Access Reject with 1660
Hi,
I'm still trying to configure a iChain 2.3 Box with RSA ACE
Authentication. It works fine with LDAP, but not with Token.
I stored the sdconf.rec File in the eDirectory and after trying to log in
with NTRADPING or iChain I receive Access Reject on the Debug Screen of
the Radius. Also the Error -1660 appears.
When I activate the Activity Monitor on the ACE Server, I do not see any
messages - do I miss something? I configured the whole thing with TID
10069755 - even I did not the Point5, because the Usernames are the same.
But when I try to add the Login Name to the Login Method, I receive a
Error 1418.
Could not find something helpful at the RSA Support Page.
Any help would be appreciated.
Thanks
Tom
It appears that the server cannot load the NLM that implements the Login
Server Method (LSM) the RSA Ace/Agent method. I'm not sure exactly what
error 6 is, but I have encountered this in the past on rare occasions. As I
recall, this means that the NetWare loader failed to load an NLM, and in
most cases that I've seen, its been due to a corrupt NLM.
NMAS stores LSMs in eDirectory. You'll notice one or more .lmo files in the
same directory as the config.txt file for each method. These are the LSMs
for the method. When you install a login method, these LMO files are stored
in eDirectory stream attributes on the login method object for the method.
When the NMAS server starts, it reads the LMO out of the stream attribute
that corresponds to the server platform. The NMAS server then extracts the
NLM for the LSM, and loads it.
It could be that one of the LMO files you're installing is corrupt, or it
could be that eDirectory is not synchronizing the stream attributes properly
between replicas. I suggest installing a known good copy of the method, or
downloading a new copy of the method from RSA. You may also want to run
DSRepair to make sure that you Security Container replicas are consistent.
I recall seeing this error a few years ago when methods were installed from
ConsoleOne on Win98 clients. This was due to a bug in Client32's handling of
the stream attributes on Win9x platforms. This was before we shipped NMAS
2.0, so I'm sure the problem has been fixed by now. However, if you happen
to be installing methods from a Win98 workstation, it might be worthwhile to
try a NT/2k/XP workstation instead.
>>> <[email protected]> 09/14/04 8:53 AM >>>
Scott,
of course you were right again. The RSA Sequence is not valid - but why?
I downloaded and installed the RSA Agent from the RSA Site. The
installation is pretty simple, like another NMAS Login Method from
ActivCard or so.
Do you have a tip what to do with that error? Thanks again
Below is the Trace screen from NMAS.
Thank you so much.
Regards, Tom
Tuesday, 14 Sep 2004
16:49:29 8C70C3A0 NMAS: 57: Create NMAS Session
16:49:29 8C70C3A0 NMAS: 57: RemoteCheckIfLocalUser checking tbo.xx.xx.
16:49:29 8C70C3A0 NMAS: 57: RemoteCheckIfLocalUser is a local user.
16:49:29 8C70C3A0 NMAS: 57: Server thread started
16:49:29 8C70C3A0 NMAS: 57: NMAS_CanDo StartClientSession 0
16:49:29 8C70C3A0 NMAS: 57: >>ClientPut: message size=8 queue Size 0
16:49:29 8C70C3A0 NMAS: 57: >>ClientPut: message size=15 queue Size 8
16:49:29 8C70C3A0 NMAS: 57: NMAS_CanDo sendMessage 0
16:49:29 8C70C3A0 NMAS: 57: <<ClientGet: message size=8 queue Size 0
16:49:29 8C4AD260 NMAS: 57: >>ServerGet: message size=8 queue size 23
16:49:29 8C4AD260 NMAS: 57: >>ServerGet: message size=15 queue size 15
16:49:29 8C4AD260 NMAS: 57: CanDo
16:49:29 8C4AD260 NMAS: 57: Sequence Selected == "RSA ACE Agent"
16:49:29 8C4AD260 NMAS: 57: Login Sequence RSA ACE Agent not valid.
16:49:29 8C4AD260 NMAS: 57: Login Sequence lsmafp is valid.
16:49:29 8C4AD260 NMAS: 57: Login Sequence lsmafp is valid.
16:49:29 8C4AD260 NMAS: 57: Login Sequence NDS is valid.
16:49:29 8C4AD260 NMAS: 57: Login Sequence lsmcifs is valid.
