Loss of TACACS key after harddisk failure

Our WAE/WAVEs in the field are configured for TACACS Autherntication. During harddisk failures we could not access the devices. The ACS logs a invalid TACACS secret. In running-config the "tacacs key ****" statement is missing.  The statement still could be found in the startup-config.
Is the "tacacs key" statement dependent on the harddisk?

Hello,
The internal WAAS TACACS setup causes a vicious circle. Authentication is required to access a devices for troubleshooting. But Authentications fails with a strict TACACS policy. In the meanwhile we find out the we can access the WAVE/WAE  when  authentication failover is disabled. With this change the WAE switches to the backup authentication method even when the password is wrong. This workaround allows access during disk failure situations. The workaround is in conflict with a our security policy and we now are checking via TAC if the WAE behavior is a feature or a bug.
Kind regards Peter

Similar Messages

  • Reinstalling Lightroom after harddisk failure and new harddisk

    Hi I have faced a harddisk crash  and got a new 1 terabyte harddisk.
    Now I am installing the programs again but when I put the disk into the slot it does accept it.
    What can I do?
    Pls help
    rgds
    Niels

    Hi  Adobe Photoshop Lightroom 5 and Elements 12
    Den 30/11/2014 kl. 20.25 skrev John Waller <[email protected]>:
    Reinstalling Lightroom after harddisk failure and new harddisk
    created by John Waller <https://forums.adobe.com/people/John+Waller> in Adobe Creative Cloud - View the full discussion <https://forums.adobe.com/message/6973190#6973190>
    when I put the disk into the slot it does accept it.
    Which Adobe software are you trying to re-install?
    If the reply above answers your question, please take a moment to mark this answer as correct by visiting: https://forums.adobe.com/message/6973190#6973190 and clicking ‘Correct’ below the answer
    Replies to this message go to everyone subscribed to this thread, not directly to the person who posted the message. To post a reply, either reply to this email or visit the message page:
    Please note that the Adobe Forums do not accept email attachments. If you want to embed an image in your message please visit the thread in the forum and click the camera icon: https://forums.adobe.com/message/6973190#6973190
    To unsubscribe from this thread, please visit the message page at , click "Following" at the top right, & "Stop Following"
    Start a new discussion in Adobe Creative Cloud by email <mailto:[email protected].com> or at Adobe Community <https://forums.adobe.com/choose-container.jspa?contentType=1&containerType=14&container=46 70>
    For more information about maintaining your forum email notifications please go to https://forums.adobe.com/thread/1516624 <https://forums.adobe.com/thread/1516624>.
    Venlige hilsener
    Niels Brandt

  • Reinstalling Windows after harddisk failure.

    Hi, a month ago my laptop (on the back it says its a P300 M18) had a critical harddisk failure, now i finally got it back with a replacement harddisk but i have no clue how to reinstal windows vista which originally came with it again. (i don't remember it being on a cd or dvd) When i opened the laptop up i thought i was going to see the same installation process as when i first got the laptop, instead i get a black dos-like screen apparantly under Windows 98. the only thing i get is "C:\>" asking me for a command or filename. I'm lost, any help is appreciated.

    Hi  Adobe Photoshop Lightroom 5 and Elements 12
    Den 30/11/2014 kl. 20.25 skrev John Waller <[email protected]>:
    Reinstalling Lightroom after harddisk failure and new harddisk
    created by John Waller <https://forums.adobe.com/people/John+Waller> in Adobe Creative Cloud - View the full discussion <https://forums.adobe.com/message/6973190#6973190>
    when I put the disk into the slot it does accept it.
    Which Adobe software are you trying to re-install?
    If the reply above answers your question, please take a moment to mark this answer as correct by visiting: https://forums.adobe.com/message/6973190#6973190 and clicking ‘Correct’ below the answer
    Replies to this message go to everyone subscribed to this thread, not directly to the person who posted the message. To post a reply, either reply to this email or visit the message page:
    Please note that the Adobe Forums do not accept email attachments. If you want to embed an image in your message please visit the thread in the forum and click the camera icon: https://forums.adobe.com/message/6973190#6973190
    To unsubscribe from this thread, please visit the message page at , click "Following" at the top right, & "Stop Following"
    Start a new discussion in Adobe Creative Cloud by email <mailto:[email protected].com> or at Adobe Community <https://forums.adobe.com/choose-container.jspa?contentType=1&containerType=14&container=46 70>
    For more information about maintaining your forum email notifications please go to https://forums.adobe.com/thread/1516624 <https://forums.adobe.com/thread/1516624>.
    Venlige hilsener
    Niels Brandt

