Openssh bug - GSSAPI authentication fails with Round Robin DNS hosts

Hello,
today I run into this bug:
https://bugzilla.mindrot.org/show_bug.cgi?id=1008
There is a patch for it (the one proposed by Simon Wilkinson which enable the GSSAPITrustDNS and it's known to work), but I noticed that unfortunately the version shipped by Arch Linux does not include it.
Is it possible to consider to rebuild the package (or having a fork) from the patched sources?
Many thanks!

I would check if you are not getting a new IP after a connection drop, that might cause trouble with dyndns.
Do a dns lookup and check that you get the correct IP and not something like 127.0.0.1 or your previous IP. You can also try to connect using IP only after you start having problems and check if the problem is with dns or something else. Check the logs and look for anything suspicious.

Similar Messages

Round robin DNS for load balancing between multiple network adapters (Xserve)

I'm attempting to use 'round robin' DNS to load balance between the two ethernet adapters of an Xserve.
Both ethernet adapters are connected to the same LAN and have static IP addresses of 192.168.2.250 and 192.168.2.251.
The DNS zone for the server's local domain/host (macserver.private) has a machine record with both IP addresses (set up in the Lion Server UI).
Having read up on round robin DNS, I would have expected DNS requests for 'macserver.private' to be answered with the two IP addresses ordered at random, achiving my aim of requests being served at random via each ethernet adapter.
However this doesn't seem to be the case. Doing a 'nslookup' from any of the network clients results in the two IP addresses being listed in the same order everytime. And pinging 'macserver.private' only ever results in a response from the same address.
Does anyone know why this is the case? Does Lion Server use a non-standard DNS configuration? Are there any additional settings I need to configure in Lion's DNS server to make adopt a round robin approach to responding to requests?
Thanks in advance for any help!

Be careful what you wish for
Round Robin DNS is rarely the best option for 'load balancing'. At the very least it's subject to caching at various point on the network - even at the client side, once the client looks up the address it will cache that response - this means that subsequent lookups may be served from the client's cache and not refer back to the server. Therfore any given client will always see the same address until the cache expires.
I suspect this is what you're seeing.
You can minimize this by setting a lower TTL on the records. This should result in the response being cached for a shorter period, meaning the client will make more requests to the server, with a higher change of using the 'other' address.
However, you're also going to run into issues with the server having two interfaces/addresses in the same LAN. This isn't recommended.
As Jonathon mentioned, you may be better off just bonding the two interfaces. This will provide an automatic level of dynamic load balancing without the latency of DNS caches, as well as automatic failover should one link fail (as opposed to round robin DNS which will cause 50% of requests to fail until the client cache expires and a new lookup is performed (and, even then, there's still a chance the client will try to use the failed link).

RDS 2012 Connection Broker and round robin DNS?

Hi,
I have a set-up with three session host servers and one of them is also a connection broker. Round robin DNS is configured for the three servers and the clients, who are all on our internal networks, can connect just fine to the farm name. My
questions is, is there any point in having round robin configured since the connections still need to go through the CB? Could i just have one DNS-record for the farm name pointing to the CB? My initial though was that round robin would add
redundancy, but does it realy? I've tried to find answers on this but none of the articles and posts i've found are realy clear to me.
Quite often the initial connection for clients is slow and my theory is that it's caused by the RR DNS records.

Hi,
Thank you for posting in Windows Server Forum.
I think we need to have DNS RR entries for our RDS environment because DNS RR will be used by RDP clients to connect to the RD Connection Broker servers. Once when we allowed the entries of all server to DNS RR, when there is alternate connection need to capture
for following server it will provided by DNS RR.
During the connection process, the end nodes (RDVH, RDSH, RDWA) will get configured with all the RD Connection Broker server names, and they will randomly choose one to connect to. The RDP clients will use the DNS Round Robin name configured to connect to the
RD Connection Broker servers randomly.
More information.
RD Connection Broker High Availability in Windows Server 2012
http://blogs.msdn.com/b/rds/archive/2012/06/27/rd-connection-broker-high-availability-in-windows-server-2012.aspx
Hope it helps!
Thanks.
Dharmesh Solanki
TechNet Community Support

Load Balancing With Round Robin

Hi,
I have two iAS instances, each on their own box, and one iWS instance
running on a third box. I have setup the web connector to use round
robin and added the server weights. I believe that is all that is to it
to do simple load balancing with iAS. The problem is is that the
requests only go to one iAS instance. The server weights are 1 and 1.
Am I missing something here?
Thanks

Could be lots of things.
The most common misconfiguration is testing an application that is deployed "local". This application option effectively disables load balancing.
Another common mistake is to either not update the configuration of the webconnector (if the webconnector
has a seperate configuration LDAP) or to not restart
the webconnector after the configuration change.
Hope this helps. There's more things we could try, but I'll hope its one of these two easy things.

DDNS Authentication Fails with E2000

Just purchased an E2000 (Firmware version 1.0.03) to use with DDNS. Much to my surprise there seems to be a problem with saving the password at the confiuration screen.
Settings;
- Service Type = DynDNS.org
- Username = <my user name.
- Password = <my password>
- Hostname = <my host name>
- System = Dynamic
With the above settings entered and the Update button pressed favourable results are obtained; the router reports that DynDNS.org updates okay. However once the "Save Settings" button is pressed an update fails with the error "Authorization failur bad ID or password"
Is anyone else experiencing this issue? Is the password field limited to certian characters?

same thing happens for me with my E2000 running 1.0.03. if i enter my username and password for dyndns into the web interface and click Update, i get the "DDNS is updated successfully" message. but then i'll immediately press Update again and i'll get "Authorization fails (username or passwords)".
changing my password on dyndns and then updating my router configs didn't do the trick (which isn't much of a surprise).

Exchange 2013 CAS - Round Robin DNS not working properly

I have exchange 2013 server (2MB, 2CAS) server. I created two dns records for mail.test.com, autodiscover.test.com pointing to my two CAS servers.
But the problem is if i switched of one cas server, client outlook not connecting automatically to other CAS server. By restarting the outlook also its not working. By restarting the system or running the command ipconfig /flushdns in command prompt, it
working.
is there any configuration iam missing, please advice how to achieve decent load balancing in Exchange 2013 CAS without going for third party Loadbalancer...

I have exchange 2013 server (2MB, 2CAS) server. I created two dns records for mail.test.com, autodiscover.test.com pointing to my two CAS servers.
But the problem is if i switched of one cas server, client outlook not connecting automatically to other CAS server. By restarting the outlook also its not working. By restarting the system or running the command ipconfig /flushdns in command prompt, it
working.
is there any configuration iam missing, please advice how to achieve decent load balancing in Exchange 2013 CAS without going for third party Loadbalancer...
If a CAS role server is down or unable to service clients, you have to remove it from DNS round-robin consideration manually. There is no health check with DNS round-robin unlike a true load balancer.
Also, I would set the TTL to a low value for the CAS servers in the round-robin.
Twitter!: Please Note: My Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

BUG: File History fails with no warning- Event ID 201

I apologize for the long post but I want to summarize everything I've learned about this so far, as it looks like a critical bug.
I am unable to get File History to backup my files with Windows 8.1. I set up a 1 TB USB HDD as the target drive and it seemed to run for a minute or two, and then quit completely without any warning. It created two empty folders on the target
HDD, but no data was backed up. I then clicked "Run Now" to try and get it going again, but nothing happened.
Under "Advanced Settings" I opened the event log, and saw an Event ID 201 was created each time File History attempted to run: "Unable to scan user libraries for changes and perform backup of modified files for configuration C:\Users\MyUserName\AppData\Local\Microsoft\Windows\FileHistory\Configuration\Config".
I've pasted the entire error below. The "Event Log Online Help" link opens to "Page not Found" on TechNet.
A Google search revealed other users are experiencing this problem, too (links below). Some people have been able to solve it by excluding libraries and/or moving all of their data out of the libraries then replacing it one folder at time, running
FH, and repeating until they find the "offending" file by error 201 occurring.
There are reports of similar problems with Event IDs 202, 203 and 204. A similar, but separate error is "Unusual condition was encountered during scanning user libraries for changes and performing backup of modified files for configuration C:\Users\MyUserName\AppData\Local\Microsoft\Windows\FileHistory\Configuration\Config".
Based on others' posts, the problem appears to be a bug in how FH handles files/folder names that are similar,
contain unusual (but legal) characters, and shortcuts ("reparse error").   The second bug is, regardless of which Event ID, that
FH does not alert the user when it fails, so you have no idea your files are not being backed up. Even if you are able to eliminate the problem once, there is no guarantee that it won't happen again. Once error 201 occurs, File
History is dead in the water and unfortunately since Windows 7 File Backup was removed, there is no alternative data backup method available.
If anyone has an idea of how to solve or work around this problem (i.e. under exactly what filename conditions FH fails), please post. I have Windows 8.1 installed on drive C, Windows 7 on drive D, and a data partition E onto which I moved all my Libraries.
The Win 7 and 8.1 libraries are in separate folders and not linked in any way, so 8.1 is not trying to back up 7's data. However, the partition arrangement does not appear relevant.
Thanks!
Related links:
http://answers.microsoft.com/en-us/windows/forum/windows_8-files/filehistory-unable-to-scan-user-libraries-for/b43183bc-eeaa-4d1a-bda4-0ab9dcf061be
http://social.technet.microsoft.com/Forums/windows/en-US/ccd27fbc-2d95-4ab7-bdd1-2c0c6a43bd2f/file-history
My Event Log:
Log Name:      Microsoft-Windows-FileHistory-Engine/BackupLog
Source:        Microsoft-Windows-FileHistory-Core
Date:          4/3/2014 11:01:19 PM
Event ID:      201
Task Category: None
Level:         Error
Keywords:
User:          SYSTEM
Computer:      ThinkPad-Edge
Description:
Unable to scan user libraries for changes and perform backup of modified files for configuration C:\Users\inert_000\AppData\Local\Microsoft\Windows\FileHistory\Configuration\Config
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
    <Provider Name="Microsoft-Windows-FileHistory-Core" Guid="{B447B4DB-7780-11E0-ADA3-18A90531A85A}" />
    <EventID>201</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x1000000000000000</Keywords>
    <TimeCreated SystemTime="2014-04-03T14:01:19.267846200Z" />
    <EventRecordID>12</EventRecordID>
    <Correlation ActivityID="{388E273A-4F3D-0001-022B-8E383D4FCF01}" />
    <Execution ProcessID="556" ThreadID="5128" />
    <Channel>Microsoft-Windows-FileHistory-Engine/BackupLog</Channel>
    <Computer>ThinkPad-Edge</Computer>
    <Security UserID="S-1-5-18" />
</System>
<EventData>
    <Data Name="Hr">2147747327</Data>
    <Data Name="ConfigFilePath">C:\Users\inert_000\AppData\Local\Microsoft\Windows\FileHistory\Configuration\Config</Data>
</EventData>
</Event>

