Client Configuration

i have two controllers 4402and 15 WAP 1250s with both radio AGN
i need to configure the client to support maximum Speed
please advice what is the best Practice configuration for Both WLC and client
(the maximum speed for 2.4Ghz GN-radio)
the Laptop and driver Detail
DELL wireless 1510 wireless-N WLAN
Driver Provider :Broadcom
Driver Date :3/21/2008
:4.170.77.3

Make sure you use either WPA2/AES or an open WLAN and have WMM enabled. Getting the full possible 300Mbps data rates are not going to be advisable on the 2.4GHz range because this requires channel bonding. Setting up channel bonding on the 2.4GHz radios will cause co-channel interference between every AP as they all will be using channel 6.

Similar Messages

How can I Create a Client Configuration File for RemoteApp and Desktop Connection with Server 2012?

I have a working RDS RemoteApp site and looking to test out the feature in Windows 7 Control Panel\All Control Panel Items\RemoteApp and Desktop Connections
I came across this link: Create a Client Configuration File for RemoteApp and Desktop Connection and I believe this is what I need to do first, but these instructions are for
Server 2008, and I'm running 2012.
Any suggestions or tips on how I can begin testing this with Server 2012?

Hi,
You can manually enter the path to the 2012 feed and it will connect and download the RemoteApps and Desktop connections.
If you need a sample .wcx file I have posted one here a couple of times. If you want I will look for it and post a link.
-TP
I tried adding my URL's below, these are sample links that work for me right now for when I log into the web page, but neither of these work. And I'm not sure what I would need to do with or how to create a .wcx file.
When I type in my URL of: https://connect.mydomain.org/RDWeb, I get redirected to:
https://connect.mydomain.org/RDWeb/Pages/en-US/login.aspx?ReturnUrl=/RDWeb/Pages/en-US/Default.aspx

Error while crawling LOB contents in SP 2013:'Could not find default endpoint element that references contract in the ServiceModel client configuration section

Hi,
I created custom BDC Model using Visual Studio. In ReadList method i am getting data using Web Service call. Using this External Content Type (BDC Model) i created one external list and it is populating with data.
I created one new content source in search service application using this BDC Model and when crawled this content source i am getting the below error.
Error while crawling LOB contents. ( Error caused by exception: Microsoft.BusinessData.Runtime.RuntimeException MethodInstance with Name 'ReadList' on Entity (External Content Type) with Name 'Entity1' in Namespace 'bcsex.BdcModel1' failed
unexpectedly. The failure occurred in method 'ReadList' defined in class 'bcsex.BdcModel1.EntityService1' with the message 'Could not find default endpoint element that references contract 'ServiceReference1.Service1Soap' in the ServiceModel client configuration
section.
I included the bindings and client end point configuration settings in web.config file located at
\\Inetpub\wwwroot\wss\VirtualDirectories\Port_Number, but still getting the same error.
Please help. Thanks a lot.

The Issue resolved by including the bindings and client end point configuration settings in
machine.config file located at C:\Windows\Microsoft.NET\Framework64\v4.0.30319\Config\ and also restarted the server after config changes.

Issue with client configuration for CuciLync 9.2.5

Hi,
we are currently preparing the client configuration for CuciLync 9.2.5.
When CuciLync starts we don't want to see the CuciLync window in the foreground.
Therefore we use the 'hubvisible' setting.
%APPDATA% \Cisco\Unified Communications\Jabber\CSF\Config\jabberLocalConfig.xml
<userConfig name="hubvisible" value="FALSE"/>
In addition we use this setting in the file
ProgramFiles%\Cisco Systems\CUCILync\jabber-config-defaults.xml
At first it looks like that the setting works fine.
But CuciLync always resets 'hubvisible' to 'true'.
Any idea what needs to be done to ensure that the setting is not overwritten ?
Thanks in advance for your feedback
Best Regards
Carsten Lucy

that might help
http://mysite.voicebootcamp.com/index.php/free-video-labs/video/uc-collaboration-ccie-collaboration-chapter-4-1-voice-gatew

