ISE 1.2 Restore Issue

ISE 1.2 (on vm) creates a backup file without error.  I can use the file to restore a clean ISE installation (same release) without error.  However, the ISE application server process is not running.   "Reload" or "App Start" do not restart the ISE process.  Including or not including the ade-os has no affect.   I would apreciate any suggestions as to what might be preventing the ISE server proecess from running.

Hi Marvin,
Please make sure you also have the same version of patches on the clean ISE installation. I know from your statement you have same ISE 1.2 version but I would request you to check with the same version of patches on which the backup was taken.
Still if you have the same version of patches and not able to bring back the App server up and running , please attach ADE.log and catalina.out file, I will quickly take a look and suggest the next steps.
As per my knowledge and from your problem explanation , it is for sure you might be missing the patches.
Thanks,
Naresh

Similar Messages

  • I'm having restore issues, help please!!!

    this has probably already been answered, but got new 8gb iphone today plugged it in etc it crashed tried to reboot and reconnect to itunes, told to restore tried failed error code 13 checked forum changed usb bingo it starts to restore, now though the progress bar on the phone is full but on itunes it's saying it's still waiting for iphone been like this for almost an hour can anyone help, i've not even made a phone call from it yet!
    Message was edited by: sscsukltd

    sorry... can't help, not having these "restore" issues (yet...) and I've done 4- Restore to Backup the past week and two "restore to new Phone" and no issues... other than the fact that with a "Restore to New Phone" my 3rd party data app's are not "recoverable" as with the "restore to backup"

  • Tivoli/TSAFS.NLM Restore issue

    I am trying to restore a server using Tivoli and Storserver on the front end. I keep getting errors( server detecting system error). Storserver/Tivoli said this is a TSAFS.NLM error. I see a Novell TID dated Oct/05 that eludes to this problem( 10099433). The fix does not work. Tivoli is suggesting that this is a known issue with Novell and a fixed TSAFS.NLM should fix the problem. Our current date/version TSAFS.NLM is Aug 14, 2007/6.52.08.
    Do we need to update/ back rev this NLM, or is there a specific fix?
    Thank you,
    Pete

    Originally Posted by ataubman
    You don't say specifically: is it the issue in the TID of not backing up files that have square brackets [] in them? Or a more general problem? You mention getting errors whereas that TID says there are no errors registered, the files with [] just don't back up. So it seems to me likely that TID does not in fact relate to your problem at all.
    Also you say the fix in teh TID did not work. What exactly from the TID did you do?
    START:
    Here is an update of what we did that helped much, but we are still getting errors. This was my e-mail to Novell support:
    This is in regards to our Tivoli/Storserve restore issues....
    We did as you said as to TID 10089094 and TID 1009433 reloading the NLM
    TSAFS with the switch:
    /NoConvertUnmappableChrs
    This DID help as we were able to restore much more with fewer errors. But we are still getting the errors I explained to you in the original call on many
    files.
    I ran a restore against two known files that give us these errors from
    the original backup dated March 27. I have attached the DEBUG TSAFS log
    as per TID 10097645.
    END of e-mail to Novell support...But they have escalated to next level as we are still getting SOME errors of the same....I will update this thread as I get more...
    NOTE: Intrestingly, we had to restore a second server. Using this switch from the start, we did NOT get any errors...
    Stand by/
    Pete

  • IPad 2 restore issue.

