Windows XP SP3 can't authenticate in 802.1x

Hi all,
I'm trying to get working a fresh install with 802.1x in it. I have a serious issue with Windows XP SP3 not authenticating at all... I can see (with a Wireshark) EAPoL Start messages going out from the host, but nothing happens after. The switch is pretending that it has a timeout on dot1x exchanges. We don't have any issue with Windows 7 at all !!!!
I'm giving you details about the setup :
Switches : Cisco switching architecture (IOS IP Services K9 12.2(55)SE)
Authentication Server : Cisco Secure ACS 4.2
Directories : Microsoft Active Directory and OpenLDAP for the directories
PKI : External (opensource)
Clients : Windows XP SP3 and a very few Windows 7
EAP Method for the moment : PEAP MSCHAPv2
Concerning switches, typical config is the following (only necessary things appear) :
swi-test-802.1x#sh run
Building configuration...
Current configuration : 6481 bytes
aaa new-model
aaa group server radius ACS
server X.X.X.X auth-port 1645 acct-port 1646
deadtime 60
aaa authentication login ACS_RADIUS group ACS local
aaa authentication dot1x default group ACS local
aaa authorization exec ACS_RADIUS group ACS local
aaa authorization network default group ACS
aaa accounting dot1x default start-stop group ACS
aaa accounting exec ACS_RADIUS start-stop group ACS
aaa accounting network ACS_RADIUS start-stop group ACS
aaa session-id common
ip device tracking
dot1x system-auth-control
interface FastEthernet0/X
description Typical FlexAuth port 802.1x
switchport mode access
switchport voice vlan 160
ip access-group Acl_Default_Acl in
authentication event fail action next-method
authentication event server dead action authorize vlan 99
authentication event no-response action authorize vlan 99
authentication host-mode multi-domain
authentication order mab dot1x
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication timer inactivity server
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
ip access-list extended Acl_Default_Acl
permit ip any any
radius-server host X.X.X.X auth-port 1645 acct-port 1646 key XXX
radius-server vsa send accounting
radius-server vsa send authentication
end
If I'm using Windows 7, no problem...
I've tried to modify different registry keys concerning authMode, SupplicantMode (twice applicable but only right until XP SP2), BlockTime for reauth, following everytime Microsoft recommandations and the different published kb...
I've tried with GPO for a global change or modifying XML template of the interface, but nothing changes...
I'm giving you the debugs (radius authentication and dot1x events) :
swi-test-802.1x#
swi-test-802.1x#
*Mar  1 01:19:25.727: dot1x-ev(Fa0/1): Interface state changed to UP
*Mar  1 01:19:25.735: dot1x-ev:DOT1X Supplicant not enabled on FastEthernet0/1
*Mar  1 01:19:26.230: dot1x-ev(Fa0/1): Interface state changed to DOWN
*Mar  1 01:19:26.230: dot1x-ev:dot1x_supp_port_down: No DOT1X subblock found on FastEthernet0/1
*Mar  1 01:19:28.327: dot1x-ev(Fa0/1): Interface state changed to UP
*Mar  1 01:19:28.336: dot1x-ev:DOT1X Supplicant not enabled on FastEthernet0/1
*Mar  1 01:19:28.697: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/1, changed state to up
*Mar  1 01:19:29.510: %AUTHMGR-5-START: Starting 'mab' for client (60eb.699a.0e0f) on Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:19:29.510: RADIUS/ENCODE(0000000B):Orig. component type = DOT1X
*Mar  1 01:19:29.510: RADIUS(0000000B): Config NAS IP: 0.0.0.0
*Mar  1 01:19:29.510: RADIUS/ENCODE(0000000B): acct_session_id: 11
*Mar  1 01:19:29.510: RADIUS(0000000B): sending
*Mar  1 01:19:29.510: RADIUS/ENCODE: Best Local IP-Address 10.248.2.21 for Radius-Server 10.248.64.20
*Mar  1 01:19:29.510: RADIUS(0000000B): Send Access-Request to 10.248.64.20:1645 id 1645/19, len 206
*Mar  1 01:19:29.510: RADIUS:  authenticator 3C AE B6 01 13 26 4E 77 - 94 33 B1 40 B7 A6 06 F8
*Mar  1 01:19:29.510: RADIUS:  User-Name           [1]   14  "60eb699a0e0f"
*Mar  1 01:19:29.510: RADIUS:  User-Password       [2]   18  *
*Mar  1 01:19:29.510: RADIUS:  Service-Type        [6]   6   Call Check                [10]
*Mar  1 01:19:29.510: RADIUS:  Framed-MTU          [12]  6   1500                     
*Mar  1 01:19:29.510: RADIUS:  Called-Station-Id   [30]  19  "00-1A-6D-FE-AA-83"
*Mar  1 01:19:29.510: RADIUS:  Calling-Station-Id  [31]  19  "60-EB-69-9A-0E-0F"
*Mar  1 01:19:29.510: RADIUS:  Message-Authenticato[80]  18 
*Mar  1 01:19:29.510: RADIUS:   2F C3 4E 65 14 AF D3 8E B9 E5 29 C3 28 13 C6 B8             [ /Ne)(]
*Mar  1 01:19:29.510: RADIUS:  EAP-Key-Name        [102] 2   *
*Mar  1 01:19:29.510: RADIUS:  Vendor, Cisco       [26]  49 
*Mar  1 01:19:29.510: RADIUS:   Cisco AVpair       [1]   43  "audit-session-id=0AF80215000000030048C250"
