Policy Manager API - The AccessGate is unable to contact any Access Servers

Hello all,
I am trying some samples to connect to OAM using policy manager api.
I have the below mentioned code
ObAccessManager am = new ObAccessManager();
ObConfig.initialize();
am.setAdmin("orcladmin", "welcome1");
But when I run this code, I get an exception saying
com.oblix.access.ObAccessException: The AccessGate is unable to contact any Access Servers.
I have included AccessServerSDK paths in PATH,CLASSPATH and OBACCESS_INSTALL_DIR variables.
and my ObAccessClient.xml file access server entry is as below
<ValNameList
xmlns="http://www.oblix.com"
ListName="server1">
<NameValPair
ParamName="host"
Value="son1891"></NameValPair>
<NameValPair
ParamName="port"
Value="6035"></NameValPair>
<NameValPair
ParamName="numOfConnections"
Value="1"></NameValPair>
</ValNameList>
I have spent a complete day on this, but still do not have a clue what is wrong.
Please help me to solve this.
Thanks
Roopa.

Ensure you have the following Env Var's set:
CLASSPATH to \AccessServerSDK\oblix\lib\jobaccess.jar
LD_LIBRARY_PATH to \AccessServerSDK\oblix\lib
OBACCESS_INSTALL_DIR to \AccessServerSDK
PATH to \AccessServerSDK\oblix\lib; \AccessServerSDK\oblix\tools
POST_CLASSPATH to \AccessServerSDK\oblix\lib\jobaccess.jar
In your AccessGate Definition, did you set the Access Management Service to On? The Communication Modes should be same for all the components. Also mind the time difference between all the systems. Anyway - May I know the objective behind the work with Policy Manager API ? Are you building a custom UI ?

Similar Messages

Accessgate is unable to contact any access servers

Hi friends,
I have created two different domains for OIM and OAM PS1, trying to integrate them. After removing IAMSUITEAGENT, have installed a Oracle WEBGATE ( accessgate).
Webgate and OHS are in same LINUX BOX( hostname : POC) ... But when i start OHS following error is diplayed.
Message from syslogd@ at Sun Aug 25 17:21:44 2013 ...
POC Oblix: 2013/08/25@21:21:44.24670 11693   11703 ACCESS_GATE     FATAL   0x00001520 /ade/aime_ngamac_279059/ngamac/src/palantir/webgate2/src/apache2entry_web_gate.cpp:597 "Exception thrown during WebGate initialization"
Message from syslogd@ at Sun Aug 25 17:21:44 2013 ...
POC Oblix: 2013/08/25@21:21:44.24711 11693   11703 ACCESS_GATE     FATAL   0x0000182C /ade/aime_ngamac_279059/ngamac/src/palantir/webgate2/src/apache2entry_web_gate.cpp:598 "The AccessGate is unable to contact any Access Servers."       raw_code^301 ...
Even I tried for telnet... hostname: POC.COM ( IP is 172.16.30.188)
Result:
telnet POC.COM
Trying 172.16.30.188...
telnet: connect to address 172.16.30.188: Connection refused
telnet: Unable to connect to remote host: Connection refused....
Any resolution or anything missing in installation or configuration????

yes .. I found 3 different access gate folders in OUTPUT folder....
Now copied ObAccessClient.xml and cwallet.sso from appropriate access gate folder to OHS instance config folder
Restarted OHS
but still it shows ....
Message from syslogd@ at Mon Aug 26 16:15:53 2013 ...
POC Oblix: 2013/08/26@20:15:53.25212 20892   20903   ACCESS_GATE     FATAL   0x00001520      /ade/aime_ngamac_279059/ngamac/src/palantir/webgate2/src/apache2entry_web_gate.cpp:597 "Exception thrown during WebGate initialization"
Message from syslogd@ at Mon Aug 26 16:15:53 2013 ...
POC Oblix: 2013/08/26@20:15:53.25252 20892   20903   ACCESS_GATE     FATAL   0x0000182C      /ade/aime_ngamac_279059/ngamac/src/palantir/webgate2/src/apache2entry_web_gate.cpp:598 "The AccessGate is unable to contact any Access Servers."       raw_code^301
and /usr/sbin/lsof -i:5575
gives nothing .. I think access server is not listeing on 5575 ?????
telnet kolea.tdc.com 7001
Trying 172.16.30.188...
Connected to kolea.tdc.com (172.16.30.188).
Escape character is '^]'.
Connection closed by foreign host.
[oracle@kolea softwares]$ telnet kolea.tdc.com 5585
Trying 172.16.30.188...
telnet: connect to address 172.16.30.188: Connection refused
telnet: Unable to connect to remote host: Connection refused.

