10.8.2 Clients not managed with no wi-fi connection

I have a 10.8.2 server connected to an AD.  It's also setup as an OD and we use it's WGM to manage clients.  A user can sign in on a 10.8 laptop and created a managed mobile account.  After the account is created, on subsequent sign-ins if that user signs in quickly before the laptop is talking to the management server, or if their wi-fi is off, it signs them in but the account isn't managed (even though it's a managed mobile account).  If a user creates a managed mobile account on a laptop runing 10.6 then the account is always managed, as I would expect, so I don't think my server is at fault.  I don't have users on 10.7 so I've not tested that.
Here is a system log from a sign in that doesn't pick up the management:
Oct 16 09:08:00 localhost SecurityAgent[361]: User info context values set for stu2014
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_authenticate(): Got user: stu2014
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_authenticate(): Got ruser: (null)
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_authenticate(): Got service: authorization
Oct 16 09:08:00 localhost authorizationhost[376]: in od_record_create(): 2 OD nodes unreachable.
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_authenticate(): Context initialised
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_authenticate(): Stashing kcm credentials in enviroment for kcminit: ***
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_authenticate(): pam_sm_authenticate: ntlm
Oct 16 09:08:00 localhost authorizationhost[376]: in od_record_create(): 2 OD nodes unreachable.
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_acct_mgmt(): OpenDirectory - Membership cache TTL set to 1800.
Oct 16 09:08:00 localhost authorizationhost[376]: in od_record_create(): 2 OD nodes unreachable.
Oct 16 09:08:00 localhost authorizationhost[376]: in od_record_check_pwpolicy(): retval: 0
Oct 16 09:08:00 localhost authorizationhost[376]: in od_record_attribute_create_cfstring(): returned 3 attributes for dsAttrTypeStandard:AuthenticationAuthority
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Establishing credentials
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Got user: stu2014
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Context initialised
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Got euid, egid: 0 0
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Done getpwnam()
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Done setegid() & seteuid()
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): pam_sm_setcred: init credential cache
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): pam_sm_setcred: storing credential for: ***
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Got cache_name: API:145837230:3
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Environment done: KRB5CCNAME=145837230:3
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Cache closed
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Done cleanup2
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Done cleanup3
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Done seteuid() & setegid()
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): Done cleanup4
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): pam_sm_setcred: ntlm
Oct 16 09:08:00 localhost authorizationhost[376]: in od_record_create(): 2 OD nodes unreachable.
Oct 16 09:08:00 localhost authorizationhost[376]: in pam_sm_setcred(): pam_sm_setcred: no domain found skipping
Oct 16 09:08:00 localhost SecurityAgent[361]: Login Window login proceeding
Oct 16 09:08:01 localhost com.apple.SecurityServer[14]: Succeeded authorizing right 'system.login.console' by client '/System/Library/CoreServices/loginwindow.app' [348] for authorization created by '/System/Library/CoreServices/loginwindow.app' [348] (100003,0)
