Lost Enable Prompt access post configuring aaa commands

Can any one suggest how to login back to enable prompt on my device ?
I have done the Tacacs Configuration through adding aaa commands &
As a Post Result, Tacacs is successfully configured & I am able to login with my rsa token
but Unfortunately I have lost the enable access, unable to enter into privilige mode, However I was able to login to Privilige mode before adding aaa commands
through admin. Currently Below error is showing on my screen
SWITCH>en
Password:
% Error in authentication

Which AAA commands did you apply? Did you try the same password as the one for your user that you are logging in with? If there is local enable you could disable access to TACACS to fall back to it and correct the configuration.
This could be achieved by using ACL to filter TACACS from this device on an upstream host or removing this host temporarily from your ACS/TACACS server so it gets no reply back. It should then fall back to local accounts if you have configured that.
Daniel Dib
CCIE #37149
Please rate helpful posts.

Similar Messages

  • ASDM (ASA9.1) won't fully initiated when configured AAA command authorization

    ASA doesn't have any local account, all authentications is done via AAA.
    On AAA, we have two "groups" both assigned to privilege_15, one group (A) can issue all commands, another group (B) only can issue command sets we defined.
    Group A can login to ASDM without any problems.
    Group B can pass the login pop up, then start to load ASDM window, at the bottom it does show login user has privilede 15, then it's stopped at "parsing running configuration..." asd login screen pops up again, and I cannot pass it.
    I suspect it's somewhere in permisssion, can someone help? thanks.
    Leo Song

    Hello,
    There are some commands that are required in order to load the ASDM
    privilege show level 3 mode exec command logging
    privilege show level 3 mode exec command blocks
    Make sure you have them
    Looking for some Networking Assistance? 
    Contact me directly at [email protected]
    I will fix your problem ASAP.
    Cheers,
    Julio Carvajal Segura
    http://laguiadelnetworking.com

  • Can not access FWSM via session command in cisco 6513 (VSS enabled)

    Dear All,
                  Today i received FWSM from cisco (RMA), I need to configure it as standby unit for existing FWSM active/standby setup.
    IOS on RMAed FWSM is 2.3.4 and  cisco VSS supports FWSM IOS 4.0.4 and later.
    My issue is, I cannot access FWSM (IOS 2.3.4) via session command from cisco 6513 but could successfully consoled it without any problem. I have reloaded it twice and also tried to disable and enable power on it.
    VSS#sh module switch 2
    Switch Number:     2   Role:  Virtual Switch Standby
    Mod Ports Card Type                              Model              Serial No.
       2    6  Firewall Module                        WS-SVC-FWM-1  -----------
    Mod MAC addresses                       Hw    Fw           Sw           Status
      2  0034.2fd7.3b04 to 0019.2fa7.3b0b   4.2   7.2(1)       2.3(4)       Ok
    Mod  Online Diag Status
      2  Pass
    VSS#session switch 2 slot 2 pro 1
    The default escape character is Ctrl-^, then x.
    You can also type 'exit' at the remote prompt to end the session
    Trying 127.0.1.21 ...
    % Connection timed out; remote host not responding
    Can someone please let me know why I cannot access FWSM through session command ?
    Whether this is because of older IOS ? If yes then how to upgrade its IOS ?
    Is it possible to upgrade IOS via FWSM console ? if yes, please let me know.
    Do i need to test on different slot ?
    Look forward to hearing from someone.
    Thanks & Regards
    Ahmed...

    There is a limitation that FWSM running version older than 4.0.4 will not accept session from the switch if the FWSM is not seated into switch 1 AND if switch 1 is not active.
    So to upgrade the FWSM you either need to use the console or put the FWSM physically in switch 1.
    Thanks,
    Jeroen

  • Configuring aaa local command authorization

    i am a bit struggling with how to configure aaa local command authorization, i am not getting any material also for configuring it. Please tell me how to configure aaa local command authorization.. or possible give me some useful links for that..

