Configuring an access/console server

Hey there,
I'm configuring an access/console server.
I configured aliases for my devices.
cp-ext-s1             telnet 192.168.41.11 2011
cp-ext-s2             telnet 192.168.41.11 2012
cp-ext-r1             telnet 192.168.41.11 2013
cp-ext-r2             telnet 192.168.41.11 2014
But when I do a sh session, the host column is an ip address but I want this to be the device name.
I tried adding a few ip host commands:
ip host cp-dmz-s1 2010 192.168.41.11
ip host cp-ext-r1 2013 192.168.41.11
But that didn't help.
CP-CS1#sh ses
Conn Host                Address             Byte Idle Conn Name
   1 192.168.41.11       192.168.41.11        153    36 192.168.41.11
   2 192.168.41.11       192.168.41.11        155    33
* 3 192.168.41.11       192.168.41.11        181     8
CP-CS1#
I'm sure I'm overlooking something stupid.

can you post the complete config of the console server or verify your settings with this doc:
http://www.cisco.com/en/US/tech/tk801/tk36/technologies_configuration_example09186a008014f8e7.shtml

Similar Messages

Minimum configuration to access the server

Hi,
What is the minimum configuration(RAM and etc.,) we should have to access the SAP AutoId, SAP XI and ECC server?
Note: SAP AutoId, XI and ECC all installed in one server.
Regards
Sara

Hi Sara,
So many components on the same machine itself.
Go with atleast 4 GB.

I need helping!!! configuring RDP access to my local server from a remote location on my Cisco ASA 5505 Firewall.

