Can't browse the Active Directory from ACS 5.1
Hi,
we just joined our ACS 5.1 to our Active Directory 2003, the system seems correctly joined on the ACS we have as connectivity status: joined and if we try it with the test button we get "connection succeded", on the AD tool we notice that an computer account for our ACS have been created.
We wanted to created the Directory Group but the browsing tool is empty and any query does not give any output.
The ACS is joined but we're not able to browse the Active Directory.
Any suggestions what could be the problem?
Thank you.
This is an on-going issue due to below mentioned defect.
CSCtf39158 -Can't retrieve AD groups in single forest with multiple trees scenarios
You need to apply Patch 3 to get this fixed
filename: 5-1-0-44-3
Download from: CCO / Support / Download Software http://www.cisco.com/public/sw-center/index.shtml
Select: Security / Identity Management / Cisco Secure Access Control System / Cisco Secure Access Control System 5.1 / 5.1.0.44
##Steps to create repository##
Go to the CLI mode of this ACS
Create a repository (it's basically defining FTP server)
AAA/admin(config)# repository FTP ---> (could be any name)
AAA/admin(config-Repository)# url ftp://
AAA/admin(config-Repository)# user password plain
===============================
Steps to Install the ACS 5.1 patch:
===============================
Issue the following acs patch command in the EXEC mode to install the ACS patch:
acs patch install patch-name.tar.gpg repository repository-name
Rgds.
JK
Do rate helpful posts-
Similar Messages
-
How can I browse the Adobe Market from my browser in stead of the tiny app display functionality?
How can I browse the Adobe Market from my browser in stead of the tiny app display functionality?
Hi,
Can you please go through the following past forum posting: http://forums.adobe.com/message/4620312
Hope that the info helps.
With regards,
Prabhu -
How can I get the remote directory from an FTPActivationSpec header?
The header message generated for the oracle.tip.adapter.ftp.inbound.FTPActivationSpec contains the file name, FTP host and FTP port. Is there any way of getting the remote directory as well?
<schema attributeFormDefault="qualified" elementFormDefault="qualified"
targetNamespace="http://xmlns.oracle.com/pcbpel/adapter/ftp/"
xmlns="http://www.w3.org/2001/XMLSchema"
xmlns:FTPAPP="http://xmlns.oracle.com/pcbpel/adapter/ftp/">
<element name="InboundFTPHeaderType">
<complexType>
<sequence>
<element name="fileName" type="string"/>
<element name="ftpHost" type="string"/>
<element name="ftpPort" type="string"/>
</sequence>
</complexType>
</element>
</schema>
This is already specified in the activation spec parameters:
<activationAgents>
<activationAgent className="oracle.tip.adapter.fw.agent.jca.JCAActivationAgent" partnerLink="ReadFileService">
<property name="ftpRemoteDir" type="LogicalDirectory">out</property>
<property name="portType">Read_ptt</property>
</activationAgent>
</activationAgents>
But I don't want to have to add a separate preference parameter to hold the same thing if I don't have to. Alternatively, is there any way of querying the activation agent parameters from within an xpath expression, similar to "ora:getPreference()"?
Cheers,add:
<element name="directory" type="string"/>
to the FTP adapter header WSDL -
How can I find the Scripts directory from a script?
Hello all! After playing with Photoshop scripting, I'm now playing with AE too, and in my first try I've stuck in finding the scripts path from the script itself.
In Photoshop, there was this piece of code that somebody in the Photoshop Scripting forum kindly shared:
var scriptsPath = new Folder (app.path + "/" + localize ("$$$/ScriptingSupport/InstalledScripts=Presets/Scripts"));
But this line doesn't work in After Effects because app.path variable doesn't exist (very funny, I thought Photoshop and After Effects shared the same basic app variables) and the path given to the "localize" function is wrong in AE (I think "$$$" means nothing to it).
