ISE Not Identifying AD Group Attributes when using Multiple ISE Servers

So we have multiple ISE Servers with differing personas. I was having an issue with our new ISE setup not identifying AD Group Attributes when using them in Authorization rules.
We have 2- 3395 appliances running Admin and Monitoring/Troubleshooting Personas and 2- 3395 appliances running as Policy server personas. We are running v1.1.1.268 with the latest two patches.
I was unable to pull Active Directory Group Attributes in any of my Authorization rules. After Resyncing all the boxes with the Primary Administration box I was able to do this. There is no bug listings for this occurance nor do we have Smartnet to call support for other reasons. I thought this might be useful to someone who is having the same issue and is unable to figure it out with TAC
-CC

Absolutely. All units said in-sync after setting their personas.
Here is our layout:
ISE-ADM-01 Admin-Primary, Monitoring-Secondary
ISE-ADM-02 Admin-Secondary, Monitoring-Primary
ISE-PDP-01 Policy Only
ISE-PDP-02 Policy Only
I synced one at a time starting with ADM-02. After completing the other two boxes. Active Directory Attribs were pulled down when using them in the Ext Group within my Authz rules.
-CC

Similar Messages

How can i set "Createdby" attribute When using Custom JheadStart Security

Hello
We do not use JASS for Authentication , please help us how can i set createtby attributes with jhs.username in application for any entity object?
thanks

See a similar question at History Attributes when using Custom Authentication Type

Drop down menus on iPad, the first selection in the drop down will not load as a selection when using safari, what can I do?

Drop down menus on iPad, the first selection in the drop down will not load as a selection when using safari, what can I do? I use this for my mobile, on-site auto repair business and not being able to call up repair and diagnostic info and reference for some cars is troublesome for sure. It works fine on the computer and I have installed a remote desktop app as a workaround but it is unreliable because the desktop is not business dedicated and may be off or in use at the time. So is there a known fix for this?
Let me paint a more descriptive picture, visualize 4 drop down selection menus, first one is for year, next one is for make, 3rd one is model and the last one is for engine size/type. If I wanted to choose a 2012 vehicle it wont work because it is the top selection on the list. This can be forced by selecting any other year and then coming back to 2012. Ok fine, but then let's say I wanted to choose Acura as the make, well it won't take it because again it's the top selection. Again you work around it be selecting any other make and coming back to Acura. Ok now select the model, same trend follows. But now since most Acura vehicles come with dedicated engines and no optional engines I have only 1 selection in that final drop down menu and it will not take my selection and therefore never let me proceed to the info I need.
This is also true when ordering parts from my wholesaler's website, they use drop downs and I can only get to that last drop down and then I'm stuck. This is blindingly frustrating, what options do I have. I'm not opposed to any avenue at this point.

Did you ever figure this out? I bought my iPad last week to use in my business as well. I assume you are trying to use alldata? That is where I noticed this same issue. I had problems with identifix working with safari but downloaded a different browser and that works fine. Alldata does not work with either browser. The main difference is that on identifix if there is only one engine selection, it automatically selects the only option and continues to the home page. With alldata you have to make the selection manually even if there is only one option. Honestly if I can't get this to work I am going to return the iPad as it looses a significant amount of usefulness to men

I am new to apple hardware, and since upgrading software on my iphone 4S I receive this message. "this accessory is not supported by this iphone" when using my clock radio docking station. Is there away around this?

I am new to apple hardware, and since upgrading software on my iphone 4S I receive this message. "this accessory is not supported by this iphone" when using my clock radio docking station. Is there away around this?

Hello GuynStPete,
Thanks for using Apple Support Communities.
I found the following support article that has some troubleshooting steps for you to follow in order to resolve this issue you're experiencing:
Resolve issues with iPhone, iPad, and iPod touch accessories
http://support.apple.com/kb/TS2634
Take care,
Alex H.

[svn] 1720: Bugs: LCDS-304 - Authentication not working in all cases when using security constraint with NIO endpoints .

