IAS 2003 and ASA5510

We are using ASA5510 as our VPN gateway and MS IAS 2003 for RADIUS & AAA. Using Cisco VPN client it is not able to authnticate. I get the following error in Event Viewer:
Policy-Name = Dialup Group
Authentication-Type = PAP
EAP-Type = <undetermined>
Reason-Code = 66
Reason = The user attempted to use an authentication method that is not enabled on the matching remote access policy.

I just dealt with this. Go into your IAS console and select properties for your remote access policy 'Dialup Group.' Click ;Edit Profile' and then the 'Authentication' tab. Enable 'PAP'. That should do it!

Similar Messages

  • 802.1x Authentication using Cisco Phone LSC and IAS 2003

    I'm trying to authenticate Cisco 7975 phones using the LSC and Microsoft IAS 2003.
    The CA was generated from the IAS server (Domain Controller) and was imported and used to generate the LSC that have now been deployed to the phones.
    Does anyone know how to configure the IAS server to authenticate the phones?                  

    HI Saad,
    Check this link to get info about EAP Types:
    http://www.networkworld.com/article/2223672/access-control/which-eap-types-do-you-need-for-which-identity-projects.html
    I will prefer to use EAP-TLS because of the security.in This type you need certificate on both side(Client and Server), also you can add AD to authenticate user.
    Regards
    Dont forget to rate helpful posts

  • Windows 2003 and windows 2008 for applications server

    hi all.
    i want to know about windows that which one is better for application server 10 R2.
    which one is better windows server 2003 or windows 2008?
    please if anyone knows about the difference and about the performance please help me out thanks.
    Any suggestion?
    sarah

    Well, Sarah, I have used both and I would recommend that Win2K3 is better, not because any fault of the iAS from Oracle but due to some quirks of the Win2K8. There are many updates available for the Win 2003 and it is well patched. To be honest, I have been using Oracle iAS for the last 5 or so years and seriously think that it is not that great product from Oracle and when combined with Windows OS, it really sucks. I have, that is why shifted my iAS to Linux and one to Solaris.
    best regards

  • Pix 6.3 VPN auth to IAS 2003, Fails?

    Hi
    I've got a pix501 runing 6.3 software and an Windows Server 2003 running Active Directory and IAS for my RADIUS service. I've configured many Windows 2000/Pix RADIUS setups in the past and have had no real problems, yet I have yet to be able to get a working Server2003/Pix setup working. Is there something fundamentally different between IAS 2000 and IAS 2003? Here is my pix config;
    aaa-server RADIUS (inside) host 192.168.102.7 105vankirkanx_ timeout 10
    crypto ipsec transform-set myset esp-des esp-md5-hmac
    crypto dynamic-map dynmap 10 set transform-set myset
    crypto map mymap2 20 ipsec-isakmp dynamic dynmap
    crypto map mymap2 client authentication RADIUS
    crypto map mymap2 interface outside-internet
    isakmp policy 10 authentication pre-share
    isakmp policy 10 encryption des
    isakmp policy 10 hash md5
    isakmp policy 10 group 2
    isakmp policy 10 lifetime 86400
    vpngroup butchervpn address-pool ippool
    vpngroup butchervpn dns-server 200.1.0.2
    vpngroup butchervpn wins-server 200.1.0.2
    vpngroup butchervpn default-domain lauzon
    vpngroup butchervpn split-tunnel 101
    vpngroup butchervpn idle-time 86400
    vpngroup butchervpn password ********
    And for the IAS 2003 side of things, I've followed this guide;
    http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00800b6099.shtml
    I know the VPN works because I can switch the auth to LOCAL and VPN in fine with local users. This is the same pix code/setup I've used on IAS 2000 servers and it has always worked fine. Can anyone provide any help with this? Thanks
    Jason

    I am not sure if this is related but I've run into an issue recently where I had a VPN solution working through an ASA 5510 w/RADIUS using an IAS 2003 server. The box IAS was running on was 2003 server SP1. As soon as the customer upgraded to SP2, the integration stopped working. From looking at the logs, the IAS service seems to be fine, it is logging successful authentications. However, the client software just times out after the user submits their active directory username and password.
    I've got a TAC case open, and I hope to get some answers today.