Can somebody give me a clue about how to solve this? Thanks a lot in advance :-)This script shows a couple of examples you can try. The first part shows a way to get the folder the running script is in. The second gets the main AE app folder although I don't know if appFolder works on Windows (you'd still need to add /Scripts on Mac or /SupportFiles/Scripts on Win).
var thisScript = new File($.fileName);
var containingFolder = new Folder(thisScript.parent.absoluteURI);
alert("This script is in " + containingFolder.absoluteURI);
var appFolder = new Folder(Folder.appPackage.parent.absoluteURI);
alert("The app folder is at " + Folder.decode(appFolder.absoluteURI)); -
Hi all,
In advance i`m thankful for your help,
I come across a problem while migrating the Active Directory from Windows Server 2003 to Windows Server 2008 R2,
SharePoint 2010 is getting this error Cannot connect to the configuration database. The same goes for the Administrative page,
Nothing is change in the MySql database, same log in, same server name, i guess it have something to do with the SharePoint Farm,
My question is will reinstalling the SharePoint do the job? Or is there an easy way to get back on my old track?
I`ve try to sync users... no good
PS C:\Users\administrator.SERVERM> if($configManager.IsSynchronizationRunning()
-eq $false)
>> {
>> $configManager.StartSynchronization($true)
>> Write-Host "Started Synchronizing"
>> }
>> else
>> {
>> Write-Host "Already Synchronizing"
>> }
>>
Can someone explain a little bit more about this:
6.
Can they talk to each other?
Verify that SharePoint is using the correct IP address for the SQL server. To do this, run the ping command on the Windows SharePoint Services server.
Verify that the SharePoint server is obtaining the correct IP address for the SQL server from DNS. To do this, run the
nslookup command from the SharePoint Server.
Make sure that there are no incorrect entries for the SQL server. To do this, examine the Hosts file on the SharePoint server. This file is in the following location:
%systemroot%\system32\drivers\etc\Hosts
On the SharePoint server, look for SQL client aliases. To do this, follow these steps: Click
Start, click Run, and then type cliconfg in the
open box.
Click the Alias tab. By default, there are no SQL client aliases. If you have any aliases for the SQL server, verify that they are correct, or remove them.
Open the SQL Server Configuration Manager (Start SQL Server 2008 Configuration Tools SQL Server Configuration Manager
Navigate to the SQL Server Network Configuration Protocols for MSSQLSERVER node in the tree view
Enable TCP/IP and Named Pipes (you’ll be warned that these changes will not apply until the service is shut down)
Aleksandar Delcevski, Web-administrator School of Journalism and Public Relations Jurij Gagarin 17-1/1, 1000 Skopje, R. Macedonia t: + 389 2 3090 004 mob: +38972 257 565 [email protected]; www.vs.edu.mk; www.medium.edu.mk; www.unescochair-vs.edu.mkHiya,
I don't think it is necessary to reinstall.
You should just confirm that your basic infrastructure is working.
1: On the SharePoint server, open cmd and write ping <SQL server name>
2: On the SharePoint server, open cmd and write nslookup <SQL server name>
Basically the steps outlined here, is the best way to start:
6.
Can they talk to each other?
Verify that SharePoint is using the correct IP address for the SQL server. To do this, run the ping command on the Windows SharePoint Services server.
Verify that the SharePoint server is obtaining the correct IP address for the SQL server from DNS. To do this, run the
nslookup command from the SharePoint Server.
Make sure that there are no incorrect entries for the SQL server. To do this, examine the Hosts file on the SharePoint server. This file is in the following location:
%systemroot%\system32\drivers\etc\Hosts
On the SharePoint server, look for SQL client aliases. To do this, follow these steps: Click
Start, click Run, and then type cliconfg in the
open box.
Click the Alias tab. By default, there are no SQL client aliases. If you have any aliases for the SQL server, verify that they are correct, or remove them.
