EyeWonder Banner Ad Tag failing authentication

Trying to authenticate the following EyeWonder banner ad tag (located on our staging server) against IAB 2011 Medium Rectangle using AdTag and pasting the source code results in an error.
Error Text:
Target server error: The Job ID is invalid.
Link to Ad:
http://cdn.eyewonder.com/100125/770303/1488080/FoodNetwork_Brandscape_Companion_Unit_300x2 50_EW_STD_ChinetCore1_300x250_Standard_1488080.html
Tag Used:
<!-- Generated: 09/01/2011  02:13 PM EST. EW Web Code Version: 18.2.0 -->
<script language="Javascript" type="text/javascript">
var clickTagFramePrepend1488080="[ewclickthru]";    /* Please place your redirects in front of the value [ewclickthru] just as if [ewclickthru] is a standard URL (e.g. "%c[ewclickthru]") */
</script>
<script type="text/javascript" id="ew1488080_wrapper" src="http://cdn.eyewonder.com/100125/770303/1488080/wrapper.js"></script>

Thanks for your feedback!
We have covered many different ad tags, including a couple from Eyewonder, for this release. However, we are aware of the fact that we still have to cover more.
We will look into resolving your ad tag as well.

Similar Messages

  • ISE 1.2 not logging failed authentications on guest portal (CWA)

    Hi there
    I think this is a bug but wanted to check, if someone knows a good reason why failed authentication attemps with non-existing user account are not logged on ISE 1.2 (CWA).
    The different cases:
    Case 1: existing user / wrong password -> logged
    Case 2: no user / any password -> logged
    Case 3: no user / no password -> logged
    Case 4: non-existing user / any password -> not logged
    In my opinion this is a critical case to be logged because this could be an indicator of a DoS attack or a password penetration test.
    Thanks in advance and best regards
    Dominic

    Hi vatullu
    thanks man, you helped me a lot.
    Regards
    Dominic

  • Custom tag fails to under Tomcat 5.0.16

    I have just upgraded to Tomcat 5.0.16 from 4.1.x.
    Any JSP page that contains a custom tag fails to build; error message:
    org.apache.jasper.JasperException: /jsp/CustomReport.jsp(62,20) Unknown attribute type (String) for attribute name.
    The tags work under �Tomcat 4.x�. All other pages build and function correctly.
    Specs:
    Java 2 version: 1.4.2_03
    Tomcat 5.0.16 or Tomcat 4.1.x

    Try updating your web.xml to use the Servlet 2.4 schema. You will have to change your tld declarations to sit inside the new <jsp-config> tags but see if it works for Servlet 2.4. Could be a backwards compatible bug?
    Anthony

  • All custom tags fail in JBoss3.2.3/Tomcat 5.0.16 (works in Tomcat 4.x)

    All pages that contain a custom tag fail with the following exception: HTTP Status 500 -
    description The server encountered an internal error () that prevented it from fulfilling this request.
    exception
    java.lang.NullPointerException
         org.apache.jasper.runtime.TagHandlerPool.get(TagHandlerPool.java:153)
         uploadQS1_jsp._jspx_meth_strutshtml_hidden_0(uploadQS1_jsp.java:225)
         uploadQS1_jsp._jspService(uploadQS1_jsp.java:100)
         org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:133)
         javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         org.apache.struts.action.RequestProcessor.doForward(RequestProcessor.java:1069)
         org.apache.struts.action.RequestProcessor.processForwardConfig(RequestProcessor.java:455)
         org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:279)
         org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
         org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:507)
         javax.servlet.http.HttpServlet.service(HttpServlet.java:740)
         javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
    note The full stack trace of the root cause is available in the Tomcat logs.Even a simple <struts-html: hidden ... /> tag causes this exception. As long as the page has no custom tags, it is served fine. The same web-app works as expected in JBoss3.2.3/Tomcat4.x.
    It almost looks as if Tomcat is looking in a object pool for a custom tag object reference and when it fails to find one, throws a null-pointer instead of instantiating a new one to work with. (This is pure speculation on my part).
    Did the TLD's req's change, or the setup for Tomcat? It's not my tags, even Struts tags fail. Any ideas why my tags aren't "resolving"?

    Has anyone had any luck getting this to run or run into this problem? It fails even with a fresh JBoss install using tomcat 5.0.16.

  • 802.1x fail authentication - packets keep discarded

    Hi all,
    I'm implementing 802.1x using Catalyst 3560 and MS IAS as radius server. The plan is, every PC needs to authenticate using PEAP with radius and assigned to a VLAN. Fail authentication will be assigned to guest VLAN.
    The problem is when I'm testing a PC, set the PC withouth 802.1x enabled, plug it to the 3560 port, the port keeps that PC packets discarded forever. I remove dot1x configuration on the interface, but it keep discard all packets (can't ping anywhere). When I plugged the PC to other port with the same configuration (no dot1x), it works. I have tried shut and no shut the interface, disable - enable devices, remove config and etc but the PC can't ping anywhere.
    I'm happy to paste the config. Could anyone please explain me why it happens and what is the solution? Many thanks.

    Here's an example config that should work:
    interface GigabitEthernet1/0/5
    switchport access vlan 31
    switchport mode access
    dot1x pae authenticator
    dot1x port-control auto
    dot1x guest-vlan 35
    dot1x auth-fail vlan 35
    end
    This should NOT keep a non-1x machine from accessing the network forever. With the above, and default timers, it's a 90-sec timeout of 802.1X. You can tweak the tx-period and the maz-reauth-req variable to get this down to 2-sec if you wish. If you remove 802.1X, then this should also not discard packets. If the 2 items above are truly occurring, then you have hit a software bug, and a TAC case should be opened immediately. Are you sure something like DHCP just hasn't timed out on you though?
    NOTE: The config above has vlan 35 for the guest-vlan being equal to the auth-fail-vlan based on you stating the need for this above. It could be different than the guest-vlan if you wanted it to be. Either/both could be the same vlan as what's statically configured on the port as well [31].
    Hope this helps,

  • ISE Alarm at Failed Authentications per User

    Hi there!
    Is there a way to define an alarm for Failed authentications in a given time for a specific user in ISE 1.3?
    We have an alarm like this defined in ACS 5.3 but I can't find it in the ISE.
    Here is a picture of the definition in ACS:
    Can anyone help?

