BAM Adapter fails with Authentication

Hi,
I've created a simple BPEL process which populates a sensor variable and tries to insert a row in a BAM data object. I have already configured the BAM Adapter to reflect the host, port, password, etc. When I call the BPEL process, the sensor variable gets populated but it does not proceed thereon to BAM. The message fails at BAM with the following:
javax.security.auth.login.LoginException: [Security:090304]Authentication Failed: User webbam javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User webbam denied
at oracle.security.jps.internal.jaas.module.authentication.JpsUserAuthenticationLoginModule.login(JpsUserAuthenticationLoginModule.java:73)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:769)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:186)
at javax.security.auth.login.LoginContext$5.run(LoginContext.java:707)
at javax.security.auth.login.LoginContext.invokeCreatorPriv(LoginContext.java:703)
at javax.security.auth.login.LoginContext.login(LoginContext.java:575)
at oracle.bam.common.security.authentication.BamLoginContext.loginJPS(BamLoginContext.java:320)
at oracle.bam.common.security.authentication.BamLoginContext.loginJPS(BamLoginContext.java:289)
at oracle.bam.common.security.authentication.BamLoginContext.login(BamLoginContext.java:157)
at oracle.bam.common.security.authentication.BamLoginContext.login(BamLoginContext.java:95)
at oracle.bam.adapter.adc.CachedConnection.<init>(CachedConnection.java:144)
at oracle.bam.adapter.adc.ADCManagedConnectionFactory.getCachedConnection(ADCManagedConnectionFactory.java:503)
at oracle.bam.adapter.adc.ADCInteraction.execute(ADCInteraction.java:226)
at oracle.integration.platform.blocks.adapter.fw.jca.cci.JCAInteractionInvoker.executeJcaInteraction(JCAInteractionInvoker.java:303)
at oracle.integration.platform.blocks.adapter.fw.jca.cci.JCAInteractionInvoker.invokeJcaReference(JCAInteractionInvoker.java:542)
at oracle.integration.platform.blocks.adapter.fw.jca.cci.JCAInteractionInvoker.invokeAsyncJcaReference(JCAInteractionInvoker.java:502)
at oracle.integration.platform.blocks.adapter.fw.jca.cci.JCAEndpointInteraction.performAsynchronousInteraction(JCAEndpointInteraction.java:491)
at oracle.integration.platform.blocks.adapter.client.JCABindingOperation.executeInputOnlyOperation(JCABindingOperation.java:159)
at com.collaxa.cube.engine.sensor.sa.publisher.bamMonitor.BAMMonitorDataPublisher.sendPayloadtoBam(BAMMonitorDataPublisher.java:119)
at com.collaxa.cube.engine.sensor.sa.publisher.bamMonitor.BAMMonitorDataPublisher.publish(BAMMonitorDataPublisher.java:80)
at com.collaxa.cube.engine.sensor.sa.publisher.bamMonitor.BAMMonitorPublisherAdapter.publish(BAMMonitorPublisherAdapter.java:60)
at com.collaxa.cube.engine.sensor.sa.BpelPublisher.publishMonitor(BpelPublisher.java:179)
at com.collaxa.cube.engine.sensor.sa.MonitorDataRouter.send(MonitorDataRouter.java:14)
at com.collaxa.cube.engine.sensor.dca.DataCaptureAgency.sendMonitorActivityData(DataCaptureAgency.java:455)
at com.collaxa.cube.engine.sensor.dca.DataCaptureAgency.onActivityActivate(DataCaptureAgency.java:253)
at com.collaxa.cube.engine.util.CompositeInstanceObserver.onActivityActivate(CompositeInstanceObserver.java:34)
at com.collaxa.cube.engine.ext.bpel.v1.blocks.BPELProcessBlock.activate(BPELProcessBlock.java:77)
at orabpel.bploracletofltwiface.BPEL_BIN$$BPELC_BpPrc0.activate(BPEL_BIN.java:979)
at com.collaxa.cube.engine.CubeEngine.invokeMethod(CubeEngine.java:882)
at com.collaxa.cube.engine.CubeEngine._createAndInvoke(CubeEngine.java:699)
at com.collaxa.cube.engine.CubeEngine.createAndInvoke(CubeEngine.java:545)
at com.collaxa.cube.engine.delivery.DeliveryService.handleInvoke(DeliveryService.java:654)
at com.collaxa.cube.engine.ejb.impl.CubeDeliveryBean.handleInvoke(CubeDeliveryBean.java:355)
at sun.reflect.GeneratedMethodAccessor1126.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at com.bea.core.repackaged.springframework.jee.intercept.MethodInvocationInvocationContext.proceed(MethodInvocationInvocationContext.java:104)
at oracle.security.jps.ee.ejb.JpsAbsInterceptor$1.run(JpsAbsInterceptor.java:88)
at oracle.security.jps.util.JpsSubject.doAsPrivileged(JpsSubject.java:313)
at oracle.security.jps.ee.util.JpsPlatformUtil.runJaasMode(JpsPlatformUtil.java:414)
at oracle.security.jps.wls.JpsWeblogicEjbInterceptor.runJaasMode(JpsWeblogicEjbInterceptor.java:61)
at oracle.security.jps.ee.ejb.JpsAbsInterceptor.intercept(JpsAbsInterceptor.java:106)
at oracle.security.jps.ee.ejb.JpsInterceptor.intercept(JpsInterceptor.java:106)
at sun.reflect.GeneratedMethodAccessor898.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.bea.core.repackaged.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:310)
at com.bea.core.repackaged.springframework.jee.intercept.JeeInterceptorInterceptor.invoke(JeeInterceptorInterceptor.java:69)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.jee.spi.MethodInvocationVisitorImpl.visit(MethodInvocationVisitorImpl.java:37)
at weblogic.ejb.container.injection.EnvironmentInterceptorCallbackImpl.callback(EnvironmentInterceptorCallbackImpl.java:54)
at com.bea.core.repackaged.springframework.jee.spi.EnvironmentInterceptor.invoke(EnvironmentInterceptor.java:50)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:89)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.doProceed(DelegatingIntroductionInterceptor.java:131)
at com.bea.core.repackaged.springframework.aop.support.DelegatingIntroductionInterceptor.invoke(DelegatingIntroductionInterceptor.java:119)
at com.bea.core.repackaged.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at com.bea.core.repackaged.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy246.handleInvoke(Unknown Source)
at com.collaxa.cube.engine.ejb.impl.bpel.BPELDeliveryBean_5k948i_ICubeDeliveryLocalBeanImpl.handleInvoke(BPELDeliveryBean_5k948i_ICubeDeliveryLocalBeanImpl.java:462)
at com.collaxa.cube.engine.dispatch.message.invoke.InvokeInstanceMessageHandler.handle(InvokeInstanceMessageHandler.java:35)
at com.collaxa.cube.engine.dispatch.DispatchHelper.handleMessage(DispatchHelper.java:141)
at com.collaxa.cube.engine.dispatch.BaseDispatchTask.run(BaseDispatchTask.java:82)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:909)
at java.lang.Thread.run(Thread.java:619)
I know a lot of user have faced this issue (numerous posts on this forum) and the issues have been solved once the BAM Adapter in the WLS console was updated with the host, port, username and password. However, I am facing this issue despite changing that.
Are there any other changes I am supposed to do after entering the values in the BAM Adapter? Do I need to activate in the change center or redeploy? I am using SOA 11.1.1.3

Hi,
I did not update the deployment plan for the BAMAdapter despite making changes in the BAMAdapter. This was the cause of the authentication failure.
Thanks.

