Anyconnect profiles using by using different extended key attributes

Hi,
I have an anyconnect VPN with workstations located in the same OU in Active Directory. The current anyconnect deployment uses seperate OUs to determine what profile is applied to the client.
I'm looking for a solutiuon to enable machines to be located in a single OU & still have the ability to apply different profiles to machines.
The only way I can think of doing this is using machine certificates in Active Directory & configuring different extended key attributes.
Any advice/suggestions or information on the best way of doing this would be greatly appreciated

Resolved my own issue today. The error does nothing to describe the actual cause. The user's private key was corrupted (uncertain as to how). The certificate GUI in Windows showed it was okay, but running "certutil -store -user my" showed the error "Missing stored keyset" on the certificate in question.
The resolution was to delete the certificate and enroll for a new one, with a new key pair.

Similar Messages

How to restrict a VPN user with a specific anyconnect profile?

I need to assign to anyconnect users different profiles. This is done easily with IPSec, with the group policy configured in the client. With anyconnect I have two options:
- Allow the user to select the connect profile: The problem here is the user can select any profile and connect with the rules and permissions configured in this profile. I do not how to force one specific profile for each user.
- Use the DefaultWebVPNGroup as connection profile for everybody combined with DAP. This what I am doing now. Everybody connect with the default anyconnect profile and I use DAP to assign each user the network ACL's, Bookmarks, etc. The problem here is that I can not use other options that are included in the profiles or in the policies, like split tunneling or user authentication method.
I have seen some answers about this point but none of them is clear enough. I am using ASA 5540 with 8.4(6) and Windows IAS radius.
Thanks.

Thanks Elias. This works. Easy to configure. When I connect using the client it takes de group policy from the radius attribute 25 and apply it.
Just one little problem. This doesn't work with bookmarks when the user connect with WebVPN. In the logs I can see the connection taking the correct group policy but the bookmarks from that policy are not applied. Any idea?

OSB11g - using Concatenation function in report key - Xpath

Hi,
I am trying to use Concatenation function on Report key Xpath. For that i am using Following Xpath Expressions But this expressions not valid when trying to validate. But same expressions are valid under different scenarios in OSB.
1.fn:concat(./bpel:process/bpel:input, ./bpel:process/bpel:input)
error msg(when validate):_
error: XPath expression invalid, not a selection: declare namespace jca = 'http://www.bea.
com/wli/sb/transports/jca'; declare namespace wsp = 'http://schemas.xmlsoap.org/ws/2004/09/policy';
declare namespace jms = 'http://www.bea.com/wli/sb/transports/jms'; declare namespace tp = 'http:
//www.bea.com/wli/sb/transports'; declare namespace wsa05 = 'http://www.w3.
org/2005/08/addressing'; declare namespace jejb = 'http://www.bea.com/wli/sb/transports/jejb';
declare namespace xs = 'http://www.w3.org/2001/XMLSchema'; declare namespace sftp = 'http://www.
bea.com/wli/sb/transports/sftp'; declare namespace flow = 'http://www.bea.com/alsb/flow/transport';
declare namespace soap-env = 'http://schemas.xmlsoap.org/soap/envelope/'; declare namespace wsu
= 'http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd'; declare
namespace dsp = 'http://www.bea.com/dsp/transport/sb'; declare namespace ejb = 'http://www.bea.
com/wli/sb/transports/ejb'; declare namespace bpel = 'http://xmlns.oracle.
com/Bpel_Actvities/Assign_Activity/BPELProcess'; declare namespace wsa = 'http://schemas.xmlsoap.
org/ws/2004/08/addressing'; declare namespace bpel-10g = 'http://www.bea.
com/wli/sb/transports/bpel10g'; declare namespace tuxedo = 'http://www.bea.
com/wli/sb/transports/tuxedo'; declare namespace file = 'http://www.bea.com/wli/sb/transports/file';
declare namespace ctx = 'http://www.bea.com/wli/sb/context'; declare namespace fn = 'http://www.w3.
org/2004/07/xpath-functions'; declare namespace soap12-enc = 'http://www.w3.org/2003/05/soap-
encoding'; declare namespace soap12-env = 'http://www.w3.org/2003/05/soap-envelope'; declare
namespace fn-bea = 'http://www.bea.com/xquery/xquery-functions'; declare namespace mq = 'http:
//www.bea.com/wli/sb/transports/mq'; declare namespace ws = 'http://www.bea.
com/wli/sb/transports/ws'; declare namespace http = 'http://www.bea.com/wli/sb/transports/http';
declare namespace soa-direct = 'http://www.bea.com/wli/sb/transports/soa'; declare namespace email
= 'http://www.bea.com/wli/sb/transports/email'; declare namespace sb = 'http://www.bea.
com/wli/sb/transports/sb'; declare namespace ftp = 'http://www.bea.com/wli/sb/transports/ftp';
declare namespace xsd = 'http://www.w3.org/2001/XMLSchema'; declare namespace soap-enc = 'http:
//schemas.xmlsoap.org/soap/encoding/'; declare namespace xsi = 'http://www.w3.
org/2001/XMLSchema-instance'; fn:concat(./bpel:process/bpel:input, ./bpel:process/bpel:input)
2. op:concatenate(./bpel:process/bpel:input, ./bpel:process/bpel:input)
While using this Xpath expression validation is sucessfull but concatenation operation is not working when checked in the message reports under operations tab.
Can any one help me on this.
Thanks in advance.

