IPSec Certificate Authentication from Linux Strongswan client to Windows Advanced Firewall (2012)

Hi,
Has anybody had any success in getting a Linux Strongswan client (or Openswan) to connect to a win2012 Advanced Firewall using certificates and IPSec? My Security Connection Rule requires authentication both inbound and outbound. The cert is
installed correctly on the Linux box.
I can get a connection using pre-shared keys, but haven't been able to establish a Quick Mode session when using certs. I've tried (literally) hundreds of different configs without success. Event log shows either 'No Policy Configured' or 'Unknown
Authentication'.
Windows clients can connect correctly with certs. I've deliberately excluded details as the Linux config can be setup in so many different ways, i'd rather start by looking at someone elses config that works (if that actually exists).
Thanks
Mick

Hi,
I am trying to involve someone familiar with this topic to further look at this issue. There might be some time delay. Appreciate your patience.
Thanks for your understanding and support.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

Certificate authentication for Cisco VPN client

I am trying to configure the cisco VPN client for certificate authentication on my ASA 5512-X. I have it setup currently for group authentication with shared pass. This works fine. But in order for you to pass pci compliance you cannot allow aggresive mode for ikev1. the only way to disable aggresive mode (and use main mode) is to use certificate authentication for the vpn client. I know that some one out there must being doing this already. I am goign round and round with this. I am missing some thing.
I have tried as I might and all I can get are some cryptic error messages from the client and nothing on the firewall. IE failed to genterate signature, invalid remote signature id. I have tried using different signatures (one built on ASA and bought from Godaddy, and one built from Windows CA, and one self signed).
Can some one provide the instructions on seting this up (asdm or cli). Can this even be done? I would love to just use the AnyConnect client but I believe you need licensing for that since our system states only 2 allowed. Thank you for your help.

Dear Doug ,
          What is asa code your are running on ASA hardware , for cisco anyconnect you need have Code 8.0 on your hardware with cisco anyconnect essential license enabled .Paste your me show version i will help you whether you need to procure license for your hardware . By default your hardware will be shipped with any connect essential license when you have order your hardware with asa code above 8.0 .
With Any connect essential you are allowed to use upto total VPN peers allowed based on your hardware
1) What is the AnyConnect Essentials License?
The Anyconnect Essentials is a license that allows you to connect up to your 'Total VPN Peers" platform limit with AnyConnect. Without an AnyConnect Essentials license, you are limited to the 'SSLVPN Peers' limit on your device. With the Anyconnect Essentials License, you can only use Anyconnect for SSL - other features such as CSD (Cisco Secure Desktop) and using the SSLVPN portal page for anything other than launching AnyConnect are restricted.
You can see your limits for the various licensing by issuing the 'show version' command on your ASA.
Licensed features for this platform:
Maximum Physical Interfaces    : Unlimited
Maximum VLANs                  : 150
Inside Hosts                   : Unlimited
Failover                       : Active/Active
VPN-DES                        : Enabled
VPN-3DES-AES                   : Enabled
Security Contexts              : 2
GTP/GPRS                       : Disabled
SSL VPN Peers                  : 2
Total VPN Peers                : 750
Shared License                 : Disabled
AnyConnect for Mobile          : Disabled
AnyConnect for Cisco VPN Phone : Disabled
AnyConnect Essentials          : Disabled
Advanced Endpoint Assessment   : Disabled
UC Phone Proxy Sessions        : 2
Total UC Proxy Sessions        : 2
Botnet Traffic Filter          : Disabled
Licensed features for this platform:
Maximum Physical Interfaces    : Unlimited
Maximum VLANs                  : 150
Inside Hosts                   : Unlimited
Failover                       : Active/Active
VPN-DES                        : Enabled
VPN-3DES-AES                   : Enabled
Security Contexts              : 2
GTP/GPRS                       : Disabled
SSL VPN Peers                  : 2
Total VPN Peers                : 750
Shared License                 : Disabled
AnyConnect for Mobile          : Disabled
AnyConnect for Cisco VPN Phone : Disabled
AnyConnect Essentials          : Enabled
Advanced Endpoint Assessment   : Disabled
UC Phone Proxy Sessions        : 2
Total UC Proxy Sessions        : 2
Botnet Traffic Filter          : Disabled
Any connect VPN Configuration .
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00808efbd2.shtml

NTLMv2 authentication from linux

Hello All,
I spent good amount of time on Internet tyring to figure this out, without any success. So i thought i would better ask.
We use corporate proxy to access internet. We have both linux & win box. We access internet from linux, via firefox, after authenticating with our win domain id/pass.
Recently our proxy authentication module was upgraded/configured to accept only NTLMv2. After this, firefox keeps on prompting for id/pass as if we provided in-correct credentials.
From whatever i read, NTLMv2 is an authentication protocol. A bit advanced from LM or NTLM protocols.
So i am not sure whether firefox doesn't support NTLMv2 or should i install some package helping firefox to speak NTLMv2 or i am missing something.
Cheers,
Uday.

It's an old post but the basic problem is that the code shown doesn't implement NTLMv2 authentication at all. It just implements basic password authentication.
Does anyone know whether Sun's Linux implementation of JDK 1.6 supports NTLMv2 authentication protocol?@OP: you should have read the link you provided! It clearly says that NTLM authentication via java.net.Authenticator only works on Windows platforms, and it works by not calling your installed Authenticator. If yours gets called, it is not working or not available.
There are other problems:
public static PrintStream setupPrintStream( String fileName ) throws FileNotFoundException
PrintStream out = null;
File file = new File( fileName );
file.delete();
FileOutputStream stream = new FileOutputStream(fileName, true);
out = new PrintStream( stream );
return out;
}All that could be reduced to new PrintStream(new FileOutputStream(fileName), false). You don't even need the method.

