JAAS Client failing to login

I have a heavy-weight client that accesses remote ejbs. I have this successfully setup using a jndi.properties file. I am not using the appclient. The client also needs to access protected ejbs. I have set up the client with a security manager with all permissions and a login.conf file using the shipped ClientPasswordLoginModule with debug on. On the server side I am using the jdbcRealm also shipped. Not that logging in work fine via the web. I create a login context and login. My callback handler is called and is set to a valid username and password. Yet if I print the callerPrincipal.getName() in my bean, it is still ANONYMOUS. What am I doing wrong? Both side, the client and server, appear to have functional JAAS setups, but they are not working together. I have also tried to use the appclient with JAAS and no success. I also tried to use it with out and provide the username and password via the textauth and it still sets me as ANONYMOUS. Any ideas?
Thanks,
Matt

I have client container calling a session EJB working as a facade.
The module has one role mapped to a group used in the file realm.
Running it from Visual Studio, I get to enter username/password. I get Anonymous principal (methods are set he defined role)
I really don't know what I am doing wrong. this help didn't work for me either.
Any idea of where to look?
clogon

Similar Messages

  • Lync 2013 android client fails to login bug when ISP overrides DNS

    Hello all,
    I've noticed an issue occurring in the latest Android client (as of 3/9/2015) with internet networks where the provider resolves all DNS queries to an IP address (e.g. T-Mobile, Cox Cable, and lots of others).
    Essentially, sometimes I have noticed my android client stuck on "Signing in".  The diagnostic logs show that the client is attempting to resolve http://lyncdiscover.contoso.com (which is not resolvable
    externally), but T-Mobile is sending it into a search engine.  The app continues to try to connect despite not realizing that it really did not resolve properly.  See below logs.
    <html><head><meta http-equiv="refresh" content="0;url=http://lookup.t-mobile.com/index.php?origURL=http://lyncdiscoverinternal.contoso.com/"/></head><body><script type="text/javascript">window.location="http://lookup.t-mobile.com/index.php?origURL="+escape(window.location)+"&r="+escape(document.referrer);</script></body></html>
    </ReceivedResponse>
    Mar 9, 2015 8:26:50 AM ERROR LYNC: ERROR TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/common/private/TransportUtilityFunctions.cpp/1874:Accept-types (application/vnd.microsoft.rtc.autodiscover+xml;v=1) not found in Content-Type response from server (text/html). Not decoding.
    Mar 9, 2015 8:26:50 AM INFO LYNC: INFO TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/requestprocessor/private/CHttpRequestProcessor.cpp/266:Sending event to main thread for request(0x9a306048)
    Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CTransportRequestRetrialQueue.cpp/822:Req. completed, Stopping timer.
    Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUrlRedirectAndTrustResolver.cpp/610:UrlRedirectAndTrustResolver complete with url = http://lyncdiscoverinternal.contoso.com/, Hops = 1, status = E_ResponseUnknown (E2-1-5)
    Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CTransportRequestRetrialQueue.cpp/725:Response received for req. UrlTrustResolver(0x9a306048): E_ResponseUnknown (E2-1-5) (RemoteNetworkPermanentError); Done with req.; Stopping resend timer
    Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaAutoDiscoveryGetUserUrlOperation.cpp/393:CUcwaAutoDiscoverGetUserUrlOperation::onEvent received. Status = E_ResponseUnknown (E2-1-5), url = http://lyncdiscoverinternal.contoso.com/
    Mar 9, 2015 8:26:50 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation completed with url = http://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected], userUrl = , status = E_ResponseUnknown (E2-1-5)
    Mar 9, 2015 8:26:50 AM DEBUG SigningInActivity: onStop()
    Mar 9, 2015 8:26:50 AM DEBUG SigninActivity: onStop()
    Mar 9, 2015 8:27:20 AM DEBUG HubActivity: onPause()
    Mar 9, 2015 8:27:20 AM DEBUG MyStatusFragment: onPause()
    Mar 9, 2015 8:27:20 AM DEBUG ContactsFragment: onPause()
    Mar 9, 2015 8:27:20 AM DEBUG HubActivity: onStop()
    Mar 9, 2015 8:27:20 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/objectmodel/private/CApplication.cpp/944:CApplication::serialize() called
    Mar 9, 2015 8:27:20 AM VERBOSE LYNC: VERBOSE APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/privateandroid/CCredentialStore.cpp/90:storing credentials for service:0
    Mar 9, 2015 8:27:20 AM VERBOSE LYNC: VERBOSE APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/privateandroid/CCredentialStore.cpp/90:storing credentials for service:1
    Mar 9, 2015 8:27:20 AM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/objectmodel/private/CBasePersistableEntity.cpp/179:Storing 1 out-of-sync Object Models took 32ms
    Mar 9, 2015 8:27:20 AM INFO LYNC: INFO UTILITIES /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/platform/persistentstorage/private/CBasePersistableComponent.cpp/245:Storing 3 out-of-sync components took 1ms
    Mar 9, 2015 8:27:20 AM INFO PreferencesManager: commit is called on
    Mar 9, 2015 8:27:20 AM DEBUG MyStatusFragment: onStop()
    Mar 9, 2015 8:27:20 AM DEBUG ContactsFragment: onStop()
    Mar 9, 2015 8:27:27 AM ERROR HttpConnection: org.apache.http.conn.HttpHostConnectException: Connection to https://lyncdiscoverinternal.contoso.com refused
    at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:183)
    at org.apache.http.impl.conn.AbstractPoolEntry.open(AbstractPoolEntry.java:164)
    at org.apache.http.impl.conn.AbstractPooledConnAdapter.open(AbstractPooledConnAdapter.java:119)
    at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:360)
    at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:555)
    at org.apache.http.impl.client.AbstractHttpClient.execute(AbstractHttpClient.java:487)
    at com.microsoft.office.lync.platform.http.HttpEngine.execute(HttpEngine.java:502)
    at com.microsoft.office.lync.platform.http.HttpConnection$1.run(HttpConnection.java:219)
    at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:422)
    at java.util.concurrent.FutureTask.run(FutureTask.java:237)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1112)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:587)
    at java.lang.Thread.run(Thread.java:818)
    Caused by: java.net.ConnectException: failed to connect to /198.105.244.104 (port 443) after 180000ms: isConnected failed: ECONNREFUSED (Connection refused)
    at libcore.io.IoBridge.isConnected(IoBridge.java:238)
    at libcore.io.IoBridge.connectErrno(IoBridge.java:171)
    at libcore.io.IoBridge.connect(IoBridge.java:122)
    at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:183)
    at java.net.PlainSocketImpl.connect(PlainSocketImpl.java:456)
    at java.net.Socket.connect(Socket.java:882)
    at org.apache.http.conn.scheme.PlainSocketFactory.connectSocket(PlainSocketFactory.java:119)
    at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:144)
    ... 12 more
    Caused by: android.system.ErrnoException: isConnected failed: ECONNREFUSED (Connection refused)
    at libcore.io.IoBridge.isConnected(IoBridge.java:223)
    ... 19 more
    Since DNS overrides by ISPs are a common occurance, I believe the app should properly handle this situation.  I installed an app to override my DNS and use Google's DNS servers, and the client connects fine.

