ITSM configuration error: No valid BACK_RFC destination for any client of system
We have system: SM 7.1 SPS10.
In our SM 7.1 initially in the table BCOS_CUST record was brought:
At a stage 4.3 "perform the prerequisites" there is a mistake:
Check BACK_RFC:
Check BCOS_CUST:
If in SM 7.1 to choose SM_EE7_TRUSTED_BACK connection, for example:
the mistake all the same remains, where EE7 - our managed system.
What else settings need to be made for a solution?
Hi Mikhail,
Can you please share the solution. I am facing the same issue.
Regards,
Sachin Deo.
Similar Messages
-
ISA B2B logon Error: No valid private connection for internet user
Hello ,
i used isauseradm to create a user zzweb with all authorizations for B2B..
now when i try to log to
http://host:port/b2b/b2b/init.do with the user zzweb
i have a runtime error with the logs :
EXCEPTION]
#1#com.sap.isa.businessobject.BORuntimeException: Error getting private connection for internet user:com.sap.isa.core.eai.BackendException: Error: No valid private connection for internet userzzweb
at com.sap.isa.businessobject.BusinessObjectHelper.splitException(BusinessObjectHelper.java:78)
at com.sap.isa.user.businessobject.UserBase.login(UserBase.java:313)
at com.sap.isa.businessobject.User.login(User.java:143)
at com.sap.isa.user.action.UserActions.performLogin(UserActions.java:295)
at com.sap.isa.user.action.UserActions.performLogin(UserActions.java:368)
at com.sap.isa.user.action.UserBaseAction.performLogin(UserBaseAction.java:126)
at com.sap.isa.user.action.LoginBaseAction.ecomPerform(LoginBaseAction.java:77)
at com.sap.isa.isacore.action.EComBaseAction.doPerform(EComBaseAction.java:353)
at com.sap.isa.core.BaseAction.execute(BaseAction.java:211)
at org.apache.struts.action.RequestProcessor.processActionPerform(RequestProcessor.java:484)
at com.sap.isa.core.RequestProcessor.processActionPerform(RequestProcessor.java:674)
at org.apache.struts.action.RequestProcessor.process(RequestProcessor.java:274)
at com.sap.isa.core.RequestProcessor.process(RequestProcessor.java:391)
at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1482)
at com.sap.isa.core.ActionServlet.process(ActionServlet.java:243)
at org.apache.struts.action.ActionServlet.doPost(ActionServlet.java:525)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.runServlet(FilterChainImpl.java:117)
at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:62)
at com.tealeaf.capture.LiteFilter.doFilter(Unknown Source)
at com.sap.isa.isacore.TealeafFilter.doFilter(TealeafFilter.java:61)
at com.sap.engine.services.servlets_jsp.server.runtime.FilterChainImpl.doFilter(FilterChainImpl.java:58)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:373)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:264)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:347)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:325)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:887)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:241)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:148)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:100)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:170)
what does this error means..?
i also realised that zzweb was not created in CRM backen? should it be created ?
many thnx for help ..
Message was edited by: BlackmanIts a late response... but if someone gets the same issue here is the solution.
When you register try uppercase password . That should take care of that issue.
The problem is with function module CRM_ISA_IUSER_SWITCH , Note 946536.
Although the note says 5.0 the problem exists with ISA 4.0 too -
RFC Destinations for different clients on same host
Hi
I have an SRM and SUS on the same server and the clients are different. I have a flow from SRM to SUS and also back from SUS from SRM.
Do I have to create seperate RFC Destinations for different clients?
What about the other details likePort, Partner Profile, Logical system etc, do we have to maintain all for both of them seperately ?
Regards
AjithHi Ajith,
Do I have to create seperate RFC Destinations for different clients?
>>> A set of RFC Destination, Port & Parnter Profile is used to connect two systems between one client of source system to one client of Target system. Eg. from clinet 100 of XXX system to clinet 100 of YYY system. So, you need to take this into account and create seperate RFC destination for each different pair of connections.
What about the other details likePort, Partner Profile, Logical system etc, do we have to maintain all for both of them seperately ?
>>>In PI, you need to create BS for each different client of SRM & SUS system.
I hope this helps.
Regards, Gaurav. -
Error "no valid screen name" for FM DYNP_VALUES_READ
Hi PM Experts and ABAPers,
I have a requirement to fetch Operation tab details dynamically while creating a order through IW31 transaction.
I have tried using Function module DYNP_VALUES_READ to fetch the screen field values dynamically to read the Work centre field value from operations tab.
Please look at the code i have used.
