ISE guest access - can't match on Optional Data fields

Hi all
I need to have 2 different types of guest users that will get different level of access with DACL / Airspace ACL
I thought that best way to do that is simply matching one of optional data fields you can setup in Sponsor Portal
Unfortunately as soon as I reference Optional Data field in Authorization rule I get no match. Can't also match on username which would not help anyway.
getting redirected, login, getting redirected again etc.......
This is affecting both wireless and wired.
As soon as I remove that additonal condition from authz rule guest access works fine - getting redirected, log in, surf the internet.
Is this is bug with ISE that you can't match guest optional data fields?

Hi evnafets,
You were right. How silly I am didnt see that small thing- but STILL PROBLEM IS UNSOLVED.
[ore]
java.sql.SQLException: [Microsoft][ODBC Microsoft
Access Driver] Missing ), ], o
r Item in query expression 'Post_Date LIKE
to_date('04-06-2005',' dd/MM/yyyy''.
Like it says, you have a missing ")" character
rs=stmt.executeQuery("SELECT Name FROM
NoticeBoardTable WHERE Post_Date LIKE to_date('"+
date_str+"', 'dd/MM/yyyy' <--HERE NEED A CLOSING
BRACKET ");
When I did this it said to_date function is not available that because Ms-access doesn't have this function. Then I just changed the query to:-
rs=stmt.executeQuery("SELECT Name FROM NoticeBoardTable WHERE Post_Date LIKE "+ date_sql ); . Although it didnt generate any exception, but dont show any record.
But even better would be to use a prepared
statement.
String sql = "SELECT Name FROM NoticeBoardTable
WHERE Post_Date LIKE  ?";
PreparedStatement stmt = con.prepareStatement(sql);
stmt.setDate(1, date_sql);
ResultSet rs = stmt.executeQuery();
I had prepared statement in my final servlet, I made this one just to check why its not working on dates. Also on your advice I changed it to prepared statement. It runs fine but didn't show any record with date 04-06-2005 although I have it in my database (not generating any exception).
I print the sql date throuht servlet just to check , its showing 2005-06-04. May be its formate problem.
Thanks
Regards

Similar Messages

  • ISE Guest Access- Redirect to URL after successful logon

    Currently, when guest users attempt to browse they get redirected to the guest portal.  After login, they get a message that they can now access the original URL.  Is there a way to automatically redirect to the URL they were trying to access, or remember the URL after they login?

    ISE guest flow :
    The user associates to the web authentication Service Set Identifier (SSID).
    The user opens the browser.
    The WLC redirects to the guest portal (such as ISE or NGS) as soon as a URL is entered.
    The user authenticates on the portal.
    The guest portal redirects back to the WLC with the credentials entered.
    The WLC authenticates the guest user via RADIUS.
    The WLC redirects back to the original URL

  • WLC and ISE guest access COA

    We are migrating to ISE for guest access and are having problems with the COA being delivered after a successful authentication.  ISE attempts to send it but nothing changes on the WLC.  The message in ISE is Dynamic Authorization failed and a message that ISE didn't receive a response from the NAD, verify communication.  What is odd is the original guest request comes in from the IP address of the service port on the WLC but anything doing with the COA is seen from the management.  I have both IP's defined for the device in ISE.  I am about to do a session reauthentication within ISE and the WLC applies the changes.  I have verified that RFC 3576 is enabled, but the show radius rfc3576 stats shows no values.  The WLC is running 7.6.130.  I have attempted to debug on the WLC side to see if the message is even being delivered but non the debugs i have attempted seem to offer any good information.
    Anyone have any suggestions?  
    Thanks,
    Joe

    Hi Joe,
    I dont really know what you are trying to do with the COA , as it is used in the CWA solution and BYOD solution as well. But even before trying that , I would advise you to go step by step and solve the n/w issue first. You are able to see the request from service port which should not happen because then the incoming/outgoing traffic takes different path. You must be facing this situation as you might have some network routes matching ISE subnet/Ip address in the GUI>Controller>Network routes as there is no need of those routes. If the service port needs to be used during controller down scenario then use a laptop in the same subnet of Service port ip and connect to the service port.
    Regards
    Dhiresh
    **Please rate helpful posts**

  • ISE - Guest Access (without portal)

