ISE 1.3 - logging admin actions like CoA

Hi all,
I'm trying to find a way to gather the logs regarding admin action.
To be more specific:
If there is an admin who performs CoA from "Live Authentications" view, I want to have a proof that this guy did it.
I tried to find any report on such an activity - no success
I tried to export specific kind of log to the external syslog server - no success, cause I cant find category for that
There are some syslogs messages (category MyDevices) but none of them were triggered on CoA action from "Live Authentication" tab.
MyDevices MyDevices 88012 Successfully performed a CoA termination Successfully performed a CoA termination INFO
MyDevices MyDevices 88014 Successfully performed a CoA re-authentication Successfully performed a CoA re-authentication INFO
I don't belief that there is none information on such crutial action - any ideas?
regards
Przemek

Similar Messages

Trackpad inoperative for second or 2 after actions like delete...

Often, the trackpad won't move the cursor for a second or two after certain actions, like deleting a file in Finder or an object in other programs. Other occasions too, but don't recall exactly. It is enough to be annoying.
I've removed unnecessary startup items and such. One thing I have yet to try is a safe boot or log in with my other, Admin account.
Anyone else seen this? Found a cause?
My 500MHz Pismo with 10.3.9 doesn't even have this issue, and my MBP setup was largely imported from it (although I've updated the add-ons where available).

I've disabled add-ins I don't need, but still have this problem. Anyone else?

Authenticated on ISE 1.2 (as admin) against an external radius server

Hello
Our customer wants to be authenticated on ISE 1.2 (as admin) against an external radius server (like ACS not microsoft). How could i do that ?
Is it possible while retaining internal admin users database in a sequence "external_radius or internal"
thank you in advance.
Best regards

External authentication is supported only with internal authorization:
External Authentication + Internal Authorization
When configuring Cisco ISE to provide administrator authentication using an external RSA SecurID identity store, administrator credential authentication is performed by the RSA identity store. However, authorization (policy application) is still done according to the Cisco ISE internal database. In addition, there are two important factors to remember that are different from External Authentication + External Authorization:
You do not need to specify any particular external administrator groups for the administrator.
You must configure the same username in both the external identity store and the local Cisco ISE database.
To create a new Cisco ISE administrator that authenticates via the external identity store, complete the following steps:
Step 1 Choose Administration > System > Admin Access > Administrators > Local Administrators.
The Administrators window appears, listing all existing locally defined administrators.
Step 2 Follow the guidelines at Creating a New Cisco ISE Administrator to ensure that the administrator username on the external RSA identity store is also present in Cisco ISE. Be sure to click the External option under Password.
Note Remember: you do not need to specify a password for this external administrator user ID, nor are you required to apply any specially configured external administrator group to the associated RBAC policy.
Step 3 Click Save .

Log the actions

Hi,
I have a issue like i am creating the views and dropping the views...like this for every action i have to log those details like
sorse_sys action object mess_type mess_txt these details i have log into one internal table with message type S,I.
how can we do this.can any body explain me.
for every data base operations i have to capture into one internal table.
thanks.

Any one can you help me in this.?

Workflow actions like FORWARD, RETURN, CANCEL in the Custom Screens

We have a requirement to perform the Workflow actions like FORWARD, RETURN, CANCEL from a Custom transaction Screen.
Usually these Workflow actions can be performed from SAP Inbox SWBP of the user and related WF logs are reflected by SAP automatically.
For example,
we will add the Push buttons in CC02 transaction and want to perform these Workflow Actions, Is it possible to do so? If possible, How can I reflect these changes into WF logs and all similar to Standard SAP?
Help is appreciated.
Thanks,
Prathap

we will add the Push buttons in CC02 transaction and want to perform these Workflow Actions,
Is it possible to do so? If possible, How can I reflect these changes into
WF logs and all similar to Standard SAP?
Question & Answers
we will add the Push buttons in CC02 transaction ?
Are you going to add only one button or three separate buttons, if you can add three separate buttonts then under each button action,
For Forward = SAP_WAPI_FORWARD_WORKITEM make use of the standard FM.
For Retrun ( Assuming that you want to put back the workitem ID back to the user's inbox ) in that case use of FM SAP_WAPI_PUT_BACK_WORKITEM.
For Cancel = SAP_WAPI_WORKITEM_DELETE this might help you to cancel ( Assuming that Cancelling means Deleting the workitem...
Note : to make use of all the above FM you need to have the workitem ID, Will you be able to determine the exact workitem id?
for more :
Now you can find more FM regarding the workitem by simple search in SE37 Txn by using the term SAP_WAPI_*.

