Ignoring/deleting the local preferences.xml for AnyConnect client

Hi all,
is there any option how to set VPN clients to ignore or delete their local preferences.xml file when they are connecting to the VPN network?
I'd like to update the list of Anyconnect hosts in the profile, but after that, when the new profile is dowloaded to clients, the default host of the last successful connection stored in the preferences.xml is preferred not that one in the new profile. The problem is the cached entry for an old host in the preferences.xml file.
I use AC 3.0.4235.
Is there any way how manage this behaviour by central ASA?
Thank you.

Hi Jose,
here is what I got now:
ASA(config)# sh run | begin tunnel-group
tunnel-group DefaultWEBVPNGroup general-attributes
address-pool VPNPool
authorization-required
and DAP debugging still the same:
ASA(config)# DAP_TRACE: DAP_open: CDC45080
DAP_TRACE: Username: tom.tucker, aaa.cisco.grouppolicy = DfltGrpPolicy
DAP_TRACE: Username: tom.tucker, aaa.cisco.username = tom.tucker
DAP_TRACE: Username: tom.tucker, aaa.cisco.username1 = tom.tucker
DAP_TRACE: Username: tom.tucker, aaa.cisco.username2 =
DAP_TRACE: Username: tom.tucker, aaa.cisco.tunnelgroup = DefaultWEBVPNGroup
DAP_TRACE: Username: tom.tucker, DAP_add_SCEP: scep required = [FALSE]
DAP_TRACE: Username: tom.tucker, DAP_add_AC:
endpoint.anyconnect.clientversion="3.1.02026";
endpoint.anyconnect.platform="win";
DAP_TRACE: Username: tom.tucker, dap_aggregate_attr: rec_count = 1
DAP_TRACE: Username: tom.tucker, Selected DAPs: DfltAccessPolicy
DAP_TRACE: Username: tom.tucker, DAP_close: CDC45080
Unfortunately, it still doesn't work. Hmmm.. maybe a wipe of the config and starting from scratch can help?
Thanks,
Ingo

Similar Messages

  • Some how I have deleted the system Preferences application. I had already deleted everything from the trash bend before I realized system pref. was deleted. How can I recover or get it downloaded?

    Somehow I have deleted the system Preferences application. I had already deleted everything from the trash bend before I realized system pref. was deleted. How can I recover or get it downloaded? Everything has been transferred to my new mac pro, but would like to give this old mac to son-in-law.  Can I download system preferences back into this old mac? 
    Sidney Jean Bienvenu

    How Restore Deleted or Missing OS X Components
    A few of the basic OS X installed applications can be restored from the Optional Installs installer located in the Optional installs folder on your Installer DVD.  However, if what you need is not there then follow the instructions below.
    How to Use Pacifist to Restore Deleted or Missing OS X Components
    Insert the OS X Installer DVD into the optical drive.  Use a simple utility like TinkerTool to toggle invisibility so you can see invisible items.  Alternatively, open the Terminal application in your Utilities folder and at the prompt enter the following:
    defaults write com.apple.finder AppleShowAllFiles Yes
    Press RETURN.
    To turn off the display of invisible files repeat the above command substituting No for Yes.
    The install packages are located in the /System/Installation/ folder on the DVD.
    Download the shareware utility Pacifist. Use it to extract a fresh copy of the missing item(s) from the file archives on your OS X installation DVD. The file archives are in the /System/Installations/ folder (use Go to Folder option in the Go menu of the Finder.)
    Here are Four Basic ways to use Pacifist (courtesy of George Orville.)
    Drag a .pkg icon onto the Pacifist window .....proceed to step 7.
    Click on “Open Package ....” and navigate to package desired and click “Open” in the open/save window.....proceed to step 7.
    Insert Mac OS X installer CD and when it mounts, navigate to .... Menu->Go->Go to Folder. In the path field enter or paste ....
    /Volumes/disc name/System/Installation/Packages (where disc name is the name of the CD/DVD that you inserted.)
    Click on the  "Go" button ..... • Drag a .pkg to Pacifist..... proceed to step 7.
    The package you'll need will have to be discovered by trial and error, but for most applications you should start with the Essentials.pkg and/or Additional Essentials.pkg.
    D. Insert your Mac OS X install disk 1 .... and open Pacifist.
    1.          In Pacifist, select "Open Mac OS X Install Packages" ... dialog may appear asking for disk 2, then disk 3 and finally disk 1 again.... {if DVD is not used)...If “Stop Loading” is selected...the procedure will stop!!!
    2a. When loading is complete, a new window appears, click the triangle to display contents of each package...Select item and proceed to step 7.
    2b.          or click the “Find” icon in the Pacifist window and type the name of the software you need.
    3.          In the list that comes back, click the top most entry for the item that you want. ..... that is the one for the English language.
    4.          On the top of the Pacifist window, click “verify” .... you will probably be prompted for your password.
    5.          Enter checks for.... “verify permissions” and “verify file contents.” and click “verify” ....enter password when prompted.... you will get back output which may look like this:
              20 files were scanned. 20 of 20 files were present on the hard disk. 0 of 20 files had file permissions that did not match those specified in the package. 0 of 20 files had checksums that did not match those specified in the package.
    6.          Click “close”. Go to step 7.
    Extract or Install........
    7.          In the Toolbar (upper left), you now have the option to extract or install. Click a file in the lower list and those two icons will be enabled.
    8.          If “Extract to...” is selected.... navigate to the location where the file will be placed, select “choose”, select “extract” in new dialog that appears,authenicate , if prompted, click “OK”.
    9.          In the next dialog, click “Extract”.
    10.          If “Install” is selected... dialog will appear with the location/path of the installed software. Click “Install”
    11.          Type in your password, click “OK”
    Pacifist will begin to extract files.
    12.          In steps 8/10ß.... you also have the choice to “cancel”
    Notes:          Pacifist may find that a file it is installing already exists on the hard disk. Pacifist will present you with an alert panel....
    Stop
    Leave original alone
    Update .....
    Default selection
    Replace .... (Replace option should only be used on full install packages)

