ACS 3.3 Windows group mapping problem

Hi,
I?m running Cisco Secure ACS v.3.3 at Win 2000 server(sp4). ACS server is member of AD domain X. Additional there are two AD forests, so: domains X and Y are in the same forest, but domain Z is member of the second one. Trust relationships between all domains are established (AD Domain Controllers are w2k3 srv). I need to add Windows AD group mapping and that's no problem in domains X & Y. But when I'm trying to map some groups from Z domain, the "Failed to enumerate Windows groups. If you are using Active Directory consult the installation guide for information." error appears. In ACS documentation I have found information "ACS can only perform group mapping by using the local and global groups to which a user belongs in the domain that authenticated the user. You cannot use group membership in domains that the authenticated domain trusts that is for ACS group mapping. This restriction is not removed by adding a remote group to a group that is local to the domain providing the authentication." As I understand it's impossible to add mapping from the second forest? Am I right? If problem is solved in newer versions of ACS (4.0, 4.1)? Are there any fixes that can help?
Thanks,
Peter

You need to set up proxy.
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/ed80211.mspx
Look for "Cross-Forest Authentication" in above link. And you get the Idea of what I mean. Though in above link its depicted with IAS server, but same is possible with ACS, as both can act as Radius server.
There is a known bug, CSCsi04187
PEAP MS-CHAP machine authentication will fail with machine not found if host/ format is sent from client. This only happens if the machine is autenticating to a domain forest that the ACS is not a member of.
Conditions:
The Machine authenticating to ACS is in a different domain forest then the ACS and the supplicant is using host/ as the machine name format. You also have to be using PEAP MS-CHAPv2.
Workaround:
If the supplicant has the option you can send the macine name in hos/ format.
Many supplicants do not have this option.
It is to be fixed for ACS 4.2 release.
Regards,
~JG

Similar Messages

User in a windows group - mapping to acs group appears not be working

I have a user in a windows group, this windows group is mapped to an ACS group but when the user logs in it appears as default group in ACS.
Any suggestion?

Hello, I recently implemented this very thing, actually integrated it with Authentication Proxy. Here are some settings to check:
1. External User Databases - Database Configuration - Windows Database - Configure
Make sure your domain is listed on moved to the Domain List section
2. External User Databases - Database Group Mappings - Windows Database - - Add Manual Mapping
Make sure you have the right AD group mapped to the internal ACS group, you can even set users* if you want to include all users.
3. External User Databses - Unknown User Policy
Check the "Check the following external user databases" radio dial and move Windows Database to Selected Databases
Check âThe database in which the user profile is heldâ radio dial in the Configure Enable Password Behaviour section
Hope that helps!

Authenticate users by Windows group using ACS

Currently we are using Windows IAS/RADIUS to authenticate users onto out wireless network and it is set to allow users in a certain Windows group to connect.
Is there a way to do this with ACS?
Please note that we are using ACS Solution Engine, not ACS for Windows.
Thanks.

Use Remote Agent for Windows user authentication feature or configure Windows AD as the LDAP on ACS SE.
then configure group mapping, and put the restrictions accordingly.
Regards,
Prem
Please rate if it helps!

ACS Group mapping and restrictions

hi,
I would appreciate to receive some configuration steps on ACS to fulfill the following requirement and hope you can help me.
ACS Groups
Netadmin - need telnet/ssh/vpn/wireless
wireless - only wireless authentication
vpn - only vpn authenticaiton
I need to map the above ACS groups to one/or many AD groups and restric access as stated above.
Also please note that one user can be belongs to all three groups in ACS/AD.
thanks in advance.

