LMS 4.0.1 and User tracking with SNMP v3

Hi! (again )
I've another problem with our new LMS 4.0.1.
We manage our devices with SNMP v3 but the user tracking don't want to work flawlessly.
I've attached an example from our SNMP configuration. Basicly it's the same in our devices.
1st the problem was that no matter what I did the User tracking didn't want to find any host. I left it and worked on something else. After 2 weeks suddenly appeard couple of thousand end host.
As earlier (LMS 2.6 or 3.2 with snmp v2) it is the same that LMS cannot differentiate normal end host and IP Phones although we have several thousand from both. But this is only one problem.
The other is that there are switches with the same IOS and SNMP configuration and from one I get the UT data and from another one I didn't get anything. Only from some 4506 (aprox. 12-15) and 6506 (2) works and we have 20+ 4506 and 10+ 6506. Not to mention the other switches (couple of houndred 2960 and 3750).
I'll be grateful if somebody could advice what to do.
Thanks
Gabor

Understanding Debugger Utility
The utility displays a report on the reasons why User Tracking failed to discover end hosts on specific ports.
In many cases, User Tracking may not perform as expected. This may be because of problems in other LMS applications. For instance LMS Server may have devices that are not discovered or inadequate VLAN discovery in Topology Services.
You can run the utility to troubleshoot problems, or provide the report and log generated by the utility when you contact TAC for help in diagnosing problems.
The debugger utility uses the data collected by LMS Server and reports the reasons for the missing ports in User Tracking.
This tool also has an SNMP component embedded which runs an SNMP query for the table as a part of verification for SNMP failure. For example, SNMP bugs in Catalyst operating system because of which User Tracking may fail to discover devices.
This generates an Action Report that you can use to analyze the data.
The Debugger Utility:
1. Checks the switch ports in a sequential order.
2. Reports violation of basic rules for each of the missing ports such as link ports and trunk ports.
3. Checks for SNMP retrieval of data, if the ports pass the validity check.
4. Generates an Action Report suggesting possible remedial actions to retrieve the valid missing ports.
Using Debugger Utility
The Debugger Utility is available at $NMSROOT/campus/bin/ (where $NMSROOT is the directory where you have installed CiscoWorks).
To run the Debugger Utility, run the command:
utdebug -switch switch-ip -port port1[,port2 ...] [-export filename]
where,
switch is the switch to which the end hosts are connected.
ports are the ports on the switch which have missing end hosts User Tracking.
-export filename specifies that the debug messages be stored in the file specified. If this option is not used, the messages are displayed on the console.
For example,
utdebug -switch 10.29.6.12 -port 5/12
utdebug -switch 10.29.100.10 -port Fa0/10
utdebug -switch 10.29.6.14 -port Gi6
Pretty sure you will find this and perhaps more in the build in help of LMS
Cheers,
Michel

Similar Messages

CiscoWorks LMS 4.0.1 and user tracking utility 2.0.

Hello.
We are using UTU 2.0 on more computers. For one of these we are unable to obtain results from search.
How can I debug UTU?
Thanks.
Regards.
Andrea

UTU uses the same ports as a browser would to connect to LMS. 1741 and 443 depending on what is configured on the LMS side.
You should test from that computer if the used port is open .
Cheers,
Michel

How does schedule with RESTful API a Webi report for a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

SAB BO 4.1 SP1
Does it have an RESTful API to schedule a Webi report with the parameter to specify a group of users ("Schedule For" to "Schedule for specified users and user groups" with one or more users/groups)?

Hello Ricardo,
have you try a call like this one ?
    <schedule>
      <name>"test"</name>"
      <format type=\"webi\"/>
      <destination>
        <inbox>
         <to>userId1,userId2,userId3,groupId1,groupId12</to>
        </inbox>
      </destination>
    </schedule>
Regards
Stephane

