Need to Create More Options in Cisco ACS 5.2 User section

Hi Team,
I Need to create more options on Cisco ACS 5.2 under internal identity store in users. please help how to do add, default not showing all.
i have seen on internet. attaching doc.
Regards
MR

To create additional attributes for internal users do the following:
- go to System Administration > Configuration > Dictionaries > Identity > Internal Users
- Press Create to define the additional attributes you require
For each attribute can
- define the type
- give a default value. This will be applied to all existing users and appear as default when new user is created
- indicate whether the attribute is required and must be defined for each user
- define a policy condition. If define such a condition will appear as an option when customize rules in a policy

Similar Messages

  • Issue with cisco acs 4.2.Users unable to login aaa client but after restarting group policy able to login

    issue with cisco acs 4.2.Users unable to login aaa client but after restarting group policy able to login

    issue with cisco acs 4.2.Users unable to login aaa client but after restarting group policy able to login

  • I have installed Adobe Acrobat XI on citrix (server 2008, x64) and need to suppress repair option in Help menu for the users via registry.

    i have installed Adobe Acrobat XI on citrix (server 2008, x64) and need to suppress repair option in Help menu for the users via registry. Have tried Disable_repair dword key in HKLM\software\Wow6432Node\Adobe\AdobeAcrobat\11.0\Installer and it does not work. please help.

    Look in the ETK Preference Reference here:  Installer settings

  • Creating more than one account for a single user

    I was wondering, if I creat more than one account for me (the only person that uses my powerbook) is that going overboard? I mean, lets say I am logged into the standard account and I want to learn more about the bash shell and using terminal which I am new to, if I **** something up will the whole system be toast or will only things in that account be messed up? Like could I then just log into my admin account and delete the other messed up one? Or no? My theory was that this was a way of keeping my comp safe from myself, being that I am new to macs and moreso that I am new to the unix side of things and want to start learning the command line without worrying about screwing up my whole system. I would just use the standard account for everyday use (like what I do now) or experiment with terminal, and when I need to download something or change some settings that requires me to be logged in as admin then I would log in and download what I need then log out and use it in the standard account...am I just wasting my time? Is what I am doing any "safer" than just having one admin account and thats it?
    Thanks for all the help! It feels good to be a part of the goodguys team =)
    Thanks again!

    Ghost,
    First, I don't subscribe to the "one should not use an admin account" philosophy. For someone who is the owner and main user of any given machine, I see the use of anything but an admin account a bit anal, totally unecessary, and needlessly complicating.
    On the other hand, I don't see the need for more than one admin account on any given machine. Yes, I see exceptions to this, and many people favor having a second admin account as a "backup," but I have never had more than one admin account on any of my machines, and have never encountered a situation where one would have helped.
    In short, I like the idea of having a "main" admin account that is used most of the time, and then having "secondary" accounts (all non-admin) for any additional users that might log in.
    Now, any limitations that apply to you as a GUI user of an account, admin or not, will apply to you at the command line as well. In other words, you can't get yourself into any more trouble at the command line than you can within the GUI. In fact, you might even be better protected at the command line than you are in the GUI. I say this because any action that would ordinarily "elevate" you above the standard capabilities of a non-admin user require the use of "sudo." Avoid the use of sudo, and you can avoid any problems.
    That doesn't mean that you wouldn't be able to do something stupid that might wreck an account that contains "all of your stuff," and on which you depend. It is not likely that you would damage your System, but it is entirely conceivable that you might, for example, accidently delete or overwrite your entire HOME folder. Oops!
    If you simply don't trust yourself with the command line, a second account might be a good place to experiment. Maybe create it as a non-admin account at first, with the option to change it to an admin account at a later time, when you want to learn how to use "sudo" to do more powerful things. By then, you will understand what not to do. Eventually, you will have the confidence to use the command line in your own account, which will have been an admin account all this while.
    Scott

