ACS 5.5 favorite reports dissapear after DB purge

Hi everybody,
I have an ACS 5.5 view server running 5.5 patch 4. I have quite a large deployment, so the database is purged on a regular basis.
I noticed that when I or other users create favorite reports these reports disappear after the DB purge. I can reproduce it on the view server, when I create a favorite reporte, start purge manually, after the purge is finished there is no entry any longer under favorites.
I can restore any other report, however the favorite reports that I created never show up again.
I have a test ACS where I cannot reproduce it. The size of the DB on the productive server is around 60 GB.
ANy ideas why this is happening ?
Thanks

ACS 5.5 Favorite Reports disappear after db purge
CSCuq82739
Description
Symptom:
Favorite Reports disappear after db purge.
Conditions:
Report is created by web gui user that is from external identity store (like AD), not created in ACS local admins.
Workaround:
Create local ACS admin user with the same username as external identity store user.
Further Problem Description:
It happens because purge job is checking the list of local ACS admins and if user that created favorite report is not found on that list, reports created by this user are being deleted.
Documentation needs to be updated on this behavior.

Similar Messages

How to survive an ACS audit with aaa-reports!

For many organisations the Cisco Secure ACS server is the guardian of the network - controlling administrative access to routers and switches plus overseeing end network users over VPN, wireless and firewall.
Its no surprise therefore that it should come under intense scrutiny during an audit. Perhaps what is surprising is the lack on awareness over best practice for running ACS in a secure way. We'd like to help in our small way and below is a list of tips we've picked up over the years of providing reporting services for ACS.
Buy aaa-reports! Of course we would say that... But without the ability to aggregate the logs from all your ACS servers and report on the data, or use our query builder for forensic analysis, or import the ACS database to document the policy features enabled.... you'll have a hard time getting the evidence that an auditor might ask for.
Make sure ACS is logging the appropriate attributes for the reports you need to create. For example if you need to document who did what to devices in specific Network Device Groups (NDG) you must ensure this value actually gets logged. Performing ACS upgrades often sets logging configs back to their defaults.
Create a build specification for your ACS. Detail the "meta config" of your ACS so that after an emergency hardware swap-out or software upgrade you can quickly check that the ACS has the correct configuration. The build spec document should be under version control and is a useful item in itself to convince an auditor your system is well controlled.
Create a Change Control system for config changes on the ACS. Since its ACS that decides who gets access and what commands they run on your network its vital you report on the Administration Audit logs. During an audit you can then correlate entries in your change control system with actual edits recorded in the Admin Audit logs. aaa-reports! can document what all or individual ACS admins did in detail.
Retain 2 years of actual CSV log data on your reporting server. For general day-to-day reporting you dont need this amount, but during an audit you may be required to show what happened on a specific historic date. aaa-reports! multi-db feature will allow you to create a specific back-end database just for this task and import logs from the required time period. Alternatively use the aaa-reports! snapshot feature to regularly save its database state, for example quarterly. You may then connect aaa-reports! to any of the historic snapshot databases to report on the data from that quarter.
Regularly export the ACS database into aaa-reports! If you are running reports against log data from 2 years ago you also need to know what was in the ACS database at the same time - using a more recent ACS database might yield unexpected results because the configuration is likely to changed in the meantime. Usecsvsync to regularly grab the ACS database and keep them alongside the retained CSV logs for future reference.
Review the quality of ACS log data. From time to time its worth taking a look at the quality of the data getting logged. We often find customers with rogue scripts being automated on devices that cause the ACS Failed Attempts logs to become full of many MBs of "junk data" - essentially one failed attempt for each line of the script. If left to continue for months the real data starts to become more difficult to find.
In terms of specific questions that an audit will concentrate on, typically it will revolve around demonstrating that not only is there specific and adequate policy to control access to those parts of the network require it, but also to seek evidence that those policies are in fact working. In aaa-reports! we added a whole set of reports for TACACS+ Device Administration (TDA) that attempt to document the ACS policy configuration, answer questions such as "who can/cannot access devices and once connected what can they do?" and finally report on what did actually happen.
Below are some additional TDA specific tips:
Ensure services such as shell/exec are only enabled for ACS groups that really need it. The aaa-reports! TDA Group Summary report will list every ACS group and what TDA features are enabled. The TDA Group Detailreport can be used to inspect the policy in detail.
Check for user-level ovverides. In general users should always inherit policy from their group unless there is good reason. The aaa-reports! TDA User Summary report list users with group overriden configuration. The TDA User Detail report can be used to inspect what policy items are specific to the user.
Use Network Access Restrictions (NAR) to prevent login by unauthorised personnel. The first line of defence is to only allow device admin users access to routers and switches. We find some customers rely purely on command authorisation - this potentially lets anyone access the device who can authenticate. Imagine the scenario where ACS has "unknown authentication" enabled pointing at your Windows AD then answer "Who has access?". aaa-reports! can report group-by-group on device access controlled by NARs and therefore answer "Who has access to device XYZ?"
Use Device Command Sets (DCS) for command authorisation. Create a set of re-usable DCSs with meaningful names in preference to simple group-level command authorisations. ACS administration is simplified and the auditor should understand what the intent of the policy is by its name. aaa-reports! can document the both the content of each DCS and the group assignments, thereby answering the question "What commands can user X execute on device XYZ?"
Seek out and remove old ACS user accounts. aaa-reports! can report on inactive users both from examination of accounting logs and (if password aging is enabled) from the imported ACS database itself.
Learn how to use the aaa-reports! Query Builder. Despite the comprehensive set of pre-built canned reports, during an audit you are likely to be asked questions about a specific date, user or device. Knowing how to use the QB to build filter/sort and group/totalling queries will get the answers quickly. Take the random question "How many sessions did user X have on devices A, B and C on this date?" The aaa-reports! QB can easily create custom reports that filter on any number of attribute values, group by multiple columns and have calculated fields such as sum, count, average etc. If you have a working knowledge of Visual Basic 6 (VB6) its also possible to use a rich array of formatting and other VB6 functions to create additional fields.
The above list is of course by no means definitive as every customer will have their own specific needs from ACS and face different levels of compliance. Undergoing an audit is never easy, but at least with the right tools it doesnt have to be awful!
For more infomation on extraxi aaa-reports! or to download our free 60 day trial version please visit http://www.extraxi.com/audit.htm