LMS 3.2 and user tracking problem

rme 4.3.1
cm5.2.1
cv 6.1.9
dfm 3.2.0
ipm 4.2.0
portal 1.2.0
cs 3.3.0
cwasst 1.2.0
running on windows server 2008.
This was a clean bulid, and we imported all pertinent data from our old lms 2.6 server. This was in september 2010. Everything worked as expected and continues to work except for......
We are in an upgrade cycle for our 4500s. We are upgrading from 12.2.50-sg4 to 12.2.50-sg8, and also upgrading rommon to 12.2.31r-sga4.
It appears that user tracking is not working anymore for the upgraded 4500s. UT still runs, and works perfectly for all other devices, including the 4500s that have not been upgraded yet. I know this sounds goofy, but it really does seem to be the common denominator. I've checked the windows updates, package updates, etc in trying to figure out what made this happen. It really does all come back to upgrading to the above version. All aspects of this server are running great and as expected, it's just that UT for the upgraded 4500s isn't working anymore. I do run the logbackup script weekly (past experience has taught me to do this), and try and keep up with any patches or package updates, etc.
If anyone has seen something similar or can suggest anything, I'd appreciate it. I think I am going to have to open a case on this. Thanks - chris

Michel,
Indeed, it looks like that is the problem. I guess I was focused in on CW rather than the whole picture. But yes, indeed, if I walk the mac table for a vlan on a 4500 that has not been upgraded it works. If I do the same on an upgraded one, I get nothing.
The cautious optimism is that we do have a sup6 at our DR location that is running 12.2.53-sg1 and this test works on that switch. So as long as that
version isn't deferred, we'll test that on one of the older sups to verify.
So thanks for the help, I appreciate it - chris

Prime Infrastructure 2.0 and User Tracking

Hello
I'm having a look at getting wired User Tracking working on Prime 2.0. I checked that it is supported in the following link:
http://www.cisco.com/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps12239/guide_c07-729089.html
I'm having a problem getting dynamic user tracking working for wired non-802.1x clients. The switches are configured for mac-notification traps and the config works fine for LMS.
Another LMS User Tracking feature I'd link to get working in Prime 2.0 is CUCM intergartion where Prime would pull IP Phone extensions/names etc from CUCM.
Are either of these User Tracking features supported in Prime 2.0 (or at least roadmapped) or should I stick with LMS 4?
Thanks
Andy

I am gettng good non-802.1x wired user tracking info. see the screenshot below (click to expand).
I don't have a CM so I can't comment on that bit.
Row 1 in the screenshot, for example, is confirmed with the following CLI output:
User_Access#sh run int fa1/0/41
Building configuration...
Current configuration : 177 bytes
interface FastEthernet1/0/41
description user access
switchport access vlan 10
switchport mode access
snmp trap mac-notification change added
spanning-tree portfast
end
User_Access#sh mac address-table | i 1/0/41
10    000f.b58e.3732    DYNAMIC     Fa1/0/41
User_Access#sh inv
NAME: "1", DESCR: "WS-C3750-48P"
PID: WS-C3750-48PS-S   , VID: V10 , SN: FDO1425X2M9
User_Access#sh ver | i bin
System image file is "flash:/c3750-ipservicesk9-mz.122-55.SE5.bin"
User_Access#

Dynamic User Tracking with WS-C4506-E

Hello,
I've the following problem, configured dynamic user tracking on a
WS-C4506-E with a WS-X45-SUP6L-E, System image file is a Version 12.2(53)SG2
Interface configuration:
snmp trap mac-notification change added
snmp trap mac-notification change removed
Global configuration:
snmp-server enable traps mac-notification change
snmp-server host xx.xxx.xx.xxx version 2c COMMUNITY udp-port 1431 mac-notification
mac address-table notification change interval 60
mac address-table notification change history-size 50
mac address-table notification change
#sh mac address-table notification change
MAC Notification Feature is Enabled on the switch
Interval between Notification Traps : 60 secs
Number of MAC Addresses Added : 21509
Number of MAC Addresses Removed : 21484
Number of Notifications sent to NMS : 11632
Maximum Number of entries configured in History Table : 50
Current History Table Length : 50
MAC Notification Traps are Enabled
UTU2 does not found any records for the device name or if I search for a directly connected PC to this switch.

