Limiting Number of connections from a single user

Hi ,
I am using 9.2.0.6 DB, i need to restrict the number of connections from a single user to 100.
Currently the user is having DEFAULT profile, this profile is having several other users associated to it.
What are all the available options to create restriction for a single user.
Create a new profile and add the user to the New profile is the option i have.
In that case can i create a copy of the Default profile and changing the SESSIONS_PER_USER to 100? will it work.
Appreciate your suggestion.
Thanks,
Sathis
Edited by: user7043544 on Feb 22, 2010 9:46 PM

Hi,
Since it is a default profile you can just create a new profile with the resource type you are interested it.
And if you want to copy the existing profile extract its ddl through below command, change the profile name and required resource and run against the db.
select dbms_metadata.get_ddl('PROFILE','<Profile_name>') from dual;Regards
Anurag

Similar Messages

PowerPC G5 will not boot (from CD, single-user, verbose...) - is it dead?

I had posted this in the OSX forum but had a suggestion to post here as well - any suggestions would be greatly appreciated!
My PowerPC G5 (10.4.11) will not boot. It gets to the grey Apple screen, and then freezes there, no progress dial, and the fan starts racing after a couple of minutes sitting there. Here is what I have tried so far and the results:
-Will not boot normally - freezes at grey screen
-Will not boot from CD (DiskWarrior, 10.4 Install disc OR 10.3 Install disc - which came with the G5, each time it freezes at grey screen
-Will not boot in safe mode - freezes at grey screen
-Will not get into single-user mode, freezes at "DART-enabled"
-Will not get into verbose mode, freezes at "DART-enabled"
-Holding option when starting up allows me to select a drive (hard drive or CD), but then freezes at grey screen when attempting to boot from either drive
-Option-Command-Shift-Delete does nothing when starting up, again freezes at grey screen
-Option-Command-P-R does not work - well, maybe it deletes PRAM, but it never even gets to the grey screen, freezes with a blank (black) screen, so that can't be right
-I CAN get into open firmware & eject cd, cannot boot up from there - it freezes at the grey screen with a circle w/a line through it
-Attempted to reset NVRAM from Open Firmware, "reset-nvram" and "set-defaults" both were ok, then it froze after "reset-all"
I have tried everything I could think of and everything I can find - Does anyone have any possible suggestions or ideas for what I can do?
I had a couple suggestions that it could be RAM, so I'm going to try to run Apple Hardware Test, though if I can't boot from a CD, that will make that very difficult. Any thoughts?

Hi svman8-
Did you also reset the SMU?
One thing known to cure various ills is to replace the battery.
This may be a helpful link:
How to reset the SMU on a Power Mac G5 (Late 2004) or Power Mac G5 (Late 2005)
Luck-
-DP

Unable to make a transparent connection from non root user

Hi
I am trying to make a transparent connection from a non-root user and I am having permission denied when trying to generate ssh keys, as per below:
$ ssh-keygen -t rsa
Generating public/private rsa key pair.
Enter file in which to save the key (/global/xnode/taprap/.ssh/id_rsa):
Enter passphrase (empty for no passphrase):
Enter same passphrase again:
open /global/xnode/taprap/.ssh/id_rsa failed: Permission denied.
Saving the key failed: /global/xnode/taprap/.ssh/id_rsa.
Its working fine as root user, but not for any other user.
Please can you help
FR

Hi
for /global/xnode/taprap I have:
drwxrwxrwx 35 taprap other 59904 Sep 30 10:35 taprap
and for the .ssh
ls -al .ssh
total 122
drwx------ 2 105 other 512 Jan 27 2009 .
drwxrwxrwx 35 taprap other 59904 Sep 30 10:45 ..
-rw-r--r-- 1 105 other 440 May 3 2010 known_hosts
ls -al /.ssh/id_rsa
-rw------- 1 root root 883 Mar 15 2011 /.ssh/id_rsa

Can you move websites published on from a Single User account to Team account?

