Cisco ise on vm Failed to start database

vmware 4.1 (or maybe 4.0.1)
configured with 2 core minimum freq 3.6Ghz
200Gb HD on single physical drive (minimum requirement),
no thin provisioning
datastore vmfs 3, 2Mb block size,
ethernet : flexible network adapter
ram 4Gb
Scsi controller
setup......
bum
ISE Database listener not ready yet. Seconds left before timeout: 0
error:[cpminitialsetup.sh]
ERROR: FAILED TO START DB!
Database is not available within timeout of 240 seconds.
This could be the result of incorrect network interface configuration,
or lack of resources on the appliance or VM. Please fix the issue and
run the following CLI to re-prime database:
'application reset-config ise'
error:[cpminitialsetup.sh]
Any advice?

Hi Tarik,
I am getting the same error message:
Starting ISE database processes...
ERROR: FAILED TO START DB!
Database is not available within timeout of 240 seconds.
This could be the result of incorrect network interface configuration,
or lack of resources on the appliance or VM. Please fix the issue and
run the following CLI to re-prime database:
'application reset-config ise'
This happend when i did command 'application reset-config ise' on a 3395 appliance running 1.1.1.268 code
i appreciate your assistance

Similar Messages

Cisco ISE 1.3 failed to authenticate wireless endpoint

Dear all,
I recently have a big problem of my ISE after upgraded from version 1.2 to 1.3, the original plan is follow for wireless laptop authenticate to our network.
There are 2 SSID, REG and INT, when the user and laptop first time use the WIFI, they need to request a user certificate from CA, and they need to login to the REG SSID with AD username and password. The Wireless controller 2504 will pass the packet to ISE, the use will use 802.1x authen method with PEAP to request for cert. if the authentication successful, the user need to open a web browser and the NSP page of ISE will shown up for user to register, and the CA will generate the user cert to user. Then the SSID will switch to INT and using EAP/TLS to authenticate the user cert with the CA.
That was fine when working in ISE 1.2. However, after upgrade to 1.3 because of the proxy setting in 1.3 allow to input username and password which our proxy server required and cannot be changed. Under 1.3 the authentication failed even in the first step of authentication policy of ISE, the policy will check if the laptop using 802.1x and login by AD account, then it will pass to authorization policy. But when I check the log, there is always have the error message 5411 Supplicant stopped responding to ISE , 12930 Supplicant stopped responding to ISE after sending it the first PEAP message , 5440 Endpoint abandoned EAP session and started new
I have search long time in the Internet but without any help, appreciate if any expert can help me. I have also upload the debug message from our ISE for reference.
Thank you
Best Regards,
Terry Chow

Hi Terry,
Just wondering if you got an answer to your problem?
I am deploying a new solution with ISE 1.3 and I was having a similar problem with my wireless users when I tried to enable it last night
Cheers,
John

Cisco ISE and Authentication Failed VLAN

I am trying to setup ISE to assign a VLAN to unauthorized computers. I tried using "authentication event fail action authorize vlan 666" command but unfortunately I'm using multi-auth because we have users with bridged VMs and Cisco does not support it (http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_55_se/configuration/guide/sw8021x.html#wp1454875).
Is there a way to make an Authorization/Authentication profile within ISE to assign the VLAN to failed devices?

You can set endpoint protection status to quarantine, and establish policies that assign different
authorization profiles, depending on the status of the endpoint.
Quarantine essentially moves an endpoint from its default VLAN to a specified Quarantine VLAN. The
The Quarantine VLAN must be previously defined by a network administrator and supported on the
same NAS as the endpoint. Unquarantine reverses the quarantine action, returning the endpoint to its
original VLAN.
The quarantine and unquarantine actions are performed as a result of established Authorization Rules
that are defined to check for EPSStatus
http://www.cisco.com/en/US/docs/security/ise/1.1/user_guide/ise_eps.html#wp1219979

Cisco ISE Guest Authentication Failed : 86020: Unknown exception

Hi,
I would like to check what may be causing the error message 86020:unknown exception for ise when guest user authenticates via wireless using CWA? I have also attached a screen capture of the error and after the authenitcation logs change to autheorization only succeed after a repeated trying. Based on user feedback for failed login, When guest user gets conected to wirless and login in to guest portal with credential after putting credential then its again redirect to same login page wihout successful login prompt; not too sure if there may be any settings that may be looked into and the reason for the unknown exception error?
Any suggestion/recommendation is appreciated.