Revision: 1720
Author: [email protected]
Date: 2008-05-14 14:50:06 -0700 (Wed, 14 May 2008)
Log Message:
Bugs: LCDS-304 - Authentication not working in all cases when using security constraint with NIO endpoints.
QA: Yes
Doc: No
Details:
Update to the TomcatLoginCommand to work correctly with NIO endpoints.
Ticket Links:
http://bugs.adobe.com/jira/browse/LCDS-304
Modified Paths:
blazeds/branches/3.0.x/modules/opt/src/tomcat/flex/messaging/security/TomcatLoginCommand. java

Revision: 1720
Author: [email protected]
Date: 2008-05-14 14:50:06 -0700 (Wed, 14 May 2008)
Log Message:
Bugs: LCDS-304 - Authentication not working in all cases when using security constraint with NIO endpoints.
QA: Yes
Doc: No
Details:
Update to the TomcatLoginCommand to work correctly with NIO endpoints.
Ticket Links:
http://bugs.adobe.com/jira/browse/LCDS-304
Modified Paths:
blazeds/branches/3.0.x/modules/opt/src/tomcat/flex/messaging/security/TomcatLoginCommand. java

I can't seem to use the 'Check seats' link on Delta when I use Firefox but Safari works fine. I get the message 'not available at this time' when using Firefox but when I go to Safari it works fine.

I can't seem to use the 'Check seats' link on the Delta Airlines site when I use Firefox but Safari works fine. I get the message 'not available at this time' when using Firefox but when I go to Safari it works fine. I love Firefox but this sucks!

That issue can be caused by corrupted cookies.
Clear the cache and the cookies from sites that cause problems.
"Clear the Cache":
*Firefox > Preferences > Advanced > Network > Offline Storage (Cache): "Clear Now"
"Remove Cookies" from sites causing problems:
*Firefox > Preferences > Privacy > Cookies: "Show Cookies"
*http://kb.mozillazine.org/Cookies

Cursor does not change to a circle when using eraser

Cursor does not change to a circle when using the eraser.
I'm sure it must be a tick box somewhere.
Its always been ok previously.

I had this same problem and was searching for answers. I also prefer using a circle instead of crosshairs. I hope you've figured it out by now, but, if you haven't, here is the answer (I am using Elements 9, but, it should work for other versions I think):
1. Open up Elements Editor, Click on Edit, Click on Preferences, Click on Display & Cursors.
2. Under Painting Cursors, select Full Size Brush Tip
3. (optional) - if you want crosshairs within your circle, then also select Show Crosshair in Brush Tip.
4. Click ok.
Now use the brush, and it should have a circle to use.
P.S. Sometimes if you have your Caps Lock key on, that removes the circle as well.

Why can I not set a member attribute when there is only one child below the member?

Why can I not set a member attribute when there is only one child below the member?The "member attribute" tab on the properties window of App Manager is grayed out. What am I forgetting?TIA,Craig Wahlmeier

Most likely because Essbase is creating an implicit share relationship between the two members, which is causing the association tab to be grayed out. Tag the parent member with the "Never Share" attribute and see if that fixes the problem.Regards,Jade-----------------------------------Jade ColeSenior Business Intelligence ConsultantClarity [email protected]

Playback not supported by http proxy when using Amazon instant video - what to do?

Message
playback not supported by http proxy when using Amazon instant video - what to do?

Settings > General > Reset > Reset Network Settings

USB mouse will not initialise on boot-up when used via Dynadock on Satellite Pro U200

The USB mouse will not initialize on boot-up when used via Dynadock on Satellite Pro U200. If the mouse is reseated on the Dynadock it works fine. I am using a Kensington Valuoptical USB mouse. I have tried alternative kensington mouse and had the same problem. Can anyone advise how to resolve this issue?

Hi Jeremy
Unfortunately I have no solution for your issue but it can also be some technical limitation. I am also interesting to buy such docking station and I would like to know if there is the same problem with external HDD or USB memory sticks.

Why is quicktime slower when using multiple mdat atoms

Hi,
I've been trying to generate a mov file and I noticed that the more mdat atoms I put in my mov file the more the file takes time to load on QuickTime, iTunes.
Even worst, on the iPhone the file takes more than 3 minutes to load.
If there are too many mdat atoms quicktime even says that the file is invalid ( error -2004 or -2002, I don't remember exactly).
Why is quicktime/iTunes slower when using multiple mdat atoms ?
Thanks,

Yeah! Problem solved: It's a QT issue.
Cause: Mac Update Software downloaded a faulty QT.
Solution: Download QT from Apple's QT site.
Great to have the Video back

MS Project Pro file on Project Server 2010 does not accept [No Group] selection when clicking on Group view

MS Project Server 2010 gives me the following error when I try to click on the [No Group] group:
Error message:
The group "" cannot be found. You tried to display a view that references a group that is not available.
Specify a different group for the view."
Note: When I look at the drop downlist for the Group on the View Ribbon, [No Group] appears in the Built-in section of the list. It also appears on the Organizer.

