Cant logon to AAA server webclient

When I tried to login to the webclient from my desktop. I get an error message can't logon with Administrator account on this computer..
Can some assist.

Nevermind on this. resolved.

Similar Messages

Cant logon to the new imessage in lastest ios

Cant logon to the new imessage in lastest ios.
Message: The server encountered an error while processing the registration. Try again later.

Cant logon to the new imessage in lastest ios.
Message: The server encountered an error while processing the registration. Try again later.

Asa 5505, the outside cant access to a server in the inside

hi, i have an Asa 5505, a pc in the outside with the ip 10.1.1.6 cant access to a server in the inside 192.168.1.4, pls help...
this is my conf:
ASA Version 8.0(4)
hostname ciscoasa
domain-name default.domain.invalid
enable password 8Ry2YjIyt7RRXU24 encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface Vlan1
nameif inside
security-level 0
ip address 192.168.1.1 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address 10.1.1.2 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
boot system disk0:/asa804-k8.bin
ftp mode passive
dns server-group DefaultDNS
domain-name default.domain.invalid
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
access-list 100 extended permit tcp any host 10.1.1.3 eq www
pager lines 24
logging enable
logging asdm debugging
mtu inside 1500
<--- More --->
mtu outside 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-613.bin
no asdm history enable
arp timeout 14400
nat-control
global (outside) 1 interface
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) 10.1.1.3 192.168.1.4 netmask 255.255.255.255
access-group 100 in interface outside
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.1.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
<--- More --->
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
dhcpd address 192.168.1.2-192.168.1.254 inside
dhcpd enable inside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
<--- More --->
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
service-policy global_policy global
prompt hostname context
Cryptochecksum:14e7b74fabc386613ae646b915f60e9e
: end
ciscoasa#

Andres
The security level for your inside interface should be 100 ie.
interface Vlan1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
After changing that can you
1) ping the outside interface of the ASA from the pc or ping the PC from the ASA
2) I'm assuming you are trying to connect to 10.1.1.3 when you attempt the connection ?
Jon

Unable to change password while first logon on windows server 2008 R2 SP1 system

Hi Team,
Ad team has created new account for me with change password on first logon setting
When I logged in on Windows Server 2008 r2 SP1 system with my new credentials I get a error message stating that
"You must change your password before logging on the first time. For assistance, conatct your system administrator or technical support"
Concern:
I do not get password change screen on first logon on the server. How should I change my password on first logon?

Hi,
I got resolution for above issue
Run ==> type "tsconfig.msc" ==> double click "RDP-TCP" ==> change security layer to
RDP Security layer ==> Apply ==> OK

AAA server logs replication

•1.       We have two locations and require Cisco ACS 5.x for each location.
•2.       Both locations are connected via MPLS link.
•3.       Need to deploy both ACS in Active-Active OR Active-Standby.
•4.       The idea is that users in network A will have their primary ACS as ACS A and secondary ACS as ACS B.
•5.       Similarly users in network B will have its primary ACS as ACS B local to their LAN.
If ACS in network A goes down, then users in network A should be able to authenticate using ACS B in remote network and vice versa.
•6.       Now what we got to understand by reading ACS documents is that incase one of ACS goes down, the accounting logs do not get replicated to secondary ACS and vice versa.
•7.       I would like to have a kind of setup where in Accounting logs are also replicated between ACS servers. The idea is that, I should have complete logs of both the servers up to the time till one of the ACS breaks down.
Kindly let me know if the accounting logs can be replicated in the manner as mentioned above.
Also let me know the typical bandwidth utilized during replication of ACS A to ACS B.
We have around 500 users combining both sides.
Our proposal is dependent upon working of the above solution…kindly see if ACS5.x will work in the above scenario as we need to propose the same.

I hope I get your question correctly. The AAA group tag is local to the AAA Client and has nothing to do with the AAA Server (e.g. ACS). It is meant to group more than one TACACS/RADIUS server.
Proxy Distribution Table is used when you have Multiple ACS servers and you want to route incoming AAA requests to particular server(s) based on pre-defined criteria. Like user1@NY should be redirected to the NewYork ACS.
Regards
Farrukh

Name of the function module to logon to other server

Dear All
i would like to know the name of the functional module through which user can logon to other server ex: from DEV to PRD for debug the programs . i tried through st03N i am able to get only used tcode but not functional module from which they are logon to prd server
is there any way to get logs for particular user to get log for last 10 days used tcodes all my traces are not active and audit also not active..
Regards

Dear
I need the name of the FM through which we can log on to any other server
there is S_RFC authorization object now i disabled that but i need the name so i can manually restrict the FM
Regards

Errors on aaa server

Hello,
pls which service is actually suspended when the AAA server gives this report.
"Service CSAuth has been stopped or paused by the system. Monitoring will suspend until the service is restarted."
And how can I resolve it.
Also, my backup AAA server is still not replying. If I shutdown the service on the primary acs, the errors i get when i try to login are "auth server down".
What can I do to correct these?

