NAC 4.5 ADSSO on multiple AD servers not working, how to troubleshoot?

Hi All,
     I'm handling a NAC (CAS and CAM ver 4.5) to be implemented to a network on production.  The network has two working AD servers, one acting as back-up.  We want to configure the NAC to be able to run ADSSO even if the active AD fails, so we configured NAC to run ADSSO on multiple servers.  I followed the documents, run ktpass for multiple ADs, installed kerbtray to see Kerb tickets, but still I'm puzzled of the problem.  My CAS shows the the ADSSO service is already started, but my workstation cannot perform Single-sign On.  After the "performing AD authentication" window, the agent then reverts back to as a local account.  Please help guys.  I'm willing to share other details about this.  Thanks.
Regards,
Dan

Hi Faisal,
     The Unauthorized role is already in all trafic enabled policy.  My problem is that the KT that is shown in the workstation is different from the one I created using ktpass, although I matched the cases of the domain and the one in the ktpass.  I deeply appreciate if you can help.  Thanks.
Regards,
Dan

Similar Messages

  • Load balancing across multiple application servers not working with JCo RFC

    We have a problem where inbound messages to the Mapping Runtime engine (ABAP -> J2EE) are not load balanced over application servers. However, load balancing does take place across server nodes within one application server.
    Our system comprises of the following:
    Central Instance (2 X server nodes)
    Database Instance
    2 X Dialog Instances (with 2 X server nodes each)
    The 1st application server that starts is usually the one that is used for inbound messaging.
    We have looked at the sap gateway configuration and have tried various options without much luck:
    i.e.: local gateways vs. one central gateway, load balancing type by changing parameter gw/reg_lb_level, see: http://help.sap.com/saphelp_nw70/helpdata/EN/bb/9f12f24b9b11d189750000e8322d00/frameset.htm
    Here are our release levels:
    SAP_ABA     700     0012     SAPKA70012
    SAP_BASIS     700     0012     SAPKB70012
    PI_BASIS     2005_1_700     0012     SAPKIPYJ7C
    ST-PI     2005_1_700     0005     SAPKITLQI5
    SAP_BW     700     0013     SAPKW70013
    ST-A/PI     01J_BCO700     0000          -
    Any help would be greatly appreciated.
    Many thanks

    Tim
    Did you follow the guide here:
    How to Scale Up SAP Exchange Infrastructure 3.0  
    Learn what the most likely scaled system architecture looks like, and read about a step by step procedure to install additional dialog instances. The guide also walks you through additional configuration steps and the application of Support Package Stacks.
    https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/c3d9d710-0d01-0010-7486-9a51ab92b927
    We followed this guide for XI3.0 and PI7.0 and works successfully!

  • Multiple delete is not working.

    Hi,
    Multiple delete is not working. Please find my backend bean code. Please let me know the issue in my code.
    Table:
    <af:table value="#{bindings.CmProcessParamValueView13.collectionModel}"
    var="row"
    rows="#{bindings.CmProcessParamValueView13.rangeSize}"
    emptyText="#{bindings.CmProcessParamValueView13.viewable ? 'No data to display.' : 'Access Denied.'}"
    fetchSize="#{bindings.CmProcessParamValueView13.rangeSize}"
    rowBandingInterval="1"
    selectedRowKeys="#{bindings.CmProcessParamValueView13.collectionModel.selectedRow}"
    selectionListener="#{bindings.CmProcessParamValueView13.collectionModel.makeCurrent}"
    rowSelection="multiple"
    binding="#{backingBeanScope.backing_app_RunCalcPage.t1}"
    id="t1" width="720px" inlineStyle="height:140px;" partialTriggers="cb6 cb3"
    filterVisible="true" filterModel="#{bindings.CmProcessParamValueView13.queryDescriptor}" >
    <af:column sortProperty="ParamValue7"
    sortable="true" width="690"
    headerText="Comm Type"
    rowHeader="unstyled"
    id="c2" align="left" filterable="true">
    <af:outputText value="#{row.ParamValue7}"
    id="ot4"/>
    </af:column>
    </af:table>
    Backing Bean Delete Code:
    RowKeySet rowKeySet = (RowKeySet)this.t1.getSelectedRowKeys();
    CollectionModel cm = (CollectionModel)this.t1.getValue();
    System.out.println("RowKeySet is: "+ rowKeySet.getSize());
    for (Object facesTreeRowKey : rowKeySet) {
    cm.setRowKey(facesTreeRowKey);
    JUCtrlHierNodeBinding rowData =
    (JUCtrlHierNodeBinding)cm.getRowData();
    System.out.println("RowData is : "+rowData.getAttribute("ParamValue7"));
    rowData.getRow().remove();
    Thanks.