TS4268 What does it mean when I get the error message, "unable to contact iMessage center" when trying to set up iMessages and I click next and it starts verifying and then the error message.

What does it mean when I get the error message, "unable to contact iMessage server" when I try to use iMessage and after it starts verifying?

iOS: Troubleshooting FaceTime and iMessage activation
Apple is not reporting any problem
http://www.apple.com/support/systemstatus/

Please help me with formatting the os 10.6.8 without the cd..unable to open any application and i dont have the installation cd.

Hi
I am using mac 10.6.8 and unable to open any application as well as system preferences. I don't have the cd's as well.
So tell me what can i do i want to reinstall my os without the cd.
Please help

Safari->Empty cache, quit and relaunch Safari. This link works here: Mac OS X 10.6.8 Update Combo v1.1
27" i7 iMac (Mid 2011) refurb, OS X Yo (10.10.1), Mavs, ML & SL, G4 450 MP w/10.5 & 9.2.2

URGENT: OES 11g Policy Management API Query

We are working on OES 11g environment. We have a requirement to create Application/Resoruce Types/Resources/POlicies (using a custom built UI) using OES Policy API. We are referring the OES Developer Guide http://docs.oracle.com/cd/E21764_01/security.1111/e14097/cons_policy_prog.htm#CHDFFDDI
We have tried creating an application using the below code snippet and it code is executing fine. To test it, we executed create application code and it threw error as duplicate as shown below.
oracle.security.jps.service.policystore.PolicyObjectAlreadyExistsException: Cannot create application policy context "Trading".
However the OES Admin console does not have the application created through java code. We have copied jps-config.xml and system-jazn-data.xml to the eclipse project where we are running the java code.
Do we need to add any other files/make anyother changes to the environment to have the policies/applications created through API reflects in OES Admin console?
Please help. It is very urgent.

Try a jps-config.xml like this:
<?xml version="1.0" encoding="UTF-8" standalone='yes'?>
<jpsConfig xmlns="http://xmlns.oracle.com/oracleas/schema/11/jps-config-11_1.xsd" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.oracle.com/oracleas/schema/11/jps-config-11_1.xsd" schema-major-version="11" schema-minor-version="1">
<property name="oracle.security.jps.jaas.mode" value="off"/>
<serviceProviders>
<serviceProvider name="policy.rdbms" type="POLICY_STORE" class="oracle.security.jps.internal.policystore.OPSSPolicyStoreProvider" >
<property name="policystore.type" value="DB_ORACLE" />
</serviceProvider>
</serviceProviders>
<serviceInstances>
<serviceInstance provider="policy.rdbms" name="policystore.rdbms">
<property name="jdbc.driver" value="oracle.jdbc.driver.OracleDriver"/>
<property name="jdbc.url" value="jdbc:oracle:thin:@localhost:1521:orcl"/>
               <property name="jdbc.user" value="DEV_APM"/>
               <property name="jdbc.password" value="Passw0rd1"/>
               <property name="root.dn" value="cn=oes_domain,cn=JPSContext,cn=jpsroot"/>
</serviceInstance>
</serviceInstances>
<jpsContexts default="default">
<jpsContext name="default">
               <serviceInstanceRef ref="policystore.rdbms"/>
</jpsContext>
</jpsContexts>
</jpsConfig>
And update the jdbc connection values appropriately for your system.
Note that this is an insecure way because the password is stored inside this config file in plain text. A better way is to put the password into the wallet, but this should get you started.
Once you got this working you can replace the user and password properties with the following:
<property value="oes_sm_key" name="bootstrap.security.principal.key"/>
<property value="oes_sm_map" name="bootstrap.security.principal.map"/>
and copy the wallet (cwallet.sso) file

Can I add a production manager to the team? No need for any software licenses, just access to check files on the Cloud.

I need to add people to my team to supervise and make sure files are ready. I don't think I should buy a full license for this purpose since they are only going to be viewing files. Consider that all production members have 100 GB of space, this person needs to be able to access the full 100 GB as well.
Thanks!

Who is suppose to answer this forum?

Trying to upgrade: Unable to contact iPhone update servers

iPhone: 3GS running 3.1.3 (latest firmware)
Machine: MacBook Pro 2,2
OS: 10.5.8
I've been trying to update to iOS4 for the past few days. Connect via USB directly, phone backs up and then asks if I want to upgrade. Click yes and it goes through the motions ie extracting the software and stops at "Verifying iPhone upate with Apple" for ages before saying unable to connect to the iPhone update servers.
I've tried this every few hours for the past two days. Any ideas?