    i wonder is anyone can help.
    after having my iPad 2 for 3 years with no problems, suddenly it just got stuck on the Apple logo and would not charge up. Aftear assuming I had somehow damaged the mains port, I took it to an iexpert who took a look and diagnosed a software issue. He took it back to basics and I took iPad home to sync with iTunes, being confident that iCloud would do its job and restore all my bits and bobs.
    so .. My issues
    IPad wouldn't recognise my password so eventually updated password via security questions , still didn't recognise, updated again - all good.
    Then plugged it into iTunes on computer and logged in using my iTunes AppleID ( I have 3 and blame the Apple Genius in Manchester !!!)
    Firstly it brought up the initial Apple Id , from an old email, which the Genius suggested I didn't change as wouldn't be using ....  Issue 1. - I have most of my Apps either downloaded or purchased on this old account which I cannot locate as I do not know the password and even when I go through the 'forgot password' option - it does not recognise my date of birth and I am stuck as I can't ask it to send me an email to an account that no longer exits. I am only concerned about 1 app which I paid around £7 which has artwork stored on it for my work, which I cannot access.
    issue 2 - finally logged in with latest Apple ID ( set up when purchased 6+) after password fight (above)  I left it to restore for about an hour.  It took longer than an hour but it seemed to have finished, apart from the fact that most of the Apps we still faded and could not be accessed. I assumed they were still loading but in fact it was quicker to delete and reinstall most, as they were free ones.  Then went to take a look at backup status on iCloud and it says as it's currently being restored, it won't back-up until compete.  I have no idea why it said it had completed , when actually it's still doing it or not.    I seem to have all my emails and photos and it's still saying the download is 7gb, so I know the info is available ... It's just not 'finished'
    i Have no idea what to do next, should I plug back into iTunes ?
    so.... 1. Any Idea how to access the one app I have paid for on old Apple if and has stored info on and 2. How can I ensure that the iPad has finished restoring ?
    APologies for waffling, it's quite difficult to explain in writing .. Any help greatly appreciated

    An option ( and not a bad one) if you aren't too comfortable with tech stuff is to go dow to the Apple Store.  They have outstanding customer service.  Did the upgrade seem to complete successfully, or did this error come up sometime before it ended?  You might also look at this kBase article...though again if you are close to an Apple Store, they are great to work with.
    http://support.apple.com/kb/TS1275

  • Fusion drive and backup/restore issues

    Hi,
    since I installed a fusion drive on my early 2008 iMac, consisting of an internal 256GB SSD and an (external FW800) 320GB hard disk, I occassionally run into trouble when system updates are pending. In the past, at worst the time machine backup couldn't be restored and I had to reformat and reinstall the system from scratch - which is not really comfortable!
    Currently, running Mountain Lion, when I try to select the startup disk, it complains that Boot-Caches on the Boot-Helper-Partition cannot be created. Nevertheless the system starts fine (and runs fast ;-).
    Before upgrading to Mavericks, I would like to know
         - if someone else ran into similar problems with fusion drives, when updating/upgrading system software.
         - Is it normal that a Time Machine backup cannot be (completely) restore a Fusion drive?
    Yes, I know that having the harddisk part of a fusion drive externally is not recommended/supported by Apple - and my Mac is nearly 6 years old, but that would not explain why system updates/restores nearly always fail and sometimes the Time Machine backup drive has a broken file system (needed reformatting)! And I always checked the disks with Disk Utility prior to updating...
    Any comments are appreciated.

    You can file feedback here. The more who file the more the faster the issues may be fixed.
    Also you shoud look on the CCC forums.

  • ISE 1.2 configuration issues

    Fellow ISE users,
    We are standing up a new ISE instance using ISE1.2 on VM's.  We already have another one for a dedicated purpose on 1.1 and had no issues like what I am seeing here.
    Issue one = unable to register nodes to the deployment, it keeps telling me to check server and CA certificate.  I have loaded a CA cert from our internal microsoft CA server, same server I used in the other deployment and the servers accept it.  Also when browsing to it https comes up with no errors so it seems to be working for https, not sure on EAP.  Ideas?
    Issue two = unable to find any groups in our AD a search brings back nothing.  I was able to join it to our AD domain and it shows green, but none of the attempts to bring in a group have worked, again have done this a bunch with our 1.1 deployment so I know how it works.  Ideas?
    Anyway I do have a TAC case open on this but trying to get it resolved quickly due to some internation travel coming up where I will need deploy it.      