16:49:29 8C4AD260 NMAS: 57: ERROR: -1660 CanDo
16:49:29 8C4AD260 NMAS: 57: ERROR: -1660 NMAS Manager
16:49:29 8C4AD260 NMAS: 57: <<ServerPut: message size=8 queue size 0
16:49:29 8C4AD260 NMAS: 57: <<ServerPut: message size=4 queue size 8
16:49:29 8C4AD260 NMAS: 57: >>ServerGet: message size=8 queue size 0
16:49:29 8C70C3A0 NMAS: 57: <<ClientGet: message size=4 queue Size 4
16:49:29 8C70C3A0 NMAS: 57: NMAS_CanDo sendMessage 0
16:49:36 C8868400 NMAS: NMAS Enterprise Edition
16:49:36 C8868400 NMAS: NMAS Login Policy Refresh Started
16:49:36 C8868400 NMAS: processLMOs: Login Method Object lsmafp
16:49:36 C8868400 NMAS: Loading LSM Method ID: 0xE Grade: 0x800000 MIB: 0
Flags: 0x1
16:49:36 C8868400 NMAS: ERROR: -602 processModule: Read LCM Code
16:49:36 C8868400 NMAS: processLMOs: Login Method Object lsmcifs
16:49:36 C8868400 NMAS: cacheLMO: Method ID Attribute not found
16:49:36 C8868400 NMAS: Loading LSM Method ID: 0xD Grade: 0x4800000 MIB: 0
Flags: 0x1
16:49:36 C8868400 NMAS: ERROR: -602 processModule: Read LCM Code
16:49:36 C8868400 NMAS: processLMOs: Login Method Object NDS
16:49:36 C8868400 NMAS: processLMOs: Login Method Object RSA ACE Agent
16:49:36 C8868400 NMAS: Loading LSM Method ID: 0x60 Grade: 0x4C00000 MIB:
0 Flags: 0x0
16:49:36 C8868400 NMAS: ERROR: 6 processModule: Load Module
16:49:36 C8868400 NMAS: ERROR: 6 processModule: Failed for module RSA ACE
Agent
16:49:36 C8868400 NMAS: processLMOs: Login Method Object NDS Change
Password
16:49:36 C8868400 NMAS: Loading LSM Method ID: 0xC Grade: 0x0 MIB: 1
Flags: 0x2
16:49:36 C8868400 NMAS: ERROR: -602 processModule: Read LCM Code
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse sequence name lsmafp
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse method name lsmafp
16:49:36 C8868400 NMAS: cacheLoginSeq: Login method lsmafp
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse sequence name lsmafp
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse method name NDS
16:49:36 C8868400 NMAS: cacheLoginSeq: Login method NDS
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse sequence name NDS
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse method name NDS
16:49:36 C8868400 NMAS: cacheLoginSeq: Login method NDS
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse sequence name lsmcifs
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse method name lsmcifs
16:49:36 C8868400 NMAS: cacheLoginSeq: Login method lsmcifs
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse sequence name RSA ACE Agent
16:49:36 C8868400 NMAS: cacheLoginSeq: Parse method name RSA ACE Agent
16:49:36 C8868400 NMAS: cacheLoginSeq: Invalid method RSA ACE Agent
16:49:36 C8868400 NMAS: cacheLoginSeq: Invalid sequence -- no valid
methods RSA ACE Agent
16:49:36 C8868400 NMAS: NMAS Login Policy Refresh Finished
> The -1660 error is an NMAS error for "login sequence not found." This
> usually means that the server is not loading one of the methods in the
login
> sequence for some reason. Sometimes you can force NMAS to load a method
by
> entering "nmas refreshpolicy" at the server console. If this does not
work,
> then it would be helpful to see some trace output from the "nmas
> refreshpolicy" command. TID 10092261 tells you how to get trace output
from
> NMAS.
>
> The -1418 error you're getting is the result of tree key problems that
your
> customer must have had in the past. This would be the same problem that
> caused the -1418 error you were getting while trying to store the
sdconf.rec
> file. There is data stored in your customer's environment that was
encrypted
> with their old tree key, and they're likely to get this error each time
they
> encounter this data. Your sdconf.rec file problem was due to encrypted
data
> stored on the "RSA/Ace Agent" object, and your current problem is due to
> data stored on specific user objects. Delete the same attributes
(SAS:Login
> Configuration, SAS:Login Configuration Key, SAS:Login Secret, SAS:Login
> Secret Key) from users that get the -1418 error, and the problem should
go
> away.
>
> That being said, since the usernames on the ACE/Server are the same as
> users' common names in eDirectory, you don't need assign each user a name
> for the RSA method.
>
> >>> <[email protected]> 09/14/04 4:24 AM >>>
> Hi,
> I'm still trying to configure a iChain 2.3 Box with RSA ACE
> Authentication. It works fine with LDAP, but not with Token.
>
> I stored the sdconf.rec File in the eDirectory and after trying to log
in
> with NTRADPING or iChain I receive Access Reject on the Debug Screen of
> the Radius. Also the Error -1660 appears.
>
> When I activate the Activity Monitor on the ACE Server, I do not see any
> messages - do I miss something? I configured the whole thing with TID
> 10069755 - even I did not the Point5, because the Usernames are the
same.
> But when I try to add the Login Name to the Login Method, I receive a
> Error 1418.
> Could not find something helpful at the RSA Support Page.
> Any help would be appreciated.
> Thanks
> Tom
>
>
Similar Messages
-
Access rejected; Unable to locate authentication rule
Does anyone ever post in here just to say "Hi! I'm not having a problem
- everything's running just GREAT!"?
Nah, I didn't think so. <grovel> Volunteer sysops are the greatest, and
I appreciate the unpaid time you put into helping us poor slobs out.
</grovel>
I've set up a new container within eDirectory, and am trying to
configure RADIUS (3.28, March 6 2003 - I know, an old version... but
it's working great!) to allow users within that container to VPN in via
our Cisco VPN concentrators.
For my effort, Bordermanager's RADIUS screen tells me "Access rejected"
and "Unable to locate authentication rule".
In NWAdmin, I have done the following:
Gotten details on my new container and checked the "Enable Dial Access"
box in the "Dial Access Services"... uh, tab(?) and put the fully
qualified name (radius.ou.o) of my RADIUS service in the "Dial Access
System" field. Do I have to browse NDS to populate this field, or can I
just type it in?
Gotten details on [Root] -> Security -> Login Policy -> Rules and
modified my RADIUS service by adding my new container to the list.
Gotten details on my RADIUS service -> Username Resolution and added my
new context.
If memory serves, these are the three magic things I have to do for our
users to VPN in... but I still get the "Unable to locate authentication
rule" message.
Do I have to bounce my Bordermanager box for these changes to take effect?
Thanks for any help.