Connecting to MSSQL Windows authentication from Linux

Hi,
From linux (OIM) environment we need to connect to window authenticated MSSQL server.In windows we set sql.dll file.How to do in linux?
Thanks!

There is a database library that can provide you with the additional options. It's here http://jtds.sourceforge.net/
With it, you can provide domain authentication credentials.
-Kevin

Print command from linux PC on to Windows Environment

Hi Experts,
We have SAP on Windows and the network printer is also on Windows, the PC with Linux is integrated with network printer i.e when the print command from Linux is given the output is available from the printer (Windows). But when the print command is given through SAP there is no output from Printer (Windows).
When same user logs into Windows the printer command is successful.

hi hari,
Printing SAP documents using Linux client is a little bit tricky if you want to get good printing result just as when you print from your Windows client.
If you want to use G printing method (on Linux client), you can't use SAPWIN on device type since SAPWIN is relying printing method. You must use exact printer driver. For example when you're using Dot Matrix printer Epson LX300+, you can use EPESCP2
I am using different method to cheat this and it's completely work.
ardhian
http://ardhian.kioslinux.com
http://sapbasis.wordpress.com

Need to communicate c server on linux & java client on windows

Hi!! I am new to socket programing in both C and Java.
From let I downloaded some client server example for c and java and tried that to link !! (I allways learn this way , and I need to do that little urget )
though cient server in linux is working perfectly fine and same for java. But problem is when I tried to communicate C server on linux and java client on windows, I end up with getting some junk characters. Though they are connected successfully.
Here goes code for java client:
package whatever;
import java.io.*;
import java.net.*;
public class Requester{
     Socket requestSocket;
     ObjectOutputStream out;
     ObjectInputStream in;
     String message;
     Requester(){}
     void run()
          try{
               //1. creating a socket to connect to the server
               requestSocket = new Socket("192.168.72.128", 2006);
               System.out.println("Connected to localhost in port 2004");
               //2. get Input and Output streams
               out = new ObjectOutputStream(requestSocket.getOutputStream());
               out.flush();
               in = new ObjectInputStream(requestSocket.getInputStream());
               System.out.println("above do");
               //3: Communicating with the server
               do{
                    try{
                         System.out.println("in do");
                         //message = (String)in.readObject();
                         System.out.println("in try");
                         //System.out.println("server>" + message);
                         System.out.println("server>" + "message");
                         sendMessage("Hi my server");
                         message = "bye";
                         sendMessage(message);
                         System.out.println("try completed");
                    catch(Exception e){
                         e.printStackTrace();
               }while(!message.equals("bye"));
          catch(UnknownHostException unknownHost){
               System.err.println("You are trying to connect to an unknown host!");
          catch(IOException ioException){
               ioException.printStackTrace();
          finally{
               //4: Closing connection
               try{
                    in.close();
                    out.close();
                    requestSocket.close();
               catch(IOException ioException){
                    ioException.printStackTrace();
     void sendMessage(String msg)
          try{
               String stringToConvert= "hello world";
               byte[] theByteArray = stringToConvert.getBytes();
                  System.out.println(theByteArray.length);
               out.writeObject(theByteArray);
               out.flush();
               System.out.println("client>" + msg);
          catch(IOException ioException){
               ioException.printStackTrace();
          catch(Exception ex){
               ex.printStackTrace();
     public static void main(String args[])
          Requester client = new Requester();
          client.run();
And for C server
/ server
    #include <stdio.h>
        #include <sys/socket.h>
        #include <arpa/inet.h>
        #include <stdlib.h>
        #include <string.h>
        #include <unistd.h>
        #include <netinet/in.h>
        #define MAXPENDING 5    /* Max connection requests */
        #define BUFFSIZE 32
        void Die(char *mess) { perror(mess); exit(1); }
    void HandleClient(int sock) {
            char buffer[BUFFSIZE];
            int received = -1;
            /* Receive message */
            if ((received = recv(sock, buffer, BUFFSIZE, 0)) < 0) {
                Die("Failed to receive initial bytes from client");
            /* Send bytes and check for more incoming data in loop */
            while (received > 0) {
            /* Send back received data */
                if (send(sock, buffer, received, 0) != received) {
                    Die("Failed to send bytes to client");
//            fprintf("%s",buffer);
            fprintf(stdout, "message Recieved: %s\n", buffer);
                //Die("was not able to echo socket message");
            /* Check for more data */
                if ((received = recv(sock, buffer, BUFFSIZE, 0)) < 0) {
                    Die("Failed to receive additional bytes from client");
            close(sock);
    //     A TCP ECHO SERVER
    int main(int argc, char *argv[]) {
            int serversock, clientsock;
                struct sockaddr_in echoserver, echoclient;
                if (argc != 2) {
                  fprintf(stderr, "USAGE: echoserver <port>\n");
                exit(1);
            /* Create the TCP socket */
                if ((serversock = socket(PF_INET, SOCK_STREAM, IPPROTO_TCP)) < 0) {
                  Die("Failed to create socket");
            /* Construct the server sockaddr_in structure */
                memset(&echoserver, 0, sizeof(echoserver));      /* Clear struct */
                echoserver.sin_family = AF_INET;                  /* Internet/IP */
                echoserver.sin_addr.s_addr = htonl(INADDR_ANY); /* Incoming addr */
                echoserver.sin_port = htons(atoi(argv[1]));      /* server port */
    // A TCP ECHO SERVER ENDS
    // A TCP ECHO SERVER BINDING AND LISTNING
/* Bind the server socket */
              if (bind(serversock, (struct sockaddr *) &echoserver, sizeof(echoserver)) < 0) {
                    Die("Failed to bind the server socket");
          /* Listen on the server socket */
              if (listen(serversock, MAXPENDING) < 0) {
              Die("Failed to listen on server socket");
    // A TCP ECHO SERVER BINDING AND LISTNING
    // SOCKET FACTORY
/* Run until cancelled */
            while (1) {
                    unsigned int clientlen = sizeof(echoclient);
                      /* Wait for client connection */
                    if ((clientsock =
                      accept(serversock, (struct sockaddr *) &echoclient, &clientlen)) < 0) {
                        Die("Failed to accept client connection");
                      fprintf(stdout, "Client connected: %s\n", inet_ntoa(echoclient.sin_addr));
                      HandleClient(clientsock);
    // SOCKET FACTORY ENDSI know that it is not C forum but I found no better place to post it
Thanks

