Pc cannot authenticate to nac

hi,
i have a failover nac cam and server, my discovery host point to service ip of my untrusted interface but when i use that untrusted service ip in my internet explorer it is not it is not authenticating. what might be the problem of this?
thanks,

to be clearer, i'm getting the error message:
The login information is not valid for this server.
the server failed to accept the login information you provided. check the name and password and try to log in again or contact your network administrator
i tried to check /var/log/system.log but there wasn't anything logged. is there another log i can check, maybe an LDAP log or something?

Similar Messages

SEEBURGER AS2: AS2 Adapter failure - Cannot authenticate the user

Hello,
All was working fine but now I got these errors in an AS2 scenario. Sending a message via AS2. Also we don't receive any messages via AS2 anymore. This is the error when sending a message:
Unable to forward message to JCA adapter. Reason: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Cannot authenticate the user., SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Cannot authenticate the user.
MP: Exception caught with cause javax.resource.ResourceException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Cannot authenticate the user., SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Cannot authenticate the user.
Exception caught by adapter framework: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Cannot authenticate the user., SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Cannot authenticate the user
Delivery of the message to the application using connection AS2_http://seeburger.com/xi failed, due to: com.sap.aii.af.ra.ms.api.RecoverableException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Cannot authenticate the user., SEEBURGER AS2: AS2 Adapter failure # java.lang.Exception: AS2 message composition failed: com.seeburger.ksm.cryptoapi.exception.CryptoApiException: Cannot authenticate the user.: javax.resource.ResourceException: Fatal exception: com.sap.aii.af.ra.cci.XIRecoverableException: SEEBURGER AS2: AS2 Adapter failure.
Please advice, many thanks!
Erik

Are you using the "Use Authentication" option in the communication channel? If yes, then ensure that the user provided is correct and is not locked. Also recheck the authentication certificate settings.
Regards,
Prateek

Samba Users Cannot Authenticate?

I just want to start this thread by saying samba makes me want to kill myself. I love it so much, that it makes me want to rip my heart out and feed it to stray dogs every time I need to write a new configuration. Because I truly hate configuring it. Ok, with that steam having been blown off, let's jump into the problem I've been chasing for hours.
My users cannot login to samba shares. Simple as dirt. Every single time I access the shares as a user, I am prompted for my password, I enter my password, and the prompt immediately asks me again, as if I've entered the wrong password.
Heading off the obvious: Yes, I've added samba users with pdbedit -a -u [username]. The unix permissions on the folder I am trying to access as a samba user are 755, and I am trying to access the folder as its owner. My server smb.conf is included below.
[global]
workgroup = WORKGROUP
passdb backend = tdbsam
netbios name = ArchServ
name resolve order = bcast host lmhosts wins
server string = ""
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
use client driver = yes
map to guest = Bad User
local master = yes
preferred master = yes
os level = 65
usershare allow guests = Yes
usershare max shares = 100
usershare owner only = False
security = share
#username map = /etc/samba/smbusers
[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
print ok = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
[Home - user1]
comment = Deyla's Home folder
path = /home/user1
create mask = 0755
guest ok = yes
browsable = yes
write list = user1
public = yes
[Home - user2]
comment = James' Home folder
path = /home/user2
create mask = 0755
guest ok = yes
browsable = yes
write list = user2
public = yes
[Transmission Home]
comment = Torrent downloads
path = /home/transmission
create mask = 0775
guest ok = yes
browsable = yes
write list = user1 user2
public = yes
They work flawlessly as guest shares, and I have no problem gaining access... but when I try to log into a share as a user, the user will absolutely not authenticate, and it is the most frustrating, puzzling enigma to me. I formerly had this very samba configuration on an Ubuntu file server, and had no problems with the share behaving exactly as I wanted it to. I cannot for the life of me figure out why my users cannot authenticate.
Please help! Any and all tips are appreciated! Thank you in advance!

Thanks to Swerdina over at the OpenSUSE forums, I was able to solve my samba issue (thread). In a nutshell, my problem was the last active line in my [global] stanza, which was set to "security = share". By setting this global setting to "security = user" it fixed my problem and now allows me to invoke my shares with user privileges if I so choose to. Hopefully this helps someone who may have had a similar problem.

Javax.security.auth.login.LoginException: Cannot authenticate X509(Urgent!)

