Anyconnect IPSEC error unauthorized connection mechanism

Hi everyone,
I'm trying to configure Anyconnect connection on my ASA 5505 (ASA 9.1.3, ASDM 7.1.4).
The goal is to have 2 connection, one for IPSEC and the other one for SSL.
SSL connection work fine but IPSEC won't work. When i try to connect i receive error "Login denied, unauthorized connection mechanism"
I can't find what i'm doing wrong. Both configurations have been done with the Anyconnect wizard.
Can you help me please ? I'm new in Cisco world ...
Thx in advance
Here's my config :
ASA Version 9.1(3)
hostname CiscoASA
enable password ***** encrypted
xlate per-session deny tcp any4 any4
xlate per-session deny tcp any4 any6
xlate per-session deny tcp any6 any4
xlate per-session deny tcp any6 any6
xlate per-session deny udp any4 any4 eq domain
xlate per-session deny udp any4 any6 eq domain
xlate per-session deny udp any6 any4 eq domain
xlate per-session deny udp any6 any6 eq domain
passwd ***** encrypted
names
ip local pool VPN-Pool 10.104.106.1-10.104.106.10 mask 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
switchport access vlan 3
interface Vlan1
nameif inside
security-level 100
ip address 10.4.6.254 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address dhcp setroute
interface Vlan3
no forward interface Vlan1
nameif DMZ
security-level 50
ip address 10.4.106.254 255.255.255.0
boot system disk0:/asa913-k8.bin
ftp mode passive
clock timezone CEST 1
clock summer-time CEDT recurring last Sun Mar 2:00 last Sun Oct 3:00
dns domain-lookup inside
dns domain-lookup outside
dns domain-lookup DMZ
dns server-group DefaultDNS
name-server 8.8.8.8
name-server 8.8.4.4
object network NETWORK_OBJ_10.104.106.0_28
subnet 10.104.106.0 255.255.255.240
object network NETWORK_OBJ_10.4.6.0_24
subnet 10.4.6.0 255.255.255.0
access-list outside_access_in remark Remote access to Cloudstation
access-list outside_access_in extended permit object Cloudstation object-group Cloudstation-Access object Synology-Cloudstation
access-list Anyconnect standard permit 10.4.6.0 255.255.255.0
access-list AnyConnect_Client_Local_Print extended deny ip any4 any4
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq lpd
access-list AnyConnect_Client_Local_Print remark IPP: Internet Printing Protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq 631
access-list AnyConnect_Client_Local_Print remark Windows' printing port
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq 9100
access-list AnyConnect_Client_Local_Print remark mDNS: multicast DNS protocol
access-list AnyConnect_Client_Local_Print extended permit udp any4 host 224.0.0.251 eq 5353
access-list AnyConnect_Client_Local_Print remark LLMNR: Link Local Multicast Name Resolution protocol
access-list AnyConnect_Client_Local_Print extended permit udp any4 host 224.0.0.252 eq 5355
access-list AnyConnect_Client_Local_Print remark TCP/NetBIOS protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq 137
access-list AnyConnect_Client_Local_Print extended permit udp any4 any4 eq netbios-ns
pager lines 24
logging enable
logging asdm informational
logging from-address [email protected]
logging recipient-address [email protected] level errors
mtu inside 1500
mtu outside 1500
mtu DMZ 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-714.bin
asdm history enable
arp timeout 14400
no arp permit-nonconnected
nat (inside,outside) source static NETWORK_OBJ_10.4.6.0_24 NETWORK_OBJ_10.4.6.0_24 destination static NETWORK_OBJ_10.104.106.0_28 NETWORK_OBJ_10.104.106.0_28 no-proxy-arp route-lookup
nat (inside,outside) source static any any destination static NETWORK_OBJ_10.104.106.0_28 NETWORK_OBJ_10.104.106.0_28 no-proxy-arp route-lookup
object network Synology-Cloudstation
nat (inside,outside) static interface service tcp 6690 6690
nat (inside,outside) after-auto source dynamic any interface
access-group outside_access_in in interface outside
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
http server enable
http 10.4.6.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec ikev2 ipsec-proposal AES256
protocol esp encryption aes-256
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES192
protocol esp encryption aes-192
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES
protocol esp encryption aes
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal 3DES
protocol esp encryption 3des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal DES
protocol esp encryption des
protocol esp integrity sha-1 md5
crypto ipsec security-association pmtu-aging infinite
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map outside_map interface outside
crypto map inside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map inside_map interface inside
crypto ca trustpoint VPN
enrollment self
subject-name CN=*****
keypair VPN
crl configure
crypto ca trustpoint SSH
enrollment self
subject-name CN=10.4.6.254
crl configure
crypto ca trustpoint ASDM_TrustPoint0
enrollment self
subject-name CN=***
keypair SSL
crl configure
crypto ca trustpool policy
crypto ca certificate chain VPN
certificate 8d31a352
  quit
crypto ca certificate chain SSH
certificate 8c27bc52
  quit
crypto ca certificate chain ASDM_TrustPoint0
certificate 730fbe52
  quit
crypto ikev2 policy 1
encryption aes-256
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 10
encryption aes-192
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 20
encryption aes
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 30
encryption 3des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 40
encryption des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 enable inside client-services port 443
crypto ikev2 enable outside client-services port 443
crypto ikev2 remote-access trustpoint ASDM_TrustPoint0
crypto ikev1 policy 10
authentication crack
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 20
authentication rsa-sig
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 30
authentication pre-share
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 40
authentication crack
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 50
authentication rsa-sig
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 60
authentication pre-share
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 70
authentication crack
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 80
authentication rsa-sig
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 90
authentication pre-share
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 100
authentication crack
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 110
authentication rsa-sig
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 120
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 130
authentication crack
encryption des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 140
authentication rsa-sig
encryption des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 150
authentication pre-share
encryption des
hash sha
group 2
lifetime 86400
telnet 10.4.6.0 255.255.255.0 inside
telnet timeout 5
ssh 10.4.6.0 255.255.255.0 inside
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0
dhcpd dns 8.8.8.8
dhcpd address 10.4.6.10-10.4.6.100 inside
dhcpd dns 8.8.8.8 8.8.4.4 interface inside
dhcpd enable inside
threat-detection basic-threat
threat-detection statistics host
threat-detection statistics port
threat-detection statistics protocol
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ntp server 132.163.4.102 source outside
ssl trust-point ASDM_TrustPoint0 inside
ssl trust-point ASDM_TrustPoint0 outside
webvpn
enable inside
enable outside
anyconnect image disk0:/anyconnect-win-3.1.04072-k9.pkg 1
anyconnect profiles IPSEC_client_profile disk0:/IPSEC_client_profile.xml
anyconnect profiles SSL_client_profile disk0:/ssl_client_profile.xml
anyconnect enable
tunnel-group-list enable
group-policy DfltGrpPolicy attributes
dns-server value 8.8.8.8
webvpn
  anyconnect ssl compression deflate
group-policy GroupPolicy_SSL internal
group-policy GroupPolicy_SSL attributes
wins-server none
dns-server value 8.8.8.8 8.8.4.4
vpn-tunnel-protocol ssl-client
split-tunnel-policy tunnelspecified
split-tunnel-network-list value Anyconnect
default-domain none
webvpn
  anyconnect profiles value SSL_client_profile type user
group-policy GroupPolicy_IPSEC internal
group-policy GroupPolicy_IPSEC attributes
wins-server none
dns-server value 8.8.8.8 8.8.4.4
vpn-tunnel-protocol ikev2
split-tunnel-policy tunnelspecified
split-tunnel-network-list value Anyconnect
default-domain none
webvpn
  anyconnect profiles value IPSEC_client_profile type user
username test password ***** encrypted
username test attributes
service-type remote-access
username raphael password ***** encrypted
username admin password gM8SqVAvFPseIv5v encrypted privilege 15
username administrator password ***** encrypted privilege 15
tunnel-group SSL type remote-access
tunnel-group SSL general-attributes
address-pool VPN-Pool
default-group-policy GroupPolicy_SSL
tunnel-group SSL webvpn-attributes
group-alias SSL enable
tunnel-group IPSEC type remote-access
tunnel-group IPSEC general-attributes
address-pool VPN-Pool
default-group-policy GroupPolicy_IPSEC
tunnel-group IPSEC webvpn-attributes
group-alias IPSEC enable
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
  message-length maximum client auto
  message-length maximum 512
policy-map global_policy
class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny
  inspect sunrpc
  inspect xdmcp
  inspect sip
  inspect netbios
  inspect tftp
  inspect ip-options
service-policy global_policy global
smtp-server 212.68.193.11
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
  no active
  destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
  destination address email [email protected]
  destination transport-method http
  subscribe-to-alert-group diagnostic
  subscribe-to-alert-group environment
  subscribe-to-alert-group inventory periodic monthly
  subscribe-to-alert-group configuration periodic monthly
  subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:9d5177ddc09025d07f9d5c1c2f7747e0
: end
CiscoASA#