Right, if you have a Linksys router, you need to disable "Proxy Filtering" in the Security > Firewall page.

TS4036 How Can I re-enable my disabled from my Computer(the Ipad doesn't allow me any access to the Ipad)

How can I re-enable a disabled Ipad from my computer?

By not allowing enough time to reset, do you mean you have tried a reboot by holding both the power and home buttons until the apple logo appears, ignoring the red slider? If so, are you able to power down just using the power button? Does it then restart on its own?
If you cannot get it to reboot, stay powered down, take it to an Apple store genius bar and have the technicians test it to see what is wrong...that is most likely a hardware issue.

Windows see the iPod, but i dont have any access

Hi.
When I plug in my shuffle to my USB (2.0) port, it comes up right in windows, but I cant get in to it through my computer. itunes and ipod updater dont find it at all. The message I get when I try to go in to it through my computer is "G:\ is not accessible the request could not be preformed because of an I/0 device error".
It cant have anything to do with my USB ports 'cause I've recently installed a new USB 2.0 PCI card. Had the same error with the old ports.
Someone who know why it is doing this to me??
PC Windows XP Pro Athlon

yes I have.
The strange thing is that I have a Nano that works perfect with my computer. strage..
however, the shuffle has nerver worked well, in the begining it worked ok, but not good, but later on it´s been worse and now it does'nt work at all :/

My I cloud is linked to an email address that is no longer valid and I forgot the password so can't get any access? Help

O2 have discontinued my email address and I have forgotten my password. This email is the 1 I used for my iCloud account. So now can't get into my account at all? As if I do the forgot password thing it can't be verified through my email?

Go to https://getsupport.apple.com ; click' See all products and services', then 'More Products and Services, then 'Apple ID', then 'Other Apple ID Topics' then 'Lost or forgotten Apple ID password'.

I own an iMac 2011. I am unable to reinstall and launch premiere pro cc. We I attempt to run the program I get a error message saying that the adobe application manager is missing or need to be updated. I reinstalled the manager but I am still unable to l

I own an iMac 2011. I am unable to reinstall and launch premiere pro cc. We I attempt to run the program I get a error message saying that the adobe application manager is missing or need to be updated. I reinstalled the manager but I am still unable to launch any of my programs from adobe. I tried to do a trail with a program and I am still getting the same message.

Davinci thank you for the update.
Please utilize any available uninstallers that are located in the Applications/Utilities/Adobe Installers folder. Once all of the available uninstallers have been run you will then want to rerun the CC Cleaner Tool. You can find directions on the use of the CC Cleaner Tool and a download link at Use the CC Cleaner Tool to solve installation problems | CC, CS3-CS6 - http://helpx.adobe.com/creative-suite/kb/cs5-cleaner-tool-installation-problems.html. After the CC Cleaner Tool is run then please reinstall the Creative Cloud Desktop application from Creative Cloud Help | Creative Cloud for desktop.
The CC Cleaner Tool is designed to be used after running the uninstallers. Without running the uninstallers first then a complete removal may not be possible.

