Implementing max user sessions settings for TACACS with ACS 5.3

I'm a little confused about the configuration of max user sessions for device administration with TACACS.
When I've changed the configutration of unlimited sessions for a value in Access Policies > Max User Session Policy > Max Session User Settings
I think this value could limit the maximum number of sessions for each user, but instead this value limit in a global meaning all of my sessions.
For example: I need to limit the session for my users in 2.
user1 = Max 2 sessions
user2 = Max 2 sessions
user3 = Max 2 sessions
Whe i Put the value of 2 in Max Session User Settings
user1 + user2 + user3 = Max 2 sessions
This is a limitation of ACS 5.3 or my configuration needs something aditional.

Luis,
Are you saying that when you authenticate with user1 and user 2 that user3 isnt able to get access?
Do you have tacacs accounting enabled on the network access device?
Also what do you have configured for the group settings? If there is a maximum group setting and all the users are a member of the same group then the lesser of the two will be enforced. So if the group max sessions is set to 1 then the all users in that group will have a max session of 1.
Here is some reference material.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.3/user/guide/access_policies.html#wp1162177
Thanks,
Tarik Admani

Similar Messages

  • Re: (forte-users) Session management for page builder(fwd)

    Jaco,
    Hope this helps,
    John
    John Soper, Information Systems Development, ITS, The University of Melbourne
    email: j.soperits.unimelb.edu.au >>>> Tel: 9344 5612---------- Forwarded message ----------
    Date: Mon, 10 Jan 2000 16:34:31 +1100
    From: Lyle Winton <L.Wintonits.unimelb.edu.au>
    To: John Soper <j.soperits.unimelb.edu.au>
    Subject: Re: (forte-users) Session management for page builder (fwd)
    Why not construct an intermediate page after the
    login page that has SESSION_UNSPECIFIED and
    a refresh META tag. The page can then refresh
    to either the login failed or login succeeded pages
    depending on how the login went! Looks like...
    1) Login page (SESSION_UNSPECIFIED)
    2A) Refresh page (SESSION_UNSPECIFIED)
    < HTML >
    < HEAD >
    < META http-equiv="refresh"
    content="0;URL=<a href=
    "http://www.blah.com/forte.cgi?PageName=3">http://www.blah.com/forte.cgi?PageName=3</a>" >
    < /HEAD >
    < BODY >
    Login succeeded. Please wait...
    < /BODY >
    < /HTML >
    2B) Refresh page (SESSION_UNSPECIFIED)
    < HTML >
    < BODY >
    Login failed.
    < /BODY >
    < /HTML >
    3) We're finally in. (SESSION_REQUIRED)
    I'm not sure if this works on internet exploder.
    Lyle.
    John Soper wrote:
    Lyle,
    (Post from forte mailing group)
    Does this make sense to you?
    John
    John Soper, Information Systems Development, ITS, The University of Melbourne
    email: j.soperits.unimelb.edu.au >>>> Tel: 9344 5612---------- Forwarded message ----------
    Date: Thu, 30 Dec 1999 07:54:24 +0200
    From: "Jaco Erasmus (home)" <jacoerasmweb.co.za>
    To: kamranaminyahoo.com
    Subject: (forte-users) Session management for page builder
    Hi everybody,
    We have a lot of legacy code making use of the page builder service to
    produce web pages. These pages were originally written without session
    management. I'm now busy adding session management to them, but there is
    one problem with this approach and I will appreciate if someone can shed
    some light on it. Here it is:
    Page one is submitted.
    Some validation (authentication) takes place and depending on the outcome,
    either page 2A (SESSION_REQUIRED) or 2B (error page with
    SESSION_UNSPECIFIED) must be displayed. In order to implement this, I
    needed a place to make a decision. The way I've done it, is to pass a
    'virtual page' (SESSION_UNSPECIFIED) to the page builder service. The
    validation is done here and request.PageName is then replaced with the
    PageName of pages 2A or 2B. The HandleRequest() method is then called
    again. The problem is that the ValidateSession() method does not get
    invoked again, thus allowing 2A through without a session. How do I make
    sure that the ValidateSession() method get invoked again?
    The approach making use of templates look to me as if it has all the means
    to do this (redirect tag), but I don't want to rewrite everything if I
    don't have to. Is there a way that a pagebuilder page can be specified by
    the redirect tag? This will definitely help, but so far I've only managed
    to call templates from the redirect tag.
    Is the template approach better suited for session management? It is
    definetely better documented...
    Regards.
    Jaco
    For the archives, go to: http://lists.sageit.com/forte-users and use
    the login: forte and the password: archive. To unsubscribe, send in a new
    email the word: 'Unsubscribe' to: forte-users-requestlists.sageit.com

