Disabling NAC HA from service perfigo

Hi,
The primary CAM is no longer reachable by Web Console. An error appears while booting.
The problem has occured after high availability activation.
The error message is:-
Starting perfigo: Starting High-Availability services:
2009/07/22_15:08:12 CRITICAL: Resource 10.x.x.x is active, and should not be!
2009/07/22_15:08:12 CRITICAL: Non-idle resources can affect data integrity!
2009/07/22_15:08:12 info: If you don't know what this means, then get help!
2009/07/22_15:08:12 info: Read the docs and/or source to /usr/lib64/heartbeat/ResourceManager for more details.
CRITICAL: Resource 10.x.x.x is active, and should not be!
I just wonder if there is a way to stop H/A from service perfigo, since the web access is no longer working.
Thanks

Hi,
I just managed to restore the system and Web Console Access using using CLI /perfigo/dbscripts
Thanks

Similar Messages

Can't run service perfigo config command on NAC

I have a new NAC Manager server for a fresh deployment. I logged in using root password with a serial connection to the server.
I can't seem to be able to run the "service perfigo config" command to perform the initial CAM configuration.
[root@nacmanager /]# service perfigo start
perfigo: unrecognized service
[root@nacmanager /]#
Any idea what might be the problem?
Thanks in advance.

What is happening when you are booting from a CD where NAC ISO is installed on it?
Usually, during boot, you should receive a installer welcome message:
Cisco Clean Access 4.8.2 Installer (C) 2011 Cisco Systems, Inc.
Welcome to the Cisco Clean Access Installer!
- To install a Cisco Clean Access device, press the key.
- To install a Cisco Clean Access device over a serial console, enter serial at the boot prompt and press the key.
boot: serial
You can type serial if you are connected through console, after that it will check for existing installations and will ask you if you need to install a NAC Manager or Server:
Please choose one of the following configurations:
1) CCA Manager.
2) CCA Server.
3) Exit.
You choose 1 or 2 depending on the server type. The software will install and the server will reboot.
After the reboot, you login as root and automatically the configuration utility will launch by itself and you will set the basic parameters:
CentOS release 5.3 (Final)
Kernel 2.6.18-128.1.10.el5PAE on an i686
nacmanager login: root
Welcome to the Cisco Clean Access Manager quick configuration utility.
Note that you need to be root to execute this utility.
The utility will now ask you a series of configuration questions.
Please answer them carefully.
Cisco Clean Access Manager, (C) 2011 Cisco Systems, Inc.
Configuring the network interface:
Please enter the IP address for the interface eth0 []: 172.30.1.1
You entered 172.30.1.1 Is this correct? (y/n)? [y]
etc......
Hope this helps.
Regards,

Disabling NAC from 802.1x wired access authentication

Hi all,
I would like to disable NAC policy control from my ACS 4.0.
I would like only 802.1x AAA on my switch ports.
Also I'd like to assign a different VLAN to different MAB devices by RADIUS user attribute, in order to differentiate vlan for printers, clocks and so on.
can anybody help me or suggest me a document for ACS 4.0?
Thanks
Johnny

Hello,
I would like to disable NAC policy control from my ACS 4.0.I would like only 802.1x AAA on my switch ports.
Not sure what you mean by this... Can you egive more details about it?
Also I'd like to assign a different VLAN to different MAB devices by RADIUS user attribute, in order to differentiate vlan for printers, clocks and so on.
For this, you can separate the different devices per user groups, ie have one group for the printers, another for clocks, etc.
Then you can configure each group with the needed RADIUS attributes to do vlan assignment:
- 64 Tunnel-Type => VLAN
- 65 Tunnel-Medium-Type => 802
- 81 Tunnel-Private-Group-ID => "Vlan number"
I hope this helps.
Best regards,
Bernardo

Nac Service perfigo wont start

Hi Guys,
i just want to know how to stop Disk Watch in NAC, because when i was trying to start perfigo, it will appear
"Disk Watch Manager is already running. Please stop it before starting."
Thanks