    Yes we can configure ISE alarms and send email notification as well

  • [SOLVED]GDM don't ask password and fail authentication

    Solved by reinstalling all the stuff involved, like skunktrader said the .pacnew files are the NEW config files that we had to fill with our preferences, because it have new options or diferent stuff
    Thank you again Mr. skunktrader
    Hi everybody.
    I was looking for tunning a bit my installation of arch. and ruined something about X and authentification.
    the files I remember to have deleted are all in /etc that ends in "-" and  ".pacnew" and ".original"
    those files includes shadow- and passwd-.
    I was sure that those files are just backups, but now i dont know.
    so, after that i run pacman -Syu, and then rebooted.
    here is when all load exept gdm, which  show the above panel and the central square with my username. and the cursor from x shows a handclock like it's loading something but never ends to load. I click on my username and dont do anything. i pres enter and here it should ask my password but doesn't do anything, then i press enter again and says authentification failure.
    im tried uninstalling, erasing all configs that i know about gdm, and reinstalling, but no make difference
    i tried slim, kdm, enter, console login to x by .bash_profile, i tried start it in daemon in rc.conf and service in inittab but it still the same thing.
    obiously i have all the functionality of console but none for X
    this is the /var/log/gdm/:1-greeter.log. I think that it said something about this
    gnome-session[2604]: WARNING: Could not launch application 'at-spi-registryd-wrapper.desktop': Unable to start application: Falló al ejecutar el proceso hijo «/usr/lib/at-spi/at-spi-registryd» (No existe el fichero o el directorio)
    gnome-session[2604]: WARNING: Could not launch application 'metacity.desktop': Unable to start application: Falló al ejecutar el proceso hijo «metacity» (No existe el fichero o el directorio)
    gnome-session[2604]: WARNING: Could not launch application 'gnome-power-manager.desktop': Unable to start application: Falló al ejecutar el proceso hijo «gnome-power-manager» (No existe el fichero o el directorio)
    ** (process:2613): DEBUG: Greeter session pid=2613 display=:1 xauthority=/var/run/gdm/auth-for-gdm-TEhETs/database
    gdm-simple-greeter[2613]: Gtk-WARNING: gtkwidget.c:5676: widget not within a GtkWindow
    gdm-simple-greeter[2613]: WARNING: Unable to read from file /etc/arch-release
    gdm-simple-greeter[2613]: WARNING: Unable to load CK history: no seat-id found
    gdm-simple-greeter[2613]: WARNING: locale es_MX.UTF-8 # change to your default lang isn't valid
    *** glibc detected *** /usr/lib/gdm/gdm-simple-greeter: free(): invalid pointer: 0x08064793 ***
    ======= Backtrace: =========
    /lib/libc.so.6(+0x6b6c1)[0xb6d316c1]
    /lib/libc.so.6(+0x6cfdb)[0xb6d32fdb]
    /lib/libc.so.6(cfree+0x6d)[0xb6d3618d]
    /usr/lib/libglib-2.0.so.0(g_free+0x36)[0xb6e589f6]
    /usr/lib/gdm/gdm-simple-greeter[0x806ab1e]
    /usr/lib/gdm/gdm-simple-greeter[0x8065f46]
    /usr/lib/libgobject-2.0.so.0(g_cclosure_marshal_VOID__STRING+0x88)[0xb6f09548]
    /usr/lib/libgobject-2.0.so.0(g_closure_invoke+0x192)[0xb6eeca72]
    /usr/lib/libgobject-2.0.so.0(+0x1e8a0)[0xb6eff8a0]
    /usr/lib/libgobject-2.0.so.0(g_signal_emit_valist+0x806)[0xb6f08306]
    /usr/lib/libgobject-2.0.so.0(g_signal_emit+0x32)[0xb6f084b2]
    /usr/lib/gdm/gdm-simple-greeter[0x805c814]
    /usr/lib/gdm/gdm-simple-greeter[0x805d6b5]
    /usr/lib/libdbus-1.so.3(dbus_connection_dispatch+0x393)[0xb7760cd3]
    /usr/lib/libdbus-glib-1.so.2(+0x7fcd)[0xb7796fcd]
    /usr/lib/libglib-2.0.so.0(g_main_context_dispatch+0x1d2)[0xb6e51b72]
    /usr/lib/libglib-2.0.so.0(+0x40350)[0xb6e52350]
    /usr/lib/libglib-2.0.so.0(g_main_loop_run+0x18b)[0xb6e52a1b]
    /usr/lib/libgtk-x11-2.0.so.0(gtk_main+0xb9)[0xb74a05b9]
    /usr/lib/gdm/gdm-simple-greeter[0x8054915]
    /lib/libc.so.6(__libc_start_main+0xe6)[0xb6cdcdb6]
    /usr/lib/gdm/gdm-simple-greeter[0x8054241]
    ======= Memory map: ========
    08048000-0808a000 r-xp 00000000 08:05 202407 /usr/lib/gdm/gdm-simple-greeter
    0808a000-0808c000 rw-p 00041000 08:05 202407 /usr/lib/gdm/gdm-simple-greeter
    09057000-09279000 rw-p 00000000 00:00 0 [heap]
    b1c9c000-b1cb7000 r-xp 00000000 08:05 90684 /usr/lib/libgcc_s.so.1
    b1cb7000-b1cb8000 rw-p 0001a000 08:05 90684 /usr/lib/libgcc_s.so.1
    b1cb8000-b1d45000 r--p 00000000 08:05 197697 /usr/share/fonts/TTF/DejaVuSans-Oblique.ttf
    b1d45000-b1d46000 ---p 00000000 00:00 0
    b1d46000-b2546000 rw-p 00000000 00:00 0
    b2546000-b25a6000 rw-s 00000000 00:04 0 /SYSV00000000 (deleted)
    b25a6000-b25bf000 r--s 00000000 08:05 114603 /usr/share/mime/mime.cache
    b25bf000-b25cb000 r-xp 00000000 08:05 113337 /lib/libudev.so.0.10.0
    b25cb000-b25cc000 rw-p 0000b000 08:05 113337 /lib/libudev.so.0.10.0
    b25cc000-b25df000 r-xp 00000000 08:05 106296 /usr/lib/libgvfscommon.so.0.0.0
    b25df000-b25e0000 rw-p 00013000 08:05 106296 /usr/lib/libgvfscommon.so.0.0.0
    b25f7000-b261a000 r-xp 00000000 08:05 113463 /usr/lib/gio/modules/libgvfsdbus.so
    b261a000-b261b000 rw-p 00023000 08:05 113463 /usr/lib/gio/modules/libgvfsdbus.so
    b261b000-b2621000 r--p 00000000 08:05 97239 /usr/share/locale/es/LC_MESSAGES/gdk-pixbuf.mo
    b2621000-b581a000 r--p 00000000 08:05 214046 /usr/share/icons/gnome/icon-theme.cache
    b581a000-b5c18000 r--p 00000000 08:05 181881 /usr/share/icons/hicolor/icon-theme.cache
    b5c18000-b5cbf000 r--p 00000000 08:05 197709 /usr/share/fonts/TTF/DejaVuSans.ttf
    b5cbf000-b5d00000 r--s 00000000 08:05 282903 /var/cache/fontconfig/17090aa38d5c6f09fb8c5c354938f1d7-le32d4.cache-3
    b5d00000-b5d21000 rw-p 00000000 00:00 0
    b5d21000-b5e00000 ---p 00000000 00:00 0
    b5e01000-b5e03000 r-xp 00000000 08:05 112702 /lib/libutil-2.13.so
    b5e03000-b5e04000 r--p 00001000 08:05 112702 /lib/libutil-2.13.so
    b5e04000-b5e05000 rw-p 00002000 08:05 112702 /lib/libutil-2.13.so
    b5e05000-b5e12000 r--p 00000000 08:05 100174 /usr/share/locale/es/LC_MESSAGES/xkeyboard-config.mo
    b5e12000-b5e22000 r--s 00000000 08:05 282624 /var/cache/fontconfig/8d4af663993b81a124ee82e610bb31f9-le32d4.cache-3
    b5e22000-b5e3a000 r--s 00000000 08:05 282759 /var/cache/fontconfig/f6b893a7224233d96cb72fd88691c0b4-le32d4.cache-3
    b5e3a000-b5e7b000 r--s 00000000 08:05 282905 /var/cache/fontconfig/df311e82a1a24c41a75c2c930223552e-le32d4.cache-3
    b5e7b000-b5e82000 r--p 00000000 08:05 100360 /usr/share/locale/es/LC_MESSAGES/iso_3166.mo
    b5e82000-b5e87000 r--p 00000000 08:05 100358 /usr/share/locale/es/LC_MESSAGES/iso_639.mo
    b5e87000-b5e88000 ---p 00000000 00:00 0
    b5e88000-b6688000 rw-p 00000000 00:00 0
    b6688000-b669c000 r--p 00000000 08:05 97128 /usr/share/locale/es/LC_MESSAGES/glib20.mo
    b669c000-b66c6000 r--p 00000000 08:05 97868 /usr/share/locale/es/LC_MESSAGES/gtk20-properties.mo
    b66c6000-b66cf000 r-xp 00000000 08:05 112704 /lib/libnss_files-2.13.so
    b66cf000-b66d0000 r--p 00009000 08:05 112704 /lib/libnss_files-2.13.so
    b66d0000-b66d1000 rw-p 0000a000 08:05 112704 /lib/libnss_files-2.13.so
    b66d1000-b66d4000 r--p 00000000 08:05 97293 /usr/share/locale/es/LC_MESSAGES/atk10.mo
    b66d4000-b66d5000 r-xp 00000000 08:05 123048 /usr/lib/gconv/ISO8859-1.so
    b66d5000-b66d6000 r--p 00000000 08:05 123048 /usr/lib/gconv/ISO8859-1.so
    b66d6000-b66d7000 rw-p 00001000 08:05 123048 /usr/lib/gconv/ISO8859-1.so
    b66d7000-b66e8000 r--p 00000000 08:05 97997 /usr/share/locale/es/LC_MESSAGES/GConf2.mo
    b66e8000-b6706000 r--p 00000000 08:05 96589 /usr/share/locale/es/LC_MESSAGES/libc.mo
    b6706000-b68bb000 r--p 00000000 08:05 96632 /usr/lib/locale/locale-archive
    b68bb000-b68be000 rw-p 00000000 00:00 0
    b68be000-b68c2000 r-xp 00000000 08:05 88801 /usr/lib/libXdmcp.so.6.0.0
    b68c2000-b68c3000 rw-p 00003000 08:05 88801 /usr/lib/libXdmcp.so.6.0.0
    b68c3000-b68c5000 r-xp 00000000 08:05 88814 /usr/lib/libXau.so.6.0.0
    b68c5000-b68c6000 rw-p 00001000 08:05 88814 /usr/lib/libXau.so.6.0.0
    b68c6000-b68c7000 rw-p 00000000 00:00 0
    b68c7000-b68e7000 r-xp 00000000 08:05 95517 /usr/lib/libxkbfile.so.1.0.2
    b68e7000-b68e8000 rw-p 00020000 08:05 95517 /usr/lib/libxkbfile.so.1.0.2
    b68e8000-b6a09000 r-xp 00000000 08:05 91069 /usr/lib/libxml2.so.2.7.8
    b6a09000-b6a0e000 rw-p 00121000 08:05 91069 /usr/lib/libxml2.so.2.7.8
    b6a0e000-b6a0f000 rw-p 00000000 00:00 0
    b6a0f000-b6a26000 r-xp 00000000 08:05 88827 /usr/lib/libxcb.so.1.1.0
    b6a26000-b6a27000 rw-p 00016000 08:05 88827 /usr/lib/libxcb.so.1.1.0
    b6a27000-b6a4d000 r-xp 00000000 08:05 91310 /usr/lib/libexpat.so.1.5.2
    b6a4d000-b6a4f000 rw-p 00026000 08:05 91310 /usr/lib/libexpat.so.1.5.2
    b6a4f000-b6a50000 rw-p 00000000 00:00 0
    b6a50000-b6a99000 r-xp 00000000 08:05 109753 /usr/lib/libORBit-2.so.0.1.0
    b6a99000-b6aa3000 rw-p 00048000 08:05 109753 /usr/lib/libORBit-2.so.0.1.0
    b6aa3000-b6b0a000 r-xp 00000000 08:05 91504 /usr/lib/libpixman-1.so.0.20.2
    b6b0a000-b6b0e000 rw-p 00066000 08:05 91504 /usr/lib/libpixman-1.so.0.20.2
    b6b0e000-b6b22000 r-xp 00000000 08:05 89741 /usr/lib/libz.so.1.2.5
    b6b22000-b6b23000 rw-p 00013000 08:05 89741 /usr/lib/libz.so.1.2.5
    b6b23000-b6b34000 r-xp 00000000 08:05 112703 /lib/libresolv-2.13.so
    b6b34000-b6b35000 r--p 00010000 08:05 112703 /lib/libresolv-2.13.so
    b6b35000-b6b36000 rw-p 00011000 08:05 112703 /lib/libresolv-2.13.so
    b6b36000-b6b38000 rw-p 00000000 00:00 0
    b6b38000-b6b74000 r-xp 00000000 08:05 113012 /lib/libpcre.so.0.0.1
    b6b74000-b6b75000 rw-p 0003b000 08:05 113012 /lib/libpcre.so.0.0.1
    b6b75000-b6b76000 rw-p 00000000 00:00 0
    b6b76000-b6b78000 r-xp 00000000 08:05 112674 /lib/libdl-2.13.so
    b6b78000-b6b79000 r--p 00001000 08:05 112674 /lib/libdl-2.13.so
    b6b79000-b6b7a000 rw-p 00002000 08:05 112674 /lib/libdl-2.13.so
    b6b7a000-b6b7c000 r-xp 00000000 08:05 91274 /usr/lib/libgmodule-2.0.so.0.2600.1
    b6b7c000-b6b7d000 rw-p 00002000 08:05 91274 /usr/lib/libgmodule-2.0.so.0.2600.1
    b6b7d000-b6bfe000 r-xp 00000000 08:05 91303 /usr/lib/libfreetype.so.6.6.2
    b6bfe000-b6c02000 rw-p 00081000 08:05 91303 /usr/lib/libfreetype.so.6.6.2
    b6c02000-b6c28000 r-xp 00000000 08:05 91536 /usr/lib/libpangoft2-1.0.so.0.2800.3
    b6c28000-b6c29000 rw-p 00026000 08:05 91536 /usr/lib/libpangoft2-1.0.so.0.2800.3
    b6c29000-b6c4e000 r-xp 00000000 08:05 91290 /usr/lib/libpng14.so.14.5.0
    b6c4e000-b6c4f000 rw-p 00025000 08:05 91290 /usr/lib/libpng14.so.14.5.0
    b6c4f000-b6c50000 rw-p 00000000 00:00 0
    b6c50000-b6c69000 r-xp 00000000 08:05 91662 /usr/lib/libatk-1.0.so.0.3209.1
    b6c69000-b6c6b000 rw-p 00018000 08:05 91662 /usr/lib/libatk-1.0.so.0.3209.1
    b6c6b000-b6c6f000 r-xp 00000000 08:05 91173 /usr/lib/libXfixes.so.3.1.0
    b6c6f000-b6c70000 rw-p 00003000 08:05 91173 /usr/lib/libXfixes.so.3.1.0
    b6c70000-b6c72000 r-xp 00000000 08:05 91784 /usr/lib/libXdamage.so.1.1.0
    b6c72000-b6c73000 rw-p 00001000 08:05 91784 /usr/lib/libXdamage.so.1.1.0
    b6c73000-b6c75000 r-xp 00000000 08:05 91770 /usr/lib/libXcomposite.so.1.0.0
    b6c75000-b6c76000 rw-p 00001000 08:05 91770 /usr/lib/libXcomposite.so.1.0.0
    b6c76000-b6c80000 r-xp 00000000 08:05 91542 /usr/lib/libpangocairo-1.0.so.0.2800.3
    b6c80000-b6c81000 rw-p 00009000 08:05 91542 /usr/lib/libpangocairo-1.0.so.0.2800.3
    b6c81000-b6c89000 r-xp 00000000 08:05 91175 /usr/lib/libXcursor.so.1.0.2
    b6c89000-b6c8a000 rw-p 00007000 08:05 91175 /usr/lib/libXcursor.so.1.0.2
    b6c8a000-b6c8b000 rw-p 00000000 00:00 0
    b6c8b000-b6c91000 r-xp 00000000 08:05 91155 /usr/lib/libXrandr.so.2.2.0
    b6c91000-b6c92000 rw-p 00005000 08:05 91155 /usr/lib/libXrandr.so.2.2.0
    b6c92000-b6c9e000 r-xp 00000000 08:05 91766 /usr/lib/libXi.so.6.1.0
    b6c9e000-b6c9f000 rw-p 0000b000 08:05 91766 /usr/lib/libXi.so.6.1.0
    b6c9f000-b6ca1000 r-xp 00000000 08:05 91141 /usr/lib/libXinerama.so.1.0.0
    b6ca1000-b6ca2000 rw-p 00001000 08:05 91141 /usr/lib/libXinerama.so.1.0.0
    b6ca2000-b6ca9000 r-xp 00000000 08:05 91151 /usr/lib/libXrender.so.1.3.0
    b6ca9000-b6caa000 rw-p 00007000 08:05 91151 /usr/lib/libXrender.so.1.3.0
    b6caa000-b6cb7000 r-xp 00000000 08:05 91077 /usr/lib/libXext.so.6.4.0
    b6cb7000-b6cb8000 rw-p 0000d000 08:05 91077 /usr/lib/libXext.so.6.4.0
    b6cb8000-b6cb9000 rw-p 00000000 00:00 0
    b6cb9000-b6cc0000 r-xp 00000000 08:05 116859 /lib/librt-2.13.so
    b6cc0000-b6cc1000 r--p 00006000 08:05 116859 /lib/librt-2.13.so
    b6cc1000-b6cc2000 rw-p 00007000 08:05 116859 /lib/librt-2.13.so
    b6cc2000-b6cc5000 r-xp 00000000 08:05 91273 /usr/lib/libgthread-2.0.so.0.2600.1
    b6cc5000-b6cc6000 rw-p 00003000 08:05 91273 /usr/lib/libgthread-2.0.so.0.2600.1
    b6cc6000-b6e0b000 r-xp 00000000 08:05 112685 /lib/libc-2.13.so
    b6e0b000-b6e0c000 ---p 00145000 08:05 112685 /lib/libc-2.13.so
    b6e0c000-b6e0e000 r--p 00145000 08:05 112685 /lib/libc-2.13.so
    b6e0e000-b6e0f000 rw-p 00147000 08:05 112685 /lib/libc-2.13.so
    b6e0f000-b6e12000 rw-p 00000000 00:00 0
    b6e12000-b6ee0000 r-xp 00000000 08:05 91272 /usr/lib/libglib-2.0.so.0.2600.1
    b6ee0000-b6ee1000 rw-p 000ce000 08:05 91272 /usr/lib/libglib-2.0.so.0.2600.1
    b6ee1000-b6f24000 r-xp 00000000 08:05 91265 /usr/lib/libgobject-2.0.so.0.2600.1
    b6f24000-b6f26000 rw-p 00042000 08:05 91265 /usr/lib/libgobject-2.0.so.0.2600.1
    b6f26000-b6f34000 r-xp 00000000 08:05 106038 /usr/lib/libupower-glib.so.1.0.1
    b6f34000-b6f35000 rw-p 0000e000 08:05 106038 /usr/lib/libupower-glib.so.1.0.1
    b6f35000-b6f36000 rw-p 00000000 00:00 0
    b6f36000-b6f4d000 r-xp 00000000 08:05 106032 /usr/lib/libxklavier.so.16.0.0
    b6f4d000-b6f4f000 rw-p 00016000 08:05 106032 /usr/lib/libxklavier.so.16.0.0
    b6f4f000-b6f73000 r-xp 00000000 08:05 112684 /lib/libm-2.13.so
    b6f73000-b6f74000 r--p 00023000 08:05 112684 /lib/libm-2.13.so
