ACS 5.2 Sync with Windows 2008 AD but cannot see the Groups

Hi Pals,
Recently I've been working with the ACS 5.2 (Installed on VMWare). At the beginning I was using a Win Server 2003 Enterprise edition AD, and there was no problem with the AD and the CA Authority. Because some of my customers use Win Server 2008 I change the AD platform to Win Server 2008 Enterprise edition (x64).
I don't really have a great experience with Win Server Platforms and, for what I've seen, the Win Server 2003 Services deployment is easier than the Win Server 2008 is.
So, when I used the Win server 2003 I could not only synchronize the ACS with the AD but also use some groups created on the AD to perform the Network Access Authentication. When I try to do the same with the Win Server 2008 AD the ACS and the Server get Synchronized but when I want to add the groups for the Authentication purposes there is no one, absolutely nothing... so I cannot do any test.
Also I looked for information about the compatibility between the ACS 5.2 and the Win Server 2008 platforms and at the end the platforms are compatibles.
Any Idea??
Thanks in Advance.
Jose M Cortes H

Hi Jose,
This should generally work.
From what I could read, you cannot list AD groups when trying to select them under an authentication/authorization rule.
What about when trying to list them under the AD configuration?
Users and Identity Stores > External Identify Stores > Active Directory > Directory Groups > select...
Unfortunately, without more details on a specific error message, it would be hard to tell where the root cause could lie.
We could collect some initial logs from ACS 5.2, in order to start isolating the issue:
1. Log in to the ACS command line and enable the following debugs:
admin# acs-config
Escape character is CNTL/D.
Username:
Password:
acsadmin(config-acs)# debug-adclient enable
acsadmin(config-acs)# debug-log mgmt level debug
acsadmin(config-acs)# debug-log runtime level debug
2. Recreate the issue a couple of times by trying to list the AD groups in the authentication rule and even by trying to list them under
Users and Identity Stores > External Identify Stores > Active Directory > Directory Groups > select...
3. Take note of the time stamp when you recreate the issue and then collect the ACS support bundle from the Monitoring & Report Viewer, under
Troubleshooting > ACS Support Bundle
Please be sure of collecting the support bundle while checking the following options:
Include full configuration database = Unchecked
Include debug logs = All
Include local logs = All
Include core files = All
Include monitoring and reporting logs (all categories checked) = Include files from the last 1 day
Also, please communicate the time stamp when the issue is observed, so that we can track it faster in the logs.
Regards,
Fede
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Similar Messages

My friend gave me his old touch, however it won't sync with my new mac but it charges the itouch so i was wondering how i could sync it to my iTunes.

My friend gave me his old touch, however it won't sync with my new mac but it charges the itouch so i was wondering how i could sync it to my iTunes.

Does the iPod show up in iTunes on the Mac? If not try:
iOS: Device not recognized in iTunes for Mac OS X
also
If you have iTunes 11 turn on the Sidebar. Go to iTunes>View and click on Show Sidebar. You can also do a Crtl+S to show the sidebar. The sidebar is where Devices appears. and Control+B to show the Menu bar
Otherwise what happens when you try to sync? Note that you can only sync with one iTunes library/computer. If that is the problem you should go to Settings>General>Reset>Erase and content and setting and set up the iPod on you computer/iTunes library. One content on the iPod does not belong to you.

I can sync with my outlook calendar, but cannot sync with contacts or e-mail.

I can sync with my outlook calendar, but cannot sync with contacts or e-mail. When I click on Settings>Mail, Contacts, Calendars it doesn't open and reverts to the home page. When I try to open Mail I get an error message saying "Cannot get mail. The user name or password for Gmail is incorrect". If I press "settings" it reverts to home page. I was revised to restore settings which I have now done, but the problem has not been resolved. Can anyone help?
i do have a gmail account and may have used this when I first set up itunes/ipad (I'm new to Apple). However, I want to synchronize with my Microsoft Exchange account.

It may be a bit late for your needs, but there's a sync product for Outlook (an add-in) that will sync public and private folders/calendars. Once you have your items in a mailbox folder, the regular ios sync will bring it to your device. It's called Add2Outlook, it's made by DidItBetter.com Software.
It syncs private and public, mailboxes and folders in any direction. One-way, two-way, read-only or writable. It also works with Office 365 and hosted exchange providers, if that's your situation. It works for calendars, contacts, tasks, email, whatever. It can even sync to PST or between two different Exchange servers.
It installs on your workstation, not on the Exchange server.
Check it out here: Outlook Contact and Calendar Sync for Office 365

I am not able to see toolbars, when I open a new window that window is not visible, if I open from bookmarks and there is music playing I hear it but canNOT SEE the websites.