    Hi,
    i hope this helps
    http://help.sap.com/saphelp_nw70/helpdata/EN/7e/aa610cc1dd8f4388b1df02fc362f0f/frameset.htm
    http://help.sap.com/saphelp_nw70/helpdata/EN/69/c250754ba111d189750000e8322d00/frameset.htm
    regards,
    Anil.

  • Forms max user session 11gR2

    Hi,
    I have three simple questions, can anyone help me to find out the answers.
    What is the max user session for oracle forms 11.1.2.1 version?
    If the max user sessions limit reached how can we handle it?
    How can i get max user session for forms 11.1.2.1 version through sql code?
    Thank You!
    Dilli Babu. S

    What is the max user session for oracle forms 11.1.2.1 version?
    How can i get max user session for forms 11.1.2.1 version through sql code?
    Not sure what you mean by "max user session", but since you mention sql code, then I have to think that you mean database sessions. If so, you can check out SESSIONS parameter :
    SQL> sho parameter sessions
    If you mean something different, please clarify.

  • Saving Settings for use with Export using Quicktime Conversion

    Dear All,
    Is it possible to save a set of settings for use with the Export using Quicktime Conversion feature? The reason I ask is that we have to export a quicktime of every tv commercial we make (using the same settings) and it would be great if "one click" could deliver the export settings we need.
    All the best, Sean

    Well, you can create a droplet from Compressor that would do what you'd like...
    Open compressor and in the Help menu, Select the user manual. Navigate to page 315.
    Jerry

  • User specific settings for message ME161

    All SAP Gurus,
    Is it possible to have user specific settings for message like ME161?
    We want the message ME161 to be displayed as warning message to one user and the same message to be displayed as an erorr message to another user.
    Is it possible?
    Regards,

    hi,
    In addition to the above data:
    Messages are defined like this:
    Version     AG      No.      Text     TYPE
    Normally, in std case,
    Version will be always 00 for system defined messages....
    Now if you wanna make the the same message as authorised,
    then copy this exsisting message....
    While copying system will ask for version, here enter it it Z*
    Now on the other hand make the other settings for user/user grp in SU01 and here set the user parameter as MSV(THIS IS MUST)....
    and then try...
    Regards
    Priyanka.P

  • Settings for PHP5 With Apache 2  and SAPRFC in WIndows

    Hi,
    Can anyone give me the exact version of software that needed for the settings for PHP5 with Apache 2 and SAPRFC in Windows.Thank you

    If it's just a test/dev environment you need you can try "<a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn?rid=/library/uuid/e50bd86e-0a01-0010-53bd-857585234a6a">scripting in a Box</a>" it also lists the versions and pieces needed for the setup you are looking for.

  • Could you guide the settings for GWI with MS Outlook for CRM 7.0 .

    Dear Experts,
    Could you explaine the settings for GWI with MS Outllok for SAP CRM 7.0 and what are pre requests we need.
    1. How to install this Add on in CRM 7.0 and which version is support for CRM 7.0.
    2. How to set up (configure) in crm 7.0 and MS out look.
    3. As per my knowledge from MS to CRM its bidorectional data flow isu2019t true?
    4. Can we get masterdata like Accounts and Products in MS Out look tool?
    5. How we can map activity from MS out look to CRM?
    Regards,
    Jemmi.