Hi, thanx for the post. It helped me to fix my Problem with file history.
In my case it was the spelling of some files. I'm German and we have some Special chars like ä,ö,ü and ß.
The "Problem" is that You can spell These also in a different way for example "ä" is same like "ae" and "ß" is same like "ss" .
If I Name one file like "groß.txt" and the other one "gross.txt" file history won't work! I don't know why, probably MS conversts the Name in the background or whatever - but this really
sucks!
Even more that You don't get informed! Only when checking the eventlog - and not even in the "normal" eventlog - You have to go to "Microsoft-Windows-FileHistory-Engine/BackupLog" - well, how often does one look up this??
I think file history is quite useless in this state as it does not inform the user about Problems with the backup. And I really don't want to get "informed" when I Need to restore some files...
Cheers
To life is christ, to die is gain...

With Cisco Secure ACS For Windows TACACS+, authentication fails with AD

I am setting up a Cisco Secure ACS 4.2 server to act as a TACACS server for Switches and Routers I am using Windows 2003 server for the ACS,
and a Windows 2003 Active Directory server. The AD server is fine, as it is used for many other things.
I have set up ACS as defined nit he installation guide, including all the steps in the 'Member Server' section of the install guide
when using AD as an external database (i.e. setting up the services to run with a domain admin account, setting up a machine called 'CISCO'
on the domain etc).
I've set the unknown user policy to use the Windows database if the internal database doesn;t contain the user details.
If I add a user to the internal database, the authentication goes through fine, with an entry in the 'Passed Authentications' log,
02/24/2010,05:07:03,Authen failed,eXXXX,Network Administrators(NDG) ,X.X.X.X,(Default),Internal error,,(geting error message as INternal Error)
I've scoured google etc, and just cannot come up with any reason why this should be happening.
I've followed all the install guides to the letter. I need to get this up and running as soon as possible,
so am looking forward to finding out if anyone can help me with this one!
THanks and regards
Sharan

Hi Jesse,
Thasts a great answer and Soution.
My previous version was 4.2 and it was installed on 64 bit machine hence getting internal Error.
After this answer i have upgraded it to ACS4.2.1 and its started working fine
Thanks very much for the help
Dipu

OBIEE 11.1.1.7 external database authentication fails with hashed passwords.

Hi .
I use an external database ( Oracle database 11g release 11.2.0.1.0) to authenticate user with OBIEE 11.1.1.7.
I configured SQL Authentication provider as my provider ,It works OK with :enabled Plaintext Passwords Enabled option and password is stored as plain text.
But It fails when I disable this option and want to authenticate with hashed passwords.It gives Authenticate Denied error.
In Provider Specific tab there are some parameters which might need changes:
1-Password Algorithm:??
2-Password Style:??
3-SQL Get Users Password:SELECT U_PASSWORD FROM USERS WHERE U_NAME = ?
How can I find correct values for options 1 and 2 form my external database?
And Is it need to rewrite query in option 3 ?
Please find attach files.

Hi,
I too faced same issue when I was installing OBIEE 11.1.1.7.0 on windows7 64bit.
Please refer the below links.
http://satyaobieesolutions.blogspot.in/2013/05/configuration-action-creating-domain.html
http://satyaobieesolutions.blogspot.in/2013/05/obiee-111170-simplesoftware-installation.html
http://satyaobieesolutions.blogspot.in/2012/06/obiee-11.html
Hope this help's
Thanks,
Satya

Wiki-Server, authentication fails with iPad

Hello everybody,
I have made a clean installation of OS X Server.
I see a strange behavior with Wiki. When I try to authenticate with the iPad it says: "Failed to log in sucessfully" ?? I can, however access the Wikis that are "publicly" available without any issue, but what about the "hidden" ones?!
When I use the Macbook, Firefox on a PC, or the iPhone then it's all fine. Authentication works as expected.
Am I missing here something?

I have this exact issue in my school, massively annoying being as we have a 1:1 rollout of over a thousand iPads and had invested considerable time developing resources on the wiki, and now, the only device it doesn't work on, is the same device that we have given to all our pupils.
Charles