.

SCOM 2012r2 Favorite Report could not be shown on web console internal error 500

Please HELP!!!
My lab settings:
SCOM1, SCOM2, SQL1
Both SCOM servers were installed on 2012r2 Server and SCOM 2012 r2 Rollup3 with Web Console enabled.
Report server installed on SQL1, MSSQL2012 with Report service, All role are installed on different servers.
All servers are in the same domain
ISSUE:
I cannot run report from Favorite Report from Web Console using other non-domain computer. I got the error "500 internal server error" after run the report.
I got this message after enable error detail report after run report from Web.
PLEASE HELP ME!!!!!

Hi,
>>I cannot run report from Favorite Report from Web Console using other non-domain computer. I got the error "500 internal server error" after run the report.
Do you mean that when you run report from Web console using domain joined computer everything works fine?
If so, then the issue seems like IIS authentication related issue, we may need check below settings:
Check the binding order in IIS where the web console is installed and make sure http is on top.
Check the advanced settings on Internet Explorer. Look for the Windows integrated authentication setting and compare this setting with the management server.
and I would like to suggest you go through the below threads for more details:
http://social.technet.microsoft.com/Forums/systemcenter/en-US/36f68040-825c-4dce-b4f5-a4b4004259d1/scom-2012-web-console-from-remote-host-401-unauthorized-access-is-denied-due-to-invalid?forum=operationsmanagergeneral
http://social.technet.microsoft.com/Forums/systemcenter/en-US/5d0029bd-a595-41aa-8065-2dd8fe34c0ac/scom-2012-web-console-401-unauthorized-access-is-denied-due-to-invalid-credentials?forum=operationsmanagergeneral
Regards,
Yan Li
Regards, Yan Li

Mails stored as drafts are dissapearing after 4 secs.

