Is RADIUS NAS-ID sent after successful posture check

Hi all,
i have a single SSID with local and flex APs and I am struggling to ensure that local mode APs match AuthZ policy 1 and flex APs match AuthZ policy 2.
it seems that upon initial authorisation, the ISE picks AuthZ policy 2 but then during CoA, it seems that the ISE ignores the NAS-ID attribute and selects AuthZ policy 1 which is meant for local mode APs.
Is it possible to check in the ISE whether it is receiving the NAS-ID correctly from the WLC?
thanks
Mario

Hi, does any one know whether there is anywhere in the ISE where I can tell that the RADIUS NAS-ID attribute is being sent?
Thanks
Mario

Similar Messages

Confirmation of quantities after successful credit check

Hi gurus,
An user posted a sales order e it got blocked by credit check (VBUK-CMGST = 'B'). Minutes later an user increased the credit limit for the customer. And even later another user changed something in the order. When he saved the order, the credit check automatically changed to OK (VBUK-CMGST = 'A'), because of the higher limit.
But the confirmed quantities haven't changed, keeping zero. The division of the items are irrelevant to availability check, thus the quantities should confirm, unless they're blocked. I don't understand why in this case the quantities haven't changed.
Regards,
Fabio Scaravelli

Hi,
The statuses represent
a- credit was executed, document ok
b-credit was executed, document not ok
as i understand once the document blocked becase of credit limit is released by VKM3 manually or if you have some automation process which releases these blocked documents.
Depending on the availability of the materials they are going to be available/confirmed to the sales order and you get a promised date against the requested delivery date. But availability check would neet to run to see if the materials are available or not on the requested delivery date to confirm
Just check after VKM3 release if you have saved the document or not.
Thanks & Regards
Sadhu Kishore

Cisco ISE posture check for VPN

Hello community,
first of all thank you for taking time reading my post. I have a deployment in which requires the feature posture checks on VPN machines from Cisco ISE. I know logically once a machine is in the LAN, Cisco ISE can detect it and enforce posture checks on clients with the Anyconnect agent but how about VPN machines? The VPN will be terminated via a VPN concentrator which then connects to an ASA5555X which is deployed as an IPS only. Are there any clues to this?
Thank you!

The Cisco ASA Version 9.2.1 supports RADIUS Change of Authorization (CoA) (RFC 5176). This allows for posturing of VPN users against the Cisco ISE without the need for an IPN. After a VPN user logs in, the ASA redirects web traffic to the ISE, where the user is provisioned with a Network Admission Control (NAC) Agent or Web Agent. The agent performs specific checks on the user machine in order to determine its compliance against a configured set of posture rules, such as Operating System (OS), patches, AntiVirus, Service, Application, or Registry rules.
The results of the posture validation are then sent to the ISE. If the machine is deemed complaint, then the ISE can send a RADIUS CoA to the ASA with the new set of authorization policies. After successful posture validation and CoA, the user is allowed access to the internal resources.
http://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/117693-configure-ASA-00.html

Why CreateNewFrame() returns as NULL after successful created 136 child frame window and trying to create 137th child frame window in MDI application

