GRC-AC 5.3 RAR Management view error - Expired users not cleaned-up.

Hello Gurus,
I have a problem in RAR Management View:  Users who was valid have been analyzed and their conflicts considered in statistics, but when they become expired, their conflicts remain in the statistics forever, because they are not re-analyzed neither in Full nor in Incremental sync.    Even if all roles are removed from the user in backend, the conflicts remain in Management View.
I think the Full Batch Risk Analysis should clean-up all users violations from current period statistics before recording the new analysis results. 
Did you have this problem too?  Am I missing something? 
I appreciate your thoughts about it.
Vaner

Hello Nuno,
Thanks for your comments.
My release is 5.3 SP 16.2.
I also think the full sync should be enough but I already find about 20 users with problems, in 4 different backend and in 2 GRC (Tests and Production)
I think that depending on some procedures done in the back-end the full sync do neither re-analyze the user nor clean-up previuos statistics, for example:
1. A user was delete and recreated again with option to maintain old data, and he already had expiration date.
2. A sand-box environment was created as copy of production, users were created valid but already with expiration date.
I observed that for these scenarios, there was no Change Document for field "valid to", my guess is that Full Sync process relies on Change Documents to do its job.
I already opened a message in SAP for this, first level could not solve it, It is in Development Team now.
Vaner

Similar Messages

  • I'm getting this error message: "User not registered for online use" when i'm trying to download music/ track names from a CD into ITunes on my Windows 8 PC.  I'm registered and my itunes account/ appleID are all correct and working.

    I'm getting this error message: "User not registered for online use" when i'm trying to download music/ track names from a CD into ITunes on my Windows 8 PC.  I'm registered and my itunes account/ appleID are all correct and working.

    The ""not recognized for on-line use". error is associated with the Gracenote service that iTunes uses to look up and retrieve metadata for CDs.  Some users have reported that this error occurs when trying to import from CD, subsequent to upgrading to version 12.  A number of slightly different solutions have been reported (though all of a similar nature).
    Try walking through the following steps - before starting you may have to enable hidden files and folders to be viewed - in Windows 7 / Windows Explorer select Organize > Folder and search options, then on the View tab make sure that Show hidden files, folders and drives is selected.  Without this you won't see the AppData folder in C:\Users\username\
    Exit iTunes
    In Windows Explorer, go to the folder C:\Users\username\AppData\Roaming\Apple Computer\iTunes
    Delete the following files:
    CD Info.cidb
    com.apple.iTunes.Gracenote.plist
    Restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    If this doesn't work:
    In iTunes, select Edit > Preferences and make a note (or take a screenshot) of your preferences settings in all relevant tabs
    Exit iTunes
    In Windows Explorer, go to the folder C:\Users\username\AppData\Roaming\Apple Computer\iTunes
    Delete the following file:iTunesPrefs.xml
    Restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    If this second procedure does work, you'll need to restore other iTunes preferences settings to those that you noted in step 1.
    If this one didn't work:
    Exit iTunes
    Check the following folders:
    C:\Users\username\AppData\Local\Apple Computer\iTunes
    C:\Users\username\AppData\LocalLow\Apple Computer\iTunes
    Delete any copies of the following files:
    CD Info.cidb
    com.apple.iTunes.Gracenote.plist
    iTunesPrefs.xml
    Restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    Again, if this procedure does work, you'll need to restore other iTunes preferences settings to those that you noted in step 1 of the second procedure. If you're still not able to retrieve CD info:
    Exit iTunes
    In Windows, select Start > Control Panel > Programs and Features.  Find the entry for iTunes, right-click and select Repair.
    When this process has finished, restart iTunes
    Insert a CD and see if details are now correctly retrieved from Gracenote
    If none of these have worked (and almost everything I've seen suggests you should be OK by this point), you may have an issue with the installation and configuration of iTunes itself.  If you have got this far, see turingtest2's notes on Troubleshooting issues with iTunes for Windows updates for advice on how to remove and replace of all components of iTunes.

  • NOOK Simple Touch says "Error Dialog: user not activated" whenever I try to open e-books?