I'm trying to sign my messages between client & webservice using X509 certificates. I've created a keystore and imported:
privatekey1, certificate1(public key) and trustedCertAuthority that published certificates.
I've configured webservice & client to use that keystore and privatekey1 to sign request/response, but web service keeps throwing following exception:
javax.security.auth.login.LoginException: Cannot authenticate X509 certificate, User EMAILADDRESS=[email protected], CN=testUser, ... does not exist in our system
How can I configure web service to find that certificate?
Thnx for help.

Yes, I did. I found the problem..
I had also checked to Authenticate with X509 certificate... and obviously I should somehow set the Securtiy provider, although, I don't know how (but it's not so important right now).
But I do have another question - how can I use private key & public key in certificate X509 to encrypt messages. In the sample you mentioned, it's written that there shoud be separate key for signature & encryption, but I have separate keystores for client (with client private key & server public certificate) and for server (with server private key & client certificate). But I can't get it to work... It seems to me that in that case signature key alias at service should be the same as key needed to decrypt the message?
Am i missing something again?
Thanks.

SOLVED: "AuthenticationSupport service missing. Cannot authenticate request."

A customer was installing CQ5 on a Red Hat Linux environment, and getting the following error displaying in the browser.
AuthenticationSupport service missing. Cannot authenticate request.
We checked the Felix Console, and all bundles were installed correctly.
We did however find the following message in the error log:
20.06.2012 10:49:26.689 *ERROR* [FelixStartLevel] org.apache.jackrabbit.core.RepositoryImpl failed to start Repository: Unable to register data store in cluster. javax.jcr.RepositoryException: Unable to register data store in cluster.
Caused by: java.net.UnknownHostException: {server name}: {server name}
This was not a clustered instance.
On closer inspection, the error was caused by an incorrect IP address entry for {server name} in the hostnames file
Tim Goodman

Hello Mkiti,
    I take a look there and my host file only contains comments :s
    Heres the content:
# Copyright (c) 1993-2009 Microsoft Corp.
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
# For example:
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host
# localhost name resolution is handled within DNS itself.
#    127.0.0.1       localhost
#    ::1             localhost
    The error only happen after I install the CQ5 update fix, from package share. I just renamed the crx-quickstart folder, the CQ create a new one and works, but my projects still in the old quickstart :s Is there a way to physically copy these projects, maybe?

Cannot authenticate phone

Suddenly my N95 stopped connecting with PS Suite via bluetooth. When trying to restart it I got the message that my phone could not be authenticated!!!???
Bluetooth is working fine with other devices, PC suite is working fine through USB and trying to remove PC suite and installig the latest version currently available does not solve the problem. Please advise!!!
Regards,
Johan

I have the same problem. My E51 connects with Bluetooth just fine to other devices like headset but when I try to connect to PC suite, it says 'cannot authenticate the phone'. I can connect the phone to my PC with my IBM supplied 'bluetooth places' but it connects for just a few seconds and then the phone disconnects it. The PC reports that the phone has connected and then disconnected and I can also see if from the phone (the little connection icon) that it is disconnecting so fast. Cable and IR work fine. Only the problem with BT. This has happened with the PC Suite that was delivered with the phone and also with the latest version. here's my setup info:
PC Connectivity Solution:
Version 8.15.0.0
Nokia Connectivity Cable Driver:
Version 6.86.11.0
Operating system:
Microsoft Windows XP 32-bit Edition, Service Pack 2
Language: English
Language for non-Unicode programs: English
Detected Internet browsers:
- Microsoft Internet Explorer 7.0
- Mozilla Firefox 2.0 (Default browser)
Detected Bluetooth stacks:
- Microsoft (Version: 5.1.2600, Build: 2180)
- Broadcomm (Version: 3.0.1, Build: 912)
When I try to connect with PC suite it say I have WIDICOM Buletooth stack which will try to connect but the Microsoft stack will not work because it says I am missing drivers (I have yet to find out where I get them).
Anyone know how to fix this?
Rgds,
RDWirr

Error 413 Cannot Authenticate

I have about 10 VPN clients connecting to a Cisco ASA 5510. I am getting calls that sometimes people are getting 413 errors here and there. When they out it username and password, the dialog box pops up again and then they get a error 413 cannot authenticate. Any ideas, they are IPsec tunnels which I hae 250 available.