    Hi,
    Did you login Lync 2013 mobile client internal or external the company?
    Did the issue also happen for IOS/Windows Phones or just happen for Android Phones?
    Please try to check if the issue only happen for your mobile Lync client or also happen for other Android mobile clients.
    If the issue only happen for your Android mobile, please try to uninstall Lync client and install the latest version from Android Market and test the issue again.
    If the issue happen for multiple mobile clients, please double check the Reverse Proxy settings, if you use IIS ARR for Reverse Proxy, you can troubleshooting with the help of the link below:
    http://blogs.technet.com/b/nexthop/archive/2013/02/19/using-iis-arr-as-a-reverse-proxy-for-lync-server-2013.aspx
    Best Regards,
    Eason Huang
    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact [email protected].
    Eason Huang
    TechNet Community Support
    Ok, I figured out that I had a partial misconfiguration, but the existing client behavior still leads to long delays on a variety of networks.  I had the reverse proxy forwarding into port 80 instead of 8080, which seemingly caused problems
    during the second autodiscovery phase after the first timed out.   I have since confirmed that it's not just T-Mobile, but any such provider (e.g. Cox Cable, see below) that resolves all DNS entries.
    Essentially, the following is happening:
    1) Client attempts to resolve lyncdiscoverinternal first.
    2) DNS record resolves to ISP's website, because they resolve everything and will return their own page if the entry really doesn't exist.
    3) Lync client continues to try to connect to the ISP's address, and sits for at least a minute until it eventually falls to the lyncdiscover record.
    From the below log entries, you can see that the login process is delayed a full minute due to the client being stuck on the lyncdiscoverinternal record!  Again, this does not occur on ISPs that do not catch all DNS resolution
    attempts, regardless of validity.
    Mar 9, 2015 8:10:04 PM INFO HttpConnection: originalurl is
    https://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected] method Get
    Mar 9, 2015 8:10:04 PM INFO HttpConnection: decodedurl is
    https://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected]
    Mar 9, 2015 8:10:04 PM INFO LYNC: INFO TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/common/private/TransportUtilityFunctions.cpp/689:<SentRequest>
    GET
    https://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected] 9, 2015 8:10:05 PM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaAutoDiscoveryGetUserUrlOperation.cpp/224:UcwaAutoDiscoveryGetUserUrlOperation
    completed with url =
    http://lyncdiscoverinternal.contoso.com/?sipuri=sip:[email protected], userUrl = , status = E_ResponseUnknown (E2-1-5)
    GET http://lyncdiscoverinternal.contoso.com/
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "<html><head><meta">http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"><html><head><meta
    http-equiv="refresh" content="0;url=http://finder.cox.net/main?InterceptSource=0&ClientLocation=us&ParticipantID=96e687opkbv4scrood8k84drs6gw5duf&FailureMode=1&SearchQuery=&FailedURI=http%3A%2F%2Flyncdiscoverinternal.contoso.com%2F&AddInType=4&Version=2.1.8-1.90base&Referer=&Implementation=0&method=GET"/><script
    type="text/javascript">url="http://finder.cox.net/main?InterceptSource=0&ClientLocation=us&ParticipantID=96e687opkbv4scrood8k84drs6gw5duf&FailureMode=1&SearchQuery=&FailedURI=http%3A%2F%2Flyncdiscoverinternal.contoso.com%2F&AddInType=4&Version=2.1.8-1.90base&Referer=&Implementation=0&method=GET";if(top.location!=location){var
    w=window,d=document,e=d.documentElement,b=d.body,x=w.innerWidth||e.clientWidth||b.clientWidth,y=w.innerHeight||e.clientHeight||b.clientHeight;url+="&w="+x+"&h="+y;}window.location.replace(url);</script></head><body></body></html>
    </ReceivedResponse>
    Mar 9, 2015 8:10:21 PM INFO LYNC: INFO APPLICATION /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/applicationlayer/infrastructure/private/CUcwaDataSynchronizer.cpp/799:Mode 0
    timed out
    Mar 9, 2015 8:11:08 PM ERROR HttpConnection: org.apache.http.conn.HttpHostConnectException:
    Connection to https://lyncdiscoverinternal.contoso.com refused
     at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:183)
    Mar 9, 2015 8:11:08 PM INFO LYNC: INFO TRANSPORT /Volumes/ServerHD2/buildagent/workspace/200604/tps/ucmp/ucmp/transport/common/private/TransportUtilityFunctions.cpp/1032:<ReceivedResponse>
    GET http://lyncdiscover.contoso.com/

  • 10.4.11 clients failing after login to 10.5.8 server

    I am going crazy trying to setup our xserver this year. I had it running last year without any problems. This year, the 10.4.11 clients keep losing connection to the server after login. After login, the Home folder is there, then gone. You can see it disappear. The log reads "cannot mount /network/Servers/mac.ourdomain.edu.au/volumes/t_home/teacher error 22 (Invalid Argument)"
    Leopard clients seem fine.
    I have tried everything - rebinding; reinstalling many times. I thought the path to home folders might be too long; so I made the shortname smaller to get under 89, but I've never had to do this before. Changeip returns no errors. DNS is fine - there are some errors to certain addresses "could not update - permission denied". However these machines are not losing connections. I tried a dummy set up on a different address but got no further. Can anyone post and tell me:
    1. AFP connect via : I usually use Standard to avoid Kerberos timeouts - is this the problem?
    2. Guest access: supposedly helps with Tiger clients - true?
    3. Total path to home folder - Tiger setting?
    4. Login to the server to set up sharing in Server admin using IP Address ok?
    I have never had these sorts of problems. Do I just need to wipe the pre 10.5 clients? They have been set to the same IP for years so I'm wondering what I should do there. Is it DNS? I can get more log files tomorrow.
    Btw, not just beginner - I have spent a fair bit of money and time on training and have had many successful set ups at school, but really struggling here. Any tips or brickbats please . . . thanks very much.

    Unless things have changed, Guest Access must be on the User share on the server.
    The workstation needs access to resources prior to a user actually logging in.
    We use Kerberos only for our 10.4.11 and 10.5.8 clients. We also use the DHCP and DNS service on the Mac servers.
    We set guest access allowed in the AFP section and in File Sharing / Protocol Options. That does not mean that you actually need to give the Guest account access, just that it must be on.

