How to configure ACS 5.2 for policy condition on TACACS+ Service

In https://supportforums.cisco.com/message/3953175#3953175 thread, I was able to get the ACS 5.2 work with SRX for both SSH CLI and J-Web TACACS+ accounts. However, I found the behavior is different on our production environment. I found our ACS 5.2 was configured authorization rule with condition "TACACS+ Service" = "junos-exec". I don't know how to configure this on my ACS 5.2 Please guide me how to configure this.
I found there was NO TACACS+ "Authorization Request" when access via J-Web in our production SRX and ACS. However, there were TACACS+ "Authorzation Request" when access via J-Web in our production SRX and ACS. The difference between my lab ACS and production ACS is the authorization rule condition. In my condition, I configure with all "SRX" Device Type. but in our production ACS 5.2, it was configure to TACACS+ Service=junos-exec. so I like to test it in our lab to find out the difference. Thanks.

I would suggest you to go through the below two link.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/migration/guide/Migration_Configure.html
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/common_scenarios.html

Similar Messages

How to configure Automatic Account Clearing for A/R

Hi,
Kindly advice me how to configure Automatic Account Clearing for A/R
The client requirement is
In A/R the customer accounts are not automatically clearing when a payment is posted for that account. We are still seeing all open items and all paid or cleared items when we go to FBL5N and select open items for viewing. Please make account clearing automatic for customer payments.
Thanks in advance
Sunitha

Hi,
Use T code OB74.
Maintain for your Chart Of Account, acct type "D", From and to customer accounts and then add the critera you want. Pls note you cannot define more than 5 criteria.
Then schedule the clearing program job F.13 in the background.
Cheers.

How to configure oracle thin drivers for SUN APPLICATION SERVER

hi all,
I am working with EJB with oracle as back-end. I wants to know how to configure oracle thin drivers for the SUN APPLICATION SERVER. Please explain me breifly.
Advanced thanks to all the replies.
with regards,
/kumaraswamy.n

Kumaraswamy,
Did you try searching the Internet? Here are the results of my Internet search:
http://tinyurl.com/zo4gk
And one of the first hits in the list was this:
Deploying to a Sun Java System Application Server
Good Luck,
Avi.

How to configure Oracle Enterprise Manager for ASM RAC Database ?

Dears,,
We have two databases (Primary & Standby), each database has two instances
Database version: Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit
How to configure Oracle Enterprise Manager for this environment ?
I need documentation for this please.
Many thanks & Regards,,

Assuming an agent is running on the servers you want to monitor,
navigate to the Agent home page (Via setup --> Agent)
When in the agent home page select 'Add Database'and press [Go]
Assuming yopur database now gets recognized, select the Configure icon and enter the password for dbsnmp.
When done, press [Ok] to return to the agent home page.
Regards
Rob
http://oemgc.wordpress.com

How to configure Workflow Notification Mailer for oracle alert in R12

Hi all....,
How to configure Workflow Notfication mailer for oracle Alert in R12. Please provide the complete steps.. Its urgent.. Plz help me..
Regards ,
Madhan

Duplicate thread (please post only once)
plz help me...!!!! Workflow Notification Mailer
plz help me...!!!! Workflow Notification Mailer

How to configure a error queue for weblogic jms topic

Hi guys.
I want to configure a error queue for weblogic jms topic. Wanted: The message goes to error destination when messages have expired or reached their redelivery limit.
1. using jms transport configure proxy service:
Retry Count :3
Retry Interval:10
Error Destination: ErrorTopic
Expiration Policy: Redirect
I tried use the proxy service to consume message from the jms topic . and generation an error in the proxy message flow. But the message didn't goes into the error topic.
Any suggestions for this topic? Can anyone provide some helps or any useful links.
Thanks in advance.
Mingzhuang

Mingzhuang
I want to configure a error queue for weblogic jms topic. Wanted: The message goes to error destination when messages have expired or reached their redelivery limit.
1. using jms transport configure proxy service:
Retry Count :3
Retry Interval:10
Error Destination: ErrorTopic
Expiration olicy: RedirectUnlike File/SFTP, JMS proxy service definition does not have the concept of Error Destination. To accomplish similar functionality go to JMSQ on (for which proxy is configured) server console (http://localhost:7001/console) and configure the Error Destination. Following URL will help in how to configure JMS Q.
http://edocs.bea.com/wls/docs103/ConsoleHelp/taskhelp/jms_modules/queues/ConfigureQueues.html
http://edocs.bea.com/wls/docs103/ConsoleHelp/taskhelp/jms_modules/queues/ConfigureQueueDeliveryFailure.html
I tried use the proxy service to consume message from the jms topic . and generation an error in the proxy message flow. But the message didn't goes into the error topic.If every thing is configured as per above step, then the after retries, the weblogic server will put the message into JMS topic configured. Your proxy will receive from this topic.
Let me know if we are not on same page.
Cheers
Manoj

