NAC guest user poster assesment.

Dear all,
Please assist me for NAC guest server poster assesment issue.
Scenario is like we have NAC guest server and all wireless guest users authenticate through Guest Server.
Its working fine.
But customer wants to apply poster assement on guest users through existing CAS and CAM.
Guest_users-------AP-------WLC------- NAC_Guest_Server----------internet

Thanks for reply.
Actually in my network we have cas and cam integrate with WLC for internal users. Its working fine.No issue. Poster assesment and authentication working fine.
We have also NGS server which is integrate with WLC for web authentication fow guest wireless users.
It is also working fine.Authentication happened through NGS server succesfully.
But now I wanted to force poster assesment for wireless guest users which are authenticated through NGS server.

Similar Messages

NAC guest server-user poster assesment problem

Dear all,
Please assist me for NAC guest server poster assesment issue.
Scenario is like we have NAC guest server and all wireless guest users authenticate through Guest Server.
Its working fine.
But customer wants to apply poster assement on guest users through existing CAS and CAM.
Guest_users-------AP-------WLC------- NAC_Guest_Server----------internet

Thanks for reply.
Actually in my network we have cas and cam integrate with WLC for internal users. Its working fine.No issue. Poster assesment and authentication working fine.
We have also NGS server which is integrate with WLC for web authentication fow guest wireless users.
It is also working fine.Authentication happened through NGS server succesfully.
But now I wanted to force poster assesment for wireless guest users which are authenticated through NGS server.

NAC Guest as external Radius for ISE?

Hi there,
for migration purpose, is there a way to configure the ISE to use an existing NAC Guest User database for Guest authorization?
Regards,

That should not be a problem however I have not tested this. When using the guest identity sequence in ISE you have the ability to add the databse you want to ISE to check. I do not see why you could not add another radius database to that selection. Here is a thread on configuring this -
https://supportforums.cisco.com/thread/2183727
Thanks,
Tarik Admani
*Please rate helpful posts*

Guest Wireless Users Not Able to Get to NAC Guest Server

First of all, I appreciate any of the help that can be offered on the post. Your solutions and suggestions have been valuable, in the past!
Here's the scenario. I have two internal WLC's, and one anchor mobility server, in the DMZ. The internal controllers are part of the 10.x.x.x range, while the DMZ WLC is in the 192.168.1.x range. We also have a NAC Guest Server, in the DMZ that has a 192.168.1.x address. Here's the problem, when a guest user uses our guest SSID, they're assigned a 172.16.x.x address, their traffic is intercepted, and they're presented with a login page. If they don't have login credentials, there's a "Register Here" link that takes them to the NAC Guest Server to self-register. When they click the "Register Here" link, for some reason they can't get to the NAC guest server. If I bring up a command prompt, and type in "telnet 192.168.1.x 80", it connects. The odd thing is that when I was testing, if I login with guest credentials, and then try to go to the NAC Guest Server self-service page, I can get to it with no problem. Would anyone have any ideas as to why?

I may have missed something here, but isn't the point of the guest portal that you can't get anywhere on the network (except the guest portal) until you have authenticated?

NAC Guest Server, How to change the password for a single user?

We have a NAC Guest Server which creates a complex password for all new users created.
We would like to have normal/simple password for a single user. How can I get this done on a NAC Guest Server.
Thanks in advance.

Hi,
You can setup 3 different flavours of passwords:
http://www.cisco.com/en/US/docs/security/nac/guestserver/configuration_guide/20/g_guestpol.html#wp1063249.
a. Username Policy 1 - Email address as username
Use the guest's email address as the username. If an overlapping account with the same email address exists, a random number is added to the end of the email address to make the username unique. Overlapping accounts are accounts that have the same email address and are valid for an overlapping period of time.
b. Username Policy 2 - Create username based on first and last names
Create a username based on combining the first name and last name of the guest. You can set a Minimum username length for this username from 1 to 20 characters (default is 10). User names shorter than the minimum length are padded up to the minimum specified length with a random number.
c. Username Policy 3 - Create random username
Create a username based upon a random mixture of Alphabetic, Numeric or Other characters. Type the characters to include to generate the random characters and the number to use from each set of characters.
Note: The total length of the username is determined by the total number of characters included.
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

NAC Guest Server hiw to delete/remove Guest User

Hi,
we are working with Cisco NAC Guest Server V2.0
Does anybody in the Communitie knows, how to delete/remove a Guest User, who's Account is Suspended or no longer needed in the Guest User Database.
Please let me know.
Sent from Cisco Technical Support iPad App

tx,
hm, can you tell me why, it is in future releases availble?
hajo
Sent from Cisco Technical Support iPad App