Hi Tarik,
Not too sure if i understand on the static hostname for redirection; there are 2 PSNs for the deployment however they are acting as active/secondary for the wireless (This is done from the wlan on the wlc to set the primary/secondary radius server). From the guest redirection; it is always hitting the primary radius server defined on the wlan/wlc. The ise is running version 1.1.4 with patch 8 applied.
Not too sure if there may be any settings that may be looked into for the guest authentication/redirection and the reason for the unknown exception error?
Thanks.

Cisco ISE 1.2 Patch 6 -- 8 Update failed

Hi all,
I wanted to know if any bugs was registered for the cumulative patch 8 for Cisco ISE 1.2 and how to mitigate any patch failures.
Important notice : I though that this error could be an unlucky try but i've tested the update two time.
Indeed, i have three deployment : A Pre-production one, a 4 nodes distributed and a 2 nodes distributed.
The patch works fine on the pre-production one, on the 2 nodes too but fails on the 4 nodes one with a very anormal behaviour.
On the "show nodes status" in Maintenance - Patch manage, i can see that my both PAN are successfully patched and the first PSN too but when the "Patch in progress" appears on the second PSN, the "installed" status is cancelled in the first PSN and become "Patch in progress" so i've two "Patch in progress" in parallel, that is an anormal procedure not discribed by Cisco on the document "Installing a software Patch". (wich discribe a sequential update of all nodes)
The symptoms after this error are :
- Unable to process EAP-TLS authentications ! (CA are stored on the First PAN and seems to be unavailable from PSN to exchange the handshake)
- The Application server try to restart but fails indefinitly even if i try to restart the node (on both PSN)
- GUI Unavailable
- MAB Auth is working
- Endpoint and Endpoint Groups menus are missing on the GUI (I push the MAC Address through the ERS API but it is very strange)
- Logs indicates one first "Patch success" on PAN and a second "Patch failed" still on PAN :(
The task that resolves this issue is to launch the command "patch remove ise 8" on all nodes and everything come back functional.
My big interrogation is that on my two other deployment, the patch was successfull and quick to process.
Thanks for your help.

This is that i did abviously... but the two PSN stay in status "Node down", the application service won't start correctly with these ADE-OS logs entries :
2014-05-28T10:26:30.023223+00:00 XXXXXXX logger: info:[application:operation:appservercontrol.sh] Starting ISE Application Server...
2014-05-28T10:26:30.311676+00:00 XXXXXXX logger: Loading PKCS11 ...
2014-05-28T10:26:30.978432+00:00 XXXXXXX logger: SLF4J: Class path contains multiple SLF4J bindings.
2014-05-28T10:26:30.978454+00:00 XXXXXXX logger: SLF4J: Found binding in [jar:file:/opt/CSCOcpm/appsrv/apache-tomcat-6.0.36/lib/slf4j-log4j12-1.5.8.jar!/org/slf4j/im
pl/StaticLoggerBinder.class]
2014-05-28T10:26:30.978502+00:00 XXXXXXX logger: SLF4J: Found binding in [jar:file:/opt/CSCOcpm/appsrv/apache-tomcat-6.0.36/lib/com.cisco.xmp.osgi.slf4j-log4j12-1.5.
8.PATCHED.jar!/org/slf4j/impl/StaticLoggerBinder.class]
2014-05-28T10:26:30.978509+00:00 XXXXXXX logger: SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.
2014-05-28T10:26:31.638970+00:00 XXXXXXX logger: log4j:WARN No appenders could be found for logger (com.cisco.epm.config.cache.impl.ConfigCacheImpl).
2014-05-28T10:26:31.638992+00:00 XXXXXXX logger: log4j:WARN Please initialize the log4j system properly.