    b6f74000-b6f75000 rw-p 00024000 08:05 112684 /lib/libm-2.13.so
    b6f75000-b708c000 r-xp 00000000 08:05 88911 /usr/lib/libX11.so.6.3.0
    b708c000-b7090000 rw-p 00116000 08:05 88911 /usr/lib/libX11.so.6.3.0
    b7090000-b70bc000 r-xp 00000000 08:05 91502 /usr/lib/libfontconfig.so.1.4.4
    b70bc000-b70be000 rw-p 0002b000 08:05 91502 /usr/lib/libfontconfig.so.1.4.4
    b70be000-b70ed000 r-xp 00000000 08:05 109815 /usr/lib/libgconf-2.so.4.1.5
    b70ed000-b70f0000 rw-p 0002f000 08:05 109815 /usr/lib/libgconf-2.so.4.1.5
    b70f0000-b70f1000 rw-p 00000000 00:00 0
    b70f1000-b7130000 r-xp 00000000 08:05 91530 /usr/lib/libpango-1.0.so.0.2800.3
    b7130000-b7132000 rw-p 0003e000 08:05 91530 /usr/lib/libpango-1.0.so.0.2800.3
    b7132000-b71cd000 r-xp 00000000 08:05 91507 /usr/lib/libcairo.so.2.11000.2
    b71cd000-b71cf000 rw-p 0009a000 08:05 91507 /usr/lib/libcairo.so.2.11000.2
    b71cf000-b71d1000 rw-p 00000000 00:00 0
    b71d1000-b71ed000 r-xp 00000000 08:05 91654 /usr/lib/libgdk_pixbuf-2.0.so.0.2200.1
    b71ed000-b71ee000 rw-p 0001b000 08:05 91654 /usr/lib/libgdk_pixbuf-2.0.so.0.2200.1
    b71ee000-b72d6000 r-xp 00000000 08:05 91278 /usr/lib/libgio-2.0.so.0.2600.1
    b72d6000-b72d9000 rw-p 000e8000 08:05 91278 /usr/lib/libgio-2.0.so.0.2600.1
    b72d9000-b736c000 r-xp 00000000 08:05 108896 /usr/lib/libgdk-x11-2.0.so.0.2200.1
    b736c000-b736f000 rw-p 00093000 08:05 108896 /usr/lib/libgdk-x11-2.0.so.0.2200.1
    b736f000-b7370000 rw-p 00000000 00:00 0
    b7370000-b7732000 r-xp 00000000 08:05 108898 /usr/lib/libgtk-x11-2.0.so.0.2200.1
    b7732000-b7738000 rw-p 003c2000 08:05 108898 /usr/lib/libgtk-x11-2.0.so.0.2200.1
    b7738000-b7739000 rw-p 00000000 00:00 0
    b7739000-b774e000 r-xp 00000000 08:05 112683 /lib/libpthread-2.13.so
    b774e000-b774f000 r--p 00014000 08:05 112683 /lib/libpthread-2.13.so
    b774f000-b7750000 rw-p 00015000 08:05 112683 /lib/libpthread-2.13.so
    b7750000-b7752000 rw-p 00000000 00:00 0
    b7752000-b778d000 r-xp 00000000 08:05 107798 /usr/lib/libdbus-1.so.3.5.3
    b778d000-b778e000 r--p 0003b000 08:05 107798 /usr/lib/libdbus-1.so.3.5.3
    b778e000-b778f000 rw-p 0003c000 08:05 107798 /usr/lib/libdbus-1.so.3.5.3
    b778f000-b77af000 r-xp 00000000 08:05 109739 /usr/lib/libdbus-glib-1.so.2.1.0
    b77af000-b77b0000 rw-p 0001f000 08:05 109739 /usr/lib/libdbus-glib-1.so.2.1.0
    b77b2000-b77c1000 r--p 00000000 08:05 97869 /usr/share/locale/es/LC_MESSAGES/gtk20.mo
    b77c1000-b77c7000 r--p 00000000 08:05 97669 /usr/share/locale/es/LC_MESSAGES/gdm.mo
    b77c7000-b77c8000 rw-p 00000000 00:00 0
    b77c8000-b77c9000 r-xp 00000000 00:00 0 [vdso]
    b77c9000-b77e5000 r-xp 00000000 08:05 112697 /lib/ld-2.13.so
    b77e5000-b77e6000 r--p 0001b000 08:05 112697 /lib/ld-2.13.so
    b77e6000-b77e7000 rw-p 0001c000 08:05 112697 /lib/ld-2.13.so
    bff62000-bff83000 rw-p 00000000 00:00 0 [stack]
    gnome-session[2604]: WARNING: Client '/org/gnome/SessionManager/Client1' failed to reply before timeout
    gnome-session[2604]: WARNING: Unable to find desktop file 'gdm-simple-greeter.desktop': No se pudo encontrar la clave de archivo válida en los directorios de búsqueda
    gnome-session[2604]: WARNING: Unable to find desktop file 'gnome-gdm-simple-greeter.desktop.desktop': No se pudo encontrar la clave de archivo válida en los directorios de búsqueda
    gnome-session: Fatal IO error 11 (Recurso no disponible temporalmente) on X server :1.
    polkit-gnome-authentication-agent-1: Fatal IO error 11 (Recurso no disponible temporalmente) on X server :1..
    and this is xorg.0.log
    [ 415.344]
    This is a pre-release version of the X server from The X.Org Foundation.
    It is not supported in any way.
    Bugs may be filed in the bugzilla at http://bugs.freedesktop.org/.
    Select the "xorg" product for bugs you find in this release.
    Before reporting bugs in pre-release versions please check the
    latest version in the X.Org Foundation git repository.
    See http://wiki.x.org/wiki/GitPage for git access instructions.
    [ 415.344]
    X.Org X Server 1.9.4.901 (1.9.5 RC 1)
    Release Date: 2011-03-04
    [ 415.344] X Protocol Version 11, Revision 0
    [ 415.344] Build Operating System: Linux 2.6.37-ARCH i686
    [ 415.344] Current Operating System: Linux i 2.6.37-ARCH #1 SMP PREEMPT Tue Mar 15 11:40:49 UTC 2011 i686
    [ 415.344] Kernel command line: root=/dev/disk/by-uuid/e5834ccd-027a-4ee7-8875-1ba90303fd71 ro
    [ 415.344] Build Date: 14 March 2011 10:39:42AM
    [ 415.344]
    [ 415.344] Current version of pixman: 0.20.2
    [ 415.344] Before reporting problems, check http://wiki.x.org
    to make sure that you have the latest version.
    [ 415.344] Markers: (--) probed, (**) from config file, (==) default setting,
    (++) from command line, (!!) notice, (II) informational,
    (WW) warning, (EE) error, (NI) not implemented, (??) unknown.
    [ 415.345] (==) Log file: "/var/log/Xorg.1.log", Time: Thu Mar 17 09:18:27 2011
    [ 415.345] (==) Using config directory: "/etc/X11/xorg.conf.d"
    [ 415.345] (==) No Layout section. Using the first Screen section.
    [ 415.345] (==) No screen section available. Using defaults.
    [ 415.345] (**) |-->Screen "Default Screen Section" (0)
    [ 415.345] (**) | |-->Monitor "<default monitor>"
    [ 415.346] (==) No monitor specified for screen "Default Screen Section".
    Using a default monitor configuration.
    [ 415.346] (==) Automatically adding devices
    [ 415.346] (==) Automatically enabling devices
    [ 415.346] (WW) The directory "/usr/share/fonts/OTF/" does not exist.
    [ 415.346] Entry deleted from font path.
    [ 415.346] (WW) The directory "/usr/share/fonts/Type1/" does not exist.
    [ 415.346] Entry deleted from font path.
    [ 415.346] (==) FontPath set to:
    /usr/share/fonts/misc/,
    /usr/share/fonts/TTF/,
    /usr/share/fonts/100dpi/,
    /usr/share/fonts/75dpi/
    [ 415.346] (==) ModulePath set to "/usr/lib/xorg/modules"
    [ 415.346] (II) The server relies on udev to provide the list of input devices.
    If no devices become available, reconfigure udev or disable AutoAddDevices.
    [ 415.346] (II) Loader magic: 0x81f3280
    [ 415.346] (II) Module ABI versions:
    [ 415.346] X.Org ANSI C Emulation: 0.4
    [ 415.346] X.Org Video Driver: 8.0
    [ 415.346] X.Org XInput driver : 11.0
    [ 415.346] X.Org Server Extension : 4.0
    [ 415.348] (--) PCI:*(0:0:2:0) 8086:a011:103c:148a rev 0, Mem @ 0x54180000/524288, 0x40000000/268435456, 0x54000000/1048576, I/O @ 0x000030c0/8
    [ 415.348] (--) PCI: (0:0:2:1) 8086:a012:103c:148a rev 0, Mem @ 0x54100000/524288
    [ 415.348] (WW) Open ACPI failed (/var/run/acpid.socket) (No such file or directory)
    [ 415.349] (II) LoadModule: "extmod"
    [ 415.349] (II) Loading /usr/lib/xorg/modules/extensions/libextmod.so
    [ 415.349] (II) Module extmod: vendor="X.Org Foundation"
    [ 415.349] compiled for 1.9.4.901, module version = 1.0.0
    [ 415.349] Module class: X.Org Server Extension
    [ 415.349] ABI class: X.Org Server Extension, version 4.0
    [ 415.350] (II) Loading extension MIT-SCREEN-SAVER
    [ 415.350] (II) Loading extension XFree86-VidModeExtension
    [ 415.350] (II) Loading extension XFree86-DGA
    [ 415.350] (II) Loading extension DPMS
    [ 415.350] (II) Loading extension XVideo
    [ 415.350] (II) Loading extension XVideo-MotionCompensation
    [ 415.350] (II) Loading extension X-Resource
    [ 415.350] (II) LoadModule: "dbe"
    [ 415.350] (II) Loading /usr/lib/xorg/modules/extensions/libdbe.so
    [ 415.350] (II) Module dbe: vendor="X.Org Foundation"
    [ 415.350] compiled for 1.9.4.901, module version = 1.0.0
    [ 415.350] Module class: X.Org Server Extension
    [ 415.350] ABI class: X.Org Server Extension, version 4.0
    [ 415.350] (II) Loading extension DOUBLE-BUFFER
    [ 415.350] (II) LoadModule: "glx"
    [ 415.351] (II) Loading /usr/lib/xorg/modules/extensions/libglx.so
    [ 415.351] (II) Module glx: vendor="X.Org Foundation"
    [ 415.351] compiled for 1.9.4.901, module version = 1.0.0
    [ 415.351] ABI class: X.Org Server Extension, version 4.0
    [ 415.351] (==) AIGLX enabled
    [ 415.351] (II) Loading extension GLX
    [ 415.351] (II) LoadModule: "record"
    [ 415.351] (II) Loading /usr/lib/xorg/modules/extensions/librecord.so
    [ 415.351] (II) Module record: vendor="X.Org Foundation"
    [ 415.351] compiled for 1.9.4.901, module version = 1.13.0
    [ 415.351] Module class: X.Org Server Extension
    [ 415.351] ABI class: X.Org Server Extension, version 4.0
    [ 415.352] (II) Loading extension RECORD
    [ 415.352] (II) LoadModule: "dri"
    [ 415.352] (II) Loading /usr/lib/xorg/modules/extensions/libdri.so
    [ 415.352] (II) Module dri: vendor="X.Org Foundation"
    [ 415.352] compiled for 1.9.4.901, module version = 1.0.0
    [ 415.352] ABI class: X.Org Server Extension, version 4.0
    [ 415.352] (II) Loading extension XFree86-DRI
    [ 415.352] (II) LoadModule: "dri2"
    [ 415.353] (II) Loading /usr/lib/xorg/modules/extensions/libdri2.so
    [ 415.353] (II) Module dri2: vendor="X.Org Foundation"
    [ 415.353] compiled for 1.9.4.901, module version = 1.2.0
    [ 415.353] ABI class: X.Org Server Extension, version 4.0
    [ 415.353] (II) Loading extension DRI2
    [ 415.353] (==) Matched intel as autoconfigured driver 0
    [ 415.353] (==) Matched vesa as autoconfigured driver 1
    [ 415.353] (==) Matched fbdev as autoconfigured driver 2
    [ 415.353] (==) Assigned the driver to the xf86ConfigLayout
    [ 415.353] (II) LoadModule: "intel"
    [ 415.353] (II) Loading /usr/lib/xorg/modules/drivers/intel_drv.so
    [ 415.354] (II) Module intel: vendor="X.Org Foundation"
    [ 415.354] compiled for 1.9.4, module version = 2.14.0
    [ 415.354] Module class: X.Org Video Driver
    [ 415.354] ABI class: X.Org Video Driver, version 8.0
    [ 415.354] (II) LoadModule: "vesa"
    [ 415.355] (II) Loading /usr/lib/xorg/modules/drivers/vesa_drv.so
    [ 415.355] (II) Module vesa: vendor="X.Org Foundation"
    [ 415.355] compiled for 1.9.4, module version = 2.3.0
    [ 415.355] Module class: X.Org Video Driver
    [ 415.355] ABI class: X.Org Video Driver, version 8.0
    [ 415.355] (II) LoadModule: "fbdev"
    [ 415.355] (II) Loading /usr/lib/xorg/modules/drivers/fbdev_drv.so
    [ 415.355] (II) Module fbdev: vendor="X.Org Foundation"
    [ 415.355] compiled for 1.9.4, module version = 0.4.2
    [ 415.355] ABI class: X.Org Video Driver, version 8.0
    [ 415.356] (II) intel: Driver for Intel Integrated Graphics Chipsets: i810,
    i810-dc100, i810e, i815, i830M, 845G, 854, 852GM/855GM, 865G, 915G,
    E7221 (i915), 915GM, 945G, 945GM, 945GME, Pineview GM, Pineview G,
    965G, G35, 965Q, 946GZ, 965GM, 965GME/GLE, G33, Q35, Q33, GM45,
    4 Series, G45/G43, Q45/Q43, G41, B43, B43, Clarkdale, Arrandale,
    Sandybridge, Sandybridge, Sandybridge, Sandybridge, Sandybridge,
    Sandybridge, Sandybridge
    [ 415.357] (II) VESA: driver for VESA chipsets: vesa
    [ 415.357] (II) FBDEV: driver for framebuffer: fbdev
    [ 415.357] (++) using VT number 8
    [ 415.370] (WW) Falling back to old probe method for vesa
    [ 415.370] (WW) Falling back to old probe method for fbdev
    [ 415.370] (II) Loading sub module "fbdevhw"
    [ 415.370] (II) LoadModule: "fbdevhw"
    [ 415.371] (II) Loading /usr/lib/xorg/modules/libfbdevhw.so
    [ 415.371] (II) Module fbdevhw: vendor="X.Org Foundation"
    [ 415.371] compiled for 1.9.4.901, module version = 0.0.2
    [ 415.371] ABI class: X.Org Video Driver, version 8.0
    [ 415.372] drmOpenDevice: node name is /dev/dri/card0
    [ 415.372] drmOpenDevice: open result is 8, (OK)
    [ 415.372] drmOpenByBusid: Searching for BusID pci:0000:00:02.0
    [ 415.372] drmOpenDevice: node name is /dev/dri/card0
    [ 415.372] drmOpenDevice: open result is 8, (OK)
    [ 415.372] drmOpenByBusid: drmOpenMinor returns 8
    [ 415.372] drmOpenByBusid: drmGetBusid reports pci:0000:00:02.0
    [ 415.372] (II) intel(0): Creating default Display subsection in Screen section
    "Default Screen Section" for depth/fbbpp 24/32
    [ 415.372] (==) intel(0): Depth 24, (--) framebuffer bpp 32
    [ 415.373] (==) intel(0): RGB weight 888
    [ 415.373] (==) intel(0): Default visual is TrueColor
    [ 415.373] (II) intel(0): Integrated Graphics Chipset: Intel(R) Pineview GM
    [ 415.373] (--) intel(0): Chipset: "Pineview GM"
    [ 415.373] (**) intel(0): Tiling enabled
    [ 415.373] (**) intel(0): SwapBuffers wait enabled
    [ 415.373] (==) intel(0): video overlay key set to 0x101fe
    [ 415.373] (II) intel(0): Output LVDS1 has no monitor section
    [ 415.374] (II) intel(0): found backlight control interface /sys/class/backlight/acpi_video0
    [ 415.410] (II) intel(0): Output VGA1 has no monitor section
    [ 415.410] (II) intel(0): EDID for output LVDS1
    [ 415.410] (II) intel(0): Manufacturer: HSD Model: 3e9 Serial#: 34219
    [ 415.410] (II) intel(0): Year: 2010 Week: 29
    [ 415.410] (II) intel(0): EDID Version: 1.3
    [ 415.410] (II) intel(0): Digital Display Input
    [ 415.410] (II) intel(0): Max Image Size [cm]: horiz.: 22 vert.: 13
    [ 415.410] (II) intel(0): Gamma: 2.20
    [ 415.410] (II) intel(0): No DPMS capabilities specified
    [ 415.410] (II) intel(0): Supported color encodings: RGB 4:4:4 YCrCb 4:4:4
    [ 415.410] (II) intel(0): First detailed timing is preferred mode
    [ 415.410] (II) intel(0): redX: 0.592 redY: 0.355 greenX: 0.327 greenY: 0.555
    [ 415.410] (II) intel(0): blueX: 0.154 blueY: 0.094 whiteX: 0.313 whiteY: 0.329
    [ 415.410] (II) intel(0): Manufacturer's mask: 0
    [ 415.410] (II) intel(0): Supported detailed timing:
    [ 415.410] (II) intel(0): clock: 54.2 MHz Image Size: 222 x 125 mm
    [ 415.410] (II) intel(0): h_active: 1024 h_sync: 1117 h_sync_end 1152 h_blank_end 1328 h_border: 0
    [ 415.410] (II) intel(0): v_active: 600 v_sync: 641 v_sync_end 646 v_blanking: 680 v_border: 0
    [ 415.410] (II) intel(0):