*Mar  1 01:19:29.510: RADIUS:  NAS-Port-Type       [61]  6   Ethernet                  [15]
*Mar  1 01:19:29.510: RADIUS:  NAS-Port            [5]   6   50001                    
*Mar  1 01:19:29.510: RADIUS:  NAS-Port-Id         [87]  17  "FastEthernet0/1"
*Mar  1 01:19:29.510: RADIUS:  NAS-IP-Address      [4]   6   10.248.2.21              
*Mar  1 01:19:29.519: RADIUS(0000000B): Started 5 sec timeout
*Mar  1 01:19:29.527: RADIUS: Received from id 1645/19 10.248.64.20:1645, Access-Reject, len 50
*Mar  1 01:19:29.527: RADIUS:  authenticator B0 3B E5 8F 22 D1 C1 66 - F6 8F 1A 7E 88 49 AA BB
*Mar  1 01:19:29.527: RADIUS:  Reply-Message       [18]  12 
*Mar  1 01:19:29.527: RADIUS:   52 65 6A 65 63 74 65 64 0A 0D          [ Rejected]
*Mar  1 01:19:29.527: RADIUS:  Message-Authenticato[80]  18 
*Mar  1 01:19:29.527: RADIUS:   91 5F 64 12 73 8E 76 0C 31 DD 2B B7 2E EC 6E BA          [ _dsv1+.n]
*Mar  1 01:19:29.527: RADIUS(0000000B): Received from id 1645/19
*Mar  1 01:19:29.527: RADIUS/DECODE: Reply-Message fragments, 10, total 10 bytes
*Mar  1 01:19:29.527: %MAB-5-FAIL: Authentication failed for client (60eb.699a.0e0f) on Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:19:29.527: %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'mab' for client (60eb.699a.0e0f) on Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:19:29.527: %AUTHMGR-7-FAILOVER: Failing over from 'mab' for client (60eb.699a.0e0f) on Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:19:29.527: dot1x-ev(Fa0/1): Couldn't find the supplicant in the list
*Mar  1 01:19:29.527: dot1x-ev(Fa0/1): Sending create new context event to EAP for 0x9E000002 (60eb.699a.0e0f)
*Mar  1 01:19:29.535: dot1x-ev(Fa0/1): Created a client entry (0x9E000002)
*Mar  1 01:19:29.535: dot1x-ev(Fa0/1): Dot1x authentication started for 0x9E000002 (60eb.699a.0e0f)
*Mar  1 01:19:29.535: %AUTHMGR-5-START: Starting 'dot1x' for client (60eb.699a.0e0f) on Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:19:29.535: dot1x-ev(Fa0/1): Sending EAPOL packet to 60eb.699a.0e0f
*Mar  1 01:19:29.535: dot1x-ev(Fa0/1): Role determination not required
*Mar  1 01:19:29.535: dot1x-ev(Fa0/1): Sending out EAPOL packet
*Mar  1 01:19:30.290: %LINK-3-UPDOWN: Interface FastEthernet0/1, changed state to up
*Mar  1 01:19:39.828: dot1x-ev(Fa0/1): Sending EAPOL packet to 60eb.699a.0e0f
*Mar  1 01:19:39.828: dot1x-ev(Fa0/1): Role determination not required
*Mar  1 01:19:39.828: dot1x-ev(Fa0/1): Sending out EAPOL packet
*Mar  1 01:19:50.113: dot1x-ev(Fa0/1): Sending EAPOL packet to 60eb.699a.0e0f
*Mar  1 01:19:50.113: dot1x-ev(Fa0/1): Role determination not required
*Mar  1 01:19:50.113: dot1x-ev(Fa0/1): Sending out EAPOL packet
*Mar  1 01:20:00.414: dot1x-ev(Fa0/1): Received an EAP Timeout
*Mar  1 01:20:00.414: %DOT1X-5-FAIL: Authentication failed for client (60eb.699a.0e0f) on Interface Fa0/1 AuditSessionID
*Mar  1 01:20:00.414: dot1x-ev(Fa0/1): Sending event (2) to Auth Mgr for 60eb.699a.0e0f
*Mar  1 01:20:00.414: %AUTHMGR-7-RESULT: Authentication result 'no-response' from 'dot1x' for client (60eb.699a.0e0f) on Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:20:00.414: dot1x-ev(Fa0/1): Received Authz fail for the client  0x9E000002 (60eb.699a.0e0f)
*Mar  1 01:20:00.414: dot1x-ev(Fa0/1): Deleting client 0x9E000002 (60eb.699a.0e0f)
*Mar  1 01:20:00.414: %AUTHMGR-7-FAILOVER: Failing over from 'dot1x' for client (60eb.699a.0e0f) on Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:20:00.414: %AUTHMGR-7-NOMOREMETHODS: Exhausted all authentication methods for client (60eb.699a.0e0f) on Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:20:00.414: %AUTHMGR-5-VLANASSIGN: VLAN 99 assigned to Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:20:00.422: dot1x-ev:Delete auth client (0x9E000002) message
*Mar  1 01:20:00.422: dot1x-ev:Auth client ctx destroyed
*Mar  1 01:20:00.422: dot1x-ev:Aborted posting message to authenticator state machine: Invalid client
*Mar  1 01:20:00.733: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (Unknown MAC) on Interface Fa0/1 AuditSessionID 0AF80215000000030048C250
*Mar  1 01:20:00.733: RADIUS/ENCODE(0000000B):Orig. component type = DOT1X
*Mar  1 01:20:00.733: RADIUS(0000000B): Config NAS IP: 0.0.0.0
*Mar  1 01:20:00.733: RADIUS/ENCODE: Best Local IP-Address 10.248.2.21 for Radius-Server 10.248.64.20
*Mar  1 01:20:00.733: RADIUS(0000000B): Started 5 sec timeout
*Mar  1 01:20:00.741: RADIUS: Received from id 1646/9 10.248.64.20:1646, Accounting-response, len 20
swi-test-802.1x#
swi-test-802.1x#
If anyone has an idea. Another thiong to mention, hosts have a Trend OfficeScan solution for Host protection, but the same on Windows 7 and everything is OK.
Thanks for your precious help.
Pierre-Louis