Oracle 11g client Configuration

Hi All,
I have Oracle 11g Server installed on my Linux box.
I want to use Oracle client 11g on my windowsXP access to the Server that on my linux box.
when i go to "Oracle-oraClient11g_home1","Configuration and Migration Tools", "Administration Assistant for Windows". I couldn't find the server that i want to add.
Here is my client configuration on my windowsXP:
tnsnames file
# tnsnames.ora Network Configuration File: C:\app\msokadmin\product\11.1.0\client_1\network\admin\tnsnames.ora
# Generated by Oracle configuration tools.
ORACLE =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = TCP)(HOST = "myoracle server name")(PORT = 1521))
(CONNECT_DATA =
(SERVICE_NAME = orcl)
listener file:
# listener.ora Network Configuration File: C:\app\msokadmin\product\11.1.0\client_1\network\admin\listener.ora
# Generated by Oracle configuration tools.
LISTENER =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = "it's my client Machine")(PORT = 1521))
Sqlnet file:
# sqlnet.ora Network Configuration File: C:\app\msokadmin\product\11.1.0\client_1\network\admin\sqlnet.ora
# Generated by Oracle configuration tools.
# This file is actually generated by netca. But if customers choose to
# install "Software Only", this file wont exist and without the native
# authentication, they will not be able to connect to the database on NT.
SQLNET.AUTHENTICATION_SERVICES= (NTS)
NAMES.DIRECTORY_PATH= (EZCONNECT, TNSNAMES)
My windowXp is joined to the domain (ex. zzz domain).
Anyone who know and can help me about this, it will great.
Thanks to forum.
Marin

1. On your Oracle client side, you don't need listener.ora file
2. If you want to configure TNS Names on client, you run "Net Configuration Assistant" not "Administration Assistant for Windows"
3. You will not see a server drop down list like SQL Server did. No matter your join the domain or not. You need to enter the server hostname, port and Service name manually.

Policy Based Routing with VPN Client configuration

Hi to all,
We have a Cisco 2800 router in our company that also serves as a VPN server. We use the VPN Client to connect to our corporate network (pls don't laugh, I know that it is very obsolete but I haven't had the time lately to switch to SSL VPN).
The router has two WAN connections. One is the primary wan ("slow wan" link with slower upload 10D/1U mbps) and it is used for the corporate workstations used by the emploees. The other is our backup link. It has higher upload speed - 11D/11U mbps, (fast wan), and thus we also use the high upload link for our webserver (I have done this using PBR just for the http traffic from the webserver). For numerous other reasions we can not use the `fast wan` connection as our primary connection and it is used anly as a failover in case the primary link fails.
The `fast wan` also has a static IP address and we use this static IP for the VPN Client configuration.
Now the thing is that because of the failover, when we connect from the outside using the VPN Client, the traffic comes from the`fast wan` interface, but exits from the `slow wan` interface. And because the `slow wan` has only 1mbps upload the vpn connection is slow.
Is there any way for us to redirect the vpn traffic to always use the `fast wan` interface and to take advantage of the 11mbps upload speed of that connection?
This is our sanitized config
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp client configuration group dc
key ***
dns 192.168.5.7
domain corp.local
pool SDM_POOL_1
acl 101
max-users 3
netmask 255.255.255.0
crypto isakmp profile sdm-ike-profile-1
   match identity group dc
   isakmp authorization list sdm_vpn_group_ml_1
   client configuration address respond
   virtual-template 1
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec profile SDM_Profile1
set security-association idle-time 3600
set transform-set ESP-3DES-SHA
set isakmp-profile sdm-ike-profile-1
interface Loopback0
ip address 10.10.10.1 255.255.255.0
interface FastEthernet0/0
description *WAN*
no ip address
ip mtu 1396
duplex auto
speed auto
interface FastEthernet0/0.3
description FAST-WAN-11D-11U
encapsulation dot1Q 3
ip address 88.XX.XX.75 255.255.255.248
ip load-sharing per-packet
ip nat outside
ip virtual-reassembly
interface FastEthernet0/0.4
description SLOW-WAN-10D-1U
encapsulation dot1Q 4
ip address dhcp
ip nat outside
ip virtual-reassembly
no cdp enable
interface FastEthernet0/1
description *LOCAL*
no ip address
ip virtual-reassembly
duplex auto
speed auto
interface FastEthernet0/1.10
description VLAN 10 192-168-5-0
encapsulation dot1Q 10
ip address 192.168.5.1 255.255.255.0
ip nat inside
ip virtual-reassembly max-reassemblies 32
no cdp enable
interface FastEthernet0/1.20
description VLAN 20 10-10-0-0
encapsulation dot1Q 20
ip address 10.10.0.254 255.255.255.0
ip access-group PERMIT-MNG out
ip nat inside
ip virtual-reassembly
!!! NOTE: This route map is used to PBR the http traffic for our server
ip policy route-map REDIRECT-VIA-FAST-WAN
no cdp enable
interface Virtual-Template1 type tunnel
ip unnumbered Loopback0
tunnel mode ipsec ipv4
tunnel protection ipsec profile SDM_Profile1
interface Virtual-Template3
no ip address
interface Virtual-Template4
no ip address
ip local pool SDM_POOL_1 192.168.5.150 192.168.5.152
ip forward-protocol nd
!!! SLOW-WAN NEXT HOP DEFAULT ADDRESS
ip route 0.0.0.0 0.0.0.0 89.XX.XX.1 5
!!! FAST-WAN NEXT HOP DEFAULT ADDRESS
ip route 0.0.0.0 0.0.0.0 88.XX.XX.73 10
ip nat inside source route-map FAST-WAN-NAT-RMAP interface FastEthernet0/0.3 overload
ip nat inside source route-map SLOW-WAN-NAT-RMAP interface FastEthernet0/0.4 overload
access-list 101 remark SDM_ACL Category=4
access-list 101 permit ip 192.168.5.0 0.0.0.255 any
access-list 101 permit ip 10.10.0.0 0.0.0.255 any
ip access-list extended FAST-WAN-NAT
permit tcp 192.168.5.0 0.0.0.255 range 1025 65535 any
permit udp 192.168.5.0 0.0.0.255 range 1025 65535 any
permit icmp 192.168.5.0 0.0.0.255 any
permit tcp 10.10.0.0 0.0.0.255 range 1025 65535 any
permit udp 10.10.0.0 0.0.0.255 range 1025 65535 any
permit icmp 10.10.0.0 0.0.0.255 any
ip access-list extended REDIRECT-VIA-FAST-WAN
deny   tcp host 10.10.0.43 eq 443 9675 192.168.5.0 0.0.0.255
permit tcp host 10.10.0.43 eq 443 9675 any
ip access-list extended SLOW-WAN-NAT
permit ip 192.168.5.0 0.0.0.255 any
permit ip 10.10.0.0 0.0.0.255 any
route-map FAST-WAN-NAT-RMAP permit 10
match ip address FAST-WAN-NAT
match interface FastEthernet0/0.3
route-map REDIRECT-VIA-FAST-WAN permit 10
match ip address REDIRECT-VIA-FAST-WAN
set ip next-hop 88.XX.XX.73
route-map SLOW-WAN-NAT-RMAP permit 10
match ip address SLOW-WAN-NAT
match interface FastEthernet0/0.4

