_TEMPLATE = "AQ$_%sT_E";
          final int DEFAULT_DELAY = 0;
          final int DEFAULT_EXPIRATION = -1;
          final int DEFAULT_PRIORITY = 0;
          AQMessageProperties propeties = AQFactory.createAQMessageProperties();
          propeties.setCorrelation(UUID.randomUUID().toString());
          propeties.setDelay(DEFAULT_DELAY);
          propeties.setExceptionQueue(String.format(EXCEPTION_Q_TEMPLATE, queueName));
          propeties.setExpiration(DEFAULT_EXPIRATION);
          propeties.setPriority(DEFAULT_PRIORITY);
          // propeties.setRecipientList(null);//should not set
          propeties.setSender(makeAgent());
          return propeties;
      * @return
      * @throws SQLException
     private AQEnqueueOptions makeEnqueueOptions() throws SQLException {
          AQEnqueueOptions opt = new AQEnqueueOptions();
          opt.setRetrieveMessageId(true);
          // these are the default settings (if none specified)
          opt.setDeliveryMode(DeliveryMode.PERSISTENT);
          opt.setTransformation(null);
          opt.setVisibility(VisibilityOption.ON_COMMIT);
          return opt;
      * Form the AQ reference
      * @param buffer
      * @param maxNbOfBytes
      * @return
     private static final String byteBufferToHexString(byte[] buffer, int maxNbOfBytes) {
          if (buffer == null)
               return null;
          int offset = 0;
          StringBuffer sb = new StringBuffer();
          while (offset < buffer.length && offset < maxNbOfBytes) {
               String hexrep = Integer.toHexString((int) buffer[offset] & 0xFF);
               if (hexrep.length() == 1)
                    hexrep = "0" + hexrep;
               sb.append(hexrep);
               offset++;
          String ret = sb.toString();
          return ret;
}The output is following:
[main] 2008-07-03 19:09:49,863 DEBUG [ru.invito.AqTest] - ----------- Enqueue start ------------
[main] 2008-07-03 19:09:50,348 DEBUG [ru.invito.AqTest] - [email protected](): name = INVITO.FIXED_T5 length = 4 attribute[0] = 36 attribute[1] = Hell
o, INVITO.FIXED_T5Q! attribute[2] = 1 attribute[3] = 2008-07-03 19:09:49.0
[main] 2008-07-03 19:09:50,363 DEBUG [ru.invito.AqTest] - [email protected](): name = INVITO.FIXED_T5
length = 4
ID = 36
LABEL = Hello, INVITO.FIXED_T5Q!
CODE = 1
TODAY = 2008-07-03 19:09:49.0
[main] 2008-07-03 19:09:50,363 DEBUG [ru.invito.AqTest] - s.toIdStr: 507ccce5b6e9f572e040007f01007203
[main] 2008-07-03 19:09:50,363 DEBUG [ru.invito.AqTest] - sd.toXMLString(): <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<StructDescriptor sqlName="INVITO.FIXED_T5" >
<OracleTypeADT sqlName="INVITO.FIXED_T5" typecode="0" tds_version="1"
           is_embedded="false" is_top_level="true" is_upt="false" finalType="true" subtype="false">
    <attributes>
      <attribute name="ID" type="INTEGER" >
        <OracleType typecode="2" />
      </attribute>
      <attribute name="LABEL" type="VARCHAR2" >
        <OracleType typecode="12" />
      </attribute>
      <attribute name="CODE" type="INTEGER" >
        <OracleType typecode="2" />
      </attribute>
      <attribute name="TODAY" type="DATE" >
        <OracleType typecode="0" />
      </attribute>
    </attributes>
</OracleTypeADT>
</StructDescriptor>
[main] 2008-07-03 19:09:50,379 DEBUG [ru.invito.AqTest] - sending............
[main] 2008-07-03 19:09:50,395 DEBUG [ru.invito.AqTest] - Message ID from enqueue call: 511ff143bd4fa536e040007f01003192
[main] 2008-07-03 19:09:50,395 DEBUG [ru.invito.AqTest] - ----------- Enqueue done ------------But when dequeueing the 'label' attribute is lost:
DECLARE
dequeue_options     DBMS_AQ.dequeue_options_t;
message_properties DBMS_AQ.message_properties_t;
message_handle      RAW(16);
message             fixed_t5;
BEGIN
dequeue_options.navigation := DBMS_AQ.FIRST_MESSAGE;
DBMS_AQ.DEQUEUE(
     queue_name          =>     'fixed_t5q',
     dequeue_options     =>     dequeue_options,
     message_properties =>     message_properties,
     payload             =>     message,
     msgid               =>     message_handle);
DBMS_OUTPUT.PUT_LINE('ID   : '||message.id);
DBMS_OUTPUT.PUT_LINE('Label: '||message.label);
DBMS_OUTPUT.PUT_LINE('Code : '||message.code);
DBMS_OUTPUT.PUT_LINE('Today: '||message.today);
COMMIT;
END;
ID   : 36
Label:
Code : 1
Today: 03.07.08
Could anyone tell me what is wrong with the setup/code?
Why 'label' not saved in queue, though i saw it is not empty in STRUCT?