802.1x authentication fail with MS IAS

dear friends,
i want to configre .1x authentication for my wireless user and trying to integrat our controllers with MS WINDOWS Server 2008 to configure as a Radius server
i followed this documentation here is the link
http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080921f67.shtml
even i configured my windows wireless adaptor in order to user .1x authentication
but i am seeing this following error in my wlc debugging
(WiSM-slot24-1) >debug dot1x events enable
(WiSM-slot24-1) >
(WiSM-slot24-1) >
(WiSM-slot24-1) >*dot1xMsgTask: Jan 04 12:09:10.053: ac:72:89:0b:3b:87 Not sending EAP-Failure for STA ac:72:89:0b:3b:87
*apfReceiveTask: Jan 04 12:09:30.052: ac:72:89:0b:3b:87 apfMsAssoStateDec
*apfMsConnTask_0: Jan 04 12:09:31.284: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:09:31.284: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:09:31.284: 00:13:e8:3e:26:bf apfMsAssoStateInc
*dot1xMsgTask: Jan 04 12:09:31.285: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:09:31.285: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:31.404: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:31.404: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.701: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.701: 00:13:e8:3e:26:bf Received Identity Response (count=2) from mobile 00:13:e8:3e:26:bf
*aaaQueueReader: Jan 04 12:09:36.702: 00000000: 01 e4 00 e9 30 a9 b6 e0 62 1e 49 73 f7 9a 54 95 ....0...b.Is..T.
*aaaQueueReader: Jan 04 12:09:36.702: 00000010: 70 58 ee 89 01 06 73 61 72 69 1f 13 30 30 2d 31 pX....sari..00-1
*aaaQueueReader: Jan 04 12:09:36.702: 00000020: 33 2d 65 38 2d 33 65 2d 32 36 2d 62 66 1e 21 30 3-e8-3e-26-bf.!0
*aaaQueueReader: Jan 04 12:09:36.702: 00000030: 38 2d 31 37 2d 33 35 2d 63 36 2d 38 33 2d 39 30 8-17-35-c6-83-90
*aaaQueueReader: Jan 04 12:09:36.702: 00000040: 3a 4b 4b 55 48 20 45 6d 70 6c 6f 79 65 65 05 06 :KKUH.Employee..
*aaaQueueReader: Jan 04 12:09:36.702: 00000050: 00 00 00 1d 1a 31 00 00 00 09 01 2b 61 75 64 69 .....1.....+audi
*aaaQueueReader: Jan 04 12:09:36.702: 00000060: 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 61 38 t-session-id=0a8
*aaaQueueReader: Jan 04 12:09:36.702: 00000070: 37 34 30 65 31 30 30 30 30 30 30 35 37 34 66 30 740e1000000574f0
*aaaQueueReader: Jan 04 12:09:36.702: 00000080: 34 31 37 35 30 04 06 0a 87 40 e1 20 13 57 49 53 [email protected]
*aaaQueueReader: Jan 04 12:09:36.703: 00000090: 4d 41 31 2d 4b 4b 55 48 2d 43 74 72 6c 31 1a 0c MA1-KKUH-Ctrl1..
*aaaQueueReader: Jan 04 12:09:36.703: 000000a0: 00 00 37 63 01 06 00 00 00 01 06 06 00 00 00 02 ..7c............
*aaaQueueReader: Jan 04 12:09:36.703: 000000b0: 0c 06 00 00 05 14 3d 06 00 00 00 13 40 06 00 00 ......=.....@...
*aaaQueueReader: Jan 04 12:09:36.703: 000000c0: 00 0d 41 06 00 00 00 06 51 04 38 39 4f 0b 02 02 ..A.....Q.89O...
*aaaQueueReader: Jan 04 12:09:36.703: 000000d0: 00 09 01 73 61 72 69 50 12 2d f7 03 b8 07 e9 d5 ...sariP.-......
*aaaQueueReader: Jan 04 12:09:36.703: 000000e0: 37 22 60 09 73 03 e9 42 e1                       7"`.s..B.
*radiusTransportThread: Jan 04 12:09:36.707: 00000000: 0b e4 00 5a 54 f5 61 c6 26 e9 42 1d 1a e7 ed b9 ...ZT.a.&.B.....
*radiusTransportThread: Jan 04 12:09:36.707: 00000010: cd 74 26 4a 1b 06 00 00 00 1e 4f 08 01 03 00 06 .t&J......O.....
*radiusTransportThread: Jan 04 12:09:36.707: 00000020: 19 20 18 26 67 0f 07 b7 00 00 01 37 00 01 17 00 ...&g......7....
*radiusTransportThread: Jan 04 12:09:36.707: 00000030: fe 80 00 00 00 00 00 00 91 e7 18 d2 65 39 b8 bb ............e9..
*radiusTransportThread: Jan 04 12:09:36.707: 00000040: 00 00 00 04 06 5d ff 0f 50 12 8d 71 a1 9d 16 1b .....]..P..q....
*radiusTransportThread: Jan 04 12:09:36.707: 00000050: 29 3a 3c 2d 55 04 16 df 68 3b                    ):<-U...h;
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.707: 00:13:e8:3e:26:bf Processing Access-Challenge for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.707: 00:13:e8:3e:26:bf Sending EAP Request from AAA to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.788: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.788: 00:13:e8:3e:26:bf Received EAP Response from mobile 00:13:e8:3e:26:bf (EAP Id 3, EAP Type 25)
*aaaQueueReader: Jan 04 12:09:36.788: 00000000: 01 e5 01 7c ad c6 f6 0c cf 17 49 d8 2e 04 29 91 ...|......I...).
*aaaQueueReader: Jan 04 12:09:36.789: 00000010: c2 55 01 9a 01 06 73 61 72 69 1f 13 30 30 2d 31 .U....sari..00-1
*aaaQueueReader: Jan 04 12:09:36.789: 00000020: 33 2d 65 38 2d 33 65 2d 32 36 2d 62 66 1e 21 30 3-e8-3e-26-bf.!0
*aaaQueueReader: Jan 04 12:09:36.789: 00000030: 38 2d 31 37 2d 33 35 2d 63 36 2d 38 33 2d 39 30 8-17-35-c6-83-90
*aaaQueueReader: Jan 04 12:09:36.789: 00000040: 3a 4b 4b 55 48 20 45 6d 70 6c 6f 79 65 65 05 06 :KKUH.Employee..
*aaaQueueReader: Jan 04 12:09:36.789: 00000050: 00 00 00 1d 1a 31 00 00 00 09 01 2b 61 75 64 69 .....1.....+audi
*aaaQueueReader: Jan 04 12:09:36.789: 00000060: 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 61 38 t-session-id=0a8
*aaaQueueReader: Jan 04 12:09:36.789: 00000070: 37 34 30 65 31 30 30 30 30 30 30 35 37 34 66 30 740e1000000574f0
*aaaQueueReader: Jan 04 12:09:36.789: 00000080: 34 31 37 35 30 04 06 0a 87 40 e1 20 13 57 49 53 [email protected]
*aaaQueueReader: Jan 04 12:09:36.789: 00000090: 4d 41 31 2d 4b 4b 55 48 2d 43 74 72 6c 31 1a 0c MA1-KKUH-Ctrl1..
*radiusTransportThread: Jan 04 12:09:36.790: 00000000: 0b e5 05 6e 9d c6 53 a6 21 48 42 c4 6e 4e 5d 3e ...n..S.!HB.nN]>
*radiusTransportThread: Jan 04 12:09:36.790: 00000010: 87 9c f1 63 1b 06 00 00 00 1e 4f ff 01 04 05 10 ...c......O.....
*radiusTransportThread: Jan 04 12:09:36.790: 00000020: 19 c0 00 00 06 b8 16 03 01 06 b3 02 00 00 4d 03 ..............M.
*radiusTransportThread: Jan 04 12:09:36.790: 00000030: 01 4f 04 17 d8 eb 5f 5f 87 af 5b 96 9a 51 70 53 .O....__..[..QpS
*radiusTransportThread: Jan 04 12:09:36.790: 00000040: a9 96 a2 ba 4b 8a b4 2e f9 5a 58 04 8a 09 72 8f ....K....ZX...r.
*radiusTransportThread: Jan 04 12:09:36.790: 00000050: 03 20 a6 09 00 00 49 92 57 a1 45 2b 88 1a f7 ae ......I.W.E+....
*radiusTransportThread: Jan 04 12:09:36.790: 00000060: 9e 1a 43 74 f8 e4 7d 9a 98 43 f7 87 dc 92 e8 d4 ..Ct..}..C......
*radiusTransportThread: Jan 04 12:09:36.791: 00000070: 1e 08 00 2f 00 00 05 ff 01 00 01 00 0b 00 03 cf .../............
*radiusTransportThread: Jan 04 12:09:36.791: 00000080: 00 03 cc 00 03 c9 30 82 03 c5 30 82 02 ad a0 03 ......0...0.....
*radiusTransportThread: Jan 04 12:09:36.791: 00000090: 02 01 02 02 10 71 01 39 24 e8 f9 31 9c 41 ed 84 .....q.9$..1.A..
*radiusTransportThread: Jan 04 12:09:36.791: 000000a0: ce b9 3a 02 51 30 0d 06 09 2a 86 48 86 f7 0d 01 ..:.Q0...*.H....
*radiusTransportThread: Jan 04 12:09:36.791: 000000b0: 01 05 05 00 30 69 31 12 30 10 06 0a 09 92 26 89 ....0i1.0.....&.
*radiusTransportThread: Jan 04 12:09:36.791: 000000c0: 93 f2 2c 64 01 19 16 02 73 61 31 13 30 11 06 0a ..,d....sa1.0...
*radiusTransportThread: Jan 04 12:09:36.791: 000000d0: 09 92 26 89 93 f2 2c 64 01 19 16 03 65 64 75 31 ..&...,d....edu1