To my knowledge, it's the authentication service like Radius or Tacacs+ that is suspended.

ACS 4.2.0 AAA-server-IP-address changing to 169.254.x.x

Hello,
I have ACS 4.2.0.124.15 installed on a windows server 2008.
In the configuration menu : network config > AAA server , the AAA-server-IP-address change to 169.254.x.x each time I disconnect the ethernet interface of the server.
Allthough, the ip adresse in my network connection of the windows-Lan-connection is set to static.
Whe I reconnect the ethernet interface of the server, it stays in 169.154.x.x. And I need to reconfigure the real static adresse each time.
Do you knows this problem. Is it a way to avoid it ?
Michel Misonne

Hello,I have ACS 4.2.0.124.15 installed on a windows server 2008.In
the configuration menu : network config > AAA server , the
AAA-server-IP-address change to 169.254.x.x each time I disconnect the
ethernet interface of the server.Allthough, the ip adresse in my network connection of the windows-Lan-connection is set to static.Whe
I reconnect the ethernet interface of the server, it stays in
169.154.x.x. And I need to reconfigure the real static adresse each
time.Do you knows this problem. Is it a way to avoid it ?Michel Misonne
Hi Michel,
It was issue in ACS 1113 SE Appliance and clear solution for the above is mentioned in the below link
http://www.ciscosystems.com/en/US/products/sw/secursw/ps2086/products_tech_note09186a00808d9199.shtml#stat
HTH
Ganesh.H

AAA Server IP Pool based on AAA Client

Hi,
I have a scenario where I need to be able to allocate an IP address to a user group from a pool on the AAA server based on the AAA client that the user authenticates against.
So for example if the user comes in on CPE1 they get assigned an address from Pool A, if they come in on CPE2 they get an address assigned from Pool B.
Any pointers on how to do this (if possible) would be greatly appreciated.
Thanks in advance
Andy

With ACS v4 you could do this....
Define your pools and add your devices to their own NDGs. Then define a NAP which is triggered off each NDG. Each NAP can use its own group mapping scheme which each target group using a different IP pool.
Probably only works when users are external as you need group mapping to make it work.
A bit cludgy.. but should work.

Essbase Administration Services: Cant connect to Administration Server

Cant connet to Administration Server via EAS console. I would appreciate any hints that might help me overcome this next unknown.
Background follows:
I installed EPMA 11.1.2.2, and then went to the workspace wondering where the sample data was (after I created a sample app). I discovered in docs and forumns that I had to load it through the Essbase Administration Services console. Now I'm trying to get that to work. I installed it after posts revealed that it is part of the client installers (thanks John) package. Now that it is installed I run it, try to login, and get an error message that says "could not connect to Administration Server." I reinstalled the EAS database as a new install to my server.mydomainb.org:1433 via the configurator. Then I redployed all the apps to the app server. And lastly started all of the services. Still I get the same message. I've done this about 4 times hoping that a reconfig will somehow fix something but still no joy. I've also tried loggin in with different names for the server such as myserver:1433 or myserver.mydomain.org:1433 or myserver and none of those helped either.
I have manually started all the services so they appear to be working. I may be missing one but I wouldn't know.
The services that are running include:
Hyperion EPM Server - Web Application
Hyperion EPMA Server
Hyperion Financial Data Quality Management
Hyperion Integration Services
Hyperion Reporting and Analysis Framework
Hyperion Studion Services BPMS bpms1
Some in posts have suggested also going to the logs. 11.1.2.2 docs say that the EAS logs are located at oracle_home\user_projects\domains\epmsystem\servers\EssAdm..Services0\logs\easserver.log. But I found mine at:
<oracle_home>\user_projects\domains\epmsystem1\servers\logs. You will notice that my empsystem is empsystem1 instead. There I found that the easserver.log file is empty but I did find one error in the file EPMServer0.log. The error I found is as follows:
####<Apr 4, 2013 11:42:09 AM MDT> <Error> <JDBC> <SLCBRASSTEST> <EPMServer0> <[ACTIVE] ExecuteThread: '18' for queue: 'weblogic.kernel.Default (self-tuning)'> <<WLS Kernel>> <> <> <1365097329966> <BEA-001112> <Test "select count(*) from SERVERLOGID" set up for pool "eas_datasource" failed with exception: "java.sql.SQLSyntaxErrorException: [FMWGEN][SQLServer JDBC Driver][SQLServer]Invalid object name 'SERVERLOGID'.".>
I'm not sure what to try next so any suggestions would be helpful. Thanks!