Thank you for the reply!
I have enqueued:
[main] 2008-07-04 15:30:30,639 DEBUG [ru.invito.UserDefinedTypeAqTest$1] - [email protected](): name = INVITO.FIXED_T5
length = 4
ID = 41
LABEL = Hello, INVITO.FIXED_T5Q!
CODE = 1
TODAY = 2008-07-04 15:30:30.0and in table (select * from FIXED_T5QT) the 'label' is blank:
Q_NAME     FIXED_T5Q
MSGID     51310809B5EA3728E040007F01000C79
CORRID     b8f38fd3-4fa6-4e0f-85d1-2440d02d655e
PRIORITY     0
STATE     0
DELAY
EXPIRATION
TIME_MANAGER_INFO
LOCAL_ORDER_NO     0
CHAIN_NO     0
CSCN     0
DSCN     0
ENQ_TIME     04.07.2008 15:28:44
ENQ_UID     INVITO
ENQ_TID                       4012
DEQ_TIME
DEQ_UID
DEQ_TID
RETRY_COUNT     0
EXCEPTION_QSCHEMA     AQ$_INVITO
EXCEPTION_QUEUE     FIXED_T5QT_E
STEP_NO     0
RECIPIENT_KEY     0
DEQUEUE_MSGID
SENDER_NAME     AQ_TEST
SENDER_ADDRESS     10.1.1.137
SENDER_PROTOCOL
USER_DATA.ID     41
USER_DATA.LABEL
USER_DATA.CODE     1
USER_DATA.TODAY     04.07.2008 15:30:30I must point to a strange thing: when the FixedType instance is created (via new operator) and then the setLabel("....") called as:
FixedType data = new FixedType();
// hack: proper initialization for 'label' field
data._struct.setNChar(1);
data.setId(ID);
data.setLabel(label);
data.setCode(1);
Date today = new Date();
data.setToday(new Timestamp(today.getTime()));
Datum d = data.toDatum(connection);
STRUCT s = (STRUCT) d;
logger.debug(s + ".debugString(): " + s.debugString());
logger.debug(s + ".dump(): " + s.dump());and if i comment line (data._struct.setNChar(1);) the debug messages for created STRUCT also shows empty value for label.
But if i explicitly call data._struct.setNChar(1) then debug contains the label i defined in call to the setLabel method.