  • RSA SecurID and Cisco ACS integration for user(s) with enable mode

    I thought I had this problem figured out but I guess not.
    I have a Cisco 2621 router with IOS 12.2(15)T17. Behind the
    router is a Gentoo linux, RSA SecurID 6.1 and Cisco ACS 3.2.
    I use tacacs+ authentication for logging into the Cisco router
    such as telnet and ssh. In the ACS I use "external user databases"
    for authentication which proxy the request from the ACS over
    to the RSA SecurID Server. I installed RSA Agents with
    sdconf.rec file on the Cisco ACS server. I renamed "user group 1"
    to be "RSA_SecurID" group. In the "External user databases" and
    "database configurations" I assign SecurID to this "RSA_SecurID"
    group.
    Everything is working fine. In the "User Setup" I can see dynamic
    user test1, test2,...testn listed in there as "dynamic users". In
    other words, I can telnet into the router with my two-factor
    SecurID.
    The problem is that if test1 wants to go into "enable" mode with
    SecurID login, I have to go into "test1" user setting and select
    "TACACS+Enable Password" and choose "Use external database password".
    After that, test1 can go into enable mode with his/her SecurID
    credential.
    Well, this works fine if I have a few users. The problem is that
    I have about 100 users that I need to do this. The solution is
    clearly not scalable. Is there a setting from group level that
    I can do this?
    Any ACS "experts" want to help me out here? Thanks.

    That is not what I want. I want user "test1" to be able to do this:
    C
    Username: test1
    Enter PASSCODE:
    C2960>en
    Enter PASSCODE:
    C2960#
    In other words, test1 user has to type in his/her RSA token password to get
    into exec mode. After that, he/she has to use the RSA token password to
    get into enable mode. Each user can get into "enable" mode with his/her
    RSA token mode.
    The way you descripbed, it seemed like anyone in this group can go directly
    into enable mode without password. This is not what I have in mind.
    Any other ideas? Thanks.

  • Vacation Report - need to create more fields

    We are currently running a report through excel as our Peoplesoft was not currently updated. We now want to have all employees on this list. So i WENT on PS to query manager - and clicked on criteria to add more fields so that I can run the vacation reports that is requested of me. I have tried few times and got error. So I am reaching out for assistance. This is the details we require. If someone guide/navigate to tell me how I can go about doing this. So it's the employees details and then there vaction at 4%,6% and 8%. I hope you can help as we are desperate to get this complete. I am attaching my file for you to have a look.
    If I would do this manually please advise how. This is considered all Vacation details for all employees in the company.

    As long as those fields are in the records you are using in your PSQuery, then yes.
    However, if those fields are not in the records you are using in your PSQuery, then you have to either
    1. include a record that holds those additional fields
    2. create an expression to derive those additional fields you want to put in your report
    3. create a table/view that has those new fields and add that new table/view in your Query report.
    From your spreadsheet, I  can see that there are fields like Vacation pay (4% paid).
    Where is the value of this field coming from? is it from one of the records in your PSQuery?
      - if yes, does it still need to be computed? then you might want to create an expression to compute it. If no, then you could just display it directly in your report.
      - if it is not in one of the tables you are already using in your PSQuery, then you could do either of 1, 2, or 3
    Reference: http://docs.oracle.com/cd/E15743_01/psft/acrobat/pt850tpsq-b0909.pdf
    PS: It would really help if you let us know what is the error you are encountering.

  • Global customers need a few more options...

    I would just like to go on record and say that if you are going to offer Global service you shouldn't assume that everyone is going on a two week vacation. I'll be in China for the next three years, sales reps told me, "oh China is a CDMA country you'll be fine with the Droid X" well I get here and the Droid X is great but China's CDMA service sucks so I stay Verizon loyal and order the Droid 2 Global well that's a great device too but the CDMA wont work because I'm not under a Verizon tower... Now don't you think that it would make sense to have an internet option so that your Global customers can plug their phone into their computers and program via direct communicate with your servers? It's not rocket science and you have the technology so in my opinion while your phones are first rate your global service is in the toilet!

    I don't think Verizon's global service is intended to be a long-term solution for cellular service.  It is designed for people who need temporary international usage due to personal or business travel.  You're going to find much more cost effective solutions by getting your service from a local provider when you are talking about being in country for 3 years.

