Detect Source of Bad Password from ADFS Server 2.0

Hi Folks,
I'm dealing with user who report AD account locked every 2-3 hour due to 5 times bad password. The security event log show that source of bad password is ADFS Server (W2K8R2). We advise her to update password in all active sync device and PC yet
the account still locked. how can i identify source of bad password for every device authenticate to ADFS? i have been working with this issue for 4 month and still have't find way to identify the source of bad password. Thanks and appreciate your help and
time.

Hiya,
You might be able to get a time indication in the ADFS logs first about a failed attempt due to wrong username or password. From that time indication, it would be easier to search firewall logs for additional details.

Similar Messages

Problems with loading source model using omw from sql server 7 into oracle 9i

I am migrating data from sql servr 7 into oracle 9i. when doing capture phase i get the following error.
==>failed to load source model.[microsoft][odbc sql server][sql server]select permission
denied on column 'password' of object 'syslogins', database master, owner dbo.
Why is this so...is it bcz of something with my odbc link...
also is there any way to load only tables and not system tables when doing capture phase.
any help asap will be much appreciated.
thanks

Hi,
You must ensure that you have the correct password to login to SQL Server.
The Workbench requires some of the tables in the Master database.
Regards
John

Can the source files be loaded from target server

Hi,
I have owb client on windows2000 and target on linux server. The current plan is to create runtime repository connection for the target and execute mapping from windows where the source files are located.
Is there way to put the source files on target server machine (there is no owb client install)? What's the best business practice regarding how the owb and source files are distributed? Thanks.
Tarcy

The problem is not the code or html.
This: "The Java Runtime Environment cannot be loaded from <\bin\server\jvm.dll>
indicates that you are attempting to run the server jvm, and it does not exist. This can be because either the java command option "-server" was used, or a configuration file setting.
As shipped by Sun, the JRE does not include the server jvm; the JDK does. If you want the server jvm in the JRE, copy the \server\ directory and contents from the JDK to the JRE.
If you installed using defaults,
copy from: C:\Program Files\Java\jdk1.5.0\jre\bin
copy to: C:\Program Files\Java\jre1.5.0\bin

How to send SAML response from ADFS server on web page

Hi
I have integarted ADFS and Orcale application for single sign on.
problem description: need SAML token on web page which published on application.
please tell me; how to set SAML response on web page defined on ADFS or what configuration required from ADFS side to send SAML response.
Regards
Kapil

This has a web app that will display claims. You could probably modify it for your needs.
http://blogs.technet.com/b/askpfeplat/archive/2013/12/23/how-to-build-your-adfs-lab-on-server-2012-part2-web-sso.aspx
Mark Morowczynski
Microsoft Senior Platforms PFE
Blog:
http://blogs.technet.com/b/askpfeplat Twitter:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Bad data from LinOPC server

I am working on a LabVIEW SCADA system which connects to a Eurotherm DCS using the LinOPC server. After startup, all tags with unchanging values (eg setpoints, booleans) return a default value and bad status in the (LabVIEW 7.1) tagengine. Once the value of the tag has changed (either from the DCS or by writting a value [if writeable] the status becomes good and the correct value is returned. I have tried changing the engine update parameters without success. Connecting to the tags in the LinOPC server using NIs Server Explorer produces similar results, but connecting using Eurotherm's iTools OPC Scope returns all values. Has anyone experienced this problem or know of a solution/work around?

Duplicate Post

SA PASSWORD from SQL Server Reports in TMG Threat Forefront Gateway

Dear friends.
I have a question and the technical support did not resolve it.
I need to know which is the SA password when you install the Forefront TMG because i need to made querys into the SQL Server management studio installed in the server.
Thankls

Hi,
AFAIK the SA password is controlled by TMG and the SQL authentication mode for MSFW is Windows authentication and for ISARS Mixed authentication, so you should be able to open the ISARS database with your Windows credentials that you use to administrate
Forefront TMG.
regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.galileocomputing.de/3570

Audio source for queue music. Source from Audio server?