Can you try to use PBR Match track object,
Device(config)# route-map abc
Device(config-route-map)# match track 2
Device(config-route-map)# end
Device# show route-map abc
route-map abc, permit, sequence 10
Match clauses:
track-object 2
Set clauses:
Policy routing matches: 0 packets, 0 bytes
Additional References for PBR Match Track Object
This feature is a part of IOS-XE release 3.13 and later.
PBR Match Track Object
Cisco IOS XE Release 3.13S
The PBR Match Track Object feature enables a device to track the stub object during Policy Based Routing.
The following commands were introduced or modified: match track tracked-obj-number
Cheers,
Sumit

Problems with exporting PWA views (grids in general) to Excel 2010 with Windows 8 + IE 10 as a client configuration

Hello,
I wondering if windows 8 + IE10 is a supported client configuration for PWA (Project Server 2010). I am unable to export PWA views to Excel 2010. No problems with Windows 7 + IE8/9
Any ideas?
thanks,
Daniel
Daniel Villacis

Hi,
We followed the below steps in the local machine and check the behavior.
a. Open the Windows registry editor (regedit.exe)
b. Go the location HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\excel.exe
c. Here, you’ll see a string value named “useURL”
d. Rename this value to something else. For example “useURLx”
Note: You might have to restart the machine to apply the registry change to take effect.

AW client configuration updates

Hi,
Any updates done from AW client (configuration manager) will be updated in Logger database. Right.?
So is there a way to backup the configuration data before user make any configuration changes.? So that we can backup the configuration data and restore in case of mishap by the ldap user.
Also please let me know what all the configuration changes an AW client can make.? (I mean to say what all the components an AW client can access.)
Thanks and Regards,
Karthik U R

With all due respect....
"AW client is nothing but AW Distributor in which you can restrict different admin access. Basically the access of AW client is subset of the access of AW distributor. It is done during the setup."
and...
"OK, So we can set the access level during client AW installation.
Also can we restrict the access,Right.?
like should not be able to access script editor, Instead can access only Agent list, Skill groups, team list .etc.. "
These statements are NOT accurate.
A client AW has all the ability to make configuration and script inserts, updates, or deletes as any other AW. You cannot set any such access during installation. It depends on who the USER is who's logged in to the machine, versus what the machine itself can or cannot do.
In order to restrict access, you'd need to create a read-only user, or use Feature Control Sets to limit what individuals can insert, modify, or delete.
As indicated though, you can use ICMDBA to export your known good, working configuration, such that if something catastrophic occurs, you can then re-import that data. This is non-trivial, however! You would need to bring your entire ICM/UCCE system down, import the config into the loggers and AWs, and then re-initialize it so the callrouter would come up with the 'old' copy of the configuration.

