NAS configure with 2 ip address failed on AAA authentication

I have routers configured with 2 bvi interfaces for dlsw.
When I configure NAS setting with 2 ip address, sometime the AAA authentication failed to prompt for user authentication.
Should I used ip tacacs source-interface?
If I configure only one, if that interface is down, then I will not be authentication using AAA even the second bvi interface is up.

Chee
The AAA server identifies the client by a single IP address and the client always needs to use that address as the source address. If you have 2 BVI interfaces it may be that sometimes the source address is one and sometimes the source address may be the other. That would account for the fact that sometimes it promts for user authentication and sometimes it does not prompt.
If using 1 BVI as the source address creates the potential that sometimes it might not work because that interface was down but the other BVI was up, then perhaps you should consider configuring a loopback address and using the loopback address as the source address. If the loopback was the source address then it would not matter which BVI might be up and which might be down.
HTH
Rick

Similar Messages

LMS 3.2 - Problem with inventory of switches using AAA authentication

Hi all,
we want to migrate our network equpiment from local authentication (telnet password, enable password) to AAA authentication (Cisco ACS server - username, password for priv level 15). The network devices are managed with CiscoWorks 3.2 and inventory works fine when device login credentials are telnet password, enable password.
I have configured a switch for testing the authentication to the ACS server, and tested the logon manually. After the successful test I reconfigured the device credentials in CiscoWorks and checked it by a device export with credentials. The credentials in CW were OK, but from this time CiscoWorks could't pull an inventory of the switch any more. Every inventory job failed.
Any help would be appreciated. Thanks a lot.
Regards
fred

Joe,
excuse me, I've made a mistake. It's the malfunction of the configuration *archiving* which depends on telnet services. I have included the trace file of the failed CW archiving job. I can see that CW receives the banner and the username prompt, but doesn't send back any telnet credentials. I have also checked the correctness of the device credentials by a DCR export.
fred