Hi All,
Need some help we had a single user account with which all our websites were hosted for clients, then we upgraded the whole studio to the Team Package, but need to know if we can cancel the single user licence and move the current live sites in that account to our team account? Any help would be greatly appreciated.
Thanks, Matt.

Hi,
There is a ~/Library/Mail/ and this has a subfolder of /AccountTypes, so full path is ~/Library/Mail/AcountTypes
I have 6 active email accounts over 20000 mesages and send and receive constantly. Until upgrading to Lion I was able to see the directory contents you mentioned and used to backup the .mbox files etc as required and everything was good.
Now Nothing, hence my confusion
Any ideas? Am loathed to delete complete drive as even though I have a timemachine backup and could also generate a diskimage file am just not happy

Limited number of connections?

Running OS X Server (3.1.2) and am getting an error on the client, "No more connections can be made to this remote computer at this time because there are already as many connections as the computer can accept." Can't find a place to change this limit.

Thanks for the info. I'm glad I know where some form of SACL access had gone. BUT, this was really hokey. I couldn't add a group from the domain to Accounts/groups. So I had to create a local group and put the domain group inside (group inside a group). I then gave them permission to "sharing" (which used to be permission to the actual service like AFP and SMB) and tried to connect. No go.
I also noticed that my other local groups did not have this access box checked, so they really shouldn't be working but are working just fine. The users in that group have access, which is probably why it is working. However, I can't list everybody at my institution in the user list (30,000+ users). I need to use the domain group and give it access. However, it still didn't work.
This did work when i first setup the server, and then it up and quit sharing to the domain users for no good reason other than it was too much work.
I am going to rebuild this system soon, maybe this weekend.
To reiterate to other posts, "The server is set to it's standard user limits." Here is my complete settings for AFP and SMB:
afp:attemptAdminAuth = yes
afp:maxGuests = -1
afp:afpTCPPort = 548
afp:clientSleepTime = 24
afp:replyCacheQuantum = 32
afp:maxConnections = -1
afp:sendGreetingOnce = no
afp:reconnectTTLInMin = 1440
afp:clientSleepOnOff = yes
afp:loginGreeting = ""
afp:errorLogPath = "/Library/Logs/AppleFileService/AppleFileServiceError.log"
afp:errorLogTime = 0
afp:activityLogTime = 7
afp:errorLogSize = 1000
afp:kerberosPrincipal = "afpserver/LKDC:SHA1.948F7CC84CB7C63919E46A45DFB85E48F0E1F3DD@LKDC:SHA1.948F7CC 84CB7C63919E46A45DFB85E48F0E1F3DD"
afp:recon1SrvrKeyTTLHrs = 168
afp:tcpWindowSize = 64
afp:idleDisconnectOnOff = no
afp:reconnectFlag = "no_admin_kills"
afp:activityLog = yes
afp:reconnectKeyLocation = "/private/etc/AFP.conf"
afp:loginGreetingTime = 1315436086
afp:adminGetsSp = no
afp:fullServerMode = yes
afp:idleDisconnectMsg = ""
afp:updateHomeDirQuota = yes
afp:serverStoppedTime = 1404998168
afp:activityLogPath = "/Library/Logs/AppleFileService/AppleFileServiceAccess.log"
afp:authenticationMode = "standard_and_kerberos"
afp:lock_manager = yes
afp:admin31GetsSp = yes
afp:shutdownThreshold = 3
afp:TCPQuantum = 1048576
afp:allowSendMessage = yes
afp:idleDisconnectTime = 10
afp:loggingAttributes:logOpenFork = yes
afp:loggingAttributes:logDelete = yes
afp:loggingAttributes:logCreateDir = yes
afp:loggingAttributes:logLogin = yes
afp:loggingAttributes:logLogout = yes
afp:loggingAttributes:logCreateFile = yes
afp:tickleTime = 30
afp:specialAdminPrivs = no
afp:noNetworkUsers = no
afp:idleDisconnectFlag:adminUsers = yes
afp:idleDisconnectFlag:registeredUsers = yes
afp:idleDisconnectFlag:usersWithOpenFiles = yes
afp:idleDisconnectFlag:guestUsers = yes
afp:recon1TokenTTLMins = 10080
afp:guestAccess = no
afp:allowRootLogin = no
afp:activityLogSize = 1000
afp:afpServerEncoding = 0
afp:createHomeDir = yes
smb:LoggingLevel = 2
smb:MasterBrowser = "local"
smb:SuspendServices = no
smb:VirtualAdminShares = no
smb:KerberosRealm = "MFAD.MFROOT.ORG"
smb:Workgroup = "MFAD"
smb:VirtualHomeShares = yes
smb:wins server:_array_index:0 = _empty_dictionary
smb:AllowLanManAuth = no
smb:ServerDescription = "corsrv"
smb:LocalKerberosRealm = "LKDC:SHA1.948F7CC84CB7C63919E46A45DFB85E48F0E1F3DD"
smb:NetBIOSName = "CORSRV"
smb:AllowNTLMAuth = yes
smb:EnabledServices:_array_index:0 = "disk"
smb:PasswordServer = "ropmad104d.mfad.mfroot.org."
smb:AllowNTLM2Auth = yes
smb:MaxClients = 100
smb:ServerRole = "ActiveDirectoryMember"
smb:AllowGuestAccess = no
smb:AllowKerberosAuth = yes
smb:DOSCodePage = "437"
If you see anything else wrong, please let me know, but it doesn't have a limit and for some reason that error has gone away (about the same time it quit sharing to the domain altogether). I think it needs a rebuild from scratch.