DATA: gv_program_name TYPE D020S-PROG VALUE 'SAPLCOIH',
gv_screen_no TYPE D020S-DNUM VALUE '3010',
gs_dynpread TYPE DYNPREAD,
gt_dynpread TYPE TABLE OF DYNPREAD.
clear gs_dynpread.
gs_dynpread-fieldname = 'AFVGD-ARBPL'.
APPEND gs_dynpread TO gt_dynpread.
CALL FUNCTION 'DYNP_VALUES_READ'
EXPORTING
DYNAME = gv_program_name
DYNUMB = gv_screen_no
TABLES
DYNPFIELDS = gt_dynpread
- The function module has returned a dump with error 'No valid screen name'.
Can anyone help me in reading the work centre ( ARBPL) value directly from screen.
Thanks in advance,
SreenivasHi Sreenivas,
Kindly check whether field-symbol is assigned before using for preventing the run-time error.
ASSIGN('(MP000800)TBLGART[]')TO<tblgart>.
"Check Whether the field-symbol value is assigned or not
IF <tblgart> IS ASSIGNED.
CREATE DATA obj_tbl LIKE LINE OF <tblgart>.
ASSIGN obj_tbl->* TO <wa_tblgart>.
ENDIF.
In CREATE DATA statement we are assigning the structure, if you know the structure name, it is better use TYPE statement instead of LIKE statement as shown below.
CREATE DATA obj_tbl TYPE STRUCTURE_NAME.
Regards
Rajkumar Narasimman -
Getting error in creating JCo destination for WebDynpro
Hi Guys,
I am getting an error in creating JCo Destination under Web Dynpro Content Admin.I am deploying MSS on Netweaver portal SR1 and ecc 5.0.I am getting a message"An error has occurred: "Failed to process the request."Contact your System Admin.
When I am seeing the details:
Web Dynpro client:
HTML Client
Web Dynpro client capabilities:
User agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322), version: null, DOM version: null, client type: msie6, client type profile: ie6, ActiveX: enabled, Cookies: enabled, Frames: enabled, Java applets: enabled, JavaScript: enabled, Tables: enabled, VB Script: enabled
Web Dynpro runtime:
Vendor: SAP, Build ID: 6.4009.00.0000.20041104173322.0000 (release=630_REL, buildtime=2004-11-18:22:17:10[UTC], changelist=298578, host=PWDFM027)
Web Dynpro code generators of DC sap.com/tcwdtools:
No information available
Web Dynpro code generators of DC sap.com/tcwddispwda:
No information available
Web Dynpro code generators of DC sap.com/tcwdcorecomp:
No information available
J2EE Engine:
6.40 patchlevel 87289.311
Java VM:
Java HotSpot(TM) Server VM, version: 1.4.2_07-b05, vendor: Sun Microsystems Inc.
Operating system:
Windows 2003, version: 5.2, architecture: x86
Error stacktrace:
java.lang.NullPointerException
at com.sap.tc.webdynpro.serverimpl.wdc.sl.SystemLandscapeFactory.checkStatus(SystemLandscapeFactory.java:871)
at com.sap.tc.webdynpro.services.sal.sl.api.WDSystemLandscape.checkStatus(WDSystemLandscape.java:469)
at com.sap.tc.webdynpro.tools.sld.NameDefinition.updateJCODestinations(NameDefinition.java:272)
at com.sap.tc.webdynpro.tools.sld.NameDefinition.updateNavigation(NameDefinition.java:237)
at com.sap.tc.webdynpro.tools.sld.NameDefinition.wdDoInit(NameDefinition.java:144)
at com.sap.tc.webdynpro.tools.sld.wdp.InternalNameDefinition.wdDoInit(InternalNameDefinition.java:223)
at com.sap.tc.webdynpro.progmodel.generation.DelegatingView.doInit(DelegatingView.java:61)
at com.sap.tc.webdynpro.progmodel.controller.Controller.initController(Controller.java:215)
at com.sap.tc.webdynpro.progmodel.view.View.initController(View.java:274)
at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.getView(ViewManager.java:540)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.bind(ViewManager.java:398)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.getView(ViewManager.java:555)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.bindRoot(ViewManager.java:422)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.init(ViewManager.java:130)
at com.sap.tc.webdynpro.progmodel.view.InterfaceView.initController(InterfaceView.java:43)
at com.sap.tc.webdynpro.progmodel.controller.Controller.init(Controller.java:200)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.getView(ViewManager.java:540)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.bind(ViewManager.java:398)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.makeVisible(ViewManager.java:620)
at com.sap.tc.webdynpro.progmodel.view.ViewManager.performNavigation(ViewManager.java:263)
at com.sap.tc.webdynpro.clientserver.cal.ClientApplication.navigate(ClientApplication.java:737)
at com.sap.tc.webdynpro.clientserver.task.WebDynproMainTask.handleActionEvent(WebDynproMainTask.java:350)
at com.sap.tc.webdynpro.clientserver.task.WebDynproMainTask.execute(WebDynproMainTask.java:635)
at com.sap.tc.webdynpro.clientserver.cal.AbstractClient.executeTasks(AbstractClient.java:59)
at com.sap.tc.webdynpro.clientserver.cal.ClientManager.doProcessing(ClientManager.java:249)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doWebDynproProcessing(DispatcherServlet.java:154)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doContent(DispatcherServlet.java:116)
at com.sap.tc.webdynpro.serverimpl.defaultimpl.DispatcherServlet.doPost(DispatcherServlet.java:55)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:760)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:385)
at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:263)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:340)
at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:318)
at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:821)
at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:239)
at com.sap.engine.services.httpserver.server.Client.handle(Client.java:92)
at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:147)
at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:37)
at com.sap.engine.core.cluster.impl6.session.UnorderedChannel$MessageRunner.run(UnorderedChannel.java:71)
at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
at java.security.AccessController.doPrivileged(Native Method)
at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:94)
at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:162)
Please help me guys.