    Issue is resolved...
    Solution is,
    Remove selectionListener and selectedKey attributes from the table.
    Delete code is:
    DCBindingContainer dcBindings =
    (DCBindingContainer)getBindings();
    DCIteratorBinding dcIterator =
    dcBindings.findIteratorBinding("Iterator...");
    RowSetIterator rs = dcIterator.getRowSetIterator();
    RowKeySet rks = this.t1.getSelectedRowKeys();
    Iterator rksIter = rks.iterator();
    while (rksIter.hasNext()) {
    List l = (List) rksIter.next();
    Key key = (Key)l.get(0);
    Row row = rs.getRow(key);
    if(row != null)
    row.remove();
    }

  • My apple tv, all of a sudden, is no longer able to connect to my computer.  I have restarted EVERYTHING, multiple times, still not working.

    My apple tv, all of a sudden, is no longer able to connect to my computer.  I have restarted EVERYTHING, multiple times, still not working.

    Welcome to the Apple Community.
    Check your store location is set correctly, if this doesn't help, try restarting the Apple TV by removing ALL the cables for a 30 seconds.

  • Apple List Servers Not Working

    The Apple list servers seem to be not working. Can someone at Apple please give update as to whether this is being resolved?
    For example:
    http://lists.apple.com/archives/webobjects-dev is definitely not working.
    Also cocoa-dev list seems to have no archives since the turn of the year.
    5 days later and the lists are still down. Anyone got any idea what is going on?
    -Kieran

    That link worked for me...
    maybe a DNS issue somewhere, perhaps your ISP or LAN?
    Jeff

  • NAC L2-IP on 6500 . URL Redirection Not working

    Hi,
    We are testing NAC L2-IP on a Cat 6506 running 12.2(18)SXF9.
    When configuring for NAC L2-IP, the switch is able to download the required ACL
    entries. The HTTP Server is enabled in the Switch, however still the HTTP
    redirection is Not working.
    From the Client side, I can see the SYN packets going to port 80 but no
    response (Redirect etc) comes back from the switch.
    This is the Port-ACL
    10 permit udp any eq 21862 any
    11 permit icmp any any echo-reply
    20 permit udp any any eq bootps
    30 permit udp any any eq domain
    40 permit tcp any eq 3389 any
    50 deny ip any any
    This is the ACL as specified in the "url-redirect-acl" attribute
    70 deny tcp any host 10.140.4.116 eq www
    80 deny tcp any host 10.140.4.202 eq www
    90 deny tcp any host 10.1.194.15 eq www
    100 deny tcp any host 172.25.1.15 eq www
    110 permit tcp any any eq www
    Any ideas ?
    +++++++++++++++++
    show eou ip 10.192.99.27
    Address : 10.192.99.27
    MAC Address : 0006.5ba0.5705
    Interface : FastEthernet2/47
    AuthType : CLIENTLESS
    Audit Session ID : 0000002C1387D1FB0000000D0AC0631B
    PostureToken : -------
    Age(min) : 15
    URL Redirect : http://x.x.x/y
    URL Redirect ACL : redirect-policy
    ACL Name : #ACSACL#-IP-NAC_NoCTA_ACL-464b3186
    User Name : UNKNOWN USER
    Revalidation Period : 36000 Seconds
    Status Query Period : 300 Seconds
    Current State : CLIENTLESS
    ++++++++++++++++++++++++++++++++
    Exactly the Same configuration and Secure ACS configuration works for a 3560 Switch.
    Thanks,
    Naman

    Check this bug-id: CSCse02269.

  • NAC guest server hangs and guest portal is not working

    Hi all ,
    Our guest nac server NAC3315 is oftenly getting hung state . And our guest wireless network is not working . We are able to ping the NAC server but web page is not opening for the clients if they connected to guest network.
    Any clue on this ....
    Thanks!,
    Regards,
    Vijay.

