Is it possible to make the ISE guest server redundant ?

Hi,
We've an ISE cluster of two ISE nodes.
The ISE guest server works fine on the primairy ISE node.
MAC address of the guest client is set in the map 'GuestDevices' after accepting the AUP policy.
The the ISE sents the COA and the client authenticates again and is punt in the guest vlan.
But when the primairy ISE is offline, I see the guest portal AUP page on the secondairy ISE node.
I can accept the AUP policy, and I get an error message.
On the secondairy ISE I see that the COA to the switch is sent, to clear the session to the primairy ISE....
But the COA request should ask to clear the session to the secondairy ISE ( the primairy ISE is offline ).
Should it be possible to configure the ISE guest functionality redundant in an ISE cluster?
/SB

The Guest portal can run on a node that assumes the Policy Services persona when the primary node with Administration persona is offline. However, it has the following restrictions:
•Self registration is not allowed
•Device Registration is not allowed
•The AUP is shown at every login even if first login is selected
•Change Password is not allowed and accounts are given access with the old password.
•Maximum Failed Login is not be enforced
http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_guest_pol.html#wp1126706

Similar Messages

  • Is it possible to make the document window not to hide behind the palettes?

    Is it possible to make the document window not to hide behind the palettes (layers, paths etc) like in CS5? For instance if I want to make a correction in the right part of the image and zoom in, the window expand under the different palettes and I can no longer see the area which I want to correct without change the document window size. I don't want to use the Photoshop application fram because then I can't see stuff in other applications ID, mail an so on. 

    I have written about how to control various font sizes in Thunderbird here:
    http://www.ramsden.org.uk/9_Type_sizes.html
    Generally, you shouldn't need to zoom; you can pre-set the display of message text.
    To get straight to the point, you should probably try the https://addons.mozilla.org/en-us/thunderbird/addon/theme-font-size-changer/ add-on to address issues with the size of the message list font.

  • Is it possible to make the pasteboard and menus not so dark?

    We just upgraded to the new CC version of Indesign. Is it possible to make the paste board and menus/palletes white, or at least not so dark? It is very difficult to see darker colors in the color palette. The high contrast between the dark pasteboard and the white page gives me a splitting headache.

    apologies for the double post. I was not sure how this worked, and did not think it went through the first time. Can you diresct me to where that answer is? We did not see a reply regarding that.
    Thank you for your reply.

  • Is it possible to make the second Navigation invisible?

    That means is it possible to make the second line of the Toplevel Navigation invisible?

    Hello Jens,
    please take a closer look here.
    http://help.sap.com/saphelp_nw04/helpdata/en/5a/33befa45ca7f459b24d0c5d51d0749/frameset.htm
    Best Regards,
    Olaf Reiss

  • Hi i have a iphone5 I lost my password ha possibility I make the switch for 5s can not open the icloud?? if accepted as pay the difference? thank you for it helped.

    hi i have a iphone5 I lost my password ha possibility I make the switch for 5s can not open the icloud?? if accepted as pay the difference? thank you for it helped.

    Post in your native language.  Your post is very difficult to understand.  What password are you talking about?  You device passcode?  Your Apple ID password?

  • Is it possible to make the background of an image transparent in indesign?

    is it possible to make the background of an image transparent in indesign?

    It's not necessarily the best way, but depending on the image content, you might be able to get an acceptable result with the options under Object > Clipping Path...
    EDIT: So technically, the answer to your question is: No, but you can apply a clipping path to hide the background.
    Also, again depending on the image content, as well as the underlying content, it might be possible to use blend modes in the Effects panel to render the background transparent.
    Background removal is best done in Photoshop, where the image can then be saved as .PSD and its native transparency will be honored when placed in InDesign.

  • Is it possible to make the automatic scroll go left to right instead of top to bottom?

    Hi all,
    I find it hard to follow text when adobe is scrolling from top to bottom. Is there any way to make it scroll left to right instead?

    user13392320 wrote:
    Is it possible to make ODI process a source row by row instead of as a dataset?Yes it is, the Agent acts like a SQL cursor if you use a select on the source tab (in the IKM) and an insert on the target tab (same step in the IKM) it will read it row by row. You can tweak the batch fetch array sizes in the Agent configuration.
    user13392320 wrote:
    To make changes to the target table I need to join the source table to the target table. I want to process source records in a particular order. What will be loaded from the current source record will depend on the previously loaded, related source record, during this some run of my ODI job. And ideas? Thanks!Cant see why you cant drag the target table onto the source datastores and join them - carefully choose where you want the join to take place (probably in the target). If you want to order the records there are some Knowledge Module tweaks to specify an order by clause using the UD1 -> UD5 flags on a datastore. Search the forum or google for the code.
    Hope this helps.
    Alastair

  • Is it possible to make the entire keywords hierachy export in the metadata?