can you try assign concatenated value to some xml element first, like
assign : <value>{fn:concat(a,b)}</value> to e.g. value
and then report key ./text() in variable $value
Edited by: AigarsP on Jun 12, 2012 4:12 AM

Is there a way to find out which CSS rules are being used by the different html files?

Is there a way in Dreamweaver CS3 to find out which CSS rules are being used by the different html files, sitewide?
Thanks - Dave

Firefox add-on "Web Developer Toolbar" is a must have. Information > Display Div & Class details.
https://addons.mozilla.org/en-US/firefox/addon/60
Another handy Firefox Add-on to add to your tool chest is called "Dust-Me Selectors."
http://www.sitepoint.com/dustmeselectors/
"It extracts all the selectors from all the stylesheets on the page you're viewing, then analyzes that page to see which of those selectors are not used. The data is then stored so that when testing subsequent pages, selectors can be crossed off the list as they're encountered.
You can test pages individually, or spider an entire site, and you'll end up with a profile of which selectors are not used anywhere."
Nancy O.
Alt-Web Design & Publishing
Web | Graphics | Print | Media Specialists
www.alt-web.com/
www.twitter.com/altweb
www.alt-web.blogspot.com

Which printer profile do I use?

I have a Epson Stylus Photo R360 printer connected to a Intel Mac running OSX 10.6 Snow Leopard. I am currently using Adobe Lightroom 3 as my main image browser and would like to know what the correct profile is to use to gain desirable prints when using Epson Premium gloss paper. At the moment I am trying to print Canon CR2 camera raw image files and find that when I try to output these they come out very dark and over saturated. If I just use the "managed by printer" option and then the "layout" option in the print dialogue, I get better results but not perfect! Do I need to set up a different print profile within Lightroom? If I turn off "managed by printer" in the Lightroom dialogue I get many profiles to choose from (see below) so would appreciate it if you could advise me on this. I have turned off the printer management as shown below - if this is correct! Other than trying out each profile on the list I don't know what to do. I would greatly appreciate any help on this please.

First, I second the previous post that your monitor needs to be calibrated and most important that the brightness is not set too high.
Even if your monitor has been calibrated, the brighntess might still be too high. Strangely enough, some calibration softwares recommend a brightness that is too high.
Your monitor brightness should be set to between 100 - 120, or else your prints will come out too dark.
Secondly, when you select "managed by printer" make sure that in the printer's dialog you select proPhoto RGB. By default most printers (I don't know the Epson R360) are set to sRGB.
LR by default (and it cannot be changed) uses proPhoto RGB (or to be precise a color space derived from proPhoto RGB).
When you select "managed by printer", LR sends the image file to the printer as proPhoto RGB and the printer interprets it as sRGB. The result is a print that is overly saturated.
So in a way you have to make sure that LR and your printer speak the same language. You can do it in two ways:
1) Let LR manage the colors by selecting a profile for your printer AND the paper you are using. You then have to switch off your printer's color management by selecting "Application managed" (or similar wording) in the printer's dialog.
2) Or you select "printer managed". In your printer's dialog you then have to select proPhoto RGB, or Adobe RGB but NOT sRGB. The prints will probably not be optimal when your printer's dialog does not give you the option of proPhoto RGB. If you have Photoshop, you could change the color space of your image to Adobe RGB or even to sRGB and thus achieve that your imgage's color space and the printer's color space match exactly.
WW

[svn:fx-trunk] 5604: Ensuring qualified class names are used in type selector cache keys for Flex 4 applications .