Cisco NAC Guest Server for Wireless Users integration with IP telephony

Hi Team
I have a client who has the following requirement. The cleint requires a Guest server inorder to serve wireless needs for guests at their office. They want the guest to get their authentication codes via SMS. The cleint will have a lobby IP Phone where the guest will press the services button confgiured on the IP Phone. IT will then prompt the guest to enter his mobile number. Once the guest enters his mobile number, the guest will recieve a text via sms gateway with login credentials. They want to offload this from the receptionist and it is for this reason that they require this functionality.
Has anyone done this sort of deployment ? We have already proposed NAC guest server and Wireless controller but we do not know whether the XML application for subscribing the service on the IP Phone is available directly with cisco or does it need to developed.
Kindly advice on the same.
Regards
Azeem

Hi Vishal,
Please note that if you want to return ACLs (and usually in wired web auth you need to), you will have to integrate with ACS as NGS itself cannot return ACLs in the reply radius attributes.
Basically the process is as follows:
1 - Client plugs cable on switch.
2 - Web auth is triggered on the port.
3 - default ACL permiting only DNS and DHCP is applyed so that the client PC can obtain IP address and open a browser.
4 - Client will be redirected to the NGS hotspot login page.
5 - Client will enter credentials.
6 - Client broswer will send an HTTP POST packet containing the credentials.
7 - The switch will intercept the POS packets and retrieve the credentials entered.
8 - The switch will send Radius Access-Request to the ACS.
9 - The ACS will use the NGS as External Identity source to authenticate the client.
10 - The NGS will reply with Radius Access-Accept to the ACS and the ACS will reply to the switch including the ACL in the Access-Accept.
11 - the Switch authorizes the client on the port and applies the ACL it received from the ACS.
Please follow the document Nicolas posted as it is a good one.
HTH,
Thanks

NAC guest notification for Guest users

Hi all,
did NAC guest send notification and report automatically if the guest user time is finished ,and how?
i will give 5 star
Regards

Hello,
NGS acts as a Radius Server for the WLC to authenticate the guest users. It doesn't notify when the guest user lifetime is over, this is out of Scope of Radius Protocol.
Rather a session timeout radius attribute is sent from NGS to WLC upon login of the guest user on the web auth SSID. This takes effect on the WLC and the user is removed from WLC when the timeout is over.
You need to have AAA Override enabled on the SSID.
Check: http://www.cisco.com/en/US/products/ps6366/products_tech_note09186a00809d6b9a.shtml
From that link:
Choose the the Advanced tab.
Enable Allow AAA Override. This allows the per client session timeout to be set from the NAC Guest Appliance.
Thanks
Serge

NAC Guest Server - how to reactivate suspended users

I am wondering if it is possible to reactivate suspended users.
My customer wants to set up guest users for external consultants who are on site for a few weeks every year. He does not want to set up new users every year, instead reactivate the suspended accounts from the year before.
Is there a way to reactive suspended users?
Is this handled differently depending on the Time Profile used?
Start End
From First Login
From Creation
Time Used
Thanks,
Felix

Hi,
I am afraid that is not possible.
As you suspect, that is managed by the time profiles and you have those 4 options you mentioned:
Start End
From First Login
From Creation
Time Used
So once the account reaches the end of the duration that is set by the timeprofile, it is not possible anymore to use it.
HTH,
Tiago
If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Wired WebAuth only with NAC Guest Server (No ACS)

