ISE web login Issue.

Hi all:
     Here is the scenario.My ISE is a vmare version,and works normal,now here comes an issue, my computer can't login the ISE web interface.
The other computer can login the ISE web interface.
     I think it maybe the cert's issue,cause when I login the web interface,the website give me the vmare's cert, but I think It should be my AD's cert.
     Any help or suggestion will be appreciated.

There is the problem in the browser you are using. So please remove all the pre added certificate from your browser and try to connect to ISE using HTTPS. ISE will issue a certificate to you. Add this certificate and you will get the GUI of ISE.
(Remove certificate from browser: tools --> options --> content --> certificates --> remove then restart it.)

Similar Messages

AOL Mobile Web login issues

Is anyone having trouble logging into AOL on the Mobile Web? I have been trying for a week ? I cannot get on? Please let me know if anyone else is having issues with this - Thanks!!

Ok tried it stilll does not work. I can get into the Mobile Web just need AOL I have not been able to log since last Wed. Hope you get my reply - please let me know if you do. ( I have done option 1 since another Verizon Rep had me do that) This has happened before - but never for this long. I know my AOL account is fine since I have been logging from my PC.

WEB Login on ISE

Hi all,
I have an issue with my ISE's. I currently have 2 VM's set up in a ressiliant pair. I am able to SSH to both of them fine but when I try and load the web login it gives me page can't be displayed. I have checked all firewalls to make sure port 443 is open. I have proved connectivity by telneting to the ISE's on port 443 but still the page will not show.
Any ideas?
Cheers
Anthony

Hi Aevans,
Can you please let us know which version of ISE is deployed in your environment.
Can you please login to CLI and check the services of Primary ISE. The command to be used is
"show application status ise"
For example :
node1-poda/admin# show application status ise
If services are not running please use "application start ise" to start the services.
node1-poda/admin# application start ise

Cisco ISE Web interface Login

Hi,
Can anyone help me in resetting the Cisco ISE web interface password. I'm able to login to CLI of ISE but couldnt use the same credentials to login to web interface. Is there any way to reset this web interface password through ISE CLI?
Thanks
Daniel

Daniel,
Just ran across your question, the answer is you can have login credentials for the cli but that is seperate from the gui. The way I understand it is once you get to the gui for the first time user is admin and password is cisco. At this point you are required to put in a new password. Once in the gui other users can be created for the gui.
Erik

Ovi Download and Login Issue

"Ovi Download and Login Issue" i have nokia 5530xm, I am unable to login through ovi app it says sign in failed check your username and password. And when i browse the web it logs in but when itry to download it take back to main page. Please light on this issue. Thanks for help.
If you like my post or think it was useful then please hit the star button. Thanks :-)

now whenever i plug in my ipod to sync i get an offer to download and install or just download a something for itunes that i am not quite sure what it is.
hmmm. can you post a screenshot of the box containing the offer?
there's instructions on how to do that in the following user tip:
hudgie: Taking screenshots to help with problems

ISE max-login-ignore-identity-response

Hi forumers'
Greeting, I had a question regarding ISE login identity response.
In my POC deployment, i'm using a single testing domain user account at the testing Active Directory. I able to login to the testing's secure network using the same user credential over normal workstation and handheld device (Ex: iphone, ipad etc), SIMUTANEOUSLY.
How do i can strengthen the authorization policy where
1. ISE max-login identity response only allow to 2 concurrent connectivity on maximum one user per workstation and/or handheld device.
example:
AD user-A conencting to 1 unit of workstation and 1 unit of iPhone at the same time. If user-A trying to connect another iPad this time should make the connection fail.
Can i fine tune and strengthen on this, thanks
Noel

I have had the same issue, the fault is caused by the time zone in the sponsor groups being set by default to UTC, so if you are in London the accounts wont become available until UTC time. The best practice is to add a local time zone and remove UTC at initial configuration
To resolve this create a new local time zone in Guest Access>Settings>Guest Locations and SSIDs then under Guest Access>Configure>Sponsor Groups amend the time zone properties in each sponsor group
One other problem is if you do not remove this at initial configuration you don't seem to be able to get rid of UTC, not really an issue unless you forget when creating new sponsor groups