ParitoshYou should post your question to the Webdynpro forum:
Web Dynpro Java -
I am about halfway through my trail period using Creative Suite 6 on my new MacBook Pro using Mountain Lion 10.8.3 (the newest version). I keep recieving the "Configuration Error 16" message. What should I do to finish the remainder of my trial period?
With kind regards,
Vincent J. Flottahttp://forums.adobe.com/message/4830552
-
EWA: error message in CRM check for SAP Solution Manager system
Hello!
In EWA report for SAP Solution Manager system I have seen error message: Many CSA* inbound queues in error status were detected in your system. As a result of this BDocs have not been delivered. And then table
Queue Name Status Date of first entry Entries
CSABUPA0000000070 READY 03.12.2007 45
CSABUPA0000000934 READY 07.05.2008 45
CSAIBASE0000000000 READY 23.11.2007 36
CSA_ORDER_8000000000 READY 22.11.2007 5
CSA_ORDER_8000000001 READY 22.11.2007 3
and others.
I looked transaction smq2. There are 11300 queues in it. Is it actual error or it is a normal situation? And that must I do, to remove an error?
Edited by: Mariya Kurbatova on Jul 2, 2009 6:27 AMHi,
Usually problems with hanaging CSA* queues are caused because too many
indiviaual queues are created for the qRFC resources to handle. You can
limit the number of queues as described in note 763680.
Note 763680 would be useful if all of your qRFC resourcesa are in use
when you have a great number of queues. With a large number of dialog
WPs on the system it would probably make sense to reduce the amount
as described in the note.
the casue when you have this problem would be to check SMQR -> GOTO ->
qRFC resources. You can also see if most of your dailog WPs are in use
in SM50.
Also refer to note 758677.
Please schedule report RSQIWKEX (Inbound) to run as described in the
note.
And since your title has mentioned that the EWA is on your CRM satellite system; this maybe a further good reference too
When you replicate lots of data from CRM to R/3, there could be a qRFC
resource problem. In this case, the numebr of queues created can be
reduced by implementing the attached note 356228, particularly solution
2.
For CSA* queues is slightly different from the one decribed in note;
this is because the CSA queues exchange data within the CRM system.
The steps described should be followed, except that table SMOFQFIND
must be used instead of CRMQNAMES. In this table, fields TR_SNAEMS and
SEGM_FLD are equivalent to the CRMQNAMES fieds BAPISTRUCT and BAPIFLD
respectively. It should be possible to follow the solution 2 in the
note as long as you use SMOFQFIND instead of CRMQNAMES.
Hope this helps
Cheers,
SH -
ADS configuration error - PDF form not displaying for Java WebDynpro
Hi Experts,
Sub : Problem with configuring Adobe Document Services
We have installed .. NW2004s SP12 on HP-UX OS.
As of now all the services are working fine, recently started configuring "Adobe Document Services", followed all the instructions given in the guide.
Environment :
=============
- Configuring ADS Webservice for "BASIC" Authentication, not for SSL
- Poratl (AS JAVA) and BI (AS ABAP) are running in different systems.
- Portal using UME as the data storage.
- OS is HP-UX
Configuration Check for Interactive Forms in Web Dynpro for Java
=================================================================
1. Checking the User and Password ---
http://<server>:<port>/AdobeDocumentServices/Config -- the system displays the version number of the Adobe document services in the response area.