Configure Database is getting failed under Reporting and analysis in 11.1.2.3

Hi,
When I am trying to configure the database under Reporting and Analysis its getting failed and when I check the configtool.log it says
[2014-10-16T05:33:37.446-04:00] [EPMCFG] [NOTIFICATION] [EPMCFG-01107] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.DBConfigurator] Running file: C:\Oracle\Middleware\EPMSystem11R1\products\biplus\database\Common\postInit.sql
[2014-10-16T05:33:37.461-04:00] [EPMCFG] [TRACE] [EPMCFG-01001] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.DBConfigurator] trace: UPDATE V8_CONTAINER SET CREATION_DATE = null, LAST_MODIFIED_DATE = null where CREATION_DATE is null
[2014-10-16T05:33:37.461-04:00] [EPMCFG] [TRACE] [EPMCFG-01102] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.DBConfigurator] Execute SQL: UPDATE V8_CONTAINER SET CREATION_DATE = null, LAST_MODIFIED_DATE = null where CREATION_DATE is null
[2014-10-16T05:33:37.461-04:00] [EPMCFG] [TRACE] [EPMCFG-01001] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.DBConfigurator] trace: UPDATE V8_CONT_VERSION set CREATION_DATE = null WHERE CREATION_DATE is null
[2014-10-16T05:33:37.461-04:00] [EPMCFG] [TRACE] [EPMCFG-01102] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.DBConfigurator] Execute SQL: UPDATE V8_CONT_VERSION set CREATION_DATE = null WHERE CREATION_DATE is null
[2014-10-16T05:33:37.477-04:00] [EPMCFG] [TRACE] [EPMCFG-01001] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.DBConfigurator] trace: UPDATE V8_CONT_VERSION set LAST_MODIFIED_DATE = null WHERE LAST_MODIFIED_DATE is null
[2014-10-16T05:33:37.477-04:00] [EPMCFG] [TRACE] [EPMCFG-01102] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.DBConfigurator] Execute SQL: UPDATE V8_CONT_VERSION set LAST_MODIFIED_DATE = null WHERE LAST_MODIFIED_DATE is null
[2014-10-16T05:33:37.493-04:00] [EPMCFG] [NOTIFICATION] [EPMCFG-01104] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.DBConfigurator] postInit.sql Processed (3) Success (3) Errors (0)
[2014-10-16T05:33:37.493-04:00] [EPMCFG] [TRACE] [EPMCFG-07558] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.config.document.Storage] Called : Storage.getComponent(com.hyperion.hit.registry.ComponentType)("RA_FRAMEWORK")
[2014-10-16T05:33:37.493-04:00] [EPMCFG] [TRACE] [EPMCFG-07561] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.config.document.Storage] Called : Storage.getComponent(com.hyperion.hit.registry.ComponentType)("64711b2385581a47S60706d4c148f4212621S7cb4") : Returned RA_FRAMEWORK
[2014-10-16T05:33:37.493-04:00] [EPMCFG] [TRACE] [EPMCFG-07561] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.config.document.Storage] Called : Storage.getChildren(com.hyperion.hit.registry.Component,com.hyperion.hit.registry.ComponentType)("RA_FRAMEWORK/64711b2385581a47S60706d4c148f4212621S7cb4,DATABASE_CONN") : Returned 1
[2014-10-16T05:33:37.493-04:00] [EPMCFG] [NOTIFICATION] [EPMCFG-01001] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.config.AbstractProductDBConfigurator] trace: This is not datasource db component. Doing clean up now.
[2014-10-16T05:33:37.493-04:00] [EPMCFG] [NOTIFICATION] [EPMCFG-01110] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.config.AbstractProductDBConfigurator] remove old link only
[2014-10-16T05:33:37.493-04:00] [EPMCFG] [TRACE] [EPMCFG-01001] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.config.document.Storage] trace: Removing link from RA_FRAMEWORK ( 64711b2385581a47S60706d4c148f4212621S7cb4 ) to DATABASE_CONN (64711b2385581a47S615148421490d7dbbddS77a8)
[2014-10-16T05:33:37.508-04:00] [EPMCFG] [NOTIFICATION] [EPMCFG-01112] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.cis.config.AbstractProductDBConfigurator] Create new database component and link it
[2014-10-16T05:33:37.508-04:00] [EPMCFG] [TRACE] [EPMCFG-01001] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.config.document.Storage] trace: Storage.getComponents(com.hyperion.hit.registry.ComponentType)(DATABASE_CONN)
[2014-10-16T05:33:37.508-04:00] [EPMCFG] [TRACE] [EPMCFG-07561] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.config.document.Storage] Called : Storage.getComponents(com.hyperion.hit.registry.ComponentType)("DATABASE_CONN") : Returned 10 component(s)
[2014-10-16T05:33:37.571-04:00] [EPMCFG] [TRACE] [EPMCFG-05955] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.config.document.Storage] Setting link. Parent: id [RA_FRAMEWORK/64711b2385581a47S60706d4c148f4212621S7cb4], componnet type [RA_FRAMEWORK]. Child: id [customURL:HRA/64711b2385581a47S615148421490d7dbbddS77a8], component type [DATABASE_CONN]
[2014-10-16T05:33:37.602-04:00] [EPMCFG] [ERROR] [EPMCFG-01020] [oracle.EPMCFG] [tid: 20] [ecid: 0000K^OJPaCCslW5Pz_Aid1KFt1l000004,0] [SRC_CLASS: com.hyperion.config.wizard.impl.RunAllTasks] Error: [[
com.hyperion.cis.config.ProcessingException: Failed to configure HPSU component: {0}, {1}
at com.oracle.reportinganalysis.config.RADBConfigurator.configure(RADBConfigurator.java:57)
at com.hyperion.config.wizard.impl.RunAllTasks.executeDbConfigTask(RunAllTasks.java:650)
at com.hyperion.config.wizard.impl.RunAllTasks.execute(RunAllTasks.java:296)
at com.hyperion.config.wizard.impl.RunnAllTasksState.run(RunnAllTasksState.java:92)
at java.lang.Thread.run(Thread.java:662)
All the required tables got created the Schema(SchemaName: HRA) but still the database configuration is getting failed.
All Other hyperion products got successfully configured.
Regards,
VJ.

