ACS 3.3 and windows 2k3 issue

Have an issue with installation of ACS 3.3 trial version on windows 2k3 server. When I go to setup an AAA client type of RADIUS (Cisco Aironet), with values entered for Hostname, IP address and Key, and submit changes, dialog comes back saying "RADIUS key value must not be blank".
Have implemented this on a windows 2000 server with no issues. Have tried install on 4 different 2003 servers all behave in this manner.
Anyone else seen this?

I had the same problem several months ago. The solution I found was to download and install the latest java on the server.

Similar Messages

  • Lion, Boot Camp and Windows 7 Issues

    Couple of questions regarding Lion, Boot Camp and Windows 7... I never had issues with Snow Leopard and setting up Windows 7 on my iMac (expcept the dreaded black screen after restart, bu got that fixed)
    Let me start off with my specs and then I will ask my questions:
    iMac 27"
    i7 Quad Core (1st gen)
    16GB Ram
    1TB HDD
    OS X Lion (Fresh Install - Not Upgrade)
    All updates for OS and iLife and other installed software:
    Adobe Creative Suite CS5
    MS Office 2011
    Boot Camp 4.0
    Window 7 Ultimate
    Ok... here are my questions.
    When I fixed my black screen issues after installing a fresh copy of Windows 7 - I had to install MacFUSE and Tuxera NTFS in order to delete the the stock ATI driver so the second rebot on the install of windows 7 would work and boot correctly. After rebotting into my mac side I now always get this message from Tuxera.
    What does this mean? Now in the finder when looking at the computer drives.. It does not show the BOOTCAMP partition...
    However, when I resart i can hold down the ALT key and get this menu:
    I know this might seem strange to ask, but why are the Macintosh HD and the Recovery HD text smoothed and the Windows text not? Being a design I see the difference and it makes me wonder why this is. (It is almost like the BSOD icon apple used forwhen connecting with shared PCs)... Anyways, I can boot into windows when clicking this drive.
    After getting to windows 7 it will not let me run updated. The OS is activated and I have even installed SP1 manually, but it always tells me that the Update service is not running. When in fact it is. I have checked it and it is set to start automatically. I have reset and shutdown my computer more than 10 times... I can't figure out what the issues are.
    Overview:
    Why do I get the Tuxera NTFS error?
    Why can I see the boot camp partion when manually selecting it form startup, but it does not show in OS X
    I can't get Windows to update? Any ideas?
    Thanks for any help you can provide.

    These various utilities like Tuxera are incompatible with Lion. Partly because MacFuse is incompatible. You need to remove them completely.
    As for the Windows partition you might consider using Boot Camp Assistant to remove it. Then make a new partition and install Windows. Remember to use the Windows formatter to format the Windows partition NTFS.

  • New hard drive and Windows 7 issues

    I bought a new 1 Tetra Samsung hard drive for my computer since 150GB was not enough. I did this because I need windows partitioned for school. After I installed the hard drive and inserted the Mac OS disk, it would not recognize the hard drive to install. Since then, I have read previous forums such as: https://discussions.apple.com/thread/3322843?start=0&tstart=0
    Now, the issue is: I went ahead and installed my Windows XP SP2 because I could not get Mac OS to install. I have also downloaded the Windows 7 Professional update from Microsoft and have a Operating Disk on its way in the mail. I am having some issues with sound and camera and probably others that I don't know about yet, like my graphics card and such. What should I do?
    1. Erase HD and install the Mac OS, because I do want this on my computer. Then download updates for Windows 7 bootcamp and reinstall Windows 7 when I get it in the mail.
    or,
    2. Is there a way to fix the driver issues that I am having without having to reinstall windows. I have not tried to partition yet and install mac.
    I think it would be best to:
    Install Mac OS
    Download updates
    Bootcamp and Install Windows 7
    What do you think and do you have any advice as how I should go about this. Oh, btw, living in a PC world and coming home to my Macbook Pro 3,1 and realizing that it is not as functional is kinda disappointing.
    So, I found this site for the sound: http://www.stuffedcow.net/macbook_audio
    And: http://www.cirrus.com/en/products/cs4207.html
    I am not sure how to go about installing a new driver. Do I download and save or do I run a certain .exe?
    I found this post and was reading, but I am not certain about the right driver for the sound. If I erase the hard drive and install mac. Then, bootcamp and install windows, will I loose my wifi driver? Windows 7 should have that update, but according to this post, it may not.
    https://discussions.apple.com/thread/2534313