I need helping configuring RDP access to my local server from a remote location on my Cisco ASA 5505 Firewall.
I have attempted to configure rdp access but it does not seem to be working for me Could I please ask someone to help me modify my current configuration to allow this? Please do step by step as I could use all the help I could get.
I need to allow the following IP addresses to have RDP access to my server:
66.237.238.193-66.237.238.222
69.195.249.177-69.195.249.190
69.65.80.240-69.65.80.249
My external WAN server info is - 99.89.69.333
The internal IP address of my server is - 192.168.6.2
The other server shows up as 99.89.69.334 but is working fine.
I already added one server for Static route and RDP but when I try to put in same commands it doesnt allow me to for this new one. Please take a look at my configuration file and give me the commands i need in order to put this through. Also please tell me if there are any bad/conflicting entries.
THE FOLLOWING IS MY CONFIGURATION FILE
Also I have modified IP information so that its not the ACTUAL ip info for my server/network etc... lol for security reasons of course
Also the bolded lines are the modifications I made but that arent working.
ASA Version 7.2(4)
hostname ciscoasa
domain-name default.domain.invalid
enable password DowJbZ7jrm5Nkm5B encrypted
passwd 2KFQnbNIdI.2KYOU encrypted
names
interface Vlan1
nameif inside
security-level 100
ip address 192.168.6.254 255.255.255.0
interface Vlan2
nameif outside
security-level 0
ip address 99.89.69.233 255.255.255.248
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
ftp mode passive
dns server-group DefaultDNS
domain-name default.domain.invalid
object-group network EMRMC
network-object 10.1.2.0 255.255.255.0
network-object 192.168.10.0 255.255.255.0
network-object 192.168.11.0 255.255.255.0
network-object 172.16.0.0 255.255.0.0
network-object 192.168.9.0 255.255.255.0
object-group service RDP tcp
description RDP
port-object eq 3389
object-group service GMED tcp
description GMED
port-object eq 3390
object-group service MarsAccess tcp
description MarsAccess
port-object range pcanywhere-data 5632
object-group service MarsFTP tcp
description MarsFTP
port-object range ftp-data ftp
object-group service MarsSupportAppls tcp
description MarsSupportAppls
port-object eq 1972
object-group service MarsUpdatePort tcp
description MarsUpdatePort
port-object eq 7835
object-group service NM1503 tcp
description NM1503
port-object eq 1503
object-group service NM1720 tcp
description NM1720
port-object eq h323
object-group service NM1731 tcp
description NM1731
port-object eq 1731
object-group service NM389 tcp
description NM389
port-object eq ldap
object-group service NM522 tcp
description NM522
port-object eq 522
object-group service SSL tcp
description SSL
port-object eq https
object-group service rdp tcp
port-object eq 3389
access-list outside_1_cryptomap extended permit ip 192.168.6.0 255.255.255.0 object-group EMRMC
access-list inside_nat0_outbound extended permit ip 192.168.6.0 255.255.255.0 192.168.0.0 255.255.0.0
access-list inside_nat0_outbound extended permit ip 192.168.6.0 255.255.255.0 object-group EMRMC
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 host 99.89.69.334 eq pcanywhere-data
access-list outside_access_in extended permit udp 69.16.158.128 255.255.255.128 host 99.89.69.334 eq pcanywhere-status
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 host 99.89.69.334 object-group RDP
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq ftp
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq ldap
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq h323
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq telnet
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 eq www
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 host 99.89.69.334 object-group SSL
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 object-group NM522
access-list outside_access_in extended permit tcp 69.16.158.128 255.255.255.128 192.168.6.0 255.255.255.0 object-group NM1731
access-list outside_access_in extended permit tcp 173.197.144.48 255.255.255.248 host 99.89.69.334 object-group RDP
access-list outside_access_in extended permit tcp any interface outside eq 3389
access-list outside_access_in extended permit tcp host 66.237.238.194 host 99.89.69.333
access-list outside_access_in extended permit tcp host 66.237.238.194 host 99.89.69.333 object-group rdp
access-list outside_access_in extended permit tcp any host 99.89.69.333 object-group rdp
access-list out_in extended permit tcp any host 192.168.6.2 eq 3389
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-524.bin
no asdm history enable
arp timeout 14400
global (outside) 1 interface
nat (inside) 0 access-list inside_nat0_outbound
nat (inside) 1 0.0.0.0 0.0.0.0
static (inside,outside) tcp 99.89.69.334 3389 192.168.6.1 3389 netmask 255.255.255.255
static (inside,outside) tcp interface 3389 192.168.6.2 3389 netmask 255.255.255.255
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 99.89.69.338 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
http server enable
http 192.168.6.0 255.255.255.0 inside
http 0.0.0.0 0.0.0.0 outside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto map outside_map 1 match address outside_1_cryptomap
crypto map outside_map 1 set peer 68.156.148.5
crypto map outside_map 1 set transform-set ESP-3DES-MD5
crypto map outside_map interface outside
crypto isakmp enable outside
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash md5
group 1
lifetime 86400
crypto isakmp policy 30
authentication pre-share
encryption 3des
hash md5
group 2
lifetime 86400
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
tunnel-group 68.156.148.5 type ipsec-l2l
tunnel-group 68.156.148.5 ipsec-attributes
pre-shared-key *
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
service-policy global_policy global
prompt hostname context
Cryptochecksum:f47dfb2cf91833f0366ff572eafefb1d
: end
ciscoasa(config-network)#

Unclear what did not work. In your original post you include said some commands were added but don't work:
static (inside,outside) tcp interface 3389 192.168.6.2 3389 netmask 255.255.255.255
and later you state you add another command that gets an error:
static (inside,outside) tcp 99.89.69.333 3389 192.168.6.2 3389 netmask 255.255.255.255
You also stated that 99.89.69.333 (actually 99.89.69.233, guessing from the rest of your config and other posts) is your WAN IP address.
The first static statement matches Cisco's documentation, which states that a static statement must use the 'interface' directive when you are trying to do static PAT utilizing the IP address of the interface. Since 99.89.69.333 is the assigned IP address of your WAN interface, that may explain why the second statement fails.
Any reason why you are using static PAT (including the port number 3389) instead of just skipping that directive? Static PAT usually makes sense when you need to change the TCP port number. In your example, you are not changing the TCP port 3389.

How to configure the Access Server?

Hi All
I am in the process of migrating from 11.0.1 to 12.0.
I have some real-time jobs.
For this I need to configure the Access Server.
I can understand I should do this from Server Manager>Edit Access Server Config>Add
Here what info we need to give? Does it mean we need to give the server name on which current version is installed? How to choose the port?
My old version DI 11.0.1 is using port 4000. Also in the DS Mgmt Console, I am defaultly getting the Old Job Server in the Adapter Config node. How to remove this?
Someone plz help me on this.
Thank You
Ganesh Sampath

You have to explicitly share directories on external/secondary volumes.
Use the Server admin app to configure file sharing, and select which directory/directories on the second drive you want to share, then they'll be available to clients.