2. Configured Webservice for Basic Authentication -- success
In the process of testing this configuration -- i've developed a Java Webdynpro interactive form and deployed into my DEV server (NW2004s Sp12).
Unfortunately, form is displaying in my sneak preview version (Nw2004s SP9), getting error when deployed into Dev server - NW2004s SP12 on HP-UX.
We haven't installed ADS separately, making use of ADS comes with the default installation.
Error :
=======
java.net.SocketTimeoutException: Reatimed out
com.sap.tc.webdynpro.clientserver.adobe.pdfdocument.base.core.PDFDocumentRuntimeException: Failed to UPDATEDATAINPDF
I found that the following directory is empty in DEV server ... /usr/sap/EPL/JC03/j2ee/os_libs/adssap/XMLFormService, but not in sneak preview version.
Please do let me know to solve the problem.
ThanksThanks for quick response.
Installed Reader in my PC, i can view the deployed interactive form thru sneak preview, but getting the following error when running the same application thru my development server.
java.net.SocketTimeoutException: Reatimed out
com.sap.tc.webdynpro.clientserver.adobe.pdfdocument.base.core.PDFDocumentRuntimeException: Failed to UPDATEDATAINPDF
I've installed Adobe Reader in the client PC not is the server system.
Thanks
Message was edited by:
Mohan krishna Mallepaddi -
Error when setting JMS Destination for Agile PLM Content Services (cannot
In not the right forum please suggest the correct one.
Before creating the destination I did the following setup and testing.
1.) Created a JMS on the Weblogic Server
2.) Created a Jdeveloper BPEL Project and successfully put a message into the JMS queue
Here are the details for the new destination I am creating.
1.) Protocol = JMS
2.) Provider Context Factory = weblogic.jndi.WLInitialContextFactory
* this is the one that seems to be the cause of the error
3.) Connection Factory = jmstest/jmstest-cp
* this is my JNDI name for the connection pool
4.) Default Provider URL = t3://10.16.131.110:7001
* this is the URL for the Weblogic server
5.) Destination Name = jms/queueout
* this is the JNDI name for the queue
The error message I am getting when I click the button to "Test Destination" is
"The remote server returns the following message: Cannot instantiate class: weblogic.jndi.WLInitialContextFactory"
I would appreciate any input
ThanksWhich version of Agile are you using?
There is a patch needed for agile 9.2 for weblogic server.
Please check the Metalink -
How to configure Connection pooling in 10g AS for OCI client
Oracle Version: 10.1.3.1
Operating System: HP UX B.11.23 64 bit OS
Hello everyone,
In my connection pools setting of 10g Application server Control my application currently uses JDBC thin client. I need to move to OCI driver. My application uses JDBC 3.0
Can someone please help me out with the steps?
Thanks & Regards,
Prashanthttp://jakarta.apache.org/tomcat/tomcat-5.0-doc/jndi-datasource-examples-howto.html
-
Hi everyone,
it's probably just me but I have tried real hard to get a simple AnyConnect setup working in a lab environment on my ASA 5505 at home, without luck. When I connect with the AnyConnect client I get the error message "User not authorized for AnyConnect Client access, contact your administrator". I have searched for this error and tried some of the few solutions out there, but to no avail. I also updated the ASA from 8.4.4(1) to 9.1(1) and ASDM from 6.4(9) to 7.1(1) but still the same problem. The setup of the ASA is straight forward, directly connected to the Internet with a 10.0.1.0 / 24 subnet on the inside and an address pool of 10.0.2.0 / 24 to assign to the VPN clients. Please note that due to ISP restrictions, I'm using port 44455 instead of 443. I had AnyConnect working with the SSL portal, but IKEv2 IPsec is giving me a headache. I have stripped down certificate authentication which I had running before just to eliminate this as a potential cause of the issue. When running debugging, I do not get any error messages - the handshake completes successfully and the local authentication works fine as well.
Please find the current config and debugging output below. I appreciate any pointers as to what might be wrong here.