*radiusTransportThread: Jan 04 12:09:36.791: 000000e0: 1a 30 18 06 0a 09 92 26 89 93 f2 2c 64 01 19 16 .0.....&...,d...
*radiusTransportThread: Jan 04 12:09:36.791: 000000f0: 0a 6b 6b 75 68 64 6f 6d 61 69 6e 31 22 30 20 06 .kkuhdomain1"0..
*radiusTransportThread: Jan 04 12:09:36.791: 00000100: 03 55 04 03 13 19 6b 6b 75 68 64 6f 6d 61 69 6e .U....kkuhdomain
*radiusTransportThread: Jan 04 12:09:36.791: 00000110: 2d 57 49 4e 2d 54 45 52 4d 4f ff 53 52 56 2d 43 -WIN-TERMO.SRV-C
*radiusTransportThread: Jan 04 12:09:36.791: 00000120: 41 30 1e 17 0d 31 32 30 31 30 34 30 36 32 37 35 A0...12010406275
*radiusTransportThread: Jan 04 12:09:36.791: 00000130: 37 5a 17 0d 31 37 30 31 30 34 30 36 33 37 35 34 7Z..170104063754
*radiusTransportThread: Jan 04 12:09:36.791: 00000140: 5a 30 69 31 12 30 10 06 0a 09 92 26 89 93 f2 2c Z0i1.0.....&...,
*radiusTransportThread: Jan 04 12:09:36.791: 00000150: 64 01 19 16 02 73 61 31 13 30 11 06 0a 09 92 26 d....sa1.0.....&
*radiusTransportThread: Jan 04 12:09:36.791: 00000160: 89 93 f2 2c 64 01 19 16 03 65 64 75 31 1a 30 18 ...,d....edu1.0.
*radiusTransportThread: Jan 04 12:09:36.791: 00000170: 06 0a 09 92 26 89 93 f2 2c 64 01 19 16 0a 6b 6b ....&...,d....kk
*radiusTransportThread: Jan 04 12:09:36.791: 00000180: 75 68 64 6f 6d 61 69 6e 31 22 30 20 06 03 55 04 uhdomain1"0...U.
*radiusTransportThread: Jan 04 12:09:36.791: 00000190: 03 13 19 6b 6b 75 68 64 6f 6d 61 69 6e 2d 57 49 ...kkuhdomain-WI
*radiusTransportThread: Jan 04 12:09:36.791: 000001a0: 4e 2d 54 45 52 4d 53 52 56 2d 43 41 30 82 01 22 N-TERMSRV-CA0.."
*radiusTransportThread: Jan 04 12:09:36.791: 000001b0: 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 0...*.H.........
*radiusTransportThread: Jan 04 12:09:36.791: 000001c0: 82 01 0f 00 30 82 01 0a 02 82 01 01 00 bb 45 f5 ....0.........E.
*radiusTransportThread: Jan 04 12:09:36.791: 000001d0: 19 c2 7b 0a 5d a5 a2 fb da c6 60 9e e5 60 44 62 ..{.].....`..`Db
*radiusTransportThread: Jan 04 12:09:36.791: 000001e0: ef 53 23 a2 80 4d 86 3e 6f 60 83 80 c5 99 20 d4 .S#..M.>o`......
*radiusTransportThread: Jan 04 12:09:36.791: 000001f0: 52 dc 4f c5 5d 0b 6b c4 b9 af 8b 52 b0 49 bd 2f R.O.].k....R.I./
*radiusTransportThread: Jan 04 12:09:36.791: 00000200: 6d 2f b0 fc b1 ba 6e 91 eb 49 c6 59 4f d1 af 07 m/....n..I.YO...
*radiusTransportThread: Jan 04 12:09:36.791: 00000210: 3c d2 eb a6 69 5b fc 2c 4f ff 92 55 15 5c 53 dd <...i[.,O..U.\S.
*radiusTransportThread: Jan 04 12:09:36.791: 00000220: d7 a9 90 86 25 d4 0f 91 20 70 e0 47 46 2a 92 a4 ....%....p.GF*..
*radiusTransportThread: Jan 04 12:09:36.791: 00000230: 3c e2 9a d8 a7 27 f7 3f d5 6a 1b ee 99 dc 47 00 <....'.?.j....G.
*radiusTransportThread: Jan 04 12:09:36.791: 00000240: 0d d7 49 b2 93 db 74 75 63 6e 83 77 69 20 35 08 ..I...tucn.wi.5.
*radiusTransportThread: Jan 04 12:09:36.791: 00000250: 34 c6 a6 f2 7d 02 19 c5 b3 34 cd 16 ec af fd f9 4...}....4......
*radiusTransportThread: Jan 04 12:09:36.791: 00000260: eb d5 aa 67 35 1d 2b 2a 5d 32 ca 43 aa 3b 88 67 ...g5.+*]2.C.;.g
*radiusTransportThread: Jan 04 12:09:36.791: 00000270: 91 be 16 e7 99 ef c1 0d 47 79 6c 3b 4a 5c c8 9d ........Gyl;J\..
*radiusTransportThread: Jan 04 12:09:36.791: 00000280: de bb 26 c6 5e f0 45 42 d2 4b 73 93 8e 3b f1 18 ..&.^.EB.Ks..;..
*radiusTransportThread: Jan 04 12:09:36.791: 00000290: ae cb 46 56 ab 89 24 21 ba c1 e7 ea d1 db 44 1c ..FV..$!......D.
*radiusTransportThread: Jan 04 12:09:36.791: 000002a0: 36 7f 4c 28 33 ba 5c aa be d0 ab 2e 9f 50 83 27 6.L(3.\......P.'
*radiusTransportThread: Jan 04 12:09:36.791: 000002b0: 52 c5 66 f7 73 df 22 ef bf 5c b8 6f 9d 22 91 6f R.f.s."..\.o.".o
*radiusTransportThread: Jan 04 12:09:36.791: 000002c0: 35 af 91 2b 86 6f b7 3a 8d c7 c2 bd 69 af 8f 02 5..+.o.:....i...
*radiusTransportThread: Jan 04 12:09:36.791: 000002d0: 03 01 00 01 a3 69 30 67 30 13 06 09 2b 06 01 04 .....i0g0...+...
*radiusTransportThread: Jan 04 12:09:36.791: 000002e0: 01 82 37 14 02 04 06 1e 04 00 43 00 41 30 0e 06 ..7.......C.A0..
*radiusTransportThread: Jan 04 12:09:36.791: 000002f0: 03 55 1d 0f 01 01 ff 04 04 03 02 01 86 30 0f 06 .U...........0..
*radiusTransportThread: Jan 04 12:09:36.791: 00000300: 03 55 1d 13 01 01 ff 04 05 30 03 01 01 ff 30 1d .U.......0....0.
*radiusTransportThread: Jan 04 12:09:36.791: 00000310: 06 03 55 1d 0e 04 16 4f ff 04 14 a9 8e ff a4 a8 ..U....O........
*radiusTransportThread: Jan 04 12:09:36.791: 00000320: d9 ae 15 0d d1 61 1e 4a e6 0b 08 b9 29 ae be 30 .....a.J....)..0
*radiusTransportThread: Jan 04 12:09:36.791: 00000330: 10 06 09 2b 06 01 04 01 82 37 15 01 04 03 02 01 ...+.....7......
*radiusTransportThread: Jan 04 12:09:36.791: 00000340: 00 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 .0...*.H........
*radiusTransportThread: Jan 04 12:09:36.791: 00000350: 03 82 01 01 00 39 08 3c 7b 40 d9 5e 86 13 dd 69 .....9.<{@.^...i
*radiusTransportThread: Jan 04 12:09:36.791: 00000360: 72 f6 31 0d 04 f2 01 53 f7 3b 6a 15 9d 0b 44 88 r.1....S.;j...D.
*radiusTransportThread: Jan 04 12:09:36.791: 00000370: da e1 0e 47 74 fe a8 68 6c 06 92 95 e3 8c 77 a7 ...Gt..hl.....w.
*radiusTransportThread: Jan 04 12:09:36.791: 00000380: e2 1d 56 17 44 31 40 db d5 aa bf 7a 5e bc 86 d3 [email protected]^...
*radiusTransportThread: Jan 04 12:09:36.791: 00000390: 61 5f 5d 51 c0 51 56 58 13 5a 96 be 45 54 ab 9c a_]Q.QVX.Z..ET..
*radiusTransportThread: Jan 04 12:09:36.791: 000003a0: 12 ef 4a fe 5b db 69 ef fb 25 e8 a9 57 6f 9a 65 ..J.[.i..%..Wo.e
*radiusTransportThread: Jan 04 12:09:36.791: 000003b0: 41 ef d4 88 28 91 cb ac 35 a2 aa b2 49 fb 9b 58 A...(...5...I..X
*radiusTransportThread: Jan 04 12:09:36.791: 000003c0: cf 72 16 f8 da 46 b0 06 9a 7f 59 79 27 d4 73 a2 .r...F....Yy'.s.
*radiusTransportThread: Jan 04 12:09:36.791: 000003d0: a7 81 52 45 d4 2e c0 87 6b cf 82 a8 67 17 46 3a ..RE....k...g.F:
*radiusTransportThread: Jan 04 12:09:36.791: 000003e0: 6e 52 06 7a 3c e7 7d a5 5a ef d7 05 68 4e 6c 29 nR.z<.}.Z...hNl)
*radiusTransportThread: Jan 04 12:09:36.791: 000003f0: 6d ea 29 59 8f 46 1b 1a 50 c4 45 c7 38 39 b1 bf m.)Y.F..P.E.89..
*radiusTransportThread: Jan 04 12:09:36.791: 00000400: 6b 32 85 e5 89 df 68 13 fa ee ff 1c c4 77 73 e8 k2....h......ws.
*radiusTransportThread: Jan 04 12:09:36.791: 00000410: 52 b6 e8 24 9a 6b 4f ff 6f b2 d1 04 6c 8d 68 eb R..$.kO.o...l.h.
*radiusTransportThread: Jan 04 12:09:36.791: 00000420: 8a e2 f4 5e 4e 59 91 fb 67 08 ef 84 56 83 82 03 ...^NY..g...V...
*radiusTransportThread: Jan 04 12:09:36.791: 00000430: 92 4e fc ce 8d 80 74 76 3f 30 6b 4f 03 a8 6b 91 .N....tv?0kO..k.
*radiusTransportThread: Jan 04 12:09:36.791: 00000440: 89 0f d6 66 41 4d 4a be 3f c5 a8 22 4f 18 cd f8 ...fAMJ.?.."O...
*radiusTransportThread: Jan 04 12:09:36.791: 00000450: e7 b3 c6 1c 24 cf 06 0d 00 02 87 03 01 02 40 02 ....$.........@.
*radiusTransportThread: Jan 04 12:09:36.791: 00000460: 81 00 61 30 5f 31 0b 30 09 06 03 55 04 06 13 02 ..a0_1.0...U....
*radiusTransportThread: Jan 04 12:09:36.791: 00000470: 55 53 31 17 30 15 06 03 55 04 0a 13 0e 56 65 72 US1.0...U....Ver
*radiusTransportThread: Jan 04 12:09:36.791: 00000480: 69 53 69 67 6e 2c 20 49 6e 63 2e 31 37 30 35 06 iSign,.Inc.1705.