An issue while Configuring the Access System Console

I'm facing a problem while Configuring the Access System Console.
I have installed the policy manager, and when I try to configure the access system, an error message appears "The environment variable TEMP points to a directory that does not exist. To avoid any unexpected behavior, please make sure it points to the correct directory and restart the web server".
I have checked the temp system variable, and it was correct, and the directory already exist.
Note: I'm working on windows server 2003.
I really appreciate any help with this issue.

Check the permissions on the directory that the TEMP variable points to, to ensure that everyone has read/write access to it - maybe that's the problem.
Regards,
Colin

How do I configure snow leopard server to allow local client to access the server using its public domain name

I have SLS 10.6 running on my local network with DNS configured.
I can access the server from a client on the lan using server.local or server.domain where domain name is my publically registered domain,
From the internet I can access my server using the registered domain name i.e. www.domain.com.
Is it possible to set my server up so that www.domain.com also reaches the server when used by a client locally? At present I get a page not found error.

The configuration you're aiming for is called split-horizon or split-brain DNS, and it's quite possible. It can get slightly hairy when you have different stuff using the same host name for different purposes, for instance, and you'll need to track all external DNS entries in your internal DNS server when you're running "split".
Here is how to set up DNS services. Split-horizon is one of the options listed there.
My preference is to use a different domain or subdomain within the network, and to avoid using split-horizon where I can reasonably manage it. One domain name is configured for and reachable outside and is effectively public, and the other domain (or a subdomain) is inside and private and only reachable directly or via VPN, for instance.

Kerberos Configuration Manager for SQL Server: Access of system information failed!

I'm trying to use the new Kerberos Configuration Manager for SQL Server tool that was released recently to verify SPN on several SQL Servers, but any time I attempt to connect to a server I get the following error in the log:
6/24/2013 3:48:22 PM Info: Connect to WMI, \\<HOSTNAME>\root\cimv2
6/24/2013 3:48:25 PM Error: Access of system information failed System.DirectoryServices.AccountManagement.PrincipalOperationException: An error (1332) occurred while enumerating the group membership. The member's SID could not be resolved.
at System.DirectoryServices.AccountManagement.SAMMembersSet.IsLocalMember(Byte[] sid)
at System.DirectoryServices.AccountManagement.SAMMembersSet.MoveNextLocal()
at System.DirectoryServices.AccountManagement.SAMMembersSet.MoveNext()
at System.DirectoryServices.AccountManagement.FindResultEnumerator`1.MoveNext()
at System.Linq.Enumerable.Contains[TSource](IEnumerable`1 source, TSource value, IEqualityComparer`1 comparer)
at KerberosCM.WMIHelper.isUserLocalAdmin(SystemInfo si, UserPrincipal user)
at KerberosCM.WMIHelper.getUserInfo(SystemInfo mi)
6/24/2013 3:48:25 PM Error: Error System.Exception: Access of system information failed!
at KerberosCM.WMIHelper.getUserInfo(SystemInfo mi)
at KerberosCM.SystemInfo.GetInfo()
at KerberosConfigMgr.Utility.Login(String serverName, String login, String password, Boolean isCmdLine, Form uiForm)
Things I have tried to resolve this:
1. Verified that my account is a Domain Admin.
2. Attempt to connect locally without inputting any information for server/user/pw
3. Attempt to connect remotely using server/user/pw
I always receive the same error message and log: Access of system information failed!
Has anyone else run into this issue?