  • Encrypted Alert (21) - Windows 7 client web page login falure

    Hello community,
    I have a challenge for you.  This is a very odd issue I am having. 
    Let me outline my basic environment. I have a Windows 2003 Server which serves as the DHCP with a (2-day lease), Windows 7 Clients (fully patched) running IE 11 (fully patched), and a SonicWALL NSA 2400 firewall running the latest firmware 5.8.17xx (SSL
    controls are not enabled).
    Symptoms: From the Win7 client I open a specific secure web page https:// and after I enter my user name and password I get a server side message “cannot connect to our authentication server”. 
    I called the web site support and they said the message will display if the client trying to connect to the remote server for authentication does not use port 4000. 
    I can try to login over and over again but I always get the same message.
    I can see by using the NETSTAT command that port 4000 is being opened on the client but the connection always fails. 
    After running WireShark I discovered that just after the [Login] button is clicked the SSL3.1/TLSv1.2 TCP session is started with the Client and Server saying their respective Hello’s, key exchanges, and cipher change but just after that I get a transmission,
    from the server side, of “Encryption Alert” (21) and then a [FIN] packet which closes the session.
     This is when the “cannot connect to our authentication server” message pops since the session has a fatal error decrypting the packet.
    After hours of trial and error, plus reading online, I found I have the option to peer inside these encrypted packets to maybe see more information about the problem with the “bad” packet. 
    I’m not sure what key to use to put into the SSL preferences in WireShark.
      I have tried many things to find a workaround and have found only one way that works consistently.
     I have about 10 clients that login each day and the problem in intermittent. 
    Normally 1 or 2 clients will have the problem each day; it’s a crap shoot that it will happen to anyone. 
    Well, at least I have not found a pattern yet if there is one.
    Temporary Fix: After the client web page login fails, I can run the following commands. 
    I run the first command to set a static IP and then login to the web site and it suddenly works.
     I then log out of the web site and I run the second command to get the client back to a dynamic IP. 
    I login to the web page again the login works.  After a random number of days go by the problem comes back and I have to run this temporary fix again.
    (1)
    netsh int ip set address "Local Area Connection" static {ip address} {ip mask} {default gw}
    netsh int ip set address "Local Area Connection" dns {ip address}
    (2)
     netsh int ip set address "Local Area Connection" dhcp
    Just renewing the IP address from DHCP will not do the trick; I have to set it static first. 
    Any ideas on what may be happening during the Static IP setting that would fix this? 
    I know that Microsoft just recently patched the SCHANNEL file(s) in November. 
    I started seeing this issue on December 15<sup>th</sup>.
    I’m currently assuming that there is a defective packet because according to MSDN and RFC tables the “Encrypted Alert” 21 code means
    decryption_failed – “Decryption of a TLSCiphertext record is decrypted in an invalid way: either it was not an even multiple of the block length or its padding values, when checked, were not correct. This message is always fatal.”
    I really appreciate and insight any may have on how this process works and what may be happening.
    - Dr. Dig

    MeipoXu,
    Thanks for the reply and fantastic link to that detail.  I am seeing events on many workstations, and not just the ones with this problem.  The event ID is 36887 and the message is “The following fatal alert was received: 40”.  I did some
    research on this error and it appears that it is related to the MS kb-2992611 patch.  Apparently the patch, which we did deploy back in December, has caused a number of schannel problems, while trying to fix some.  Our issue started on 12/15/14. 
    There's an article on ZDnet (search for "Microsoft Warns of problems with Schannel security update") where it explains what is happening since the patch.
    I have done two things to fix it, without removing the MS-patch. 
    The one manual fix I mentioned in my first post and I can also uncheck the 3.0 SSL/1.2 TLS in my IE browser. 
    In fact I went back to SSL 2.0 / TLS 1.0 and have not had any problems for 6 days now. 
    I am going to set a PC back to the “problem” settings to confirm 1.2 TLS is my problem. I’ll report back my findings for others. 
    The one thing to note is that we login to multiple secure sites and only one has the issue. 
    I suspect the other side has done, or not done, something to make the issue happen with my settings.
    Dr_Dig

  • Deploy CR 10 from VS 2005 C#  fails to login on 2nd try

    Hi,
    I'm new to CR and .NET in general, but I've got a working app on my development m/c.  I built a setup project in .NET and deployed the app to our test lab.
    From there I was able to generate a report on my first request, but when I returned to the dialog that I use to collect parms and select the report I need I fail to login the CR (Oracle).
    To be clear, my app builds 4 different reports, from my m/c I ran successful display as many copies of those reports as I have tried.  But, on the test lab m/c I can request any (1)one of the 4 reports, but as soon as I request a 2nd one the app fails with the Login failed message.
    I've already included the CrystalReportsRedist2005_x85.msm merge module.
    Anyone have any ideas about how to solve this problems
    thanks.
    Danny
    For anyone dealing with connection problems and may be interested in how I've resolved my connection problems:
    It turns out that the problem wasn't in CR10 or the setup project.  It was with the ODBC connection to Oracle9i. My m/c has a later version of Oracle9i then the version on the m/c in the test lab (9.2.0.5.0 vs 9.2.01.0)
    The the temp fix is to revise the SQLNET.ORA file.  Eventually we will need to install Oracle patches to correct for the ORA-12154 TNS could not be resolved error.  This is going to be necessary for all client m/c's before going live.
    Good luck to anyone dealing with similar issues.
    Danny

    Hi!
    I am having the same issue in Oracle Weblogic Server 10.3.0.
    I resolved it by increasing the memory in the setDomainEnv.sh
    MEM_ARGS="-Xms1G -Xmx1G"
    export MEM_ARGS
    MEM_PERM_SIZE="-XX:PermSize=384m"
    export MEM_PERM_SIZE
    MEM_MAX_PERM_SIZE="-XX:MaxPermSize=384m"
    export MEM_MAX_PERM_SIZE
    Anyway I don't know why this resolved it and why the exception is not a memory error. I have tested version 10.3.2 and it doesn't report this errors with the same memory assigned.

  • Failed to login B1i server

    Hello,
    I installed B1 integration components successfully and enabled Cockpit in SAP B1. The Dashboards working fine on server and clients. But sometimes (not always) I get the error below when login SAP B1:
    Cannot connect to SAP Business One Integration Service. In the Microsoft Services window, make sure this service is running.
    and dashboards don't work.
    it seems that it is due to timeout. I get the error below in logs file:
    2015-03-20 14:17:55,521 [1] ERROR SAP.BusinessOne.WebBridge.B1iConnector - Failed to login B1i server; Response detail: {
      "Status": 0,
      "Headers": null,
      "Cookies": null,
      "Body": "The operation has timed out"
    When the dashboards work I get the info. below in the same logs file:
    2015-03-24 12:06:18,293 [1] INFO  SAP.BusinessOne.WebBridge.ConnectorBase - set cookie: url=HTTPS://<server_name>:8443/B1iXcellerator/exec/ipo/vP.001sap0004.in_HCSX/com.sap.b1i.vplatform.runtime/INB_HT_CALL_SYNC_XPT/INB_HT_CALL_SYNC_XPT.ipo/proc, key=JSESSIONID, value=B5E9544EEFDF8B38E5036C2D941F9F17, domain=<server_name>, path=/B1iXcellerator
    Is there a way to overcome this issue ?
    Can I increase the timeout period ?
    My SAP B1 version is 9.1 PL05 (MS SQL Server 2012).
    Regards
    ~Nidal

    hi,
    try to following pdf and check your integration configuration.http://www.vision33.com/media/165196/v33%20how%20to%20b1if%20-%20installation%20documentation.pdf
    thanks & regards,
    Harshit

  • JAAS client access instead of JNDI

    Hi,
    I'm exploring using the JAAS client access instead of JNDI access on WL7.
    The Docs say I have to write a LoginModule. However, the following
    appears to work too (and of course, I'm not using a LoginModule):
         Environment env = new Environment();
              env.setProviderUrl(url);
              env.setSecurityPrincipal(username);
              env.setSecurityCredentials(password);
              Subject sub = new Subject();
              Authenticate.authenticate(env,sub);
              System.err.println("SUBJECT IS " + sub.toString());
              SampleAction sampleAction = new SampleAction(url);
              Security.runAs(sub, sampleAction);
    The LoginModule approach just appears to be a convoluted way of doing
    the same thing, so why do I need it?
    Also, the WebLogic examples do all sorts of strange things in their
    example LoginModule, like their commit does this:
    final PasswordCredential passwordCred = new
    PasswordCredential(username, password);
    AccessController.doPrivileged(new PrivilegedAction() {
    public java.lang.Object run() {
    subject.getPrivateCredentials().add(passwordCred);
    return null;
    (see http://edocs.bea.com/wls/docs70/security/fat_client.html#1029441)
    Surely this is not necessary - cos the actuall login call to
    Authenticate.authenticate would have populated the subject properly.
    Any ideas? TIA.
    Q