Deleting emails with a specific subject from a single user mailbox

we are exchange 2007 on SP1. we do not have an edge server, only a hub server.
A user mailbox was flooded with 11000 "Undeliverable:" emails in the last 2 days, the source being "DSA". I am still finding out why this has happened. As for now, I have set up a rule to silently drop all emails with this specific subject.
now the user wanted our team to delete all of these 11000 emails from his mailbox.
we gave the appropriate permission to the users mailbox by running the command
Get-Mailbox -Identity “[email protected]” | Add-MailboxPermission -User [email protected] -AccessRights FullAccess -InheritanceType all
Then I ran the below command
Get-Mailbox -Identity “[email protected]” | Export-Mailbox -SubjectKeywords "Undeliverable:" -IncludeFolders "\Inbox" -StartDate "09/22/2014" -EndDate "09/23/2014" -DeleteContent -Confirm:$false
The command ran for a while, showing it was deleting 19000 odd emails with the below summary
[PS] C:\Windows\System32>Get-Mailbox -Identity "[email protected]" | Export-Mailb
ox -SubjectKeywords "Undeliverable:" -IncludeFolders "\Inbox" -StartDate "09/22/
2014" -EndDate "09/23/2014" -DeleteContent -Confirm:$false
TargetMailbox :
TargetServer :
TargetDatabase :
MailboxSize : 733800KB
IsResourceMailbox : False
SIDUsedInMatch :
SMTPProxies :
SourceManager :
SourceDirectReports :
SourcePublicDelegates :
SourcePublicDelegatesBL :
SourceAltRecipient :
SourceAltRecipientBL :
SourceDeliverAndRedirect :
MatchedTargetNTAccountDN :
IsMatchedNTAccountMailboxEnabled :
MatchedContactsDNList :
TargetNTAccountDNToCreate :
TargetManager :
TargetDirectReports :
TargetPublicDelegates :
TargetPublicDelegatesBL :
TargetAltRecipient :
TargetAltRecipientBL :
TargetDeliverAndRedirect :
Options : DeleteSourceContent
SourceForestCredential :
TargetForestCredential :
TargetFolder :
PSTFilePath :
RsgMailboxGuid :
RsgMailboxLegacyExchangeDN :
RsgMailboxDisplayName :
RsgDatabaseGuid :
StandardMessagesDeleted : 0
AssociatedMessagesDeleted : 0
DumpsterMessagesDeleted : 19020
MoveType : DeleteOnly
MoveStage : Completed
StartTime : 9/23/2014 7:29:01 PM
EndTime : 9/23/2014 7:32:19 PM
StatusCode : 0
StatusMessage : Messages have been deleted from the source m
ailbox.
ReportFile : C:\Program Files\Microsoft\Exchange Server\L
ogging\MigrationLogs\export-Mailbox20140923-
192900-8103154.xml
However, when I open the user's mailbox all of the emails still exist. kindly help me understand where I am going wrong and how I can delete all these emails.
Thank You
Philip