Similar Messages

SOA 11g: Intergation with BAM 11g failed with ThreadPool has stuck threads

Hi,
I have installed BAM and SOA server on local host. Now while integrating BAM with BAMAdapter it's going into long running state and finally failing with below error.
<Notice> <Diagnostics> <mars.as.local> <soa_server1> <[ACTIVE] ExecuteThread: '14' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <c82d73b0a2a7776f:37a0afd7:130d1278d97:-8000-0000000000028a7f> <1309264042380> <BEA-320068> <Watch 'StuckThread' with severity 'Notice' on server 'soa_server1' has triggered at Jun 28, 2011 1:27:22 PM BST. Notification details:
WatchRuleType: Log
WatchRule: (SEVERITY = 'Error') AND ((MSGID = 'WL-000337') OR (MSGID = 'BEA-000337'))
WatchData: DATE = Jun 28, 2011 1:27:22 PM BST SERVER = soa_server1 MESSAGE = *[STUCK] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)' has been busy for "638" seconds working on the request "weblogic.servlet.internal.ServletRequestImpl@16e92176[*
*POST /soa-infra/services/default/BAMInsert/bpelprocess1_client_ep HTTP/1.1*
Connection: TE
TE: trailers, deflate, gzip, compress
User-Agent: Oracle HTTPClient Version 10h
SOAPAction: "process"
Accept-Encoding: gzip, x-gzip, compress, x-compress
ECID-Context: 1.c82d73b0a2a7776f:2ced6156:130d1186ef6:-8000-00000000000046b2;kYjE0ZJOoOTLkKPOoLRKlSODoITT_G
Content-type: text/xml; charset=UTF-8
Content-Length: 270
*]", which is more than the configured time (StuckThreadMaxTime) of "600" seconds. Stack trace:*
*Thread-139 "[STUCK] ExecuteThread: '11' for queue: 'weblogic.kernel.Default (self-tuning)'" <alive, suspended, sleeping, priority=1, DAEMON> {*
*java.lang.Thread.sleep(Thread.java:???)*
oracle.bam.common.remoting.BamEjbClient.getSession(BamEjbClient.java:973)
oracle.bam.common.remoting.BamEjbClient.getADCSession(BamEjbClient.java:350)
oracle.bam.adc.api.util.Context.<init>(Context.java:270)
oracle.bam.adapter.adc.CachedConnection.<init>(CachedConnection.java:134)
oracle.bam.adapter.adc.ADCManagedConnectionFactory.getCachedConnection(ADCManagedConnectionFactory.java:490)
^-- Holding lock: java.lang.String@13416588[fat lock]
What could be root cause of this? Can anyone please help to find the solution?
Even though both servers on same host why BAM connection is getting to much time and Putting server in warning state like :
+[STUCK] ExecuteThread: '6' for queue: 'weblogic.kernel.Default (self-tuning)'+
*Do i need to modify any config file at Admin or BAM level? if Yes, what parameter Do i need to change?*
Please guide.
Thanks,
Sagar.

Further Updates on this :
I further debugged and found out few more things. This might help.
In Weblogic Admin console Home > Summary of Deployments >oracle-bam(11.1.1)
MDB application oracle-bam is NOT connected to messaging system with below error.
EJBs
MessageDispatcherBean - Error java.lang.IllegalArgumentException: Getting Deployment configuration...
connectionFactoryJNDIName - Red Cross with warning
destinationJNDIName - Red Cross with warning
resourceAdapterJNDIName - Red Cross with warning
Modules
Also please check out another similar thread and please update.
BAMAdapter Issue : java.rmi.ConnectException: Destination unreachable;
Thanks,
Sagar

Exchange 2010 RPC over HTTPs failing with authentication error

Hi. I have my remote.xxx.co.uk domain and autodiscover.xxx.co.uk domain pointing to my SBS2011 server, have ports 25, 80, 443 open. The Microsoft Connectivity Analyzer fails with the below error.
Outlook will autodiscover happily on the local network, and works fine. Phones etc do too.
Outlook at a remote VPN connected site won't connect through autodiscover, but will if you do it manually (ignoring the RPC Proxy settings). Everything works for a while, but then I guess outlook decides to use autodiscover to complete all the connection
details, and then these machines can no longer connect to exchange as I guess they decide the speed is too slow and try to connect using RPC instead.
Users can access OWA happily, and activesync is working on phones etc.
SSL cert is a wildcard type on my domain, and certs are installed - all green and happy when visiting OWA on both remote.xxxxx.co.uk and autodiscover.xxxxx.co.uk domains.
I cannot work out why I have an authentication error for RPC?
Any advice would be great!
Testing HTTP Authentication Methods for URL https://remote.xxxxx.co.uk/rpc/rpcproxy.dll?xxxxxx.xxxxxx.local:6002.
The HTTP authentication test failed.
Additional Details
Exception details:
Message: The operation has timed out
Type: System.Net.WebException
Stack trace:
at System.Net.HttpWebRequest.GetResponse()
at Microsoft.Exchange.Tools.ExRca.Extensions.RcaHttpRequest.GetResponse()
Elapsed Time: 100065 ms

Hi.
To update.
I tried to recreate the virtual directories in the Exchange Management Console, using the recreate links and via the shell, but while they were recreated, they did not function as they should due to issues in the meta database.
I then found the following which worked.
Looking at the ActiveSync virtual directories, when running the below command, the result showed the directory was there, so I then knew to delete it.
In EMS I ran,
=> Ran "$site = [ADSI]"IIS://localhost/W3SVC/1/Root/Microsoft-Server-ActiveSync""
Result: Carriage return.
=> Ran "$site"
Result:
distinguishedName:
Path: {C:\Program Files\Microsoft\ExchangeServer\V14\Client Access\Sync}
In EMS I then ran,
=> Ran "$Site = [ADSI]"IIS://localhost/W3SVC/1/Root""
Result: Carriage return.
=> Ran "$site.Delete("IIsWebVirtualDir","Microsoft-Server-ActiveSync")"
Result: Carriage return.
=> Ran "$site.SetInfo()"
Result: Carriage return.
=> Ran "$site"
Result: Carriage return.
=> Ran "iisreset"
I then recreated the virtual directories.
In EMS I ran,
=> Ran "New-ActiveSyncVirtualDirectory -WebSiteName "Default Web Site""
Results: Successfully recreated.
=> Ran "iisreset"
I am not sure exactly, but I did this for multiple virtual directories, and everything came to life just as it should.