Oct 16 09:08:01 localhost loginwindow[348]: Login Window - Returned from Security Agent
Oct 16 09:08:01 localhost loginwindow[348]: ERROR | ScreensharingLoginNotification | Failed sending message to screen sharing GetScreensharingPort, err: 1102
Oct 16 09:08:01 localhost loginwindow[348]: USER_PROCESS: 348 console
Oct 16 09:08:01 localhost com.apple.launchd.peruser.145837230[134] (com.apple.gamed): Ignored this key: UserName
Oct 16 09:08:01 localhost com.apple.launchd.peruser.145837230[134] (com.apple.gamed): Ignored this key: GroupName
Oct 16 09:08:01 localhost com.apple.launchd.peruser.145837230[134] (com.apple.ReportCrash): Falling back to default Mach exception handler. Could not find: com.apple.ReportCrash.Self
Oct 16 09:08:01 localhost loginwindow[348]: Connection with distnoted server was invalidated
Oct 16 09:08:01 localhost com.apple.SecurityServer[14]: Succeeded authorizing right 'system.login.done' by client '/System/Library/CoreServices/loginwindow.app' [348] for authorization created by '/System/Library/CoreServices/loginwindow.app' [348] (100002,0)
Oct 16 09:08:01 localhost WindowServer[350]: **DMPROXY** (2) Found `/System/Library/CoreServices/DMProxy'.
Oct 16 09:08:02 localhost WindowServer[350]: kCGErrorNotImplemented: receive_notification: CPXSetEventFilter failed
Oct 16 09:08:02 localhost NetworkBrowserAgent[399]: Starting NetworkBrowserAgent
Oct 16 09:08:02 localhost coreservicesd[59]: Can't change an application into stopped state for app App:"Console" [ 0x0/0x40040]  @ 0x0x7f9369c96c80 because it's already been started.
Oct 16 09:08:02 localhost CVMServer[72]: Check-in to the service com.apple.cvmsCompAgent_x86_64 failed. This is likely because you have either unloaded the job or the MachService has the ResetAtClose attribute specified in the launchd.plist. If present, this attribute should be removed.
Oct 16 09:08:03 --- last message repeated 1 time ---
Oct 16 09:08:03 localhost WindowServer[350]: Display 0x04272f40: MappedDisplay Unit 0; ColorProfile { 2, "Color LCD"}; TransferTable (256, 3)
Oct 16 09:08:03 localhost SystemUIServer[394]: *** WARNING: -[NSImage compositeToPoint:operation:fraction:] is deprecated in MacOSX 10.8 and later. Please use -[NSImage drawAtPoint:fromRect:operation:fraction:] instead.
Oct 16 09:08:03 localhost SystemUIServer[394]: *** WARNING: -[NSImage compositeToPoint:fromRect:operation:fraction:] is deprecated in MacOSX 10.8 and later. Please use -[NSImage drawAtPoint:fromRect:operation:fraction:] instead.
Oct 16 09:08:03 localhost blued[55]: kBTXPCUpdateUserPreferences gConsoleUserUID = 145837230
Oct 16 09:08:04 localhost locationd[413]: Incorrect NSStringEncoding value 0x8000100 detected. Assuming NSASCIIStringEncoding. Will stop this compatiblity mapping behavior in the near future.
Oct 16 09:08:04 localhost locationd[413]: NOTICE,Location icon should now be in state 0
Oct 16 09:08:04 localhost WindowServer[350]: kCGErrorNotImplemented: receive_notification: CPXSetEventFilter failed
Oct 16 09:08:04 localhost UserEventAgent[383]: cannot find fw daemon port 1102
Oct 16 09:08:05 localhost com.apple.launchd.peruser.145837230[134] (com.apple.afpstat-qfa[436]): Job failed to exec(3). Setting up event to tell us when to try again: 2: No such file or directory
Oct 16 09:08:05 localhost com.apple.launchd.peruser.145837230[134] (com.apple.afpstat-qfa[436]): Job failed to exec(3) for weird reason: 2
Oct 16 09:08:05 localhost com.apple.launchd.peruser.145837230[134] (com.apple.mrt.uiagent[426]): Exited with code: 255
Oct 16 09:08:13 localhost WindowServer[350]: CGXTerminateWindowList: Operation on a window 0x1c requiring rights kCGSWindowRightOwner by caller Safari
Oct 16 09:08:13 localhost talagent[393]: CGSReleaseWindowList(cid, windowIDList, count): CGError 1001 on line 918
How can I get the management to sick?
<Email Edited By Host>