Hi,
I hope that I am not off topic here.
I am used to mail - I am not interested in changing to another non-apple client...
Since the latest security update for 10.3.9
i am having issues with my mail program 1.3.11 (v622/623).
Many users are reporting issues with indexing function, this works fine here...
Suddenly when trying to get new mail it says that there is a problem with opening the inbox. (propose a protected openening/quit/...)
I chose always quit. After a re-launch I usually am fine again. This issue returns from day to day and is really annoying.
Second issue is that stored mails in the draft box are dissapearing after 4 seconds. This is happening each time I open the mail program. The drafts re-appear when I am saving a new draft, but they are dissapearing in the same way when I restart mail after a quit.
I trashed all my default mboxes.
This won't help. I rebuilded all boxes - this won't help either.
So, any help is very appreciated.
Thanks, Michael
the draft mbox:
tableofcontents 8KB
mbox 4KB
content_index 4KB

Hi Donald,
thanks for your attempts helping me out of this mess.
I checked all my settings.
I created a new account.
The dissapearing won't go away.
From time to time, when switching from inbox to sent box or trash
I am getting a message window:
Das Postfach „~/Library/Mail/[email protected]/Drafts.mbox“ wird zur Zeit von „xxx xxx“ auf dem Server „xxxuserxxx.local“ benutzt. Wenn Sie ein Postfach öffnen, das bereits benutzt wird, beschädigen Sie es möglicherweise.
schreibgeschützt öffnen or beenden or dennoch öffnen
(Sorry, this is German!)
In English it would be something like that:
The Postbox „~/Library/Mail/[email protected]/Drafts.mbox“ is now used by „xxx xxx“ on the server „xxxuserxxx.local“. Opening a postbox which is already open could damage this.
Three options:
protected opening or quit or opening in any case
But I have another partition with a 10.3.9 running (without that sec. updates).
There is mail 1.3.11 (v622) active - it is running normal without any issues.
So I am reckoning that the newer version v622/623 is instable here....
Would it be recommended to delete a few plist files? Which ones.
(it is not a big issue for me to fill out the forms on a restart)
Greetings
Michael

ACS loses connection with AD occasionally after upgrade from 5.2 to 5.3.0.40

ACS had been integrated with Active Directory before ACS upgrade to 5.3. After the ACS 5.3 upgrade users aren’t able to login to AAA devices occasionally. Error message is:
{AuthenticationResult=Error; Type=Authentication; Authen-Reply-Status=Error; }
24429 Could not establish connection with Active Directory
At the same time, when this issue occurs, ACS connection to AD works fine (checked with Users and Identity Stores> External Identity Stores > Active Directory “Test Connection”)

