ACS external database issue

Hi
I have the following issue, user exists on both the ACS and token server authenication is set to external database with no unknown user policy as the user is known to the ACS! this fails authenication error message is CS user unknown... Now if the unknown user policy is set to the external database the authenication works fine this is on 3.3. I have checked for bugs to no avail.
Any assistance would be good...
Thanks MJ

Hi JG
Many thanks for your response, it is configured this way due the documentation below:
Known Users -Users explicitly added, either manually or automatically, into the CiscoSecureACS database.
These are users added through User Setup in the HTML interface, by the RDBMS Synchronization feature, by the Database Replication feature, or by the CSUtil.exe utility. For more information about CSUtil.exe, see "CSUtil Database Utility".
CiscoSecureACS attempts to authenticate a known user with the single database that the user is associated with. If the user database is the CiscoSecure user database and the user does not represent a Voice-over-IP (VoIP) user account, a password is required for the user. If the user database is an external user database or if the user represents a VoIP user account, CiscoSecureACS does not have to store a user password in the CiscoSecure user database.
This is from the following link....
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs32/user/qu.htm
Many thanks MJ

Similar Messages

  • ACS : external database config. (AD)

    Hello,
    I installed the last version of Cisco ACS 4.0 and I have a problem with the "Windows database configuration". I want to authenticate users on an active directory, but when I want to configure it I have an error message:
    "An error has occured while processing the Authen DLL
    Default Group Page because of an internal error ..."
    I tried to find why I have this error but until now I have nothing that can help me to solve this issue.
    Who can help me?
    Thanks in advance for any help.
    Rui

    The dll should be logging an error message into the csadmin service log
    CSAdmin/Logs/admn.log
    Sounds like something is broken - this will need TAC + escalated support I suspect.
    Darran

  • ACS external database question

    Hi,
    our customer need a security solution that enable the users to login to the wireless network with their usernames & the passwords which stored in the active directory not using the preshared key of the wireless.
    if we are using ACS server and integrate it with the active directory , this will enable the users to login with their usernames and the passwords or not ????
    Also our customer use D-Link access points . These access points must be replaced with cisco access points or it can be used with the ACS.
    please i need your help.
    regards

    Yes, that is possible with EAP.
    User---->Dlink AP---->ACS ---->AD
    This link explains about PEAP authentication,
    http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/user/SCAuth.html#wp380605
    Regards,
    ~JG

  • ACS 4.2 appliance external database configuration with AD

    Dear All,
    How to configure external database in ACS 4.2 appliance for Windows Active Directory.Active Directory is configured in Windows 2012.ACS internal database is working fine without interruption.What configuration is requred to configure external database(Active Directory).It would be highly appreciated if you share your experience with me.
    Thanks,
    AS

    Please check
    Supported Interoperable Devices and Software Tables for Cisco Secure ACS Release 4.2
    http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4-2/device/guide/sdt42.html

  • External database Authentication Issue

    Hello Experts
    I have omplemented external database authentication in my PC and somehow its not working
    Do we have to configure the details in NQSconfig file in the security section for implementing External Database Authentication .

