NEW PIN mode fails after migrating to new ACS version

Old setup.
CiscoSecure ACS v3.x
Windows server also has the RSA/ACE agent that queries a second server for SecurID authentication
C3745 and a PIX used for inbound remote access
Users access w/Cisco Systems VPN Client
Works great
New setup.
CiscoSecure ACS v4.0, running on a different Windows server
Slightly newer version of the RSA/ACE agent
Same C3745 and PIX
Same use4rs, same client.
Works great as long as the SecurID card is not in NEW PIN mode
If the card is in NEW PIN mode, the Cisco Systems VPN client of course prompts if the users wants to create a new pin. The answer is ?y? or ?n.? The client is then supposed to prompt for the PIN and then prompt a second time for the PIN. This never happens. Instead, w/in three seconds of the user saying ?y?, CSACS fails the user and the client terminates the connection.
Help!
Thanks,
Shane

Hi
You may want to ping the Cisco TAC. I remember there were loads of issues with RSA authentication that may have been fixed after 4.0 shipped.
If you run csauth from the command line:
csauth -z -p
you'll see a whole load of debug.. look for "[Securid" to see all related messages.
Darran

Similar Messages

  • Report generation failed after migrated from 6i to 10g.

    Hi All,
    i have migrated the 6i application to 10g.
    There was a report which was generated in .html format and saved to a remote server location.
    Now after migration to 10g,when i run the report through the URL ,It is still generated on the same remote server location but the it is not showing in the application interface.
    Please help....
    Thanks,
    DK

    Hi, Mike,
    user3211655 wrote:
    Hi All,
    We try to migrate a 8i database to 10g by using the exp and imp. All tables and data are already migrated by imp. During the imp, there are errors said the trigger compile with errors.
    When login to the em to check, I found these 2 errors.
    Line # = 2 Column # = 1 Error Text = PL/SQL: SQL Statement ignored
    Line # = 2 Column # = 60 Error Text = PL/SQL: ORA-00942: table or view does not exist
    My trigger is a very simple one:
    BEGIN
    Select TB_COUNTER_SEQ.NEXTVAL INTO :NEW.INCREMENT_NUM FROM DUAL;
    END;
    And I'm sure the "TB_COUNER_SEQ" is there.
    Do I need to change anything on the trigger when migrating from 8i?
    In fact, besides this trigger, all other trigger imp to this schema are having the same error. The schema in the 10g is a newly created one, is there any special right I need to create grant to this new user?Grant the necessary privileges on the tables (and any other objects used, like sequences) directly to the owner of the triggers. Privileges granted to a role don't count in AUTHID OWNER stored procedures; the privileges have to be granted to the owner of the stored procedure (or to PUBLIC).
    It the error is occurring at position 60, then it looks like you don't have privileges on dual. Login as SYS and
    GRANT SELECT ON dual TO PUBLIC;You may need synonyms (perhaps public synonyms) for the objects, too.

