How to configure AD and Token server (over radius) authentication

Dear forum,
I have a scenario where users should be allowed network access after their have given their AD credentials and a token (Blackshield Token server).
The token server speaks over radius to the cisco ACS appliance. I have managed to get users authenticated by means of their AD credentials. I am how ever not able to use both means in order to have a successfull authentication.
Does anyone have a configuration example for this scenario? Any help would be greatly appreciated.
Thanks!!!

Hi,
I have had two deployments using this form of authentication.
Just so we are on the same page, the token servers that I have integrated connect to an Active Directory server running NPS (MS radius), then the user will have to send their password+token and the token software will check the account password, and then the token to see if the users succeeds.
Let me know if that is the design of your software. If it is, then all you need to do is configure the token software to run on radius and then set the policies up from there. From the network device standpoint it just needs to point to the radius server.
Thanks,
Tarik Admani
*Please rate helpful posts*

Similar Messages

How to configure LDAP in BPEL Server

Hi,
How to configure LDAP in BPEL Server?
Also, what if we want to bounce to a YAHOO or GMAIL type email?
Basically, can we do dynamic email and phone notifications from BPEL?
Is there any documentation which tell us how to do this?
I appreciate any pointer in this regard.
Thanks in Advance.
Levey.

Levey,
You can do the dynamic email and phone notifications with the help of xpath expressions. Basically there are api to get the these attributes based on the ID on the identity server.
--Shiv

How to configure listener and tnsnames.ora on 10g version

how to configure listener and tnsnames.ora on 10g version

If you are on linux platform, on command prompt execute netmgr and configure listener fromt there. Or go to $oracle_home/network/admin/listner.ora write the following
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = /u01/app/oracle/product/10.2.0/db_1)
(PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1))
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
For tnsnames.ora write the following
ORCL =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = orcl)
)

How to configure Https in Project server 2010.

HI,
Can i any one help me,
How to configure Https in Project server 2010.
My server farm is 1.Test1(App & Wfe) 2. Test2(App & Wfe)
Both are load balanced wit NLB as abc.hyd.in
DO i need to Install certificate in two servers Test1 & Test2 or one server is enough ?
Can any one please provide me a link to configure Https for project server 2010 for Two Farms Servers.
Thank You, Kumar KSV

There is no special configuration for Project Server to have the IIS enabled, it follows the typical sharepoint SSL enablement, we might need some mor edetails on how your NLB is done is it hardware based, software based ? it all depends how you want
to architecht the system, you can enable the Https either on NLB or WFE, again depending upon how you want to enable it, you will need to install the certificates on both WFE or on NLB
Follow the blog below to configure the SSL:
http://epmxperts.wordpress.com/2011/03/05/extend-same-project-web-app-instance-for-different-protocol-authentication-mechanism/
http://blogs.msdn.com/b/sowmyancs/archive/2010/02/12/how-to-enable-ssl-on-a-sharepoint-web-application.aspx
http://www.sharepointconfig.com/2010/03/configuring-a-sharepoint-website-to-allow-ssl-connections/
Thanks | epmXperts | http://epmxperts.wordpress.com

How to configure modem and connect internet and play mp3

Hello friends
I am using sun solaris 8 intel edition .
I am using windowsXP,RedHat Linux and Sun Solaris 8 Intel Editon. I am using Internet on windows and linux platform but i cannot find any device configure tool in solaris 8 , So Please tell me how to configure modem and commands for connection internet and It is possible to play mp3 songs on solaris
Thaking in Advance
Piyush Patel
PI Solution

Look at the manual for pppd. Also take a look at OSS for sound card support (http://www.opensound.com) and xmms for your MP3 audio (http://www.xmms.org)