: Saved
ASA Version 9.1(1)
hostname ASA
domain-name ingo.local
enable password ... encrypted
xlate per-session deny tcp any4 any4
xlate per-session deny tcp any4 any6
xlate per-session deny tcp any6 any4
xlate per-session deny tcp any6 any6
xlate per-session deny udp any4 any4 eq domain
xlate per-session deny udp any4 any6 eq domain
xlate per-session deny udp any6 any4 eq domain
xlate per-session deny udp any6 any6 eq domain
passwd ... encrypted
names
name 10.0.1.0 LAN-10-0-1-x
dns-guard
ip local pool VPNPool 10.0.2.1-10.0.2.10 mask 255.255.255.0
interface Ethernet0/0
switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif Internal
security-level 100
ip address 10.0.1.254 255.255.255.0
interface Vlan2
nameif External
security-level 0
ip address dhcp setroute
regex BlockFacebook "facebook.com"
banner login This is a monitored system. Unauthorized access is prohibited.
boot system disk0:/asa911-k8.bin
ftp mode passive
clock timezone PST -8
clock summer-time PDT recurring
dns domain-lookup Internal
dns domain-lookup External
dns server-group DefaultDNS
name-server 10.0.1.11
name-server 75.153.176.1
name-server 75.153.176.9
domain-name ingo.local
object network obj_any
subnet 0.0.0.0 0.0.0.0
object network LAN-10-0-1-x
subnet 10.0.1.0 255.255.255.0
object network Company-IP1
host xxx.xxx.xxx.xxx
object network Company-IP2
host xxx.xxx.xxx.xxx
object network HYPER-V-DUAL-IP
range 10.0.1.1 10.0.1.2
object network LAN-10-0-1-X
access-list 100 extended permit tcp any4 object HYPER-V-DUAL-IP eq 3389 inactive
access-list 100 extended permit tcp object Company-IP1 object HYPER-V-DUAL-IP eq 3389
access-list 100 extended permit tcp object Company-IP2 object HYPER-V-DUAL-IP eq 3389
tcp-map Normalizer
check-retransmission
checksum-verification
no pager
logging enable
logging timestamp
logging list Threats message 106023
logging list Threats message 106100
logging list Threats message 106015
logging list Threats message 106021
logging list Threats message 401004
logging buffered errors
logging trap Threats
logging asdm debugging
logging device-id hostname
logging host Internal 10.0.1.11 format emblem
logging ftp-bufferwrap
logging ftp-server 10.0.1.11 / asa *****
logging permit-hostdown
mtu Internal 1500
mtu External 1500
ip verify reverse-path interface Internal
ip verify reverse-path interface External
icmp unreachable rate-limit 1 burst-size 1
icmp deny any echo External
asdm image disk0:/asdm-711.bin
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
object network obj_any
nat (Internal,External) dynamic interface
object network LAN-10-0-1-x
nat (Internal,External) dynamic interface
object network HYPER-V-DUAL-IP
nat (Internal,External) static interface service tcp 3389 3389
access-group 100 in interface External
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
aaa-server radius protocol radius
aaa-server radius (Internal) host 10.0.1.11
key *****
radius-common-pw *****
user-identity default-domain LOCAL
aaa authentication ssh console radius LOCAL
http server enable
http LAN-10-0-1-x 255.255.255.0 Internal
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec ikev2 ipsec-proposal DES
protocol esp encryption des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal 3DES
protocol esp encryption 3des
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES
protocol esp encryption aes
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES192
protocol esp encryption aes-192
protocol esp integrity sha-1 md5
crypto ipsec ikev2 ipsec-proposal AES256
protocol esp encryption aes-256
protocol esp integrity sha-1 md5
crypto ipsec security-association pmtu-aging infinite
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set ikev2 ipsec-proposal AES256 AES192 AES 3DES DES
crypto map External_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map External_map interface External
crypto ca trustpoint srv01_trustpoint
enrollment terminal
crl configure
crypto ca trustpoint asa_cert_trustpoint
keypair asa_cert_trustpoint
crl configure
crypto ca trustpoint LOCAL-CA-SERVER
keypair LOCAL-CA-SERVER
crl configure
crypto ca trustpool policy
crypto ca server
cdp-url http://.../+CSCOCA+/asa_ca.crl:44435
issuer-name CN=...
database path disk0:/LOCAL_CA_SERVER/
smtp from-address ...