  • ZCC Login failed after Migration from 11.3.1 FRU1 to 11.3.2

    Hey,
    System: 6 Primary Server Sless 11 SP3
    LDAP: EDIR
    Primary: 11.3.2
    Sats: 11.3.1 FRU1
    After Migration from 11.3.1 FRU1 to 11.3.2
    i'll try to login in ZCC
    Message ZCC
    Error: Login Error: com.novell.zenworks.datamodel.exceptions.InternalD ataModelException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
    See the ZENworks Control Center log file (zcc.log) for the full stack trace.
    I tryed with default admin and see that the USERSource is not reachable.
    I take a look in the configuration / usersource and there is an Error like: Unable to read contexts. One or more of your connections don't support non-SSL.
    ZCC.log sayed
    [javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints] [] [com.novell.zenworks.datamodel.exceptions.InternalD ataModelException] [ZENServer]
    [DEBUG] [12/30/2014 09:54:02.417] [3547] [ZENServer] [72] [zenworks] [ZCC] [] [Form.java CSRF TOKEN:d1b804076c63e7393af1a72442ced4b5 for the PageId:authoritativeSourceDetails] [] [] [] [ZENServer]
    [DEBUG] [12/30/2014 09:54:03.144] [3547] [ZENServer] [85] [zenworks] [ZCC] [] [QuickTask build tasks called in createChildControls, normal flow before ajax] [] [] [] [ZENServer]
    [DEBUG] [12/30/2014 09:54:03.348] [3547] [ZENServer] [69] [zenworks] [ZCC] [] [com.novell.zenworks.datamodel.exceptions.InternalD ataModelException: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
    at com.novell.zenworks.datamodel.services.Certificate ManagerImpl.getCertificates(CertificateManagerImpl .java:179)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. validateCertificateExpiry(LDAPUtil.java:1162)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:774)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:559)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:386)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:359)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:325)
    at com.novell.zenworks.datamodel.utils.ldap.LDAPUtil. getLDAPConnectionInfo(LDAPUtil.java:311)
    at com.novell.zenworks.core.web.internal.UserSourceSt atusAJAX.getImageData(UserSourceStatusAJAX.java:77 )
    at com.novell.web.ajax.ImageAJAX.service(ImageAJAX.ja va:38)
    at com.novell.web.ajax.AJAXDataHandler.service(AJAXDa taHandler.java:40)
    at com.novell.web.AjaxServlet.serviceImpl(AjaxServlet .java:100)
    at com.novell.web.AjaxServlet.service(AjaxServlet.jav a:74)
    at com.novell.zenworks.fw.web.internal.ZENworksAjaxSe rvlet.service(ZENworksAjaxServlet.java:47)
    at javax.servlet.http.HttpServlet.service(HttpServlet .java:727)
    at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:303)
    at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:208)
    at com.patchlink.sapphire.web.pages.vulnerability.ses sion.HibernateSessionFilter.doFilter(HibernateSess ionFilter.java:75)
    at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:241)
    at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:208)
    at org.apache.catalina.core.StandardWrapperValve.invo ke(StandardWrapperValve.java:220)
    at org.apache.catalina.core.StandardContextValve.invo ke(StandardContextValve.java:122)
    at org.apache.catalina.authenticator.AuthenticatorBas e.invoke(AuthenticatorBase.java:501)
    at org.apache.catalina.core.StandardHostValve.invoke( StandardHostValve.java:171)
    at com.googlecode.psiprobe.Tomcat70AgentValve.invoke( Tomcat70AgentValve.java:39)
    at org.apache.catalina.valves.ErrorReportValve.invoke (ErrorReportValve.java:103)
    at org.apache.catalina.core.StandardEngineValve.invok e(StandardEngineValve.java:116)
    at com.novell.zenworks.tomcat.ZENRequestValve.invoke( ZENRequestValve.java:1346)
    at org.apache.catalina.connector.CoyoteAdapter.servic e(CoyoteAdapter.java:408)
    at org.apache.coyote.http11.AbstractHttp11Processor.p rocess(AbstractHttp11Processor.java:1070)
    at org.apache.coyote.AbstractProtocol$AbstractConnect ionHandler.process(AbstractProtocol.java:611)
    at org.apache.tomcat.util.net.JIoEndpoint$SocketProce ssor.run(JIoEndpoint.java:316)
    at java.util.concurrent.ThreadPoolExecutor.runWorker( ThreadPoolExecutor.java:1145)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run (ThreadPoolExecutor.java:615)
    at org.apache.tomcat.util.threads.TaskThread$Wrapping Runnable.run(TaskThread.java:61)
    at java.lang.Thread.run(Thread.java:745)
    Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
    at sun.security.ssl.Alerts.getSSLException(Alerts.jav a:192)
    at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl .java:1884)
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:276)
    at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:270)
    at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1439)
    at sun.security.ssl.ClientHandshaker.processMessage(C lientHandshaker.java:209)
    at sun.security.ssl.Handshaker.processLoop(Handshaker .java:878)
    at sun.security.ssl.Handshaker.process_record(Handsha ker.java:814)
    at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocke tImpl.java:1016)
    at sun.security.ssl.SSLSocketImpl.performInitialHands hake(SSLSocketImpl.java:1312)
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1339)
    at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1323)
    at com.novell.zenworks.security.certificates.Certific ateUtility.getCertChain(CertificateUtility.java:12 1)
    at com.novell.zenworks.datamodel.services.Certificate ManagerImpl.getCertificates(CertificateManagerImpl .java:175)
    ... 35 more
    Caused by: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints
    at sun.security.ssl.AbstractTrustManagerWrapper.check AlgorithmConstraints(SSLContextImpl.java:946)
    at sun.security.ssl.AbstractTrustManagerWrapper.check AdditionalTrust(SSLContextImpl.java:872)
    at sun.security.ssl.AbstractTrustManagerWrapper.check ServerTrusted(SSLContextImpl.java:814)
    at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1421)
    SR has been created.
    Any Tipps /Hints for me ?
    Thank You