Revision: 5604
Author: [email protected]
Date: 2009-03-26 14:00:26 -0700 (Thu, 26 Mar 2009)
Log Message:
Ensuring qualified class names are used in type selector cache keys for Flex 4 applications.
QE: Yes, this should address style issues for test cases that contain two different components with the same local name.
Dev: No
Doc: No
Checkintests: Pass
Modified Paths:
flex/sdk/trunk/frameworks/projects/framework/src/mx/styles/StyleProtoChain.as

Remember that Arch Arm is a different distribution, but we try to bend the rules and provide limited support for them. This may or may not be unique to Arch Arm, so you might try asking on their forums as well.

Used to use the Mac. How different are menus between Mac and Windows?

I used to use the Mac. How different are the PowerMac menus from those of Windows OS?

Hello,
They're pretty different, after a short while the Mac will be easier, key is to not expect it to work like Windows... I use both.
I think these may answer some of your questions...
http://switchtoamac.com/guides/mac-os-x/mac-os-x-basics/mac-os-x-101-using-a-mac .html
http://www.apple.com/support/macbasics/
Feel free to ask if you have questions after looking at them.

My Adobe Photoshop looks completely different. How did it change from what I am used to using?

My photoshop elements looks totally different from what I have been using. How can I find the simplier version I am used to?

When did the version change to 10?   I used it in March and it was the one I was used to. It was much simplier. Is there another Adobe Photoshop besides Elements?
==============================
Patti Farley - Albuquerque, NM - US
[email protected]
505 417 5730
==============================
Date: Tue, 7 May 2013 11:22:43 -0700
From: [email protected]
To: [email protected]
Subject: My Adobe Photoshop looks completely different. How did it change from what I am used to using?
    Re: My Adobe Photoshop looks completely different. How did it change from what I am used to using?
    created by 99jon in Photoshop Elements - View the full discussion
Hold down the CtrlShiftAlt keys and simultaneously click on the Edit button on the welcome screen. After a few seconds release the three keys and look behind the welcome screen by closing it. Alternatively hold down the three keys whilst clicking on the desktop icon for the Editor or PhotoshopElementsEditor.exe in the Programs folder. Keep holding down all three keys for a few seconds; then release. You should get the settings option. When you see a pop up box with the words: Delete Adobe Photoshop Elements Settings File? Click on Yes Then wait whilst Elements rebuilds the preferences.
https://lh4.googleusercontent.com/-S6Kjmq-x08U/USJJS91-teI/AAAAAAAABIg/jpqUlTmNez4/s320/Se ttings.jpg
     Please note that the Adobe Forums do not accept email attachments. If you want to embed a screen image in your message please visit the thread in the forum to embed the image at http://forums.adobe.com/message/5298329#5298329
     Replies to this message go to everyone subscribed to this thread, not directly to the person who posted the message. To post a reply, either reply to this email or visit the message page: http://forums.adobe.com/message/5298329#5298329
     To unsubscribe from this thread, please visit the message page at http://forums.adobe.com/message/5298329#5298329. In the Actions box on the right, click the Stop Email Notifications link.
     Start a new discussion in Photoshop Elements by email or at Adobe Community
For more information about maintaining your forum email notifications please go to http://forums.adobe.com/message/2936746#2936746.

I used the ctrl+fn+f1 keys and now all new folders created include all desktop items

I have now made it so that all new folders now have all desktop items in them. I used the control+fn+f1 keys and it created this problem, I tried un-doing it by using those same keys again, but it doesn't work. Wondering if anyone else has run into this problem, if it can be fixed and if so, how?
Thanks in advance for your imput.

You may not have created a mess, it's possible you simply don't know where your data is after migrating. Had you followed the Setup Assistant's on-screen prompts when you initially turned on your new system you would be running just fine by now. My guess is you haven't been exposed to Pondini's Lion Setup Assistant tips.
Migration Assistant (MA) and Setup Assistant (SA) are cousins, similar but different. The primary difference is MA creates a new user account which can be confusing to some users. If you successfuly migrated then log out of your existing using account and you should see the new user account. Log into that account then you should see the migrated data. If you do then use Pondini's Transferring files from one User Account to another.
However if you have totally made of mess out of things then I'd start over, this time using the Setup Assistant Tips beginning where he discusses Second Chance.