In ACS user can only belong to one group. But in AD we can have one user a part of multiple group.
In this scenario, it is very important to understand how ACS group mapping works.
Lets say that you have three different groups on AD for NetworkAdmin, RouterAdmin, Wireless. Go to external user database ==Database Group Mappings==Windows NT/2000==select the domain to which you are authenticating==Add mapping.
Select the AD group NetworkAdmin and map it to ciscosecure group 1
select the AD group RouterAdmin and map it to ciscosecure group 2
select the AD group Wireless and map it to ciscosecure group 3
Group mappings work in the order in which they are defined, first configured mapping is looked upon first then second, third and so on. If a user is in AD group NetworkAdmin and that is mapped to ACS group 1 and it is first configured mapping it will be looked for FIRST (If a user exists in NetworkAdmin group it will always be mapped to ciscosecure group 1 and NO further Mappings for this user is checked and user is authenticated or rejected)
Scenario: if you have a user called cisco, in NetworkAdmin group, cisco1 in RouterAdmin group, and cisco2 in Wireless. They will always be dynamically mapped to ACS group 1, 2 and 3 respectively as per above mappings.
You can check the mappings on the passed authentications for users as to what group are they getting mapped to.
SCENARIO:
Now if you want a NetworkAdmin user to authenticate to NetworkAdmin devices and not wireless or RouterAdmin devices you would need to apply NARs to group 1 because NetworkAdmin users are connecting to that group. Which you will permit Access on group basis to a particular NetworkAdmin NDG or individual NetworkAdmin NAS device.
NOTE:
If you are applying NARs for Wireless or VPN devices.. you would need to configure both IP based AND CLI/DNIS based together because NARs were originally designed for cisco IOS for
routers and switches.
IMPORTANT: If a user successfully authenticates to AD database once, its username is cached on the ACS database (NOT password) the only way to remove the previously cached
username is to go to usersetup find that user and delete it manually.
ACS will not support the following configuration:
*An active directory user that is a member of 3 AD groups (group A, B and C) *Those 3 groups are mapped within ACS as follows Group1->A,Group2->B and Group3->C.
*The user is in all 3 groups however he will always be authenticated by group 1 because that is the first group he appears in, even if there is a NAR configured assigning specific AAA clients to the group.
However there if your mappings are in below order...
NT Groups ACS groups
A,B,C =============> Group 1
A =============> Group 2
B =============> Group 3
C =============> Group 4.
You can create a DIFFERENT rule for the users in A,B,C by configuring the NARs in group1.
This rule WILL apply for the use ONLY if he is present in ALL three groups (A,B and C).
You can create a rule for users in group A (Group 2)
You can create a rule for users in group B (Group 3)
You can create a rule for users in group C (Group 4)
Regards,
~JG
Do rate helpful posts

Move group mapping ACS 3.3 or 4.0

Hi,
is there some possibility to move some group mapping UP/DOWN in list of mapping? When i create some mapping it's at the end of list but i need to move this rule to another position in list becouse there is sequential system for matching rules..

In ACS 3.3(11):
External User Database...Database Group Mappings...Pick Database...Pick Domain(If Windows) or Pick Tree(if NDS)...
This should bring you to your group listings...click Order Mappings then you can move your groups up or down.

ACS 5.3 Group Mapping based on AD group membership

Hi,
I am configuring a new ACS 5.3 system. Part of the rules is that I want to match the users specific AD group membership, and match appropriatly to an identity group.
What i'm trying to do is say that if the user is a member of the AD Group (G-CRP-SEC-ENG) then associate them with the Identity Group SEC-ENG. The under the access service, authorization portion, i assign shell profiles and command sets based on Identity Group.
It seems that the ACS server will not match the AD Group for the user, and it will match the Default of teh Group Mapping portion of the policy every time.
I tried several configuration choices from : AD1:ExternalGroups contains any <string showing in AD>, AD1:memberOf <group>.
Is there something special i need to do in the Group Mapping Policy to get it to match and active directory group and result in assigning the host to an Identity Group?
Thank you,
Sami

Ok, my case is like this.
I use ACS 5.3 for VPN authentication, using AD and an external RSA for token authentication (2 factor authentication)
I didn't add all the VPN users in the ACS, because it will be troublesome, the users authentication will be managed by AD and RSA server.
In some cases where we need to restrict a group of user to only access certain resources, downloadable ACL is used.
Following the Cisco docs, i manage to get downloadable ACL works when the authorization profile matching criteria is username, but when i change the matching criteria to Identity group, the downloadable ACL won't work.
I have a case with Cisco engineer now and still in the middle to sort things out.
The advice from the Cisco engineer is to have the Access Service set to Internal User instead of RSA server, but that will require us(the admin) to import all the VPN users into the ACS database.
Wondering whether there is a fix for this.
Thanks.

Dynamic User Group Role for ASA 8 ACS 4 External Windows DB

1. I've successfully got a Win2003 AD user to authenticate to the ASA via an ACS but the default group settings the dynamic user becomes part of don't get transfered to the user. How do I get the user to adopt the group settings?
2. ASDM recommends nabling authentication for admin console sessions so you don't ssh into a box then have to login as the enable password which isn't logged. When I check the box for this feature I can ssh to the ASA but my password is denied ASA. How do I keep the user credentials all the way to the privilege exec mode?
3. Back in the day I could configure the ACS shell, privilege 15, custom attributes cisco-av-pair "priv-lvl-15" to get a user to jump directly to privilege exec mode. This doesn't work now. Is there a different way to do this on ACS v 4?
Thanks in advance,
Matt

Try this:
aaa authentication enable console
aaa authorization command
on ACS go to the user or group that the user is in and go to enable options and click on "Max Privilege for any AAA client" and set it to "15". Then go to the "tacacs+" section on click on "Shell(exec)" and click on "Privilege leve" and enter 15. Then go to the "Shell command authorization set" and set the default to permit any commands not listed. This will get the user into privilege mode. In ASA/Pix it requires command authorization and authentication for enable console. On IOS it requires that you use aaa authentication exec and then the aaa authorization exec/command. This will allow the user to go straight into privilege mode instead of user mode.

