External DB Account Restriciton

I have a problem that is starting to drive me crazy!!
I have an ACS server ver 3.3 on windows 2003. This authenticates users through our AD domain. I have other AD domains configured and everything is fine.
I have recently had to add a new domain to the list. Initially I had no problems however since the weekend all users are getting the following message, External DB Account Restriciton. So far I have not found anything useful on google etc.
What does the message really mean?
What is the fix? They swear to me nothing has changed...........
Thanks
Simon

Hi Simon,
I too had this issue awhile back and after some research we found everyone seems to have their own fix and special juju. =)
In our environment we resolved the issue by adding the appropriate DNS suffix's to the ACS server's DNS suffix search order.

Similar Messages

Connecting to an externally identified account

Hi,
Is there a way to connect to an externally identified account in a database from SQL Developer?
Thanks,

If I can recall, the person who got it to work was with an OPS$ account by using ALTER USER to identify the user with a password. I don't think they got it to work with external authentication.
First of all, when I tried to use the OCI driver, it required a user id and password. Yet, for external authentication, you do not specify a user and password.
When reading the docs for the oci jdbc driver, I could not find anything about external authentication.
I think oracle will have to get external authentication to work via their jdbc odbc driver first before they could even consider getting it to work under sql developer.

Creating new external bank account.

I wanted to create a new external bank account. Please explain the steps in details.

Hi Jaya,
U will have to create posting rules for all the different tranactions that r there in the bank statement.
For eg if u have created the tcodes that the bank use as the posting rule, then new bank transactions would have new posting rules.
For all posting rules u will have to assgn ext trans types as per the logic that i have given.
The basic logic for posting rule is:
For Credit:
"C",1,40," ","<incoming account symbol>",," ","<main account symbol>","ZR",5
For Debit
"D",1,," ","<outgoing account symbol>",50," ","<main account symbol>","ZR",4
Regards,
Kiran

ACS error - External DB account Restriction ..

Hi, we have problem with our VPN users. When they log using cisco vpn, they get error and when we checked at the ACS - we are getting this message in the Report and Activity menu under Failed Attempts - External DB account Restriction ...
Can you help us why is this so?

This is due to permission issue. Make sure that the account running acs service or remote agent service (incase you have appliance)have domain admin permissions.
See this link
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1/installation/guide/windows/postin.html#wp1041202
Also post acs issues in AAA forum.
Regards,
~JG
Do rate helpful posts

EAP Authentication Failing (External DB account restriction)

Hi,
I am using ACS 3.0 as my Access Server configured for LEAP authentication,Everything was working fine till 2 days back, All my wireless clients ver getting authenticated,
But suddenly they have stopped doing so, On checking the logs it says "External DB account restriction"
I am using Windows Group Mapping, Dont know why suddenly it has started behaving like this, Have made no changes on the user profiles/permissions from either ACS or windows servers.
Any clue...suggestions..
Thanks
Maneesh

I'm having the same problem and it is quite frustrating... It should not be this difficult.
I've tried both IAS and ACS and I can not get either one of them to work. I'm sure it has something to do with certificates... I just don't know what I'm doing wrong, but I'm going to beat the stuffing out my server if I see "External DB account Restriction" one more time!
currently i'm trying to get ACS 3.2.1(trial) on Win2k SP3 to work and time and time again no matter how I try to install the certificate I create (following instructions in chapter 10 of the User Guide) I keep getting that infernal error. If someone out there could post SPECIFIC instructions about how they got their installation to work it would be GREATLY appreciated.
Ben

External DB account Restriction

Hi
I am receiving "External DB account Restriction" Error message for ADS users after upgrading from 2000 to Windows 2003.
I dont see any error for local ACS users and local windows database users.
Any idea
Thanks

Meaning of the error message
External DB account restriction : The Windows User Account is restricted : The windows administrator must reset this option.
ACS troubleshooting guide
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1.3/troubleshooting/guide/ecodes.html
When you try to authenticate via ACS and see failed authentication on the ACS,could you please take a look on the group you are dropped in.
This can occur either due to permission issues or if your user is being mapped to DISABLED or NO-ACCESS group on the ACS.
Once you have the group which the failed user belongs to, go to that group and click on edit group. It shouldn't ne disabled or noaccess group (Group 0 is what we called noaccess group).
If you're getting mapped to correct map then this is surely windows permission issue. You have to ensure that ACS software running on windows machine should have domain admin rights.
There are some permissions those need to be granted on the windows machine it is installed.You may check from below listed link
1.Acs is installed on the member server or DC and permissions are configured as per the following doc:
http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs33/install/inst02.htm#wp981552
If you're running ACS on member server do make sure that you have completed post installation task for local security policy.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/3.3/installation/guide/windows/install.html#wp981858
HTH
Rgds,
Jatin
Do rate helpful posts~

How do I check an external imap account in icloud?