JohnHi John,
From your RADIUS.NLM version it appears that you're running BMAS 3.6. With
this version of RADIUS you don't have to bounce the box for login rules to
take affect, but you do need to reload ADM.NLM. ADM.NLM will not pick up
changes to your login rules "on-the-fly." (For the benefit of others reading
this, please note that BorderManager 3.8 does not use ADM.NLM and will pick
up changes to login rules on-the-fly.)
The fact that you're getting the "unable to locate authentication rule"
means that much of your configuration is correct. You don't need to change
any of the settings on your user, container, or DAS objects. RADIUS is able
to locate the user object and is handing the user's DN and password to
ADM.NLM for authentication.
Assuming that you have the latest version of ADM.NLM, this error also means
that ADM is able to resolve your login policy object, and can see at least
some of its attributes on this object. From your other posts in this thread
it sounds like you're using NWAdmin to manage your login rules and you've
verified that your replicas are in sync, so that rules out the most common
causes of this error.
Do you have the latest version of ADM.NLM? If I remember correctly, the
latest version is 2.67. (I'm going from memory here, so if you see something
newer on the download site, use it.) As I recall, version 2.66 fixed a bug
with the login rules that might be related to your problem.
>>> John Bodoni<[email protected]> 3/2/2005 2:52 PM >>>
Does anyone ever post in here just to say "Hi! I'm not having a problem
- everything's running just GREAT!"?
Nah, I didn't think so. <grovel> Volunteer sysops are the greatest, and
I appreciate the unpaid time you put into helping us poor slobs out.
</grovel>
I've set up a new container within eDirectory, and am trying to
configure RADIUS (3.28, March 6 2003 - I know, an old version... but
it's working great!) to allow users within that container to VPN in via
our Cisco VPN concentrators.
For my effort, Bordermanager's RADIUS screen tells me "Access rejected"
and "Unable to locate authentication rule".
In NWAdmin, I have done the following:
Gotten details on my new container and checked the "Enable Dial Access"
box in the "Dial Access Services"... uh, tab(?) and put the fully
qualified name (radius.ou.o) of my RADIUS service in the "Dial Access
System" field. Do I have to browse NDS to populate this field, or can I
just type it in?
Gotten details on [Root] -> Security -> Login Policy -> Rules and
modified my RADIUS service by adding my new container to the list.
Gotten details on my RADIUS service -> Username Resolution and added my
new context.
If memory serves, these are the three magic things I have to do for our
users to VPN in... but I still get the "Unable to locate authentication
rule" message.
Do I have to bounce my Bordermanager box for these changes to take effect?
Thanks for any help.
John -
Remote access VPN with ASA 5510 using DHCP server
Hi,
Can someone please share your knowledge to help me find why I am not able to receive an IP address on remote access VPN connection while I can get an IP address on local DHCP pool?
I am trying to setup remote access VPN with ASA 5510. It works with local dhcp pool but doesn't seem to work when I tried using an existing DHCP server. It is being tested in an internal network as follows:
ASA Version 8.2(5)
interface Ethernet0/1
nameif inside
security-level 100
ip address 10.6.0.12 255.255.254.0
ip local pool testpool 10.6.240.150-10.6.240.159 mask 255.255.248.0 !(worked with this)
route inside 0.0.0.0 0.0.0.0 10.6.0.1 1
crypto ipsec transform-set FirstSet esp-3des esp-md5-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map dyn1 1 set transform-set FirstSet
crypto map mymap 1 ipsec-isakmp dynamic dyn1
crypto map mymap interface inside
crypto isakmp enable inside
crypto isakmp policy 1
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 43200
vpn-addr-assign aaa
vpn-addr-assign dhcp
group-policy testgroup internal
group-policy testgroup attributes
dhcp-network-scope 10.6.192.1
ipsec-udp enable
ipsec-udp-port 10000
username testlay password *********** encrypted
tunnel-group testgroup type remote-access
tunnel-group testgroup general-attributes
default-group-policy testgroup
dhcp-server 10.6.20.3
tunnel-group testgroup ipsec-attributes
pre-shared-key *****
I got following output when I test connect to ASA with Cisco VPN client 5.0
Jan 16 15:39:21 [IKEv1]: IP = 10.15.200.108, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + SA (1) + KE (4) + NONCE (10) + ID (5) + VENDO
4024 bytesR copied in 3.41 0 secs (1341 by(tes/sec)13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 853
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing SA payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing ke payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing ISA_KE payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing nonce payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing ID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, Received xauth V6 VID
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, Received DPD VID
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, Received Fragmentation VID
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, IKE Peer included IKE fragmentation capability flags: Main Mode: True Aggressive Mode: False
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, Received NAT-Traversal ver 02 VID
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, processing VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: IP = 10.15.200.108, Received Cisco Unity client VID
Jan 16 15:39:21 [IKEv1]: IP = 10.15.200.108, Connection landed on tunnel_group testgroup
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, processing IKE SA payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, IKE SA Proposal # 1, Transform # 9 acceptable Matches global IKE entry # 1
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing ISAKMP SA payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing ke payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing nonce payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, Generating keys for Responder...