Ok, I have been fighting this for two days now. I want to use the webauth function on some of our Cisco 3750Gs ver
12.2(55)SE5 for guest access. I'm trying to use our NAC Guest Server ver: 2.0.3 as the backend portal and Radius server. We do not have ACS or any of the other components of ISE or NAC. I think the issue is the NGS server is not sending the d(ACL) back to switch. Guest work work fine from our WLCs.
switch debug: No Attributes in swtich debug
Mar 22 12:56:00.448 CDT: RADIUS(0000030C): Config NAS IP: 199.46.201.26
Mar 22 12:56:00.448 CDT: RADIUS/ENCODE(0000030C): acct_session_id: 1012
Mar 22 12:56:00.448 CDT: RADIUS(0000030C): sending
Mar 22 12:56:00.448 CDT: RADIUS(0000030C): Send Access-Request to 10.199.33.20:1812 id 1645/19, len 177
Mar 22 12:56:00.448 CDT: RADIUS: authenticator 99 95 59 55 09 A9 D9 E1 - 2B 01 90 36 1B 8A 41 92
Mar 22 12:56:00.448 CDT: RADIUS: User-Name           [1]   20 "[email protected]"
Mar 22 12:56:00.448 CDT: RADIUS: User-Password       [2]   18 *
Mar 22 12:56:00.448 CDT: RADIUS: Framed-IP-Address   [8]   6   199.46.201.231
Mar 22 12:56:00.448 CDT: RADIUS: Service-Type        [6]   6   Outbound                  [5]
Mar 22 12:56:00.448 CDT: RADIUS: Message-Authenticato[80] 18
Mar 22 12:56:00.448 CDT: RADIUS:   A2 57 B5 F2 A6 FB 46 71 D0 EA 26 54 95 90 F4 D0             [ WFq&T]
Mar 22 12:56:00.448 CDT: RADIUS: Vendor, Cisco       [26] 49
Mar 22 12:56:00.448 CDT: RADIUS:   Cisco AVpair       [1]   43 "audit-session-id=C72EC91A000002FC0A6CD698"
Mar 22 12:56:00.448 CDT: RADIUS: NAS-Port-Type       [61] 6   Ethernet                  [15]
Mar 22 12:56:00.448 CDT: RADIUS: NAS-Port            [5]   6   50106
Mar 22 12:56:00.448 CDT: RADIUS: NAS-Port-Id         [87] 22 "GigabitEthernet1/0/6"
Mar 22 12:56:00.448 CDT: RADIUS: NAS-IP-Address      [4]   6   199.46.201.26
Mar 22 12:56:00.448 CDT: RADIUS(0000030C): Started 5 sec timeout
Mar 22 12:56:01.454 CDT: RADIUS: Received from id 1645/19 10.199.33.20:1812, Access-Reject, len 20
Mar 22 12:56:01.454 CDT: RADIUS: authenticator 92 98 05 84 6E 4B CF DD - B5 D7 90 25 10 59 7B E7
Mar 22 12:56:01.454 CDT: RADIUS(0000030C): Received from id 1645/19
NGS log:
rad_recv: Access-Request packet from host 199.46.201.26 port 1645, id=19, length=177
    User-Name = "[email protected]"
    User-Password = "5rRmpPt9"
    Framed-IP-Address = 199.46.201.231
    Service-Type = Outbound-User
    Message-Authenticator = 0xa257b5f2a6fb4671d0ea26549590f4d0
    Cisco-AVPair = "audit-session-id=C72EC91A000002FC0A6CD698"
    NAS-Port-Type = Ethernet
    NAS-Port = 50106
    NAS-Port-Id = "GigabitEthernet1/0/6"
    NAS-IP-Address = 199.46.201.26
+- entering group authorize {...}
[radius-user-auth]     expand: %{User-Name} -> [email protected]
[radius-user-auth]     expand: %{User-Password} -> 5rRmpPt9
[radius-user-auth]     expand: %{NAS-IP-Address} -> 199.46.201.26
[radius-user-auth]     expand: %{Calling-Station-Id} ->
Exec-Program output:                          Note: no attributes here
Exec-Program: returned: 1
++[radius-user-auth] returns reject
Delaying reject of request 12 for 1 seconds
Going to the next request
Waking up in 0.6 seconds.
Similar debug from NGS but auth request from WLC: See attributes are sent to wlc although not needed
rad_recv: Access-Request packet from host 10.100.16.100 port 32770, id=22, length=152
    User-Name = "[email protected]"
    User-Password = "5rRmpPt9"
    Service-Type = Login-User
    NAS-IP-Address = 10.100.16.100
    NAS-Port = 13
    NAS-Identifier = "ICTWLC01"
    NAS-Port-Type = Ethernet
    Airespace-Wlan-Id = 514
    Calling-Station-Id = "10.198.12.211"
    Called-Station-Id = "10.100.16.100"
    Message-Authenticator = 0xc9383e767f0c228a2b8a0ece7069f366
+- entering group authorize {...}
[radius-user-auth]     expand: %{User-Name} -> [email protected]
[radius-user-auth]     expand: %{User-Password} -> 5rRmpPt9
[radius-user-auth]     expand: %{NAS-IP-Address} -> 10.100.16.100
[radius-user-auth]     expand: %{Calling-Station-Id} -> 10.198.12.211
Exec-Program output: Session-Timeout := 20002004, cisco-AVPair += priv-lvl=15, cisco-AVPair += auth-proxy:proxyacl#1=permit ip any any
Exec-Program-Wait: plaintext: Session-Timeout := 20002004, cisco-AVPair += priv-lvl=15, cisco-AVPair += auth-proxy:proxyacl#1=permit ip any any
Exec-Program: returned: 0
++[radius-user-auth] returns ok
[files] users: Matched entry DEFAULT at line 1
++[files] returns ok
Found Auth-Type = Accept
Auth-Type = Accept, accepting the user
+- entering group post-auth {...}
[sql]     expand: %{User-Name} -> [email protected]
[sql] sql_set_user escaped user --> '[email protected]'
[sql]     expand: %{User-Password} -> 5rRmpPt9
[sql]     expand: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('%{User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', NOW()) -> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('[email protected]', '5rRmpPt9', 'Access-Accept', NOW())
rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('[email protected]', '5rRmpPt9', 'Access-Accept', NOW())
rlm_sql (sql): Reserving sql socket id: 12
rlm_sql_postgresql: Status: PGRES_COMMAND_OK
rlm_sql_postgresql: query affected rows = 1
rlm_sql (sql): Released sql socket id: 12
++[sql] returns ok
Sending Access-Accept of id 22 to 10.100.16.100 port 32770
Finished request 4.
Going to the next request
Waking up in 4.9 seconds.
rad_recv: Accounting-Request packet from host 10.100.16.100 port 32770, id=30, length=170
config:
aaa new-model
aaa authentication login default group radius
aaa authentication login console group tacacs+ line
aaa authentication enable default group tacacs+ enable
aaa authorization console
aaa authorization exec default group tacacs+ none
aaa authorization auth-proxy default group radius
aaa accounting auth-proxy default start-stop group radius
aaa accounting exec default stop-only group tacacs+
aaa accounting commands 15 default stop-only group tacacs+
ip device tracking
ip auth-proxy auth-proxy-banner http ^C HawkerBeechcraft Guest Network ^C
ip auth-proxy proxy http login expired page file flash:expired.html
ip auth-proxy proxy http login page file flash:login.html
ip auth-proxy proxy http success page file flash:success.html
ip auth-proxy proxy http failure page file flash:failed.html
ip admission auth-proxy-banner http ^C HawkerBeechcraft Guest Network ^C
ip admission proxy http login expired page file flash:expired.html
ip admission proxy http login page file flash:login.html
ip admission proxy http success page file flash:success.html
ip admission proxy http failure page file flash:failed.html
ip admission name web-auth-guest proxy http inactivity-time 60
dot1x system-auth-control
identity policy FAILOPEN
access-group PERMIT
interface GigabitEthernet1/0/6
switchport access vlan 301
switchport mode access
ip access-group pre-webauth-guest in
no logging event link-status
srr-queue bandwidth share 10 10 60 20
queue-set 2
priority-queue out
mls qos trust device cisco-phone
mls qos trust dscp
no snmp trap link-status
auto qos voip cisco-phone
spanning-tree portfast
spanning-tree bpduguard enable
service-policy input AutoQoS-Police-CiscoPhone
ip admission web-auth-guest
ip http server
ip http secure-server
ip access-list extended PERMIT
permit ip any any
ip access-list extended pre-webauth-guest
permit udp any any eq bootps
permit udp any any eq domain
permit tcp any host 10.199.33.20 eq 8443
permit tcp any host 10.199.33.21 eq 8443
permit tcp any host 10.100.255.90 eq 8443
deny   ip any any log
ip radius source-interface Vlan301
radius-server attribute 8 include-in-access-req
radius-server dead-criteria tries 2
radius-server host 10.199.33.20 auth-port 1812 acct-port 1813 key 7 022E5C782C130A74586F1C0D0D
radius-server vsa send authentication
I get the login and AUP page then the failed page... I never see the priv-lvl 15 or the proxyacl? How do I do this with Guest server only?
Help!