    All  actions within the Cisco NAC Guest Server are logged into the database.  This enables you to see any action that occurred as part of the normal  operating process of the application.
    To access the system log from the administration interface select Server > System Log from the left hand menu
    Please check the Error Logs for troubleshooting of NGS

  • Multiple Image Upload not working on macs

    Hello everybody,
    I have searched everywhere for an answer to this issue and I'm not sure if there is a solution yet.
    I am hoping someone reads this and tells me if either I need to use another product or post a fix for this to work.
    I am developing a website for a photographer who needs to upload the pictures he takes for his clients to review on his website.
    So on the backend I have created an application where he logs in and creates a new client and then uploads multiple images to that client's folder.
    I am of course developing the site in ADDT version 1.0.1. in Dreamweaver CS4.
    Everything works as expected except for the image upload part, where he is unable to upload even a single image.
    He is using Mac OS X and Safari 3 to access his site.
    I use a PC and can upload images perfectly, but the whole purpose of the website is for him to be able to upload images without me.
    I read somewhere that ADDT's Multiple Image upload did not work on Macs because of the way that the OS handles image uploads to the server via HTTP. I also know that Flash v.10 had an issue with this behaviour in the past, but that it's been fixed with ADDT's v. 1.0.1, which is true since as I said I am able to upload images from my PC using that Flash version.
    There is a product called MultiPowUpload from Element-IT (http://www.element-it.com/MultiPowUpload.aspx) that seems to do the exact same thing as ADDT's Multiple Image Upload, and I have tested the Demo version both on Mac and PC and works perfectly well.
    I really would like my ADDT behaviour to work, first because I already have the whole site developed in it, plus I am used to the software already, and also because Element-IT's product is a bit pricey for a multiple server license (which I would need for other sites I plan to develop for Mac users).
    Any thoughts or pointers you might have will be greatly appreciated.
    Thank you in advance.
    Luis Herrero.

    Thanks a lot for your replies and helpful ideas.
    It turns out that for some strange reason the problem was with the hosting provider.
    I have moved another site which was not working with Macs either to a new provider and everything works now as it should be, without changing any files at all.
    I have in fact v.1.0.1 in both those sites (those were the first things I checked before posting here) and Flash Player v. 10 both on the Mac and PC, so it will remain a mystery as to why the server behavior did not work with that particular host on Macs.
    Thanks again.
    Best regards.

  • Multiple IDOCs pattern not working

    Hello, When I tried Multiple IDOC to single file pattern, it is not working as expected. Everytime when a idoc reaches XI, it is going to a seperate BPM queue and not collecting the IDOCs, any idea??

    Yes, I have refered. I have done exaclty the same thing as in SAP Pattern for collecting multiple idocs to single file. Everything is working fine in BPM too.  But the problem is whenever the idoc hits XI, it is going to a seperate BPM queue instead of a same queue. So single message for each BPM and BPM waits for 3 minutes (mentioned in BPM) and times out. But my need is all the IDOCs should come to a single BPM queue and BPM needs to collect all the IDOCs and send it as a single file.

  • C3 - Multiple Selection is not working with pencil...

    Hello Guys,
    Pencil key is not working for multiple selection while ctrl key is working.
    Can any1 guide me how to do muliple selection......

    There was an issue with messaging in the original software on the C3, so make sure that you are up-to-date. To check your software version try *#0000#
    Latest software release for Nokia C3-00 is 08.63
    Your service provider may not have the latest nokia version available, but make sure you have the most recent you can get.
    Menu > Settings > Phone> Phone Updates > Downl. phone software

  • Hp 6700 option to scan to single file or multiple files does not work-scans to single files only

    Cannot find a way  to scan multiple documents to a single file.  The option on the Scan function does not work!

    Hi @apdamw 
    Have you tried saving the scanned pages as a PDF? When you choose PDF in the format option, you will see the option to choose save all pages to a single file, or create a seperate file for each scanned page. Depending on what option you see, you will need to tick or untick the option.
    Please click the Thumbs up icon below to thank me for responding.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Please click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution.
    Sunshyn2005 - I work on behalf of HP

  • Tree Multiple Selection does not work ???

    Hello, while migrating my application from Flex 1.5 to Flex
    2, I had the disgreement to discover that multiple selection in
    tree does not work anymore.
    I event tried the basic example found in Flex documentation
    (see below), which does not work
    Please, I need this feature in my application ! How can I do
    ? Is it normal ?
    Thanks

    Multiple selection in the tree was removed for the General
    release.. I am sure they plan to put it back as soon as possible.
    Tracy

  • Multiple DHCP servers Not authorized to start in domain.

    Hello all,
    Suddenly in our network, we started noticing that DHCP servers are getting unauthorized automatically and stop servicing to their clients.
    it is happening randomly to all my locations and post restarting the service and authorize the service will solve the issue.
    I dont know why this behavior and still some dhcp servers are prompting with this issue. 
    Upon checking the evenlog, i am able to find that the event id "1046" with the error message loggind in those machines stating that
    The DHCP/BINL service on the local machine, belonging to the Windows Administrative domain CORP.DRREDDYS.COM, has determined that it is not authorized to start.  It has stopped servicing clients.  The following are some possible reasons for this: 
    This machine cannot reach its directory service enterprise and it has encountered another DHCP service on the network belonging to a directory service enterprise on which the local machine is not authorized. 
    Please provide your inputs on this behavior.
    Regards, 
    Andrew

    Could anybody update on this cause.