Hi Pierre-Louis,
A couple of questions here:
-We have a voice vlan defined for the port and multi-domain config.During your tests, do you have the PC connected behind an IP Phone?
-Which authentication method do you want to go for PC/IP phone?
-Whats the IP Phone model/vendor ?
In the logs , we have an Access-Reject for the client MAB auth attempt and then failover to dot1x auth.However, I dont see a Phone MAC in the logs.
On the switch debug, we see several EAPOL packets to client 60eb.699a.0e0f, which seems a Quanta computer based on the MAC vendor.
However no EAPOL packets seen from client side.You did indicate seeing an EAPOL Start from the host PC on a sniffer trace.
-Are you sniffing on the client adapter itself or the switchport to which client is connected?
-If we have an IP phone inbetween, do you also see the EAPOL start packet from the client when sniffing on the switchport ?
Windows XP ,SP3 has some changes as compared to earlier SP versions:
http://support.microsoft.com/kb/949984
The following output would help to further isolate on problem.You will need to ensure that we have timesync between sniffer traces and debug logs for correlation.
On switch, save logging output of:
debug radius
debug dot1x all
debug authentication all
debug authentication feature mab_pm all
debug authentication feature mda all
debug authentication feature voice all
Simultaneously you can capture sniffer trace by spanning switch port interface to  which Phone/PC is connected.Please don't use any filters during the sniffer capture.
After above steps please do a shut/no shut for tested port interface and replicate the problem with Win XP SP3.
Following the test, you can also obtain the output of "show auth sessions int
HTH,
Alex