The inside was actic-vate just for testing purpose.
The config have changed since my first post (but always the same problem with IKEv2.
IKEv1 work fine.
Here's the actual config
ASA Version 9.1(3)
hostname CiscoASA
enable password 14ssn/nefQfQ3kNU encrypted
xlate per-session deny tcp any4 any4
xlate per-session deny tcp any4 any6
xlate per-session deny tcp any6 any4
xlate per-session deny tcp any6 any6
xlate per-session deny udp any4 any4 eq domain
xlate per-session deny udp any4 any6 eq domain
xlate per-session deny udp any6 any4 eq domain
xlate per-session deny udp any6 any6 eq domain
passwd 2KFQnbNIdI.2KYOU encrypted
names
ip local pool VPN-Pool 10.104.106.1-10.104.106.10 mask 255.255.255.0
ip local pool IPSEC-Pool 10.104.106.11-10.104.106.20 mask 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
switchport access vlan 3
interface Vlan1
nameif inside
security-level 100
ip address 10.4.6.254 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address dhcp setroute
interface Vlan3
no forward interface Vlan1
nameif DMZ
security-level 50
ip address 10.4.106.254 255.255.255.0
boot system disk0:/asa913-k8.bin
ftp mode passive
clock timezone CEST 1
clock summer-time CEDT recurring last Sun Mar 2:00 last Sun Oct 3:00
dns domain-lookup inside
dns domain-lookup outside
dns domain-lookup DMZ
dns server-group DefaultDNS
name-server 8.8.8.8
name-server 8.8.4.4
object network NETWORK_OBJ_10.104.106.0_28
subnet 10.104.106.0 255.255.255.240
object network NETWORK_OBJ_10.4.6.0_24
subnet 10.4.6.0 255.255.255.0
object network Synology-Cloudstation
host 10.4.6.252
description Synology
object service Cloudstation
service tcp destination eq 6690
description Cloudstation
object network Clarenne
fqdn v4 secure.clarenne.be
description External IP Clarenne
object network NAT-Officescan-FR-HTTP
host 10.4.6.246
description 10.4.6.246
object network NAT-Officescan-FR-HTTPS
host 10.4.6.246
description Officescan-FR-HTTPS
object network NAT-Officescan-FR-ListenPort
host 10.4.6.246
description Officescan-FR-ListenPort
object network NAT-Officescan-EN-HTTP
host 10.4.6.247
description Officescan-EN-HTTP
object network NAT-Officescan-EN-HTTPS
host 10.4.6.247
description Officescan-EN-HTTPS
object network NAT-Officescan-EN-ListenPort
host 10.4.6.247
description Officescan-EN-HTTPS
object network VPN-Range
range 10.104.106.1 10.104.106.254
description VPN-Range
object-group network Cloudstation-Access
description Remote access to Cloudstation
network-object object Clarenne
object-group service Officescan-FR tcp
description Officescan-FR
port-object eq 4444
port-object eq 55556
port-object eq 8181
object-group network Officescan-FR-All
network-object object NAT-Officescan-FR-HTTP
network-object object NAT-Officescan-FR-HTTPS
network-object object NAT-Officescan-FR-ListenPort
object-group network Officescan-EN-All
description All ports Officescan EN
network-object object NAT-Officescan-EN-HTTP
network-object object NAT-Officescan-EN-HTTPS
network-object object NAT-Officescan-EN-ListenPort
object-group service Officescan-EN tcp
port-object eq 5353
port-object eq 55555
port-object eq 9090
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
access-list outside_access_in remark Remote access to Cloudstation
access-list outside_access_in extended permit object Cloudstation object-group Cloudstation-Access object Synology-Cloudstation
access-list outside_access_in remark Remote Access to Officescan-FR
access-list outside_access_in extended permit tcp any object-group Officescan-FR-All object-group Officescan-FR
access-list outside_access_in extended permit tcp any object-group Officescan-EN-All object-group Officescan-EN
access-list outside_access_in extended permit ip object VPN-Range any
access-list Anyconnect standard permit 10.4.6.0 255.255.255.0
access-list AnyConnect_Client_Local_Print extended deny ip any4 any4
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq lpd
access-list AnyConnect_Client_Local_Print remark IPP: Internet Printing Protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq 631
access-list AnyConnect_Client_Local_Print remark Windows' printing port
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq 9100
access-list AnyConnect_Client_Local_Print remark mDNS: multicast DNS protocol
access-list AnyConnect_Client_Local_Print extended permit udp any4 host 224.0.0.251 eq 5353
access-list AnyConnect_Client_Local_Print remark LLMNR: Link Local Multicast Name Resolution protocol
access-list AnyConnect_Client_Local_Print extended permit udp any4 host 224.0.0.252 eq 5355
access-list AnyConnect_Client_Local_Print remark TCP/NetBIOS protocol
access-list AnyConnect_Client_Local_Print extended permit tcp any4 any4 eq 137
access-list AnyConnect_Client_Local_Print extended permit udp any4 any4 eq netbios-ns
access-list IKEv1_splitTunnelAcl standard permit 10.4.6.0 255.255.255.0
pager lines 24
logging enable
logging asdm informational
logging from-address *****
logging recipient-address ***** level errors
mtu inside 1500
mtu outside 1500
mtu DMZ 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-714.bin
asdm history enable
arp timeout 14400
no arp permit-nonconnected
nat (inside,outside) source static NETWORK_OBJ_10.4.6.0_24 NETWORK_OBJ_10.4.6.0_24 destination static NETWORK_OBJ_10.104.106.0_28 NETWORK_OBJ_10.104.106.0_28 no-proxy-arp route-lookup
nat (inside,outside) source static any any destination static NETWORK_OBJ_10.104.106.0_28 NETWORK_OBJ_10.104.106.0_28 no-proxy-arp route-lookup
object network Synology-Cloudstation
nat (inside,outside) static interface service tcp 6690 6690
object network NAT-Officescan-FR-HTTP
nat (inside,outside) static interface service tcp 8181 8181
object network NAT-Officescan-FR-HTTPS
nat (inside,outside) static interface service tcp 4444 4444
object network NAT-Officescan-FR-ListenPort
nat (inside,outside) static interface service tcp 55556 55556
object network NAT-Officescan-EN-HTTP
nat (inside,outside) static interface service tcp 9090 9090
object network NAT-Officescan-EN-HTTPS
nat (inside,outside) static interface service tcp 5353 5353
object network NAT-Officescan-EN-ListenPort
nat (inside,outside) static interface service tcp 55555 55555
nat (inside,outside) after-auto source dynamic any interface
access-group outside_access_in in interface outside
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
aaa authentication ssh console LOCAL
http server enable
http 10.4.6.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec ikev1 transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec ikev1 transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec ikev1 transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec ikev2 ipsec-proposal AES256
protocol esp encryption aes-256
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES192
protocol esp encryption aes-192
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES
protocol esp encryption aes
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal 3DES
protocol esp encryption 3des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal DES
protocol esp encryption des
protocol esp integrity sha-1 md5
crypto ipsec security-association pmtu-aging infinite
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set pfs group1
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev1 transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
crypto map outside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map outside_map interface outside
crypto map inside_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map inside_map interface inside
crypto ca trustpoint VPN
enrollment self
subject-name CN=*****.rabinformatique.be
keypair VPN
crl configure
crypto ca trustpoint SSH
enrollment self
subject-name CN=10.4.6.254
crl configure
crypto ca trustpoint ASDM_TrustPoint0
enrollment self
subject-name CN=*****.rabinformatique.be
keypair SSL
crl configure
crypto ca trustpool policy
crypto ca certificate chain VPN
certificate 8d31a352
    308201f1 3082015a a0030201 0202048d 31a35230 0d06092a 864886f7 0d010105
    0500303d 31223020 06035504 03131973 65637572 652e7261 62696e66 6f726d61
    74697175 652e6265 31173015 06092a86 4886f70d 01090216 08436973 636f4153
    41301e17 0d313331 32303731 35303431 335a170d 32333132 30353135 30343133
    5a303d31 22302006 03550403 13197365 63757265 2e726162 696e666f 726d6174
    69717565 2e626531 17301506 092a8648 86f70d01 09021608 43697363 6f415341
    30819f30 0d06092a 864886f7 0d010101 05000381 8d003081 89028181 00ce369d