Hi Robert
this appliance has working previously with HA.
I restarted perfigo service at the same time both active/standby because ADSSO service suddenly stopped.
The active appliance restart normally, but service perfigo on standby unit wont start and gave me this result :
[root@xxx ~]# service perfigo start
Disk Watch Manager is already running. Please stop it before starting.
Starting High-Availability services:
[ OK ]
Please wait while bringing up service IP.
Heartbeat service is running.
Service IP [10.xx.x.x] is not on peer or the Heartbeat link is broken.
Stopping High-Availability services:
[ OK ]
Please check IP configuration and Heartbeat link.
Starting manager in administrative mode.
i tried to restart standby unit with or without HA connected, but same result as above, i think its because i must stop disk watch manager first before i start the perfigo
any advise how?
thanks

Is there a way to disable push mail from Yahoo? It's draining my battery

I'm on the prepaid plan and every 10-15 minutes my iphone turns on with a "The last transaction cost $0.00" message. I don't mind the message (although it is a bit annoying) but my problem is that this turns the LCD on for about 2 minutes at a time.
I charged my battery to 100% last night, haven't used it at all today and after just turning it on a few minutes ago I had the "Your battery life is at 10%" message followed by a 5% remaining message a few minutes later.
I've heard that it's the yahoo push mail service thats causing the phone to give the message (since it connects to the internet). My Yahoo account is my main one and I'd hate to have to login to yahoo's site each time to check it (the email functionality was a big selling point for me with the iphone). ATT/Apple don't seem to want to disable this message/"Feature", so I'm guessing I would need to step in and do something on my end.
Is there any way to disable yahoo mail from "pushing" messages to my phone? I can hit the Check Mail button if I have to.

Hi Everyone,
To give an update on the situation: I disabled the Yahoo account and it seems to make a VERY NOTICEABLE difference in battery life - prior to this my battery would drain quite rapidly but since disabling it it's only lost about 15-20% over the past 24 hours (and thats with using the video/music/internet functions for about an hour and a half).. Prior to this it would have been close to drained under the same circumstances.
Also, to confirm, the "Your last transaction cost 0.00" messages only appear when accessing the internet manually now. before they appeared every 10-15 minutes with no interaction from myself at all (while it was sitting idle, while watching videos, while charging, while in my pocket, etc..)
I do have it set to only check Manually but Yahoo would seem to check on it's own even though this setting is checked (I'm guessing it has to do with the Push setting). Aside from draining the battery, it was quite annoying having 30 or so "Your transaction cost $0.00" messages to click through whenever I turned on the phone.
I did have the screen set to shut off after 1 min, but the 'your transaction cost..' messages would first wake the iphone up, the screen would stay bright for about 30 seconds, dim for about 30 seconds, then turn on bright again for 1 minute until it shut off. I'm guessing the screen (being on for about 10-15 minutes per hour due to this) and the fact that yahoo accesses the internet on such a frequent basis are what cut the battery life down.
I really wish I could make Yahoo work more like Gmail and have it manually search for new mail

Disable the Remote Management Service?

I know this is "Why would anyone want to do this" question but we are having conflicting issues in one of our labs between NetSupport and Zenworks when trying to run Adobe Flash. NetSupport is a tool that quite a few of our lab teachers use, it gives them the ability to see all of there students screens, take control of them, and a few other features, all from a console that runs on the teacher machine.
The problem comes in when running Flash if the student tries to create a text box and scroll inside of it then the computer crashes. We contacted NetSupport for help with this and they had us run a reporting tool that looked at the hardware setup and driver information. Then they setup a test machine and tried to replicate the problem and they were not able to. However they tech did note that in the scan of the machine there could be a conflicting issue between NetSupports Mirror Driver and DemoForge TightVNC Mirror Driver. I assumed the latter was part of Zenworks remote management. So we stopped the remote management service on a machine and tried to replicate the problem. We did not encounter the problem so we turned the remote management service back on and sure enough as soon as we tried to replicate the problem again the machine crashed.
Now when we tried to disable the remote management service in the services menu but it will not stay disable as soon as the machine restarts the remote management service is running and its set to automatic again.
Is there anyway to disable (preferable) or remove just the remote management piece with out removing the rest of the client from the machines?
Thanks,
Mike