Without the ACS, only with the NAC guest is possible?
They can send me sample configuration?

Wireless guest users are getting limited connectivity.

Could anyone help please, I have a wireless guest solution consist of :
WLC located internal in the network – all the AP are associated with that WLC-.
Anchor WLC located in the DMZ . the guest SSID are tunneled from the internal WLC to the Anchor WLC, the DHCP service for guest users is on the Anchor WLC.
NAC guest server to authenticate the guest users.
The solution was working properly but now we have a problem that if any one tried to connect to the guest SSID if he is authorized or not , the user will get IP address from the DHCP pool and now as you know most of people has smart phones and they try to get internet access. Now only 5 or 6 people authenticated with NAC gest server and the DHCP pool become full because too many people tried to connect even they do not authenticate.
so if any user trys to cnnect he will not get IP address from the anchor controller and getting limited connectivity.
if I add static IP address on my Laptop , I will be redirected to the authentication page and can access normally.
I am working in big environment 7,000 users so I can’t go with increasing the DHCP pool because the problem will not be solved.
I hope if anyone can help in this case.
Thanks in advance.

This is a pitfall and raising the eyebrows.. currently we do not have anyother option other than using a WPA-PSK + WEB AUTH
that is..
PSK will block the users to just grab an IP and sit!! , if the user enters a valid PSK, he will get the IP address and followed by the Web auth process!! this may help u as of now.. or just a work around.. to overcome the IP exhaustion..
Please rasie a PER with your accounts team to raise the severity on this issue if u have the contract n all with us!!
Please dont forget to rate the usefull posts!!
Regards
Surendra

Why does GarageBand audio work for guest user but not my account?