Sql Devloper 4.0.0.13 - problems with displaying user data types

Hi,
I have installed new version of sqldeveloper and have discovered some problems with displaying user data types. The data that is described as VARCHAR2 are displayed with ‘???’.
The problem persist in table view, script output and exported files.
My type is described as follows:
create or replace TYPE "DPTY_ADRESA" AS OBJECT
ID_DPSF_OPCINE                                         NUMBER,
ID_DPSF_MJESTA                                        NUMBER,
OPCINA                                            VARCHAR2(100),
MJESTO                                            VARCHAR2(100),
ULICA                                 VARCHAR2(200),
BROJ                                   VARCHAR2(20),
SPRAT                VARCHAR2(20),
OSTALO                             VARCHAR2(100),
CONSTRUCTOR FUNCTION dpty_adresa RETURN SELF AS RESULT
add MEMBER FUNCTION dajAdresu RETURN VARCHAR2 cascade;
when make select column from table that contains this type I get next results:
CASE 1:
SQLDeveloper Version 3.2.20.09; Build MAIN-09.87; JDK 1.6.0_43; Windows 7 64 bit
Select:
select id, adresalokacija
from dptr_saglasnosti
where id = 1;
Result:
        ID ADRESALOKACIJA
         1 COMP.DPTY_ADRESA(124,4913,'TRAIK','TURBE','BABANA','3452','0',NULL)
END CASE 1;
CASE 2:
SQLDeveloper Version 4.0.0.13; Build MAIN-13.80; JDK 1.7.0_40; Windows 7 64 bit
Select1:
select id, adresalokacija
from dptr_saglasnosti
where id = 1;
Result1:
ID ADRESALOKACIJA
         1 COMP.DPTY_ADRESA(124,4913,'???','???','???','???','???',NULL)
But if I select one element it is displayed normal.
Select2:
select id, a.adresalokacija.opcina
from dptr_saglasnosti a
where id = 1;
Result2:
ID ADRESALOKACIJA.OPCINA
         1 TRAVNIK
END CASE 2;
I have tried this scenario on three different pc with same output.
Pleas help me to get rid of the '???' in result.
Best Regards,
Omer

I tried on SQLDeveloper Version 4.0.0.13; Build MAIN-13.80; JDK 1.7.0_45; Windows 7 64 bit; NLS setting is default
all data can show,No ??? in result
Test step as following:
create or replace TYPE "DPTY_ADRESA" AS OBJECT
ID_DPSF_OPCINE                                         NUMBER,
ID_DPSF_MJESTA                                        NUMBER,
OPCINA                                            VARCHAR2(100),
MJESTO                                            VARCHAR2(100),
ULICA                                 VARCHAR2(200),
BROJ                                   VARCHAR2(20),
SPRAT                VARCHAR2(20),
OSTALO                             VARCHAR2(100),
CONSTRUCTOR FUNCTION dpty_adresa RETURN SELF AS RESULT
alter TYPE "DPTY_ADRESA" add MEMBER FUNCTION dajAdresu RETURN VARCHAR2 cascade;
CREATE TABLE dptr_saglasnosti (
adresalokacija        DPTY_ADRESA,
id    number);
INSERT INTO dptr_saglasnosti VALUES (
DPTY_ADRESA (65,225,'Vrinda Mills', '1-800-555-4412','sss','aaaa','eeeee','attta'),1 );
select id, adresalokacija from dptr_saglasnosti where id = 1;
ID ADRESALOKACIJA
1    HRCP.DPTY_ADRESA(65,225,'Vrinda Mills','1-800-555-4412','sss','aaaa','eeeee','attta')

Problems with 802.1x MS PEAP machine and user authentication

Using Microsoft PEAP 802.1x client on Windows XP SP2, if we enable machine authentication against a Windows Domain, the machine authentication is successful and the machine gets access to the network. However, when user logon occurs to the domain, contrary to the flow given in ACS and Windows documentation, no user authentication takes place.
We need to differentiate user access based on their identities. We need machine authentication only to allow users access to the domain controller and also GP implementation.
Any idea why user does not get prompted when they logon. 802.1x is configured in users profile and I have tried with both integrated and non-integrated with Domain logon (i.e. "use my windows logon name and password and domain (if any) option"
There is no record of any identity request/response in ACS after the initial machine authentication (which appears in successful authentication log)
We are using MS-CHAPv2.