    I have had my Nook Simple Touch for about a year now, and I have been using Adobe Digital Editions without a problem. Now, all of the sudden, Barnes and Noble updated my software and I can't read any of my ADE books!! It just says "Error Dialog: User not activated" every time I click on them. I have looked at many other websites and I have tried plugging my nook in to my computer and reauthorizing it, reauthorizing my computer, deleting the digital editions file and .adobe-digital-editions file, redownloading my books, turning my nook off and on, crying, and screaming. The weird thing is, in all the instructions, it says a pop-up box will come up when I delete the files, but it never does. Is that normal? I always have to do it manually by clicking on the gear. I even made sure I "unhid" all the hidden files. I HAVE DONE EACH OF THESE AT LEAST 5 TIMES AND THEY NEVER WORK!!! HELP ME, PLEASE.
    Also, a lot of the websites say to make sure your Barnes and Noble ADE I.D. is the same as the one on your ADE computer I.D.. Is the B&N ADE I.D. different from just the Barnes and Noble ID? Becasue I have been using my sisters email for my computer ADE and my email for the B&N I.D.. Are they supposed to be the same? If so, how come I was able to use it without a problem before?? I tried reauthorizing ADE with my email, because I also have an ADE account with my email, but then it wouldn't let me redownload my books onto the new account. Does this mean I have to change the ADE computer I.D. and wait until my books are available again to read them? Is that the way to fix it? UGH!
    Help is much appreciated.
    P.S. I have ADE version 2.0

    Just to clarify, there are two levels of Authorization -- one for the ADE software and one for the nook. You have to use your Adobe account to authorize both (and they have to be authorized with the same user name). It sounded like your original problem (Kcoline) was with the Nook authorization, and it was the same problem the rest of us were having.
    To get your files back, I suggest carefully reading over the "Activation and Authorization" section of the ADE help. It appears that ADE will automatically find your files but note the "Note" in quoted text below... 
    http://www.adobe.com/products/digitaleditions/help/
    "After activation, any books, magazines, or other documents you previously bought with Adobe Acrobat® or Reader® software are migrated to Adobe Digital Editions. This is usually a relatively quick process. Adobe Digital Editions opens each item and reverifies its license to the user. If you don't have DRM-protected items, you don't need to be online during the migration. If you have a large number of items (for example, more than 100), then this process may take a while, but you will see a progress bar indicating the state of the migration as it proceeds.
    Note: Items that you previously borrowed from a public library with Adobe Acrobat® or Reader® software are not migrated to Adobe Digital Editions. You need to return the library item and then borrow the item again with Digital Editions."
    If it's not finding your files, it may be because they're located in a folder different from the one that ADE is trying to use to find them.
    You may also want to check the "Transferring items between computers" section, as this describes where the files should be located, and how to reimport them into your library.
    Good luck!

  • Error message on reading device saying error dialog user not activated

    error message on reading device saying     error dialog  user not activated.  unable to open book to read

    I had Adobe upgraded to from 1.2. to 4.1 on my Glow Light Nock at Barnes and Noble yesterday. I use a  MacBook Pro 2011 upgraded to 10.10.1. I have never had a problem download a book from the library to my nook in the past. By the time I get this issue resolved, my 2 week book will be overdue and my book club discussion 1/21. I have been to the genius bar at Apple store--not their problem. Two trips to B&N and
    the tech guy said he could fix the problem on a PC but not a Mac. It is not a Mac or Nook world.

  • RAR Management view tables

    Hi Experts,
    We need to delete old logs for all sync jobs, batch risk analysis and management view data from RAR. Initially we had run all jobs for all roles but management requirement is that it should show only customer roles. Although we can anytime run new risk analysis but in managemnt view it will show old data also and comparison etc will be confusing to some users.
    Please suggest if there is any workaround to remove old data. If we need ot delete at table level, which tables data need ot be cleared to make sure no old data remains till date.
    Thanks in advance.
    Sabita

    Hi Chinmaya,
    Thank you so much for your reply.
    Are you going to upgrade to SAP GRC AC SP13 ( I am bit confused).
    Thanks in advance.
    Regards
    Poojagopal
    Edited by: POOJAGOPAL on Jun 3, 2011 8:20 PM