Similar Messages

  • Pc with windows xl/sp3 can't connect / acquire ip address from airport extreme; meanwhile, my macbook in connecting fine.  We have a wpa2 personal password

    My husband's Dell with Windows xl (sp3) can't get an ip address from our new airport extreme.  Nor can my daughter's Windows 7 computer.  There are no firewalls in place.  Both computers worked with my old Airport, though it was sssslllllllowwww.  My Macbook works fine and is super fast compared to the old airport.  We are using a wpa2 personal password. 
    Anyone out there have a cure for this problem so we can hook up those sad pcs?
    Thanks a lot.
    Elizabeth

    First, make sure that the new Airport is configured exactly the same as the old one. Hopefully you saved the configuration settings in a file and can look at them to be sure.
    If the Windows PC's can't connect with the same password, it's possible that the PC's were using an older wifi protocol like 802.11a or b.  The new Airport is backwards compatible but has to be setup that way check to see what versions of 802.11a the windows computers support and make sure that the wireless mode of the airport is setup to accomodate them.
    Can the PC's get an IP address if they are connected to the AirPort using an ethernet cable? If they can, that would help naorrow things down to a wireless issue and not some other configuration problem.

  • Windows 7 beta can't authenticate to Tiger Server PDC

    Greetings,
    Currently our Windows XP Professional clients authenticate to Tiger Server running as a Windows Primary Domain Controller without issue. I'm testing Windows 7 beta (having skipped Vista) and when I try to join the client to the Windows domain I am told that my domain can't be found (this is after inputing my domain administrator credentials to Windows 7).
    Can anyone enlighted me as to why this might be failing?
    Cheers,
    Damon

    I've tried relaxing a bunch of security-related settings according to this:
    http://lists.samba.org/archive/samba-technical/2009-February/063187.html
    The various registry and policy changes are near the bottom of the message. Unfortunately, it still fails with the same message, though.
    It's probably a good idea to use the "Send feedback" app in Windows 7 beta to let them know.