Michael W --
I have seen this error message several times when the project got corrupted due to drops in my network connection while the enterprise project was open. If memory serves me correctly, the method for resolving this problem is to use the Save For
Sharing feature. To do this, complete the following steps:
Add the Save for Sharing button to your Quick Access Toolbar, if you have not already done so previously. Use the Project Options dialog for this.
Open the project in question and click the Save for Sharing button.
In the Save for Sharing dialog, save the MPP file in a location where you can find it easily, such as your Desktop.
Close the MPP file and then reopen it.
Click File > Save As and then click the Save button.
Using this process, Microsoft Project will resolve the corruption in your project. Please let us know if this process works for you.
Dale A. Howard [MVP]

Label of attribute when used as View Criteria item with Bind Variable

I've a VO attribute used in a named search with this requirement:
The attribute provides has an optional View Criteria item that has a bind variable operand. The bind variable is in the WHERE clause. The attribute has an LOV. The choice list for the specified View Criteria item should display the label "Effective Release". However, in all other contexts, including the search results table and the dropdowns the user can optionally add in an advanced search, the label displayed for the attribute must say "Release".
In other words, the default label for the attribute should be "Release" in all but one context - which is that when the dropdown list for the viewCriteria item using the bind variable is displayed, the label should say "Effective Release".
Note that if the user moves to Advanced Search and selects adds the attribute as a search criteria, this latter usage should be labeled as "Release". (in this case, in other words, the dropdown that displays by default and has the bind variable operand is labelled "Effective Release", the one the user added in advance search is labelled "Release")
here is the View Criteria item source xml:
      <ViewCriteriaItem
        Name="ReleaseId1"
        ViewAttribute="ReleaseId1"
        Operator="="
        Conjunction="AND"
        Value=":v_ReleaseId"
        GenerateIsNullClauseForBindVars="false"
        ValidateBindVars="true"
        IsBindVarValue="true"
        Required="Required"/>I've experimented by putting "Effective Release" as the label for the bind variable as below. However, ADF does not use that value to display, it defers to the attribute value:
<Variable
    Name="v_ReleaseId"
    Kind="viewcriteria"
    Type="oracle.jbo.domain.Number">
    <Properties>
      <SchemaBasedProperties>
        <LABEL
          ResId="EFFECTIVE_RELEASE_LOV"/>
      </SchemaBasedProperties>
    </Properties>
</Variable>The reason for the requirement, if it matters, is that the View Criteria item with the bind variable ("Effective Release" queries a range of values using the analytic function rank(); the bind variable is in the WHERE clause. Otherwise, the dropdown that can be added in advanced search ("Release") looks for exact matches on the attribute value. So since the search functionality is different, the label should be different.
Am using 11g.
Thanks for your help.

Hi
I have found that when using validation type Key Exists and the VO is in the local application, then the bind variable is available in the Create Validation wizard. When I try and create a validator on a VO that is core to all my applications, then I put that VO into an ADF library, the bind variable parameter is not available for mapping to my entity object attribute, even though I can select the VO to create a view accessor from the ADF library.
Possible bug?

PL/SQL: ORA-22806: not an object or REF when Using Record in Package

Oracle Database 11g Enterprise Edition Release 11.1.0.7.0
I have declared a record type in my package
create or replace
PACKAGE MYPKG AS
TYPE MYREC IS RECORD (VAL1 varchar2(20), val2 date);
PROCEDURE display_error (pSQLERRM number);
PROCEDURE P_LOAD_DATA (pStartDate Date, pEndDate Date);
FUNCTION F_EPI(refno1 in NUMBER, refno2 in NUMBER) return MYREC;
END MYPKG;
--In My Package Body
FUNCTION F_EPI(refno1 in NUMBER, refno2 in NUMBER) return MYREC is
        F_param MYREC;
        BEGIN
        select myvarchar2, mydate into MYREC from MYTable
          where myrefno1 = refno1
          and myrefno2 = refno2
        Exception
          when others then
          display_error(SQLERRM);
          RETURN F_param;
        END F_EPI ;
PROCEDURE P_LOAD_DATA (pStartDate Date, pEndDate Date) IS
insert into atable(myvarchar, mydate)
select F_EPI(refno1,refno2).val1,F_EPI(refno1,refno2).val2 from tab2;
END P_LOAD_DATA;
I get errors
Error(187,7): PL/SQL: SQL Statement ignored
Error(225,7): PLS-00382: expression is of wrong type
Error(225,7): PL/SQL: ORA-22806: not an object or REF
When I compile the package.
When I try to call the function from SQL I get an Invalid datatype error.