    184d8817 fa384f11 f0ea46db 7efe6a2f e14bdb65 673afb9c c881363a 80b4b28e
    65f4331f 009abacc 7e42200a 8115383f e6019b22 841aa048 8d92a0cb 431ca289
    98d7d958 c8b79671 b3603c07 3c9b91d7 a1fbbbe9 1cd8d27c 6d57e051 906c9b23
    8eaa7102 307a8b8d 26ab3807 6e1d92c9 e803eec1 cd0e230d bb703c00 33020301
    0001300d 06092a86 4886f70d 01010505 00038181 003deb05 c11e914d 2f7fc1ff
    a5100c05 61da96e1 4d72cb74 ba8eba85 37eb76af a183649a 79f72cb8 1c5c195d
    8e035cc5 0d4753b6 5b83afdc a1770e9e da0a5319 8e33b626 99ef197b 6254f004
    ca25f3a7 570b0f45 3e51deb2 fc063e21 c7ca0231 c4513483 1c282bbb 74375ba7
    81db0cc0 b87a1612 4095bf7a ba110227 2c3dff64 d6
  quit
crypto ca certificate chain SSH
certificate 8c27bc52
    308201d3 3082013c a0030201 0202048c 27bc5230 0d06092a 864886f7 0d010105
    0500302e 31133011 06035504 03130a31 302e342e 362e3235 34311730 1506092a
    864886f7 0d010902 16084369 73636f41 5341301e 170d3133 31323236 32313536
    32345a17 0d323331 32323432 31353632 345a302e 31133011 06035504 03130a31
    302e342e 362e3235 34311730 1506092a 864886f7 0d010902 16084369 73636f41
    53413081 9f300d06 092a8648 86f70d01 01010500 03818d00 30818902 818100f4
    7269c080 49f5422a 5af3f82f e3f791ad 9824cf51 90130c89 7dc370b4 8eaf2bd7
    a0a851a0 787b26e9 b3190e3f 2ff49f9a 72b0b57d cd3dc039 5a4fad7c 9fed354c
    cc0adcb8 72e33b11 450e2fe3 1c874d96 45cb11e4 d8c7f837 7eefcaa1 4fb45d4e
    8a6a69fd 42d915cb 22d075e0 74d3606c b5075745 cf88aef0 eeb10912 1ad2af02
    03010001 300d0609 2a864886 f70d0101 05050003 8181003c bd48239a 3c3a729a
    a4c24c6c 27024ff0 4b285c28 b119ba8a e71b3ee4 37b6d302 f8bf415e ce3d0c7b
    fcfef3a6 e294709d fe80fe64 cb060a75 b3daac1e e6c17521 41e970c2 5c0b6543
    0d0c2ebb ae42cc3e 77cd319e a1db6843 7a4fd4d8 ebaa6b17 d2dbb781 fc1e86b9
    18913303 59f9c89b ab747252 d20c2da3 dbe66ad3 eb3575
  quit
crypto ca certificate chain ASDM_TrustPoint0
certificate 730fbe52
    308201f1 3082015a a0030201 02020473 0fbe5230 0d06092a 864886f7 0d010105
    0500303d 31223020 06035504 03131972 656d6f74 652e7261 62696e66 6f726d61
    74697175 652e6265 31173015 06092a86 4886f70d 01090216 08436973 636f4153
    41301e17 0d313331 32323831 31313033 315a170d 32333132 32363131 31303331
    5a303d31 22302006 03550403 13197265 6d6f7465 2e726162 696e666f 726d6174
    69717565 2e626531 17301506 092a8648 86f70d01 09021608 43697363 6f415341
    30819f30 0d06092a 864886f7 0d010101 05000381 8d003081 89028181 00a00bac
    1f0fe866 36fef779 2ee99a47 1cf2181e 8b150c08 f19a48df 8ee5d74d 0200934b
    b476cade d90a7a16 647f75ad dfad9c8d 768f9b06 1bc2f2ff 5497caef a8e007f8
    deec9c18 661cabf6 3a8ec645 0179fed5 cdaa9a82 f3f157de cf281333 9bab6fda
    e6cbcfe6 858075c7 7d208d82 957a726e 68b58187 bd90a3cd 0719744c bb020301
    0001300d 06092a86 4886f70d 01010505 00038181 006c94e8 4e8e664a 94d1f0b6
    3fd9a936 264c1cee 301b7cff 4306abf6 0d413982 dfd9b36e 38b90fb7 f8b30114
    1a0f68c4 0b8f578a eb8a52cd 80d19e10 6a943e6c 2ad51b7c 0d900ccd 990b4b3b
    fb636dfc 5746dfc1 d9bde0c9 4db5d553 1c6e5b66 4d0ef8f1 7b30c2d9 51a5cd87
    008376a4 ac7d8075 350b535e 280b1049 86a32c83 a6
  quit
crypto ikev2 policy 1
encryption aes-256
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 10
encryption aes-192
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 20
encryption aes
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 30
encryption 3des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 40
encryption des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 enable outside client-services port 443
crypto ikev2 remote-access trustpoint ASDM_TrustPoint0
crypto ikev1 enable outside
crypto ikev1 policy 10
authentication crack
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 20
authentication rsa-sig
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 30
authentication pre-share
encryption aes-256
hash sha
group 2
lifetime 86400
crypto ikev1 policy 40
authentication crack
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 50
authentication rsa-sig
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 60
authentication pre-share
encryption aes-192
hash sha
group 2
lifetime 86400
crypto ikev1 policy 70
authentication crack
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 80
authentication rsa-sig
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 90
authentication pre-share
encryption aes
hash sha
group 2
lifetime 86400
crypto ikev1 policy 100
authentication crack
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 110
authentication rsa-sig
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 120
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 130
authentication crack
encryption des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 140
authentication rsa-sig
encryption des
hash sha
group 2
lifetime 86400
crypto ikev1 policy 150
authentication pre-share
encryption des
hash sha
group 2
lifetime 86400
telnet 10.4.6.0 255.255.255.0 inside
telnet timeout 5
ssh 10.4.6.0 255.255.255.0 inside
ssh timeout 5
ssh key-exchange group dh-group1-sha1
console timeout 0
dhcpd dns 8.8.8.8
dhcpd address 10.4.6.10-10.4.6.100 inside
dhcpd dns 8.8.8.8 8.8.4.4 interface inside
dhcpd enable inside
threat-detection basic-threat
threat-detection statistics host
threat-detection statistics port
threat-detection statistics protocol
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ntp server 132.163.4.102 source outside
ssl trust-point ASDM_TrustPoint0 inside
ssl trust-point ASDM_TrustPoint0 outside
webvpn
enable outside
anyconnect image disk0:/anyconnect-win-3.1.04072-k9.pkg 1
anyconnect profiles IPSEC_client_profile disk0:/ipsec_client_profile.xml
anyconnect profiles SSL_client_profile disk0:/ssl_client_profile.xml
anyconnect enable
tunnel-group-list enable
group-policy IKEv1 internal
group-policy IKEv1 attributes
dns-server value 8.8.8.8 8.8.4.4
vpn-tunnel-protocol ikev1
split-tunnel-policy tunnelspecified
split-tunnel-network-list value IKEv1_splitTunnelAcl
group-policy DfltGrpPolicy attributes
dns-server value 8.8.8.8
vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless
webvpn
  anyconnect ssl compression deflate
group-policy GroupPolicy_SSL internal
group-policy GroupPolicy_SSL attributes
wins-server none
dns-server value 8.8.8.8 8.8.4.4
vpn-tunnel-protocol ssl-client
split-tunnel-policy tunnelspecified
split-tunnel-network-list value Anyconnect
default-domain none
webvpn
  anyconnect profiles value SSL_client_profile type user
group-policy GroupPolicy_IPSEC internal
group-policy GroupPolicy_IPSEC attributes
wins-server none
dns-server value 8.8.8.8
vpn-tunnel-protocol ikev2
default-domain none
webvpn
  anyconnect profiles value IPSEC_client_profile type user
username test password N8KSu.GWsyH45xRk encrypted
username test attributes
service-type remote-access
username raphael.abissi password hBmZGE7s0UGfnUxR encrypted
username admin password gM8SqVAvFPseIv5v encrypted privilege 15
username administrator password gM8SqVAvFPseIv5v encrypted privilege 15
tunnel-group SSL type remote-access
tunnel-group SSL general-attributes
address-pool VPN-Pool
default-group-policy GroupPolicy_SSL
tunnel-group SSL webvpn-attributes
group-alias SSL enable
tunnel-group IPSEC type remote-access
tunnel-group IPSEC general-attributes
address-pool IPSEC-Pool
default-group-policy GroupPolicy_IPSEC
tunnel-group IPSEC webvpn-attributes
group-alias IPSEC enable
tunnel-group IKEv1 type remote-access
tunnel-group IKEv1 general-attributes
address-pool VPN-Pool
default-group-policy IKEv1
tunnel-group IKEv1 ipsec-attributes
ikev1 pre-shared-key *****
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
  message-length maximum client auto
  message-length maximum 512
policy-map global_policy
class inspection_default
  inspect dns preset_dns_map
  inspect ftp
  inspect h323 h225
  inspect h323 ras
  inspect rsh
  inspect rtsp
  inspect esmtp
  inspect sqlnet
  inspect skinny
  inspect sunrpc
  inspect xdmcp
  inspect sip
  inspect netbios
  inspect tftp
  inspect ip-options
service-policy global_policy global
smtp-server 212.68.193.11
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
  no active
  destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
  destination address email [email protected]
  destination transport-method http
  subscribe-to-alert-group diagnostic
  subscribe-to-alert-group environment
  subscribe-to-alert-group inventory periodic monthly
  subscribe-to-alert-group configuration periodic monthly
  subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:b2c36635f9708193555e7600a0a69d1f
: end
CiscoASA(config)#