I am working on MDI application which was developed in VC++ in VS 2012. When my application is launched, it will display a Tree. Under a tree there are 254 nodes. Basically
these nodes data are read from Configuration xml file and loaded into the Tree. By double clicking on each node, first it will create object for document class ( By calling CreateNewDocument() method) after that member variables for that
document class will be initialized and then it will create the new frame window (by calling
CreateNewFrame(pDoc,NULL). New child frame window will show under Main window to the user.
User able to see the data from child frame window.
Similarly by double clicking on each node it will create another object for the same document class and new child frame window will be opened for that node. Each child frame window runs
in different data and showed under the Main window.
Existing requirement by double clicking on each node, node data shall show in separate child window and there is no requirement for all 254 child windows opened simultaneously.
But current requirement is , all 254 child windows shall open simultaneously by double clicking on each node one by one.
In debug mode I have tried double clicking on each node. I able to open up to 50 nodes. After 50th child windows are opened, I unable to access to the application
(Unable to open further node data window since application is getting hanged).
Each child window is having tree, multiple splitter window and some additional controls (static text, ...).
Same I have tried in release mode, I able to open up to 136 child windows. After that the application fail to create the new frame window in VS 2012. i.e CreateNewFrame() return
NULL after successful created 136 child frame window. Debug purpose I have added the code to retrieve last error code by calling GetLastError() method. I got the value as "0". By closing any existing child window then I able to open remaining nodes.
At any point of time I can reach maximum of 136 child frame window that can be opened under Main window. Failing to open all 254 child frame window
simultaneously, currently I fail to meet the current requirement.
current Requirement is all 254 child frame window are opened simultaneously. Please let me know what may be the reason fail to create new frame window after 136 frame window that are
opened already. In Microsoft site, mentioned that there is no limitation for creating frame window in MDI application. I have tried another sample MDI application having limited number of controls, in which I able to create "n"
number of child frame windows. why not able to create more than 136 child frame window in my actual application?
Is there any possibility by changing project settings allow me to create 254 child frame window??
Code Snippet as below:
CDiagBaseDoc * CDiagBaseMDocTemplate::OpenDiagView( ...)
     CDiagBaseDoc* pDoc = NULL;
    if (pDoc == NULL)
        pDoc = (CDiagBaseDoc*)CreateNewDocument();
    if ( pDoc )
       CFrameWnd* pFrame = NULL;
       if (bAlreadyOpen)
              // If Child frame window already opened, then handling the code here.
     else
           pFrame = CreateNewFrame(pDoc, NULL);
           if (pFrame == NULL)
              ASSERT(FALSE);
              delete pDoc;       // explicit delete on error
             pDoc = NULL;
          ASSERT_VALID(pFrame);
          if( pDoc != NULL ) //VS2012
             if ( !pDoc->OnNewDocument() )
                TRACE0("CDocument::OnNewDocument returned FALSE\n");
                delete pDoc;       // explicit delete on error
                pDoc = NULL;
                pFrame->DestroyWindow();
                 pFrame = NULL;
       if (pFrame)
           InitialUpdateFrame(pFrame, pDoc);
           ShowWindow( pFrame->GetSafeHwnd(), SW_MAXIMIZE ); //when opening node for the 1st time, maximize it
}<o:p></o:p>

Hi MuruganK,
Have you checked how much memory your application used? You could check it by Task Manager. Maybe your application reach Memory Limits for Windows.
https://msdn.microsoft.com/en-us/library/windows/desktop/aa366778%28v=vs.85%29.aspx?f=255&MSPPError=-2147217396
Is it possible that there are some memory leaks in your application? It would better if you have made a simple sample to reproduce and narrow down this issue.
Best regards,
Shu
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

After successful installation of iTunes 10.6.1, iTunes will not open. Tried complete uninstall and reinstall, still not working. Cannot sync iPad or access iTunes at all. Any suggestions?

After successfully installing the iTunes upgrade to 10.6.1, Now I cannot open and access itunes. I have tried a complete uninstall and reinstall and it is still not working. I have looked through many support communities for answers. I added an iPad 2 almost a year ago and all was fine until my upgrade to the "cloud services" and upgrade to new version. I have been without iTunes on my PC for a month. Any suggestions on how to resolve this issue?

I too have only recently encountered this problem. I have been able to burn disks before but it keeps making all these weird sounds. It might be a hardware problem but the fact that everything else that uses a disk works I doubt it.

After successful install, all my adobe cc docs, when open, change pointer arrow, i-beam and window to oversize. When doc closes all return to normal size. I'm on a PC. Screen res set to medium 1920x1200. Any ideas how to fix?

After successful install, all my adobe cc docs, when open, change pointer arrow, i-beam and window elements to oversize. When doc closes all return to normal size. I'm on a PC. Screen res set to medium 1920x1200. Any ideas how to fix?