Hi Nowshad,
Thanks for your reply.
I have did that couple of time but still getting the same above message. I have also followed the below document from metalink but still no luck.
Reporting And Analysis Configuration with New Database Fails (Doc ID 1482499.1)
I am not sure what I am missing.
Regards,
Vijaya Krishna.

Aaa authentication enable console (server_name) password issue

Here is the problem I am experiencing and I hope someone out there is able to help;
I have a ASA5510 (running software Version 8.0(3)). I have enabled remote authentication to our company's TACAC server (which is running TACAC open source supplied by Cisco).
The problem is as follows;
I can telnet to the appliance remote and using my username and password (configured on the TACAC server) I am authenticated. But after entering enable - I am prompted with the password prompt. But I can not get pass this prompt. I have tried the same password as I previous enter at the telnet prompt and failed, the local enable password fails as well. Any suggestion.
aaa-server (server_name) protocol tacacs+
aaa-server (server_name) (interlinkport) host (Address)
key (password)
aaa authentication enable console (server_name) LOCAL
aaa authentication enable console (server_name) LOCAL
aaa authentication http console (server_name) LOCAL
aaa authentication serial console (server_name) LOCAL
aaa authentication ssh console (server_name) LOCAL
aaa authentication telnet console (server_name) LOCAL
aaa accounting command privilege 15 (server_name)
aaa authorization exec authentication-server

I think I can help you here since I've been using Cisco
Freeware TACACS+ for almost 7 years now. I am not
an expert, just enough to be dangerous.
Since the code is open-source, each company uses
differently; however, there is one thing that will
always true. That would be the the enable.c file,
which is a C program. You would need to modify
this file so that EVERYONE can have his/her own
enable password, just like Cisco ACS running on
Windows platforms.
the configuration file would look something like this:
accounting file = /var/log/tac_plus.log
key = zFgGkIooIsZ.Q
user = cciesec {
member = admin
name = "ccie security"
login = cleartext "cciesec"
user = $cciesec$ {
member = admin
name = "ccie security"
login = cleartext "cciesec1"
group = admin {
default service = permit
On the Pix:
aaa-server NEO protocol tacacs+
aaa-server NEO (outside) host 192.168.15.10
timeout 5
key cciesec
aaa authentication ssh console NEO LOCAL
aaa authentication enable console NEO LOCAL
Here is the login sequence:
[root@dca2-LinuxES root]# ssh -l cciesec 192.168.0.25
The authenticity of host '192.168.0.25 (192.168.0.25)' can't be established.
RSA key fingerprint is c2:48:15:85:92:7f:56:15:a8:0f:80:d9:88:50:fd:1c.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '192.168.0.25' (RSA) to the list of known hosts.
[email protected]'s password:
Type help or '?' for a list of available commands.
CiscoPix> en
Password: ********
CiscoPix#
In other words, my initial password is "cciesec" and my enable password
is "cciesec1". Another user "tom" will have his own login and enable
password.
Simple enough?

AAA authentication is fail on cisco 4505 switch with acs

i am new in AAA . i want to login switch which authentication come from cisco acs 5.1 but i configure both switch and acs 5.1. when i telnet
switch it display % Authentication fails. can anybody help me regurding this issue!!!
on cisco switch end conf:
aaa new-modle
aaa authentication login default group tacacs+
aaa authentication login TACASE group tacacs+
aaa authentication exec default group tacacs+
tacacs-server host 10.10.10.1
tacacs-server key Password!@#
line vty 0 4
login authentication TACASE
on acs 5.1 side i add switch on its vlan ip address which is connect acs 5.1 but
BUT when i login using putty terminal its show % Authentication fails.
Please help me regurding this issue!!!