NT Client Configuration Updates

Running Zen 3.2. Policy packages NT client configuration does not have
tabs for the latest novell client. Is it possible to install / get
snapins that bright the Console one Policy package client configurations
up to date?

Shaun Pond has provided some Group Polcies for managing the client at cool
solutions.
http://www.zenworks.com
Craig Wilson
Novell Product Support Forum Sysop
Master CNE, MCSE 2003, CCNA
Editor - http://www.ithowto.com
(Seeking Full-Time Expert? Drop me a note :> )
<[email protected]> wrote in message
news:aBpff.4268$[email protected]..
> Running Zen 3.2. Policy packages NT client configuration does not have
> tabs for the latest novell client. Is it possible to install / get
> snapins that bright the Console one Policy package client configurations
> up to date?

Cross Client Configuration in SAP PM

Dear SAP PM Expert,
Can anybody tell me what are the cross client configuration in SAP PM?
Regards,
Rahmad

Hello,
As per my knowlodge suppose if any configuration changes made in PM in one client these changes will be automatically changed in other clients even if you are not intended to change in other client.

MI 7.0 Client configuration

Dear Gurus,
For MI 7.0 SPS 13+, up to which version of MaxDB is supported? If I install MaxDB and MI client by installation files (first MaxDB then MI client), is there any configuration (like parameters in the MI client configuration file) needed for the client to be connected with the MaxDB? If I want to create a setup package for installation of MI client and a MaxDB, can you tell me what are the usages for the configuration properties "MAXDB_DATA_DIR" and "MAXDB_DEPENDENT_PATH"?
another question:
I met an Internal Servlet Error with a Class Cast Exception as its root cause in the auto generated code for an MI client JSP file when trying to retrieve tableviewbean for the JSP pagecontext. What could be the reason for this error (since its generated code)?
Thanks indeed for you help!
Yong

This issue is solved... Was a SAP bug in MAM3.0. Note will come out soon...

MI Client configuration settings

Hi
While MI 2.5 Client configuration we have to give the following settings Please tell me where and how I can get them:
1. Client
2. Host
3. Port
4. System
Specify detailed path for each.

Dear Anzar,
1. Client -> You have to use the client of the middleware system(i.e. MI server) which you are connecting to the client.
2. Host -> You have to use the host of the middleware system.
(i.e. MI server).
3. Port ->You have to use the port number of the MI server.
4. System -> System ID of the MI server which the MI client is connecting to.
You can get the values for Client, Host and System by logging in to the MI server(middleware system) which the MI client is trying to connect to and going to
System -> Status . Here, you will find the information you require.
Incase you are using a old technology, calculate the port by the following formula: 50000+ (system no: *100) used. For eg: if the system no: is 06, then the value of the port used shoule be 50600.
If you are using new technology, then you can get the port used by going to SMICM transaction in the MI server -> Goto
-> HTTP server -> Display Data.
Hope this helps you.
Best Regards,
Sapna

SCCM and Windows Update Client Configuration

Hello,
I am in the process of migrating SCCM 2007 client over to a new SCCM 2012 R2 site.
I deleted the AD site from 2007 and added it to 2012 and the client is pushed via Client Push. The client upgrades fine and things go well but
I run into a little problem after the client is installed.
Basically it seems to be an issue with how SCCM interacts with and controls Windows Update settings on the SCCM client. I ran into a somewhat of a major issue that caused
all (or many) of the newly upgraded clients to go the internet to download updates from Microsoft shortly after the move from the 2007 site and client upgrade to 2012. This was because the client (or at least the ones I checked) had their WU settings to “Always
download and install” (or something similar). Obviously, expected behavior with this setting, but the question is how did it get this way?
Does SCCM control any of these settings? I know it take over the WSUS settings, etc, but I didn’t think it does anything with the WU client itself.
From my understanding the WU client settings are done via GPO (local or domain) or WU setting and SCCM does not control these settings.
I’m not looking for you to solve the problem, because it’s quite tedious, I’m just hoping that someone can lead me in the right direction to find out what if any WU settings
are controlled or changed by SCCM 2007 or 2012.
Thanks
Angelo
Angelo