    [ 415.410] (II) intel(0): Monitor name: HSD101PFW2
    [ 415.410] (II) intel(0): EDID (in hex):
    [ 415.410] (II) intel(0): 00ffffffffffff002264e903ab850000
    [ 415.411] (II) intel(0): 1d14010380160d780a8c85975b538e27
    [ 415.411] (II) intel(0): 18505400000001010101010101010101
    [ 415.411] (II) intel(0): 0101010101012c150030415850205d23
    [ 415.411] (II) intel(0): 9508de7d00000019000000fe00000000
    [ 415.411] (II) intel(0): 00000000000000000000000000fc0048
    [ 415.411] (II) intel(0): 5344313031504657320a202000000010
    [ 415.411] (II) intel(0): 000a20202020202020202020202000ba
    [ 415.411] (II) intel(0): EDID vendor "HSD", prod id 1001
    [ 415.411] (II) intel(0): Printing DDC gathered Modelines:
    [ 415.411] (II) intel(0): Modeline "1024x600"x0.0 54.20 1024 1117 1152 1328 600 641 646 680 -hsync -vsync (40.8 kHz)
    [ 415.411] (II) intel(0): Not using default mode "320x240" (doublescan mode not supported)
    [ 415.411] (II) intel(0): Not using default mode "400x300" (doublescan mode not supported)
    [ 415.411] (II) intel(0): Not using default mode "400x300" (doublescan mode not supported)
    [ 415.411] (II) intel(0): Not using default mode "512x384" (doublescan mode not supported)
    [ 415.411] (II) intel(0): Not using default mode "640x480" (doublescan mode not supported)
    [ 415.411] (II) intel(0): Not using default mode "640x512" (doublescan mode not supported)
    [ 415.411] (II) intel(0): Not using default mode "800x600" (doublescan mode not supported)
    [ 415.411] (II) intel(0): Not using default mode "700x525" (doublescan mode not supported)
    [ 415.411] (II) intel(0): Printing probed modes for output LVDS1
    [ 415.412] (II) intel(0): Modeline "1024x600"x60.0 54.20 1024 1117 1152 1328 600 611 616 680 -hsync -vsync (40.8 kHz)
    [ 415.412] (II) intel(0): Modeline "800x600"x60.3 40.00 800 840 968 1056 600 601 605 628 +hsync +vsync (37.9 kHz)
    [ 415.412] (II) intel(0): Modeline "800x600"x56.2 36.00 800 824 896 1024 600 601 603 625 +hsync +vsync (35.2 kHz)
    [ 415.412] (II) intel(0): Modeline "640x480"x59.9 25.18 640 656 752 800 480 490 492 525 -hsync -vsync (31.5 kHz)
    [ 415.443] (II) intel(0): EDID for output VGA1
    [ 415.443] (II) intel(0): Output LVDS1 connected
    [ 415.443] (II) intel(0): Output VGA1 disconnected
    [ 415.443] (II) intel(0): Using exact sizes for initial modes
    [ 415.443] (II) intel(0): Output LVDS1 using initial mode 1024x600
    [ 415.443] (II) intel(0): Using default gamma of (1.0, 1.0, 1.0) unless otherwise stated.
    [ 415.443] (II) intel(0): Kernel page flipping support detected, enabling
    [ 415.443] (**) intel(0): Display dimensions: (220, 130) mm
    [ 415.443] (**) intel(0): DPI set to (118, 117)
    [ 415.443] (II) Loading sub module "fb"
    [ 415.443] (II) LoadModule: "fb"
    [ 415.444] (II) Loading /usr/lib/xorg/modules/libfb.so
    [ 415.445] (II) Module fb: vendor="X.Org Foundation"
    [ 415.445] compiled for 1.9.4.901, module version = 1.0.0
    [ 415.445] ABI class: X.Org ANSI C Emulation, version 0.4
    [ 415.445] (II) Loading sub module "dri2"
    [ 415.445] (II) LoadModule: "dri2"
    [ 415.445] (II) Reloading /usr/lib/xorg/modules/extensions/libdri2.so
    [ 415.445] (II) UnloadModule: "vesa"
    [ 415.445] (II) Unloading /usr/lib/xorg/modules/drivers/vesa_drv.so
    [ 415.445] (II) UnloadModule: "fbdev"
    [ 415.445] (II) Unloading /usr/lib/xorg/modules/drivers/fbdev_drv.so
    [ 415.445] (II) UnloadModule: "fbdevhw"
    [ 415.445] (II) Unloading /usr/lib/xorg/modules/libfbdevhw.so
    [ 415.445] (==) Depth 24 pixmap format is 32 bpp
    [ 415.446] (II) intel(0): [DRI2] Setup complete
    [ 415.446] (II) intel(0): [DRI2] DRI driver: i915
    [ 415.446] (II) intel(0): Allocated new frame buffer 1024x600 stride 4096, tiled
    [ 415.446] (II) UXA(0): Driver registered support for the following operations:
    [ 415.446] (II) solid
    [ 415.446] (II) copy
    [ 415.446] (II) composite (RENDER acceleration)
    [ 415.446] (II) put_image
    [ 415.446] (II) get_image
    [ 415.446] (==) intel(0): Backing store disabled
    [ 415.446] (==) intel(0): Silken mouse enabled
    [ 415.446] (II) intel(0): Initializing HW Cursor
    [ 415.454] (II) intel(0): RandR 1.2 enabled, ignore the following RandR disabled message.
    [ 415.456] (==) intel(0): DPMS enabled
    [ 415.456] (==) intel(0): Intel XvMC decoder disabled
    [ 415.456] (II) intel(0): Set up textured video
    [ 415.457] (II) intel(0): Set up overlay video
    [ 415.457] (II) intel(0): direct rendering: DRI2 Enabled
    [ 415.457] (==) intel(0): hotplug detection: "enabled"
    [ 415.457] (--) RandR disabled
    [ 415.457] (II) Initializing built-in extension Generic Event Extension
    [ 415.457] (II) Initializing built-in extension SHAPE
    [ 415.457] (II) Initializing built-in extension MIT-SHM
    [ 415.457] (II) Initializing built-in extension XInputExtension
    [ 415.457] (II) Initializing built-in extension XTEST
    [ 415.457] (II) Initializing built-in extension BIG-REQUESTS
    [ 415.457] (II) Initializing built-in extension SYNC
    [ 415.457] (II) Initializing built-in extension XKEYBOARD
    [ 415.457] (II) Initializing built-in extension XC-MISC
    [ 415.457] (II) Initializing built-in extension SECURITY
    [ 415.457] (II) Initializing built-in extension XINERAMA
    [ 415.457] (II) Initializing built-in extension XFIXES
    [ 415.457] (II) Initializing built-in extension RENDER
    [ 415.457] (II) Initializing built-in extension RANDR
    [ 415.457] (II) Initializing built-in extension COMPOSITE
    [ 415.457] (II) Initializing built-in extension DAMAGE
    [ 415.490] (II) AIGLX: enabled GLX_MESA_copy_sub_buffer
    [ 415.490] (II) AIGLX: enabled GLX_INTEL_swap_event
    [ 415.490] (II) AIGLX: enabled GLX_SGI_swap_control and GLX_MESA_swap_control
    [ 415.490] (II) AIGLX: enabled GLX_SGI_make_current_read
    [ 415.491] (II) AIGLX: GLX_EXT_texture_from_pixmap backed by buffer objects
    [ 415.491] (II) AIGLX: Loaded and initialized /usr/lib/xorg/modules/dri/i915_dri.so
    [ 415.491] (II) GLX: Initialized DRI2 GL provider for screen 0
    [ 415.492] (II) intel(0): Setting screen physical size to 270 x 158
    [ 415.861] (II) config/udev: Adding input device Power Button (/dev/input/event4)
    [ 415.861] (**) Power Button: Applying InputClass "evdev keyboard catchall"
    [ 415.861] (II) LoadModule: "evdev"
    [ 415.862] (II) Loading /usr/lib/xorg/modules/input/evdev_drv.so
    [ 415.862] (II) Module evdev: vendor="X.Org Foundation"
    [ 415.862] compiled for 1.9.4, module version = 2.6.0
    [ 415.862] Module class: X.Org XInput Driver
    [ 415.862] ABI class: X.Org XInput driver, version 11.0
    [ 415.862] (**) Power Button: always reports core events
    [ 415.862] (**) Power Button: Device: "/dev/input/event4"
    [ 415.883] (--) Power Button: Found keys
    [ 415.883] (II) Power Button: Configuring as keyboard
    [ 415.883] (II) XINPUT: Adding extended input device "Power Button" (type: KEYBOARD)
    [ 415.883] (**) Option "xkb_rules" "evdev"
    [ 415.883] (**) Option "xkb_model" "evdev"
    [ 415.883] (**) Option "xkb_layout" "us"
    [ 415.962] (II) config/udev: Adding input device Video Bus (/dev/input/event9)
    [ 415.962] (**) Video Bus: Applying InputClass "evdev keyboard catchall"
    [ 415.962] (**) Video Bus: always reports core events
    [ 415.962] (**) Video Bus: Device: "/dev/input/event9"
    [ 415.970] (--) Video Bus: Found keys
    [ 415.970] (II) Video Bus: Configuring as keyboard
    [ 415.970] (II) XINPUT: Adding extended input device "Video Bus" (type: KEYBOARD)
    [ 415.970] (**) Option "xkb_rules" "evdev"
    [ 415.970] (**) Option "xkb_model" "evdev"
    [ 415.970] (**) Option "xkb_layout" "us"
    [ 415.992] (II) config/udev: Adding input device Power Button (/dev/input/event2)
    [ 415.992] (**) Power Button: Applying InputClass "evdev keyboard catchall"
    [ 415.992] (**) Power Button: always reports core events
    [ 415.992] (**) Power Button: Device: "/dev/input/event2"
    [ 416.013] (--) Power Button: Found keys
    [ 416.013] (II) Power Button: Configuring as keyboard
    [ 416.013] (II) XINPUT: Adding extended input device "Power Button" (type: KEYBOARD)
    [ 416.013] (**) Option "xkb_rules" "evdev"
    [ 416.013] (**) Option "xkb_model" "evdev"
    [ 416.013] (**) Option "xkb_layout" "us"
    [ 416.014] (II) config/udev: Adding input device Lid Switch (/dev/input/event3)
    [ 416.014] (II) No input driver/identifier specified (ignoring)
    [ 416.019] (II) config/udev: Adding input device HDA Intel Mic at Ext Front Jack (/dev/input/event5)
    [ 416.019] (II) No input driver/identifier specified (ignoring)
    [ 416.020] (II) config/udev: Adding input device HDA Intel HP Out at Ext Front Jack (/dev/input/event6)
    [ 416.020] (II) No input driver/identifier specified (ignoring)
    [ 416.026] (II) config/udev: Adding input device HP Webcam (/dev/input/event10)
    [ 416.026] (**) HP Webcam: Applying InputClass "evdev keyboard catchall"
    [ 416.026] (**) HP Webcam: always reports core events
    [ 416.026] (**) HP Webcam: Device: "/dev/input/event10"
    [ 416.053] (--) HP Webcam: Found keys
    [ 416.053] (II) HP Webcam: Configuring as keyboard
    [ 416.053] (II) XINPUT: Adding extended input device "HP Webcam" (type: KEYBOARD)
    [ 416.053] (**) Option "xkb_rules" "evdev"
    [ 416.053] (**) Option "xkb_model" "evdev"
    [ 416.053] (**) Option "xkb_layout" "us"
    [ 416.062] (II) config/udev: Adding input device AT Translated Set 2 keyboard (/dev/input/event0)
    [ 416.062] (**) AT Translated Set 2 keyboard: Applying InputClass "evdev keyboard catchall"
    [ 416.062] (**) AT Translated Set 2 keyboard: always reports core events
    [ 416.062] (**) AT Translated Set 2 keyboard: Device: "/dev/input/event0"
    [ 416.080] (--) AT Translated Set 2 keyboard: Found keys
    [ 416.080] (II) AT Translated Set 2 keyboard: Configuring as keyboard
    [ 416.080] (II) XINPUT: Adding extended input device "AT Translated Set 2 keyboard" (type: KEYBOARD)
    [ 416.080] (**) Option "xkb_rules" "evdev"
    [ 416.080] (**) Option "xkb_model" "evdev"
    [ 416.080] (**) Option "xkb_layout" "us"
    [ 416.081] (II) config/udev: Adding input device SynPS/2 Synaptics TouchPad (/dev/input/event7)
    [ 416.081] (**) SynPS/2 Synaptics TouchPad: Applying InputClass "evdev touchpad catchall"
    [ 416.081] (**) SynPS/2 Synaptics TouchPad: Applying InputClass "touchpad catchall"
    [ 416.081] (II) LoadModule: "synaptics"
    [ 416.082] (II) Loading /usr/lib/xorg/modules/input/synaptics_drv.so
    [ 416.082] (II) Module synaptics: vendor="X.Org Foundation"
    [ 416.082] compiled for 1.9.4, module version = 1.4.0
    [ 416.082] Module class: X.Org XInput Driver
    [ 416.082] ABI class: X.Org XInput driver, version 11.0
    [ 416.082] (**) Option "Device" "/dev/input/event7"
    [ 416.203] (--) SynPS/2 Synaptics TouchPad: x-axis range 1472 - 5432
    [ 416.203] (--) SynPS/2 Synaptics TouchPad: y-axis range 1408 - 4760
    [ 416.203] (--) SynPS/2 Synaptics TouchPad: pressure range 0 - 255
    [ 416.203] (--) SynPS/2 Synaptics TouchPad: finger width range 0 - 15
    [ 416.203] (--) SynPS/2 Synaptics TouchPad: buttons: left right
    [ 416.203] (**) Option "TapButton1" "1"
    [ 416.203] (**) Option "TapButton2" "2"
    [ 416.203] (**) Option "TapButton3" "3"
    [ 416.310] (--) SynPS/2 Synaptics TouchPad: touchpad found
    [ 416.310] (**) SynPS/2 Synaptics TouchPad: always reports core events
    [ 416.363] (II) XINPUT: Adding extended input device "SynPS/2 Synaptics TouchPad" (type: TOUCHPAD)
    [ 416.363] (**) SynPS/2 Synaptics TouchPad: (accel) MinSpeed is now constant deceleration 2.5
    [ 416.363] (**) SynPS/2 Synaptics TouchPad: MaxSpeed is now 1.75
    [ 416.363] (**) SynPS/2 Synaptics TouchPad: AccelFactor is now 0.039
    [ 416.363] (**) SynPS/2 Synaptics TouchPad: (accel) keeping acceleration scheme 1
    [ 416.363] (**) SynPS/2 Synaptics TouchPad: (accel) acceleration profile 1
    [ 416.363] (**) SynPS/2 Synaptics TouchPad: (accel) acceleration factor: 2.000
    [ 416.363] (**) SynPS/2 Synaptics TouchPad: (accel) acceleration threshold: 4
    [ 416.433] (--) SynPS/2 Synaptics TouchPad: touchpad found
    [ 416.434] (II) config/udev: Adding input device SynPS/2 Synaptics TouchPad (/dev/input/mouse0)
    [ 416.434] (II) No input driver/identifier specified (ignoring)
    [ 416.434] (II) config/udev: Adding input device PC Speaker (/dev/input/event1)
    [ 416.435] (II) No input driver/identifier specified (ignoring)
    [ 416.438] (II) config/udev: Adding input device HP WMI hotkeys (/dev/input/event8)
    [ 416.438] (**) HP WMI hotkeys: Applying InputClass "evdev keyboard catchall"
    [ 416.438] (**) HP WMI hotkeys: always reports core events
    [ 416.438] (**) HP WMI hotkeys: Device: "/dev/input/event8"
    [ 416.460] (--) HP WMI hotkeys: Found keys
    [ 416.460] (II) HP WMI hotkeys: Configuring as keyboard
    [ 416.460] (II) XINPUT: Adding extended input device "HP WMI hotkeys" (type: KEYBOARD)
    [ 416.460] (**) Option "xkb_rules" "evdev"
    [ 416.460] (**) Option "xkb_model" "evdev"
    [ 416.460] (**) Option "xkb_layout" "us"
    [ 464.710] (II) AIGLX: Suspending AIGLX clients for VT switch
    [ 466.625] (II) HP WMI hotkeys: Close
    [ 466.625] (II) UnloadModule: "evdev"
    [ 466.626] (II) UnloadModule: "synaptics"
    [ 466.626] (II) AT Translated Set 2 keyboard: Close
    [ 466.626] (II) UnloadModule: "evdev"
    [ 466.626] (II) HP Webcam: Close
    [ 466.626] (II) UnloadModule: "evdev"
    [ 466.626] (II) Power Button: Close
    [ 466.626] (II) UnloadModule: "evdev"
    [ 466.626] (II) Video Bus: Close
    [ 466.626] (II) UnloadModule: "evdev"
    [ 466.626] (II) Power Button: Close
    [ 466.627] (II) UnloadModule: "evdev".
    I hope that you can help me to bring X and sessions with GDM to work again. Thank you
    Last edited by joseperezc (2011-03-18 23:55:10)