publish-crl External 44436
crypto ca certificate chain srv01_trustpoint
certificate <output omitted>
quit
crypto ca certificate chain asa_cert_trustpoint
certificate <output omitted>
quit
crypto ca certificate chain LOCAL-CA-SERVER
certificate <output omitted>
quit
crypto ikev2 policy 1
encryption aes-256
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 10
encryption aes-192
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 20
encryption aes
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 30
encryption 3des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 policy 40
encryption des
integrity sha
group 5 2
prf sha
lifetime seconds 86400
crypto ikev2 enable External client-services port 44455
crypto ikev2 remote-access trustpoint asa_cert_trustpoint
telnet timeout 5
ssh LAN-10-0-1-x 255.255.255.0 Internal
ssh xxx.xxx.xxx.xxx 255.255.255.255 External
ssh xxx.xxx.xxx.xxx 255.255.255.255 External
ssh timeout 5
ssh version 2
console timeout 0
no vpn-addr-assign aaa
no ipv6-vpn-addr-assign aaa
no ipv6-vpn-addr-assign local
dhcpd dns 75.153.176.9 75.153.176.1
dhcpd domain ingo.local
dhcpd option 3 ip 10.0.1.254
dhcpd address 10.0.1.50-10.0.1.81 Internal
dhcpd enable Internal
threat-detection basic-threat
threat-detection scanning-threat shun except ip-address LAN-10-0-1-x 255.255.255.0
threat-detection statistics access-list
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
dynamic-filter use-database
dynamic-filter enable interface Internal
dynamic-filter enable interface External
dynamic-filter drop blacklist interface Internal
dynamic-filter drop blacklist interface External
ntp server 128.233.3.101 source External
ntp server 128.233.3.100 source External prefer
ntp server 204.152.184.72 source External
ntp server 192.6.38.127 source External
ssl encryption aes256-sha1 aes128-sha1 3des-sha1
ssl trust-point asa_cert_trustpoint External
webvpn
port 44433
enable External
dtls port 44433
anyconnect image disk0:/anyconnect-win-3.1.02026-k9.pkg 1
anyconnect profiles profile1 disk0:/profile1.xml
anyconnect enable
smart-tunnel list SmartTunnelList1 mstsc mstsc.exe platform windows
smart-tunnel list SmartTunnelList1 putty putty.exe platform windows
group-policy DfltGrpPolicy attributes
vpn-tunnel-protocol ikev1 ikev2 l2tp-ipsec ssl-client ssl-clientless
webvpn
anyconnect profiles value profile1 type user
username write.ingo password ... encrypted
username ingo password ... encrypted privilege 15
username tom.tucker password ... encrypted
class-map TCP
match port tcp range 1 65535
class-map type regex match-any BlockFacebook
match regex BlockFacebook
class-map type inspect http match-all BlockDomains
match request header host regex class BlockFacebook
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 1500
id-randomization
policy-map TCP
class TCP
set connection conn-max 1000 embryonic-conn-max 1000 per-client-max 250 per-client-embryonic-max 250
set connection timeout dcd
set connection advanced-options Normalizer
set connection decrement-ttl
policy-map type inspect http HTTP
parameters
protocol-violation action drop-connection log
class BlockDomains
policy-map global_policy
class inspection_default
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
inspect dns preset_dns_map dynamic-filter-snoop
inspect http HTTP
service-policy global_policy global
service-policy TCP interface External
smtp-server 199.185.220.249
privilege cmd level 3 mode exec command perfmon
privilege cmd level 3 mode exec command ping
privilege cmd level 3 mode exec command who
privilege cmd level 3 mode exec command logging
privilege cmd level 3 mode exec command failover
privilege cmd level 3 mode exec command vpn-sessiondb
privilege cmd level 3 mode exec command packet-tracer
privilege show level 5 mode exec command import
privilege show level 5 mode exec command running-config
privilege show level 3 mode exec command reload
privilege show level 3 mode exec command mode
privilege show level 3 mode exec command firewall
privilege show level 3 mode exec command asp
privilege show level 3 mode exec command cpu
privilege show level 3 mode exec command interface
privilege show level 3 mode exec command clock
privilege show level 3 mode exec command dns-hosts
privilege show level 3 mode exec command access-list
privilege show level 3 mode exec command logging
privilege show level 3 mode exec command vlan
privilege show level 3 mode exec command ip
privilege show level 3 mode exec command failover
privilege show level 3 mode exec command asdm
privilege show level 3 mode exec command arp
privilege show level 3 mode exec command ipv6
privilege show level 3 mode exec command route
privilege show level 3 mode exec command ospf
privilege show level 3 mode exec command aaa-server
privilege show level 3 mode exec command aaa
privilege show level 3 mode exec command eigrp
privilege show level 3 mode exec command crypto
privilege show level 3 mode exec command ssh
privilege show level 3 mode exec command vpn-sessiondb
privilege show level 3 mode exec command vpnclient
privilege show level 3 mode exec command vpn
privilege show level 3 mode exec command dhcpd
privilege show level 3 mode exec command blocks
privilege show level 3 mode exec command wccp