  • SAP GRC AC 5.3 - RAR Risk analysis Error Log

    Hi
    i have scheduled the background job for full sync risk analysis for the first time . the job ended with status error . critical analysis, user,role and profile action analysis is shown 100% . but the user permission analysis shows 49% , role and profile permission analysis show 97% each . where can i check the log for the errors . do i need to run the whole risk analysis job again ? when i check the management reports , risk violations are shown as zero . Please let me know how i can proceed at this stage . thanks
    Regards
    Prasad

    Thanks.
    First time please do for all users. I assume this was first time and it failed, so i will suggest you scheudle for all.
    once these are done, then periodic jobs should be increamental.
    few tips :
    - schedule user sync separate job and once it finish only then scheudle role sync and when role sync finishes, only then schedule profile sync
    - always select system ids from search help (which is F4 in ABAP)
    - best scheudle one job per system id, so that when failure occurs, so that error analysis is easy
    regards,
    Surpreet

  • RAR - management view - Role Analysis diagram shows zero

    Hello,
    we were able to run the Full Sync for role/user/role and Batch Risk Analysis user/Role/Profile and Critical Acess to completion successfully.
    In the Informer tab, Managerment View, the risk Violations and Users Analysis shows reasonable figures. However the Role Analysis , it shows zeros for the risk violations and risk violations for user and roles.
    Could someone point out where is likely the problem so i could go and check ?
    Thanks
    CL

    Hi Lee,
    Have you run Management Report Job as well?
    Regards,
    Sabita

  • Adobe Application Manager. Error: Updates could not be applied. You are already running the Adobe...

    Hi Guys
    I am having a rather frustrating issue with my Photoshop CS6. I have been trying to run the updates for hours now as my Photoshop CS6 is slow and unresponsive. I have an i7 Mac and 16GB of RAM. it should not be slow.
    Anyway.
    I keep getting this error each time I try to run the updates.
    I have:
    Restarted
    Repaired permissions
    Reinstalled Adobe Applications Manager
    Nothing works.
    Pulling my hair out.

    I have even tried manually downloading the update DMGs and doing it that way but the error persists.

  • Application Manager "download error" even after using Cleaner Tool

    I have Creative Cloud working on my primary computer and am trying to get it going on my laptop, a MacBook Pro on which I just installed Mountain Lion OSx.
    I have not been able to install the Adobe Application Manager to start some software downloads. I get a window that pops up after the installer starts that says "Download Error. Contact Customer Support", then a button below that says "QUIT".
    After reading a few posts about this, I tried the Cleaner Tool and restarted the computer.
    After restart, I get the same problem and am not sure what to do next.
    I am logged into Creative Cloud.
    Any ideas?

    I had edge, photoshop, illustrator, dreamweaver and lightroom on my laptop - (this is my 2nd computer - most apps are on my desktop system)
    I uninstalled all of those and deleted Applications/Utilities/Adobe Application Manager folder then I downloaded and reinstalled the application manager then tried to downlad the appd from my Creative Cloud account - it gives me the same error
    before I deleted - I did try downloading Audition as a trial and then sign in on my CC account and it gave me that same error
    march 1 - I tried to download a trial version on Photoshop - it will not download to my applications folder - due to "restrictive access privledges"
    thought it might have to do with security preferences - changed to allow all - and it still will not download...
    also tried to update Adobe Story and it also errored
    so can't load any adobe apps to my laptop -
    have tested on my desktop with same account and it works fine
    Message was edited by: h2oonstone

  • Enterprise Manager returns error 404 (page not found)