The easiest way to troubleshoot this would be to retrieve the debug information when the users fail to connect:
debug cry isa 200
debug cry ipsec 200
Though you gotta be careful when you enable the debug, if you have many IPSEC tunnels running, the ASA may resent showing all the debug information.
On release 8.0 there's a "debug crypto condition" command for you to choose only the debugs from the peer (you'll need to know the client's public address)
I would also suggest to try to get more information on the error: is it happening for ALL the users? it's happening always from the same location: home, office, etc?
Sometimes this "random" connection issues are related to delay/problems with the client's internet connection.
Regards,

SQL Server cannot authenticate using Kerberos because the Service Principal Name (SPN) is missing, misplaced, or duplicated

We are getting this below alert message, while using SCOM 2012 R2. Anybody have any idea how to resolve this on the SQL box ?
Thx...
SQL Server cannot authenticate using Kerberos because the Service Principal Name (SPN) is missing, misplaced, or duplicated.
Service Account: NT Service\MSSQL$SQLEXPRESS
Missing SPNs:
Misplaced SPNs: MSSQLSvc/mysqlbox.com:SQLEXPRESS - sqldbadmin
Duplicate SPNs:

To Fix this issue, You can check below links
http://support.microsoft.com/kb/2443457/EN-US
http://www.scomgod.com/?p=155
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"Mai Ali | My blog:
Technical | Twitter:
Mai Ali

Cannot authenticate bluetooth connection

any help would be appreciated... got a 5310 phone 1 week n' several days ago... i tried connecting my phone to my pc using a bluetooth dongle v2.0... its a bluetooth device connected to the pc via usb... neway, phone and pc is paired but i cannot authenticate... a message "cannot authenticate phone" appears... pls help i am not really familiar about the "deeper" terms in computer but are familiar with the basic ones...
thanks a lot!

Sorry mate, i did get your PM but i haven't got a clue.
Apologies.
Grayburn @ www.nokiausers.net & www.dailymobile.se....come say Hello!!!
If you appreciate ANY help from a member,then show it by clicking on the Blue Star button, cheers

Users cannot authenticate

Hello
I recently had a lot of errors on two ML servers actinbg as OD Master/Replica, so decided to reinstall from scratch. One is running OS X 10.8.2, the other 10.8. Both are vanilla installs (going so far as to recreate the RAID), and both have the latest version of server.app installed.
Network users cannot authenticate.
Running slapconfig -ver gives the following errors on both machines:
bubbles:~ administrator$ sudo slapconfig -ver
2012-11-27 20:17:31 +0000 command: /usr/libexec/slapd -T cat -c -f /etc/openldap/slapd.conf -s ou=macosxodconfig,cn=config,dc=test249,dc=home
2012-11-27 20:17:31 +0000 Error execing slapcat: 50b51fdb /etc/openldap/slapd_macosxserver.conf: line 303: unknown directive <TLSCertificatePassphrase> inside backend database definition.
          slapcat: bad configuration file!
LDAP Setup Tool (slapconfig), Apple, Inc., Version 1.2
Obviously ou=macosxodconfig,cn=config,dc=test249,dc=home is wrong, but I don't know where this setting is held to correct it to ou=macosxodconfig,cn=config,dc=server,dc=domain,dc=tld
Opeining slapd_macosxserver.conf shows the last four lines to be:
TLSCertificateFile      /etc/certificates/server.mydomain.LONGHASH.cert.pem
TLSCACertificateFile    /etc/certificates/server.mydomain.LONGHASH.chain.pem
TLSCertificateKeyFile   /etc/certificates/server.mydomain.LONGHASH.key.pem
TLSCertificatePassphrase        "Mac OS X Server certificate management.LONGHASH"
I can 'fix' the second error by commenting out that last line. But that just results in a new and exciting error:
bubbles:~ administrator$ sudo slapconfig -ver
2012-11-27 20:43:00 +0000 command: /usr/libexec/slapd -T cat -c -f /etc/openldap/slapd.conf -s ou=macosxodconfig,cn=config,dc=test249,dc=home
2012-11-27 20:43:00 +0000 Error execing slapcat: slapcat: slap_init no backend for "ou=macosxodconfig,cn=config,dc=test249,dc=home"
LDAP Setup Tool (slapconfig), Apple, Inc., Version 1.2