  • Cant Edit Message Body (outlook 2003 and 2007), Cant select text VIA click (word), Cant Edit Advanced Options (word)

    A number of my users are having similar problems across the entire network. These issues have started on 8/26/2014
    This problem is not localized to a specific outlook version, the problem is happening on 2003 and 2007 alike. Also this problem is starting to move into MS-Word.
    In outlook i am unable to click the message body. If i click the message body nothing happens. I cannot select any text, type, or anything in the message body. I am however able to type in the message body if i press the 'tab key' and navigate to the message
    body. 
    I have wiped out profiles. reset all user settings, changed datafiles etc. Nothing i do seems to affect this problem.
    On microsoft word i am unable to edit a number of documents. These documents are readable, editable etc on different computers. There are not any protections on the files. The user who reported this problem is however unable to edit the text even though
    others are able to. To correct this problem we have protected and unprotected the file checked permissions all with no luck. 
    On the same computer i am unable to change any advanced options. When i attempt to click the listing nothing happens. Its acting in the same manner as outlook is described above. However i am unable to select anything using the 'tab' key.
    These problems started on a few different computers, but is beggining to spread and affect more users across the network.
    This also does not seem to be a group policy issue. We have a number of different user groups on the network, and this problem is not isolated to any specific user, or group, group member etc..
    Thanks in advance to anyone who might be able to lend some assistance to solve this matter.
    X

    Hi,
    Please first verify the activation status of your Microsoft Office.
    If your Microsoft Office is activated, please try to start Outlook or Word in safe mode to check if this issue persists. To do this, press Windows key + R to open the Run command, type
    outlook /safe and press Enter.
    Also please try to run a repair of your Office installation to check the result. See:
    http://support.microsoft.com/kb/924614
    Please let me know the result.
    Regards,
    Steve Fan
    TechNet Community Support
    It's recommended to download and install
    Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
    programs.

  • I bought a new imac running Loin and Office 2011. The server we use to access emails runs exchange 2003 and my IT person says the imac is not compatible with the server. The server does not want to let me access using any email software.

    I bought a new imac running Loin with Office 2011. I am the only mac in the office and the Server we use to access emails runs exchange 2003 and my IT person says the imac is not compatible with the server. The server does not want to let me access using any email software other than webmail access through our website. It looks as though 2011 is not compatible with 2003 per some searches online, but what are some options I have to gain full access again? I purchased parallels in hopes that this my help and I am able to use remote desktop connection to log on to server but can not drag and drop files I need. There is a shared drive on that Server we all use to exchange files.
    The two main issues are gaining access to my email again and ability to drag and drop files from mac to pc. I hope this is enough info to get some solutions.
    PS - IT person says my iMac's IP is what his server does not understand so that is why I can not login.

    Office 2011 is not compatbile with Exchange 2003.
    I suggest you post further Office related questions on Microsoft's own forums for their Mac software:
    http://answers.microsoft.com/en-us/mac

  • On 6u13, new plug-in fails to load on Windows 2003 and IE7

    I'm attempting to load an applet in IE7 with an OBJECT tag in Windows 2003. This is a mature product that has, for this release, moved from 5 to 6. The CLSID was changed from the CAFEEFAC one for any version of 5 to the one for any version of 6. Java 5 version worked fine on Windows 2003. Now, on some, but not all, of our 2003 systems the ActiveX control for the new Java Plug-in fails to load.
    These configurations work:
    - Windows XP and any Java and any IE
    - Windows 2003 and Java5 and any IE
    - Windows 2003 and Java6, old plug-in, and any IE
    - Windows 2003 and Java6 and APPLET tag and any IE
    This one doesn't...on some machines:
    - Windows 2003 and Java6, new plug-in, IE7, OBJECT tag
    This is not a security problem. If I turn off the new style plug-in in the control panel, it works. However, I'd really like to avoid doing this, as the new plug-in has much needed features. Also, the APPLET tag works where the OBJECT tag doesn't. I can implement this change if needed, but it would be fairly painful and I'd prefer to avoid it.
    Does anyone know why this might be happening? Is there a good way for me to diagnose this? The browser is quite silent as to what the error might be.
    I appreciate any help. This one is truly vexing me!