Ok thanks Linxup I would recommend posting in the respective forums for each of those software titles as opposed to the Creative Cloud Download & Install forum. The relevant forums are as follows:
InDesign - InDesign
Illustrator - Illustrator

Hi, download of the trial product (photoshop ele 13) does nt start even after successfully installing the Adobe download assistant successfully. Only .7z file is shown, .exe is nt available. Whn i try to extract .7z file wd 7-Zip error pops up " cannot ex

Hi, download of the trial product (photoshop ele 13) does nt start even after successfully installing the Adobe download assistant successfully. Only .7z file is shown, .exe file is nt visible. Whn i try to extract .7z file wd 7-Zip error pops up " cannot extract **.7z as archive" .I've tried fresh download of adobe photoshop ele 13 but same error occurs.
OS:Windows 8.1
Storage loc for adobe down assistant : C-Program file(x86)-Adobe download assistant-adobe
Storage loc for adobe down assistant: C- Adobe photoshop assistant 13- PhotoshopElements_13_LS25_win64_1. 7z
After this I try to extract ** .7z file but following error occurs :
After this I try to extract ** .7z file but following error occurs
Kindly Help.

Thanks fr revert !
After clicking on the provided link , Above error pops up. I clicked "ok" n allowed download to complete after which same previous error shows up!

HT6015 After successfully signing up for Apple's VPP, I went in to purchase apps, and the only distribution method available is "managed distribution". Our company does not have a MDM so I need the Redeemable Codes method. Where can I find once I log in

After successfully signing up for the Apple Volume Purchasing Program, I went in to purchase a quantity of apps. The only distribution method that was available was the MDM. Our company does not have a MDM. I need redeemable codes. How do I get that option? I am using a PC.

Can I add my existing, licensed apps to my list of 'Purchases' on the Mac App Store so I don't have to buy them twice?
No. Only apps purchased from the App Store can be re downloaded for free including updates.

File adapter - archiving files after successful processing & errors

Hi All
In sender file adapter, I understand that we can archive files after processing them.
After successful processing, we can archive the file, and if there are any errors, we can archive the file in a different folder (all files resulting in errors during processing are archived in a seperate folder).
Now, see this scenario.
My file is successfully picked up, processed and posted to receiving sap system thru proxy.
But, if there is any application specific error (ex: duplicate id), because of which this data cannot be processed in the receiving system, how can i move the file which is archived in successful messages folder to the folder where we archive error messages?
Is it possible?
This is required because, when there are these kind of errors with incorrect data, we want the corresponding file to be archived in the folder where erred files are archived.
Please let me know how we can achieve this.
Many Thanks
Chandra

in file sender CC, thr is option to archive and error file store also..
1)under processing mode - archive.. give the path thr..
2) To archive source files where a permanent error occurred during processing, select Archive Faulty Source Files
http://help.sap.com/saphelp_nwpi71/helpdata/en/44/658abd344a4de0e10000000a1553f7/frameset.htm

Prevent auto data deletion of records from gl_interface table after success

Hello All,
I currently developing the journal conversion.
I have successfully imported some sample journal data.
But the problem here is i am not able find the successfully uploaded journal data in the gl_interface table.It is getting deleted after successful import.
How to prevent this deleted, i want that data to be available in the gl_interface table.
Any setup needs to be done for this?
Oracle ebs version : 12.1.1
Thanks & Regards
aboothahir

any suggessions on the above query?
Thanks & regards
Aboo

After successfully resetting my password 2 times when I try to update applications it says my Apple ID is expired

After successfully resetting my password 2 times when I try to update applications it says my Apple ID is expired

Hi mmonsiegneur,
If you've recently changed or reset your Apple ID password and are having issues logging in, you may want to try manually signing out and signing back in on your device. You may find the following article helpful:
iOS: Sign in with a different Apple ID in the iTunes Store, App Store, and iBooks Store
http://support.apple.com/kb/ht1311
Regards,
- Brenden