Where is this Collector Status screen? What dashboard is it on ?
>> Device Center > Troubleshooting Workflow
The fact that you have success for usertracking does not mean you server receives mac address notification traps. It only means the passive usertracking has run. The UT results from the other switch may come from this process.
>> Yes you're right.
Only via snoop or packetcapture you can be sure you receive the traps you want.
>> I set up a packetcapture on the server, the server receives the mac address notification traps on UDP port 1431.
>>Dynamic user tracking of switches from the same site works...for example I have three WS-C3750V2-48PS-S over >>there.
Also if you look at the Collection Sumary in the Inventory -> Device Status dashboard you may find that some devics fail on usertracking.
>> Both switches are not under the failed devices.
>>I'm a little bit confused now.... I can't even start a acquisition manually, LMS says device is not reacheable... but in Device Center (1st picture) "ping", "snmp" etc... is OK...

Single Sign On and user security with IS

We have installed Information Steward 4.1 SP1 Patch 1 with Data Services 4.1 SP1 Patch 2 on Information Platform Services 4.0 SP 5 patch 6. The Information Steward system is installed on it's own server. We are connecting IS to our SAP Netweaver 7.3 system.
I have set up Single Sign On using Windows AD authentication. The connection to the SAP system uses a service account.
Because the SAP system has our payroll information on it, we want to restrict Information Steward users based on their SAP security profiles. We don't want to have to maintain security settings in both SAP and Information Steward.
Does anyone know if there's a way to set up Single Sign On so it passes the user credentials from SAP to Information Steward? Then restrict the users on Information Steward based on their SAP security settings?
Any advice would be appreciated!

Hi,
You can use Windows AD or SAP Authentication and configure it with SSO. However this should be done in the BI/IPS plaftorm and not IS. See the BI admin guide (http://help.sap.com/bobip40) section "Authentication options in BI platform". Please let me know if that's what you wanted.
thanks

Face and Eye Tracking with LabView and Vision

Hey all,
For my senior project I am trying to perform face tracking and eye tracking by using LabView and the Vision Development Module. Unfortunately I am new to LV and I'm drowning in a sea of links and tutorials so I was wondering if anyone here that has had experience performing similar tasks would be willing to help and point me in the right direction or provide examples. I bought two Logitech c525 webcams and hooked them up to my pc running LabView and Vision 2011. I was able to see images captured but that's as far as I've gotten with the tools. Any tips?
Thanks,
Alex.

have a look at http://sine.ni.com/cs/app/doc/p/id/cs-14116 and http://forums.ni.com/t5/Machine-Vision/how-to-track-face-and-allocate-lips-in-face-using-labview/td-...
This thread would also be more suited to the Machine Vision section.

Backing up separated Boot and User drives with Time Machine

I'll be making the jump to Leopard soon and was wondering how messed up Time Machine will be on my G5 which has a 74GB Raptor Boot drive that houses all applications and a 160GB drive (internal) that houses my User directory. Will TM automatically back up the Boot AND User drive or will I have to do anything special? Come to think of it, I wonder if I'm going to have to do anything different just to set it up the same way it is now, but in Leopard. I was planning on doing a complete fresh install....hmmm....

He he he... That will be a very good question. TM should backup ALL files on BOTH internal HARD DRIVES(grinding teeth here) and expect to take about a day's worth for the initial backup. I upgraded and TM just won't backup the users folder on the first hd that has all the users and apps, while the second houses all of the movies documents, music, photos. I decided to make TM shut down and leave it off. However, all of the leopard features work very very very very very very very very...very very well for my G5(Dual core 2.5GHz, 4GB RAM, 2x 250GB HD, and NVIDIA GeForce 6800 graphics card with a 30' display). Spaces works like we breathe, the general apps run at almost twice the speed (running Mathematica 6 while rendering video with Final Cut Pro 4 while surfing the internet). Ok probably not twice the speed, but it is certainly faster than Tiger. Also you have more room (up to 16 spaces). Just make sure that you have a spare internal hard drive to replace, just incase.