WLC 2504 - French characters for guest web login page

Good day,
I have recently installed a WLC 2504 and I have the following issue:
When I modify the text for the web login page (Under security/Web Auth/Web Auth page), if I use french caracters such as (é, è, à, etc...) in the message body, it does not show up correctly on users computers. As we're a bilingual country, I must put a bilingual text message. Are there any settings or workaround out there to rectify this?
We're on version 7.2.103.0
Thanks,
Eric

Thanks Scott, I'll have a look at the documentation.
Right after sending this post, I tried typing the actual HTML code for the character instead and it seems to be working. I'm curious about custom webauth page, we may be able to customize it more than we thought we could do.
Cheers,
Eric

DRM login issue

Hi Experts,
I installed Hyperion DRM 11.1.2.1 in Windows 2008 server.
Created the DRM Schema and the objects using the generated scripts.
I have entered the repository admin ID(DRM_DB in my case) and password and saved the configuration.
Test connection is successful.
I can start and stop the application.
I can also open the URL: http://localhost/drm-web-client/Logon.aspx.
But when I am entering the admin ID and password, it is saying DRM-61025:unable to create user session. Reason: Login failed. Invalid username or password.
Please help if you have faced this problem. Let me know if you need more information.
Thanks,
NS

Hi,
DRM user login issue
Please go through the above URL and the solution, hope it will solve the issue.
Thanks

Business Objects XIR2 Infoview login issue

Hello -
I have a typical issue with BO Infoview login screen where the system name is showing incorrectly. The value should be coming from the configuration from web.xml file but it shows a totally different name with no option to update it. I checked the windows registry and system valiarbles but I haven't found anywhere on the system. Any ideas where this value is coming from ? Thanks.

Thanks Denis. I see that the login issue has been resolved, but I noticed a different error when I login and logout from CMC. Here's the error message... not sure if this is connected to the previous one.
D:\Program Files\Business Objects\Tomcat\work\Catalina\localhost\jsfadmin\org\apache\jsp\adminPages\Common\PreLogoff_jsp.java:78: as of release 1.5, 'enum' is a keyword, and may not be used as an identifier
(try -source 1.4 or lower to use 'enum' as an identifier)
while (enum.hasMoreElements()) {
^
An error occurred at line: 17 in the jsp file: /adminPages/Common/PreLogoff.jsp
Generated servlet error:

Login issues with Mobile Theme 50

Hi All,
I have an APEX 4.2 application (Mobile Theme 50) which is running on Oracle 10g and is being accessed via iPads. Whenever you exit out of the application by clicking on the iPad button and go into any other App, Mail, Calendar etc, you are forced back to the login page, rather than allowing the user to continue from where they were . We have other APEX applications using a desktop theme that will happily let you check your mail and when you swap back to Safari your session is still there and you can continue on from the page you were on when you left.
Authentication is a requirement, but I was hoping that once they login and the session hasn't timed out, that they would be free to move about the iPad without having to login again.
Are there any setting or changes that can be made to change this behaviour?
Cheers
Mike

Hello,
Hi Mahmoud, sorry I haven't had time to build a sample app, I might be able to knock up a sample this evening.
This appears to be an iPad specif problem. Tested it on a Samsung and it is fine. There is also one other subtle difference on the iPad itself, that is when you save the URL as a bookmark it always opens within Safari so you can open other apps, then go back into the apex app within Safari and your session is happily running. If you save the URL to the Home screen it opens in a full screen mode (with no minimise options) and you cannot jump out of it unless you are ready to login again.
After a bit more Googling I found that in the default Page Template for Theme 50 it has the following Meta Tag in the Header.
<meta name="apple-mobile-web-app-capable" content="yes" />
From what I can gather this will default the application to run in full screen mode.
I made a copy of the page template and removed this tag and it now always runs within Safari. (After removing the link from the iPad home screen and creating a new one....Some odd cache problems seem to happen)
It would be good to have the full screen mode running as it looks neater and obviouly gives you a bit more screen real estate, but removing the meta tags appears to solve the constant login issues....Our users can decide which they prefer.
Cheers
Mike

Add Web content into ISE Web Server?