Open the SQL Server Configuration Manager (Start SQL Server 2008 Configuration Tools SQL Server Configuration Manager
Navigate to the SQL Server Network Configuration Protocols for MSSQLSERVER node in the tree view
Enable TCP/IP and Named Pipes (you’ll be warned that these changes will not apply until the service is shut down) -
got event ID 4015 and source DNS-Server-Service. please suggest how to fix this issue
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
RajHi
first run "ipconfig /flushdns" and then "ipconfig /registerdns" finally restart dns service and check the situation,also you can check dns logs computer management ->Event viewer->Custom Views->Server roles->DNS. -
How to populate a sharepoint 2010 from the active directory.
I want a list of all the computers in the active directory,
another one with all users.
I want also to populate a sharepoint 2010 list from the sharepoint user profiles.
Thanks
szWhile
the contacts list is usually filled out for contacts that are outside the company, there are times when you would use a contacts list to store internal and external resources. Wouldn’t it be nice if you didn’t have to re-type your internal contacts’
information that are already in the system? Now you can with a little InfoPath customization on the contacts list.
Here’s our plan:
Create the contacts list, and open in InfoPath
Create a data connection to the User Profile web service
Customize the form adding some text, a people picker and a button
Create InfoPath rules that will populate the contact fields from the user fields in the User Profile store
Let’s get going! Before we begin, make sure you have InfoPath 2010 installed locally on your computer. I also want to give credit Laura
Rogers and Darvish Shadravan’s book Using
Microsoft InfoPath 2010 with Microsoft SharePoint 2010 Step by Step. I know it looks like a lot of steps, but it’s easy once you get the hang of it.
So obviously we need a contacts list. If you don’t already have one, go to the SharePoint site where it will live, and create a contacts list.
From the list, click the List tab on the ribbon, then click Customize form:
So now we have our form open in InfoPath 2010. Let’s add our elements to the form.
Above all the fields, let’s add some text instructing users what to do with the the field we’re about to add (.e.g To enter an existing user’s information, choose the user below).
Insert a people picker control by clicking the Person/Group Picker control in the Controls section of the ribbon. This will add a column to the contacts list called group.
Below the people picker, insert a button control from the same section of the ribbon as above. With the button still highlighted, click the Control Tools|Properties tab on the ribbon.
Then in the Label box, change the text to something more appropriate to our task (e.g. Click here to load user data!).
You can drag the button control a little larger to account for the text.
We should end up with something like this:
Before we can populate the fields with user data, we need to create a connection to the User Profile Service.
Add a data connection to the User Profile Service
Click the Data tab on the ribbon, and click the option From Web Service, and From SOAP Web Service.
For the location, enter the URL of your SharePoint site in the following format – http://<site url>/_vti_bin/UserProfileService.asmx?WSDL. Click Next.
Note - for the URL, it can be any SharePoint site URL, not just to the site where your list is.
For the operation, choose GetUserProfileByName. Click Next.
Click Next on the next two screens.
On the final screen, uncheck the box for “Automatically retrieve data when form is opened”. This is because we are going to retrieve the data when the button is clicked, also for performance reasons.
Now we need to wire up the actions on our button to populate the fields with the information for the user in the people picker control.
Tell the form to read the user from the people picker control
Click the Home tab on the ribbon.
Click the button control we created, and under the Rules section of the ribbon, click Manage Rules. Notice the pane appear on the far right.
In the Rules pane, click New –> Action. Change the name to something like “Query and load user data”.
Leave the condition to default (none – rule runs when button is clicked).
Click the Add button next to “Run these actions:”, and choose “Set a field’s value”.
For Field, click the button on the right to load the select a field dialog. Click the Show advanced view on the bottom. At the top, click the drop down and choose the GetUserProfileByName
(Secondary) option. Expand myFields and queryFields to the last option and highlightAccountName. Click ok.
For Value, click the formula icon. On the formula screen, click the Insert Field or Group button. Again click the show advanced view link, but this time leave the data
connection as Main. Expand dataFields, then mySharePointListItem_RW. At the bottom you should see a folder called group (the people picker control we just added to the form). Expand this, then pc:Person,
and highlightAccountId. Click Ok twice to get back to the Rules pane.
