ACS 5.2 - AD integrate with single doamin name with multiple ADs

Hi,
We having ACS version 5.2 0.26 with Active/Standby. We need to integrate active directory with ACS. Domain name given by Server team was as xyzcompy.local. When I tried to resolve the same domain name I got five servers ip address against the same domain name. however we given the ip reachability to only for two servers. We we try to save we get error saying that "Can not resolve the network address".
So my questions are;
- does ACS should have ip reachaibility to all five servers
- does the username/password we entered in the ACS should have domain admin rights?.
- the given AD is configured with windows NTP (time.windows.com) but when we configured ACS as windows NTP it was taking  local server as active NTP..?
When we check the ACS logs, we saw the following error;
in acsLocalStore:
AdminName=acsadmin, DomainName=qatarconvention.local, ADOperationResult=unable to create secured connection against AD server\, switching to non-secured connection. javax.naming.CommunicationException: simple bind failed: qnccad02.xxxxconvention.local:636 [Root exception is java.net.SocketException: Connection reset],
in ACSADAgent;
32484]: INFO  dns.findsrv FindSrvFromDns failed: res_query failed _ldap._tcp.xxxxconvention.local
Sep  4 12:43:20 acs01-cc4 adjoin[32484]: INFO  cli.adjoin Join to domain 'xxxxconvention.local', zone 'null' failed.
I attached some screen print which saw the error and output of nslookup for the domain name.
Appreciate if some one can give me the correct answers to above in order to resolve this issue.
Thanks in advance.

Hi NIcolas,
Thanks for your response. I have explained the issue with server guys. I'm not sure what changes they did, but now I'm getting the answer with all the available servers in the same domain when I did nslookup with the domain name in ACS cli. but ACS has only reachability to two servers out of all it answered servers (06 out of 02).
(as attached). However still I'm still failing when I try to join to domain in the ACS saying "can not resolve the network address".
So now what could be the issue, as I mentioned earlier, does ACS needs to have ip reachability to all the available servers?. other than that I dont see any other issues relared to this problem...?
Thanks

Similar Messages

  • Single Host name has multiple entry in SCCM 2007 R3 Console

    Hi Experts,
    A single host name which was not in Active Directory is keep on discovering in SCCM console and makes multiple entries. I am deleting that Host from the SCCM console but it is keep on reoccurring in the console. Delta discovery is not enabled. 
    Kindly help me to fix this problem. Thanks
    Regards,
    Ranjith

    Check if SCCM client is installed on the machine. Uninstall the client setup using if you don't require the machine to report to SCCM server (browse to ccmsetup folder and run "ccmsetup.exe /uninstall" using cmd prompt).
    Just deleting the machine from console will not remove the client installed on it. The SCCM client will always try to report to the assigned server.
    ~ Rajeesh M | Blog:
    ScorpITsPlease remember to 'Mark as Answer' or 'Vote as Helpful' on the post that helps. It helps others reading the thread and recognizes useful contributions. |

  • How to ACS 5.0.0.21 Expresss integrate with Active Directory Standar 2003 and authenticate PEAP MSCHAPV2

    Hi:
    My name is Ivan, I have a trouble
    I have a ACS 5.0.0.21 express, and i have to integrate with Active Directory (AD)  2003 Standar. I should authenticate the users of the Domain in the LAN with PEAP MSCHPAV2, using the follow:
    Cisco WLC 4402 + Cisco ACS 5.0.0.21 + Active Directory
    I need to know if i should to install a certificate in the ACS 5.0.0.21 or some agent remote install  in the AD.
    I put in the ACS a external database with the AD, and i already select the users on the domain in the ACS Express.
    Please could you tell me all the steps to autenticate the users on the Domain using the ACS Express and the Active Directory,
    I would like to know wich are the configuration that i have to do in my ACS express to authenticate using PEAP MSCHAPV2
    Regards
    Ivan

    See the below URL - multiple config guides on what you want to do:-
    http://www.cisco.com/en/US/products/ps6366/prod_configuration_examples_list.html
    HTH>

  • Not able to get the Application ID value in ADF Phase listener for Custom ADF application which integrates with Ebiz R12.2.3