    Hello
    I searched forums and found several threds like this but couldn't solve this problem.
    I am running SLES 11 x64 on VMware virtual machine.
    Linux hurricane 2.6.32.12-0.7-default #1 SMP 2010-05-20 11:14:20 +0200 x86_64 x86_64 x86_64 GNU/Linux
    Installed Oracle DB 11g, installation went normal, without any errors. enterprise manager is running:
    Oracle Enterprise Manager 11g Database Control Release 11.1.0.6.0
    Copyright (c) 1996, 2007 Oracle Corporation. All rights reserved.
    https://hurricane:1158/em/console/aboutApplication
    Oracle Enterprise Manager 11g is running.
    Logs are generated in directory /opt/oracle/product/11gR1/db/hurricane_orcl/sysman/log
    database is started, I can connect and execute queries. I remover oracle and then entire OS, instaled everithing from the scratch, dropped and recteated repositories, but didn't help.
    I can connct to https://hurricane:1158/ but there is no page at https://hurricane:1158/em
    what can I do?

    you are able to connect to https://hurricane:1158/, then why you are concern of link https://hurricane:1158/em/console/aboutApplication?
    have you tried with https://hurricane:1158/em/console?

  • Password Manager Viewer - Cannot scroll secure note

    Hi!
    I exported my passwords from Password Manager using "Create a password viewer program" which works fine on my other computer (which is not Lenovo). Except when the secure note is a bit longer and because textarea is disabled i cannot use scroller.
    Im using Password Manager 4.0 Build: 0024.00
    Thanks.
    Screenshot:

    I also tried with Password Manager 4.4 but story remains the same.

  • AnyConnect error " User not authorized for AnyConnect Client access, contact your administrator"