Are they still specifically in the Inbox?
I was thinking that the account might have "Deny" permissions to the user's mailbox but it looks like it can access the mailbox and delete items.
StandardMessagesDeleted          : 0
AssociatedMessagesDeleted        : 0
DumpsterMessagesDeleted         : 19020
Please mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

I can view only a limited number of images from Google image and other sites

Any site which offers multiple images is now limited to, perhaps, as few as eight. Example: Google Images. This does not happen with Google Chrome.

Start Firefox in [[Safe Mode]] to check if one of the add-ons is causing the problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
* Don't make any changes on the Safe mode start window.
See:
* [[Troubleshooting extensions and themes]]

Data back up from Single User Mode

Hello,
I have a problem with my 700 MHz iBook, dual USB, with OS X 10.3.9.
Unfortunately the OS doesn't start up because of "overlapped extent allocation" problem...
I would like to re-install the complete OS but before doing it, I would like to back up some directories.
Is it possible to save some data, by connecting an Ipod or some sort of external peripheral, from the Single User mode?
If yes, how can I do it?
Thank you in advance from your kind support.

Before giving up the ghost check out these:
http://docs.info.apple.com/article.html?artnum=25770.
Manually fix Overlapped Extent Allocation Errors without Disk Warrior
Overlapped overlapped extent allocation errors can be the bane of any Mac user's existence. Often, these errors go unnoticed until the problem becomes visible: your Mac might refuse to boot, crash unexpected, or worse, critical data might disappear from the Finder. Disk Utility can detect, but not fix overlapped extent allocation errors, and certain third-party utilities, such as Alsoft Diskwarrior, can fix them, but generally without reporting the consequences.
Overlapped extent allocation error occur when the file system thinks that two files are occupying the same area on the hard disk, hence overlapping on the same "inode," which is the structure which holds the location of the data blocks the file occupies, and also file permissions and flags.
Clearing the "overlapped" or "overallocated" extent allocation essentially means that you'll have to lose some data, because the only way to remove the overlap is to delete the file that's occupying the inode. So, if you suspect, or find out, that the guilty file is a critical system file that resides in one of the hidden system directories such as /etc /var /usr/ or visible system directories such as /System or /Library, and you don't want to reinstall the whole OS (which might not fix the overlapped extent allocation anyway), it's good to have another disk available to copy the files back to your original disk if necessary: a second bootable hard drive or a firewire drive connected to your Mac when you remove the misbehaving file. Just make sure that when you copy the file back to your boot disk that the permissions are correct, so it's best to use the "ditto" command, so that all sticky bits, flags, and permissions are preserved.
In case you didn't know, you don't have to boot from an install CD in order to check for overlapped extent allocations. All you need to do is restart your Mac, while holding down command + S to boot in "single-user mode."
At the command prompt that appears, type:
$ fsck -fy
If you have an overlapped extent allocation, you'll see:
"Overlapped Extent Allocation" (File 123456d)
No matter how many times you run fsck -fy, you'll never be rid of the error.
So, simply issue the following command:
find / -inum 123456 -print
Note the "d" was dropped, or any extra letter that appears after the inode number.
The find will return a file name that matches with the inode number, and the path to that file. If you remove the file then the fsck will not return this error next time you run it.
However, before you can delete the file(s) in single-user mode, you'll need to mount the file system. Type:
$ mount -uw /
When done, issue the "sync" command, and that will flush the write cache so that all pending writes are written from memory to the disk. Also, since most OS X 10.3 Macs use the HFS+ Journaled file system, it might be a good idea to disable the journal before booting into single-user mode by typing:
$ sudo diskutil disableJournal /
then re-enable it when done fixing the overlapped extents and rebooting normally:
$ sudo diskutil enableJournal /
Chris Anderson is a long-time Linux propellerhead who just got his first Mac, an ibook G4, and can't keep his hands off of it. He currently works as a "The Architect" and general visionary for a maker of world-class collectibles.
If you own Disk Warrior then it should be able to repair a drive with overlapped extents.
There are two backup utilities included in Unix - psync and rsync. You will find them in the /usr/bin/ directory. For documentation simply enter: man psync or man rsync. In order to write data while in single-user mode you need to issue the command: /sbin/mount/ -uw / (Note: there is a "space" between the "uw" and the "/".) To mount an external drive you will need to provide the mountpoint for it in place of the "/", e.g., "/Volumes/volname") without the quotes.