    Hi All ,
    I am working on one custom Order Mangement ADF Application which integrates with EBiz R12.2.3.
    We are trying to get the Ebiz userid ,username,Responsibility ID and Application ID in ADF through below Code
           public HashMap checkEBSSession(HttpServletRequest request,
                                       HttpServletResponse response) {
            System.out.println("In AMImpl.. checkEBSSession1");
            Session session = null;
            HashMap hmap = new HashMap();
            try {
                Connection conn =
                    getDBTransaction().createStatement(1).getConnection();
                System.out.println("In AMImpl.. checkEBSSession2");
                EBiz ebiz =
                    new EBiz(conn, "012E7E82CD8852BBE053860F6E0AD63413191049361744553610276495342217");
                System.out.println("In AMImpl.. checkEBSSession3");
                AppsRequestWrapper wrapper =
                    new AppsRequestWrapper(request, response, conn, ebiz);
                System.out.println("In AMImpl.. checkEBSSession4");
                session = wrapper.getAppsSession(true);
                System.out.println("In AMImpl.. checkEBSSession5");
                Map columns = session.getInfo();
                System.out.println("In AMImpl.. checkEBSSession6");
                String respId = (String)columns.get("RESPONSIBILITY_ID");
                String currentUserId = (String)columns.get("USER_ID");
                String currentApplId = (String)columns.get("APPLICATION_ID");
                String currentOrgId = (String)columns.get("ORG_ID");
                System.out.println("In AMImpl.. checkEBSSession7...respId : "+respId);
                System.out.println("In AMImpl.. checkEBSSession8...UserId : "+currentUserId);
                System.out.println("In AMImpl.. checkEBSSession9...APPL_SERVER_ID : "+currentApplId);
                System.out.println("In AMImpl.. checkEBSSession10..OrgId : "+currentOrgId);
                logger.info("respid:  " + respId);
                //System.out.println("In AMImpl.. checkEBSSession8");
                hmap.put("RESPONSIBILITY_ID",respId);
                //System.out.println("In AMImpl.. checkEBSSession9");
            } catch (Exception e) {
                System.out.println("Error: " + e.getMessage());
            return hmap;
    By using this code I am Getting all the Information Except the Application ID.
    If someone  have any idea how to get the application ID please share it .
    Thanks in Advance !!
    Thanks & Regards
    Apurv Agarwal

    Hi,
    since you implements the backing bean from PagePhaseListener. some where the same view is excuting before getting the selected record. Even if you select the record after excuteQuery() it will set the first record as selected. Please try to check some where query is excuting.
    try give some more details like what are all the methods you are using in PagePhaseListener and where you worte u r coding.
    Reg,
    Brahma

  • ACS 5.3.0.40 with Bluecoat Packetshaper via Radius Auth using PAP/CHAP

    Hi,
    We have a strange issue may be an known issue. We have the ACS 5.3.0.40 with Bluecoat Packetshaper (Packeteer) as the Radius Client and tried with PAP as well as CHAP with the suggested VSA. But once we try to authenticate with GUI in the PS end we get authentication failed. i.e its says invalid password but in the ACS end we get it as the Auth success log. We are not able to login to the PS as well. Anyone have any idea what is the issue anything to be done with the patch upgrade or any issue with the packetshaper??????
    below is the logs in ACS server.
    Logged At:        September 4,2012 4:10:26.250 PM
    RADIUS Status: Authentication        succeeded
    NAS Failure:
    Username: knpdtf
    MAC/IP Address:
    Network        Device: Test-PS : 10.187.115.83:
    Access Service: Radius Network
    Identity        Store: Internal Users
    Authorization Profiles: Permit Access
    CTS        Security Group:
    Authentication Method: PAP_ASCII
    By
    Karthik

    Hi,
    Do you have any special characters in the password? I would see if you can create an internal user in ACS and use a basic password (like cisco123) and see if the authentication will succeed. I have seen with some GUI based products that some special characters can cause some headaches.
    thanks,
    Tarik Admani
    *Please rate helpful posts*

  • Single proforma invoice with multiple deliveries

    Hi
    I would like to know how to create a single proforma invoice with multiple delivery numbers. Please let me know how?
    Thanks

    Apart from the above option, you can also use T-code VF04 i.e. Billing due list
    Regards,
    Sagar

  • Single ERS Invoice for multiple POs with different GS and same IP

    Dear All,
    I have a Requirement as per the below scenario:
    We need to have single invoice created using ERS (MRRL) functionality in the below scenario:
    Two POs created with different Partner function GS (goods supplier) and same IP (Invoice party partner function).
    Ex:
    GS IP PO GR ERS
    vendor1 10001 4500001 500001 Yes ( GR-IV-Yes, GR done- Yes, same payment terms - 001)
    vendor2 10001 4500002 500002 Yes ( GR-IV-Yes, GR done- Yes, same payment terms - 001)
    When I run ERS for last 1 week (GR) and select the option (Doc selection – per IP or other criteria like GRs posted in last one week) , system should create 1 invoice document. Standard SAP posts 2 documents for each GS.
    I have tried using 2 user exits for MRRL, but none of them work for this functionality.
    Thanks,