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing ID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing hash payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, Computing hash for ISAKMP
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing Cisco Unity VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing xauth V6 VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing dpd vid payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing NAT-Traversal VID ver 02 payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing NAT-Discovery payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, computing NAT Discovery hash
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing NAT-Discovery payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, computing NAT Discovery hash
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing Fragmentation VID + extended capabilities payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, Send Altiga/Cisco VPN3000/Cisco ASA GW VID
Jan 16 15:39:21 [IKEv1]: IP = 10.15.200.108, IKE_DECODE SENDING Message (msgid=0) with payloads : HDR + SA (1) + KE (4) + NONCE (10) + ID (5) + HASH (8) + VENDOR (13) + VENDOR (13) + VENDOR (13) + VENDOR (13) + NAT-D (130) + NAT-D (130) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 440
Jan 16 15:39:21 [IKEv1]: IP = 10.15.200.108, IKE_DECODE RECEIVED Message (msgid=0) with payloads : HDR + HASH (8) + NOTIFY (11) + NAT-D (130) + NAT-D (130) + VENDOR (13) + VENDOR (13) + NONE (0) total length : 168
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, processing hash payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, Computing hash for ISAKMP
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, processing notify payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, processing NAT-Discovery payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, computing NAT Discovery hash
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, processing NAT-Discovery payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, computing NAT Discovery hash
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, processing VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, Processing IOS/PIX Vendor ID payload (version: 1.0.0, capabilities: 00000408)
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, processing VID payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, Received Cisco Unity client VID
Jan 16 15:39:21 [IKEv1]: Group = testgroup, I
[OK]
kens-mgmt-012# P = 10.15.200.108, Automatic NAT Detection Status: Remote end is NOT behind a NAT device This end is NOT behind a NAT device
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing blank hash payload
Jan 16 15:39:21 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, constructing qm hash payload
Jan 16 15:39:21 [IKEv1]: IP = 10.15.200.108, IKE_DECODE SENDING Message (msgid=d4ca48e4) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 72
Jan 16 15:39:26 [IKEv1]: IP = 10.15.200.108, IKE_DECODE RECEIVED Message (msgid=d4ca48e4) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 87
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, process_attr(): Enter!
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, IP = 10.15.200.108, Processing MODE_CFG Reply attributes.
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKEGetUserAttributes: primary DNS = cleared
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKEGetUserAttributes: secondary DNS = cleared
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKEGetUserAttributes: primary WINS = cleared
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKEGetUserAttributes: secondary WINS = cleared
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKEGetUserAttributes: IP Compression = disabled
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKEGetUserAttributes: Split Tunneling Policy = Disabled
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKEGetUserAttributes: Browser Proxy Setting = no-modify
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKEGetUserAttributes: Browser Proxy Bypass Local = disable
Jan 16 15:39:26 [IKEv1]: Group = testgroup, Username = testlay, IP = 10.15.200.108, User (testlay) authenticated.
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, constructing blank hash payload
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, constructing qm hash payload
Jan 16 15:39:26 [IKEv1]: IP = 10.15.200.108, IKE_DECODE SENDING Message (msgid=6b1b471) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 64
Jan 16 15:39:26 [IKEv1]: IP = 10.15.200.108, IKE_DECODE RECEIVED Message (msgid=6b1b471) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 60
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, process_attr(): Enter!
Jan 16 15:39:26 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, Processing cfg ACK attributes
Jan 16 15:39:27 [IKEv1]: IP = 10.15.200.108, IKE_DECODE RECEIVED Message (msgid=49ae1bb8) with payloads : HDR + HASH (8) + ATTR (14) + NONE (0) total length : 182
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, process_attr(): Enter!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, Processing cfg Request attributes
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for IPV4 address!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for IPV4 net mask!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for DNS server address!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for WINS server address!
Jan 16 15:39:27 [IKEv1]: Group = testgroup, Username = testlay, IP = 10.15.200.108, Received unsupported transaction mode attribute: 5
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for Banner!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for Save PW setting!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for Default Domain Name!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for Split Tunnel List!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for Split DNS!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for PFS setting!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for Client Browser Proxy Setting!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for backup ip-sec peer list!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for Client Smartcard Removal Disconnect Setting!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for Application Version!
Jan 16 15:39:27 [IKEv1]: Group = testgroup, Username = testlay, IP = 10.15.200.108, Client Type: WinNT Client Application Version: 5.0.07.0440
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for FWTYPE!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for DHCP hostname for DDNS is: DEC20128!
Jan 16 15:39:27 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, MODE_CFG: Received request for UDP Port!
Jan 16 15:39:32 [IKEv1]: Group = testgroup, Username = testlay, IP = 10.15.200.108, Duplicate Phase 2 packet detected. No last packet to retransmit.
Jan 16 15:39:37 [IKEv1]: IP = 10.15.200.108, IKE_DECODE RECEIVED Message (msgid=b04e830f) with payloads : HDR + HASH (8) + NOTIFY (11) + NONE (0) total length : 84
Jan 16 15:39:37 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, processing hash payload
Jan 16 15:39:37 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, processing notify payload
Jan 16 15:39:37 [IKEv1]: Group = testgroup, Username = testlay, IP = 10.15.200.108, Duplicate Phase 2 packet detected. No last packet to retransmit.
