CiscoSecure ACS 3.3 with Linux PAM?

Hi. We have two new console servers (not Cisco products) and I'm trying to authenticate using our TACACS+ servers. Per the documentation I have found, I have put the appropriate commands in the pam.conf file. I have the communciation unencrypted. The authentication and authorization work, but the accounting is not. I have captured the TACACS server replying with "cannot process accounting message". Has anybody gottem ACS 3.3 working with Linux-PAM?

I think you are a victim of the AD Aware as opposed to AD Integrated. CiscoSecure is AD Aware, it can use the AD database for Password authentication (a very simple implementation of single sign-on). But the local database is used for everything else. From my point of view this is a good thing.
If the AD Admin, Network Admin and Security officer are all the same person, then I agree with you.
From your message you seem to be using ACS to secure your Cisco devices (routers/switches), I would not want people who manage AD to be able to give network device access to anyone they choose. Nore do I trust AD admins to understand network security. Normally the network people are very small subset of IT organization, so this should not be a big problem. Also, the real component that you are using to secure the devices is TACACS+ (hopefully) or RADIUS because the devices are not AD Aware themselves.
If you need for every user that is in AD to be a user in ACS, there is import/export support for both for inital setup, after that it is up to you to keep the databases synchronized. You can do this with routine import/exports, but I advise against it.
If you are using ACS to manage a Dial or IPSec environment, I agree this is a pain, but do you really want everyone to be able to dial-in or VPN into your network without coming to you for access? Don't you want to be able to disable/expire peoples access for devices and remote access without calling the AD admin?
For the kind of things you want, you need an AD Integrated product like Exchange or you can try some of the vendors at listed at http://www.microsoft.com/windows2000/partners/adall.asp
FYI - This is my understanding of the product, I'm sure there are a lot of people out there that know more then me, so feel free to correct me.

Similar Messages

802.1x RADIUS authentication problem with Cat 2950 to CiscoSecure ACS 3.3

I wondered if anyone can help or shed any light on the following problem.
I am getting an authentication error when doing a RADIUS authentication to CiscoSecure ACS 3.3 running on a Windows 2003 server, the authentication request is coming from a Catalyst 2950 switch which is doing 802.1x for Windows XP clients. This problem only happens when the XP client connects to 2950 switches, Cat 3550s and 3560s work fine.
The Cat2950 is running 12.1.20 (EA1) which is more or less the latest IOS.
The error I get from ACS 3.3 is "Invalid message authenticator in EAP request" when the 2950 tries to authenticate an XP client for 802.1x to the ACS server using RADIUS.
Doing a RADIUS and 802.1x debug on the 2950 I see a message about 'Unknown EAP type', I am using PEAP on the XP client doing EAP-MS-CHAPv2 authentication, the same XP client authenticates fine with 3550 and 3560 switches problem only affects 2950s. Can anyone confirm the 2950 supports EAP-MS-CHAPv2?
I have checked and re-checked the shared secret and it definitely matches on 2950 and ACS.
One thing I noticed in the RADIUS debug is the 2950 sends 18 bytes for attribute 79 when the RFC defines attribute 79 should be 3 bytes or less, I don't know if this is related to the problem or is correct behaviour.

Hi, I am new with 802.1x, and was hoping that someone would help with these queries:
1. How is a certificate requested without being allowed on a network that is not authenticated with 802.1x. I had to first connect to an active network, retrieve a certificate with the proper username and password, and then physically connect to the port on the 2950 switch which was enabled to do 802.1x
2. My config is as below:
aaa new-model
aaa authentication dot1x default group radius
aaa authenication login default group radius
dot1x system-auth-control
interface f0/1
switchport mode access
dot1x port-control auto
end
I able to login using the radius server, so radius is working (on ports other than f1/0). However when connecting to f1/0, the port on the 2950 remains blocked.
3. The certificate is issued by the ca server, is viewable via Internet explorer,and is issued to the correct username which is on the active directory.
I even tried using local authenication with 802.1x, this did not work
4. If I have a certificate, will this automatically give me access to the 802.1x port?
5. I have windows 2000, and authenication is set to 'Smart Card or other certificate.
Am I missing anything?
Any advise will be greatly appreciated
Chris

CiscoSecure ACS 3.3 and MS Active Directory ?

We just got and installed CiscoSecure ACS 3.3 on a domain controller for our MS active directory domain.
ACS seems to work with AD in the sense that it uses the usernames and passwords contained in AD for users. However I noticed it does not seem to popluate ACS with the users, instead you have to go in to ACS and add each user with the username from AD, and then just tell it to use the windows database for password authentication.
Is this correct or am I missing something in my setup that is preventing users from being populated in ACS?
Also, can you not use AD groups for ACS permissions? For example one of the things we are doing is defining certain groups for access to routers, switches and firewall commands. I have been able to do this manually in ACS by defining a group and setting the permissions as well as the command authorization set. However it does not seem very practical to have to go in manually to ACS to add a user to an ACS group. I thought since ACS works with active directory it would also use AD groups. So we could assign a user to a group in AD and it would then utilize the defined ACS permissions for that group.