Xi 3.0: Mail adapter fails with "exception in method process"

Hi.
I configured the dynamic address for mail adapter following the fantastic-as-always weblog from michalgh.
Althou everything seems to work fine (that is, i send correctly the email message) the A.F. returns an error with "exception in method process".
I tried both async and sync case with the same result. In the sync case, the response contains:

<SAP:Error xmlns:SAP="http://sap.com/xi/XI/Message/30" xmlns:SOAP="http://schemas.xmlsoap.org/soap/envelope/" SOAP:mustUnderstand="1">
<SAP:Category>XIAdapterFramework</SAP:Category>
<SAP:Code area="PARSING">GENERAL</SAP:Code>
<SAP:P1 />
<SAP:P2 />
<SAP:P3 />
<SAP:P4 />
<SAP:AdditionalText>com.sap.aii.af.ra.ms.api.DeliveryException: Exception in method process.</SAP:AdditionalText>
<SAP:ApplicationFaultMessage namespace="" />
<SAP:Stack />
<SAP:Retry>M</SAP:Retry>
</SAP:Error>
Any idea???

Yes. There is also a response message in the imported structure.. it seems it should work as a kind of application ack with some info on the server that processed the mail.
Anyway, in my server i get a 404 for the link you suggested.
In the async case i don't get any error on the SXMB_MONI but only on the A.F.
I attach the audit log for the async case:
Audit Log for Message: ffb28585-3c53-0f4b-b366-7dd7a00513fc
Time Stamp Status Thread ID Sequence No. Description
2005-06-12 22:27:06 Success SAPEngine_Application_Thread[impl:3]_45 1118608026046 The message was successfully received by the messaging system. Profile: XI URL: http://CAPELAB010:50000/MessagingSystem/receive/AFW/XI
2005-06-12 22:27:06 Success SAPEngine_Application_Thread[impl:3]_45 1118608026062 Using connection AFW. Trying to put the message into the receive queue.
2005-06-12 22:27:06 Success SAPEngine_Application_Thread[impl:3]_34 1118608026093 The message was successfully retrieved from the receive queue.
2005-06-12 22:27:06 Success SAPEngine_Application_Thread[impl:3]_34 1118608026375 The message status set to DLNG.
2005-06-12 22:27:06 Success SAPEngine_Application_Thread[impl:3]_34 1118608026468 Delivering to channel: MAIL_RECV
2005-06-12 22:27:06 Success SAPEngine_Application_Thread[impl:3]_34 1118608026468 Mail: message entering the adapter
2005-06-12 22:27:06 Error SAPEngine_Application_Thread[impl:3]_34 1118608026828 Exception caught by adapter framework: Failed to call the endpoint
2005-06-12 22:27:06 Error SAPEngine_Application_Thread[impl:3]_34 1118608026828 Delivery of the message to the application using connection AFW failed, due to: Failed to call the endpoint.
2005-06-12 22:27:06 Success SAPEngine_Application_Thread[impl:3]_34 1118608026843 The asynchronous message was successfully scheduled to be delivered at Sun Jun 12 22:32:06 CEST 2005.
2005-06-12 22:27:06 Success SAPEngine_Application_Thread[impl:3]_34 1118608026859 The message status set to WAIT.
2005-06-12 22:32:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608327109 The message was successfully retrieved from the receive queue.
2005-06-12 22:32:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608327125 The message status set to DLNG.
2005-06-12 22:32:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608327156 Delivering to channel: MAIL_RECV
2005-06-12 22:32:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608327171 Mail: message entering the adapter
2005-06-12 22:32:07 Error SAPEngine_Application_Thread[impl:3]_34 1118608327250 Exception caught by adapter framework: Failed to call the endpoint
2005-06-12 22:32:07 Error SAPEngine_Application_Thread[impl:3]_34 1118608327250 Delivery of the message to the application using connection AFW failed, due to: Failed to call the endpoint .
2005-06-12 22:32:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608327281 The asynchronous message was successfully scheduled to be delivered at Sun Jun 12 22:37:07 CEST 2005.
2005-06-12 22:32:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608327296 The message status set to WAIT.
2005-06-12 22:37:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608627421 The message was successfully retrieved from the receive queue.
2005-06-12 22:37:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608627437 The message status set to DLNG.
2005-06-12 22:37:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608627546 Delivering to channel: MAIL_RECV
2005-06-12 22:37:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608627562 Mail: message entering the adapter
2005-06-12 22:37:07 Error SAPEngine_Application_Thread[impl:3]_34 1118608627671 Exception caught by adapter framework: Failed to call the endpoint
2005-06-12 22:37:07 Error SAPEngine_Application_Thread[impl:3]_34 1118608627671 Delivery of the message to the application using connection AFW failed, due to: Failed to call the endpoint .
2005-06-12 22:37:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608627703 The asynchronous message was successfully scheduled to be delivered at Sun Jun 12 22:42:07 CEST 2005.
2005-06-12 22:37:07 Success SAPEngine_Application_Thread[impl:3]_34 1118608627734 The message status set to WAIT.
2005-06-12 22:42:07 Success SAPEngine_Application_Thread[impl:3]_40 1118608927734 The message was successfully retrieved from the receive queue.
2005-06-12 22:42:07 Success SAPEngine_Application_Thread[impl:3]_40 1118608927734 The message status set to DLNG.
2005-06-12 22:42:07 Success SAPEngine_Application_Thread[impl:3]_40 1118608927750 Delivering to channel: MAIL_RECV
2005-06-12 22:42:07 Success SAPEngine_Application_Thread[impl:3]_40 1118608927750 Mail: message entering the adapter
2005-06-12 22:42:07 Error SAPEngine_Application_Thread[impl:3]_40 1118608927765 Exception caught by adapter framework: Failed to call the endpoint
2005-06-12 22:42:07 Error SAPEngine_Application_Thread[impl:3]_40 1118608927781 Delivery of the message to the application using connection AFW failed, due to: Failed to call the endpoint .
2005-06-12 22:42:07 Error SAPEngine_Application_Thread[impl:3]_40 1118608927796 The message status set to NDLV.
Total: 33 Entries 1020304050 messages displayed per page; this is page 1 of 1 page(s)

Flow is not going to catch block when JMS adapter fails

In a BPEL composite, we have a JMS adapter to write a message into JMS Queue.
In this error scenario, JMS is down & so JMS adapter fails with the below error. But control is not going to the catch block where we have some logic to construct a error response. Why?
Global retry rollback fault thrown.
The current JTA transaction is aborting due to an user rollback fault being thrown. The upstream component should retry in a new JTA transaction upon catching this fault.
This exception was caused by a global retry fault being thrown from downstream component. The user had directed the BPEL engine to roll back the current JTA transaction and retry within new JTA transactions for the specified number of times and retry interval.
There is no action recommended.
BINDING.JCA-12563
Exception occured when binding was invoked.
Exception occured during invocation of JCA binding: "JCA Binding execute of Reference operation 'Produce_Message' failed due to: ERRJMS_PROVIDER_ERR.
ERRJMS_PROVIDER_ERR.
Unable to produce message due to JMS provider internal error.
Please examine the log file to determine the problem.
The invoked JCA adapter raised a resource exception.
Please examine the above error message carefully to determine a resolution.