    Hi Guys,
    I have a customer who current is using the cwa portal for guest access. Corporate use will be added in the future sometime next year.
    Kit involved:
    5508 - Internal (Inside Net)
    5508 - Anchor (DMZ Net)
    ISE - Inside Net
    3600 APs
    Presently, guest user connects, anchored to DMZ 5508, issued IP address from server in DMZ and DNS redirect to the web portal from same server. guest logs in and internet access through ASA and then content filtering box.
    They want a solution whereby they do not have to use the portal for corporate user with their own devices such as ipads. I know BYOD is a possiblity but would involve using a CA server on the inside of the network. This is not something I'm keen as it opens a channel from the guest network directly to their AD infrastructure.
    I'm leaning toward PEAP authentication atm using a GoDaddy SSL cert that is already installed. This would bypass the portal system and only involve client devices being configured once.
    Is there any other option that would be simple to setup as this is on a limited timescale ?
    Cheers,
    Nick

    Nick,
    They want a solution whereby they do not have to use the portal for  corporate user with their own devices such as ipads. I know BYOD is a  possiblity but would involve using a CA server on the inside of the  network. This is not something I'm keen as it opens a channel from the  guest network directly to their AD infrastructure.
    If you are referring to supplicant provisioning, the scep enrollment request is proxied from ISE and the private key and cert is transferred to the endpoint. This doesnt require your guest network having direct access to AD....just to ISE.
    Tarik Admani
    *Please rate helpful posts*

  • Can Acrobat auto populate a date field upon digital signature of a form?

    We use several fillable forms with digital ID signature fields.  A business rule requires a date field next to the signature field.  Is it possible to define the date field to auto populate once the user signs the form?  I can't check this in Acrobat since I only have the reader.

    Hi,
    The short answer is yes, but of course you'll need to get Acrobat to edit the PDF file.
    Generically, here is what  you are looking to do:
    Open the Digital Signature Properties dialog
    Select the Signed tab
    Select the This script executes when the field is signed radio button
    Click the Edit button
    Add the code snippet below to the JavaScript editor
    Click the OK button on the JavaScript editor
    Click the Close button on the Digital Signature Properties dialog
    // JavaScript code to add the date at signing time
        var currentTime = new Date()
        var month = currentTime.getMonth() + 1
        var day = currentTime.getDate()
        var year = currentTime.getFullYear()
        var signingTime = day +"/"+month+"/"+year  //Modify into your preferred format
        var f = this.getField("Text1");  //Modify the field name as necessary
        f.value = signingTime;
    Good luck,
    Steve

  • Can't fill in a date field in matrix and UDO

    Hi
    I have created 2 usertables (docuemnt and documentlines) and I created an UDO of it and create a user def form.
    In the documentline table (data in the matrix), there are 2 date fields. I fill the dates in de dbdatasource of the matrix but in the database it remain a null value.
    following code line seems not to work
    oDBPIT_AUTSTOCK_DET_1.SetValue("U_DOCDATE", Row, docdate)
    After this line:
    oDBPIT_AUTSTOCK_DET_1.GetValue("U_DOCDATE", Row)
    returns an empty string.
    I did several tries: Let the docdate as DATE, or as string, even
    sboBOB.Format_DateToString
    seems not to work.
    How can I solve this problem, Has anyone a clue?
    Eddy

    Hello
    In order to learn how to fill UDO tables please refer to the following link:
    <https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes/sdn_oss_sbo_sd/~form/handler>
    Please note that the TableName.txt file should include all fields and not only (code, name and your user fields) as described in the document.
    The fields should be separated with tab.
    In the data lines you donu2019t need to put values in all the fields.
    Please refer to the attached text file as a sample.
    Best regards,
    Miki

  • Select -option Date field in MM/YYYY format!

    Hi.. Friends..
       Iam having DATE field as selection screen SELECT_OPTION parameter.
    And I am fetching records from one of my tables with where condition of this select-option.
    Now my reuirement is to modify that DATE select-option with 7 characters i.e. MM/YYYY
    So if user enters 09/2008 as DATE-LOW.. I have to fetch all records of September 2008.
    If user enters 09/2008(lower limit) and 02/2009(Upper limit)...
    I have to fetch records between... September 1st 2008 to 28th february 2009.
    What is the simplest way to impliment this?
    Thanks,
    Naveen.I