  • Is there a way to DELETE the local mac library after iCloud upload?

    I've uploaded 75GB of photos to iCloud, and would now LOVE to reclaim that space in my meagre 250 GB Mac Book Pro.
    Now that I've paid my iClouds photo subscription, is there a way to delete the local Photos library and reclaim that space?
    FYI the "optimized" version is 72 GB.
    Thanks,

    Just for clarity, I am not referring to the iPhotos library. I am referring to the newly created Photos library. Since I plan not to use iPhoto and Aperture anymore, I am moving the iPhotos old library to an external HD. My question is whether I can delete the newly created Photos library from my hard drive since I'm paying for online storage and have successfully imported 75 GB of photos to iCloud.

  • I forgot my icloud id and password. i want to delete the id. i forgot the password. if i try to delete the account its asking for password. i cannot find how to delete the account. Please anyone can help me out???

    I forgot my icloud id and password. i want to delete the id. i forgot the password. if i try to delete the account its asking for password. i cannot find how to delete the account. Please anyone can help me out???

    You aren't going to be able to delete it without the correct password.  If it's your ID, you can reset the password as explained here: http://support.apple.com/kb/HT5625.  If it isn't your ID, you will have to get the password for the person who owns the ID.  There's no way around this and no one else can help.

  • Can I delete the local calendar in icloud

    When I go to Calendars I have to open up the "Local calendar in iCloud" before I can open up the "Calendar in iCloud"  What can I do to avoid having to do this and what will happen if I delete the "Local Calendar in iCloud?" 

    You don't have any music stored in your personal iCloud account.  If you see cloud symbols next to songs in your song list those are only links to your previously purchased music in the iTunes store so you can download them.

  • HT201441 i am the first owner of my iphone i erase all data and i am trying to open the phone but its does the same thing like the first photo and i cant find my first apple id because i have deleted the email i used for it because i maked a new one pleas

    i am the first owner of my iphone i erase all data and i am trying to open the phone but its does the same thing like the first photo and i cant find my first apple id because i have deleted the email i used for it because i maked a new one please help

    Why do you need to access your email?  To reset the password?
    If you're trying to change the password, you don't need to go to your email.  If you know the answers to your security questions, you can reset it without using an email, as explained in the first section of this article: http://support.apple.com/kb/HT5787.  If you don't, you can contact Apple for assistance by going to https://expresslane.apple.com, then click More Products and Services>Apple ID>Other Apple ID Topics>Lost or forgotten Apple ID password.

  • AnyConnect error " User not authorized for AnyConnect Client access, contact your administrator"