Thanks for the extra info, Idan. I should probably admit that I am an AD admin and SCCM is handled by someone else in my department. My main issue with the LocalGPO is the Event 1096 corruption that causes all admin template settings to revert
to defaults - currently happening on over 100 workstations in our environment. 100% of these problems are caused by LocalGPO corruption and nothing else. And we will pursue resolution of this issue with Microsoft because we agree that resolving
this problem is the primary goal.
But for the sake of understanding: We don't have any non-domain members that need to be managed by SCCM. If we had a policy stating "no SCCM client configurations resulting in a LocalGPO file are to be implemented in production - all are
to be done via Domain Group Policy," is it possible to eliminate the LocalGPO entirely? Or will there always be a LocalGPO file regardless of whether or not there are settings visible from it in a gpresult report? We would not need to match
SCCM configurations in Domain Group Policy because we would not make any changes to the SCCM client resulting in a LocalGPO file at all. The slow link detection is not of concern to us because none of these settings that would not apply in this case
are SCCM-managed via LocalGPO (as far as I know):
http://blogs.technet.com/b/musings_of_a_technical_tam/archive/2012/02/27/gpos-and-slow-link-detection.aspx
Another reason why I would prefer to do these settings in Domain Group Policy is that we have Advanced Group Policy Management installed in our environment, which is subject to our Change/Release process. We can track the changes being made to clients
much more easily when they are done via AGPM. Any changes that we want to make via SCCM client could be tested first to see how LocalGPO is effected, and then those changes could be made via Domain Group Policy instead in production.
Given this info, I'm still struggling to understand why it is recommended to implement anything via SCCM client configurations resulting in a LocalGPO file. So far, the only compelling reason is that management of non-domain members is not possible
via Domain Group Policy, but that doesn't apply to our environment. Is it recommended mostly for ease of administration, so that an SCCM admin doesn't need to work with another tool (Domain Group Policy)? Any extra reasoning for this recommendation
that anyone can provide is much appreciated!

Client System Analyzer in cloud control 12c not showing successful client configuration

Hi,
        I am trying to test this feature i found lately in our new 12.1.0.2 deployment of oracle cloud control. When i navigate to Enterprise --> Configuration --> Client System Analyzer. I click on the example link https://servername:port/em/public/ecm/csa/CSA link. It shows that a configuration collection was successfully collected and data sent to the server. Before i continue explaining just to elaborate about we were getting that was causing file limit exceeded which i fixed by using the oracle support article 843903.1. I then try to navigate to Enterprise --> Configuration --> Client configurations. It shows nothing has been collected. Is there anything i am doing wrong is there any steps that i need to perform other than the start button on the "Client System Analyzer" page earlier as the documentation are not really clear about it.
Thank you for your help in advance.
Regards,
Fekrat