    Hello Thanks for your concern .
    Steps i have followed
    *1)* use that table. If not, create the following table in your database.
    CREATE TABLE OBI_USER
    USERNAME VARCHAR2(255 BYTE),
    PASSWORD VARCHAR2(255 BYTE),
    GROUPNAME VARCHAR2(255 BYTE),
    DISPLAYNAME VARCHAR2(255 BYTE),
    LOGLEVEL NUMBER,
    CREATED_DT DATE sysdate,
    **2)**Created New ODBC Connection to use Separate Connection pool for OBIEE Security .
    *3)* Created New Session Initialization Block for Authentication and gave
    (SELECT USERNAME, GROUPNAME, DISPLAYNAME, LOGLEVEL FROM CPR_OBI_USER WHERE UPPER( USERNAME) =UPPER(':USER') AND UPPER(PASSWORD) =UPPER(':PASSWORD') ) by selection the new BI Security connection pool
    In the variable Traget i have defined 'USER', 'GROUP', 'LOGLEVEL','DISPLAYNAME'
    *4)* Created another Session Initialization Block for Authorization and gave (SELECT 'GROUP', GROUPNAME FROM OBI_USER WHERE UPPER( USERNAME) =UPPER(':USER'))
    And selected row wise initialization in variable target AND assigned Authentication Initialization block in the Execution Precedence .
    *5)* Created Groups in Manage-> Security-> Groups with the same group names as given in OBI_USER Table
    *6)* Added Groups in Manage Catalog and groups in Presentation Services .
    *7)* When i log on with the user which is assigned to the group in the OBI_USER Table then its giving
    (Unable to Log In     
    An invalid User Name or Password was entered.
    Please enter your User ID and Password below, and then press the Log In button.)
    Edited by: newbi on Sep 28, 2010 9:53 AM

  • ABAP report  from fields connecting to an external database

    Hi All,
    The requirement is to connect some GL data with external audit data which is stored in an oracle database.  These two table data has to be merged and a report has to be generated.
    I heard we could connect to the external database from the R/3 4.7 version through DBconnect.  Has anyone come across any such requirement and done a similar report, could you give me the inputs please.
    regards
    Girish

    Questions like yours are best asked over at the webOS Developer's Forum.  The Palm Support Community here is geared to answering end-user questions about devices, not programming information.
    https://developer.palm.com/
    WyreNut
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • How to connect external database into BI source system?

    <Moderator Message: Please search before posting. This issue has already been discussed a lot of times. Additionally you might have a look at the online help>
    Dear SDN,
    I am working on BI 7.0 system.
    Client request is to connect the external database into source system.
    External database (different server) has installed the Sybase database.
    1.Is it possible ?
    2.What is the procedure for connectivity from BI end .
    3. which server port of external database(sybase databse) need tobe open for firewall policy.
    Thanks in advance
    Ravi
    Edited by: Siegfried Szameitat on Mar 9, 2009 1:23 PM

    Hi Ravindra,
                    Check here........
    <link farm removed by moderator>
    Thanks,
    Vijay.
    Edited by: vijay m on Mar 9, 2009 5:43 PM
    Edited by: Siegfried Szameitat on Mar 9, 2009 1:23 PM

  • RFC XI JDBC to external database.... Get data in multiple rows

    Hi,
    We have been really struggling with this scenario. We have created a RFC that has 1 Import parameter (Order_ID) and table parameter (3 Columns: Order_ID, Partner_type, Partner_no).
    When we call this RFC in SAP, it should make a connection to external database via JDBC and get multiple row data for every Order_ID. We are not using Oracle Stored Procedure, instead we are using simple Select statement. Did all the mapping and configured correctly. However, we are getting short-dump when we execute RFC. When we checked in XI, it says " Check xml instance is valid for source xsd and target-field mapping fulfills requirements of target xsd at "
    Has anyone tried getting multiple row information from external database(Oracle) using Select statement in XI ? IF so, can you pl let us know if we need to something different in Mapping ?
    Niranjan

    Niranjan,
    Check this blog of mine to see how the datatype for Synchronous Select should be constructed,
    https://weblogs.sdn.sap.com/pub/wlg/3928. [original link is broken] [original link is broken] [original link is broken] [original link is broken]
    If this looks good, a few checks
    1. Check the request inbound payload , i.e the RFC request in MONI. Is this as expected?
    2. Check the output of the request mapping and check if this is as expected.
    3. Check the response from JDBC, is this as per the datatype defined.
    4. Check the mapping from JDBC response to RFC response.
    To me this looks like an issue with the JDBC response structure.
    Meanwhile to understand how to test mapping, check blog of michal,
    /people/michal.krawczyk2/blog/2005/09/16/xi-how-to-test-your-mapping-in-real-life-scenarios
    Regards
    Bhavesh