I am not able to see toolbars, when I open a new window that window is not visible, if I open from bookmarks and there is music playing I hear it but canNOT SEE the websites. I was able to get window open from the help "window" and open sites from there just not from new: window tab or bookmarks those stay invisible? I tried the help suggestions, safemode,etc.

Hi CMorenoOT,
This prompt is usually displayed when your Apple ID needs to be configured for the iTunes Store. You'll want to run through the additional steps to setup your country, and payment information.
iTunes: How to set up an Apple ID within iTunes
http://support.apple.com/kb/HT2731
Tip: If you are trying to create an account using an existing Apple ID, like your iCloud email address, you will receive a prompt telling you that your email address is already an Apple ID. Simply tap Continue, and then tap Use Existing Account on the following screen.
- Next, you'll be required to enter your billing information. To choose a different Credit Card type, tap one of the available options, and then tap Done. You will not be charged until you make a purchase.
- Once you've filled out all of the fields for your billing information, tap Next.
For more information:
Using an existing Apple ID with the iTunes Store and Mac App Store
http://support.apple.com/kb/HT2589
Thanks,
Matt M.

I have just opened 2 new albums in photo but cannot see the albums thru' itunes when syncing my ipad or thru' the screen saver on ITV

I have just opened 2 new albums in photo but cannot see the albums thru' itunes when syncing my ipad or thru' the screen saver on ITV . My photo apps is Version 1.0 (209.52.0)

Have you tried deleting the photo cache from your computer and then re-trying the photo sync and see if they all then copy over (you need to select and sync all the photos that you want on the iPad together in one go, as only the most recent photo sync remains on the iPad) ? The location of the cache, and how to delete it, is on this page http://support.apple.com/kb/TS1314
Don't know about the Facebook photo emailing, but there are a number of apps that allow to upload photos to their site (e.g. the 'official' Facebook app).
(For future info, typing all in capitals is considered SHOUTING - you are more likely to get help/responses if you don't.)

Does Mac Messenger work with iPhone 4 system 5.01...? (I am receiving a notification of receipt but cannot see the messages sent.)

To those who might know
I have an iPhone 4, with OS 5.1
I am receiving notifications of messages sent by various other users but cannot see the messages.
Question: does Mac Messenger only work with 4S models..?
Thanks.

a successful automount of the other mini cd gives me
$dmesg | tail
[ 5667.156904] ISO 9660 Extensions: Microsoft Joliet Level 3
[ 5667.157448] ISOFS: changing to secondary root
and
$mount
/dev/sr0 on /media/110103_1110 type iso9660 (ro,nosuid,nodev,relatime,uid=1000,gid=1000,iocharset=utf8,mode=0400,dmode=0500,uhelper=udisks)
and there is a /dev/sg1 under /dev (instead of only sr0 before~~)
(nothing changed in lshw (well, except the mount point is added~~~))

I am using iphone 4s with ios 7.4 but cannot dial the nos like *111# and *99# where as these nos can be dialed on phone with 6.1.3

i am using iphone 4s with ios 7.4 but cannot dial the nos like *111# and *99# where as these nos can be dialed on phone with 6.1.3 how can i solve this problem

After reviewing several more suggestions, I found a YouTube video that described the issue and resolved it by cleaning the dock connector. I was skeptical, but I had noticed that immediatly after charging or using my dock that the audio would be back temporarily. After cleaning the dock port, the issue appeared to be resolved temporarily, but appears to have returned again. I will clean it well and then test again to see if it resolves the issue permanantly. So far this seems to have provided the best result.

LMS 2.6 and ACS 4.2 compatible with Windows 2008 R2 Active Directory?

Hi,
We are planning to upgrade CORP Domain from Windows 2003 Active Directory Schema to Windows 2008 R2 Active Directory Schema.
I wanted to know if the following applications which are installed on windows (domain member servers) are compatible with windows 2008 server R2 schema?
CiscoWorks LAN Management Solution 2.6
Cisco Secure Access Control System 4.2
Cisco Fabric Manager 1.5
Any help is much appreciated!