After successful installation of 9ias release 2 version 9.0.2.0.1

Hi
After successful installation of 9ias release 2 version 9.0.2.0.1 in the service following services are missing (oracle_home9ias122http_server , form server and reportserver ) which has to be present as per old version installation but in new version(9.0.2.0.1) it is not there is anyone has any idea regarding this what one should do to get those sevices ready.
regards
nasar zia

Since you don't mention operating system, we assume you use Microsoft Windows something-or-other.
In which case, you open a command prompt, enter
sqlplus /nolog
connect / as sysdba
startup
exit
and post the entire console session.
(Replacing the 'something-or-other' with 'version and service pack' in our public knowledge base would be very useful as well.)

Missing AVP 29 VSA 23 in the Radius Access-Request sent by ASA 5545-X 8.6

Hello,
we are migrating from ASA 5520 Version 8.4(3) to ASA 5545-X Version 8.6(1)2 with the same configuration ;
we are stuck with a Radius authentication problem related to an ASA clientless ASA access ;
when we compare the Radius dialog between each ASA (the old one and the new one) and the same Radius ACS 5.3 server, we can see that the only difference is there is a missing AVP 29 VSA 23 in the Radius Access-Request sent by the new ASA-5545-X compared to the good one sent by the old ASA 5520;
this AVP 29 VSA 23 carries the tunnel-group name as defined in the ASA configurtion ;
5545-X ad 5520 configuration files have been double-checked and compared : no difference between both files
any help would be appreciated to diagnose this problem
thanks in advance

This problem was solved by upgrading the 5545-X from version 8.6(1)2 to version 9.1.2;
nothing else changed

CRT results are not appearing after successful payroll run

CRT results are not appearing after successful run of US payroll, however, RT results are appearing.
Please suggest ideas to find the results of CRT.

Hi Rémi Corriveau,
Thank you for spending your time to answer my question.
Here are the answers to your questions . . . .
QUESTION: Did you run a Payroll Simulation or a live Payroll Calculation ?
ANSWER: We did a LIVE payroll run for a period of 3 months.
QUESTION: Did you use t-code pc_payresults ?
ANSWER: Yes, we used the t-code pc_payresults but still it doesn't show the CRT results.
QUESTION: Did you check Processing Class 30 and 70 for your WTs ?
ANSWER: As per the process, we copied the SAP standard (model) Wage Type M010 to
our customized Wage Type, hence, hope that it wouldn't disturb any of the standard SAP settings.
However, we did check the Processing Class 30, but did not check the processing class 70.
Shall update you once PC 70 is also checked.
Please educate, if there are any particular specifications that need to be entered while checking
for our WTs in PC 30 & PC 70.