Hello,
We use Cisco ISE 1.2.0.899 on our network.
We would like to add a Web based documentation about Guest Portal ("how to find MAC Address", "how to release/renew IP Address"...) on our network to help users.
Idealy we would like to host these data on the Web server integrated to ISE (which already hosts Guest/Sponsor Portals).
Does ISE allow that?
Unregistered users (or not already profiled devices) are automatically redirected to the Guest Portal, but we would like they're able to access to this documentation (hosted on ISE Web Server or another Web Server).
How can we set that? By not using port 80 to access to this documentation?
Which elements does ISE identify to redirect browsers to the Guest Portal? Is it port 80, http protocol or other?
Regards,
Chris

Thanks Marvin.
I've checked this guide, I may have misunderstood, but I've seen how to customize built-in content only, and not how to add our own content.
We've created our own documentation (html files), and we would like that our users can access to it when they are using the Guest Portal.
We thought add the documentation URL on the "Guest Portal Login", to open it in a pop-up or new window.
Can we host these documentation files on ISE Web Server (apache)?
Or do we have to host them on a separate server?
Because unregistered users/devices are automatically redirected to the Guest Portal, we would like to know how to allow users to access to this online documentation without the documentation pages are also redirected to the Guest Portal?
Thanks for your help,
Chris

Web Login Page - User Password Bug - 11.1.2.1

This may be covered in one of the thousand readme documents or elsewhere; however, I thought I'd share this here just in case it isn't or you don't want to search various PDF documents.
We recently had a user complain that he could not login to FDM anymore. He used to be able to login with no issues; however, recently it would not let him in.
To rule out system issues, we checked the following:
- Verified others could authenticate FDM with no issue (OK)
- Verified account unlocked in Active Directory (OK)
- Tested logging in to FDM on other machines (Fail on all machines ruling out cookies, browsers, etc)
- Checked Shared Services provisioning (To ensure he was indeed still provisioned for FDM)
- Attempted logging in through Workbench (Failed, but good fail. Did not state unable to authenticate, but properly noted he was not an Admin and therefore could not use Workbench. Wonder why it "works" here but not web....)
Since it was obviously not some type of system/account issue, we then checked:
- What end user changes happened recently? (Password change)
As the only recent change was the user's password change, I asked the user what the password changed to. The new password was pretty vanilla, though I did notice one potential issue in that it including the & character.
As many here will note, the & character doubles as a concatenation character in VB/VBscript. As programs should be escaping any strings they attempt to process, this should not matter; however, if FDM isn't properly escaping via the web login page this may be causing the issue. After resetting the user's password without the & character, everything worked fine.
So the moral of the story here is that apparently the FDM web login code behind doesn't escape the password string. The bad part is that it may prevent someone from logging in. The worse part is that this is a potential security problem since it may lead to code injection attacks.
If you want to prevent end user issues, you may want to remove the & character from your domain's password policy.