I think you are a victim of the AD Aware as opposed to AD Integrated. CiscoSecure is AD Aware, it can use the AD database for Password authentication (a very simple implementation of single sign-on). But the local database is used for everything else. From my point of view this is a good thing.
If the AD Admin, Network Admin and Security officer are all the same person, then I agree with you.
From your message you seem to be using ACS to secure your Cisco devices (routers/switches), I would not want people who manage AD to be able to give network device access to anyone they choose. Nore do I trust AD admins to understand network security. Normally the network people are very small subset of IT organization, so this should not be a big problem. Also, the real component that you are using to secure the devices is TACACS+ (hopefully) or RADIUS because the devices are not AD Aware themselves.
If you need for every user that is in AD to be a user in ACS, there is import/export support for both for inital setup, after that it is up to you to keep the databases synchronized. You can do this with routine import/exports, but I advise against it.
If you are using ACS to manage a Dial or IPSec environment, I agree this is a pain, but do you really want everyone to be able to dial-in or VPN into your network without coming to you for access? Don't you want to be able to disable/expire peoples access for devices and remote access without calling the AD admin?
For the kind of things you want, you need an AD Integrated product like Exchange or you can try some of the vendors at listed at http://www.microsoft.com/windows2000/partners/adall.asp
FYI - This is my understanding of the product, I'm sure there are a lot of people out there that know more then me, so feel free to correct me.

CiscoSecure ACS v2.4 for Windows NT Upgrade

We still have two ancient instances of CiscoSecure ACS v2.4 for Windows NT running on our network. ACS1 (primary) and ACS2 (secondary). I would like to upgrade these, not only because of how old they are but because of an issue trying to replicate the user and group database from ACS1 to ACS2. When trying to replicate the user and group database the logs say it's successful but the databases don't match. ACS2 is missing some of the users that are in ACS1. I have successfully replicated the interface database. But for whatever reason, the user and group database will not replicate.
First, is there any other way I can get the user and group database copied from ACS1 to ACS2? Other than using the built in database replication tool?
Second, is there any way I can get these upgraded? I read that the recommended upgrade path is 2.4->2.6->3.0->3.2. But Cisco no longer has version 2.6 available for download. I really would like to upgrade rather than starting from scratch.
Thanks!

ACS 2.4 - wow! That hasn't been sold for over 11 years. (reference)
Think about it - would you want to try to upgrade Windows 98 to Windows 7? That's about an equivalent span of software product timeline.
The current product is so different that even if you could upgrade it would not be advisable to do so. While painful, it would be much better option to make a clean break with the old and move onto a current platform (e.g ACS 5.3).

Wireless Lan connection issue with Linux clients

Hi
In a large Wireless Lan enviroment for a university, we have 3 WISM moduls attached on a 6k hw - Manged by ACS v6.0.181.0
We recently upgraded the software version of the controllers from 4.x to 7.0.98.0 - the Emergency Image version is 5.2.157.0
Since then, the students with Linux clients have massive connection issue - repeated connection lost in a short time period.
However the students with Windows clients have no problem at all.
The studends report, that their linux clients getting so much of some kind of unnecessary broadcast traffic which can not be handled by the NIC - and the NIC goes down - and this happens all 5-10 minutes.
Affected Linux clients are: Ubuntu v10.10 - also OpenSuse, Fedora and Arch-linx with latest OS version.
Any Idea how I could solve this problem?
Thanks in advance for your help

Hi Nicolas
Thanks for your reply. The broadcast forwarding is disabled on WLC's.
Pls find below the attached picture, which shows the captured broadcast traffic on a linux client (sent by a student to me).
I'm not sure, if its really only the broadcast traffic, which the linux clients can not handle.
From my point of view, it seems also to be that the linux clients are somehow disadvantaged among the other clients like windows or mac, if they all trying to get a wireless connection.
But the fact is only the linux clients are affected - and this happens to the linux clients only in our wireless infrastructure.
Windows or Mac clients have no such problem at all
regards
Enis

ACS any Version with Domain Controller on Windows Server 2008 R2 64bit

Hi All
Is there currently any ACS version working with Windows Server 2008 R2 domain controllers?
Our server stuff has recently upgraded the Domain Controllers to 2008r2 and turned off the 2003 servers. This didn't make our ACS 4.1.4 really happy.
I've read now serveral posts regarding issues with ACS and Server 2008r2 and hope to find a solution (besides switching to LDAP, yukk).
Thanks
pato

Hi AllIs there currently any ACS version working with Windows Server 2008 R2 domain controllers?Our
server stuff has recently upgraded the Domain Controllers to 2008r2 and
turned off the 2003 servers. This didn't make our ACS 4.1.4 really
happy.I've read now serveral posts regarding issues with ACS and
Server 2008r2 and hope to find a solution (besides switching to LDAP,
yukk).Thankspato
Hi Pato,
Just check out the below link hope that help.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/release/notes/ACS42_RN.html
As per the link it says The support for Windows Server 2008 is applicable for ACS 4.2 Patch 4 onwards.
Hope to Help !!
Remember to rate the helpful post
Ganesh.H

