NAC - users first access to web unsuccessful

Hello
We have a NAC appliance with CAM and CAS. When somebody tries to load any external page, he is supposed to get the CAS authentication page. However, what he gets is a "not found" error message. If he types directly the IP of the CAS in the browser, then he does get the authentication page. After the authentication, the user can access to internet properly.
We have tried to recreate the certificates in the CAS but the result has been the same.
Does anybody have some idea about what can be happening?
Thanks

It sounds like the AUTH VLAN traffic is not being sent to the CAS.
Are you configured for as an L3 OOB? If so, you will need to policy route the AUTH VLAN subnet to the CAS Virtual Untrusted address.

Similar Messages

Pc users cannot access my web site

pc users trying to access my web site that I designed on iweb cannot play my podcast or my music samples. Why????
Powerbook G4 10.4 Mac OS X (10.4.7)

That's because your QT clips are probably encoded with the latest video codec H.264. This is only available with QT 7 and is the new default for iLife applications. In order for your PC friends to see everything, they must download QuickTime 7.
Refer them here... http://www.quicktime.com

Linksys X3000: External internet users can no more access my web pages

I have web server setting behind the Linksys ADSL modem, I set the DMZ IP to my web server IP so the external internet users can access my web pages.
This setup was working fine until I switched to “Linksys X3000” modem, external internet user can no more access my web pages.
I had set the DMZ IP correctly in the new modem. The local LAN users can access the pages without any problem.
Any idea what is the problem?

The ability of the external computer to ping the router’s WAN ip address is vital in accessing the devices/applications behind the router remotely. With such, you need to have “Filter Anonymous Internet Requests” unchecked. Another thing to consider is the way DMZ was set; make sure that you have set “Any IP Address” for the source ip address and have indicated the web server’s ip address for the destination ip address.

How can I check if an user has access to an url within my web app?

Hi,
I have a web application where I allow the users to set their startup page by presenting them a list of startup pages. However, some startup pages can accessed only by certain users, so I want to present the user only those pages the user has access to.
How can I do this with weblogic?
One way is to read the web.xml file and determine the roles that have access to the page, then check whether the user has any of those roles.
Is there a better way eventually using some weblogic api?
Thanks

Just for the record, I decided to parse the web.xml file and to simulate whatever the container does.

How to List view web part to display document library for only users with access permission

Hi
I am trying to accomplish this requirement but I don't know if that is possible or how to get there. Any suggestion or advice are helpful.
On a site collection, I have several document libraries, with each library have unique permission to a few user or SharePoint group.
I want to create a web part page and make that the site home page. On this web part page, I want to create a Content Search Web Part to list the content of the document library that the logged on users have permission to see.
Is this possible with CSWP or is there anything easier or if it is not possible at all, please advise.
Thanks
Swanl

Hi ,
Based on your description, my understanding is that you want to create a Content Search Web Part to list the documents that the logged on users have access permission.
It is feasible with CSWP, you can follow the below step:
Edit Content Search Web Part->Change query-> Select a query: Items matching a content type (System); Restrict by app: Current site collection; Restrict by content type: Document.
Best Regards,
Lisa Chen
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet
Subscriber Support, contact [email protected]

How to grant database user to access directory under web server

Hi
I'm running forms6i application on Oracle9iAS.
This application access to several directories using WEB.SHOW_DOCUMENT procedure.
I add this directories to UserDir directive in httpd.conf and I also made an Alias (virtual path).
The problem is that all users can access to that directory.
Can I eliminate access to the directories just for particulare users?
Thank's,
Tomaz

Pl refer to the httpd.conf file
and for the directory tag assign deny all,grant all will
solve ur prob...
if possible pl let me know..
how u have configured ur forms appln on oracle 9iAS using apache
server....
i have tried but it gives me error about the forms engine..
how do i make apache server know about the forms60/f60all.cab
and other required configuration files
pl let me know at the earliest
thanks

Users having access can't promote planning units during First pass state

Hi,
There is something I do not understand using the workflow in Hyperion Planning 11.1.2 : on first pass state, users having access can not promote a planning unit.
Only the owner can promote... to himself !
I'm lost !
Please help.
Thanks.
Virgile.
Edited by: 808808 on 7 déc. 2010 06:19
Edited by: 808808 on 7 déc. 2010 06:22

Hi,
I tried first with a Planner user, and then with a Interactive user, and there is no difference.
When I try to change the status, I have an error message that tells me that I can't change status of the planning unit.