HT4913 how to remove this ? You can use iTunes Match on this computer with just one Apple ID every 90 days. This computer can be used with a different Apple ID in 85 days.

hello i ad my girlfriend profile and her itune library on my macbook and now i have this warning in my l itunes library, how can i resolve the problem ?
You can use iTunes Match on this computer with just one Apple ID every 90 days. This computer can be used with a different Apple ID in 85 days.

If a computer has been associated with a device (as well as iTunes Matct, it can become associated via automatic downloads or re-downloading past purchases) then you will either need to wait until the 90 days have completed : http://support.apple.com/kb/HT4627
Or you can try contacting iTunes Support and see if they can remove the association : http://www.apple.com/support/itunes/contact/ - click on Contact iTunes Store Support on the right-hand side of the page

How do i use my own image with keying (or green screen)

how do i use my own image witrh keying (or green screen)

Put your sky clip on a layer below the clip you want to key. One or the other will be a connected clip. Apply the Keying filter to foreground clip (the one with the green screen). The green will be seen as transparent and the sky will show through as the BG. Adjust as necessary in the Inspector.
Good luck.
Russ

Music from CDs that is on my iPod won't transfer to my iTunes library on a different computer I used to use but all music bought from iTunes will? How do I fix this?

In the past to get music from CDs onto my iTunes library and onto my iPod was all easy and fine, as you would know if you have done such a thing before. I used to use a different laptop for all my music stuff to the desktop I have to use now as the other one is broken. It is an authorised computer on my iTunes, so my issue has got nothing to do with that. When I got this desktop (it is quite an old one, if that makes any difference), i had to download iTunes and put all my music into my library to back it up.
However, all music that I had bought physically that is currently on my iPod (CDs) WON'T transfer into my new library on the desktop, but all music that I had bought digitally (iTunes) WILL transfer.
This has led to about 300 missing songs in my library and means I can't transfer all of my music onto a different device (as I am trying to transfer all my music onto an iPhone 3).
I have tried countless things. All of that "File > Devices > Transfer purchases" stuff WILL. NOT. WORK. I tried copying the music into a file on the desktop and then adding said file into the library, but it won't let me paste any music.
If someone were to help me in transferring the music I so dearly love then I would be eternally grateful.
Thank you

See Recover your iTunes library from your iPod or iOS device.
tt2

I'm running windows XP using boot camp. What key do I push on the keyboard to bring up my desktop?

I'm running windows XP using boot camp. What key do I push on the keyboard to bring up/go to my desktop?

Have a look here http://en.wikipedia.org/wiki/Table_of_keyboard_shortcuts
Stefan

I have an Airport Extreme as my router and am using time capsule to extend the network in my new house. My ISP is only providing me 4-5 ip addresses and wants me to set up my router to issue out new ip addresses for all my devices.How do I fix this?Help

I have an Airport Extreme as my router and am using time capsule to extend the network in my new house. My ISP is only providing me 4-5 ip addresses and wants me to set up my router to issue out new ip addresses for all my devices.How do I fix this?Help.
They said I need to change my settings to NAT settings. I haven't been able to figure out or find anything. I have also spoken to Apple Support on the phone for hours without being able to figure out how to do this ( i don't think he knew much either lol.) Please help me because I've got about 15-20 devices in my house that require to be connected to the internet and this is just making things ridiculously slow and painful for me.
Thanks!

It is on DHCP & NAT under router mode yet my isp is still the one issuing ip addresses to my devices instead of the router issuing them

Can two peeps use iChat with different accounts on the same computer?

What do I do to REMOVE an old AIM account and replace it with a new account in IChat?
Can two peeps use iChat with different accounts in the same computer?
(Actually, two people share a laptop, but one of us cannot use her AIM account cuz mine is in iChat already... And, when traveling, I have the computer - and I would like to use iChat on the computer...)

In iChat 4 you can have more than one AIM Valid name logged in at once.
AIM valid = AIM, @mac.com or a MobileMe name.
What you are then stuck with is that iChat is linked to one Buddy Picture and The one Mac User Account's Address Book which may or may not have Full Names, emails details, or a Nickname in iChat 4 linked to the Screen Names.
Whilst it does let you both log in whilst using one Mac User Account there are drawbacks about who uses the keyboard and reading meesages from the other persons Buddies.
8:50 PM Sunday; November 30, 2008

Anyconnect profiles using by using different extended key attributes

Similar Messages

Maybe you are looking for