Mapping problem with compressed key update record

Hi, could you please advise?
I'm getting the following problem:
About a week ago replicat abened with "Error in mapping" error. I found in discard file some record looking like:
filed1 = NULL
field2 =
field3 =
field4 =
field5 =
datefield = -04-09 00:00:00
field6 =
field8 =
field9 = NULL
field10 =
Where filed9 = @GETENV("GGHEADER", "COMMITTIMESTAM"), field10 = = @GETENV("GGHEADER", "COMMITTIMESTAM"), others are table fields mapped by USEDEFAULTS
So I got Mapping problem with compressed key update record at 2012-06-01 15:44
I guess I need to mention that extract failed in 5 minuts before it with: VAM function VAMRead returned unexpected result: error 600 - VAM Client Report <[CFileInfo::Read] Timeout expired after 10 retries with 1000 ms delay, waiting to read transaction log or backup files. To increase the number of retries, use SETENV (GGS_CacheRetryCount = n) in Extract parameter file. To control retry delay time, use SETENV (GGS_CacheRetryDelay = n). handle: 0000000000000398 ReadFile GetLastError:997 Wait GetLastError:997>.
I don't know if it has ther same source as data corruption, could you tell me if it is?
Well, I created new extract, starting 2012-06-01 15:30 to check if there was something with extract at the time, but got the same error.
If I run extract beging at 15:52 it starts and works.
But well, I got another one today. Data didn't look that bad, but yet one column came with null value:( And I'm using it as a key column, so I got Mapping problem with compressed key update record again:(
I'm replicating from SQL Server 2008 to Oracle 11g.
I'm actually using NOCOMPRESSUPDATES in Extract.
CDC is enabled for all tables replicated. The only thing is that it is enabled not by ADD TRANDATA command, but by SQL Server sys.sp_cdc_enable_table, does it matter?
Could you please advise why does it happen?