kajbj wrote:
ManMohanVyas wrote:
hii!! just trying to make it a little more explinatory
1) what I am trying to accomplish by the above code is: - just need to echo/print from the Server , message send by the Client. I know code is not that good but should be able to perform this basic operation( according to me ).You are wrong. I told you that it won't work as long as you are using ObjectOutputStream and ObjectInputStream. You shouldn't write objects.
2) Message sent by the client is "hello world"(hard coded).No, it's not. You are writing a serialized byte array.
3) what I am getting at the client end is "*message recieved: ur*" (before that It shows the Ip of client machine)
It should print "hello world ".See above.
You are having a problem, and I have told you what the problem is.hey I dont know what went wrong but . I posted all this just next to my first post ...before you posted !!
And hard coded byte array includes "hello world"...may be I am not able to explain properly.

Appserver 8 and login/authentication from a standalone client

hello,
after searching for examples which show how to connect to the appserver 8 i came up with this code which doesn't fucntion... does someone have any idea how to get this code to work? i want to get the protected MEJB object an have to authenticate the client to the server, but this part fails.
alex
System.setProperty("java.security.auth.login.config", "C:/Sun/AppServer/domains/domain1/config/login.conf");
     System.out.println("trying to create the LoginContext");
     LoginContext lc = new LoginContext("fileRealm",new CallbackHandler() {
     public void handle(Callback[] callbacks) {
     for (int i = 0; i < callbacks.length; i++) {
     System.out.println("Handler called: " + callbacks.getClass().getName());
     if (callbacks[i] instanceof NameCallback) {
     NameCallback nc = (NameCallback) callbacks[i];
     System.out.println("Setting username");
     nc.setName("admin");
     } else if (callbacks[i] instanceof PasswordCallback) {
     PasswordCallback pc = (PasswordCallback) callbacks[i];
     System.out.println("Setting password");
     pc.setPassword("Adm04srV".toCharArray());
     } else {
     System.out.println("Unsupported handler");
     Subject s = lc.getSubject();
     class TestAction implements PrivilegedAction {
     public Object run() {
     try {
          Properties props = new Properties();
                         props.put(Context.INITIAL_CONTEXT_FACTORY,"com.sun.enterprise.naming.SerialInitContextFactory");
                         props.put(Context.URL_PKG_PREFIXES,"com.sun.enterprise.naming");
                         props.put(Context.PROVIDER_URL,"iiop://localhost:1050");
                         InitialContext ic = new InitialContext(props);
                    Object ref = ic.lookup("ejb/mgmt/MEJB");
          System.out.println("narrow()");
          ManagementHome mgmtHome = (ManagementHome) PortableRemoteObject.narrow(ref, ManagementHome.class);
          System.out.println("create()");
                    Management mgmt = mgmtHome.create();
                    System.out.println("MBeanCount: " + mgmt.getMBeanCount());
          } catch (Exception e) {
          e.printStackTrace();
     return null;
     Subject.doAs(s, new TestAction());

The MEJB is configured to permit only users in the asadmin group to execute its methods. You must login as a user in the asadmin group before trying to use the MEJB. See: http://docs.sun.com/source/819-0079/dgsecure.html#wp22278
here is an code example:
// Authentication
ProgrammaticLogin pl = new ProgrammaticLogin();
Boolean success = pl.login("j2ee","j2ee");
// Use the MEJB
Management mejb = mhome.create();

IPP Printing from Linux or Mac to Windows server

I have windows server 2003 R2 ent with ipp printing installed. All windows clients are ale to connect, install and print to a shared printer via ipp. When connecting via a linux or mac machine, I am not able to print. I am asked for the creditionals to print but it does nothing.
The ipp server is set to accept authentication via Intergrated Windows Authentication. I had read this is compatible with firefox and other browsers.
Is there any particular settings I am missing on this one?
The goal is to require only domain users access to the printers.

Hi,
Thank you for posting here.
Since we can print from Windows clients properly, it indicates Windows Printing Server is working OK. Base on my research, we may have to setup a CUPS server so that Linux client communicate with CUPS Server and CUPS communicate with Windows Printer Server using IPP. For your reference:
HowTo: Print to a Windows Print Server from a Linux Client.
http://en.opensuse.org/Print_to_Windows_printer
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
If you have problem when setting up CUPS server, you can get help from the link below:
http://www.cups.org/
Thanks.
This posting is provided "AS IS" with no warranties, and confers no rights.