    I have created the following Keyword hierarchy in Aperture:
    Location, Europe, Eastern Europe, Croatia, Dalmatia, Split
    In Aperture I only need to add the bottom level 'Split' as a keyword and when I use the search function and insert a word from any of the higher levels (e.g. Croatia) It finds my picture.
    My problem is that when I export that file the Keywords that get exported in the metadata is only the bottom level I first entered (ie Split). This is no use to me when using the files outside of aperture as I may still want to search at the higher levels.
    Is there anyway to make the entire relevant keyword hierarchy be exported within the metadata without have to go back and add all the levels myself?

    Unless things have changes, keywords are not hierarchical at all as a standard. The hierarchy in Ap is used just for managing keyword purposes only.
    So it works within Ap but not when exported. You will have to assign multiple keywords or reestablish similar scheme in whatever other app that your are exporting the image to.

  • Is it possible to make the compiler driver use a third-party pre-processor?

    In other compiler suites I've used in the past it's been possible to force the compiler driver to use a different pre-processor if it was needed.  Does Sun Studio offer similar functionality?
    Ultimately what I'm after is finding a way to force the compiler to do pre-processing and compilation in separate processes.
    -Brian

    What compiler(s) are you using --C, C++, or Fortran?
    What version of Studio are you using?
    The exact answer might depend on the compiler and version.
    But before looking at replacements for the compiler's own preprocessor, do you really want to run your own preprocessing program? If so, the the recognition of source code and the output format need to be compatible with the compiler.
    If you just want to separate preprocessing from the rest of the compilation, you can use the -P or -E options to get the preprocessor output, then compile that output. To maintain correspondence with the original source code files and lines, you would use the -E option. C example:
    % cc -E hello.c > newhello.c
    % cc newhello.c
    % ./a.out
    Hello
    For C++, templates can introduce problems when you expect the compiler to find template definitions automatically, as is the case with the standard library. You will  probably need to add the option -template=no%extdef to be able to compile template code. C++ example:
    % CC -E -template=no%extdef hello.cc > newhello.cc
    % CC -template=no%extdef  newhello.cc
    % a.out
    Hello world.
    Refer to the C++ Users Guilde chapters on template compilation models for for details.

  • Is it possible to make the Private Firefox browser the default browser on your PC?

    When accessing stories with all browsers closed for example, on Yahoo, the article(s) open in my default browser which is Firefox. Is it possible to establish the Private Browsing Firefox as default somehow?

    You can put Firefox in permanent private browsing mode.
    # Click either the Firefox button or the Tools menu and choose Options.
    # Click the Privacy icon.
    # Set "Firefox will: Never remember history".
    * [[Settings for privacy, browsing history and do-not-track]]

  • Is it possible to make the TOC expand and collapse icons larger?

    OR to have the TOC expanding and collapsing by usage of a self made buttons?

    You can use graphics that are slightly taller, but not wider.
    If you go to this page and take a look at the example named Supply Chain Management, you will see that I have used a different TOC expand image that is slightly taller:
    http://www.infosemantics.com.au/portfolio
    I had originally tried to use a larger image but it appears that Captivate limits the width.
    You can use the On Success action of a button to assign the value of the cpCmndTOCVisible system variable to 1 or 0 to open or close the TOC.  You can create a toggle action using a Standard or Conditional action to make the same button alternately open or close the TOC each time it is clicked.

  • Is it possible to make the background invisible in an flash desktop application?

    Hey there,
    I am currently trying to build a small desktop application in flash which works a bit like the scmpoo sheep (scmpoo - Cute little lamb / sheep on your desktop - YouTube). A screenmate with just a few animations and a movieclip tied together in as3.
    My problem now is, that the animated animal should a least look like it really moves on the users desktop, since I found no way to really place it there.
    I already set it to fullscreen mode, which removes the borders but I can't find a way to make the backgound invisible/transparent. In web-browsers this seems to be quite easy, but does it work for the desktop flash at all?
    And if yes, how do I do it?
    thanks for helping

    window style: custom chrome (transparent);

  • HT4814 Is it possible to manage the mac mini server with server app before set up?

    The article says using the server app I need to enter the IP address, then the Administrator name and password, but obviously on the first boot these are not configured yet. The article does not mention if this is possible or the server.app can only manage the server after its initial configuration using a monitor connected.