Policy Domain Root error during Policy Manager installation

I am installing Policy manager for the first time and I am getting error at Policy domain root level.
If I specify Policy Domain Root as / it gives me this error
Unable to modify the entry with DN obapp=PSC,ou=Oblix,dc=SUPPLIER,DC=GLOBAL in the directory server - Object class violation in ModifyDBEntry_ADSI()
The DN obapp=PSC,ou=Oblix,dc=SUPPLIER,DC=GLOBAL exists in the directory.
My directory is Windows 2003 standard edition SP1 active directory. I am using Oracle access manager 10.1.4
user and policy directory is the same directory supplier.global.
Forest and domain functional level is Windows 2003
My person object class is: user
i have already installed webpass and identity server on same machine.
I have removed and tried to reinstall the policy manager on the same machine and the same error.
My identity server admin console is showing three directories:
AccessManager_setup_user_profile
AccessServer_default_user_profile
default-IdentityServer_1_6022
all of the directories have these settings dynamic auxiliary is yes and directory type is microsoft active directory (using adsi) without ldap for authentication checked.
I am getting these errors in my access logs looks like the path is wrong and the files are missing but not sure from which part of setup its taking this.
2007/02/06@19:22:35.265000     3040     1848     INIT     ERROR     0x000003B6     base\oblistrwutil.cpp:145     "Could not read file"     filename^C:\Program Files\NetPoint\WebComponent\access/oblix/lang/en-us/comm_servermsg.xml
2007/02/06@19:22:35.375000     3040     1848     INIT     ERROR     0x000003B6     base\oblistrwutil.cpp:145     "Could not read file"     filename^C:\Program Files\NetPoint\WebComponent\access/oblix/lang/en-us/sysmgmtmsg.xml
2007/02/06@19:22:36.015000     3040     1848     INIT     ERROR     0x000003B6     base\oblistrwutil.cpp:145     "Could not read file"     filename^C:\Program Files\NetPoint\WebComponent\access/oblix/lang/en-us/policysetupldifs_msg.xml
2007/02/06@19:22:37.843000     3040     1848     DB_RUNTIME     WARNING     0x00000007     \Oblix\coreid\np_common\db\ldap\util\ldap_util.cpp:1131     "Requested modify or add operation resulted in schema violation"     function^ModifyDBEntry()     dn^obapp=PSC,ou=Oblix,dc=SUPPLIER,DC=GLOBAL
2007/02/06@19:22:37.843000     3040     1848     DB_RUNTIME     WARNING     0x00000504     \Oblix\coreid\np_common\db\ldap\util\ldap_util.cpp:1217     "Exception during DB runtime code"     function^ModifyDBEntry()     dn^obapp=PSC,ou=Oblix,dc=SUPPLIER,DC=GLOBAL
2007/02/06@19:22:37.843000     3040     1848     DB_RUNTIME     WARNING     0x00000504     \Oblix\coreid\np_common\db\ldap\util\ldap_util3.cpp:837     "Exception during DB runtime code"     function^ModifyDBEntryWithDupCheck
Thanks for helping me out.
Message was edited by:
user557359

Hi,
Go to Policy domain root for Activer directory
Steps on how to resolve this are outlined there.
Rgds,
Boland