Hi,
what is the error message reported on ACS?
Are you sure that you are using the same key on ACS and cat4k?
Can you configure "ip tacacs source-interface " with the vlan interface you are using as source?
You can also collect these debugs:
- deb aaa authentication
- deb tacacs
Cheers
Marco

Failing to execute Check: systems configured with DHCP

Recommendation: Oracle supports installations on systems with DHCP-assigned public IP addresses. However, the primary network interface on the system should be configured with a static IP address in order for the Oracle Software to function properly. See the Installation Guide for more details on installing the software on systems configured with DHCP.
Status: Not Executed
Why is Oracle failing to execute the check? What sort of check does Oracle run for DHCP IPs?
Any help will be appreciated.
Thanks

A server is not supposed to work with DHCP but with a fixed IP address. Enterprise Manager DB Control Console will only work with a fixed IP address, if ever either the IP or the hostname change then EM won't work any more unless it is reconfigured.
The purpose of the loopback adapter is to provide a fixed IP address on a dynamic assigned environment. You should make sure once you fix the IP address by means of DHCP to name this IP address in the host file at c:\windows\system32\drivers\etc\host.
~ Madrid
http://hrivera99.blogspot.com/

AAA -- Int range configuration gives "Command authorization failed" msg.

Versions involved:
AAA
ACS 4.1.4.13.12
Devices:
C2960-LANBASE-M, Version 12.2(25)SEE3, RELEASE SOFTWARE (fc2)
C3550-I9Q3L2-M, Version 12.1(14)EA1a, RELEASE SOFTWARE (fc1)
If we try to configure a single interface or just a very small range, it works fine, but if we try to configure a larger range of interfaces, we get a Command authorization failed message, as can be seen below:
HOST1184(config)#int range fastEthernet 0/1 - 3
HOST1184(config-if-range)# switchport access vlan 24
HOST1184(config-if-range)# switchport mode access
HOST1184(config-if-range)# switchport voice vlan 301
HOST1184(config-if-range)# dot1x pae authenticator
HOST1184(config-if-range)# dot1x port-control auto
HOST1184(config-if-range)# dot1x timeout reauth-period 7200
HOST1184(config-if-range)# dot1x timeout supp-timeout 120
HOST1184(config-if-range)# dot1x max-req 1
HOST1184(config-if-range)# dot1x max-reauth-req 1
HOST1184(config-if-range)# dot1x reauthentication
HOST1184(config-if-range)# dot1x guest-vlan 280
HOST1184(config-if-range)# spanning-tree portfast
HOST1184(config-if-range)#!
OST1184(config-if-range)#end
HOST1184#conf t
Enter configuration commands, one per line. End with CNTL/Z.
HOST1184(config)#int range fastEthernet 0/4 - 14
HOST1184(config-if-range)# switchport access vlan 24
Command authorization failed.
Command authorization failed.
Command authorization failed.
HOST1184(config-if-range)# switchport mode access
HOST1184(config-if-range)# switchport voice vlan 301
HOST1184(config-if-range)# dot1x pae authenticator
HOST1184(config-if-range)# dot1x port-control auto
Command authorization failed.
HOST1184(config-if-range)# dot1x timeout reauth-period 7200
Command authorization failed.
HOST1184(config-if-range)# dot1x timeout supp-timeout 120
Command authorization failed.
HOST1184(config-if-range)# dot1x max-req 1
Command authorization failed.
HOST1184(config-if-range)# dot1x max-reauth-req 1
Command authorization failed.
HOST1184(config-if-range)# dot1x reauthentication
Command authorization failed.
HOST1184(config-if-range)# dot1x guest-vlan 280
Command authorization failed.
HOST1184(config-if-range)# spanning-tree portfast
Command authorization failed.
HOST1184(config-if-range)#!
The pieces of config are as follows:
aaa new-model
aaa group server radius dot1x
server 10.61.156.136 auth-port 1812 acct-port 1813
aaa authentication login default group tacacs+ enable
aaa authentication enable default group tacacs+ enable
aaa authentication dot1x default group dot1x
aaa authorization config-commands
aaa authorization exec default group tacacs+ if-authenticated none
aaa authorization commands 0 default group tacacs+ if-authenticated
aaa authorization commands 1 default group tacacs+ if-authenticated
aaa authorization commands 15 default group tacacs+ if-authenticated
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 0 default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
aaa accounting system default start-stop group tacacs+
enable secret 5 <removed>
logging 10.142.4.45
snmp-server community <removed> RO
snmp-server community <removed> RW
snmp-server location "SD"
snmp-server contact contact - [email protected]
tacacs-server host A.B.C.D timeout 5 key <removed>
tacacs-server host A.B.C.D timeout 5 key <removed>
tacacs-server host A.B.C.D timeout 5 key <removed>
no tacacs-server directed-request
radius-server host 10.61.156.136 auth-port 1812 acct-port 1813 key 7 096E5C3D4851
radius-server retransmit 3
Anyone out there has a solution for such a problem?
Regards,
AL