    You may want to read "Small Footprint Client Options for BEA WebLogic Server"
    paper (http://dev2dev.bea.com/resourcelibrary/whitepapers.jsp?highlight=whitepapers)
    Madhu <[email protected]> wrote:
    infact for a remote client to access the EJB, what are the necessary jar/files
    needed apart from the myejb.jar.
    Do we need to copy the complete weblogic.jar and weblogic/classes folder?
    "Madhu" <[email protected]> wrote:
    Even i have the same problem. I had to copy the weblogic.jar, and all
    the weblogic/classes
    folder to the client machine.
    I am thinking that this is a wrong process, and the jndi.jar is sufficient
    enough
    to make a lookup of home objects.
    I would appreciate If anyone has any solution other than copying the
    complete
    40M bytes.
    -Madhu
    Dimitri

  • Wireless Clients failing to authenticate via the RADIUS

    Hi friends
    I am trying to use Radius server (NPS) to authenticate my wireless users using 1941W router.
    For some reason it cannot authenticate successfully. I checked the radius server is reachable but still I dont see any luck.
    the config is like this:
    ***************Config snap shot*********************
    aaa new-model
    aaa group server radius group1
    server 10.32.0.154 auth-port 1812 acct-port 1813
    aaa authentication login EAP group group1
    aaa session-id common
    dot11 syslog
    dot11 ssid CORP
       vlan 320
       authentication open eap EAP
       mbssid guest-mode
    interface Loopback1
    ip address 10.51.240.1 255.255.255.255
    no ip route-cache
    interface Dot11Radio0
    no ip address
    no ip route-cache
    encryption vlan 320 mode ciphers aes-ccm
    ssid CORP
    antenna gain 0
    mbssid
    station-role root
    interface Dot11Radio0.1
    encapsulation dot1Q 320 native
    no ip route-cache
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface GigabitEthernet0
    description the embedded AP GigabitEthernet 0 is an internal interface connecting AP with the host router
    no ip address
    no ip route-cache
    interface GigabitEthernet0.1
    encapsulation dot1Q 320 native
    no ip route-cache
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface BVI1
    ip address 10.51.246.2 255.255.255.0
    no ip route-cache
    ip default-gateway 10.51.246.1
    ip radius source-interface Loopback1
    radius-server host 10.32.0.154 auth-port 1812 acct-port 1646 key V3rv3@mc0m
    bridge 1 route ip
    *********************End of config snap shot*********************
    When i run the debug i see the following messages which I am still trying to understand thought it would be worthwhile mentioning here:
    *******************Debug**********************
    AP1#
    *Mar  1 01:04:41.951: AAA/BIND(0000001E): Bind i/f
    *Mar  1 01:04:41.951: dot11_auth_add_client_entry: Create new client 2477.037e.22d4 for application 0x1
    *Mar  1 01:04:41.951: dot11_auth_initialize_client: 2477.037e.22d4 is added to the client list for application 0x1
    *Mar  1 01:04:41.951: dot11_auth_add_client_entry: req->auth_type 0
    *Mar  1 01:04:41.951: dot11_auth_add_client_entry: auth_methods_inprocess: 2
    *Mar  1 01:04:41.951: dot11_auth_add_client_entry: eap list name: EAP
    *Mar  1 01:04:41.951: dot11_run_auth_methods: Start auth method EAP or LEAP
    *Mar  1 01:04:41.951: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
    *Mar  1 01:04:41.951: dot11_auth_dot1x_send_id_req_to_client: Sending identity request to 2477.037e.22d4
    *Mar  1 01:04:41.951: EAPOL pak dump tx
    *Mar  1 01:04:41.951: EAPOL Version: 0x1  type: 0x0  length: 0x002F
    *Mar  1 01:04:41.951: EAP code: 0x1  id: 0x1  length: 0x002F type: 0x1
    030017B0: 0100002F 0101002F 01006E65 74776F72  .../.../..networ
    030017C0: 6B69643D 56434F52 502C6E61 7369643D  kid=VCORP,nasid=
    030017D0: 4B414C2D 30322D41 50312C70 6F727469  KAL-02-AP1,porti
    030017E0: 643D30                               d=0
    *Mar  1 01:04:41.955: dot11_auth_send_msg:  sending data to requestor status 1
    *Mar  1 01:04:41.955: dot11_auth_send_msg: Sending EAPOL to requestor
    *Mar  1 01:04:41.955: dot11_auth_dot1x_send_id_req_to_client: Client 2477.037e.22d4 timer started for 30 seconds
    *Mar  1 01:04:41.955: dot11_auth_parse_client_pak: Received EAPOL packet from 2477.037e.22d4
    *Mar  1 01:04:41.955: EAPOL pak dump rx
    *Mar  1 01:04:41.955: EAPOL Version: 0x1  type: 0x1  length: 0x0000
    033E86E0:          01010000                        ....
    *Mar  1 01:04:41.955: dot11_auth_dot1x_run_rfsm: Executing Action(CLIENT_WAIT,EAP_START) for 2477.037e.22d4
    *Mar  1 01:04:41.955: dot11_auth_dot1x_send_id_req_to_client: Sending identity request to 2477.037e.22d4
    *Mar  1 01:04:41.959: EAPOL pak dump tx
    *Mar  1 01:04:41.959: EAPOL Version: 0x1  type: 0x0  length: 0x002F
    *Mar  1 01:04:41.959: EAP code: 0x1  id: 0x2  length: 0x002F type: 0x1
    03001A20: 0100002F 0102002F 01006E65 74776F72  .../.../..networ
    03001A30: 6B69643D 56434F52 502C6E61 7369643D  kid=VCORP,nasid=
    03001A40: 4B414C2D 30322D41 50312C70 6F727469  KAL-02-AP1,porti
    03001A50: 643D30                               d=0
    *Mar  1 01:04:41.959: dot11_auth_send_msg:  sending data to requestor status 1
    *Mar  1 01:04:41.959: dot11_auth_send_msg: Sending EAPOL to requestor
    *Mar  1 01:04:41.959: dot11_auth_dot1x_send_id_req_to_client: Client 2477.037e.22d4 timer started for 30 seconds
    *Mar  1 01:04:41.963: dot11_auth_parse_client_pak: Received EAPOL packet from 2477.037e.22d4
    *Mar  1 01:04:41.963: EAPOL pak dump rx
    *Mar  1 01:04:41.963: EAPOL Version: 0x1  type: 0x0  length: 0x0012
    *Mar  1 01:04:41.963: EAP code: 0x2  id: 0x1  length: 0x0012 type: 0x1
    033603C0:                            01000012              ....
    033603D0: 02010012 01564552 56455C47 30373532  .....VERVE\G0752
    033603E0: 3736                                 76
    *Mar  1 01:04:41.963: dot11_auth_parse_client_pak: id is not matching req-id:1resp-id:2, waiting for response
    *Mar  1 01:04:41.963: dot11_auth_parse_client_pak: Received EAPOL packet from 2477.037e.22d4
    *Mar  1 01:04:41.963: EAPOL pak dump rx
    *Mar  1 01:04:41.963: EAPOL Version: 0x1  type: 0x0  length: 0x0012
    *Mar  1 01:04:41.963: EAP code: 0x2  id: 0x2  length: 0x0012 type: 0x1
    033AEE90:                   01000012 02020012          ........
    033AEEA0: 01564552 56455C47 30373532 3736      .VERVE\G075276
    *Mar  1 01:04:41.963: dot11_auth_dot1x_run_rfsm: Executing Action(CLIENT_WAIT,CLIENT_REPLY) for 2477.037e.22d4
    *Mar  1 01:04:41.963: dot11_auth_dot1x_send_response_to_server: Sending client 2477.037e.22d4 data to server
    *Mar  1 01:04:41.963: AAA/AUTHEN/PPP (0000001E): Pick method list 'EAP'
    *Mar  1 01:04:41.963: dot11_auth_dot1x_send_response_to_server: Started timer server_timeout 60 seconds
    *Mar  1 01:04:41.963: %AAA-3-BADSERVERTYPEERROR: Cannot process authentication server type *invalid_group_handle*
    *Mar  1 01:04:41.963: dot11_auth_dot1x_parse_aaa_resp: Received server response: FAIL
    *Mar  1 01:04:41.963: dot11_auth_dot1x_parse_aaa_resp: found eap pak in server response
    *Mar  1 01:04:41.963: Client 2477.037e.22d4 failed: EAP reason 2
    *Mar  1 01:04:41.963: dot11_auth_dot1x_parse_aaa_resp: Failed client 2477.037e.22d4 with aaa_req_status_detail 2
    *Mar  1 01:04:41.963: dot11_auth_dot1x_run_rfsm: Executing Action(SERVER_WAIT,SERVER_FAIL) for 2477.037e.22d4
    *Mar  1 01:04:41.963: dot11_auth_dot1x_send_response_to_client: Forwarding server message to client 2477.037e.22d4
    *Mar  1 01:04:41.963: EAPOL pak dump tx
    *Mar  1 01:04:41.963: EAPOL Version: 0x1  type: 0x0  length: 0x0004
    *Mar  1 01:04:41.963: EAP code: 0x4  id: 0x2  length: 0x0004
    03001DC0:                   01000004 04020004          ........
    03001DD0:
    *Mar  1 01:04:41.963: dot11_auth_send_msg:  sending data to requestor status 1
    *Mar  1 01:04:41.967: dot11_auth_send_msg: Sending EAPOL to requestor
    *Mar  1 01:04:41.967: dot11_auth_dot1x_send_response_to_client: Started timer client_timeout 30 seconds
    *Mar  1 01:04:41.967: dot11_auth_dot1x_send_client_fail: Authentication failed for 2477.037e.22d4
    *Mar  1 01:04:41.967: dot11_auth_send_msg:  sending data to requestor status 0
    *Mar  1 01:04:41.967: dot11_auth_send_msg: client FAILED to authenticate 2477.037e.22d4, node_type 64 for application 0x1
    *Mar  1 01:04:41.967: dot11_auth_delete_client_entry: 2477.037e.22d4 is deleted for application 0x1
    *Mar  1 01:04:41.967: %DOT11-7-AUTH_FAILED: Station 2477.037e.22d4 Authentication failed
    *Mar  1 01:04:41.967: dot11_auth_client_abort: Received abort request for client 2477.037e.22d4
    *Mar  1 01:04:41.967: dot11_auth_client_abort: No client entry to abort: 2477.037e.22d4 for application 0x1
    Any Idea where the problem could be?
    Regards,
    Mohit

