Mab not kicking in

Hi Security Experts,
We are facing an issue where a video conference unit (tandberg) failed to authenticate for several days. On further checking, we found that the MAB method was not tried at all. Unit was failing with dot1x. We have authentication order/priority as dot1x, mab. On clearing authentication session, when dot1x failed, I could see mab starting and unit could authenticate fine. Please see below:
Problem
++++++
sw#sh authentication sessions interface fa0/21
            Interface:  FastEthernet0/21
          MAC Address:  0050.6002.5f0c
           IP Address:  Unknown
            User-Name:
               Status:  Authz Failed
               Domain:  DATA
      Security Policy:  Should Secure
      Security Status:  Unsecure
       Oper host mode:  multi-domain
     Oper control dir:  in
      Session timeout:  N/A
         Idle timeout:  N/A
    Common Session ID:  0AF0C5040000FE2E098EC881
      Acct Session ID:  0x00010F61
               Handle:  0x85000EFC
Runnable methods list:
       Method   State
       dot1x    Authc Failed
       mab      Not run
After clearing auth session,
After clearing the session, now it is properly failing over to MAB.
+++++++++++++++++++
sw#sh authentication sessions interface fa0/21
            Interface:  FastEthernet0/21
          MAC Address:  0050.6002.5f0c
           IP Address:  Unknown
            User-Name:  00-50-60-02-5F-0C
               Status:  Authz Success
               Domain:  DATA
      Security Policy:  Should Secure
      Security Status:  Unsecure
       Oper host mode:  multi-domain
     Oper control dir:  in
        Authorized By:  Authentication Server
           Vlan Group:  N/A
      Session timeout:  43200s (local), Remaining: 43185s
       Timeout action:  Reauthenticate
         Idle timeout:  N/A
    Common Session ID:  0AF0C5040000FE410991A09C
      Acct Session ID:  0x00010F7A
               Handle:  0x3B000F0F
Runnable methods list:
       Method   State
       dot1x    Failed over
      mab      Authc Success
We are running c3560-ipservicesk9-mz.122-55.SE4 on WS-C3560-48PS switch.

Hello Kashish-
Can you:
1. Post the full switchport config
2. Make and model of the switch
3. Version of code running on the switch

Similar Messages

  • I use an iMac 10.6.8 with iPhoto '09 to download digital images from Canon DSLRs. Until the last two weeks there has been no trouble whatever importing images by  a USB connection from either camera to the Mac. Now the process will not kick in. Any ideas?

    I use an Mac OSX 10.6.8 with iPhoto 09 to download digital images from two Canon DSLRs. Until the last week, there has been no problem whatever in launching the import procedure once the USB connection has been connected and the camera switched on. Now the process will not kick in at all for either camera.  I can't find a solution through iPhoto help or from other sources.
    Any ideas to fix?  (I admit I have not tested the USB cable at this time).

    What does "kick in" mean?
    As a Test:
    Hold down the option (or alt) key and launch iPhoto. From the resulting menu select 'Create Library'
    Import a few pics into this new, blank library. Is the Problem repeated there?
    Post back with the result.

  • Payables Transfer to General Ledger does not kick off Journal Import

    Hello,
    This is on 11.5.10.2.
    We have some invoice batches that are not posted in GL. This problem is sporadic and only happens for some batches and not all. It is unclear to why some batches are posted fine and others are not.
    The problem is at payable trasnfer to General Ledger program. After these batches are validated and create accounting has been executed successfully, we submit Payables Trsnfer to General Ledger program.
    This program does not kick of Journal Import child process for these batches. It just completes normally without showing any error detail on log/output.
    What could be the reason? Why Payables Transfer to General Ledger is not kicking off Journal Import for these batches?
    I have even verified GL_INTERFACE and there is nothing there.
    Please advise.
    Thanks
    D

    Are these invoices accounted, and was create accounting done for these Invoices?
    If so these should be available for the import.