Hi,
This is similar to JTA issue from below post.
CatchAll block not catching JTA timeout with XA datasource. Try the suggestion given by Riaan and see if it helps.
Regards,
Sai

After-Delete Resource Action Fails with "the authenticity of host ..." Err

I created two Resource Actions (see below for format used). Both actions are being referenced in an Shell Script resource adapter (RA) that's used to create/delete a home directory on a Sun Solaris box. The RA also performs other setup/cleanup activities. The After-Create resource action call to ssh works. The After-Delete resource action call to ssh fails with the following error:
com.waveset.util.WavesetException: Script failed waiting for "_,)#+
(:" in response "The authenticity of host 'localhost (127.0.0.1)' can't be
established. RSA key fingerprint is db:98:c4:cf:84:0a:f9:52:12:14:7...A key
fingerprint is db:98:c4:cf:84:0a:f9:52:12:14:7e:74:23:f7:8f:df. Are you sure
you want to continue connecting (yes/no)? " com.waveset.util.WavesetException:
Script processor timed out with nothing to read and the following unprocessed
text: "The authenticity of host 'localhost (127.0.0.1)' can't be established.
RSA key fingerprint is db:98:c4:cf:84:0a:f9:52:12:14:7e:74:23:f7:8f:df. Are you sure you want to continue connecting (yes/no)? The authenticity of host 'localhost (127.0.0.1)' can't be established. RSA key fingerprint is db:98:c4:cf:84:0a:f9:52:12:14:7e:74:23:f7:8f:df. Are you sure you want to continue connecting (yes/no)? ".
By the way, we are currently using Sun Identity Manager 7.0.
Thanks in advance for your assistance.
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE ResourceAction PUBLIC 'waveset.dtd' 'waveset.dtd'>
<ResourceAction name='ResAction:myProj:Resource-After-Create'>
<ResTypeAction restype='Shell Script' timeout='20000'>
<act>
#!/bin/csh
echo "Account ID" >> /myProjFolder/.$WSUSER_accountId.txt
echo $WSUSER_accountId >> /myProjFolder/.$WSUSER_accountId.txt
ssh -l someuser localhost /myProjFolder/exe/someExecutable $WSUSER_accountId &
exit 0
</act>
</ResTypeAction>
<MemberObjectGroups>
<ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
</MemberObjectGroups>
</ResourceAction>
<?xml version='1.0' encoding='UTF-8'?>
<!DOCTYPE ResourceAction PUBLIC 'waveset.dtd' 'waveset.dtd'>
<ResourceAction name='ResAction:myProj:Resource-After-Delete'>
<ResTypeAction restype='Shell Script' timeout='20000'>
<act>
#!/bin/csh
echo "Account ID" >> /myProjFolder/.$WSUSER_accountId.txt
echo $WSUSER_accountId >> /myProjFolder/.$WSUSER_accountId.txt
ssh -l someuser localhost /myProjFolder/exe/someExecutable $WSUSER_accountId &
exit 0
</act>
</ResTypeAction>
<MemberObjectGroups>
<ObjectRef type='ObjectGroup' id='#ID#Top' name='Top'/>
</MemberObjectGroups>
</ResourceAction>

You've probably already fixed it...
Just log on in the console yourself, instead of IdM. After answering yes, key fingerprint will be added to the ~/.ssh/known_hosts, and IdM will be happy.
Milan

Check_ntlm_password: Authentication for user ['name'] - ['name'] FAILED with error NT_STATUS_LOGON_FAILURE

Hi,
We are running a Mountain Lion Server with Open Directory / LDAPv3, as far as I can tell. My responsibility is to get my CentOS 6.3 box running Samba v. 3.5.10-125.el6 to authenticate users against the ML / OD box. I can ssh to the CentOS box OK and I can get Guest access to the Samba share to go OK too. Also, the OD passwords on the LDAP server are set to 'Open Directory' so I guess that means that they are encrypted and the Samba server is set to send encrypted passwords. But when a user tries to properly authenticate using either say via a Mac client Finder [Command-K], or smbclient, the Samba server will generate this message:
check_ntlm_password: Authentication for user ['name'] -> ['name'] FAILED with error NT_STATUS_LOGON_FAILURE
(I am blanking out the user name on purpose).
Of course there is more to the story, but those are the basics.
Here are the relevant parts of my smb.conf. FWIW, the CentOS / Samba box is called Jupiter.
Thank you,
NickZ
[smb.conf]
[global]
          display charset = UTF-8
          realm = SATURN.MCLEAN.HARVARD.EDU
          netbios aliases = ANL
          server string = Welcome To The Jupiter Samba Server Version 3.5.10-125.el6
          interfaces = lo, em1
          security = SERVER
          update encrypted = Yes
          password server = saturn.mclean.harvard.edu
          smb passwd file = /var/lib/samba/private/secrets.tdb
          passdb backend = ldapsam:ldap://saturn.mclean.harvard.edu
          passwd program = /usr/bin/passwd %u
          unix password sync = Yes
          lanman auth = Yes
          client NTLMv2 auth = Yes
          client use spnego principal = Yes
          kerberos method = system keytab
          log level = 2
          syslog = 3
          log file = /var/log/samba/log.%m
          max log size = 50
          name resolve order = host lmhosts wins bcast
          server signing = auto
          preferred master = Auto
          ldap admin dn = uid=DirAdmin,cn=users,dc=saturn,dc=mclean,dc=harvard,dc=edu
          ldap group suffix = cn=groups
          ldap passwd sync = yes
          ldap suffix = dc=saturn,dc=mclean,dc=harvard,dc=edu
          ldap ssl = no
          ldap user suffix = cn=users
          usershare allow guests = Yes
          idmap backend = ldap:ldap://saturn.mclean.harvard.edu
          idmap uid = 10000-20000
          idmap gid = 30000-40000
          cups options = raw
[homes]
          comment = Home Directories
          read only = No
[printers]
          comment = All Printers
          path = /var/spool/samba
          printable = Yes
          browseable = No
[anl]
          comment = Main ANL Share
          path = /anl
          read only = No
          guest ok = Yes
          hide dot files = No

Turns out a printer driver installed on an XP (even W2K(?)) was (apparently?) flooding the OS X SMB server to the point of collapse. Uninstalling the "HP Tools" part of the driver cleared it up. The printer is an HP LJ1300. I had downloaded the full driver from HP.com. I don't know if any/all these conditions need to be matched, but: the printer was on the network using an HP print server JetDirect EX Plus, and the computer(s) in question were connecting directly to it (not via a print server). It's been too long ago, but there were always several errors in the System Log (Win XP Event Viewer) that correlated with the errors on the OS X server.
Proud to say that since that day (10+ months ago) I've not seen it happen again. whew.