If we didn’t do this and just queried the user profile service, it would load the data of the currently logged in user. So we need to tell the form what user to load the data for. We take the AccountID field from the people
picker control and inject into the AccountName query field of the User Profile Service data connection.
Load the user profile service information for the chosen user
Click the Add button next to “Run these actions:”, and choose Query for data.
In the popup, for Data connection, click the one we created earlier – GetUserProfileByName and clickOk.
We’re closing in on our goal. Let’s see our progress. We should see something like this:
Now that we have the user’s data read into the form, we can populate the fields in the contact form. The number of steps to complete will depend on how many fields you want to populate. We need to add an action step for
each field. I’ll show you one example and then you will just repeat the steps for the other fields. Let’s update the Job Title field.
Populate the contact form fields with existing user’s data
Click the Add button next to “Run these actions:”, and choose “Set a field’s value”.
For Field, click the button on the right to load the select a field dialog. Highlight the field Job Title.
For Value, click the formula icon. On the formula screen, click the Insert Field or Group button. Click the Show advanced view on the bottom. At the top, click the
drop down and choose theGetUserProfileByName (Secondary) option. Expand the fields all the way down until you see the Value field. Highlight it but don’t click ok, but click the Filter
Data button, then Add.
For the first dropdown that says Value, choose Select a field or group. The value field will be highlighted, but click the field Name field
under PropertyData. Click Ok.
In the blank field after “is equal to”, click in the box and choose Type text. Then type the text Title.
Click ok until you get back to the Manage Rules pane. The last previous screen will look like this.
We’re going to update common fields that are in the user’s profile, and likely from Active Directory. You can update fields like first and last name, company, mobile and work phone number, etc. For the other fields, the
steps are the same except the Field you choose to update from the form, and the very last step where you enter the text will change. Here’s what the rules look like when we’re done:
We’re all done, good work! You can preview the form and try it now. Click Ctrl+Shift+B to preview the form. Once you’re satisfied, you can publish the form back to the library. Click File –> Quick
Publish. Once it’s done, you will get confirmation:
Now open your form in SharePoint. From the contact list, click Add new item. Type in a name, and click the button and watch the magic happen! -
Is there any way to log in to active directory from a mac without joining the AD domain?
I am looking for a way to log in to active directory without having the Mac join the AD domain. Basically i have not been able to understand all the ramifications of joining the AD domain. From what I have read in various documentations on the apple site and some of the AD plug in sites, it seems that if the mac joins the domain, all kinds of group policies get 'transfered' to the mac experience. How exactly does that affect the privileges of the local mac user on their machine? do they need to change their mac password? what happens to their existing home directories? what happens when they have their laptops at home?
TIA
Costas ManousakisCostas Manousakis wrote:
The reason i am hesitant about binding the macs is that i'm not sure what are all the effects of that. will they have to change their mac passwords / usernames? more than likely the auto login will have to go. If there are multiple accounts on the mac (ex one admin account and other regular and admin accounts) how does binding affect them? how will it work when the mac is not in the office? if they have admin rights on the mac but not on the windows AD, how will that affect them? Do you know of a source i could go to to find answers for questions like these?
Unfortunately, the source for answers should be your IT department. I can tell you how my machine works. I have a personal machine with no restrictions and a work machine bound to an Active Directory domain. Even my work machine has few restrictions compared to normal. I have a privileged account I can use if necessary. Also, I'm pretty much a goody-two-shoes so I don't try to circumvent restrictions.
Basically, the Mac uses a system called Open Directory to manage user accounts. Every Mac comes with its own miniature Open Directory server. If you have a network with MacOS X Server, you can use the server's Open Directory. You can also use Microsoft's Active Directory to perform all the same tasks. The user's logins and passwords would be whatever is on Active Directory. They can change their password on the Mac and it will change the Active Directory password. Active Directory can enforce passwords expirations too.