Hello, I have a 15-inch MacBook Pro (2.2 GHz Intel Core i7, 4GB 1333 MHz DDR3) from late 2011 that I bought brand new in 2012. I'm running OS X Mavericks 10.9.4 and my MacBook has 500 GB of storage.
About a month or two ago I tried to download the new GarageBand (10.0.2) but I had trouble completing the loops download. The download would stop halfway through because of a network error. So last week I decided to try to download it again, and I was able to do so after reading some discussions about the issue. I successfully completed the download in safety mode and then I restarted my MacBook. At this point I was able to open GarageBand 10.0.2 and create a new project. Unfortunately, there was no audio coming through the output and sound bar for the various audio components in GarageBand. I had no audio when previewing the loops or playing it back in an audio track. I didn't really test anything else out because I figured I needed to fix this problem first. I have read many discussion boards about audio problems with GarageBand. I have already made sure everything is set properly in the GarageBand preferences and the audio preferences in system preferences. I've tried restarting GarageBand and restarting the computer.
This evening I found a discussion from the username icewhatice and they seemed to have had my exact problem. I'm not sure that I found the answer on this discussion though. For reference, this is what icewhatice posted: "I have no audio coming from Garageband 10.0.2. Downloaded it on Saturday and have spent the last two days trying to figure out why it won't work. I'm using a macbook pro with an Alesis QX49. GB registers keyboard when I plug it in but no sound whatsoever, not even from the onscreen keyboard. It seems to read the keyboard as if I play a C chord, it appears in the display. I've done all the obvious stuff like check preferences, restart, I've deleted and downloaded new GB several times and always with same result. Actually, it took me about four attempts to download it in the first place as I was getting an internet connection error message right at the end of the download, and I see others have had that problem. Managed to solve that by downloading in safe mode but now the no sound thing is driving me absolutely crazy because I can't play my keyboard!!!!! Also, worth noting that there is no audio level being read anywhere, I believe in the new version this appears in the volume control at the top. I've also looked into it potentially being a problem with my keyboard and it possibly needing an update but can't find any difinitive answer for that anywhere. I've stopped looking into that because the on screen keyboard doesn't even work - if that worked then I would know at least GB works and it's something to do with the keyboard. So, I am at a complete loss. If anyone has any ideas about why this is happening or what I could do to solve then I would be very grateful."
After reading this, I realized that I am unable to create new tracks, and I realized that I have the same problems with old projects saved from the last version of GarageBand I had. I have not tried to download GarageBand again since it did not work for icewhatice. léonie ended this post by saying: "Something is certainly wrong - either the current project, some settings in your user account, or the downloaded GarageBand version. Or incompatible software may be interfering. If a new project does not work, try to test by logging into a different user account, for example the "Guest User" account. Create a new project using this account. Does GarageBand work better from this account? Then we will need to troubleshoot your preferences."
I have tried this and started a new GarageBand project in the "Guest User" account. GarageBand was working fine in the "Guest User" account and all of the audio was working properly. Does anyone know how I should troubleshoot my preferences?

If an application is working in a different account, but not in your regular account,try t find out, what you configured differently in your own account, for example start-up items or preference panes you are using, applications and other helper tools, that are only installed for your regular account. As a first guess, remove GarageBands preference files from the user library in your Home folder.
But you will have to reset all settings you did in the GarageBand preferences dialog. And GarageBand will not remember the last project. You'll have to find the file manually.
Remove these files from your User Library to a folder on your Desktop:
~/Library/Containers/com.apple.garageband10/
~/Library/Preferences/com.apple.garageband.plist
~/Library/Caches/garageband
Quit GarageBand, then remove the files to a folder on the Desktop and restart the computer, before trying again to open GarageBand.
You user library may still be hidden, as is the default in Mavericks: To open your hidden user library:
Select the "Home" folder icon (the little house) in the Finder's sidebar and press the key combination ⌘J to open the "view options".
Enable "Show Library Folder".
Then open the Home folder and open the Library folder inside and navigate to the Preferences, Caches, or Containers folder. Remove these folders completely - don't leave anything inside: ~/Library/Containers/com.apple.garageband10/,
~/Library/Caches/garageband .