Using SSO and user mapping with WebDav Repository

Hi guys,
I have a WebDav Repository in portal and i configured SSO with SSO22KerbMap in IIS server. All is ok, but i have some UME users than don't have user in our Active Directory, i need use user mapping with this users. Do it's possible?
Currently i have a KMWebDav system (with same alias name that http system) and i mapped one of my UME user (with name 'umeuser' for example) with one Active Directory user (with name 'aduser' for example), if i try access to my webdav repository from KM Content with 'umeuser' i can see in SSO22KerbMap log a message like:
10:48:57 6756/4652 i OnPreprocHeaders: Determined account umeuser from cookie MYSAPSSO2
10:48:57 6756/4652 E OnPreprocHeaders: Found 0 UserPrincipalNames for ADSI Filter...
Can somebody help me?
Thanks in advanced.

Hi Guys,
Any takers?
Suggestions would be appreciated.
Cheers
Ian Henderson

Machine Authentication and User Authentication with ACS v5.1... how?

Hi!
I'm having trouble setting up Machine Authentication and User Authentication on ACS v5.1 using WinXP SP3 (or SP2) as supplicant.
This is the goal:
On wireless (preferably on wired too) networks, get the WinXP to machine authenticate against AD using certificates so the machine is possible to reach via for example ping, and it can also get GPO Updates.
Then, when the user actually logs in, I need User Authentication, so we can run startup scripts, map the Home Directory and so on.
I have set up a Windows Sertificate server, and the client (WinXP) are recieving both machine and user certificates just fine.
I have also managed to set up so Machine Authenticaton works, by setting up a policy rule that checks on certificate only:
"Certificate Dictionary:Common Name contains .admin.testdomain.lan"
But to achieve that, I had to set EAP Type in WinXP to Smart Card or other Certificate, and then no PEAP authentication occurs, which I assume I need for User Authentication? Or is that possible by using Certificates too?
I just don't know how to do this, so is there a detailed guide out there for this? I would assume that this is something that all administrators using wireless and WinXP would like to achieve.
Thank you.

Hello again.
I found out how to do this now..
What I needed to do was to add a new Certificate Authentication Profile that checks against Subject Alternative Name, because that was the only thing I could find that was the same in both user certificate and machine certificate.
After adding that profile to the Identity Store Sequences, and making tthe appropriate rule in the policy, it works.
You must also remember to change the AuthMode option in Windows XP Registry to "1".
What I really wanted to do was to use the "Was Machine Authenticated" condition in the policies, but I have never gotten that conditon to work, unfortunately.
That would have plugged a few security holes for me.