Update...The problem of cached credentials in MS PEAP does not occur if "enable logon using Windows username and password (and domain if any) is checked. Using this option, MS PEAP always uses logged on users most current credentials.
However, using this option sends the username as "DOMAIN\USERNAME". Since we are using ACS internal database for user authentication (even though the ACS and Windows passwords are same - using an identity management system) ACS does not recognize the user.
I have tried proxy distribution with prefix stripping but it does not seem to work when it is pointing to the same ACS server on which proxy distribution is configured and which receives the request.
Any idea how the domain\ can be ignored by ACS?

CSM 3.1 local user authentication problem

Hi every one.i have strange problem with local user authentication.in our csm i have configured csm to auhenticate users using TACACS+ from our acs server which every thing is ok about this configurtion but also i have configured fall back authentication for user admin.here is the problem even when connection to ACS server is ok and server can send authentication requests to ACS we can authenticate with ACS and Local admin which i think this is wrong because using local admin is configured as fallback.so what do you think about this problem which CSM authenticates users with ACS and local database same time??

You probably need to go under the system context and create the interface and also allocate vlans to it in CSM before you configure the context itself.
I hope it helps.
PK

Problem calling stored procedure with user-defined type of input parameters

Hi,
I have to call a stored procedure with IN parameters, but these are user-defined types of input parameters.
function fv_createnews (
pit_groups in T_APPLICATION_USER_GROUPS,
pit_documents in T_DOCUMENTS
return varchar2;
TYPE T_APPLICATION_USER_GROUPS IS
TABLE OF varchar2(500)
INDEX BY binary_integer;
TYPE T_DOCUMENT IS record (
name varchar2(256)
,url varchar2(1024)
,lang varchar2(30)
,foldername varchar2(150)
TYPE T_DOCUMENTS IS
TABLE OF T_DOCUMENT
INDEX BY binary_integer;
How can I do this using the TopLink 10.1.3 API.
I already found following related posts, but I still can' t make it up:
Using VARRAYs as parameters to a Stored Procedure
Pass Object as In/Out Parameter in Stored Procedure
Or do I have to create my own PreparedStatement for this special stored procedure call using Java and Toplink?

As the related posts suggest, you will need to use direct JDBC code for this.
Also I'm not sure JDBC supports the RECORD type, so you may need to wrap your stored functions with ones that either flatten the record out, or take OBJECT types.

Setting Defualt Authentication type to Enterprise in Full Client - strange

Hi Folks,
I am having issue setting up default authentication type in full client.
My users here use Desktop Intelligence for their reporting. We have configured Windows AD authentication for them and they are logging to one of the server via Citrix where BO Client is installed. When users select Windows AD from the authentication type, for the first time it works well, because, they dont have to enter username or password, as they are logging thru Citrix to the server with their Windows AD account. Now here is what happens, when second time they go in the server, their default type is set to Windows AD as they login to DeskI using AD last time, but this time, the OK button is blurred and to my understanding it becomes active if you enter username or password, which in my situation, they have dont have to.
So they select Windows AD from the drop down button and then the OK button is enabled. This is not right as they are already in Windows AD mode. So I thought to make the defualt authentication mode to Enterprise, no matter whatever they login lastly. This way they will have to select Windows AD and the problem will go away. Or if someone knows how to resolve my situation, please advice. Otherwise, please help me how and where can I set the autheication type to Enterprise by defualt for full client. I have only client products installed on this particular server.
Thanks a lot,
Bhaumik
BOXIR2 SP2 full version, Citrix

The ok button thing was a bug fixed in SP3. Now beware SP3 and above SP's client version have another bug which breaks all clients using AD/LDAP fixed in FP3.3. The server version of the SP does not have that bug. If you fix the bug you will not have to set the enterprise type.
It's by design to remember that last login (that may be something you can stop but I never tried and don't know how to).
Regards,
Tim

Setup Java system directory server 6 client for user authentication

I am trying to set up a native LDAP client for sun directory server 6 for network based user authentication. I checked the sun doc for naming service (LDAP) and the documentation are for setting up LDAP client for directory server 5. Is there any documentation for setting up LDAP client for directory server 6? Or the documents for setting LDAP client for directory server 5 is still good for 6? Particularly, I want to use SSL communication between server and client.