Update to this:
There were some invalid user accounts added to the Local Administrators group only showing up as a GUID. This caused the enumeration of the group to fail and generate the error in my original post. Removing those user accounts from the Administrators group
got past the enumeration error.
However, now when attempting to connect to the servers (locally or remotely) I get this error:
6/27/2013 10:24:24 AM Info: Connect to WMI, \root\cimv2
6/27/2013 10:24:38 AM Error: Access of system information failed System.Runtime.InteropServices.COMException (0x80070035): The network path was not found.
at System.DirectoryServices.DirectoryEntry.Bind(Boolean throwIfFail)
at System.DirectoryServices.DirectoryEntry.Bind()
at System.DirectoryServices.DirectoryEntry.get_AdsObject()
at System.DirectoryServices.PropertyValueCollection.PopulateList()
at System.DirectoryServices.PropertyValueCollection..ctor(DirectoryEntry entry, String propertyName)
at System.DirectoryServices.PropertyCollection.get_Item(String propertyName)
at System.DirectoryServices.AccountManagement.SAMStoreCtx.ResolveCrossStoreRefToPrincipal(Object o)
at System.DirectoryServices.AccountManagement.SAMMembersSet.MoveNextForeign()
at System.DirectoryServices.AccountManagement.SAMMembersSet.MoveNext()
at System.DirectoryServices.AccountManagement.FindResultEnumerator`1.MoveNext()
at System.Linq.Enumerable.Contains[TSource](IEnumerable`1 source, TSource value, IEqualityComparer`1 comparer)
at KerberosCM.WMIHelper.isUserLocalAdmin(SystemInfo si, UserPrincipal user)
at KerberosCM.WMIHelper.getUserInfo(SystemInfo mi)
6/27/2013 10:24:38 AM Error: Error System.Exception: Access of system information failed!
at KerberosCM.WMIHelper.getUserInfo(SystemInfo mi)
at KerberosCM.SystemInfo.GetInfo()
at KerberosConfigMgr.Utility.Login(String serverName, String login, String password, Boolean isCmdLine, Form uiForm)

[Help: Urgent] problems with accessing /console after apparent successful install of Portal server SP3.0sp3a

Hi,
HW: Sun Solaris 2.8
I would really appreciate it you can cc: me if you can shed any light
as
to whats going wrong, and what I should do to fix the following
problem.
Portal server doesn't allow one to access /console (or /login) -
0 length document is returned.
We find the following in the enterprise server error log, when we
attempt
to access portal console (URI: http://....:8080/console)
1) Installed SP3.0sp3a as Open Portal, i.e without the gateway and
without
SSL enabled.
2) Our Unix users are served using YP
***From the server access logs : ***
- - [16/Nov/2001:15:12:40 -0800] "GET /login HTTP/1.0" 503 0
***From the server error logs : ***
[16/Nov/2001:14:11:27] info ( 4639): successful server startup
[16/Nov/2001:14:11:27] info ( 4639): iPlanet-WebServer-Enterprise/4.1SP7
BB1-04/05
/2001 18:30
[16/Nov/2001:14:11:28] info ( 4639): Loading Simple Session Manager by
default. Sp
ecify MMapSessionManager in servlets.properties to load persistent
session manager
[16/Nov/2001:14:11:28] info ( 4639): SimpleSessionManager: Default
values for maxi
mum number of sessions is 1000 with a time out value of 1800 seconds
[16/Nov/2001:14:11:28] info ( 4639): SimpleSessionManager: Maximum
number of sessi
ons (1000) with a time out value of (1800) seconds
[16/Nov/2001:14:12:40] info ( 4639): Internal Info: loading servlet
login
[16/Nov/2001:14:12:41] info ( 4639): Internal Info: loading servlet
pllservice
[16/Nov/2001:14:12:41] info ( 4639): pllservice: init
[16/Nov/2001:14:12:42] failure ( 4639): Internal error: exception thrown
from the
servlet service function (uri=/login): java.lang.NullPointerException,
stack: java
..lang.NullPointerException
at
com.iplanet.portalserver.auth.service.AuthD.printProfileAttrs(Compiled
Code)
at
com.iplanet.portalserver.auth.service.AuthD.<init>(AuthD.java:160)
at
com.iplanet.portalserver.auth.service.AuthD.getAuth(AuthD.java:171)
at
com.iplanet.portalserver.auth.service.LoginServlet.doGetPost(Compiled C
ode)
at
com.iplanet.portalserver.auth.service.LoginServlet.doGet(LoginServlet.j
ava:990)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:701)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:826)
at
com.netscape.server.http.servlet.NSServletRunner.Service(NSServletRunne
r.java:507)
, root cause:
Many thanks for your responses on this.
Tarang Kumar Patel. WWW home:http://ic-www.arc.nasa.gov/ic/
NASA Ames Research Center, MS 269-2, Moffett Field, CA 94035-1000
Email: [email protected], Tel:(650) 604-4721 fax: (650) 604
3594
Stated views are my own IDEA, as I'm another I.D.E.A man "I Didn't
Explain All"