  • Portege Z930: Loss of Fn keys after Win 8 upgrade - cannot turn WiFi on/off

    After many months biding my time I have just embarked upon upgrading my Portege Z930-11G to Windows 8 Pro.
    Largely this has gone to plan with the exception that after running the Toshiba Upgrade Assistant I've lost the Fn key display and about half the keys no longer seem to function at all.
    The only key I ever used routinely is the Fn+F8 option to turn WiFi on/off.
    So now I cannot enable the WiFi on the machine.
    There must, surely, be a mean to do this but I can't find it. Does anyone have a suggestion? I'm OK for now as I have a wired LAN in the house but once I get out on the road I'm going to struggle without WiFi.
    Before running the upgrade assistant the Fn key brought the key display up across the top of the screen and I surely wish I'd turned WiFi on at that point.
    The Fn key utility offers very little control of the Fn keys. It does not offer the ability to do anything other than disable five on screen notifications for keyboard backlight, power plan, touch pad, cursor overlay and numeric overlay.
    All help gratefully received.
    Andrew

    > So now I cannot enable the WiFi on the machine.
    First of all you can enable and disable the WiFi using function key but you can also enable the WLan in Windows 8 settings
    Win key + C -> Settings -> Change PC settings -> Wireless
    Now you can use the wireless devices slider to enable or disable the WLan.
    But to get the FN key working you have to install the +Toshiba Function Key Utility+ for Win 8 and +Toshiba System Driver+ for Win 8

  • Loss of FN-Keys after installation of Microsoft security updates on L500

    I'm using a satellite L500-19U
    After installation of Microsoft security updates the FN keys lost their functin except the Brightness + / - function.
    also the soft keys which appear at the upper monitor border by pressing the FN key didn't appear after the security packages were installed.
    I solved The problem by removing the update by means of the roll-back function (Wiederherstellungs punkt) of W7.
    The following security packages are selected to be installed:
    Security update for Windows 7 for x64-based Systems (KB978601)
    Security update for Windows 7 for x64-based Systems (KB979309)
    Security update for Windows 7 for x64-based Systems (KB979683)
    Security update for Windows 7 for x64-based Systems (KB980232)
    Security update for Windows 7 for x64-based Systems (KB981332)
    Windows MRT x64 - April 2010 (KB890830) (malicoius software removal tool)
    Which of them are unsuspicios, which shall be posponed, which updates are necessary after installation of the updates?
    Message was edited by: JoJo58

    hi,
    If you read about these update on the Microsoft site: (Non of them should influence on FN-Keys)
    http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=998164b7-4b8c-468b-8d39-f242633c8838
    I have checked the history of updates on my computer and all of them are installed except for Windows MRT x64 - April 2010 (KB890830) (malicoius software removal tool). Everything works fine, try to remove this update.

  • Mass-Change TACACS+ Key

    We're using CS ACS 3.3. We've been asked to change all of the TACACS+ keys for all of our switches (approximately 900+ devices).
    We can use CiscoWorks to change the keys on all of the devices, but is there any way to mass-change the TACACS+ key in the ACS for our devices? We're using Network Device Groups, but best I can see, it's not possible to add a AAA client and define certain characteristics in a generic group profile that gets inherited by all configured devices (such as a universal TACACS+ key for all devices in the group).
    Thanks!

    I saw the previous post about using RDBMS sync and I'm looking into that.
    Best that I can tell, we don't have any properties that are inherited by the entire group. I haven't been able to find a way to look at any properties for the NDG. Is it possible to change the inherited key after the group has been created?
    Thanks!

  • Hi Support, how can I install photoshop again after disk failure. Still says I have 2 copies installed, need to remove one from my old pc.  Thanks for any help.

    After drive failure, I decided to install photoshopcc on my home pc.
    when I try to start it, I get the message "already installed on 2 devices"
    I need to remove it from one of those devices.
    It's not obvious how to do this.
    Thanks in advance for any help

    On one of your older PCs, Start Photoshop, go to the  Help menu > Deactivate...
    This is a forum of users like yourself volunteering our time to help, we are not Adobe support.
    Gene

  • I was directed to adobe to download CS4 on my new iMAC after hardware failure on PC.  The valid CS4 serial number for the PC is not recognized by Adobe, even though I downloaded all the software successfully.  They gave me a free 30 day trial.........Does

    I was directed to adobe to download CS4 on my new iMAC after hardware failure on PC.  The valid CS4 serial number for the PC is now not recognized by Adobe, even though I downloaded all the software successfully on the new iMac..  They gave me a free 30 day trial on the new iMAC.........Does this mean I have to spend a lot of money to update and activate the latest CS release on the new machine ??????