    Just to add here, i ran another command on the AP/Router which indicates to me that there was no response from the Radius server.
    KAL-02-AP1#sh radius statistics
                                      Auth.      Acct.       Both
             Maximum inQ length:         NA         NA          1
           Maximum waitQ length:         NA         NA          2
           Maximum doneQ length:         NA         NA          1
           Total responses seen:          0          0          0
         Packets with responses:          0          0          0
      Packets without responses:         12          0         12
      Access Rejects           :          0
    Average response delay(ms):          0          0          0
    Maximum response delay(ms):          0          0          0
      Number of Radius timeouts:         48          0         48
           Duplicate ID detects:          0          0          0
    Buffer Allocation Failures:          0          0          0
    Maximum Buffer Size (bytes):        186          0        186
    Source Port Range: (2 ports only)
    1645 - 1646
    Last used Source Port/Identifier:
    1645/12
    1646/0
      Elapsed time since counters last cleared: 1h52m

  • Logon of user in client failed when starting a step

    Hi All,
    I have a question. (Might be simple to many).
    <b>Logon of user in client failed when starting a step.</b>
    Some of my scheduled jobs are getting cancelled due to the above error. It has been noted that the user corresponding to that job has been locked.
    Can anybody suggest how to change the user of a Background Job (without deleting and re-creating the same).
    Thanks and Regards
    Devanand

    Hi
    You cannot change the owner of the job once it is in released status.
    Better, create the job with same varient by an existing user and delete the cancelled job.
    regards,
    Vinodh.

  • ConfigMgr 2012 R2 Client Failes to Install on HP EliteBook laptops with Synaptics Touchpad drivers