I am not an Active Directory administrator, so I can't give you specifics. Pretty much everything you have mentioned can be controlled via Active Directory. That is what it is for. It does require active participation of your IT staff. If you don't have that, then I don't see it working out well. It sounds like a paradox. IT wants to control users, but doesn't want to deal with it. You can't have it both ways. Maybe let it be known among the Mac users that visiting those restricted sites could cause IT to get rid of Mac altogether. That does sound like a probable outcome. -
How can we delete the icloud accounts from main website.Iam trying to log in to my account and it says that MAXIMUM NUMBER OF FREE ACCOUNTS ARE ACTIVATED?What can i do guys plz tell me?
You can't delete an account, you can only stop using it. If you're getting that error message you won't be able to create a new account on your device. Your only options are to re-use one of the accounts previously created, or create a new account on a different iOS device or Mac (running OS X Lion or higher), if you have one.
-
How can I copy the whole directory of files from PC to iPad?
How can I copy the whole directory of files from PC to iPad ?
Get an app that reads PDF's, such as iBooks or GoodReader or Readdle Docs, then use the file transfer part of iTUnes to get those files to your iPad, through iTunes. ( I have no experience with goodreader, but with ReaddleDocs you can move the files, then create folders to put them in to keep them organized)
-
moving adobe 9 standard from 1 machine to another. How can I find the activation code on the old machine to activate on new machine?
You didn't really clarify much, just repeated the same question. First of all, Adobe is a company with many products.
Are you talking about Adobe Acrobat? If so you need to deactivate it on the old machine and then use enter the serial-number (as described) when installing it on the new machine. It will then activate itself automatically over the internet. Just keep in mind that Acrobat 9 is not compatible with Windows 8 and to make it compatible with Windows 7 you have to update it to at least version 9.2 after the installation. -
Where can I strip the domain suffix on ACS 5.1
Hello,
I valued the ACS 5.1. Now I habve the problem, that on EAP-TLS the binary coparison of certificates failed. In our old ACS-Server their is an point named strip domain suffix on the EAP-TLS configuration page for the Active Directory. In the ACS 5.1 Version I can't find this point but I think I need it.
How can help me?
Nice regardes
TorstenYou must be thinking about another browser. FireFox has a Tools menu--Safari does not. Most of the things FireFox puts under its Tools menu are found in Safari preferences.
Editing or customizing the toolbar is accessible through Safari's View menu. If you need advanced features found unde "Web Developer" in the FireFox Tools menu, you can activate Safari's "Develop" menu by doing Safari > Preferencs and selecting the "Advanced "tab. At the bottom is a checkbox to show the Develop menu.
Here is a comparison. FireFox's "Tools" menu with the web developer options expanded:
Safari's "Develop" menu after activation: -
The Active Directory Domain Services is currently unavailable....printer "unseen"
I Have a Windows 7 on an Acer Aspire 5742 laptop and an HP LaserjetP1102w. There are two wireless laptops in the household. I am trying to print from Microsoft Word Starter, but it states "No Printers Installed" and if I try to add a printer I get the message: The Active Directory Domain Services is currently unavailable.
I can print Self Test/Device configuration sheets (on this the iPv4 reads as 0.0.0.0.), a printer test page and a test print from the HP Print and Scan Doctor. It is the network which is not reading the printer.
I have disabled my firewall, un- and re-installed the printer. I have also tried to uninstall and reinstall the printer using the Window 7 installer utility. but that tells this printer "is not currently supported by this Wizard"
I have searched the web for people with the same problem but found nothing that has helped me. Not to put too fine a point on it I am at my wit's end.
You are my last resort (no pressure, then!)
This question was solved.
View Solution.Are the configuration reports with the 0.0.0.0 being printed directly from the printer? A 0.0.0.0 address indicates the printer is not actually on the network (or at least not getting DHCP information from the router). The Print and Scan Doctor should not have been able to print to it unless it happened to be connected by a USB cable as well.