You may also be interested to know that using special character in the internal administrator id will cause issues on 11.1.2.1 and 11.1.2.2 actually documented the characters you should NOT use. See http://docs.oracle.com/cd/E17236_01/epm.1112/epm_deploy_guide_1112200.pdf
I have also seen issues with the internal admin password when it was > 25 characters which caused the shared services migration utility to fail.
The moral of the story is "secure" passwords dont' always play well with software. Which I could see being a problem in the 1980's. With the advent of Unicode and it's ilk it's sad to see that arbitrary text is not properly escaped. I know I"m ranting to the choir though Charles ;).
Regards and Happy New Year!
John A. Booth
http://www.metavero.com

Lync 2013 login issue

we are facing an issue with Lync 2013, while trying to login. it says DNS error.. But here we have not hosted any DNS server or Domain server in our environment, the Lync we are using is provided by our client. Adding, facing the same login issue with my
home pc too. Kindly assist.
Error:
" Lync couldnt find a Lync server for XXXXXX. there might be an issue with the DNS configuration for your domain. Please contact your support team.
Thanks
Sugadev K

You must have external DNS which is published to allow External users log in to lync from home.
For all clients except for the Lync Windows Store app During DNS lookup, SRV records are queried and returned to the client in the following order:
lyncdiscoverinternal.<domain>   A (host) record for the Autodiscover service on the internal Web services
lyncdiscover.<domain>   A (host) record for the Autodiscover service on the external Web services
_sipinternaltls._tcp.<domain>   SRV (service locator) record for internal TLS connections
_sipinternal._tcp.<domain>   SRV (service locator) record for internal TCP connections (performed only if TCP is allowed)
_sip._tls.<domain>   SRV (service locator) record for external TLS connections
sipinternal.<domain>   A (host) record for the Front End pool or Director, resolvable only on the internal network
sip.<domain>   A (host) record for the Front End pool or Director on the internal network, or the Access Edge service when the client is external
sipexternal.<domain>   A (host) record for the Access Edge service when the client is external
Verify that you configure DNS correctly as exist in below link
http://technet.microsoft.com/en-us/library/gg398758.aspx
http://expertslab.wordpress.com/2014/04/09/internal-and-external-dns-for-lync-and-phone-edition-devices/
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali

Login issue in OIM11g due to oim credsmap error

We have OIM 11gR2PS1 installed on unix box. We have AD connector 11.1.1.5.0 installed on it .Also,peoplesoft recon connector PSFT_ER-11.1.1.5.0 is installed
In our scenario,we have webservice code in which using recon event we are creating users in OIM environment
This is hosted on same OIM server unix box.Inside webservice code we have refred oimclient.jar file to work with OIM APIs and Recon Service class.
When i tested webservice for first time it was unable to load OIM API classes as it was unable to find oimclient.jar in classpath.
So to resolve this issue i kept oimclient.jar in location- "WL_HOME/server/lib/" and also added following entry in setDomainEnv.sh to load oimclient.jar explicitly in classpath
CLASSPATH="WL_HOME/server/lib/oimclient.jar:${CLASSPATH}"
export CLASSPATH
and made entry in system-jazn-data.xml present in DOMAIN_HOME//config/fmwconfig/ as :
<grant>
            <grantee>
                <codesource>
                    <url>file:${domain.home}/servers/oim_server1/stage/*</url>
                </codesource>
            </grantee>
            <permissions>
   <permission>
               <class>oracle.security.jps.service.credstore.CredentialAccessPermission</class>
                     <name>context=SYSTEM,mapName=oim,keyName=*</name>
                     <actions>read,write</actions>
    </permission>
            </permissions>
        </grant>
After this change, webservice was working as expected and OIM related things were working fine.
But,when we tried to run schedule task "Active Directory Group Lookup Recon" for AD, we are getting error message as :
java.lang.LinkageError: loader constraint violation: loader (instance of com/thortech/xl/dataobj/tcADPClassLoader) previously initiated loading for a different type with name "com/thortech/xl/dataaccess/tcDataProvider"
So,to resolve this AD schedule task issue,we rolled back changes made for webservice in setDomainEnv.sh and system-jazn-data.xml file
and removed explicit classpath entry line of oimclient.jar from setDomainEnv.sh
But after restrating all admin and managed servers,we are currently facing issue in logging into OIM idenity/syadmin or design console with xelsyadm credentials
we have never made any changes of password for xelsyadm account or not made any change in any authenticatorproviders in weblogic console
we tried everything form reverting all changes to original setup without webservice or peoplesoft listener implementation
removed all explicit classpath entries or grant entry for oim credsmap from system-jazn-data.xml.
But still same issue persists
Any helpful suggestion is appreciated on this ASAP.
issue logs are:
TaskFlow Registration: TaskFlowDeployerThread.registerTaskFlowWithTask - Error while setting task display, this can happen with app loading issue, trying to load for 2
<Nov 11, 2013 11:24:20 PM EST> <Warning> <oracle.soa.services.workflow.worklist> <BEA-000000> <<.> Error while setting task display, this can happen with app loading issue, trying to load for 2>
<Nov 11, 2013 11:24:24 PM EST> <Error> <XELLERATE.ACCOUNTMANAGEMENT> <BEA-000000> <Class/Method: tcDefaultDBEncryptionImpl/initKeyStore encounter some problems: access denied ("oracle.security.jps.service.credstore.CredentialAccessPermission" "context=SYSTEM,mapName=oim,keyName=.xldatabasekey" "read")
java.security.AccessControlException: access denied ("oracle.security.jps.service.credstore.CredentialAccessPermission" "context=SYSTEM,mapName=oim,keyName=.xldatabasekey" "read")
at java.security.AccessControlContext.checkPermission(AccessControlContext.java:372)
at java.security.AccessController.checkPermission(AccessController.java:559)
at oracle.security.jps.util.JpsAuth$AuthorizationMechanism$3.checkPermission(JpsAuth.java:458)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:518)
at oracle.security.jps.util.JpsAuth.checkPermission(JpsAuth.java:544)
at oracle.security.jps.internal.credstore.util.CsfUtil.checkPermission(CsfUtil.java:643)
at oracle.security.jps.internal.credstore.ldap.LdapCredentialStore.containsCredential(LdapCredentialStore.java:214)
at oracle.iam.platform.utils.config.OIMPrivilegedExceptionAction.run(CSFCredentialProvider.java:236)
at java.security.AccessController.doPrivileged(Native Method)
at oracle.iam.platform.utils.config.CSFCredentialProvider.getPassword(CSFCredentialProvider.java:79)
at oracle.iam.platform.utils.config.standalone.StandAloneCryptoConfig.getPassword(StandAloneCryptoConfig.java:76)
at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.initKeyStore(tcDefaultDBEncryptionImpl.java:67)
at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.getCipher(tcDefaultDBEncryptionImpl.java:96)
at com.thortech.xl.crypto.tcDefaultDBEncryptionImpl.encrypt(tcDefaultDBEncryptionImpl.java:193)
at com.thortech.xl.crypto.tcCryptoUtil.encrypt(tcCryptoUtil.java:118)
at com.thortech.xl.crypto.tcCryptoUtil.encrypt(tcCryptoUtil.java:275)
at oracle.iam.platform.auth.impl.Authenticator.encrypt(Authenticator.java:188)
at oracle.iam.platform.auth.impl.Authenticator.authenticateWithPassword(Authenticator.java:161)
at oracle.iam.platform.auth.impl.Authenticator.authenticate(Authenticator.java:134)
at oracle.iam.platform.auth.providers.wls.OIMAuthLoginModule.login(OIMAuthLoginModule.java:46)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor951.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at javax.security.auth.login.LoginContext.invoke(LoginContext.java:784)
at javax.security.auth.login.LoginContext.access$000(LoginContext.java:203)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:698)
at javax.security.auth.login.LoginContext$4.run(LoginContext.java:696)
at java.security.AccessController.doPrivileged(Native Method)
at javax.security.auth.login.LoginContext.invokePriv(LoginContext.java:695)
at javax.security.auth.login.LoginContext.login(LoginContext.java:594)
at com.bea.common.security.internal.service.JAASLoginServiceImpl.login(JAASLoginServiceImpl.java:113)
at sun.reflect.GeneratedMethodAccessor961.invoke(Unknown Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at com.sun.proxy.$Proxy16.login(Unknown Source)
at weblogic.security.service.internal.WLSJAASLoginServiceImpl$ServiceImpl.login(WLSJAASLoginServiceImpl.java:89)
at com.bea.common.security.internal.service.JAASAuthenticationServiceImpl.authenticate(JAASAuthenticationServiceImpl.java:82)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at com.sun.proxy.$Proxy34.authenticate(Unknown Source)
at weblogic.security.service.WLSJAASAuthenticationServiceWrapper.authenticate(WLSJAASAuthenticationServiceWrapper.java:40)
at weblogic.security.service.PrincipalAuthenticator.authenticate(PrincipalAuthenticator.java:338)
at weblogic.servlet.security.internal.SecurityModule.checkAuthenticate(SecurityModule.java:252)
at weblogic.servlet.security.ServletAuthentication.login(ServletAuthentication.java:466)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at oracle.idm.common.login.SignInBean.handleWeblogicAuthn(SignInBean.java:131)
at oracle.idm.common.login.SignInBean.doLogin(SignInBean.java:97)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.sun.el.parser.AstValue.invoke(AstValue.java:187)
at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:297)
at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:53)
at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1256)
at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:183)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
>
<Nov 11, 2013 11:24:24 PM EST> <Error> <OIM Authenticator> <BEA-000000> <Error encrypting password>
java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at oracle.idm.common.login.SignInBean.handleWeblogicAuthn(SignInBean.java:131)
at oracle.idm.common.login.SignInBean.doLogin(SignInBean.java:97)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:57)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:606)
at com.sun.el.parser.AstValue.invoke(AstValue.java:187)
at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:297)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at oracle.dms.servlet.DMSServletFilter.doFilter(DMSServletFilter.java:139)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.RequestEventsFilter.doFilter(RequestEventsFilter.java:27)
at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.wrapRun(WebAppServletContext.java:3730)
at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:3696)
at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:321)
at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:120)
at weblogic.servlet.internal.WebAppServletContext.securedExecute(WebAppServletContext.java:2273)
at weblogic.servlet.internal.WebAppServletContext.execute(WebAppServletContext.java:2179)
at weblogic.servlet.internal.ServletRequestImpl.run(ServletRequestImpl.java:1490)
at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)
Caused by: javax.security.auth.login.FailedLoginException: [Security:090304]Authentication Failed: User xelsysadm javax.security.auth.login.FailedLoginException: [Security:090302]Authentication Failed: User xelsysadm denied
at weblogic.security.providers.authentication.LDAPAtnLoginModuleImpl.login(LDAPAtnLoginModuleImpl.java:261)
at com.bea.common.security.internal.service.LoginModuleWrapper$1.run(LoginModuleWrapper.java:110)
at java.security.AccessController.doPrivileged(Native Method)
at com.bea.common.security.internal.service.LoginModuleWrapper.login(LoginModuleWrapper.java:106)
at sun.reflect.GeneratedMethodAccessor951.invoke(Unknown Source)
at com.bea.common.security.internal.utils.Delegator$ProxyInvocationHandler.invoke(Delegator.java:57)
at com.sun.proxy.$Proxy34.authenticate(Unknown Source)
at weblogic.security.service.WLSJAASAuthenticationServiceWrapper.authenticate(WLSJAASAuthenticationServiceWrapper.java:40)
at weblogic.security.service.PrincipalAuthenticator.authenticate(PrincipalAuthenticator.java:338)
at weblogic.servlet.security.internal.SecurityModule.checkAuthenticate(SecurityModule.java:252)
at weblogic.servlet.security.ServletAuthentication.login(ServletAuthentication.java:466)
... 72 more