Well, the problem begins somewhere in extract or before extract, may be in transaction log, I don't know:(
Here are extract parameters:
EXTRACT ETCHECK
TRANLOGOPTIONS MANAGESECONDARYTRUNCATIONPOINT
SOURCEDB TEST, USERID **, PASSWORD *****
exttrail ./dirdat/ec
NOCOMPRESSUPDATES
NOCOMPRESSDELETES
TABLE tst.table1, COLS (field1, field2, field3, field4, field5, field6, field7, field8 );
TABLE tst.table2, COLS (field1, field2, field3, field4 );
Data pump:
EXTRACT DTCHECK
SOURCEDB TEST, USERID **, PASSWORD *****
RMTHOST ***, MGRPORT 7809
RMTTRAIL ./dirdat/dc
TABLE tst.table1;
TABLE tst.table2;
Replicat:
REPLICAT rtcheck
USERID tst, PASSWORD ***
DISCARDFILE ./dirrpt/rtcheck.txt, PURGE
SOURCEDEFS ./dirdef/sourcei.def
HANDLECOLLISIONS
UPDATEDELETES
MAP tst.table1, t.table1, COLMAP (USEDEFAULTS , filed9 = @GETENV("GGHEADER", "COMMITTIMESTAMP"), filed10= @CASE(@GETENV("GGHEADER", "OPTYPE"), "SQL COMPUPDATE", "U", "PK UPDATE", "U",@GETENV("GGHEADER", "OPTYPE")) ), KEYCOLS (field3);
MAP dbo.TPROCPERIODCONFIRMSTAV, TARGET R_019_000001.TPROCPERIODCONFIRMSTAV, COLMAP (USEDEFAULTS , field5 = @GETENV("GGHEADER", "COMMITTIMESTAMP"), filed6= @CASE(@GETENV("GGHEADER", "OPTYPE"), "SQL COMPUPDATE", "U", "PK UPDATE", "U",@GETENV("GGHEADER", "OPTYPE")) ), KEYCOLS (filed1, field2, field3);
Rpt file for replicat:
Oracle GoldenGate Delivery for Oracle
Version 11.1.1.1 OGGCORE_11.1.1_PLATFORMS_110421.2040
Windows x64 (optimized), Oracle 11g on Apr 22 2011 00:34:07
Copyright (C) 1995, 2011, Oracle and/or its affiliates. All rights reserved.
Starting at 2012-06-05 12:49:38
Operating System Version:
Microsoft Windows Server 2008 R2 , on x64
Version 6.1 (Build 7601: Service Pack 1)
Process id: 2264
Description:
** Running with the following parameters **
REPLICAT rtcheck
USERID tst, PASSWORD ***
DISCARDFILE ./dirrpt/rtcheck.txt, PURGE
SOURCEDEFS ./dirdef/sourcei.def
HANDLECOLLISIONS
UPDATEDELETES
MAP tst.table1, t.table1, COLMAP (USEDEFAULTS , filed9 = @GETENV("GGHEADER", "COMMITTIMESTAMP"), filed10= @CASE(@GETENV("GGHEADER", "OPTYPE"), "SQL COMPUPDATE", "U", "PK UPDATE", "U",@GETENV("GGHEADER", "OPTYPE")) ), KEYCOLS (field3);
MAP dbo.TPROCPERIODCONFIRMSTAV, TARGET R_019_000001.TPROCPERIODCONFIRMSTAV, COLMAP (USEDEFAULTS , field5 = @GETENV("GGHEADER", "COMMITTIMESTAMP"), filed6= @CASE(@GETENV("GGHEADER", "OPTYPE"), "SQL COMPUPDATE", "U", "PK UPDATE", "U",@GETENV("GGHEADER", "OPTYPE")) ), KEYCOLS (filed1, field2, field3);
CACHEMGR virtual memory values (may have been adjusted)
CACHEBUFFERSIZE: 64K
CACHESIZE: 512M
CACHEBUFFERSIZE (soft max): 4M
CACHEPAGEOUTSIZE (normal): 4M
PROCESS VM AVAIL FROM OS (min): 1G
CACHESIZEMAX (strict force to disk): 881M
Database Version:
Oracle Database 11g Enterprise Edition Release 11.2.0.1.0 - 64bit Production
PL/SQL Release 11.2.0.1.0 - Production
CORE 11.2.0.1.0 Production
TNS for 64-bit Windows: Version 11.2.0.1.0 - Production
NLSRTL Version 11.2.0.1.0 - Production
Database Language and Character Set:
NLS_LANG = "AMERICAN_AMERICA.CL8MSWIN1251"
NLS_LANGUAGE = "AMERICAN"
NLS_TERRITORY = "AMERICA"
NLS_CHARACTERSET = "CL8MSWIN1251"
For further information on character set settings, please refer to user manual.
** Run Time Messages **
Opened trail file ./dirdat/dc000000 at 2012-06-05 12:49:39
2012-06-05 12:58:14 INFO OGG-01020 Processed extract process RESTART_ABEND record at seq 0, rba 925 (aborted 0 records).
MAP resolved (entry tst.table1):
MAP tst.table1, t.table1, COLMAP (USEDEFAULTS , filed9 = @GETENV("GGHEADER", "COMMITTIMESTAMP"), filed10= @CASE(@GETENV("GGHEADER", "OPTYPE"), "SQL COMPUPDATE", "U", "PK UPDATE", "U",@GETENV("GGHEADER", "OPTYPE")) ), KEYCOLS (field3);
2012-06-05 12:58:14 WARNING OGG-00869 No unique key is defined for table table1. All viable columns will be used to represent the key, but may not guarantee uniqueness. KEYCOLS may be used to define the key.
Using the following default columns with matching names:
field1=field1, field2=field2, field3=field3, field4=field4, field5=field5, field6=field6, field7=field7, field8=field8
Using the following key columns for target table R_019_000001.TCALCULATE: field3.
2012-06-05 12:58:14 WARNING OGG-01431 Aborted grouped transaction on 'tst.table1', Mapping error.
2012-06-05 12:58:14 WARNING OGG-01003 Repositioning to rba 987 in seqno 0.
2012-06-05 12:58:14 WARNING OGG-01151 Error mapping from tst.table1 to tst.table1.
2012-06-05 12:58:14 WARNING OGG-01003 Repositioning to rba 987 in seqno 0.
Source Context :
SourceModule : [er.main]
SourceID : [er/rep.c]
SourceFunction : [take_rep_err_action]
SourceLine : [16064]
ThreadBacktrace : [8] elements
: [C:\App\OGG\replicat.exe(ERCALLBACK+0x143034) [0x00000001402192B4]]
: [C:\App\OGG\replicat.exe(ERCALLBACK+0x11dd44) [0x00000001401F3FC4]]
: [C:\App\OGG\replicat.exe(<RCALLBACK+0x11dd44) [0x000000014009F102]]
: [C:\App\OGG\replicat.exe(<RCALLBACK+0x11dd44) [0x00000001400B29CC]]
: [C:\App\OGG\replicat.exe(<RCALLBACK+0x11dd44) [0x00000001400B8887]]
: [C:\App\OGG\replicat.exe(releaseCProcessManagerInstance+0x25250) [0x000000014028F200]]
: [C:\Windows\system32\kernel32.dll(BaseThreadInitThunk+0xd) [0x000000007720652D]]
: [C:\Windows\SYSTEM32\ntdll.dll(RtlUserThreadStart+0x21) [0x000000007733C521]]
2012-06-05 12:58:14 ERROR OGG-01296 Error mapping from tst.table1 to tst.table1.
* ** Run Time Statistics ** *
Last record for the last committed transaction is the following:
Trail name : ./dirdat/dc000000
Hdr-Ind : E (x45) Partition : . (x04)
UndoFlag : . (x00) BeforeAfter: A (x41)
RecLength : 249 (x00f9) IO Time : 2012-06-01 15:48:56.285333
IOType : 115 (x73) OrigNode : 255 (xff)
TransInd : . (x03) FormatType : R (x52)
SyskeyLen : 0 (x00) Incomplete : . (x00)
AuditRBA : 44 AuditPos : 71176199289771
Continued : N (x00) RecCount : 1 (x01)
2012-06-01 15:48:56.285333 GGSKeyFieldComp Len 249 RBA 987
Name: DBO.TCALCULATE
Reading ./dirdat/dc000000, current RBA 987, 0 records
Report at 2012-06-05 12:58:14 (activity since 2012-06-05 12:58:14)
From Table tst.table1 to tst.table1:
# inserts: 0
# updates: 0
# deletes: 0
# discards: 1
Last log location read:
FILE: ./dirdat/dc000000
SEQNO: 0
RBA: 987
TIMESTAMP: 2012-06-01 15:48:56.285333
EOF: NO
READERR: 0
2012-06-05 12:58:14 ERROR OGG-01668 PROCESS ABENDING.
Discard file:
Oracle GoldenGate Delivery for Oracle process started, group RTCHECK discard file opened: 2012-06-05 12:49:39
Key column filed3 (0) is missing from update on table tst.table1
Missing 1 key columns in update for table tst.table1.
Current time: 2012-06-05 12:58:14
Discarded record from action ABEND on error 0
Aborting transaction on ./dirdat/dc beginning at seqno 0 rba 987
error at seqno 0 rba 987
Problem replicating tst.table1 to tst.table1
Mapping problem with compressed key update record (target format)...
filed1 = NULL
field2 =
field3 =
field4 =
field5 =
datefield = -04-09 00:00:00
field6 =
field8 =
field9 = NULL
field10 =
Process Abending : 2012-06-05 12:58:14