Printing from OSX Lion Client to Windows Server 2008

I have tried these methods:
=============
via System Preferences
IP Printer (Line Printer Daemon - LPD)
Address (both Server Name and IP Address)
e.g. lpd://servername/queue
Queue
Print Using (HP LaserJet P4010 Series)
Result:
After a test print is sent, the print queue dialog reads:
Processing Job.
Copying Print Data.
Connecting to Printer.
Paused - "/usr/libexec/cups/backend/lpd failed"
**** I have also tried using the hostname in place of the IP address
I get something to the effect of:
D [10/Nov/2011:12:24:35 -0500] [Job 27] ------------------------------------------------------
D [10/Nov/2011:12:24:35 -0500] [Job 27] Pre-processing tasks:
D [10/Nov/2011:12:24:35 -0500] [Job 27] Line - %%BeginDocument     Processor - EmbeddedDocumentCounter     "Check for embedded document"     (pre, mandatory, substr)
D [10/Nov/2011:12:24:35 -0500] [Job 27] Line - %!PS-Adobe     Processor - EmbeddedDocumentCounter     "Check for embedded document"     (pre, mandatory, substr)
D [10/Nov/2011:12:24:35 -0500] [Job 27] Post-processing tasks:
D [10/Nov/2011:12:24:35 -0500] [Job 27] Line - %%Page:     Processor - PageAccounting     "Log page for accounting"     (post, mandatory, substr)
D [10/Nov/2011:12:24:35 -0500] [Job 27] ------------------------------------------------------
D [10/Nov/2011:12:24:35 -0500] [Job 27] Read 8170 bytes of print data...
D [10/Nov/2011:12:24:35 -0500] [Job 27] Wrote 8170 bytes of print data...
D [10/Nov/2011:12:24:35 -0500] [Job 27] Connecting to 10.157.32.92:515 for printer DOBL_24HR1
D [10/Nov/2011:12:24:35 -0500] [Job 27] Connecting to printer.
D [10/Nov/2011:12:24:35 -0500] [Job 27] Set job-printer-state-message to "Connecting to printer.", current level=INFO
D [10/Nov/2011:12:24:35 -0500] [Job 27] STATE: -connecting-to-device
D [10/Nov/2011:12:24:35 -0500] [Job 27] Connected to printer.
D [10/Nov/2011:12:24:35 -0500] [Job 27] Set job-printer-state-message to "Connected to printer.", current level=INFO
D [10/Nov/2011:12:24:35 -0500] [Job 27] Connected to 10.157.32.92:515 (local port 1009)...
D [10/Nov/2011:12:24:35 -0500] [Job 27] lpd_command 02 DOBL_24HR1
D [10/Nov/2011:12:24:35 -0500] [Job 27] Sending command string (12 bytes)...
D [10/Nov/2011:12:24:35 -0500] [Job 27] Reading command status...
D [10/Nov/2011:12:24:35 -0500] [Job 27] lpd_command returning 1
D [10/Nov/2011:12:24:35 -0500] [Job 27] Backend returned status 1 (failed)
D [10/Nov/2011:12:24:35 -0500] [Job 27] Printer stopped due to backend errors; please consult the error_log file for details.
D [10/Nov/2011:12:24:35 -0500] [Job 27] End of messages
D [10/Nov/2011:12:24:35 -0500] [Job 27] printer-state=5(stopped)
D [10/Nov/2011:12:24:35 -0500] [Job 27] printer-state-message="/usr/libexec/cups/backend/lpd failed"
D [10/Nov/2011:12:24:35 -0500] [Job 27] printer-state-reasons=paused
=============
via System PreferencesWindows *navigated to the server (e.g. smb://servername/printer/) with the browser.
Result:
After a test print is sent, i login to the dialog box with:
DOMAIN\USERNAME
PASSWORD
(*) Remember this password in my keychain
Status - On Hold (Authentication Required)
**** I have also tried various formats for the username here:
DOMAIN\USERNAME & password
USERNAME & password
SERVER\USERNAME & password
Here's the Log output:
D [10/Nov/2011:12:26:21 -0500] [Job 28] Queued on "DOBL_24HR1" by "lab".
D [10/Nov/2011:12:26:21 -0500] [Job 28] job-sheets=none,none
D [10/Nov/2011:12:26:21 -0500] [Job 28] argv[0]="DOBL_24HR1"
D [10/Nov/2011:12:26:21 -0500] [Job 28] argv[1]="28"
D [10/Nov/2011:12:26:21 -0500] [Job 28] argv[2]="lab"
D [10/Nov/2011:12:26:21 -0500] [Job 28] argv[3]="testprint"
D [10/Nov/2011:12:26:21 -0500] [Job 28] argv[4]="1"
D [10/Nov/2011:12:26:21 -0500] [Job 28] argv[5]="AP_ColorMatchingMode=AP_ApplicationColorMatching AP_D_InputSlot= collate com.apple.print.DocumentTicket.PMSpoolFormat=application/pdf com.apple.print.JobInfo.PMJobName=testprint com.apple.print.PrinterInfo.PMColorDeviceID..n.=3671 com.apple.print.PrintSettings.PMColorMatchingMode..n.=0 com.apple.print.PrintSettings.PMColorSyncProfileID..n.=1580 com.apple.print.PrintSettings.PMCopies..n.=1 com.apple.print.PrintSettings.PMCopyCollate..b. com.apple.print.PrintSettings.PMFirstPage..n.=1 com.apple.print.PrintSettings.PMLastPage..n.=2147483647 com.apple.print.PrintSettings.PMPageRange..a.0..n.=1 com.apple.print.PrintSettings.PMPageRange..a.1..n.=2147483647 fit-to-page media=Letter pserrorhandler-requested=standard job-uuid=urn:uuid:ad3091e2-399a-3964-4c78-b8a81bf25bdf job-originating-host-name=localhost time-at-creation=1320945980 time-at-processing=1320945980 PageSize=Letter"
D [10/Nov/2011:12:26:21 -0500] [Job 28] argv[6]="/private/var/spool/cups/d00028-001"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[0]="<CFProcessPath>"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[1]="CUPS_CACHEDIR=/private/var/spool/cups/cache"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[2]="CUPS_DATADIR=/usr/share/cups"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[3]="CUPS_DOCROOT=/usr/share/doc/cups"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[4]="CUPS_FONTPATH=/usr/share/cups/fonts"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[5]="CUPS_REQUESTROOT=/private/var/spool/cups"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[6]="CUPS_SERVERBIN=/usr/libexec/cups"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[7]="CUPS_SERVERROOT=/private/etc/cups"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[8]="CUPS_STATEDIR=/private/etc/cups"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[9]="HOME=/private/var/spool/cups/tmp"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[10]="PATH=/usr/libexec/cups/filter:/usr/bin:/usr/sbin:/bin:/usr/bin"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[11]="[email