Install PT8.53 with Linux Issue: Jolt client (ip address 192.168.196.102) does not have proper application password

Folks,
Hello.
I am installing PeopleTools 8.53 with Oracle Database Server 11gR1 and OS Oracle Linux 5.10.
Data Mover Bootstrap and Application Designer can log into Database instance successfully. My procedure to run PIA is below:
Step 1: start Oracle Database Server and LISTENR is listening.
Step 2: start Application Server ./psadmin and 8 processes are started.
Step 3: start WebLogic Server PIA /opt/PT8.53/webserv/PT853/bin/startPIA.sh
In Browser, http://192.168.196.102:8000/ps/signon.html comes up successfully. But when sign in using UserID PSADMIN and password "myname", I get the error message in Browser as below:
The application server is down at this time.
CHECK APPSERVER LOGS. THE SITE BOOTED WITH INTERNAL DEFAULT SETTINGS, BECAUSE OF: bea.jolt.ServiceException: Invalid Session
We've detected that your operating system is not supported by this website. For best results, use one of the following operating systems:
Mac OS X 10.6(Snow Leopard)
Mac OS X 10.5(Leopard)
iPad
Oracle Linux Enterprise
Mac OS X 10.4(Tiger)
Windows 8
Windows 7
Mac OS X 10.7(Lion)
Regarding Application Designer, both Database Type "Oracle" and Connection Type "Application Server", UserID "PSADMIN" and password "myname" login successfully. I view TUXLOG (current Tuxedo log file) and its last screen is below:
191723.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191723.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191723.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191724.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191724.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191724.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191724.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191724.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191725.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191725.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191725.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191726.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191726.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191726.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191726.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191726.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191727.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191727.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191727.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
191727.lucylinux.lucydomain!JSH.32462.2485226496.-2: JOLT_CAT:1626: "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password"
I View APPSRV_1023.LOG (current server log file) and its content is below:
PSADMIN.32259 (0) [2013-10-23T18:55:12.134](0) Begin boot attempt on domain PT853
PSAPPSRV.32290 (0) [2013-10-23T18:55:35.701](0) PeopleTools Release 8.53 (Linux) starting. Tuxedo server is APPSRV(99)/1
PSAPPSRV.32290 (0) [2013-10-23T18:55:35.923](0) Cache Directory being used: /home/user/psft/pt/8.53/appserv/PT853/CACHE/PSAPPSRV_1/
PSAPPSRV.32290 (0) [2013-10-23T18:56:19.256](2) App server host time skew is DB+00:00:00 (ORACLE PT853)
PSAPPSRV.32290 (0) [2013-10-23T18:56:23.504](0) Server started
PSAPPSRV.32290 (0) [2013-10-23T18:56:23.507](3) Detected time zone is EDT
PSAPPSRV.32338 (0) [2013-10-23T18:56:25.793](0) PeopleTools Release 8.53 (Linux) starting. Tuxedo server is APPSRV(99)/2
PSAPPSRV.32338 (0) [2013-10-23T18:56:26.003](0) Cache Directory being used: /home/user/psft/pt/8.53/appserv/PT853/CACHE/PSAPPSRV_2/
PSAPPSRV.32338 (0) [2013-10-23T18:57:08.871](2) App server host time skew is DB+00:00:00 (ORACLE PT853)
PSAPPSRV.32338 (0) [2013-10-23T18:57:10.662](0) Server started
PSAPPSRV.32338 (0) [2013-10-23T18:57:10.663](3) Detected time zone is EDT
PSSAMSRV.32388 (0) [2013-10-23T18:57:12.159](2) Min instance is set to 1. To avoid loss of service, configure Min instance to atleast 2.
PSSAMSRV.32388 (0) [2013-10-23T18:57:12.168](0) PeopleTools Release 8.53 (Li nux) starting. Tuxedo server is APPSRV(99)/100
PSSAMSRV.32388 (0) [2013-10-23T18:57:12.265](0) Cache Directory being used: /home/user/psft/pt/8.53/appserv/PT853/CACHE/PSSAMSRV_100/
PSSAMSRV.32388 (0) [2013-10-23T18:57:59.414](0) Server started
PSSAMSRV.32388 (0) [2013-10-23T18:57:59.416](3) Detected time zone is EDT
PSADMIN.32259 (0) [2013-10-23T18:58:48.149](0) End boot attempt on domain PT853
PSAPPSRV.32290 (1) [2013-10-23T18:59:06.144 GetCertificate](3) Returning context. ID=PSADMIN, Lang=ENG, UStreamId=185906140_32290.1, Token=PT_LOCAL/2013-10-23-11.59.26.248432/PSADMIN/ENG/vSz0ix+wq8d+zPRwQ0Wa4hcek0Q=
~
I think the error is indicated in TUXLOG file "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password". The application password "myname" in Browser http://192.168.196.102:8000/ps/signon.html page is not working. I use the same password "myname" to login Data Mover Bootstrap mode, Application Designer, and Application Server psadmin configuration successfully. I have tried a few other passwords in Browser http://192.168.196.102:8000/ps/signon.html page but not working.
My question is:
How to solve Sign In issue on http://192.168.196.102:8000/ps/signon.html that is "ERROR: Jolt client (ip address 192.168.196.102) does not have proper application password" ?
Thanks.