I tried that sql but that table does not exist what i believe you meant is this
select job_name, status, TO_CHAR(scheduled_time,'mm/dd/yyyy HH24:mi:ss'),TO_CHAR(start_time,'mm/dd/yyyy HH24:mi:ss' ),TO_CHAR(end_time,'mm/dd/yyyy HH24:mi:ss' ) from MGMT$JOB_EXECUTION_HISTORY where job_type = 'ExecLoaderCallbacks';
If so the following is the output:
JOB_NAME
STATUS
TO_CHAR(SCHEDULED_T TO_CHAR(START_TIME, TO_CHAR(END_TIME,'M
LO33_1378179753407934
Succeeded
09/03/2013 07:42:33 09/03/2013 03:42:34 09/03/2013 03:42:34
LO27_1376639476663634
Succeeded
08/16/2013 11:51:17 08/16/2013 07:51:21 08/16/2013 07:51:27
LO33_13786124337132089
Succeeded
09/08/2013 07:53:54 09/08/2013 03:53:57 09/08/2013 03:53:57
LO27_1376673272978723
Succeeded
08/16/2013 21:14:34 08/16/2013 17:14:34 08/16/2013 17:14:34
LO27_1376673265340722
Succeeded
08/16/2013 21:14:26 08/16/2013 17:14:28 08/16/2013 17:14:28
LO27_13770727997541614
Succeeded
08/21/2013 12:13:21 08/21/2013 08:13:26 08/21/2013 08:13:26
LO33_1378117698660717
Succeeded
09/02/2013 14:28:19 09/02/2013 10:28:20 09/02/2013 10:28:20
LO33_13784581794291645
Succeeded
09/06/2013 13:03:00 09/06/2013 09:03:01 09/06/2013 09:03:01
LO31_1377489274510369
Succeeded
08/26/2013 07:54:37 08/26/2013 03:54:39 08/26/2013 03:54:39
LO31_1377577050784606
Succeeded
08/27/2013 08:17:35 08/27/2013 04:17:36 08/27/2013 04:17:36
LO31_1377676276354848
Succeeded
08/28/2013 11:51:22 08/28/2013 07:51:23 08/28/2013 07:51:23
LO31_1377577042054605
Succeeded
08/27/2013 08:17:26 08/27/2013 04:17:27 08/27/2013 04:17:27
LO31_1377435582933160
Succeeded
08/25/2013 16:59:45 08/25/2013 12:59:47 08/25/2013 12:59:50
LO33_1378179745202933
Succeeded
09/03/2013 07:42:25 09/03/2013 03:42:27 09/03/2013 03:42:27
LO27_1376616934844544
Succeeded
08/16/2013 05:35:35 08/16/2013 01:35:35 08/16/2013 01:35:35
LO27_1376541682602342
Succeeded
08/15/2013 08:41:23 08/15/2013 04:41:23 08/15/2013 04:41:23
LO31_1377435595952161
Succeeded
08/25/2013 16:59:58 08/25/2013 12:59:58 08/25/2013 12:59:58
LO31_1377489266446368
Succeeded
08/26/2013 07:54:29 08/26/2013 03:54:30 08/26/2013 03:54:30
LO31_1377676267508847
Succeeded
08/28/2013 11:51:13 08/28/2013 07:51:16 08/28/2013 07:51:16
LO27_1376550603269403
Succeeded
08/15/2013 11:10:03 08/15/2013 07:10:06 08/15/2013 07:10:06
LO27_137638185761626
Succeeded
08/13/2013 12:17:38 08/13/2013 08:17:38 08/13/2013 08:17:38
LO27_1376452688482146
Succeeded
08/14/2013 07:58:08 08/14/2013 03:58:09 08/14/2013 03:58:09
LO27_1376559502205441
Succeeded
08/15/2013 13:38:22 08/15/2013 09:38:26 08/15/2013 09:38:26
LO27_137638187477127
Succeeded
08/13/2013 12:17:55 08/13/2013 08:17:59 08/13/2013 08:18:00
LO27_1376452696164147
Succeeded
08/14/2013 07:58:16 08/14/2013 03:58:21 08/14/2013 03:58:26
LO27_137638188237728
Succeeded
08/13/2013 12:18:03 08/13/2013 08:18:03 08/13/2013 08:18:03
LO27_137638193147729
Succeeded
08/13/2013 12:18:52 08/13/2013 08:18:56 08/13/2013 08:18:56
LO27_137639030867443
Succeeded
08/13/2013 14:38:29 08/13/2013 10:38:29 08/13/2013 10:38:30
LO27_1376558749646437
Succeeded
08/15/2013 13:25:50 08/15/2013 09:25:52 08/15/2013 09:25:52
LO27_1376639489381635
Succeeded
08/16/2013 11:51:30 08/16/2013 07:51:33 08/16/2013 07:51:33
LO27_1376541690283343
Succeeded
08/15/2013 08:41:30 08/15/2013 04:41:30 08/15/2013 04:41:30
LO27_13769840523511393
Succeeded
08/20/2013 11:34:14 08/20/2013 07:34:16 08/20/2013 07:34:16
LO27_1376426094291127
Succeeded
08/14/2013 00:34:55 08/13/2013 20:34:56 08/13/2013 20:34:56
LO27_1376558741936436
Succeeded
08/15/2013 13:25:42 08/15/2013 09:25:42 08/15/2013 09:25:42
LO29_1377280223716106
Succeeded
08/23/2013 21:50:23 08/23/2013 17:50:23 08/23/2013 17:50:24
LO27_1376550595608402
Succeeded
08/15/2013 11:09:56 08/15/2013 07:09:56 08/15/2013 07:09:56
LO33_1378144844469834
Succeeded
09/02/2013 22:00:45 09/02/2013 18:00:49 09/02/2013 18:00:49
LO27_137638193149230
Succeeded
08/13/2013 12:18:52 08/13/2013 08:18:56 08/13/2013 08:18:56
LO27_137638170201623
Succeeded
08/13/2013 12:15:02 08/13/2013 08:15:07 08/13/2013 08:15:07
LO27_137639123012146
Succeeded
08/13/2013 14:53:50 08/13/2013 10:53:53 08/13/2013 10:53:53
LO33_13786124427352090
Succeeded
09/08/2013 07:54:03 09/08/2013 03:54:04 09/08/2013 03:54:04
LO33_13784581884561646
Succeeded
09/06/2013 13:03:09 09/06/2013 09:03:10 09/06/2013 09:03:10
LO27_1376559502194440
Succeeded
08/15/2013 13:38:22 08/15/2013 09:38:26 08/15/2013 09:38:26
LO27_137639030071642
Succeeded
08/13/2013 14:38:21 08/13/2013 10:38:21 08/13/2013 10:38:22
LO27_137639122248845
Succeeded
08/13/2013 14:53:43 08/13/2013 10:53:43 08/13/2013 10:53:43
LO27_1376426086565126
Succeeded
08/14/2013 00:34:48 08/13/2013 20:34:50 08/13/2013 20:34:50
LO27_1376616926612543
Succeeded
08/16/2013 05:35:26 08/16/2013 01:35:30 08/16/2013 01:35:30
LO27_13769840435821392
Succeeded
08/20/2013 11:34:05 08/20/2013 07:34:05 08/20/2013 07:34:05
LO27_13770727907561613
Succeeded
08/21/2013 12:13:12 08/21/2013 08:13:15 08/21/2013 08:13:15
LO33_1378144852306835
Succeeded
09/02/2013 22:00:53 09/02/2013 18:00:54 09/02/2013 18:00:54
LO33_1378117707955718
Succeeded
09/02/2013 14:28:28 09/02/2013 10:28:29 09/02/2013 10:28:29