Hi All,
I have tried out option of adding authwl.conf in java argument as mentioned. But,still same issue persists. I think it will be same whether we refer authwl.conf file from OIM_ORACLE_HOME/server/config or OIM_ORACLE_HOME/designconsole/config/ location.
We havent made any changes in USR table for xelsysadm user
Even system-jazn-data.xml is intact.
Actually,when i removed following classpath entry from setDomainEnv.sh file
CLASSPATH="WL_HOME/server/lib/oimclient.jar:${CLASSPATH}"
export CLASSPATH
Its working fine and i am not facing any login issue in OIM console.Also the Active Directory connector scheduled task are running fine without giving earlier error whic is becaus of explicit classpath addition in setDomainEnv.sh.This error was
java.lang.LinkageError: loader constraint violation: loader (instance of com/thortech/xl/dataobj/tcADPClassLoader) previously initiated loading for a different type with name "com/thortech/xl/dataaccess/tcDataProvider" .
This error was arising since i have explicitly mentioned oimclient.jar again in classpath and as OIM server also will load it at OIM server startup time. So it was finding two instance of tcDataProvider and was not able to decide to refer to which one of them.
But, I have to refer oimclient.jar in my webservice code to work.If we dont add classpath entry explicitly for oimclient.jar then it will throw error..that it is unable to load OIMClient class.
Webservice is deployed in OIM serveer . Is there any other way by which i can refer oimclient class in webservice code without causing this classpath conflict issue. ?
Also.is it correctthat for first time when we load Classpath explicitly like i did in my scenario,then it will always try to refer same classpath for that jar always.
For ex: in my env i made changes in setDomainEnv.sh and modifed classpath enrty as :
CLASSPATH="${OIM_ORACLE_HOME}/server/client/oimclient.jar:${CLASSPATH}"
export CLASSPATH
but this time it will start throwin the exception as :
<Nov 11, 2013 11:24:24 PM EST> <Error> <XELLERATE.ACCOUNTMANAGEMENT> <BEA-000000> <Class/Method: tcDefaultDBEncryptionImpl/initKeyStore encounter some problems: access denied ("oracle.security.jps.service.credstore.CredentialAccessPermission" "context=SYSTEM,mapName=oim,keyName=.xldatabasekey" "read")
java.security.AccessControlException: access denied ("oracle.security.jps.service.credstore.CredentialAccessPermission" "context=SYSTEM,mapName=oim,keyName=.xldatabasekey" "read")
Do i need to reinstall OIM setup to resolve this issue or is there any other way to refer oimclient.jar in my webservice code deployed in OIM env ?
Please suggest.
Thanks,
RPB