  • Cisco wlc ios 7.2 with clients windows 8 can not authenticate with 802.1x

    Hello my name is Ivan:
    I have a solution a unified solution wireless with a cisco wlc 7.2 and ap cisco. My issue is the follow:
    My users are using laptops with OS windows 8, and they can not access to the network wireless because they authenticate in to the network using 802.1x wpa/wpa2 with tkip or aes.
    I find a bug in the ios of the wlc. The number is CSCua29504. I would not to change the drivers in the laptop to join the users in to the solution.
    Please is possible to find any software to do the upgrade in the wlc? Or perhaps we need to do an upgrade in to cisco lightweight access point?
    Please help me in this issue.
    Regards
    Ivan

    Bug ID CSCua29504 has been fixed in WLC firmware 7.0.235.3, 7.3.101.X or 7.4.100.X.
    So if you are NOT running any one of these codes, then yes.  Upgrade your firmware is your solution.
    Fixed in:  (12)
    7.4(100.0),7.4(1.20),7.3(112.0),7.3(101.0),7.3(1.67)
    7.2(111.3),7.2(111.1),7.2(110.4),7.0(236.0),7.0(235.3)

  • Bootcamp 2.1 with WIndows XP SP3 can't turn keyboard light off

    Hi I've installed bootcamp 2.1 on my macbook pro 13 (june 2009 model) and the operation went smoothly.
    After I install bootcamp drivers everything work like a dream eject button, screen brightness control apart from the keyboard light which I can't turn if off, the light set to the lowest and everything I boot into windows the light goes back to the maximum
    Anyone know how to control/disable the keyboard light
    I've tried macbook tray tools but doesnt work (freeze after lanuch)
    Thank you

    I found a quick fix solution.
    if I kill the process kbdmgr.exe then the keyboard light will go off and leave the display brightness the same as your setting which is fine for me.
    but the volumn controls and eject button will not work I will have to do it from the windows interface rather than the keyboard

  • SPS224 and Windows XP SP3 802.1x supplicant problem

    Hi everybody
    We run MS Active Directory based network (Windows Server 2008, MS NPS as RADIUS server) and have Windows XP SP3 and 7 in it. We have a lot of SPS224 (with the latest SW version 1.0.6) as the access switches, and we are trying to implement 802.1x in our network to authenticate users by their AD domain computer accounts. Also, we want to use dynamic VLAN assignment using RADIUS attributes. The authentication by PEAP-MSCHAPv2 works fine on all workstations but we have a problem with the dynamic VLAN assignment in case Windows XP machines are used. The problem is that after a successful authentication and VLAN assignment on a switch port, the Windows XP supplicant is trying to re-authenticate after several seconds. However, the switch port state remains authorized and the workstation does not lose connection. So, the only problem we see is that the state of supplicant does not correspond the switch port state. We have notice that the problem occurs when the "multiple sessions mode" is used (it is needed to enable VLAN  assignment by RADIUS attributes). We have tried the built-in Windows XP SP3 supplicant and Cisco Secure Services Client with the similar result. At the same time, the Windows 7 workstation works just fine, without any problems. Is anybody has faced this problem with Windows XP and has a workaround? Any help will be appreciated!

    Not exactly sure what could be the problem. It should be working - it's definitely supported (I'm currently typing this via a XP SP3 machine using PEAP WPA2/AES via WZC). The only things I can think of to check are:
    - Make sure your wireless drivers are up to date *this is a must*
    - Make sure the other supplicant is completely disabled (uninstall it if you really need to rule it out)
    - Try disabling the server certificate check in the WZC profile for this network (do you know for sure that your laptop trusts the IAS server's certificate)?
    - Are you doing machine or user authentication for PEAP - make sure you have the WZC profile properly configured
    - Are you 100% sure that you've configured everything properly for the network (WPA vs WPA2? AES vs. TKIP? etc.)