OldMacUser wrote:
My prob is not as dramatic, but it is similar. After my MacBookPro sleeps (lid closed) it looses my home WiFi network (which is from my Time Capsule). After a little bit of the Airport icon "searching" it finally finds my network and connects. However, in Leopard the network was never lost. Solution, no ideas so far.
Tried an experiment today. Put my MBP to sleep ( not closing the lid). Same problem in the am. I use fixed IP addressing. This time, I rebooted both the AE base station and a remote AE ...which restored connectivity. So, perhaps there is something amiss with the "deconnecitivity" of the AE when SL goes to sleep? If I have time, I will call Apple, or leave it to others. This is obviously an issue.

Similar Messages

  • I am trying to install Java. I get the follwoing The installer can not proceed with the current internet connection

    I am trying to install Java6 from a free down load. I keep getting the following error message:
    The installer can not proceed with the current internet connection settings.
    I have tried every option under internet connections.

    #'''Install or Update the [[Java]] plugin''' to the latest version.
    #*Download site: http://www.oracle.com/technetwork/java/javase/downloads/index.html (Java Platform: Download JRE)
    #**'''''Be sure to <u>un-check the Yahoo Toolbar</u> option during the install if you do not want it installed.
    #*Also see "Manual Update" in this article to update from the Java Control Panel in Windows Control Panel: http://support.mozilla.com/en-US/kb/Using+the+Java+plugin+with+Firefox#Updates
    #* Removing old versions (if needed): http://www.java.com/en/download/faq/remove_olderversions.xml
    #* Remove multiple Java Console extensions (if needed): http://kb.mozillazine.org/Firefox_:_FAQs_:_Install_Java#Multiple_Java_Console_extensions
    #*Java Test: http://www.java.com/en/download/help/testvm.xml
    <br />
    <br />
    '''You need to update the following.''' The Plugin version(s) shown below was/were submitted with your question and is/are out of date. You should update to avoid known security issues with the version(s) you have installed. Click on "More system info..." to the right of your question to see what was included with your question.
    *Shockwave Flash 10.2 r153
    #'''''Check your plugin versions''''' on either of the following links':
    #*http://www.mozilla.com/en-US/plugincheck/
    #*https://www-trunk.stage.mozilla.com/en-US/plugincheck/
    #*'''Note: plugin check page does not have information on all plugin versions'''
    #*There are plugin specific testing links available from this page:
    #**http://kb.mozillazine.org/Testing_plugins
    #'''Update the [[Managing the Flash plugin|Flash]] plugin''' to the latest version.
    #*Download and SAVE to your Desktop so you can find the installer later
    #*If you do not have the current version, click on the "Player Download Center" link on the "'''Download and information'''" or "'''Download Manual installers'''" below
    #*After download is complete, exit Firefox
    #*Click on the installer you just downloaded and install
    #**Windows 7 and Vista: may need to right-click the installer and choose "Run as Administrator"
    #*Start Firefox and check your version again or test the installation by going back to the download link below
    #*'''Download and information''': http://www.adobe.com/software/flash/about/
    #**Use Firefox to go to the above site to update the Firefox plugin (will also install plugin for most other browsers; except IE)
    #**Use IE to go to the above site to update the IE ActiveX
    #*'''Download Manual installers'''.
    #**http://kb2.adobe.com/cps/191/tn_19166.html#main_ManualInstaller
    #**Note separate links for:
    #***Plugin for Firefox and most other browsers
    #***ActiveX for IE

  • Why my phone's Android apps not work with normal ph data connection​s???

    After 10.3.1.1779 update my phone Q5 had facing lots prblms... at first I can't download anything from amazon app store with normal deta connection, 2nd android apps not work with normal mobile deta connection its always need wifi, 3rd mobile search engine not worked properly and also contact books always show no contacts after restarts it's fixed bt some time later it's starts again... and pls give update for facebook.... plssss plssss blackberry fix those problem.....

    Can I see your /var/log/Xorg.0.log through Pastebin?

  • Brightness control does not work with the bluetooth keyboard connected on my iPad2. Please someone could help me ?

    Brightness control does not work with the bluetooth keyboard connected on my iPad2. Please someone could help me ?