Hi JG, thanks for your response.
I don't have the appliance close to me, so I cannot check on this setting.
As soon as I have a chance, I will return with this info.
Anyway, why does it work for other devices and also, why we don't have any problem when configuring a small range of interfaces?
Once again, thanks for your reply.
Regards,
AL

When replying to an add on Craig's List, for example, it goes back to my old email address I had with IE, and fails to connect with the ad's author and I'd like to know how to make it use my gmail address with Firefox instead.

When replying to an ad, via email, posted on Craig's List , for example, it attempts to use my old email address I had with IE, then fails to connect with the ad's author. How do I get it to only use my gmail address with Firefox?
== This happened ==
Every time Firefox opened

See https://support.mozilla.com/en-US/kb/Changing+the+e-mail+program+used+by+Firefox

IPhone mail configured with Gmail alternate address

I'm really stuck.. I have a Gmail account (through Google Apps for Business) that I have configured with Mail on my iPhone using Exchange to connect the account. Everything has been working flawlessly, until my employer made a change to our email addresses, so that we had to set up a new domain alias through Gmail as our "send from" account.
My problem is that I can't for the life of me figure out how to send from this new address from my iPhone.
Finally, I found a post on the web that seems to explain a way to do this, using the OTHER account setup (IMAP) on the iPhone (instead of either Gmail or Exchange): http://modernerd.com/post/535350679/solved-gmail-ipad-iphone-and-multiple-from That seemed to do the trick, except then I realized I would no longer have Push email, which I have really come to rely on.
I tried using the native iPhone Gmail app for a few days, as that seemed to be the only solution, but there's just so many things about that app that really make me miss my good 'ol Apple mail.
Any other creative solutions out there? Thanks for any advice!

yeah, it used to work fine because google was supported exchange on mobile devices up until the end of february or so. they let everyone keep their settings the way they were unless they changed them or deleted them, so that's totally expected. The thing with the push is that gmail no longer seems to be supporting that behavior through native apps on mobile devices because it's something they want their exchange customers to pay for

Ewfmgr: Failed getting protected volume configuration with error 1

Hello,
I created a Windows 7-64 image for an Ivy-Bridge VME card. The image contains EWF with RAM-REG.
The disk was divided into 2 partitions with the windows installer and the image was successfully installed.
As I'm using RAM-REG, all
the disk was allocated.
After the image was installed I tried to run "ewfmgr c:" and got the current status.
Then I created a GHOST image and wrote the image on a new card with a clean disk.
After Windows booted, running "ewfmgr c:" gave:
Failed getting protected volume configuration with error 1
I found few threads on this issue but failed to understand what is the right solution.
Can you help ?
Thanks,
Zvika