Dear Nicolas,
Hello. I have used the same password for "DomainConnectPswd" in the file Configuration.properties with that for Application Server setting. Eventually, UserID PSADMIN sign in http://192.168.196.102:8000/ps/signon.html successfully. PeopleTools 8.53 runs correctly in Browser.
It seems that whether upgrade Oracle Linux 5.0 to the latest 5.10 does not have effect !
I am very grateful to your great help for this installation of PT8.53 with Linux and Oracle Database !

Satellite M40-129: PCMCIA Card doesn't work with Linux

I have D-Link DWL-G650 with Atheros Chipset which is good supported under linux (madwifi). But if I boot Linux the card is not found. I tested the card with an Fujitsu Siemens Notebook and it worked out of the box!
Any idea why it doesn't work with my M40-129 ?

Hi
Like you know Toshiba doesnt support the Linux and there are no Toshiba drivers for the Linux OS but I was able to find this useful Toshiba page about the notebook configuration with Linux:
http://newsletter.toshiba-tro.de/main/
You should check the OS machine compatibility and the other areas.
Im sure you will find many useful tips.
Good luck

High temperature after suspend to RAM with linux-3.9.2-1.

After the update to linux-3.9.2-1 my laptop works on higher temperature after resuming from suspend to RAM. Works fine with linux 3.8.7-1.
Normal working temperature is 47~49 degrees Celsius and after resuming it is 59~61. It's not just a false temperature reading. I can actually feel the laptop warmer, and the CPU fun spins up.
I can't see any CPU high load. I tend to believe that the temperature rise has to do with the Intel GPU driver (i915). My CPU has an integrated GPU.
Intel(R) Core(TM) i3-2350M CPU @ 2.30GHz
VGA compatible controller: Intel Corporation 2nd Generation Core Processor Family Integrated Graphics Controller (rev 09)
cmdline:
i915.semaphores=1 i915.i915_enable_rc6=1 i915.i915_enable_fbc=1 i915.lvds_downclock=1 aspm_force=true acpi_backlight=vendor intel_pstate=disable
Anyone noticed something similar?
Ways to debug it? Apart from kernel GIT bisect.

I got the impression myself, that all the i915 downclock tweaks have been getting counterproductive over time as the driver got better.
Be sure to give the new pstate another go. I had problems too with the upgrade to 3.9.x and the powersave governor. Enabling "performance" in cpupower only and letting intel_pstate manage the idling on its own had an awesome effect. I only have rc6=1 and "sna" accel along with it on a similar cpu. Resuming with fan off.

Install HRCS 9.0 R5 with Linux Issue: upgrade Database HRCS 9.0 from PT8.52 to PT8.53

Folks,
Hello. I have been installing HCM and Campus Solution 9.0 with PeopleTools8.53. Server machine is Oracle Linux 5.10 and client machine is Windows XP. My internet architecture is WebLogic11g/Tuxedo11g/OracleDatabase 11gR1. Peopletools 8.53 runs correctly in browser.
In Oracle Linux 5.10 Database Server machine, I run the scripts "createdb10.sql, utlspace.sql, hrcddl.sql, dbowner.sql, psroles.sql, psadmin.sql and connect.sql" one by one. Then I use Data Mover to load data from Windows XP into Oracle Linux 5.10 DB instance HRCS90. The Data Mover script hrcs90ora.dms completes successfully in Windows XP. Configuration Manager is set up correctly. But when I login into Application Designer, I cannot login and get the message as below:
"Security Table Manager (Get): The database is at release 8.52. The PeopleTools being run require databases at release 8.53."
I have been following the document http://docs.oracle.com/cd/E37306_02/psft/acrobat/PeopleTools-8.53-Upgrade_02-2013.pdf to upgrade HCM and Human Resources 9.0 Revision 5 Database Instance HRCS90 in Oracle Database Server with Linux. I have been following chapter 4 task by task to do. Actually, I have run 4 scripts into HRCS90 as below:
Task 4-3-5: run rel853.sql at SQL> in Linux.
Task 4-3-6: run grant.sql at SQL> in Linux.
Task 4-5-3: run ddlora.dms in Windows XP Data Mover into HRCS90.
Task 4-6: run msgtlsupg.dms in Windows XP Data Mover into HRCS90.
Then need to run Task 4-7 to copy project ppltls84cur Project in Application Designer. When login into Application Designer with Database HRCS90 and UserID and pwd PS, I get the same error message as below:
"The database is at release 8.52. The PeopleTools being run require Database at release 8.53."
Application Designer is supposed to login by Task 4-7 to copy projects but it cannot. I have tried to fing out what's wrong as below:
In task 4-1-3: I cannot run script dbtsfix.sqr in Linux and Windows XP.
In task 4-1-9: script ptupgibdel.sql does not have the string "End of PT8.53". There is no script ptupgibdel853.sql to run.
In task 4-3-6: when run script grant.sql, table PSSTATUS and PSACCESSPRFL don't exist. There is only PSOPRDEFN table.
I continue to do task by task in chapter 4 until task 4-27 that's the end, but Application Designer still cannot login. All of Application Engine Programs and SQR Programs cannot run.
My questions are:
First, does Oracle Database HRCS90 has table PSOPRDEFN only without table PSSTATUS and PSACCESSPRFL ?
Second, what's the error by task 4-7 when Application Designer still cannot login ?
Third, why Application Designer still cannot login a the end of doing chapter 4 task 4-27 ? How to solve the issue ?
Thanks.
Thanks.