I had the same problem, I opened a Cisco TAC case and my issue was resolved.
Sent: Tuesday, 14 August 2012 9:58 AM
Subject: RE: 622739355 HelpDesk#SVR328332-2 : Troubleshoot Cisco ACS 1121 v5.3 With Windows Active Directory
Hi Ramraj,
Thanks for the link to the article, but from what I’ve seen in the logs I’m not sure that we’ve got the same root cause to the issue.
From the ACSADAgent.log files I can see log messages like:
Aug 11 11:10:56 CSSC-TPM-DC-ACS-1 adclient[5524]: DEBUG network.state NST: SniffList: postfailsort=mykulad11p.cssc.dksh.net
Aug 11 11:10:56 CSSC-TPM-DC-ACS-1 adclient[5524]: DEBUG base.kerberos.adhelpers Encryption (id 1) is not supported by KDC. Try next in the list
Aug 11 11:10:56 CSSC-TPM-DC-ACS-1 adclient[5524]: DEBUG base.osutil Module=Kerberos : KDC refused skey: KDC has no support for encryption type (reference base/adhelpers.cpp:216 rc: -1765328370)
Aug 11 11:10:56 CSSC-TPM-DC-ACS-1 adclient[5524]: DEBUG base.adagent Unable to refresh computer credentials: KDC refused skey: KDC has no support for encryption type
This lines up with the error message that we see in the TACACS+ Authentication logs:
24493 ACS has problems communicating with Active Directory using its machine credentials.
I have come across a NETBIOS limitation (it’s not an ACS bug, but a bug has been filed for tracking and documentation purposes) that prevents two ACSs from being connected to Active Directory at the same time if the first 15 characters of their hostnames are the same. The bug ID is CSCtj62342 and its externally visible details are available here: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtj62342
The hostname of the primary ACS is : MYMY-TPM-DC-ACS-1
The hostname of the secondary ACS is: MYMY-TPM-DC-ACS-2
From the hostnames, we can see that the first 16 characters of the hostnames are the same. What this means is that once the primary is connected to AD, after some time passes (this will depend on when the secondary goes an talks to AD) the secondary will lose its connection to AD and any authentications hitting the secondary will fail with the same error: 24493 ACS has problems communicating with Active Directory using its machine credentials.
To resolve this issue, the hostnames of the ACSs will need to be changed so that the first 15 characters of their respective hostnames are not the same. Please keep in mind that this is a NETBIOS limitation and not a software bug.

Reports in Favorite Reports did not run when open

In SCOM 2012, I have run a few reports with the report template in the default SCOM management pack and saved them in the Favorite Report. When I open the saved reports at the Favorite Report again, they suppose to be run automatically. However, when I open
the report, it stopped at the parameters page and I need to click the run button explicitly. Does any one know why it is so and how can I make it run automatically when I open the reports which I have saved in the Favorite Report.
Thanks a lot for any advice.

Thanks a lot for your comment.
First of all, there is no error at all and no message in the event log that related to this issue. The report saved in Favorite Reports did able to run successfully without any error just only I need to click the run button manually. Suppose it should run
automatically, right?
Second, there actually two MS (say MS01 and MS02) and both of them point to the same SSRS. Say for example, the report saved in the Favorite Reports at the Operation console on MS01 will not run automatically when open it. The behavior is the same when using
the Operation console on MS02 to open that particular report saved on MS01.
However, when I save a report in the Favorite Reports at the Operation console on MS02, it will run automatically when I reopen it. Then I use the Operation console on MS01 to reopen this report, it will run automatically as expected.
In short, report saved in MS01 got problem no matter where you open it. Report saved in MS02 got no problem no matter where you open it. It is very weird and I don't know what setting in SCOM 2012 would affect this behavior. In a big head right now...

Remove link from widget favorite reports - on page home

Hello Experts
On Startpage (Home) in CRM. I defined some links for widget favorite reports.
Some users are not allowed to klick on ofe the links. so i wante to remove them (because i don't wante do define a new role for this on link)
How could i remove them? Can you give an example coding for the do_prepare_out?
Thanks for Help.
Regards, Sven

Hi Sven,
You can try the following:
Enhance the web ui component UICMP_WC_FAVORI . inside the component enhance the view UICMP_WC_FAVORI/FavoriteCRMLinks and inside your z IMPL class you can redefine the method GET_WCFAVORITE_LINKS. Inside this method you can put condition based on business role of current loggedin user and remove or add report links. Ypu may need to define the DO_INIT_CONTEXT() to call your version of GET_WCFAVORITE_LINKS()
To get the business role of current loggedin user you can use the following code:
Data: lv_current_profiel TYPE crmt_ui_profile.
* Get the current user's business role
CALL METHOD cl_crm_ui_profile=>if_crm_ui_profile~get_user_defined_profile
RECEIVING
rv_result = lv_current_profiel.
Hope this will help!
Regards,
Ajay

Why does my guides dissapear after i save my pdf and open it again?

Why does my guides dissapear after i save my pdf and open it again?
Basically i use guides a lot when creating or editing PDFs, however when i am done editing and i save my work and close it. The next time i open up the pdf to edit, my initial guides when i created the Pdf is missing. This is really annoying. does anyone know how to fix this problem?