Access from WebI/ Universe to SAP Query with user who has analysis authenti

Hello together,
I try to run and build a WebI report which is build on a universe based on SAP BW query. The user has restricted access to the data provider on which the SAP query is build. This restriction is based on analysis authentification (SAP BI 7.0) if I start the SAP query in BW the user has only restricted access to the data in the data provider (on which the SAP query is build). If I start the WebI report the user has full access to the data. I checked the authentification and in my opinion there is no other authentification in SAP BW which extends the restrictions.
Has anyone an idea why the authentification doesn't work?
Greetings Janine

Hey here,
I m creaing my universe on top of Infocube or multiprovider.
>> The recommendation path is to use BW queries with the necessary Authorization Variables leveraging your BI Authorizations.
For eg:
I have 2 users, User1 and User2.
Now if I want User1 should see data for CostCentre = UK,India.
User2 should see data for CostCentre = US, UK,India
>> This is part of BI Authorizations in BW.
Here are my queries:
1) Will User1 and User2 be able to see the data level access in Webi Report based on the their Login?
>> assuming you follow the 2 steps mentioned above (Query and authorization variables) - yes
If Data level access cannot be achieved in Webi via universe created on top of Infocube/Multiprovider then what is the approach to do so?
>> Data level security is part of your BI authorizations in BW.
In a nutshell, BO alone can't do that, one has to set up at BI level.
Hope clarified all your doubts.
Gracias...!!

Lion first access no old users

After the download from AppStore the installation started.
At the first access after installation at the login page no users were found.
I re downloaded and installed Lion again. This time the installation ended with the creation of a new user.
The old users are not in the list of the accounts...
I have the latest time machine updated at two month ago.
I did an image of the actual status of the Macintosh HD to try to have the chance to save the important files not backed up on time machine.
What can I do now to reclaim the files on the macintosh HD (if they are still there....?)
I' m thinking to reinstall snow Leopard from the DVD and to restore all settings as from May ( latest time machine backup) but after...
Will I be in position to find the relevant files from the DMG created after this mess?

PROBLEM SOLVED !
Solution was easier than expected ( I'm thankful to a friend of mine who assisted me as I was going crazy thinking to have lost everithing !!!)
1- log in as the new user created on Lion
2- create a "new" user in Lion with the same name and pw of the old previous user.
At this stage Lion recongnize that this user already exist ( even if it does not in the list of the accounts...)
and will ask you if you want to mantain the same setting found...
That's it.

Issue with accessing OES Web services

Hi,
I have a question regarding access OES web services from external application. I am trying to validate the OES WS for Authorization, but I am getting an error - "Error getting response; org.apache.commons.httpclient.NoHttpResponseException: The server failed to respond"
Is there any specific sequence which I need to follow while accessing this web service, such as first the user needs to be authenticated and then access can be determined or like?
Thanks in advance!!

Hi Kevin,
Would you be able to tell me how you generate the web service client? And when you manage to generate the client, does it automatically generate <generated_name>_Stub.xml?
Thanks,
Alfonso Agustinus

Office365- I created shared mailboxes for a user- they show on web but not on Outlook2013

I created shared mailboxes for a user- they show on web but not on Outlook2013-
If the user logs on to office365 web - I can see the 3 shared folders- but if when she opens Outlook she is not able to see them-
Do they - should they be manually added ? How ?
Thanks !!

Hi,
Thanks for your question.
Not sure what exactly you mean by "created shared mailboxes for a user", by default, Outlook automatically loads all mailboxes to which the user has "Full Access" permission. So please first check if you have granted the right permissions
for that mailbox to the user.
When I say "By default", I mean you didn't disable the Outlook Auto-Mapping service. If you did, then the shared mailbox will not be automatically added to the user's Outlook profile. So please have a check on this:
https://support.microsoft.com/kb/2646504
Also, please note if the shared mailbox was just created, or the user was just added as a member of that shared mailbox, you probably will need to wait for a few hours for the shared mailbox to appear in the user's Outlook folder.
Regards,
Ethan Hua
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

Multiple users, using the same web app items?

Iam building a service for familes were the parents should be able to read / add / edit the same secure web app items.
So when logged in the user have access to the same user submitted web app items.
I found a thread answerd by Liam and my guess this is not possible? Can it be partial be done e.g. just let the "family" read the familys items? And no there is not possible to add / pair the users in backend because there are to many.
Any tip where to look? I have tried to use the "uniqe ID, datasource, unique template" method but do you "wizards" :-) think that's the way to go?
This thread suggest it's not doable.
http://forums.adobe.com/message/5547102
Thanks!
//Johan
Formpartner

Not in association Johan no.
You can have one "Family" login they all use to log in but it will kick one out if the other logs in and of course, multiple people sharing the same login increases the security risk.
You can only set one owner as well.

How can I allow users to access SQLPLUS?