    Hi
    Use data element SPMON as in below code.
      TABLES: S001.
      DATA: l_year(4)  TYPE n,
            l_month(3) TYPE n,
            g_sdate TYPE sy-datum,
            g_edate TYPE sy-datum.
      RANGES: gr_pdate FOR sy-datum.
      CONSTANTS: lc_low   TYPE sy-datum VALUE '00010101',
                 lc_high  TYPE sy-datum VALUE '99990101'.
      SELECT-OPTIONS:   s_spmon  FOR  s001-spmon.
      l_year  = s_spmon-low(4).
      l_month = s_spmon-low+4(2).
    * Get the first day of PERIOD-LOW
      CALL FUNCTION 'FIRST_DAY_IN_PERIOD_GET'
        EXPORTING
          i_gjahr        = l_year
          i_periv        = 'K2'
          i_poper        = l_month
        IMPORTING
          e_date         = g_sdate
        EXCEPTIONS
          input_false    = 1
          t009_notfound  = 2
          t009b_notfound = 3
          OTHERS         = 4.
      l_year  = s_spmon-high(4).
      l_month = s_spmon-high+4(2).
    * Get the last day of PERIOD-HIGH
      CALL FUNCTION 'LAST_DAY_IN_PERIOD_GET'
        EXPORTING
          i_gjahr        = l_year
          i_periv        = 'K2'
          i_poper        = l_month
        IMPORTING
          e_date         = g_edate
        EXCEPTIONS
          input_false    = 1
          t009_notfound  = 2
          t009b_notfound = 3
          OTHERS         = 4.
      IF NOT s_spmon-low IS INITIAL.
        gr_pdate-low = g_sdate.
      ELSE.
        gr_pdate-low = lc_low.
      ENDIF.
      IF NOT s_spmon-high IS INITIAL.
        gr_pdate-high = g_edate.
      ELSE.
        gr_pdate-high = lc_high.
      ENDIF.
      IF NOT s_spmon-low IS INITIAL OR NOT s_spmon-high IS INITIAL.
        gr_pdate-option = 'BT'.
        gr_pdate-sign = 'I'.
        APPEND gr_pdate.
      ENDIF.
    " SELECT RECORDS
    " >>> SELECT field1 field2 FROM TAB1 WHERE erdat IN gr_pdate. <<<

  • Change Account Duration for ISE Guest User can not more than 5 days

    Extending guest account duration can not more than 5 days.
    On portal we can change it to more than 5 days, but the account always expired after next 5 days.
    Email notfication sent after change duration also said the account only have 5 days of duration.
    I'm using ISE 1.2 patch 2.

    Step 1 From the Cisco ISE Administrator interface, choose Administration > Guest Management > Settings > General > Purge.
    The Purge Settings page is displayed.
    Step 2 To schedule a purge operation, check the Enable purge settings for expired guest accounts check box.
    Step 3 Configure the following available options:
    a. Enter the purge interval, in number of days. Valid range is 1-365.
    b. Specify the hour of the day when the purge should occur.
    Date of last purge displays the date and time when the last purge operation occurred.
    Date of next purge displays the date and time when the next purge operation is scheduled to occur.
    Step 4 To immediately execute a purge of expired guest user records, click Purge Now.
    This executes a purge manually even if Enable purge check box is not checked. This option provides you the freedom to purge records whenever you seem fit.
    Step 5 Click Save
    Please check the point 3 find the value is so that it may engaged.

  • Cisco ISE - Guest Access With Google Chrome

    We've implemented the self provisioning guest portal/Guest SSID and it seems to work great for internet explorer, if a user uses Google Chrome to go through the setup the password is generated, they login and accept the terms and conditions, but then they get hung up on the WLC URL and then have to start self provisioning again.
    Any ideas?

    Please check the below browser requirements :
    Supported Operating Systems and Browsers for Sponsor, Guest, and My Devices Portals
    These Cisco ISE portals support the following operating system and  browser combinations. These portals require that you have cookies  enabled in your web browser.
    Table 8     Supported Operating Systems and Browsers
    Supported Operating System Browser Versions
    Google Android 1 4.0.4, 4.0.3, 4.0, 3.2.1, 3.2, 2.3.6, 2.3.3, 2.2.1, 2.2
    •Native browser
    Apple iOS 6, 5.1, 5.0.1, 5.0
    •Safari 5, 6
    Apple Mac OS X 10.5, 10.6, 10.7, 10.8
    •Mozilla Firefox 3.6, 4, 5, 9
    •Safari 4, 5, 6
    •Google Chrome 11
    Microsoft Windows 82
    •Microsoft IE 10
    Microsoft Windows 73
    •Microsoft IE 9
    •Mozilla Firefox 3.6, 5, 9
    •Google Chrome 11
    Microsoft Windows Vista, Microsoft Windows XP
    •Microsoft IE 6, 7, 8
    •Mozilla Firefox 3.6, 9
    •Google Chrome 5
    Red Hat Enterprise Linux (RHEL) 5
    •Mozilla Firefox 3.6, 4, 5, 9
    •Google Chrome 11
    Ubuntu
    •Mozilla Firefox 3.6, 9