Similar Messages

  • Error while connecting to HTTPS WebService through Jdev

    I am having issues while trying to connect to a webservice that require SSL. Has anybody seen similar exception below or any suggestion/best practice docs of how to setup the cert?
    WARNING: Unable to connect to URL: https://itsolutions/AppIntegration/org/test/sendRequest.jpd due to java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
    java.rmi.RemoteException: ; nested exception is:
         HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Message send failed: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

    Dear All,I am getting this error while connecting to ASDM Please help.Your ASA Image has a version number 8.2.1 which is not supported by ASDM 6.1(3)Show Version.....User Access VerificationPassword:
    Type help or '?' for a list of available commands.
    ASA-PT> en
    Password:ASA-PT# show verCisco Adaptive Security Appliance Software Version 8.2(1)
    Device Manager Version 6.1(3)Compiled on Tue 05-May-09 22:45 by builders
    System image file is "disk0:/asa821-k8.bin"
    Config file at boot was "startup-config"ASA-PT up 12 days 0 hoursHardware:   ASA5520, 512 MB RAM, CPU Pentium 4 Celeron 2000 MHz
    Internal ATA Compact Flash, 256MB
    BIOS Flash M50FW080 @ 0xffe00000, 1024KBEncryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
                                 Boot microcode   : CN1000-MC-BOOT-2.00
                                 SSL/IKE microcode: CNLite-MC-SSLm-PLUS-2.03
                                 IPSec microcode  : CNlite-MC-IPSECm-MAIN-2.04
    0: Ext: GigabitEthernet0/0  : address is 0024.14d2.1582, irq 9
    1: Ext: GigabitEthernet0/1  : address is 0024.14d2.1583, irq 9
    2: Ext: GigabitEthernet0/2  : address is 0024.14d2.1584, irq 9
    3: Ext: GigabitEthernet0/3  : address is 0024.14d2.1585, irq 9
    4: Ext: Management0/0       : address is 0024.14d2.1581, irq 11
    5: Int: Internal-Data0/0    : address is 0000.0001.0002, irq 11
    6: Int: Internal-Control0/0 : address is 0000.0001.0001, irq 5
    <--- More --->ThanksTabrez
    Hi Tabrez,
    ASA5520 version 8.2.1 is supported with  ASDM 6.2(1 and above). Recommended: 6.2(3).check out the below link hope that c;ear out your query !!
    http://www.cisco.com/en/US/docs/security/asa/compatibility/asamatrx.html
    If helpful do rate the post
    Ganesh.H