  • API for connecting  to an external database object

    Hi,
    Can anyone provide me with the API for connecting to the external database table and to create , update and delete data with an Oracle external database object.
    Wish you great time.
    Best Regards
    Sid

    Questions like yours are best asked over at the webOS Developer's Forum.  The Palm Support Community here is geared to answering end-user questions about devices, not programming information.
    https://developer.palm.com/
    WyreNut
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • Updating tables in external database

    Is there a way to update tables in an external database using an HTML-DB process?
    I want to make my "Apply Changes" button process script update an external table in database x.
    Example:
    update x.tracking_locations@x
    set location = :P7_LOCATION,
    description = :P7_DESCRIPTION,
    IN_USE = :P7_IN_USE
    where tracking_location_num = :P7_TRACKING_LOCATION_NUM;
    I get the following error:
    ORA-01461: can bind a LONG value only for insert into a LONG column ORA-02063: preceding line from x
    None of these columns is type long! (they're varchar2)
    Both databases are 9iR2.
    I had a similar problem INSERTING the data (CREATE button) which I got around by posting to a table in my HTML-DB schema, inserting into the database x table as select from the HTML_DB table then deleting from the HTML-DB table all within the "on submit" process script.
    example:
    insert into tracking_locations
    (DESCRIPTION, LOCATION,IN_USE)
    values(:P7_DESCRIPTION,:P7_LOCATION,:P7_IN_USE);
    insert into x.tracking_locations@x
    (DESCRIPTION, LOCATION,IN_USE)
    select description, location, 'Y' from tracking_locations;
    delete from tracking_locations;
    This INSERT trick works, but seems like it should be easier! Nevertheless, I can't get updates to work.
    Any ideas?

    hey tony--
    neat issue. i just reproduced it on our development box and will log it in a minute. for now, though, an easier way to get around it would be to assign the values from your page items to local variables declared in your update procedure and use those local vars for your update. so instead of...
    update x.tracking_locations@x
    set location = :P7_LOCATION,
    description = :P7_DESCRIPTION,
    IN_USE = :P7_IN_USE
    where tracking_location_num = :P7_TRACKING_LOCATION_NUM;
    ...you could set it up like so...
    declare
    l_location varchar2(200) default :P7_LOCATION;
    l_description varchar2(200) default :P7_DESCRIPTION;
    l_in_use default :P7_IN_USE;
    begin
    update x.tracking_locations@x
    set location = l_location,
    description = l_description,
    in_use = l_in_use
    where tracking_location_num = :P7_TRACKING_LOCATION_NUM;
    end;
    ...and things should work fine. i'm also pretty sure that you could avoid having to declare the local variables if you referred to your items in your update statement using the v('ITEM_NAME') syntax, but you'd have to have global_names set to true and it might not be as performant a workaround.
    hope this helps,
    raj

  • How to Link to External Database

    I can't figure out a good way to keep track of photos within Lightroom that I submit for contests, sales, etc. I could make comments in the caption metadata field, but that would mess up my caption field and is not that flexible. I could color code, but that's very limited. It seems like the ideal way would be to create an external database with something such as Microsoft Access. Using  the Filename as the primary field, I would link it to additional fields, date submitted, where sent to, type (contest, stock sale, gift, etc.), price obtained, published date, etc. Then I could see the history of any given image, run queries for all images submitted to a particular place where amount is > $0, etc.
    As this is just a hobby and the numbers are small, I could just enter all the data by hand, but if I ever enjoy a lot of commerical success it would be nice if the database integrated with Lightroom. Ideally the queries run would not only show the Filename, but also show photos, perhaps as a Collection in Lightroom. It seems there must be professionals that track such information. Perhaps there is a third party program that does this. I'd appreciate any suggestions.
    Dan