    I've come across a fairly frustrating issue that has been taking up way too much of my time that past week or so. The issue started a little after some of our larger sites were migrated from SCCM 2007 to SCCM 2012. I started getting complaints that one of
    our technical workstations (HP 8770w) was not deploying properly. I started investigating the issue and the problem involved the removal of the old ConfigMgr 2007 client and install of the new SCCM 2012 R2 client.
    The Windows 7 x64 OS WIM that I am using is one that was migrated from the 07 to 2012 environment and it has been working fine. During the Setup Windows and ConfigMgr step the old client is removed and the new one for the 2012 environment installs. There
    has not been any issues with this, but I feel something has changed now that we are deploying the 2012 R2 client.
    Back to the issue, what happens is that the ConfigMgr client fails to uninstall the old client. Looking in the client.msi_uninstall file you will see that it is unable to locate a couple of SCCM 2007 configmgr client patches that were installed so it can
    uninstall it. I get the "Couldn't find local patch ''. Looking for it at its source." line in the uninstall file. When I look for that under HKEY_CLASSES_ROOT\Installer\Patches the ENTIRE directory structure is empty. There is not a single item
    listed under patches.
    Since the only thing that happens in between the pushing down of the WIM and installing the configmgr client is the drivers that is where I started to look. I started over with the basics (disk and network driver) and it was able to complete the OSD process
    (like the other 30+ models we currently support). I added drivers one by one having the system re-image each time. When I got to the Synaptics TouchPad drivers the issue would return. I've tried around 5 different drivers offered from the vendor and they
    all result in the same behavior.
    I'm still actively troubleshooting how to FIX this issue, but I have no idea why this is going on. I thought I would share with the community on this issue and see if anyone else has observed this VERY odd behavior.
    Here is a snippet from the client.msi_uninstall log:
    === Verbose logging started: 1/15/2014  22:59:34  Build type: SHIP UNICODE 5.00.7601.00  Calling process: D:\_SMSTaskSequence\OSD\GAS000EF\ccmsetup.exe ===
    MSI (c) (6C:BC) [22:59:34:264]: Resetting cached policy values
    MSI (c) (6C:BC) [22:59:34:264]: Machine policy value 'Debug' is 0
    MSI (c) (6C:BC) [22:59:34:264]: ******* RunEngine:
               ******* Product: {2609EDF1-34C4-4B03-B634-55F3B3BC4931}
               ******* Action:
               ******* CommandLine: **********
    MSI (c) (6C:BC) [22:59:34:264]: Client-side and UI is none or basic: Running entire install on the server.
    MSI (c) (6C:BC) [22:59:34:264]: Grabbed execution mutex.
    MSI (c) (6C:BC) [22:59:34:264]: Cloaking enabled.
    MSI (c) (6C:BC) [22:59:34:264]: Attempting to enable all disabled privileges before calling Install on Server
    MSI (c) (6C:BC) [22:59:34:264]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (00:80) [22:59:34:264]: Running installation inside multi-package transaction {2609EDF1-34C4-4B03-B634-55F3B3BC4931}
    MSI (s) (00:80) [22:59:34:264]: Grabbed execution mutex.
    MSI (s) (00:D4) [22:59:34:264]: Resetting cached policy values
    MSI (s) (00:D4) [22:59:34:264]: Machine policy value 'Debug' is 0
    MSI (s) (00:D4) [22:59:34:264]: ******* RunEngine:
               ******* Product: {2609EDF1-34C4-4B03-B634-55F3B3BC4931}
               ******* Action:
               ******* CommandLine: **********
    MSI (s) (00:D4) [22:59:34:264]: Machine policy value 'DisableUserInstalls' is 0
    MSI (s) (00:D4) [22:59:34:405]: SRSetRestorePoint skipped for this transaction.
    MSI (s) (00:D4) [22:59:34:405]: End dialog not enabled
    MSI (s) (00:D4) [22:59:34:405]: Original package ==> C:\Windows\Installer\b8ba.msi
    MSI (s) (00:D4) [22:59:34:405]: Package we're running from ==> C:\Windows\Installer\b8ba.msi
    MSI (s) (00:D4) [22:59:34:405]: APPCOMPAT: Uninstall Flags override found.
    MSI (s) (00:D4) [22:59:34:405]: APPCOMPAT: Uninstall VersionNT override found.
    MSI (s) (00:D4) [22:59:34:405]: APPCOMPAT: Uninstall ServicePackLevel override found.
    MSI (s) (00:D4) [22:59:34:405]: APPCOMPAT: looking for appcompat database entry with ProductCode '{2609EDF1-34C4-4B03-B634-55F3B3BC4931}'.
    MSI (s) (00:D4) [22:59:34:405]: APPCOMPAT: no matching ProductCode found in database.
    MSI (s) (00:D4) [22:59:34:420]: MSCOREE not loaded loading copy from system32
    MSI (s) (00:D4) [22:59:34:420]: Note: 1: 2262 2: MsiFileHash 3: -2147287038
    MSI (s) (00:D4) [22:59:34:420]: Couldn't find local patch ''. Looking for it at its source.
    MSI (s) (00:D4) [22:59:34:420]: Resolving Patch source.
    MSI (s) (00:D4) [22:59:34:420]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (00:D4) [22:59:34:420]: User policy value 'DisableMedia' is 0
    MSI (s) (00:D4) [22:59:34:420]: Machine policy value 'AllowLockdownMedia' is 0
    MSI (s) (00:D4) [22:59:34:420]: SOURCEMGMT: Media enabled only if package is safe.
    MSI (s) (00:D4) [22:59:34:420]: SOURCEMGMT: Looking for sourcelist for product {D478B8EE-EE0A-4004-980B-4D55533EE3C2}
    MSI (s) (00:D4) [22:59:34:420]: Note: 1: 1706 2: {D478B8EE-EE0A-4004-980B-4D55533EE3C2} 3: 
    MSI (s) (00:D4) [22:59:34:420]: SOURCEMGMT: Failed to resolve source
    MSI (s) (00:D4) [22:59:34:420]: Searching provided command line patches for patch code {D478B8EE-EE0A-4004-980B-4D55533EE3C2}
    MSI (s) (00:D4) [22:59:34:420]: Could not find source for missing patch {D478B8EE-EE0A-4004-980B-4D55533EE3C2} -- orphaning this patch
    MSI (s) (00:D4) [22:59:34:420]: Couldn't find local patch ''. Looking for it at its source.
    MSI (s) (00:D4) [22:59:34:420]: Resolving Patch source.
    MSI (s) (00:D4) [22:59:34:420]: User policy value 'SearchOrder' is 'nmu'
    MSI (s) (00:D4) [22:59:34:420]: SOURCEMGMT: Media enabled only if package is safe.
    MSI (s) (00:D4) [22:59:34:420]: SOURCEMGMT: Looking for sourcelist for product {599B62C0-F1BE-4FE8-80D9-36937D5DDBFE}
    MSI (s) (00:D4) [22:59:34:420]: Note: 1: 1706 2: {599B62C0-F1BE-4FE8-80D9-36937D5DDBFE} 3: 
    MSI (s) (00:D4) [22:59:34:420]: SOURCEMGMT: Failed to resolve source
    MSI (s) (00:D4) [22:59:34:420]: Searching provided command line patches for patch code {599B62C0-F1BE-4FE8-80D9-36937D5DDBFE}
    MSI (s) (00:D4) [22:59:34:420]: Could not find source for missing patch {599B62C0-F1BE-4FE8-80D9-36937D5DDBFE} -- orphaning this patch
    MSI (s) (00:D4) [22:59:34:420]: SequencePatches starts. Product code: {2609EDF1-34C4-4B03-B634-55F3B3BC4931}, Product version: 4.00.6487.2000, Upgrade code: {252DA259-82CA-4177-B8D0-49C78937BA3E}, Product language 1033
    MSI (s) (00:D4) [22:59:34:420]: SequencePatches returns success.
    MSI (s) (00:D4) [22:59:34:420]: Final Patch Application Order:
    MSI (s) (00:D4) [22:59:34:420]: Other Patches:
    MSI (s) (00:D4) [22:59:34:420]: Internal Exception during install operation: 0xc0000005 at 0x000007FEFDBF35E1.
    MSI (s) (00:D4) [22:59:34:420]: WER report disabled for silent install.
    MSI (s) (00:D4) [22:59:34:420]: Internal MSI error. Installer terminated prematurely.
    MSI (s) (00:D4) [22:59:34:420]: MainEngineThread is returning 1603
    MSI (s) (00:80) [22:59:34:420]: No System Restore sequence number for this installation.
    Unexpected Termination
    MSI (s) (00:80) [22:59:34:420]: User policy value 'DisableRollback' is 0
    MSI (s) (00:80) [22:59:34:420]: Machine policy value 'DisableRollback' is 0
    MSI (s) (00:80) [22:59:34:420]: Incrementing counter to disable shutdown. Counter after increment: 0
    MSI (s) (00:80) [22:59:34:420]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (00:80) [22:59:34:420]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
    MSI (s) (00:80) [22:59:34:420]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
    MSI (s) (00:80) [22:59:34:420]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
    MSI (s) (00:80) [22:59:34:420]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (s) (00:80) [22:59:34:420]: Restoring environment variables
    MSI (c) (6C:BC) [22:59:34:420]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied.  Counter after decrement: -1
    MSI (c) (6C:BC) [22:59:34:420]: MainEngineThread is returning 1603
    === Verbose logging stopped: 1/15/2014  22:59:34 ===