RSA authentication with LDAP group mapping

Greetings,
I'm trying to set up RSA authentication with LDAP group mapping with ACS Release 4.2(1) Build 15 Patch 3.
The problem I'm having is that my users are in multiple OU's on our AD tree. When I only put our base DN in for User Directory Subtree on ACS, it fails with a "External DB reports about an error condition" error. If I add an OU in front of it, then it will work fine.
As far as I know, you can only use one LDAP configuration with RSA.
Any thoughts on this?

@Tarik
I believe your suggestion is the only way i'm going to get this to work. I ran across a similar method just this week that I have been working on.
I was hoping for dynamic mapping with the original method, but I haven't found any way to make it happen. I have resorted to creating a Radius profile on the RSA appliance for each access group I need. Using the Class attribute, I then pass the desired Group name to the ACS, i.e. OU=Admins, and that seems to work.
Thankfully, I have a small group of users that I am attempting to map. I will only map those who need elevated priviliges to narrow down how many profiles I will have to manually create. Likewise, our Account Admin will have to determine who gets assigned a particular access group.
I would still prefer to do this dynamically.
Scott

ACS USER IN MULTIPLE GROUP

Dear all
I have an ACS running 4.2 ver.We have integrated this with AD as well.
We had created some groups in acs for vpn and its is dynamically mapped with respective department.Its working fine know.
We have designed wireless implementation here with dynamic vlan assignment.
This is not working beacause user is already a member of one group in acs.I know that i can edit that group and do the wireless parameter settings.
But i would like to know wheather the user can be a member of multiple group or user will be associated with first group.
If we have an option for the user to be in a multliple group how can we do this.
If any one has faced this issue pls reply me at the earliest.
regards
-Danish

Its a bit long winded, but by using multiple Network Access Policies (NAP) in ACS 4.2 you can create specific windows group mappings per NAP.
The NAP is selected dynmically by NAS IP, or NDG or any content within the incoming RADIUS packet. So usually its possible to match on something. NAPs may also have chunks of re-usable RADIUS attributes (Shared Radius Authorisation Components) which can be used instead of setting RADIUS attributes at group level - can reduce the management overhead.
Its not a perfect solution, but should get to where you need to be without having to upgrade.
Facing an ACS audit? Find out how aaa-reports! can help at www.extraxi.com