How to configure oracle listener profile for multiple oracle database

Hi,
I am going to install solution manager system in the same server of ERP EHP4 on Windows. Both DB are oracle.
I'd like to know how to configure listener in this kind of envirnmonent.
a. use two listener and different ports
b. use same listener but different ports
c. use same listener and same port
Which is the correct mothed?
And, after installation, there seem three set of profiles of listten, one for ERP, one for SLM, and the other for OS?(%windir%system32), which one is functional?
Please advise.
Thanks a lot.
Regards,
Alex

Hi,
standard installation is creating new configs for listener for each instance.
I would recommend to use one listener per each instance.
YOU CAN NOT HAVE one port number for two differnet systems!
If you want to use one listener than you must adapt tnsnames.ora, listener.ora and ensure that both systems will use different port numbers.
For example PORT= 15<system number>
Peter

How to configure Solaris 10 IPMP for Oracle VDI 3.3.2

Hi,
Does anyone have an indication on how to configure Solaris 10 IPMP in a manner that supports Oracle VDI?
We have setup two servers with 2 test addresses on physical and 1 logical for the hostname of the box, but when we configure VDI the VDI database does not come up on the 2nd box. We have also tried configuring IPMP without test addresses, but it doesn't make any difference - the DB still doesn't go into the up state after configuration on the 2nd server.
Solaris 10 u9 with patches
Two physical NICs on management VLAN via 2 switches
Two physical NIcs on VDI VLAN via 2 switches
VDI 3.3.2
All hostnames are in DNS and resolve for short name, FQDN and also reverse IP lookup
The is a proposal pdf on Oracle website that mentions IPMP, so someone has done it. Just could do with a hint on how it was done so that it works.
( http://www.oracle.com/us/technologies/virtualization/vdi-design-proposal-1401195.pdf )
Thanks
Paul

OK, updating this with what was causing the issue.
Not an IPMP problem this was a DNS problem. The VDI servers have access to two DNS environments, so had a DNS search path that had the domain where the VMs where going to go and another for management of the box with two DNS servers listed in /etc/resolv.conf.
We configured VDI using the FQDN for the management DNS, however the vda-config script takes the hostname of the box adds the first DNS domain from /etc/resolv.conf search entry and configures using (it seams to ignore what you put into the vda-config). When the config script comes to configuring MySQL because the names didn't match (FQDN it created by adding hostname to the 1st entry in DNS search path & FQDN that you put into vda-config command), it decides that it is configuring a "Client MySQL" instance rather than a "Slave MySQL" instance, which means the VDA DB never comes up in the out of vda-center status.
So the fix is to:
1) configure IPMP without test addresses (so traffic comes out of the correct IP and can be reverse looked up in DNS by the other host)
2) if you have multiple DNS search entries, configure VDI using the first entry in your search path as its FQDN
Paul

How to Configure OIM 9.1 for Request-Based Provisioning

Hi experts,
I am new to OIM and need to know how to configure request based provisioning. Here is the scenario.
My environment has two target systems (Sun LDAP and Novell EDirectory) configured for provisioning to OIM 9.1
A user should be able to login, request either or both (SUN LDAP and EDir) for self or others.
Now the request should go to an admin for approval.
Once approved, the requested accounts should be created on the target systems.
Please guide me on the procedure to be followed.
Many thanks in advance

You will have to download the standard out of box connector for these target systems & will have to import it through the Deployment manager into OIM. Then you will have to create the Process definition of approval type & attach it to the same resource object. Please read the belo link before implementing any thing. This will provide you a better idea.
http://download.oracle.com/docs/cd/E10391_01/doc.910/e10363.pdf

JMS - How to configure incremental redelivery intervals for an MDB

Hi all,
I noticed that when message delivery in an MDB fails, the time to the next delivery attempt for the message increases with every failed delivery. The intervals are 5, 10, 20, 40 and 60 seconds. After this the interval stays at 60 seconds.
Now I was trying to find out how to change this behavior, but did not find the appropriate configuration elements in the console or the documentation. What I found are the options to configure "Default Redelivery Delay" in the ConnectionFactory which is set to 0 and in the Queue "Redelivery Delay Override" which is set to -1.
Both of these settings do not explain the incremental delay. Can anyone tell me how to configure this? Is that part of the MDB deployment descriptors?
Thanks,
Chris

Hi Tom,
thanks again for your answer :-) I am sorry, i forgot to mention in my initial post, that i had a look at those parameters. But according to the documentation the default values for both are 60 seconds. In my MDB i did not set any of those, so it should not start at 5 seconds like it does but at 60 seconds. Additionally this suspension, I if understood correctly, should only kick in if the JMS resource (I figure this is the queue in this case) is unavailable, which is not the case in my scenario. And as a third the suspension described there is not growing exponentially as I experienced.
Sorry if I am just thick here, but the documentation just does not look like what I am looking for. Are there any misunderstandings on my side?
Thanks, Chris