Hi,
could be one of the other 'bad jokes' of DS/ldapclient because the documentation describes a lot of stuff about profiles etc. but: you need some special schema files to use the whole stuff and they are not installed with Solaris or DS (and they include the NisDomainObject). I had to search for them in the internet. They are also printed in the documentation. Save them in your server's config/schema directory as i.e. 61DUAConfigProfile.ldif and 62nisDomain.ldif and try idsconf again (maybe you have to cleanup something).
I test and prepare DS6 here, and we will use it in production too. I hadn't any problem with it and it has some important advantages over DS5.2. But we won't have a huge directory so I can't tell you anything more about it.
Regards
Jochem Ippers
Here are the ldifs:
61DUAConfigProfile.ldif:
dn: cn=schema
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.0 NAME 'defaultServerList' DESC 'Default LDAP server host address used by a DUA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.1 NAME 'defaultSearchBase' DESC 'Default LDAP base DN used by a DUA' EQUALITY distinguishedNameMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.12 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.2 NAME 'preferredServerList' DESC 'Preferred LDAP server host addresses to be used by a DUA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.3 NAME 'searchTimeLimit' DESC 'Maximum time in seconds a DUA should allow for a search to complete' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.4 NAME 'bindTimeLimit' DESC 'Maximum time in seconds a DUA should allow for the bind operation to complete' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.5 NAME 'followReferrals' DESC 'Tells DUA if it should follow referrals returned by a DSA search result' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.6 NAME 'authenticationMethod' DESC 'A keystring which identifies the type of authentication method used to contact the DSA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.7 NAME 'profileTTL' DESC 'Time to live, in seconds, before a client DUA should re-read this configuration profile' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.14 NAME 'serviceSearchDescriptor' DESC 'LDAP search descriptor list used by a DUA' EQUALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.9 NAME 'attributeMap' DESC 'Attribute mappings used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.10 NAME 'credentialLevel' DESC 'Identifies type of credentials a DUA should use when binding to the LDAP server' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.11 NAME 'objectclassMap' DESC 'Objectclass mappings used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.12 NAME 'defaultSearchScope' DESC 'Default search scope used by a DUA' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 SINGLE-VALUE X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.13 NAME 'serviceCredentialLevel' DESC 'Identifies type of credentials a DUA should use when binding to the LDAP server for a specific service' EQUALITY caseIgnoreIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 X-ORIGIN 'user defined' )
attributeTypes: ( 1.3.6.1.4.1.11.1.3.1.1.15 NAME 'serviceAuthenticationMethod' DESC 'Authentication method used by a service of the DUA' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'user defined' )
objectClasses: ( 1.3.6.1.4.1.11.1.3.1.2.4 NAME 'DUAConfigProfile' SUP top STRUCTURAL DESC 'Abstraction of a base configuration for a DUA' MUST ( cn ) MAY ( defaultServerList $ preferredServerList $ defaultSearchBase $ defaultSearchScope $ searchTimeLimit $ bindTimeLimit $ credentialLevel $ authenticationMethod $ followReferrals $ serviceSearchDescriptor $ serviceCredentialLevel $ serviceAuthenticationMethod $ objectclassMap $ attributeMap $ profileTTL ) X-ORIGIN 'user defined' )
62nisDomain.ldif:
dn: cn=schema
attributeTypes: ( 1.3.6.1.1.1.1.30 NAME 'nisDomain' DESC 'NIS domain' SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 X-ORIGIN 'user defined' )
objectClasses: ( 1.3.6.1.1.1.2.15 NAME 'nisDomainObject' SUP top STRUCTURAL MUST nisDomain X-ORIGIN 'user defined' )

Basic User Authentication

I'm a Dreamweaver beginner, and am trying to create a user account creation page. I've created the basic form and applied "User Authentication->Check New Username" (checking for username field in my database). The problem I'm having is that while I was able to successfully create one account, all subsequent account creation attempts are unsuccessful and take me back to my "If already exists..." page. This seems like a simple thing, and in fact, there're aren't too many options that I can try to get this working. Yet I'm still stumped.
Any ideas?