  • Global rules not kicking off when calling CHECKIN_NEW webservice

    Hi All,
    We are trying to call CHECKIN_NEW/CHECKIN_UNIVERSAL web services with mandatory fields like doctype, securitygroup, title, primary file etc..
    It is working fine, but the global rules were not kicking off.
    Ex: Say, we have a rule that says Field_A is mandatory when SecurityGroup=Public.
    But when we are invoking the webservice with SecurityGroup=Public, content is getting checked-in even though we are not passing the Field_A value.
    We need the global rules to kick-off and give us error/warning that there is field missing...
    Can you please let us know if we are missing something here, or there is other way to get this requirement?
    Thanks in advance,
    Cheers,
    -V

    Hi,
    I now tested with RIDC code below, but still the global rule is not kicking off. I ahve a global rule, which says "xSwcDocumentSubType" should be mandatory. But if we see code below, i commented out that value, but still content is getting checked in.
    Can you please point me if i am missing anything here?
    IdcClientManager manager = new IdcClientManager();
    // build a client that will communicate using the HTTP protocol
    IdcClient idcClient = manager.createClient("http://xxx:xxx/cs/idcplg");
    // create an identity with a password
    IdcContext userPasswordContext = new IdcContext("xxx", "xxx");
    // create request
    DataBinder binder = idcClient.createBinder();
    binder.putLocal ("IdcService", "CHECKIN_NEW");
    // get the binder
    binder.putLocal ("dDocTitle", "RIDC File3");
    binder.putLocal ("dDocType", "Statement");
    //binder.putLocal ("xSwcDocumentSubType", "317");
    binder.putLocal ("dSecurityGroup", "Public");
    // add a file
    //binder.addFile ("primaryFile", new TransferFile ("test.doc"));
    binder.addFile ("primaryFile", new File ("D:\\RIDC.txt"));
    // check in the file
    ServiceResponse response = idcClient.sendRequest(userPasswordContext, binder);
    String responseString = response.getResponseAsString ();
    System.out.println(responseString);
    Edited by: 921097 on 18/03/2012 17:59

  • Heat and the fans not kicking in to chill things.

    So today i just hecked iStat Pro and noticet the temps and fans were not kicking in to cool thing down i made a screenshot here it is. To be honest its hot outside so that is why my Ambient is that high, i was sinking my ipod and waching some YouTube that is all.
    Opinions and Answers are verry much appreciated.

    Just run smcFan conservatively. I've never had any problems with it on this late 2009 21.5.
    Here are my settings. During the winter, I run at the defaults or just above. Right now, it's 97F outside. I'm often running on my second lowest setting, Minimum. The fan at the back helps a lot.

  • Voice control does not kick in place of SIRI when there is no internet connection

    i have an iPhone 4s. i mainly use WIFI at both home and work. and am quite happy with SIRI. but when i leave home for work or am on my way back home after work quite often i press and hold the volume button to give voice command to call my wife. but SIRI does not work!
    well, because SIRI needs internet connection and i dont bother using mobile internet (cause then i will need to turn on 3G which drains my battery like nothing on earth) it can not work.
    but why does not my ordinary voice control kick in? since 4S is such a great gadget and is so smart in every way (apart from the pictures taken with the volume button could not be turned to adjust orientation in windows!) i was expecting this would be a normal thing to expect from it.
    anyways, hope someday they would fix this. 

    I'm assuming you can either use Siri or Voice Control, but not both.  I think if you turn Siri on the activation used to use Siri is removed from Voice Control and vice versa.  This is just my own theory.  Maybe a future software update might allow this.

  • Java Applet not kicking off thru "Self Service"

    Cloned New Application Environment using production alike environment, I could login and navigate and view forms for various application users.
    But After login thru self service and click on any options under right panel, it hangs with out kicking off Java Applet and next screens.
    Any help is highly appreciated.
    Regards
    Rao

    sorry, I could login and navigate and view forms for various application users using normal login "host:8582/dev60cgi/f60cgi?" But not thru self service.
    Thanks