    Hi everyone,
    it's probably just me but I have tried real hard to get a simple AnyConnect setup working in a lab environment on my ASA 5505 at home, without luck. When I connect with the AnyConnect client I get the error message "User not authorized for AnyConnect Client access, contact your administrator". I have searched for this error and tried some of the few solutions out there, but to no avail. I also updated the ASA from 8.4.4(1) to 9.1(1) and ASDM from 6.4(9) to 7.1(1) but still the same problem. The setup of the ASA is straight forward, directly connected to the Internet with a 10.0.1.0 / 24 subnet on the inside and an address pool of 10.0.2.0 / 24 to assign to the VPN clients. Please note that due to ISP restrictions, I'm using port 44455 instead of 443. I had AnyConnect working with the SSL portal, but IKEv2 IPsec is giving me a headache. I have stripped down certificate authentication which I had running before just to eliminate this as a potential cause of the issue. When running debugging, I do not get any error messages - the handshake completes successfully and the local authentication works fine as well.
    Please find the current config and debugging output below. I appreciate any pointers as to what might be wrong here.
    : Saved
    ASA Version 9.1(1)
    hostname ASA
    domain-name ingo.local
    enable password ... encrypted
    xlate per-session deny tcp any4 any4
    xlate per-session deny tcp any4 any6
    xlate per-session deny tcp any6 any4
    xlate per-session deny tcp any6 any6
    xlate per-session deny udp any4 any4 eq domain
    xlate per-session deny udp any4 any6 eq domain
    xlate per-session deny udp any6 any4 eq domain
    xlate per-session deny udp any6 any6 eq domain
    passwd ... encrypted
    names
    name 10.0.1.0 LAN-10-0-1-x
    dns-guard
    ip local pool VPNPool 10.0.2.1-10.0.2.10 mask 255.255.255.0
    interface Ethernet0/0
    switchport access vlan 2
    interface Ethernet0/1
    interface Ethernet0/2
    interface Ethernet0/3
    interface Ethernet0/4
    interface Ethernet0/5
    interface Ethernet0/6
    interface Ethernet0/7
    interface Vlan1
    nameif Internal
    security-level 100
    ip address 10.0.1.254 255.255.255.0
    interface Vlan2
    nameif External
    security-level 0
    ip address dhcp setroute
    regex BlockFacebook "facebook.com"
    banner login This is a monitored system. Unauthorized access is prohibited.
    boot system disk0:/asa911-k8.bin
    ftp mode passive
    clock timezone PST -8
    clock summer-time PDT recurring
    dns domain-lookup Internal
    dns domain-lookup External
    dns server-group DefaultDNS
    name-server 10.0.1.11
    name-server 75.153.176.1
    name-server 75.153.176.9
    domain-name ingo.local
    object network obj_any
    subnet 0.0.0.0 0.0.0.0
    object network LAN-10-0-1-x
    subnet 10.0.1.0 255.255.255.0
    object network Company-IP1
    host xxx.xxx.xxx.xxx
    object network Company-IP2
    host xxx.xxx.xxx.xxx
    object network HYPER-V-DUAL-IP
    range 10.0.1.1 10.0.1.2
    object network LAN-10-0-1-X
    access-list 100 extended permit tcp any4 object HYPER-V-DUAL-IP eq 3389 inactive
    access-list 100 extended permit tcp object Company-IP1 object HYPER-V-DUAL-IP eq 3389
    access-list 100 extended permit tcp object Company-IP2 object HYPER-V-DUAL-IP eq 3389 
    tcp-map Normalizer
      check-retransmission
      checksum-verification
    no pager
    logging enable
    logging timestamp
    logging list Threats message 106023
    logging list Threats message 106100
    logging list Threats message 106015
    logging list Threats message 106021
    logging list Threats message 401004
    logging buffered errors
    logging trap Threats
    logging asdm debugging
    logging device-id hostname
    logging host Internal 10.0.1.11 format emblem
    logging ftp-bufferwrap
    logging ftp-server 10.0.1.11 / asa *****
    logging permit-hostdown
    mtu Internal 1500
    mtu External 1500
    ip verify reverse-path interface Internal
    ip verify reverse-path interface External
    icmp unreachable rate-limit 1 burst-size 1
    icmp deny any echo External
    asdm image disk0:/asdm-711.bin
    no asdm history enable
    arp timeout 14400
    no arp permit-nonconnected
    object network obj_any
    nat (Internal,External) dynamic interface
    object network LAN-10-0-1-x
    nat (Internal,External) dynamic interface
    object network HYPER-V-DUAL-IP
    nat (Internal,External) static interface service tcp 3389 3389
    access-group 100 in interface External
    timeout xlate 3:00:00
    timeout pat-xlate 0:00:30
    timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
    timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
    timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
    timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
    timeout tcp-proxy-reassembly 0:01:00
    timeout floating-conn 0:00:00
    dynamic-access-policy-record DfltAccessPolicy
    aaa-server radius protocol radius
    aaa-server radius (Internal) host 10.0.1.11
    key *****
    radius-common-pw *****
    user-identity default-domain LOCAL
    aaa authentication ssh console radius LOCAL
    http server enable
    http LAN-10-0-1-x 255.255.255.0 Internal
    no snmp-server location
    no snmp-server contact
    snmp-server enable traps snmp authentication linkup linkdown coldstart
    crypto ipsec ikev2 ipsec-proposal DES
    protocol esp encryption des
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal 3DES
    protocol esp encryption 3des
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal AES
    protocol esp encryption aes
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal AES192
    protocol esp encryption aes-192
    protocol esp integrity sha-1 md5
    crypto ipsec ikev2 ipsec-proposal AES256
    protocol esp encryption aes-256
    protocol esp integrity sha-1 md5
    crypto ipsec security-association pmtu-aging infinite
    crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
    crypto map External_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
    crypto map External_map interface External
    crypto ca trustpoint srv01_trustpoint
    enrollment terminal
    crl configure
    crypto ca trustpoint asa_cert_trustpoint
    keypair asa_cert_trustpoint
    crl configure
    crypto ca trustpoint LOCAL-CA-SERVER
    keypair LOCAL-CA-SERVER
    crl configure
    crypto ca trustpool policy
    crypto ca server
    cdp-url http://.../+CSCOCA+/asa_ca.crl:44435
    issuer-name CN=...
    database path disk0:/LOCAL_CA_SERVER/
    smtp from-address ...
    publish-crl External 44436
    crypto ca certificate chain srv01_trustpoint
    certificate <output omitted>
      quit
    crypto ca certificate chain asa_cert_trustpoint
    certificate <output omitted>
      quit
    crypto ca certificate chain LOCAL-CA-SERVER
    certificate <output omitted>
      quit
    crypto ikev2 policy 1
    encryption aes-256
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 10
    encryption aes-192
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 20
    encryption aes
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 30
    encryption 3des
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 policy 40
    encryption des
    integrity sha
    group 5 2
    prf sha
    lifetime seconds 86400
    crypto ikev2 enable External client-services port 44455
    crypto ikev2 remote-access trustpoint asa_cert_trustpoint
    telnet timeout 5
    ssh LAN-10-0-1-x 255.255.255.0 Internal
    ssh xxx.xxx.xxx.xxx 255.255.255.255 External