How do change boot disk from single user mode?

My G5 hangs when booting at the blue screen while "Loading printing services...". Attempting to boot into safe mode only hangs at the grey gear screen. It will, however, successfully boot into single user mode. I've run fsck but no change in bootability. I have another disk in the machine that has Tiger on it. How do I change the boot disk from the single user prompt?

You can hold c and boot off the installer disk and select disk utility repair disk/permissions
or you can hold option to boot off Mac OS X on another drive, like a clone and run Data Rescue to recvoer your files.
It does sound bad, you can try going through these
http://docs.info.apple.com/article.html?artnum=106464
But I think you'll need a fresh install, hopefully you have been backing up/cloning to a external drive.
http://homepage.mac.com/hogfish/Personal11.html

Connections from other applications.

Hello,
Is there any parameter we can set to control the number of connections from an external application. I am using J2EE application server connection pool to connect to Oracle from Java. In Applciation server setting we can configure the number of connections in a pool.
Is there some parameter some thing like this in the Oracle database to control the number incoming connections?
Thanx in Adv,
Potluri

Hi RavensFan,
I'm using a 21CFRPart11 compliant SQL-based user permission rights database access tool (DataTrak), which is a legacy ActiveX control from this project's previous releases. Unfortunately the company that make it are long gone, but I'm stuck with it - no choice, no support.
I've been tracking the problem down, and although the problem only occurs when I call up the ActiveX component then exit, it also seems that the problem goes away if I remove my .NET marquee-style progress bar from a seperate subvi. Confusing, but the system is stable with one or the other, but exits with a crash when both are included the executable!
Given the ActiveX control is a requirement, and my marquee progress bar is a niceity, it looks like the progress bar will have to go...
Thoric (CLA, CLED, CTD and LabVIEW Champion)

Mail.app making excessive number of connections

I have had (as have many other folks I know) this annoying issue of Mail.app suddenly throwing up a dialog asking for my password for a mailserver. For unknown reasons (until now) sooner or later the behavior would self-correct and the password requests would cease.
Seems I've tracked this down. One of my current email providers has a hard-limit of 50 simultaneous requests per IP address. I have 4 email accounts on that server. This *always* fails. In their IMAP server log files they see:
May 4 11:06:33 server308 dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<[email protected]>, method=PLAIN, rip=65.190.84.57, lip=69.65.10.232, TLS
So even though my mail check interval is set to 5 minutes, the server is seeing 50+ IMAP connections.
I have configured the same email account in Thunderbird, and even set the update interval to 1 minute, and I do not hit the max connections.
Anyone have any idea why Mail.app would be trying to make 50+ connections? Or simply not closing the connections it opened previously?

Same issue here,

Single-user mode: How to mount and access an external USB drive?