    I think Access would be better in the event a given photo is used multiple times. Suppose a particular photograph sold at iStockPhoto.com for $1 on 22 occasions, at a local gallery as a 5 x 7" print for $2 on 14 occasions, as an 8 x 10" print for $8 on 9 occasions, and on one's own web page for $3 on 9 occasions, plus published in Pop Photo on 4/17/03. To make custom fields in Lightroom would be onerous, and it couldn't do the math for you. In Access one could use one to many tables (tblPrintSize, tblWebSite, tblSellerType, etc.) to track this fairly easily. The only time consuming part would be entering each sale if one had a lot of them. Of course one could choose to enter quarterly or yearly sales instead if desired.
    Queries and reports would show where one's income is derived, what formats sell best, etc. It might help in tax preparation.
    This may be more power than professional photographers would ever want. It's probably a fantasy that won't come true that it will ever be an issue for me, but I like to be proactive on data management before it becomes unmanageable.

  • OBIEE 11.1.1.7 external database authentication fails with hashed passwords.

    Hi .
    I use an external database ( Oracle database 11g  release 11.2.0.1.0) to authenticate user with OBIEE 11.1.1.7.
    I configured  SQL Authentication provider as my provider ,It works OK with :enabled  Plaintext Passwords Enabled option and password  is stored as plain text.
    But It fails when I disable this option and want to authenticate with hashed passwords.It gives Authenticate Denied error.
    In Provider Specific tab there are some parameters which might need changes:
    1-Password Algorithm:??
    2-Password Style:??
    3-SQL Get Users Password:SELECT U_PASSWORD FROM USERS WHERE U_NAME = ?
    How can I find correct values for options 1 and 2 form my external database?
    And Is it need to rewrite query in option 3 ?
    Please find attach files.

    Hi,
    I too faced same issue when I was installing OBIEE 11.1.1.7.0 on windows7 64bit.
    Please refer the below links.
    http://satyaobieesolutions.blogspot.in/2013/05/configuration-action-creating-domain.html
    http://satyaobieesolutions.blogspot.in/2013/05/obiee-111170-simplesoftware-installation.html
    http://satyaobieesolutions.blogspot.in/2012/06/obiee-11.html
    Hope this help's
    Thanks,
    Satya

  • Aperture 3 - Copy/paste metadata to external database

    Hi all, I'm trying to create an external database of the lat., lon, direction, date and other metadata for ~1000 photos. I can see see the metadata alongside the image in browser mode or have it appear at the bottom of the image in full-screen view. I'd like to be able to a) create a table to those data to a text file that I can put in a spreadsheet (fast way) or, b) be able to copy/paste those data separately into the spreadsheet. As it stands now, I cannot do either. I cannot highlight and copy the text. Does someone know where those data are stored or have a solution?
    I appreciate your help.

    I have the same issue. This is what I get when exorting the data:
    Version Name          Title          Urgency          Categories          Suppl. Categories          Keywords          Instructions          Date Created          Contact Creator          Contact Job Title          City          State/Province          Country          Job Identifier          Headline          Provider          Source          Copyright Notice          Caption          Caption Writer          Rating          IPTC Subject Code          Usage Terms          Intellectual Genre          IPTC Scene          Location          ISO Country Code          Contact Address          Contact City          Contact State/Providence          Contact Postal Code          Contact Country          Contact Phone          Contact Email          Contact Website          Label          Latitude          Longitude          Altitude          AltitudeRef
    DSC09894                                                                                                                                                                                                          0
    What am I missing that actually will have it export the real values?

  • Import Roles from an External Database

    Is it possible to import Roles from an external database via an ActiveSynch import?

    Hi lozlow,
    We use a cvs for holding our roles.
    The main issue we have with this method is that we must check to ensure role approvers and ObjectGroups exist in IDM before we do the import. IDM does not check the validity of these references as part of the import.
    If we fail to check and the role approver or a ObjectGroup does not exist then the IDM will error when editing a user or listing roles.