Cisco ISE authentication failed because client reject certificate

Hi Experts,
I am a newbie in ISE and having problem in my first step in authentication. Please help.
I am trying to deploy a standalone Cisco ISE 1.1.2 with WLC using 802.1x authentication. The user authentication configured to be checked to ISE's internal user database for early deployment. But when the user try to authenticate, they failed with error message in ISE :
Authentication failed : 12321 PEAP failed SSL/TLS handshake because the client rejected the ISE local-certificate
I've generate a certificate for ISE using Windows Server CA and replace ISE's self-signed certificate with the new certificate but authentication still failed with the same error message. Must I generate a certificate for WLC also? Please help me in solving this problem.
Regards,
Ratna

Certificate-Based User Authentication via Supplicant Failing
Symptoms or
Issue
User authentication is failing on the client machine, and the user is receiving a
“RADIUS Access-Reject” form of message.
Conditions (This issue occurs with authentication protocols that require certificate validation.)
Possible Authentications report failure reasons:
• “Authentication failed: 11514 Unexpectedly received empty TLS message;
treating as a rejection by the client”
• “Authentication failed: 12153 EAP-FAST failed SSL/TLS handshake because
the client rejected the Cisco ISE local-certificate”
Click the magnifying glass icon from Authentications to display the following output
in the Authentication Report:
• 12305 Prepared EAP-Request with another PEAP challenge
• 11006 Returned RADIUS Access-Challenge
• 11001 Received RADIUS Access-Request
• 11018 RADIUS is reusing an existing session
• 12304 Extracted EAP-Response containing PEAP challenge-response
• 11514 Unexpectedly received empty TLS message; treating as a rejection by the
client
• 12512 Treat the unexpected TLS acknowledge message as a rejection from the
client
• 11504 Prepared EAP-Failure
• 11003 Returned RADIUS Access-Reject
• 11006 Returned RADIUS Access-Challenge
• 11001 Received RADIUS Access-Request
• 11018 RADIUS is re-using an existing session
• 12104 Extracted EAP-Response containing EAP-FAST challenge-response
• 12815 Extracted TLS Alert message
• 12153 EAP-FAST failed SSL/TLS handshake because the client rejected the
Cisco ISE local-certificate
• 11504 Prepared EAP-Failure
• 11003 Returned RADIUS Access-Reject
Note This is an indication that the client does not have or does not trust the Cisco
ISE certificates.
Possible Causes The supplicant or client machine is not accepting the certificate from Cisco ISE.
The client machine is configured to validate the server certificate, but is not
configured to trust the Cisco ISE certificate.
Resolution The client machine must accept the Cisco ISE certificate to enable authentication.

Cisco ISE integration with AD fails

Cisco ISE Ver: 1.1.2.145
Windows : Win 2003 Server
I am attempting to integrate ISE with AD, but ISE won't join AD and joining attempts fails, though I am able to add same domain as external LDAP identity store ?
1.user used to join the domain has admin permission on AD
2. ISE resolved the domain correctly
3.There is a firewall inbetween ISE (192.168.100.10) & AD (172.16.100.1), but all the traffic are permited.
4. No NATing taking place, Firewall is forwarding all trafic between ISE & AD
Can't really understand why AD connection fails
From ISE Interface - Detailed Test Connection
Adinfo (CentrifyDC 4.5.0-357)
Host Diagnostics
Uname: Linux Iseadn 2.6.18-274.17.1.el5PAE #1 SMP Wed Jan 4 22:49:48 EST 2012 I686
OS: Linux
Version: 2.6.18-274.17.1.el5PAE
Number Of CPUs: 1
IP Diagnostics
Local Host Name: Iseadn
Local IP Address: 192.168.100.10
FQDN Host Name:iseadn.gnet.cp
Domain Diagnostics
Domain: Gnet.cp
Subnet Site: Default-first-site-name
    DNS Query For: _ldap._tcp.gnet.cp
    Found SRV Records:
      Gnet.cp:389
Testing Active Directory Connectivity:
    Domain Controller: Gnet.cp
      Ldap:      389/tcp - Good
      Ldap:      389/udp - Good
      Smb:       445/tcp - Good
      Kdc:        88/tcp - Good
      Kpasswd:   464/tcp - Good
      Ntp:       123/udp - Good
Domain Controller: Gnet.cp:389
    Domain Controller Type: Windows 2003
    Domain Name:            GNET.CP
    IsGlobalCatalogReady:   TRUE
    DomainFunctionality:           2 = (DS_BEHAVIOR_WIN2003)
    ForestFunctionality:           0 = (DS_BEHAVIOR_WIN2000)
    DomainControllerFunctionality: 2 = (DS_BEHAVIOR_WIN2003)
Forest Name: GNET.CP
    DNS Query For: _gc._tcp.GNET.CP
Testing Active Directory Connectivity:
Forest Name: GNET.CP
Kerberos Error: Rc=-1765328377 SASL Bind To Ldap/[email protected] - GSSAPI Mechanism With Kerberos Error : Server Not Found In Kerberos Database
Computer Account Diagnostics
Not Joined To Any Domain
System Diagnostic
Not Joined To Any Domain
Centrify DirectControl Status
Not Joined To Any Domain
Licensed Features: Enabled
SELinux Status:                 Disabled
Amavis1.1.0
Ccs1.0.0
Clamav1.1.0
Dcc1.1.0
Dnsmasq1.1.1
Evolution1.1.0
Ipsec1.4.0
Iscsid1.0.0
Milter1.0.0
Mozilla1.1.0
Mplayer1.1.0
Nagios1.1.0
Oddjob1.0.1
Pcscd1.0.0
Postgrey1.1.0
Prelude1.0.0
Pyzor1.1.0
Qemu1.1.2
Razor1.1.0
Ricci1.0.0
Smartmon1.1.0
Spamassassin1.9.0
Virt1.0.0
Zosremote1.0.0
From Ad-agent log