Sorry for not including this initially. Here's the full code module for my Sign Up page.
<?php require_once('Connections/iband_db.php'); ?>
<?php
if (!function_exists("GetSQLValueString")) {
function GetSQLValueString($theValue, $theType, $theDefinedValue = "", $theNotDefinedValue = "")
if (PHP_VERSION < 6) {
    $theValue = get_magic_quotes_gpc() ? stripslashes($theValue) : $theValue;
$theValue = function_exists("mysql_real_escape_string") ? mysql_real_escape_string($theValue) : mysql_escape_string($theValue);
switch ($theType) {
    case "text":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "long":
    case "int":
      $theValue = ($theValue != "") ? intval($theValue) : "NULL";
      break;
    case "double":
      $theValue = ($theValue != "") ? doubleval($theValue) : "NULL";
      break;
    case "date":
      $theValue = ($theValue != "") ? "'" . $theValue . "'" : "NULL";
      break;
    case "defined":
      $theValue = ($theValue != "") ? $theDefinedValue : $theNotDefinedValue;
      break;
return $theValue;
// *** Redirect if username exists
$MM_flag="MM_insert";
if (isset($_POST[$MM_flag])) {
$MM_dupKeyRedirect="taken.php";
$loginUsername = $_POST['username'];
$LoginRS__query = sprintf("SELECT id FROM user_profile WHERE id=%s", GetSQLValueString($loginUsername, "int"));
mysql_select_db($database_iband_db, $iband_db);
$LoginRS=mysql_query($LoginRS__query, $iband_db) or die(mysql_error());
$loginFoundUser = mysql_num_rows($LoginRS);
//if there is a row in the database, the username was found - can not add the requested username
if($loginFoundUser){
    $MM_qsChar = "?";
    //append the username to the redirect page
    if (substr_count($MM_dupKeyRedirect,"?") >=1) $MM_qsChar = "&";
    $MM_dupKeyRedirect = $MM_dupKeyRedirect . $MM_qsChar ."requsername=".$loginUsername;
    header ("Location: $MM_dupKeyRedirect");
    exit;
$editFormAction = $_SERVER['PHP_SELF'];
if (isset($_SERVER['QUERY_STRING'])) {
$editFormAction .= "?" . htmlentities($_SERVER['QUERY_STRING']);
if ((isset($_POST["MM_insert"])) && ($_POST["MM_insert"] == "form1")) {
$insertSQL = sprintf("INSERT INTO user_profile (id, first_name, last_name, username, password, email_address) VALUES (%s, %s, %s, %s, %s, %s)",
                       GetSQLValueString($_POST['username'], "int"),
                       GetSQLValueString($_POST['first_name'], "text"),
                       GetSQLValueString($_POST['last_name'], "text"),
                       GetSQLValueString($_POST['username'], "text"),
                       GetSQLValueString($_POST['password'], "text"),
                       GetSQLValueString($_POST['email_address'], "text"));
mysql_select_db($database_iband_db, $iband_db);
$Result1 = mysql_query($insertSQL, $iband_db) or die(mysql_error());
$insertGoTo = "index.php";
if (isset($_SERVER['QUERY_STRING'])) {
    $insertGoTo .= (strpos($insertGoTo, '?')) ? "&" : "?";
    $insertGoTo .= $_SERVER['QUERY_STRING'];
header(sprintf("Location: %s", $insertGoTo));
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Sign Up Page</title>
</head>
<body>
<h1>Sign Up!</h1>
<form id="form1" name="form1" method="POST" action="<?php echo $editFormAction; ?>">
<p>
    <label>First Name:
      <input type="text" name="first_name" id="first_name" />
    </label>
</p>
<p>
    <label>Last Name:
      <input type="text" name="last_name" id="last_name" />
    </label>
</p>
<p>
    <label>Username:
      <input type="text" name="username" id="username" />
    </label>
</p>
<p>
    <label>Password:
      <input type="password" name="password" id="password" />
    </label>
</p>
<p>
    <label>Email:
      <input type="text" name="email_address" id="email_address" />
    </label>
</p>
<p>
    <label>
      <input type="submit" name="button" id="button" value="Sign Up" />
    </label>
</p>
<input type="hidden" name="MM_insert" value="form1" />
</form>
<p> </p>
</body>
</html>