  • WebCenter Adapter for SharePoint - Transport error: 401 Error: Unauthorized

    Hi All,
    Hi,
    I am trying to integrate MS sharepoint with webcentr, In JDeveloper(11.1.1.4.0) i updated oracle.webcenter.content.jcr.sharepoint.ear bundle(11.1.1.4.0), After that I'm createing webcenter portal application. When i'm creating Content Repository Connection with fallowing parameters
    connection name:MySPConn
    Repository type:JCR SharePoint Adapter
    *SahrePoint URL :http://sharepoint.mycompanyname.com/SitePages/Home.aspx
    in Credentials section
    i used External application for this i used fallowing properties
    Application name :myMSSPExtApp
    App Display name: myMSSPExtApp
    login URL:ttp://sharepoint.mycompanyname.com/SitePages/Home.aspx
    UserName/ID field Name:Admin
    PasswordFied Name:Admin@123
    Authentication Method:Basic
    Additional fields:skip
    Sheared Credentials:skip
    Public credentials:skip
    finally finished.
    while testing connection its giving fallowing Errors
    plz give me some solution.where am doing mistake pl z correct me
    Jan 9, 2012 5:11:34 PM oracle.webcenter.concurrent.Submission run
    SEVERE: Submission[id=3, service=oracle.webcenter.content.jcr.login, resource=mpspconnection] caught exception running task
    javax.jcr.LoginException: Transport error: 401 Error: Unauthorized: Transport error: 401 Error: Unauthorized
    at com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory$SharepointConnectionImpl.verify(WindowsAuthenticationConnectionFactory.java:359)
    at com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory.createConnection(WindowsAuthenticationConnectionFactory.java:253)
    at com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory.create(WindowsAuthenticationConnectionFactory.java:62)
    at com.day.crx.spi.sharepoint.SharepointSessionInfoImpl.login(SharepointSessionInfoImpl.java:218)
    at com.day.crx.spi.sharepoint.SharepointSessionInfoImpl.login(SharepointSessionInfoImpl.java:82)
    at com.day.crx.spi.sharepoint.SharepointRepositoryService.obtain(SharepointRepositoryService.java:253)
    at org.apache.jackrabbit.jcr2spi.RepositoryImpl.login(RepositoryImpl.java:82)
    at com.day.adf.sharepoint.SharePointRepository.login(SharePointRepository.java:142)
    at oracle.vcr.jam.LoginTask.call(LoginTask.java:68)
    at oracle.vcr.jam.LoginTask.call(LoginTask.java:29)
    at oracle.webcenter.concurrent.Submission$2.run(Submission.java:484)
    at java.security.AccessController.doPrivileged(Native Method)
    at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
    at oracle.webcenter.concurrent.Submission.runAsPrivileged(Submission.java:498)
    at oracle.webcenter.concurrent.Submission.run(Submission.java:424)
    at oracle.webcenter.concurrent.Submission$SubmissionFutureTask.run(Submission.java:888)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
    at java.util.concurrent.FutureTask.run(FutureTask.java:138)
    at oracle.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.runTask(ModifiedThreadPoolExecutor.java:657)
    at oracle.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.run(ModifiedThreadPoolExecutor.java:682)
    at java.lang.Thread.run(Thread.java:662)
    Caused by: org.apache.axis2.AxisFault: Transport error: 401 Error: Unauthorized
    at org.apache.axis2.transport.http.HTTPSender.handleResponse(HTTPSender.java:296)
    at org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:190)
    at org.apache.axis2.transport.http.HTTPSender.send(HTTPSender.java:75)
    at org.apache.axis2.transport.http.CommonsHTTPTransportSender.writeMessageWithCommons(CommonsHTTPTransportSender.java:364)
    at org.apache.axis2.transport.http.CommonsHTTPTransportSender.invoke(CommonsHTTPTransportSender.java:208)
    at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:448)
    at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:401)
    at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:228)
    at org.apache.axis2.client.OperationClient.execute(OperationClient.java:163)
    at com.microsoft.wss3.authentication.AuthenticationStub.Mode(AuthenticationStub.java:317)
    at com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory$SharepointConnectionImpl.verify(WindowsAuthenticationConnectionFactory.java:349)
    ... 21 more
    org.apache.axis2.AxisFault: Transport error: 401 Error: Unauthorized
    at org.apache.axis2.transport.http.HTTPSender.handleResponse(HTTPSender.java:296)
    at org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:190)
    at org.apache.axis2.transport.http.HTTPSender.send(HTTPSender.java:75)
    at org.apache.axis2.transport.http.CommonsHTTPTransportSender.writeMessageWithCommons(CommonsHTTPTransportSender.java:364)
    at org.apache.axis2.transport.http.CommonsHTTPTransportSender.invoke(CommonsHTTPTransportSender.java:208)
    at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:448)
    at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:401)
    at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:228)
    at org.apache.axis2.client.OperationClient.execute(OperationClient.java:163)
    at com.microsoft.wss3.authentication.AuthenticationStub.Mode(AuthenticationStub.java:317)
    at com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory$SharepointConnectionImpl.verify(WindowsAuthenticationConnectionFactory.java:349)
    at com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory.createConnection(WindowsAuthenticationConnectionFactory.java:253)
    at com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory.create(WindowsAuthenticationConnectionFactory.java:62)
    at com.day.crx.spi.sharepoint.SharepointSessionInfoImpl.login(SharepointSessionInfoImpl.java:218)
    at com.day.crx.spi.sharepoint.SharepointSessionInfoImpl.login(SharepointSessionInfoImpl.java:82)
    at com.day.crx.spi.sharepoint.SharepointRepositoryService.obtain(SharepointRepositoryService.java:253)
    at org.apache.jackrabbit.jcr2spi.RepositoryImpl.login(RepositoryImpl.java:82)
    at com.day.adf.sharepoint.SharePointRepository.login(SharePointRepository.java:142)
    at oracle.vcr.jam.LoginTask.call(LoginTask.java:68)
    at oracle.vcr.jam.LoginTask.call(LoginTask.java:29)
    at oracle.webcenter.concurrent.Submission$2.run(Submission.java:484)
    at java.security.AccessController.doPrivileged(Native Method)
    at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
    at oracle.webcenter.concurrent.Submission.runAsPrivileged(Submission.java:498)
    at oracle.webcenter.concurrent.Submission.run(Submission.java:424)
    at oracle.webcenter.concurrent.Submission$SubmissionFutureTask.run(Submission.java:888)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)
    at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
    at java.util.concurrent.FutureTask.run(FutureTask.java:138)
    at oracle.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.runTask(ModifiedThreadPoolExecutor.java:657)
    at oracle.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.run(ModifiedThreadPoolExecutor.java:682)
    at java.lang.Thread.run(Thread.java:662)
    javax.jcr.LoginException: Transport error: 401 Error: Unauthorized: Transport error: 401 Error: Unauthorized
    com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory$SharepointConnectionImpl.verify(WindowsAuthenticationConnectionFactory.java:359)
    com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory.createConnection(WindowsAuthenticationConnectionFactory.java:253)
    com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory.create(WindowsAuthenticationConnectionFactory.java:62)
    com.day.crx.spi.sharepoint.SharepointSessionInfoImpl.login(SharepointSessionInfoImpl.java:218)
    com.day.crx.spi.sharepoint.SharepointSessionInfoImpl.login(SharepointSessionInfoImpl.java:82)
    com.day.crx.spi.sharepoint.SharepointRepositoryService.obtain(SharepointRepositoryService.java:253)
    org.apache.jackrabbit.jcr2spi.RepositoryImpl.login(RepositoryImpl.java:82)
    com.day.adf.sharepoint.SharePointRepository.login(SharePointRepository.java:142)
    o.vcr.jam.LoginTask.call(LoginTask.java:68)
    o.vcr.jam.LoginTask.call(LoginTask.java:29)
    o.webcenter.concurrent.Submission$2.run(Submission.java:484)
    j.security.AccessController.doPrivileged(Native Method)
    o.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
    o.webcenter.concurrent.Submission.runAsPrivileged(Submission.java:498)
    o.webcenter.concurrent.Submission.run(Submission.java:424)
    o.webcenter.concurrent.Submission$SubmissionFutureTask.run(Submission.java:888)
    j.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)
    j.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
    j.util.concurrent.FutureTask.run(FutureTask.java:138)
    o.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.runTask(ModifiedThreadPoolExecutor.java:657)
    o.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.run(ModifiedThreadPoolExecutor.java:682)
    j.lang.Thread.run(Thread.java:662)
    Caused by:
    org.apache.axis2.AxisFault: Transport error: 401 Error: Unauthorized
    org.apache.axis2.transport.http.HTTPSender.handleResponse(HTTPSender.java:296)
    org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:190)
    org.apache.axis2.transport.http.HTTPSender.send(HTTPSender.java:75)
    org.apache.axis2.transport.http.CommonsHTTPTransportSender.writeMessageWithCommons(CommonsHTTPTransportSender.java:364)
    org.apache.axis2.transport.http.CommonsHTTPTransportSender.invoke(CommonsHTTPTransportSender.java:208)
    org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:448)
    org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:401)
    org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:228)
    org.apache.axis2.client.OperationClient.execute(OperationClient.java:163)
    com.microsoft.wss3.authentication.AuthenticationStub.Mode(AuthenticationStub.java:317)
    com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory$SharepointConnectionImpl.verify(WindowsAuthenticationConnectionFactory.java:349)
    com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory.createConnection(WindowsAuthenticationConnectionFactory.java:253)
    com.day.crx.spi.sharepoint.security.WindowsAuthenticationConnectionFactory.create(WindowsAuthenticationConnectionFactory.java:62)
    com.day.crx.spi.sharepoint.SharepointSessionInfoImpl.login(SharepointSessionInfoImpl.java:218)
    com.day.crx.spi.sharepoint.SharepointSessionInfoImpl.login(SharepointSessionInfoImpl.java:82)
    com.day.crx.spi.sharepoint.SharepointRepositoryService.obtain(SharepointRepositoryService.java:253)
    org.apache.jackrabbit.jcr2spi.RepositoryImpl.login(RepositoryImpl.java:82)
    com.day.adf.sharepoint.SharePointRepository.login(SharePointRepository.java:142)
    o.vcr.jam.LoginTask.call(LoginTask.java:68)
    o.vcr.jam.LoginTask.call(LoginTask.java:29)
    o.webcenter.concurrent.Submission$2.run(Submission.java:484)
    j.security.AccessController.doPrivileged(Native Method)
    o.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
    o.webcenter.concurrent.Submission.runAsPrivileged(Submission.java:498)
    o.webcenter.concurrent.Submission.run(Submission.java:424)
    o.webcenter.concurrent.Submission$SubmissionFutureTask.run(Submission.java:888)
    j.util.concurrent.Executors$RunnableAdapter.call(Executors.java:441)
    j.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
    j.util.concurrent.FutureTask.run(FutureTask.java:138)
    o.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.runTask(ModifiedThreadPoolExecutor.java:657)
    o.webcenter.concurrent.ModifiedThreadPoolExecutor$Worker.run(ModifiedThreadPoolExecutor.java:682)
    j.lang.Thread.run(Thread.java:662)