- CiscoWorks LAN Management Solution 2.6 - Not supported and this software is EOS-EOL.
www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps2425/prod_end-of-life_notice0900aecd80532c07.html
- Cisco Secure Access Control System 4.2 - Not supported either:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/installation/guide/windows/install.html#wp1041324
- Cisco Fabric Manager 1.5 - Was not able to find anything for version 1.5 and not really familiar with this product. However, according to the below not even version 4.2(7d) supports 2008:
www.cisco.com/en/US/docs/switches/datacenter/mds9000/sw/fm/release/notes/20325_10.html#wp657668

Why users with rights defined as View cannots see the data of the form ?

Hi,
I have a nice form page. My application has an authorization scheme with an authentification function : return acl_custom_auth. It is working well. I have defined users with Edit, View and Admin rights. Unfortunately on a form, if the user is defined as "View" he cannot see the data, he only sees the item but their content is not diplayed. I don't understand why. I would like him to see the data.
The authorization scheme of the page is "Access control -view" as well as the items of the page.
Do you have any idea of what is going wrong here ?
Thank you for your kind help !
Regards,
Christian

Another thing that can be done though mon tech-savy people may not know about it.
Locate a group of PDF's and select at least 5-6 of them as a Group.
hold down Option key while click on file menu
Click on Get info.
One window will open for the group. in Mountain Lion (OSX.8.2) the term will change to Show Inspector.
click on the button next to Open With.
choose either Reader or Acrobat.
just bellow is a question Use Acrobat (or Reader) to open all files of this type, Click on it and choose yes.
Make sure you have a mix of Adobe PDF's and Preview PDF/s for this to work. If it wasn't good for opening other Type Files I'd compress Preview and throw the original away. It’s a nusiance.

Why can't I use Snapfish anymore with iPhoto 08? I cannot see the library.

I recently upgraded to iPhoto (iLife 08) now when I try to upload pics to snapfish it cannot see the folder. I know it is there cause I see it in Finder. It shows all other folders but the iPhoto folder is invisible. Does anyone know a setting or a way that I can utilize photo developing other than the proprietary ones for Apple?
Please help. I feel like I've been swindled. (Seems Like something Microsoft would do)
Jeff

Jeff
You haven't been swindled, no one is forcing you to do anything.
With iPhoto 7 (iLife 08) the old iPhoto Library Folder is now a Unix Style Package File. The change was made to the format of the iPhoto library because many users were inadvertently corrupting their library by browsing through it with other software or making changes in it themselves.
It has never been the correct procedure to root through the iPhoto Library Folder - in fact on every version the documentation has expressly stated that you should never do so.
There are many, many ways to access your files in iPhoto:
For 10.5 users: You can use any Open / Attach / Browse dialogue. On the left there's a Media heading, your pics can be accessed there. Apple-Click for selecting multiple pics.
Uploaded with plasq's Skitch!
To upload to a site that does not have an iPhoto Export Plug-in the recommended way is to Select the Pic in the iPhoto Window and go File -> Export and export the pic to the desktop, then upload from there. After the upload you can trash the pic on the desktop. It's only a copy and your original is safe in iPhoto.
This is also true for emailing with Web-based services. If you're using Gmail you can use THIS
If you use Apple's Mail, Entourage, AOL or Eudora you can email from within iPhoto.
If you use a Cocoa-based Browser such as Safari, you can drag the pics from the iPhoto Window to the Attach window in the browser.
Or, if you want to access the files with iPhoto not running, then create a Media Browser using Automator (takes about 10 seconds) or use THIS
Other options include:
1. *Drag and Drop*: Drag a photo from the iPhoto Window to the desktop, there iPhoto will make a full-sized copy of the pic.
2. *File -> Export*: Select the files in the iPhoto Window and go File -> Export. The dialogue will give you various options, including altering the format, naming the files and changing the size. Again, producing a copy.
3. *Show File*: Right- (or Control-) Click on a pic and in the resulting dialogue choose 'Show File'. A Finder window will pop open with the file already selected.
All of these are faster and safer than rooting around in the iPhoto Library Folder
You might also check if Snapfish have updated their plug-in for iPhoto yet? If Snapfish haven't bothered to update their plug-in, you might want to check out many of the other services that have. Or are supported by an app like PictureSync. So, nothing proprietary there.
Regards
TD