    If I were in your shoes I would want to understand why I couldn't install OSX on the internal drive before going any further. Without getting past that hurdle you may or may not be successful in your aims, but you are outside mainstream intended ways of running Bootcamp.
    Just a couple of starters:-
    1. Is your internal hard drive (samsung) formatted with a GUID partition table and HFS+ file system? All done in Disk Utility, booted from the Install disk.
    2. The Apple Install disk (plus subsequent Apple Software Updates) has all the drivers Bootcamp needs, without having to find and download from elsewhere. I run Windows 7 64 bit on two Macs and have never had to go and find a driver. (Of course Windows does it automatically for me for other hardware). Sorry if this next point is insultingly obvious, but just to check that you know you can put the Apple Install Disk in while running Windows and Windows find the installer.
    You don't say anything what your MBP is or what version of OSX you are running. I am not fully up to date with the inplications of Lion and Bootcamp drivers as there is no install disk. I believe 2011 MBPs won't run XP.
    Your comment "Oh, btw, living in a PC world and coming home to my Macbook Pro 3,1 and realizing that it is not as functional is kinda disappointing" implies that you haven't had a Mac very long. Although Macs are easy to pick up and use, there is a LOT to learn about customisation and using it properly and getting the most out of them. I have a number of relatives who still use OSX "out of the box"....it's like driving a car in first gear, and complaining "this car doesn't go very fast". Not a perfect analogy as speed is not the issue here.
    Sorry if some of this post is missing the target...just take on board the bits that apply.

  • ACS 5.5 and Windows 2012 AD support

    Hi All,
    previously I had two AD domains based on 2008 and had machines in one domain and users in another domain
    and the condition statement "Was machine authenticated=True" worked fine when doing EAP-TLS machine then user
    authentication.
    I have now upgraded the machine's domain to 2012 and  machine authentication works fine and user authentication
    also works, but when you put the two together, and enable "Was machine authenticated=True" the ACS errors
    out when doing user authentication with the message "ACS unable to find previous successful machine authentication"
    even though machine authentication was successful. I have tried with with ACS being a member of both 2008 and 2012 domains at each stage.
    The clients are all windows 8.1
    Has anyone encountered this scenario before ?
    TIA

    I would like to share a good troubleshooting guide for ACS 5.X and later, Please have a look:
    http://www.cisco.com/c/en/us/support/docs/security/secure-access-control-system/113485-acs5x-tshoot.html

  • ACS 4.0 and Windows 7.

    Facing challanges in integrating ACS 4.0 with Windows 7. Please help.
    Is ACS 4.0 with Windows 7 compatibility?

    have a look here http://forums.macrumors.com/showthread.php?t=467704 for instructions/solution.
    Basically you have to make yourself a copy of your Windows disc using the files of that disc and a programm called oscdimg.exe plus a burning program.
    And it had to be done on a Windows PC or in virtualized Windows (using Parallels/Fusion/VirtualBox) on your Mac.
    Hope it helps
    Stefan

  • Adobe acrobat pro 9 and windows 8 issues

    Looking for help regarding adobe acrobat 9 and windows 8.  I am unable to scan will  not allow me to select devise (HP officejet pro 8500 wireless).  Also unable to scan from HP device to PDF using HP solution center.  Printing fine from other applications. Thank you.

    lorrainetexas wrote:
    Also unable to scan from HP device to PDF using HP solution center.
    This means that your scanner software or driver is not correctly installed.