privilege show level 3 mode exec command dynamic-filter
privilege show level 3 mode exec command webvpn
privilege show level 3 mode exec command service-policy
privilege show level 3 mode exec command module
privilege show level 3 mode exec command uauth
privilege show level 3 mode exec command compression
privilege show level 3 mode configure command interface
privilege show level 3 mode configure command clock
privilege show level 3 mode configure command access-list
privilege show level 3 mode configure command logging
privilege show level 3 mode configure command ip
privilege show level 3 mode configure command failover
privilege show level 5 mode configure command asdm
privilege show level 3 mode configure command arp
privilege show level 3 mode configure command route
privilege show level 3 mode configure command aaa-server
privilege show level 3 mode configure command aaa
privilege show level 3 mode configure command crypto
privilege show level 3 mode configure command ssh
privilege show level 3 mode configure command dhcpd
privilege show level 5 mode configure command privilege
privilege clear level 3 mode exec command dns-hosts
privilege clear level 3 mode exec command logging
privilege clear level 3 mode exec command arp
privilege clear level 3 mode exec command aaa-server
privilege clear level 3 mode exec command crypto
privilege clear level 3 mode exec command dynamic-filter
privilege cmd level 3 mode configure command failover
privilege clear level 3 mode configure command logging
privilege clear level 3 mode configure command arp
privilege clear level 3 mode configure command crypto
privilege clear level 3 mode configure command aaa-server
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:41a021a28f73c647a2f550ba932bed1a
: end
Many thanks,
IngoHi Jose,
here is what I got now:
ASA(config)# sh run | begin tunnel-group
tunnel-group DefaultWEBVPNGroup general-attributes
address-pool VPNPool
authorization-required
and DAP debugging still the same:
ASA(config)# DAP_TRACE: DAP_open: CDC45080
DAP_TRACE: Username: tom.tucker, aaa.cisco.grouppolicy = DfltGrpPolicy
DAP_TRACE: Username: tom.tucker, aaa.cisco.username = tom.tucker
DAP_TRACE: Username: tom.tucker, aaa.cisco.username1 = tom.tucker
DAP_TRACE: Username: tom.tucker, aaa.cisco.username2 =
DAP_TRACE: Username: tom.tucker, aaa.cisco.tunnelgroup = DefaultWEBVPNGroup
DAP_TRACE: Username: tom.tucker, DAP_add_SCEP: scep required = [FALSE]
DAP_TRACE: Username: tom.tucker, DAP_add_AC:
endpoint.anyconnect.clientversion="3.1.02026";
endpoint.anyconnect.platform="win";
DAP_TRACE: Username: tom.tucker, dap_aggregate_attr: rec_count = 1
DAP_TRACE: Username: tom.tucker, Selected DAPs: DfltAccessPolicy
DAP_TRACE: Username: tom.tucker, DAP_close: CDC45080
Unfortunately, it still doesn't work. Hmmm.. maybe a wipe of the config and starting from scratch can help?
Thanks,
Ingo -
[AnyConnect] No valid certificates available for authentication
Hi,
We are using Cisco Anyconnect 3.0.0629 with certificate authentication (stored in Aladdin eToken)
Most of users have no problem and it works fine.
When one user tried to connect, he got a lot of errors "No valid certificates available for authentication" during 30 seconds. (~10 errors per second)
In a normal behaviour, we should have only one error.
Why is AnyConnect flooding this error?
How could I resolve it?
Thanks for your help,
PatrickI also had the problem of "no valid certificates available for authentication", although it only prompted once, rather than a flood like the OP.
However, the cause and solution for my problem was:
The certificate used for authentication was issued by my internal CA, to the Computer, NOT the user.
Although the user that is logged on is a local administrator, the AnyConnect Client application does not have the permission to send the certificate from the Computer store.
The application needs to 'run as administrator'
Right-click the application shortcut-> Properties->Compatibility->Privilege Level.
Tick ->Run This Program As Administrator.
I needed to reboot the client pc before this worked.
n.b I was using Windows 8 -
Hi! Every time, no matter if I've restarted or powered down, even if it's the only program running, it's the same error. I've checked for any updates for my laptop, made sure it's been defragged weekly, checked system performance... all to no avail. Today is the first issue I've had with LR5.4, and I've been trying to correct it since this morning. I'd be grateful for any and all help. Thank you!
Did you mean, "Lightroom encountered and error when reading from its preview cache and needs to quit?"
https://forums.adobe.com/message/6333848
I've been using LR since 1.0 and never encountered this issue until today. The above procedure for creating a new Preview Cache folder and preview files should fix the issue. -
Error while creating the delivery for STO
Hi,
While creating the delivery, an error is produced when i saw the log . It was as follows
"An Item with no delivery quantity is not permitted. Item will be deleted"
Its related to STO,. if STO contains around 100 items and error is for any single item system is not able to create the delivery for whole PO.
Please guide as its an vey urgent issue will reward with suitable points.