    Please see my answer to your identical threat in forum Webclient UI.
    Please open your questions only in one forum.
    Kind regards
    Manfred

  • Could you guide settings for GWI with MS Outlook for CRM 7.0 .

    Dear Experts,
    Could you explaine the settings for GWI with MS Outllok for SAP CRM 7.0 and what are pre requests we need.
    1. How to install this Add on in CRM 7.0 and which version is support for CRM 7.0.
    2. How to set up (configure) in crm 7.0 and MS out look.
    3. As per my knowledge from MS to CRM its bidorectional data flow isu2019t true?
    4. Can we get masterdata like Accounts and Products in MS Out look tool?
    5. How we can map activity from MS out look to CRM?
    Regards,
    Jemmi.

    Hello Jemmi,
    a lot of questions
    Here some answers:
    1. You do not have to install the add-on to CRM. It is a add-on to outlook. Just start the setup.exe you downloaded from the marketplace and select MS-Outlook and your language.
    2. In CRM70 customizing search for "client profile" - here you will be able to customize for different businessroles different GWI settings. The settings will be synchronised to the client. You will not need to do settings on the client.
    3. Biderectional is theoretically possible. We only use CRM to Outlook. If you do it the other way round you have to think about obligatory fields in CRM and where do you get the account ID from and and and. CRM to Outlook is simple.
    4. Accounts and Products i guess no in standard. But contact persons is possible, appointsments and tasks are also possible.
    5. No answer, we do not use this.
    I hope this helps.
    Good luck.
    Kind regards
    Manfred

  • Lazy Nezumi - settings for use with CC

    I am finding it hard to find my way round way this software - the incomprehensible (to me) manual doesn't help - and I'd be grateful for a steer on what are good default settings for smoothing curves in freehand drawing.  None of the settings seem to help or have a simple and useful effect for freehand work.
    Can I assume that it only works with the brush tool and not with other tools like the Art History Brush?
    I know Trevor D has mentioned this software a couple of times.
    Thanks.

    David, you had me wondering there.  I don't think I have ever used the Art History brush.  I did try though, and initially thought LNP did not work with that tool, but with high settings I could see that it does.
    For smooth lines use the Massive Smooth preset with mode set to Moving Average.  The default values are good for the Brush tool, but seem to work better with much higher 'Amount' setting for the Art History brush.  But I have no experience with the Art history brush, and don't even have a clear idea how it works.
    Lazy Mouse with the Pulled string mode, are used for smooth lines with abrupt changes of direction.  You have to stop and move the cursor back a touch to take the tension out of the pulled string. Then move in the new direction and when the pulled string becomes taut the line will follow the cursor again. 
    Actually, the animated gifs on the site explain it better than my words
    Pulled String:
    Moving Average
    Moving Average + Catch Up
    I don't think that Guilaume ever sleeps.  He has never taken more than 30 minutes to reply to an email, even on Christmas day!  He is super helpful, and tends to respond immediately if you use the LNP Chat facility.
    If you check out the Feedback page, you'll find lots of LNP users that do 'similar' work to you, although I have to say none that were quite like your beautiful painterly type artworks.  You'll possibly recognize some of the names, and maybe swap some ideas with them.  It's quite a little community, but there isn't a forum unfortunately.
    I am not sure how relevant they will be to your work, but do check out the Constraint presets.  For line drawing I find they are really useful.
    Lazy Nezumi Pro - User Testimonials
    Having spoken nicely about your work David, it's only fair we let other users take a look
    New Artwork photoart,digital painting,drawing,sketches,
    But bottom line is to not hesitate to contact Guilaume if you need help.  He will definitely get back to you.
    [email protected]