UCCX 7.2 express enhanced
Can I some how source my wav file from a server or from Call Manager. The issue I am having is I have my wav files that are split inot 1 minute increments so I can count how many minutes it is and run a IF statement to play another menu.
Examlpe
Caller calls in and goes to queue
after one minute of queue music the caller hears "you are caller 1"
then the IF statement checks and sees how many seconds it has been
if it matches 3 minutes than plays a seperate menu
User chooses to stay in queu
Plays same one minute clip.
The issue is that same one minute clip is being played. what I would like is that it coninued to play the stream where it left off.
So I could just put in a 90 second MOH file but it still count as some of my places may want to check every minute and then they can choose to keep in queu or go to VM.
I added what I am talking about in the script as a attahcment

You could do something like this, set the hold music for the time alotment.
counter =0
START
Increment counter.
if counter = 1
Play Source wav
IF counter =2
play source wav
MENU OPTION
if counter <3
play source wav
MENU Options
HOLD MUSIC
DELAY 1 minute
END HOLD MUSIC
GOTO START

Decrypt the hashed password in SQL Server 2008

Hello all,
I have used HASHBYTES to decrypt the password of the user using SHA1, so now there is a requirement to decypt back the password to its original form,
for eg
Pass word is 'Jhon' so after applying HASHBYTES('SHA1','Jhon') it gices the output as "0xB13B42158655F36814F3C4541C6457F7CAD0F719"
Now i want back to get Jhon from the encypted value.
Please suggest an idea to do so.
Thanks for advance.
Pankaj Kumar Yadav-

To expand on what Dan says above, one can use pwdencrypt/pwdcompare from SQL but in a different context (http://stackoverflow.com/questions/173329/how-to-decrypt-a-password-from-sql-server).
The context would be more like the one that is used to determine whether your user passes a CORRECT password. In this case, the hash value saved in the database must be the same as the hash value of the password being passed in. In this
manner, while you can't decrypt, you can determine whether the user knows the password or not without storing the password. Not the best way to enable a password, but a workaround for sure. Similar to Dan's method above but may provide a bit more
detail as to the why's and wherefore's using the examples listed there.
R, J

Can I preserve carriage returns in a string variable from SQL Server?

I have an OLE data source that pulls data from sql server via a SELECT query. One of the fields is an NVARCHAR(max) which goes into a string variable which is later used in an expression. I am noticing that in the expression, carriage returns
/ line breaks in this field are being lost. Does anyone know how I can preserve these in the expression?

Thanks everyone for the suggestions. I am certain there are both \r and \n in the database as when I print the field and then copy/paste to textedit to show the hidden characters, I can see both the CR and LF's.
I have implemented a workaround that is by no means elegant, but it gets the job done.
I found that \r and \n will evaluate in an expression but if they are part of another string variable, SSIS escapes them. My workaround was to change my OLE_DB select statement (which fetches the custom SQL query) to explicitly change the hidden characters
to '\r' and '\n' respectively:
SELECT REPLACE(REPLACE([CUSTOM_SQL],char(13),'\r'),char(10),'\n')
Then, in my SSIS expression, I de-escaped these characters:
REPLACE(REPLACE(@[User::vAlertCustomSQL],"\\r","\r"),"\\n","\n")
Now when the expression is executed, the SQL is formatted correctly and oddly placed comments in the query no longer break the query.

Restoring saved password from deteled sync password

to my narrow knowledge that I deliberately remove synced password on my PC, so now on my laptop also gone. Luckily I have a backup portable firefox and in hope of restoring previous saved password.
But everytime I started a backup portable firefox it start to sync and my saved password instantly gone (deleted).
It does what it suppose to do, no mistake. But what I want is to restore my Saved Password from backup, overwrite deleted password in sync server. And finally my password are available in sync server.
Please advice.
Regards.

I'm not trying to backup anything, instead I'm trying to restore my saved password from backup firefox portable.
But everytime I Started my backup firefox portable (with saved password still intact in it) and connected to sync server, It start to delete every last password in it. (Because I previously delete password from sync server from firefox browser from the PC)
What I need is sync server to stop deleting my password or even restoring it with my backup firefox portable.