  • On financial site which worked perfectly in IE for many years, I get immediate timeout error after entering my ID and password. Does not happen every time and multiple retries do not work.

    I have used the PrimeVest web site to keep track of my IRA for several years now. For most of that time I have used Internet Explorer and have had no trouble. I have a link to that site pasted onto an Excel spread sheet and I click on that link daily to get my present balance. I have been doing it this way for years and have had no trouble while using Internet Explorer.
    I recently installed the Firefox browser on my new laptop and have switched to using it as my default browser. When I click on that link now and enter my account number and password, sometimes it works OK in Firefox and sometimes it gives me a message saying "Your session has timed out. Please Log In Again." I have tried multiple times to re-enter the account number and password but always get the same message. Closing Firefox and reopening it produces the same result. I have even tried shutting the computer completely down and restarting it, but I got the same result. I can not find any pattern or reason to the days when I can use Firefox and the ones when I can not. The only way I have been able to log on to this site on those days is to past the link into Internet Explorer.
    I do the same thing with several other financial sites and have not had any trouble with them and Firefox.

    Thanks for the response.
    I attempted to remove cookies, but I can not identify any of the cookies on the list with the PrimeVest web site. No PrimeVest, no PVs, nothing that looks like it came from them.
    I have also reported the problem to PrimeVest and their tech did answer. He suggested erasing the browsing history (temporary internet files), which I did with no effect. He also had me check for the correct starting page address, which was OK. He stated that they are aware of a problem and it is on their list. No indication of how far down that list though. His only cure was to use IE for now, which I was already doing. Perhaps he can tell me which cookies to remove.

  • Multiple file upload not working in IE10 and IE11

    Hi,
    As per the UI5 documentation( https://sapui5.hana.ondemand.com/sdk/#test-resources/sap/ui/commons/demokit/FileUploader.html) , UI5 supports multiple file uploading for IE10 and IE11. I set the "multiple: true" flag in the fileuploader example page and the file browser dialog is not allowing to select multiple files. Does UI5 provide multi file upload support for IE10 and IE11 or am i missing anything ?
    regards
    Raja

    Huh?
    Your problem makes no sense. The filename is included with the upload so that the server knows what the file was originally called. Are you running the JSP locally and reading the file directly off the hard drive??
    I note also that you aren't using a multipart form, which is required to upload a file.
    <form action="uploadFile.jsp" method="post" enctype="multipart/form-data">
      <input type="file" name="upload" value="<%= fileName %>" />
    </form>You'll need to use the Jakarta Commons FileUpload class to correctly process a form encoded with "multipart/form-data" or getParameter("xxx") will return null. You can also use the older com.oreilly.servlet.MultipartForm or whatever it's called. I'm pretty certain that the Jakarta Commons obsoletes all the COS classes.
    Brian

Maybe you are looking for

  • RELOAD FIRMWARE PROBLEM ZEN VISION M 3

    I AM IN THE PROCESS OF RELOADING THE FIRMWARE FOR MY PLAYER. FILE? VERSION .62 02 .DOES ANYBODY KNOW HOW LONG THE PROCESS TAKES, I HAVE THE UPGRADING FIRMWARE BOX SHOWING ON MY PC SCREEN . IT SHOWS UPGRADING FIRMWARE PLEASE WAIT BUT FOR HOW LONG, IT

  • SOA Suite 11g File Adapter End Of Line problem

    I am using a file adapter to read(using an NXSD to convert from flat file to XML) a file do some filtering and then write the file in the original format using the same NXSD. The records in my file are separated by End Of Line. i.e. each line is one

  • Where can I purchase a "Crystal Single Case"?

    Hello, You can purchase a single case from the online store. Start with [www.sap.com/businessobjects|http://www.sap.com/businessobjects] and click on the "Visit the online store" link in the upper right. After choosing your region (I picked the Unite

  • ORDER BY clause behavior

    Hi All, I have a query (with ORDER BY clause) which gives sorting in 2 different types on UAT & TEST machine The column on which the data is sorted is having same value. Only some time I saw this behavior. Any specific reason for this ? E.g. CREATE T

  • If I do not have a credit card binded to my Apple ID, will I still be able to redeem and use iTunes gift cards?

    If I do not have a credit card binded to my Apple ID, will I still be able to redeem and use iTunes gift cards?