Just one more thing:
I made the following setting in platform.conf
ips.debug=on
Now, the trace I see on the STDOUT/STDERR stream reveals :
Received RequestSet XML : <?xml version="1.0" standalone="yes"?>
<RequestSet vers="1.0" svcid="profile" reqid="2">
<Request sid="qxcuekwwdrcfwubmmwuip82764q94o37r67n@[email protected]@8080@z
repvc"><![CDATA[<ProfileService ver="1.0" reqid="0"><GetProfile searchFlag="false"
admin="false"><Profile profileName="mercip/authentication" profileType="9"><Priv p
rivName="iwtSession-addSessionListenerOnAllSessions"/></Profile></GetProfile></Prof
ileService>]]></Request>
</RequestSet>
---->NEED TO FILL APPSHASH -----
getProfile.walktree
321^iwtSession-addSessionListenerOnAllSessions-pv
com.iplanet.portalserver.profile.service.ProfileServiceException: 321^iwtSession-ad
dSessionListenerOnAllSessions-pv
at java.lang.Throwable.fillInStackTrace(Native Method)
at java.lang.Throwable.fillInStackTrace(Compiled Code)
at java.lang.Throwable.<init>(Compiled Code)
at java.lang.Exception.<init>(Exception.java:42)
at com.iplanet.portalserver.profile.service.ProfileServiceException.<init>(
ProfileServiceException.java:47)
at com.iplanet.portalserver.profile.service.ProfileService.walkTree(Compile
d Code)
at com.iplanet.portalserver.profile.service.ProfileService.getProfile(Compi
led Code)
at com.iplanet.portalserver.profile.service.ProfileService.processProfileRe
quest(ProfileService.java:134)
at com.iplanet.portalserver.profile.service.ProfileService.processRequest(P
rofileService.java:123)
at com.iplanet.portalserver.profile.service.ProfileService.process(Compiled
Code)
at com.iplanet.portalserver.pll.server.PLLRequestServlet.handleRequest(PLLR
equestServlet.java:139)
at com.iplanet.portalserver.pll.server.PLLRequestServlet.doPost(Compiled Co
de)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:733)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:826)
at com.netscape.server.http.servlet.NSServletRunner.Service(NSServletRunner
.java:507)
ProfileResponse: exception key:321
ProfileResponse: exception string:iwtSession-addSessionListenerOnAllSessions-pv
ProfileResponse.toXMLString:method id is 0
Sent ResponseSet XML : <?xml version="1.0" standalone="yes"?>
<ResponseSet vers="1.0" svcid="profile" reqid="2">
<Response><![CDATA[<ProfileService vers="1.0" reqid="0"><Exception>321^iwtSession-a
ddSessionListenerOnAllSessions-pv</Exception></ProfileService>]]></Response>
</ResponseSet>
ProfileResponse: exception key:321
ProfileResponse: exception string:iwtSession-addSessionListenerOnAllSessions-pv
ProfileUtils.getProfileResponse: Response content <ProfileService vers="1.0" reqid=
"0"><Exception>321^iwtSession-addSessionListenerOnAllSessions-pv</Exception></Profi
leService>
Profile Error:
Invalid attribute or privilege name
com.iplanet.portalserver.session.SessionException: Invalid attribute or privilege n
ame
at java.lang.Throwable.fillInStackTrace(Native Method)
at com.iplanet.portalserver.session.SessionException.<init>(SessionExceptio
n.java:30)
at com.iplanet.portalserver.session.Session.addSessionListenerOnAllSessions
(Session.java:642)
at com.iplanet.portalserver.session.Session.addSessionListenerOnAllSessions
(Session.java:502)
at com.iplanet.portalserver.auth.service.AuthD.<init>(AuthD.java:112)
at com.iplanet.portalserver.auth.service.AuthD.getAuth(AuthD.java:171)
at com.iplanet.portalserver.auth.service.LoginServlet.doGetPost(Compiled Co
de)
at com.iplanet.portalserver.auth.service.LoginServlet.doGet(LoginServlet.ja
va:990)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:701)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:826)
at com.netscape.server.http.servlet.NSServletRunner.Service(NSServletRunner
.java:507)
Authd Profile Attributes
cookieDomains
cookieName->iPlanetPortalServer
authHost:authPort->........:8080
authProto->http
authHostIP->.....
authHostURL->http://.......:8080/login/default
Lets hope this helps