"Hyperion EPM Server - Web Application" indicates that the web apps have been deployed to a single managed server, this means the web apps will be running a default port of 9000, the EAS console is not aware of the port so you will need to include it when you add the server in the console e.g. servername:9000
Cheers
John
http://john-goodwin.blogspot.com/

WLC 5508 and AAA server

Hello all,
Quick question (couldn't find answer on google).
Can the Cisco Wireless LAN Controller model 5508 act as an AAA server, or does that require a separate device/server/appliance?
My initial answer to this question was yes, if running in local EAP mode...
Anybody?

Thank you both. I love this forum I am working as an intern with my current company; but no stranger to IT. The pay is humbling, but I am learning fast and this forum has really helped accelerate my learning. I thought having a CCNA along would get me the good job, but nothing beats experience.
Thanks again!

Multiple logon for Microsoft Server 2008 R2

I currently work for the U.S. Government as a System Administrator. I'm in the middle of an inspection on my system and one of the inspector asked me about multiple logon for Microsoft Server 2008 R2.
How many times are you allowed to logon to Microsoft Server 2008 R2 before it lock the system? And also if I'm the system administrator what is the limit on logging to different systems with my account.
These are questions that I do not have an answer to and I couldn't find any assistance on the Tech Support website.
Thank you for your assistance.
Andre'

Hi,
If you mean how many users can log on the same computer, this is limited by the resource:
If You refer system administrator as domain administrator, domain administrators have full administration rights to their domain.
Alex Zhao
TechNet Community Support

ACS error, AAA Server is a referenced in the Proxy Distribution Table

When installing the ACS appliance (4.1) I have an issue where during the setup it prompts for a static address, Gateway, and DNS. This fine and network connectivity is tested during this time and success.
The issue seems to be fine but that when logging in to the GUI under Network Configuration>AAA servers.
AAA server AAA server IP address AAA server type
self 10.10.10.1 CiscoSecure ACS
ciscoacs 169.254.25.58 CiscoSecure ACS
Under Network Configuration>Proxy Distribution Table
Character String AAA Servers Strip Account
Default ciscoacs no Local
The 2 questions I have how to stop the 169.x.x.x address or why this is being put into the configuration, and how to delete as the following error is obsvered when trying.
ACS error when trying to delete..
âCan not Delete AAA Server, AAA Server is a referenced in the Proxy Distribution Tableâ
Many Thanks MJ

Go to,
Network configuration > Proxy Distribution Table > (Default).
swap the entry in this section under tables AAA Server and Forward to > Submit + Restart.
Then try to delete 169.x.x.x entry.
Regards,
Prem

Bb classic cant connect to bb server

sorry
i cant find how to continue my previous post message.
the problem still exist, cant connect to bb server.
my pin {REMOVED}
THANKS
Mod Edit: Edited post to remove personal information to comply with the Community Guidelines and Terms and Conditions of Use
Solved!
Go to Solution.

I suggest you try the very clean and very forceful AutoLoader method:
http://supportforums.blackberry.com/t5/BlackBerry-10-OS-Device-Software/Upgrading-OS10-devices-using...
Beware that it is completely destructive...the device will be "like new"...no data, no apps, no accounts, etc. Be sure you take a full backup first, as well as make full manual documentation of all apps, accounts, configurations, etc. Sometimes a restore reintroduces the very corruption one is trying to eliminate, and manual reconfiguration is necessary.
You can also use this to fall back to a prior OS if you desire...you can install any OS level for which you can find an AutoLoader. (Hint...search over on the CB site!)
Good luck and let us know!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

More than 1 AAA server for logging in to WebVPN

Hi everybody,
Does anyone know if ASA supports simultaneous authentication more than 1 AAA server? I've created LDAP and SecurID token account for every users and want them provide both account information for logging in to WebVPN.
Please advice.
Thanks for advance,
Nitass

If you are aaa server you are referring to is "radius server", then you can try out the following commands.
In ASDM you would simply add the said RADIUS servers to the "server group"
If you wish to do this through CLI, you would define a group eg
aaa-server radius protocol radius
aaa-server radius host x.x.x.x
aaa-server radius host y.y.y.y
aaa-server radius host z.z.z.z
and you would then call this in the said tunnel-group :
tunnel-group opsource type ipsec-ra
tunnel-group opsource general-attributes
address-pool admin_ra
authentication-server-group radius LOCAL
default-group-policy opsource

Cant logon to AAA server webclient

Similar Messages

Maybe you are looking for