  • I can no longer print PDF files that were scanned with the very same MX479 on Windows XP, SP3

    I can no longer print PDF files that were scanned with the very same MX479 All-in-One.
    I have an (obsolete) Windows XP, SP3 computer.  Obviously, no updates from Microsoft
    have occurred that might have impacted my Canon Pixma MX479.
    When I attempt to send 1 or more pages from a PDF file to the printer, I don't even get the
    Canon PIXMA popup that would allow me to cancel the print job.
    Yet the Print Queue icon appears in the lower right corner of my monitor.
    If I view the Print Queue, the print queue shows "spooling" and does nothing more.
    If I attempt to CANCEL the print job in the Print Queue, it simply changes to "deleting -
    spooling".
    I cannot cancel the print job that shows NOT RESPONDING via Task Manager, either.
    In fact, the only way the Print Queue icon disappears is if I totally reboot my computer!
    "Luckily", I can still print e-mails, Word documents, and even my downloaded PDF of my
    bank statement.
    So, I was thinking that it was *only* PIXMA'S OWN SCANNED PDFS that could not be
    printed ON THE SAME PIXMA 479.
    However, I have since realized that I also cannot print USPS Signature Proof of Delivery
    PDFs that I received from USPS via e-mail.
    So why can I print *some* PDF files, but not *all* PDF files, like I previously could do?
    THESE SCANS ARE OF LEGAL DOCUMENTS, SO I WILL LIKELY HAVE TO E-MAIL
    THE REQUISITE, PREVIOUSLY SCANNED PDFS TO FEDEX TO PAY FOR *THEM*
    TO PRINT THEM.
    NOTE: I *have* tried turning the PIXMA off, unplugging it, rebooting the computer, plugging
    the PIXM in and restarting the PIXMA - still no ability to print PIXMA-scanned PDFs.
    And, I find it very strange that e-mails, Word documents, and some other PDFs print with
    no problem "around" "NOT RESPONDING" PIXMA print jobs.
    I have owned Canon printers for years, including the MX420, and the MX340.

    There may be some security issues related to the USPS PDFs.
    http://www.certified-mail-envelopes.com/signatures-usps-certified-mail-return-receipt-requested
    I can't help with the scan/print problem. You seem to have done everything I would try.
    I don't know if maybe using a registry cleaner would help.
    John Hoffman
    Conway, NH
    1D Mark IV, Rebel T5i, Pixma PRO-100, MX472

  • Can i install oracle BI enterprise edition on windows xp sp3?

    hi, i downloaded oracle BIEE 10.1.3.4 for windows x86, can i install it on windows xp sp3. must it be on a server operating system?
    thanks

    Read the "System Requirements and Supported Platforms" document:
    http://download.oracle.com/docs/cd/E10415_01/doc/nav/portal_1.htm

  • Mac os x wiki server can't authenticate user password from active directory recently after we upgraded to windows 2008 server.

    after upgraded to windows 2008 server, our  mac os x wiki server can't authenticate user password anymore. How can I re-bind the wiki server to the AD again? thanks in advance.

    Solved it by deleting the user and creating a new one with the same userID.
    Maybe it occured because I marked the "user has to change password after first login" box when resetting the password but didn't yet allow him to do so in the webpages menu?!?

  • Windows XP SP3 in Spanish, you can not generate spoken menus

    hello.
    Windows XP SP3 in Spanish, you can not generate spoken menus to iPod. When you synchronize creates WAV audio files at the root of drive C, instead of the inside of the iPod. How to solve this problem. Thank you.

    Hi,
    I have the same issue, spoken menus tags are generated as wav files to the root of the C:\ drive on Vista but are not copied to the iPod Control Speakable folder.
    Some users reported the same in Chinese and English on another thread . This is not only in Vista but also on XP. I tried on an old XP computer and it worked fine but will not on my top notch system.
    Wonder if this has to do with multiple hard drive...Also, Explorer pops up showing the ipod files, even if not in disk mode...
    menus are

  • Safari 5.0.5 on windows XP SP3 green menu, green bookmarks, green status bar. Earlier it was grey. What i can do?

    Safari 5.0.5 on windows XP SP3 green menu, green bookmarks, green status bar. Earlier it was grey. What i can do?
    Periodical safari again grey, but after next loading safari green. Im russian, sorry for my language.