protected]"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[12]="SOFTWARE=CUPS/1.5.0"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[13]="TMPDIR=/private/var/spool/cups/tmp"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[14]="USER=root"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[15]="CUPS_SERVER=/private/var/run/cupsd"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[16]="CUPS_ENCRYPTION=IfRequested"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[17]="IPP_PORT=631"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[18]="CHARSET=utf-8"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[19]="LANG=en_US.UTF-8"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[20]="APPLE_LANGUAGE=en-US"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[21]="PPD=/private/etc/cups/ppd/DOBL_24HR1.ppd"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[22]="RIP_MAX_CACHE=128m"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[23]="CONTENT_TYPE=application/vnd.cups-banner"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[24]="DEVICE_URI=smb://utlab-prsrv-02/DOBL_24HR1"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[25]="PRINTER_INFO=DOBL_24HR1"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[26]="PRINTER_LOCATION="
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[27]="PRINTER=DOBL_24HR1"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[28]="PRINTER_STATE_REASONS=none"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[29]="CUPS_FILETYPE=document"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[30]="FINAL_CONTENT_TYPE=printer/DOBL_24HR1"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[31]="AUTH_I****"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[32]="AUTH_U****"
D [10/Nov/2011:12:26:21 -0500] [Job 28] envp[33]="AUTH_P****"
D [10/Nov/2011:12:26:21 -0500] [Job 28] Started filter /usr/libexec/cups/filter/cgbannertopdf (PID 7646)
D [10/Nov/2011:12:26:21 -0500] [Job 28] Started filter /usr/libexec/cups/filter/cgpdftops (PID 7647)
D [10/Nov/2011:12:26:21 -0500] [Job 28] Started filter /usr/libexec/cups/filter/pstops (PID 7648)
D [10/Nov/2011:12:26:21 -0500] [Job 28] Started filter /Library/Printers/hp/filter/hpPostProcessing.bundle/Contents/MacOS/hpPostProces sing (PID 7649)
D [10/Nov/2011:12:26:21 -0500] [Job 28] Started backend /usr/libexec/cups/backend/smb (PID 7650)
D [10/Nov/2011:12:26:21 -0500] [Job 28] Started smb backend (PID 7653)
D [10/Nov/2011:12:26:21 -0500] [Job 28] STATE: +connecting-to-device
D [10/Nov/2011:12:26:21 -0500] [Job 28] Connecting to printer...
D [10/Nov/2011:12:26:21 -0500] [Job 28] Set job-printer-state-message to "Connecting to printer...", current level=INFO
D [10/Nov/2011:12:26:21 -0500] [Job 28] Looking up "utlab-prsrv-02"...
D [10/Nov/2011:12:26:21 -0500] [Job 28] Failed to connect to "smb://<username>:<password>@utlab-prsrv-02/": STATUS_LOGON_FAILURE
D [10/Nov/2011:12:26:21 -0500] [Job 28] Set job-printer-state-message to "Authentication required", current level=ERROR
D [10/Nov/2011:12:26:21 -0500] [Job 28] smb backend (PID=7653) stopped with status 512
D [10/Nov/2011:12:26:21 -0500] [Job 28] smb backend will exit with status 2
D [10/Nov/2011:12:26:21 -0500] [Job 28] load_banner(filename="/private/var/spool/cups/d00028-001")
D [10/Nov/2011:12:26:21 -0500] [Job 28] hpPostProcessing launched
D [10/Nov/2011:12:26:21 -0500] [Job 28] Page = 612x792; 12,12 to 600,780
D [10/Nov/2011:12:26:21 -0500] [Job 28] cgpdftops - copying to temp print file "/private/var/spool/cups/tmp/01ddf4ecb23b2"
D [10/Nov/2011:12:26:21 -0500] [Job 28] Final document orientation - 0
D [10/Nov/2011:12:26:21 -0500] [Job 28] Setting language to en-US
D [10/Nov/2011:12:26:21 -0500] [Job 28] EWU support is absent for device.
D [10/Nov/2011:12:26:21 -0500] [Job 28] Pages per sheet - 1
D [10/Nov/2011:12:26:21 -0500] [Job 28] Orientation - portrait
D [10/Nov/2011:12:26:21 -0500] [Job 28] ------------------------------------------------------
D [10/Nov/2011:12:26:21 -0500] [Job 28] Pre-processing tasks:
D [10/Nov/2011:12:26:21 -0500] [Job 28] Line - %%BeginDocument     Processor - EmbeddedDocumentCounter     "Check for embedded document"     (pre, mandatory, substr)
D [10/Nov/2011:12:26:21 -0500] [Job 28] Line - %!PS-Adobe     Processor - EmbeddedDocumentCounter     "Check for embedded document"     (pre, mandatory, substr)
D [10/Nov/2011:12:26:21 -0500] [Job 28] Line - %%EndComments     Processor - DriverVersion     "Insert driver info"     (pre, mandatory, substr)
D [10/Nov/2011:12:26:21 -0500] [Job 28] Post-processing tasks:
D [10/Nov/2011:12:26:21 -0500] [Job 28] Line - %%Page:     Processor - PageAccounting     "Log page for accounting"     (post, mandatory, substr)
D [10/Nov/2011:12:26:21 -0500] [Job 28] ------------------------------------------------------
D [10/Nov/2011:12:26:21 -0500] [Job 28] Allowing document iterator to handle job termination...
D [10/Nov/2011:12:26:21 -0500] [Job 28] Using line-by-line file iteration...
D [10/Nov/2011:12:26:21 -0500] [Job 28] cgpdftops - using PPD file "/private/etc/cups/ppd/DOBL_24HR1.ppd"...
D [10/Nov/2011:12:26:21 -0500] [Job 28] PS Matching Mode = AP_ApplicationColorMatching
D [10/Nov/2011:12:26:21 -0500] [Job 28] cgpdftops - languageLevel = 3, mediaBox.size.width = 612, mediaBox.size.height = 792
D [10/Nov/2011:12:26:21 -0500] [Job 28] cgpdftops - documentMediaBox.size.width = 612, documentMediaBox.size.height = 792
D [10/Nov/2011:12:26:21 -0500] [Job 28] Page = 612x792; 12,12 to 600,780
D [10/Nov/2011:12:26:21 -0500] [Job 28] slow_collate=0, slow_duplex=0, slow_order=0
D [10/Nov/2011:12:26:21 -0500] [Job 28] Before copy_comments - %!PS-Adobe-3.0
D [10/Nov/2011:12:26:21 -0500] [Job 28] %!PS-Adobe-3.0
D [10/Nov/2011:12:26:21 -0500] [Job 28] %APL_DSC_Encoding: UTF8
D [10/Nov/2011:12:26:21 -0500] [Job 28] %APLProducer: (Version 10.7.2 (Build 11C74) Quartz PS Context)
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%Title: (testprint)
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%Creator: (cgpdftops CUPS filter)
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%CreationDate: (Thursday, November 10 2011 12:26:21 EST)