  • 10.8 Server - AFP Guest access not working

    Hi Folks
    I have a brand new Mac Mini server running the latest 10.8.4 and Server.app from the app store (10.8 / v2 / whatever it's called these days).  I have everything up and running perfectly except that no matter what I do when users connect via AFP there is no option for them to connect as guest.  It literally just does not even show up in the login dialog.
    I have several AFP share points setup to allow guest access, I have enabled the option in System Prefs->Users and Groups->Guest User->Allow guests to connect to shared folders.  I have even also enabled it via command line tool; serveradmin settings afp:guestAccess = yes
    But no matter what I do any machines connecting (either via browsing to the server via finder and connecting or directly from "Connect to server" using the afp:// URI approach) the login dialog doesn't give us the option to select to connect as guest -- it's just not there at all in the dialog box.
    This is fairly urgent, a few more days and this server needs to go into production at our school here and this is essential for the way we need to do things.  A little more background information:  we are bound to both a local OD setup and a campus wide AD setup (not sure if any of this matters or not).
    Help and thanks!

    And I guess toggling File Sharing on and off about a dozen times it seems to have finally picked up and is allowing guest access to work :/  Answer my own question!

  • DQM for CRM --- Can the matching scores be customised?

    Hi All,
    We've integrated DS 4.0 to our SAP CRM using the DQM for SAP component. As the title say, I was wondering if we can customise the match score of the data flow "Job_Realtime_DQ_SAP_Name_and_Address_Match" to use other inputs other than "name, street range, street name and Postcode" as stated in [note 1418387|https://websmp230.sap-ag.de/sap(bD1lbiZjPTAwMQ==)/bc/bsp/sno/ui_entry/entry.htm?param=69765F6D6F64653D3030312669765F7361706E6F7465735F6E756D6265723D3134313833383726]?

    Hello,
    If you change the match scores/percentages in the job for the DQM for SAP product, this will then be overwritten by the match score that is passed when the job is kicked off from the SAP CRM/ECC.  So the answer from Pandeyji will not work as expected for this product - in order to change the matching for DQM for SAP you would either need to change the threshold when you run the Batch Match (/fldq/rsadrini) report in the Threshold parameter on the report.  See more information on this in the 3.14.1.1 To run the Initial Match Code (Index) Setup program secion of the latest DQM for SAP user's guide.
    If you want to change the threshold for the duplicate check (DES) interactive - you need to either set that when you activate the duplicate check index pools (this is depending on what system you are running CRM/ECC).  Check more about is in the 3.12 Activate duplicate check index pools secion of the latest User's Guide.  Or it needs to be set through the IMG settings as explained in the 4.9.1.1 Operating parameters used only by the CRM IC WebClient or CRM WebClient
    configuration.  What you need to do here is absolutely dependent on the version of SAP application you are running as well as the version of the DQM For SAP product you are on (all these things I am pasting in here are from the DQM for SAP 4.0 guide - the latest version).
    If you want to change the break keys that are created and in use for the DQM for SAP product, refer to the sections in the DQM for SAP user's guide on break keys and how they work in DQM for SAP:
    7.2 Break keys (match codes)......................................................................................................91
    7.2.1 Understanding break keys (match codes) and data fields.......................................................92
    7.2.2 To change the match code (break key)...................................................................................93
    7.2.3 Configuring the break key settings.........................................................................................94
    7.2.4 Match on name data..............................................................................................................97
    You also may want to check the section on Using the Break Key Profiler.
    Hope this helps!
    Thanks,
    Denise
    SAP AGS

  • Can a today's date be added in a date field when the submit button is pressed?

    I created a form with a submit button and the form is sent via email.  Can the date when the form is submitted show up in a date field with the button is pressed?
    Any help with this is much appreciated. Thanks.