    Hi
    When you deploy Cisco ISE in a standalone, or in a distributed environment for the first time, you are prompted to run the setup utility to configure the Cisco ISE appliance. Here, you will configure the Domain Name System (DNS) domain and the primary nameserver (primary DNS server), where you can configure one primary nameserver, and one or more nameservers during setup. You can also change, or add DNS nameservers later after deploying Cisco ISE using the CLI commands. For more information please go through this link:
    http://www.cisco.com/en/US/docs/security/ise/1.1.1/user_guide/ise_ug.pdf

  • NAC Agent Login Dialog Not Appearing - ISE 1.1.1 issue ?

    Agent Fails to Initiate Posture Assessment
    The NAC agent is properly installed on a Windoes 7 , IE 9 machine, the certificates from ISE ADM PRI are installed in trustable certificate store in the client machine but is a selfsigned ISE certificate.
    The reports / USER / Profiling report says the Provisioning Agent has completed the assessment ok.
    The redirected URL is working fine (SEE Evidence)
    We are always prompted to install the NAC agent again or looking at the additional prompted information wait for the NAC agent to load and complete.
    The operations status remains with postering status pending forever and nothing else happens.
    Symptoms or Issue
    The agent login dialog box does not appear to the user following client provisioning.
    Conditions Cisco Says this issue can generally take place during the posture assessment phase of any user
    authentication session.
    Cisco Advises as Possible Causes There are multiple possible causes for this type of issue. See the following
    Resolution descriptions for details of what was already tested by us and please see the atached files for your switch configuration and evidences. .
    CISCO SUGGESTED POSSIBLE CAUSES AND RESOLUTIONS
    Resolution • Ensure that the agent is running on the client machine. ALL TESTED OK
    • Ensure that the Cisco IOS release on the switch is equal to or more recent than
    Cisco IOS Release 12.2.(53)SE. - OK
    • Ensure that the discovery host address on the Cisco NAC agent or Mac OS X
    agent is pointing to the Cisco ISE FQDN. (Right-click on the NAC agent icon,
    choose Properties, and check the discovery host.) - OK (See evidence)
    • Ensure that the access switch allows Swiss communication between Cisco ISE
    and the end client machine. Limited access ACL applied for the session should
    allow Swiss ports: ALL CONFIGURED as CISCO GUIDELINES OK (SEE EVIDENCE)
    • If the agent login dialog still does not appear, it could be a certificate issue.
    Ensure that the certificate that is used for Swiss communication on the end client
    is in the Cisco ISE certificate trusted list. (ALL CHECKED OK SEE EVIDENCE)
    • Ensure that the default gateway is reachable from the client machine. (TESTED OK)

    Hi.
    Can you paste all the ACLs on your switch especially the webauth redirect ACL which should deny traffic towards the PSN.
    regards
    Zubair

  • Cisco ISE Guest Portal - DNS Issue - External Zone

    Hello,
    I have a customer that has the following sceanrio :
    In a wireless deployment and a Cisco ISE 1.1.3 deployment with CWA, when the wireless guest receives the redictect  URL  from ISE (URL to access the ISE Guest Portal), this URL is based on  the  ISE DNS name, not on its IP address; so, the PC can't resolve  this via DNS name since there is no DNS in the External zone (for guets) or by using the ISP DNS servers addresses provided  by the  DHCP server, and, so, it can't access the Guest Portal at all ;
    I know that in trying to manually code the IP address - this does not work (ie in the CWA Authorization profile, the equivalent URL redirect via the CISCO av-pair as follows :
    cisco-av-pair=url-redirect=https://10.10.10.10:8443/guestportal/gateway?sessionId=sessionIdValue&action=cwa, )
    since the sessionIdValue variable is not replaced by its real value when sent to the wireless client)
    My question is : Has this issue been addressed in version Cisco ISE 1.2 - has anyone tried it if has been addressed? If not in Cisco 1.2 - does anyone know iof this feature will become available?
    Thank-you in advance for your replies.
    Robert C.