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%For: (lab)
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%DocumentData: Clean7Bit
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%LanguageLevel: 3
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%Pages: 1
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%BoundingBox: (atend)
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%PageOrder: Ascend
D [10/Nov/2011:12:26:21 -0500] [Job 28] %%EndComments
D [10/Nov/2011:12:26:21 -0500] [Job 28] Before copy_prolog - userdict/dscInfo 5 dict dup begin
D [10/Nov/2011:12:26:21 -0500] [Job 28] Before copy_setup - %%BeginSetup
D [10/Nov/2011:12:26:21 -0500] [Job 28] Before page loop - %%Page: 1 1
D [10/Nov/2011:12:26:21 -0500] [Job 28] Copying page 1...
D [10/Nov/2011:12:26:21 -0500] [Job 28] pagew = 588.0, pagel = 768.0
D [10/Nov/2011:12:26:21 -0500] [Job 28] bboxx = 0, bboxy = 0, bboxw = 612, bboxl = 792
D [10/Nov/2011:12:26:21 -0500] [Job 28] PageLeft = 12.0, PageRight = 600.0
D [10/Nov/2011:12:26:21 -0500] [Job 28] PageTop = 780.0, PageBottom = 12.0
D [10/Nov/2011:12:26:21 -0500] [Job 28] PageWidth = 612.0, PageLength = 792.0
D [10/Nov/2011:12:26:21 -0500] [Job 28] Calling processor EmbeddedDocumentCounter before line %!PS-Adobe-3.0
D [10/Nov/2011:12:26:21 -0500] [Job 28] Calling processor DriverVersion before line %%EndComments
D [10/Nov/2011:12:26:21 -0500] [Job 28] Task "Insert driver info" complete. Processor - DriverVersion. Line - %%EndComments
D [10/Nov/2011:12:26:21 -0500] [Job 28] Received SIGPIPE
D [10/Nov/2011:12:26:21 -0500] [Job 28] Wrote 1 pages...
D [10/Nov/2011:12:26:21 -0500] [Job 28] Backend returned status 2 (authentication required)
D [10/Nov/2011:12:26:21 -0500] [Job 28] Job held for authentication.
D [10/Nov/2011:12:26:21 -0500] [Job 28] End of messages
D [10/Nov/2011:12:26:21 -0500] [Job 28] printer-state=3(idle)
D [10/Nov/2011:12:26:21 -0500] [Job 28] printer-state-message="Authentication required"
D [10/Nov/2011:12:26:21 -0500] [Job 28] printer-state-reasons=none
==============
via CUPS (localhost:631)here is the syntax of my printer addresses:
SAMBA--
smb://username:password@serverhost/printer
smb://username:password@serverip/printer
smb://serverhost/printer
smb://serverip/printer
I get something like...
"/usr/libexec/cups/backend/smb failed"
D [10/Nov/2011:12:39:00 -0500] [Job 29] Before copy_comments - %!PS-Adobe-3.0
D [10/Nov/2011:12:39:00 -0500] [Job 29] %!PS-Adobe-3.0
D [10/Nov/2011:12:39:00 -0500] [Job 29] %APL_DSC_Encoding: UTF8
D [10/Nov/2011:12:39:00 -0500] [Job 29] %APLProducer: (Version 10.7.2 (Build 11C74) Quartz PS Context)
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%Title: (testprint)
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%Creator: (cgpdftops CUPS filter)
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%CreationDate: (Thursday, November 10 2011 12:39:00 EST)
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%For: (lab)
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%DocumentData: Clean7Bit
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%LanguageLevel: 3
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%Pages: 1
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%BoundingBox: (atend)
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%PageOrder: Ascend
D [10/Nov/2011:12:39:00 -0500] [Job 29] %%EndComments
D [10/Nov/2011:12:39:00 -0500] [Job 29] Before copy_prolog - userdict/dscInfo 5 dict dup begin
D [10/Nov/2011:12:39:00 -0500] [Job 29] Before copy_setup - %%BeginSetup
D [10/Nov/2011:12:39:00 -0500] [Job 29] Before page loop - %%Page: 1 1
D [10/Nov/2011:12:39:00 -0500] [Job 29] Copying page 1...
D [10/Nov/2011:12:39:00 -0500] [Job 29] pagew = 588.0, pagel = 768.0
D [10/Nov/2011:12:39:00 -0500] [Job 29] bboxx = 0, bboxy = 0, bboxw = 612, bboxl = 792
D [10/Nov/2011:12:39:00 -0500] [Job 29] PageLeft = 12.0, PageRight = 600.0
D [10/Nov/2011:12:39:00 -0500] [Job 29] PageTop = 780.0, PageBottom = 12.0
D [10/Nov/2011:12:39:00 -0500] [Job 29] PageWidth = 612.0, PageLength = 792.0
D [10/Nov/2011:12:39:00 -0500] [Job 29] Calling processor EmbeddedDocumentCounter before line %!PS-Adobe-3.0
D [10/Nov/2011:12:39:00 -0500] [Job 29] Calling processor DriverVersion before line %%EndComments
D [10/Nov/2011:12:39:00 -0500] [Job 29] Task "Insert driver info" complete. Processor - DriverVersion. Line - %%EndComments
D [10/Nov/2011:12:39:00 -0500] [Job 29] Current page number is 0
D [10/Nov/2011:12:39:00 -0500] [Job 29] Calling processor PageAccounting after line %%Page: 1 1
D [10/Nov/2011:12:39:00 -0500] [Job 29] PAGE: 1 1
D [10/Nov/2011:12:39:00 -0500] [Job 29] Failed to connect to "smb://<username>:<password>@utlab-prsrv-02/": STATUS_LOGON_FAILURE
D [10/Nov/2011:12:39:00 -0500] [Job 29] ATTR: auth-info-required=username,password
D [10/Nov/2011:12:39:00 -0500] [Job 29] smb backend (PID=8517) stopped with status 512
D [10/Nov/2011:12:39:00 -0500] [Job 29] smb backend will exit with status 2
D [10/Nov/2011:12:39:00 -0500] [Job 29] Received SIGPIPE
D [10/Nov/2011:12:39:00 -0500] [Job 29] Wrote 1 pages...
D [10/Nov/2011:12:39:00 -0500] [Job 29] Backend returned status 2 (authentication required)
D [10/Nov/2011:12:39:00 -0500] [Job 29] Job held for authentication.
D [10/Nov/2011:12:39:00 -0500] [Job 29] End of messages
D [10/Nov/2011:12:39:00 -0500] [Job 29] printer-state=3(idle)
D [10/Nov/2011:12:39:00 -0500] [Job 29] printer-state-message="Authentication required"
D [10/Nov/2011:12:39:00 -0500] [Job 29] printer-state-reasons=none
=================
So yeah...
I'm totally stumped now.
I feel like I've tried every method imaginable, but still no luck.
Printing from OSX 10.6.8 works just FINE.
On the server side, I'm running Windows Server 2008... there's only a local admin and a local user account.
Clients running OSX Lion 10.7.2 -- All updated.
Printer is an HP LaserJet P4010-4510 series.
Workstation is an iMac 21.5-inch, Late 2009
3.06 Ghz Intel Core 2 Duo
Please help!!!
--- Richard