I'm not quite sure what you are missing, but it looks like you missed a script which could cause problems. You need to look through your logs for errors. Are you running rel853 as the AccessID user? I don't know how you would trash PSSTATUS in this process.
You don't mention running this.
Task 4-3-2: Creating Tablespaces
This step runs the PTDDLUPG script, which builds new tablespaces as part of the upgrade to the new PeopleSoft release.
It creates tablespace PSIMAGE2, which doesn't exist in the datamover load you did. Oracle moves and puts around 208 tables here when you run rel853 from what I see.
The first line of rel853 is
UPDATE PSSTATUS SET TOOLSREL='8.53',
LASTREFRESHDTTM = SYSDATE
This is what changes the tools release, sometimes people just run this one update to gain quick and dirty access to a different version.
I pulled this download and ran through it myself without incident doing all the steps you say, adding in 4-3-2 which you seemed to have skipped. I built a system database.
My hcengs.log shows
Importing PSSTATUS
Creating Table PSSTATUS
Import PSSTATUS 1
Building required indexes for PSSTATUS
Updating statistics for PSSTATUS
Records remaining: 7686
After import, PSSTATUS is
SQL> select toolsrel from sysadm.psstatus;
TOOLSREL
8.52
After running rel853n it's now
SQL> COMMIT
2 ;
Commit complete.
SQL> SPOOL OFF
SQL> select toolsrel from sysadm.psstatus;
TOOLSREL
8.53
I ran the other 3 quick scripts. Not sure if it was necessary, but I reset the passwords and re-encrypted them with the new 8.53 datamover for the new salted encryption and fired up app designer. It works. By the way, you should probably run rel853n, it utilizes "newer" (for PeopleSoft that is) data-types than just rel853.sql that were delivered with the 9.0 application line. Since this is a new 9.0 based app build it should be used.

Install HRCS 9.0 R5 with Linux Issue: upgrade HRCS 9.0 from PT8.52 to PT8.53

Folks,
Hello. I have been installing HCM and Campus Solution 9.0 with PeopleTools8.53. Server machine is Oracle Linux 5.10 and client machine is Windows XP. My internet architecture is WebLogic11g/Tuxedo11g/OracleDatabase 11gR1. Peopletools 8.53 runs correctly in browser.
In Oracle Linux 5.10 Database Server machine, I run the scripts "createdb10.sql, utlspace.sql, hrcddl.sql, dbowner.sql, psroles.sql, psadmin.sql and connect.sql" one by one. Then I use Data Mover to load data from Windows XP into Oracle Linux 5.10 DB instance HRCS90. The Data Mover script hrcs90ora.dms completes successfully in Windows XP. Configuration Manager is set up correctly. But when I login into Application Designer, I cannot login and get the message as below:
"Security Table Manager (Get): The database is at release 8.52. The PeopleTools being run require databases at release 8.53."
I have been following the document http://docs.oracle.com/cd/E37306_02/psft/acrobat/PeopleTools-8.53-Upgrade_02-2013.pdf to upgrade HCM and Human Resources 9.0 Revision 5 Database Instance HRCS90 in Oracle Database Server with Linux. I have been following chapter 4 task by task to do. Actually, I have run 4 scripts into HRCS90 as below:
Task 4-3-5: run rel853.sql at SQL> in Linux.
Task 4-3-6: run grant.sql at SQL> in Linux.
Task 4-5-3: run ddlora.dms in Windows XP Data Mover into HRCS90.
Task 4-6: run msgtlsupg.dms in Windows XP Data Mover into HRCS90.
Then need to run Task 4-7 to copy project ppltls84cur Project in Application Designer. When login into Application Designer with Database HRCS90 and Username PSADMIN, I get the same error message as below:
"The database is at release 8.52. The PeopleTools being run require Database at release 8.53."
Application Designer is supposed to login by Task 4-7 to copy projects but it cannot. I have tried to fing out what's wrong as below:
In task 4-1-3: I cannot run script dbtsfix.sqr in Linux and Windows XP.
In task 4-1-9: script ptupgibdel.sql does not have the string "End of PT8.53". There is no script ptupgibdel853.sql to run.
In task 4-3-6: when run script grant.sql, table PSSTATUS and PSACCESSPRFL don't exist. There is only PSOPRDEFN table.
I continue to do task by task in chapter 4 and chapter 5, but Application Designer still cannot login and all of Application Engine Programs cannot run. Windows XP cannot run SQR programs. Tuxedo Application Server cannot boot in Linux. Both Application Designer and Tuxedo Application Server gets the same error message: "The database is at release 8.52. The PeopleTools being run require Database at release 8.53."
My questions are:
First, does Oracle Database HRCS90 has table PSOPRDEFN only without table PSSTATUS and PSACCESSPRFL ?
Second, what's the error by task 4-7 when Application Designer still cannot login ?
Third, why Application Designer still cannot login and get the same error message after finish doing chapter 4 and chapter 5 ? How to solve the issue ?
Thanks.