    Hi,
    Have you tried going through this doc, about, pre-requisites on MSSharepoint :- http://docs.oracle.com/cd/E21764_01/webcenter.1111/e12405/wcadm_documents.htm#BABDFFDC
    Regards,
    Birender Singh

  • Execution failed: Transport error: 401 Error: Unauthorized

    Hi,
    I'm trying to communicate via a web services from the workspace and I SUP 2.2 generates the following error "Execution failed: Transport error: 401 Error: Unauthorized".
    Could someone guide me to solve this error.

    Hi Carlos,
    Sometime back I faced an error says "error executed on backend server: connection timeout" while creating mbo using one publicly available web service and after passing proxy settings in workspace, it worked.
    http://scn.sap.com/community/developer-center/mobility-platform/blog/2014/05/14/how-to-bypass-proxy-settings-in-smp-workspace-for-connecting-any-public-web-service-being-in-a-corporate-network
    but error showing in the mentioned snapshot is much related to authorization. Btw are you able to access the web service URL in a browser? Asking any kind of authorization?
    Rgrds,
    JK

  • A  *** ERROR = RFC ====== connection closed (no data)

    I trace data On Instance DEV_W0 the had Error as below
    A  *** ERROR => RFC ======> connection closed (no data)
    Please Kindly  verify  the cuase and recommend in this issue .
    Edited by: SoeyTH on Dec 6, 2010 3:38 PM

    You need to proivde more logs to find what caused.
    Is you SAP up?

  • Creating new Data Source Error - Database connection Failed

    Successfully installed and configured 11.1.1.3.0. Planning and Essbase dev.
    Went to Workspace > Administer > Classing Planning Administration > Manage Data Sources > Create Data Source.
    Entered all info about the application database , etc. Getting error "The database connection failed" (I was able to connect with no problem during the install)
    SQL server 2005 is on the same physical server.
    The diagnostic tool shows database connection passed for planning. A new database was created for the new application.
    The server event viewer shows these errors.
    "Login failed for user 'xxx-hyperion'. The user is not associated with a trusted SQL Server connection."
    Group Policy Error "The client-side extension could not apply computer policy settings for 'Default Domain Policy {xxx}' because it failed with error code '0x80070003 The system cannot find the path specified.' See trace file for more details. "
    The Group Policy client-side extension Group Policy Services failed to execute. Please look for any errors reported earlier by that extension.
    Any help is appreciated.

    Datasource for the application.
    I have created a sql db for this planning application (my datasource). See my first message for more details.
    When you create a new planning application, you need to associate it with a data source. Since this is a new install, I don't have any data sources available yet.
    So, "To create, edit or delete data sources, click Manage Data Source."
    This page lets you validate your connection to the database and essbase server. My essbase server connection validates! The database connection does not validate after I enter all the relevant information.
    SCREEN INFO BELOW
    Fields displayed with an asterisk (*) are mandatory.
    Data Source Name *:
    Data Source Description:
    Select Database Platform
    Microsoft SQL Server
    Application Database
    Server * :
    Port * :
    Database *:
    User *:
    Password *:
    Click "Validate Database Connection"
    ERROR ---> Database connection failed.
    So it does not let me create a data source for my new planning application, so I cannot create a new planning application.
    Thanks in advance.

  • I have lost the ability to upload files to a website. I have to transfer files from my computer to a web site and I get an error message "connection was reset" and the file will not upload. I try to transfer pictures and I get the same message.

    I have to upload a scanned receipt to a website and I get the error message "connection was reset". I have uploaded these receipt for two years and last week I have had to use another browser to complete this operation. I connect to the website and do the report I must do, but I can no longer upload to this site.

    Are you using any additional software for the uploading?
    Try using Firefox in [[safe mode]] when you upload. There is no need to make changes when you see the option. Disable all plugins whilst in safe mode. Then try the uploads.
    You mention [/questions/921993 elsethread] that it is a work site. Have you contacted your IT department. One possibility is that the site is not recognising Firefox 10.
    (One temporary workaround and troubleshhooting test would be to install Firefox3.6.27 [http://portableapps.com/news/2012-02-01_-_firefox_portable_3.6.26_released portable] as an additional browser and try that.)