How to configure a Logical System for XI External System

I'm following the 'How to configure SAP XI to use the standard SAP communications APIs (idoc, pabi, rfc) from external system - How to create XI content with the Integration Builder' document.
I have everything configured, but in section 6.7 when I try to do a transaction BD10 on to send a MATMAS01 idoc using my Logical System IQS_EXTERN to my external system, it says '1 master IDocs set up ...', then it says '0 communication IDocs generated ...' and my external system does not get the IDoc. The NX7 Integration Engine does not get a message from SAP_CE8 to IQS_EXTERN.
How do I specifically configure my Logical System IQS_EXTERN to communicate with my external system via XI (NX7)?
I'm using the ICC Test-System CE8, SAP R/3 Enterprise 4.7 IDES and the NX7 Exchange Infrastructure (http://iccpi7.sap.com/rep/start/index.jsp).
Thanks,
Ed Culnane
Edited by: Ed Culnane on Oct 15, 2008 7:02 PM

Check whether you have setup Partner profile for receiving system ( Here its XI system). You need to create outbound parter profile for XI system.
Check out this forum ...
Re: trying to send Idoc using Standard Outbound Processin option
and blog ..
Introduction to IDoc-XI-File scenario and complete walk through for starters.
Hope this will help.
Nilesh

How to configure Symantec Mail Security for SMTP & Messaging Server 6.3

Hi!
I want to install a Symantec Mail Security for SMTP 5.0.1(host1) with Messaging Server 6.3 (in production - host2), but when I try to access to POP protocol to send a message from Internet, the system display a message with a relay problem.
- Could you help me with this issue?,
- Do you know some documentation that speaks of this?. I can't find any documentation that explain how to configure and integrate SMS and Messaging Server. Thanks in advance.
Regards, CR

ctemp1 wrote:
I want to install a Symantec Mail Security for SMTP 5.0.1(host1) with Messaging Server 6.3 (in production - host2), but when I try to access to POP protocol to send a message from Internet, the system display a message with a relay problem.I take it that you have configured the symantec software like this?
internet -> symantec mail security system -> sun messaging server -> recipientA better approach is the following
internet -> sun messaging server -> recipient
                          |
                         V
              symantec mail security system(refer here: http://blogs.sun.com/factotum/entry/messaging_server_correctly_deploying_the)
- Do you know some documentation that speaks of this?. I can't find any documentation that explain how to configure and integrate SMS and Messaging Server. Thanks in advance.There is no documentation specifically for symantec software but we do document how to send emails via the symantec mail security server using the aliasdetourhost channel keyword:
http://docs.sun.com/app/docs/doc/819-4428/6n6j42615?a=view#bgaqy
Regards,
Shane.

How to configure internet domain name for P6 website using weblogic

After installing and configuring weblogic for P6 you get the following address https://servername:7002/console/login/LoginForm.jsp to access P6 website. Anyone know how to configure a purchase domain such as www.mydomain.com have it redirect to https://servername:7002/console/login/LoginForm.jsp Is this configured in weblogic server? If not, what is needed to redirect the purchased domain?

HI
You could have that domain resolving to/by some DNS servers and set up a load balancer / proxy to redirect every incoming request to that domain / site to your weblogic console.
however , what is it you are trying to do? It is very unsual of redirecting/ using Domain names to redirect to wls consoles.
could you explain your use case in detail please
Sri

How to configure follow up transactions for service order

Dear All,
I want to configure follow up transactions for service order as I already there is follow up transaction
For Service order below are follow up transactions
Service confirmation
Warranty claim
complaints
Task
If I want to add customized one then how to add ?? as I am not able to find out configure in IMG
kapil

Have you already customized Copy Control for your Service Order? If you want to add other transaction types the setting is necessary.
The customizing path is shown as below.
SPRO
-> CRM
-> Transactions
    -> Basic Settings
      -> Copying Control for Business Transactions
        -> Define Copying Control for Transaction Types
Regards,
Web

How to configure near-line storage for BI archiving?

I have searched the web but failed to find any info.
Would you please provide some link or blog here? Thanks!

Hi Diana,
If you solved your problem then Please tell how to configure Near Line Storage Connection. currently we have SAP BW 7.3 and Database Oracle 11. Do we need to install any NLS addon/Database or any setting we need to do at Database level to enable NLS in sap bw as i read some were that we need same third party tool for this.

How to configure ACS 5.2 for policy condition on TACACS+ Service

Similar Messages

Maybe you are looking for