Getting error "The request failed with HTTP status 401: Unauthorized " for _vti_bin/Authentication.asmx

Hi All,
My Web application is FBA application and I am using the lists.asmx services in my custom webpart. To run this lists.asmx service in FBA enabled site we need to use Authentication.asmx service..
I referred this link:
http://social.msdn.microsoft.com/Forums/en-US/sharepointdevelopment/thread/21867e28-75d5-42c8-850b-bfb5c5894eed .
I wrote a code as mentioned in this article but now I am getting error "The request failed with HTTP status 401: Unauthorized " for Authentication.asmx service itself. Can somebody help me why it is not working even everything looks
correct?
Thank you.
Regards,
Rahul Shinde.

Hi Rahul,
Give permissions to the user on the web application.
Central Admin -->Application Management --> Application Security -->Policy for web application --> Select the
web application --> Add User
For more information, refer to
http://microsoftdev.blogspot.com/2009/10/sharepoint-web-services-access-give.html
http://www.codeproject.com/Articles/24244/Access-a-Forms-Based-SharePoint-Site-s-Web-Service
Best Regards.
Kelly Chen
TechNet Community Support

Basic Authentication:The request failed with HTTP status 401: Unauthorized.

Are there any problems with Basic Authentication? I have a test BPC 5.1 SP3 single server installation. When I set the IIS Virtual Directory to use Basic Authentication instead of Integrated Security, I get a 401 Unauthorized. It works fine when I use Integrated Security.
Thanks,
Stephen
Server Error in '/OSoft' Application.
The request failed with HTTP status 401: Unauthorized.
System.Net.WebException: The request failed with HTTP status 401: Unauthorized.
[WebException: The request failed with HTTP status 401: Unauthorized.]
   OSoft.Consumers.ZFP.WebBase.Utility.GetLastUserApp(CPMUser& mUser, String strAppServerURL, String strSecurity, String strContext, Boolean bServerPathReset) +1498
   OSoft.Consumers.ZFP.WebBase.PageBase.Page_Init(Object sender, EventArgs e) +216
   System.EventHandler.Invoke(Object sender, EventArgs e) +0
   System.Web.UI.Control.OnInit(EventArgs e) +67
   System.Web.UI.Control.InitRecursive(Control namingContainer) +241
   System.Web.UI.Page.ProcessRequestMain() +197

This issue is not really related to SP3 upgrade it is more a problem of windows. Tos solve this issue please read the follow article from Microsoft and do the steps requested to solve this issue.
http://support.microsoft.com/kb/926642/
After rebooting your server your access issue using Basic authentication should be solved.
This problem happen usually into multiserver environment.
So I would like to know if you are using domain users with local users in the same time on that computer.
Because even that can be a problem.
Regards
Sorin Radulescu

Image Upload fails with Error 407: Proxy Authentication Required

Hello,
I am trying to upload Custom Template Image, however it fails with error :(407) Proxy Authentication Required message. i would have to admit that i am trying this behind a Proxy Firewall. So i do really need to know how to make this work and
what is that i need to request from the Proxy team to make this working.
Thanks
TSANA

Hello TP,
Your Suggestion really helped and the upload is working. However because of the bandwidth being low, its showing 2 days. Is there any other approach to get around with this? I have also observed that, if we leave the upload over night , then it will
show that the Image upload failed with exception. I have managed to rerun the script(same script) in same window, and luckily it continues from where it had failed. This is somehow not a good thing that Microsoft did not provide an option of using Azure VM
as a template.
Thanks
Sundesh

DDNS Authentication Fails with E2000

Just purchased an E2000 (Firmware version 1.0.03) to use with DDNS. Much to my surprise there seems to be a problem with saving the password at the confiuration screen.
Settings;
- Service Type = DynDNS.org
- Username = <my user name.
- Password = <my password>
- Hostname = <my host name>
- System = Dynamic
With the above settings entered and the Update button pressed favourable results are obtained; the router reports that DynDNS.org updates okay. However once the "Save Settings" button is pressed an update fails with the error "Authorization failur bad ID or password"
Is anyone else experiencing this issue? Is the password field limited to certian characters?

same thing happens for me with my E2000 running 1.0.03. if i enter my username and password for dyndns into the web interface and click Update, i get the "DDNS is updated successfully" message. but then i'll immediately press Update again and i'll get "Authorization fails (username or passwords)".
changing my password on dyndns and then updating my router configs didn't do the trick (which isn't much of a surprise).

Willy Bytecode adapter installation failing with umask077

Hello,
We are performing managed system configuration for portal and in step 7 (byte code installation) is failing with error umask077
Error: Umask check was not sucessful STDOUT:077 STDERR:77
i checked the note 1163751 , changed the umask of managed system osuser(<sid>adm) and diagnostic user(daaadm) to 027 and changed the permission of files like instance directory to chmod g+rX . But still we are getting the same problem
Please advise us to proceed further.
/Veeramalla

problem with sapstartsrv service , stopsap is not having any impact on sapstartsrv service which is blocking the umask changes .
After stopping the system kill sapstartsrv manully and restart the system then umask changes will be reflected.
//Venkat

Connect failed with DBLI_RC_LOAD_LIB_FAILED error

Hi,
I am trying to install an application server in a windows /sql environment.
The CI ,database and the new application server are all on different hosts.
The application server gets installed but doe snot start up.
We get the following error "2EETW169 no connect possible: "connect failed with DBLI_RC_LOAD_LIB_FAILED"
in r3trans log.
Please guide.
Regards,
Rajiv