I recently synced some old photos onto my ipod touch and they briefly appeared on google maps in geographical/time date order. Couldnt bring it back up after Id logged out. id like to be able to do it again, any suggestions?

I recently synced some old photos onto my ipod touch and they briefly appeared on google maps in geographical/time date order. Couldnt bring it back up after Id logged out. id like to be able to do it again, any suggestions?

Have you tried the following document, kohida?
[What to do when Windows displays a blue screen error message or restarts when syncing the iPhone or iPod touch|http://support.apple.com/kb/TS1502]

Recording actions like Macro ?

Hi,
Does labview has option to record actions like how we do it in Excel application?
Regards
Gopal

Hey DEV I think what he is talking about is will labview allow me to create a macro so that I can do the same thing over and over again. The answer is no. however i have seen some software on the Internet that will record repetive macro's (keystrokes really) so that you can do some of the functionality of a macro. But nothing to the caliber of what excel or word does. LV will run macro's for other applications such as excel or word but it does not have a built in way to do it on its' self.
Joe.
"NOTHING IS EVER EASY"

Where can I find a log of action center/security?

I have a message in Action Center under security that says it has found a malware on my computer.
Where can I find a log of which file and location it was?
It only states the malware-name. No location or filename.
Also note that this is not my antivirus (system center endpoint protection) who located the malware. And it was not the mrt.exe either. I checked that log and it is clean.

I don't have Win 7 right now, but in Win 8 you can check archived messages option on lect side when you browse to :
Control Panel\All Control Panel Items\Action Center
Can you check this ?
I don't think we have separate logging for action center.
Arnav Sharma | http://arnavsharma.net/ Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading
the thread.

I'm trying to make a AUTO slide show. I can select all the other actions like mouse clicks etc. but

I'm trying to make a AUTO slide show. I can select all the other actions like mouse clicks etc. but ON load will not work.
PLEASE HELP>
I do not know how to reload/reinstall "ADOBE" golive default actions. I'm using golive cs mac version and "ON LOAD" action. I can't select it when creating a golive action.....It converts it or something to a rollover..
How can I reistall basic adobe actions???
Is it a bug???
Is it a known issue???
Do I need something??
Am I missing something???
Thanks a bunch..
Kev

In article <[email protected]>,
[email protected] wrote:
> I do not know how to insert the auto slideshowaction as a head action item.
> The steps.
> Can you explain how to do it?
I just remembered I have a couple of screen snaps online to explain how
it's done:
1. place your base image and name it in the inspector
2. from the smart objects palette grab the head action item, the one
with a question mark in its upper, green half - the 2nd one from the
left. Drop that into the pages head section.
3. in the inspector set the action to run OnLoad and select the base
image that you named in the first step and set the other parameters.
This was done in the days of GL6, but not much had changed in GL CS.
Anyway you might also refer to GL's online help. It describes how to set
up all the actions that ship with GL.
Cheers Martin

Where to find determination log for actions

Hi,
PPF documentation says that the there are two kind of logs (determination and processing) available. Can someone point me to transaction code or report name to view the determination log for actions?

Hi ,
Report RSPPFPROCESS will give you the determination logs once selected actions are executed.
Shud solve ur requirement/.
Siva

Any Way To Perform A Recorded Action Like In Photoshop?

Basically, I want to make an html page that contains one image...very simple I want to make 144 of these pages though. So, I am wondering if there is a way to kind of like create an action like in Photoshop where I can record the steps of doing it one time and then have Dreamweaver repeat this 144 times upon playback. Anyone know if there is a way? Thank you.