Access-SQL Server (Client Server Configuration) Best Way To Refresh SQL Server Records ?

We are using Access 2013 as the front end and SQL Server 2014 as the back end to a client server configuration.
Access controls are bound to the SQL fields with the same names. When using Access to create a new record in a Form, the data are not transferred to SQL if the form is exited to display a different Form or Access is closed. If the right or left arrow navigation
buttons at the bottom of the form are first used to display either the previous or next record, then the data in the new record are correctly transferred to SQL.
What is the best way to refresh the new SQL record prior to the closing of the new record in the bound Access form ? We have tried Requery of the entire form and with all of the individual controls without success. We are looking for a method of refreshing
SQL that functions in a manner similar to that of what happens with the navigation buttons.
Thank you very much for your assistance.
Robert Robinson
RERThird

Hi Stefan,
I had added the code to set me.dirty = False in response to the On Dirty event and didn't realize that it was working properly. I had tried other several approaches and must have become confused somewhere along the line.
I retested the program. On Dirty is working and the problem is solved.
Thank you very much for your assistance.
Robert Robinson
RERThird

How can I configuration MBean in weblogic server using the console ?

How can I configuration MBean in weblogic server using the console ?
I hear people talking about mbeans in weblogic server I have look in the console I can not find where , or how to do it.
can some body explain that or a link that explain it, how to do it on the console ?

Hi,
Registering Custom MBeans from Admin Console is not yet possible. But yes there are ways to Configure and Utilize Custom MBeans ...
http://weblogic-wonders.com/weblogic/2010/02/16/registering-and-invoking-custommbeans/
Thanks
Jay SenSharma

Trying to configure a Win 2003 Server to use TLS server authentication . . .