You can configure this in the ZCC for which components you want
installed. You can deselect Remote Management.
Note: You can also disable or remove the Mirror Driver from the Devices
Control Panel under Display Drivers and it will not come back.
On 1/13/2012 2:36 PM, mshicks wrote:
>
> I know this is "Why would anyone want to do this" question but we are
> having conflicting issues in one of our labs between NetSupport and
> Zenworks when trying to run Adobe Flash. NetSupport is a tool that quite
> a few of our lab teachers use, it gives them the ability to see all of
> there students screens, take control of them, and a few other features,
> all from a console that runs on the teacher machine.
>
> The problem comes in when running Flash if the student tries to create
> a text box and scroll inside of it then the computer crashes. We
> contacted NetSupport for help with this and they had us run a reporting
> tool that looked at the hardware setup and driver information. Then they
> setup a test machine and tried to replicate the problem and they were
> not able to. However they tech did note that in the scan of the machine
> there could be a conflicting issue between NetSupports Mirror Driver and
> DemoForge TightVNC Mirror Driver. I assumed the latter was part of
> Zenworks remote management. So we stopped the remote management service
> on a machine and tried to replicate the problem. We did not encounter
> the problem so we turned the remote management service back on and sure
> enough as soon as we tried to replicate the problem again the machine
> crashed.
>
> Now when we tried to disable the remote management service in the
> services menu but it will not stay disable as soon as the machine
> restarts the remote management service is running and its set to
> automatic again.
>
> Is there anyway to disable (preferable) or remove just the remote
> management piece with out removing the rest of the client from the
> machines?
>
> Thanks,
> Mike
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Best way to disable a user from authing against ldap?

We have a need to be able to disable users in out ldap server (Sun-ONE-Directory/5.2_Patch_2 B2004.107.0034).
We are using msging and cal server together with Access manager and Comms express.
Setting the inetUserStatus to inactive stops users logging into the comms express etc but we are now having a few remote services that are authenticating against ldap by binding as the user. This works regardless so disabled users can login to certain things.
Whats the recommended way of temporarily disabling an account? We can't just change the password as we would need to restore it when the account it reenabled. Is there something easy to prevent the user binding? (something easy to undo again!).
Cheers,
Darren

I found that if I use JNDI to set nsaccountlock to true, it does disable the user from authorizing. However, it also makes the Custom Editor unable to re-activate that user. You can press the "Activate" button, and it will tell you the user has been activated, but if you check the nsaccountlock, it will still be set to true. However, one can still use Generic Editor to delete the nsaccount lock to re-activate the user.
In order for the Custom Editor to be able to reactivate the user, the user must be in the nsManagedDisabledRole. If you add the "cn=nsmanageddisabledrole,<larger context>" to the users nsroledn attribute, then the ldap automatically sets the nsaccountlock value to true.
And if you later delete the nsaccountlock value, the ldap will automatically remove the nsManagedDisabledRole from the user's nsRoleDn.
Tricky stuff,
Christa

Disabling Fill & Sign from automatically opening

According to the 11.0.09 updates, Reader will automatically open the Fill & Sign pane when fields are present. I do not like this new default feature and have not found an easy option for disabling.
From the update page, it looks like I should be able to edit my registry to completely disable that pane from the user interface. While completely disabling is not ideal, I find it better to the alternative of always having it pop up.
However, when navigating to the following registry path:
HKLM’s cServices\bEnableSignPane set to 0 removes the Fill & Sign Pane from the user interface. (full path being HKLM\Software\Policies\Adobe\Acrobat Reader\11.0\FeatureLockDown\)
I do not see a cServices folder. I've run a search on my entire registry and cannot find where this folder nor its key is held. The only subfolders all begin with cDefault...
How can I disable this setting? And is there a plan to give the end user the option to disable this pane from automatically popping up in the future?
Thanks for any help.