*radiusTransportThread: Jan 04 12:09:36.791: 00000490: 03 55 04 0b 13 2e 43 6c 61 73 73 20 33 20 50 75 .U....Class.3.Pu
*radiusTransportThread: Jan 04 12:09:36.791: 000004a0: 62 6c 69 63 20 50 72 69 6d 61 72 79 20 43 65 72 blic.Primary.Cer
*radiusTransportThread: Jan 04 12:09:36.791: 000004b0: 74 69 66 69 63 61 74 69 6f 6e 20 41 75 74 68 6f tification.Autho
*radiusTransportThread: Jan 04 12:09:36.791: 000004c0: 72 69 74 79 00 77 30 75 31 0b 30 09 06 03 55 04 rity.w0u1.0...U.
*radiusTransportThread: Jan 04 12:09:36.791: 000004d0: 06 13 02 55 53 31 18 30 16 06 03 55 04 0a 13 0f ...US1.0...U....
*radiusTransportThread: Jan 04 12:09:36.791: 000004e0: 47 54 45 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 GTE.Corporation1
*radiusTransportThread: Jan 04 12:09:36.791: 000004f0: 27 30 25 06 03 55 04 0b 13 1e 47 54 45 20 43 79 '0%..U....GTE.Cy
*radiusTransportThread: Jan 04 12:09:36.791: 00000500: 62 65 72 54 72 75 73 74 20 53 6f 6c 75 74 69 6f berTrust.Solutio
*radiusTransportThread: Jan 04 12:09:36.791: 00000510: 6e 73 2c 20 49 4f 21 6e 63 2e 31 23 30 21 06 03 ns,.IO!nc.1#0!..
*radiusTransportThread: Jan 04 12:09:36.791: 00000520: 55 04 03 13 1a 47 54 45 20 43 79 62 65 72 54 72 U....GTE.CyberTr
*radiusTransportThread: Jan 04 12:09:36.791: 00000530: 75 73 74 20 47 6c 18 26 67 0f 07 b7 00 00 01 37 ust.Gl.&g......7
*radiusTransportThread: Jan 04 12:09:36.791: 00000540: 00 01 17 00 fe 80 00 00 00 00 00 00 91 e7 18 d2 ................
*radiusTransportThread: Jan 04 12:09:36.791: 00000550: 65 39 b8 bb 00 00 00 04 06 5d ff 0f 50 12 9d 01 e9.......]..P...
*radiusTransportThread: Jan 04 12:09:36.791: 00000560: 7b 9f 89 97 05 84 42 b9 61 15 7c 41 3a 35        {.....B.a.|A:5
*aaaQueueReader: Jan 04 12:09:36.792: 000000a0: 00 00 37 63 01 06 00 00 00 01 06 06 00 00 00 02 ..7c............
*aaaQueueReader: Jan 04 12:09:36.792: 000000b0: 0c 06 00 00 05 14 3d 06 00 00 00 13 40 06 00 00 ......=.....@...
*aaaQueueReader: Jan 04 12:09:36.792: 000000c0: 00 0d 41 06 00 00 00 06 51 04 38 39 4f 78 02 03 ..A.....Q.89Ox..
*aaaQueueReader: Jan 04 12:09:36.792: 000000d0: 00 76 19 80 00 00 00 6c 16 03 01 00 67 01 00 00 .v.....l....g...
*aaaQueueReader: Jan 04 12:09:36.792: 000000e0: 63 03 01 4f 04 17 84 fb 31 55 17 31 40 05 0e 94 c..O....1U.1@...
*aaaQueueReader: Jan 04 12:09:36.792: 000000f0: 9d e5 43 48 92 8d a7 35 3d 93 10 1e d9 46 62 ec ..CH...5=....Fb.
*aaaQueueReader: Jan 04 12:09:36.792: 00000100: 3b 8f f0 00 00 18 00 2f 00 35 00 05 00 0a c0 13 ;....../.5......
*aaaQueueReader: Jan 04 12:09:36.792: 00000110: c0 14 c0 09 c0 0a 00 32 00 38 00 13 00 04 01 00 .......2.8......
*aaaQueueReader: Jan 04 12:09:36.792: 00000120: 00 22 ff 01 00 01 00 00 00 00 09 00 07 00 00 04 ."..............
*aaaQueueReader: Jan 04 12:09:36.792: 00000130: 73 61 72 69 00 0a 00 06 00 04 00 17 00 18 00 0b sari............
*aaaQueueReader: Jan 04 12:09:36.792: 00000140: 00 02 01 00 18 26 67 0f 07 b7 00 00 01 37 00 01 .....&g......7..
*aaaQueueReader: Jan 04 12:09:36.792: 00000150: 17 00 fe 80 00 00 00 00 00 00 91 e7 18 d2 65 39 ..............e9
*aaaQueueReader: Jan 04 12:09:36.792: 00000160: b8 bb 00 00 00 04 06 5d ff 0f 50 12 a4 3a 54 43 .......]..P..:TC
*aaaQueueReader: Jan 04 12:09:36.792: 00000170: ec 6a d8 bb 85 87 3a 3e 18 fa 95 a7              .j....:>....
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.792: 00:13:e8:3e:26:bf Processing Access-Challenge for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.792: 00:13:e8:3e:26:bf Sending EAP Request from AAA to mobile 00:13:e8:3e:26:bf (EAP Id 4)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.869: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.869: 00:13:e8:3e:26:bf Received EAP Response from mobile 00:13:e8:3e:26:bf (EAP Id 4, EAP Type 25)
*aaaQueueReader: Jan 04 12:09:36.870: 00000000: 01 e6 01 0c 14 56 2b 3c 1d ea 57 15 57 a7 c1 ea .....V+<..W.W...
*aaaQueueReader: Jan 04 12:09:36.870: 00000010: 0d 39 14 73 01 06 73 61 72 69 1f 13 30 30 2d 31 .9.s..sari..00-1
*aaaQueueReader: Jan 04 12:09:36.870: 00000020: 33 2d 65 38 2d 33 65 2d 32 36 2d 62 66 1e 21 30 3-e8-3e-26-bf.!0
*aaaQueueReader: Jan 04 12:09:36.870: 00000030: 38 2d 31 37 2d 33 35 2d 63 36 2d 38 33 2d 39 30 8-17-35-c6-83-90
*aaaQueueReader: Jan 04 12:09:36.870: 00000040: 3a 4b 4b 55 48 20 45 6d 70 6c 6f 79 65 65 05 06 :KKUH.Employee..
*aaaQueueReader: Jan 04 12:09:36.870: 00000050: 00 00 00 1d 1a 31 00 00 00 09 01 2b 61 75 64 69 .....1.....+audi
*aaaQueueReader: Jan 04 12:09:36.870: 00000060: 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 61 38 t-session-id=0a8
*aaaQueueReader: Jan 04 12:09:36.870: 00000070: 37 34 30 65 31 30 30 30 30 30 30 35 37 34 66 30 740e1000000574f0
*aaaQueueReader: Jan 04 12:09:36.870: 00000080: 34 31 37 35 30 04 06 0a 87 40 e1 20 13 57 49 53 [email protected]
*aaaQueueReader: Jan 04 12:09:36.870: 00000090: 4d 41 31 2d 4b 4b 55 48 2d 43 74 72 6c 31 1a 0c MA1-KKUH-Ctrl1..
*aaaQueueReader: Jan 04 12:09:36.870: 000000a0: 00 00 37 63 01 06 00 00 00 01 06 06 00 00 00 02 ..7c............
*aaaQueueReader: Jan 04 12:09:36.870: 000000b0: 0c 06 00 00 05 14 3d 06 00 00 00 13 40 06 00 00 ......=.....@...
*aaaQueueReader: Jan 04 12:09:36.870: 000000c0: 00 0d 41 06 00 00 00 06 51 04 38 39 4f 08 02 04 ..A.....Q.89O...
*aaaQueueReader: Jan 04 12:09:36.870: 000000d0: 00 06 19 00 18 26 67 0f 07 b7 00 00 01 37 00 01 .....&g......7..
*aaaQueueReader: Jan 04 12:09:36.870: 000000e0: 17 00 fe 80 00 00 00 00 00 00 91 e7 18 d2 65 39 ..............e9
*aaaQueueReader: Jan 04 12:09:36.870: 000000f0: b8 bb 00 00 00 04 06 5d ff 0f 50 12 93 7d 4c 98 .......]..P..}L.
*aaaQueueReader: Jan 04 12:09:36.870: 00000100: 20 f0 54 97 f4 23 27 a6 e2 5e 71 eb              ..T..#'..^q.
*radiusTransportThread: Jan 04 12:09:36.871: 00000000: 0b e6 02 0e 45 af 62 b9 01 83 21 3a af c1 ca 08 ....E.b...!:....
*radiusTransportThread: Jan 04 12:09:36.871: 00000010: ca b5 cf bc 1b 06 00 00 00 1e 4f ff 01 05 01 b8 ..........O.....
*radiusTransportThread: Jan 04 12:09:36.871: 00000020: 19 00 6f 62 61 6c 20 52 6f 6f 74 00 44 30 42 31 ..obal.Root.D0B1
*radiusTransportThread: Jan 04 12:09:36.871: 00000030: 0b 30 09 06 03 55 04 06 13 02 55 53 31 16 30 14 .0...U....US1.0.
*radiusTransportThread: Jan 04 12:09:36.871: 00000040: 06 03 55 04 0a 13 0d 47 65 6f 54 72 75 73 74 20 ..U....GeoTrust.
*radiusTransportThread: Jan 04 12:09:36.871: 00000050: 49 6e 63 2e 31 1b 30 19 06 03 55 04 03 13 12 47 Inc.1.0...U....G
*radiusTransportThread: Jan 04 12:09:36.871: 00000060: 65 6f 54 72 75 73 74 20 47 6c 6f 62 61 6c 20 43 eoTrust.Global.C
*radiusTransportThread: Jan 04 12:09:36.871: 00000070: 41 00 6b 30 69 31 12 30 10 06 0a 09 92 26 89 93 A.k0i1.0.....&..
*radiusTransportThread: Jan 04 12:09:36.871: 00000080: f2 2c 64 01 19 16 02 73 61 31 13 30 11 06 0a 09 .,d....sa1.0....
*radiusTransportThread: Jan 04 12:09:36.871: 00000090: 92 26 89 93 f2 2c 64 01 19 16 03 65 64 75 31 1a .&...,d....edu1.
*radiusTransportThread: Jan 04 12:09:36.871: 000000a0: 30 18 06 0a 09 92 26 89 93 f2 2c 64 01 19 16 0a 0.....&...,d....