NWA - User ID & Pass problems

Hello,
I have tried to log on at SAP Netweaver Administrator but it is impossible.
I know that I am using the correct user id and pass because I have worked with NWA some days ago.
I can logon in Portal options 'System Information' and 'Web Services Navigator' with the same user but when I try to logon in 'SAP Netweaver Administrator' or 'User Management' it does not work. Also, I can to access to J2EE Engine Visual Administrator with the same user.
Additionaly, when I try to logon with that user and pass, the message 'User authentication failed' does not appear. That's indicates it is the correct user id and pass but it does not work.
I remember that, in the last changes, I deleted the entries in the TicketKeyStore (J2EE Engine Visual Administrator --> NWP --> Server --> Services --> Key Storage) Could it be the problem?
Please, anybody can help me?
I am looking forward to hearing from you as soon as possible.
Best regards,

Hello,
Finally, the problem is solved.
I have configured the certificates in the Ticket KeyStore, that's the quid!!. I used 'DiagTool' tool for review log files and solve the problem. It's very useful and interesting tool...
To create a correct Portal Certificate:
    1.1 Log in to the Visual Administrator
    1.2 Choose Server --> Services --> KeyStorage --> TicketKeystore
    1.3 Delete SAPLogonTicketKeypair-cert and SAPLogonTicketKeypair
    1.4 Choose Create (Create button in the Entry field) and type in the following information:
        a. mark Store Certificate
        b. Common Name: Your (just example)
        c. Entry Name: SAPLogonTicketKeypair
        d. Store Certificate: Mark it
        e. Key Length: 1024
        f. Algorithm: DSA
        g. Press Generate
Now you will have two entries in the TicketKeyStore:SAPLogonTicketKeypair and SAPLogonTicketKeypair-cert
If anybody have the same problem, I recomend to review the Ticket KeyStoore (Visual Administrator) and user 'Diagtool' tool.
Thank you all.
Regards,
Carmelo Pérez.