    Hi,
    For aaa authorization command set.Kindly refer to link.
    http://www.cisco.com/en/US/products/sw/iosswrel/ps1828/products_command_reference_chapter09186a00800ca5d4.html
    I hope this help.Please rate this post.
    cheers
    Sachin

  • The crawler could not communicate with the server. Check that the server is available and that the firewall access is configured correctly. If the repository was temporarily unavailable, an incremental crawl will fix this error

    We are getting the below error when we see in Crawl logs
    "The crawler could not communicate with the server. Check that the server is available and that the firewall access is configured correctly. If the repository was temporarily unavailable, an incremental crawl will fix this error."
    This is happening in FAST search.
    Here I can see soke of the logs related to this search crawl.
    Could anyone please help on this?
    web application 'http://xvy/' doesn't use search application 'FAST Query SSA', skipping it.
    ABC\sp_search' on web application 'http://xvy/'. 2d7dba01-3d2e-4903-b59f-9a8601627bcd
    07/30/2014 01:30:46.65  OWSTIMER.EXE (0x28DC)                    0x1BC0 SharePoint Server Search       Administration               
     dl2m Verbose  Search application 'Search Service Application 1': Skipping web application '48ed7882-9f70-424e-bf72-e3c9f5340b97' because its outbound url 'http://ebc:30347' was automatically added once.
    Ensure full read access to the indexing account 'ABC\sp_search' on web application 'http://nvcp/'. 85041609-d618-4132-ac8e-195a910d99a0
    07/30/2014 01:31:46.53  OWSTIMER.EXE (0x28DC)                    0x05F4 SharePoint Server Search       Administration               
     dl2m Verbose  Search application 'FAST Query SSA': Skipping web application '57718ea1-8cb5-4adc-abd2-9e55415e5791' because its outbound url 'http://nvcp' was automatically added once. 85041609-d618-4132-ac8e-195a910d99a0
    07/30/2014 01:31:46.53  OWSTIMER.EXE (0x28DC)                    0x05F4 SharePoint Server Search       Administration               
     dl2n Verbose  Search application 'FAST Query SSA': Adding start address 'http://nvcp' for web application '57718ea1-8cb5-4adc-abd2-9e55415e5791' to list of valid start addresses. 85041609-d618-4132-ac8e-195a910d99a0
    07/30/2014 01:31:46.53  OWSTIMER.EXE (0x28DC)                    0x05F4 SharePoint Server Search       Administration               
     dmb6 Verbose  Ensure full read access to the indexing account 'ABc\sp_search' on web application 'http://nvcp'ext/'. 85041609-d618-4132-ac8e-195a910d99a0
    07/30/2014 01:31:46.53  OWSTIMER.EXE (0x28DC)                    0x05F4 SharePoint Server Search       Administration               
     dl2m Verbose  Search application 'FAST Query SSA': Skipping web application '64d562a1-535e-4917-8979-88840e2a67fe' because its outbound url 'http://nvcp'ext' was automatically added once. 85041609-d618-4132-ac8e-195a910d99a0
    07/30/2014 01:31:46.53  OWSTIMER.EXE (0x28DC)                    0x05F4 SharePoint Server Search       Administration               
     dl2n Verbose  Search application 'FAST Query SSA': Adding start address 'http://nvcpext' for web application '64d562a1-535e-4917-8979-88840e2a67fe' to list of valid start addresses. 85041609-d618-4132-ac8e-195a910d99a0
    07/30/2014 01:31:46.53  OWSTIMER.EXE (0x28DC)                    0x05F4 SharePoint Server Search       Administration               
     dmb6 Verbose  Ensure full read access to the indexing account 'ABC\sp_search' on web application 'http://nvcpnew/'. 85041609-d618-4132-ac8e-195a910d99a0