  • Android MS RDP - RPC Error: Your connection was denied because of a Resource Access Policy (TS_RAP). Please contact your server administrator. (2147965402).

    I love iTap Mobile.  Paid for the app.  Sorry to see them discontinue it, but now I know why.  Microsoft bought them out!  But even though free, I am getting an error: RPC Error: Your connection was denied because of a Resource Access
    Policy (TS_RAP). Please contact your server administrator. (2147965402).  I worked with iTap to fix this so I guess they sold Microsoft their older buggy code...  Microsoft, please fix!
    PS: This is the Android version.  Mac and iOS are both okay.
    EDIT:  After an update a few months ago, iOS is no longer working.  Not sure if the problem is related to the Android MSRDP issue.
    UPDATE - Relevant posts (need Android RDP software engineer to fix):
    Event Viewer Log when using Android client:
    The user
    "DOMAIN\testuser", on client computer "10.x.x.x", met connection authorization policy requirements and was therefore authorized to access the RD Gateway server. The following authentication method was used: "NTLM". (This
    is most likely for logging into RD Web - icons shows up).
    The
    user "DOMAIN\testuser", on client computer "10.x.x.x", did not meet resource authorization policy requirements and was therefore not authorized to resource"localhost".
    The following error occurred: "23002".  (This is after clicking on any
    of the icons).
    I
    think the Android MS RDP client is providing the incorrect resource.  It shouldn't be "localhost".
     It should be the RD Connection Broker's hostname, I believe.
    Here's what it should look like (connected using a Windows PC going
    through the RD Web portal via Internet Explorer):
    The user "DOMAIN\testuser", on client computer "10.x.x.x", met connection
    authorization policy requirements and was therefore authorized to access the RD Gateway server. The following authentication method was used: "NTLM".
    The user "DOMAIN\testuser", on client computer "10.x.x.x", met resource
    authorization policy requirements and was therefore authorized to connect to resource "rdsfarm.domain.com".
    The user "DOMAIN\testuser", on client computer "10.x.x.x", connected
    to resource "rdsfarm.domain.com".
    Stephan,
    Do you have any way to contact the software engineer who worked on the Android version of the RDP client?  Please
    have them read this thread.  They need to fix the hard coded "localhost" resource to be a variable (namely whatever the user put in for the server).
    This is why the MS RDP app is failing in situations where the FQDN for the RD Gateway and Connection Broker uses
    the same host name.
    Again, this is not a configuration problem on our end as it works as intended with the native Windows RDP client
    as well as the Mac and iOS version of the mobile RDP client (all based on iTap Mobile's RDP app).
    This is a problem specific to the Android RDP app.
    PS: No matter how hard I try, the WYSIWYG editor is not very WYSIWYG at all, and so everything here looks messed up even though it looked right when I posted it (it is deleting new blank lines I'm inserting to make it spaced out and easier to read). See
    below to read the post in context.

    Thanks for the bumps, everyone.  I haven't check this thread in a while because I basically gave up on Microsoft's ability to respond.  Unlike paid apps, there's no number to call or ticket to open when an app like this malfunctions.
    Just to give you an update, iOS users started having issues connecting a few months ago.  I don't remember what version started this.  I'm not sure if it's the same problem.
    Also, the newest version now gives a slightly different error message:  RpcOverHttpEndpointException: 2, Your connection was denied because of a Resource Access Policy (TS_RAP).  Please contact your server administrator.
    For Android users, I am starting to recommend Xtralogic Remote Desktop Client.  It's a paid app, but it works great.  I don't know of any alternative for iOS.
    MSRDP for Mac OSX (was also an iTap application) continues to work throughout the many updates.
    We need a software engineer from MS to read my first post.  All the information that will point to a fix is there.  I strongly believe someone hardcoded the string "localhost" instead of using a variable to point to the FQDN of the rdsfarm
    name.
    Here's that info again (copied/pasted).  It doesn't take an engineer to understand the issue.  If you know how to decipher Event Logs, you can see where the problem is.
    Event
    Viewer Log when using Android client:
    The
    user "DOMAIN\testuser", on client computer "10.x.x.x", met connection authorization policy requirements and was therefore authorized to access the RD Gateway server. The following authentication method was used: "NTLM". (This
    is most likely for logging into RD Web - icons shows up).
    The
    user "DOMAIN\testuser", on client computer "10.x.x.x", did not meet resource authorization policy requirements and was therefore not authorized to resource"localhost".
    The following error occurred: "23002".  (This
    is after clicking on any of the icons).
    I
    think the Android MS RDP client is providing the incorrect resource.  It shouldn't be "localhost".
     It should be the RD Connection Broker's hostname, I believe.
    Here's
    what it should look like (connected using a Windows PC going through the RD Web portal via Internet Explorer):
    The user "DOMAIN\testuser", on client computer "10.x.x.x",
    met connection authorization policy requirements and was therefore authorized to access the RD Gateway server. The following authentication method was used: "NTLM".
    The user "DOMAIN\testuser", on client computer "10.x.x.x",
    met resource authorization policy requirements and was therefore authorized to connect to resource "rdsfarm.domain.com".
    The user "DOMAIN\testuser", on client computer "10.x.x.x",
    connected to resource "rdsfarm.domain.com".

  • Outlook 2013 error: The connection to Microsoft Exchange is unavailable

    Environment: Windows 7 Enterprise
    Setup: Fresh install of Office 2013
    Issue: When I launch Outlook I get the error:
    The connection to Microsoft Exchange is unavailable. Outlook must be online or connected to complete this action.
    Steps to resolve:
    I made sure my server name and mail address were correct but this did not have an impact.
    I am at a total loss on how to resolve this issue, is there anyway to manually connect to M.E> as it is just saying the connection is unavailable.  All of the other threads dealing with this issue have been no help.  I can sign into my account
    at login.microsoftonline.net so i know the account is valid.  I also receive email to my iPhone with the account and server.  Any advice would be wonderful.
    Now when I start up the application it tells me the same error and brings up something to alter the server and connection address.   

    Hi,
    Have you tried to recreate a new mail profile and then test the issue?
    To do this, please exit Outlook, and then go to
    Control Panel >Mail... > Add…
    Details about create a new mail profile, see:
    http://support.microsoft.com/kb/829918/en-us
    Also, you can try with this KB:
    http://support.microsoft.com/kb/2264398
    This issue occurs when the
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders registry key does not contain all of the required data. Specifically, these problems occur if the
    AppData string value is missing from this registry key.
    To resolve this issue, import the
    User Shell Folders registry key from a working Windows User Profile.
    Hope this helps.
    Best Regards
    Steve Fan
    TechNet Community Support

  • When i want to update my iphone 4 it shows an error on connection. how can i update to the new version software?

    every time that apple takes out a new update i cannot update my ipohone 4 it gives me on itunes an error of connection can someone please help me out on what to do

    Try temporarily disabling your firewall and antivirus software and try again...
    See here for Connection Issues
    http://support.apple.com/kb/TS1379
    From Here
    http://www.apple.com/support/itunes/troubleshooting/

  • Error in connection to SEM, changes will not be saved

    Hi All,
    When i am creating an opportunity i am getting an error
    "Error in connection to SEM, changes will not be saved", and it does not allow me to save the opportunity.
    Regards,
    Radhika

    Dear Mangesh,
    Thank you for your post. It's really helpful.
    Best Regards,
    Duc Lam.

