ACS 5.3 Authorization problem with using Identity Groups in Access Policy Rule

Hello guys, I am found a problem which I can't solve regarding authorization with using Identity Groups in Access Policy rule.
ACS version: 5.3.0.40.6 (internal build B.839)
I have very simple RADIUS Authorization rule which authorize user on behalf of right Identity Group.
Requested Identity Group exist
Testing user is created in Internal Users and has assigned requested Identity Group
Radius Access Policy:
Authentication against Identity Store Sequence, where authorization server is external RSA SecurID device and additional attributes retrieval is configured from Internal Users.
Authorization is very simple – One Rule with only one Condition which is: Identity Group - in - Requested_Testing_Rule. Then Default rule is set to Deny.
When I will try login with my testing user then authentication against RSA SecurID is OK, but authorization will be denied by Default rule – It looks like my Rule with Identity Group is totally omitted.
I am managing several other ACS servers (version 5.3 but with older patches) where similar rules are working without problem.
What I am tested:
Remove testing user and create his account again.
Rename Identity Group
Use another Identity Group
Remove Access Policy rule and create it again
Use Compound Condition: System:Identity Group
Use Compound Condition: System:UserID instead of Identity Group in Rule (it is working without problem)
Do you have any idea where problem can be?

OK guys, it started working yesterday without any configuration change. Maybe it was some database inconsistence wich was solved by ACS itself.

Similar Messages

Problem with using both group by and order by

example:
SQL> select * from orgchart;
NAME TEAM SALARY SICKLEAVE ANNUALLEAVE
ADAMS RESEARCH 34000 34 12
WILKES MARKETING 31000 40 9
STOKES MARKETING 36000 20 19
MEZA COLLECTIONS 40000 30 27
MERRICK RESEARCH 45000 20 17
RICHARDSON MARKETING 42000 25 18
FURY COLLECTIONS 35000 22 14
PERCOURT PR 37500 24 24
SQL> select team,
2 avg(salary),avg(sickleave),avg(annualleave)
3 from orgchart
4 group by team
5 order by name;
order by name
ERROR at line 5:
ORA-00979: not a GROUP BY expression
who can tell me where is wrong?
Thanks
Leo

Hi,
These are basic things...
what ever the Columns you are including the Select Clause must
taken into consideration when applying the group by clause..
without the selection in of name column how can you use in Order by Clause..
while using the group by..
Thanks
Pavan Kumar N

EP5 - Problem with using NavigationTarget via Anonymous access

Hi folks,
Can anyone please advise on how to resolve a particular problem we've come across with anonymous access on EP5 SP5?
We have anonymous access set up on a portal, which means we can anonymously logon to the portal via a guest user, using a URL such as:
http://portal.domain.com/sapportal/guest/guestuser/
That works fine.
However, if we wanted to link directly to a particular page or other content we would use a NavigationTarget. If you append the NavigationTarget to the URL (eg. add ?NavigationTarget=aaa/bbb/ccc...) then the URL does not work, and the user is unable to logon anonymously.
Can anyone advise?
Many thanks in advance.

Anyone with any ideas?

I am going to buy unlocked iphone 5.. i will be going to india nxt months and will stay there for a while... so my question is will i get warrenty in india.. and will there be any problem with using indian sims..?? thnx for the help..

i am going to buy unlocked iphone 5.. i will be going to india nxt months and will stay there for a while... so my question is will i get warrenty in india.. and will there be any problem with using indian sims..?? thnx for the help..

The warranty for the iPhone is not and has never been International.
Warranty and support are ONLY valid in the country of origin. The only exception is the EU where the entire EU is treated as one country.
If the device will be used in India, buy it in India.
An unlocked iPhone will work on any supported GSM carrier world wide. The LTE portion of a US purchased, unlocked iPhone is unlikely to work outside North America as it does not support the appropriate bands used in other countries.

I have two Iphones with different email addresses sharing one Apple ID. Will that cause problems with using messaging and FaceTime?

I have two Iphones 5 with different email addresses sharing one Apple ID account.Both are using IOS 8.
I would like to set up a new Apple Id for one of the phones and remove it from the old account.
If I do that, can I move all of the purchased apps and songs to the new Apple account?
Also, will sharing one Apple ID account with two devices cause problems with using messaging and FaceTime?