  • ACS External Windows Authentication: Pre-Windows 2000 name only works

    Hello. I have attempted to map ACS to Windows AD 2003 as an External Database. That works, but only if I authenticate using the Pre-Windows 2000 name (sometimes called the "down-level" name).
    If I use the Windows 2003 login name, I get a 529 error in the event viewer, stating the username/password is incorrect. This error appears on the Windows 2003 SP1 server running ACS.
    Curiously, if I authenticate using the down-level name, the successful event shows the same authentication package (MICROSOFT_AUTHENTICATION_PACKAGE_V1_0) and "Workstation" and "Login Process" name (CISCO).
    I cannot determine if this is an ACS or Windows problem. Any one have a clue?

    Win2003 logon name: [email protected]
    A Pre-Windows2000 name: [email protected]
    Interestingly, the down-level name will authenticate, but the "up-level" name will not.
    Here are excerpts from AUTH.log:
    Failed up-level name:
    AUTH 01/19/2006 07:52:04 I 4817 3604 Attempting authentication for Unknown User '[email protected]'
    AUTH 01/19/2006 07:52:04 I 0365 3604 External DB [NTAuthenDLL.dll]: Starting authentication for user [[email protected]]
    AUTH 01/19/2006 07:52:04 I 0365 3604 External DB [NTAuthenDLL.dll]: Attempting Windows authentication for user bob.smith
    AUTH 01/19/2006 07:52:04 E 0365 3604 External DB [NTAuthenDLL.dll]: Windows authentication FAILED (error 1326L)
    AUTH 01/19/2006 07:52:04 I 0365 3604 External DB [NTAuthenDLL.dll]: Reattempting authentication at domain COMPANY
    AUTH 01/19/2006 07:52:04 I 0365 3604 External DB [NTAuthenDLL.dll]: Attempting Windows authentication for user bob.smith
    AUTH 01/19/2006 07:52:04 E 0365 3604 External DB [NTAuthenDLL.dll]: Windows authentication FAILED (error 1326L)
    AUTH 01/19/2006 07:52:04 I 2124 3604 Unknown User '[email protected]' was not authenticated
    Passed down-level name:
    AUTH 01/19/2006 07:52:23 I 0365 3604 External DB [NTAuthenDLL.dll]: Starting authentication for user [[email protected]]
    AUTH 01/19/2006 07:52:23 I 0365 3604 External DB [NTAuthenDLL.dll]: Attempting Windows authentication for user bsmith
    AUTH 01/19/2006 07:52:23 I 0365 3604 External DB [NTAuthenDLL.dll]: Windows authentication SUCCESSFUL (by WINDC02)
    AUTH 01/19/2006 07:52:23 I 0365 3604 External DB [NTAuthenDLL.dll]: Obtaining RAS information for user bsmith from WINDC02

Maybe you are looking for

  • Setup of axis in 3D graph

    Hi, I just have a (simple) question, I need to set up the right graph (the black one) as the right one (the white one). I want it to show three independent axis (x,y,z), going out from the center (0,0,0), just like in the white graph, but I really ca

  • Help please no sound ,error code

    [size="3" face="comic sans ms,sans-serif">Help please am having trouble with my X-FI card... [size="3" face="Comic Sans MS">? Sound Devices ??? Description: SB X-Fi Audio [7C00] ?Default Sound Playback: Yes ?Default Voice Playback: No ??? Hardware ID

  • Cd Autorun Menu

    Hello, Cann somebody tell me how to make cd (autorun) menu? or where to find a tutorial. I want to make a menu with 4 buttons some pictures, (All pictures on a row) I also want a video (avi or wmv) in a new window to preview (something like the desig

  • Crisis of developer 2000

    I have a database designed for Oracle 8.0.3 using OO methodology. Which means i have used nested table / varrays extensively. now that i'm ready with database i can't use forms 5.0 / reports 3.0 to build application as its not recognised. How do i pr

  • Autonomy

    I need to enable users to access documents stored in Content Services throw Autonomy. The integration way is create a specific fetch using an admin user that is able at least to read each document stored : content, metadata and security. I know how t