Problems with ViaVoice under Leopard, especially key mapping problems

ViaVoice's behavior has changed considerably under Leopard. First I will discuss the key mapping problem, since I'm eagerly looking for an answer to this problem. At the end of this post, I will voice some of the other problems I've experienced for those who may be interested. The key mapping problem may be specific to the fact that I use a foreign keyboard with a US version of ViaVoice.
INTRO:
I have used ViaVoice on my Mac for years, more or less without problems (ViaVoice's bugginess is notorious).
Those who know ViaVoice will know that one has two general options for dictation. One can dictate into ViaVoice's so-called SpeakPad, which allows special formatting, editing and dictation error correction within the dictated text, or one can dictate into "external" software such as Microsoft Word, in which case ViaVoice just sends a string of characters to that software. SpeakPad appears to make strong use of the operating system's built-in functionality for character formatting, document formatting, etc.
*MY PROBLEM*
I have a German keyboard on my PowerBook, yet dictate in US English. When I dictated into SpeakPad under Tiger, all characters appeared correctly. However, when I dictated into Microsoft Word using Tiger, I had to switch the keyboard mapping from German to US to get all characters (that means including the characters that are located at different positions on a German keyboard than they are on a US keyboard such as y, z, apostrophes and parentheses) to appear correctly.
Under Leopard, things have changed. Now it doesn't matter whether I dictate into SpeakPad or Word; the results are the same and many characters do not appear correctly.
If set to a German keyboard, y and z appear as expected. To name a few irregularities:
"(" appears as ")"
")" appears as "="
apostrophes appear as "#" and
";" appears as ","
If set to a US keyboard, y and z are interchanged. "(" and ")" appear as expected. Apostrophes appear as "\" and ";" appears as ","
By comparison, if typed (as opposed to dictated, as in the examples above) "correctly" (i.e. based on the letters printed on the keyboard) on a German keyboard set to imitate a US keyboard:
y and z are interchanged
apostrophes appear as "|"
"(" appears as "*"
")" appears as "(" and
";" appears as the symbol for "less than"
Since I don't have a US keyboard, I can't say how it would behave if set to imitate a German keyboard, i.e. if there's a correlation to the results I get when I dictate.
Since I was previously able to dictate correctly into SpeakPad by setting the keyboard to "German" and into Word by setting the keyboard to "US," I presume that this is a problem in Leopard, not ViaVoice.
*OTHER PROBLEMS WITH VIAVOICE UNDER LEOPARD*
In addition to the aforementioned key mapping problems (that may be specific to those of us with foreign keyboards), ViaVoice appears to have lost considerable functionality in Leopard. I cannot access SpeakPad's Preferences and the correction window. Moreover, the traffic-light like window buttons have disappeared from the VoiceCenter (although they work if you click where they should be). SetupAssistent appears to function.
I've written to Nuance about these problems, but have little hope that they will invest the time in producing a patch since they haven't released any updates since 2003.

Thrums1,
I've never had to "register" ViaVoice after updating the system. I thus suspect you haven't fully followed my above, three-step advice (particularly step 3).
1) Reinstall ViaVoice from CD.
2) Update to the latest version (using the patch downloadable from Nuance's website).
3) Replace the “temp” and “users” folders (in the "ViaVoice" folder at the upper level of your home directory) by a previous copy thereof. When I say previous copy, I mean a copy from when ViaVoice was still working properly, e.g. a copy from when it was running under Tiger.
As I said, I've gotten ViaVoice to survive several system updates by following the above steps. To my knowledge, the last step is critical since it saves you from having to reconfigure ViaVoice under the new operating system (in this case Leopard). I suspect that ViaVoice is crashing on your system because it's trying to start some module of the SetUpAssistant that is incompatible with Leopard (as many are). If you instead use old copies of the "temp" and "users" folders (from the previous system), then ViaVoice doesn't have to go through the initial "registration" process; ViaVoice doesn't need the SetUpAssistant; and all is (more or less) fine.
Good luck!
BTW, to my knowledge, Dictate only runs on Intel Macs. It thus won't run on a G4 iBook, just as it won't run on my PowerBook G4.

Mapping problem with compressed key update record (target format)...