Hi Jallaluddin
I work for Centrify Support and saw your posting. Here our analysis on checking the adlogs.txt.zip:
Server not found in Kerberos database" (reference base/adbind.cpp:495 rc: -1765328377)
That error is likely coming from the KDC - meaning there is some problem with server side SPNs
We need the following:
1) A network trace.
2) adcheck output.
3) adinfo --support output
4) Run dcdiag or netdiag on the server side.
Also we partner with Cisco and so would it possible to work with your partners and I am pretty sure they have seen this before with DC issues etc. Can you please work with them and see?. TIA
Best Regards
Raghu Srinivasan

Cisco ISE: Dot1x failing and MAB succeeded (Intermittent) /or Posture Delay

Hi,
We are running the cisco ise 1.1.3 and configured for the Dot1x and MAB authentications. PC's are getting access through MAB while Dot1x failing again and again. But, sometime, same PC is getting authenticating via Dot1x. Connectivity is intermittent. Also, sometimes, stucks longer in Posture
We have three different switches at the moment with the latest IOS version.
1) WS-C4507R-E = 15.1(2)SG,
2) WS-C3560-48PS = 12.2(55)SE7
3) WS-C3750X-24P = 15.0(2)SE1
Could you anyone pitch the idea? or advise about the latest IOS for the switches.
Let me know, if you need more information.
Thanks,
Regards,
Mubahser

It seems your PCs are failing dot1x and also failing MAB authentication, the switch by default will start the process again and will again fail dot1x and MAB authentication, and so on.
It will be helpful to see the logs from both the switch and the radius servers (i take it is ACS or ISE). Also the configuration of the radius server.