ClassCastException when castin to a SessionEJBHome after successful lookup

Situation
Two EARs, say X.ear and Y.ear. Both of them deployed in the same OC4J instance (NOT STANDALONE); OAS 10.1.2
X.ear has a JAR (say XA.jar) which looksup and uses the Stateless Session bean in Y.ear. We have a yClient.jar that contains all the necessary classes for use by X.ear, so XA.jar. This yClient.jar is available in X.ear.
In one of the classes in XA.jar, when I lookup the EJB, I am succesful in getting the Home class. If I try to narrow down to the specific Home class instead of EJBHome.class, then I get the ClassCastException at that moment. If I cast it to EJBHome.class and postpone casting until after creation of the real remote bean, then I get the ClassCastException here.
I have included the code also.
Possible doubts that I am having:
1)
I am doubting like OAS is doing something that I am not aware of. Like the remote object it sends back and when I am casting it to the class of the object it throws ClassCastException.
Y.ear does not contain any info like a Jar in X.ear is going to lookup this bean or so.
Do I need to mention anything in Y.ear.
2)
Is there any possiblility that the same class in X.ear and Y.ear are compiled with different JDK or timing
3) Or is the OAS Stub creation or persistence or passivation is messing up in this.
I am kind of stuck in here. Thanks for your help
If you notice the following exception, I have printed the SessionBean narrowed down class. It is a wrapper class from OC4J I believe.
[u]SessionControllerSLHome_StatelessSessionHomeWrapper61
This is what is in the orion-ejb-jar.xml
<session-deployment name="SessionControllerSL" max-tx-retries="0" location="com/dsc/uniarch/cr/ejb/SessionControllerSL" wrapper="SessionControllerSLHome_StatelessSessionHomeWrapper61" persistence-filename="com/dsc/uniarch/cr/ejb/SessionControllerSL.home_default_island_1" />
It seems like the looked up object when I cast it to the corresponding class, it is giving ClassCastException
Exception
06/10/27 11:40:13 Tutalii: /home/oracle/OracleAS/j2ee/home/applications/mlo/mloWeb/WEB-INF/classes
06/10/27 11:40:29 Oracle Application Server Containers for J2EE 10g (10.1.2.0.0) initialized
06/10/27 11:41:03 EL xPressionConnection Begin start session...
06/10/27 11:41:03 EL xPressionResponseConnection - getInitialContext ()
06/10/27 11:41:03 EL xPressionConnection PROVIDER_URL =ormi://localhost:3201/xPression
06/10/27 11:41:03 EL xPressionConnection INITIAL_CONTEXT_FACTORY =com.evermind.server.rmi.RMIInitialContextFactory
06/10/27 11:41:03 EL xPressionConnection SECURITY_PRINCIPAL =xpression
06/10/27 11:41:03 EL xPressionConnection SECURITY_CREDENTIALS =xpression
06/10/27 11:41:03 2011: After successful JNDI lookup for SessionControllerSL on the Initial Context: [SessionControllerSLHome_StatelessSessionHomeWrapper61]
06/10/27 11:41:03 2012: After narrowing down the homeObject to EJB Home Object: SessionControllerSLHome_StatelessSessionHomeWrapper61
06/10/27 11:41:03 2013: Used reflection to invoke the Create method on EJBHome Object: SessionControllerSL_StatelessSessionBeanWrapper60
06/10/27 11:41:03 java.lang.ClassCastException
06/10/27 11:41:03 at com.dsc.uniarch.ejbController.xPressionConnection.lookupTargetHome1(xPressionConnection.java:152)
06/10/27 11:41:03 at com.dsc.uniarch.ejbController.xPressionConnection.Start(xPressionConnection.java:250)
06/10/27 11:41:03 at com.dsc.uniarch.ecor.bean.xResponseFrameWork.startSession(xResponseFrameWork.java:5381)
06/10/27 11:41:03 at com.dsc.uniarch.ecor.bean.xResponseFrameWork.processRequest(xResponseFrameWork.java:154)
06/10/27 11:41:03 at html.index._jspService(_index.java:69)
06/10/27 11:41:03 at com.orionserver.http.OrionHttpJspPage.service(OrionHttpJspPage.java:56)
06/10/27 11:41:03 at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:347)
06/10/27 11:41:03 at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:509)
06/10/27 11:41:03 at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:413)
06/10/27 11:41:03 at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
06/10/27 11:41:03 at com.evermind.server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:810)
06/10/27 11:41:03 at com.evermind.server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:322)
06/10/27 11:41:03 at com.evermind.server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:790)
06/10/27 11:41:03 at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:208)
06/10/27 11:41:03 at com.evermind.server.http.AJPRequestHandler.run(AJPRequestHandler.java:125)
06/10/27 11:41:03 at com.evermind.util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:192)
06/10/27 11:41:03 at java.lang.Thread.run(Thread.java:534)
Code that is used
try {
//Third EJB Lookup: CRContentSF
if (initContext == null)
getInitialContext();
homeObject = initContext.lookup("com/dsc/uniarch/cr/ejb/SessionControllerSL");
System.out.println("2011: After successful JNDI lookup for SessionControllerSL on the Initial Context: ["
+ homeObject.getClass().getName() + "]");
obHome = (EJBHome) javax.rmi.PortableRemoteObject.narrow(homeObject,
EJBHome.class);
System.out.println("2012: After narrowing down the homeObject to EJB Home Object: " + obHome.getClass().getName());
m = obHome.getClass().getDeclaredMethod("create", new Class[0]);
obj = m.invoke(obHome, new Object[0]);
System.out.println("2013: Used reflection to invoke the Create method on EJBHome Object: " + obj.getClass().getName());
sessionControllerSL = (com.dsc.uniarch.cr.ejb.SessionControllerSL) obj;
System.out.println("2014: getClass " + sessionControllerSL.getClass().getName());
System.out.println("3014: getClass " + SessionControllerSL.getClass().getName());
} catch (Exception e) {
e.printStackTrace();
Thanks