    Originally Posted by robpet
    Should have said kind of the same problem...
    That was sort of my gut feelings so I checked our certificates beforehand and they are using certs with sha1 fingerprint. But we are not using SSL - our connections are made using port 389. And the communication status is green.
    But I cannot add SSL because it complains about "unable to obtain a valid certificate for SSL communication information. Please verify that the adress and port are correct and that the LDAP directory has been configured with a valid certificate.
    So I cannot understand why users cannot authenticate with zenagent.
    There's a TID about zcc login failures after 11.3 upgrade.
    https://www.novell.com/support/kb/doc.php?id=7014716
    We ran into the above.

  • Aliases failing after migrating to new disk

    I migrated from my original 500GB disk to a new 1TB disk by using Disk Utility's "Restore" function.  For those of you that are not familiar with Restore, it should be the highest fidelity form of coping a partition given that it does a "block copy" - e.g. it copies the data byte-by-byte instead of doing a file based copy.  Also it verifies after the copy is done.  In my opinion, it is the gold standard for copying an entire partition.
    The new disk booted up fine, but I was surprised to find out that about half of my 190 aliases were broken.  When I looked inside the alias files themselves I saw that they contain a lot of data, including a path to the target file.  In all cases where the aliases stopped working on the new drive, this path was not correct.  In other words, I had moved the target file on the old drive before cloning the whole partition onto a new drive.
    I reinstalled the old drive and verified that all my aliases were in fact functioning so this was not an issue in on the source disk.  The aliases were able to work properly even with outdated path data in them.
    After doing some reading on how OS X aliases work, I found out they use multiple ways to find the target file.  If the path inside the alias is not good, OS X has other means to find the original target file.  But somehow this broke after copying to the new disk.
    So the question is if there is a way to force aliases to get refreshed so that all their data is correct?  In other words, before I do a migration to a new disk, can I run some command that causes all the aliases on my existing disk to be resolved to their targets and then have the contents of the aliases be made fully consistent with that resolved target data.  This would fix the broken paths in the aliases which would allow them to work after the migration to the new disk.

    Try this:
    Make a folder on your destop called F.
    Inside folder F make two subfolders called A and B.
    Inside A create a text file called T.
    Now creas an alias to T which we will call T.alais.
    Test out T.alias.  It should open T.
    Now move T to folder B.
    Again, test out T.alias.  It should open T even though it has been moved.
    Now use CCC to copy F to another disk.
    Delete the original F and empty the trash.
    Now try to open T.alias.  It will fail.
    The reason it fails is that you moved the target of an alias (from A to B) then copied the whole thing (both alias and target) to a new disk.
    I just tried it and it failed for me.
    This is what happens to me en-mass when I move from one disk to another.