    Robert,
    Manual assignment has been made available in ISE 1.2 release.
    M.

  • ISE 1.3 certificate issue

    Hi experts,
    I have tried to replicate an issue that my customer is having:
    issue: when running client provisioning on default port 8905, the portal certificate shows that it's using the certificate created for the Admin. However, when visiting guest portal or running onboarding process (using port 8443 which is the default one), the certificate is presented with the correct one (the one used for the portal).
    Here is what I have setup in my lab:
    1. in ISE 1.3, installed two certificate: one for admin and the other for portal access:
    2. when accessing the admin page and the client portal, I can see that it's using the correct certificate. ( the OU=ESC one is the admin certificate and the OU=MS one is the portal certificate)
    However, when accessing the test client provisioning portal on 8905, the certificate shows it's using the admin one:
    In the adminstration->device portal mgmt->client provisioning portal, the port is used as default 8443. It makes more sense it uses the client provisioning certificate rather than the admin certificate when the portal is redirected on to port 8905. 
    Is the issue an as-designed feature or is there additional configuration needs to be implemented?

    Hello Neno,
    Thanks for the reply!
    Let me clarify: when I access the client provisioning portal on default 8443 which URL is generated by the ISE, I can see the correct certificate (OU=MS) is presented. But when I manually change the port from 8443 to 8905 in the same URL and access, ISE brings me to the same portal page, but this time the incorrect certificate is presented (OU=ESC which I generated for the admin portal).
    So it seems that ISE presents a wrong certificate (the one for admin) when user is redirected to the provisioning portal on a port other than port 8443. I believe ISE should present the portal certificate usage in this case. I am not sure if this is an as-designed feature, or some additional configuration should be done.
    Let me know if you still have questions with this.
    Many thanks, 

  • 5760 WLC & ISE 1.2 PEAP Issues

    I have the following setup:
    WLC 5508 (7.4.100)
    WLC 5760 (03.03.02)   (I'm replacing the 5508 with the 5760)
    ISE 1.2
    Im currently running 802.1x PEAP with external AD authentication, on the 5508 and everything is working 100%.
    As soon as I switch the users over to the 5760 I get the following errors on the ISE:
    Event
    5440 Endpoint abandoned EAP session and started new
    Failure Reason
    5440 Endpoint abandoned EAP session and started new
    Resolution
    Verify known NAD or supplicant issues and published bugs. Verify NAD and supplicant configuration.
    Root cause
    Endpoint started new authentication while previous is still in progress. Most probable that supplicant on that endpoint stopped conducting the previous authentication and started the new one. Closing the previous authentication.
    I took the config of a working 5760, why would this one give the above errors ?
    Jaco

    Hello!
    Turn on debugs on your 5760 to track authentication activities. Most probably you'll spot the issue from them. If not - post them here, so we'll have a look as well.
    Thanks, Irina

  • 2008 Enterprise R2 : Image restore issue on domain contoller : LDP, DNS, NETLOGIN failed : failed test DNS