    Okay, I'm wrong...I thought I could move to APPLET tags...I cannot. LiveConnect from JavaScript to Java does not support APPLET tags, only OBJECT tags. This makes my problem worse, as I don't have any recourse so far, except to disable the new plugin.
    However, this did lead to a clue: disabling the new plugin caused it to work again. When the new plugin was re-enabled to see it fail again, much to my surprise, it worked! Does anyone know what flipping that option actually does? Registry change or something else?

  • SAP Business One 8.8 PL 12 of Windows 2003 and SQL 2003

    Dear All,
                 My client has a present server with windows server 2003 and SQL server 2003 installed can we succesfully install SAP Business One 8.8 PL 12 and Higher PL OR will it be a constrain.

    Hi,
       Let me rephase my QUES
    My client has a server with the following installations
    windows server 2003 (5 CAL)
    MS SQL 2003
    We will be installalling SAP Business One 8.8 PL 12 on the server
    are ther any issues for installing SAP 8.8 on MS Server 2003 and SQL 2003
      or do we need higher Version I mean (windows 2005 or windows 2008)

  • Microsoft Exchange Server 2003 and Windows 8 Compatibility

    Is there a fix or workaround for accessing email via Outlook 2013 (Windows 8) when your company uses Microsoft exchange server 2003 and has not plans on upgrading it any time soon. I am a remote employee so I am the only one that has this problem in the
    company. I can access email through an owa account but it's a pain. I tried to set up a rule to have all incoming mail forwarded to my gmail account in Outlook 2013, but that did not work. Any other ideas?

    If server has enabled ActiveSync you can use Windows 8 Mail Client - works almost like Outlook.
    AFAIR Outlook 2013 can't work with Exchange 2003.
    Regards, Konrad Sagala, MCT, MCSE+M, MCITP: Exchange 2007/2010, Lync 2010, Office365, Windows 2008, Virtualization

  • Windows 2003 and windows 7 access compability

    Hi,
    I am now using IBM server with windows 2003 32 bit operating system and clients are windows xp and windows 7. I want to know that if I convert all clients to windows 7. Is there any connectivity/accessing issues to server.
    Is there any compability / accessing issues within windows 2003 and windows 7?
    Thanks in advance

    Hello,
    Windows Server 2003 is going out of support 2015.
    Windows 7 works together with it without  problems.
    If this is a domain you have to be aware that GPO settings for Windows 7 should be configured from a Windows 7 machine with RSAT installed, otherwise lot of settings are not available within Windows Server 2003.
    Also you have to think about server stored profiles, if used, as the .V2 profiles are used with Windows 7 and the older profiles will not work for users logging on to the Windows 7 machines.
    Maybe there is more to consider but therefore the information you have provided is too less.
    Best regards
    Meinolf Weber
    MVP, MCP, MCTS
    Microsoft MVP - Directory Services
    My Blog: http://msmvps.com/blogs/mweber/
    Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.

  • Crystal 8 Web Component Server ond Windows Server 2003 and IIS 6

    I am trying to get Crystal 8 Web Component and Page Server to run on Windows 2003 Server with IIS 6. I have done the following:
    Added the .cri and .rpt ISAPI extension mappings
    Have Cache ISAPI extentions selected
    Deselected "verify that file exists"
    Aded the .cri and .rpt MIME types
    Added wcsinsapi.dll as a IIS 6.0 extension
    The above resolved all HTTP 40x.x errors but when trying to access a report from IE I receive the following error:
    Error: Could not connect to the Web Component Server.
    The page server and web component server services are running and I do see the listen ports (6401, 6403) active.
    I know this is old software but it works quite well under a Windows 2000 Server and other web postings indicate that it is possible to run Crystal 8 under WS2003 and IIS 6.
    Does any one know of a white paper/support document that details how to run Crystal 8 under Windows Server 2003 and IIS 6?
    Has any one done this successfully?
    Any tips as to cause of the "Could Not Connect" problem would be greatly appreciated.