    executing SQL query {? = call dbo.proc_MSS_PropagationIndexerGetReadyQueryComponents}  [propdatabase.cxx:70]  d:\office\source\search\native\ytrip\tripoli\propagation\propdatabase.cxx 
    07/30/2014 01:32:04.31  mssearch.exe (0x0588)                    0x1DE4 SharePoint Server Search       Propagation Manager          
     e3o3 Verbose  executing SQL query {? = call dbo.proc_MSS_PropagationIndexerGetReadyQueryComponents}  [propdatabase.cxx:70]  d:\office\source\search\native\ytrip\tripoli\propagation\propdatabase.cxx 
    07/30/2014 01:32:04.68  mssdmn.exe (0x15CC)                      0x1060 SharePoint Server Search       HTTP Protocol
    Handler          du4i                     0x29E4 SharePoint Server Search       HTTP
    Protocol Handler          du4i Verbose  CHttpAccessorHelper::InitRequestInternal - opening request for '/robots.txt'.   [httpacchelper.cxx:353]  d:\office\source\search\native\gather\protocols\http\httpacchelper.cxx 
    07/30/2014 01:32:04.70  mssdmn.exe (0x15CC)                      0x29E4 SharePoint Server Search       HTTP Protocol
    Handler          du54 High     CHttpAccessorHelper::InitRequestInternal - unexpected status (503) on request for 'http://ppecpnew/robots.txt' Authentication 0.  [httpacchelper.cxx:703] 
    d:\office\source\search\native\gather\protocols\http\httpacchelper.cxx 
    07/30/2014 01:32:04.70  mssearch.exe (0x0588)                    0x130C SharePoint Server Search       Gatherer                     
     cd11 Warning  The start address http://nvcp'/sites/quipme cannot be crawled.  Context: Application 'FAST_Content_SSA', Catalog 'Portal_Content'  Details: 
    The crawler could not communicate with the server. Check that the server is available and that the firewall access is configured correctly. If the repository was temporarily unavailable, an incremental crawl will fix this error.   (0x80041200) 
    07/30/2014 01:32:04.70  mssdmn.exe (0x15CC)                      0x104C SharePoint Server Search       HTTP Protocol
    Handler          du4i Verbose  CHttpAccessorHelper::InitRequestInternal - opening request for '/robots.txt'.   [httpacchelper.cxx:353]  d:\office\source\search\native\gather\protocols\http\httpacchelper.cxx 
    07/30/2014 01:32:04.70  mssdmn.exe (0x15CC)                      0x104C SharePoint Server Search       HTTP Protocol
    Handler          du54 High  
    07/30/2014 01:32:04.70  mssearch.exe (0x0588)                    0x2948 SharePoint Server Search       Gatherer                     
     cd11 Warning  The start address
    http://nvcp'/sites/MDPPubng cannot be crawled.  Context: Application 'FAST_Content_SSA', Catalog 'Portal_Content'  Details:  The crawler could not communicate with the server. Check that the server is
    available and that the firewall access is configured correctly. If the repository was temporarily unavailable, an incremental crawl will fix this error.   (0x80041200) 
     CHttpProbeHelper::ProbeServer: InitRequest failed for 'http://ppecpnew/_vti_bin/sitedata.asmx'. Return error to caller, hr=80041200  [stscommon.cxx:490]  d:\office\source\search\native\gather\protocols\common\stscommon.cxx 
    07/30/2014 01:32:26.06  mssdmn.exe (0x15CC)                      0x193C SharePoint Server Search       PHSts                        
     dvg0 High     STS3::COWSServer::InitializeClaimsCookie: Probing url 'http://pncvr' failed. Return error to caller, hr=80041200  [sts3util.cxx:1332]  d:\office\source\search\native\gather\protocols\sts3\sts3util.cxx 
    07/30/2014 01:32:26.06  mssdmn.exe (0x15CC)                      0x193C SharePoint Server Search       PHSts                        
     en0e High     CSTS3Accessor::InitURLType: Return error to caller, hr=80041200                 [sts3acc.cxx:2214]  d:\office\source\search\native\gather\protocols\sts3\sts3acc.cxx 