How to configure wireless Cisco 1041/EAP2 with Radius

Hello,
Having trouble configuring wireless on a Cisco 1041 with a 2012 Radius Server
I have a cisco ASA 5505 and Windows server 2012 Radius with NAP and Network Security policy
Guest Test guest works, test does not, I want the users to log into test with their AD credentials
Here is the AP config:
Thanks for any help
o service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname ap1
logging rate-limit console 9
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
aaa group server tacacs+ tac_admin
aaa group server radius rad_pmip
aaa group server radius dummy
aaa group server radius rad_eap2
server x.x.x.x auth-port 1645 acct-port 1646
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authentication login eap_methods2 group rad_eap2
aaa authorization exec default local
aaa accounting network acct_methods start-stop group rad_acct
aaa session-id common
clock timezone -0500 -5
clock summer-time -0400 recurring
ip domain name ser.local
dot11 syslog
dot11 ssid test
   vlan 1
   authentication open eap eap_methods2
   authentication network-eap eap_methods2
   authentication key-management wpa
   mbssid guest-mode
dot11 ssid test guest
   vlan 12
   authentication open
   authentication key-management wpa
   mbssid guest-mode
   wpa-psk ascii 7
dot11 priority-map avvid
dot11 phone dot11e
power inline negotiation injector 001b.8fac.990a
power inline negotiation prestandard source
class-map match-all _class_data_policy0
match ip dscp default
class-map match-all _class_voice_policy0
match ip dscp ef
policy-map voice_policy
class _class_voice_policy0
set cos 6
policy-map data_policy
class _class_data_policy0
set cos 0
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
encryption vlan 1 mode ciphers aes-ccm
encryption vlan 12 mode ciphers aes-ccm
ssid ihiCorp
ssid ihiGuest
antenna gain 0
mbssid
station-role root
interface Dot11Radio0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
service-policy input data_policy
service-policy output data_policy
interface Dot11Radio0.12
encapsulation dot1Q 12
no ip route-cache
bridge-group 12
bridge-group 12 subscriber-loop-control
bridge-group 12 block-unknown-source
no bridge-group 12 source-learning
no bridge-group 12 unicast-flooding
bridge-group 12 spanning-disabled
service-policy input data_policy
service-policy output data_policy
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
no keepalive
interface GigabitEthernet0.1
encapsulation dot1Q 1 native
no ip route-cache
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface GigabitEthernet0.12
encapsulation dot1Q 12
no ip route-cache
bridge-group 12
no bridge-group 12 source-learning
bridge-group 12 spanning-disabled
interface BVI1
ip address x.x.x.x 255.255.255.0
no ip route-cache
ip default-gateway x.x.x.x
ip http server
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
radius-server attribute 32 include-in-access-req format %h
radius-server host x.x.x.x auth-port 1645 acct-port 1646 key 7
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
end

in order I get these messages;
The processing of Group Policy failed. Windows attempted to read the file \\test.local\sysvol\test.local\Policies\{31B2F340-016D-11D2-945F-00C04FB984F9}\gpt.ini from a domain controller and was not successful. Group Policy settings may not be applied until this event is resolved. This issue may be transient and could be caused by one or more of the following:
a) Name Resolution/Network Connectivity to the current domain controller.
b) File Replication Service Latency (a file created on another domain controller has not replicated to the current domain controller).
c) The Distributed File System (DFS) client has been disabled.
A LDAP connection with domain controller IHIserver01.ihi-press.local for domain TEST is established.
A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 48.

What is load balancer in fms cluster and how to configure it and testing fms clustering

Hey guys,
I am new to fms and clustering the fms server in origin-edge mode.But i am confused actually what is load balancer and how to configure it .
After configuring , how to test and confirm that fms clustering is working.Is there any one can help me, plz....................
thanks in Advance........

Flash Media Server does not come bundled with a load balancer. In theory, one deploys FMS in an edge/origin configuration like this
1 Origin ----> N Edges ------> Customer Traffic
The idea here is that N edges shoulder the load for most customers with a single origin coordinating resources like VOD content or script access. The issue that remains is "how do I spread customers over the N edges" and that's where load balancing comes in. Most customers use a prepackaged load balancing solution - as an Adobe staffer I can't recommend any of them over the other, but you should be able to get some recommendations here along with just googling for it. The short answer contained here though is, you're going to have to find one outside of FMS if that's needed for your setup.
Asa

How to configure a forms 6i server

Hi
I am trying to configure an oracle 6i server for a college project and need some help. I have the documentation but its very confusing and not beginner orientated!
I am using windows XP. The forms server 6i,Apache and Jinitiator are installed in the following folders all on the same machine:
C:\Program Files\Apache Software Foundation\Apache2.2
C:\orant\FORMS60\server
C:\orant\jinit
How do i configure the Forms Server? I am connecting to a database over a network and the forms i am using are in the folder:
C:\orant\FORMS60\server
What environment variables should i change and to what?
What modifications should i make to the configuration files generated by th oracle installer i.e formsweb.cfg,base.htm and basejini.htm
As you can see i really need your help. Any advice would be greatly appreciated.
Thanks,
Jackie
Message was edited by:
[email protected]