  • FIM 2010 - Set Population not kicking off workflow

    Hi,
    I am having a problem with Set Transition kicking of a MPR, in FIM 2010 R2 which I have never seen before after numerous implementations of both FIM and FIM R2. 
    Scenario: 
    My MPR kicks off a workflow which adds 6 sync rules, to users based on the "set transition in" set with criteria IsADConnected=true.
    The user is transitioned into this set but the MPR never fires. Everything is enabled and I have checked everything obvious. When I view the set in the "Sets" screen in FIM I can see that the user has transitioned in, and is a computed member based
    on my criteria "IsADConnected=true"
    The "FIM_MaintainSetsJob" job runs at 1am which auto corrects set membership and this does cause the MPR to kick off and consequently the sync rules to be applied. So it does work, just not when it should.
     What I have tried to fix this:
    Created a new workflow, set and MPR which does exactly the same job as the "broken" Set/MPR/workflow - Same thing happens (ie. it doesn't work)
    I read on one post that someone re-indexed the FIM service database and this fixed it for them - I tried this also but no joy. (some indexes were at 98/99% but they have been reduced after reindexing)  
    Has anyone ran into this issue before and does anyone have any idea what can cause it? It's doing my head in at this stage!
    Thanks
    Paul

    I ran into the same problem using the pattern for expected state detection:
    /Person[DetectedRulesList = Set[ObjectID='<GUID of the Set with the DREs>']/ComputedMember]
    Pasted from <http://technet.microsoft.com/en-us/library/ff608269(v=ws.10).aspx> 
    My users weren't transitioning into the set when they got a DRE.  Went on a wild goose chase until I saw this post.  Enabling the
    FIM_MaintainSetsJob fixed
    the problem.  Pretty frustrating... 

  • Release strategy for purchase requisition does not kick in

    Hi Gurus!
    I've been struggling with this issue for some weeks now.
    I have set up the release strategy configuration for purchase requisitions with classifications.
    However, if I create a purchase requisition the release functionality is not taken into account by the system.
    See below some more information regarding my configuration:
    1. I've created a new characteristic "REL_PR_GROUP". Status: released, Multiple values, Number of Chars 3, 7 values (TR1, TR2, TR3....TR7), Table name: CEBAN, Field name: EKGRP, Procedure for value assignment set to not ready for input.
    2. I've created a new class: "REL_PR_ANPC". Class type 032, Status: released, Same classification: do not check, Char: "REL_PR_GROUP"
    3. I have one release group "T1", Rel. object 1, OverReqRel is marked, Class: "REL_PR_ANPC"
    4. I have 5 release codes. Grp: T1, Code: 01....05
    5. I have 2 release indicators:
    "R = Released", Rel. for ordering is marked, Changeabil: 4, Value chgs. 100,0
    "X = Blocked",  Changeabil: 4, Value chgs. 100,0
    6. I have 1 release strategy:
    "T1 with Grp T1"
    - one release group, 01 Manager
    - release prerequisites not applicable because of only one release group
    - release status, nothing marked = blocked, 01 marked = released
    - classification, purchasing group is TR1 or TR2 or TR3 or TR4 or TR5 or TR6 or TR7
    I intentionally kept the configuration as simple as possible so I can try to get it working first.
    Now if I create a purchase requisition for an item with release group T1, I would expect the release strategy to be activated. However, this is not the case. I don't see the "release status" tab in the PR, and if I try to relase via ME54 the system says the PR is not relevant for release.
    Could you please assist in getting this working?

    Hi,
    Have you checked in CL30/CL30N if your release strategy is derived successfully?
    See section 3 of Note 365604. A small section of it:
    You can use transaction CL30 search for an object using the data
    of the purchase requisition/purchase order. Here, it is important
    that the object search determines exactly one strategy. If this
    is not the case, this indicates that there are overlapping
    strategies in the system or that the release strategies in
    Customizing do not correspond with those from transaction CL24.
    See the previous point. If the object search returns more than
    one result, the system subsequently determines an incorrect
    release strategy or no release strategy at all.
    If it is derived successfully, next, check the user exit EXIT_SAPLEBND_001 as per Note 371667:
    The following assignment statement has to exist within activated SAP
    enhancements M06B0002 (include zxm06u13) and M06B0005 (include zxm06u31)
    for purchase requisitions:
         E_CEBAN = I_CEBAN.
    Regards,
    Purnima.