  • You need to create more buy in for this to work

    As opposed as I am to lifetime subscriptions (creative cloud, MS Office, virus scanners, etc.), I can see some value in them as long as they bring value to me.  I have no doubt in my mind that I can continue to work unhindered permanately with Adobe CS6 products without giving you another red cent - ever.  Just as I can continue to use MS Office 2010 withouit paying MS anything else for a word processor, spreadsheet program and email/calendar client.  You need to give me a REAL reason to not do this.  I can personally only justify $50/month for CC with the following features:
    1.  Real cross-platform support.  That means linux.  There is no point in me spending money forever on a product (a product for which I can already do everything now with no additional cost).  My business will gain nothing from CC short-term or long-term unless I can gain value from this purchase and save money from something else, and that basically means running on linux.  Putting an extremely stable five-year updateable workstation OS like Ubuntu 12.04 on current hardware without having to shell out big $$$ to Apple for their non-upgradeable and non-serviceable hardware would flat-out save me money, money I would be willing to give to Adobe instead of Apple.  I do have some workstations running Windows, but the Ubuntu and Mac workstations are more productive IMO working in creative suite, with less OS issues.  I can see no reason not to code/port to linux other than developer laziness.  People are disgusted with Microsoft since Windows 8 and Mac's just cost too much money in this economy.  There are only a few reasons everyone is not already running linux - games in Windows (which Valve is starting to address with the steambox and steam for linux), Adobe products and MS Office.  Office 2010 runs great under wine, so screw Microsoft.  If you developed CC for linux, big-name vendors would instantly start selling home and business workstations pre-installed with Ubuntu designed for digital editing.  It's not that linux users are completely opposed to spending money on software and demanding open-source, they just don't have much of a choice of anything to spend it on.  Give them a quality product at a reasonable price, they will pay.
    2.  Better mobile support.  We need real tools for quick edits on popular formats on our mobile devices.  As our devices are getting faster, we need more integration for when we are not sitting in front of our workstation.  For $50/month, this should be included and featured.
    3.  Better cloud-based training.  To draw people in and keep them paying, they are going to need more frequent content updates, that also means proper feature training.  The training should be easy to understand and readily available upon new features.
    4.  More cloud storage, much more.

    ebnovotny,
    Have you also used Address Book>Card>Make This My Card?
    If you have, you could also quit iCal, find the com.apple.ical.plist file in your Macintosh HD/Users/yourusername/Library/Preferences folder and drag it to the Desktop. Then log out/in or restart and check if your card is recognized.

  • Need to create Attachment option in Contract Toolbar

    Hi
    We have a requirement to create an attachment option ( exactly same as the attachment option in the MA toolbar and Rfx toolbar )  in the  contract page toolbar
    Can anyone help me with the steps ?
    Thaks in advance
    Sudipta

    Thanks Vikram for the reply .
    I have alraedy tried that option by creating an collection extension attachment in the page  . But customer wants the attachment only at the toolbar.
    So for this approach I am trying to create a system toolbar but I can not assign any toolbar action at the page as the option is grayed out.
    If you have any knowledge pls share .
    Appreciate your help
    Regards
    Sudipta

  • I need to create more space on my Ipod Touch

    Hi, please could someone help me I recently got a new IPod Touch for my birthday and I have been adding new music on and generally having a Spring Clean organising and sorting my music out.  However when I have come to Synch my IPod the Other (yellow) bar has halved my music  memory and is currently standing at 20.98 which is a lot of memory to lose, I have literally run out of memory.   I have deleted everything I can possibly remove from Photos, Old Apps, Facebook etc leaving just the music and it hasn't made a difference.  My only conclusion is the apps I don't use the ones dictated to you by Apple they are the ones I need yo get rid of, please can someone help me by advising me on how to either get shut permanently the used apps like Stock Market or is there any other way in getting that yellow bar smaller.
    Many Thanks
    Jane

    An "other" larger than about 1 1/2 GB indicates corrupted files.
    What is the Other on my iPhone and How to Remove It
    What is "Other" and What Can I Do About It?
    Next, usually restoring from backup eliminated the corrupted files. However, sometimes restoring to factory settings/new iPod is required.
    To restore from backup see:
    iOS: How to back up               
    To restore to factory settings/new iPod see:
    iTunes: Restoring iOS software