Hi,
Before posting any query/plsql blocks, please ensure that you have written it clean and complete with less syntax errors. ( at least general syntax errors, you can avoid). Then somebody can have an interest to check your logical error.
About your posting, refer below solution step-by-step. It may help you, about what you are looking for? By the way, you must be knowing, what you are going to to do with. I haven't concentrated about your requirement; as it was not missing in your posting.
drop table test;
create table test(myvarchar varchar2(20), mydate date);
create or replace
    package mypkg as
      type myrec is record (val1 varchar2(20), val2 date);
      --procedure display_error (psqlerrm in number); -- if you are passing sqlerrm, then parameter needs to be string type
   procedure display_error (psqlerrm in varchar2);
      procedure p_load_data (pstartdate in date, penddate in date);
      function f_epi(refno1 in number, refno2 in number) return myrec;
   end mypkg;
Package created.
--in my package body
create or replace
package body mypkg as -- added
procedure display_error (psqlerrm in varchar2) -- if you are declared a proc/func in spec, it needs to define in pkg body
is
begin
     null; -- you should know, what to do here
dbms_output.put_line('Err -'||sqlerrm);
end display_error;
function f_epi(refno1 in number,refno2 in number)
return myrec
is
f_param myrec;
begin
   -- select myvarchar2, mydate into MYREC from mytable
-- where myrefno1 = refno1
-- and myrefno2 = refno2;
    select ename, hiredate into f_param from emp -- added demo logic by using emp
    where empno = refno1
     and mgr = refno2;
    return f_param; -- added
exception
   when others then
     raise; -- if you are using OTHERS then, just raise it
   display_error(sqlerrm);
   --return f_param; -- what is this?
end f_epi;
procedure p_load_data (pstartdate in date, penddate in date) -- you must be knowing the use of 2 params ???
is
    v_rec myrec; -- added
begin -- Added
   --insert into atable(myvarchar, mydate)
-- select f_epi(refno1,refno2).val1,f_epi(refno1,refno2).val1 from tab2;
   -- demo logic added with static params to call f_epi
   v_rec:= f_epi(7499,7698);
   insert into test values v_rec;
    --null;
end p_load_data;
end mypkg;
Package body created.
SQL> exec mypkg.p_load_data(null,null);
PL/SQL procedure successfully completed.
SQL> select * from test;
MYVARCHAR            MYDATE
ALLEN                20-FEB-81
Thanks!

Computer does not put itself to sleep when used in lid-closed mode

Hi. I'm having a small problem when using my macbook pro with the LED display, lid closed and with external keyboard and mouse. If I leave the computer unattended, the display goes to sleep at the time specified in system settings under energy saver. The computer, however, does not go to sleep - the white power indicator remains solid and noises for new email etc can still be heard.
I should probably just try to remember to put it to sleep manually but I keep forgetting. Does anybody know what settings I need to adjust?

I tried cycling the old battery many times, and the computer would still shut down unexpectedly instead of going to sleep when it ran out of power. I got a free replacement from the supplier [http://myworld.ebay.com/cbkusaelectronics>, but I have cycled this new battery twice now, and it still does not go to sleep when it runs out of power. The capacity of the battery is fine (4.9 Ah), and the timing calibration seems fine as well. I have two older batteries from NewerTech and they allow sleep every time, so I think my computer is fine. Can anyone enlighten me about the cause of this problem? Does my battery lack some 'sleep battery' cell in it for use after the other 4 cells discharge? Or does my battery lack a chip that communicates with the computer? Is there any hope of getting this battery to support sleep when discharged?
Has anyone else seen this problem consistently in a brand of battery? Does anyone have a recommendation for a cheaper battery that does not exhibit this problem? I have been happy with NewerTech, but they cost over $130.
(I only paid $44 plus $10 shipping, so I probably got what I paid for. It is maybe still worth it to have a high capacity battery for such a low cost, but I can't rely upon it in those last few minutes or I may lose work.)

ISE Not Identifying AD Group Attributes when using Multiple ISE Servers

Similar Messages

Maybe you are looking for