I'm not quite sure what you are missing, but it looks like you missed a script which could cause problems. You need to look through your logs for errors. Are you running rel853 as the AccessID user? I don't know how you would trash PSSTATUS in this process.
You don't mention running this.
Task 4-3-2: Creating Tablespaces
This step runs the PTDDLUPG script, which builds new tablespaces as part of the upgrade to the new PeopleSoft release.
It creates tablespace PSIMAGE2, which doesn't exist in the datamover load you did. Oracle moves and puts around 208 tables here when you run rel853 from what I see.
The first line of rel853 is
UPDATE PSSTATUS SET TOOLSREL='8.53',
LASTREFRESHDTTM = SYSDATE
This is what changes the tools release, sometimes people just run this one update to gain quick and dirty access to a different version.
I pulled this download and ran through it myself without incident doing all the steps you say, adding in 4-3-2 which you seemed to have skipped. I built a system database.
My hcengs.log shows
Importing PSSTATUS
Creating Table PSSTATUS
Import PSSTATUS 1
Building required indexes for PSSTATUS
Updating statistics for PSSTATUS
Records remaining: 7686
After import, PSSTATUS is
SQL> select toolsrel from sysadm.psstatus;
TOOLSREL
8.52
After running rel853n it's now
SQL> COMMIT
2 ;
Commit complete.
SQL> SPOOL OFF
SQL> select toolsrel from sysadm.psstatus;
TOOLSREL
8.53
I ran the other 3 quick scripts. Not sure if it was necessary, but I reset the passwords and re-encrypted them with the new 8.53 datamover for the new salted encryption and fired up app designer. It works. By the way, you should probably run rel853n, it utilizes "newer" (for PeopleSoft that is) data-types than just rel853.sql that were delivered with the 9.0 application line. Since this is a new 9.0 based app build it should be used.

Install HRCS 9.0 R5 with Linux Issue: Upgrade HRCS 9.0 Database PT8.52 to PT8.53

Folks,
Hello. I have been installing HCM and Campus Solution 9.0 with PeopleTools8.53. Server machine is Oracle Linux 5.10 and client machine is Windows XP. My internet architecture is WebLogic11g/Tuxedo11g/OracleDatabase 11gR1. Peopletools 8.53 runs correctly in browser.
In Oracle Linux 5.10 Database Server machine, I run the scripts "createdb10.sql, utlspace.sql, hrcddl.sql, dbowner.sql, psroles.sql, psadmin.sql and connect.sql" one by one. Then I use Data Mover to load data from Windows XP into Oracle Linux 5.10 DB instance HRCS90. The Data Mover script hrcs90ora.dms completes successfully in Windows XP. Configuration Manager is set up correctly. But when I login into Application Designer, I cannot login and get the message as below:
"Security Table Manager (Get): The database is at release 8.52. The PeopleTools being run require databases at release 8.53."
I have been following the document http://docs.oracle.com/cd/E37306_02/psft/acrobat/PeopleTools-8.53-Upgrade_02-2013.pdf to upgrade HCM and Human Resources 9.0 Revision 5 Database Instance HRCS90 in Oracle Database Server with Linux. I have been following chapter 4 task by task to do. Actually, I have run 4 scripts into HRCS90 as below:
Task 4-3-5: run rel853.sql at SQL> in Linux.
Task 4-3-6: run grant.sql at SQL> in Linux.
Task 4-5-3: run ddlora.dms in Windows XP Data Mover into HRCS90.
Task 4-6: run msgtlsupg.dms in Windows XP Data Mover into HRCS90.
Then need to run Task 4-7 to copy project ppltls84cur Project in Application Designer. When login into Application Designer with Database HRCS90 and UserID and pwd PS, I get the same error message as below:
"The database is at release 8.52. The PeopleTools being run require Database at release 8.53."
Application Designer is supposed to login by Task 4-7 to copy projects but it cannot. I have tried to fing out what's wrong as below:
In task 4-1-3: I cannot run script dbtsfix.sqr in Linux and Windows XP.
In task 4-1-9: script ptupgibdel.sql does not have the string "End of PT8.53". There is no script ptupgibdel853.sql to run.
In task 4-3-6: when run script grant.sql, table PSSTATUS and PSACCESSPRFL don't exist. There is only PSOPRDEFN table.
My questions are:
First, does Oracle Database HRCS90 has table PSOPRDEFN only without table PSSTATUS and PSACCESSPRFL ?
Second, what's the error by task 4-7 when Application Designer still cannot login ?
Thanks.