I did this in mobileme, and since moving to iclould it is still getting the external mail, but I'd like to add another.

Checking external email accounts is no longer a feature of iCloud and cannot be configured. Why yours is still checking the account after moving to iCloud I don't know.
See: http://support.apple.com/kb/HT4918
After moving to iCloud, the following webmail features will no longer work:
Checking external POP email accounts.
Using a "Send From" address to send from a non @me.com or @mac.com email address.

Redirecting internal mail to external mail account

Hi gurus:
I need to know how could I configure SAP to redirect all incoming mail to a SAP user to an external mail account. In other words, I want that all messages sent to an internal SAP user, automatically arrive to an external mail account.
Thanks to all in advance an regards,
Alejandro Gómez.
P.D.: Excuse my bad English.

Hi,
Go thru the link
http://java.ittoolbox.com/documents/popular-q-and-a/redirecting-users-with-javascript-2834
Rgds,
Suman

Disable External POP account

Hi guys,
I've the lastest release of Sun Convergence, and I would like to DISABLE the use of External POP accounts feature on webmail.
Options > External Account > New Account
is this possible to do ?
Thhanks for your help
CA

KenGra wrote:
I've the lastest release of Sun Convergence, and I would like to DISABLE the use of External POP accounts feature on webmail.
Options > External Account > New AccountPlease always provide the actual version of the product. The term "latest release" is meaningless -- especially if somebody reads this same thread in 6 months time.
is this possible to do ?Refer here:
http://forums.sun.com/thread.jspa?threadID=5410262
Regards,
Shane.

Verifying external email accounts

I am having great difficulty adding external accounts. I added one that I received a 553 error message about, but it will not let me add the other two. The problem is not made any simpler by the fact that when i try doing it in New yahoo, there's a flipping great advert in the way of the forms, and in the classic yahoo there is no correlation between the instructions (which I printed off) and the view on screen. There is no 'Send verification button' for instance! I could only find 'save changes' which keeps telling me to check my email address. Which Was Correct. HELP. Please

superslob wrote:
I am having great difficulty adding external accounts. I added one that I received a 553 error message about, but it will not let me add the other two. The problem is not made any simpler by the fact that when i try doing it in New yahoo, there's a flipping great advert in the way of the forms, and in the classic yahoo there is no correlation between the instructions (which I printed off) and the view on screen. There is no 'Send verification button' for instance! I could only find 'save changes' which keeps telling me to check my email address. Which Was Correct. HELP. Please
Hi.
Did you manage to get this working OK ?
You may want to have a look through my shortcuts option 0e (written before the BT one, and contains more information - including the bit about lower case email address as mentioned by biffab).
http://www.andyweb.co.uk/shortcuts
http://www.andyweb.co.uk/pictures

Cannot login with external LDAP accounts.

Hi,
I installed ApacheDS and configured Weblogic. Weblogic can import the LDAP users and groups. And I can use LDAP account to sign in Weblogic Console and EM. But BIEE always prompt "An invalid User Name or Password was entered", even though I added the LDAP account to BIAdministrator role.

Cheney Shue wrote:
Hi,
I installed ApacheDS and configured Weblogic. Weblogic can import the LDAP users and groups. And I can use LDAP account to sign in Weblogic Console and EM. But BIEE always prompt "An invalid User Name or Password was entered", even though I added the LDAP account to BIAdministrator role.Did you check the log files to see if you could get more details on the error?
Refer to this blogpost to make sure you have followed all the steps correctly: http://www.addidici.com/blog/?p=8
You need to add the account from LDAP to BISystem Application role.

How can i set up external email account to show up in iCloud?

I can access my Earthlink and Gmail accounts through my iPhone, but not yet through my new Mac. Didn't see a way in settings to do that in iCloud. Any pointers?

Open Mail, go to it's Accounts preference pane, click on the "+" button to add a new account and click on the Add Other Mail Account radio button:
Enter the required info for that account and you're done.
OT

How to move all emails from mailbox to an external email account in Exchange Server 2007?

I have a user who is leaving the university in a few days. The user would like to forward all of their old emails from their mailbox to their G-mail account. Will setting up email forwarding forward all of the old emails to the G-mail account or just the
new emails that are received after setting up email forwarding? If forwarding isn't the correct solution; then what is? We are running Exchange Server 2007.