You can create Commands from the History Panel.
1) Open History Panel (Shift+F10)
2) Select steps or group of steps (Shift or Ctrl+click).
3) Right click and Save As Command.
4) Saved Commands are displayed in the Commands menu for future use.
Commands are useful for things you do often but they are not a substitute for DWTemplates or dynamically populated site pages. When a site is bigger than 50 pages, you should be thinking dynamic instead of static.
Nancy O.
Alt-Web Design & Publishing
Web | Graphics | Print | Media Specialists
http://alt-web.com/
http://twitter.com/altweb

OS X 10.8: Actions like "about this mac", "force quit", "shut down" don't work at all (no response).

I just updated to OS X 10.8 and everything works good except those actions like "about this mac", "force quit", "shut down" not working (from apple logo left upper corner). There is no response at all after clicking on those actions. Anyone has the same issue?

You are not alone! I have been trying to find a work around since I updated to 10.8.
the only way to reboot my system is by cold booting.
cmd-alt-esc doesn't work
restart/shutdown/switch user doesn't respond
I'm going to try and reinstall 10.8. If that doesn't work, I'm going back to Lion until this is resolved

Message already in admin action

Hello,
One EO message is stuck (TBDL) in single stack PI version with below error, i thought removing user lock (from NWA -> User Sessions) will work and release the locks from the message but it didn't work.
Resending the message failed, due to: java.lang.Exception: Message already in admin action or locked by message version editor.
Not sure what else i can check? Any inputs will be appreciated.
Thanks
Amit Srivastava

Hi Amit,
So you did remove the locks under NWA-> Locks: Java Locks?
If that didnt work. I would suggest you stop the receiver channel and force the message into error. Did you also add a timeout on that channel?
The thing is what i have picked up with TBDL is that once it is stuck it is very difficult to get it going again. I normally force it into error(Restart the java stack or stop the channel untill error) and then i reprocess it. But i understand that would be your last options.
Hope it helps,
Jannus Botha

HT5129 I have multiple iPhoto albums, so this move is pushing thousands of pictures to each library. Wh doesn't this come with a "No, Thanks!" option since I've ALREADY ensured the MobileMe albums were captured? I've never seen Apple force an action like

I have multiple iPhoto albums, so this move is pushing thousands of pictures to each library. Why doesn't this come with a "No, Thanks!" option since I've ALREADY ensured the MobileMe albums were captured? I've never seen Apple force an action like this!
Worse - According to http://support.apple.com/kb/TS4328, "photos you published to MobileMe from your library may be moved from their original events into a new event called "From MobileMe"." - so the forced move has probably scrambled my events in every library. The 'fix'? Search for matching photos and if not found, copy and paste into the desired event. It will take DAYS for me to recover from this undesired and ill-considered forced action.

Load your backup from just before this and when you launch iPhoto click on learn more. Go back to iPhoto and in the iPhoto preferences remove all references to MM and do likewise in the system preferences
LN

Server admin beachballing like crazy

I just installed a clean 10.5 Server onto a secondary drive in our 2x867ghz MDD. This server doesn't do much, mostly Software Updates and Netboot. I set up with an advanced config and got everything running. The problem this time around is that Server Admin takes two minutes of beachballing to get to a different config screen. If I want to check on Software Update Server, it takes two minutes. I can check around within the tabs just fine, but trying to check the log or switching to any service outside of it means another extended wait. The little gear wheel in the lower right spins around as well. I fail to see what I could have done to cause this. It was like this right out of the box, so to speak. There's plenty of free RAM, too, and all updates have been run. Checking the console shows A LOT of this:
2/5/08 8:27:42 AM com.apple.launchd[1] (com.apple.dyld) Throttling respawn: Will start in 60 seconds
I recently ran this thing through a diagnostic wringer and didn't find any problems. Tiger Server has been running just fine. This is my second time trying to get Leopard Server to work, and it's going about as well as the first, just with different inexplicable bugs this time.
Oh, and SUS STILL doesn't give you any indication of it's download progress. It just sits there until it's finished. Thanks for that one, Apple. A progress bar of some kind would've taken minimal effort.

The solution for me was to fix the reverse DNS.
The server that provided the reverse DNS for the IP addresses for our server was down. This caused slow behavior with both Server Admin and Remote Access.
I'd call this an Apple bug. The applications should not stop simply because they can't do a reverse lookup.

ISE 1.3 - logging admin actions like CoA

Similar Messages

Maybe you are looking for