My MacBook Pro HD is acting up. Cannot boot normally or into "safe mode". Cannot reinstall OS without wiping out the HD. Need to recover some critical files but DiskUtil First Aid and Restore options cannot successfully complete. Problem traced down to "invalid node structure" which means I either have a hardware problem or my filesystem partition directory structure is corrupted. I need to recover some files that are not backed up (timin issue with my regular backup process).
I can boot into single-user mode, mount the root file system (/sbin/mount -uw /) and can see/navigate the rot filesystem structure via good UNIX command line. Here's what I would like to do (in single-user mode):
1. Mount an external USB drive (250 GB already formatted as Mac OS X Extended)
2. Copy various files and/or directories from my HD to the external USB drive (UNIX cp command)
I realize I could go spend $$ for the Disk Warrior or Data Rescue products (or something similar) that SHOULD help me recover my HD or files, but it seems silly to do this when I can see, touch and taste them from within single-user mode....
Comments? Suggestions?
TIA --
Trent
P.S. Once I've recovered my files, I'll try to reformat the HD and then reinstall the OS. And THEN go have Apple look at my machine (thank goodness for AppleCare coverage)!

Resolution:
1) Boot system in single-user mode (SUM) with external HD attached.
2) Execute the following UNIX CLI commands once SUM boot process is completed:
# fsck -fy
# mount -uw /
# mkdir /Volumes/target_directory
# mount -t hfs -w /dev/diskXXX /Volumes/target_directory
# cp -RXv /source_directory /Volumes/target_directory
Where XXX is the device-level name for your external HD's data partition. In my case this was /dev/disk1s2. It may take some experimentation to identify this device name if your system has multiple HD's.
3) Verify contents were successfully copied onto the /Volumes/target_directory.
Comments and observations:
- Do NOT use "/" as your source directory - cp will make a second (redundant) copy of /volumes/target_directory
- I was able to successfully copy ALL files off my HD despite the fsck command's "invalid node structure" error message with this simple procedure. YMMV, depending on the state of your HD.
- The repeated disk0s2: I/O error warnings displayed during the SUM boot process did not seem to have a negative effect on this procedure. I also received this same error warning intermittently as I navigated the mounted filesystem did not seem to be a problem, either. Again, YMMV.
Commercial software:
I downloaded ProSoft Engineering's Data Rescue 3 product (trial version) before spending $99 to attempt to recover my "bad" HD's data via mounting to a good system with FW target mode. It could not successfully complete its "QuickScan" process and immediately hung on block 0 of 390M during its "Deep Scan" process. The product did seem to function properly on an operational system. ProSoft's technical support was responsive and helpful but had no answer for my "Deep Scan" error.
I did not attempt to use Alsoft's Disk Warrior 4 product. I could not find any trial software available and was reluctant to spend $100 based upon the mixed reviews and comments on this discussion forum as well as other reviews. Alsoft does claim to address the "invalid node structure" error in their marketing materials. Hindsight being 20/20 - I saved $100 by using this simple procedure.
Final note:
Neither Leopard nor Snow Leopard's installation DVD could recognize the bad internal HD when trying to do a reinstall. While DiskUtil was able to "see" the bad internal drive it immediately failed when I tried to do an "erase and format". Took the system to my local Apple store and the Genius ran a tool called "SMART Utility" from Volitans Software (www.volitans-software.com). SMART utility confirmed that my HD was bad so it was replaced. AppleCare pays for itself (once again!).

G5 freezing - no problems with ASD - crashing also in single-user-mode

Hello,
I have a PowerMac7,1 with MacOS X Server 10.5.8, which today started freezing and restarting.
After the system froze, sometimes it restarts automatically, or I have to manually reboot it with the power button. In both cases the restart also froze!
The only way to start the system is the clean the PRAM, but after a while it is crashing again!
I managed to run the full ASD 2.5.7 test without error for a few hours (then I stopped), and with the install DVD I also managed to run the system repair (there was nothing to repair).
Both from the system and from the install DVD I cannot run the repair permissions (it freezes!). So I tried to execute "fsck -fy" from the single-user-mode, but the computer froze again!
Is there something else I can try?
Thanks a lot!