No, as you've suspected the forwarding will only affect new messages coming into the mailbox, not existing ones. Additionally, if you did get all existing messages to forward to another account (you could probably do it by creating a rule in Outlook) then
the gmail account would show every single one of them as arriving now, and lose their existing send date.
Probably a better option would be to export the mailbox to .pst, and then assuming the user has their gmail account configured in Outlook somewhere as something other than POP3 they can then open the .pst file on their machine and copy the messages over
to their gmail account, which I think would also preserve the original information.
You could do that via the server using Export-Mailbox as described here
http://technet.microsoft.com/en-gb/library/bb266964(v=exchg.80).aspx (note it has to be run from a 32-bit OS with the Exchange Management tools installed), or the user could just as easily do it themselves from within Outlook using the Export option.

How can I edit external e-mails accounts configurations I had on Mobile Me mail and now on iCloud?

how can I edit external e-mails accounts configurations I had on Mobile Me mail and now are
on iCloud?

Thanks for the answer, but the external POP accounts I had in my MobileMe are working in my iCloud! I receive all the e-mails that are directed to those POP accounts, in my iCloud e-mail, since I migrated from Mobileme to iCloud. So, iCloud accepts external accounts, but i doesn't allow us to edit new configurations or to send e-mails using Pop Accounts through it. Very weird. Does anybody have a solution?

How to map with GW8 Server external POP3 mail accounts ?

I have "small" simple problem. I have GW Server 8.0.2. I have GW Internet Access (GWIA) installed. I can send e-mailes from clients to internet via built-tin SMTP protocol. It works actually.
But... I try to find place in C1 or wherever else which is responsible for setting list of external POP3 accounts, accounts placed on my current Internet Provider's server. So my simple need is to map, to be able to connect and download as server GW and to server GW many POP3 accounts from my current e-mail Server. And than which e-mail adress (external POP3 account) should be saved to which mailbox / user in my GW Server. I'm not talking about mapping that accounts indirectly, via setting in Clients !!! Everything must go via GW Server and automatically.
I dont want to change that state of course (= reach e-mailes from Internet directly to my local GW Server changing MX in DNS of my domain). Nope. I just want to map, to download posts from external mailboxes via POP3 or IMAP protocole. Nothing else.
I'm fluent in Microsoft systems. There is just simply POP3 Connector for Exchange. SMall utility whish is simple list of login, pass, POP3 server adress and name of mailbox where to save such downloaded e-mailes. I just need the same functionally utility or page in C1 or any other place ;-)))
ANY HELP ?
Cause Google are blind for that simple "problem" :-((( I know - Novell describes POP3 solution in GW8 Admin book, but... only as I want to be POP3 Server for external clients. This is slightly different, reversed sittuation :-]]] I want to connect to POP3 accounts, not to server POP3 accounts :-]]]]

Originally Posted by vatim_kk
I have "small" simple problem. I have GW Server 8.0.2. I have GW Internet Access (GWIA) installed. I can send e-mailes from clients to internet via built-tin SMTP protocol. It works actually.
But... I try to find place in C1 or wherever else which is responsible for setting list of external POP3 accounts, accounts placed on my current Internet Provider's server. So my simple need is to map, to be able to connect and download as server GW and to server GW many POP3 accounts from my current e-mail Server. And than which e-mail adress (external POP3 account) should be saved to which mailbox / user in my GW Server. I'm not talking about mapping that accounts indirectly, via setting in Clients !!! Everything must go via GW Server and automatically.
I dont want to change that state of course (= reach e-mailes from Internet directly to my local GW Server changing MX in DNS of my domain). Nope. I just want to map, to download posts from external mailboxes via POP3 or IMAP protocole. Nothing else.
I'm fluent in Microsoft systems. There is just simply POP3 Connector for Exchange. SMall utility whish is simple list of login, pass, POP3 server adress and name of mailbox where to save such downloaded e-mailes. I just need the same functionally utility or page in C1 or any other place ;-)))
ANY HELP ?
Cause Google are blind for that simple "problem" :-((( I know - Novell describes POP3 solution in GW8 Admin book, but... only as I want to be POP3 Server for external clients. This is slightly different, reversed sittuation :-]]] I want to connect to POP3 accounts, not to server POP3 accounts :-]]]]
You need to use an "old" tool called pfa (pop forwarding agent) that came with SBS.
You set the external email server credentials in the user's object via C1 and the java applet runs on the same box as your gwia.
Cool Solutions: How to get your POP Mail into GroupWise

External DB Account Restriciton

Similar Messages

Maybe you are looking for