Hi;
Tuning Acrobat/Reader is really designed for an IT department and not manually by an end user. The key needs to be created and then the machine restarted to take effect. Here is an article on preferences for IT departments which gives more information on complete registry/plist paths: 5 Preference Basics — Enterprise Administration Guide
I tried it out and it worked fine, on my machine however the FeatureLockDown was in the 32bit location even though it is a 64bit machine...
Just a note, the "Fill & Sign" panel in Adobe Reader XI is not the same as the online service "Adobe Fill & Sign", it is the name of the Tools panel in Adobe Reader for filling and signing forms.
Thanks,
Josh

Disable link Internal goods/Service in SRM 7.0

Hi,
We are working on SRM 7.01 implemetation and wants to know how to diable few links in shopping cart screen.
1. Disable link Internal goods/Services on wizard shopping cart screen.
2. Diable link Limit shopping cart in Professional shopping cart.
Thanks,
Kumar

You can make it invisible for all the users by enhacing the ABAP webdynpro component.
Please follow the below steps:
1) Goto T.code SE80 in SRM system
2) Select Web dynpro comp./intf from the dropdown and give the value '/SAPSRM/WDC_DODC_SC_GAF_C' and press enter
3) Now Double click on '/SAPSRM/WDCC_FPM_SC_GAF_C' under Component configuration
4) Now Click on start configurator button on right hand screen
5) A Internet explorer window will open 'Editor for the Web Dynpro ABAP Component Configuration'
6) Click on change and give the Transport number and select the 'Web dynpro Built-in' tab
7) Drill down the Element name and search your element which is Internal under SC_LINK_CONTAINER and make it 'Invisible'
8) Save the data in IE after making the changes.
To find out the Webdynpro component for any screen
1) Right Click on screen
2) More field help
Please let me know for any issue.
Thanks,
Ankur

Lead as Follow up document from Service Contract

Hi Experts,
There is a requirement to create Service Lead from Service Contract. I dont think there is something different by name Service Lead so i assume it is Standard Lead which is present in system.
I maintained the copy control for Tx. Types and as well as for Item Categories.
Issue:
If i create a Service Contract and create a follow up Lead with no items, it works fine.
Suppose i use an item (sales/service item), and i try to create a follow up Lead, the resulting pop-up to choose items from preceding document shows and error and the item doesnot get coped and displays an error, 'Sold-to-Party is not eligible for contract items'.
Has anyone come across this issue?
Thanks and Regards,
MG

Hi Maggii,
1. Is it possible to create a Lead from Service Contract? Does the system allow it even after maintaining relevant copy control configurations?
A.Yes, it is possible while arranging of copy controls for transactions need to activate u201CCopy Item numberu201D.
2.What does the error message, 'Sold to party not eligible for contract items' mean....have u ever seen such error?
A. Means, the particular sold to party is not maintained for that contract (for trail check with any maintained sold to party for that error message), cross check the contract again under in partner functions.
If it is suits to your requirement please some reward points,
Thanks,
Suuny.

How to cancell PO from Service Entry sheet

Hi,
We have many open service Purchase orders in the system(More than 1800) and we would like to cancell these PO's as business dont need the service.
Scenario:
We have raised PR, which is approved by multi level approvals
After PR is approved, PO is created again approved by multi level approvals
Now 1% of the above PO's required to be cancelled which is almost aroung 1800 in number.
Pls note that we have Funds management active, so budget has consumed in the system during PR/PO process.
Now if we cancel PO's then even PR's also to be cancelled which is very lengthy process, Is there any other way to do this.
Can we do anything from service entry sheet?
Regards,
Sunil

Hi Sameer
I don't think you can close the PO from ML81N without posting some form of service receipt.
Do you have any experiences with the mass maintenance transactions?
After reading some of the discussions below I would suggest you use the MEMASSPO transaction to set the deletion indicator on each PO item (EKPO-LOEKZ) to "L". Running transaction MASS for business object will get you to the same functionallity.
There is also a MEMASSRQ transaction (or MASS for business object BUS2105) which you can use to quickly set the closed indicator for the corresponding requisition lines.
This doc http://scn.sap.com/docs/DOC-25758 written by Parag Parikh should help if you don't have any experience.
Regards
Robyn

The windows of the Windows bar are already a form of tabs, so I don't need them in Firefox. How can I disable them completely from Firefox 23?