  • Dreamweaver CS3 and Windows 8 Issues

    I have Dreamwever CS3 and Windows 8 and I keep getting errors that can only be resolved by closing down DW and losing the work I have processed so far. I happens mostly when I use extentions such as Webassaist Data Bridge. I have visited their forum but they advised me to checkout you trouble shooting service.
    Please advise
    tonytanner257

    Hi,
    If Dreamweaver is working fine without the extensions, I am not sure if we should be troubleshooting Dreamweaver. Just to be sure, Windows 8 is not a supported version for Dreamweaver CS3. It could possibly work, but wouldn't have been tested on Windows 8 as Adobe supports only the previous two versions of any software.
    This is my best answer. You could wait for other experts for their opinion.
    Thanks,
    Preran

  • Cisco ACS 4.2 and Windows 2008 R2 CA

    Has anyone been successfully in getting a cert off of a 2008 R2 CA and imported correct in to ACS 4.2?  I've had and have seen other have the problem with creating a web server certificate from R2 (1024 bit) and putting it in ACS 4.2 only to have HTTPS/SSL no longer work correctly.  I haven't even tested the intended purpose of the cert (EAP-TLS) yet, so who knows if that works.  I've also seen through searching where some one was able to take a 2003 CA web server template and put it into R2 and it work, but I know longer have 2003 available?  Any ideas?
    Thanks,
    Raun

    I have seen issues where the template on the R2 boxes are using elliptical curve cryptography, basically if the template has a '#" charcter in it is what I think causes this process to be used. Try to use a template that doesnt have this in the front and then try to generate a cert against the template you created.
    Here is a snip of the guide that I am forwarding you:
    Determining Whether to Implement Cryptography Next Generation Algorithms
    For Windows Server 2008–based version 3 certificate  templates, the option exists to configure advanced cryptographic  algorithms such as elliptic curve cryptography (ECC). Before configuring  these settings, ensure that the operating systems and applications  deployed in your environment can support these cryptographic algorithms.
    http://technet.microsoft.com/en-us/library/cc731705%28v=ws.10%29.aspx
    Screenshots in another article:
    http://technet.microsoft.com/en-us/library/cc725621%28v=ws.10%29.aspx
    Thanks,
    Tarik Admani

  • ACS 5.3 and Windows AD account lockout

    Currently on 5.3.0.40.2 when a invalid password is attempted via TACACS or RADIUS to the AD identity store is locks the account out on the first failed attempt. The AD policy is lockout after three attempts. Is there a way to fix this issue so the account is not locked out with only one failed attempt? I see options for local password policys in ACS but nothing for the identity store. For what its worth this happened also with ACS 4.X deployment before we moved to ACS 5.3.
    Just wanted to see if this is the expected behavior or if I should open a TAC case to see what is causing this.
    Thanks.