I'm not quite sure what you are missing, but it looks like you missed a script which could cause problems. You need to look through your logs for errors. Are you running rel853 as the AccessID user? I don't know how you would trash PSSTATUS in this process.
You don't mention running this.
Task 4-3-2: Creating Tablespaces
This step runs the PTDDLUPG script, which builds new tablespaces as part of the upgrade to the new PeopleSoft release.
It creates tablespace PSIMAGE2, which doesn't exist in the datamover load you did. Oracle moves and puts around 208 tables here when you run rel853 from what I see.
The first line of rel853 is
UPDATE PSSTATUS SET TOOLSREL='8.53',
LASTREFRESHDTTM = SYSDATE
This is what changes the tools release, sometimes people just run this one update to gain quick and dirty access to a different version.
I pulled this download and ran through it myself without incident doing all the steps you say, adding in 4-3-2 which you seemed to have skipped. I built a system database.
My hcengs.log shows
Importing PSSTATUS
Creating Table PSSTATUS
Import PSSTATUS 1
Building required indexes for PSSTATUS
Updating statistics for PSSTATUS
Records remaining: 7686
After import, PSSTATUS is
SQL> select toolsrel from sysadm.psstatus;
TOOLSREL
8.52
After running rel853n it's now
SQL> COMMIT
2 ;
Commit complete.
SQL> SPOOL OFF
SQL> select toolsrel from sysadm.psstatus;
TOOLSREL
8.53
I ran the other 3 quick scripts. Not sure if it was necessary, but I reset the passwords and re-encrypted them with the new 8.53 datamover for the new salted encryption and fired up app designer. It works. By the way, you should probably run rel853n, it utilizes "newer" (for PeopleSoft that is) data-types than just rel853.sql that were delivered with the 9.0 application line. Since this is a new 9.0 based app build it should be used.

Install HRCS 9.0 R5 with Linux Issue: upgrade HRCS 9.0 PT8.52 to PT8.53

Folks,
Hello. I have been installing HCM and Campus Solution 9.0 with PeopleTools8.53. Server machine is Oracle Linux 5.10 and client machine is Windows XP. My internet architecture is WebLogic11g/Tuxedo11g/OracleDatabase 11gR1. Peopletools 8.53 runs correctly in browser.
In Oracle Linux 5.10 Database Server machine, I run the scripts "createdb10.sql, utlspace.sql, hrcddl.sql, dbowner.sql, psroles.sql, psadmin.sql and connect.sql" one by one. Then I use Data Mover to load data from Windows XP into Oracle Linux 5.10 DB instance HRCS90. The Data Mover script hrcs90ora.dms completes successfully in Windows XP. Configuration Manager is set up correctly. But when I login into Application Designer, I cannot login and get the message as below:
"Security Table Manager (Get): The database is at release 8.52. The PeopleTools being run require databases at release 8.53."
I have been following the document http://docs.oracle.com/cd/E37306_02/psft/acrobat/PeopleTools-8.53-Upgrade_02-2013.pdf to upgrade HCM and Human Resources 9.0 Revision 5 Database Instance HRCS90 in Oracle Database Server with Linux. I have been following chapter 4 task by task to do. Actually, I have run 4 scripts into HRCS90 as below:
Task 4-3-5: run rel853.sql at SQL> in Linux.
Task 4-3-6: run grant.sql at SQL> in Linux.
Task 4-5-3: run ddlora.dms in Windows XP Data Mover into HRCS90.
Task 4-6: run msgtlsupg.dms in Windows XP Data Mover into HRCS90.
Then need to run Task 4-7 to copy project ppltls84cur Project in Application Designer. When login into Application Designer with Database HRCS90 and UserID and pwd PS, I get the same error message as below:
"The database is at release 8.52. The PeopleTools being run require Database at release 8.53."
Application Designer is supposed to login by Task 4-7 to copy projects but it cannot. I have tried to fing out what's wrong as below:
In task 4-1-3: I cannot run script dbtsfix.sqr in Linux and Windows XP.
In task 4-1-9: script ptupgibdel.sql does not have the string "End of PT8.53". There is no script ptupgibdel853.sql to run.
In task 4-3-6: when run script grant.sql, table PSSTATUS and PSACCESSPRFL don't exist. There is only PSOPRDEFN table.
My questions are:
First, does Oracle Database HRCS90 has table PSOPRDEFN only without table PSSTATUS and PSACCESSPRFL ?
Second, what's the error by task 4-7 when Application Designer still cannot login ?
Thanks.