    joseperezc wrote:
    Hi everybody.
    I was looking for tunning a bit my installation of arch. and ruined something about X and authentification.
    the files I remember to have deleted are all in /etc that ends in "-" and  ".pacnew" and ".original"
    those files includes shadow- and passwd-.
    I was sure that those files are just backups, but now i dont know.
    You should never just delete .pacnew files.  You are meant to merge the contents with your existing files
    https://wiki.archlinux.org/index.php/Pa … save_Files

  • Using smart card/nfc tag for authentication on Windows 8 devices NOT in a domain

    Title says it all. We have Sony RC-S380 readers and Acer Iconia W510 tablets with builtin Broadcom NFC chips. We can read tags and configure them for the usual proximity stuff (URIs, mail, etc.) but we are looking for authentication purposes, however without
    using ADFS or domain security. Can anyone point us in the right direction?

    Hi,
    By default, smart card is not available for stand alone computer and local account.
    This authentication technology might be helpful to you:
    EIDAuthenticate - Smart card logon on stand alone computers and local accounts
    http://www.mysmartlogon.com/products/eidauthenticate.html
    Please Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Karen Hu
    TechNet Community Support

  • SChannel Fails Authentication on Windows Server 2008 R2 Using TLS1

    I am trying to use SChannel to secure a socket connection. I modified the example at
    https://msdn.microsoft.com/en-us/library/windows/desktop/aa380537(v=vs.85).aspx, converting it from Negotiate to SChannel.  Following the specs for the SSPI APIs I was able the get a Client & Server connection authenticated on Windows 7. 
    However, when I try running the same programs on Windows Server 2008 R2, either the Client side or Server side fails, depending on how I select the security protocol.
    Here is the modified example code, details about my results follow the code.
    Client.cpp
    // Client-side program to establish an SSPI socket connection
    // with a server and exchange messages.
    // Define macros and constants.
    #include "StdAfx.h"
    #include <windows.h>
    #include <winsock.h>
    #include <stdio.h>
    #include <stdlib.h>
    #include "SspiExample.h"
    #include <string>
    #include <iostream>
    CredHandle g_hCred;
    SecHandle g_hCtext;
    #define SSPI_CLIENT "SChannelClient:" __FUNCTION__
    void main(int argc, char * argv[])
    SOCKET Client_Socket;
    BYTE Data[BIG_BUFF];
    PCHAR pMessage;
    WSADATA wsaData;
    SECURITY_STATUS ss;
    DWORD cbRead;
    ULONG cbHeader;
    ULONG cbMaxMessage;
    ULONG cbTrailer;
    SecPkgContext_StreamSizes SecPkgSizes;
    SecPkgContext_PackageInfo SecPkgPkgInfo;
    SecPkgContext_ConnectionInfo ConnectionInfo;
    BOOL DoAuthentication (SOCKET s, WCHAR * pCertName);
    char Server[512] = {0};
    WCHAR CertName[512] = {0};
    // Validate cmd line parameters
    if ( argc != 3 )
    LOGA ( ( __log_buf, SSPI_CLIENT " required parameters ServerName & CertName not entered.\n"));
    LOGA( ( __log_buf, SSPI_CLIENT " Abort and start over with required parameters.\n") );
    std::cin.get();
    else
    // argv[1] - ServerName - the name of the computer running the server sample.
    // argv[2] - TargetName the common name of the certificate provided
    // by the target server program.
    memcpy(Server, argv[1], strlen(argv[1]));
    size_t sizCN;
    mbstowcs_s(&sizCN, CertName, strlen(argv[2])+1, argv[2], _TRUNCATE);
    LOGA ( ( __log_buf, SSPI_CLIENT " input parameters - ServerName %s CertName %ls.\n", Server, CertName ));
    // Initialize the socket and the SSP security package.
    if(WSAStartup (0x0101, &wsaData))
    MyHandleError( __FUNCTION__ " Could not initialize winsock ");
    // Connect to a server.
    SecInvalidateHandle( &g_hCtext );
    if (!ConnectAuthSocket (
    &Client_Socket,
    &g_hCred,
    &g_hCtext,
    Server,
    CertName))
    MyHandleError( __FUNCTION__ " Authenticated server connection ");
    LOGA ( ( __log_buf, SSPI_CLIENT " connection authenticated.\n"));
    // An authenticated session with a server has been established.
    // Receive and manage a message from the server.
    // First, find and display the name of the SSP,
    // the transport protocol supported by the SSP,
    // and the size of the header, maximum message, and
    // trailer blocks for this SSP.
    ss = QueryContextAttributes(
    &g_hCtext,
    SECPKG_ATTR_PACKAGE_INFO,
    &SecPkgPkgInfo );
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_CLIENT "QueryContextAttributes failed: 0x%08x\n", ss));
    MyHandleError( __FUNCTION__ " QueryContextAttributes failed.\n");
    else
    LOGA ( ( __log_buf, SSPI_CLIENT " Package Name: %ls\n", SecPkgPkgInfo.PackageInfo->Name));
    // Free the allocated buffer.
    FreeContextBuffer(SecPkgPkgInfo.PackageInfo);
    ss = QueryContextAttributes(
    &g_hCtext,
    SECPKG_ATTR_STREAM_SIZES,
    &SecPkgSizes );
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_CLIENT " QueryContextAttributes failed: 0x%08x\n", ss));
    MyHandleError( __FUNCTION__ " Query context ");
    cbHeader = SecPkgSizes.cbHeader;
    cbMaxMessage = SecPkgSizes.cbMaximumMessage;
    cbTrailer = SecPkgSizes.cbTrailer;
    LOGA ( ( __log_buf, SSPI_CLIENT " cbHeader %u, cbMaxMessage %u, cbTrailer %u\n", cbHeader, cbMaxMessage, cbTrailer ));
    ss = QueryContextAttributes(
    &g_hCtext,
    SECPKG_ATTR_CONNECTION_INFO,
    &ConnectionInfo );
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_CLIENT " QueryContextAttributes failed: 0x%08x\n", ss));
    MyHandleError( __FUNCTION__ " Query context ");
    switch(ConnectionInfo.dwProtocol)
    case SP_PROT_TLS1_CLIENT:
    LOGA ( ( __log_buf, SSPI_CLIENT " Protocol: TLS1\n"));
    break;
    case SP_PROT_SSL3_CLIENT:
    LOGA ( ( __log_buf, SSPI_CLIENT " Protocol: SSL3\n"));
    break;
    case SP_PROT_PCT1_CLIENT:
    LOGA ( ( __log_buf, SSPI_CLIENT " Protocol: PCT\n"));
    break;
    case SP_PROT_SSL2_CLIENT:
    LOGA ( ( __log_buf, SSPI_CLIENT " Protocol: SSL2\n"));
    break;
    default:
    LOGA ( ( __log_buf, SSPI_CLIENT " Unknown Protocol: 0x%x\n", ConnectionInfo.dwProtocol));
    switch(ConnectionInfo.aiCipher)
    case CALG_RC4:
    LOGA ( ( __log_buf, SSPI_CLIENT " Cipher: RC4\n");)
    break;
    case CALG_3DES:
    LOGA ( ( __log_buf, SSPI_CLIENT " Cipher: Triple DES\n"));
    break;
    case CALG_RC2:
    LOGA ( ( __log_buf, SSPI_CLIENT " Cipher: RC2\n"));
    break;
    case CALG_DES:
    case CALG_CYLINK_MEK:
    LOGA ( ( __log_buf, SSPI_CLIENT " Cipher: DES\n"));
    break;
    case CALG_SKIPJACK:
    LOGA ( ( __log_buf, SSPI_CLIENT " Cipher: Skipjack\n"));
    break;
    case CALG_AES_256:
    LOGA ( ( __log_buf, SSPI_CLIENT " Cipher: AES 256\n"));
    break;
    default:
    LOGA ( ( __log_buf, SSPI_CLIENT " Unknown Cipher: 0x%x\n", ConnectionInfo.aiCipher));
    LOGA ( ( __log_buf, SSPI_CLIENT " Cipher strength: %d\n", ConnectionInfo.dwCipherStrength));
    switch(ConnectionInfo.aiHash)
    case CALG_MD5:
    LOGA ( ( __log_buf, SSPI_CLIENT " Hash: MD5\n"));
    break;
    case CALG_SHA:
    LOGA ( ( __log_buf, SSPI_CLIENT " Hash: SHA\n"));
    break;
    default:
    LOGA ( ( __log_buf, SSPI_CLIENT " Unknown Hash: 0x%x\n", ConnectionInfo.aiHash));
    LOGA ( ( __log_buf, SSPI_CLIENT " Hash strength: %d\n", ConnectionInfo.dwHashStrength));
    switch(ConnectionInfo.aiExch)
    case CALG_RSA_KEYX:
    case CALG_RSA_SIGN:
    LOGA ( ( __log_buf, SSPI_CLIENT " Key exchange: RSA\n"));
    break;
    case CALG_KEA_KEYX:
    LOGA ( ( __log_buf, SSPI_CLIENT " Key exchange: KEA\n"));
    break;
    case CALG_DH_EPHEM:
    LOGA ( ( __log_buf, SSPI_CLIENT " Key exchange: DH Ephemeral\n"));
    break;
    default:
    LOGA ( ( __log_buf, SSPI_CLIENT " Unknown Key exchange: 0x%x\n", ConnectionInfo.aiExch));
    LOGA ( ( __log_buf, SSPI_CLIENT " Key exchange strength: %d\n", ConnectionInfo.dwExchStrength));
    // Decrypt and display the message from the server.
    if (!ReceiveBytes(
    Client_Socket,
    Data,
    BIG_BUFF,
    &cbRead))
    MyHandleError( __FUNCTION__ " No response from server\n");
    if (0 == cbRead)
    MyHandleError(__FUNCTION__ " Zero bytes received.\n");
    pMessage = (PCHAR) DecryptThis(
    Data,
    &cbRead,
    &g_hCtext);
    // Skip the header to get the decrypted message
    pMessage += cbHeader;
    ULONG cbMessage = cbRead-cbHeader-cbTrailer;
    if ((cbMessage == strlen(TEST_MSG)) &&
    !strncmp(pMessage, TEST_MSG, strlen(TEST_MSG)) )
    LOGA ( ( __log_buf, SSPI_CLIENT " SUCCESS!! The message from the server is \n -> %.*s \n",
    cbMessage, pMessage ))
    else
    LOGA ( ( __log_buf, SSPI_CLIENT " UNEXPECTED message from the server: \n -> %.*s \n",
    cbMessage, pMessage ));
    LOGA ( ( __log_buf, SSPI_CLIENT " rcvd msg size %u, exp size %u\n", cbMessage, strlen(TEST_MSG) ));
    // Terminate socket and security package.
    DeleteSecurityContext (&g_hCtext);
    FreeCredentialHandle (&g_hCred);
    shutdown (Client_Socket, 2);
    closesocket (Client_Socket);
    if (SOCKET_ERROR == WSACleanup ())
    MyHandleError( __FUNCTION__ " Problem with socket cleanup ");
    exit (EXIT_SUCCESS);
    } // end main
    // ConnectAuthSocket establishes an authenticated socket connection
    // with a server and initializes needed security package resources.
    BOOL ConnectAuthSocket (
    SOCKET *s,
    CredHandle *g_hCred,
    PSecHandle phCtext,
    char * pServer,
    WCHAR * pCertName)
    unsigned long ulAddress;
    struct hostent *pHost;
    SOCKADDR_IN sin;
    // Lookup the server's address.
    LOGA ( ( __log_buf, SSPI_CLIENT " entry.\n"));
    ulAddress = inet_addr (pServer);
    if (INADDR_NONE == ulAddress)
    LOGA ( ( __log_buf, SSPI_CLIENT " calling gethostbyname with %s.\n", pServer ));
    pHost = gethostbyname (pServer);
    if (NULL == pHost)
    MyHandleError(__FUNCTION__ " Unable to resolve host name ");
    memcpy((char FAR *)&ulAddress, pHost->h_addr, pHost->h_length);
    std::string ipAddrStr;
    ipAddrStr = inet_ntoa( *(struct in_addr*)*pHost->h_addr_list);
    LOGA ( ( __log_buf, __FUNCTION__ " gethostbyname - ipAddress %s, name %s.\n", ipAddrStr.c_str(), pHost->h_name ) );
    // Create the socket.
    *s = socket (
    PF_INET,
    SOCK_STREAM,
    0);
    if (INVALID_SOCKET == *s)
    MyHandleError(__FUNCTION__ " Unable to create socket");
    else
    LOGA ( ( __log_buf, SSPI_CLIENT " Socket created.\n"));
    sin.sin_family = AF_INET;
    sin.sin_addr.s_addr = ulAddress;
    sin.sin_port = htons (g_usPort);
    // Connect to the server.
    if (connect (*s, (LPSOCKADDR) &sin, sizeof (sin)))
    closesocket (*s);
    MyHandleError( __FUNCTION__ " Connect failed ");
    LOGA ( ( __log_buf, SSPI_CLIENT " Connection established.\n"));
    // Authenticate the connection.
    if (!DoAuthentication (*s, pCertName))
    closesocket (*s);
    MyHandleError( __FUNCTION__ " Authentication ");
    LOGA ( ( __log_buf, SSPI_CLIENT " success.\n"));
    return(TRUE);
    } // end ConnectAuthSocket
    BOOL DoAuthentication (SOCKET s, WCHAR * pCertName)
    BOOL fDone = FALSE;
    DWORD cbOut = 0;
    DWORD cbIn = 0;
    PBYTE pInBuf;
    PBYTE pOutBuf;
    if(!(pInBuf = (PBYTE) malloc(MAXMESSAGE)))
    MyHandleError( __FUNCTION__ " Memory allocation ");
    if(!(pOutBuf = (PBYTE) malloc(MAXMESSAGE)))
    MyHandleError( __FUNCTION__ " Memory allocation ");
    cbOut = MAXMESSAGE;
    LOGA ( ( __log_buf, SSPI_CLIENT " 1st message.\n"));
    if (!GenClientContext (
    NULL,
    0,
    pOutBuf,
    &cbOut,
    &fDone,
    pCertName,
    &g_hCred,
    &g_hCtext
    LOGA ( ( __log_buf, SSPI_CLIENT " GenClientContext failed\n"));
    return(FALSE);
    if (!SendMsg (s, pOutBuf, cbOut ))
    MyHandleError(__FUNCTION__ " Send message failed ");
    while (!fDone)
    if (!ReceiveMsg (
    s,
    pInBuf,
    MAXMESSAGE,
    &cbIn))
    MyHandleError( __FUNCTION__ " Receive message failed ");
    cbOut = MAXMESSAGE;
    LOGA ( ( __log_buf, SSPI_CLIENT " Message loop.\n"));
    if (!GenClientContext (
    pInBuf,
    cbIn,
    pOutBuf,
    &cbOut,
    &fDone,
    pCertName,
    &g_hCred,
    &g_hCtext))
    MyHandleError( __FUNCTION__ " GenClientContext failed");
    if (!SendMsg (
    s,
    pOutBuf,
    cbOut))
    MyHandleError( __FUNCTION__ " Send message failed");
    LOGA ( ( __log_buf, SSPI_CLIENT " fDone %s.\n", fDone ? "Yes" : "No" ));
    if (NULL != pInBuf)
    free(pInBuf);
    pInBuf = NULL;
    if (NULL != pOutBuf)
    free(pOutBuf);
    pOutBuf = NULL;
    LOGA ( ( __log_buf, SSPI_CLIENT " exit.\n"));
    return(TRUE);
    BOOL GenClientContext (
    BYTE *pIn,
    DWORD cbIn,
    BYTE *pOut,
    DWORD *pcbOut,
    BOOL *pfDone,
    WCHAR *pCertName,
    CredHandle *g_hCred,
    struct _SecHandle *g_hCtext)
    SECURITY_STATUS ss;
    TimeStamp Lifetime;
    SecBufferDesc OutBuffDesc;
    SecBuffer OutSecBuff;
    SecBufferDesc InBuffDesc;
    SecBuffer InSecBuff[2];
    ULONG ContextAttributes;
    static TCHAR lpPackageName[1024];
    if( NULL == pIn )
    wcscpy_s(lpPackageName, 1024 * sizeof(TCHAR), UNISP_NAME );
    ss = AcquireCredentialsHandle (
    NULL,
    lpPackageName,
    SECPKG_CRED_OUTBOUND,
    NULL,
    NULL,
    NULL,
    NULL,
    g_hCred,
    &Lifetime);
    if (!(SEC_SUCCESS (ss)))
    MyHandleError( __FUNCTION__ " AcquireCreds failed ");
    // Prepare the buffers.
    OutBuffDesc.ulVersion = 0;
    OutBuffDesc.cBuffers = 1;
    OutBuffDesc.pBuffers = &OutSecBuff;
    OutSecBuff.cbBuffer = *pcbOut;
    OutSecBuff.BufferType = SECBUFFER_TOKEN;
    OutSecBuff.pvBuffer = pOut;
    // The input buffer is created only if a message has been received
    // from the server.
    if (pIn)
    LOGA ( ( __log_buf, SSPI_CLIENT " Call InitializeSecurityContext with pIn supplied.\n"));
    InBuffDesc.ulVersion = 0;
    InBuffDesc.cBuffers = 1;
    InBuffDesc.pBuffers = InSecBuff;
    InSecBuff[0].cbBuffer = cbIn;