  • Outlook Web Access fails after migrating SSL certificate to dedicated SSL gateway

    Hi we have just migrated our SSL certificate form our Outlook exchange server, outlook web access works perfectly but two of our users who have Blackberry devices set up to get their email via owa now fail. 
    Everything worked fine before the migration.
    The new SSL gateway is an Apache box running mod_proxy, mod_SSL and mod_sec.  Protecting the box running owa and IIS6.
    I can provide the http.conf etc, but I can see the traffic passed by Apache but I am getting a 401 message on the way back through to the device.
    Is there a specific IIS/Exchange or Apache config I need to enable to allow BB access?
    Thanks in advance
    Mike

    Hello there!
    You may have run up against some of the complexities between BIS and OWA. There are a couple of circumstances where BIS can't integrate to OWA. Plus, if the mailbox name changed, that may be the problem as well. While I'm neither a BIS nor OWA admin, I can point you to information resources that hopefully can help you.
    Try this article.
    And this one.
    And this one.
    And this one.
    You also can search the public KBs for more relevant articles:
    http://www.blackberry.com/btsc/microsites/microsite.do
    Good luck and let us know!
    Occam's Razor nearly always applies when troubleshooting technology issues!
    If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
    Join our BBM Channels
    BSCF General Channel
    PIN: C0001B7B4   Display/Scan Bar Code
    Knowledge Base Updates
    PIN: C0005A9AA   Display/Scan Bar Code

  • Reports with prompt fails after migration

    Post Author: vrivero
    CA Forum: WebIntelligence Reporting
    Hi everybody!I have developed some reports and afterwards I have migrated them to another Business Objects XI R2 server, in order to use them under InfoView.The problem is that the reports that use a prompt, are failing in the new server, the ones not using prompts are working OK.I'm getting the following error message: error calling API 'openDocumentMDP' error WIS 30270, INF: (might not be the exact message, since I'm getting the message in spanish) I have read that using dd:mm:yyyy as user input date format, might be related to this problem.  Please, help!!

    if the new depreciation engine is active, there might be some differences, please read the note 965032
    blaz

  • 2k12 server VPN fails after migration

    I migrated my DC to another server using VMware ESXi 5.5 to do maintenance on the old server, so this new server is only temporary. The issue I'm having after using the VMware converter standalone (I've also used Veeam) is the VPN - Routing
    and Remote Access no longer will work. When I try connecting through the VPN it gets to the points to verifying username and password, but errors out and I get an error 628.
    What would cause the VPN no longer to work and what logs should I look at? I did read that error 628 is a certificate issue, but I checked the certificate and it matches and isn't expired. I have also tried reconfiguring and uninstalling and reinstalling RRAS,
    but the only difference is under RRAS > IPv4 > General > I now see Ethernet being the only thing new, but when I connect I get the same error 628.
    What should I do?

    Hi,
    Error 628 means that the port was disconnected. This error may occur in a lot of cases.
    To find the reason why the connection is disconnected, please check the event of the
    RemoteAccess in the server.
    Besides, what's type you configured on the RRAS to assign the IP address to remote client. Please make sure that there is valid IP address in the address pool. If the RRAS client can't assgin the address to the client, the connection will be terminated.
    Best Regards.
    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

  • Logging in to RPD in online mode fails after upgrading rpd from 10G to 11g

    Hello guys
    I have an issue here..
    I have everything working in 10g using external table authentications by having 2 init blocks:
    ISAuthorization --- row wize initailization:
    select 'GROUP', UG.GROUPNAME from USER_USERGROUPS FFF, USER U, USERGROUP UG where
    UG.ID = FFF.USERGROUPS and
    U.ID = FFF.IS_SEC_USER and
    UPPER(U.USERNAME) = UPPER(':USER')
    ISAuthentication -- 5 target variables: User, email, loglevel,password, displayname
    select USERNAME, DISPLAYNAME, LOGLEVEL, EMAIL,PASSWORD from IS_SEC_USER
    where UPPER(USERNAME) = UPPER(':USER') and PASSWORD = IS_GET_MD5_VAL(':PASSWORD') ----- IS_GET_MD5_VAL is nothing but a store proc we have to encrypt passwords.
    Everything works perfectly in 10G where a new user gets created in the DB table, passwords assigned and encrypted, then I am able to log in using the new user.
    The admin user in 10G environment was 'Administrator/admin' which was native in 10g. During the upgrade process, I have set the new password for Administrator to be 'admin123' and upgrade was a success.
    Now that I have upgraded the rpd, when I open it in offline mode, I was successful by entering Administrator/admin123. However, when I try to open it in online mode, I encounter the below error:
    nqserror:13024 successful completion of initialization block "*ISAuthentication*" is required
    My 11g version is 11.1.1.6.5
    Any thoughts on how I can debug this issue?
    Thanks in advance