Sharing an iCloud account between two devices can be done without causing issues with iMessage and FaceTime, just go into Settings for each of these functions and designate separate points of contact (i.e. phone number only, or phone number and unique email address). While that works, you'll then face the problem where a phone call to one iPhone will ring both if on the same Wi-Fi network -- but again, that can be avoided by changing each phone's settings.
Rather than do all that, don't fight it -- use separate IDs for iCloud. You can still use a common ID for iTunes purchases (the ID for purchases and iCloud do not have to be the same) or you can use Family Sharing to share purchases from a primary Apple account.

I purchased Adobe Creative Suite C2 and have been using it for years on the same computer no problem with using it. Recently upon opening Photoshop I received a pop up window saying due to Adobe Software security we need you to activate your CS2 software.

I purchased Adobe Creative Suite C2 and have been using it for years on the same computer without any problems with using it. Recently upon opening Photoshop I received a pop up window saying due to Adobe Software security we need you to activate your CS2 software. I tried, phone activation, web activation, nothing is working. I have the serial number and my Adobe account information. Any suggestions?

Error: Activation Server Unavailable | CS2, Acrobat 7, Audition 3
Mylenium

Problem with use of COM+ Transaction and DB Transaction

Problem with use of COM+ Transaction and DB Transaction
We build a Web site that use sometime COM+ Transaction and sometime DB
Transaction. If we use a COM+ Transaction and a few seconds later we try to use
a Database Transaction (OracleConnection.BeginTransaction), we get the error
Connection is already part of a local or a distributed transaction
Of course the error does not produce everytime; it takes some try before we get
the problem. And of course, if i use pooling=false on the connection string,
the problem does not appear.
i run the Web page
and push the COM+ Transaction and DB Transaction one after the other for some
times and the problem should appear.
Environment: Windows server 2003, .Net Framework 1.1, ODP.Net 9.2.0.401,
Database Server 9.2.0.4

> Why in form builder can't I...
Is this happening at runtime or at buildtime? You'll need to provide more info on what you are actually doing that's causing the problem.
Regards,
Robin Zimmermann
Forms Product Management

Problems with use cases in JDeveloper 11.1.1.1.0

Use cases made with JDeveloper 11.1.1.0.2 can not be used and edited in JDeveloper 11.1.1.1.0.
Same problems with Use Case Diagrams.
And it seems to be impossible to create new use cases in JDeveloper 11.1.1.1.0.
What are the differences between 11.1.1.0.2 and 11.1.1.1.0 if you look at use cases??

In JDeveloper 11.1.1.0.2 each use case has one file with the folllowing name: *.xhtml_usc.
In JDeveloper 11.1.1.1.0 each use case has two files with a names like *.xhtml_usc and *.uml_usc (after standard migration with JDeveloper). I can still edit the *.xhtml_usc files, but I have no idea what to do with the *.uml_usc files. I can only open a Property-editor, but the properties I see have no relation with the text I used in my original use cases . New use cases only have a *.uml_usc file and a Property-editor. In javadoc the new use case does not appear.
My question is: why do I have two different use case files in JDeveloper 11.1.1.0 and how can I use the Property editor??

AxWindowsMediaPlayer problem with using subtitle sami.file in winform

Hello every body
I have a problem with using sami caption in axWindowsMediaPlayer;
how can I use it?
I used
axWindowsMediaPlayer1.closedCaption.SAMIFileName="FileNameAddress";
and
axWindowsMediaPlayer1.ShowPropertyPages();//and select sami file
but in both ways the subtitle is not shown in my axWindowsMediaPlayer1 control;
please help me for solving this problem

Hi ,
As i know the Synchronized Accessible Media Interchange (SAMI) file must use an .smi or .sami file name extension.
set the smi-file direclty like following
AxWindowsMediaPlayer.closedCaption.SAMIFileName = "subtitles.smi";
Please also refer here
for more details.
Follow the steps below for your Windows Media Player to display captions and subtitles.
http://support.3playmedia.com/entries/21934486-windows-media-files-windows-media-player-settings
Related thread, please note the Style secttion.
http://answers.microsoft.com/en-us/windows/forum/windows_7-pictures/wmp-12-doesnt-play-sami-files-closed-captions/96fe98b7-1cdf-41f5-aa9e-a4e55fd07c0a
In addition, Could you please provide your smi or sami file and full code? It could be better to help us do some test on my side.
Have a nice day!
Kristin
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

I am having problem with using the Basic brush definition

I am having problem with using the Basic brush definition. When I try to click on it will not allow me to use it and will automatically use the 5 pt. oval brush definition. The only way I can use the basic brush is after I have already drawn something and then I have to click on the stroke and then press basic. This is incredibly annoying and if anyone could help I would greatly appreciate it. (I have Adobe CS6)

for whatever reason, the basic 'brush' you see in the brushes palette effectively means removing any brush from a path. to draw with the brush tool you need a brush defined. in your case the last one selected being the 5 pt oval one.