    @Narcoticoo
    I've not used the tool. This issue has also expanded since the original title as I'm getting the same behavior with the driver package that does not include the Touchpad driver anymore. I'm currently going back to just the network and storage driver to see
    if it works or not.
    However, this is the bigger issue I have:
    I have an older build called Build 5.7 internally. Using that WIM and the same driver package (original one that has the Touchpad driver included) it works without issue. Never had a problem.
    The new build is called Build 6.0 internally. This WIM and the same driver package has not been working at all.
    We support about 35 models with our current Windows 7 x64 image and I am having the same failure issue on four different HP models. They are the 8770w, ZBook 17, Z600 and Z820. The majority of the other systems are Dell devices. Just for transparency sakes,
    nothing Dell specific is in the core WIM that is captured.
    So, Build 5.7 can deploy just fine on all pieces of hardware with their old driver packages. The new Build 6.0 intalls on almost every platform fine with their old driver packages. These four HP systems are nothing but trouble though. I've opened a case
    with HP to see if they have noticed anything internally. I'm not too hopeful, but at least it is something. Maybe there is some odd conflict with a newer Windows patch or some odd dependency on older HP drivers. The new image has .NET 4.5.1, IE 10 and so forth.

  • Windows Update Client failed to detect with error 0xc8000247 after using Lenovo System Update 5

    My Windows 7, SP1 was running fine, until I installed few updates on 10/15 using Lenovo System Update 5 then Windows Update stopped working, shows as RED:
    {CE3119AD-35EF-41CF-9C21-C7698FEB8393}    2013-10-14 21:53:00:256-0700    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Software Synchronization    Windows Update Client successfully detected 4 updates.
    {EB17A01A-EB6E-49FF-9EA2-AA0DD063B4B1}    2013-10-15 04:15:54:069-0700    1    162    101    {C61A0D00-3E51-48AC-B0AF-1D3E02B9E5D3}    201    0    AutomaticUpdates    Success    Content Download    Download succeeded.
    {77DAE88F-2795-4258-8BBF-8D27E53662CF}    2013-10-15 12:10:38:196-0700    1    193    102    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Content Install    Restart Required: To complete the installation of the following updates, the computer must be restarted. Until this computer has been restarted, Windows cannot search for or download new updates:  - Security Update for Windows 7 for x64-based Systems (KB2862330)
    {1398F777-3AEF-4D1D-BE4C-407EC4AEAD4C}    2013-10-15 12:15:25:676-0700    1    183    101    {C61A0D00-3E51-48AC-B0AF-1D3E02B9E5D3}    201    0    AutomaticUpdates    Success    Content Install    Installation Successful: Windows successfully installed the following update: Security Update for Windows 7 for x64-based Systems (KB2862330)
    {A220898A-E5FE-4FE7-8413-2B0C7B4013D0}    2013-10-15 12:15:25:766-0700    1    202    102    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Content Install    Reboot completed.
    {A5400FF2-33ED-4A47-8409-13E5DFE16A6D}    2013-10-15 19:29:31:486-0700    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    ChkWuDrv    Success    Software Synchronization    Windows Update Client successfully detected 0 updates.
    {43C533EE-775D-445E-A652-06648B72DE65}    2013-10-15 19:29:49:702-0700    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    ChkWuDrv    Success    Software Synchronization    Windows Update Client successfully detected 0 updates.
    {D6AAAFFB-7F18-4A7E-B39D-1BA09CDC5E6D}    2013-10-15 19:30:05:744-0700    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    AutomaticUpdates    Success    Software Synchronization    Windows Update Client successfully detected 3 updates.
    {4E73B1C1-5BA2-415D-AB34-92F7AB3DB418}    2013-10-15 19:30:08:753-0700    1    147    101    {00000000-0000-0000-0000-000000000000}    0    0    ChkWuDrv    Success    Software Synchronization    Windows Update Client successfully detected 0 updates.
    {51248882-41AC-4E59-B813-87AD326310AD}    2013-10-15 20:00:05:044-0700    1    183    101    {DBD3B4E9-0357-47DA-8317-D0CF2163BFE6}    501    0    wusa    Success    Content Install    Installation Successful: Windows successfully installed the following update: Hotfix for Windows (KB2661796)
    {FB2B8E5E-442C-4E76-B23D-6A41B4324C9D}    2013-10-16 00:11:39:832-0700    1    148    101    {00000000-0000-0000-0000-000000000000}    0    c8000247    AutomaticUpdates    Failure    Software Synchronization    Windows Update Client failed to detect with error 0xc8000247.
    Lenovo Thinkpad W500, Intel (R), Windows 7, SP1, latest updates as of Oct 15
    (1) Checked Setting,  set to automatic update whenever, even changed to never update, rebooted the OS and changed back to automatic update and rebooted the OS.
    (2) Stopped Windows Update Services, renamed SoftwareDistribution folder and started the window update services and rebooted.
    (3) Ran MS FIXIT
    (4) Ran System File checker Scan (sfc /scannow)
    (5) Ran CHKDSK /F
    (6) Installed "Intel Rapid Storage Technology" drivers from Lenovo site
    (7) Ran Update for Windows 7 for x64-based Systems (KB971033)
    None of the above possible recommended solutions were able to fix the issue yet and now I am getting a message your Window is Not Genuine!
    Any help or guidance is appreciated.
    Solved!
    Go to Solution.

    The Lenovo System Update installed the "Intel Matrix Storage Manager driver 8.9.2.1002" right before the Windows Upgrade got broken. So in the Device Manager under IDE ATA/ATAPI Controllers, I choose Intel ICH9M-E/M SATA AHCI Controller, on the Driver Tab, I choose the option "Roll Back Driver" and after rolling back the driver and restarting the OS, now Windows Update is working like a Champ!
    The End!

  • Cannot open database "ReportServer" requested by the login. The login failed. Login failed for user 'USER LOGON'

    I want to grant permissions to all domain users to view reports on our Report Server. Domain users are able to access our Report Server URL and folder, but when they click on a report item they get an error message: 
    "Cannot open database "ReportServer" requested by the login. The login failed. Login failed for user 'USER LOGON'"
    I'm using windows authentication and configured the local service account in SSReportS Config Manager as the credentials to connect to the Report Server DB. 
    Can someone please help how I should properly do this step by step to give all domain users permissions to view a report in SSRS?
    Thanks much! - Rookie DBA

    Hi IWAR,
    The error message "Cannot open database "ReportServer" requested by the login. The login failed. Login failed for user 'USER LOGON'" means the user 'USER LOGON' does not have permissions to access the "ReportServer" database.
    To fix this issue, please verify that the user has a valid database user login. For more details, please refer to the following steps.
    In SQL Server Management Studio, open Object Explorer and expand the Databases folder.
    Expand the database in which to create the new database user.
    Right-click the Security folder, point to New, and then click User.
    On the General page, enter a name for the new user in the User name box.
    In the Login name box, enter the name of a SQL Server login to map to the database user.
    Click OK.
    Reference:
    http://technet.microsoft.com/en-us/library/ms156468(v=sql.105).aspx
    Hope this helps.
    Thanks,
    Katherine Xiong
    Katherine Xiong
    TechNet Community Support

  • The User Profile Service service failed to Login user Profile error in Windows 7 Home Premium