FIM CM Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)

Hi,
I am trying to install FIM Certificate management 2010. I am not able to access the CM Web portal. Whenever I login it shows the following error
Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)
This is the CM Log
1) Exception Information
Exception Type: System.Runtime.InteropServices.COMException
ErrorCode: -2147023570
Message: Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)
Data: System.Collections.ListDictionaryInternal
TargetSite: Void ThrowExceptionForHRInternal(Int32, IntPtr)
HelpLink: NULL
Source: mscorlib
StackTrace Information
at System.Runtime.InteropServices.Marshal.ThrowExceptionForHRInternal(Int32 errorCode, IntPtr errorInfo)
at Microsoft.Clm.Security.Principal.LoggedOnUser.Logon(String userName, String password)
"2014-04-16 02:48:50.98 -07" "Microsoft.Clm.Security.Principal.RevertToSelfContext"
"Microsoft.Clm.Security.Principal.RevertToSelfContext RevertIfImpersonating()"
"PCEDOMAIN\Administrator" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Reverting to the process identity
"2014-04-16 02:48:50.99 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Checking if PCEDOMAIN\Administrator is authenticated
"2014-04-16 02:48:50.99 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
True (is authenticated) PCEDOMAIN\Administrator
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.GlobalASAX"
"Boolean DoesResxFileExist(System.Globalization.CultureInfo)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
DoesResxFileExist
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.GlobalASAX"
"Boolean DoesResxFileExist(System.Globalization.CultureInfo)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Resx exists [C:\Program Files\Microsoft Forefront Identity Manager\2010\Certificate Management\web\App_GlobalResources\WebResources.en-US.resx] for culture: en-US? False
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.GlobalASAX"
"Boolean DoesResxFileExist(System.Globalization.CultureInfo)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
DoesResxFileExist
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.GlobalASAX"
"Boolean DoesResxFileExist(System.Globalization.CultureInfo)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Resx exists [C:\Program Files\Microsoft Forefront Identity Manager\2010\Certificate Management\web\App_GlobalResources\WebResources.en.resx] for culture: en? True
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.GlobalASAX"
"Void Application_BeginRequest(System.Object, System.EventArgs)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Web UiCulture: en-US. Web Culture: en-US
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.Authentication.CustomAuthenticationConfiguration"
"Microsoft.Clm.Web.Authentication.FilteredApplication MapPathToApplication(System.String)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Mapping path: [error.aspx]
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.Authentication.CustomAuthenticationConfiguration"
"Microsoft.Clm.Web.Authentication.FilteredApplication MapPathToApplication(System.String)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Path: [error.aspx] was not found in the configuration section.
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.Authentication.CustomAuthenticationModule"
"Void OnAuthenticate(System.Object, System.EventArgs)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Path: [error.aspx], filtered: False
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.Authentication.CustomAuthenticationModule"
"Void OnAuthenticate(System.Object, System.EventArgs)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Builtin Principal: System.Security.Principal.WindowsPrincipal, Identity: System.Security.Principal.WindowsIdentity
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.Authentication.CustomAuthenticationModule"
"Void OnAuthenticate(System.Object, System.EventArgs)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Builtin Identity Details:
Name: PCEDOMAIN\Administrator
IsAuthenticated: True
AuthenticationType: Negotiate
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Checking if PCEDOMAIN\Administrator is authenticated
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
True (is authenticated) PCEDOMAIN\Administrator
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.Web.Authentication.CustomAuthenticationModule"
"Void OnAuthenticate(System.Object, System.EventArgs)"
"" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Custom Identity Details:
Name: PCEDOMAIN\Administrator
IsAuthenticated: True
AuthenticationType: Negotiate
Ticket:
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"PCEDOMAIN\Administrator" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Checking if PCEDOMAIN\Administrator is authenticated
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"PCEDOMAIN\Administrator" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
True (is authenticated) PCEDOMAIN\Administrator
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"PCEDOMAIN\Administrator" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Checking if PCEDOMAIN\Administrator is authenticated
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"PCEDOMAIN\Administrator" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
True (is authenticated) PCEDOMAIN\Administrator
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"PCEDOMAIN\Administrator" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Checking if PCEDOMAIN\Administrator is authenticated
"2014-04-16 02:48:51.01 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"PCEDOMAIN\Administrator" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
True (is authenticated) PCEDOMAIN\Administrator
"2014-04-16 02:48:51.03 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"PCEDOMAIN\Administrator" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
Checking if PCEDOMAIN\Administrator is authenticated
"2014-04-16 02:48:51.03 -07" "Microsoft.Clm.BusinessLayer.UserIdentity"
"Boolean get_IsAuthenticated()"
"PCEDOMAIN\Administrator" "PCEDOMAIN\clmWebPool"
0x000014F8 0x00000004
True (is authenticated) PCEDOMAIN\Administrator
Thanks