    ssh xxx.xxx.xxx.xxx 255.255.255.255 External
    ssh timeout 5
    ssh version 2
    console timeout 0
    no vpn-addr-assign aaa
    no ipv6-vpn-addr-assign aaa
    no ipv6-vpn-addr-assign local
    dhcpd dns 75.153.176.9 75.153.176.1
    dhcpd domain ingo.local
    dhcpd option 3 ip 10.0.1.254
    dhcpd address 10.0.1.50-10.0.1.81 Internal
    dhcpd enable Internal
    threat-detection basic-threat
    threat-detection scanning-threat shun except ip-address LAN-10-0-1-x 255.255.255.0
    threat-detection statistics access-list
    threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
    dynamic-filter use-database
    dynamic-filter enable interface Internal
    dynamic-filter enable interface External
    dynamic-filter drop blacklist interface Internal
    dynamic-filter drop blacklist interface External
    ntp server 128.233.3.101 source External
    ntp server 128.233.3.100 source External prefer
    ntp server 204.152.184.72 source External
    ntp server 192.6.38.127 source External
    ssl encryption aes256-sha1 aes128-sha1 3des-sha1
    ssl trust-point asa_cert_trustpoint External
    webvpn
    port 44433
    enable External
    dtls port 44433
    anyconnect image disk0:/anyconnect-win-3.1.02026-k9.pkg 1
    anyconnect profiles profile1 disk0:/profile1.xml
    anyconnect enable
    smart-tunnel list SmartTunnelList1 mstsc mstsc.exe platform windows
    smart-tunnel list SmartTunnelList1 putty putty.exe platform windows
    group-policy DfltGrpPolicy attributes
    vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless
    webvpn
      anyconnect profiles value profile1 type user
    username write.ingo password ... encrypted
    username ingo password ... encrypted privilege 15
    username tom.tucker password ... encrypted
    class-map TCP
    match port tcp range 1 65535
    class-map type regex match-any BlockFacebook
    match regex BlockFacebook
    class-map type inspect http match-all BlockDomains
    match request header host regex class BlockFacebook
    class-map inspection_default
    match default-inspection-traffic
    policy-map type inspect dns preset_dns_map
    parameters
      message-length maximum client auto
      message-length maximum 1500
      id-randomization
    policy-map TCP
    class TCP
      set connection conn-max 1000 embryonic-conn-max 1000 per-client-max 250 per-client-embryonic-max 250
      set connection timeout dcd
      set connection advanced-options Normalizer
      set connection decrement-ttl
    policy-map type inspect http HTTP
    parameters
      protocol-violation action drop-connection log
    class BlockDomains
    policy-map global_policy
    class inspection_default
      inspect ftp
      inspect h323 h225
      inspect h323 ras
      inspect rsh
      inspect rtsp
      inspect esmtp
      inspect sqlnet
      inspect skinny 
      inspect sunrpc
      inspect xdmcp
      inspect sip 
      inspect netbios
      inspect tftp
      inspect ip-options
      inspect dns preset_dns_map dynamic-filter-snoop
      inspect http HTTP
    service-policy global_policy global
    service-policy TCP interface External
    smtp-server 199.185.220.249
    privilege cmd level 3 mode exec command perfmon
    privilege cmd level 3 mode exec command ping
    privilege cmd level 3 mode exec command who
    privilege cmd level 3 mode exec command logging
    privilege cmd level 3 mode exec command failover
    privilege cmd level 3 mode exec command vpn-sessiondb
    privilege cmd level 3 mode exec command packet-tracer
    privilege show level 5 mode exec command import
    privilege show level 5 mode exec command running-config
    privilege show level 3 mode exec command reload
    privilege show level 3 mode exec command mode
    privilege show level 3 mode exec command firewall
    privilege show level 3 mode exec command asp
    privilege show level 3 mode exec command cpu
    privilege show level 3 mode exec command interface
    privilege show level 3 mode exec command clock
    privilege show level 3 mode exec command dns-hosts
    privilege show level 3 mode exec command access-list
    privilege show level 3 mode exec command logging
    privilege show level 3 mode exec command vlan
    privilege show level 3 mode exec command ip
    privilege show level 3 mode exec command failover
    privilege show level 3 mode exec command asdm
    privilege show level 3 mode exec command arp
    privilege show level 3 mode exec command ipv6
    privilege show level 3 mode exec command route
    privilege show level 3 mode exec command ospf
    privilege show level 3 mode exec command aaa-server
    privilege show level 3 mode exec command aaa
    privilege show level 3 mode exec command eigrp
    privilege show level 3 mode exec command crypto
    privilege show level 3 mode exec command ssh
    privilege show level 3 mode exec command vpn-sessiondb
    privilege show level 3 mode exec command vpnclient
    privilege show level 3 mode exec command vpn
    privilege show level 3 mode exec command dhcpd
    privilege show level 3 mode exec command blocks
    privilege show level 3 mode exec command wccp
    privilege show level 3 mode exec command dynamic-filter
    privilege show level 3 mode exec command webvpn
    privilege show level 3 mode exec command service-policy
    privilege show level 3 mode exec command module
    privilege show level 3 mode exec command uauth
    privilege show level 3 mode exec command compression
    privilege show level 3 mode configure command interface
    privilege show level 3 mode configure command clock
    privilege show level 3 mode configure command access-list
    privilege show level 3 mode configure command logging
    privilege show level 3 mode configure command ip
    privilege show level 3 mode configure command failover
    privilege show level 5 mode configure command asdm
    privilege show level 3 mode configure command arp
    privilege show level 3 mode configure command route
    privilege show level 3 mode configure command aaa-server
    privilege show level 3 mode configure command aaa
    privilege show level 3 mode configure command crypto
    privilege show level 3 mode configure command ssh
    privilege show level 3 mode configure command dhcpd
    privilege show level 5 mode configure command privilege
    privilege clear level 3 mode exec command dns-hosts
    privilege clear level 3 mode exec command logging
    privilege clear level 3 mode exec command arp
    privilege clear level 3 mode exec command aaa-server
    privilege clear level 3 mode exec command crypto
    privilege clear level 3 mode exec command dynamic-filter
    privilege cmd level 3 mode configure command failover
    privilege clear level 3 mode configure command logging
    privilege clear level 3 mode configure command arp
    privilege clear level 3 mode configure command crypto
    privilege clear level 3 mode configure command aaa-server
    prompt hostname context
    no call-home reporting anonymous
    call-home
    profile CiscoTAC-1
      no active
      destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
      destination address email [email protected]
      destination transport-method http
      subscribe-to-alert-group diagnostic
      subscribe-to-alert-group environment
      subscribe-to-alert-group inventory periodic monthly
      subscribe-to-alert-group configuration periodic monthly
      subscribe-to-alert-group telemetry periodic daily
    Cryptochecksum:41a021a28f73c647a2f550ba932bed1a
    : end
    Many thanks,
    Ingo