it is a windows/sql machine
Here is the r3trans-d log
This is r3trans version 6.14 (release 700 - 05.03.09 - 08:28:00).
unicode enabled version
2EETW169 no connect possible: "connect failed with DBLI_RC_LOAD_LIB_FAILED."
r3trans finished (0012).
dev_w0 log
trc file: "dev_w0", trc level: 1, release: "700"
ACTIVE TRACE LEVEL           1
ACTIVE TRACE COMPONENTS      all, MJ
B
B Thu Feb 18 05:02:41 2010
B create_con (con_name=R/3)
B Loading DB library 'F:\usr\sap\HP1\D01\exe\dbmssslib.dll' ...
B Library 'F:\usr\sap\HP1\D01\exe\dbmssslib.dll' loaded
B Version of 'F:\usr\sap\HP1\D01\exe\dbmssslib.dll' is "700.08", patchlevel (0.182)
B New connection 0 created
M sysno      01
M sid        HP1
M systemid   562 (PC with Windows NT)
M relno      7000
M patchlevel 0
M patchno    185
M intno      20050900
M make:      multithreaded, Unicode, 64 bit, optimized
M pid        4544
M
M kernel runs with dp version 241000(ext=110000) (@(#) DPLIB-INT-VERSION-241000-UC)
M length of sys_adm_ext is 576 bytes
M ***LOG Q0Q=> tskh_init, WPStart (Workproc 0 4544) [dpxxdisp.c   1347]
I MtxInit: 30000 0 0
M DpSysAdmExtCreate: ABAP is active
M DpSysAdmExtCreate: VMC (JAVA VM in WP) is not active
M
M Thu Feb 18 05:02:42 2010
M DpShMCreate: sizeof(wp_adm)          22784     (1752)
M DpShMCreate: sizeof(tm_adm)          5912704     (29416)
M DpShMCreate: sizeof(wp_ca_adm)          24064     (80)
M DpShMCreate: sizeof(appc_ca_adm)     8000     (80)
M DpCommTableSize: max/headSize/ftSize/tableSize=500/16/552064/552080
M DpShMCreate: sizeof(comm_adm)          552080     (1088)
M DpSlockTableSize: max/headSize/ftSize/fiSize/tableSize=0/0/0/0/0
M DpShMCreate: sizeof(slock_adm)          0     (104)
M DpFileTableSize: max/headSize/ftSize/tableSize=0/0/0/0
M DpShMCreate: sizeof(file_adm)          0     (72)
M DpShMCreate: sizeof(vmc_adm)          0     (1864)
M DpShMCreate: sizeof(wall_adm)          (41664/36752/64/192)
M DpShMCreate: sizeof(gw_adm)     48
M DpShMCreate: SHM_DP_ADM_KEY          (addr: 00000000116B0050, size: 6607008)
M DpShMCreate: allocated sys_adm at 00000000116B0050
M DpShMCreate: allocated wp_adm at 00000000116B21F0
M DpShMCreate: allocated tm_adm_list at 00000000116B7AF0
M DpShMCreate: allocated tm_adm at 00000000116B7B50
M DpShMCreate: allocated wp_ca_adm at 0000000011C5B3D0
M DpShMCreate: allocated appc_ca_adm at 0000000011C611D0
M DpShMCreate: allocated comm_adm at 0000000011C63110
M DpShMCreate: system runs without slock table
M DpShMCreate: system runs without file table
M DpShMCreate: allocated vmc_adm_list at 0000000011CE9DA0
M DpShMCreate: allocated gw_adm at 0000000011CE9E20
M DpShMCreate: system runs without vmc_adm
M DpShMCreate: allocated ca_info at 0000000011CE9E50
M DpShMCreate: allocated wall_adm at 0000000011CE9E60
M rdisp/queue_size_check_value : -> off
M ThTaskStatus: rdisp/reset_online_during_debug 0
X EmInit: MmSetImplementation( 2 ).
X MM global diagnostic options set: 0
X <ES> client 0 initializing ....
X Using implementation view
X <EsNT> Using memory model view.
M <EsNT> Memory Reset disabled as NT default
X ES initialized.
X mm.dump: set maximum dump mem to 96 MB
M ThInit: running on host sap1a38
M
M Thu Feb 18 05:02:43 2010
M calling db_connect ...
C Thread ID:4572
C Thank You for using the SLOLEDB-interface
C Using dynamic link library 'F:\usr\sap\HP1\D01\exe\dbmssslib.dll'
C dbmssslib.dll patch info
C    patchlevel   0
C    patchno      182
C    patchcomment MSSQL: COPYTOSHADOW, R3trans loses reports (1260968)
C Network connection used from SAP1A38 to SAP1A12\D1 using tcp:SAP1A12\D1
C CopyLocalParameters: dbuser is 'hp1'
C Using Provider SQLNCLI
C OpenOledbConnection: MARS property was set successfully.
C Provider Release:9.00.2047.00
C Using Provider SQLNCLI
C OpenOledbConnection: MARS property was set successfully.
C Cache sizes: header 104 bytes, 20000 names (32960000 bytes), 500 dynamic statements (2876000 bytes), total 35836104 bytes
C Using shared procedure name cache SAP1A12_D1_HP1HP1_HP1_MEM initialized by another process.
C Connected to db server : [SAP1A12\D1] server_used : [tcp:SAP1A12\D1], dbname: HP1, dbuser: hp1
C pn_id:SAP1A12_D1_HP1HP1_HP1
C Using MARS (on sql 9.0)
B Connection 0 opened (DBSL handle 0)
B Wp Hdl ConName          ConId     ConState     TX PRM RCT TIM MAX OPT Date     Time   DBHost
B 000 000 R/3              000000000 ACTIVE       NO YES NO 000 255 255 20100218 050243 SAP1A12\D1
C The IRow interface is supported by this OLEDB provider
M db_connect o.k.
M ICT: exclude compression: .zip,.cs,.rar,.arj,.z,.gz,.tar,.lzh,.cab,.hqx,.ace,.jar,.ear,.war,.css,.pdf,.js,.gzip,.uue,.bz2,.iso,.sda,.sar,.gif
I
I Thu Feb 18 05:02:46 2010
I MtxInit: 0 0 0
M SHM_PRES_BUF               (addr: 000000001A0D0050, size: 4400000)
M SHM_ROLL_AREA          (addr: 000007FFDDA80050, size: 268435456)
M SHM_PAGING_AREA          (addr: 000000001A510050, size: 134217728)
M SHM_ROLL_ADM               (addr: 0000000022520050, size: 2678942)
M SHM_PAGING_ADM          (addr: 00000000227B0050, size: 525344)
M ThCreateNoBuffer          allocated 544152 bytes for 1000 entries at 0000000022840050
M ThCreateNoBuffer          index size: 3000 elems
M ThCreateVBAdm          allocated 12176 bytes (50 server) at 00000000228D0050
X EmInit: MmSetImplementation( 2 ).
X MM global diagnostic options set: 0
X <ES> client 0 initializing ....