    Well as it turns out it looks like it was just this server.
    We tried everything, and I added those user accounts to full
    permission for the Coldfusion folders and we just could not get it
    to work. We tried it on another couple servers running 2003, and it
    installed perfectly right out of the box with no other permissions
    needed. And those servers were all running default configs with no
    other permissions done.
    We still have no idea what was the problem, but at least for
    now it seems to be this server. But I will tell you what, that II6
    stuff seems to be a bit of a pain, we had major problems installing
    new version of PHP with it too. Oh well, good luck to you
    too!

  • Out of memory using Windows Server 2003 and Oracle 9.2.0.3

    Hi,
    I just installed both Windows Server 2003 and Oracle 9.2.0.3. The server I am using has 4 gigabytes of memory installed, and windows shows that to be the actual physical memory on the server. The paging file is 8 gigabytes for a total of 12 gigabytes of virtual memory.
    Using the Oracle Database Configuration Assistant, I create a new database using default values. After verifying the installation worked OK (database started, queries ran), I attempted to change some of the memory parameters and was able to start the database using about 1.4 gigabytes of total SGA, with the O/S using about .3 gigabytes for a total of 1.7 gigabytes. I then attempted to change the buffer cache + 1 gigabyte for a total of 2 gigabytes. Now the database will not start and I get an out of memory error ora-27102 with an additional O/S memory error of "O/S Error: (OS 8) Not enough storage is available to process this command".
    So, I have two problems:
    1) With 4 gigabytes installed, and the O/S using only about 300 megabytes, why isn't Oracle able to take advantage of the memory on this machine past the 1.7 gigabytes (as reported by Windows task manager).
    2) How do I change the spfile memory parameters so the database will start using spfile? I can start the database pointing to a pfile with lesser memory parameters, but I don't know how to effect change on the spfile, since I cannot start with the spfile.
    Both these technologies (9.2.0.3 and Server 2003) are new to me, so any insight would be appreciated!
    HERE ARE THE SPFILE PARAMETERS THAT WORKED:
    SGA (M)
    Shared Pool=104
    Buffer Cache=960 ***
    Large Pool=0
    Java Pool=64
    Total SGA=1128
    SGA Max Size=1321
    Aggregate PGA Target=1500
    Current PGA Allocated=22868KB
    WINDOWS MEMORY INFO FROM TASK MANAGER SHOW:
    PF Usage=1.66GB
    Physical Memory (K)
    Total=4062704
    Available=3203460
    System Cache=2499096
    Commit Charge (K)
    Total=1748184
    Limit=12288628
    Peak=1925276
    *** When I change this to 2048 the database did not start.
    Thank you.