    Purple Lobster your Creative Suite 4 serial number is for Windows or Mac only.  If you were previously using it on Windows then it is likely you have a Windows license.  You can verify by checking your serial number at http://www.adobe.com/.  You can find more details at Find your serial number quickly - http://helpx.adobe.com/x-productkb/global/find-serial-number.html.
    If you wish to run Adobe Creative software on your new iMac then I would recommend a Creative Cloud complete or single application membership.  You can find more details at https://creative.adobe.com/plans.  There is also a 30 day trial available for the Creative Cloud if you wish to evaluate the newest versions of the Adobe Creative applications.

  • HT201394 Loss of cellular service after updating to iOS 8.0.2 on iPhone 5s

    Loss of cellular service after updating to iOS 8.0.2 on iPhone 5s

    Hello there, Lonlybird2009.
    The following Knowledge Base article offers up some practical steps for troubleshooting cellular connection issues on your iOS device:
    iPhone cellular data connection issues
    http://support.apple.com/kb/ts3780
    Thanks for reaching out to Apple Support Communities.
    Cheers,
    Pedro.

  • Domain controller VMs using dynamic VHDx corrupt after power failure

    Over the past couple of months I have experienced 4 dead 2008 R2 SP1 domain controllers after power failure on Hyper-V 2012 hosts. The domain controller VMs will start after power failure and have varying degrees of file system corruption. In each instance
    the corruption has rendered the domain controller unusable. The problem has not occurred with every power failure, but in testing the failure rate has been over 10%.
    The Hyper-v 2012 hosts are as follows:
    Dell PowerEdge r720 with flash backed write cache on Raid controller
    Dell PowerEdge T710 with battery backed write cache on Raid controller
    Dell PowerEdge T310 with a single SATA hard drive and write cache disabled
    Generic system with a single SATA hard drive and write cache disabled
    The VM configuration experiencing corruption is as follows:
    Each VM was created from a base 2008 R2 SP1 syspreped VHDx image template file (40 Gigs)
    The image template was originally created as a VHD and was then converted to a VHDx
    The VHDx file has 512k sectors instead of the native 512e of VHDx files (a result of VHD - VHDx conversion)
    Each VM was assigned 1024 Meg RAM and 1 virtual processor
    The domain controllers were created by promoting the base 2008 r2 install to a DC after base image deployment
    Only one corrupt VM was not running the 2012 integration components. The rest were running current 2012 integration components
    I have done extensive testing on this issue and the problem for me seems to revolve around the VHDx file format. I have managed numerous Hyper-v installations since the original 2008 server version was released and I have never seen corruption like this
    until 2012 and VHDx.
    For the past few days I have been testing fixed sized VHD VMs on a 2012 host and I have not been able to reproduce the data corruption issue. I seem to only be able to reproduce the problem when using dynamic VHDx files. I have not done any testing on 2012
    hosts with fixed size VHDx files or dynamic VHD files.
    It would be great to hear from anybody else experiencing similar issues so that we can compare notes and hopefully get to the bottom of this problem.

    To be honest I was excited to see this fix released, but there are two problems.
    1. The hotfix causes BSOD if you have VLANs with a teamed NIC configuration. I found this out the hard way on a production system. How in the world did this thing get through testing and into automatic updates?
    2. The hotfix does not seem to resolve the issue in my test environment.
    I opened up a case with support and they informed me that they would not provide support for this issue and that I had to open a case with premier support. Premier support informed me that I cannot open a case with them unless I sign a $50,000 per year service
    contract. Is there anywhere to get support on this issue?

  • Garage Band '11, version 6.0.5 will not change key after new project is started

    Garage Band '11 version 6.0.5:  Cannot change key after new project is started.
    It has always worked ok prior to this. And I have had other issues. How do I reinstall Garage Band '11?
    I have looked in downloads, but can'ty find any download file. I had upgraded to Mac OSX 10.6.8 couple years back, which included
    Garage Band '11, a new ITunes & new IPhoto.

    Before reinstalling I'd try HangTime's fix for "oddball" problems and delete the User preferences and repair permissions, see the FAQ:
    http://www.bulletsandbones.com/GB/FAQPages/OddBallProbs.html
    The GarageBand 6.0.5 update is here: 
    GarageBand 6.0.5
    If you want to reinstall, install again the GaragaBand application from your installation disk and then upgrade again to 6.05 using the link above or Software update from the Apple Menu.
    Regards
    Léonie

  • Is there a fix yet for the loss of battery power after updating to Lion?

    Is there a fix yet for the loss of battery power after updating to Lion? I've done the cmd-opt-shift restart and it didn't help.  This problem has gone beyond annoying now - it is absolutely maddening!    What is Apple's official response????

    Chris: your friends are woefully uninformed, and no one should pay any attention to their bad advice.
    http://www.apple.com/batteries/notebooks.html
    http://support.apple.com/kb/HT1446?viewlocale=en_US
    http://batteryuniversity.com/

  • When I attempt to re-download Lion to my MacBook Air I get the following error: localhost Install Mac OS Lion[436]: Retrying pisa://1183a0570:::/InstallESD.dmg after 1 failure(s). I am trying to re-install the OS after erasing having erased the drive.