    Hi,
    I recently purchased a new Dell Inspirion 1564 Laptop which had Microsoft Windows 7 Home Premium 64-bit installed.
    The hardware configuration is i5 core Processor, 4GB Ram , 320GB HDD and 512MB Graphics card.
    Today morning, I couldn't login as the system returned the following error after I entered the password.
    "The User Profile Service service failed to login.
    User Profile cannot be loaded"
    I couldn't login at all as i had not created any other user account, even the face recognition didn't work.
    I had to restore my pc to the previous state. I believe this happened after the installation of Windows Malicious Software Removal Tool x64 - March 2010 (KB890830) update, not immeditately though as i used the system few times after the installation of this update.
    Is this a bug? I cant imagine if this happens if I am about to give a presentation, its going to be disastrous!
    Any help is appreciated
    Avinash

    I'm getting the same issue - I'm the IT Manager at a school where every student has a laptop (fujitsu tablet T4410). This occurs to at least one new student every day. I have been unable to re-create the issue on demand, although I suspect it occurs when a temporary user profile gets created after the logon process takes too long (due to some disk activity, possibly related to windows updates or some thing). When we were creating student accounts on the machines, this would occur if we attempted to log in the newly created account before the computer had 'settled down' - it seems that there is a logon timeout, after which something stops working. If the new user's first logon happened too soon after booting, the profile would be corrupted. But this doesn't quite explain why it occurs seemingly randomly now.
    My current solution is to boot into safe mode, back up the user's files, delete the account, create it again (the other suggested solutions on the internet did not work)
    If you're desperate, you can log in while in safe mode, and use that to create a new account.
    In any case, this is proving a very bad experience of Windows 7 for my students, and I hope to see a more useful fix for this soon.

  • The SMB client failed to resume a handle on a file share with continuous availability

    Hi.
    We have a 2-node WS2012 cluster that has a file server role with couple shares configured.
    We're however constantly getting spammed by the following errors in the eventlog:
    1) event 1002, source: SmbServer, message: "RKF failure - SRV2 failed to get acknowledgement from Resume Key filter for persistent handle request."
    2) SCOM has an alert opened with this description: "SMB client failed to resume Continuously Available (CA) handle as Resume Key Filter is not acknowledging the handle." Per the alert knowledge, we've inspected ResumeKeyFilter eventlog, but it
    contains only informational message and warnings and none of those are from the time the alert was created.

    Hi,<o:p></o:p>
    Please try applying the following hotfixes.<o:p></o:p>
    Update that improves cloud service provider resiliency in Windows Server 2012<o:p></o:p>
    http://support.microsoft.com/kb/2870270
    <o:p></o:p>
    Physical Disk resource move during the backup of a Cluster Shared Volume (CSV) may cause resource outage<o:p></o:p>
    http://support.microsoft.com/kb/2869923
    <o:p></o:p>
    Can't access a resource that is hosted on a Windows 8 or Windows Server 2012-based failover cluster<o:p></o:p>
    http://support.microsoft.com/kb/2838043
    <o:p></o:p>
    Best regards,
    Vincent Wu
    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Jax-ws deployed in standalone client fails with nullpointerexception

    I have a project which has deployed successfully as a standalone client with deployed jar files wlfullclient.jar, etc. When I add the jax-ws functions that I require, the deployed client fails with a nullpointerexception that is generated from the constructor of the Service class. The project runs successfully within the JDeveloper 11.1.1.5 environment and on a weblogic 10.3 server platform, but fails when I deploy as a standalone client with the wlfullclient.jar. I'm using JDK 1.6.0_24. In testing, the error occurs when I replace the {WLHome}\server\lib\weblogic.jar entry in the classpath with the wlfullclient.jar.
    I tested from another angle by creating my jax-ws functions in a standalone deployment, and it works successfully communicates with the webservices. No additional entries on the classpath besides my deployed jar. I then added to my deployment a simple JMS context lookup:
    Hashtable ht = new Hashtable();
    ht.put(Context.INITIAL_CONTEXT_FACTORY, contextFactoryProvider);
    ht.put(Context.PROVIDER_URL, urlString);
    Context context = new InitialContext(ht);
    This test runs without error in the JDeveloper environment. As soon as I add the wlfullclient.jar in the standalone environment, I get the following exception:
    Exception in thread "main" java.lang.NoClassDefFoundError: com/sun/xml/ws/spi/ProviderImpl
    at java.lang.ClassLoader.defineClass1(Native Method)
    at java.lang.ClassLoader.defineClassCond(ClassLoader.java:630)
    at java.lang.ClassLoader.defineClass(ClassLoader.java:614)
    at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:141)
    at java.net.URLClassLoader.defineClass(URLClassLoader.java:283)
    at java.net.URLClassLoader.access$000(URLClassLoader.java:58)
    at java.net.URLClassLoader$1.run(URLClassLoader.java:197)
    at java.security.AccessController.doPrivileged(Native Method)
    at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:305)
    at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
    at java.lang.ClassLoader.loadClass(ClassLoader.java:246)
    at javax.xml.ws.spi.FactoryFinder.safeLoadClass(FactoryFinder.java:150)
    at javax.xml.ws.spi.FactoryFinder.newInstance(FactoryFinder.java:30)
    at javax.xml.ws.spi.FactoryFinder.find(FactoryFinder.java:90)
    at javax.xml.ws.spi.Provider.provider(Provider.java:83)
    at javax.xml.ws.Service.<init>(Service.java:56)
    Interestingly, there is a class com/sun/xml/internal/ws.spi/ProviderImpl in the {JAVA_HOME}/jre/lib/rt.jar file, and I suppose this is what is used by the jax-ws classes when the wlfullclient.jar is not present on the classpath.
    So, what is it that I am missing in how to get the jax-ws classes and the jms classes to work in the standalone deployment environment (outside of the JDeveloper environment).
    Edited by: user3653687 on Jan 9, 2012 1:38 PM
    Edited by: user3653687 on Jan 9, 2012 2:49 PM

    Here is how I solved this problem to execute the application from a jar file (using Oracle Fusion Middleware 11.1.1.5.0 distribution). The key seems to be to extract the contents of the wseeclient.zip file into the same directory as the wlfullclient.jar and ws.api_1.1.0.0.jar files and then ensure that these 2 jars are on the classpath.
    In JDeveloper, create a project that has the jms/jax-ws classes.
    Put the following text entries to form the classpath (along with other dependent jars, e.g. org.eclipse.persistence...) into a file which will be included in the manifest for the client jar. Be sure to separate entries with a space.
    lib/wlfullclient.jar lib/wseeclient.jar lib\ws.api_1.1.0.0.jar lib\org.eclipse.persistence_1.1.0.0_2-1.jar
    In the Edit Deployment Profile Properties, select Include Manifest File, specify the main class to execute, and Add the classpath file to be included in the manifest.
    Deploy the jar file.
    In a deployment area, create the directory that will contain all the classpath jars (e.g. ./lib).
    Within the directory ./lib, extract all files from wseeclient.zip (found in {weblogic home}/server/lib)
    Copy wlfullclient.jar into the directory ./lib from the {weblogic home}/server/lib
    Copy ws.api_1.1.0.0.jar into the directory ./lib from {oracle middleware home}modules
    Copy org.eclipse.persistence_1.1.0.0_2-1.jar (for jaxb support) itno the directory ./lib from {oracle middleware home}/modules
    Copy the deployed client jar to the deployment area and execute, e.g.:
    java -jar ClientTest.jar myArguments

Maybe you are looking for