Jan 16 15:39:39 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKE received response of type [] to a request from the IP address utility
Jan 16 15:39:39 [IKEv1]: Group = testgroup, Username = testlay, IP = 10.15.200.108, Cannot obtain an IP address for remote peer
Jan 16 15:39:39 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKE TM V6 FSM error history (struct &0xd8030048) <state>, <event>: TM_DONE, EV_ERROR-->TM_BLD_REPLY, EV_IP_FAIL-->TM_BLD_REPLY, NullEvent-->TM_BLD_REPLY, EV_GET_IP-->TM_BLD_REPLY, EV_NEED_IP-->TM_WAIT_REQ, EV_PROC_MSG-->TM_WAIT_REQ, EV_HASH_OK-->TM_WAIT_REQ, NullEvent
Jan 16 15:39:39 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKE AM Responder FSM error history (struct &0xd82b6740) <state>, <event>: AM_DONE, EV_ERROR-->AM_TM_INIT_MODECFG_V6H, EV_TM_FAIL-->AM_TM_INIT_MODECFG_V6H, NullEvent-->AM_TM_INIT_MODECFG, EV_WAIT-->AM_TM_INIT_XAUTH_V6H, EV_CHECK_QM_MSG-->AM_TM_INIT_XAUTH_V6H, EV_TM_XAUTH_OK-->AM_TM_INIT_XAUTH_V6H, NullEvent-->AM_TM_INIT_XAUTH_V6H, EV_ACTIVATE_NEW_SA
Jan 16 15:39:39 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, IKE SA AM:bd3a9a4b terminating: flags 0x0945c001, refcnt 0, tuncnt 0
Jan 16 15:39:39 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, sending delete/delete with reason message
Jan 16 15:39:39 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, constructing blank hash payload
Jan 16 15:39:39 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, constructing IKE delete payload
Jan 16 15:39:39 [IKEv1 DEBUG]: Group = testgroup, Username = testlay, IP = 10.15.200.108, constructing qm hash payload
Jan 16 15:39:39 [IKEv1]: IP = 10.15.200.108, IKE_DECODE SENDING Message (msgid=9de30522) with payloads : HDR + HASH (8) + DELETE (12) + NONE (0) total length : 80
Regards,
LayFor RADIUS you need a aaa-server-definition:
aaa-server NPS-RADIUS protocol radius
aaa-server NPS-RADIUS (inside) host 10.10.18.12
key *****
authentication-port 1812
accounting-port 1813
and tell your tunnel-group to ask that server:
tunnel-group VPN general-attributes
authentication-server-group NPS-RADIUS LOCAL
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni -
Apache Error Log mod_security: Access denied with code 400
Hi
I am seeing the Access denied with code 400 errors in the apache log's after applying CPU Patch updates below into a Dev/TEST environment
RDBMS Patches: 9032412 & 9352191 & post steps below:
@?/rdbms/admin/dbmsaqds.plb
@?/rdbms/admin/prvtaqds.plb
@?/rdbms/admin/prvtaqiu.plb
Java Fix > [ID 1082747.1]
E-Business Suite Patches & post steps below:
9323613 & 9506302
Compiled Forms PLL files using adadmin to solve the known problem below
ORA-04062: signature of package "APPS.FND_HELP" has been changed
ORA-04062: KEY-HELP trigger raised unhandled exception ORA-04062.
the error can be replicated by following the steps below:
Log in to Oracle Apps E-Business Suite (11.5.10.2) select Report Management Information Responsibility and then transaction reports. (Opens Oracle Discoverer 4i Viewer) > select either Period to date or Year to date and then select any department & and any period (date) and then apply parameters:
Error message in browser
This error (HTTP 400 Bad Request) means that Internet Explorer was able to connect to the web server, but the webpage could not be found because of a problem with the address.
For more information about HTTP errors, see Help.
Apache log shows:
error_log shows the following:
[Fri Jul 8 10:52:08 2011] [error] [client 10.180.225.5] mod_security: Access denied with code 400. Pattern match "!^([-_@|#!=A-Za-z0-9/ :.$/(/)]){0,255}([-_@|#!=A-Za-z0-9/ :.$]){0,255}$" at ARGS_NAMES. [hostname "loadbalancer.webdomain"] [uri "/discoverer4i/viewer"] [unique_id ThbTSAq0BRQAABrfK7M]
access_log shows the following:
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/shadow_bottom02_leading_ltr.gif HTTP/1.1" 200 861 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/seperator.gif HTTP/1.1" 200 42 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/arch_blue_bottom_ltr.gif HTTP/1.1" 200 984 0
10.180.225.5 - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/white.gif HTTP/1.1" 200 37 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/bar_blue_leading_edge_middle_ltr.gif HTTP/1.1" 200 111 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/bar_blue_trailing_edge_middle_ltr.gif HTTP/1.1" 200 129 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/shadow_bottom_leading_edge_ltr.gif HTTP/1.1" 200 862 0
IP ADDRESS - - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/btopshadow.gif HTTP/1.1" 200 44 0
IP ADDRESS- - [08/Jul/2011:10:51:39 +0100] "GET /disco4iv/html/images/bshadow.gif HTTP/1.1" 200 59 0
IP ADDRESS - - [08/Jul/2011:10:52:08 +0100] "POST /discoverer4i/viewer HTTP/1.1" 400 227 0
I have tried to follow a number of metalink notes but unable to resolve this issue, metalink notes looked at are:
976473.1
389558.1
1313128.1 Patch 10324904 applied
394587.1
389558.1 Patch 5107107 applied
1143882.1
376992.1 Patch 3950067 applied
Any ideas or suggestions most welcome
Thank you
Regards
Arfan
Edited by: user1717313 on 08-Jul-2011 04:59Hi JD
I have tried the steps i.e stop apps tier, run adconfig on apps tiers and then started services on apps tiers and can replicate the error
thanks
Arfan
Hi Helios
I checked note 1080465.1 Patch 9506302 has been applied & Recompile all Forms PLL files using adadmin.
I ran the sql feom the note, output below
SQL> select text from dba_source where name='FND_HELP' and line <3;
TEXT
package Fnd_Help AUTHID CURRENT_USER as
/* $Header: AFMLHLPS.pls 115.22 2009/10/12 12:56:58 nchiring ship $ */
package body FND_HELP as
/* $Header: AFMLHLPB.pls 115.115 2010/03/19 06:45:24 nchiring ship $ */
Thanks
Arfan
Edited by: user1717313 on 08-Jul-2011 05:04 -
How can I access Pandora with Apple TV?