LPD print service is not enabled by default in Server 2008. It can be enabled via the Print Serveer role, but I am remote and cannot confirm the exact setting.
As for SMB, the error log is showing;
Failed to connect to "smb://<username>:<password>@utlab-prsrv-02/"
So it would suggest that there is still an issue with the account detail you are using as you show you have tried this syntax at one stage. If you want to continue to create the queue using SMB rather than LPD then I recommend using the CUPS web page (http://127.0.01:631) to create the queue. This will allow you to enter the syntax exactly as the error message shows. From previous testing I found it was okay to just use the account name rather than domain/account name on a domain bound server.

Help required with ADFS 3.0 client certificate authentication

Hi,
I am currently working on integrating ADFS 3.o for Single Sign On to some 3rd party services along with PKI solution. The basic requirement is that I should be able to choose client authentication certificate as an authentication method in ADFS and then
federate user credentials to 3rd party trust for single-sign-on.
I had done this successfully with ADFS 2.0 and that setup is working fine. I have the setup as ADFS 3.0 client authentication method enabled. When I open browser to logon, the ADFS 3.0 page displays a message as "Select a certificate that you want to
use for authentication. If you cancel the operation, please close your browser and try again." but the certificates are not displayed for selection.
The certificates are valid and have valid chaining to CA. Could someone help me resolve this issue?
Thanks!
-Chinmaya Karve

Hi Yan,
Thanks for your response. I have gone through the posts that you have suggested, and my setup looks pretty much as expected.
So, as I mentioned earlier, I have 2 parallel setups with 3rd party service(SalesForce). Once of them is running ADFS 2.0 and another one has ADFS 3.0. I can logon to the third-party services, from both the setups using username/format. I can logon to SF
using client authentication certificate from ADFS 2.0 setup, but from the same client machine, when I try to logon SF via ADFS 3.0, the browser just does not pick up any certificate. The page just shows message of "Select a certificate that you want to use
for authentication. If you cancel the operation, please close your browser and try again.".
I have checked the browser, and it has the right certificates. Also, the same browser/machine is used to logon to SF through ADFS 2.0 via client certificate, which works just fine !
I am really confused now, as to whose issue this really is...
Just to confirm, I am using Certificate Authentication from ADFS 3.0 Authentication Methods for both Intranet and Extranet.
Any suggestion or inputs where I could have gone wrong in the setup?
Thanks!