X Using implementation view
X ES initialized.
X mm.dump: set maximum dump mem to 96 MB
B dbntab: NTAB buffers attached
B dbntab: Buffer FTAB(hash header) (addr: 00000000229700E0, size: 584)
B dbntab: Buffer FTAB(anchor array) (addr: 0000000022970330, size: 320072)
B dbntab: Buffer FTAB(item array)   (addr: 00000000229BE580, size: 1280000)
B dbntab: Buffer FTAB(data area)    (addr: 0000000022AF6D80, size: 30720000)
B dbntab: Buffer IREC(hash header) (addr: 00000000248500E0, size: 584)
B dbntab: Buffer IREC(anchor array) (addr: 0000000024850330, size: 320072)
B dbntab: Buffer IREC(item array)   (addr: 000000002489E580, size: 320000)
B dbntab: Buffer IREC(data area)    (addr: 00000000248EC780, size: 6144000)
B dbntab: Buffer STAB(hash header) (addr: 0000000024ED00E0, size: 584)
B dbntab: Buffer STAB(anchor array) (addr: 0000000024ED0330, size: 320072)
B dbntab: Buffer STAB(item array)   (addr: 0000000024F1E580, size: 320000)
B dbntab: Buffer STAB(data area)    (addr: 0000000024F6C780, size: 3072000)
B dbntab: Buffer TTAB(hash header) (addr: 00000000252600E0, size: 1944)
B dbntab: Buffer TTAB(anchor array) (addr: 0000000025260880, size: 320072)
B dbntab: Buffer TTAB(item array)   (addr: 00000000252AEAD0, size: 800000)
B dbntab: Buffer TTAB(data area)    (addr: 0000000025371FD0, size: 5840000)
B db_con_shm_ini: WP_ID = 0, WP_CNT = 13, CON_ID = -1
B dbstat: TABSTAT buffer attached (addr: 0000000025919C70)
B dbtbxbuf: Buffer TABL (addr: 0000000027F50160, size: 30000000, end: 0000000029BEC4E0)
B dbtbxbuf: Buffer TABLP (addr: 0000000029BF0160, size: 10240000, end: 000000002A5B4160)
B dbexpbuf: Buffer EIBUF (addr: 000000002A5D0170, size: 4194304, end: 000000002A9D0170)
B dbexpbuf: Buffer ESM   (addr: 000000002A9E0170, size: 4194304, end: 000000002ADE0170)
B dbexpbuf: Buffer CUA   (addr: 000000002ADF0170, size: 3072000, end: 000000002B0DE170)
B dbexpbuf: Buffer OTR   (addr: 000000002B0E0170, size: 4194304, end: 000000002B4E0170)
B dbcalbuf: Buffer CALE (addr: 000000002B4F0050, size: 500000, end: 000000002B56A170)
B dbtran INFO (init_connection '<DEFAULT>' [MSSQL:700.08]):
B   max_blocking_factor = 50, max_in_blocking_factor      = 255,
B   min_blocking_factor =   5, min_in_blocking_factor      = 10,
B   prefer_union_all    =   1, prefer_join                 =   1,
B   prefer_fix_blocking =   0, prefer_in_itab_opt          =   0,
B   convert AVG         =   1, alias table FUPD            =   0,
B   escape_as_literal   =   0, opt GE LE to BETWEEN        =   0,
B   select *            =0x00, character encoding          = STD / []:X,
B   use_hints           = abap->1, dbif->0x1, upto->0, rule_in->0,
B                         rule_fae->0, concat_fae->0, concat_fae_or->0
N
N Thu Feb 18 05:02:47 2010
N SncInit(): Initializing Secure Network Communication (SNC)
N        PC with Windows NT (mt,ascii,SAP_UC/size_t/void* = 16/64/64)
N SncInit():   found snc/data_protection/max=3, using 3 (Privacy Level)
N SncInit():   found snc/data_protection/min=1, using 1 (Authentication Level)
N SncInit():   found snc/data_protection/use=9, using 3 (Privacy Level)
N SncInit(): found snc/gssapi_lib=F:\usr\sap\HP1\DVEBMGS01\exe\gX64ntlm.dll
M *** ERROR => DlLoadLib: LoadLibrary(F:\usr\sap\HP1\DVEBMGS01\exe\gX64ntlm.dll) Error 126 [dlnt.c       237]
M          Error 126 = "The specified module could not be found."
N *** ERROR => SncPDLInit(): DlLoadLib("F:\usr\sap\HP1\DVEBMGS01\exe\gX64ntlm.dll")=DLENOACCESS
N   [sncxxdl.0340]*** ERROR => SncPDLInit()==SNCERR_INIT, Adapter (#0) F:\usr\sap\HP1\DVEBMGS01\exe\gX64ntlm.dll not loaded
N   [sncxxdl.0604]<<- SncInit()==SNCERR_INIT
N           sec_avail = "false"
M ***LOG R19=> ThSncInit, SncInitU ( SNC-000001) [thxxsnc.c    230]
M *** ERROR => ThSncInit: SncInitU (SNCERR_INIT) [thxxsnc.c    232]
M in_ThErrHandle: 1
M *** ERROR => SncInitU (step 1, th_errno 44, action 3, level 1) [thxxhead.c   10524]
M
M Info for wp 0
M
M    pid = 4544
M    severity = 0
M    status = 0
M    stat = WP_RUN
M    waiting_for = NO_WAITING
M    reqtype = DP_RQ_DIAWP
M    act_reqtype = NO_REQTYPE
M    rq_info = 0
M    tid = -1
M    mode = 255
M    len = -1
M    rq_id = 65535
M    rq_source =
M    last_tid = 0
M    last_mode = 0
M    semaphore = 0
M    act_cs_count = 0
M    csTrack = 0
M    csTrackRwExcl = 0
M    csTrackRwShrd = 0
M    mode_cleaned_counter = 0
M    control_flag = 0
M    int_checked_resource(RFC) = 0
M    ext_checked_resource(RFC) = 0
M    int_checked_resource(HTTP) = 0
M    ext_checked_resource(HTTP) = 0
M    report = >                                        <
M    action = 0
M    tab_name = >                              <
M    attachedVm = no VM
M PfStatDisconnect: disconnect statistics
M Entering TH_CALLHOOKS
M ThCallHooks: call hook >SAP-Trace buffer write< for event BEFORE_DUMP
M TrThHookFunc: called for WP dump
M ThCallHooks: call hook >ThrSaveSPAFields< for event BEFORE_DUMP
M *** ERROR => ThrSaveSPAFields: no valid thr_wpadm [thxxrun1.c   723]
M *** ERROR => ThCallHooks: event handler ThrSaveSPAFields for event BEFORE_DUMP failed [thxxtool3.c 261]
M ThCallHooks: call hook >BtcCallLgCl< for event BEFORE_DUMP
M Entering ThSetStatError
M ThIErrHandle: do not call ThrCoreInfo (no_core_info=0, in_dynp_env=0)
M Entering ThReadDetachMode
M call ThrShutDown (1)...
M ***LOG Q02=> wp_halt, WPStop (Workproc 0 4544) [dpnttool.c   333]