    Just an update:
    In my below set up:
    ISAuthentication -- 5 target variables: User, email, loglevel,password, displayname
    select USERNAME, DISPLAYNAME, LOGLEVEL, EMAIL,PASSWORD from IS_SEC_USER
    where UPPER(USERNAME) = UPPER(':USER') and PASSWORD = IS_GET_MD5_VAL(':PASSWORD')
    Variable User and password was 'Administrator' and 'admin' in 10G when I ran the test on the initialization block, however, when I test the same block in 11g rpd, these 2 variables are blank..
    I do have 'Administrator' user created through weblogic and it is showing up in the rpd.
    Any thoughts on why the variable is not working in 11g rpd?
    Thanks

  • Autoconfig failed after migration

    autoconfig failed with below errors.
    AutoConfig could not successfully execute the following scripts:
    Directory: /euu01/app/euapplqa1/euqacomn/admin/install/EUQA_euebsappqa201
    txkMultinode.sh INSTE8_SETUP 1
    wdbsvr.sh INSTE8_SETUP 1
    [PROFILE PHASE]
    AutoConfig could not successfully execute the following scripts:
    Directory: /euu01/app/euapplqa1/euqacomn/admin/install/EUQA_euebsappqa201
    abmwebprf.sh INSTE8_PRF 1
    affrmprf.sh INSTE8_PRF 1
    afwebprf.sh INSTE8_PRF 1
    amswebprf.sh INSTE8_PRF 1
    ibywebprf.sh INSTE8_PRF 1
    icxwebprf.sh INSTE8_PRF 1
    jtfictx.sh INSTE8_PRF 1
    oksfrmprf.sh INSTE8_PRF 1
    The following error is in most of the scrips.
    ERROR:
    ORA-12154: TNS:could not resolve service name
    Thanks in advance

    AIX to LINUX migration at the apps
    yes it is RAC DB. we are able to connect to apps from apps tier to DB. see below results.
    [euapplqa1@euebsappqa201 EUQA_euebsappqa201]$ sqlplus apps
    SQL*Plus: Release 8.0.6.0.0 - Production on Wed Apr 6 10:34:30 2011
    (c) Copyright 1999 Oracle Corporation. All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
    With the Partitioning, Real Application Clusters, OLAP and Data Mining options
    SQL> exit
    Disconnected from Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
    With the Partitioning, Real Application Clusters, OLAP and Data Mining options
    [euapplqa1@euebsappqa201 EUQA_euebsappqa201]$ sqlplus apps@EUQA
    SQL*Plus: Release 8.0.6.0.0 - Production on Wed Apr 6 10:34:53 2011
    (c) Copyright 1999 Oracle Corporation. All rights reserved.
    Enter password:
    Connected to:
    Oracle Database 10g Enterprise Edition Release 10.2.0.2.0 - 64bit Production
    With the Partitioning, Real Application Clusters, OLAP and Data Mining options

  • Concurrent Reports failing after migrating to UNIX and RAC

    Hi,
    One of our customer was running Oracle Apps 11i (11.5.10.2) with Apps Tier on Windows 2003 and Db Tier on Sun Spark Solaris. Recently they migrated and upgraded the Apps Tier to Sun Spark Solaris and the db tier to Oracle 10g R2 RAC.
    Since then some of the concurrent reports (custom) in the Arabic interface are not working properly. We found out that when the report is run and when the session NLS_LANG is explicitly set to AMERICAN in the Before Report Trigger the report runs fine. But if the NLS_LANG is "ARABIC" the reports returns error like "Program was terminated by signal 11" in Arabic.
    As a workaround we have put NLS_LANG=american in before report trigger to alter the session as a workaround.
    Any hint to resolve this issue?
    Rgds
    Thiru