    Hi Jose,
    here is what I got now:
    ASA(config)# sh run | begin tunnel-group
    tunnel-group DefaultWEBVPNGroup general-attributes
    address-pool VPNPool
    authorization-required
    and DAP debugging still the same:
    ASA(config)# DAP_TRACE: DAP_open: CDC45080
    DAP_TRACE: Username: tom.tucker, aaa.cisco.grouppolicy = DfltGrpPolicy
    DAP_TRACE: Username: tom.tucker, aaa.cisco.username = tom.tucker
    DAP_TRACE: Username: tom.tucker, aaa.cisco.username1 = tom.tucker
    DAP_TRACE: Username: tom.tucker, aaa.cisco.username2 =
    DAP_TRACE: Username: tom.tucker, aaa.cisco.tunnelgroup = DefaultWEBVPNGroup
    DAP_TRACE: Username: tom.tucker, DAP_add_SCEP: scep required = [FALSE]
    DAP_TRACE: Username: tom.tucker, DAP_add_AC:
    endpoint.anyconnect.clientversion="3.1.02026";
    endpoint.anyconnect.platform="win";
    DAP_TRACE: Username: tom.tucker, dap_aggregate_attr: rec_count = 1
    DAP_TRACE: Username: tom.tucker, Selected DAPs: DfltAccessPolicy
    DAP_TRACE: Username: tom.tucker, DAP_close: CDC45080
    Unfortunately, it still doesn't work. Hmmm.. maybe a wipe of the config and starting from scratch can help?
    Thanks,
    Ingo