    Hi;
    Well, we got it working. Not sure of the exact fix, but allow me to ramble, perhaps it will help someone else.
    We think that a combinationof factors caused the problem. First, we had clock drift, and that resulted in clock skew messages in the logs like these:
    Sep 20 18:06:03 ecb-acs1 adclient[8322]: INFO  base.adagent start: Problem connecting to domain controller (KDC refused skey: Clock skew too great), will try again later.
    and
    ecb-acs1 adclient[1163]: WARN  base.bind.cache LDAP fetch CN=bubba,OU=staff,OU=edcenter,OU=edcenterarea,OU=episd,DC=episd,DC=org threw unexpected exception: SASL bind to ldap/[email protected] - GSSAPI Mechanism with Kerberos error ": Clock skew too great"
    Somehow the ACS lost the ntp config, very disturbing, because I know that one of the first things I did was setup NTP. So I re-did the ntp config, confirmed the time was accurate. Still failed. Then, because I was annoyed by the log entries comning out in UTC, I did a clock timezone to set it to local. That made the logs come out in local time, but might have caused other problems (I saw another forum entry for that) so I set it back to UTC.
    This begs the question - how to leave the timezone at UTC but fix the timestamps for the logs? This is easy on Cisco switches.
    Various reboots of the ACS after deleting the object in AD did not fix the problem. During these reboots I continued to use the original userid and password to authenticate. At all times, the "test connection" button showed that the credentials were OK.
    Because we had recently added our first Win2008 domain controller to our world (all ther other DCs are Win2k3), we started worrying about this:
    http://support.microsoft.com/kb/978055/en-us
    But, after some checking, it seems as if we already had the fix applied.
    Next, we created a dedicated user in AD for the ACS to use when authenticating. Deleted the ACS object, restarted the ACS, applied those new credentials. Still broken.
    Our AD admin looked in various logs and found some things, here is his summary:
    ----------- from Danny --------
    Checked the domain controller log under system.  Found the following:
    While processing an AS request for target service krbtgt, the account ecb-acs1$ did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 1). The requested etypes : 17. The accounts available etypes : 23  -133  -128  3  1. Changing or resetting the password of ecb-acs1$ will generate a proper key.
    and
    While processing an AS request for target service krbtgt, the account stcrye did not have a suitable key for generating a Kerberos ticket (the missing key has an ID of 2). The requested etypes : 18. The accounts available etypes : 23  -133  -128  3  1. Changing or resetting the password of stcrye will generate a proper key.
    This may be related to either clock scew between acs and the domain or introducing server 2008 domain controllers into an existing server 2003 domain. 
    On a desperate hunch, after yet again deleting the ACS object in AD and reloading the ACS, I used the new dedicated ACS user account, but gave it a wrong password. Hit save, watched it fail. Then I put in the correct password, hit save, and it worked! Finall we have re-joined and are connected to the domain.
    BUT ... I have now lost all confidence in ACS 5.3 . We are in the middle of a major rollout of WiFi clients using 802.1x authentitcation, replacing our previous pre-shared WPA setup. We are talking > 20,000 WiFi clients. If ACS <--> AD is not rock-solid, I need to try something else. Should we consider using LDAPS instead?
    Steve

  • VPN Client and Windows 7 Issue

    Using VPN Client, V5.0.07.0440 a Dell Vostro W7 Professional system, 64 bit. The client installs and runs the same way it has on at least 20 other systems without issue. When I try to remote into the network, I get a "can not connect" error attempting to connect to any system or server. I placed a known good laptop using XP on the same internet line, it connects without issue. The remote access (mstsc.exe) verson is 6.1.7601.17514 there is no Admin switch in the shortcut. This is the first time anything like this has happened, numerous W7 32 and 64 bit and XP systems. Any help greatly appreciated.
    Thanks
    It's like the VPN connects to the network, but the remote access is not using the same connection. I get the same results whether the VPN Client is loaded or not.
    Sure could use some help on this.

    The system that I am trying to connect with is a Dell Vostro desktop, W7 64bit Pro. I am attempting to connect to a Windows 2003 domain thru a PIX 501 firewall. The desktop system uses an onboard Ethernet adaptor connected to the Internet thru Charter. I do not have ready access to the computer as it's my employers home system. The frustrating thing is, I have installed and set this up on at least 30 other systems and all of them worked flawlessly. Of course, this one would be the problem as it belongs to my boss.
    Thanks for responding, I plan on picking up the unit so I can devote some real time to fixing it.
    Thanks again

  • T420 - Intel Wireless and Windows XP issue?

    Has anyone else seen any issues with using the Intel Wireless Advanced-N 6205 card on Windows XP? I have a 4178-6UU and it will work for a while, then just stop receiving packets, but will not disconnect even though it doesn't work and I am no longer able to ping it.
    I have the latest driver available from Intel and Lenovo (14.0.1.2), and also the latest BIOS (1.22). Unfortunately, I have to have XP/SP3 on these T420's. Any suggestions or is anyone else seeing any issues?

    Have you solved this issue? If so how? I think I may have the same issue. I don't understand all terminology in the post such as "ping", so I can't be certain if it is exactly the same issue. Also I use Windows 7 Pro. However in certain locations but not all, my wireless capabilities are horrible. The same locations that worked just fine with my Dell E6400, that I recently switched from are not working on my lenovo T420 4178-6UU. The internet access is constantly loss and I have to reconnect over and over again throughout the work day. HELP!!!! (SN: This keyboard is the best I have ever worked on, I don't think I will ever buy a different kind of PC, that is if I can resolve this wireless issue).