I am trying to
configure a Win 2003 Server to use TLS server authentication following Method 2 in KB 895443 - see below:-
Method 2: By using the Certificate Request Wizard
The following steps describe how to obtain a certificate from a Windows Server 2003 Certification Authority. You can also request a certificate from a Windows 2000
Certification Authority. Additionally, you must have Read permissions and Enroll permissions on the certificate template file to successfully request a certificate. Use this method if one or more of the following conditions are true:
You want to request a certificate from an Enterprise Certification Authority.
You want to request a certificate that is based on a template where the subject name is generated by Windows.
You want to obtain a certificate that does not require administrator approval before the certificate is issued.
To obtain a certificate, follow these steps:
Click Start, click Run, type mmc, and then click OK.
On the File menu, click Add/Remove Snap-in.
Click Add, click Certificates, and then click Add.
Click Computer account, and then click Next.
If you want to add a certificate to the local computer, click Local computer. If you want to add a certificate to a remote computer, click Another
computer, and then type the name of that remote computer in the Another computer box.
Click Finish.
In the Add Standalone Snap-in dialog box, click Close, and then click OK in the Add/Remove
Snap-in dialog box.
Under Console Root, click Certificates (Local Computer).
Note If you configured the Certificates MMC snap-in to manage a remote computer, click Certificates (servername)instead of Certificates (Local Computer).
On the View menu, click Options.
In the View Options dialog box, click Certificate purpose, and then click OK.
In the right pane, right-click Server Authentication, point to All Tasks, and then click Request New Certificate.
In the Certificate Request Wizard that starts, click Next.
In the Certificate types list, click Server Authentication, click to select the Advanced check box,
and then click Next.
In the Cryptographic Service Providers list, click Microsoft RSA SChannel Cryptographic Provider.
I get as far as step 11 and I get the error message:-
The wizard cannot be started because of one or more of the following conditions:
- There are no trusted certification authorities (CAs) available.
- You do not have the permissions to request certificates from the available CAs.
- The available CAs issue certificates for which you do not have permissions.
This is covered in KB 927066 – see below:-
To resolve the problem, follow these steps:
Verify that the CERTSVC_DCOM_ACCESS group exists in the domain that hosts the certification authority. This group is in the CN=Users container.
To do this, follow these steps:
Click Start, click Run,
type Dsa.msc, and then click OK.
In the left pane, click the Users container.
Verify that the CERTSVC_DCOM_ACCESS group is in the right
pane. If the CERTSVC_DCOM_ACCESS group is not in the right pane, go to step 4.
Verify that the CERTSVC_DCOM_ACCESS group includes the following member groups:
Domain Users
Domain Computers
If these member groups do not exist in the CERTSVC_DCOM_ACCESS group, go to step 4.
Note If users or computers in other domains need to enroll against the certification authority, you must also add those users and computers to the CERTSVC_DCOM_ACCESS group. If the current problem occurs on a domain
controller, you must also add the Enterprise Domain Controllers group to the CERTSVC_DCOM_ACCESS group. By default, domain controllers are not members of the Domain Computers global group. Therefore, domain controllers
do not have sufficient DCOM permissions.
Verify that the CERTSVC_DCOM_ACCESS group has the appropriate DCOM Access permissions and DCOM Launch and Activation permissions on the computer that hosts the certification
authority.
Click Start, point to Program,
point to Administrative Tools, and then click Component Services.
Expand the Component Services node.
Expand the Computers node.
Right-click the My Computer node, and
then click Properties.
Click the COM Security tab.
Under Access Permission, click Edit
Limits.
Verify that the CERTSVC_DCOM_ACCESS group has Allow Local Access and Allow
Remote Access permissions, and then click Cancel.
Under Launch and Activation Permissions, click Edit
Limits.
Verify that the CERTSVC_DCOM_ACCESS group has Allow Local Activation and Allow
Remote Activationpermissions, and then click Cancel.
Click Cancel, and then close the Component
Services console.
Settings may be incorrect if any one of the following conditions is true:
The CERTSVC_DCOM_ACCESS group does not exist.
The default membership of the CERTSVC_DCOM_ACCESS group is incorrect.
The CERTSVC_DCOM_ACCESS group does not have the correct permissions.
If any one setting is incorrect, run the following commands at a command prompt. Press ENTER after each command.
certutil -setreg SetupStatus -SETUP_DCOM_SECURITY_UPDATED_FLAG
net stop certsvc
net start certsvc
Repeat steps 1 through 3 to verify that all the settings are correct.
Note If the changes affect the group membership of the certification authority server, you must restart the server for the changes to take effect.
The only part of the above instructions which I have not been able to complete is:-
“you must also add the Enterprise Domain Controllers group to the CERTSVC_DCOM_ACCESS group”.
When I click on the CERTSVC_DCOM_ACCESS user then click the Members tab & go to add Enterprise Domain Controllers the option is not there.

Hi Nick,
Have you successfully set up an enterprise CA?
If yes, is the enterprise CA’s certificate located under the Trusted Root Certification Authorities store?
Best Regards,
Amy

Can't access Portal Server

Hi,
After installation of JSE(Windows Version),
I can access the identity admin console with url
http://host:port/amconsole
But I can't use the url
http://host:port/portal or
http://host:port/portal/dt
to access Portal Server Desktop, the browser
receive an 500 Internal Error Message.
The summary report after installation is
Installation Summary Report
Install Summary
Sun Java System Message Queue 3.0.1 Service Pack 2 : Installed, Configured
Sun Java System Application Server 7 Update 1 : Installed, Configured
Sun Java Studio Enterprise 6 2004Q1 : Installed, Configured
Sun Java System Web Server 6.1 Service Pack 1 : Installed, Configured
Sun Java System Directory Server 5.2 : Installed, Configured
Sun Java System Identity Server 6.1 : Installed, Configured
Sun Java System Portal Server 6.2 : Installed, Configured
PolicyAgent: Installed, Configured
It seems nothing wrong, and how can I solve
this problem?
Many thanks,