Office 2013 RMS Client Configuration - Your Machine is not setup for IRM

Hi All,
I have successfully setup a test AD RMS farm but stuck at trying to configure Office 2013 to work with this. The farm configuration is as below
DC: Windows 2003
AD RMS Server: Windows 2008/ SQL Server 2008 R2
Client: Windows 7 64 bit with Office 2013 32 bit, Domain Joined
Client is domain joined and SCP has been successfully registered ( I can see the SCP in AD RMS properties).
When I open word and select Protect Document -> Restrict Access, the only option is to Connect to RMS Server and get template, which eventually gives an error
Your Machine isn't setup for Information Rights Management (IRM). To set up IRM, sign in to office, open an existing IRM protected message or document, or contact your help desk.
Surprisingly, when I open a document protected by IRM (from a different machine), IRM is automatically configured for the user and starts working from that point. However any new domain user login into this client faces the same issue.
Can anyone help identify the required registry keys that need to be present for getting this working on the client.
Thanks for your help
Anuj

Hi Manoj,
To install Microsoft Deployment Agent, you must be a member of the Windows
Administrators security group on the computer where you will install it. You must also be a member of the
Release Manager role in Release Management.
From the log, the user you‘re using seems not in the local administrator group. Please make sure the corresponding users has the needed permissions to install the deployment agent. Please check this
page for more information about installation of deployment agent. If you have any other issues, please elaborate more details about your scenario.
Best regards,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