    Hi everyone,
    it's probably just me but I have tried real hard to get a simple AnyConnect setup working in a lab environment on my ASA 5505 at home, without luck. When I connect with the AnyConnect client I get the error message "User not authorized for AnyConnect Client access, contact your administrator". I have searched for this error and tried some of the few solutions out there, but to no avail. I also updated the ASA from 8.4.4(1) to 9.1(1) and ASDM from 6.4(9) to 7.1(1) but still the same problem. The setup of the ASA is straight forward, directly connected to the Internet with a 10.0.1.0 / 24 subnet on the inside and an address pool of 10.0.2.0 / 24 to assign to the VPN clients. Please note that due to ISP restrictions, I'm using port 44455 instead of 443. I had AnyConnect working with the SSL portal, but IKEv2 IPsec is giving me a headache. I have stripped down certificate authentication which I had running before just to eliminate this as a potential cause of the issue. When running debugging, I do not get any error messages - the handshake completes successfully and the local authentication works fine as well.
    Please find the current config and debugging output below. I appreciate any pointers as to what might be wrong here.
    : Saved
    ASA Version 9.1(1)
    hostname ASA
    domain-name ingo.local
    enable password ... encrypted
    xlate per-session deny tcp any4 any4
    xlate per-session deny tcp any4 any6
    xlate per-session deny tcp any6 any4
    xlate per-session deny tcp any6 any6
    xlate per-session deny udp any4 any4 eq domain
    xlate per-session deny udp any4 any6 eq domain
    xlate per-session deny udp any6 any4 eq domain
    xlate per-session deny udp any6 any6 eq domain
    passwd ... encrypted
    names
    name 10.0.1.0 LAN-10-0-1-x
    dns-guard
    ip local pool VPNPool 10.0.2.1-10.0.2.10 mask 255.255.255.0
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    interface Vlan1
    nameif Internal
    security-level 100
    ip address 10.0.1.254 255.255.255.0
    interface Vlan2
    nameif External
    security-level 0
    ip address dhcp setroute
    regex BlockFacebook "facebook.com"
    banner login This is a monitored system. Unauthorized access is prohibited.
    boot system disk0:/asa911-k8.bin
    ftp mode passive
    clock timezone PST -8
    clock summer-time PDT recurring
    dns domain-lookup Internal
    dns domain-lookup External
    dns server-group DefaultDNS
    name-server 10.0.1.11
    name-server 75.153.176.1
    name-server 75.153.176.9
    domain-name ingo.local
    object network obj_any
    subnet 0.0.0.0 0.0.0.0
    object network LAN-10-0-1-x
    subnet 10.0.1.0 255.255.255.0
    object network Company-IP1
    host xxx.xxx.xxx.xxx
    object network Company-IP2
    host xxx.xxx.xxx.xxx
    object network HYPER-V-DUAL-IP
    range 10.0.1.1 10.0.1.2
    object network LAN-10-0-1-X
    access-list 100 extended permit tcp any4 object HYPER-V-DUAL-IP eq 3389 inactive
    access-list 100 extended permit tcp object Company-IP1 object HYPER-V-DUAL-IP eq 3389
    access-list 100 extended permit tcp object Company-IP2 object HYPER-V-DUAL-IP eq 3389 
    tcp-map Normalizer
      check-retransmission
      checksum-verification
    no pager
    logging enable
    logging timestamp
    logging list Threats message 106023
    logging list Threats message 106100
    logging list Threats message 106015
    logging list Threats message 106021
    logging list Threats message 401004
    logging buffered errors
    logging trap Threats
    logging asdm debugging
    logging device-id hostname
    logging host Internal 10.0.1.11 format emblem
    logging ftp-bufferwrap
    logging ftp-server 10.0.1.11 / asa *****
    logging permit-hostdown
    mtu Internal 1500
    mtu External 1500
    ip verify reverse-path interface Internal
    ip verify reverse-path interface External
    icmp unreachable rate-limit 1 burst-size 1
    icmp deny any echo External
    asdm image disk0:/asdm-711.bin
    no asdm history enable
    arp timeout 14400
    no arp permit-nonconnected
    object network obj_any
    nat (Internal,External) dynamic interface
    object network LAN-10-0-1-x
    nat (Internal,External) dynamic interface
    object network HYPER-V-DUAL-IP
    nat (Internal,External) static interface service tcp 3389 3389
    access-group 100 in interface External
    timeout xlate 3:00:00
    timeout pat-xlate 0:00:30
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    timeout floating-conn 0:00:00
    dynamic-access-policy-record DfltAccessPolicy
    aaa-server radius protocol radius
    aaa-server radius (Internal) host 10.0.1.11
    key *****
    radius-common-pw *****
    user-identity default-domain LOCAL
    aaa authentication ssh console radius LOCAL
    http server enable
    http LAN-10-0-1-x 255.255.255.0 Internal
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec ikev2 ipsec-proposal DES
    protocol esp encryption des
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal 3DES
    protocol esp encryption 3des
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal AES
    protocol esp encryption aes
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal AES192
    protocol esp encryption aes-192
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal AES256
    protocol esp encryption aes-256
    protocol esp integrity sha-1 md5
    crypto ipsec security-association pmtu-aging infinite
    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
    crypto map External_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
    crypto map External_map interface External
    crypto ca trustpoint srv01_trustpoint
    enrollment terminal
    crl configure
    crypto ca trustpoint asa_cert_trustpoint
    keypair asa_cert_trustpoint
    crl configure
    crypto ca trustpoint LOCAL-CA-SERVER
    keypair LOCAL-CA-SERVER
    crl configure
    crypto ca trustpool policy
    crypto ca server
    cdp-url http://.../+CSCOCA+/asa_ca.crl:44435
    issuer-name CN=...
    database path disk0:/LOCAL_CA_SERVER/
    smtp from-address ...
    publish-crl External 44436
    crypto ca certificate chain srv01_trustpoint
    certificate <output omitted>
      quit
    crypto ca certificate chain asa_cert_trustpoint
    certificate <output omitted>
      quit
    crypto ca certificate chain LOCAL-CA-SERVER
    certificate <output omitted>
      quit
    crypto ikev2 policy 1
    encryption aes-256
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 10
    encryption aes-192
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 20
    encryption aes
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 30
    encryption 3des
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 40
    encryption des
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 enable External client-services port 44455
    crypto ikev2 remote-access trustpoint asa_cert_trustpoint
    telnet timeout 5
    ssh LAN-10-0-1-x 255.255.255.0 Internal
    ssh xxx.xxx.xxx.xxx 255.255.255.255 External
    ssh xxx.xxx.xxx.xxx 255.255.255.255 External
    ssh timeout 5
    ssh version 2
    console timeout 0
    no vpn-addr-assign aaa
    no ipv6-vpn-addr-assign aaa