CiscoWorks 3.2 ANI database engine failed to start

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
CiscoWorks ANI database engine failed to start ...
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
We suppose we have found following bug. This is output from one discussion on Netpro https://supportforums.cisco.com/message/665869#665869 .
CSCsb52873
ANI Server fails to start
This problem occurs when you:
Start ANI Server, the server is up for sometime and shuts down with RC as -2 and Info as ANI Server failed to load from the database.
Workaround:
Stop the Daemon Manager. Re-initialize ANI database and start the daemons.
Enter the following command to reinitialize ANI database:
/opt/CSCOpx/bin/perl /opt/CSCOpx/bin/dbRestoreOrig.pl dsn=ani dmprefix=ANI
You should not be using this interface to start any CiscoWorks services. Your statup parameters look okay. Either your ANI database is corrupt, or your transaction log is corrupt.
First, set the CiscoWorks Daemon Manager service to Manual, and reboot the server. When the server reboots, delete NMSROOT\databases\ani\ani.log if it exists. Then run:
NMSROOT\objects\db\win32\dbsrv9 -f NMSROOT\databases\ani\ani.db
After that, set the Daemon Manager service back to Automatic, and reboot again. See if the ANI database engine starts. If not, you will need to reinitialize your ANI database with the command:
NMSROOT\bin\perl NMSROOT\bin\dbRestoreOrig.pl dsn=ani dmprefix=ANI
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin:0cm;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:10.0pt;
font-family:"Times New Roman";
mso-ansi-language:#0400;
mso-fareast-language:#0400;
mso-bidi-language:#0400;}
We have done reinitializing:
1. Delete NMSROOT\databases\ani\ani.log
NMSROOT\objects\db\win32\dbsrv10 -f NMSROOT\databases\ani\ani.db
After that done
NMSROOT\bin\perl NMSROOT\bin\dbRestoreOrig.pl dsn=ani dmprefix=ANI
After reinitializing ANI database took 1 hour to start, output of pdshow command was
INFO: Daemon manager is processing other tasks in the queue. Please try again later.
In RME there is another problem:
JRM Service could be down. Check whether JRM services are running .
Tried to resolve by reinitializingRME
NMSROOT\bin\perl.exe NMSROOT\bin\dbRestoreOrig.pl dsn=rmeng dmprefix=RME
But did not help.
We are attaching some log files...
Thanks in advance...

You are most likely seeing a port conflict between LMS and the Windows RM service. You can either shutdown the Windows Remote Management service, then restart Daemon Manager, or do the following:
* Shutdown Daemon Manager
* Remove ctmregistry* from NMSROOT/MDC/tomcat/webapps/rme/WEB-INF/lib.
* With Windows Remote Management still running, restart Daemon Manager, and EssentialsDM should skip tcp/47001 because it is already in use.

Application Server failed to start- Could not sign on to database HR91

Hello there,
I am not able to boot App Server Domain (started but the status is idle.) In the log, i also find the message that
PSBRKDSP_dflt.452 (0) [04/01/11 23:35:53](0) PeopleTools Release 8.51 (WinX86) starting. Tuxedo server is PUBSUB(98)/100
PSPUBDSP_dflt.2996 (0) [04/01/11 23:35:53](0) PeopleTools Release 8.51 (WinX86) starting. Tuxedo server is PUBSUB(98)/200
PSSUBDSP_dflt.2324 (0) [04/01/11 23:35:53](0) PeopleTools Release 8.51 (WinX86) starting. Tuxedo server is PUBSUB(98)/300
PSBRKDSP_dflt.452 (0) [04/01/11 23:35:53](0) Cache Directory being used: C:\Users\Administrator\psft\pt\8.51\appserv\HR91\CACHE\PSBRKDSP_dflt_100\
PSBRKDSP_dflt.452 (0) [04/01/11 23:35:53](1) GenMessageBox(200, 0, M): PS General SQL Routines: Missing or invalid version of SQL library PSORA (200,0)
PSBRKDSP_dflt.452 (0) [04/01/11 23:35:53](1) GenMessageBox(0, 0, M): Database Signon: Could not sign on to database HR91 with user PS.
PSPUBDSP_dflt.2996 (0) [04/01/11 23:35:54](0) Cache Directory being used: C:\Users\Administrator\psft\pt\8.51\appserv\HR91\CACHE\PSPUBDSP_dflt_200\
PSPUBDSP_dflt.2996 (0) [04/01/11 23:35:54](1) GenMessageBox(200, 0, M): PS General SQL Routines: Missing or invalid version of SQL library PSORA (200,0)
PSPUBDSP_dflt.2996 (0) [04/01/11 23:35:54](1) GenMessageBox(0, 0, M): Database Signon: Could not sign on to database HR91 with user PS.
PSSUBDSP_dflt.2324 (0) [04/01/11 23:35:54](0) Cache Directory being used: C:\Users\Administrator\psft\pt\8.51\appserv\HR91\CACHE\PSSUBDSP_dflt_300\
PSSUBDSP_dflt.2324 (0) [04/01/11 23:35:54](1) GenMessageBox(200, 0, M): PS General SQL Routines: Missing or invalid version of SQL library PSORA (200,0)
PSSUBDSP_dflt.2324 (0) [04/01/11 23:35:54](1) GenMessageBox(0, 0, M): Database Signon: Could not sign on to database HR91 with user PS.
PSBRKDSP_dflt.452 (0) [04/01/11 23:35:54](0) Server failed to start
PSPUBDSP_dflt.2996 (0) [04/01/11 23:35:54](0) Server failed to start
PSSUBDSP_dflt.2324 (0) [04/01/11 23:35:54](0) Server failed to start
Below is the information of my configuration file.
[Startup]
;=========================================================================
; Database Signon settings
;=========================================================================
DBName=HR91
DBType=ORACLE
UserId=PS
UserPswd=PS
ConnectId=people
ConnectPswd=peop1e
ServerName=HR91
StandbyDBName=
StandbyDBType=
StandbyUserId=
StandbyUserPswd=
[Database Options]
;=========================================================================
; Database-specific configuration options
;=========================================================================
SybasePacketSize=
UseLocalOracleDB=0
;ORACLE_SID=
EnableDBMonitoring=1
PSDB Maximum Cursors=
[Security]
;=========================================================================
; Security settings
;=========================================================================
Validate Signon with Database=0
DomainConnectionPwd=PS
Also, i can use PS/PS log into the Datamover but can not use them to log into the application designer
Any help will be appreciated...
Thank you