  • Help Need to Create more space

    Hi People,
    I have a Powerbook which has a total of 100gb in the Hard Drive. I have reached the stage where I have completely filled the hard drive with only 1.2gb. So the logical thing to do is buy a hard drive which I did with 1.5TB.
    This is what I did in the exact order:
    1. Copied the Macintosh Hard Drive of my computer into the External Hard Drive.
    2. Then I copied all of the files in my home folder into the External Hard Drive.
    3. I then made a copy of the pictures, music and videos into the External Hard Drive.
    4. I then deleted the folders in the Music, Pictures and Videos by sending it to the Trash Folder.
    5. Then I emptied the Trash Folder.
    5. I then reseted my computer and when I loaded it to my surprise the memory available was 1.48gb.
    I am not sure how this is possible because those three folders (Music, Movies and Pictures) come to at least 30gb. Can someone please tell me what I am doing wrong because I am now at the stage where I only 1.48gb which is not enough to do a security update.
    Thanks for the advice and HELP!!!!!!!!

    Specialist Entertainment:
    Copied the Macintosh Hard Drive of my computer into the External Hard Drive.
    Can you tell us exactly what you copied, and how you did it?
    Then I copied all of the files in my home folder into the External Hard Drive.
    Exactly what do you mean by "all of the files in my home folder"?
    I then made a copy of the pictures, music and videos into the External Hard Drive.
    Again, how did you do this?
    I then reseted my computer and when I loaded it to my surprise the memory available was 1.48gb.
    What do you mean by "I then reseted my computer"?
    Can you tell us exactly what you see on your external HDD?
    My guess is that you have duplicated some of the things that you have copied. Had you posted your question prior to attemting this project, we will have directed you to a much more efficient and effective way of doing it. Too late for that. Answering the questions above will give us an idea of what is going on, and we will be better able to direct you what to do next.
    cornelius

  • Need Help Creating (more) Complicated iChat Backgrounds/Effects

    I was wondering how you can make an iChat background transparent or make the image apply "over" the video.
    If anyone has installed an extra effect package, ones such as the mona lisa (a picture of the mona lisa with the eyes and mouth cut out so that you can see the video through those) Like this:
    !http://img7.imageshack.us/img7/7742/monalisacopyji6.jpg!
    So does anyone know how to make an image like this?
    Thanks

    Hi,
    From your Install Disk Install Developer Tools
    This will give you Quartz Composer.
    This in turn will allow you to Open the Compositions.
    Copy (Duplicate) one to work from and experiment.
    You will found out how to put a pic of your choice in the place of the one being used.
    Some obviously place the Pic to the Background and others as the Foreground with holes "cut in them"
    Cutting the holes is done in a Graphics App and th items needs saving as one that supports Transparancy (.gif or .png)
    7:56 PM Wednesday; February 4, 2009

  • Cisco ACS v4.1 - User Export incl. Authentication Method

    Hi,
    I wish to export a list of all our users, to include their group and more importantly, their password authentication method. We have a combination users that authenticate using both ACS internal database and also external RSA Secure ID database. Basically I need to identify all users who are NOT authenticating against Secure ID.
    I ran CSUtil.exe -u   , however this only gives me the user & group, doesn't list the authentication method per user.
    Thanks,
    Brian

    Brian,
    Unfortunately, CSUtil.exe will only list the users & group they are a member of. So the simple answer is no.
    If the goal is to set everyone to use token authentication, you could get export a list of all users with CSUtil.exe, then use the client import option to update database used for authentication of all users. Here is the url for documentation on this and other CSUtil.exe options.
    =====================
    Via Csutil
    Created a file in text format
    ONLINE
    UPDATE::EXT_SDI
    ADD::EXT_SDI:PROFILE:
    DELETE:
    csutil -i
    =====================
    If you feel adventerous, you could explore the contents of the dump.txt. by running csutil -d
    This file does contain the information you are looking for. However, there is no documentation or support available for reading or decrypt it.,
    Regards,
    Jatin
    Do rate helpful posts-