    Julien-
    I have the Apple MC184LL/A Bluetooth Wireless Keyboard.  The brigtness control works with mine, as do most of the other functions.
    Try cycling the keyboard off and on.  Hold the power button until the green LED goes out.  Then press it one more time to turn it back on.
    You might try resetting the iPad's network.  Go to Settings-General-Reset-Reset Network Settings.  Then you may need to reconnect your WiFi and Bluetooth.
    If that doesn't help, try resetting/rebooting the iPad.  Hold both the Home and Sleep buttons for several seconds until the Apple logo appears.  Ignore the "Slide to power off" arrow.  The iPad will restart in a couple of minutes.  Resetting this way will not hurt anything, and sometimes clears up mysterious problems.
    Fred

  • ODM client not bundled with 11g client install?

    All,
    Our 10g Oracle Client install includes the Oracle Directory Manager.
    We just installed the Administration version of the 11g client and I don't see ODM there.
    Can someone verify that ODM is not bundled with the 11g client?
    If it is bundled, how do I run it? The 11g Installer did not give me a menu item for it.
    Thanks,
    John

    Ok... despite the overwhelming response on this forum I contacted Apple support to found the solution.
    All mac's need internet access to send and receive the Apple Push Notifications. Even if the server is on the same network....
    For those behind a firewall / proxy and not quite keen on letting clients have full access; all apple servers are on the 17.0.0.0/8 range.
    For thosel looking to restrict even more (http://support.apple.com/kb/HT5302)
    2195, 2196
    TCP
    Used by Profile Manager to send push notifications
    5223
    TCP
    Used to maintain a persistent connection to APNs and receive push notifications
    80/443
    TCP
    Provides access to the web interface for Profile Manager admin
    1640
    TCP
    Enrollment access to the Certificate Authority
    Kind regards,
    Domien

  • Disable IE11 password management in HP Client Security Manager with Windows 8.1

    HP Client Security Manager works for Windows login/unlock in Windows 8.1, but is not working with IE11.  Is there a way to disable HP Client Security Manager in IE11, but still keep the finger print reader for Windows login/unlock?  Firefox and Chrome are working without HP Client Security Manager and I would like IE11 not to use it either. You reply to the password prompts not to remember a site, but it still prompts everytime anyway.  Never worked this way in the Windows 7 version.. Thanks

    Thanks for the information.
    Suggest you to try uninstall and re-install the latest version which is - 8.3.3.1762. The direct link is:
    http://h20565.www2.hp.com/portal/site/hpsc/template.PAGE/public/psi/swdDetails/?sp4ts.oid=5405363&spf_p.tpst=swdMain&spf_p.prp_swdMain=wsrp-navigationalState%3Didx%253D%257CswItem%253Dob_129972_1%257CswEnvOID%253D4060%257CitemLocale%253D%257CswLang%253D%257Cmode%253D%257Caction%253DdriverDocument&javax.portlet.begCacheTok=com.vignette.cachetoken&javax.portlet.endCacheTok=com.vignette.cachetoken
    If this does not fix, then suggest you to log a call with technical support.
    Please do post any progress on this.

  • Server 2012 R2 DHCP Failover - Hot Standby clients not renewing with standby server

    In my test network I have a pair of Server 2012 R2 DHCP servers setup for Hot Standby and they will successfully service a client request for a new request. 
    What I am seeing is that when I test failover the clients will not renew with the Standby server. I have to release first and then renew. 
    When both DHCP servers are up the state is normal and replication of configuration from the Active to Standby is working. As far as I can tell it is configured correctly. 
    MaxClientLeadTime is 10 minutes. 
    StateSwitchInterval is 10 minutes. 
    AutoStateTransition is set to True. 
    Adding that manual renews fail with a message stating that it was unable to contact the dhcp server. However if I wait for the lease to expire/auto-renew the dhcp server does indeed change to the standby. Once the primary server comes back up and the state
    returns to normal I am able to manually renew. 
    thanks in advance

    
    Hi,
    For test, we let the active DHCP down and the standby DHCP server will take place. But when we renew an IP, client send unicast to the former DHCP
    server. That’s why the first request failed.
    At 7/8 of the scope lease time, the client moves into a REBINDING state and broadcasts a lease renewal request.
    For more information please refer to:
    DHCP Failover Examples
    http://technet.microsoft.com/en-us/library/dn338973.aspx
    Hope this helps.