The Problem is always Volumeid related (diskid)
Explaination:
Sysprep creates new bcd for the System. - Therefore it's recommended to use sysprep (and SID and so on..) but if you're lazy or don't have Domain Controller and so on or always use physical seperated (better not Internet connected) machines you would be
totaly fine with non-syspreped Images. You only Need updated/new bcd.
Captured wim has 'old' bcd (if there is no seperated MSR Partition) you can update this 3 entries within winpe and your Image will boot:
bcdedit /store c:\boot\BCD /set {BOOTMGR} device boot
bcdedit /store c:\boot\BCD /set {DEFAULT} device PARTITION=C:
bcdedit /store c:\boot\BCD /set {DEFAULT} osdevice PARTITION=C:
(boot could also be Partition=c: or all entries could be boot - and /store is not needed as in winpe bcdedit automatically Redirects the commands into the other/System (found) bcd. But i always recommand to specify the bcd store you want to edit, like in
this lines)
The definition of "C:" in this Parameter is 'translated' into volumeid/diskid. - So in the bcd is not "C:" it's some DiskID.
Instead of the 3 entries you can just create a whole new bcd with updated volumeid/diskids. --> It would be enough to run bcdboot /s C:\ (or whatever the current boot (c:\) Partition is.
EWF needs to be reconfigured as it also works with Volume/Diskids. So it needs additional command while running (online).
ewfcfg /install-configuration for win7
rundll32 ewfdll.dll,ConfigureEwf for win xpe/wes2009.
Windows Embedded Developer and Scripting Guy //Germany (http://www.wesnext.com)

Configure Windows Server Essentials Fails with Please Click Retry. If the Issue still exsists........

I had a Windows 2003 SBS that i am migrating to a new Windows 2012 R2 Essentials machine. I had to upgrade the Domain and Forrest from 2000 to 2003 to be able to add my new 2012 server to the existing domain. Once it was replicated i demoted
the Server 2003 machine and removed the DNS role as well. I then upgraded the Forrest and Domain to 2008 R2 and then to 2012 R2.
Now the fun begins. I tried to then run the Essentials configuration wizard and it fails. I have spent two days reading technotes so here is what i have done. For some reasone the Managed Service Accounts container was not there. (i
may deleted it during the AD clean up..there were a ton of unneeded containers and OUs). So i followed:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/f9588fd5-0236-419d-b217-8c4de67732ae/deleted-managed-service-accounts-container?forum=winserverDS
Which i used ADSIEdit to remove some containers and set the AD Version to clear and rerean ADPrep /domainprep. At this point the Managed Service Accounts container reapeared. I removed the role of Windows Essentials Experience...rebooted and
installed the role again. But the ServerAdmain and MediaAdmin$ accounts did not create. So i created them using the following powershell:
import-module activedirectory
add-kdsrootkey -effectivetime ((get-date).addhours(-10))
New-AdServiceAccount -Name ServerAdmin -Path "CN=Managed Server Accounts,DC=[Domain],DC=local" -enabled $true -RestricttoSingleComputer
and i did the same for MediaServer. And they show up in the container where they should be. I then went to GPO Managment and change the Log on as Service and added the two accounts to the Domain Controller GPO. (*note...interesting thing
here...before i create the domain managed service accounts i tried [domain]\ServerAdmin$ and if failed but when i tried ServerAdmin$ it added but it was not the domain account....so that was odd) . I then did a gpupdate /force as well as a reboot for
good measusre. When the Server came back up, i went the Local Policies and verified that the ServerAdmin$ and MediaAdmin$ were given Log in as Service on the Server. Finally i ran the COnfigure Essentials Wizard and the DAMN thing failed again.....can
anyone please help me with this. It is in a production environment due to the 2003 Server dying...so i can't just wipe it and start from scratch.
Thanks!!

Hi,
Glad to hear that you have solved this issue and thanks for sharing in the forum. Your time and efforts are highly appreciated.
Best regards,
Justin Gu
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Palm Desktop software - Fails to open with msg "Error: Failed to open Address Book database"