    When I attempt to re-download Lion to my MacBook Air I get the following error: localhost Install Mac OS Lion[436]: Retrying pisa://1183a0570:::/InstallESD.dmg after 1 failure(s). I am trying to re-install the OS after erasing having erased the drive. Any ideas?

    I had the exact same issue; Lion recovery from Command + R would hang with the logs showing the same message.  To resolve, I used Disk Utility to remove the recovery partition.  My Air then used Internet Recovery to load all the tools.  When using Reinstall via Internet it worked just fine.

  • Installing Sybase SQL Anywhere license keys after initial installation.

    Hi,
    I installed Sybase SQL Anywhere 16 before I actually received the valid License Key. So during the installation I've used the license key provided by the instructions.  Afterwards, I've received the purchase license key.  Do i need to reinstall SQL Anywhere all over?  Or can it just continue to function on that license key?  From what i understand, I can not change the license key after the installation was complete.  I would have to completely uninstall and re-install SQL Anywhere 16. Is that correct?
    Thanks
    Aron

    Hi Aron,
    I would have to completely uninstall and re-install SQL Anywhere 16. Is that correct?
    No, you don't have to do this in SQL Anywhere 16 - you can change SQL Anywhere editions by changing the license key on the accompanying server executable license file (e.g. dbsrv16.lic) with the Server Licensing Utility (dblic). You can use the "-k" switch in order to specify a new key:
    dblic -k <reg_key> dbsrv16.lic
    Regards,
    Jeff Albion
    SAP Active Global Support

  • ACE ACS TACACS+ Key Mismatch issue

    Goodday,
    I have an issue when trying to setup ACE Modules for TACACS+ and AAA autentication whereby the Failed Authentication reports, state the reason as "Key Mismath".
    We have confirmed that the key we are using is the same on the ACE and on the ACS.
    The question I have is as follows:
    Should the key we enter on the ACE remain as we have typed it, so if we enter mysharedkey as the key should this show as such in the running config or should it show as encrypted? Currently it shows in the running as we have entered it but just adds the 7 before the key and places the key in inverted commas.
    So config entered something like this:
    tacacs-server host 10.10.10.10 key mysharedkey
    aaa group server tacacs+ acs_pri
    server 10.10.10.10
    aaa authentication login default group acs_pri local none
    BTW, we are running version 2.1.4(a).
    Thanks for any assitance with this.
    Paul

    Hi Kevin,
    Thanks for the reply. I can confirm we have the "ssh key rsa 1024 force". I even tried removing and re-issueing the command.
    On the point of the show run revealing the something encrypted instead of the actual TACACS key, this is not what we see, we see the actual key we entred.
    This is my concern.
    We managed to get his working by checking on the production ACE modules and production ACS, using the "encryped" key we see in that "show run" and locating the key in the production ACS config (which was not under the ACE NDG, but under the ACS server itself's config, which also looks like something encrypted) and using this in the NDG config as the key for our ACE NDG on the test ACS.
    The problem arises that every six months or so, securiy requirement, the keys change, and how will we then know what to apply on the ACE if it does not apply the encyption of the key we enter itself.
    See my problem...
    Thanks again for the assistance and any further guidance would be appreciated.
    Paul.

Maybe you are looking for

  • Oracle XML report is Completed with Warning.

    Hi ALL, Im trying to view the Reconciliation Report request in excel format but getting below error.Even i tried below workaround but no luck. Database:10.2.0.5.0 Application :11.5.10.2 OS : HPUX PA-RISC 11.31.(64-bit) Workaround, 1.Cross verify the

  • Calling javascript function from report customization form

    I have been unable to call any user-defined javascript function from Portal Report Customization forms. Even a simple Message Box function doesn't work. I've been placing my code in the ..after header PL/SQL section for the report customization form.

  • Short Dump When Installing Key Figure Catalog from BI Content

    Hi Friends,                 I get a Short dump when trying to Install a Key Figure Catalog (in Purchasing) from the BI content. This is what the Error Says , " You Attempted to Use a "NULL" object reference (Points to nothing) access a component (var

  • Internet explorer not loading entire web pages

    I am having an issue with internet explorer only loading certain parts of select web pages, like espn fantasy football etc. Sometimes the information shows up but does not seem to be formated correctly, the information is low on the page and cannot r

  • Defaulting to Headphones constan

    Please can someone help? I am running?a brand new?Soundblaster Li've! 24-bit external soundcard from my brand new notebook and it keeps defaulting to headphones. Even if you go into the 'Console' software to change the setting as soon as you exit and