    07/30/2014 01:32:26.06  mssdmn.exe (0x15CC)                      0x193C SharePoint Server Search       PHSts                        
     dv3p High     CSTS3Accessor::GetServer fails, Url sts4://pnvpr/siteurl=sites/product/siteid={7ebfb072-08a8-4df7-8f74-e06730325d9a}/weburl=/webid={bd7ae724-1256-4b26-9633-416447d6bc5c}, hr=80041200  [sts3acc.cxx:185] 
    d:\office\source\search\native\gather\protocols\sts3\sts3acc.cxx 
    07/30/2014 01:32:26.06  mssdmn.exe (0x15CC)                      0x193C SharePoint Server Search       PHSts                        
     dvb1 High     CSTS3Accessor::Init fails, Url sts4:/mngbv/siteurl=sites/product/siteid={7ebfb072-08a8-4df7-8f74-e06730325d9a}/weburl=/webid={bd7ae724-1256-4b26-9633-416447d6bc5c}, hr=80041200  [sts3handler.cxx:312] 
    d:\office\source\search\native\gather\protocols\sts3\sts3handler.cxx 
    07/30/2014 01:32:26.06  mssdmn.exe (0x15CC)                      0x16FC SharePoint Server Search       HTTP Protocol
    Handler          du2z Verbose  CHttpProbeHelper::ProbeServer: Probing server with url 'http://pnvpr/_vti_bin/sitedata.asmx'.  [stscommon.cxx:476]  d:\office\source\search\native\gather\protocols\common\stscommon.cxx 
    07/30/2014 01:32:26.08  mssdmn.exe (0x15CC)                      0x193C SharePoint Server Search       PHSts                        
     dvb2 High     CSTS3Handler::CreateAccessorExD: Return error to caller, hr=80041200            [sts3handler.cxx:330]  d:\office\source\search\native\gather\protocols\sts3\sts3handler.cxx 
    07/30/2014 01:32:26.08  mssdmn.exe (0x15CC)                      0x16FC SharePoint Server Search       HTTP Protocol
    Handler          du4i Verbose  CHttpAccessorHelper::InitRequestInternal - opening request for '/_vti_bin/sitedata.asmx'.  [httpacchelper.cxx:353]  d:\office\source\search\native\gather\protocols\http\httpacchelper.cxx 
    earch application 'FAST Query SSA': Adding start address 'http://mnvfgext' for web application '64d562a1-535e-4917-8979-88840e2a67fe' to list of valid start addresses. a6b7948a-dc16-419d-b58a-0ee798a0bb9c
    07/30/2014 01:32:46.53  OWSTIMER.EXE (0x28DC)                    0x1444 SharePoint Server Search       Administration               
     dmb6 Verbose  Ensure full read access to the indexing account 'ABC\sp_search' on web application 'http://nvpr/'. a6b7948a-dc16-419d-b58a-0ee798a0bb9c
    07/30/2014 01:32:46.53  OWSTIMER.EXE (0x28DC)                    0x1444 SharePoint Server Search       Administration               
     dl2m Verbose  Search application 'FAST Query SSA': Skipping web application 'cea7b67b-fd5f-4c9a-a300-64a7d7ca3093' because its outbound url 'http://pnvpr' was automatically added once. a6b7948a-dc16-419d-b58a-0ee798a0bb9c
    07/30/2014 01:32:46.53  OWSTIMER.EXE (0x28DC)                    0x1444 SharePoint Server Search       Administration               
     dl2n Verbose  Search application 'FAST Query SSA': Adding start address 'http://pnvpr' for web application 'cea7b67b-fd5f-4c9a-a300-64a7d7ca3093' to list of valid start addresses. a6b7948a-dc16-419d-b58a-0ee798a0bb9c
    07/30/2014 01:32:46.53  OWSTIMER.EXE (0x28DC)                    0x1444 SharePoint Server Search       Administration               
     dl2k Verbose  web application 'http://abcrsp/' doesn't use search application 'FAST Query SSA', skipping it. a6b7948a-dc16-419d-b58a-0ee798a0bb9c
    07/30/2014 01:32:46.53  OWSTIMER.EXE (0x28DC)                    0x1444 SharePoint Server Search       Administration               
     dl2k Verbose  web application 'http://excb/' doesn't use search application 'FAST Query SSA', ski
    Anil Loka