    Hi,
    Go for  MIRO without MRRL.
    Instead ERS, you can post single  Invoice(MIRO) for multiple POs  for one vendor.
    OR
    Check with Technical consultant and go for development to have single ERS output for multiple ERS invoice documents for single vendor.
    Regards,
    Biju K

  • Sharing iTunes on a single computer with multiple users

    Greetings,
    I have been troubleshooting a problem sharing iTunes on a single computer with multiple users that cropped up a few weeks ago and have not had very good luck.
    Several months ago I successfully set up my wife’s G4 Laptop (PowerPC processor) so that we could share iTunes on that computer. I had just gotten her an “My Book” external hard drive (Western Digital). The iTunes Library will go on this new unit because the internal drive was running out of room. I successfully set the privileges, moved the entire library onto a “Share” directory and everything worked fine.
    In this way, when I got a new CD I could add it to iTunes (under my login, administrator privileges) and she could access it (under her login) to listen to while working on the computer or using her iPod. This arrangement went well for quite awhile.
    About a month and a half ago, when I tried to launch iTunes from my login I received this message:
    “The iTunes Library file is locked, on a locked disk, or you do not have write permission for this file.”
    I think the permissions must have changed when there was an update because my wife is pretty careful about what she does on her computer. Updates were the only thing I could think of that had changed since I had set her computer up. I also noticed that some of the iTunes defaults were different from the last time I had used it to add a CD.
    So, I did some reading and went back through the motions of trying to set it up again. I re-formatted the My Book hard drive to Mac OS Extended (Journaled) added the files back to the external, reset permissions on the external hard drive. (Owners: System, Access: read and write - Group: wheel, Access: read and write – Others: read and write).
    When I now launch iTunes under my login I get this message:
    “The operation cannot be completed because you do not have sufficient privileges for some of the items.”
    What gives? I am the original owner and have always had top-level privileges.
    Can someone point me to any articles or clues as to how I need to set-up iTunes on a single computer to be shared by more than one user? Also, I am considering upgrading to the newer system in a few weeks, so if a solution for OS X 10.5 is available, that would work too.
    Tim

    Was your wife logged into the libray at the time you tried to log in? I have had a similar problem and it was because another user was logged into the library when I attempted to. I got the permission denied banner.

  • HT2688 Working on a single computer with multiple users, I have set things up to allow each user to view and listen to the others' music libraries under the "Shared Library" function.  Can you then connect an iPod touch and copy music from a shared librar

    Working on a single computer with multiple users, I have set things up to allow each user to view and listen to the others' music libraries under the "Shared Library" function.  Can you then connect an iPod touch and copy music from a shared library?

    Was your wife logged into the libray at the time you tried to log in? I have had a similar problem and it was because another user was logged into the library when I attempted to. I got the permission denied banner.

  • How to Restrict Single Delivery Date for PO with Multiple Line Items

    Dear Experts,
    How to Restrict Single Delivery Date for PO with Multiple Line Items.
    System needs to through Error Message if User Inputs Different Delivery Dates for PO with Multiple Line Items in ME21N Tcode.
    Can we achive this by Some Enhancement in SAP or Not ???
    If so how to do it.
    Any Inputs is highly appreciated.
    Thanks and Regards,
    Selvakumar. M

    Hi Selvakumar,
    we can resrict the PO to have a single delivery date in all the line items by means of giving a error message or overwiting the delivery date keyed/determined in the line item.
    You can use the BADI -> ME_PROCESS_PO_CUST. In which you need to implement the method PROCESS_SCHEDULE.
    (for technical aid - This method will be called for each and every PO line item, From the imporing parameter im_schedule we can get all the details of current PO line, even we can change the data in the current PO line. )
    Regards,
    Madhu.

  • How do I use FND_GLOBAL.APPS_INITIALIZE to integrate with EBS 11i security?