  • Windows "Easy Connect" does not reply with the password / "Easy Connect is not Available"

    Hello,
    I have posted a related question some time ago, which was eventually resolved. However, after some time a problem with Easy Connect (used for MSRA) came back:
    Whenever I arrive at the point in setting up a MSRA session where Easy Connect is needed, I get the reply: "Easy Connect is not Available". Here is an example of the problem:
    Start MSRA
    --> as expected, a window with "invite someone to help you" and " Help some who has invited you" appears
    Select "invite someone to help you"
    --> as expected, a window with "Who do you want to get help from" appears 
    Select "Invite someone to help you"
    --> as expected, a windows with "How do you want to invite your trusted helper?" appears
    Select "Use Easy Connect"
    --> as expected, the temporary "Create invitation window / checking network capabilities" window appears
    Next, I would expect this windows to close a new window to provide me with the Easy Connect password. However, instead I get the window "Easy Connect is not available".
    I cannot continue. (I have screenshots so can repost with them if that would clarity my question)
    Any suggestion how to resolve would be appreciated.
    (Please do not reply with the 3 suggestions from the FAQ (both computers must run windows 7 / Access to internet is limited / your router does not support Easy Connect - doesn't help)
    More background information and things I have tried:
    The "Easy Connect is not available" window offers the "Tell me more about how to fix this problem" which I have tried, but those suggestions do not help
    If I use the other MSRA option: "Help someone who has invited you" (this would be my typical use case), followed by "help someone new" and than select "Use Easy Connect", I also get the "Easy Connect is not available"
    window instead of the expected option to enter the Easy Connect password. I believe this is that same problem.
    This happed with both the 32 as well as the 64 MSRA versions
    I'm using Window 7 Ultimate, 64 bit with all the latest updates
    This desktop PC is wired to the internet via an Edimax gigabit switch, a Dlink DIR-855 wireless router and a fiber modem in bridge mode
    The W7 desktop has a single active network connection only
    I'm using Windows Firewall and Windows Security Essentials
    Disabling the firewall on the PC did not help
    Network discovery is enabled in Control Panel\All Control Panel Items\Network and Sharing Center\Advanced sharing settings (that’s UPnP – right?)
    The Internet Connectivity Evaluation Tool does not seem to be available anymore from MSFT sites
    Restarting "Peer Name Resolution Protocol" did not help
    Restarting "Peer Networking Identity Manager Properties" did not help
    Starting up with a "Clean Boot" (disabled all non-Microsoft services using MSConfig) did not help
    I would also be interested to understand how I can check on the status of the "Easy Connect" service. Is this a service hosted somewhere, or??
    Thanks!

    Dear Andy,
    Thanks a lot for your reply. Let me answer your questions:
    Q: Could you use the other methods: save this invitation as a file and use e-mail to send invitation?
    A: yes, that way I can establish a MSRA connection
    Q: Have you disable other network connections, including disable all virtual network card?
    A: if I check with ‘Device Manager/Network Adapters’ (or Control Panel/Network and Internet/Network Connections) I see two network adapters (my Asus motherboard has two network connectors). Both are available, but only one is used. I have
    disabled one. Unfortunately, this does not solve the problem. I will leave it disable for now.
    Q: To find detailed information about this issue, please locate to event view and find the logs about remote assistance.
    A: I have to admit that the Event Viewer is unfamiliar territory for me. So, I’m not sure where and what to look for. However, as suggested, I found "Event Viewer (local)/Applications and Services Logs/Microsoft/Windows/Remote assistance/Operational".
    Each time, I attempt to use MSRA/Easy Connect, it seems two entries are added. As I cannot seem to upload files with this post, here are just the two entries:
    “Diagnosis Repro Attempt resulted in a failure.”
    “Remote Assistance troubleshooting has confirmed the problem: Remote Assistance Easy Connect isn't available.”
    If you need more details, please suggest what to forward or check. I'm eager to find a solution!
    W.