On Wed, 16 Apr 2014 10:15:55 +0000, Priyesh92 wrote:
I am trying to install FIM Certificate management 2010. I am not able to access the CM Web portal. Whenever I login it shows the following error
Logon failure: unknown user name or bad password. (Exception from HRESULT: 0x8007052E)
1. Make sure that you've got all of the required Kerberos delegation
settings and SPNs setup correctly.
2. Make sure that you've added the portal to Trusted Sites in IE and that
you configure the security settings to for Trusted Sites to log on
automatically.
3. Make sure that you have the password for the CLMWebPool account set
correctly.
Paul Adare - FIM CM MVP
But these are not inherent flaws in [NT]. They are the result of deliberate
and well-thought-out efforts. -- M$ Spokesweenie

Just upgraded to Lion an am discovering that I cannot send email photos from within iPhoto. Error message says bad Internet connection or server not working, when that's not the case. Never happened in Snow Leopard! Help!!!

Just upgraded to Lion an am discovering that I cannot send email photos from within iPhoto. Error message says bad Internet connection or server not working, when that's not the case. Never happened in Snow Leopard! Help!!!

what email service - Yahoo mail have been acting up lately
you can try setting Mail as your email client - it resolves this pfoblem for some people
LN

How do I resolve this problem: This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required

When attempting to log in to the web site the following message is received. This web site works
on other systems using Firefox.
This server could not verify that you are authorized to access the document requested. Either you supplied the wrong credentials (e.g., bad password), or your browser doesn't understand how to supply the credentials required.
Additionally, a 401 Authorization Required error was encountered while trying to use an ErrorDocument to handle the request.
== URL of affected sites ==
http://www.mdyc.org/members_only

You may have saved a bad password so Firefox is entering that rather than giving you the option to try again. Go to Tools > Options > Security > Saved Passwords and delete the saved passwords for that site and then try logging in again.

How-to access username and password protected Java EE Web services from ADF

The title of this post is exactly the same as this article by Frank Nimphius:
http://www.oracle.com/technology/products/jdev/howtos/1013/protectedws/access_protected_web_services_from_adf.htm
The article addresses the problem of securing web services using usernames and passwords, when those web services are accessed through a proxy or a data control. In the examples, the user names and passwords are specified, whether in the code or the definition of data controls. (SKING/SKING).
In a very common scenario, users login to reach a page, for example, A.jspx, which contains a button that calls a web service, for example displayDate. Suppose that user has logged in by username/pass of (AHUNOLD/AHUNOLD) and AHUNOLD has access to the service and the page. Is there any way to pass the logged in user name and password to the webservice ? Of course we can hard-code the username in the data control definition or proxy code, but this is just one of the thousands of users who have access to the service and the authentication is not dynamic this way.
Hope my question is clear. Wishing you all a great Christmas.
Farbod

Hi Frank, and happy new year.
Are you implying that it couldn't be done declaratively? What is your suggestion for this problem? You know the problem... As I described:
- I need to secure my web services, so when exposed, no one from inside network or the internet, can access the web service without proper permission
- The web services are shown as web controls on jspx pages. The user has logged in before reaching the page. It is irrelevant to ask him to enter user name and password again.
- I have user names, passwords and roles in Oracle Internet Directory (Identity Management). It provides some APIs and I can retrieve the usernames and attempt logging in programmically. But how can I get username and password from the session in ADF application?
I guess using SAML or certificate could be the solution, but I have a problem with SAML, described here:
Re: Webservices Security, SAML, and Identity Management (OID)
Best Regards,
Farbod

Retrieve already deployed webdynpro for java source code from portal server

HI ,
We have webdynpro for java apllication already deployed on the J2EE server. We found the ear file related to this application. But I am not able to make any changes to the ear file in NWDS as it cannot be directly imported into NWDS. We do not have NWDI for software logistics and the resource who built the WDJ application has left the company. Is there any way that I can retrieve the complete source code of the application from the portal. I need to make some changes to Webdynpro component and its view. I have worked with basis team to retrieve the ear file from portal server. But I could not make any progress just with the ear file. Thank you for your help in advance
Regards,
KMM.

You are probably breaking some license agreement by de-compiling the content of the 'war' files. Why not ask the people who provided the 'war' file if you could have the source and build system.

Detect Source of Bad Password from ADFS Server 2.0

Similar Messages

Maybe you are looking for