How can I access Pandora with Apple TV?
let me know if u found a way to do this... appreciated..
-
How can I set up a guest access point with a Time Capsule and an Airport Extreme? I am using a Telus router with the Time Capsule used as a wireless access point (bridge mode). I don't want the guest access point to have access to my network.
The Guest Network function of the Time Capsule and AirPort Extreme cannot be enabled when the device is in Bridge Mode. Unfortunately, with another router...the Telus...upstream on your network, Bridge Mode is indicated as the correct setting for all other routers on the network.
If you can replace the Telus gateway with a simple modem (that performs no routing functions), you should be able to configure either the Time Capsule or the AirPort Extreme....whichever is connected to the modem....to provide a Guest Network. -
My old email that using register for apple ID cannot access/check any mail because that domain already deactivate.
So I changed my appleID and primary email and now I can not access iCloud with iOS7. ICloud shows my old appleID but I can't change it. How do I get iCloud to work with my updated ID?Hi ccharat,
Welcome to the Apple Support Communities! It sounds like you did a good job editing your Apple ID and primary email address, but you didn’t sign out of iCloud on your iOS device before hand. What you may need to do in this situation is go back to the Apple ID website and edit your Apple ID and primary email address back to the email address that is signed in with iCloud (there is no need to verify the account after editing it back to the old account, just changing it back is enough). Once your Apple ID is back to the original account, delete the iCloud account from the iOS device and be sure to keep all info on the device when prompted. After you delete the iCloud account, go back to the website and edit your Apple ID and primary email address back to the new address. Once it is back to the account you would like, you can sign into the iCloud on the iOS device with that new account and merge all of the data when prompted. Please use the following article as a reference.
iOS 7: If you're asked for the password to your previous Apple ID when signing out of iCloud
http://support.apple.com/kb/ts5223
Change your Apple ID temporarily
If signing out and back in to iMessage or FaceTime didn't help, try these steps:
Change your Apple ID to the Apple ID you used previously. You shouldn't need to verify the email address.
Go to Settings > iCloud. Complete these steps only if the Find My [Device] setting is turned on:
Scroll down and tap Delete Account, then tap Delete to confirm.
Tap “Keep on My [Device]” or “Delete from My [Device].” In either case, your data remains in iCloud and will be updated on your device when you sign in to iCloud again.
Enter the password for your previous Apple ID.
Change your Apple ID to the new email address that you want to use. You'll need to verify the email address.
Return to Settings > iCloud and sign in with your new Apple ID.
I hope this helps,
-Joe -
Hi, I would like to share with you issue that I’ve solved regarding mail-enabled PF that migrated from Exchange 2000/2003/2007 to 2010, I’ve searched & contacted my MVP leader – there’s no official KB regarding this issue right
now, so I’m posting here in order to share this among others.
Note: There’s article(s) that talked about PF replication from Exch2000/2003/2007 to 2010 – this is the same issue as well.
Symptoms
E-mail messages that been sent to mail-enabled public folder in Exchange Server 2010 environment rejected with the following NDR:
“#< #5.2.0 smtp;554 5.2.0 STOREDRV.Deliver.Exception:ObjectNotFoundException; Failed to process message due to a permanent exception with message The Active Directory user wasn’t found. ObjectNotFoundException: The Active Directory
user wasn’t found.> #SMTP#”
Sometimes Exchange Server 2010 is documented as well Event ID 1020 on the Event Viewer with this information:
“Log Name: Application
Source: MSExchange Store Driver
Event ID: 1020
Level: Error
Description:
The store driver couldn’t deliver the public folder replication message "Hierarchy ([email protected])" because the following error occurred: The Active Directory user wasn't found.”
Cause
In an environment where Microsoft Exchange Server 2000 or Microsoft Exchange Server 2003 previously existed, and all those servers have been removed, there is a chance that an Administrative Group (First Administrative Group or another custom Administrative
Group) remains with a Servers container, but no servers inside it.
During replication, when the Exchange 2010 Store Driver sees the empty Servers container in Active Directory, it's expecting a System Attendant object inside the container and when it is not found the error occurs.
Resolution
To work around the issue, delete the empty Servers container. This can't be done through Exchange System Manager. Use the ADSI Edit tool to remove it using the following steps:
Warning If you use the ADSI Edit snap-in, the LDP utility, or any other LDAP version 3 client, and you incorrectly modify the attributes of Active Directory objects, you can cause serious problems. These problems may require you to reinstall Microsoft Windows
2003 Server, Microsoft Windows Server 2008, Microsoft Exchange 2010 Server or both Windows and Exchange. Microsoft cannot guarantee that problems that occur if you incorrectly modify Active Directory object attributes can be solved. Modify these attributes
at your own risk.
1.
Start the ADSI Edit MMC Snap-in. Click Start, then
Run, and type adsiedit.msc, and then click OK.
2.
Connect & Expand the Configuration Container [YourServer.DNSDomainName.com], and then expand
CN=Configuration,DC=DNSDomainName,DC=com.
3.
Expand CN=Services, and then CN=Microsoft Exchange, and then expand
CN=YourOrganizationName.
4.
You will see an empty Administrative Group. Expand the
CN=YourAdministrativeGroupName.
5.
Expand CN=Servers.
6.
Verify there are no server objects listed under the
CN=Servers container.
7.
Right click on the empty CN=Servers container and choose
Delete.
8.
Verify the modification, and try to send again the E-mail to the mail-enabled public folder.