    From dim memory...  Load Server.app on the client box or use Server.app on some other handy server, and either configure DHCP with the server's MAC address (usually listed on the shipping box) and your intended static IP address and then boot the new target server box, or just boot the new target server box and use Bonjour Browser or the command-line dns-sd tool to find the IP address that the new server box has acquired from DHCP, and then in either case, connect to the new target server via Connect To Server in Server.app via its IP address, specify the root user and use the system serial number (again, usually listed on the shipping box) as the password.

  • Is it possible to make the fnd_user table as an authenticator to weblogic

    Hi,
    I am looking for a way to make fnd_user table as an authenticator for a weblogic users.
    Is it possible in first place without OVD and SSO ? My goal is to have fnd_users involve in human task approvals.
    Thanks
    Sai

    I think your question is: how do you compare the encrypted password in FND_USER to the password that the end user entered in your custom application front end?
    If that is indeed your question, you can decrypt the password in FND_USER as follows:
    1) Take the standard fnd_web_sec package and make a copy called cust_fnd_web_sec. Delete all procedures in the package body except for decrypt. Then add decrypt to the package spec.
    create or replace PACKAGE apps.cust_fnd_web_sec AUTHID CURRENT_USER AS
    function decrypt(key in varchar2, value in varchar2)
    return varchar2;
    END cust_FND_WEB_SEC;
    create or replace PACKAGE BODY apps.cust_fnd_web_sec AS
    -- Exception
    dml_inside_query exception;
    pragma exception_init(dml_inside_query,-14551);
    -- Function to encrypt a string using a specified key.
    function decrypt(key in varchar2, value in varchar2)
    return varchar2
    as language java name 'oracle.apps.fnd.security.WebSessionManagerProc.decrypt(java.lang.String,java.lang.String) return java.lang.String';
    END cust_FND_WEB_SEC;
    2) Run the following query to decrypt the password.
    WITH guest AS
    SELECT 'GUEST/ORACLE' user_pwd,
    UPPER (SUBSTR ('GUEST/ORACLE',
    1,
    INSTR ('GUEST/ORACLE',
    - 1
    ) user_name
    FROM DUAL)
    SELECT distinct u.user_name,
    apps.cust_fnd_web_sec.decrypt
    ((SELECT apps.cust_fnd_web_sec.decrypt
    (g.user_pwd,
    u.encrypted_foundation_password
    ) apps_password
    FROM apps.fnd_user u,
    apps.guest g
    WHERE u.user_name = g.user_name),
    u.encrypted_user_password
    ) decrypted_user_password
    FROM apps.fnd_user u,
    apps.fnd_user_resp_groups_direct r
    where u.user_id = r.user_id
    and u.user_name = <user name>
    Good luck!
    Scot

  • Is it possible to make the attachment icon on my journals form a compulsary step when creating a new manual journal entry?

    Good day,
    Our company uses EBS 11.5.10.2. The company has a policy whereby any new manual journal needs to have the supporting documentation attached to it, using the attachment icon in the task bar.
    Users sometimes forget to do this, though. This has now prompted management to request that we try and make this process of attaching a document when creating a new manual journal compulsary to the process.
    Is this possible on the current version we are running on?

    Well, that depends on if you are using client/server or web. Currently there is a bug being investigated, which is preventing the cursor size from being altered. For client/server, do the following on the client machine (assuming Windows):
    Control Panel > Accessibility Options > Display > Cursor Width
    By increasing the width, the cursor will be more visible. The same is expected to work on the web, but currently is problematic and being investigated.

Maybe you are looking for

  • Can I copy music on an iPod to a "new" computer?

    I have a new computer and would like to copy the current music on my iPod to the new computer. Music was originally loaded from the old computer. Is there a way to transfer the files FROM the iPod to the new COMPUTER using iTunes? (iPod --> computer)

  • RoboHelp crashes when I try to edit a responsive html 5 layout page

    If I right click on one of the screen layout pages in the Screen Layouts section of the Project Set-up area RoboHelp crashes.  If I create a new one the editor opens, but RoboHelp crashes as soon as I try edit it. I can manually edit the slp files in

  • Is Quicktime Pro worth the money?

    Like my subject says, I am considering purchasing the serial to upgrade to Quicktime Pro 7 and just wondering if it is actually worth the money or if the normal Quicktime is good enough? thanks

  • How to start learning OA Framework?

    Hello Please guide me where and how to start learning OA Framework? Please let me know the notes/patch required to install JDeveloper to start learning OAF and Developer guide to learn OAF.. Thanks...

  • Differences in iMovie '09 compared to '08

    I currently have iMovie '08 version 7.1.4. I want to be able to do more with iMovie instead of just basics (like having text scroll vertical rather than just horizontal, etc). I want to go further with movie making (for personal, not professional use