RE: TABS ARE WINDOWS!
The Windows bar already functions as a tab bar. Those tabs are called "windows." So, I find Firefox tab windows superfluous. How can I disable them completely from Firefox 23? I don't need what is essentially TWO windows bars covering up the entire width of my widescreen monitor's image! I already have a Windows bar at the bottom of my screen and, if I really wanted to, I could change ITS position to the top of the screen, so that it would LOOK like the Firefox tab windows bar. Firefox TABS are, essentially, a superfluous SECOND WINDOWS BAR.
Here are my reasons for why I'd rather use Mozilla's Firefox, than Microsoft's Internet Explorer or Google's Chrome. I love and admire Firefox for Mozilla's intent on good security, for Firefox's Personas add-on, and for Firefox's free use of the Ad-Block add-on which, as you know, has the distinct virtue of reducing screen clutter--the last of which is my motive for wanting to get rid of the SUPERFLUOUS Firefox tabs "windows" bar. I am dreadfully sick of companies forcing miscellaneous bars (mostly representing marketing campaigns trying to sell me something) into my browser (and down my throat) every time I download something. (In case you haven't guessed, I am deliberately referring to your Firefox tabs bar as a "Firefox tabs 'windows' bar," because TABS are WINDOWS!)

Let me clarify even more. The Firefox add-on you mention does not remove "tabs" windows. It only HIDES the "tabs" bar when there is only one "tab" in that window. It DOES NOT end "tabs." It does not turn "tabs" off.
I know this, because, even with the add-on you recommend, the "tabs" bar often re-appears when I open a link, which--for some unknown reason--Firefox defaults to opening in a second "tab" within the same window, rather than putting it in a new Windows bar window. This, of course, disregards what I want to happen.
I want to use my Windows bar to control my windows. I do not want my Firefox browser controlling my windows--which it calls "tabs." Can you tell me how to shut off "tabs?"

Can I disable an Ipod from ITunes/Other Questions

Hi all! I am new to this forum and to using IPods/ITunes, so I am still trying to learn as much as I can about them. I made the mistake of getting my very irresponsible young teenage son an IPod (Gen 3) Touch. I have asked him several times to hand the device over to me so I can review the browser’s history (I am not even sure if that is possible, but I was going to try). I am I have major concerns regarding the websites he may be visiting. I am not trying to violate his privacy, but if it was a problem showing me the device - why won’t he hand it over - so that raised some major red flags.
So...my questions are:
Can I disable the device from ITunes? Or can I just delete the device from my ITunes Account? Would he still be able to use it?
I think I found a place on ITune where there was a place I could pick what parental controls that I wanted, I set those up - but I found this feature after he started hiding the device? Can this feature still work remotely without syncing?
Is there a way to view the browsing and internet history on the device (even if he would delete it)?
I am not sure if this would make a difference or not to answer my question, but when I had to set up the ITunes account, I did have to provide credit card information to start the account.
I do have my daughter’s new IPod (Gen 4) Touch also linked to the same ITunes account.
One more thought...can I just delete the ITunes account totally and start a new one for my daughter? Would this disable his device?
Again, I am very new to using an IPod. I can get around using them (and selecting the correct features) with a little direction though.
Thanks for your help and advice in advance it is very very appreciated!
-SD