Two things: DiskWarrior. New HD.
It seems that the crashes are coming into play when the HD is in the game in a meaningful sense, which isn't the case with the install disk or ASD, unless you are trying to do something like disk repair or permissions repair from the install disk. What's interesting is that you can boot into single-user mode, but when you invoke fsck, you crash, whereas disk repair from the install disk, which in essence fsck, runs and reports no errors.
You can also try a safe boot and see how things run there. If you can do that, I would suggest running AppleJack on the system, if you can.
Finally, it's possible that NVRAM has gotten corrupted (a possibility but not a high possibility) so an NVRAM reset might help things out.
After trying the safe-boot and NVRAM routes, if no help, my next tool would be DiskWarrior. In the past, I have had situations where DW found problems that Disk Utility didn't find, though that was in DW 3, probably. Fortunately (knock on wood) DW 4 has not had to confront a disaster situation yet for me.

VPN - IPX error 733 when connecting from Windows XP

I have a 10.4.8 (Intel) OS X Server at our office. Our Mac users can VPN in with no problems, they get a valid IP from the vpn lease pool, can remotely control desktop machines, use files, etc. However, when trying to connect from XP, my user is getting an Error 733 referring to IPX. Anyone see this or have input for me? It's the boss who can't get in, so you can imagine I need to pay attention to this one!

PPTP only. Basic name/password challenge.
Server has private IP behind Netgear Prosafe Firewall appliance. Server is the DMZ. The Netgear receives our static IP from our T1 gateway, and performs DHCP and NAT for us. The OS X Server has a static private IP, and serves mail, ftp and vpn. (web to follow)
Clients can VPN in and receive a private IP within the specified range. I allow 40 bit and 128 bit encryption.
OSX Server: 192.168.200.250
Starting and ending IP addresses for VPN: 192.168.200.180 - 190
under Client Information:
DNS Servers: (two public DNS local to us from an ISP)
Search domains: (empty)
Network routing definition: 192.168.200.0 / 255.255.255.0 / private
From my PowerBook (10.4.8 client), I connect just fine, can use remote desktop connector to control XP boxes at the office, and access our files, printers, etc.

Anyconnect client and clientless connections hang for two users

ASA 5525, v. 9.1(5)19
Anyconnect client 3.1.02026
I have two users who are unable to connect via the AC client or clientless through the web portal. Using the client, it will get stuck in a loop of "checking for updates". On the portal, the connection will proceed to the point of "Cisco Secure Desktop successfully validated... Success.. Reloading..please wait." Then it hangs there.
The issue occurs for the user regardless of which company laptop she logs onto. A help desk tech can use her laptop and successfully connect, but she cannot connect on her own laptop or on another laptop. (Same for the other user.) So the issue doesn't seem to be related to her laptop or the AC installation. (Help desk did reimage her machine early in the troubleshooting process before they realized that the issue seemed to follow the user.)
I've updated the hostscan file - no change in results. Client and clientless connections seem to be working fine for all other users. We're stumped. Suggestions, anyone? thanks!

The LDAP should be server folks -- Active Directory. Chances are whoever manages the ASA's should have access to at least look in Active Directory to look that up. If they don't they need it.
I obviously don't know a lot about what devices you are using, but if you are using ISE, there should be some type of MNT device (Monitoring and Troubleshooting) -- which is collecting the logs and, hopefully, sending them to some type of syslog aggregate collection tool (splunk?).
Otherwise, there should be a device called a CAM (Clean Access Manager) that is collecting logs -- which may also be propagated to a syslog aggregate tool -- although with CAM's, you can pull the reports right out of them in a comma deliminated file (.csv) and go through them that way.
-- The thing that gets me is that it happens to two users no matter what computer they try to connect from, no matter what network they connect from, and other users can authenticate and gain network access on those same devices.
-- That is why it is rather perplexing. Pretty much saying it has to be something with:
- the IP pool they are getting an IP from
- their AD credentials
- their username
- something along those lines, if the information provided was fully accurate.

Limiting Number of connections from a single user

Similar Messages

Maybe you are looking for