Ive looked over the base.htm file and formsweb.cfg file and they appear to be fine but i may be missing something,.maybe you can see something i cant in these files:
On opening the base.htm file nothing happens even when i directly
specify the mainmenu form
the base file contains:
<HTML>












<HEAD><TITLE>%pageTitle%</TITLE></HEAD>
<BODY %HTMLbodyAttrs%>
%HTMLbeforeForm%
<OBJECT classid="CAFECAFE-0013-0001-0006-ABCDEFABCDEF"
WIDTH=600
HEIGHT=480
codebase="http://acme.com/jinit1316.exe#Version=1.3.1.6">
<PARAM NAME="CODE" VALUE="oracle.forms.engine.Main" >
<PARAM NAME="CODEBASE" VALUE="/forms60code/" >
<PARAM NAME="ARCHIVE" VALUE="/forms60code/f60all.jar" >
<PARAM NAME="type"
VALUE="application/x-jinit-applet;version=1.3.1.6">
<PARAM NAME="serverPort" VALUE="9000">
<PARAM NAME="serverArgs" VALUE="module=order.fmx">
<PARAM NAME="serverApp" VALUE="default">
</OBJECT>
%HTMLafterForm%
</BODY>
</HTML>
The formsweb.cfg file contains:
;; Forms Web CGI Configuration File
; This file defines parameter values used by the Forms Web CGI
; PARAMETER VALUES USED BY DEFAULT
; SYSTEM PARAMETERS
; These have fixed names and give information required by the Forms
; Web CGI in order to function. They cannot be specified in the URL
query
; string. But they can be overriden in a named configuration (see
below).
baseHTML=c:\orant\FORMS60\server\base.htm
baseHTMLJInitiator=c:\orant\FORMS60\server\basejini.htm
HTMLdelimiter=%
MetricsServerPort=9020
;MetricsServerErrorURL
; The next parameter specifies how to execute the Forms applet under
; Microsoft Internet Explorer 5.0. Put IE50=native if you want the
; Forms applet to run in the browser's native JVM.
IE50=JInitator
;IE50=native
; USER PARAMETERS
; These match variables (e.g. %form%) in the baseHTML file. Their
values
; may be overridden by specifying them in the URL query string
; (e.g.
"http://myhost.mydomain.com/ifcgi60.exe?form=myform&width=700")
; or by overriding them in a specific, named configuration (see below)
; 1) Runform arguments:
form=C:\orant\FORMS60\server\MAINMENU.fmx
userid=student19/s19@orcl
;otherparams
; 2) HTML page title, attributes for the BODY tag, and HTML to add
before and
; after the form:
pageTitle=Oracle Forms Server
;HTMLbodyAttrs
;HTMLbeforeForm
;HTMLafterForm
; 3) Values for the Forms applet parameters:
width=6500
height=5000
separateFrame=false
splashScreen=yes
; select default background by not specifying a value
;background
lookAndFeel=Oracle
colorScheme=teal
serverApp=default
serverPort=9000
serverHost=localhost
connectMode=HTTP
archive=f60web.jar
archive_jini=f60all_jinit.jar
archive_ie=f60all.cab
; 4) Parameters for JInitiator
; Page displayed to Netscape users to allow them to download
JInitiator.
; If you create your own version, set this parameter to point to it.
jinit_download_page=/jinitiator/us/jinit_download.htm
; Parameters related to the version of JInitiator.
jinit_classid=clsid:CAFECAFE-0013-0001-0006-ABCDEFABCDEF
jinit_exename=jinit.exe#Version=1,3,1,6
jinit_mimetype=application/x-jinit-applet;version=1.3.1.6
; SPECIFIC CONFIGURATIONS
; You may define your own specific, named configurations (sets of
parameters)
; by adding special sections as illustrated in the following examples.
; Note that you need only specify the parameters you want to change.
The
; default values (defined above) will be used for all other parameters.
; Use of a specific configuration can be requested by including the
text
; "config=<your_config_name>" in the query string of the URL used to
run
; a form. For example, to use the sepwin configuration, your could
issue
; a URL like "http://myhost.mydomain.com/ifcgi60.exe?config=sepwin".
; Example 1: configuration to run forms in a separate browser window
with
; "generic" look and feel (include "config=sepwin" in the
URL)
;[sepwin]
;separateFrame=True
;lookandfeel=Generic
; Example 2: configuration affecting users of MicroSoft Internet
Explorer 5.0.
; Forms applet will run under the browser's native JVM rather
than
; using Oracle JInitiator.
;[ie50native]
;IE50=JInitiator
; Example 3: configuration forcing use of the base.htm base HTML file in
all
; cases (means applet-style tags will always be generated and
; JInitiator will never be used).
;[applet]
;baseHTMLJInitiator=%FORMS60%\server\basejini.htm