Can I disable the device from ITunes?
Not without being able to connect the iPod to the computer, no.
Or can I just delete the device from my ITunes Account? Would he still be able to use it?
See above.
I think I found a place on ITune where there was a place I could pick what parental controls that I wanted, I set those up - but I found this feature after he started hiding the device? Can this feature still work remotely without syncing?
The parental controls feature in iTunes only works for iTunes, not for a portable device. There are similar restrictions on the iPod, but those can only be set on the iPod itself.
Is there a way to view the browsing and internet history on the device (even if he would delete it)?
No, sorry, if he clears the history, there's no way to view it.
can I just delete the ITunes account totally and start a new one for my daughter?
You can start a new one, but that won't affect any existing accounts. You can change the password on the iTunes Store account he's been using. That would block him from being able to purchase any new content through that account. But you can't stop him from opening up a new iTunes Store account by using a prepaid iTunes card, available from almost any grocery store.
Would this disable his device?
No.
Without being able to have the iPod in your hands, the only way you can affect it would be if you had set up the Find My iPod feature before giving the iPod to your son. If you had, you could then lock the iPod or wipe the data on it. Otherwise, there's nothing you can do until he gives you his iPod, at which time you could set up the Restrictions and, if you wish, download a web browser that allows you to set site restrictions and force him to use that browser.
Regards.

How can I disable new messages from rotating?

Hi All,
My apologies if this has already been answered. I'm using Messages on my Macbook. I am trying to find if there is a way to disable new chats from moving above old chats. The way it works now, I use Messages for work, and when I have 3 people messaging me at once, the messages keep doing a musical chairs back and forth switch.
I've looked through all of the settings and have not found anything. Let me know if I'm explaining this poorly and I'll try and communicate it better.
Thanks for any help you guys can provide.
Derrick

HI,
Which bit is not working ?
The bit that sort them Manually ?
Or the bit that you can't change that always puts new ones at the top ?
8:10 pm Monday; September 22, 2014
 iMac 2.5Ghz i5 2011 (Mavericks 10.9)
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb (Snow Leopard 10.6.8)
 Mac OS X (10.6.8),
 Couple of iPhones and an iPad

How can I disable a JInternalFrame from being "restored"?

Sorry, I thought I should start a new thread for a new question.
With my JInternalFrame, I have it minimized initially when it is created. Now, how can I prevent the user from opening or "restoring" that frame? Basically, I just want the "title" bar to appear, and disable the frame from opening up.
thanks

try this
import java.awt.Dimension;
import java.beans.PropertyVetoException;
import javax.swing.JButton;
import javax.swing.JDesktopPane;
import javax.swing.JFrame;
import javax.swing.JInternalFrame;
import javax.swing.*;
import java.beans.VetoableChangeListener;
import javax.swing.event.InternalFrameAdapter;
import javax.swing.event.InternalFrameEvent;
import java.beans.PropertyChangeEvent;
public class DesktopPane extends JDesktopPane
implements VetoableChangeListener {
JInternalFrame jif;
JPanel p1;
public DesktopPane() {
p1 = new JPanel();
JButton b = new JButton("Test");
p1.add(b);
jif = new JInternalFrame("test1", true, false, true, true);
jif.getContentPane().add(p1);
jif.setVisible(true);
jif.setSize(new Dimension(200, 200));
add(jif);
jif.addVetoableChangeListener(this);
try {
jif.setIcon(true);
} catch (Exception ex) {
jif = new JInternalFrame("test2", true, false, true, true);
jif.getContentPane().add(p1);
jif.setVisible(true);
jif.setSize(new Dimension(200, 200));
add(jif);
jif.addVetoableChangeListener(this);
try {
jif.setIcon(true);
} catch (Exception ex) {
public void vetoableChange(PropertyChangeEvent evt) throws PropertyVetoException {
String property = evt.getPropertyName();
if (property.equals(JInternalFrame.IS_ICON_PROPERTY)){
boolean isIcon = ((Boolean)evt.getNewValue()).booleanValue();
if (!isIcon){
throw new PropertyVetoException("message", evt);
}

Disabling NAC HA from service perfigo

Similar Messages

Maybe you are looking for