Yes go to preferences, and then click on security and privacy.

Refresh Webi reports automatically after BI data loads ?

Hello,
We are about to install BOE X.1 on top of BI 701.
The idea would be that the users would perform their WebI daily reporting, but obviously only after SAP BI night batch scheduling is finished, and the BI infoproviders filled.
I've read that BOE ofers you the ability to refresh the reports upfront.
We were wondering if there is a way to easily implement this logical dependance : to refresh the Webi Report only after the end of BI data loads.
There is off course, the possibility to use an external scheduler, but we have checked the licencing and it's quite expensive.
Is there another way to do so ?
Many thanks for your attention.
Best Regards.
Raoul

Hi Alan,
Thank you very much for your quick answer.
I would like to make sure that I understand you since I'm not very familliar with BOE :
First , we create an event in the CMC and connect it to a file location
Then we schedule the document and add the file event : do you mean schedule the webi report ?
Finally create the file as part of the Bex query refresh process : how exactly do we do that, in the BI process chains ?
Thank you very in advance for your help.
Best Regards.
Raoul

I downloaded the new operating system and all my contact details,address boof and numbers are GONE?When I receive a test email it dissapears after 30 seconds.ISP is Cox in San Diego and they don't have a clue?

I downloaded the new operating system and all my contact details,address boof and numbers are GONE?When I receive a test email it dissapears after 30 seconds.ISP is Cox in San Diego and they don't have a clue?

Hello Brian Delaney,
It sounds like you are trying to send emails but for some reason, thousands show activity. I would start by re indexing the mailbox to help troubleshoot the issue:
1.Quit Mail if it’s open.
2.In ~/Library/Mail/V2/MailData, delete any file that begins with “Envelope Index,” such as Envelope Index or Envelope Index-shm.To show your home Library folder, hold down the Option key, then in the Finder choose Go > Library.
3.Open Mail.Mail creates new Envelope Index files. This process may take a few minutes, depending on how many messages Mail is reindexing.
Mail (Mavericks): Reindex messages
http://support.apple.com/kb/PH14876
If the issue persists, I would next remove the account, restart the computer, and re add the account:
1.Choose Mail > Preferences, then click Accounts.
2.Select an account, then click Remove.
Mail (Mavericks): Remove mail accounts
http://support.apple.com/kb/PH14944
Removing an Exchange or IMAP account doesn’t permanently delete the account’s mailboxes and messages because they’re stored on the mail server. To retrieve the account’s mailboxes and messages from the server, add the account again in Mail.
To add the account again, click the rather than the as described above and retest the issue.
Thank you for using Apple Support Communities.
Take care,
Joe

FCP text dissapears after Compressed

Running Dual G5 that shipped with Tiger. I'm using the FCP4 package and DVDSP3.
Compressor has been doing two things that it was not doing with Panther.
1. Text crawls created in FCP dissapear after going through Compressor MPEG 2 high quality process (FCP regular text does not dissapear)
2. Chapter markers are not retained either.
Previously I had problems with Tiger doing weird stuff with DVDSP, but apple put out a patch to correct it.
Any ideas or solutions for the above two problems? (I've already read other similar threads - unfortunately none of the suggestions helped my problem and the folks weren't using the same versions of software)

i've seen your video and your text seems fine to me. are you planning to ever have this broadcast on television? if so then there may be an issue. but if everything is webcast then it looks fine. i'd tell you to view everything on an NTSC monitor before air but i'm not sure if you are going to need it.
you mentioned that when you 'watch it full screen' that the text looks bad. do you mean full screen on youtube or fullscreen on your comp monitor? how big of a monitor is it? everything will look like garbage if you expand it beyond the size that it was intended for. it's like, HD stops being HD if you look at it on a huge monitor. pixels get larger and you lose definition.