  • I Photosmart eStation C510a, the zeen will not sync with the printer,or connect to internet.

    Hi,
    I require some asisstance with my Photosmart eStation C510a. The zeen will not sync with the printer, and I cannot seem to connect it with the internet. When I first installed this printer, it was fine, both the zeen and printer were connected and in sync.
    An update was automatically installed by H.P. which appeared to create a problem with the zeen , being unable to sync with the printer, the zeen also lost the internet connection. The printer is working fine, and responds to the zeens commands for printing,
    scanning and copying, but I would love to have the internet connection from the zeen, whereby I can use it for emailing etc.
    Is there anyone out there that can help?
    Thanks,
    Christorobb.

    This document might help:
    http://h10025.www1.hp.com/ewfrf/wc/document?docnam​e=c02497857&tmp_task=solveCategory&cc=us&dlc=en&la​...
    007OHMSS
    I was a support engineer for HP.
    If the advice resolved the situation, please mark it as a solution. Thank you.

  • 10.3.9 clients not working with 10.4.9 open directory server

    I have a 10.4.9 server running open directory and managing about 20 10.4.9 clients. I am trying to have it manage our remaining 10.3.9 clients, but for whatever reason, I cannot seem to get the 10.3 clients to "attach" to the server.
    I have the 10.3 clients set up in a computer list on the server, and in directory access I have it set to "get ldap mappings from server". At one point, it was suggested to me that I have the clients "get ldap mappings from open directory server". I tried this, and manually set the search base suffix. My search base suffix was "dc=example,dc=local". I even tried doing "cn=config,dc=example,dc=local" (where in both cases example.local was replaced with my real DNS name). Any suggestions on what else I could try to get this to work?

    That's the odd thing though. I've done this with 10.4 no problem. Settings always worked. For some reason though, even though the clients are able to login using a network user, none of the preference settings sync.
    For example - I always put a loginwindow message on as a sort of "test" to see if preferences are being set. If that works, then I rarely have a problem. No matter what I do, though, I cannot get the loginwindow message to display on the 10.3 clients. It works really well on 10.4, but not at all on 10.3. I've tried this on multiple 10.3 machines, as well, (and they're both based on different system images) but it still doesn't work. When I get back to work on Friday, I'll have to see if preferences will work for network users; that's the one thing I haven't tried.
    Other than dumping the directoryaccess preferences, is there another preference setting that could be dumped on the client that may make it grab prefs from the server?

  • Linux clients not associating with Aironet 1100

    Does anyone know if there is an issue with a Linux client associating with an Aironet 1100 using WEP? Windows clients are connecting fine, and the Linux client connects to Linksys branded APs with WEP no problem.
    Aironet config:
    IOS 12.3(2)
    16 AP on same SSID, different cells
    128-bit WEP
    Linux client:
    Dlink Airplus DWL-G630
    Kernel: Slackware 2.6.12.2
    Commands used to associate
    ifconfig ath0 up
    iwconfig ath0 ath0 mode managed key restricted [2] {key}
    dhcpcd ath0
    After bringing up the ath0 interface, and running the iwconfig, you can see the iwconfig settings are sticking, but it seems to be jumping around APs when you watch the MAC of the AP. It goes from a valid MAC address to FF:FF:FF:FF:FF:FF and then to another valid address, and back again. This does not happen on the Linksys AP.
    Any ideas?
    Thanks,
    Andy