LMS 3.2(solaris 10) - User Tracking: again "ogs_server_urn" Not found! errors

LMS 3.2 on a solaris 10 server that had problems with ctm_config.txt in the past (https://supportforums.cisco.com/thread/2033941) now again has problems with the device selctor in UT. There are FATAL errors of the below type logged to CampusOGSServer.log:
[ Tue Oct 19 18:27:22 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /Campus@lms-server/Campus@sdeu1121/System Defined Groups/All Unreachable Devices
[ Tue Oct 19 18:30:52 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /Campus@lms-server
[ Tue Oct 19 18:33:03 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /Campus@lms-server/Campus@sdeu1121/System Defined Groups/All Unreachable Devices
[ Tue Oct 19 18:35:04 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /RME@lms-server/Pre-deployed
[ Tue Oct 19 18:35:05 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /RME@lms-server/User Defined Groups
To create the failure I go to UT > Reports > Report Generator => Switch Port Report > Switch Port Summary
     The Device Selector that opens does not contain any devices and clicking on the Search Button produces the following error:
Problem with File /WEB-INF/screens/deviceselector/DeviceFilter.jsp!!!URN_NOT_FOUND : urn "ogs_server_urn" : Not found !!
also the following error is found in /opt/CSCOpx/MDC/tomcat/logs/stdout.log:
Oct 18, 2010 2:18:49 PM org.apache.catalina.core.ApplicationDispatcher invoke
SEVERE: Servlet.service() for servlet jsp threw exception
com.cisco.nm.xms.ctm.common.CTMException: URN_NOT_FOUND : urn "ogs_server_urn" : Not found !!
        at com.cisco.nm.xms.ctm.client.CTMCall.establishIPC(CTMCall.java:238)
        at com.cisco.nm.xms.ctm.client.CTMCall.<init>(CTMCall.java:218)
        at com.cisco.nm.xms.ctm.client.CTMClientProxy.<init>(CTMClientProxy.java:64)
        at com.cisco.nm.xms.ctm.client.CTMClientProxy.getProxy(CTMClientProxy.java:180)
        at com.cisco.nm.xms.ogs.client.OGSServerProxy.init(OGSServerProxy.java:179)
        at com.cisco.nm.xms.ogs.client.OGSServerProxy.init(OGSServerProxy.java:98)
        at com.cisco.nm.xms.ogs.client.OGSServerProxy.<init>(OGSServerProxy.java:85)
        at com.cisco.nm.xms.ogs.client.mgmt.OGSRuleExpressionUtil.getServerProxy(OGSRuleExpressionUtil.java:102)
        at com.cisco.nm.xms.ogs.client.mgmt.OGSRuleExpressionUtil.getClassDefUtil(OGSRuleExpressionUtil.java:123)
        at com.cisco.nm.xms.ogs.client.mgmt.OGSRuleExpressionUtil.getInternalClasses(OGSRuleExpressionUtil.java:153)
        at com.cisco.nm.xms.ogs.client.mgmt.OGSRuleExpressionUtil.getClasses(OGSRuleExpressionUtil.java:174)
        at org.apache.jsp.WEB_002dINF.screens.deviceselector.DeviceFilter_jsp._jspService(DeviceFilter_jsp.java:158)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
        at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:332)
        at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314)
        at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:264)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
        at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:692)
        at org.apache.catalina.core.ApplicationDispatcher.doInclude(ApplicationDispatcher.java:594)
        at org.apache.catalina.core.ApplicationDispatcher.include(ApplicationDispatcher.java:506)
        at org.apache.jasper.runtime.JspRuntimeLibrary.include(JspRuntimeLibrary.java:966)
        at org.apache.jasper.runtime.PageContextImpl.include(PageContextImpl.java:614)
        at com.cisco.nm.uii.taglib.framework.ContentAreaTag.doStartTag(ContentAreaTag.java:76)
        at org.apache.jsp.WEB_002dINF.screens.popup_jsp._jspx_meth_embu_contentarea_0(popup_jsp.java:876)
        at org.apache.jsp.WEB_002dINF.screens.popup_jsp._jspService(popup_jsp.java:693)
        at org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:97)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
        at org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:332)
        at org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:314)
        at org.apache.jasper.servlet.JspServlet.service(JspServlet.java:264)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
        at org.apache.catalina.core.ApplicationDispatcher.invoke(ApplicationDispatcher.java:692)
        at org.apache.catalina.core.ApplicationDispatcher.processRequest(ApplicationDispatcher.java:470)
        at org.apache.catalina.core.ApplicationDispatcher.doForward(ApplicationDispatcher.java:405)
        at org.apache.catalina.core.ApplicationDispatcher.forward(ApplicationDispatcher.java:301)
        at org.apache.struts.action.ActionServlet.processActionForward(ActionServlet.java:1758)
        at com.cisco.nm.uii.UIIController.processActionForward(UIIController.java:380)
        at org.apache.struts.action.ActionServlet.process(ActionServlet.java:1595)
        at org.apache.struts.action.ActionServlet.doGet(ActionServlet.java:491)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:689)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
        at com.cisco.nm.cmf.util.AccessLogFilter.doFilter(AccessLogFilter.java:128)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:202)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
        at org.apache.jk.server.JkCoyoteHandler.invoke(JkCoyoteHandler.java:199)
        at org.apache.jk.common.HandlerRequest.invoke(HandlerRequest.java:282)
        at org.apache.jk.common.ChannelSocket.invoke(ChannelSocket.java:754)
        at org.apache.jk.common.ChannelSocket.processConnection(ChannelSocket.java:684)
        at org.apache.jk.common.ChannelSocket$SocketConnection.runIt(ChannelSocket.java:876)
        at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
        at java.lang.Thread.run(Thread.java:595)
I did check the ctm_config.txt file in campus and cmapps directory, removed the ctmregistry and ctmregistry.backup files from /opt/CSCOpx/MDC/tomcat/webapps/campus/WEB-INF/lib, removed all files and directories below /opt/CSCOpx/MDC/tomcat/work/Standalone/localhost/ and restarted the services;
No change...
What I noticed when looking directly into CMF database is that "CampusOgsGroupCacheTable" is completely empty where as the following tables contain data:
    CampusOgsGroupPropertiesTable
    CampusOGSTagTable
    CampusUserGroupAssociationTable
What could be the reason for this behaviour?
I yet thought about the option to export all the groups from CMF (or at least the campus groups) and drop all tables from OGS and re-importing the groups but when I try to do this I get the following error:
root@lms-server # ./perl ./OGSCli.sh -u admin
Enter CiscoWorks password:
Authentication succeeded.
INFO: Enter EXIT to quit from OGSCli prompt any time.
Enter an OGSCli task <export | import> [export]:export
Enter a filename to export groups:./OGSGroupExport.info
WARN: The group details in the selected file will be overwritten with the new export groups information.Do you want to continue? (y/n) [n]:y
Enter a User-defined Group hierarchy name to export or All to export all User-defined Groups from all applications [All]:All
INFO: The hierarchies of the User-defined Groups in all applications that are installed in all servers, will be exported to ./OGSGroupExport.info.
Authorization succeeded.
ERROR: Could not export the specified User-defined Groups hierarchies to ./OGSGroupExport.info.
ERROR: This could be because of one or more of the following reasons:
ERROR: * OGSServer process may not be running
ERROR: * Application or remote Grouping Server may not be reachable
ERROR: * Free disk space may be low
ERROR: * You do not have the required file permissions to create the file.
ERROR: See /var/adm/CSCOpx/log/CMFOGSClient.log for more details.
root@lms-server # ./perl ./OGSCli.sh -u admin -d
Enter CiscoWorks password:
Authentication failed.
Verify the username and password that you have entered.
root@lms-server #
just to be sure I upload the 2 ctm_config.txt files ....