    Hi,
    According to your post, my understanding is that you got error when communicating to the server.
    This happens when crawler is not able to connect to the server. Make sure server name is correct. Couple of steps to troubleshoot it
    You should be able to ping the server from the server having crawl component. Make sure there is an entry for the server in the host file under c:\Windows\System32\drivers\etc folder.
              Ping <servername>
          2.  You should be able to connect to the server using telnet command
    Telnet< servername> <port number>
    More information:
    Troubleshooting of FAST Search Configuration
    If the issue still exists, you can delete the old search application and recreate from the beginning.
    You can also reset the index and do a full crawl after.
    Here is a similar thread for your reference:
    http://social.technet.microsoft.com/Forums/en-US/f3c61b53-304a-4c2a-a370-d0e573219d1d/an-unrecognized-http-response-was-received-when-attempting-to-crawl-this-item?forum=sharepointadminprevious
    Best Regards,
    Linda Li
    Linda Li
    TechNet Community Support

  • I didn't find configure terminal command in the ios of aironet 1131AG

    Dear All
    i bought cisco aironet 1131AG yesterday. when the AP get IP from DHCP and trying to access it by internet browser, the web page is empty so i tried to access AP by console and login in to the privileged mode but i did't find the configure terminal command to enter the config mode.
    what is the problem !!!???
    is the IOS version problem?
    the details of show version command :
    Cisco IOS Software, C1130 Software (C1130-RCVK9W8-M), Version 12.3(11)JX1, RELEASE SOFTWARE (fc1)
    Technical Support: http://www.cisco.com/techsupport
    Copyright (c) 1986-2006 by Cisco Systems, Inc.
    Compiled Mon 17-Jul-06 11:38 by alnguyen
    ROM: Bootstrap program is C1130 boot loader
    BOOTLDR: C1130 Boot Loader (C1130-BOOT-M) Version 12.3(8)JEA, RELEASE SOFTWARE (fc2)
    AP001e.7abd.dca6 uptime is 3 hours, 9 minutes
    System returned to ROM by power-on
    System image file is "flash:/c1130-rcvk9w8-mx/c1130-rcvk9w8-mx"
    cisco AIR-LAP1131AG-A-K9   (PowerPCElvis) processor (revision A0) with 24566K/8192K bytes of memory.
    Processor board ID FOC12072A3U
    PowerPCElvis CPU at 262Mhz, revision number 0x0950
    Last reset from power-on
    LWAPP image version 3.0.51.0
    1 FastEthernet interface
    32K bytes of flash-simulated non-volatile configuration memory.
    Base ethernet MAC Address: 00:1E:7A:BD:DC:A6
    Part Number                          : 73-8962-12
    PCA Assembly Number                  : 800-24818-11
    PCA Revision Number                  : B0
    PCB Serial Number                    : FOC12072A3U
    Top Assembly Part Number             : 800-29144-02
    Top Assembly Serial Number           : FOC12072A3U
    Top Revision Number                  : A0
    Product/Model Number                 : AIR-LAP1131AG-A-K9
    Configuration register is 0xF

    Hi,
    The APs image is LWAPP and to access the config t command we need to convert the IOS to Autonomous.. here is the step by step procedure that we need to follow to get the issue resolved..
    C1130 Software (C1130-RCVK9W8-M)
    I request you to do download any image from the below link and perform the conversion from LWAPP image to autonomous..
    http://www.cisco.com/cisco/software/release.html?mdfid=279537722&flowid=6775&softwareid=280805680&release=12.4.25d-JA&rellifecycle=ED&relind=AVAILABLE&reltype=latest
    the method to convert is..
    download TFTPd32 from google and install it on ur PC.. point the image that you have downloaded in the TFTP server..
    connect  a ethernet cable between ur laptop and AP.. both should be in the same  subnet.. and connect a console cable and get the hyperterminal console  access and issue the command..
    AP>en
    AP#debug lwapp console cli or debug capwap console cli
    AP#config t
    AP(confg)int fa 0
    AP(confg-if)ip addr (same subnet as that of the laptop)
    AP(confg-if)end
    AP#archieve download-sw /force-reload /overwrite tftp:///
    eg-
    Assuming tftp ip address is 10.0.0.1 and the image is c1130-k9w7-tar.124-25d.JA.tar, then..
    AP#archieve download-sw /force-reload /overwrite tftp://10.0.0.1/c1130-k9w7-tar.124-25d.JA.tar
    The AP will reload and it will come up with IOS image and you will be able to enter the config mode
    lemme know if this answered your question..
    Regards
    Surendra
    ====
    Please dont forget to rate the posts which answered your question and mark it as answered or was helpfull

  • Configure AAA on 5508 WLC's

    Dear All,
    I am new to wireless,very keen on learning this technology.I have got a few questions from the situation which i have come across.How do we proceed with the same, Thanks in advance
    1>Customer wanted to configure two 5508 HA WLC's, he wanted to configure AAA
    2>Configuration of AP as Network access device
    3>Implementation of Cisco ISE ( For Wired and Wireless users
    Remote Installation  of Cisco Identity Service Engine
    Setting up Virtual ISE Appliance on VMware platform Licence update
    Installation of  ISE policy server
    Configure Policy module
    Configure Administration module
    Configure Monitoring moduleAuthentication (Integration with Active Directories)Integrate with Active directoryImport Active directory groups Authorization - Creation of policies pertaining to users and groups Define and configure authorization policyDefine and configure authorization conditionsDefine and configure authorization results