  • Create select-options using internal table

    Hello,
    I have number of table-fields in one internal table.
    I need to create select-options on screen for each of the table field in that internal table.
    Can anybody please provide a code for it ?
    Thanks.

    hi,
    you can create in this way :
    select-options: <name> for itab-<field name>.
    example code:
    TABLES: vbak.    " standard table
    TYPE-POOLS: slis.
    *-- Structure to hold data from table
    TYPES: BEGIN OF tp_itab1,
           vbeln LIKE vbap-vbeln,
           posnr LIKE vbap-posnr,
           werks LIKE vbap-werks,
           lgort LIKE vbap-lgort,
           END OF tp_itab1.
    *-- Data Declaration
    DATA: t_itab1 TYPE TABLE OF tp_itab1.
    DATA : i_fieldcat TYPE slis_t_fieldcat_alv.
    *                    Selection  Screen                                 *
    *--Sales document-block
    SELECTION-SCREEN BEGIN OF BLOCK b1 WITH FRAME TITLE text-t01.
    SELECT-OPTIONS: s_vbeln FOR vbak-vbeln,
                                 s_posnr FOR vbap-posnr,
                                 s_werks FOR vbap-werks,
                                s_lgort  FOR vbap-lgort.*
    SELECTION-SCREEN END OF  BLOCK b1.
    hope it will help you
    regards
    Rahul sharma
    Edited by: RAHUL SHARMA on Sep 19, 2008 8:25 AM

  • How to create more kinds of singleton objects?

    Hello,
    in my application I need to create more objects. Every object does during its creation same actions (they differ only in one parameter) and add some own methods.
    These all objects should behave as a singleton pattern.
    Could you help me (different design pattern) how to achieve this?
    Thank you.

    I have such slightly modified Multiton pattern class.
    Now I want create a method that returns database server IP address from database setting type - try to tell me (exactly) how to write this method.
    public class Setting {
         public enum Type {
              database, application, mail
         private static final Map<Object, Setting> instances = new HashMap<Object, Setting>();
         protected PropertiesFile file = null;
         private Setting(Setting.Type key) throws IOException {
              file = new PropertiesFile(key.toString() + ".properties");
         public static Setting getDatabase() throws IOException {
              return Setting.getInstance(Setting.Type.database);
         public static Setting getApplication() throws IOException {
              return Setting.getInstance(Setting.Type.application);
         public static Setting getMail() throws IOException {
              return Setting.getInstance(Setting.Type.mail);
         private static Setting getInstance(Setting.Type key) throws IOException {
              Setting instance = instances.get(key);
              if (instance == null) {
                   instance = new Setting(key);
                   instances.put(key, instance);
              return instance;
    }

Maybe you are looking for

  • What if you tried doing the clean up on your mp3 player and it don't work in rescue m

    i tried doing a clean up cause my mp3 player is in rescue mode and it don't do anything. i've never formatted anything in my life so i'm a little nervous about doing that. is there some keys you hold to get the clean up to work. i have a zen xtra mp3

  • How can i display my portal  with a certain language in the runtime

    I am imp[lemeting a portal page their will be a language choice  English   -   French  - Arabic I want the portal page to be displayed in the Arabic if the user choose Arabic I want the portal page to be displayed in the French if the user choose Fre

  • There is no "Archive" option under my file tap

    Hi all,         I remembered that there is a "archive" option under the File tab in Outlook 2007, but i couldn't find it in my outlook 2007 now. Is it connected to Exchange Server or some setting options Thank you Anthony

  • How can I change the default file format in PSE 10?

    I just upgraded from PSE 6 to PSE 10. In the former, the default file format when saving an edited image in the editor was psd. In 10, it is jpg. I prefer to save in psd, which means I have to select psd from the format drop-down menu for each save.

  • Change PR item short text when created from Work Order

    Hello, Is there a way to edit the PR item short text when the PR is generated from a Work Order. When we open the PR, the item short text is grayed out. We have created Material Master Number for Contract/ BPA items. When we input that particular mat