Hi Guys,
Getting below error while replication from Source to target. Source table is having NOT NULL Column, but on target replicat process giving error about some NULL value ??
How to overcome this issue, any idea...
2011-08-04 10:35:04 INFO OGG-00995 Oracle GoldenGate Delivery for Oracle, rmastrk.prm: REPLICAT RMASTRK starting.
2011-08-04 10:35:05 INFO OGG-00996 Oracle GoldenGate Delivery for Oracle, rmastrk.prm: REPLICAT RMASTRK started.
2011-08-04 10:35:06 WARNING OGG-00869 Oracle GoldenGate Delivery for Oracle, rmastrk.prm: OCI Error ORA-01407: cannot update ("INFRA"."CUST"."CODE") to NULL (status = 1407), SQL <UPDATE "INFRA"."CUST" SET "ORD_ID" = :a2,"DP_ID" = :a3,"EXCHNG_CODE" = :a4,"ORD_QTY" = :a5,"ORD_PRICE" = :a6,"CODE" = :a7,"MKRT_CODE" = :a8,"CHANN>.
2011-08-04 10:35:06 WARNING OGG-01004 Oracle GoldenGate Delivery for Oracle, rmastrk.prm: Aborted grouped transaction on 'INFRA.CUST', Database error 1407 (ORA-01407: cannot update ("INFRA"."CUST"."SCRP_CODE") to NULL).
2011-08-04 10:35:06 WARNING OGG-01003 Oracle GoldenGate Delivery for Oracle, rmastrk.prm: Repositioning to rba 44132192 in seqno 68708.
2011-08-04 10:35:06 *WARNING OGG-01154 Oracle GoldenGate Delivery for Oracle, rmastrk.prm: SQL error 1407 mapping INFRA.CUST to INFRA.CUST OCI Error ORA-01407:* *cannot update ("INFRA"."CUST"."SCRP_CODE") to NULL (status = 1407), SQL <UPDATE "INFRA"."CUST" SET "ORD_ID" = :a2,"DP_ID" = :a3,"EXCHNG_CODE"=:a4,"ORD_QTY"*
*= :a5,"ORD_PRICE" = :a6,"SCRP_CODE" = :a7,"MKRT_CODE" = :a8,"CHANN>.*
2011-08-04 10:35:06 WARNING OGG-01003 Oracle GoldenGate Delivery for Oracle, rmastrk.prm: Repositioning to rba 44132192 in seqno 68708.
2011-08-04 10:35:06 ERROR OGG-01296 Oracle GoldenGate Delivery for Oracle, rmastrk.prm: Error mapping from INFRA.CUST to INFRA.CUST.
2011-08-04 10:35:06 ERROR OGG-01668 Oracle GoldenGate Delivery for Oracle, rmastrk.prm: PROCESS ABENDING.
Oracle GoldenGate Delivery for Oracle process started, group RMASTRK discard file opened: 2011-08-04 10:35:05
Current time: 2011-08-04 10:35:06
Discarded record from action ABEND on error 1407
OCI Error ORA-01407: cannot update ("INFRA"."CUST"."SCRP_CODE") to NULL
(status = 1407), SQL <UPDATE "INFRA"."CUST" SET "ORD_ID" = :a2,"MKRT_CODE" = :a8,"CHANN>
Aborting transaction on ./dirdat/pm beginning at seqno 68708 rba 44132192
error at seqno 68708 rba 44132192
Problem replicating INFRA.CUST to INFRA.CUST
*Mapping problem with compressed key update record (target format)...*
ORD_QTY = 500
ORD_PRICE = 37430
SCRP_CODE =
MKRT_CODE = N
Oracle GoldenGate Delivery for Oracle process started, group RMASTRK discard file opened: 2011-08-
04 10:35:05
Current time: 2011-08-04 10:35:06
Discarded record from action ABEND on error 1407
OCI Error ORA-01407: cannot update ("INFRA"."CUST"."SCRP_CODE") to NULL
(status = 1407), SQL <UPDATE "INFRA"."CUST" SET "ORD_ID" = :a2,"MKRT_CODE" = :a8,"CHANN>
Aborting transaction on ./dirdat/pm beginning at seqno 68708 rba 44132192
error at seqno 68708 rba 44132192
Problem replicating INFRA.CUST to INFRA.CUST
Mapping problem with compressed key update record (target format)...
ORD_QTY = 500
ORD_PRICE = 37430
SCRP_CODE =
MKRT_CODE = N
Any inputs / help would be appreciated.
Regards,
Manish

The SCRP_CODE column has a NOT NULL constraint. The ORA-01407 error is telling you that you cannot update or set a value for this column to null because of the constraint. This has absolutely nothing to do with an index. You can use a marker/sentinel value in lieu of using NULL. For a numeric field, where everything is positive, a negative value (-1) can be decoded as meaning null. For a character field, a code such as NA can represent NULL.
This also has nothing to do (directly) with GoldenGate failing because of this error. The underlying SQL statement will fail everywhere, regardless of the tool or application. It is not a case of failing only in GoldenGate.