*radiusTransportThread: Jan 04 12:09:36.871: 000000b0: 6b 6b 75 68 64 6f 6d 61 69 6e 31 22 30 20 06 03 kkuhdomain1"0...
*radiusTransportThread: Jan 04 12:09:36.871: 000000c0: 55 04 03 13 19 6b 6b 75 68 64 6f 6d 61 69 6e 2d U....kkuhdomain-
*radiusTransportThread: Jan 04 12:09:36.871: 000000d0: 57 49 4e 2d 54 45 52 4d 53 52 56 2d 43 41 00 72 WIN-TERMSRV-CA.r
*radiusTransportThread: Jan 04 12:09:36.871: 000000e0: 30 70 31 2b 30 29 06 03 55 04 0b 13 22 43 6f 70 0p1+0)..U..."Cop
*radiusTransportThread: Jan 04 12:09:36.871: 000000f0: 79 72 69 67 68 74 20 28 63 29 20 31 39 39 37 20 yright.(c).1997.
*radiusTransportThread: Jan 04 12:09:36.871: 00000100: 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 2e 31 Microsoft.Corp.1
*radiusTransportThread: Jan 04 12:09:36.871: 00000110: 1e 30 1c 06 03 55 04 0b 13 4f bd 15 4d 69 63 72 .0...U...O..Micr
*radiusTransportThread: Jan 04 12:09:36.871: 00000120: 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f osoft.Corporatio
*radiusTransportThread: Jan 04 12:09:36.871: 00000130: 6e 31 21 30 1f 06 03 55 04 03 13 18 4d 69 63 72 n1!0...U....Micr
*radiusTransportThread: Jan 04 12:09:36.871: 00000140: 6f 73 6f 66 74 20 52 6f 6f 74 20 41 75 74 68 6f osoft.Root.Autho
*radiusTransportThread: Jan 04 12:09:36.871: 00000150: 72 69 74 79 00 61 30 5f 31 13 30 11 06 0a 09 92 rity.a0_1.0.....
*radiusTransportThread: Jan 04 12:09:36.871: 00000160: 26 89 93 f2 2c 64 01 19 16 03 63 6f 6d 31 19 30 &...,d....com1.0
*radiusTransportThread: Jan 04 12:09:36.871: 00000170: 17 06 0a 09 92 26 89 93 f2 2c 64 01 19 16 09 6d .....&...,d....m
*radiusTransportThread: Jan 04 12:09:36.871: 00000180: 69 63 72 6f 73 6f 66 74 31 2d 30 2b 06 03 55 04 icrosoft1-0+..U.
*radiusTransportThread: Jan 04 12:09:36.871: 00000190: 03 13 24 4d 69 63 72 6f 73 6f 66 74 20 52 6f 6f ..$Microsoft.Roo
*radiusTransportThread: Jan 04 12:09:36.871: 000001a0: 74 20 43 65 72 74 69 66 69 63 61 74 65 20 41 75 t.Certificate.Au
*radiusTransportThread: Jan 04 12:09:36.871: 000001b0: 74 68 6f 72 69 74 79 00 19 30 17 31 15 30 13 06 thority..0.1.0..
*radiusTransportThread: Jan 04 12:09:36.871: 000001c0: 03 55 04 03 13 0c 4e 54 20 41 55 54 48 4f 52 49 .U....NT.AUTHORI
*radiusTransportThread: Jan 04 12:09:36.871: 000001d0: 54 59 0e 00 00 00 18 26 67 0f 07 b7 00 00 01 37 TY.....&g......7
*radiusTransportThread: Jan 04 12:09:36.871: 000001e0: 00 01 17 00 fe 80 00 00 00 00 00 00 91 e7 18 d2 ................
*radiusTransportThread: Jan 04 12:09:36.871: 000001f0: 65 39 b8 bb 00 00 00 04 06 5d ff 0f 50 12 4d 9e e9.......]..P.M.
*radiusTransportThread: Jan 04 12:09:36.871: 00000200: 94 8f a2 25 73 e9 80 73 09 28 da 7b 4a 60        ...%s..s.(.{J`
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.871: 00:13:e8:3e:26:bf Processing Access-Challenge for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.871: 00:13:e8:3e:26:bf Sending EAP Request from AAA to mobile 00:13:e8:3e:26:bf (EAP Id 5)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.897: 00:13:e8:3e:26:bf Received EAPOL EAPPKT from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.897: 00:13:e8:3e:26:bf Received EAP Response from mobile 00:13:e8:3e:26:bf (EAP Id 5, EAP Type 25)
*aaaQueueReader: Jan 04 12:09:36.898: 00000000: 01 e7 02 5f 1f 1b 97 19 fb 9e 03 38 c6 02 6f b9 ..._.......8..o.
*aaaQueueReader: Jan 04 12:09:36.898: 00000010: bb e2 f8 6d 01 06 73 61 72 69 1f 13 30 30 2d 31 ...m..sari..00-1
*aaaQueueReader: Jan 04 12:09:36.898: 00000020: 33 2d 65 38 2d 33 65 2d 32 36 2d 62 66 1e 21 30 3-e8-3e-26-bf.!0
*aaaQueueReader: Jan 04 12:09:36.898: 00000030: 38 2d 31 37 2d 33 35 2d 63 36 2d 38 33 2d 39 30 8-17-35-c6-83-90
*aaaQueueReader: Jan 04 12:09:36.898: 00000040: 3a 4b 4b 55 48 20 45 6d 70 6c 6f 79 65 65 05 06 :KKUH.Employee..
*aaaQueueReader: Jan 04 12:09:36.898: 00000050: 00 00 00 1d 1a 31 00 00 00 09 01 2b 61 75 64 69 .....1.....+audi
*aaaQueueReader: Jan 04 12:09:36.898: 00000060: 74 2d 73 65 73 73 69 6f 6e 2d 69 64 3d 30 61 38 t-session-id=0a8
*aaaQueueReader: Jan 04 12:09:36.898: 00000070: 37 34 30 65 31 30 30 30 30 30 30 35 37 34 66 30 740e1000000574f0
*aaaQueueReader: Jan 04 12:09:36.898: 00000080: 34 31 37 35 30 04 06 0a 87 40 e1 20 13 57 49 53 [email protected]
*aaaQueueReader: Jan 04 12:09:36.898: 00000090: 4d 41 31 2d 4b 4b 55 48 2d 43 74 72 6c 31 1a 0c MA1-KKUH-Ctrl1..
*aaaQueueReader: Jan 04 12:09:36.898: 000000a0: 00 00 37 63 01 06 00 00 00 01 06 06 00 00 00 02 ..7c............
*aaaQueueReader: Jan 04 12:09:36.898: 000000b0: 0c 06 00 00 05 14 3d 06 00 00 00 13 40 06 00 00 ......=.....@...
*aaaQueueReader: Jan 04 12:09:36.898: 000000c0: 00 0d 41 06 00 00 00 06 51 04 38 39 4f ff 02 05 ..A.....Q.89O...
*aaaQueueReader: Jan 04 12:09:36.898: 000000d0: 01 57 19 80 00 00 01 4d 16 03 01 01 0d 0b 00 00 .W.....M........
*aaaQueueReader: Jan 04 12:09:36.898: 000000e0: 03 00 00 00 10 00 01 02 01 00 1b 13 f3 e9 e0 f7 ................
*aaaQueueReader: Jan 04 12:09:36.898: 000000f0: 92 a3 1d 2e ba 35 dc 0c 5c 01 6a 2c d3 02 88 5b .....5..\.j,...[
*aaaQueueReader: Jan 04 12:09:36.898: 00000100: a0 c5 52 81 2e 47 58 75 ef e2 00 d9 54 87 e7 41 ..R..GXu....T..A
*aaaQueueReader: Jan 04 12:09:36.898: 00000110: 6b bb 81 15 ee 2b 22 a8 ef f6 22 5a f6 78 58 92 k....+"..."Z.xX.
*aaaQueueReader: Jan 04 12:09:36.898: 00000120: 84 9a c1 b3 a3 12 9f 56 66 dc 9e 63 0a 46 92 5d .......Vf..c.F.]
*aaaQueueReader: Jan 04 12:09:36.898: 00000130: 6b 41 d9 28 08 b0 a2 ee 34 9c 1e ea f6 7e ff f0 kA.(....4....~..
*aaaQueueReader: Jan 04 12:09:36.898: 00000140: 6c 90 0d 1f 64 a5 1b 8c 5e fc 79 a5 86 07 f0 0b l...d...^.y.....
*aaaQueueReader: Jan 04 12:09:36.898: 00000150: 7a c1 3b c9 d1 12 49 5c 7f e4 2d 6e 4e 56 31 70 z.;...I\..-nNV1p
*aaaQueueReader: Jan 04 12:09:36.898: 00000160: 7f e9 7e 6b c5 cf e9 c7 72 a8 15 f2 8a 8a 71 35 ..~k....r.....q5
*aaaQueueReader: Jan 04 12:09:36.898: 00000170: 8b 45 72 88 c6 41 9f 0a 5e a3 17 00 99 b4 6f 0d .Er..A..^.....o.
*aaaQueueReader: Jan 04 12:09:36.898: 00000180: 81 29 a2 b1 5b 89 7e f0 a1 63 18 b2 d9 59 78 9b .)..[.~..c...Yx.
*aaaQueueReader: Jan 04 12:09:36.898: 00000190: ab f3 db 57 23 e2 2a 20 d5 69 27 37 4c 3b f0 35 ...W#.*..i'7L;.5
*aaaQueueReader: Jan 04 12:09:36.898: 000001a0: c4 18 33 5f 51 d4 b1 22 13 8f 03 dd 04 b9 d6 c5 ..3_Q.."........
*aaaQueueReader: Jan 04 12:09:36.898: 000001b0: 78 79 f4 58 b9 aa 69 67 96 15 d1 6d 06 e8 81 89 xy.X..ig...m....
*aaaQueueReader: Jan 04 12:09:36.898: 000001c0: 67 32 4f 0f 63 f3 a6 50 af 2c e3 4f 5c e6 b4 59 g2O.c..P.,.O\..Y
*aaaQueueReader: Jan 04 12:09:36.898: 000001d0: dc 1b 6c bb 8d f3 af 1a c8 08 80 0a 45 ea 78 94 ..l.........E.x.
*aaaQueueReader: Jan 04 12:09:36.898: 000001e0: 87 5b f5 37 7a 09 8b 23 f4 71 3a c1 14 03 01 00 .[.7z..#.q:.....
*aaaQueueReader: Jan 04 12:09:36.898: 000001f0: 01 01 16 03 01 00 30 b2 1d 3f 3e 72 59 74 46 34 ......0..?>rYtF4
*aaaQueueReader: Jan 04 12:09:36.898: 00000200: b5 6d cc 8a f9 3f cb f4 fb 1f bc 2a b5 34 4b ab .m...?.....*.4K.
*aaaQueueReader: Jan 04 12:09:36.898: 00000210: d3 1e 92 43 5f 2e 57 0b 00 65 c8 b7 c7 ce 15 27 ...C_.W..e.....'
*aaaQueueReader: Jan 04 12:09:36.898: 00000220: a1 ff e2 7d cf 96 50 18 26 67 0f 07 b7 00 00 01 ...}..P.&g......