  • DAP default policy only for AnyConnect clients

    Hello
    Is it possible to apply DAP DfltAccessPolicy only for AnyConnect clients ?

    Did you ever get an answer to this question?
    It seems you should be able to set up a two different client profiles.  Under Authentication, ssl-client would would specify "Both" and the sslclientless would specify AAA.  You would likely have to duplicate much of the other work but the requirement would be satisfied.

  • Has the ODI same installable for both Client & Server?

    Has the ODI same installable for both Client & Server?
    i.e. Team with multiple developers is concurrently working on ODI project. Repository is very much same. They just need the Designer Module in their desktop.
    Is there separate installable for development IDE for ODI (Designer Module) instead of complete ODI which may include the server also?
    Thanks In Advance
    priyadarshi.

    Hi ,
    You can install only the client in multiple machine if multiple user are going use/share the same repository ... and you should be having the same
    snps_login_work.xml
    snps_login_security.xml
    in all your client installations....so that you can have multiple users created and share the same repositroy ...
    hope this helps
    Thanks
    Ananda

  • Thanks for the response, Peggy. I didn't find a 10 ^ update on the update, but I did update Java to Update 7. I then followed your directions to delete the Appleworks preferences. However, I still have the same problem. Any other suggestions. My wife real

    Thanks for the response, Peggy. I didn't find an update for the update of OA X10.6, but I did update Java to update 7. I also followed your instructions and deleted the preferences files. However, I still get the same dialog box: "Appleworks 6 Quit Unexpectedly". Any other ideas.? Many thanks,
    Sprinkles

    Hi Sprinkles: You may need to repost your response in the original thread to get Peggy's attention. I have included the link to your previous thread below.
    https://discussions.apple.com/message/18043809#18043809
    Stedman

  • Updating the web-services.xml for WS-Security

    If I wanted to change my webservice from encryption of both the request and response to just encryption of the request how do I manually change the web-services.xml file ??? Do I have to un-archive the ear and re-archive the ear everytime I want to make security changes to the web-services.xml file ?

    It works. Thanks,
    Ioana
    "Neal Yin" <[email protected]> wrote:
    The error means your EJB is not deployed.
    Adding a EJB module to your application.xml file of the ear should fixe
    it.
    <application>
    <display-name />
    <module>
    <web>
    <web-uri>dox_sdi.war</web-uri>
    </web>
    </module>
    <module>
    <ejb>DocumentService.jar</ejb>
    </module>
    </application>
    "Ioana Meissner" <[email protected]> wrote in message
    news:3cf640cc$[email protected]..
    I have used the following example for my own web service with EJBcomponent and SOAP
    Message Handler Chain:
    http://e-docs.bea.com/wls/docs70/webServices/dd.html#1058208
    I have a deployment error:
    javax.naming.NameNotFoundException: Unable to resolve'app/ejb/DocumentService.j
    ar#DocumentService/home' Resolved: 'app/ejb'Unresolved:'DocumentService.jar#Doc
    umentService' ; remaining name 'DocumentService.jar#DocumentService/home'
    In attachement is the ear file.
    Is there a problem in web-services.xml?
    Thanks

  • I mistakenly deleted the files that allowed for the restore last session tab on homepage; how to reinstall?

    I was cleaning up desktop and deleted a firefox file that I didn't recognize....it ended up being the one that allows for opening up the previous session

    I have no idea how/why it was on desktop....and I emptied the recycle bin already! I was just trying to get organized a bit and clean up clutter...but I did use that feature almost daily, as it helped me to just close up the computer in the evening without worrying about getting to all the work the next day, as I would now immediately remember what I was doing!

  • I can't delete the .thumb.db file from a client computer

    In my LAN I have a main computer, the server, that shares a folder. Other users of the LAN can access to the foler and copy, modify and delete files. However, many times when the user try to delete a folder get an error that says that the file thumb
    can't be delete because the file explorer has opened the file. That's is not true.
    The user has the needed permissions to delete the files, but for some reason he can't.
    I know that one solution is to show icons instead of miniature in the file explorer, but it is not a solution in this case, because the user uses many photos and it's easier to see the miniatures instead of the icons.
    How can I solve the problem and delete this file? Any easy and permanent solution? because this occurs in many folders and the user don't have a hugh knowledgement of windows.
    Thank so much.