An issue with authentication and authorization on ISE 1.2

Hi, I'm new to ISE.
I have an issue with authentication and authorization.
I have ISE 1.2 plus patch 6 installed on VMware.
I have built-in Windows XP supplicant and 2960 cisco switch with IOS c2960-lanbasek9-mz.150-2.SE5.bin
On supplicant I use EAP(PEAP) with EAP-MSCHAP v2.
I created authentication and authorization rules with Active Directory as External Identity Source. Also I applied authorization profile with DACL.I login on Windows XP machine under different Active Directory accounts. Everything works fine (authentication, authorization ), but only for several hours. After several hours passed , authentication and authorization stop working . I can see that ISE trying authenticate and authorize users, but ISE always use only one account for authentication and authorization . Even if I login under different accounts ISE continue to use only one last account.
I traied to reboot switch and PC,but it didn’t help. Only rebooting of ISE helps. After ISE rebooting, authentication and authorization start to work properly for several hours.
I don’t understand is it a glitch or I misconfigured ISE or switch, supplicant?
What should I do to resolve this issue?
Switch configuration:
testISE#sh runn
Building configuration...
Current configuration : 7103 bytes
! Last configuration change at 12:20:15Tue Apr 15 2014
! NVRAM config last updated at 10:35:02 Tue Apr 15 2014
version 15.0
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname testISE
boot-start-marker
boot-end-marker
no logging console
logging monitor informational
enable secret 5 ************
enable password ********
username radius-test password 0 ********
username admin privilege 15 secret 5 ******************
aaa new-model
aaa authentication dot1x default group radius
aaa authorization network default group radius
aaa authorization auth-proxy default group radius
aaa accounting update periodic 5
aaa accounting dot1x default start-stop group radius
aaa server radius dynamic-author
client 172.16.0.90 server-key ********
aaa session-id common
clock timezone 4 0
system mtu routing 1500
authentication mac-move permit
ip dhcp snooping vlan 1,22
ip dhcp snooping
ip domain-name elauloks
ip device tracking probe use-svi
ip device tracking
epm logging
crypto pki trustpoint TP-self-signed-1888913408
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1888913408
revocation-check none
rsakeypair TP-self-signed-1888913408
crypto pki certificate chain TP-self-signed-1888913408
dot1x system-auth-control
spanning-tree mode pvst
spanning-tree extend system-id
vlan internal allocation policy ascending
ip ssh version 2
interface FastEthernet0/5
switchport mode access
ip access-group ACL-ALLOW in
authentication event fail action next-method
authentication event server dead action reinitialize vlan 1
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication open
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
interface FastEthernet0/6
switchport mode access
ip access-group ACL-ALLOW in
authentication event fail action next-method
authentication event server dead action reinitialize vlan 1
authentication event server alive action reinitialize
authentication order dot1x mab
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
authentication violation restrict
mab
dot1x pae authenticator
dot1x timeout tx-period 10
spanning-tree portfast
interface FastEthernet0/7
interface Vlan1
ip address 172.16.0.204 255.255.240.0
no ip route-cache
ip default-gateway 172.16.0.1
ip http server
ip http secure-server
ip access-list extended ACL-ALLOW
deny icmp any host 172.16.0.1
permit ip any any
ip radius source-interface Vlan1
logging origin-id ip
logging source-interface Vlan1
logging host 172.16.0.90 transport udp port 20514
snmp-server community public RO
snmp-server community ciscoro RO
snmp-server trap-source Vlan1
snmp-server source-interface informs Vlan1
snmp-server enable traps snmp linkdown linkup
snmp-server enable traps mac-notification change move
snmp-server host 172.16.0.90 ciscoro
radius-server attribute 6 on-for-login-auth
radius-server attribute 6 support-multiple
radius-server attribute 8 include-in-access-req
radius-server attribute 25 access-request include
radius-server dead-criteria time 5 tries 3
radius-server vsa send accounting
radius-server vsa send authentication
radius server ISE-Alex
address ipv4 172.16.0.90 auth-port 1812 acct-port 1813
automate-tester username radius-test idle-time 15
key ******
ntp server 172.16.0.1
ntp server 172.16.0.5
end

Yes. Tried that (several times) didn't work. 5 people in my office, all with vers. 6.0.1 couldn't access their gmail accounts. Kept getting error message that username and password invalid. Finally solved the issue by using Microsoft Exchange and "m.google.com" as server and domain and that the trick. Think there is an issue with imap.gmail.com and IOS 6.0.1. I'm sure the 5 of us suddently experiencing this issue aren't the only ones. Apple will figure it out. Thanks.

SSTP VPN fails with Error 0x80092013 when certificate is issued by an Enterprise CA

I have spent several days trying to configure an SSTP VPN in an environment with a 2008R2 Enterprise CA server without much luck. I have been using the example found at http://technet.microsoft.com/en-us/library/cc731352(v=ws.10).aspx which
works very well as long as you configure the CA Extensions tab with an http CRL Distribution point that is included in the CRLs and CDP extension of issued certificates and is available to the client prior to VPN connection.
Basically my lab environment is as follows:
Separate 2008R2 domain controller, Single 2008R2 Enterprise CA / RRAS server with one nic. I know the instructions that I mentioned above use an RRAS server with 2 nics but I don't want my RRAS server serving as a router. I have an external hardware firewall
that port forwards port 443 to my single nic in my RRAS server and this entire configuration works fine as long as I am using a standard CA configuration. The RRAS was configured using the custom option and only VPN was chosen. Since my RRAS server is behind
a NAT router, the dns name my external client uses to connect is different than the internal name of my RRAS server.
In the example above, a Windows 2008R2 CA server is configured as a standalone non-enterprise root CA. As long as I stick with a standard CA, I have no problem and everything works.
My problem is that if I configure my Windows Server 2008R2 Enterprise server as an Enterprise Root CA, My Windows 7 client always gets an "Error 0x80092013 The revocation function was unable to check revocation because the revocation server was offline."
I'm not certain, but I think the problem is with the way that I request the certificate for my RRAS server. When I configure a standalone standard root CA and use the web enrollment page and use an Advanced Certificate Request, I get a page that I can use
to fill out the external dns name that I use to connect to SSTP, choose a Server Authentication Certificate, choose to mark keys as exportable and submit my request. Once I install this key in the Certificates (local computer) / Personal / Certificates
store, everything works and my client can connect as long as I have installed the root CA certificate on my client.
When I install my CA as an Enterprise Root CA server, everything changes. I no longer have the same options to install a custom certificate. Instead of getting the same page as I do with a standard CA, I get my choice of Certificate Templates. Prior to this,
I have duplicated the Computer template in the CA authority and configured the subject name to "supply in request" and configured my CA to issue it. I have tried issuing my RRAS SSTP certificate using the web enrollment and I have also tried using the certificates
plugins in mmc to request custom certificates and tried using an alternative subject name, filling out the DNS option with my external dns name.
When it is all said and done, I end up with an RRAS SSTP certificate that has CRL Distribution Points defined as URL=http://www.mywebsite/CertEnroll/myCA.crl and it is available to my client or anyone. I have compared the certificate issued by an Enterprise
CA vs the Standard CA and I find little difference in the two. I also know that I can reach this RRAS SSTP certificate from my client by going to https://myexternaladdress.mydomain.com/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/and
I can view the padlock in IE and view my internal RRAS certificate. The CRL Distribution point looks no different when I have a standard vs an Enterprise CA but my client always fails with the Error 0x80092013 when I have issued the RRAS SSTP certificate
with the Enterprise CA.
I have probably re-setup this lab about 20 times and am getting very familiar with getting it set up quickly and working with the standard CA but I want to use an Enterprise CA environment.
What am I missing? How can I make this work with an Enterprise CA? How can I troubleshoot this?
Thanks,
Rod
Rod Miller

Thanks for your reply. I did read the article and addressed that issue in the first part of my previous post. I don't think that the website where I am hosting my CRL has directory browsing permissions or that I have the ability to set them but the
point of my question was everything works using that same public website when I use a standard CA to create my certificate but does NOT work when I create the certificate using an Enterprise CA.
Rod
Rod Miller

BAM Adapter fails with Authentication

Similar Messages

Maybe you are looking for