    Hello Saurav,
    Thank you so much for getting back, in error i rated this post only 1, 
    I have few more questions.Thanks for your help
    ISE Integration with Wireless LAN Controllers
    Integration of ISE with WLC – Pre-shared Key exchange
    Integration of ISE with Access Point  - Network Access Device
    Installation/Configuration of ISE supplicant on end-points
    Guest on-boarding portal – Design  
    Define Guest portal – Cisco template/Customised
    Define policy and access for Guest Vlan
    Integration of ISE and wireless networking into Cisco Prime

  • SPA122 cannot access web configuration utility

    The new SPA122 device connected to router through DHCP.
    I can see IP-address on router's web page, can ping it, and receive it with ****110# IVR command.
    But I cannot access web configuration utility in the browser: the page is unavailible. I tried to allow WAN access with ****7932#1#1 IVR action - the problrem still on.
    Can You give me any advice what to do.

    You can also connect to the lan/ethernet side of the device, do an ipconfig /renew
    You should get an address on the 192.168.15 network, the default for the router in the ATA is 192.168.15.1
    Then you can set up the non default password, enable the wan web server (administration tab I think).
    dlm...

  • How to Enable Anonymous access to a SharePoint 2013 site e.g for specific site,list etc..

    Hi All,
          I'm working on an extranet and i would like users to be able to fill a form on the site.
    Since i'm going to use sharepoint 2013 how can i configure sharepoint to use both anonymous access and windows authentication at the same time.
    I know for sure it can be done but what can be allowed for anonymous access e.g specific list site etc..
    I would need to make some area available as anonymous e.g a whole site as  i would like to brand it a little to host the form.Any tips of who has configured similar would be appreciated

    Hi Patrick,
    Thanks for posting your query, Kindly follow the below mentioned steps to enable Anonymous access to a SharePoint 2013 site.
    In Central Administration, under Application Management., click Manage web applications.
    Select the web application you want to enable anonymous access for.
    In the Security group on the ribbon, click Authentication Providers.
    In the Authentication Providers dialog box, under Zone, click Default.
    On the Edit Authentication page, select the Enable anonymous access check box.
    Click Save.
    Close the Authentication Providers dialog box.
    Also, browse the below mentioned URLs for more details
    http://blog.cloudshare.com/2012/10/15/how-to-enable-anonymous-access-to-a-sharepoint-2013-site/
    http://www.sharepoint-journey.com/how-to-enable-anonymous-access-in-sharepoint-2013.html
    I hope this is helpful to you, mark it as Helpful.
    If this works, Please mark it as Answered.
    Regards,
    Dharmendra Singh (MCPD-EA | MCTS)
    Blog : http://sharepoint-community.net/profile/DharmendraSingh

  • AAA command authorization ASA

    I have aaa authentication working on my ASA with no problem. I have command authorization working for my account on all my IOS devices with TACACS+ and a Cisco ACS. I can not get command authorization to work on the ASA. Every time I enter the 'aaa authorization command CSACS-TACACS+' the system will not let me do anything else and gives me a user not authroized and the ACS shows no log of this request. I then have to reboot the ASA to get back in.
    Current commands
    aaa authentication ssh console CSACS-TACACS+
    aaa authentication http console CSACS-TACACS+
    Entered commands
    aaa authentication enable console CSACS-TACACS+
    aaa authorization command CSACS-TACACS+

    Douglas,
    Try the following configuration:
    aaa authentication ssh console CSACS-TACACS+
    aaa authentication http console CSACS-TACACS+
    aaa authentication enable console CSACS-TACACS+
    With the previous settings the ASA should be authenticating your username/password and the enable password against the ACS server, if this part works fine then authorization should also be working fine.
    Remember to keep another session open in privilege mode before testing "
    aaa authentication enable console CSACS-TACACS+" command. In the ACS server you should be seeing at least the authentication passed report.