Illustrator files dissapear after saving files

hi
we are all working on a network, mac computers all running mavericks. It started to happen few days ago that .ai files dissapear after editing and saving.
any solution?
Thanks!

gonzalom,
It is always recommended here to open/save from/to own hard disk, and to copy from/to networks and removable media. You may be lucky (for a while), but the chances of file corruption and other unpleasantnesses are immensely greater when you use anything but the harddisk, and it is better to be safe than sorry.
In addition to the (far greater) risk of file corruption, some issues are mentioned here:
http://helpx.adobe.com/illustrator/kb/illustrator-support-networks-removable-media.html

Indesign dissapears after restart

Hello.
After i tried the CS6 beta all my Adobe programs are dissapearing after restart. Registry stays but they dissapear from start menu and wont open up afterwards.
Most of the errors are either : "Please uninstall and reinstall the product " Error: 1
Or that the specific file does not exist.
I have reinstalled it thousands of times already after every restart . I have been keeping my computer in sleep for weeks just not to reinstall it again.
This problem began after CS6 beta didnt want to uninstall itself and i used something called the "Perfect uninstaller" i did not know that adobe had creative suite uninstaller thing then.
All the other programs are fine after restart but the CS ones are dissapearing from start menu and refuse to start up from their program direction.
I can evade Error 1 with administrator mode (after restart) but i cannot have the drag drop function. Which is crutial to my workflow.
PC Specs:
Windows 7 home premium
Asus Notebook N73SV
Intel Core I7-2670QM
Ram 8gb
Nvidia Geforce GT540M

And in future, NEVER run beta software on a mission critical machine. You need to be prepared to completely rebuild any machine that you use for testing, and one really good method is to make a disk image of some known good state that you can restore if necessary so you don't have to go through the hassle of reinstalling the the OS and all the apps, but it's still a pain.
You might, if the cleaner tool fails, try using Windows System Restore to go back to a point before you installed the beta software, but the odds of that working after everything else are probably not better than 50-50.

All my iphoto pictures dissapeared after downloading the new version. but i still got some of them on my ipad. is there any way i can import them to my mac?

I've got a question.
all my iPhoto pictures dissapeared after downloading the new version.
I still got some of them on my iPad which I've imported from my libary earlier before they all dissapeared.
is there any way I can import them to my Mac?

Use 3rd party software like:
http://www.digidna.net/products/diskaid
http://www.wideanglesoftware.com/touchcopy/index.php
For items purchased (including apps) from iTunes:
http://support.apple.com/kb/HT1848

When opening Bridge (CS6) I get the following message: "Bridge encountered a problem and is unable to read the cache. Please try purging the central cache in Cache Preferences to correct the situation" I tried and after selecting purge cache it does not a

When opening Bridge (CS6) I get the following message: "Bridge encountered a problem and is unable to read the cache. Please try purging the central cache in Cache Preferences to correct the situation" I tried and after selecting purge cache it does not allow me to select OK. Also Bridge keeps saying "Building Criteria" with the spinning wheel and nothing happens. I tried uninstalling and reinstalling to no avail. Please help:)

Maybe a Preferences reset can help:
Numerous program settings are stored in the Adobe Bridge preferences file, including display, Adobe Photo Downloader, performance, and file-handling options.
Restoring preferences returns settings to their defaults and can often correct unusual application behavior.
Press and hold the Ctrl key (Windows) or the Option key (Mac OS) while starting Adobe Bridge.
In the Reset Settings dialog box, select one or more of the following options:
Reset Preferences
Returns preferences to their factory defaults. Some labels and ratings may be lost. Adobe Bridge creates a new preferences file when it starts.
Purge Entire Thumbnail Cache
Purging the thumbnail cache can help if Adobe Bridge is not displaying thumbnails properly. Adobe Bridge re-creates the thumbnail cache when it starts.
Reset Standard Workspaces
Returns Adobe predefined workspaces to their factory default configurations.
Click OK, or click Cancel to open Adobe Bridge without resetting preferences.

ACS 5.5 favorite reports dissapear after DB purge

Similar Messages

Maybe you are looking for