DAC Client in windows is not connected to DAC server in Linux

Hi,
I am using DAC 11g and server is in linux and client in windows.The status icon is still red
1)we are unable to connect the client to the server in linux.
2) we have checked that the DAC server in linux is up by running the command ps -ef | grep "com.siebel.etl.net.QServer".
3)even we have checked the connectivity with telnet and even the port 3141 is also opened
4) we have followed all the step suggested in previous thread
Anybody help me.
Edited by: 975976 on Apr 26, 2013 2:24 AM
Edited by: 975976 on Apr 26, 2013 2:24 AM

My DAc server is running fine.
In DAC server setup i entered the details.Also DAC DB is running fine.
Any other solution please.
Also when i am trying to run ./standaloneServerSetupPrompt.sh i am getting following error:
Exception in thread "main" java.lang.UnsatisfiedLinkError: /home/oracle/Java/jdk1.7.0_21/jre/lib/i386/xawt/libmawt.so: libXrender.so.1: cannot open shared object file: No such file or directory
at java.lang.ClassLoader$NativeLibrary.load(Native Method)
at java.lang.ClassLoader.loadLibrary1(ClassLoader.java:1939)
at java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1864)
at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1825)
at java.lang.Runtime.load0(Runtime.java:792)
at java.lang.System.load(System.java:1059)
at java.lang.ClassLoader$NativeLibrary.load(Native Method)
at java.lang.ClassLoader.loadLibrary1(ClassLoader.java:1939)
at java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1864)
at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1846)
at java.lang.Runtime.loadLibrary0(Runtime.java:845)
Can you tell me why this error is coming.
Edited by: 975976 on Apr 26, 2013 4:29 AM
Edited by: 975976 on Apr 26, 2013 4:48 AM

No Listener From Linux

Dear Friend,
I have installed oracle on linux and configure the tns and listener.ora , now I can connect from Linux oracle database to Windows oracle database but I can connect
from windows database to Linux database its giving me this error "No Listener" and I configured the tns in windows also, any comment will be appreciated.
Regards,
Oracle User.

Have you started the listener on the linux machine? In windows, it mabe starting automatically (SERVICE). In linux you need to start manually.
Do a "ps --ef |grep tns" on the linux machine command line and see the output. It should show one process. If not, do this
lsnrctl
start listener <<listener_name>>
If you don't provide the listener name, a default listener with the name "LISTENER" will be started.
Hope this helps
thedba

Windows 7 Client with Windows 2000 server

Hi ,
We are having an application developed in Delphi 6 and hosted in Windows 2000 server(sp4) .Recently we have migrated all our clients to windows 7 from XP. Since then we are getting Access Violation error whenever we are using the application.
We are accessing the application through RDP (Remote Desktop ) from Win 7 Clients to Windows 2000 server.
Could any body help me how to resolve this issue as this is stopping the business.
Regds
Vignesh Krishnan B

Hi,
As Windows 7 uses NTLM2 by default, please try to set it to “Send LM & NTLM – Use NTLMv2 session security if negotiated”
How to:
Open secpol.msc -> local policies -> security options -> Network security: LAN Manager authentication level.
Best Regards.
Jeremy Wu
TechNet Community Support

Not able to connect to Essbase on VM through client on windows 7

Hi there,
I have installed OBIEE 11.1.1.5 - Sample Application (V107) (VM) and after running all the start up scripts like (startOID.sh,startWLS.sh,startBI.sh and startESSB.sh) and using opmnctl status I am able to see that it is alive in VM.
But when I try to access the VM from essbase studio client on windows I get the error "Network communication with the server failed. Check your network connection and try again.
Connection refused: connect".
I am very new to ESSBASE and its quite urgent.
Appericate your help.
Regards,
Pushpesh Pallav.

Hi,
Add the property in server.properties file in Essbase studio with the below line
server.essbase.streamingCubeBuilding=true
and restart the Essbase Studio server as an administrative user.
If the issue still exists, then verify the server properties for the catalog
Hope it helps..
KosuruS

Project Server 2010 Web services access with Client Certificate Authentication

We switched our SharePoint/Project Server 2010 farm to use client certificate authentication with Active Directory Federation Services (AD FS) 2.0, which is working without issue. We have some administrative Project Server Interface (PSI)
web service applications that no longer connect to server with the new authentication configuration. Our custom applications are using the WCF interface to access the public web services.
Please let us know if it is possible to authenticate with AD FS 2.0 and then call
Project Server web services. Any help or coding examples would be greatly appreciated.

what is the error occurred when the custom PSI app connects?
can you upload the ULS logs here for research?
What is the user account format you specified in the code for authentication?
For proper authorization, the “user logon account” in PWA for the user needs to be changed from domain\username to the claims token (e.g.
'I:0#.w|mybusinessdomain\ewmccarty').
It requires you to manually call the UpnLogon method of
“Claims to Windows Token Service”. if (Thread.CurrentPrincipal.Identity is ClaimsIdentity)
{ var identity = (ClaimsIdentity)Thread.CurrentPrincipal.Identity; }
if (Thread.CurrentPrincipal.Identity is ClaimsIdentity)
var identity = (ClaimsIdentity)Thread.CurrentPrincipal.Identity;
Than you need to extract UPN-Claim from the identity.
Upload the verbose log if possible.
Did you see this?
http://msdn.microsoft.com/en-us/library/ff181538(v=office.14).aspx
Cheers. Happy troubleshooting !!! Sriram E - MSFT Enterprise Project Management

IPSec Certificate Authentication from Linux Strongswan client to Windows Advanced Firewall (2012)

Similar Messages

Maybe you are looking for