I was wondering about the fact that even CampusOGSServer was running, CTM could not allocate the necessary ports (netstat -a).Because everything seems to be ok I commented out
    DYNAMIC_PORT_ALLOCATION=0
in ..../campus/WEB-INF/lib/ctm_config.txt
after stopping and starting CampusOGSServer (pdterm/pdexec) the device selector in UT was up and running again ...
I did a test with setting
    DYNAMIC_PORT_ALLOCATION=1
result: UT device selector was broken
It looks like this line (no matter if set to 0 or 1) seems to break "campus CTM" on this server...
It is running for now, but there are still 3 issues open and I do not know if they are directly associated
1) OGSCli is still not working and finishes with this message:
root@lms-server # ls -al | grep -i ogs
-rwxrwxr-x   1 casuser casusers    3288 Nov 20 2008 OGSCli.sh
-rwxrwxrwx   1 root     casusers       0 Oct 19 11:34 OGSGroupExport.info
root@lms-server # chown casuser:casusers OGSGroupExport.info
root@lms-server # ./OGSCli.sh -u admin
Enter CiscoWorks password:
Authentication succeeded.
INFO: Enter EXIT to quit from OGSCli prompt any time.
Enter an OGSCli task [export]:export
Enter a filename to export groups:OGSGroupExport.info
WARN: The group details in the selected file will be overwritten with the new export groups information.Do you want to continue? (y/n) [n]:y
Enter a User-defined Group hierarchy name to export or All to export all User-defined Groups from all applications [All]:All
INFO: The hierarchies of the User-defined Groups in all applications that are installed in all servers, will be exported to OGSGroupExport.info.
Authorization succeeded.
ERROR: Could not export the specified User-defined Groups hierarchies to OGSGroupExport.info.
ERROR: This could be because of one or more of the following reasons:
ERROR: * OGSServer process may not be running
ERROR: * Application or remote Grouping Server may not be reachable
ERROR: * Free disk space may be low
ERROR: * You do not have the required file permissions to create the file.
ERROR: See /var/adm/CSCOpx/log/CMFOGSClient.log for more details.
root@lms-server #
the /var/adm/CSCOpx/log/CMFOGSClient.log is attached and there seems to be some certification issues; I recreated the certificate and in the GUI it shows to be set and be valid...
2) these FATAL messages appear in CampusOGSServer.log and I am not sure if they are harmless:
[ Thu May 20 16:16:34 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /Campus@lms-server/Campus@sdeu
1121/System Defined Groups/All Unreachable Devices
[ Thu May 20 16:20:10 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /Campus@lms-server
[ Thu May 20 16:22:24 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /Campus@lms-server/Campus@sdeu
1121/System Defined Groups/All Unreachable Devices
[ Thu May 20 16:24:23 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /RME@lms-server/Pre-deployed
[ Thu May 20 16:24:23 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /RME@lms-server/User Defined G
roups
[ Thu May 20 16:24:23 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /RME@lms-server/User Defined G
roups/All-CE-NM
[ Thu May 20 16:24:47 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups/Customizable Groups/Customizable Group 2
[ Thu May 20 16:24:50 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups/IN-Devices
[ Thu May 20 16:24:55 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups/Customizable Groups
[ Thu May 20 16:25:03 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups/Customizable Groups/Customizable Group 3
[ Thu May 20 16:29:01 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /RME@lms-server
[ Thu May 20 16:29:02 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /RME@lms-server/All Devices
[ Thu May 20 16:29:02 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /RME@lms-server/Normal Devices
[ Thu May 20 16:29:13 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups/Customizable Groups/Customizable Group 4
[ Thu May 20 16:29:14 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups/Customizable Groups/Customizable Group A
[ Thu May 20 16:29:34 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups/Customizable Groups/Customizable Group B
[ Thu May 20 16:29:35 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups/Customizable Groups/Customizable Group C
[ Thu MOGSGroups.infoay 20 16:30:34 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /RME@lms-server/User Defined G
roups/DE-Switche-IOS
[ Thu May 20 16:30:39 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server
[ Thu May 20 16:30:39 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups
[ Thu May 20 16:30:39 CEST 2010 ]FATAL com.cisco.nm.xms.ogs.server.GroupCacheImpl getHierarchy No top-level cache for: /DFM@lms-server/User Defined G
roups/Customizable Groups/Customizable Group 1
3) I found CampusOgsGroupCacheTable in cmf database to be empty on 2 different lms 3.2 installations (both solaris) but I cannot believe that this is ok due to some stored procedures pointing to this table to keep it on sync with CampusOgsGroupPropertiesTable