bandar wrote:
When you have a oracle server running on the same physical machine, why do you need client to support your needs?
As you said, your oracle client installation might be an error, u can always point BIN on app server to your server installation and start the server.That was true up to Oracle 11.1 because the 32bit librairies were shipped in ORACLE_HOME even if that one was a 64bit installation.
It has been dramatically changed within Oracle 11.2 though. The 32bit libraries are not coming anymore within the Oracle 11.2 64bit, you have to explicitely install a 11.2 32bit client to make it work with Peoplesoft on Windows. And configure your Peoplesoft installation to work within that 32bit client.
Consequently, if you have all together installed on the same server (Oracle database 11.2 64bit and Peoplesoft), you must have two Oracle homes : one for the 64bit database, one for the 32bit client.
Nicolas.

Error in /tmp/applianceagent/scripts/Database.sh: Start database failed with exit code 2

Hello
I have set up the Demo appliance landscape for the openSAP course "Introduction to SAP Fiori UX", on AWS.
The frontend machine is OK, but the configuration and startup of the server machine has failed for some reason. When logging in with ssh to the server, this message is presented:
The Appliance Agent detected an error and terminated.
When asked, please provide the file /tmp/applianceagent_20141002-145658.tar.bz2.
Note that a restrictive iptables based firewall is still active.
I have attached the file (had to add .txt to the name to circumvent file type restrictions).
I noticed that the appliancedeploy.log ended with these lines:
Start database Execute /usr/sap/hostctrl/exe/sapcontrol -nr 02 -function StartWait 3600 20
02.10.2014 13:56:58
Start
OK
02.10.2014 14:56:58
StartWait
FAIL: Timeout
error in /tmp/applianceagent/scripts/Database.sh: Start database failed with exit code 2
Notice the 1 hour jump in time, and then the timeout error message.
Do any of you have any idea what could be causing this, and how to fix it?
Please let me know if you need any further information.
Best regards,
Bo

Hi Hannes.
Trying to create and activate a new instance (version 5 of the Fiori appliance), I first got this message in the CAL instance overview list:
Instance Operation Failed
Operation Start failed on step Start start VAs with message: Start failed for VM SAP Server due to Amazon Web Services issue : AMAZON : The snapshot 'snap-c779ff64' does not exist.
Then I terminated the instance and tried over again. And this time the deployment worked - I have a running server, which responds to the SAP GUI, and shows the Fiori web page.
Thanks a lot for your quick help.
Best regards,
Bo

Cisco ISE Failure: 24408 User authentication against Active Directory failed since user has entered the wrong password