How to configure external FTP backup server CISCO NCS 1.1

How do you configure a external FTP Server for Cisco NCS 1.1? I only get setup username/password, i also need to setup FTP server IP and directory.

from the CLI you setup a repository,
conf t
repository FTP
url ftp://
username < username> password
exit
http://www.cisco.com/en/US/docs/wireless/ncs/1.0/command/reference/cli_app_a.html#wp1013913
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

How to configure oracle and ms-access db

Hi All,
I have a requirement to push data from the oracle to ms access. My oracle database is on the Unix server and ms access is on my local desktop. Is there a way to configure if so how to configure both the db? Basically I am wanted to make the ms access visible to oracle so that I can use the Heterogeneous package. Please let me know if there are any different ways.
my oracle version is
Oracle Database 10g Enterprise Edition Release 10.2.0.4.0 - 64bit
ms-access 2007
Thanks in advance.

Hi,
You could use the Database Gateway for ODBC (DG4ODBC) to do this. It uses a third party ODBC driver to make the connection to MS-Access so the best option would be to install it on the Windows machine where Access is running and use the Microsoft Access driver.
Otherwise, you could install on Unix where Oracle is running but I don't think there is third party Access driver for Unix.
The following note available in My Oracle Support describes the setup on Windows -
Note.466225.1 How to Setup DG4ODBC (Oracle Database Gateway for ODBC) on Windows 32bit
You should install the latest 11.2 DG4ODBC and this note has pointers to the download sites -
Note.1083703.1 Master Note for Oracle Gateway Products
DG4ODBC can be installed standalone without an RDBMS being installed.
Regards,
Mike

How to Configure MS Office Comminication Server 2007 with WebCenter Spaces?

Hello All,
Has anyone successfully configured MS Office Comminication Server(OCS 2007) with WebCenter 11g Spaces?
I have installed the RTCServices on the MS OCS server, and wll the services and wsdls are accessible. The IM is working with MS Communicator and also Communicator Web Access (CWA). The Webcenter administrator guide does not have any configuration information about how to use the RTCServices (extracted from Oracle's owc_lcs.zip, part of the Oracle Fusion Middleware Companion 11g).
In the EM's webcenter control -->Settings -->Service Configuration, I tried to create a new IM service and an External Application but not sure what the URL to use.
If anyone have a successful OCS 2007 integration, could you please share your configuration steps?
Thanks,
Johnny
Edited by: user459212 on Feb 10, 2010 12:30 PM
Edited by: user459212 on Feb 10, 2010 12:31 PM

Hi,
I am also facing the same issue, not sure about what url to use. And also the login webservice doesn't work while I am testing using http://localhost:81/RTC/RTCService.asmx. It always throwing the following error
" Unable to cast COM object of type 'RTCLib.RTCClientClass' to interface type 'RTCLib.IRTCClient'. This operation failed because the QueryInterface call on the COM component for the interface with IID '{07829E45-9A34-408E-A011-BDDF13487CD1}' failed due to the following error: No such interface supported (Exception from HRESULT: 0x80004002 (E_NOINTERFACE))."
Is the current owc_lcs.zip support MS Office Communication Server 2007?
Please share the configuration step if anyone already integrated OCS 2007.
Thanks,
-Mukesh.
Edited by: user9127933 on Feb 19, 2010 4:05 AM

How to configure apache and weblogic in windows 2000

i am novice,
i want to configure apache and weblogic in windows 2000
weblogic version is 6.1
apache version is 2.0
how to do?

George,
I would take the following 'first steps'
1)Install Apache20 on your Windows machine following the Apache online documentation
http://httpd.apache.org/docs-2.0/misc/tutorials.html
2)Make sure you can 'serve up' static HTML content from your Apache Server
3)Install Weblogic Server per our online documentation
http://edocs.bea.com/wls/docs61/install/index.html
4)Also, make sure you can 'serve up' both static and dynamic (e.g., JSP) content
directly from WLS server
5)Once you have both of the above 'sanity' checks attempt to configure a simple
proxy by ppath or mime type via our online documentation
http://edocs.bea.com/wls/docs61/adminguide/apache.html#103803
Chuck Nelson
DRE
BEA Technical Support

How to configure the wiki/blog server to share the embed LDAP

All
anyone know the steps to share the embed LDAP to the wiki/blog server? the SSO steps of course meet the requirement, but all i haveto do is to setup the ENV to work with the demo custom apps for avoiding login twice. any input are appreciated.