    Try entering the key (on the Linux box) as hex.
    Most of the Windows client software lets you enter the key in ASCII ... some client software requires that you put in the hex translation.
    You can check the logs on the 1100 to see what the failure message is ,,, but I'd bet it'll be something along the lines of "Invalid Key"
    Good Luck
    Scott

  • Web service client not working with HTTP Analyzer turned on

    So the subject explains it all.
    I have a simple JAXWS web service with @Policy(uri = "policy:Wssp1.2-2007-Https.xml") on remote secured (real SSL cert) Weblogic 10.3.5.
    A simple client is generated in JDev 11.1.2.3 and run on my machine locally.
    I'm really not sure I've tuned everything right with client certificates but the thing is when JDeveloper HTTP Analyzer is turned on client run gives bad_certificate SSLException.
    With Analyzer turned off the service call is successfull.
    javax.net.ssl.SSLKeyException: [Security:090542]Certificate chain received from localhost - 127.0.0.1 --> wl1n2.miit.ru was not trusted causing SSL handshake failureCould someone explain me this issue?

    Puthanampatti,
    First of all, how am I to determine what security folder is being used for certificates when I run local client in JDev?
    My JDev folder is D:\JDeveloper-11.1.2.*3* and there's D:\JDeveloper-11.1.2.3\jdk160_24\jre\lib\security
    My JDEV_USER_DIR is set to another folder: D:\JDeveloper-11.1.2.*2* \home so I'm not sure where should I import certificates.
    To import a certificate I:
    Open our https web site in Chrome browser. Click the HTTPS mark and expoer the certificate as Base64 (does it matter what encoding to use?) .cer file.
    Then I open Windows command line and run setDomainEnv in my local weblogic folder:
    D:\JDeveloper-11.1.2.2\home\system11.1.2.3.39.62.76.1\DefaultDomain\bin\setDomainEnv.exe
    cd D:\JDeveloper-11.1.2.3\jdk160_24\jre\lib\security
    keytool -import -alias miitcert -keystore cacerts -file d:\cer\miit-base64.cerA bit confusing might be the fact that system11.1.2.*3* folder is inside JDeveloper-11.1.2.*2* folder but that is how it is.
    So that were the steps I did to import a certificate, but the problem with HTTP Analyzer is still here.
    And what is demotrust.jks? There's no such file in security folder.

  • Lookout "Client" Not Updating with Correct Numbers

    We have Lookout 6.6 processes running on full development servers at separate locations.  At Station  1, Lookout is communicating with plcs collecting data. The data here is updating properly.  At Station 2, we have expressions looking at data on the Lookout process running at Station 1.  At Station 2, our expression might look something like this:
     \\192.168.201.10\processname\modbus1.30001  192.168.201.10 is the static IP address of the Lookout computer at Station 1. 
    If for some reason the computer at Station 2 is restarted, the value of the expression shown above will often times be incorrect when Lookout comes back up.  It will stay incorrect until the actual value of the expression changes at Station 1, or we modify the expression at Station 2 and type it in exactly as it was.  Somehow, this forces the expression to update and the value will be corrected.  This is causing significant problems because we cannot rely on the values shown at Station 2 to be correct on signals that aren't continuously changing. 
    I have installed the latest Logos engine (via a Lookout 6.7.2 install) to try and address this issue, and it does appear to be better, but the problem is still occurring.  The problem is not an inability to communicate between Station 1 and  Station 2, because modifying the expression at Station 2 to be exactly as it was causes the numbers to properly update. 
    Any suggestions to address this problem will be appreciated very much.
    Jeff Miller 