Some programs crash but not in safe mode or for guest user

Hoping that some talented and kind Mac wizard will help me solve a bizarre problem: Some but not all of my programs have started crashing immediately upon launch, but not in safe mode, nor when I log in as a guest user.
The problem began on February 5th, right after I installed an update to my OS (bringing it up to version 10.7.3), which included an update to the firmware for my computer, a Mac mini from mid-2010. The programs that began crashing upon launch *may* be those that were open at that time, but I can’t be sure. They include Adobe Reader, Picasa, Word for Mac, and a sweet little utility called uCalendarX.
Specifically what happens with, say, uCalendarX, is this: After I launch it, nothing appears on screen for a few seconds, and then comes a message that it is trying restore its windows, with a choice of whether to attempt restoring them or not. After a few more seconds comes the news that it has quit unexpectedly. The first several dozen lines of the crash log appear at the end of this posting.
So far my troubleshooting has revealed the following:
(a) When I reboot in safe mode, the programs that crash now work normally.
(b) When I boot the usual way but log on a guest user, the programs that crash now work normally.
(c) Fully emptying the trash made no difference.
(d) The problem was not solved by restoring my hard drive (via Time Machine) to its state the day before I downloaded that update to the OS and the firmware. (This was a drastic step, the intervention of last resort, and I was sure it would work. But no. Perhaps I did not go back far enough for the restoration.)
(e) Deleting the plist files and plist.lockfiles made no difference.
(f) Deleting the files for the app under Saved Application States made no difference.
(g) Disabing the user’s font cache (as happens in safe mode) made no difference.
(h) Uninstalling Adobe Reader, emptying the trash, downloading the latest version, and installing that made no difference – this latest version newly installed continues to crash (but not for a guest user, nor for me, the administrator, in safe mode).
(i ) Repairing permissions on the hard drive made no difference.
I will be mighty grateful for a solution to this perplexing, vexing problem!
B.t.w., I don’t know Unix but was able to do all those (fruitless) interventions listed above.
Gordon Bear
Ramsey NJ U S A
The log from one of the many crashes of uCalendarX begins as follows:
Process:         uCalendarX [750]
Path:            /Applications/uCalendarX 3.2.3/uCalendarX 3-2-3.app/Contents/MacOS/uCalendarX
Identifier:      com.riuz.ucalendarx
Version:         3.2.3 (3.2.3)
Code Type:       X86 (Native)
Parent Process: launchd [289]
Date/Time:       2012-02-20 00:38:48.931 -0500
OS Version:      Mac OS X 10.7.3 (11D50b)
Report Version: 9
Interval Since Last Report:          2463 sec
Crashes Since Last Report:           3
Per-App Interval Since Last Report: 30 sec
Per-App Crashes Since Last Report:   3
Anonymous UUID:                      0CA8DA26-8927-4AC3-B35F-3B2E9FD65A8E
Crashed Thread: 4
Exception Type: EXC_BAD_ACCESS (SIGSEGV)
Exception Codes: KERN_INVALID_ADDRESS at 0x000000008bcc45ab
External Modification Warnings:
Thread creation by external task.
VM Regions Near 0x8bcc45ab:
     CoreServices           0000000004fd0000-00000000051ee000 [ 2168K] rw-/rwx SM=COW
-->
     __TEXT                 000000008fe52000-000000008fe85000 [ 204K] r-x/rwx SM=COW /usr/lib/dyld
Application Specific Information:
objc[750]: garbage collection is OFF
Thread 0:: Dispatch queue: com.apple.main-thread
0   libsystem_kernel.dylib            0x920136e6 __open + 10
1   libFontParser.dylib               0x9cc5b403 TFileDescriptorContext::TFileDescriptorContext(char const*) + 77
2   libFontParser.dylib               0x9cc5b1c5 TFileDataReference::TFileDataReference(char const*) + 65
3   libFontParser.dylib               0x9cc5b056 TFileDataSurrogate::TFileDataSurrogate(char const*, bool) + 136
4   libFontParser.dylib               0x9cc59af3 TFont::CreateFontEntitiesForFile(char const*, bool, TSimpleArray<TFont*>&, bool, short, char const*) + 2581
5   libFontParser.dylib               0x9cc58a7a FPFontCreateFontsWithPath + 193
6   libCGXType.A.dylib                0x950164b0 create_private_data_with_path + 26
7   com.apple.CoreGraphics            0x95349ecf CGFontCreateFontsWithPath + 33
8   com.apple.CoreGraphics            0x95349b09 CGFontCreateFontsWithURL + 442
9   com.apple.CoreText                0x90e1c1aa TCGFont::TCGFont(__CFURL const*, bool) + 90