In July 2009 I dropped my trusty Visor on a tile floor and it stopped working. So, in the meantime I have been using only the Palm Desktop software.
Just yesterday, when I attempted to launch the Palm Desktop software, it failed with the message “Error: Failed to open Address Book database”. I think this error was caused by a very ungraceful shut-down of my Win XP system yesterday.
I really do need to use the Palm Desktop software for my address list, calendar, and memo. The problem is that the error with the Address Book database seems to be preventing the Palm Desktop software from initializing.
I am using Palm Desktop 4.0.1 on Windows XP SP3. I do NOT have an export file of the Palm address book or other databases. However, I do have five levels of backup history on my external Maxgor backup drive.
Specifically, on my current c drive I have files in the directory:
C:\Program Files\Handspring\WR\address
            address.bak                  5/16/2009   (from last sync before I broke Visor)
            address.dat                   5/24/2011
            Personal.ABA   11/6/2008
            Unfiled.ABA    3/28/2008
On my most recent backup of my system, there are the following files:
                        address.bak                 5/16/2009   (from last sync before I broke Visor)
                        address.dat                  5/12/2011
                        Personal.ABA   11/6/2008
                        Unfiled.ABA      3/28/2008
I have not listed the four older backup versions.
I haven’t tried any corrective measures yet (I don’t want to make matters worse) and am hoping that someone can guide me along the right path.
Is it possible for me to just rename the “current” address.dat file to something like address.SAV and then copy the Address.dat file file with date of 5/12/2011 into the current directory. Will the software then just use the older version of the data, or must I do something else.
I am grateful for any assistance. Thank you very much.
Post relates to: Visor Deluxe
Post relates to: Visor Deluxe

Thanks for the speedy response. However, I read the article for which you provided the link, and I hve also read many other articles that I found via search, but I don't think these will help me. All of these articles seem to assume that (1) you have a handheld to which you can sync and thereby rebuild the database on the PC, or (2) you have a backup that you created via the Palm Desktop export function. Unfortunately, I have neither and so I don't think any of these solutions will work for me.
I did read with great interest an article that stated that recent versions of Palm Desktop have a built-in function that will repair a corrupted Datebook database. Will this also fix a corrupted Address Book database which is my problem?
So, I downloaded and attempted to install the latest version of Palm Desktop. I was careful to read the instructions that stated NOT to uninstall my current version of Palm Desktop, but to just install the latest version on top of my current Palm Desktop. However, when I attempted to do the installation, the installer software said it could not install on top of my current software and that I should first uninstall my current software.
I have some questions now:
(1) If I uninstall my current version of Palm Desktop, will this destroy my Address Book, Datebook, and Memo databases ( I don't care about the ToDo database)? If so, what can I do to preserve those databases?
(2) Is there really a function built in the recent versions of Palm Desktop that will fix a corrupted database? Is this an "automatic" function that will detect and fix a broken database or is this something I will have to invoke?
Thanks for your help.
Gdad

Desktop Manager fails to synch with Yahoo Address Book on my 8300

I have been synching both Yahoo Address Book and Yahoo Calendar successfully for months. Suddenly, Address Book no longer synchs. Yahoo calendar still works. The problem occurs aftew Desktop reads all the contacts. It halts while "Synchronization Progress...reading from Yahoo Address Book" displays. That message has displayed for up to an hour with no progress. I then disconnect and halt Desktop. I can still synch Yahoo Calendar. I have not updated desktop or device software. Anybody have any suggestions?