  • Leopard Disc and Windows 7 issues

    So I just switched my Boot camp MBP from Windows XP to Windows 7. I didn't bother installing the drivers off of the Leopard until I realized I have no audio. I inserted the install disc and recieved a warning from windows stating that there are known issues with the boot camp drivers. Does anyone have any insight on this? Can I go ahead and install the drivers anyway? All of my XP apps work fabulously by the way.

    You can go ahead, or you can find audio drivers to independently install (Device Manager, Update Driver)

  • 10.8.1 Server and windows smb issues

    Ever since upgrading to 10.8.1 server my windows clients now have issues copying to the share point on the server. "Network error, there is a problem accessing \\SERVER\WORK"
    It's only with large file transfers 3GB and above. It also randomly shows the same warning when they are saving projects to the server occasionally and they have to manully reconnect.
    Latest windows 7 64bit pro on all clients and latest mac os X on server.
    The share point is an attached thunderbolt raid and has all permissions switched off, and is configured to RAID 0. This is backed up hourly by another drive.
    Is there anyway of rolling back to lion? I no longer have a lion back up on my time machine.
    Anyone else having these issues?

    Apple's SMB implentation is weak and buggy.  I feel like I'm back in 10.3 trying to talk to Windows servers.  Those were horrible days. 
    To Fix.. go to your Mac and check to make sure that it has the correct WINS settings (network, advanced, WINS).  Your server has to be on the same workgroup (domain) as your windows clients.  For some reason, the setting does not stick on your Mac and that setting gets lost.  And that is the bug...
    To fix this (second part of your fix).. go ahead and turn off file sharing.  Then add your settings under WINS as stated above, then turn sharing back on and your networking from windows to mac will start to work fine. 
    Fun bugs... please call Apple about this, so they can follow up. My case number is 357016704

  • MSI P55-GD65 and windows xp issues

    Hello,
    Windows XP SP1 fails to detect Dual Lans.
    Windows XP SP2 manages to detect Dual Lans but takes 2 - 3 minutes before it can initialize them. Till than, I can't use internet.
    Also, I could not disable IEEE 1334 connection on Windows XP SP2.
    I experienced these issues without anti-virus.
    What are the causes of these issues?

    Yes I did. It did not helped though.
    However, I noticed that my FDD was not properly connected. And I fixed it. Don't know if this issue was somehow related.
    I now have installed Vista Ultimate and things work perfect. No delays or anything on LAN connectivity.
    Though, if I experience any issues than I would let you know.
    Thanks.

  • MSI-KN8 neo4 Plat and windows booting issues...please help!!!

    let me start with my system specs:
    msi- 7125 plat KN8 (1B0 bios)
    amd 64 3500 venice
    1 GB (2 x 512 MB) corsiar valueselect (set at 2.5V)
    antec neopower 480W
    gigabyte nvidia 6600gt
    (2)  80 GB maxtor sata150
    250 GB maxtor sata150
    zalman 7700 series cpu fan
    sony dvd burner.
    Thanx in advance for any and all help i am, hopefully about to receive.  i read quite a few of previous threads and didnt find one with my issue.
    HERE GOES...
    this entire system was running with a different brand mobo (just upgraded to this msi-7125) and was running great!!
    however when i installed windows xp media center edition 2005, things where working great.  that is until i installed the nforce system drivers from the disk that MSI provided me. once i installed the ethernet driver,ide-sw driver, network controller the ask me for a reboot after install was done,  when the system restarted i got all the way the windows xp splash screen or loading screen.  at that point windows stops loading stays on the loading screen for about 10 minutes, then the computer shuts off.
    i have tried running memtest and had no errors, im positive that my psu is capable of handling my components.
    i'm really stuck on this one, any help would great thanx again!!!
    Sam

    You should be able to get into Windows through safe mode. From here uninstall the drivers and restart. You should hopefully be able to get into Windows normally now. Get hold of the latest drivers from the Nvidia web site and try them.
    Also check both Ethernet controllers are enabled in the BIOS.

Maybe you are looking for