IPad 2 cannot sync with Windows 7 machine but can sync with Mac Book Pro

I connected the iPad to my Windows 7 machine straight out of the box and tried to register it for the first time. It showed up in the device list for the first 3 minutes and then disappeared altogether. Thinking this is just some small error, I started troubleshooting using this guide http://www.apple.com/support/ipad/assistant/itunes/
http://support.apple.com/kb/HT2292
after doing that 4-5 times, I still had not found a solution to the problem. I made sure that my computer had the Apple Mobile Device Drivers installed in it. After all my iPod can easily connect to iTunes, but not the iPad. There isn't a problem with the usb cable because I used the same cable on the iPod and it worked like a charm. The iPad gets recognized in the Device Manager as an Apple Product, but does not show up in iTunes at all. This problem has frustrated me quite alot. I also tried to use my friend's Windows 7 machine, but to no avail. It did not connect to his computer either. Finally as a last resort, I tried to connect it to a another friend's Mac Book Pro [iOS Snow Leopard], and like clockwork, it connected and showed up in his iTunes. This is what surprised and outraged me the most. After spending 5-6 hrs troubleshooting the connections on my Windows 7 machine, uninstalling and reinstalling applications, drivers and finally the OS itself, this iPad connects seemlessly to a Mac Book within 1 minute. I could synchronize data, songs and the like on the Mac Book, but I can't even get this iPad to show itself on a Windows 7 machine. I am truly at my wit's end with this problem. Could anyone please help me with it? I would surely be grateful.

Here is my statdard reply, most of which you have already done. You may wish to try the others!
Firstly, make sure that your device is not hidden (left hand pane). If it just reads device then toggle between SHOW and HIDE.
Secondly, try all the other ports on your computer, even a number of times.
Thirdly, if you have another computer try plugging your device into it without taking any action, give it a moment, remove it and try it back in your other computer again.
Failing all that, see here - http://support.apple.com/kb/TS1538 for Windows and http://support.apple.com/kb/TS1591 for Macs
And failing all that put the device into Recovery mode. See here and note the paragraph 'If you restore from a different computer.... ' down near the bottom of the page -
http://www.apple.com/support/ipad/assistant/itunes/
https://discussions.apple.com/message/17579027#17579027tr

Windows 2008 r2 Server: Cant update the group belonging

Hello,
I have a Windows 7 client computer which is administered by a Windows 2008 Server.
When I try to change the local grants of the user account in that client computer, it appears to me the following message:
"Cant update the group belonging for NameDomain\user"
As result I cant change local grants for the user. I cant change his status from administrator to user of that machine.
Can anybody tell me how can I solve this issue?
Thanks in advance
Regards

Hi,
Thanks for your feedback. Did you mean that the issue exists after you removed
DameWare tools?
Please make sure that you have more than one administrator account on your computer, or you can't change it to a standard account since Windows requires at least one administrator account on a computer.
If you have another administrator account, you can try to use it to change the user’s account type.
Best regards,
Susie

HT4527 I have an iphone4 and a new computer with Windows 8. I cannot find the button to transfer my purchases, can anyone help?

I just purchased a new computer with Windows 8. I currently have an IPhone4. I have installed itunes on the computer and authorized it, but I cannot find the button to transfer the purchases from my phone to my computer. Any help would be appreciated. I tried to follow the instructions from support but could not find "transfer purchases" anywhere.

File>Devices>Transfer Purchases

Im trying to export a video to AVI but cannot see the option, Im on a mac. Is this option a windows only option?

The company I work for use AVI videos for Nuendo and I have recently installed my Adobe CC to test efficiency in creating video files for our clients. making QT is a piece of cake but cannot seem to find an option to create AVI anywhere. Would this option be available if I were to install Adobe CC on a Windows machine or is there no longer any support for AVI?

AVI is windows only.

I am the owner of an account with 4 lines. I cannot see the text messages for 1 of the lines. How can I see them usage and phone numbers, not the content. Thanks

Looking to see the frequency and numbers texted on one of the lines which I am the account owner of. I only see texts I placed to this number,

Zoupie,
This is something we can definitely figure out together! Are you able to get the phone for a few minutes? If so, please go to Settings>Cellular and scroll down. You will find a list of the apps on the phone. I'm curious to see if there are any messenger apps listed such as Snapchat, Facebook Messenger, Hangouts, ect...... These apps can send the messages via the internet connection instead of via our texting system and would not show up in our records.
SarahO_VZW
Follow us on Twitter @VZWSupport

ACS 5.2 Sync with Windows 2008 AD but cannot see the Groups

Similar Messages

Maybe you are looking for