No Sync with Yahoo Address Book Workaround:
Work Around for Blackberry to Yahoo Sync when Address Book Sync Gets Stuck:
I've had the Address Book on my Yahoo Sync hang on two different occasions. The first time was late 2009 and the second was late Jan 2010. The first time the problem fixed itself. This time, no such luck yet. So if you are having the same problem, here's a work around that will allow you to update both your Yahoo and Blackberry Contacts and keep them in sync.
Step 1: From Yahoo, EXPORT your contacts to Windows Contacts (I did this in Vista and it also works for Windows 7 -- it should also work for XP, but the export may be a different expension). You will want to export using the 'vCard, Zip of .VCF files'. his will create a zip file of all your contacts with in the vcard format: (.VCF)
Step 2: Some manual labor in this step, but you will only have to do it once OR you can try a .vcf to .contact file converter program like:
http://www.vcardconverter.com/ that will cost you 19.95. Open each contact in the zip file. It will show you the contact data and there will be a button that you can click to ADD TO MY CONTACTS. Do this for each contact in the exported zip file. Or but the program.
You now have your Yahoo Address Book converted over to Window Contacts.
Step 3: In the Blackberry Desktop Manager change your synchronization setting for your address book from Yahoo to 'Window Address Book/Mail'. Leave the Calendar, MenoPad, and Task to sync with Yahoo. So you should have:
Calendar sync to Yahoo
MemoPad sync to Yahoo
Address Book sync to Windows Address Book/Mail
Task sync to Yahoo
Step 4: You now can perform a sync to you Blackberry Device. (But read the notes below first)
SOME IMPORTANT NOTES:
This allows you to get your contacts into your Blackberry and to sync them with your Windows Contacts. You can make this a three way sync where you also keep your Windows Contacts and Yahoo Address Book in sync. It just adds an extra sync. NOTE: If you are going to do this then pay the 20 bucks and buy the program above or find a program to convert .contact files to vcf (vcard) files. I've decided to buy the program above because it allows me to import and export all the contacts at one time, which is what you will need to use the import / export tools in Yahoo Contacts
I did the sync of the address book in steps. I was lucky / unlucky because I tried to do a Blackberry software upgrade that failed and it wiped out all of my contacts, calendar, tasks, and memos; so when I did my first sync, I when only from the Blackberry Desktop Manager to my Blackberry. I then changed my sync to be a two way sync. I only mention this because I don't know if going from Windows Contact to Blackberry would create duplicate entries in your Blackberry and Windows Contact Manager. Maybe someone can check this out and post. Anyway, I would suggest trying the sync with only a few contacts to check it out.
You don't need to worry about the folder that the Blackberry Desktop Manager will store the contacts. It assumes the 'Contacts' folder on you machine. As far as I could tell, there was no way to change this destination anyway.
ALTERNATIVE APPROACH:
If I was to do this all over, and I had my contacts still on my blackberry, I would most likely do the following (in theory):
Step 1.
Change the sync for contacts to be with Windows Address Book, not Yahoo.
Step 2.
Sync the contacts so they would appear in the Windows Contacts.
Step 3. Then worry about syncing Windows Contacts with Yahoo (see above)
Good luck,

Updating Address Fails With APP-PER-52473

Updating Address Fails With APP-PER-52473 "You must enter a secondary address dated later than the primary address."
I have an issue w/ updating addresses. The form throws the PER-52473 error. The thing is- my client never assigned primary addresses in the system. Thus, we need to update the data accordingly. I have about 4 addresses per person. From metalink, I assumed all I needed to do was to end-date 3 of them, and flag one as PRIMARY. This still fails. Maybe I am missing something? Is there another step? Another table?
My question- how do I make this error go away. I have been playing around with end-dates and primary flags, over lapping and non-overlapping dates, and no luck. Any assistance would be great. Thanks.
ADDRESS_ID     BUSINESS_GROUP_ID     DATE_FROM     DATE_TO     PRIMARY_FLAG     STYLE
11968417     101     11-MAR-09     null      Y     10
11968419     101     15-JUL-08     10-MAR-09     N     10
11968420     101     13-JUL-08     14-JUL-08     N     10
11968421     101     11-JUL-08     12-JUL-08     N     10

Looks like a bug.
Per_Addreses is a Dated table and not a date-track table.
So you can still have -
11968417     101     11-MAR-09     null N     10
11968419     101     15-JUL-08     null     N     10
11968420     101     13-JUL-08     null     N     10
11968421     101     11-JUL-08     null     Y     10
Why can't you create your latest address(primary) also effective employee start_date ?
As of system date your primary will be the one you can refer in reports/processes. So there will be no harm.
Where exactly are you using the addresses ?
Can you not have overlapping addresses ?
cheers,
Vignesh

Hi i m using 4s and its updated but i cant configure with microsoft exchange for my gmail account. Anytime i tried to configure it the message comes connection to the server failed. Pls help me out.

Hi i m using 4s and its updated but i cant configure with microsoft exchange for my gmail account. Anytime i tried to configure it the message comes connection to the server failed. Pls help me out.
<Email Edited by Host>

Discontinued by Google. Read here:
http://googlesystem.blogspot.com/2012/12/google-sync-discontinued-for-gmail.html

NAS configure with 2 ip address failed on AAA authentication

Similar Messages

Maybe you are looking for