  • Change default settings for CaptureOnTouch with Canon imageFORMULA DR-C125

    Default settings for the CaptureOnTouch program get loaded automatically on startup for my Canon imageFORMULA DR-C125. I can personalize these settings, and take a backup, no problem. When another user logs into that very same computer with the very same scanner attached, they get the same automatically loaded default settings. In order for them to use the settings that I took a great deal of time to customize, they need to load the backup file that I created (whateverfilename.cot). It may seem like no big deal for somebody with some medium computer knowledge, but I have 50+ users logging into this computer, and I do not have time to show everyone of them what to do nor how to do it. Here comes my question: where are the defaults settings that Canon has created (which are so limited : they don't contain grayscale scan settings!) located on the computer (Program Files?) and what is the name of the file? I need to change these settings to something my users can easily deal with, and more importantly, I need scans that are nimble in size so that they can be emailed easily. Thank you so much in advance for you help! Stéphane

    right click sheet1=>select all sheet=>set print on one side.
    KR

  • Correct mail settings for iCloud with Mail

    I find this: to talke about setting up iCloud Manualy.
    iCloud: Mail server settings for email clients
    And then this for 10.6.
    http://support.apple.com/kb/HT5330
    But shouldn't either work for 10.6?

    Yes, they should work. For the outgoing SMTP, you might try using Apple Token instead of your password.
    You can share Mail, Calendars, and Contacts running Snow Leopard. Based on my experience, I don't recommend syncing Contacts - created a lot of problems with duplicates.
    Snow Leopard iCloud - Address and iCal
    Snow Leopard iCloud –  iCal

  • Optimal settings for AP1242AG with roaming

    Hello everybody, I need some advice on the best settings for my AP1242AG wireless radios.  I am using 2.4Ghz and not 5.  They are not lightweight and therefore I do not have a WLC.  I have only hooked up the right (primary) antenna on them.  I have 6 radios in an outdoor deployment, they have line of sight and are only about 500 feet away from each other so signal should not be an issue.  I have already established communication between two of the units successfully as a test so I am mostly there.
    However, I need help with the role in radio settings.  3 of the radios are mounted throughout a jobsite on poles so they are my main AP's.  The other 3 radios are in motorhomes that move around inside of the yard from time to time.  Therefore, this is similar to a multipoint to multipoint bridge configuration. Each of the 3 main units on the poles have a connection back to the main LAN and I am simply trying to get the LAN connectivity into each of the three motorhomes (so I don't believe I need to use any of the repeater options and this is similar to a bridge).   I don't know the best role in radio selection for this configuration that will allow everything to work together the best.  I also need the 3 remote radios to roam from one pole to the next as needed for strongest signal.
    Also, if anybody has additional advice on other settings I may want to change given my setup to help optimize, I would appreciate it.  I am obviously new to these units.
    Can somebody please help with this?  Thanks in advance!

    APs on poles : station-role root
    APs on motorhomes : station-role workgroup-bridge
    The workgroup bridge role allows to act as client, provide connectivity to whatever is connected on the wired interface of the WGB and also to roam.
    500 feet is a lot for 1242 with omnidirectionnal antennas (I suppose this is what you have since you're roaming around). I hope you tested it :-)

  • JVC GZ-HD7U MPEG Streamclip export settings for use with FCP

    There are a number of compression options in the free MPEG Streamclip 1.9.2 and it's unclear what's best or how I would figure that info out. My guess is Apple HDV 1080i50, Apple HDV 1080i60, Apple DVCPRO HD 1080i50, or Apple DVCPRO HD 1080i60. The default setting was Apple Motion JPEG A, but this produced a huge file and doesn't seem right anyway. I think the desired frame size is 1920 x 1080, but I'm uncertain if I need to end up with an interlaced or progressive .mov file. My selectable options for progressive/interlaced are: "Interlaced Scaling," "Reinterlace Chroma," and "Deinterlace Video." Selecting "Deinterlace Video" excludes use of the other two options.
    These clips will eventually be edited in FCP and I'm guessing that the appropriate settings will match whatever is selected at the export stage.
    I'm using the JVC Everio GZ-DH7U HD Hard disk camcorder...I'm not sure if JVC uses the same setting across the board for it's HD cameras or maybe just the Everio cameras are similarly designed??
    Thanks to all!!