    no ipv6-vpn-addr-assign local
    dhcpd dns 75.153.176.9 75.153.176.1
    dhcpd domain ingo.local
    dhcpd option 3 ip 10.0.1.254
    dhcpd address 10.0.1.50-10.0.1.81 Internal
    dhcpd enable Internal
    threat-detection basic-threat
    threat-detection scanning-threat shun except ip-address LAN-10-0-1-x 255.255.255.0
    threat-detection statistics access-list
    threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
    dynamic-filter use-database
    dynamic-filter enable interface Internal
    dynamic-filter enable interface External
    dynamic-filter drop blacklist interface Internal
    dynamic-filter drop blacklist interface External
    ntp server 128.233.3.101 source External
    ntp server 128.233.3.100 source External prefer
    ntp server 204.152.184.72 source External
    ntp server 192.6.38.127 source External
    ssl encryption aes256-sha1 aes128-sha1 3des-sha1
    ssl trust-point asa_cert_trustpoint External
    webvpn
    port 44433
    enable External
    dtls port 44433
    anyconnect image disk0:/anyconnect-win-3.1.02026-k9.pkg 1
    anyconnect profiles profile1 disk0:/profile1.xml
    anyconnect enable
    smart-tunnel list SmartTunnelList1 mstsc mstsc.exe platform windows
    smart-tunnel list SmartTunnelList1 putty putty.exe platform windows
    group-policy DfltGrpPolicy attributes
    vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless
    webvpn
      anyconnect profiles value profile1 type user
    username write.ingo password ... encrypted
    username ingo password ... encrypted privilege 15
    username tom.tucker password ... encrypted
    class-map TCP
    match port tcp range 1 65535
    class-map type regex match-any BlockFacebook
    match regex BlockFacebook
    class-map type inspect http match-all BlockDomains
    match request header host regex class BlockFacebook
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum client auto
      message-length maximum 1500
      id-randomization
    policy-map TCP
    class TCP
      set connection conn-max 1000 embryonic-conn-max 1000 per-client-max 250 per-client-embryonic-max 250
      set connection timeout dcd
      set connection advanced-options Normalizer
      set connection decrement-ttl
    policy-map type inspect http HTTP
    parameters
      protocol-violation action drop-connection log
    class BlockDomains
    policy-map global_policy
    class inspection_default
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny 
      inspect sunrpc
      inspect xdmcp
      inspect sip 
      inspect netbios
      inspect tftp
      inspect ip-options
      inspect dns preset_dns_map dynamic-filter-snoop
      inspect http HTTP
    service-policy global_policy global
    service-policy TCP interface External
    smtp-server 199.185.220.249
    privilege cmd level 3 mode exec command perfmon
    privilege cmd level 3 mode exec command ping
    privilege cmd level 3 mode exec command who
    privilege cmd level 3 mode exec command logging
    privilege cmd level 3 mode exec command failover
    privilege cmd level 3 mode exec command vpn-sessiondb
    privilege cmd level 3 mode exec command packet-tracer
    privilege show level 5 mode exec command import
    privilege show level 5 mode exec command running-config
    privilege show level 3 mode exec command reload
    privilege show level 3 mode exec command mode
    privilege show level 3 mode exec command firewall
    privilege show level 3 mode exec command asp
    privilege show level 3 mode exec command cpu
    privilege show level 3 mode exec command interface
    privilege show level 3 mode exec command clock
    privilege show level 3 mode exec command dns-hosts
    privilege show level 3 mode exec command access-list
    privilege show level 3 mode exec command logging
    privilege show level 3 mode exec command vlan
    privilege show level 3 mode exec command ip
    privilege show level 3 mode exec command failover
    privilege show level 3 mode exec command asdm
    privilege show level 3 mode exec command arp
    privilege show level 3 mode exec command ipv6
    privilege show level 3 mode exec command route
    privilege show level 3 mode exec command ospf
    privilege show level 3 mode exec command aaa-server
    privilege show level 3 mode exec command aaa
    privilege show level 3 mode exec command eigrp
    privilege show level 3 mode exec command crypto
    privilege show level 3 mode exec command ssh
    privilege show level 3 mode exec command vpn-sessiondb
    privilege show level 3 mode exec command vpnclient
    privilege show level 3 mode exec command vpn
    privilege show level 3 mode exec command dhcpd
    privilege show level 3 mode exec command blocks
    privilege show level 3 mode exec command wccp
    privilege show level 3 mode exec command dynamic-filter
    privilege show level 3 mode exec command webvpn
    privilege show level 3 mode exec command service-policy
    privilege show level 3 mode exec command module
    privilege show level 3 mode exec command uauth
    privilege show level 3 mode exec command compression
    privilege show level 3 mode configure command interface
    privilege show level 3 mode configure command clock
    privilege show level 3 mode configure command access-list
    privilege show level 3 mode configure command logging
    privilege show level 3 mode configure command ip
    privilege show level 3 mode configure command failover
    privilege show level 5 mode configure command asdm
    privilege show level 3 mode configure command arp
    privilege show level 3 mode configure command route
    privilege show level 3 mode configure command aaa-server
    privilege show level 3 mode configure command aaa
    privilege show level 3 mode configure command crypto
    privilege show level 3 mode configure command ssh
    privilege show level 3 mode configure command dhcpd
    privilege show level 5 mode configure command privilege
    privilege clear level 3 mode exec command dns-hosts
    privilege clear level 3 mode exec command logging
    privilege clear level 3 mode exec command arp
    privilege clear level 3 mode exec command aaa-server
    privilege clear level 3 mode exec command crypto
    privilege clear level 3 mode exec command dynamic-filter
    privilege cmd level 3 mode configure command failover
    privilege clear level 3 mode configure command logging
    privilege clear level 3 mode configure command arp
    privilege clear level 3 mode configure command crypto
    privilege clear level 3 mode configure command aaa-server
    prompt hostname context
    no call-home reporting anonymous
    call-home
    profile CiscoTAC-1
      no active
      destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
      destination address email [email protected]
      destination transport-method http
      subscribe-to-alert-group diagnostic
      subscribe-to-alert-group environment
      subscribe-to-alert-group inventory periodic monthly
      subscribe-to-alert-group configuration periodic monthly
      subscribe-to-alert-group telemetry periodic daily
    Cryptochecksum:41a021a28f73c647a2f550ba932bed1a
    : end
    Many thanks,
    Ingo