I'm not quite sure what you are missing, but it looks like you missed a script which could cause problems. You need to look through your logs for errors. Are you running rel853 as the AccessID user? I don't know how you would trash PSSTATUS in this process.
You don't mention running this.
Task 4-3-2: Creating Tablespaces
This step runs the PTDDLUPG script, which builds new tablespaces as part of the upgrade to the new PeopleSoft release.
It creates tablespace PSIMAGE2, which doesn't exist in the datamover load you did. Oracle moves and puts around 208 tables here when you run rel853 from what I see.
The first line of rel853 is
UPDATE PSSTATUS SET TOOLSREL='8.53',
LASTREFRESHDTTM = SYSDATE
This is what changes the tools release, sometimes people just run this one update to gain quick and dirty access to a different version.
I pulled this download and ran through it myself without incident doing all the steps you say, adding in 4-3-2 which you seemed to have skipped. I built a system database.
My hcengs.log shows
Importing PSSTATUS
Creating Table PSSTATUS
Import PSSTATUS 1
Building required indexes for PSSTATUS
Updating statistics for PSSTATUS
Records remaining: 7686
After import, PSSTATUS is
SQL> select toolsrel from sysadm.psstatus;
TOOLSREL
8.52
After running rel853n it's now
SQL> COMMIT
2 ;
Commit complete.
SQL> SPOOL OFF
SQL> select toolsrel from sysadm.psstatus;
TOOLSREL
8.53
I ran the other 3 quick scripts. Not sure if it was necessary, but I reset the passwords and re-encrypted them with the new 8.53 datamover for the new salted encryption and fired up app designer. It works. By the way, you should probably run rel853n, it utilizes "newer" (for PeopleSoft that is) data-types than just rel853.sql that were delivered with the 9.0 application line. Since this is a new 9.0 based app build it should be used.

Mac Pro Dual Quad Core won't boot OS/X, but plays fine with Linux/Windows

I've got a Mac Pro Dual Quad Core won't boot OS/X, but plays fine with Linux/Windows. I've tried all of the following initial tests as suggested on forums:
-Ram swaps
-Alternating video card in PCIe slots
-Trying alternate video card
-resetting pram and smc
-Multiple tests with memtest86+ over 26hrs and no failed ram
-Multiple tests (8-12 cycles) with apple HW diagnostics and no problems
-Firmware is approved firmware for early 2008 model...no new updates.
Gentoo livecd works fine and I even installed to hard drive and it boots fine with it. In addition to above tests I also ran a linux stress test putting all 8 cores at a load of 22 for 2.5hrs with no problems.
Memtest86+ for 24hrs+ yields no problems.
Where problems occur:
Booting off hard drive, DVD or firewire yields an immediate curtain of death and booting off a new snow leopard DVD dies about 25% into the install.
Looking at error log and a quick dmesg shows "Package 0 didn't get an HPET" and complains about AppleIntelCPUPowerManagement.kext. Google turns up illegal uses of this, so doesn't apply to my use case.
I'm a bit stumped since all was working well until one day it was non-stop curtains of death and can't get them to go away.
A logic board replacement at $1100 is not a feasible option for something that works on linux and windows, but not OS/X, is a bit disappointing and somewhat surprising.
Thanks for your help and advice.
Regards,
Marcos

Someone here once thought they knew EFI and Open Firmware a little, and used some commands from OF library that an Intel EFI Apple system didn't like. New logicboard.
Of course to run or boot OS X and see video you need EFI based card. The presence of some PC cards can block OS X from booting.
The fact you get part way through SL DVD, pull all the drives, put in a new drive and format it from SL DVD.
Most of the things you tried are what are more common with PC hardware. Including where people have tried and failed to install OS X on unsupported hardware.
I suppose it is possible something tried and failed to modify the Mac's firmware.
If you have Windows running, and you have WD drives, WD just posted new Lifeguard utility which is what I use to do a good job of stripping a drive down and recertify it for reuse, works wonders. Maybe same for other makes with vendor utility.

Searching for USB to VGA or DVI adapter compatible with linux

Hello everyone,
Since my HP mini is lacking a VGA connector (in fact, there's a proprietary one, but the cable for that is rare and expensive), I'm thinking of buying an USB adapter to plug a monitor. I don't care if the connector is VGA or DVi.
There're a lot of these adapters, but I'm not sure if any is compatible with Linux.
After a lot of searches, I still didn't find something useful.
Is there anyone who had experience with this kind of adapter or can point me some documentation about that ?

Just so I understand correctly... these USB to VGA/DVI adapters are video cards in their own right, yes? Something that I know works with Linux it the Villagetronic VTBook http://www.villagetronic.com/vtbook/index.html. It's a PCMCIA card (which is faster than usb 2) but you can get USB to PCMCIA adapters.

CiscoSecure ACS 3.3 with Linux PAM?

Similar Messages

Maybe you are looking for