So, you got Java SE installed. Great. (I've been following your other thread re: installing IS and PS properly).It's not exactly right. I try to use Windows 2000 to install JES and with the same DNS configuration.
It works. But I still can't install IS/PS correctly in the original machine(Win XP).
Check the troubleshooting info in the Java SE Install Guide, I believethis error is covered in there. Be sure you use a new instance of your browser to access the PS desktop. And, be sure to check the supported browser list in the Release Notes.
I go through the overall Install Guide, it's really that I can't find and answer to solve my problem :'(
Regards,

3620 Console Server - Double Auth issues....

Hi,
I have a 3620 with a NM-32A cabled to numerous Cisco consoles with CAB-OCTAL-ASYNC cable to each console port.
CONSOLE SERVER:
interface Ethernet1/0
ip address 192.168.10.180 255.255.255.224
no ip directed-broadcast
ip host SWITCH4 2001 192.168.10.180
line 1 32
session-timeout 20
no exec
exec-timeout 0 0
transport input telnet
transport output pad v120 telnet rlogin udptn
SWITCH4:
aaa authentication login default local-case
aaa authorization exec default local
username user password Pass
enable secret SECRET
line con 0
exec-timeout 0 0
transport preferred telnet
CONSOLE#teln SWITCH4
Trying SWITCH4 (192.168.10.180, 2001)... Open
User Access Verification
Username: user
Password:<Pass>
This times out....I then auth again and sometimes get in, sometimes not. Same behaviour across 4 out of 13 devices (so far).....!!
Has anyone had similar problems?
Thanks,
Mark

Mark
I suggest, as an experiment, that you remove this line from the config and see if the behavior improves:
aaa authorization exec default local
I do not see that this is doing much for you (at least in the small amount of configuration that you posted) and potentially could cause symptoms such as you describe. If the behavior does improve you might leave it out or you might change it to this:
aaa authorization exec default if-authenticated
HTH
Rick

Unable to Access SQL Server 2005 Remotedly

Not sure if this is the right forum to post this...
After going through lot of old posts in various forums and changing lot of settings, i'm still not able to access my Server remotely.
This is Windows 2003 Server machine with Sonicwall Firewall, i have allowed Port 1433 in both Firewall and ISA and call is getting through but i'm getting following error msg :-
{"An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections. (provider: SQL Network Interfaces, error: 26 - Error Locating Server/Instance Specified)"}
This machine is also having Sql Server 2000, and the SQL Server 2005 is installed with named instance.
My connection string is :-
"Data Source=192.168.0.1\MYSERVER;Initial Catalog=MyDatabase;Integrated Security=True"
In example above, i'm showing dummy values but actual string is having the actual live IP address and correct named instance and database.
If i use a local address like 192.168.0.1 then i'm able to connect.
My TCP/IP Address in Sql configuration is having my Live IP Address and the port 1433.
Any help will be highly appreciable..

i'm still checking on this. i have changed the port now to 1434 and changed in all places.
my connection string is also changed now, so now i'm using :- MYIP\MYSERVER,1434
now i'm getting a different error msg
{"An error has occurred while establishing a connection to the server. When connecting to SQL Server 2005, this failure may be caused by the fact that under the default settings SQL Server does not allow remote connections. (provider: TCP Provider, error: 0 - A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.)"}
this can also be due to firewall or something else is blocking it, i will rechk n post back final answer.

How can i access dmz server via public ip from inside?

hi all !
As shown in Figure，how can i access the server in dmz zone via public？
i can access it via private ip 192.168.1.1 now,but i can't access it via 101.100.1.2.
who can help me ?
thank you !

Hi,
You would have to configure Static NAT from DMZ to INSIDE for the server in the same way you have done for DMZ to OUTSIDE.
Basically in the following way for example
object network DMZ-WEB
host 192.168.1.1
nat (dmz,inside) static 101.100.1.2
This would enable your users on the "inside" to access the "dmz" server with the public IP address. And naturally only with the public IP address after this NAT.
Hope this helps
Please do remember to mark a reply as the correct answer if it answered your question.
Feel free to ask more if needed
- Jouni

Configuring an access/console server

Similar Messages

Maybe you are looking for