What brand and model is the router?
Is the wireless light a solid blue light or a flashing blue light?
You mentioned an Active Directory Domain Services error message. Outside of corporate networks, this is not an error message you should get. I suspect there might be a deeper software issue at fault. Please provide the exact steps you are using to add the printer to generate that error message.
↙-----------How do I give Kudos?| How do I mark a post as Solved? ----------------↓ -
DNS The Zone cannot be deleted - the active directory service is not available
Hello TechNet Members,
As you can see from the Summery, I got this message when I'm trying to delete DNS Zone.
It's not matter if the DNS Zone newly created or its an Old One.
After this message the computer is telling you "The Computer is about to make Restart".
It's so strange and i really don't know what to check first.
More Information:
5 Servers that Replicate together.
The Operation System is Windows Server 2012R2 for all the entire DC's
1 Domain In the Forest.
Thanks,Hi Jesper,
DCdiag /fix and no errors in there everything marked as PASSED.
I did Demotion for one of the DC to troubleshoot, but with no luck i'm back to the same point i started
I tried to delete the brand new Zone from the commandline using DNScmd it's still not working and the computer is reboot himslef.
I've checked the permissions from the ADSIEdit.msc:
Inherit from MicrosoftDNS section to the ROOT
DNSAdmins > Full Control
Domain Admins > Full Control
From "DNS Server" section at the EventViewer
The DNS server is waiting for Active Directory Domain Services (AD DS) to signal that the initial synchronization of the directory has been completed. The DNS server service cannot start until the initial synchronization is complete because critical DNS
data might not yet be replicated onto this domain controller. If events in the AD DS event log indicate that there is a problem with DNS name resolution, consider adding the IP address of another DNS server for this domain to the DNS server list in the Internet
Protocol properties of this computer. This event will be logged every two minutes until AD DS has signaled that the initial synchronization has successfully completed.
"The DNS server was unable to complete directory service enumeration of zone TestZone1. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active
Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error. "
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.
Thanks, -
Event properties – Event 91, Level Error, Event ID 91, Date and time 5/10/2012 11:29:48AM, Service CertificationAuthority
General:
Could not connect to the Active Directory.
Active Directory Certificate Services will retry when processing requires Active Directory access.
We have a Windows 2008 Server Enterprise with AD . I would like to enable the service "Certificate Services" that
allow me to enable radius to authenticate users wireless with the active directory.Hi,
Can you please check this forum or someone from Microsoft, as we have post here dating back from October that are not being answered.
Everything for us is exactly the same as szucsati and Racom
NMNM,
Please give us an answer on this as the link provided is absolutely useless.
Thank you.
Maybe you are looking for
-
Can iTunes write corrected ID3 tags to the main files?
I'm sure this has been posted somewhere already, but I can't find it, so here goes. I have changed several hundred ID3 tags by editing the files in iTunes. Titles, artists, album, etc. The problem is, the main files aren't updating. SO if I change an
-
I need videochat on gmail.Im using Mozilla but wat plugin to download?
Hi I have problem with IE and Google chrome.So I downloaded mozilla and here if I open gmail I am unable to do video chat...pls let me know what is to be done.
-
Have a computer which I will need to retire (bad hard drive), 32 bit OS. Have new computer 64 bit OS. Both computers have Firefox 5. Old machine on Windows 2000, new one on Windows 7. Old computer has all the bookmarks and settings that I need for th
-
we have one PR (already released and get five level approval)and PO(already done GR/IR). now, is there any way we can reset the release status(from approval to initial release status for the PR?), how to do it? Thanks
-
I am about to purchase a Mac-Mini 1.66GHZ Intel Core Duo (2gig RAM) with the Apple 20" Cinema Display. Just a few questions before I take the plunge... I have been reading endless posts surrounding the GMA950 graphics processor and have a quick quest