    Hi,
    Plz find the below log file.
    +-----------------------------
    | Starting concurrent program execution...
    +-----------------------------
    Arguments
    P_ACCOUNT_ID='550454'
    P_INSTANCE_ID='1503139'
    P_ORG_ID='101'
    P_USER_NAME='MOSTAFA'
    APPLLCSP Environment Variable set to :
    XML_REPORTS_XENVIRONMENT is :
    /u01/mmapps/mmappsora/8.0.6/guicommon6/tk60/admin/Tk2Motif_UTF8.rgb
    XENVIRONMENT is set to /u01/mmapps/mmappsora/8.0.6/guicommon6/tk60/admin/Tk2Motif_UTF8.rgb
    Current NLS_LANG and NLS_NUMERIC_CHARACTERS Environment Variables are :
    AMERICAN_AMERICA.UTF8
    stat_low = 8B
    stat_high = 0
    emsg:was terminated by signal 11
    Start of log messages from FND_FILE
    End of log messages from FND_FILE
    Program was terminated by signal 11
    Concurrent Manager encountered an error while running Oracle*Report for your concurrent request 3626976.
    Review your concurrent request log and/or report output file for more detailed information.
    Executing request completion options...
    ------------- 1) PUBLISH -------------
    Beginning post-processing of request 3626976 on node ALHAMRA at 20-JUL-2010 08:56:04.
    Post-processing of request 3626976 failed at 20-JUL-2010 08:56:04 with the error message:
    One or more post-processing actions failed. Consult the OPP service log for details.
    Finished executing request completion options.
    Concurrent request completed
    Current system time is 20-JUL-2010 08:56:04
    ---------------------------------------------------------------------------

  • RSA New Pin mode over PPP dialer

    I have an RSA v6.1 server running SecurID and Steel Belted RADIUS. This is performing authentication requests, via RADIUS, to a Cisco router at an ISP which hosts a PPP dial in service over PSTN.
    Currently I can dial successfully into the system using the standard windows ppp dialer over PSTN using my username and RSA pin+tokencode. However when the token is set to 'New Pin mode' or 'Next Token code' the connection fails to connect as it isn't prompting me for a new pin.
    The RSA website says in order to support Next Token mode & New Pin Mode require the RADIUS client to
    work in terminal mode before initiating ppp negotiation.
    Does this problem ring any bells with anyone out there? What command to use on the cisco device to forward new pin mode requests to the dialer?

    Andrew,
    For new pin mode to work, you will need to enable interactive AKA exec logins. To do this you need to have following configuration.
    interface Group-AsyncX
    ip unnumbered Loopback0
    encapsulation ppp
    async mode interactive ! watch for framed and exec connections
    peer default ip address pool dialin_pool
    no keepalive
    ppp authentication pap ! clear ok for one time pass
    group-range 1/00 1/59
    line x/x 1/x
    login authentication default ! default command doesn't show in config
    no flush-at-activation
    modem InOut
    autoselect during-login
    autoselect ppp
    autocommand ppp neg ! start ppp before giving exec prompt
    To explain. SecureID users will enable a post terminal dial window in DialUp Networking config. When they connect, they will be prompted for user/token and pin if configured for that. If the Exec authentication an
    authorization succeeds. The AS5350 will execute the ppp negotiate command,
    which starts PPP for the session. The user may see garbage text in terminal depending on what version of DialUp Networking or client software they are using. They will need to click on the close/done/continue button.
    The PC and AS5350 will then proceed with PPP.
    However, we are going to by pass ppp authentication because we have already
    authenticated for exec and we don't want the token to time out and cause a failure. PPP authorization should proceed as normal using the credentials provided for exec login.
    Please use CHAP as PAP does not work for interactive authentication.
    Regards,
    ~JG
    Do rate helpful posts

  • Migration to new G/L , balance and line item display after migration

    Hi,
    After migration in the development
    system, the balance of a G/L account
    in a year before the migration date
    cannot be displayed unless the G/L
    account is managed on open item basis
    or is a reconciliation account. The
    message "No data found in 2007" is
    issued.
    Additionally, the correct balance of
    G/L accounts if it is managed on open
    item basis or is a reconciliation
    account cannot be displayed by
    FAGLB03.Only the balance of open items
    can be displayed.
    How can we display all line items of a
    G/L account in year 2007?
    Thanks in advance and kind regards,
    Gökçen.