Applies to
Exchange Server 2010, Standard Edition
Exchange Server 2010, Enterprise Edition
Netanel Ben-Shushan, MCSA/E, MCTS, MCITP, Windows Expert-IT Pro MVP. IT Consultant & Trainer | Website (Hebrew): http://www.ben-shushan.net | IT Services: http://www.ben-shushan.net/services | Weblog (Hebrew): http://blogs.microsoft.co.il/blogs/netanelb
| E-mail: [email protected]Sounds like you are looking in the wrong Administrative Group container which is why you are seeing your Exchange 2010 servers in there.
When you install Exchange 2003 only you will see a container named by default as "CN=First Administrative Group" container. But this could be named anything if you changed the Organization Name on the installation when you installed the first
Exchange 2003 server into the domain/forest.
You will notice that when you install Exchange 2010 part of the AD setup is to create a new configuration container and is named by default "CN=First Administrative Group (FYDIBOHF23SPDLT)".
So it sounds like you are not looking in the right location within ADSIEdit.
You may find the following article also helpful for this issue which is the same resolution:
http://blogs.technet.com/b/sbs/archive/2012/05/17/empty-cn-servers-container-causing-issues-with-public-folders-on-small-business-server-2011.aspx
I recommend though that you ensure your Exchange 2003 servers are fully uninstalled or no longer present in your environment before you go deleting the Servers container though.. The following Microsoft article will help with this:
http://technet.microsoft.com/en-gb/library/gg576862(v=exchg.141).aspx -
For example access eBay with Firefox and launch a search on the word Frankenstein: you'll get something like 23,671 results (if you search in ''All categories''). Then quit the Firefox browser and load Microsoft Internet Explorer instead; access eBay again and repeat the very same search: this time you'll get 25,383 results. These are reral figures that I tried at 19:21 on March 20, 2014. Why does a search on eBay through Firefox report less hits than the very same search through Internet Explorer? Using Firefox rather than Microsoft Internet Explorer automatically means missing hits/results/items on eBay: that doesn't make sense but it does happen. Why is it so? Thank you, somebody, for shedding light on this problem.
Try this steps and try to load the same once again!!!
Hello,
Many site issues can be caused by corrupt cookies or cache. In order to try to fix these problems, the first step is to clear both cookies and the cache.
Note: ''This will temporarily log you out of all sites you're logged in to.''
To clear cache and cookies do the following:
#Go to Firefox > History > Clear recent history or (if no Firefox button is shown) go to Tools > Clear recent history.
#Under "Time range to clear", select "Everything".
#Now, click the arrow next to Details to toggle the Details list active.
#From the details list, check ''Cache'' and ''Cookies'' and uncheck everything else.
#Now click the ''Clear now'' button.
Further information can be found in the [[Clear your cache, history and other personal information in Firefox]] article.
Did this fix your problems? Please report back to us!
Thank you. -
I was using Icloud on my PC with Outlook 2010 and Windows 7 64bit. After I upgraded the icloud control panel to 3.0 my calendar will no longer load and open in outlook nor will it open on icloud if I access icloud with internet explorer. It works fine on icloud if I access it with Chrome. I can also access it through IE on another computer. Something is amiss on my system. Any thoughts?
Import the calendar and contacts in Outlook.com. For contacts, export from Outlook as csv and import into Outlook by choosing the Other option (https://people.live.com/import/other?biciid=ImportCatalog)
You'll need to save the calendar as an ics file to import it. Select the calendar folder, the File, Save as an save as an ics.
Diane Poremsky [MVP - Outlook]
Outlook & Exchange Solutions Center
Outlook Tips
Subscribe to Exchange Messaging Outlook weekly newsletter -
Itunes will not connect to the internet or access store with working internet connection. ive already tried updating to latest version and turning off windows firewall. running a nItunes will not connect to the internet or access store with working internet connection. ive already tried updating to latest version and turning off windows firewall. running a new dell, windows 7 ultimate, no virus or firewall programs installed.
This my sound too simple, but I just kept clikning on the arrow next to the selected music and it finally "Kicked" in.
I live in Europe ,So Be persistent and don't give up ! Aug. 2013 -
How do I restore my library from an i-pod? My home computer with my i-tunes library was recently destroyed in a fire. I have the entire library on a 160GB i-pod that I bought a few years back. How should I go about getting this content back to a computer so that I can access it with my other ipod/pad/touch/phone devices?
You can't transfer songs from iPod to computer using iTunes, except for songs you purchased from the iTunes Store (and you can re-download any previous purchase from the iTunes Store Purchased screen).
However, there are third-party methods and utilities that can transfer songs files from iPod to computer. If you do a Google search on something like "ipod transfer," you should get some links.
Once the song files are on your computer, drag the files (or the folder containing the files) to the iTunes window to add them to the iTunes library. -
I'm working from a boat in a harbor in which the ISP has deployed numerous access points around the periphery. All the access points share the same SSID and each is configured to use either channel 1, 6 or 11. From my location, there are over a dozen of these access points "visible" (based on the the output of WiFi Scanner) with a range of RSSI and S/N values that vary over time.
The ISP has told me that the quality of my connection should be "perfectly fine" for any access point with an RSSI value better than -75, but I know from experience that my connection quality is miserable (i.e. < 50Kbps download) for almost all of these, including those with RSSI values better than -75. There is at least one exception, however, which gives me on the order of 2Mbps download, which is "great" in this context.
I've tried using a more powerful USB antenna plugged into my MacBook Air (mid 2011), but as far as I can tell, it really doesn't make much difference. Neither does my location within the boat. The overriding factor seems to be which access point I happen to connect up to.