    Dear All,
    I need your help in order to resolve issue i got. I have domain controller, and additional domain controller in production and both were working fine untill i restore image on 'Domain Controller' and after that i was not able to browse 'AD'. I checked and
    came to know that NETLOGIN service was PAUSED. i fixed that issue but when i went to Additional Domain, that machine was not able to find Dmain. i realise that DNS/LDAP is not working. I run the command "DCDIAG /TEST:DNS" just to check the connetivy,
    and found DNS connectivity sissue on Main Domain controller. Please help me with the issue. 
    Window Server 2008
    Domain Main :   GTMAIN : 192.168.0.1
    Additional Domain Controller :   GTMAIN2 : 192.168.0.2
    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.
    C:\Users\Administrator> DCDIAG /TEST:DNS
    Directory Server Diagnosis
    Performing initial setup:
       Trying to find home server...
       Home Server = GTMain
       * Identified AD Forest.
       Done gathering initial info.
    Doing initial required tests
       Testing server: Default-First-Site-Name\GTMAIN
          Starting test: Connectivity
             Although the Guid DNS name
             (0d76309b-aebd-4f7e-b024-d0c3f380c1b1._msdcs.goldteam.co.uk) resolved
             to the IP address (87.82.208.116), which could not be pinged, the
             server name (GTMain.goldteam.co.uk) resolved to the IP address
             (fe80::5efe:192.168.1.1%12) and could be pinged.  Check that the IP
             address is registered correctly with the DNS server.
             Got error while checking LDAP and RPC connectivity. Please check your
             firewall settings.
             ......................... GTMAIN failed test Connectivity
    Doing primary tests
       Testing server: Default-First-Site-Name\GTMAIN
          Starting test: DNS
             DNS Tests are running and not hung. Please wait a few minutes...
             ......................... GTMAIN passed test DNS
       Running partition tests on : ForestDnsZones
       Running partition tests on : DomainDnsZones
       Running partition tests on : Schema
       Running partition tests on : Configuration
       Running partition tests on : goldteam
       Running enterprise tests on : goldteam.co.uk
          Starting test: DNS
             Test results for domain controllers:
                DC: GTMain.goldteam.co.uk
                Domain: goldteam.co.uk
                   TEST: Basic (Basc)
                      Error: No LDAP connectivity
                      Warning: adapter
                      [00000014] Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien
    t)
                      has invalid DNS server: 192.168.0.100 (<name unavailable>)
                      Warning: adapter
                      [00000014] Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Clien
    t)
                      has invalid DNS server: 212.135.1.36 (<name unavailable>)
                      Error: all DNS servers are invalid
                      No host records (A or AAAA) were found for this DC
                   TEST: Dynamic update (Dyn)
                      Warning: Failed to add the test record dcdiag-test-record in z
    one goldteam.co.uk
                TEST: Records registration (RReg)
                   Error: Record registrations cannot be found for all the network
                   adapters
             Summary of test results for DNS servers used by the above domain
             controllers:
                DNS server: 192.168.0.100 (<name unavailable>)
                   2 test failure on this DNS server
                   PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DN
    S server 192.168.0.100               Name resolution is not functional. _ldap._t
    cp.goldteam.co.uk. failed on the DNS server 192.168.0.100
                DNS server: 212.135.1.36 (<name unavailable>)
                   2 test failure on this DNS server
                   Name resolution is not functional. _ldap._tcp.goldteam.co.uk. fai
    led on the DNS server 212.135.1.36
             Summary of DNS test results:
                                                Auth Basc Forw Del  Dyn  RReg Ext
                Domain: goldteam.co.uk
                   GTMain                       PASS FAIL PASS PASS WARN FAIL n/a
             ......................... goldteam.co.uk failed test DNS
    C:\Users\Administrator>

    Thanks for the response.
    DC1 :Main Domain Contoller: Issue @ momemnt because of restore. seems to me DNS is working/responoding
    along wiht RPC but i can see that DNS service is started? 
    DC2 :Additional Domain Contoller: Healthy but i am not able to login on AD on that server becuase of
    below mentioned issue
    Naming information cannot be located becuase: the target principle name is incorrect
    I am confused that if i downgrade the DC1,
    how about if i am not able to recove AD?
    which process should i adopt?
    Thanks

  • Iphone 6 restoring issue

    I got a new iphone this morning at 1030 am and it has been restoring from icloud backup for almost 10 hours now.  Is something happening here or does it take this long?

    I am having the same issue!  I received my new iPhone 6 plus from atnt yesterday at 10am ... activated it and asked phone to restore from my sprint iPhone5s backup at 10:30 am.  It is now 2:17pm the next day and most of the apps that are incomplete are still incomplete right now.  What can I do to fix this or do I have to just wait?