    Hi Jose,
    here is what I got now:
    ASA(config)# sh run | begin tunnel-group
    tunnel-group DefaultWEBVPNGroup general-attributes
    address-pool VPNPool
    authorization-required
    and DAP debugging still the same:
    ASA(config)# DAP_TRACE: DAP_open: CDC45080
    DAP_TRACE: Username: tom.tucker, aaa.cisco.grouppolicy = DfltGrpPolicy
    DAP_TRACE: Username: tom.tucker, aaa.cisco.username = tom.tucker
    DAP_TRACE: Username: tom.tucker, aaa.cisco.username1 = tom.tucker
    DAP_TRACE: Username: tom.tucker, aaa.cisco.username2 =
    DAP_TRACE: Username: tom.tucker, aaa.cisco.tunnelgroup = DefaultWEBVPNGroup
    DAP_TRACE: Username: tom.tucker, DAP_add_SCEP: scep required = [FALSE]
    DAP_TRACE: Username: tom.tucker, DAP_add_AC:
    endpoint.anyconnect.clientversion="3.1.02026";
    endpoint.anyconnect.platform="win";
    DAP_TRACE: Username: tom.tucker, dap_aggregate_attr: rec_count = 1
    DAP_TRACE: Username: tom.tucker, Selected DAPs: DfltAccessPolicy
    DAP_TRACE: Username: tom.tucker, DAP_close: CDC45080
    Unfortunately, it still doesn't work. Hmmm.. maybe a wipe of the config and starting from scratch can help?
    Thanks,
    Ingo