    InSecBuff[0].BufferType = SECBUFFER_TOKEN;
    InSecBuff[0].pvBuffer = pIn;
    InSecBuff[1].pvBuffer = NULL;
    InSecBuff[1].cbBuffer = 0;
    InSecBuff[1].BufferType = SECBUFFER_EMPTY;
    ss = InitializeSecurityContext (
    g_hCred,
    g_hCtext,
    pCertName,
    MessageAttribute,
    0,
    0,
    &InBuffDesc,
    0,
    g_hCtext,
    &OutBuffDesc,
    &ContextAttributes,
    &Lifetime);
    else
    LOGA ( ( __log_buf, SSPI_CLIENT " Call InitializeSecurityContext with NULL pIn.\n"));
    ss = InitializeSecurityContext (
    g_hCred,
    NULL,
    pCertName,
    MessageAttribute,
    0,
    0,
    NULL,
    0,
    g_hCtext,
    &OutBuffDesc,
    &ContextAttributes,
    &Lifetime);
    if (!SEC_SUCCESS (ss))
    LOGA ( ( __log_buf, SSPI_CLIENT " InitializeSecurityContext failed with error 0x%08x\n", ss));
    MyHandleError ( __FUNCTION__ " InitializeSecurityContext failed " );
    LOGA ( ( __log_buf, SSPI_CLIENT " InitializeSecurityContext returned 0x%08x\n", ss));
    // If necessary, complete the token.
    if ((SEC_I_COMPLETE_NEEDED == ss)
    || (SEC_I_COMPLETE_AND_CONTINUE == ss))
    ss = CompleteAuthToken (g_hCtext, &OutBuffDesc);
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_CLIENT " complete failed: 0x%08x\n", ss));
    return FALSE;
    *pcbOut = OutSecBuff.cbBuffer;
    *pfDone = !((SEC_I_CONTINUE_NEEDED == ss) ||
    (SEC_I_COMPLETE_AND_CONTINUE == ss));
    LOGA ( ( __log_buf, SSPI_CLIENT " Token buffer generated (%lu bytes):\n", OutSecBuff.cbBuffer));
    PrintHexDump (OutSecBuff.cbBuffer, (PBYTE)OutSecBuff.pvBuffer);
    return TRUE;
    PBYTE DecryptThis(
    PBYTE pBuffer,
    LPDWORD pcbMessage,
    struct _SecHandle *hCtxt)
    SECURITY_STATUS ss;
    SecBufferDesc BuffDesc;
    SecBuffer SecBuff[4];
    ULONG ulQop = 0;
    // By agreement, the server encrypted the message and set the size
    // of the trailer block to be just what it needed. DecryptMessage
    // needs the size of the trailer block.
    // The size of the trailer is in the first DWORD of the
    // message received.
    LOGA ( ( __log_buf, SSPI_CLIENT " data before decryption including trailer (%lu bytes):\n",
    *pcbMessage));
    PrintHexDump (*pcbMessage, (PBYTE) pBuffer);
    // Prepare the buffers to be passed to the DecryptMessage function.
    BuffDesc.ulVersion = 0;
    BuffDesc.cBuffers = 4;
    BuffDesc.pBuffers = SecBuff;
    SecBuff[0].cbBuffer = *pcbMessage;
    SecBuff[0].BufferType = SECBUFFER_DATA;
    SecBuff[0].pvBuffer = pBuffer;
    SecBuff[1].cbBuffer = 0;
    SecBuff[1].BufferType = SECBUFFER_EMPTY;
    SecBuff[1].pvBuffer = NULL;
    SecBuff[2].cbBuffer = 0;
    SecBuff[2].BufferType = SECBUFFER_EMPTY;
    SecBuff[2].pvBuffer = NULL;
    SecBuff[3].cbBuffer = 0;
    SecBuff[3].BufferType = SECBUFFER_EMPTY;
    SecBuff[3].pvBuffer = NULL;
    ss = DecryptMessage(
    hCtxt,
    &BuffDesc,
    0,
    &ulQop);
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_CLIENT " DecryptMessage failed with error 0x%08x\n", ss))
    else
    LOGA ( ( __log_buf, SSPI_CLIENT " DecryptMessage success? Status: 0x%08x\n", ss));
    // Return a pointer to the decrypted data. The trailer data
    // is discarded.
    return pBuffer;
    PBYTE VerifyThis(
    PBYTE pBuffer,
    LPDWORD pcbMessage,
    struct _SecHandle *hCtxt,
    ULONG cbMaxSignature)
    SECURITY_STATUS ss;
    SecBufferDesc BuffDesc;
    SecBuffer SecBuff[2];
    ULONG ulQop = 0;
    PBYTE pSigBuffer;
    PBYTE pDataBuffer;
    // The global cbMaxSignature is the size of the signature
    // in the message received.
    LOGA ( ( __log_buf, SSPI_CLIENT " data before verifying (including signature):\n"));
    PrintHexDump (*pcbMessage, pBuffer);
    // By agreement with the server,
    // the signature is at the beginning of the message received,
    // and the data that was signed comes after the signature.
    pSigBuffer = pBuffer;
    pDataBuffer = pBuffer + cbMaxSignature;
    // The size of the message is reset to the size of the data only.
    *pcbMessage = *pcbMessage - (cbMaxSignature);
    // Prepare the buffers to be passed to the signature verification
    // function.
    BuffDesc.ulVersion = 0;
    BuffDesc.cBuffers = 2;
    BuffDesc.pBuffers = SecBuff;
    SecBuff[0].cbBuffer = cbMaxSignature;
    SecBuff[0].BufferType = SECBUFFER_TOKEN;
    SecBuff[0].pvBuffer = pSigBuffer;
    SecBuff[1].cbBuffer = *pcbMessage;
    SecBuff[1].BufferType = SECBUFFER_DATA;
    SecBuff[1].pvBuffer = pDataBuffer;
    ss = VerifySignature(
    hCtxt,
    &BuffDesc,
    0,
    &ulQop
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_CLIENT " VerifyMessage failed with error 0x%08x\n", ss));
    else
    LOGA ( ( __log_buf, SSPI_CLIENT " Message was properly signed.\n"));
    return pDataBuffer;
    } // end VerifyThis
    void PrintHexDump(
    DWORD length,
    PBYTE buffer)
    DWORD i,count,index;
    CHAR rgbDigits[]="0123456789abcdef";
    CHAR rgbLine[100];
    char cbLine;
    for(index = 0; length;
    length -= count, buffer += count, index += count)
    count = (length > 16) ? 16:length;
    sprintf_s(rgbLine, 100, "%4.4x ",index);
    cbLine = 6;
    for(i=0;i<count;i++)
    rgbLine[cbLine++] = rgbDigits[buffer[i] >> 4];
    rgbLine[cbLine++] = rgbDigits[buffer[i] & 0x0f];
    if(i == 7)
    rgbLine[cbLine++] = ':';
    else
    rgbLine[cbLine++] = ' ';
    for(; i < 16; i++)
    rgbLine[cbLine++] = ' ';
    rgbLine[cbLine++] = ' ';
    rgbLine[cbLine++] = ' ';
    rgbLine[cbLine++] = ' ';
    for(i = 0; i < count; i++)
    if(buffer[i] < 32 || buffer[i] > 126)
    rgbLine[cbLine++] = '.';
    else
    rgbLine[cbLine++] = buffer[i];
    rgbLine[cbLine++] = 0;
    LOGA ( ( __log_buf, SSPI_CLIENT " %s\n", rgbLine));
    BOOL SendMsg (
    SOCKET s,
    PBYTE pBuf,
    DWORD cbBuf)
    if (0 == cbBuf)
    return(TRUE);
    // Send the size of the message.
    LOGA ( ( __log_buf, SSPI_CLIENT " %lu bytes\n", cbBuf ));
    if (!SendBytes (s, (PBYTE)&cbBuf, sizeof (cbBuf)))
    LOGA ( ( __log_buf, SSPI_CLIENT " size failed.\n" ) );
    return(FALSE);
    // Send the body of the message.
    if (!SendBytes (
    s,
    pBuf,
    cbBuf))
    LOGA ( ( __log_buf, SSPI_CLIENT " body failed.\n" ) );
    return(FALSE);
    LOGA ( ( __log_buf, SSPI_CLIENT " success\n" ) );
    return(TRUE);
    BOOL ReceiveMsg (
    SOCKET s,
    PBYTE pBuf,
    DWORD cbBuf,
    DWORD *pcbRead)
    DWORD cbRead;
    DWORD cbData;
    // Receive the number of bytes in the message.
    LOGA ( ( __log_buf, SSPI_CLIENT " entry.\n" ));
    if (!ReceiveBytes (
    s,
    (PBYTE)&cbData,
    sizeof (cbData),
    &cbRead))
    return(FALSE);
    if (sizeof (cbData) != cbRead)
    LOGA ( ( __log_buf, SSPI_CLIENT " failed: size of cbData %lu, bytes %lu\n", sizeof (cbData), cbRead));
    return(FALSE);
    // Read the full message.
    if (!ReceiveBytes (
    s,
    pBuf,
    cbData,
    &cbRead))
    return(FALSE);
    if (cbRead != cbData)
    return(FALSE);
    *pcbRead = cbRead;
    return(TRUE);
    } // end ReceiveMessage
    BOOL SendBytes (
    SOCKET s,
    PBYTE pBuf,
    DWORD cbBuf)
    PBYTE pTemp = pBuf;
    int cbSent;
    int cbRemaining = cbBuf;
    if (0 == cbBuf)
    return(TRUE);
    while (cbRemaining)
    LOGA ( ( __log_buf, SSPI_CLIENT " %lu bytes.\n", cbRemaining ));
    cbSent = send (
    s,
    (const char *)pTemp,
    cbRemaining,
    0);
    if (SOCKET_ERROR == cbSent)
    LOGA ( ( __log_buf, SSPI_CLIENT " send failed: 0x%08.8X\n", GetLastError ()));
    return FALSE;
    pTemp += cbSent;
    cbRemaining -= cbSent;
    LOGA ( ( __log_buf, SSPI_CLIENT " success\n" ) );
    return TRUE;
    BOOL ReceiveBytes (
    SOCKET s,
    PBYTE pBuf,
    DWORD cbBuf,
    DWORD *pcbRead)
    PBYTE pTemp = pBuf;
    int cbRead, cbRemaining = cbBuf;
    LOGA ( ( __log_buf, SSPI_CLIENT " Entry: %lu bytes.\n", cbRemaining ));
    while (cbRemaining)
    cbRead = recv (
    s,
    (char *)pTemp,
    cbRemaining,
    0);
    LOGA ( ( __log_buf, SSPI_CLIENT " %lu bytes remaining.\n", cbRemaining ));
    if (0 == cbRead)
    break;
    if (SOCKET_ERROR == cbRead)
    LOGA ( ( __log_buf, SSPI_CLIENT " recv failed: 0x%08.8X\n", GetLastError ()));
    return FALSE;
    cbRemaining -= cbRead;
    pTemp += cbRead;
    *pcbRead = cbBuf - cbRemaining;
    LOGA ( ( __log_buf, SSPI_CLIENT " success.\n" ));
    return TRUE;
    } // end ReceiveBytes
    void MyHandleError(char *s)
    DWORD err = GetLastError();
    if (err)
    LOGA ( ( __log_buf, SSPI_CLIENT " %s error (0x%08.8X). Exiting.\n",s, err ))
    else
    LOGA ( ( __log_buf, SSPI_CLIENT " %s error (no error info). Exiting.\n",s ));
    exit (EXIT_FAILURE);
    Server.cpp
    // This is a server-side SSPI Windows Sockets program.
    #include "StdAfx.h"
    #include <windows.h>
    #include <winsock.h>
    #include <stdio.h>
    #include <stdlib.h>
    #include "Sspiexample.h"
    #include <iostream>
    CredHandle g_hcred;
    struct _SecHandle g_hctxt;
    static PBYTE g_pInBuf = NULL;
    static PBYTE g_pOutBuf = NULL;
    static DWORD g_cbMaxMessage;
    static TCHAR g_lpPackageName[1024];
    BOOL AcceptAuthSocket (SOCKET *ServerSocket, std::string certThumb );
    #define SSPI_SERVER "SChannelServer:" __FUNCTION__
    void main (int argc, char * argv[])
    CHAR pMessage[200];
    DWORD cbMessage;
    PBYTE pDataToClient = NULL;
    DWORD cbDataToClient = 0;
    PWCHAR pUserName = NULL;
    DWORD cbUserName = 0;
    SOCKET Server_Socket;
    WSADATA wsaData;
    SECURITY_STATUS ss;
    PSecPkgInfo pkgInfo;
    SecPkgContext_StreamSizes SecPkgSizes;
    SecPkgContext_PackageInfo SecPkgPkgInfo;
    ULONG cbMaxMessage;
    ULONG cbHeader;
    ULONG cbTrailer;
    std::string certThumb;
    // Create a certificate if no thumbprint is supplied. Otherwise, use the provided
    // thumbprint to find the certificate.
    if ( (argc > 1) && (strlen( argv[1]) > 0) )
    certThumb.assign(argv[1]);
    else
    LOGA( ( __log_buf, SSPI_SERVER " : No certificate thumbprint supplied.\n") );
    LOGA( ( __log_buf, SSPI_SERVER " : Press ENTER to create a certificate, or abort and start over with a thumbprint.\n") );
    std::cin.get();
    certThumb.clear();
    Insert code to find or create X.509 certificate.
    // Set the default package to SChannel.
    wcscpy_s(g_lpPackageName, 1024 * sizeof(TCHAR), UNISP_NAME);
    // Initialize the socket interface and the security package.
    if( WSAStartup (0x0101, &wsaData))
    LOGA ( ( __log_buf, SSPI_SERVER " Could not initialize winsock: \n") );
    cleanup();
    ss = QuerySecurityPackageInfo (
    g_lpPackageName,
    &pkgInfo);
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_SERVER " Could not query package info for %s, error 0x%08x\n",
    g_lpPackageName, ss) );
    cleanup();
    g_cbMaxMessage = pkgInfo->cbMaxToken;
    FreeContextBuffer(pkgInfo);
    g_pInBuf = (PBYTE) malloc (g_cbMaxMessage);
    g_pOutBuf = (PBYTE) malloc (g_cbMaxMessage);
    if (NULL == g_pInBuf || NULL == g_pOutBuf)
    LOGA ( ( __log_buf, SSPI_SERVER " Memory allocation error.\n"));
    cleanup();
    // Start looping for clients.
    while(TRUE)
    LOGA ( ( __log_buf, SSPI_SERVER " Waiting for client to connect...\n"));
    // Make an authenticated connection with client.
    if (!AcceptAuthSocket (&Server_Socket, certThumb ))
    LOGA ( ( __log_buf, SSPI_SERVER " Could not authenticate the socket.\n"));
    cleanup();
    ss = QueryContextAttributes(
    &g_hctxt,
    SECPKG_ATTR_STREAM_SIZES,
    &SecPkgSizes );
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_SERVER " failed: 0x%08x\n", ss));
    exit(1);
    // The following values are used for encryption and signing.
    cbMaxMessage = SecPkgSizes.cbMaximumMessage;
    cbHeader = SecPkgSizes.cbHeader;
    cbTrailer = SecPkgSizes.cbTrailer;
    LOGA ( ( __log_buf, SSPI_SERVER " cbHeader %u, cbMaxMessage %u, cbTrailer %u\n", cbHeader, cbMaxMessage, cbTrailer ));
    ss = QueryContextAttributes(
    &g_hctxt,
    SECPKG_ATTR_PACKAGE_INFO,
    &SecPkgPkgInfo );
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_SERVER " failed: 0x%08x\n", ss));
    exit(1);
    else
    LOGA ( ( __log_buf, SSPI_SERVER " Package Name: %ls\n", SecPkgPkgInfo.PackageInfo->Name));
    // Free the allocated buffer.
    FreeContextBuffer(SecPkgPkgInfo.PackageInfo);
    // Send the client an encrypted message.
    strcpy_s(pMessage, sizeof(pMessage),
    TEST_MSG);
    cbMessage = (DWORD)strlen(pMessage);
    EncryptThis (
    (PBYTE) pMessage,
    cbMessage,
    &pDataToClient,
    &cbDataToClient,
    cbHeader,
    cbTrailer);
    // Send the encrypted data to client.
    if (!SendBytes(
    Server_Socket,
    pDataToClient,
    cbDataToClient))
    LOGA ( ( __log_buf, SSPI_SERVER " send message failed. \n"));
    cleanup();
    LOGA ( ( __log_buf, SSPI_SERVER " %d encrypted bytes sent. \n", cbDataToClient));
    if (Server_Socket)
    DeleteSecurityContext (&g_hctxt);
    FreeCredentialHandle (&g_hcred);
    shutdown (Server_Socket, 2) ;
    closesocket (Server_Socket);
    Server_Socket = 0;
    if (pUserName)
    free (pUserName);
    pUserName = NULL;
    cbUserName = 0;
    if(pDataToClient)
    free (pDataToClient);
    pDataToClient = NULL;
    cbDataToClient = 0;
    } // end while loop
    LOGA ( ( __log_buf, SSPI_SERVER " Server ran to completion without error.\n"));
    cleanup();
    } // end main
    BOOL AcceptAuthSocket (SOCKET *ServerSocket, std::string certThumb )
    SOCKET sockListen;
    SOCKET sockClient;
    SOCKADDR_IN sockIn;
    // Create listening socket.
    sockListen = socket (
    PF_INET,
    SOCK_STREAM,
    0);
    if (INVALID_SOCKET == sockListen)
    LOGA ( ( __log_buf, SSPI_SERVER " Failed to create socket: %u\n", GetLastError ()));
    return(FALSE);
    // Bind to local port.
    sockIn.sin_family = AF_INET;
    sockIn.sin_addr.s_addr = 0;
    sockIn.sin_port = htons(usPort);
    if (SOCKET_ERROR == bind (
    sockListen,
    (LPSOCKADDR) &sockIn,
    sizeof (sockIn)))
    LOGA ( ( __log_buf, SSPI_SERVER " bind failed: %u\n", GetLastError ()));
    return(FALSE);
    // Listen for client.