And i assumed wrong :)
You are not using the latest version of WebCenter. According to what i see, you are using webcenter 11.1.1.3 or earlier which does not use UCM as wiki and blog service.
So basicly all the links i provided in my previous post are useless for you.
To be honnest, configuring wiki and blog in pre PS3 environment is a real pain in the "you know what i mean".
The reason for this is that you will need to create a few keystores, configure SSO,... The instruction that explains how is very long and difficult and in the end, you end up with integrating iframes which is not nice...
That's why since PS3, webcenter uses UCM to store the wiki and blog services.
If it's for a demo application, why not use the latest version?
Edited by: Yannick Ongena on Aug 25, 2011 7:52 AM

[SOLVED] How to configure prosody and jitsi to work together?

Hi,
I want to use prosody to connect several jitsi accounts on different computers on a LAN. I have followed the Prosody page in our wiki to set up Prosody and some user accounts. The service starts and ss -tul indicates that it is listening on the expected ports. I have created the missing key and certificate files expected by the default setup and placed them in /etc/prosody/certs.
I have created the account foo@localhost using prosodyctl adduser foo@localhost.
In jitsi I have created an XMPP account (foo@localhost) on the same host as prosody. The account appears but it fails to connect to the server. Jitsi displays error messages on the console which indicates that the server does not support TLS connections even though these are enabled in the prosody configuration file (and lua51-sec is installed).
I have tried numerous variations of disabling encryption in both prosody and jitsi but I either get the same error message or jitsi simply hangs while trying to connect to the server.
So far the only thing that I've been able to find that deals specifically with prosody and jitsi is an episode of the Linux Action Show from last year that skimps on the details of the setup. The various online documentation that I've found seems to be for an older version or Prosody (e.g. Host entries in the configuration file).
Does anyone have a similar setup working with the latest versions of Prosody and Jitsi? If so, please share your configurations.
edit
I went through the Prosody wiki page again today and managed to get it working. I think my problem was in misconfigured paths for the SSL server certificates in the VirtualHost section.
Last edited by Xyne (2014-08-13 00:35:51)

So, i tried both ways but it still didn't work.
anrxc: i didn't know i could still prevent DNS leak without privoxy. Privoxy always blocked flash animations and videos (like youtube) here. I'll try to set up this better tomorrow when i have more time.
By the way, after following your guide, i got this when executing /usr/bin/tor:
Jan 10 19:29:16.993 [notice] Tor v0.2.1.21. This is experimental software. Do not rely on it for strong anonymity. (Running on Linux x86_64)
Jan 10 19:29:16.994 [warn] Skipping obsolete configuration option 'Group'
Jan 10 19:29:16.995 [notice] Initialized libevent version 1.4.12-stable using method epoll. Good.
Jan 10 19:29:16.995 [notice] Opening Socks listener on 127.0.0.1:9050
Jan 10 19:29:16.995 [notice] Opening Socks listener on 192.168.0.1:9050
Jan 10 19:29:16.995 [warn] Could not bind to 192.168.0.1:9050: Cannot assign requested address
Jan 10 19:29:16.995 [notice] Closing partially-constructed listener Socks listener on 127.0.0.1:9050
Jan 10 19:29:16.995 [warn] Failed to parse/validate config: Failed to bind one of the listener ports.
Jan 10 19:29:16.995 [err] Reading config failed--see warnings above.
Last edited by ILoveJapaneseGirls (2010-01-10 22:00:12)

How to configure rz20 and dswp in solution manager ?

Hi all,
I have configured the ccms agent and ccms ping in the satellite system and all the connectivity with solution manager.
but then i haven' got the idea how to configure the template in the RZ20 and DSWP ?
Please advise on document / blog etc regarding this kind of configuration ?
Thank you and Best Regards
Fernand

Hi
check below link:
DSWP: http://help.sap.com/saphelp_smehp1/helpdata/en/8e/3ad6f807e147669036d2a6aed597aa/content.htm
RZ20: http://help.sap.com/saphelp_nw04/Helpdata/EN/17/550c404a435509e10000000a1550b0/content.htm
Thanks
Sunny

How to configure AD and Token server (over radius) authentication

Similar Messages

Maybe you are looking for