  • Editing a TIFF Original not kicking off Re-Publish

    When I modify a TIFF Files in a smart collection that is in a SmugMug Publish Service (items selected by Flagged and From a specific Folder), they do not come up as needing to be re-published. Files that are still DNG files, trigger the republish, but TIFF files do not. Interestingly, being in the smart collection does not show up as collections that file is part of (regardless of DNG or TIFF).  If I modify the TIFF in lightroom, that will trigger the republish, but not if I just edit the TIFF in CS6 (edit the original).

    I ran into the same problem using the pattern for expected state detection:
    /Person[DetectedRulesList = Set[ObjectID='<GUID of the Set with the DREs>']/ComputedMember]
    Pasted from <http://technet.microsoft.com/en-us/library/ff608269(v=ws.10).aspx> 
    My users weren't transitioning into the set when they got a DRE.  Went on a wild goose chase until I saw this post.  Enabling the
    FIM_MaintainSetsJob fixed
    the problem.  Pretty frustrating... 

  • CSCun15879 - CAT4K MAB not triggered when "authentication control-direction in"

    Dear all,
    We try to get WOL working in combination with MAB authentication and we think the implementation of "authentication control-direction in" is broken on the Cat4k5 platform and is working on the Cat3850.
    We run exact the same config on a Cat3850 and "authentication control-direction in" and MAB+WOL works fine.
    My question: Can other users confirm this BUG?
    So "authentication control-direction in" breaks MAB on:
    Chassis Type : WS-C4507R+E
    Power consumed by backplane : 40 Watts
    Mod Ports Card Type                              Model              Serial No.
    ---+-----+--------------------------------------+------------------+-----------
     1    48  10/100/1000BaseT Premium POE E Series  WS-X4648-RJ45V+E   JAE18280xx
     2    48  10/100/1000BaseT Premium POE E Series  WS-X4648-RJ45V+E   JAE18280xx
     3     6  Sup 7L-E 10GE (SFP+), 1000BaseX (SFP)  WS-X45-SUP7L-E     CAT1827Lxx
     5    48  10/100/1000BaseT Premium POE E Series  WS-X4648-RJ45V+E   JAE18270xx
     6    48  10/100/1000BaseT Premium POE E Series  WS-X4648-RJ45V+E   JAE18270xx
     7    48  10/100/1000BaseT Premium POE E Series  WS-X4648-RJ45V+E   JAE18280xx
    Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software (cat4500e-UNIVERSALK9-M), Version 03.05.03.E RELEASE SOFTWARE (fc1)
    cat4500e-universalk9.SPA.03.05.03.E.152-1.E3.bin
    And "authentication control-direction in" and MAB works fine on:
    Switch  Ports    Model                Serial No.   MAC address     Hw Ver.       Sw Ver.
     1       56     WS-C3850-48P          FCWxxxx  ccd8.c130.aaaa  M0            03.03.03SE
    Cisco IOS Software, IOS-XE Software, Catalyst L3 Switch Software (CAT3K_CAA-UNIVERSALK9-M), Version 03.03.03SE RELEASE SOFTWARE (fc2)
    cat3k_caa-universalk9.SPA.03.03.03.SE.150-1.EZ3.bin
    Kind regards,
    Paul Boot.
    Reinier de Graaf Hospital,
    The Netherlands.

    Hello Kashish-
    Can you:
    1. Post the full switchport config
    2. Make and model of the switch
    3. Version of code running on the switch

  • Release Strategy for PO not kicking in

    Hello SAP Experts,
    I have gone through all the steps of configuring release strategy for PO. I checked at the end with the transaction code OMGSCK and everything is good with no error. But when I test the strategy by creating a PO, the 'Release Strategy' tab does not come on in the PO Header. This means that the Release Strategy did not work. I have troubleshot over and over again right from the Characteristics/Class, all the way to the Release Strategy, but no breakthrough.
    I will appreciate and award points for helpful hints.
    Thank you in advance.
    Joel.