*aaaQueueReader: Jan 04 12:09:36.898: 00000230: 37 00 01 17 00 fe 80 00 00 00 00 00 00 91 e7 18 7...............
*aaaQueueReader: Jan 04 12:09:36.898: 00000240: d2 65 39 b8 bb 00 00 00 04 06 5d ff 0f 50 12 d8 .e9.......]..P..
*aaaQueueReader: Jan 04 12:09:36.898: 00000250: 75 a5 ae b7 8e da a1 13 33 37 8f 99 c3 bb 6c     u.......37....l
*radiusTransportThread: Jan 04 12:09:36.899: 00000000: 03 e7 00 2c 30 98 52 d2 93 66 07 11 0f f8 28 ae ...,0.R..f....(.
*radiusTransportThread: Jan 04 12:09:36.899: 00000010: 4c dc a5 1d 4f 06 04 05 00 04 50 12 1c a2 45 6e L...O.....P...En
*radiusTransportThread: Jan 04 12:09:36.899: 00000020: 67 d1 4a 6b 25 e9 93 c0 a8 7c c6 ce              g.Jk%....|..
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.899: 00:13:e8:3e:26:bf Processing Access-Reject for mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.899: 00:13:e8:3e:26:bf Removing PMK cache due to EAP-Failure for mobile 00:13:e8:3e:26:bf (EAP Id 5)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.899: 00:13:e8:3e:26:bf Sending EAP-Failure to mobile 00:13:e8:3e:26:bf (EAP Id 5)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:36.900: 00:13:e8:3e:26:bf Setting quiet timer for 5 seconds for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:09:39.773: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:09:39.773: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:09:39.774: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:09:39.884: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:09:39.884: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*apfReceiveTask: Jan 04 12:09:40.252: fc:e5:57:01:a0:39 apfMsAssoStateDec
*apfReceiveTask: Jan 04 12:09:40.253: fc:e5:57:01:a0:39 apfMs1xStateDec
*osapiBsnTimer: Jan 04 12:10:09.852: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:10:09.853: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*osapiBsnTimer: Jan 04 12:10:39.852: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:10:39.853: 00:13:e8:3e:26:bf Reached Max EAP-Identity Request retries (3) for STA 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:10:39.853: 00:13:e8:3e:26:bf Not sending EAP-Failure for STA 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:10:40.164: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:10:40.164: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:10:40.167: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:10:40.167: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:10:40.215: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:10:40.215: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*osapiBsnTimer: Jan 04 12:11:10.055: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:11:10.055: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*osapiBsnTimer: Jan 04 12:11:40.055: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:11:40.056: 00:13:e8:3e:26:bf Reached Max EAP-Identity Request retries (3) for STA 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:11:40.056: 00:13:e8:3e:26:bf Not sending EAP-Failure for STA 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:11:40.356: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:11:40.356: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:11:40.359: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:11:40.359: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:11:40.411: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:11:40.411: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*osapiBsnTimer: Jan 04 12:12:10.255: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:12:10.256: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*osapiBsnTimer: Jan 04 12:12:40.255: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:12:40.256: 00:13:e8:3e:26:bf Reached Max EAP-Identity Request retries (3) for STA 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:12:40.256: 00:13:e8:3e:26:bf Not sending EAP-Failure for STA 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:12:40.596: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:12:40.596: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:12:40.598: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:12:40.599: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:12:40.657: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
*Dot1x_NW_MsgTask_0: Jan 04 12:12:40.657: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 2)
*osapiBsnTimer: Jan 04 12:13:10.655: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:13:10.656: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 3)
*apfMsConnTask_0: Jan 04 12:13:25.133: ac:72:89:0b:3b:87 Processing RSN IE type 48, length 22 for mobile ac:72:89:0b:3b:87
*apfMsConnTask_0: Jan 04 12:13:25.133: ac:72:89:0b:3b:87 Received RSN IE with 0 PMKIDs from mobile ac:72:89:0b:3b:87
*apfMsConnTask_0: Jan 04 12:13:25.133: ac:72:89:0b:3b:87 apfMsAssoStateInc
*dot1xMsgTask: Jan 04 12:13:25.135: ac:72:89:0b:3b:87 Station ac:72:89:0b:3b:87 setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:13:25.135: ac:72:89:0b:3b:87 Sending EAP-Request/Identity to mobile ac:72:89:0b:3b:87 (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:13:25.204: ac:72:89:0b:3b:87 Received EAPOL START from mobile ac:72:89:0b:3b:87
*Dot1x_NW_MsgTask_0: Jan 04 12:13:25.205: ac:72:89:0b:3b:87 Sending EAP-Request/Identity to mobile ac:72:89:0b:3b:87 (EAP Id 2)
*apfMsConnTask_0: Jan 04 12:13:36.779: ac:72:89:0b:3b:87 Processing RSN IE type 48, length 22 for mobile ac:72:89:0b:3b:87
*apfMsConnTask_0: Jan 04 12:13:36.779: ac:72:89:0b:3b:87 Received RSN IE with 0 PMKIDs from mobile ac:72:89:0b:3b:87
*dot1xMsgTask: Jan 04 12:13:36.781: ac:72:89:0b:3b:87 Sending EAP-Request/Identity to mobile ac:72:89:0b:3b:87 (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:13:36.835: ac:72:89:0b:3b:87 Received EAPOL START from mobile ac:72:89:0b:3b:87
*Dot1x_NW_MsgTask_0: Jan 04 12:13:36.835: ac:72:89:0b:3b:87 Sending EAP-Request/Identity to mobile ac:72:89:0b:3b:87 (EAP Id 2)
*osapiBsnTimer: Jan 04 12:13:40.655: 00:13:e8:3e:26:bf 802.1x 'txWhen' Timer expired for station 00:13:e8:3e:26:bf and for message = M0
*dot1xMsgTask: Jan 04 12:13:40.655: 00:13:e8:3e:26:bf Reached Max EAP-Identity Request retries (3) for STA 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:13:40.656: 00:13:e8:3e:26:bf Not sending EAP-Failure for STA 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:13:40.998: 00:13:e8:3e:26:bf Processing RSN IE type 48, length 22 for mobile 00:13:e8:3e:26:bf
*apfMsConnTask_0: Jan 04 12:13:40.998: 00:13:e8:3e:26:bf Received RSN IE with 0 PMKIDs from mobile 00:13:e8:3e:26:bf
*dot1xMsgTask: Jan 04 12:13:41.000: 00:13:e8:3e:26:bf Station 00:13:e8:3e:26:bf setting dot1x reauth timeout = 1800
*dot1xMsgTask: Jan 04 12:13:41.000: 00:13:e8:3e:26:bf Sending EAP-Request/Identity to mobile 00:13:e8:3e:26:bf (EAP Id 1)
*Dot1x_NW_MsgTask_0: Jan 04 12:13:41.069: 00:13:e8:3e:26:bf Received EAPOL START from mobile 00:13:e8:3e:26:bf
any one has idea where i am wrong in configuration
thanks in advance