I am having problem with using my Basic brush definition

I am having problem with using the Basic brush definition. When I try to click on it will not allow me to use it and will automatically use the 5 pt. oval brush definition. The only way I can use the basic brush is after I have already drawn something and then I have to click on the stroke and then press basic. This is incredibly annoying and if anyone could help I would greatly appreciate it. (I have Adobe CS6)

Basic is not a brush, only a starting point for you to make a brush. Load the real brush you want before beginning to draw.

In FF4.0.1 problem with using HTML creator in WebCT. WHY? Not a problem in FF4.0.0

In FF4.0.1 problem with using HTML creator in WebCT. WHY? Not a problem in FF4.0.0

Hi Shane,
I passed through all the described problems in the list, and after doing several tests the error that you described is always present if the "jpcsclite_en_US.properties" is not present in the same place of the "jpcsclite.properties". I really don't know the reason, I just copied and pasted the same file, renamed the copy and the error was gone... though both of them include the line where the .dll is found!
That's how it worked for me, but if anybody knows how it works without that dirty trick, it would be good.
Regards,
Leandro
PS: Just in case that somebody is using the version JCSDK3.0, I did not find the .dll in that version, but in the JCSDK2.2.2 *(:-S)*

I have a problem with using MacBook Pro as wifi router when connected to ethernet

I have a problem with using MacBook Pro as wifi router when connected to ethernet. The Airport icon changes to show a laptop inside, my iPad shows connected (I think) but Safari will not operate. I tried pinging my iPad, it seems to see the iPad, but no connection to Safari or to other apps such as Good on the iPad. I have read many posting and tried repeatedly via Sharing in Systems Preferences, but no luck. Suggestions to fix, or is this a Lion problem?

Usually this is a problem related to the domain name server address. If you open Network preferences, select your Ethernet port then click on the Advanced button then on the DNS tab. You will likely see an entry like 10.0.1.1 already listed. Click on the Add [-] button and enter 208.67.222.222 then click on the OK button and then on the Apply button. See if this helps.
if it does not help then repeat the above but with the Airport port.

After installing Snow Leopard problems with using any of my Helvetica fonts

I've never really have a problem with any of apple's products until now.
After installing Snow Leopard I've found problems with using any of my Helvetica fonts,
which is a BIG problem if you work in DTP or print. You CAN'T remove the system version of Helvetica, and replace it with your own anymore.
Also Flash CS4 seems to be a dead duck, as after about 5-6 seconds of loading the program it crashes with a "KERNPROTECTIONFAILURE".
<title edited by host>

Thanks Tom but the original post title was "Work in DTP, don't install snow leopard", but of course apple were unhappy with the title. I know the issue/problem has been discussed for months, the real problem is that it shouldn't be a problem which everyone has to find work arounds for.
After 4 days of playing about, I've finally got flash CS4 working and Quarkxpress was also a big problem for a few months. Printer description (PPD) files which snow leopard doesn't like, but worked in tiger & leopard.....means I can't use my two A3 inkjets for proofing anymore.
I'm just disappointed by snow leopard

I have a problem with using (hotmail)

i have a problem with using (hotmail) , that when i try to use messenger through it , that shown many of pages can not be open , and my contacts are not available , when i contact with Windows Live team to solve the problem they inform me that the problem is with my browser , so i have to ask them about it , and i use Mozilla Firefox 8.0 , so kindly help me to solve this issue

That is a problem with Silverlight
On a Mac, Firefox 4 is a 64 bit application.<br />
Not all plugins support 64 bit and if not then you need to start Firefox in 32 bit mode to use that plugin.
# Close Firefox
# Start the Finder and open the Applications folder
# Right click or control-click the Firefox.app icon
# Select "Get Info"
# Select or Deselect "Open in 32-bit mode"
# Close the "Firefox Info" window
# Restart Firefox

ACS 5.3 Authorization problem with using Identity Groups in Access Policy Rule

Similar Messages

Maybe you are looking for