    if (SOCKET_ERROR == listen (sockListen, 1))
    LOGA ( ( __log_buf, SSPI_SERVER " Listen failed: %u\n", GetLastError ()));
    return(FALSE);
    else
    LOGA ( ( __log_buf, SSPI_SERVER " Listening ! \n"));
    // Accept client.
    sockClient = accept (
    sockListen,
    NULL,
    NULL);
    if (INVALID_SOCKET == sockClient)
    LOGA ( ( __log_buf, SSPI_SERVER " accept failed: %u\n",GetLastError() ) );
    return(FALSE);
    closesocket (sockListen);
    *ServerSocket = sockClient;
    return(DoAuthentication (sockClient, certThumb ));
    } // end AcceptAuthSocket
    BOOL DoAuthentication (SOCKET AuthSocket, std::string certThumb )
    SECURITY_STATUS ss;
    DWORD cbIn, cbOut;
    BOOL done = FALSE;
    TimeStamp Lifetime;
    BOOL fNewConversation;
    fNewConversation = TRUE;
    PCCERT_CONTEXT pCertCtxt;
    Insert code to retrieve pCertCtxt
    // Build SCHANNEL_CRED structure to hold CERT_CONTEXT for call to AcquireCredentialsHandle
    SCHANNEL_CRED credSchannel = {0};
    credSchannel.dwVersion = SCHANNEL_CRED_VERSION;
    credSchannel.grbitEnabledProtocols = SP_PROT_SSL2_SERVER | SP_PROT_TLS1_SERVER;
    credSchannel.cCreds = 1;
    credSchannel.paCred = &pCertCtxt;
    ss = AcquireCredentialsHandle (
    NULL, //pszPrincipal
    g_lpPackageName, //pszPackage
    SECPKG_CRED_INBOUND, //fCredentialuse
    NULL, //pvLogonID
    &credSchannel, //pAuthData - need SCHANNEL_CRED structure that indicates the protocol to use and the settings for various customizable channel features.
    NULL, //pGetKeyFn
    NULL, //pvGetKeyArgument
    &g_hcred, //phCredential
    &Lifetime); //ptsExpiry
    if (!SEC_SUCCESS (ss))
    LOGA ( ( __log_buf, SSPI_SERVER " AcquireCreds failed: 0x%08x\n", ss));
    return(FALSE);
    while(!done)
    if (!ReceiveMsg (
    AuthSocket,
    g_pInBuf,
    g_cbMaxMessage,
    &cbIn))
    return(FALSE);
    cbOut = g_cbMaxMessage;
    if (!GenServerContext (
    g_pInBuf,
    cbIn,
    g_pOutBuf,
    &cbOut,
    &done,
    fNewConversation))
    LOGA ( ( __log_buf, SSPI_SERVER " GenServerContext failed.\n"));
    return(FALSE);
    fNewConversation = FALSE;
    if (!SendMsg (
    AuthSocket,
    g_pOutBuf,
    cbOut))
    LOGA ( ( __log_buf, SSPI_SERVER " Send message failed.\n"));
    return(FALSE);
    return(TRUE);
    } // end DoAuthentication
    BOOL GenServerContext (
    BYTE *pIn,
    DWORD cbIn,
    BYTE *pOut,
    DWORD *pcbOut,
    BOOL *pfDone,
    BOOL fNewConversation)
    SECURITY_STATUS ss;
    TimeStamp Lifetime;
    SecBufferDesc OutBuffDesc;
    SecBuffer OutSecBuff;
    SecBufferDesc InBuffDesc;
    SecBuffer InSecBuff;
    ULONG Attribs = 0;
    // Prepare output buffers.
    OutBuffDesc.ulVersion = 0;
    OutBuffDesc.cBuffers = 1;
    OutBuffDesc.pBuffers = &OutSecBuff;
    OutSecBuff.cbBuffer = *pcbOut;
    OutSecBuff.BufferType = SECBUFFER_TOKEN;
    OutSecBuff.pvBuffer = pOut;
    // Prepare input buffers.
    InBuffDesc.ulVersion = 0;
    InBuffDesc.cBuffers = 1;
    InBuffDesc.pBuffers = &InSecBuff;
    InSecBuff.cbBuffer = cbIn;
    InSecBuff.BufferType = SECBUFFER_TOKEN;
    InSecBuff.pvBuffer = pIn;
    LOGA ( ( __log_buf, SSPI_SERVER " Token buffer received (%lu bytes):\n", InSecBuff.cbBuffer));
    PrintHexDump (InSecBuff.cbBuffer, (PBYTE)InSecBuff.pvBuffer);
    ss = AcceptSecurityContext (
    &g_hcred,
    fNewConversation ? NULL : &g_hctxt,
    &InBuffDesc,
    Attribs,
    SECURITY_NATIVE_DREP,
    &g_hctxt,
    &OutBuffDesc,
    &Attribs,
    &Lifetime);
    if (!SEC_SUCCESS (ss))
    LOGA ( ( __log_buf, SSPI_SERVER " AcceptSecurityContext failed: 0x%08x\n", ss));
    OutputDebugStringA( "." );
    return FALSE;
    // Complete token if applicable.
    if ((SEC_I_COMPLETE_NEEDED == ss)
    || (SEC_I_COMPLETE_AND_CONTINUE == ss))
    ss = CompleteAuthToken (&g_hctxt, &OutBuffDesc);
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_SERVER " complete failed: 0x%08x\n", ss));
    OutputDebugStringA( "." );
    return FALSE;
    *pcbOut = OutSecBuff.cbBuffer;
    // fNewConversation equals FALSE.
    LOGA ( ( __log_buf, SSPI_SERVER " Token buffer generated (%lu bytes):\n",
    OutSecBuff.cbBuffer));
    PrintHexDump (
    OutSecBuff.cbBuffer,
    (PBYTE)OutSecBuff.pvBuffer);
    *pfDone = !((SEC_I_CONTINUE_NEEDED == ss)
    || (SEC_I_COMPLETE_AND_CONTINUE == ss));
    LOGA ( ( __log_buf, SSPI_SERVER " AcceptSecurityContext result = 0x%08x\n", ss));
    return TRUE;
    } // end GenServerContext
    BOOL EncryptThis (
    PBYTE pMessage,
    ULONG cbMessage,
    BYTE ** ppOutput,
    ULONG * pcbOutput,
    ULONG cbHeader,
    ULONG cbTrailer)
    SECURITY_STATUS ss;
    SecBufferDesc BuffDesc;
    SecBuffer SecBuff[4];
    ULONG ulQop = 0;
    // The size of the trailer (signature + padding) block is
    // determined from the global cbSecurityTrailer.
    LOGA ( ( __log_buf, SSPI_SERVER " Data before encryption: %s\n", pMessage));
    LOGA ( ( __log_buf, SSPI_SERVER " Length of data before encryption: %d \n",cbMessage));
    // Prepare buffers.
    BuffDesc.ulVersion = 0;
    BuffDesc.cBuffers = 4;
    BuffDesc.pBuffers = SecBuff;
    PBYTE pHeader;
    pHeader = (PBYTE) malloc (cbHeader);
    SecBuff[0].cbBuffer = cbHeader;
    SecBuff[0].BufferType = SECBUFFER_STREAM_HEADER;
    SecBuff[0].pvBuffer = pHeader;
    SecBuff[1].cbBuffer = cbMessage;
    SecBuff[1].BufferType = SECBUFFER_DATA;
    SecBuff[1].pvBuffer = pMessage;
    PBYTE pTrailer;
    pTrailer = (PBYTE) malloc (cbTrailer);
    SecBuff[2].cbBuffer = cbTrailer;
    SecBuff[2].BufferType = SECBUFFER_STREAM_TRAILER;
    SecBuff[2].pvBuffer = pTrailer;
    SecBuff[3].cbBuffer = 0;
    SecBuff[3].BufferType = SECBUFFER_EMPTY;
    SecBuff[3].pvBuffer = NULL;
    ss = EncryptMessage(
    &g_hctxt,
    ulQop,
    &BuffDesc,
    0);
    if (!SEC_SUCCESS(ss))
    LOGA ( ( __log_buf, SSPI_SERVER " EncryptMessage failed: 0x%08x\n", ss));
    return(FALSE);
    else
    LOGA ( ( __log_buf, SSPI_SERVER " The message has been encrypted. \n"));
    // Allocate a buffer to hold the encrypted data constructed from the 3 buffers.
    *pcbOutput = cbHeader + cbMessage + cbTrailer;
    * ppOutput = (PBYTE) malloc (*pcbOutput);
    memset (*ppOutput, 0, *pcbOutput);
    memcpy (*ppOutput, pHeader, cbHeader);
    memcpy (*ppOutput + cbHeader, pMessage, cbMessage);
    memcpy (*ppOutput + cbHeader + cbMessage, pTrailer, cbTrailer);
    LOGA ( ( __log_buf, SSPI_SERVER " data after encryption including trailer (%lu bytes):\n",
    *pcbOutput));
    PrintHexDump (*pcbOutput, *ppOutput);
    return TRUE;
    } // end EncryptThis
    void PrintHexDump(DWORD length, PBYTE buffer)
    DWORD i,count,index;
    CHAR rgbDigits[]="0123456789abcdef";
    CHAR rgbLine[100];
    char cbLine;
    for(index = 0; length;
    length -= count, buffer += count, index += count)
    count = (length > 16) ? 16:length;
    sprintf_s(rgbLine, 100, "%4.4x ",index);
    cbLine = 6;
    for(i=0;i<count;i++)
    rgbLine[cbLine++] = rgbDigits[buffer[i] >> 4];
    rgbLine[cbLine++] = rgbDigits[buffer[i] & 0x0f];
    if(i == 7)
    rgbLine[cbLine++] = ':';
    else
    rgbLine[cbLine++] = ' ';
    for(; i < 16; i++)
    rgbLine[cbLine++] = ' ';
    rgbLine[cbLine++] = ' ';
    rgbLine[cbLine++] = ' ';
    rgbLine[cbLine++] = ' ';
    for(i = 0; i < count; i++)
    if(buffer[i] < 32 || buffer[i] > 126)
    rgbLine[cbLine++] = '.';
    else
    rgbLine[cbLine++] = buffer[i];
    rgbLine[cbLine++] = 0;
    LOGA ( ( __log_buf, SSPI_SERVER " %s\n", rgbLine));
    } // end PrintHexDump
    BOOL SendMsg (
    SOCKET s,
    PBYTE pBuf,
    DWORD cbBuf)
    LOGA ( ( __log_buf, SSPI_SERVER " %lu bytes\n", cbBuf ));
    if (0 == cbBuf)
    return(TRUE);
    // Send the size of the message.
    if (!SendBytes (
    s,
    (PBYTE)&cbBuf,
    sizeof (cbBuf)))
    return(FALSE);
    // Send the body of the message.
    if (!SendBytes (
    s,
    pBuf,
    cbBuf))
    return(FALSE);
    return(TRUE);
    } // end SendMsg
    BOOL ReceiveMsg (
    SOCKET s,
    PBYTE pBuf,
    DWORD cbBuf,
    DWORD *pcbRead)
    DWORD cbRead;
    DWORD cbData;
    LOGA ( ( __log_buf, SSPI_SERVER " %lu bytes\n", cbBuf ));
    // Retrieve the number of bytes in the message.
    if (!ReceiveBytes (
    s,
    (PBYTE)&cbData,
    sizeof (cbData),
    &cbRead))
    LOGA ( ( __log_buf, SSPI_SERVER " ReceiveBytes failed retrieving byte count.\n", cbBuf ));
    return(FALSE);
    if (sizeof (cbData) != cbRead)
    LOGA ( ( __log_buf, SSPI_SERVER " Error: buffer size (%lu) differs from reported size (%lu)\n", sizeof(cbData), cbRead ));
    return(FALSE);
    // Read the full message.
    if (!ReceiveBytes (
    s,
    pBuf,
    cbData,
    &cbRead))
    LOGA ( ( __log_buf, SSPI_SERVER " ReceiveBytes failed.\n", cbBuf ));
    return(FALSE);
    if (cbRead != cbData)
    LOGA ( ( __log_buf, SSPI_SERVER " Error: buffer bytes (%lu) differs from reported bytes (%lu)\n", cbData, cbRead ));
    return(FALSE);
    *pcbRead = cbRead;
    return(TRUE);
    } // end ReceiveMsg
    BOOL SendBytes (
    SOCKET s,
    PBYTE pBuf,
    DWORD cbBuf)
    PBYTE pTemp = pBuf;
    int cbSent, cbRemaining = cbBuf;
    LOGA ( ( __log_buf, SSPI_SERVER " %lu bytes\n", cbBuf ));
    if (0 == cbBuf)
    return(TRUE);
    while (cbRemaining)
    cbSent = send (
    s,
    (const char *)pTemp,
    cbRemaining,
    0);
    if (SOCKET_ERROR == cbSent)
    LOGA ( ( __log_buf, SSPI_SERVER " send failed: %u\n", GetLastError ()));
    return FALSE;
    LOGA ( ( __log_buf, SSPI_SERVER " %lu bytes sent\n", cbSent ));
    pTemp += cbSent;
    cbRemaining -= cbSent;
    return TRUE;
    } // end SendBytes
    BOOL ReceiveBytes (
    SOCKET s,
    PBYTE pBuf,
    DWORD cbBuf,
    DWORD *pcbRead)
    PBYTE pTemp = pBuf;
    int cbRead, cbRemaining = cbBuf;
    LOGA ( ( __log_buf, SSPI_SERVER " %lu bytes\n", cbBuf ));
    while (cbRemaining)
    cbRead = recv (
    s,
    (char *)pTemp,
    cbRemaining,
    0);
    if (0 == cbRead)
    break;
    if (SOCKET_ERROR == cbRead)
    LOGA ( ( __log_buf, SSPI_SERVER " recv failed: %u\n", GetLastError () ) );
    return FALSE;
    cbRemaining -= cbRead;
    pTemp += cbRead;
    *pcbRead = cbBuf - cbRemaining;
    return TRUE;
    } // end ReceivesBytes
    void cleanup()
    if (g_pInBuf)
    free (g_pInBuf);
    g_pInBuf = NULL;
    if (g_pOutBuf)
    free (g_pOutBuf);
    g_pOutBuf = NULL;
    WSACleanup ();
    exit(0);
    SspiExample.h
    // SspiExample.h
    #include <schnlsp.h>
    #include <sspi.h>
    #include <windows.h>
    #include <string>
    BOOL SendMsg (SOCKET s, PBYTE pBuf, DWORD cbBuf);
    BOOL ReceiveMsg (SOCKET s, PBYTE pBuf, DWORD cbBuf, DWORD *pcbRead);
    BOOL SendBytes (SOCKET s, PBYTE pBuf, DWORD cbBuf);
    BOOL ReceiveBytes (SOCKET s, PBYTE pBuf, DWORD cbBuf, DWORD *pcbRead);
    void cleanup();
    BOOL GenClientContext (
    BYTE *pIn,
    DWORD cbIn,
    BYTE *pOut,
    DWORD *pcbOut,
    BOOL *pfDone,
    WCHAR *pCertName,
    CredHandle *hCred,
    PSecHandle phCtext
    BOOL GenServerContext (
    BYTE *pIn,
    DWORD cbIn,
    BYTE *pOut,
    DWORD *pcbOut,
    BOOL *pfDone,
    BOOL fNewCredential
    BOOL EncryptThis (
    PBYTE pMessage,
    ULONG cbMessage,
    BYTE ** ppOutput,
    LPDWORD pcbOutput,
    ULONG cbHeader,
    ULONG cbTrailer
    PBYTE DecryptThis(
    PBYTE achData,
    LPDWORD pcbMessage,
    struct _SecHandle *hCtxt
    BOOL
    SignThis (
    PBYTE pMessage,
    ULONG cbMessage,
    BYTE ** ppOutput,
    LPDWORD pcbOutput
    PBYTE VerifyThis(
    PBYTE pBuffer,
    LPDWORD pcbMessage,
    struct _SecHandle *hCtxt,
    ULONG cbMaxSignature
    void PrintHexDump(DWORD length, PBYTE buffer);
    BOOL ConnectAuthSocket (
    SOCKET *s,
    CredHandle *hCred,
    PSecHandle phCtext,
    char * pServer,
    WCHAR * pCertName
    BOOL CloseAuthSocket (SOCKET s);
    BOOL DoAuthentication (SOCKET s, WCHAR * pCertName );
    BOOL DoAuthentication (SOCKET s, std::string certThumb );
    void MyHandleError(char *s);
    #define DBG_SIZE 1024
    int OutputDebug( char buff[DBG_SIZE] )
    int retval;
    char debugstring[DBG_SIZE+32];
    retval = _snprintf_s( debugstring, DBG_SIZE+32, _TRUNCATE, " %s", buff );
    OutputDebugStringA( debugstring );
    return retval;
    int DbgBufCopy( char *buff, const char *format, ...)
    int iLen;
    va_list args;
    /// Call va_start to start the variable list
    va_start(args, format);
    /// Call _vsnprintf_s to copy debug information to the buffer
    iLen = _vsnprintf_s(buff, DBG_SIZE, _TRUNCATE, format, args);
    /// Call va_end to end the variable list
    va_end(args);
    return iLen;
    #define LOGA(_format_and_args_)\
    { char __log_buf[DBG_SIZE];\
    DbgBufCopy _format_and_args_;\
    printf("%s", __log_buf );\
    OutputDebug(__log_buf);\
    #define TEST_MSG "This is your server speaking"
    My initial attempt built an SCHANNEL_CRED structure following the documentation to set
    grbitEnabledProtocols to 0, and let SChannel select the protocol.  This worked on Windows 7, selecting TLS1.  When I ran the same exe-s on 2008 R2, the Client program failed, with InitializeSecurityContext returning SEC_E_DECRYPT_FAILURE. 
    The failure occurred on the 2nd call, using phNewContext returned on the first call.
    My next attempt set grbitEnabledProtocols to SP_PROT_TLS1_SERVER. This also worked on Win 7, but 2008R2 failed again, this time on the Server side. AcceptSecurityContext failed, returning SEC_E_ALGORITHM_MISMATCH.
    TLS is a requirement for my project, but to try getting the sample to run, I next set grbitEnabledProtocols to SP_PROT_SSL2_SERVER.  This did work for 2008R2, selecting SSL2, but now the Server failed on Win7 with AcceptSecurityContext returning
    SEC_E_ALGORITHM_MISMATCH.
    My final try was to set grbitEnabledProtocols to SP_PROT_TLS1_SERVER | SP_PROT_SSL2_SERVER, but that failed identically to the first case, with the Client on 2008R2 returning SEC_E_DECRYPT_FAILURE.
    So my question is - What is required to get SChannel to select TLS regardless of the Windows version on which the programs are running?