  • AAA command authorization in ACE

    How do we enable AAA command authorization in the ACE module on 6500 switch.i dont find any aaa authorization commands in it .
    Kind regards
    Ullas

    Hi,
    See the ACE Security Guide - Chapter 2. You need to set a CiscoAVPair. How you do this will depend on the RADIUS software that you are using. It sounds like you're being put into Network-Monitor role by default. Quote from the manual:
    "The user profile attribute serves an important configuration function for a RADIUS server group. If the user profile attribute is not obtained from the server during authentication, or if the profile is obtained from the server but the context name(s) in the profile do not match the context in which the user is trying to log in, a default role (Network-Monitor) and a default domain (default-domain) are assigned to the user if the authentication is successful."
    There are postings in this and other Cisco fora about exactly how to set these values (which depends on your RADIUS server implementation).
    HTH
    Cathy

  • Errors in CCDB Stores - Extractor CONFIGURATION (OS COMMAND) failed

    Hi Everyone,
    We have Solution Manager 7.1 system on our customer landscape. Technical Monitoring scenario is configured on it. As I check the alert inbox on a regular basis, I find the below error quite frequently:
    Errors in CCDB Stores - Extractor CONFIGURATION (OS COMMAND) failed with below error log:
    "Exception while retrieving E2EStore - Failed to open HW file."
    Can anyone let me know why is this error getting generated and how this can be resolved permanently.
    Thanks.
    Regards,
    Nidhi

    Hi Nidhi,
    Can you try restarting the  SAPHOSTAGENT  saphostexec -restart
    Check its status saphostexec -status
    Check its version saphostexec -version
    You should have the latest version applied if possible.
    The main fix is in saphostagent package, however also disp+work
    processes use the access to saposcol and should be
    updated as well via the kernel update.
    Kind regards,
    Roland

  • SSRS 2012 rendering issue/Enabling Anonymous access - Upgraded SSRS from SQL 2005 to SQL 2012.

    Hi,
    I just recently upgraded SQL 2005 SSRS to SQL 2012 SSRS. Everything is working great other than small issue.
    Sounds like some authentication issue. SQL 2005 SSRS - IIS, we enabled anonymous access and we never had this problem. SQL 2012 SSRS /WIN 2008 R2 -  I am not sure how to enable anonymous access.
    If anyone can help me on this? I really appreciate your help.
    Thanks,
    Vel
    Vel Thavasi

    Hi Vel,
    According your description, you want to know how the enable anonymous access to SSRS 2012. Right?
    In SSRS 2008 or later version, we are not using IIS any more. If we want to configure the authentication, we need to configure in RSReportServer.config. This file locate at:
    <drive>:\Program Files\Microsoft SQL Server\MSRS12.MSSQLSERVER\Reporting Services\ReportServer
    However, in SSRS 2012, Anonymous authentication is not supported on report server. Please see:
    Authentication with the Report Server
    In this scenario, we need to custom an authentication type to achieve the "Anonymous" goal. Please refer to the link:
    Configure Custom or Forms Authentication on the Report Server
    If you have any question, please feel free to ask.
    Best Regards,
    Simon Hou

  • Best Practices for Accessing the Configuration data Modelled as XML File in

    Hi,
    I refer the couple of blof posts/Forum threads on How to model and access the Configuration data as XML inside OSB.
    One of the easiest and way is to
    Re: OSB: What is best practice for reading configuration information
    Another could be
    Uploading XML data as .xq file (Creating .xq file copy paste all the Configuration as XML )
    I need expert answers for following.
    1] I have .xsd file which is representing the Configuration data. Structure of XSD is
    <FrameworkConfig>
    <Config type="common" key="someKey">proprtyvalue</Config>
    <FrameworkConfig>
    2] As my project will move from one env to another the property-value will change according to the Environment...
    For Dev:
    <FrameworkConfig>
    <Config type="common" key="someKey">proprtyvalue_Dev</Config>
    <FrameworkConfig>
    For Stage :
    <FrameworkConfig>
    <Config type="common" key="someKey">proprtyvalue_Stage</Config>
    <FrameworkConfig>
    3] Let say I create the following Folder structure to store the Configuration file specific for dev/stage/prod instance
    OSB Project Folder
    |
    |---Dev
    |
    |--Dev_Config_file.xml
    |
    |---Stage
    |
    |--Stahe_Config_file.xml
    |
    |---Prod
    |
    |-Prod_Config_file.xml
    4] I need a way to load these property file as xml element/variable inside OSb message flow.?? I can't use XPath function fn:doc("URL") coz I don't know exact path of XMl on deployed server.
    5] Also I need to lookup/model the value which will specify the current server type(Dev/Stage/prod) on which OSB MF is running. Let say any construct which will act as a Global configuration and can be acccessible inside the OSb message flow. If I get the vaalue for the Global variable as Dev means I will load the xml config file under the Dev Directory @runtime containing key value pair for Dev environment.
    6] This Re: OSB: What is best practice for reading configuration information
    suggest the designing of the web application which will serve the xml file over the http protocol and getting the contents into variable (which in turn can be used in OSB message flow). Can we address this problem without creating the extra Project and adding the Dependencies? I read configuration file approach too..but the sample configuration file doesn't show entry of .xml file as resources
    Hope I am clear...I really appreciate your comments and suggestion..
    Sushil
    Edited by: Sushil Deshpande on Jan 24, 2011 10:56 AM