    Hello,
    We are trying to integrate APEX with Oracle Ebusiness Suite 11i. We are trying to integrate with the HR/Payroll application which uses FND_GLOBAL.APPS_INITIALIZE to set the security context to a user, responsibility and application id which defines who the session has access to for the session. When we make the call to FND_GLOBAL.APPS_INITIALIZE in either a before header process or in the VPD security attribute, we get no data. Using the same call in SQL*PLUS we get the data expected.
    Any suggestions on how to get this to work? What are we missing?
    Thanks,
    -Eric

    Hi Rod,
    Thanks for the reply. I have not tried passing in the parameters yet. I currently have the following hardcoded in a before header process.
    BEGIN
    FND_GLOBAL.APPS_INITIALIZE(1003,51172,800);
    END;
    I do have FND_GLOBAL.USER_ID and FND_GLOBAL.RESP_ID in a report. The values returned are the same as those I have in the before header process.
    For this user_id, responsibility_id and application_id I should get 1 row from per_people_f. It works in sqlplus, I get no data found in APEX.
    Any further suggestions on what might be happening here?
    Thank you,
    Eric

  • How can I get a Album with multiple artists to appear as a single album with all of the tracks?

    How can I get a Album that contains multiple artists to appear as a single album with multiple tracks?  Also when I sync iTunes with my iPhone or iPad the Album appears as multiple albums with each artist.  The Album title is the same on each of the affected tracks.

    Quick answer:  Select all the tracks on the album, File > get info, and either give them all a single "album artist" or check the "compilation" flag.
    If these are from multiple-CD sets you may also need to enter the appropriate information in the disc number fields.

  • Using single SMB share with multiple Hyper-V clusters

    Hello,
    I'm trying to find out if I can use a single SMB share with multiple Hyper-V Clusters. Looking at:
    How to Assign SMB 3.0 File Shares to Hyper-V Hosts and Clusters in VMM
    I think it's possible. Since the File Server is going to handle the file locking it shouldn't be a problem.
    Has anyone tried that?
    Thank you in advance!

    Hello,
    I'm not sure that's possible, I get this from this statement:"Assign the share—Assign
    the share to a virtual machine host or cluster."
    Even if it worked I wouldn't do that. Why don't  you just create multiple shares?

  • Single step workflow with multiple approvers (without using a group)

    Hi,
    is it possible to have a single step workflow with multiple approvers without using a group? This is for a contract document.
    i want to add a number of users based on particular logic. The approvers are random and do not belong to any particular group.
    DO let me know if it is possible or if any of you have done that.
    thanks in advance.
    regards,
    rubio

    Hi Rubio,
    I believe the behavior would be, if individual users are added as approvers then the system would require each approver to approve the document. However, if you use the user group, you could set the role so that it would be either ALL or ANY.
    Regards,
    Vikram

  • How do I create a single PDF file with multiple pages?

    Hi, I occasionally need merge several jpg images into a single pdf file with multiple pages (one Jpg per page). I have tried doing this on Preview, and by selecting all the pages I want to include in my document and trying to save to Pdf through the "Print" function, but every time it only saves the first page.
    Can anyone tell me if there is a way to save multple-page pdf files without having to purchase a specific program (i to this too infrequently to justify the cost)?
    Thanks very much,

    This works for me...
    Open first image in Preview View > Sidebar. Drag the other images into Sidebar, then select all.
    From File menu > print selected images. Choose PDF > Save as PDF
    -mj

Maybe you are looking for

  • Technical Systems and Business Systems

    Hello Everybody!!! I have some doubts, can you help me, please??? 1) Technical Systems are application(software) systems, ok? They aren't hardware systems, ok? 2) In my SLD I should have a SAP ECC system as a technical system and each of their client

  • Music is silent in iMovie but not in clip trimmer

    In two of my iMovie projects the music is silent. The project music plays when clip trimmer is open, however, and the audio skimming bar flash green. When I close clip trimmer, the audio skimming bars go black. I may have hit keys for a command - how

  • Iphone apps, photos, and contacts gone. Can I get them back or do I have to add apps back?

    I update my Iphone 4 today and it seemed to update fine until I looked on my phone and noticed not all of my apps were there and my contacts are from back in May. Nothing else such as pictures moved either. Is there some way to get this stuff back or

  • Question about creating objects

    Around the web and in a few books I have seen code similar to this: List records = new ArrayList(); My question is, why is "List" used instead of "ArrayList"?? So the code would like so: ArrayList records = new ArrayList(); What are the benefit(s) of

  • IPhone 2G will not connect to iTunes

    my friends iPone 2G is disabled and asked if I could unlock it which is normally not a problem but when I go thru the steps of unlocking the device it will not connect to iTunes, but my computer recognizes the device when plugged in. I am running the