Machine and User authentication with ISE 1.2.1

Hi ,
Can any one tell me in machine authentication what access need to be enable DACL for machine logon?
Can we enable the access on port level ? direct to tcp/udp or ip level what is the best practice.
Thanks
Pranav

is this what you are looking for EAP Chaining which uses a machine certificate or a machine username / password locked to the device through the Microsoft domain enrollment process. When the device boots, it is authenticated to the network using 802.1X. When the user logs onto the device, the session information from the machine authentication and the user credentials are sent up to the network as part of the same user authentication. The combination of the two indicates that the device belongs to the corporation and the user is an employee.
http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/howto_80_eapchaining_deployment.pdf

Spamassasin and users database with sun java messaging server

Does anybody has managed to deploy spam scanning using personal databases (bayesian filters databases), i mean using spamassasin with user databases.
Thanks,
Andr�s.

Yea, i do the same thing, but i see that some people want to receive mail that other people don't want.
Can i ask you another question? How do you deploy sa-learn?
I use this scripts:
learn_nospam.sh
dir_nospam='/mail_store/*/*/*/\=no_spam/*/*.msg'
for i in $dir_nospam
do
echo $i
sa-learn no-sync ham $dir_nospam
done
sa-learn --sync
learn_spam.sh
dir_spam='/mail_store/*/*/*/\=spam/*/*.msg'
for i in $dir_spam
do
echo $i
sa-learn no-sync spam $dir_spam
done
sa-learn --sync
That 's works but it too slow, do you know some other ways.
Thank you very much,
Andr�s.

Can anyone tell me how to use the loops and backing tracks with a single guitar input? I can't seem to figure out how to set this up

I am trying to configure Mainstage to input my own guitar and add a backing track from the library or a loop but, I can figure out how to open or add the tracks I've downloaded. Any help would be great

did you try the PlayBack preset/template?
once you open the PlayBack plug-in you just load the tracks from the plug-in's menu.

LMS 4.0.1 and User tracking with SNMP v3

Similar Messages

Maybe you are looking for