10 com.apple.CoreText                0x90e1bfb2 TCGFontCache::CopyFont(__CFURL const*) const + 92
11 com.apple.CoreText                0x90e1be6c TBaseFont::CopyNativeFont() const + 50
12 com.apple.CoreText                0x90e1bd6f TTableStore::CopyTable(unsigned int, TCFRetained<__CFData const*>&) + 81
13 com.apple.CoreText                0x90e1bade TBaseFont::CopyTable(unsigned int) const + 72
14 com.apple.CoreText                0x90e1ba0f TcmapTable::TcmapTable(TBaseFont const&) + 31
15 com.apple.CoreText                0x90e1b8fd TBaseFont::GetGlyphsForCharacterRange(CFRange, unsigned short*) const + 27
16 com.apple.CoreText                0x90e1b79b TASCIIDataCache::TASCIIDataCache(TBaseFont const*) + 83
17 com.apple.CoreText                0x90e1b70f TBaseFont::CreateASCIIDataCache() const + 47
18 com.apple.CoreText                0x90e1b690 TFont::InitAdvanceCache() const + 42
19 com.apple.CoreText                0x90e1b4ad TASCIIEncoder::Encode() + 45
20 com.apple.CoreText                0x90e4433f TGlyphEncoder::EncodeChars(CFRange, TAttributes const&, TGlyphList<TDeletedGlyphIndex>&, TGlyphEncoder::Fallbacks) + 925
21 com.apple.CoreText                0x90e19ff6 TTypesetterAttrString::Initialize(__CFAttributedString const*) + 322
22 com.apple.CoreText                0x90e19b9d CTLineCreateWithAttributedString + 47
23 com.apple.HIToolbox               0x963d2b2d TCoreTextEngine::LayoutSingleLine(THIThemeTextInfo*, float) + 23
24 com.apple.HIToolbox               0x963d2a9a TCoreTextEngine::Layout(THIThemeTextInfo*, float, float, TextLayoutType) + 64
25 com.apple.HIToolbox               0x963ad2c9 TCoreTextEngine::VerifyLayout(THIThemeTextInfo*, float, float, LayoutIntent) + 309
26 com.apple.HIToolbox               0x96410b0a TCoreTextEngine::GetThemeTextDimensions(float, THIThemeTextInfo*, float*, float*, float*) + 54
27 com.apple.HIToolbox               0x9640fc51 DataEngine::GetTextDimensions(void const*, float, HIThemeTextInfo*, float*, float*, float*) + 283
28 com.apple.HIToolbox               0x963d1fc5 HIThemeGetTextDimensions + 187
29 com.apple.HIToolbox               0x963d1ca3 HIMenuBarView::MeasureMenuTitle(MenuData*, unsigned char, float*, int, unsigned char*) + 451
30 com.apple.HIToolbox               0x963d1a49 HIMenuBarView::MeasureAppMenus() + 261
31 com.apple.HIToolbox               0x963abb5d HIMenuBarView::EnsureBarLayout() + 489
32 com.apple.HIToolbox               0x963ab152 HIMenuBarView::DrawSelf(short, __HIShape const*, CGContext*) + 520
33 com.apple.HIToolbox               0x963aac22 HIView::DrawCacheOrSelf(short, __HIShape const*, CGContext*) + 86
34 com.apple.HIToolbox               0x963aaa42 HIView::SendDraw(short, OpaqueGrafPtr*, __HIShape const*, CGContext*) + 124
35 com.apple.HIToolbox               0x964395c7 HIView::RecursiveDrawComposited(__HIShape const*, __HIShape const*, unsigned long, HIView*, CGContext*, unsigned char, float) + 755
36 com.apple.HIToolbox               0x964398b9 HIView::RecursiveDrawComposited(__HIShape const*, __HIShape const*, unsigned long, HIView*, CGContext*, unsigned char, float) + 1509
37 com.apple.HIToolbox               0x9643a86b HIView::DrawComposited(short, OpaqueGrafPtr*, __HIShape const*, unsigned long, HIView*, CGContext*) + 1227
38 com.apple.HIToolbox               0x9643a9b3 HIView::Draw(short, OpaqueGrafPtr*, unsigned long) + 81
39 com.apple.HIToolbox               0x9643ad7b HIView::Render(unsigned long, CGContext*) + 45
40 com.apple.HIToolbox               0x963d084f WindowData::PrepareForVisibility() + 137
41 com.apple.HIToolbox               0x963cf893 _ShowHideWindows + 355
42 com.apple.HIToolbox               0x963cf728 ShowHide + 44
43 com.apple.HIToolbox               0x96399b09 _GetMenuBarWindow + 872
44 com.apple.HIToolbox               0x96399765 GetMenuBarView(MenuData*, unsigned char) + 74
45 com.apple.HIToolbox               0x963a2f3a MBarMenuRgn + 26
46 com.apple.HIToolbox               0x963a2d27 _ZL7ShowBar21MenuBarAnimationStylehhh + 281
47 com.apple.HIToolbox               0x963cd42a _ZL21UpdateAggregateUIMode21MenuBarAnimationStylehh + 772
48 com.apple.HIToolbox               0x963e38e5 ShowMenuBar + 163
49 com.apple.AppKit                  0x001a9cad -[NSApplication finishLaunching] + 1331
50 com.apple.AppKit                  0x001a9374 -[NSApplication run] + 142
51 com.apple.AppKit                  0x0043d261 NSApplicationMain + 1054
52 com.riuz.ucalendarx               0x00001eea _start + 216
53 com.riuz.ucalendarx               0x00001e11 start + 4