    Hi Elena,
    This is a very complex area. You need to check the following notes:
    1070629 - FAQs: Migration to General Ledger Accounting (new)
    1014364 - New G/L migration: Information, prerequisites, performance
    You may also have to contact SAP Migration Services
    [email protected]
    Regards,
    Ravi

  • Mail "unexpectedly quits" after migration from snow leopard to new iMac running Mountain Lion

    Mail "unexpectedly quits" after migration from snow leopard time machine files to new iMac running Mountain Lion.  I can run connection doctor OK.  But the activity window is blank.   If you try to open message viewer window then mail program crashes.  Would really like to get my old emails back as the old imac is totally dead.  Thanks for any help. 

    Launch the Console application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
    Step 1
    Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left.
    Enter the name of the crashed application or process in the Filter text field. Post the messages from the time of the last crash, if any — the text, please, not a screenshot. 
    When posting a log extract, be selective. In most cases, a few dozen lines are more than enough.
    Please do not indiscriminately dump thousands of lines from the log into a message.
    Important: Some private information, such as your name, may appear in the log. Edit it out by search-and-replace in a text editor before posting.
    Step 2
    Still in the Console window, look under User Diagnostic Reports for crash reports related to the process. The report name starts with the name of the crashed process, and ends with ".crash". Select the most recent report and post the entire contents — again, the text, not a screenshot. In the interest of privacy, I suggest that, before posting, you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if it’s present (it may not be.) Please don’t post shutdownStall, spin, or hang logs — they're very long and not helpful.

  • ActiveSync is not working properly after migrating to new Exchange 2013 SP1 server?!

    Few weeks ago we have added new Exchange 2013 SP1 onto our existing Exchange 2007 environment. I have migrated my mailbox to the new Ex2013 server. Everything (send/receive - internally/externally, OWA, OutlookAnywhere) for me and the existing Ex2007
    users works fine. The only thing I have trouble with is the ActiveSync! After migrating to the new Ex2013 server my phone stops getting new emails…, existing Ex2007 users don’t have any problems with their mobile phones.
    I did ActiveSync test for my user account with ActiveSync Tester and here is what I have:
    As you can see from the error above  ActiveSync Tester detects ActiveSync on Ex2013 server however something wrong there with form-based auth?! I can’t see any differences in settings for ActiveSync virtual folders in Ex2007 and Ex2013
    virtual folders?!
    What I’m missing here?! Please help.

    Check if the Exchange Servers group does not have the appropriate permission to the mailbox object in Active Directory.
    To check whether inheritance is disabled on the user:
    1.Open Active Directory Users and Computers.
    2.On the menu at the top of the console, click View > Advanced Features.
    3.Locate and right-click the mailbox account in the console, and then click Properties.
    4.Click the Security tab.
    5.Click Advanced.
    6.Make sure that the check box for "Include inheritable permissions from this object's parent" is selected.
    Ref:
    http://technet.microsoft.com/en-us/library/dd439375(v=exchg.80).aspx
    Also check the Virtual directory authentication
    Microsoft-Server-ActiveSync
     •Basic authentication
     •SSL required
     •Requires 128-bit encryption
    Ref:
    http://technet.microsoft.com/en-us/library/gg247612(v=exchg.150).aspx
    Check the IIS log if you are able to find any error message on it
    Exchange Queries

  • Cant find my iTunes library after migration from old PC to new Mac

    Can't find my iTunes library after migration from old PC to new Mac?

    Migration Assistant has transferred itunes content, but where is it on new iMac?
    https://discussions.apple.com/thread/3358162?start=0&tstart=0   <<< click here for a possible answer.

Maybe you are looking for