Here is another link you can reference.
http://araihan.wordpress.com/2010/04/30/complete-guide-to-build-a-cisco-wireless-infrastructure-using-cisco-wlc-5500-cisco-1142-ap-and-microsoft-radius-server/
Sent from Cisco Technical Support iPhone App

BUG: implied .executeBatch() failing with new drivers?

Our application uses batching with SQLJ and is experiencing an issue with the latest driver versions and Java 1.5. It used to work fine when issuing a few INSERT statements with a specified execution context and then letting the SQLJ COMMIT execute the pending statements in the batch when the transaction was finished. With the new drivers, the SQLJ COMMIT is successful but it doesn't write any of the pending batches to database as it is supposed to (per the Oracle Database SQLJ Developer's Guide and Reference).
In a small testcase I prepared (see the next message for the code), it shows a new batch was created for the first statement (NEW_BATCH_COUNT returned). It also shows subsequent statements are added to the existing batch (ADD_BATCH_COUNT returned). The COUNT() statements show the data never makes it to the database and the table contents were verified in the database after program completion.
Java: 1.5.0_10
Oracle Database: Oracle9i Enterprise Edition Release 9.2.0.1.0 - 64bit Production
Oracle JDBC Driver: 10.2.0.2.0
translator.jar: JPublisher 10g Release 10.2
runtime12.jar: JPublisher 10g Release 10.2
Can anyone please confirm this is a bug?
Thanks much

//---------- C O D E ---------------------------------
package com.sqljtest;
import java.sql.*;
import java.util.*;
import sqlj.runtime.ref.*;
import sqlj.runtime.*;
import oracle.sqlj.runtime.*;
public class Sqljtest extends java.lang.Object {
public static void main(String[] args) {
Connection con = null;
DefaultContext connContext = null;
ExecutionContext ec = null;
try {
String driver = "oracle.jdbc.OracleDriver";
String url = "jdbc:oracle:thin:@127.0.0.1:1521:mysid";
String user = "scott";
String password = "tiger";
DriverManager.registerDriver(new oracle.jdbc.OracleDriver());
con = DriverManager.getConnection(url, user, password);
con.setAutoCommit(false);
connContext = Oracle.getConnection(con);
connContext.getConnection().setAutoCommit(false);
ec = new ExecutionContext();
ec.setBatching(true);
Vector collection = new Vector();
collection.add("one");
collection.add("two");
collection.add("three");
collection.add("four");
collection.add("five");
int rowCount, updateCount;
#sql [connContext] { SELECT COUNT(1) INTO :rowCount FROM sqljtest };
System.out.println("before rowCount:" + rowCount);
for (int i = 0; i < collection.size(); i++) {
#sql [connContext, ec] {
INSERT INTO sqljtest blah VALUES (: ((String)collection.get(i)) )
updateCount = ec.getUpdateCount();
System.out.println("INSERT (" collection.get(i) "): " + updateCount);
#sql [connContext] { SELECT COUNT(1) INTO :rowCount FROM sqljtest };
System.out.println("after inserts rowCount:" + rowCount);
#sql [connContext] {COMMIT};
#sql [connContext] { SELECT COUNT(1) INTO :rowCount FROM sqljtest };
System.out.println("after sqlj commit rowCount:" + rowCount);
} catch (Exception e) {
System.err.println("Exception e: " + e.toString());
} finally {
try {
if (connContext != null && !connContext.isClosed()) {
connContext.close(ConnectionContext.CLOSE_CONNECTION);// .CLOSE_CONNECTION
if (con != null) {
con.close();
} catch (Exception e) {
System.err.println("Exception while closing connections: " + e.toString());
//---------- O U T P U T -----------------------------
run SQLJ Test:
[SQLJ Test] before rowCount:0
[SQLJ Test] INSERT (one): -3
[SQLJ Test] INSERT (two): -4
[SQLJ Test] INSERT (three): -4
[SQLJ Test] INSERT (four): -4
[SQLJ Test] INSERT (five): -4
[SQLJ Test] after inserts rowCount:0
[SQLJ Test] after sqlj commit rowCount:0

PKCS#11 authentication fails with sec_error_token_not_logged_in

I am using a smart card (CAC) to login to a website. Logging out of the website and trying to log back in causes firefox to show the sec_error_token_not_logged_in error instead of asking for my pin.
Steps to reproduce:
1. Use smart card to login to a PKCS#11 secured website. e.g. http://www.sldcada.disa.mil/ Firefox will correctly ask for the smart card pin and authenticate.
2. logout and remove smart card
3. insert smart card and attempt to login again. Firefox will display the above error.
Expected Behavior:
At step 3 firefox will ask for my smart card pin to unlock the token and then authenticate with the website.
Workaround:
2.5 Edit > Preferences > Advanced > Encryption > View Certificates. Enter pin when prompted. Close the preferences windows. Step 3 will now work as expected because the smart card has been unlocked.

Can you determine whether this is site-specific? For example, if at step 3, you were to visit another site that requires the CAC, will Firefox still fail to ask for a PIN?
Regarding the same site problem, does it make any difference if, at step 3, you:
(1) reload the page bypassing the cache (Ctrl+Shift+r)?
(2) remove the site's cookies and then reload the page?
You can selectively remove a single site's cookies this way: While viewing a page on the site:
* right-click and choose View Page Info > Security > "View Cookies"
* Alt+t (open the classic Tools menu) > Page Info > Security > "View Cookies"

6.1 SP 2 certificate authenticator fails with Apache plugin and SSL

Hi,
Does anybody have a certificate authenticator working in WebLogic 6.1
SP 2, in combination with the Apache HTTP Server plugin and SSL?
We implemented a certificate authenticator that works correctly in
WebLogic 6.1 SP 2 when we configure SSL with "Client Certificate
Required", and access it directly from a browser (the browser hits the
SSL port of the WebLogic server, like 7002).
This certificate authenticator also works correctly with a proxy web
server. We set up a Stronghold server (web server based on Apache) on
Linux with the Apache HTTP Server plugin from BEA, configured the
plugin to use SSL, and configured our WebLogic 6.1 SP 1 server without
"Client Certificate Required". The certificate authenticator gets the
end user's certificate correctly.
This same architecture with the proxy web server does not work when we
upgrade the WebLogic Server to SP 2. WebLogic Server logs the
"incorrect or missing client cert" error, our certificate
authenticator is never called, and the browser gets a 401 Unauthorized
error.
We looked all over the WebLogic 6.1 SP 2 installation for a newer
version of the plugin (mod_wl_ssl.so) and found the same version as SP
1. We double-checked that it was the Linux-specific installer
(because we'd found that some Linux libraries are missing from the
generic installer). So it appears to us that the plugin encodes the
certificate in the request header in such a way that a SP 1 server can
extract it, but an SP 2 server cannot. We were wondering whether
there might be changes to the plugin to stay in step with the SP 2
server that never got ported to Linux, or whether an updated Linux
plugin never got included in the installer packages.
So: has anybody gotten a system like
Apache/Stronghold + WebLogic Plugin <-- SSL --> WebLogic 6.1 SP 2 +
Cert Auth
to work?
Thanks in advance for any help,
Jim Doyle
[email protected]

A correction, I think:
Now that I rolled back a system to 6.1 SP 1, it looks like 6.1 SP 1
does include a different mod_wl_ssl.so from that in SP 2. I believe I
was comparing the wrong file. In fact, trying to compare versions of
the mod_wl_ssl.so makes things rather confusing:
A mod_wl_ssl.so from a straight weblogic610sp2_generic.zip install has
a cksum of "1853014778 1132467".
A mod_wl_ssl.so from a weblogic610sp1_generic.zip install with a
subsequent SP 2 upgrade install has a cksum of "1350917183 1147927".
A mod_wl_ssl.so from a plain 6.1 install with subsequent SP 1 and SP 2
upgrade installs, followed by an SP 2 uninstall and another SP 1
upgrade install, has a cksum of "1471948065 1136501".
I think I may be looking at three different plugin versions here: 6.1,
6.1 SP 1, and 6.1 SP 2, assuming the upgrade installs don't actually
change mod_wl_ssl.so. I'm not sure whether there's an easier way to
verify what version of the plugin you have.
In any case, we did try each plugin version, and none of them works
against a 6.1 SP 2 WebLogic server.
Jim
[email protected] (Jim Doyle) wrote in message news:<[email protected]>...
[snip]
We looked all over the WebLogic 6.1 SP 2 installation for a newer
version of the plugin (mod_wl_ssl.so) and found the same version as SP
1. We double-checked that it was the Linux-specific installer
(because we'd found that some Linux libraries are missing from the
generic installer). [snip]

External Authentication failed with new key

I have a card using SCP 01 05. There is 1 keyset(3 keys) with version 01. I have added a new keyset(3 keys as well) with version 02.
I run external authentication with keyset version 01 and it passed. I run external authentication with keyset version 02 immediately but it returned 6982. This mean "Security status not satisfied". Why can't I do authentication with other key?

Read the INITIAL UPDATE command !!!! What is the P1/P2 ? If you inform it to use the keyset 1, then you can't possibly think that calculating with the keyset 2 will work ?
The response data contains a bunch of information, including the keyset used to create the card cryptogram. That is the required key for calculating the off-card cryptogram. You would have seen this if you were calculating the card cryptogram properly because you would have been using the wrong key and the cryptograms wouldn't have matched.
So, Why can't I do authentication with other key? Because you have to INITIALIZE UPDATE with that other key.

Openssh bug - GSSAPI authentication fails with Round Robin DNS hosts

Similar Messages

Maybe you are looking for