Hi everyone,
I have been charged with the task of creating an Oracle server on a CentOS VM. Installation and configuration is complete and SQL is working fine for the database admin user "oracle." I copied the environment variables to the .bashrc file for "oracle" and SQLPLUS starts without a hitch.
Here is where I need a little guidance...
I need to create basic Linux user accounts that will have access to the database, so they can then in turn log into their SQLPLUS accounts. The problem is, all of the database files and software are in located in the user "oracle's" directory. This means that no one but "oracle" and root have access to these files because they are the only ones with proper permissions.
Before I put a ton of time into this, I thought I would pose these questions to the Oracle Linux community:
1) Could I enable a specific Linux group (ex. "Oracle Users") to have access to the main database folder or possibly all folders along the path? I am hoping this would allow any users I put in the group access to the folders, and essentially the SQLPLUS application. (here is ORACLE_HOME=/home/oracle/app/oracle/product/11.2.0/dbhome_1)
2) If that is not an option, will I need to make a completely new database and locate it in a location that all users can access?
I understand that my first idea may not be the SAFEST method, but this is only for a small class of students learning how to use SQL and writing queries. There will be no sensitive information at risk. This would be a quick fix until I learned more about Oracle and how to use it.
Thank you everyone.

It certainly is rather a question for the General Database forum, though I doubt you will get a lot of happy replies for such a basic question.
You can use / as sysdba OS authentication through SSH or using the server console, provided the user's account belongs to the "dba" user group. For remote connection through sqlnet you need create a $ORACLE_HOME/dbs/orapw$SID password file.
If you would like to know more about this:
Connecting / as sysdba is used for OS authentication. It ignores password credentials stored in the database and allows any user belonging to the OSDBA system group to connect to the database. Connections as sysdba will always connect to the SYS schema of the database, regardless of any username or password specified. Using OS authentication relies on the BEQ protocol, which connects to the database directly, without using the Oracle Listener process.
The "oinstall" group will give access to the database software repository. There could be different oracle home installations, each with a different oracle user/owner like "oracle_prod1" and "oracle_prod2", but both users must be able to read/write the shared oraInventory, in which case both users must have read and write access to the oraInventory directory, hence the oinstall group.

How to use different xsl's for user first time logon in OAM

Hi,
We have a requirement to use different stylesheets (xsls) for employees and customers in OAM. How we can configure different XSLs for user first time logon to OAM (i.e for change password and configuring challenge and responses).
Any pointers on this is appreciated.
Thanks in advance..
Srikanth

XSLs displayed are controlled by the StyleCookie. So if you can set the value of this cookie to be different front customers and employees, they will see different styles.
You can do this in various locations -> from the web server, from the url, custom plugins, etc....
-Raj

User cannot access redirected Documents folder, but can connect to share in Windows Explorer and access folder on server

I am in the final stages of a cross-forest migration. Users have Windows 7 workstations with redirected folders on a Windows Server 2012 box running in the old forest. User accounts were not migrated. The accounts in use have always
been in the "new" forest. One of our challenges was the large volume of data in redirected folders. I made sure users in the target forest had continued to have access to their redirected folders in the old forest and robocopied
the entire users share, copying the permissions with the files. By doing incremental robocopies, we can get a final copy done now in about six hours. The plan was simple: copy the files, do an incremental copy every night, on the night of the cutover
change the folder redirection policy Documents path from
\\oldserver\users\%USERNAME% to
\\newserver\users\%USERNAME%. The policy is configured to NOT copy user files from the existing folder to the new redirected folder. Everything was going well until I tested the policy change. After the folder redirection policy is updated
and applied, the user cannot access the private Documents folder. For example, user Chester Tester logs on as ctester. I open Windows Explorer and click the Documents shortcut. I see one subfolder, which is subfolder of Public Documents.
So I can look at Public Documents but when I click on the Documents folder (Under the Documents library link) I get an access denied error. Now for the kicker, if I open another Windows Explorer window and edit the address bar to
\\newserver\users\ctester, I can navigate the Documents folder tree and see my thousands of documents. What the ....?
I'm hoping this is something really simple to fix!
TIA

HI Vivian,
Thank you for your reply. Yes, the path in Group Policy Folder Redirection Root Path was updated to
\\NEWSERVER\users. I had planned to point this to the distributed file system, so the first used was actually
\\domain\dfs\users. To simplify things I have backed off to copying to just a normal share
\\newserver\users.
We are using BASIC folder redirection and we create a folder for each user under the root path.
We did not want the policy to move content, as we were seeing users requiring 15-20 minute logon times (or higher) after the policy is changed.
Grant the User exclusive right to Documents - Disabled
Move the contents of Documents to the new location - Disabled
Related folder settings
Video - Follow Documents
Music - Follow Documents
Pictures - Follow Documents
Now when I change the folder redirection from old server to new server I now have TWO My Documents folders in the user's redirection folder on the server. The redirected Documents points to an empty folder set. The copied folders with all user
data are there, but folder redirection refuses to recognize the original folder.
I am looking at the full view of the folder, nothing hidden, so I'm wondering how a folder can have two subfolders with the exact same name. For now, I just want the redirection to move from the old server to the new server properly. I deleted
the new My Documents folder, rebooted the user's workstation and tried again. The behavior repeats itself, i.e., a new My Documents folder is always created when the redirection policy is changed from the old server to the new server. The environment
has about 1500 users with approximately 1.3TB of data in the redirected Documents folders. OUCH!

NAC - users first access to web unsuccessful

Similar Messages

Maybe you are looking for