Hi,
Since we implemented Cisco ISE we receive the following failure on several Notebooks:
Authentication failed : 24408 User authentication against Active Directory failed since user has entered the wrong password
This happens 2 or 3 times per Day. So basically the authentications are working. But when the failure appears, the connection is lost for a short time.
The Clients are using PEAP(EAP-MSCHAPv2) for Authentication. We've got a Cisco Wireless Environment (WLC 5508).
Why is this happening?
Thanks,
Marc

The possible causes of this error message are:
1.] If the end user entered an incorrect username.
2.] The shared sceret between WLC and ISE is mismatched. With this we'll see continous failed authentication.
3.] As long as a PSN not receiving a response from the supplicant within this limit during an EAP conversation, it will throw this error code. In majority of cases it says eap session timed out.
In your cases, the 3rd option seems to be the most closest one.
Jatin Katyal
- Do rate helpful posts -

10g database fails to start after 3rd reboot

Hi,
I've reloaded my test server several times and loaded 10g with the default "orcl" database. Works just fine, reboot a couple times and it still works. Around the 3rd reboot the database instance fails to start. I even have to reload the OS to clear this problem. Just uninstalling Oracle and reinstalling will not clear this problem I have to reload the OS. Is there some sort of limit on the software we download from the OTN download area?
Thanks.

I found in another post that suggested I needed to update my listener.ora file. I did that and the error went to telling me that oracle was unavailable. Then I found a post that suggested this:
Set oracle_sid=orcl
SQLPLUS /NOLOG
CONN SYS/????@orcl AS SYSDBA
STARTUP
EXIT
Ran this and sure enough, the database was ok but sitting idle. It went through some initialization steps and mounted so I can now launch the manager tool and have access to my database.
So, ok, this is running on VMware and that "might" be causing the problems but this is very strange since it survived three reboots then out of the blue this issue comes up. I can live with running a batch file everytime I reboot in my little test environment so I'm ok :]
Thanks for your time.

SRVCTL START DATABASE FAILS WITH ORA-00119

Hi,
My DB version is 11.2.0.2.3
I am able to start the DB thorough sqlplus as conventional way.But when I am trying to start using SRVCTL it gives the following errors:
CRS-5017: The resource action "ora.****.db start" encountered the following error:
SRVCTL START DATABASE FAILS WITH ORA-00119: invalid specification for system parameter LOCAL_LISTENER
ORA-00132: syntax error or unresolved network name 'LISTENER_local'
Can you please suggest for any workaround.
Thanks

Did you check the TNS_ADMIN? Where does it point to?
Also check if you have all the network files placed under the directory pointed to by TNS_ADMIN.
sqlnet.ora
listener.ora
tnsnames.ora

Cisco ISE (Authentication failed: 24415 User authentication against Active Directory failed since user's account is locked out)

Hi,
I have a setup ISE 1.1.1. Users are getting authenticate against AD. Everything is working fine except some users report disconnection. I see in the ISE that (Authentication failed: 24415 User authentication against Active Directory failed since user's account is locked out). Users are using Windows 7 OS.
Error is enclosed & here is the port configuration.
Port Configuration.
interface GigabitEthernet0/2
switchport access vlan 120
switchport mode access
switchport voice vlan 121
authentication event fail action next-method
authentication event server dead action reinitialize vlan 120
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication order mab dot1x
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 60
spanning-tree portfast
ip dhcp snooping limit rate 30 interface GigabitEthernet0/2
switchport access vlan 120
switchport mode access
switchport voice vlan 121
authentication event fail action next-method
authentication event server dead action reinitialize vlan 120
authentication event server alive action reinitialize
authentication host-mode multi-auth
authentication order mab dot1x
authentication priority dot1x mab
authentication port-control auto
authentication periodic
authentication timer reauthenticate server
mab
dot1x pae authenticator
dot1x timeout tx-period 60
spanning-tree portfast
ip dhcp snooping limit rate 30
Please help.

The error message means that Active Directory server Reject the authentication attempt
as for some reasons the user account got locked.I guess, You should ask your AD Team to check in the AD
Event Logs why did the user account got locked.
Under Even Viewers, You can find it out
Regards
Minakshi (Do rate the helpful posts)

Cisco ise on vm Failed to start database

Similar Messages

Maybe you are looking for