    Hi,
    We can disable the caching of thumbnails in hidden thumbs.db files via Group policy to fix this issue:
    1.Run gpedit.msc
    2.Navigate to:
       User Configuration\Administrative Templates\Windows Components\File Explorer
    3.Set “Turn off the caching of thumbnails in hidden thumbs.db files” to Enable.
    4.You may need to log off or force group policy to update before this takes effect, I am not sure.
       To force group policy to update, run gpupdate /force
    Now you will need to clean the thumbs.db files that are already created. To do this we are gonna use the disk cleanup tool.
    Press again Windows key + R to start run and write there cleanmgr then Enter。
    This will start the Disk cleanup tool. Select the drive you want to clean , if you have more drives you gonna have to repeat this for each drive.
    Disk cleanup tool will calculate for a bit what files can be deleted and then the following window will appear.
    Make sure the Thumbnails is checked and press OK .  That is it. Now you can delete those folders you want to go away.
    Kate Li
    TechNet Community Support

  • How to determine the sender business system for ABAP client proxy

    Hi All,
    I have one doubt: when the client proxy sends the message to XI, how could i know what is the sender business system name for it?
    Is it the logical system which is reflected in Technical System?
    let's say if i have the ABAP system, the technical system is ECC, which has three clients: 001, 066 and 000.
    And the client 001's logical system in ECCCLNT001 (all the client proxy is created in this client). In this case, the sender business system name is ECCCLNT001, am i right?
    If no, please correct me.
    Thanks in advance
    Leo

    Hi lawrence
    When data is distributed between different systems, each system within a network has to be clearly identifiable. The u201Clogical systemu201D deals with this issue.                               
    A logical system is an application system in which the applications work together on a common data basis. In SAP terms, the logical system is a client.
    Since the logical system name is used to identify a system uniquely within the network, two systems cannot have the same name if they are connected to each other as BW systems or as source systems, or if there are plans to connect them in any way.
    Although SAP does not recommend that you connect test systems to production systems, a test system can have the same name as a production system. This makes copying production systems to test systems a lot simpler.
    You are only allowed to change the logical system name of a system if the system is not connected to any other systems, because changing the logical system name would render all the connections to other systems useless.
    Logical system names must contain capital letters and numbers only. SAP recommends the following naming convention for logical system names: <System-ID>CLNT<Client>.
    Regards
    sandeep

  • Compacting the cache-config.xml for multiple cache-store

    Hi,
    I have a cache-config.xml that has various ReadWriteBackingMaps with different CacheLoader implementations. I was wondering of the best way to compact this xml using the scheme-ref tag, as all I really need is schemes, with different cache stores. e.g. I have an InstrumentCacheStore and a CurrencyCacheStore .. which invoke different CacheLoaders. they are both distributed caches.
    I thought the below would work, but it dosen't.. :( when loading a currency, the InstrumentCacheStore gets invoked.
    is there a way to compact this XML? Else, for 6 different cache loaders that I have, do I have to specify the whole distributed-scheme again and again?
    <cache-config>
    <caching-scheme-mapping>
    <cache-mapping>
    <cache-name>instrument-*</cache-name>
    <scheme-name>distributed-instrument-scheme</scheme-name>
    </cache-mapping>
    <cache-mapping>
    <cache-name>currency-*</cache-name>
    <scheme-name>distributed-currency-scheme</scheme-name>
    </cache-mapping>
    </caching-scheme-mapping>
    <caching-schemes>
    <distributed-scheme>
    <scheme-name>distributed-instrument-scheme</scheme-name>
    <scheme-ref>distributed-scheme</scheme-ref>
    </distributed-scheme>
    <distributed-scheme>
    <scheme-name>distributed-currency-scheme</scheme-name>
    <scheme-ref>distributed-scheme</scheme-ref>
    <!-- THIS DOES NOT OVERRIDE THE DEFAULT distributed-scheme? -->
    <cachestore-scheme>
    <class-scheme>
    <class-name>coherence.cachestore.CurrencyCacheStore</class-name>
    </class-scheme>
    </cachestore-scheme>
    </distributed-scheme>
    <distributed-scheme>
    <scheme-name>distributed-scheme</scheme-name>
    <service-name>DistributedCache</service-name>
    <backing-map-scheme>
    <read-write-backing-map-scheme>
    <internal-cache-scheme>
    <local-scheme>
    <scheme-ref>LocalSizeLimited</scheme-ref>
    </local-scheme>
    </internal-cache-scheme>
    <cachestore-scheme>
    <class-scheme>
    <class-name>coherence.cachestore.InstrumentCacheStore</class-name>
    </class-scheme>
    </cachestore-scheme>
    </read-write-backing-map-scheme>
    </backing-map-scheme>
    <serializer>
    <class-name>com.tangosol.io.pof.ConfigurablePofContext</class-name>
    </serializer>
    <partition-count>5557</partition-count>
    <backup-count>1</backup-count>
    <thread-count>10</thread-count>
    <autostart>true</autostart>
    </distributed-scheme>
    <local-scheme>
    <scheme-name>LocalSizeLimited</scheme-name>
    <high-units>500000000</high-units>
    <low-units>10000</low-units>
    <unit-calculator>BINARY</unit-calculator>
    </local-scheme>
    </caching-schemes>
    </cache-config>
    --------------------------------------------------------------------------------------------------------------