    If you can enforce some sort of naming convention for the transport endpoint for this proxy service across the environments, where the environment name is part of the endpoint you may able to retrieve it from $inbound in the message pipeline.
    eg. http://osb_host/service/prod/service1 ==> Prod and http://osb_host/service/prod/service2 ==> stage , then i think $inbound/ctx:transport/ctx:uri can give you /service/prod/service1 or /service/stage/service1 and applying appropriate xpath functions you will be able to extract the environment name.
    Chk this link for details on $inbound/ctx:transport : http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/userguide/context.html#wp1080822

  • Can't enable root access in Lion 10.7.2

    Hi all,
    I have read this Apple article on enabling root in Lion. It doesn't work for me.
    I did a fresh install of Lion 10.7.2 to a formatted drive from a USB thumbdrive. I ran Software Update until there were no more updates.
    When I open the "Directory Utility", the padlock shows open, and when I click on it, I am not prompted to authenticate, as the article suggests. In the Edit menu, Enable Root User is grayed out.
    Any ideas how I do this?
    Thanks.
    Mac Pro 2 x 2.66GHz Quad Core Xeon, 12GB RAM

    flyboym535i wrote:
    To etresoft: Don't you need to enable root access before you can sudo to root in the Terminal? That's what started me down this path in the first place – because I couldn't sudo to root in Terminal. Then I remembered I needed to enable root access.
    No, you do not. I think you probably just weren't using sudo correctly. Normally, you just do "sudo /path/to/some/executable <program arguments>". If you are a real daredevil, you can just do "sudo bash" and give yourself a root shell.
    I actually submitted an enhancement request to Apple to suggest they improve the root user process. Even when it works (and it doesn't half the time in Lion), it is horribly convoluted. I would prefer it if Lion had something like "Run as" in Windows. Apple's response to my enhancement request was "Why don't you just use sudo?". So I tried again to explain it.
    Until there are significant enhancements in this area, "sudo" is the way to go.

Maybe you are looking for

  • How to Run a Report for Blanket PO that have been OVER Invoiced (over limit

    Hi All, How do I run a report in ME2N, where I would want to see all the Blanket POs (Framework Orders) that has a "Actual Value" (the amt invoiced so far) which is Greater than the Overall Limit (specified in the "Limits" tab)? Are there any fields

  • Windows 8.1 movies not playing

    I've just replaced my old PC with a windows 8 machine, updated to windows 8.1, installed iTunes, and now it won't play all my old movies. It finds them all okay (stored on an external hard drive, transferred iTunes library files from old machine to n

  • Switching to a different Plan Holder/Account

    So I've been on someone's plan for the last two years and was told that when my contract ended in august they would be taking my phone off of the bill. A question about this...when is the soonest they can take me off the phone plan? I didn't get my p

  • Please help - Brand new 8831 conf phone won't boot

    Not sure how to troubleshoot these new phones, but when I power the phone via wall power (power cube) or 48v POE, the phone LEDs stay on for a second or two then go out, and then the phone does nothing.  No display or additional blinking lights - not

  • How to use generic action in ODI?

    I create new Action (Topology.Generic Action), for example, "DELETE TABLE", that contains 1. <%=odiRef.disableReferringFKs( )%> and 2. DELETE FROM ... If I want to perform this Action for any table before load data, what must I do? Where can I perfor