    CREATE SPFILE
    Purpose
    Use the CREATE SPFILE statement to create a server parameter file from a client-side initialization parameter file. Server parameter files are binary files that exist only on the server and are called from client locations to start up the database.
    Server parameter files let you make persistent changes to individual parameters. When you use a server parameter file, you can specify in an ALTER SYSTEM SET parameter statement that the new parameter value should be persistent. This means that the new value applies not only in the current instance, but also to any instances that are started up subsequently. Traditional client-side parameter files do not let you make persistent changes to parameter values. Because they are located on the server, these files allow for automatic database tuning by Oracle and for backup by Recovery Manager (RMAN).
    To use a server parameter file when starting up the database, you must create it from a traditional text initialization parameter file using the CREATE SPFILE statement.
    All instances in an Real Application Clusters environment must use the same server parameter file. However, when otherwise permitted, individual instances can have different settings of the same parameter within this one file. Instance-specific parameter definitions are specified as SID.parameter = value, where SID is the instance identifier.
    The method of starting up the database with a server parameter file depends on whether you create a default or nondefault server parameter file. Please refer to "Creating a Server Parameter File: Examples" for examples of how to use server parameter files.
    See Also:
    CREATE PFILE for information on creating a regular text parameter file from a binary server parameter file
    Oracle9i Database Administrator's Guide for information on pre-Oracle9i initialization parameter files and Oracle9i server parameter files
    Oracle9i Real Application Clusters Administration for information on using server parameter files in a Real Application Clusters environment
    Prerequisites
    You must have the SYSDBA or the SYSOPER system privilege to execute this statement. You can execute this statement before or after instance startup. However, if you have already started an instance using spfile_name, you cannot specify the same spfile_name in this statement.
    Syntax
    create_spfile::=
    Text description of create_spfile
    Semantics
    spfile_name
    This clause lets you specify a name for the server parameter file you are creating.
    If you do not specify spfile_name, Oracle uses the platform-specific default server parameter filename. If spfile_name already exists on the server, this statement will overwrite it. When using a default server parameter file, you start up the database without referring to the file by name.
    If you do specify spfile_name, you are creating a nondefault server parameter file. In this case, to start up the database, you must first create a single-line traditional parameter file that points to the server parameter file, and then name the single-line file in your STARTUP command.
    See Also:
    "Creating a Server Parameter File: Examples" for information on starting up the database with default and nondefault server parameter files
    Oracle9i Database Administrator's Guide for Windows (or other appropriate operating system specific documentation) for default parameter file names
    pfile_name
    Specify the traditional initialization parameter file from which you want to create a server parameter file.
    If you specify pfile_name, the parameter file must reside on the server. If it does not reside in the default directory for parameter files on your operating system, you must specify the full path.
    If you do not specify pfile_name, Oracle looks in the default directory for parameter files on your operating system for the default parameter filename, and uses that file. If that file does not exist in the expected directory, Oracle returns an error.
    Note:
    In a Real Application Clusters environment, you must first combine all instance parameter files into one file before specifying it in this statement to create a server parameter file. For information on accomplishing this step, see Oracle9i Real Application Clusters Setup and Configuration.
    Examples
    Creating a Server Parameter File: Examples
    The following example creates a default server parameter file from a client initialization parameter file named t_init1.ora:
    CREATE SPFILE
    FROM PFILE = '$ORACLE_HOME/work/t_init1.ora';
    Note:
    Typically you will need to specify the full path and filename for parameter files on your operating system. Please refer to your Oracle operating system documentation for path information.
    When you create a default server parameter file, you subsequently start up the database using that server parameter file by using the SQL*Plus command STARTUP without the PFILE parameter, as follows:
    STARTUP
    The following example creates a nondefault server parameter file s_params.ora from a client initialization file named t_init1.ora:
    CREATE SPFILE = 's_params.ora'
    FROM PFILE = '$ORACLE_HOME/work/t_init1.ora';
    When you create a nondefault server parameter file, you subsequently start up the database by first creating a traditional parameter file containing the following single line:
    spfile = 's_params.ora'
    The name of this parameter file must comply with the naming conventions of your operating system. You then use the single-line parameter file in the STARTUP command. The following example shows how to start up the database, assuming that the single-line parameter file is named new_param.ora:
    STARTUP PFILE=new_param.ora
    http://download-west.oracle.com/docs/cd/B10501_01/server.920/a96540/statements_616a.htm#SQLRF01315
    Joel P�rez

  • Removing dead Exchange 2003 and Exchange 2000 Server from the domain

    Hi Team,
    I have come across a client who wants to migrate to O365 from existing Exchange 2003 environment through the Hybrid Model. I am trying to introduce 2010 Sp3 to the environment. While checking the environment using Exchange pre-deployment found 2 servers
    in the environment which is not present on the network now. Client has no clue what they are.
    One is Exchange 2003 and the other is Exchange 2000. The problem here is i cannot introduce Exchange 2010 Sp3 unless all the Exchange servers are running minimum Exchange 2003 Sp2. 
    At present i find only 2 exchange 2003 Sp2 server which are in production. Need kind assistance to move forward.

    Hi,
    I recommend you follow the steps below:
    1. Please upgrade Exchange 2000 and Exchange 2003 to Exchange 2003 SP2 at first.
    2. Deploy Exchange 2010 servers in this order: CAS, Hub, UM and Mailbox. For more information, here is an article for your reference:
    Exchange 2003 - Planning Roadmap for Upgrade and Coexistence
    http://technet.microsoft.com/en-us/library/aa998186(v=exchg.141).aspx
    3. Install Exchange 2010 SP3.
    Here is an article for your reference.
    Upgrade Exchange 2010 to Exchange 2010 SP1, Exchange 2010 SP2, or Exchange 2010 SP3
    http://technet.microsoft.com/en-us/library/bb629560(v=exchg.141).aspx
    About a hybrid deployment with Microsoft Office 365 using Microsoft Exchange Server 2010 servers, here is an article for your reference. 
    Understanding Upgrading Office 365 Tenants for Exchange 2010-based Hybrid Deployments
    http://technet.microsoft.com/en-us/library/jj945383(v=exchg.141).aspx
    Hope it helps.
    If there are any problems, please feel free to let me know.
    Best regards,
    Amy
    Amy Wang
    TechNet Community Support