    There are two possible ways to sort this out
    1. The cache configuration for the distributed-currency-scheme shown in the original post is wrong and does not correctly override the cache store, it should look like this:.
    <distributed-scheme>
      <scheme-name>distributed-currency-scheme</scheme-name>
      <scheme-ref>distributed-scheme</scheme-ref>
      <backing-map-scheme>
        <read-write-backing-map-scheme>
          <internal-cache-scheme>
            <local-scheme>
              <scheme-ref>LocalSizeLimited</scheme-ref>
            </local-scheme>
          </internal-cache-scheme>
          <cachestore-scheme>
            <class-scheme>
              <class-name>coherence.examples.CurrencyCacheStore</class-name>
            </class-scheme>
          </cachestore-scheme>
        </read-write-backing-map-scheme>
      </backing-map-scheme>
    </distributed-scheme> 2. You can use a single scheme and parameterise it like this:
    <?xml version="1.0"?>
    <!DOCTYPE cache-config SYSTEM "cache-config.dtd">
    <cache-config>
      <caching-scheme-mapping>
        <cache-mapping>
          <cache-name>instrument-*</cache-name>
          <scheme-name>distributed-scheme</scheme-name>
          <init-params>
            <init-param>
              <param-name>cache-store-class-name</param-name>
              <param-value>coherence.examples.InstrumentCacheStore</param-value>
            </init-param>
          </init-params>
        </cache-mapping>
        <cache-mapping>
          <cache-name>currency-*</cache-name>
          <scheme-name>distributed-scheme</scheme-name>
          <init-params>
            <init-param>
              <param-name>cache-store-class-name</param-name>
              <param-value>coherence.examples.CurrencyCacheStore</param-value>
            </init-param>
          </init-params>
        </cache-mapping>
      </caching-scheme-mapping>
      <caching-schemes>
        <distributed-scheme>
          <scheme-name>distributed-scheme</scheme-name>
          <service-name>DistributedCache</service-name>
          <backing-map-scheme>
            <read-write-backing-map-scheme>
              <internal-cache-scheme>
                <local-scheme>
                  <scheme-ref>LocalSizeLimited</scheme-ref>
                </local-scheme>
              </internal-cache-scheme>
              <cachestore-scheme>
                <class-scheme>
                  <class-name>{cache-store-class-name}</class-name>
                </class-scheme>
              </cachestore-scheme>
            </read-write-backing-map-scheme>
          </backing-map-scheme>
          <serializer>
            <class-name>com.tangosol.io.pof.ConfigurablePofContext</class-name>
          </serializer>
          <partition-count>5557</partition-count>
          <backup-count>1</backup-count>
          <thread-count>10</thread-count>
          <autostart>true</autostart>
        </distributed-scheme>
        <local-scheme>
          <scheme-name>LocalSizeLimited</scheme-name>
          <high-units>500000000</high-units>
          <low-units>10000</low-units>
          <unit-calculator>BINARY</unit-calculator>
        </local-scheme>
      </caching-schemes>
    </cache-config>Parameter names from the init-params part of each cache mapping can be used inside curly brackets in the cache scheme part.
    Hope that helps,
    JK

Maybe you are looking for

  • Setting up firefox on a Windows Terminalserver

    Hi What are the possibilities to control the usage of firefox on a Windows Terminalserver? Are there ways to manage plugins/addons used on a system? I want to provide certain Plugins for all users on the system and disable the possibility to install

  • Run Time errors on Z22

    I have just recently encountered run time errors... any suggestions on how to fix?  It's on my laptop when I load Palm Desktop.   I can see my calendar but everything is frozen.  Thanks Post relates to: Palm Z22

  • Date conversion problem.

    I use 2 adaptive RFC function with a r3 backend system: 1- Search 2- Update The first works fine, I show the data, one of the fields is a date (with r3 Date format) binded and in the web dynpro is showed in inputfield, with a little calendar icon on

  • Org unit differring & Pay scale issue

    Hi experts, i hav e an issue ..... when i executed new office orders i am getting one org unit. & when i executed for the same employee no for existing office order i am getting diff org. unit & i am not getting Pay scale amount also......... how can

  • Sharing Volumes within a Network...

    I have been recently been able to access my father's entire external hard drive (his iMac has Leopard) from my MacBook. However, when I try to share my external hard drive, I cannot seem to find out how to do this, as I am using Tiger. The only thing