    the output should match the source file, generally speaking. So if you camera is making HD files then using a HD sized coded would suffice.
    HDV (IIRC) is 1440x1080. I often find that using the default settings for a particular file type in Streamclip often work quite well.
    As a test, take a small file. if it works, great batch process away, if not, tweak it and then try the same small file until you get a desirable result. Rinse and repeat.

  • Edit encoding settings for menus with animated background?

    Hi there,
    I just spoke with german support and they mentioned, that there is no way I can edit the encoding settings of encore how to generate the needed parts for an animated menu.
    In this case I have a PAL M2V progressive scan used as BG and after menu rendering encore has created a M2V for the menu with strange interlacing problems ...
    There seem to be options in the "project settings" > "default transcode settings"  dialog (translated form german), but they are grayed out. There seems to be one setting "lower field" and I can not change to "progressive" ...
    Its hard for me to believe that there are really no ways of altering the encode settings for menus. Has someone an idea?

    Because DVD is Interlaced and not Progressive, I would do the Export of that Motion Asset to Interlaced with matching Field Order. There is nothing to be gained by trying to force En to do things that are not allowed by the DVD-specs. It is an authoring app. and not an NLE, so it needs the best possible, DVD-spec. material to work with.
    Good luck, and hope that helps,
    Hunt

  • Best settings for show with just JPEG at 300 psi

    Hello,
    My son is working on a school video project. The elements are music, JPG stills (scanned at 300 psi from a black and white negative) and text (a poem by Lawrence Ferlinghetti).
    He will use the motion tools to zoom and pan on the images, etc.
    Can anyone suggest the best set-up for working with black and white still jpg images. He will be using FCP 6 on Mac G5.
    Thanks.

    In the first (and most important) instance the video will be played off a standard Mac laptop (an old Powerbook) probably through a fairly basic school projector. Nothing fancy (no budget in public schools for anything like that).
    I am playing about with the JPG set-up (square pixels at 720 x 480). Though my instincts tell me I should wait and hear and get the official line (or best practice as they say in some circles).
    The images are scanned from a 35mm black and white negative as a 4x6 300dpi jpg.
    I have color corrected in Photoshop and have made copies in a re-sized 720x480 screen size (if that will help).
    Thanks
    A

Maybe you are looking for

  • Duplex print proble using CS5 with HP 5200 printer

    (sorry for the double post guys, since it's a problem that occur under BOTH indesign and adobe pdf pro i've posted in these 2 forums) hi everyone. i have a serious problem ! probably the worst bug i ever had in my design labs at my university : we  h

  • Regarding Free goods assignment

    Dear All, We have issue on free goods assignment, Our Company introducing the new promotional offer for products. Earlier we had a so many offers like one car to one car free, we can easily assign the free goods through t.Code VBN1, but this time thi

  • How to get the search function to find the correct files

    i have long wondered if it was me or the system, but i am very clear finally that the search function *****. 1) i try to find a word in a document. 2) the system shows me several possibilities. chapters 16, 18, 21, etc... 3) i then bring up each one

  • How does Oracle client communicate with a database server

    Looking to idenify how Oracle Database Client for OpenVMS communicates with database server and whether the protocol used is secure. Realize that it is using whatever the configured network protocol is (ie. tcpip) but is languauge it uses ( ie. SQL,

  • Time Machine Error, backup disk couldn't be mount

    I have a USB drive plug to my Airport Extreme and I use it for Time Machine. Today I had a message saying: "Latest Backup:Failed" Time Machine Error The Backup disk image could not be mounted. The hard disk is there, I can drag, drop, copy, delete fi