Thanks for thinking about my problem. I've already experimented with creating a new user, a co-administrator. The programs don't crash when that account is running, just as they don't crash when the guest-user's account runs. So it seems that the problem is limited to the default user's account, which is the one that was running when I installed the updates to the OS and the firmware. Another clue is that the programs that crash as soon as they are launched are *probably* the ones that were open at that time in that account. Yet deleting Saved Application States does not keep the programs from crashing when next launched.
So the mystery continues, but these additional facts will help with the diagnosis, I hope.
Thanks again for your suggestion.
Gordon

Guest user account logged into while away from house/computer!!!

Warning: I am not a tech-pro!
Okay, I have a 2011 Mac Book Pro running OS X LION 10.75 (11G63) unsure what those last numbers mean but they were there so I thought perhaps it might be helpful to add them.
Recently I moved into a granny flat and pay $10 a week to use their unlimited internet wifi. I log into my wifi through this device called a WiFi Repeater? It's plugged into the wall in my unit, as I warned I am not incredibly tech savvy so I am only guessing when I say I suppose this extends the main wifi signal from the actual home owners upstairs big modem? Any who.... A few times I have seen in the Finder Memu ot says 'Shared' and under that 'Wendys PC' (Wendy is the homeowner) then if you click on it it tries to connect but won't or there is a 'Connect As' option which brings up a little screen saying - connect as wendy, which requires a password or connect as guest which doesn't look like it requires a password- I'm not certain because I've never tried to connect any further, I only pressed that initial connect button when I had mentioned to Wendy I could see her PC & she asked me to press connect & prove I could not in fact connect (I'm starting to despise the word 'connect' since having to type this post about connection). So... We just kind of let it go. It did really worry me that Wendy (who worked in the tech field for years in particular with an Internet provider, could possibly connect to my computer and nosey through all my files- and to be honest, that would not actually suprise me. She is incredibly 'inquisitive'... And that's putting it mildly. I do have a password on my Mac Book Pro but I don't think that would be that hard to break through/hack if you have the knowledge/software. And yes, I do have confidential files on there! Banking/business/private photos (I'm trying to lose weight so take one nude photo per day to do a time lapse of myself in a year or two- obviously for myself not for others eyes lol and I would literally die in the *** if someone ever saw these). So basically I have good reason to protect my privacy. As does everyone! Anyway my first question is - Could she log in and how could I tell if she had? Now, the second part of this ridiculously long question (my apologies) is I was logged into my personal account all last night & this morning. As I stated- it IS password protected. The user account is not. Before I went out (and I can't actually recall if I closed the lid or not when I rushed out today... Usually I do but maybe I didnt... Whatevs) So, I get home and activate the screen by moving my finger on the touch pad and lo & behold I'm straight away looking at a totally different screen? It took me a few seconds to realise why my desktop looked completely different with none of my files etc... It was - as you've probably guessed- because I was in fact in the guest user account. Now, I didn't even have to click ON 'Guest User' as I normally have to. When you turn my Mac on it always comes up with - 'My Full Name' (one account login) and then 'Guest User' (the second account login option).... So you HAVE to choose which one you want! But my screen was straight away logged into the Guest Users desktop! I did NOT do this guys! So, of course now I'm extremely concerned that either she, her husband or their son whom is visiting for the weekend - have either a) logged in remotely on one of their computers or b) have come into my home and tried logging in & then forgot to log out of the guest account. I want to know if there is any way to find out what they did, what they opened if they did, how to stop it from both happening at all or if my suspicions are in fact happeninh AGAIN And I guess on a more personal, less tech involved note - how would you all deal with such a situation? Let it go? Or be upfront about the fears/concerns I am experiencing since moving in just over a month ago. AND most importantly - IS there any other reason -other than someone physically logging into my guest user account & failing/forgetting to log back out so that when I got home & activated my screen I was actually looking at the guest user desktop's account instead of the Mail application screen in the 'My Full Name' password protected user account where I had actually left it before rushing out.... Like, is there ANY other possibly explanation for my user account being logged into when I'd left it on my own account t before I left that doesn't include someone in the house hacking/breaking into/snooping through my Mac? Also- you should understand that when I leave my Mac for just a few minutes I have it set up so that the computer screen 'sleeps' (I'm assuming that's the correct term) so that if for instance -exactly like this morning- I have to rush out and don't want to/don't have time to save work/quit applications/shut down etc... I can walk away leaving the laptop as is knowing within a few minutes the screen saver comes up (and if that's ledr for long enough it goes into sleep mode) and no one can actually enter my private account without my password. I feel safe knowing that.
Sorry.... I FELT safe.
I'm truly sorry for how long-winded this question has become, I simply wanted to give anyone possibly willing to help me sort out this issue, as much information as possible. I think I have actually only posted here once before (I find these sort of forums quite intimidating) and I often see people getting bashed for not providing enough information. So, I'm pretty sure I'll get picked on for too many words if anything!!?! Lol
Thank you, in advance for your help!
Olivia;-).

Ouch.
Not easily. You could try data recovery software... maybe SubRosaSoft's File Salvage or the like.

How to reset guest user

Hi,
I'm new to lion. I tried to manipulate the guest user account so it would function as a guest user (deleting all the private stuff after log out) but keeping my preferences like dock, desktop, grid settings, ...
I used this link: http://www.michaelsmac.com/modules.php?file=article&name=News&sid=394
but something went wrong. (Later I discovered this was posted prior to Lion so this could be the problem)
The result is that on start up of the user account it also shows my terminal open and the last webpage I visited (the link above).
Quiting these and log out/ log in again does not resolve this problem.
I did the backup like sugested in the link but I'm not able to use it
I can see it in system/library/
Anyone can help me on how to recover the original guest settings without having to reinstall the complete OSX ?
Many thanks !

Why can't you use the "backup" as suggested?
The second and third lines of the recovery hint will likely need sudo appended in front of the commands.

NAC guest user poster assesment.

Similar Messages

Maybe you are looking for