I should point out that the closest access points are about 75 yards away, with many of them being several hundred yards away or more. I'm guessing that even though the signal strength of some of the distant access points is causing them to get "chosen" some times, the results are unacceptable due to the distance.
I'm hoping that I can determine, through experimentation, which access point(s) provide(s) acceptable performance and then configure my Mac to limit my connection to those points through whatever mechanism I need to use (e.g. channel, MAC id, etc.).Establishing a wireless connection with a client computer is left to the access point for various reasons. One reason that your Mac may not connect to the strongest access point is that it may have reached a limit of the number of clients it can serve, leaving it unable to accept a connection with another. The limit may not be very large.
Suppose that happens, and your Mac establishes a connection with a more distant access point having a weaker signal. Then, suppose a client drops off the network. Doesn't this mean your Mac will switch to the stronger access point? Not necessarily. The throughput delivered to and from your Mac would have to drop below a threshold specified in the AP for it to drop the client, leaving your Mac free to connect with another one. The reason for this is to prevent rapid switching from one AP to another in an area in which two signals are of approximately equal quality. If that were to occur the frequent and repetitive handshaking between the two devices would slow throughput to zero.
In an environment in which several access points are broadcasting the same SSID, Apple provides no insight as to how it determines which access point to choose. This is the reason I suspect this "choice" is a function of the router, or access point. The connection originates with it, not the Mac.
Now, what would solve your dilemma would be to determine a way to control the access point with which your Mac connects, by specifying the access point's unique MAC address for example. In this happy circumstance, you could maintain an editable "whitelist" or "blacklist" of the harbor's access points and be able to choose which among them you prefer.
I do not believe OS X maintains such a record of MAC addresses though, only those of the routers it uses. If I am correct about that, such a solution is unlikely to exist. Don't let that discourage you from searching for one though... I would concentrate on something like "selecting access point by specific MAC address".
I did find this patent application though:
Roaming Network Stations Using A Mac Address Identifier To Select New Access Point
Perhaps it's a start -
How to use Oracle SQL Developer 4.0 to connect to Ms Access file with .accdb extension
Hi all,
I am using Oracle SQL Developer 4.0 and Ms Access 2013 under Windows 7 (64 bits)
After browsing and selecting MS Access file with accdb extention, I got an error message :[Microsoft] " Data source name not found and no default driver specified".
On Administravitve Tools=> ODBC Data Source Administrator=>Drivers I have File date
Name : Version
Microsoft Acess Driver (*.mdb, *accdb) 12.00.4518.1014 ACEODBC.DLL 26/10/2006
Would you please advise?
Thank you very much in advanceThat MS Access driver is 64-bit, I think. If SQL Developer, or JDK is 32-bit you need to use the 32-bit driver. You can see if you have a 32-bit driver installed using c:\windows\system32\odbcadm32.exe
-
Mod_security: Access denied with code 400 in R12
Hi ,
I'm getting "Page cannot be found" error during my below navigation in R12
-- Steps To Reproduce:
The issue can be reproduced at will with the following steps:
1. Responsibility: Oracle Configurator Developer
2. Create Rules, Apply and Save
3. Get error
EBS R12.1.2
DB 11.2.0.1
OS RHEL 5
following is extract from my Apache log
[Fri Nov 12 08:40:40 2010] [error] [client 192.168.26.144] mod_security: Access denied with code 400. Pattern match "!^([-_|#!=A-Za-z0-9/ :.$()]){0,255}$" at ARGS_NAMES. [hostname "indstqebs02.indalfab.local"] [uri "/OA_HTML/OA.jsp?Action=EditNode&stackLevel=2&page=/oracle/apps/cz/developer/model/rules/webui/RuleTmpPG&czWhichRule=XCP&czRuleId=2604&czParentRuleFolderId=1800&czModelId=1420&ObjectType=XCP&ReturnLinkURL=OA.jsp%3FOAFunc=CZDEVRULESTRUCTFUNC&selection=0_1_4_&_ti=210565512&retainAM=N&addBreadCrumb=RP&oapc=44&oas=qUuMo8fwvn7jpCTNnv0TYQ.."] [unique_id TNzveH8AAAEAAAHrA1w]Hi;
Did you check all? Those note are for R11 but as you can see Applies to: Information in this document applies to any platform. If the notes doestn mention any patch than i belive you can follow docs.
If those 12 docs dont help you than i suggest log a SR
By the way in your post:
1. Responsibility: Oracle Configurator Developer
2. Create Rules, Apply and Save
3. Get error
What you get error? What is exact error message? Maybe we can find solution by this error message? Did you also check application log file?
Regard
Helios
Maybe you are looking for
-
How to remove mobile number from apple account
want to remove my number from my account cos i changed my number and no longer want it on there
-
Burning the same project more than once
Hi guys I have a project saved on dvdsp4 and was wondering if there is any faster way of burning extra copies?yesterday I burned the first copy and it took about 2hours because it had to render the menu etc.. I saved the project and today I want to b
-
Hardware Information: iMac (20-inch, Mid 2007) iMac - model: iMac7,1 1 2 GHz Intel Core 2 Duo CPU: 2 cores 4 GB RAM Video Information: ATI,RadeonHD2400 - VRAM: 128 MB System Software: OS X 1
-
Navigation menubar not working in Safari
Amazed I can't figure it out on my own. The menu works in IE and FF, but not Safari. http://www.danielosterday.com Anyone? Thanks! Dan.
-
I want to select 'Songs of Life' by Neil Diamond and pay for the tune. I could not locate the karaoke version. Please help!