    Safari 5.0.5 on windows XP SP3 green menu, green bookmarks, green status bar. Earlier it was grey. What i can do?
    Periodical safari again grey, but after next loading safari green. Im russian, sorry for my language.

  • Can not installed the Sound card driver for Windows XP SP3?(CQ40 333TU)

    my notebook model is CQ40 333TU, i downgraded from windows vista to windows xp sp3, but i can not installed the sound driver?  and i can not found the xp driver in hp web, help me.

    This might help>>>
    http://h30434.www3.hp.com/psg/board/message?board.id=OS&thread.id=26
    http://h30434.www3.hp.com/psg/board/message?board.id=OS&thread.id=230
    ******Clicking the Thumbs-Up button is a way to say -Thanks!.******
    **Click Accept as Solution on a Reply that solves your issue to help others**

  • Why can't JavaFx media player play .m4a file on windows xp sp3?

    Hi All
    Why can't JavaFx media player play .m4a file on windows xp sp3? I got an exception that 'Decoder is not available' when I played m4a file on windows xp sp3(it didn't work on vista either), but it works fine on windows 7 , so I guess Javafx media player needs some system dependencies or resources when it plays media files, do you have any suggestions for this ?
    Edited by: imtoocute on Aug 22, 2012 11:18 AM
    Edited by: imtoocute on Aug 22, 2012 11:19 AM
    Edited by: imtoocute on Aug 22, 2012 3:53 PM

    To allow playback on Windows XP, you need to install the correct software in addition to JavaFX.
    Once the system has been upgraded to meet the minimum requirements for playback of a particular type of video encoding, then playback should work fine.
    See the JavaFX Media portion of the JavaFX 2.2 System Requirements:
    http://docs.oracle.com/javafx/2/system_requirements_2-2/jfxpub-system_requirements_2-2.htm
    Note, m4a is just a container file and data streams inside the container format need to match a supported JavaFX format for playback to work:
    http://docs.oracle.com/javafx/2/api/javafx/scene/media/package-summary.html
    Some approaches you could take:
    - additionally encode the media in VP6 format and fallback to VP6 playback if H.264 playback fails.
    - use a 3rd party player like VLC.
    - don't bother supporting Windows XP video playback.
    - direct a browser to a divx install page if playback fails (http://www.divx.com/).

  • How can I resolve: cannot save any type of image in Illustrator CS6 on Windows XP SP3?

    I have a user who is on Windows XP SP3 and he cannot save any images in Illustrator CS6. When he selects eitheer of the save buttons, the location window comes up but nothing happens after that. We have given him admin rights and permissions for the computer and Illustrator, the UAC is off, we have deleted the pref folder, and we have done a reinstall of the software . Other users can log onto the same machine and Illustrator works fine for them, but; this particular user, who is the primary user of the computer, cannot save his work using the program. How can we fix this

    Flush out temp files and check disk permissions and quota. He may simply be running out of local storage space.
    Mylenium

  • User can't authenticate...auth-failed/windows workstation not allowed

    Keep on running into an odd problem. I have some users logging in via soft vpn connection. Yesterday, they were able to log in without a problem. Today they are getting 01/31/2007 08:09:21
    Authen failed
    Windows workstation not allowed .. ..
    Why can they authenticate 1 day and then be denied. This happened last week as well. The server adminstrator seemed to think it was a user setup issue and gave them another user account. Now as you can see above, the same thing has happened. I don't get it. Any help would be appreciated.

    For ACS to perform Windows authentications we need to specifiy a workstation name.
    In AD , the user should have access to all computers.
    OR
    A computer account named CISCO should exist.
    All users that Windows will authenticate have permission to log in to the computer named CISCO.
    ACS shows this error message only when the user tries to login from a work station he has no permission to log on.
    If you are using ACS 4.1 this link will be useul.
    http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_installation_guide_chapter09186a008070a63c.html#wp1041202

Maybe you are looking for