  • When I try and open the camera it just closes again and doesn't activate the lens, is it a restore issue or a hardware issue and happened out of the blue

    The camera function wont open and connect to the lens it just closes again with showing any error, do I need to restore the I Pad or is it a hardware issue
    Thanks

    Before you go restoring the iPad, try this first. Close the camera app and reboot the iPad.
    Tap the home button once. Then tap the home button twice and the recents tray will appear at the bottom of the screen. Tap and hold down on any app icon until it begins to wiggle. Tap the minus sign in the upper left corner of the camera app icon. Tap the home button.
    Reboot the iPad by holding down on the sleep and home buttons at the same time for about 10-15 seconds until the Apple Logo appears - ignore the red slider if it appears on the screen - let go of the buttons. Let the iPad start up.

  • Newbie Automatic restore issues

    Hi:
    I have two issues with a program I am working on to do an automated restore, The restore takes a backup from production, and replaces the database entirely every day so we have offloaded current information: I avoid logical names because we don't want a
    database named production:
    FIRST ISSUE:
    I would like to be able to drop the database. When I drop it interactively, I always click the box close existing connections: The problem is what to do with an interactive connection: Is there any way with an automated restore replace to intrinsically drop
    the database? Although it's not something you normally want to do, it is something in this case that I HAVE to do to ensure the restore works and the with moves move the correctly named files.
    SECOND ISSUE
    When I run the following statement:
    USE [coll18_FinAidNoHR]
    DBCC SHRINKFILE (N'coll18_production_log' , 0, TRUNCATEONLY)
    GO
    I get the following error:
    Cannot shrink log file 2 (coll18_production_log) because the logical log file located at the end of the file is in use.
    (1 row(s) affected)
    DBCC execution completed. If DBCC printed error messages, contact your system administrator.
    Is there any way  to work around this without programming?

    As for question 2-thanks for all the info on DBCC SHRINKFILE I think the best decision is to do it as needed.The
    Restore is a knottier problem. I can't to a restore replace because I want to change the file names. I can't have the logical names.
    I run a prestep before my restore that does this common stuff:
    if exists (select * from sys.sysdatabases where name = 'FinAidNoHR')
    EXEC msdb.dbo.sp_delete_database_backuphistory @database_name = N'FinAidNoHR'
    if exists (select * from sys.sysdatabases where name = 'FinAidNoHR')
    ALTER DATABASE [FinAidNoHR] SET  SINGLE_USER WITH ROLLBACK IMMEDIATE
    if exists (select * from sys.sysdatabases where name = 'FinAidNoHR')
        drop DATABASE  [FinAidNoHR];
    The restore step fails with this error:
    Executed as user: CAMPUS\UCCTD10_SQL. Exclusive access could not be obtained because the database is in use. [SQLSTATE 42000] (Error 3101) 
    When I run an SP_WHO it DOES show the database open in a sleeping state on a remote machine that did not shut down the instance, but this DROP should have had the effect of an interactive drop with close existing connections checked.
    When I did other tests like selecting top 1000 rows from another test database,SP_WHO shows it open in the same way but the DROP works fine.
    Before I tear out what little hair I have left, can anybody tell me why it would  not drop the connection?
    (It was my boss's PC)

  • HT1267 Iphone restoration issue

    Hi
    I was restoring my iphone via itune and the restoration was not completed due to incomplete disk space. I cleared the disk space and restarted itune. When I tried to syn it again, I received this error message: this iphone cannot be used because apple mobile service not started. How to resolve this issue?
    Regards
    Ken

    Make sure you've got atleast 2-3GB space on the hard drive of the computer where your operating system is installed.
    Download the latest version of iTunes : http://www.apple.com/itunes/download/
    After installing, try restoring the iPhone once again
    This should solve your issue!

Maybe you are looking for