OSR 2way SSL client configuration in Weblogic

We've implemented 2way SSL in our Weblogic domains that host endpoints for use by OSB and OSR, using signed ( not self-signed! ) certificates. OSB works great and invokes the endpoints successfully over 2way SSL.
The problem is that OSR doesn't use the same security keystore / truststore as WebLogic. The Weblogic server hosting OSR is configured with the same keystore / truststore that the OSB server uses, and the OSR mgd server also has "Use Server Certs" enabled.
The OSR 10g server and the endpoint domain both use the same versions: Weblogic 10.3, using jrockit_160_05, both running on Linux 2.6.18-92.1.17.0.2.el5xen #1 SMP Tue Nov 18 04:11:19 EST 2008 i686 i686 i386 GNU/Linux on different hosts.
For one-way SSL, I imported ( with PStoreTool.sh ) the server certificate from the endpoints' domain into the registry's conf/pstore.xml & redeployed, and then OSR was able to trust the incoming server cert. That's been working great.
I'd like to have OSR submit the same certificate that OSB does so that OSR can act as a client in 2-way SSL. So I've used this:
# Get the server cert from the OSR WL server
sslTool.sh serverInfo url https://"OSR_HOST" certFile "OSR_HOST_FILE"
# Add it into extracted pstore
PStoreTool.sh new -alias "CN value" -keypassword ****t -config conf/pstore.xml -certFile "OSR_HOST_FILE"
# encrypt keypass
sslTool.sh encrypt --password *****
and added an entry in the registry.war's app/uddi/conf/security.xml of:
sslConnectionAlias>OSR_HOST</sslConnectionAlias>
sslConnectionPassword_coded>"output from sslTool encrypt"</sslConnectionPassword_coded>
But when trying to publish an https:// endpoint into OSR, I get an error in the OSR console of:
Invalid WSDL location! WSDLException: faultCode=INVALID_WSDL: Cannot get WSDL at 'https://...."'. Exception occured: javax.net.ssl.SSLHandshakeException: Received fatal alert: decrypt_error.
The OSR server logs shows this
ERROR: com.idoox.wsdl.xml.WSDLReaderImpl - javax.net.ssl.SSLHandshakeException: Received fatal alert: decrypt_error
ERROR: com.systinet.uddi.webui.WebUIRawService - Web Framework exception
EXCEPTION: com.systinet.uddi.webui.WebUIException: (18003) UDDI error occurred.
javax.servlet.ServletException: com.systinet.uddi.webui.WebUIException: (18003) UDDI error occurred.
In the weblogic endpoint domain, I get this error at the same time - after the OSR certificate has been presented:
<Sep 17, 2009 4:12:40 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <HANDSHAKEMESSAGE: CertificateVerify>
<Sep 17, 2009 4:12:40 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <Using JCE Cipher: SunJCE version 1.6 for algorithm RSA/ECB/NoPadding>
<Sep 17, 2009 4:12:40 PM EDT> <Debug> <SecuritySSL> <BEA-000000> <NEW ALERT with Severity: FATAL, Type: 51
java.lang.Exception: New alert stack
at com.certicom.tls.record.alert.Alert.<init>(Unknown Source)
at com.certicom.tls.record.handshake.HandshakeHandler.fireAlert(Unknown Source)
at com.certicom.tls.record.handshake.ServerStateReceivedClientKeyExchange.handle(Unknown Source)
at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown Source)
at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown Source)
For two-way SSL, what steps are needed? The documentation on PStoreTool only lists available commands, but not how they would be used to perform 2way ssl config.

After many, many, many iterations, I finally have an OSR that can import over 2way SSL.
So here are the steps I used ( variables in caps )
* Extract the conf/pstore.xml and app/uddi/conf/security/xml from registry.war
jar -xf conf/pstore.xml
jar -xf app/uddi/conf/security.xml
* Encrypt the password for later use:
PStoreTool.sh encrypt --password=OSR_PASS
( gives you an encrypted string )
* Edit the security.xml, add these lines:
<sslConnectionAlias>OSR_ALIAS</sslConnectionAlias>
<sslConnectionPassword_coded>encrypted_password</sslConnectionPassword_coded>
</security>
<destinationConfig>
<alias>OSR_ALIAS</alias> 
<password_coded>encrypted_password</password_coded>
<destination url="https://SERVICE_ENDPOINT/*"/> 
</destinationConfig>
* put security.xml back
jar -tf registry.war app/uddi/conf/security.xml
* import the OSR server's identity cert ( to use as a client cert in outbound 2way SSL
sslTool.sh serverInfo url https://OSR_HOST certFile ./OSR_HOST.cer
PStoreTool.sh add -config conf/pstore.xml -certFile ./OSR_HOST.cer
* If your OSR cert is signed, also import signer certs with PStoreTool as previous
* create a new user
PStoreTool.sh new -alias OSR_ALIAS -keypassword unencrypted_password -config conf/pstore.xml
* overwrite the user with the cert
sslTool.sh pstoreEI -i keystore /etc/java/OSR_IDENTITY_KEYSTORE.jks storepass *** alias *** keypass *** --pstore [REGISTRY_HOME]/conf/clientconf.xml pstoreAlias OSR_ALIAS pstoreKeypass OSR_PASS
sslTool.sh pstoreEI -i keystore /etc/java/OSR_IDENTITY_KEYSTORE.jks storepass *** alias *** keypass *** pstore conf/pstore.xml pstoreAlias OSR_ALIAS --pstoreKeypass OSR_PASS
* Put the pstore.xml back
jar -uf registry.war conf/pstore.xml
Stop your OSR server, undeploy the registry.war, remove the OSR managed server's tmp directory, redeploy and restart.
If you get "BAD_CERT" - you have a self-signed cert in pstore.xml that needs to be overwritten with your real cert from your OSR's identity jks
If you get "login failed" - you need to run the "PStoreTool new"

Client Configuration

Similar Messages

Maybe you are looking for