    Hi,
    there is a preSubmit event for form objects you can use.
    Select your date field, open the script editor and add this script (language is FormCalc) into the preSubmit event.
    $ = num2date(date(), "MM/DD/YYYY")

  • Can I get rid of dates in Blog?

    I want to use the blog pages for a photo blog - and I don't want the dates of postings to show because that is irrelevant to the photos...in iWeb 1.2 I could substiutute text for the date in the blog and the text would show up on the summary pages and archive. With iWeb 2.0, although I can substitute text for the date field of an entry (e.g. the location of the shot), on the summary pages it seems to insist on showing the date/time of the posting. There seems to be no way to delete this field or turn it off: the best I have been able to do is get it to show only a time (e.g. 12.00 AM) - but that seems naff.
    Anyone able to tell me how to either remove the date/time field altogether, or substitute text for it?
    Thanks

    Anyone?

  • ISE 1.2 Guest Access for EAP(Dot1x) Authentication

    Hi.
    I want to use encryption for guest access. 
    In order to use the "RADIUS-NAC" in the WLC, you can not use or "Open + MAC" only "WPA + dot1". 
    (Specification of the WLC) 
    When the "Open + MAC", return from the ISE at the time of the "Web Authentication" in the "Session-Timeout Attribute", I was able to forcibly disconnect the radio. 
    (Attribute is the same value as the (ISE TimeProfile) time the guest user can use) 
    If you connect to a wireless terminal to forced disconnect after screen of Web authentication is displayed, you can not login. 
    (Because the account has been revoked) 
    I want to make even dot1x this environment. 
    However, because it becomes the "re-authentication time" If dot1x, as long as the terminal is connected to the radio, it is not cut. 
    In addition, even in the setting of "Attribute Termination-Action = Default", does not return until the Web authentication. 
    (Status of the WLC remains "Auth Yes") 
    (Session of the ISE remains "Started") 
    Use the (EAP) Dot1x, Can I "is allowed to forcibly disconnected," "to match the time of TimeProfile" in the same way as "Open + MAC" thing? 
    Thank you.

    Note:
    Cisco ISE:Version1.2.0.899-8
    Cisco WLC(5508):Version 7.6.120

  • ISE to do wireless network guest access services

    Hi Forumers'
    I need to know how WLC can support ISE guest management in wireless mode.
    Tested and confirm by Cisco SE, Knowing that WLC currently does not support dynamic VLAN authorization for central web authentication. This limitation will be addressed in WLC 7.2 when MAB and CWA support is added to the code. On the other hand, DACLs on the other hand works and we can use that to restrict access of this guest traffic.
    So, option now is
    1. Can ISE support on WLC LWA guest access provision? This able to view guest user login and show at ISE monitoring.
    thanks
    Noel

    What you don't have at the moment with ISE and WLC is :
    -dynamic vlan asisgnement for webauth
    -the double-authentication (provoked by Radius CoA) required for central web authentication.
    For the rest, all is ok I think. So Local web authentication is supported. Either the webauth is handled by the WLC or you configured it as external on the WLC and the ISE acts as a guest portal.
    Guest users will be the guests you create on ISE, monitoring will happen etc ...

Maybe you are looking for

  • Have a problem in Photo Elements 4

    I am trying to make a 4fold greeting card, opening like a book.  I have placed a photo on the front, and written text for the inside which was placed on the right hand side of the inside.  I would also like to place text on the left hand inside page,

  • Overdrive & Light Rays in 5.1.4 - not supported in HD

    Was finishing a TV special in HD and these lovely new effects were used liberally. Problem was, my Kona couldn't render them in HD! Anyone else run into this problem? It was solved by exporting the needed media at DVCPRO HD 720 24p, then re-importing

  • Configuration of form and prog name for  Invoice(MM)

    Hello, Can someone tell me the output type and configuration area/transaction from where i can change the form and the program name for the invoice(MM) Thanks, Shehryar

  • [Feature Request] Resetting caretPosition on JTextComponents after change

    Here's another small feature request: Insert this line:       ((JTextComponent) getControl()).setCaretPosition(0);in JUTextFieldBinding.setValueAt() after setting the new text in the bound textfield. (would be line 180 in my case) Previously, if you'

  • Time Capsule v NAS drive

    I'm currently using a LaCie 2gb RAID NAS drive as a Time Machine backup for a MacPro, MacBook Pro and MacBook Air. The laptops don't always find the NAS drive automatically, and I end up with corrupted sparsebundles. Would a Time Capsule do a better