    Please list all your char you have created and the value of char.
    Than please tell the PO details.
    once i got this info than only i can see the problems.
    you can do one more thing
    goto CL30n and enter the class and class type 032
    than hit enter and enter the value of char which you have used in the PO and then hit find initial class button from top menu
    see if any release strategy is pulled or not?
    if it is determine morethan one that means you have same value exist in more than one release strategy

  • Release strategy not kicking in

    dear gurus,
    i have created release strategies and have run a check release strategies everything seems to be ok except for one which is it shows an error message sayin
    No release group exists
    Message no. ME_RELCHK014
    Diagnosis
    You have not created a release group. A release group is necessary for the determination of the release strategy because the release conditions are defined via the release group.
    Procedure
    1. Create a release group.
    2. Create your release codes and release strategies with reference to your release group.
    the strangest thing about this error is i have all strategies and codes assigned to the group and still displays this error.
    when i go back to the me51n try creating a PR when saving it the system says " NO release strategy selected"
    plz help. is there somethig i been msising
    regards
    sayeed

    Dear Sayeed,
    Check SPRO >Materials Management>Purchasing>Purchase Order>Check Release Strategies.
    Here Basic checks
    Checks re release group and release class
    Checks re release codes
    Checks re release Indicators
    Checks re release strategies
    All the above nodes should be in green color(ie without error).
    If any error exists, please correct the error checking with the error log.
    Check SPRO->MM->Purchasing->Purchasing Requisition->Define Document types.
    Here Overall release indicator must be ticked for the document type for which ur raising PR
    rgds,
    nanthakumar

  • Why does my screensaver not kick in when I am using Firefox?

    I have a new pc, a pavilion using windows 7. I have set my screensaver to engage after 2 minutes and it does when I am using explorer, but it does not when I use firefox. Is there something in browser settings that I need to change? If so, how do I do that?

    Hard to say.. But...
    Try This...
    Close All Open Apps...  Perform a Reset... Try again...
    Reset  ( No Data will be Lost )
    Press and hold the Sleep/Wake button and the Home button at the same time for at least ten seconds, until the Apple logo appears. Release the Buttons.
    http://support.apple.com/kb/ht1430
    If no joy...
    Connect to iTunes on the computer you usually Sync with and “ Restore “...
    http://support.apple.com/kb/HT1414

  • Energy settings not kicking in

    I've got my energy saver settings so that my monitor shuts off after a few minutes and my computer will sleep if left idle for 2 hours.
    Sometimes, however, it doesn't kick in. I won't be running any extra processes, but (for example) I left my computer running when I went to bed while downloading a large file. It never went to sleep.
    This happened in Panther (recently upgraded to Tiger) although it doesn't happen all the time. Any ideas?

    If you are downloading a large file, it makes sense that your computer won't go to sleep. Check the software you use for downloading to see if it offers an option to download files in the background, in order to allow the monitor to go to sleep.

Maybe you are looking for

  • Solution centre not working for windows 7 and wireless all in one, altho can print ok

    I have installed an officejet 6500 wireless all in one on my HP Elitebook running Windows 7 64 bit. Although the printer installed - albeit with an error for Microsoft.net4 that was resolved after a re reboot - HP Solution Centre v14 wont start. Indi

  • Buffer overflow problem

    In transaction qa32, I put my data and I enter usage decision. In inspection lot stock, when I enter one variable and push the button save.I get the error Buffer is too small, When I debug the system CALL 'ThNoGet' ID 'BNRIV' FIELD BNRIV ID 'NO' FIEL

  • Changes to the ESS Personal Data iview

    Hi There With regard to the 'Personal Data' iview on ESS. I have a scenario where fields marked as REQUIRED are DISABLED. How do i enable them ? When trying to change the field configuration by previewing the Personal Data iview and then doing 'contr

  • Nikon EXIF data incomplete

    If I look at the EXIF data for a file in iView Media Pro I can see what metering was used for a shot (i.e. matrix, program, spot, etc.). The same field in Aperture shows up with numerical values (0, 3, etc.). Is this a Nikon thing or a problem with A

  • Why isn't my phone number an option for imessage?

    I just switched providers with my phone and for some reason, imessage stopped working for me, so I reactivated it and I can't see my phone # as an option, just my email. I tried every single thing possible, nothing worked.