Mapping problem:from E1EDK14-ORGID to PORDCR102-PUR_GROUP

Mapping problem:from E1EDK14-ORGID to PORDCR102-PUR_GROUP
E1EDK14 occurs 4 times in the source sys:
1   E1EDK14-QUALF = '014'
     E1EDK14-ORGID = 'YP01'      <= purchase organization
2   E1EDK14-QUALF = '009'
     E1EDK14-ORGID = '001'      <= purchase group
3   E1EDK14-QUALF = '013'
     E1EDK14-ORGID = 'NB'      <= document type
4   E1EDK14-QUALF = '011'
     E1EDK14-ORGID = 'C999'      <= company code
I always want to copy "E1EDK14-ORGID = '001'" to PORDCR102-PUR_GROUP.
I have a solution which works but not perfect:
E1EDK14-ORGID=>copyvalue[1]=>PORDCR102-PUR_GROUP
I want to have the perfect mapping as follow:
IF E1EDK14-QUALF = '009'.
E1EDK14-ORGID = '001' => PORDCR102-PUR_GROUP
ENDIF.
I did it in the data flow editor as follow:
/PORDCR102/IDOC/E1PORDCR1/E1BPMEPOHEADER/PUR_GROUP=
ifWithoutElse([keepss=false]stringEquals
(removeContexts(/ORDERS05/IDOC/E1EDK14/QUALF=),
const([value=009])), /ORDERS05/IDOC/E1EDK14/ORGID=)
But the result in the target sys is always 'YP0'(The first E1EDK14-ORGID)
How to solve this problem?
Thanks
ming yu

Hi,
Try like this.
E1EDK14-QUALF   --------
Constant(009) ----------------   EqualsS ---------------
                                                             And(Boolean Function)     ------ IfWithoutElse -- PORDCR102-PUR_GROUP
E1EDK14-ORGID -------                                                      E1EDK14-ORGID ----------------
Constant(001) --------------   EqualsS ------------------
Regards,
P.Venkat

Weird dreamweaver keyboard mapping problem

weird dreamweaver keyboard mapping problem:
Hope this solution helps someone out. If you have q's, ask
and I will try to help.
I was having a weird problem in dreamweaver... Whenever I was
in code view and typed "shift+i" to make a capital "I", instead it
would paste from the clipboard.
I finally figured out what was happening. I compared the
menu.xml in my app support folder in the user library to the
original menu.xml file that was in the application folder. I went
through until I came across the diff:
menu.xml in my library/app support folder:

<shortcut key="Cmd+Ins" name="Copy2" platform=""
command="if (dw.canClipCopy()) { dw.clipCopy() }"
domRequired="FALSE" id="DWShortcuts_HTMLSource_Copy2" />
<shortcut key="Shift+Ins" name="Paste2" platform=""
command="if (dw.canClipPaste()) { dw.clipPaste() }"
domRequired="FALSE" id="DWShortcuts_HTMLSource_Paste2" />
<shortcut key="Shift+Del" name="Cut2" platform=""
command="if (dw.canClipCut()) { dw.clipCut() }" domRequired="FALSE"
id="DWShortcuts_HTMLSource_Cut2" />
orig menu.xml file:

<shortcut key="Cmd+Ins" name="Copy2" platform=""
command="if (dw.canClipCopy()) { dw.clipCopy() }"
domRequired="FALSE" id="DWShortcuts_HTMLSource_Copy2" />
<shortcut key="Shift+Ins" name="Paste2" platform=""
command="if (dw.canClipPaste()) { dw.clipPaste() }"
domRequired="FALSE" id="DWShortcuts_HTMLSource_Paste2" />
<shortcut key="Shift+Del" name="Cut2" platform=""
command="if (dw.canClipCut()) { dw.clipCut() }" domRequired="FALSE"
id="DWShortcuts_HTMLSource_Cut2" />
There was a diff in the "platform=" tags. The orig stated
[platform="win"], my config stated [platform=""] (nothing in
between the ""'s). So, I reset the platform tag to be
[platform="win"] in my settings and then relaunched dreamweaver. It
fixed the problem.
Not sure how this occurred, but it works now.

How to change the icon for 'windows group' in Java 1.6 [Windows XP] ?

Hello,
I was wondering if there is a possibility to change the icon for 'windows group' in Java 1.6...
I'm using Windows XP SP2. Now the windows from my Java 1.6 application are grouped with the standard Sun icon [screen below] on the group.
http://img382.imageshack.us/img382/8995/iconbl1.png
I would like to change the icon for my own. Is there a way to do that ?
Please help.

Whichever icon I use for the main frame (I tried few), after grouping the main frame and other sub-frames the icon is changed to standard 'Java Sun' icon as you can see in the screenshot from my first post. The problem occurs only when frames are grouped, when the are separated in the task bar their titles and icons are ok...
So how can I change the icon/title for the group only (for Java 1.6 in Windows XP) ?

ACS 3.3 Windows group mapping problem

Similar Messages

Maybe you are looking for