    Thank you for the reference.  That did provide the information I needed to get TLS working.   However, the documentation is not accurate with regard to setting the registry keys and values.
    The tables all show DisabledByDefault as a subkey under the protocol.  They also describe a DWORD value, Enabled, as the mechanism to enable/disable a protocol.
    What I found is DisabledByDefault is a DWORD value under Client/Server and it appears to be the determining factor to whether a protocol is enabled/disabled.
    The only way I was able to get TLS 1.1 working is with the following path present:
    HKLM SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client
    Under Client, I must have DisabledByDefault set to 0.  With that, the Enabled value does not need to be present.
    This held true for any level of TLS.
    I also found the setting of grbitEnabledProtocols in the SCHANNEL_CRED structure to be misleading.  From the description at
    https://msdn.microsoft.com/en-us/library/windows/desktop/aa379810(v=vs.85).aspx, I thought my Server program could set this field to 0, and SChannel would select the protocol as directed by the registry.  What I found is that the structure flag must
    agree with the registry setting for TLS to work.  That is with the resgistry key above for TLS 1.1, I must set grbitEnabledProtocols to SP_PROT_TLS1_1.
    Can you confirm the relationship between the SCHANNEL_CRED contents and registry state?

  • Is the jsp forward tag fails in iplanet application server sp2?

    11/Feb/2002 17:55:41:2] error: Exception: SERVLET-compile_failed: Failed in compiling template: /EinsWebTool/QueryScreen.jsp, Parse error in JSP parser. Missing endtag: /jsp:forward
    Exception Stack Trace:
    java.lang.Exception: Parse error in JSP parser. Missing endtag: /jsp:forward
    at java.lang.Throwable.fillInStackTrace(Native Method)
    at java.lang.Throwable.fillInStackTrace(Compiled Code)
    at java.lang.Throwable.<init>(Compiled Code)
    at java.lang.Exception.<init>(Compiled Code)
    at com.netscape.jsp.JSP.parseBlock(Compiled Code)
    at com.netscape.jsp.JSP.parseReqDisp(Unknown Source)
    at com.netscape.jsp.JSP.parseTag(Compiled Code)
    at com.netscape.jsp.JSP.parseNext(Compiled Code)
    at com.netscape.jsp.JSP.parseBlock(Compiled Code)
    at com.netscape.jsp.JSP.parse(Unknown Source)
    at com.netscape.jsp.JSP.compile(Unknown Source)
    at com.netscape.server.servlet.jsp.JSPCompiler.JSPtoJava(Unknown Source)
    at com.netscape.server.servlet.jsp.JSPCompiler.compileJSP(Compiled Code)
    at com.netscape.server.servlet.jsp.JSPCompiler.compileOrLoadJSP(Unknown Source)
    at com.netscape.server.servlet.jsp.JSPCompiler.compileInstance(Unknown Source)
    at com.netscape.server.servlet.jsp.JSPCompiler.compileInstance(Unknown Source)
    at com.netscape.server.servlet.platformhttp.PlatformHttpServletResponse.callJspCompiler(Unknown Source)
    at com.netscape.server.servlet.platformhttp.PlatformHttpServletResponse.callUri(Unknown Source)
    at com.netscape.server.servlet.platformhttp.PlatformHttpServletResponse.callUriRestrictOutput(Unknown Source)
    at com.netscape.server.servlet.platformhttp.PlatformRequestDispatcher.forward(Unknown Source)
    at com.netscape.jsp.PageContextImpl.forward(Unknown Source)
    at jsp.APPS.EinsWebTool.Login._jspService(Compiled Code)
    at jsp.APPS.EinsWebTool.Login.service(Login.java:42)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:865)
    at com.netscape.server.servlet.servletrunner.ServletInfo.service(Unknown Source)
    at com.netscape.server.servlet.servletrunner.ServletRunner.callJSP(Unknown Source)
    at com.netscape.server.servlet.platformhttp.PlatformHttpServletResponse.callJspCompiler(Unknown Source)
    at com.netscape.server.servlet.platformhttp.PlatformHttpServletResponse.callUri(Unknown Source)
    at com.netscape.server.servlet.platformhttp.PlatformHttpServletResponse.callUriRestrictOutput(Unknown Source)
    at com.netscape.server.servlet.platformhttp.PlatformRequestDispatcher.forward(Unknown Source)
    at com.netscape.server.servlet.jsp.JSPRunner.service(Unknown Source)
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:865)
    at com.netscape.server.servlet.servletrunner.ServletInfo.service(Unknown Source)
    at com.netscape.server.servlet.servletrunner.ServletRunner.execute(Unknown Source)
    at com.kivasoft.applogic.AppLogic.execute(Compiled Code)
    at com.kivasoft.applogic.AppLogic.execute(Compiled Code)
    at com.kivasoft.thread.ThreadBasic.run(Native Method)
    at com.kivasoft.thread.ThreadBasic.run(Native Method)
    at com.kivasoft.thread.ThreadBasic.run(Native Method)
    at com.kivasoft.thread.ThreadBasic.run(Native Method)
    at com.kivasoft.thread.ThreadBasic.run(Compiled Code)
    at java.lang.Thread.run(Compiled Code)

    Hi,
    Yes, I was able to code this sucessfully and got it working. Here is the code I used...
    <%
    String fortune = (String) request.getAttribute("fortune_string");
    %>
    <HTML>
    <HEAD><TITLE>Fortune Sample Application</TITLE></HEAD>
    <BODY BGCOLOR=#FFFFFF>
    <H2>The Oracular Servlet greets you!</H2>
    <p>
    Your fortune is...
    <%= fortune%>
    <p>
    <p>
    <hr size=0>
    <p>
    <FONT SIZE=2>Sample Applications
    <jsp:forward page="/ias-samples/index.html">
    </jsp:forward>
    </BODY>
    </HTML>
    and I got it working. I believe the code is missing some tag, which I tried, but got error in KJS like...
    [15/Feb/2002 11:23:49:7] info: --------------------------------------
    [15/Feb/2002 11:23:49:7] info: jsp.APPS.fortune.fortune: init
    [15/Feb/2002 11:23:49:7] info: --------------------------------------
    Null text data??
    2002-02-15 11:24:16 - error-the file '\fortune.jsp' generated the following pars
    e exception: org.apache.jasper.compiler.ParseException: C:\iplanet\ias6\ias\APPS
    \fortune\fortune\fortune.jsp(17,0) Expected "param" tag with "name" and "value"
    attributes after the "params" tag.
    In your case, I suspect, either the parser is not able to convert the .jsp file appropriately, or some inappropriate tag. If this doesn't help please send me your code & I can help you on this regard.
    Regards
    Raj
    [email protected]

  • Why is auto tagging failing?

    Everytime I try to auto-tag any of the scripts I'm currently working from I get an error message, "Auto tagging has failed, please try again later". Is this aspect of the service down. I just upadated my Adobe Air to see if that was the problem but it still persists.

    I am having the same issue. I have tried creating a new film script from scratch with only a few lines and auto tagging everytime. "Auto tagging has failed, please try again later". Anyone know why auto tagging is failing? Are there any logs to see what the issue is?

  • 802.1x Failed Authentication with WS-C3750G-24T

    Hi,
    I have already set up a lab  comprising of  1x2950-24 switch, 2x3750-24T in stack mode and 2x MS Domain Controller with AD 2008 Servers and NPS enabled (Domain level 2008). I use NPS as a Radius Server. I am trying to test the 802.1x framework in two scenarios.
    1.     I use as client a domain laptop with Windows XP SP3 with the embedded 802.1x MS supplicant. As authenticator use the 2950 switch and as authentication servers I use the two NPS integrated in MS DCs. Everything is working fine as I expected with basic configuration guidelines from Cisco & Microsoft.
    2.      I use as client a domain laptop with Windows XP SP3 with the embedded 802.1x MS supplicant (the same as before). As authenticator I use the 3750 Stack switch and as authentication servers I use the two NPS integrated in MS DCs (the same as before). I have configured the supplicant for both machine or user authentication in both scenarios. However the client never pass the authentication in the second one. I disconnect and connect the same supplicant in the 2950 switch and the authentication is completed successfully. Getting back to the 3750 stack the authentication failed and the laptop gains network access in the configured Auth-Failed Vlan. I have tried several configuration changes without success. I cannot understand why does this happen. I have made some debugs and I am sending them a long with a partial basic configuration of 3750 stack switch.
    If anyone could check it and suggest  anything it could be appreciated!!!
    Thank you in advance!                 

    Hi,
    basically what happens is that the maximum EAP packet size for communication between client and RADIUS server is negotiated. Therefore, in your case the switch notifies NPS that the client is capable of handling packets up to 9000 bytes in size.
    EAP messages, especially those containing the server certificate, are usually bigger than 1500 bytes and arrive at the switch in multiple fragments:
    Mar  6 15:50:11.881: RADIUS(0000002C): Received from id 1645/41
    Mar  6 15:50:11.881: RADIUS/DECODE: EAP-Message fragments, 253+253+253+253+253+253+253+253+20, total 2044 bytes
    Having learned that 2044 bytes is acceptable for the client, the switch forwards the full message in one chunk, but since your client is likely to have set the interface MTU to 1500, the packet is oversized and never reaches its destination.
    And yes, I think changing the System Jumbo MTU to 1500 bytes would lead to the same result. If my memory serves me right, a new setting takes effect only after a reboot, so I'd suggest giving it a go in your lab first.
    Best regards,
    Josef

  • Mails need to be Triggerd when clients Fails authentication

    CISCO 4404 ALERTS TO BE GENERATED(mail has to be triggerred) WHEN WLAN CLIENT AUTHENTICATION FAILS.
    Is there are any options on WCS to enable Authentication Failure on WCS.
    I have already Enabled
    1.Client authentication failure Alarm and Authentication failure reported by controller & configured both severity to Critical.
    we are currently Using Wireless Control System Version 5.1.64.0

    I assume you mean you changed the severity for "Client authentication failure" to Critical under Administration > Settings > Severity Configuration?
    Did you also go to Monitor Alarms > pulldown and choose Email Notification and enable the Clients category with the checkbox and then click the Clients category and check the critical box and add your email address?
    Have you verified that a test mail works from Administration > Settings > Mail server?

  • CardDAV and CalDAV to Google fails authentication

    I have spent 6 hours reading various forums and trying everything suggested, but I cannot get my Z10 to connect to my Google Contacts and Calendar.
    The error message is:
    Your account cannot be authenticated with your service provider.  Please make sure the account settings are correct.
    I have updated to OS version 10.1.0.273.
    I have Internet connectivity via Wifi, since I can use the browser to visit web pages.
    I upgraded from my Torch, since Google stopped supporting the only sync method with that device.  Now that I still can't connect after upgrading is incredibly frustrating.
    Any help will be greatly appreciated !

    I got it working. Oddly enough, this fails when using only Wifi, which I know was working since I tested it with the browser. It turned on the connection to Bell Mobility and it worked. I expect that means the transfer used up some of my data plan rather than using the Wifi :-(
    It works, so I am happy !

  • Cm:getProperty tag fails for Primary property (SP2)

    I was successfully using the following tag with SP1:
    <cm:getProperty id="node" name="html" isMultiple="false" conversionType="html"
    />
    Since installing SP2 this now fails.
    It works fine for non-primary properties.
    If I add the failOnError="true" attribute I get the following stack trace (I've
    truncated the stack trace, let me know if you want the whole thing):
    Error opening /pageflow/advice/nested/showAdvice.jsp.
    The source of this error is javax.servlet.ServletException: Unexpected transaction
    status: 6 at weblogic.servlet.jsp.PageContextImpl.handlePageException(PageContextImpl.java:323)
    at jsp_servlet._pageflow._advice._nested.__showadvice._jspService(showAdvice.jsp:47)
    at weblogic.servlet.jsp.JspBase.service(JspBase.java:33) at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run(ServletStubImpl.java:971)
    at .......
    Caused by
    javax.servlet.jsp.JspTagException: Unexpected transaction status: 6 at com.bea.content.manager.servlets.jsp.taglib.GetPropertyTag.doBinary(GetPropertyTag.java:1040)
    at com.bea.content.manager.servlets.jsp.taglib.GetPropertyTag.doStartTag(GetPropertyTag.java:562)
    at jsp_servlet._pageflow._advice._nested.__showadvice._jspService(showAdvice.jsp:38)
    at weblogic.servlet.jsp.JspBase.service(JspBase.java:33) at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run(ServletStubImpl.java:971)
    at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:402)
    at weblogic.servlet.internal.TailFilter.doFilter( ......

    Try using the transactionTimeout attribute, that corrected things for me.
    <cm:getProperty id="node" name="html" isMultiple="false" conversionType="html"
    transactionTimeout="300" />
    Regards,
    Mike
    "Graham Patterson" <[email protected]> wrote:
    >
    I was successfully using the following tag with SP1:
    <cm:getProperty id="node" name="html" isMultiple="false" conversionType="html"
    />
    Since installing SP2 this now fails.
    It works fine for non-primary properties.
    If I add the failOnError="true" attribute I get the following stack trace
    (I've
    truncated the stack trace, let me know if you want the whole thing):
    Error opening /pageflow/advice/nested/showAdvice.jsp.
    The source of this error is javax.servlet.ServletException: Unexpected
    transaction
    status: 6 at weblogic.servlet.jsp.PageContextImpl.handlePageException(PageContextImpl.java:323)
    at jsp_servlet._pageflow._advice._nested.__showadvice._jspService(showAdvice.jsp:47)
    at weblogic.servlet.jsp.JspBase.service(JspBase.java:33) at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run(ServletStubImpl.java:971)
    at .......
    Caused by
    javax.servlet.jsp.JspTagException: Unexpected transaction status: 6 at
    com.bea.content.manager.servlets.jsp.taglib.GetPropertyTag.doBinary(GetPropertyTag.java:1040)
    at com.bea.content.manager.servlets.jsp.taglib.GetPropertyTag.doStartTag(GetPropertyTag.java:562)
    at jsp_servlet._pageflow._advice._nested.__showadvice._jspService(showAdvice.jsp:38)
    at weblogic.servlet.jsp.JspBase.service(JspBase.java:33) at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run(ServletStubImpl.java:971)
    at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:402)
    at weblogic.servlet.internal.TailFilter.doFilter( ......

Maybe you are looking for

  • Collaboration rooms not showing up in the rooms tab after patch 34 upgrade

    Hi, We recently upgrade our EP6 SP2 Patch 5 CM Patch 5 Hotfix 4 to Patch 34. After the patch 34, we do not see our collaboration rooms in the rooms tab. We can access the rooms from the email generated when we created the room, but when we go to room

  • Active vs Inactive sessions

    We are using Oracle 11 as a backend to PowerSchool (a student information system) with 6 application servers (dc-ps-01 thru -06). Using the following SQL, we are seeing numerous INACTIVE sessions vs ACTIVE. select count(b.machine) as mCount, b.machin

  • WebLogic is not responding to client request under heavy load

    Under heavy loading, our WLS 6.0 SP2 will be not be responding to client requests after some time, say, 1 hour. From the administration console, the request throughput is 0 while request waiting accumulates to over 1,000. Even the clients stop making

  • Templates for iWeb 08

    So from what I can tell, iWeb 08 web templates are pretty hard to come by? Where can I get good ones?

  • Isdefined issue

    Hello, I just upgraded from cf5 to cf8. I have some code that was working but now isn't. Specifically I have a cfoutput query="xxxxxxx" and within that tag I have some IFs that use isdefined(). Example: #isdefined("form.unitprice_"&trim(getprods.id))