Hi
i get the same error but authentication still works.
Are you sure that the recovery of your password worked ?
In case I have this issue i can only authenticate as a local user, not as an opeddir user.
This user must have admin rights to make sudo, afaik.
But it is interesting that my error comes on line 302 and yours on line 303.
Below i have attache the auth part from my /etc/openldap/slapd_macosxserver.conf
Check for any difference.
macmini:~] user% sudo slaptest -f /private/etc/openldap/slapd.conf -v
Password:
52054639 /etc/openldap/slapd_macosxserver.conf: line 302: unknown directive <TLSCertificatePassphrase> inside backend database definition.
slaptest: bad configuration file!
# authdata database definitions
database        bdb
suffix          "cn=authdata"
rootdn          "uid=root,cn=users,dc=macmini,dc=domain,dc=TL"
directory       "/var/db/openldap/authdata"
checkpoint      128 1
index           default eq
index           objectClass eq
index           authGUID eq
index           entryUUID eq
index           entryCSN eq
index           draft-krbPrincipalAliases eq
index           draft-krbPrincipalName eq
timelimit 60
idletimeout 300
cachesize       20000
idlcachesize    10000
sizelimit size.pr=11000 size.prtotal=unlimited
#limits          set="computer/cn & [cn=com.apple.opendirectory.group,cn=computer_groups,dc=macmini,dc=domain,dc=TL ]/memberUid" time.soft=unlimited time.hard=unlimited size.soft=unlimited size.hard=unlimited
access to *
                by dn.exact="uid=_ldap_replicator,cn=users,dc=macmini,dc=domain,dc=TL" write
                by sockurl="ldapi://%2Fvar%2Frun%2Fldapi" write
TLSCertificateFile      /etc/certificates/macmini.D5473ED3099C09ACE59C2944EA9FDDFC024DC07.cert.pem
TLSCertificateKeyFile   /etc/certificates/macmini.D5473ED3099C09ACE59C2944EA9FDDFC024DC07.key.pem
TLSCertificatePassphrase        "Mac OS X Server certificate management.D5473ED3099C09ACE59C2944EA9FDDFC024DC07"
TLSCACertificateFile    /etc/certificates/macmini.D5473ED3099C09ACE59C2944EA9FDDFC024DC07.chain.pem

Windows AD cannot authenticate if BI platform UNIX?

We were eagerly awaiting BI4 SP04 to address several SAP integration issues including the requirement use Windows AD for single sign to SAP Enterprise Portal hosting BI4 content (dashboards/webis/Analysis for OLAP) and BEx Web analyzer, i.e. user logs on once for Windows to authenticate to all SAP systems, ECC, BW, BI, EP, etc.. We have no plans to use the BI Launch Pad.
We are on AIX 6.1 for BI4 SP04, NW 7.3.1 and EP and BW 7.3.1 and are working through Kerberos client on AIX to Windows AD and SNC and SSO in SAP...
Frankly we have been struggling for some time with issues on BI4 SP02 and NW 7.3 so we are frustrated when we came across the followg in SAP doc -
Business Intelligence Platform Administrator Guide.pdf (http://help.sap.com/businessobject/product_guides/boexir4/en/xi4_bip_admin_en.pdf)
Page 211
The Windows AD security plugin cannot authenticate users if the BI platform server components are running on Unix
Page 212
Windows AD with Kerberos is supported if the Java application is on Unix. However, BI platform services must run on a Windows server.
Can someone clarify these statements? We will install Java application (NW? BI Java?) on UNIX. We will not run BI Platform? services on Windows.
If our requirement is to have a user only logon once to Windows and access BI4 content in the SAP Portal, not the BI Launch Pad, MUST we run BI4 on Windows?
Sincere thanks for your time and thoughts,
Lee Lewis
Summit Electric Supply
ASUG EDW and BO SIG Volunteer - Market Leader
[Email address removed. Please see the rules of engagement. The forum Administrator]

Hi Ainsley,
A work around? Yes and no and sort of ...kind of...
This turns out to be quite complex and tempermental.
In short, you cannot use Windows AD authentication, but instead use LDAP (with the Microsoft Active Directory). We were able to get this to work with much effort. The biggest limitation is that it supports a single AD forest.
I am giving a presentation on silent single sign on for BI4 and Enterprise Portals at the SAP BO User Confernce in Orlando and will see about posting the slides after the conference, but can share some of the resources here that we found to be most useful. Please reach out to me if I can help further.
Lee Lewis
•Integrating SAP BusinessObjects BI Platform 4.x with SAP NetWeaver, Ingo Hilgefort, SapPress 2011
•Configuring LDAP Manual Authentication and SSO for BI4 on Unix
•1631734 - Configuring Active Directory Manual Authentication and SSO for BI4
•Business Intelligence Platform Administrator Guide, SAP BusinessObjects Business Intelligence platform 4.0 Feature Pack 3, June 2012
•1670073 - How -To: Generate keystore and certificate in the process of configuring STS for SAP
•1687295 - How to configure Single Sign On (SSO) on the SAP Netweaver 7.x portal to BI4
•IBM - Configure single sign-on authentication on AIX
•1537480 - Best Practice: How To setup Active Directory Single Sign On when BOE CMS is on Unix or Linux
•Kerberos Explained - Microsoft Technet
•SAP Help - Secure Network Communications (SNC)
•Using Kerberos Authentication for Single Sign-On
•SAP Netweaver 7.3 Configuring Kerberos Authentication
•SAP BusinessObjects BI4 Active Directory SSO Tutorial
• 1631734 - Configuring Active Directory Manual Authentication and SSO for BI4
•1245218 - How to connect the LDAP plugin to Active Directory
Lee Lewis