Office Web Apps Issue - "Sorry, something went wrong" message when opening a document (any MS docx,ppt etc) in IE. With Chrome, it pops (Microsoft Office needs your permission) message and on RUN, it opens the document.

When opening any Microsoft documents ( docx, ppt etc) in SharePoint 2013,
Internet Explorer behavior : "Sorry, something went wrong" An unexpected error has occurred message and then nothing happens.
In Chrome : Pops (Microsoft Office needs your permission) message and on clicking RUN, it opens the document.
In Firefox : the documents opens, after asking which application do you want to use to open it.
The feature (Open Documents in Client Applications by Default) is not activate.
Why the MS documents are not working in IE 10?

Hi,
According to your post, my understanding is that you failed to open Microsoft documents in SharePoint 2013.
I recommend to Run the following PowerShell in OWA Server :
Remove-OfficeWebAppsHost # To Remove any restriction
Or
New-OfficeWebAppsHost -Domain <String> # To allow specific domain Name
In addition, you can allow OAuth via HTTP using the following commands:
$config = (Get-SPSecurityTokenServiceConfig)
$config.AllowOAuthOverHttp = $true
$config.Update()
Here are two similar articles for you to take a look at:
http://blogs.msdn.com/b/fabdulwahab/archive/2013/10/30/office-web-apps-with-sharepoint-2013-issues.aspx
http://stevemannspath.blogspot.in/2013/03/sharepoint-2013-office-web-apps-issue.html
Best Regards,
Linda Li
Linda Li
TechNet Community Support

ISE web login Issue.

Similar Messages

Maybe you are looking for