  • Message "Error in connection:No result set, result attempts = 100" on VC

    Hi,
    I am using a JDBC datasource to retrieve, update, insert and delete information from a SQL Server database using executing store procedures from VC.
    The selection of the data is perfect but for the deletion, insert or update of any data using store procedures I always get the following message:
    "Error in connection:No result set, result attempts = 100"
    At the end the information is modified in the database but I get error.
    Here is an example of one of my store procedure:
    CREATE PROCEDURE [dbo].[DelData]
         @id uniqueidentifier
         -- Add the parameters for the stored procedure here
    AS
    BEGIN
         -- SET NOCOUNT ON added to prevent extra result sets from
         -- interfering with SELECT statements.
         SET NOCOUNT ON;
        -- Insert statements for procedure here
         delete from data     
           WHERE Rowid=@id;
    END
    Let me know if somebody knows the reason of this and if there is something that I am doing wrong.
    Thanks,
    Zareh

    Hi,
    when you SELECT data, you get a result. So your connection gets a result set. When you DELETE, INSERT,... you have no result, because you didn't select data. So your connection can't get any result sets.
    best regards,
    Christian

  • Error while connecting to workflow builder after installation...first time!

    Hi,
    I have installed Oracle Workflow Builder 2.6.3 recently on my system and after installation, when I am trying to connect the workflow builder (using database username/password of that particular instance), it is throwing me the following error:
    220: Unable to set NLS_LANGUAGE.
    210: Oracle Error: ORA-01403: no data found
    . SQL text: SELECT NLS_LANGUAGE FROM WF_LANGUAGES WHERE :l IN (NLS_LANGUAGE, CODE)
    In the previous threads when I searched for the same issue, I found that if
    select value from v$nls_parameters
    where parameter='NLS_CHARACTERSET';
    returns the value other then WE8ISO8859P1 then that is what I should change my NLS_LANG entry for the builder - i.e. AMERICAN_AMERICA.<character set>.
    But I am not getting where should I change NLS_LANG, it is located where...some file? I am new to Workflow.
    Please help me. I tried a lot. Any type of help will be highly appreciated.
    Thanks,
    Sumir

    This issue (and solution) is described in ML Doc 577905.1 (Error While Connecting To Database Via Workflow Builder)
    HTH
    Srini

  • Installing Java Dialog Instance - Error while connecting to DB

    We would like to add a dialog instance to our production Portal server.  We installed Portal as stand-alone on the central instance.  We have another server we would like to setup to serve as a Portal dialog instance.
    So far I have installed Windows 2003 Server Standard.  Installed MSSQL server client tools (database is mssql server).  Installed jdk 1.4.62.  Set java home and path environmental variables.  I'm now installing the Java dialog instance (I can't find any documentation on this).  From Netweaver installation CD> SAP NetWeaver '04 Support Release 1> Java System> MS SQL Server> Dialog Instance Installation>
    SAP System ID: (sid) ES2
    Central Host: SAPEPS02
    Path to JAVA DVD supplied> JDK Directory confirmed> Domain paramaters confirmed> domain<sid> account passwords supplied> domain<service><sid> account password supplied> Instance number confirmed>
    Installation started> It gets to step 8 and fails stating "Error while connecting to DB".  I looked through all the log files and couldn't come up with anything (i'm very thorough).
    I tried adding the users to the database as dbowners (no luck).  I installed SQL server 2000 with SP4.  No where during this installation did I get prompted for database parameters?
    Is there something basic i'm missing?  Does this scenario not work?  Any help would be greatly appreciated.  Pointing me in the right direction of the correct documentation would also be appreciated.  Thank you in advance.
    Sincerely,
    Brad Dridi

    Hi Brad,
    I am facing the same problem. I hope by now you must have got the solution for this.
    Can you please let me know how did you overcome this situation?
    Thank you!!
    Regards,
    Abhijeet Bhagat

  • Error while Connecting report Best Practices v1.31 with SAP

    Hello experts,
    I'm facing an issue while trying to connect some of my reports from Best Practices for BI with SAP.
    It only happens when it's about info sets, the other ones that are with SAP tables go smoothly without a problem.
    The most interesting is I have already one of the reports connected to SAP info sets.
    I have already verified the document of steps of creation of additional database that comes with BP pack. They seem ok.
    Here goes what Crystal Reports throws to me after changing the data source to SAP:
    For report "GL Statement" one of the Financial Analysis one which uses InfoSet: /KYK/IS_FIGL_I3:
    - Failed to retrieve data from the database; - click ok then...
    - Database connector error: It wasn't indicated any variant for exercise (something like this after translating) - click ok then
    - Database connector error: RFC_INVALID_HANDLE
    For report "Cost Analysis: Planned vs. Actual Order Costs" one of the Financial Analysis one which uses InfoSet: ZBPBI131_INFO_ODVR and ZBPBI131_INFO_COAS; and also the Query CO_OM_OP_20_Q1:
    - Failed to retrieve data from the database; - click ok then...
    - Database connector error: check class for selections raised errors - click ok then
    - Database connector error: RFC_INVALID_HANDLE
    Obs.: Those "Z" infosets are already created in SAP environment.
    The one that works fine is one of the Purchasing Analysis reports:
    - Purchasing Group Analysis -> InfoSet: /KYK/IS_MCE1
    I'm kind of lost to solve this, because I'm not sure if it can be in the SAP JCO or some parameter that was done wrongly in SAP and I have already check possible solutions for both.
    Thanks in advance,
    Carlos Henrique Matos da Silva - SAP BusinessObjects BI - Brazil.

    I re-checked step 3.2.3 - Uploading Crystal User Roles (transaction PFCG) - of the manual where it talks about CRYSTAL_ENTITLEMENT and CRYSTAL_DESIGNER roles, I noticed in the Authorizations tab that the status was saying it hadn't been generated and I had a yellow sign, so then that was what I did (I generated) as it says in the manual.
    Both statuses are now saying "Authorization profile is generated" and the sign is now green on the tab.
    I had another issue in the User tab (it was yellow as Authorizations one before generating)....all I needed to do to change to green was comparing user (User Comparison button).
    After all that, I tried once more to refresh the Crystal report and I still have the error messages being thrown.
    There's one more issue in one of the tabs of PFCG transaction, it is on the Menu one where it is with a red sign, but there's nothing talking about it in the manual. I just have a folder called "Role menu" without anything in it.
    Can it be the reason why I'm facing errors when connecting the report to SAP infoSets? (remember one of my reports which is connected to an infoSet works good)
    Thanks in advance,
    Carlos Henrique Matos da Silva - SAP BusinessObjects BI - Brazil.

Maybe you are looking for

  • Reverse F-37 entry

    Dear Sir What is the T-Code to reverse F-37 entry (Customer down payment request) Thanks Sanjay

  • How to handle escape sequnce characters.

    hi, when i upload file from html page to a servlet I getting problem with escape sequence character .. that ie .. wheni upload file from <input type=file name=flieUpload>in servlet String path=req.getparameter("fileUpload"); File f=new File(path);her

  • Want to deploy a Oracle patch for SOA

    Hi All, I wanted to deploy a oracle patch "p12326395_111130_Generic", in the readme text of this patch, it asks me to use the OPATCH utility. Unfortunately I do not have that utility with me. Can someone please guide me whether I can install the patc

  • Applescript Support for Airplay?

    Does anyone know if there is direct support for controlling Airplay speakers in iTunes via Applescript? I know there are hacks to select the desired Airplay speaker using keypreses and manipulation of the speakers via the iTunes UI. However, this isn

  • Activation of Global Employment

    Hello, We are activating the Global Employment functionality for Master data maintenance. As per SAP Note 662136, the following needs to be done. ''To activate the desired functions, you have to activate the following line in the CHECK_RELEASED metho