  • Small business server 2003 and database 2008 r2

    Hello,
    I already use at work small business server 2003 and I would like to install sql serwer 2008 r2 express. And my questions is. Is there any possibility to install sql server 2008 express on small business server 2003 ? My database has a limitation of size
    to 4 gb. When i trying to add a new business contact in BCM i get a massage: could not allocate space for object in database because the 'primary' filegroup is full. i am very much appreciate for  help.

    You can install SQL express on SBS 2003.
    Maybe you can use het comments in
    this link.

  • Can not open multiple excel 2003 and excel 2007 files in excel 2010 - message says they may be a security risk and wants to do a scan

    We use about 20 excel files to build a consolidated financial statement for our company.  Some of the files were built when  the computers were running 2003 and some when we had 2007.  We are being upgraded to Windows 7 with Office 2010.  In
    2007, we would simply highlight all the files in a folder, right click, and open.  Once they had all refreshed for new data, we would close them all.  Now with Excel 2010, we've highlighted all the files, but when we right click, we get a message
    that says some files may present an internet security risk.  Then it ask if we want to open anyway.  If we say yes, we get a box that asks us to scan the files.  We've done a scan, but at the end it still doesn't open the files.  If we
    say no, it does nothing.  Either way, we're not getting the files open except to open them 1 by 1.  We're not sure how to get rid of this...any suggestions?

    In Excel 2010 setting those documents as trusted documents, or adding the folder containing as a trusted location may do the trick for you. There's a full description of what it does here
    http://blogs.technet.com/b/office2010/archive/2009/09/28/trusted-documents.aspx but if you go into File, Options, Trust Center, Trust Center Settings..., and then Trusted Locations, you'll see the list of currently configured file paths that are considered
    trusted on your machine.
    At the bottom of that window you can check the option to allow trusted locations on the network (so you can trust the files that I assume are stored on a network location) and then add the location of those files to the list.
    Note, this setting is done per machine profile, so if it does the trick for you then each person needing these files would need to do this. Also, keep in mind that by doing this you're removing some of the protections added into Excel, so you should only
    go adding locations you know you can trust (not just the root of a network path where anyone and everyone might go saving spreadsheets they've downloaded form the internet).

Maybe you are looking for

  • My acrobat printer uninstalled itself and I can't get it back working...How do I fix it???

    My acrobat printer uninstalled itself and I can't get it back working...How do I fix it???

  • HP Mini 110-1013TU

    Greetings! I recently bought the mentioned netbook and have some hardware-related questions. S/N: CNU9253KQ5 P/N: VB703PA#UUF Does an 800Mhz RAM compatible with this unit? What is the motherboad of this unit, what is it's specs (the motherboard). I n

  • Large Block Chunk Size for LOB column

    Oracle 10.2.0.4: We have a table with 2 LOB columns. Avg blob size of one of the columns is 122K and the other column is 1K. so I am planning to move column with big blob size to 32K chunk size. Some of the questions I have is: 1. Do I need to create

  • How to get exact match when working with Oracle Text?

    Hi, I'm running Oracle9i Database R2. I would like to know how do I get exact match when working with Oracle Text. DROP TABLE T_TEST_1; CREATE TABLE T_TEST_1 (text VARCHAR2(30)); INSERT INTO T_TEST_1 VALUES('Management'); INSERT INTO T_TEST_1 VALUES(

  • Script Error when I Publish Movie

    I am getting a script error when i Publish a Movie.But when run the movie i dont get any error. I get the error message window as follows Symbol expected <Void> Script Error. Continue? and the options "YES" and "NO" What could be the possible reason