    Thanks for the reply Ryan.
    All updates for 6.0.2 are current.
    I updated the hyper.cbx as noted in your post.
    This did not seem to correct the problem.
    We do not have any of the client laptop firewalls turned on.  If I turn the server firewall on, I can't connect to the client laptops.(Seperate issue that I will deal with in another post.) 
    I turned the firewalls for the client laptops on and added the following exceptions to the the firewall exceptions list.
    C:\Windows\system32\lkads.exe
    C:\Windows\system32\lktsrv.exe
    C:\Windows\system32\nicitdl.exe
    C:\Windows\system32\nicitdl5.exe
    C:\Program Files\National Instruments\Lookout x.x\lookout.exe
    I can now connect and get the Hypertrend to work.
    The first couple of times the trending was slow but by turning the
    trend off, the trend would slowly load.  It is now a lot faster and
    probably is restricted, now by the modem speed.
    Thanks for your help.
    WaterWorks
    http://digital.ni.com/public.nsf/allkb/0D7B86F4B4D19A5E86256F9A006EECB1?OpenDocument
    http://digital.ni.com/public.nsf/websearch/8AE45BBFA1D7025E862570F200642FD8?OpenDocument
    hyper1.zip (89 kb)
    Message Edited by WaterWorks on 06-25-2008 06:23 PM

  • WL8.1 jms client not working with WLS9.1

    Hi,
              I have a JMS client(MDB) with weblogic.jar(8.1 version) and its not able to pick messages from a queue which is created in WLS9.1.
              I have actually upgraded my weblogic domain using the wizard and i can see my queues getting created properly.
              At the client side when i use weblogic.jar(9.1 version) it works but not with weblogic81.jar..
              Any help is greatly appreciated.
              Thanks.

    This should work as far as I know, you might want to try contacting customer support. For now, it might help to try using 8.1 with the latest service-pack.
              Tom

  • Windows 7 Clients Not Working With Web-Auth

    I am using 5508 controllers, configured for WEB-AUTH passthrough, Windows XP clients work fine but Windows 7 clients are hit and miss getting redirected to the splash screen.
    The login page is customised showing T's & C's with two buttons Except or Reject.
    Do I need to Pre-Auth with ACL's? Has anyone had similar issues, or any good doc's etc.
    Thanks in advance for any replies.
    Jay

    Nicolas,
    Many thanks for your relpy, the problem is that this is a guest network that's also avalable to the public and I dont have any control over the end clients.
    After doing a quick search on the net I found this.
    NCSI : Uses a combination of DNS and/or HTTP look ups to tell if you are connected to the Internet. The way NCSI does this is either via a HTTP request for http://www.msftncsi.com/ncsi.txt or a DNS look up for dns.msftncsi.com that resovles to 131.107.255.255.
    NCSI does this whether you are logged on or not.
    Do I need to Create a Preauthentication ACL on the Guest WLAN interface:-
    Configure a preauthentication ACL on the WLAN to allow wireless clients to allow:-
    1.       Permit DNS resolution (UDP/53) to 213.199.181.90
    2.       Permit TCP port 80 to 131.107.255.255
    Jay

Maybe you are looking for

  • Can you use a different web page generator with iweb?

    I have created website in Sandvox & want to know if there is a way to import the htm files into iweb so I can publish the website with .Mac

  • Why are the photos I copied onto a DVD from I-Photo not viewable by a Windows PC?

    Why are the photos I copied onto a DVD from iPhoto not viewable on a Windows PC?

  • Hyperion Essbase 9 and database.mdb

    Hi all, I have installed Hyperion Essbase 9 - Hyperion essbase 9 server - Hyperion essbase 9 administration services - Hyperion essbase 9 cliend add-in for excell Now i want do olap analysis on a database foodmart.mdb. I have problem to load it on es

  • [Request] Uncomplicated Firewall

    Hello, Ubuntu hardy introduces a new firewall ufw (Uncomplicated Firewall). It's a tool for host-based iptables firewall configuration. This tool should provide an easy to use interface to the user, as well as support package integration and dynamic-

  • Xserve running 10.4.x reverted to 10.3???

    I have an XSERVE that was originally purchased with OS X (10.3) in 2005. Within 6 months, we upgraded to Tiger and have continually kept the software updates up, ending up at 10.4.x. A few days ago, I had to Remote Desktop in to troubleshoot an issue