HT1338 i am trying to download software update. after finishing, I get message stating cannot authenticate or store. Anyone know whats up?

I am trying to download software update. After finishing download, I get message statng cannot authenticate or save. Help!!!

Means the DL is corrupt and you need to try again. If from the MAS, try from http://support.apple.com/downloads/

E71 windows 7 bluetooth "Cannot authenticate the p...

I am using 7.1.51.0 Nokia PC Suite on Windows 7. I have Nokia e71-2. I have latest software on device (410.21.010) using Nokia ovi Suite (2.2.0.245).
Under Device manager->Bluetooth Radios, I have following Drivers versions installed:
Micorsoft Bluetooth Enumerator from Microsoft: 6.1.7600.16385
HP Integerated module with Bluetooth Wireless 2.1Technology from Broadcom: 6.2.0.9000
Using PC Suite when I try to connect to bluetooth, it supplies the pairing code. I hit OK and then enter the pairing code on e71. The pairing seems successsful and I can see my "tjsingh-mobl" laptop on e71 under Menu->Connectivity->Bluetooth->"Paired Devices". I set it as authorized device. However after some time PC Suite tells me that "Cannot authenticate the phone".
I have searched the forum and have failed to find any solution.
I tried the following also but didn't help. There is no "Service Controllers" app on my e71.
Menu > Applications > App. mgr. > Installed apps. > uninstall 'Service Controllers' and 'Contacts Groups DS Plugin' applications.
/t5/PC-and-Mac-Software/PC-Suite-Vista-x64-and-N78-FAIL/m-p/401633/highlight/true#M31457
Can anyone help?

I had this problem too, but the phone got recognized at last after the latest OVI Suite upgrade. Somehow it must have installed some drivers which allowed win7 to recognize and autenticate the phone

ACS cannot Authenticate Aironet Users against Exernal DB (LDAP)

ACS cannot Authenticate Aironet Users against Exernal DB (LDAP)
Can anyone point me to a technical explanation of why this is true?
All I have found so far is one small note in a help file and something that might be related under EAP-FAST explanation.
I have posed this question to our Cisco account team but no response yet.
Just need to have a good explanation when explaining to mgmt why we need to have a special setup for WLAN users.

Hmmm....you should be getting more than that from debug radius and debug aaa authen if your AP is truly attempting EAP authentication. The debugs I generally use for this are 'debug aaa authen', 'debug radius', and 'debug dot11 aaa dot1x all' coupled with gathering the detailed support logs from ACS. A warning about 'debug dot11 aaa dot1x all'....it is VERY verbose and cryptic if you don't have alot of experience looking at it so it may be best to open up a TAC case. With these debugs turned on, you should see an EAPOL logon show up from the client (usually says 'received EAPOL packet...') and then a request for identity from the switch and a response from the client with a username and password. Then a series of RADIUS challenge/response packets will be passed which consists of the server cert being passed to the client for validation and then the client sending the username and password to the server. Then you will finally get an access-reject or access-accept packet from the RADIUS server. The failed and passed attempts logs in ACS can also provide good info as to what the source of the failure may be. Do you get any passed or failed attempts for these authentications?

Used Adobe ID to create Behance account, but I cannot authenticate my account with Behance with my Adobe ID details.

As per the subject line.
I created a Behance account with my Adobe ID, but now I cannot authenticate the Account with the Behance Plugin.
Any ideas anyone?

See this thread....
I cannot link Lightroom CC to my Behance account.
All the best.
Dean

Pc cannot authenticate to nac

Similar Messages

Maybe you are looking for