I redeployed the target j2ee application, it does not seem to help. However, after redeploying, I had to stop/start the OC4J instance couple of times. I dont think it matters. Or I dont know if you guys meant this only when you say 'server bounce'.
What is this SessionBeanWrapper anyways? If it is a EJB-Remote-Stub, then it should be able to cast into its original interface. I dont know what else to do at this point. I will keep working on this.
EXCEPTION
06/10/30 13:40:14 EL xPressionConnection Begin start session...
06/10/30 13:40:14 EL xPressionResponseConnection - getInitialContext ()
06/10/30 13:40:14 EL xPressionConnection PROVIDER_URL =ormi://localhost:3201/xPression
06/10/30 13:40:14 EL xPressionConnection INITIAL_CONTEXT_FACTORY =com.evermind.server.rmi.RMIInitialContextFactory
06/10/30 13:40:14 EL xPressionConnection SECURITY_PRINCIPAL =user
06/10/30 13:40:14 EL xPressionConnection SECURITY_CREDENTIALS =password
06/10/30 13:40:14 EL xPressionConnection lookup beanName :com/dsc/uniarch/cr/ejb/SessionControllerSL
06/10/30 13:40:14 EL xPressionConnection tmpObject : SessionControllerSLHome_StatelessSessionHomeWrapper61
06/10/30 13:40:14 EL objHome name : SessionControllerSLHome_StatelessSessionHomeWrapper61
06/10/30 13:40:14 EL xPressionConnection start typecast exception
06/10/30 13:40:14 java.lang.ClassCastException
06/10/30 13:40:14 at com.dsc.uniarch.ejbController.xPressionConnection.Start(xPressionConnection.java:235)
06/10/30 13:40:14 at com.dsc.uniarch.ecor.bean.xResponseFrameWork.startSession(xResponseFrameWork.java:5381)
06/10/30 13:40:14 at com.dsc.uniarch.ecor.bean.xResponseFrameWork.processRequest(xResponseFrameWork.java:154)
06/10/30 13:40:14 at html.index._jspService(_index.java:69)
CODE BEGIN
System.out.println ("EL xPressionConnection Begin start session...");
LogManager.logInfo("Begin start session...");
setServerURL(serverURL);
initInitContext();
SessionControllerSLHome scHome = null;
try {
scHome = (SessionControllerSLHome)
lookupTargetHome(ConfigManager.getInstance().getValue("SESSIONCONTROLLER_JNDI"));
System.out.println ("EL xPressionConnection - scHome className : " + scHome.getClass().getName());
catch (Exception exc) {
System.out.println ("EL xPressionConnection start typecast exception ");
exc.printStackTrace ();
try{
//sessionControllerSL = lookupTargetHome1();
sessionControllerSL = scHome.create();
} catch (Exception e) {
System.out.println ("EL xPressionConnection scHome.create Exception ");
e.printStackTrace();
String[] param = new String[1];
param[0] = ConfigManager.getInstance().getValue("SESSIONCONTROLLER_JNDI");
throw new JNDINamingException(9110, e, param);
CODE END
Thanks

Is RADIUS NAS-ID sent after successful posture check

Similar Messages

Maybe you are looking for