OAS v10.1.2.3 REP-51018: Need database user authentication

Hi all,
I have an Forms/Reports 10g application, and when I call a report, I always get the "REP-51018: Need database user authentication" when using IE8.   It works fine with version 19, 20 and 21 of Firefox.   As IE8 is the corporate browser, calling reports need to work within IE8.
First, some pertinent information:
Server:
- Windows Server 2003 Standard Edition with SP2
- OAS v10.1.2.0.2 upgraded to v10.1.2.3
           => Of note, reports did work with JInitiator on v10.1.2.0.2, but for several reasons, we need to move to v10.1.2.3 and use JPI.
- Server is a VM created by VMWare.
Client:
- Windows XP Pro v2002 with SP3 (moving to Windows 7 soon)
- IE8
- Firefox (for developers)
I have applied several ideas from several threads within this forums and documentation from other sites (Oracle being one of them), but to no avail. Here is a list of a couple of them that were pertinent to my problem:
need java been frmrwinteg.jar (especially the sections from Francois Degrelle and Steve Cosner)
10.1.2.3 problem with frmrwinteg.jar
Upgrade to patchset 3 10.1.2.3 from 10.1.2.0.2 causes Java errors (I have used this thread to fix the Java issues that I had initially)
https://support.oracle.com/epmos/faces/ui/km/SearchDocDisplay.jspx?returnToSrId=&_afrLoop=483184561714826&srnum=&type=DO… (Doc Id. 564522.1) (I have tried Option 2 only as the FrmReportsInteg.java is not provided.)
https://support.oracle.com/epmos/faces/ui/km/SearchDocDisplay.jspx?_afrLoop=483273286061582&_afrWindowMode=0&_adf.ctrl-s…
http://www.oracle.com/technetwork/developer-tools/forms/documentation/frmwebshowdoc-rep-10gr2-1-128932.pdf
It is getting very frustrating! I have performed this same upgrade, on different platforms, between 10 and 12 times with no issues what-so-ever! The strange part is that, for this upgrade (that I'm having difficulties with), I needed to sign the frmwebutil.jar and frmrwinteg.jar files; I never needed to do this for the other upgrades, except for the jacob.jar file, of course!
From the formsweb.cfg file, here is the configuration area that I'm using:
[VailWUStd]
width=950
height=650
IE=native
HTMLbeforeForm=<SCRIPT>window.onbeforeunload = unloadMess; function unloadMess() {mess = "Clicking 'ok' will terminate all Vailtech applications!"; return mess;}</SCRIPT>
baseHTMLJInitiator=webutiljpi.htm
baseHTMLjpi=webutiljpi.htm
baseHTML=webutilbase.htm
# Used for Sun JRE/JPI Dynamic CLSID
jpi_classid=clsid:CAFEEFAC-0016-0000-0041-ABCDEFFEDCBA
jpi_codebase=/forms/java/jre-6u41-windows-i586.exe
jpi_mimetype=application/x-java-applet;jpi-version=1.6.0_41
jpi_download_page=/forms/java/jre-6u41-windows-i586.exe
form=E:\tax\vailtechMenu.fmx
userid=
archive=frmall.jar,VailtechAppIcons.jar,frmrwinteg.jar
lookAndFeel=oracle
colorScheme=Titanium
imageBase=codebase
networkRetries=5
# Webutil:
WebUtilArchive=frmwebutil.jar,jacob.jar
WebUtilLogging=off
# WebUtilLogging=console
# WebUtilLoggingDetail=detailed
WebUtilLoggingDetail=normal
WebUtilErrorMode=Alert
WebUtilDispatchMonitorInterval=5
WebUtilTrustInternal=true
WebUtilMaxTransferSize=16384
And from the Java Console, here is the section related to the FRMREPORTSINTEG bean:
FrmReportsInteg1: Debugging true
FrmReportsInteg1: Adding new userid string "VAILTECH/*********@taxg2"                                                                -- I did hide the password here.
FrmReportsInteg1: Default cookie domain:
FrmReportsInteg1: set RW_AUTH10g
FrmReportsInteg1: Arguments: encryptionKey=reports9i; Reports version=RW10g
FrmReportsInteg1: Cookie value for RW10g is: VAILTECH/M0NKEYS@taxg2;1372248145539:30
FrmReportsInteg1: Encoded cookie value is: d1z0Y+lWJGiRKapq55Lu6X39JxTgt66lxhymsfggYosY5IfpZurc
FrmReportsInteg1: Complete cookie string is: userid=d1z0Y+lWJGiRKapq55Lu6X39JxTgt66lxhymsfggYosY5IfpZurc
FrmReportsInteg1: Added domain " " to cookie
FrmReportsInteg1: Generated Cookie String: userid=d1z0Y+lWJGiRKapq55Lu6X39JxTgt66lxhymsfggYosY5IfpZurc; domain= ; path=/
FrmReportsInteg1: IE Cookie Set
FrmReportsInteg1: Setting domain to city.a.ottawa.ca
FrmReportsInteg1: Domain provided is not empty and is evaluated right now
FrmReportsInteg1: First period found at 4
FrmReportsInteg1: Second period found at 6
FrmReportsInteg1: Cookie domain now is: city.a.ottawa.ca
As you can see, everything looks fine! (well, I think it is!!)   I'm just out of ideas!   I even re-installed OAS v10.1.2.0.2 and applied the v10.1.2.3 upgrade, TWICE, but again, to no avail!!
Any help would be greatly appreciated!
Thx!
Cheers,
Steph

Hi DB,
I am refering to the thread you had in Re: Help pages problem for Arabic on R12.1.1 could you tell if you fixed this error
Regards
Taher

Users authentication type problem

Similar Messages

Maybe you are looking for