  • User not found error when connecting to MDM server using NWDS

    Hi,
    I am getting the error as " User not found " when i am connecting to MDM server from the code written in NWDS.
    If i make that user as admin in usermapping in MDM den it works fine bt if that user is not admin den get the error as user not found.
    Please help.

    Hi,
    Thanks for the reply.
    I have added the user in user mapping in MDM server. but i have to give the authority as admin.
    other users who are added in usermapping bt not assigned as admin are getting the error.

  • Refresh Order Management Materialized Views errors out in R12.1.3

    Hi All -
    Refresh Order Management Materialized Views errors out in R12.1.3 when submitted with blank parameters. Please find below error details ..
    OEXITORDMV module: Refresh Order Management Materialized Views
    Current system time is 15-OCT-2012 11:30:29
    **Starts**15-OCT-2012 11:30:29
    ORACLE error 12008 in FDPSTP
    Cause: FDPSTP failed due to ORA-12008: error in materialized view refresh path
    ORA-01555: snapshot too old: rollback segment number 4 with name "_SYSSMU4_3768336236$" too small
    ORA-06512: at "SYS.DBMS_SNAPSHOT", line 2566
    ORA
    Start of log messages from FND_FILE
    End of log messages from FND_FILE
    Thanks,

    Cause: FDPSTP failed due to ORA-12008: error in materialized view refresh path
    ORA-01555: snapshot too old: rollback segment number 4 with name "_SYSSMU4_3768336236$" too small
    ORA-06512: at "SYS.DBMS_SNAPSHOT", line 2566Please see old threads for the ORA-015555 docs you need to refer to.
    https://forums.oracle.com/forums/search.jspa?threadID=&q=ORA-01555&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    https://forums.oracle.com/forums/search.jspa?threadID=&q=ORA-01555+AND+Materialized+AND+View&objID=c3&dateRange=all&userID=&numResults=15&rankBy=10001
    Thanks,
    Hussein

  • ERROR VIRSA CC 5.2 - Management View -User Analisys - NOT UPDATED!!!!!

    Hi ,
    i executed the JOB of SYNK of users,  the Job of RISK analysis and the JOB of update of management Report .
    When i go in - Management View - User Analisys -( i select date , System , User Group ) Virsa CC shows me the correct number of users actually in the system, for this user group , according to USR02 SAP table , BUT Users with NO Violations and Users With Violations are not correct.
    I show results:
    No. of Users Analyzed : 25                CORRECT
    Users with no Violations : 95 379%     NOT CORRECT
    Users with Violations : -70 -279%        NOT CORRECT
    The Interactive pie chart shows the correct number of users with violations : 2
    Who it' s possible ?
    BEST REGARDS
    Maurizio

    Abdul,
    You stated in your initial comment that the Management Report check box was NOT selected? If this is the case then the graphs on the informer tab have not been updated. You must first execute the SOD (user/role/profile) analysis, once that job is complete then execute a separate job for the management reports. This will then update the informer tab (given that your rule set has been updated with your custom functions and risks).

Maybe you are looking for

  • Time out error in webdynpro

    Hi all, We are facing a time out error uisng webdynpro. The webdynpro application is mapped to the enterprise portal for the users. When ever the users loads the application and first click on the link then again loads the application and click any l

  • Tr  SQVI  RESULTING IN ERROR MESSAGE.

    Tr   SQVI   is executed and table join selected and enter ,  it gives the following error (  The current application triggered  a termination with a short dump   ). what is the solution , pl let know.

  • Porblem in JAR Tracking of WATER Buiseness

    Dear ALL, My client has a water business, Scenario: We have 20 Liter jars which are our materials. Firstly we send this jars to co-packers for filling waters and after filling of jar with water we sell it to the customers against Jar we take security

  • Missing vi.lib files

    Hello, I am using the motion assistant with labview 2013 and NI motion driver 8.1. I followed the first tutorial to create my first project (using the virtual friver). But when genrating a labview code, I could not execute the VI was created since th

  • ORA-34612: Your program or expression uses too much execution space.

    BIB-9509 Oracle OLAP did not create cursor. oracle.express.ExpressServerExceptionError class: OLAPI Server error descriptions: DPR: Unable to create server cursor, Generic at TxsOqDefinitionManagerSince9202::crtCurMgrs4 OES: ORA-34612: Your program o