Regards,
VikramHi
while creating delivery make that particular material's delivery quantity as 0. and do not enter any picking quantity.
that material will not be consider while making delivery.
Regards,
vijay -
Error while Installing the Java Add-In for an Existing ABAP System
Hi all,
I need help, i am Installing the Java Add-In for an Existing ABAP System
SAPInst stops on the first installation step: "Central Services Instance (SCS) Java Add-In", the step is "Install common system files" on the following sub-steps:
These are the last few lines on the sapinst.log.
INFO 2009-05-21 12:35:12
Execute step createAccounts of component |NW_Addin_SCS|ind|ind|ind|ind|0|0|NW_Users_Create_Do|ind|ind|ind|ind|3|0.
INFO 2009-05-21 12:35:18
Execute step setUserEnvironment of component |NW_Addin_SCS|ind|ind|ind|ind|0|0|NW_Users_Create_Do|ind|ind|ind|ind|3|0.
INFO 2009-05-21 12:35:19
Execute step InstallJDBCDriver of component |NW_Addin_SCS|ind|ind|ind|ind|0|0|NW_JDBCDriver_DB4|ind|ind|ind|ind|4|0.
INFO 2009-05-21 12:35:19
Creating directory V:\sapmnt\BIQ\jdbc.
INFO 2009-05-21 12:35:19
Creating directory V:\sapmnt\BIQ\jdbc\tbx.
INFO 2009-05-21 12:35:21
Copied file 'V:/QIBM/ProdData/HTTP/Public/jt400/lib/jt400.jar' to 'V:/sapmnt/BIQ/jdbc/tbx/jt400.jar'.
INFO 2009-05-21 12:35:22
Execute step updateNtPatchDlls of component |NW_Addin_SCS|ind|ind|ind|ind|0|0|NW_System|ind|ind|ind|ind|5|0.
INFO 2009-05-21 12:35:23
Execute step sCreateSystemOS4 of component |NW_Addin_SCS|ind|ind|ind|ind|0|0|NW_System|ind|ind|ind|ind|5|0.
ERROR 2009-05-21 12:35:42
MOS-02001 Call of command "CRTR3SYS SID(BIQ) GLOBALHOST(*LOCAL)" failed. Exception is "CPF0006".
ERROR 2009-05-21 12:35:42
MOS-02001 Call of command "CRTR3SYS SID(BIQ) GLOBALHOST(*LOCAL)" failed. Exception is "CPF0006".
ERROR 2009-05-21 12:35:42
FCO-00011 The step sCreateSystemOS4 with step key |NW_Addin_SCS|ind|ind|ind|ind|0|0|NW_System|ind|ind|ind|ind|5|0|sCreateSystemOS4 was executed with status ERROR .
Thanks in advance for any help.
Kiran ChebroluHi,
Hope this note would solve your issue, please read carefully and validate with your issue
Note 1032019 - Java Add-In: Error when you create the SCS instance
below notes give your suffice information.
Note 883948 - NW 7.00(2004s): Inst.Add.Java Usage Types/Software Units
Note 1268493 - NW 7.01/BS 7: Inst.Add.Java Usage Types/Software Units
Note 1025789 - RUNR3CMD generates CPF0006
regards
nag
Maybe you are looking for
-
Hi. I have a few questions hoping it can be answered. 1. In Display Properties, what is the MSI Clock tab for? It's currently set to Memory Clock: 513mhz and Core Clock: 250 mhz. 2. I have downloaded and installed the drivers downloading from nvi
-
Library cache pin when accessing apex_application_page_regions
Hi, Oracle 11.2.0.3.0, APEX 4.1.1.00.23. I am trying to compile a procedure that access apex_application_page_regions to get the region source of a report : BEGIN -- get report region source SELECT region_source INTO l_source
-
A Mighty Mouse and a Mighty 1 year Old Clash
I've got a mouse question about, uh, the Mighty Mouse (the one that allows has five buttons, and a scroll dot. it was included in my quad purchase a couple of months back). My one year old son likes the red light underneath my mouse, and will try to
-
I was given the HP 2710m monitor with built in speakers. I connected it to a Dell Studio 540S, Intel Core quad, 6 GB ram, 64 Bit Windows 7 computer. With the VGA cord connected, I have a great picture but no sound. With the HDMI cord connected I h
-
Xml query search by date or number
table :tb column:pxml <?xml version="1.0" encoding="GBK"?> <model id="f379f851-b1f9-48bf-8ac7-dafd2b1cedb0" name="hotel" objid="8873dc02-cf83-4527-95bb-e3025469e4ba"> <property id="3100" name="thedate"> <value>2009-09-07</value> </property> <property