NPS: Event 6274 - Network Policy Server discarded the request for a user

Intermittently I will get desktop (wired) and laptop (wireless) computers experiencing issues with NPS (they drop off the network).
Some computers are affected more than others, although they are identical hardware and based on a standard image.
In the event log of the NPS servers I can see the following messages:
Log Name:      Security
Source:        Microsoft-Windows-Security-Auditing
Date:          2/05/2014 8:47:58 a.m.
Event ID:      6274
Task Category: Network Policy Server
Level:         Information
Keywords:      Audit Failure
User:          N/A
Computer:      NT147.domain.local
Description:
Network Policy Server discarded the request for a user.Contact the Network Policy Server administrator for more information.User:
Security ID:   NULL SID
Account Name:   host/DPC0387.domain.local
Account Domain:   DOMAIN
Fully Qualified Account Name: DOMAIN\DPC0387$Client Machine:
Security ID:   NULL SID
Account Name:   -
Fully Qualified Account Name: -
OS-Version:   -
Called Station Identifier:  3c-xx-xx-xx-xx-xx
Calling Station Identifier:  00-xx-xx-xx-xx-xxNAS:
NAS IPv4 Address:  10.nnn.nnn.nnn
NAS IPv6 Address:  -
NAS Identifier:   ND246
NAS Port-Type:   Ethernet
NAS Port:   71RADIUS Client:
Client Friendly Name:  Network Device Management Subnet
Client IP Address:   10.nnn.nnn.nnnAuthentication Details:
Connection Request Policy Name: NAP 802.1X (Wired)
Network Policy Name:  -
Authentication Provider:  Windows
Authentication Server:  NT147.domain.local
Authentication Type:  -
EAP Type:   -
Account Session Identifier:  384F322E317838316564303034313030306230666632
Reason Code:   1
Reason:    An internal error occurred. Check the system event log for additional information.
How do I debug when an internal error occurs but there is nothing in the system event log? Where else can I look?
Here's the packet trace that matches the event log entry above:
No.     Time        Source                Destination           Protocol Length Time from request Info
      1 0.000000    JuniperN_xx:xx:xx     Universa_xx:xx:xx     EAP      60                       Request, Identity
      2 2.470423    Universa_xx:xx:xx     Nearest               EAPOL    60                       Start
      3 2.472870    JuniperN_xx:xx:xx     Universa_xx:xx:xx     EAP      60                       Request, Identity
      4 2.539416    Universa_xx:xx:xx     Nearest               EAP      60                       Response, Identity
      5 2.544206    Universa_xx:xx:xx     Nearest               EAPOL    60                       Start
      6 2.548804    JuniperN_xx:xx:xx     Universa_xx:xx:xx     EAP      60                       Request, Identity
      7 2.550050    Universa_xx:xx:xx     Nearest               EAP      60                       Response, Identity
      8 2.552597    10.switch             10.NPS_Server         RADIUS   254                      Access-Request(1) (id=249, l=208)
      9 2.556043    10.NPS_Server         10.switch             RADIUS   136    0.003446000       Access-Challenge(11) (id=249, l=90)
     10 2.565876    JuniperN_xx:xx:xx     Universa_xx:xx:xx     EAP      60                       Request, Protected EAP (EAP-PEAP)
     11 2.569472    10.switch             10.NPS_Server         RADIUS   254                      Access-Request(1) (id=250, l=208)
     12 2.572566    10.NPS_Server         10.switch             RADIUS   136    0.003094000       Access-Challenge(11) (id=250, l=90)
     13 2.580254    Universa_xx:xx:xx     Nearest               TLSv1    123                      Client Hello
     14 2.586544    10.switch             10.NPS_Server         RADIUS   361                      Access-Request(1) (id=251, l=315)
     15 4.564841    Universa_xx:xx:xx     Nearest               EAPOL    60                       Start
     16 4.568530    JuniperN_xx:xx:xx     Universa_xx:xx:xx     EAP      60                       Request, Identity
     17 4.569876    Universa_xx:xx:xx     Nearest               EAP      60                       Response, Identity
     18 4.582263    10.switch             10.NPS_Server         RADIUS   254                      Access-Request(1) (id=252, l=208)
     19 4.586006    10.NPS_Server         10.switch             RADIUS   136    0.003743000       Access-Challenge(11) (id=252, l=90)
     20 4.591896    JuniperN_xx:xx:xx     Universa_xx:xx:xx     EAP      60                       Request, Protected EAP (EAP-PEAP)
     21 4.592692    Universa_xx:xx:xx     Nearest               TLSv1    123                      Client Hello
     22 4.599634    10.switch             10.NPS_Server         RADIUS   361                      Access-Request(1) (id=253, l=315)
     23 4.600887    10.NPS_Server         10.switch             IPv4     1518                     Fragmented IP protocol (proto=UDP 17, off=0, ID=07db)
     24 4.609920    JuniperN_xx:xx:xx     Universa_xx:xx:xx     TLSv1    1514                     Server Hello, Certificate, Certificate Request, Server Hello Done
     25 4.610516    Universa_xx:xx:xx     Nearest               EAP      60                       Response, Protected EAP (EAP-PEAP)
     26 4.617407    10.switch             10.NPS_Server         RADIUS   262                      Access-Request(1) (id=254, l=216)
     27 4.618352    10.NPS_Server         10.switch             RADIUS   288    0.000945000       Access-Challenge(11) (id=254, l=242)
     28 4.623650    JuniperN_xx:xx:xx     Universa_xx:xx:xx     TLSv1    176                      Server Hello, Certificate, Certificate Request, Server Hello Done
     29 4.643316    Universa_xx:xx:xx     Nearest               TLSv1    361                      Certificate, Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
     30 4.649607    10.switch             10.NPS_Server         RADIUS   601                      Access-Request(1) (id=255, l=555)
     31 4.656950    10.NPS_Server         10.switch             RADIUS   199    0.007343000       Access-Challenge(11) (id=255, l=153)
     32 4.662734    JuniperN_xx:xx:xx     Universa_xx:xx:xx     TLSv1    87                       Change Cipher Spec, Encrypted Handshake Message
     33 4.681106    Universa_xx:xx:xx     Nearest               EAP      60                       Response, Protected EAP (EAP-PEAP)
     34 4.788536    10.switch             10.NPS_Server         RADIUS   262                      Access-Request(1) (id=2, l=216)
     35 4.789735    10.NPS_Server         10.switch             RADIUS   173    0.001199000       Access-Challenge(11) (id=2, l=127)
     36 4.795723    JuniperN_xx:xx:xx     Universa_xx:xx:xx     TLSv1    61                       Application Data
     37 4.796372    Universa_xx:xx:xx     Nearest               TLSv1    93                       Application Data
     38 4.802368    10.switch             10.NPS_Server         RADIUS   331                      Access-Request(1) (id=3, l=285)
     39 4.803363    10.NPS_Server         10.switch             RADIUS   189    0.000995000       Access-Challenge(11) (id=3, l=143)
     40 4.808905    JuniperN_xx:xx:xx     Universa_xx:xx:xx     TLSv1    77                       Application Data
     41 4.809501    Universa_xx:xx:xx     Nearest               TLSv1    77                       Application Data
     42 4.817342    10.switch             10.NPS_Server         RADIUS   315                      Access-Request(1) (id=4, l=269)
     43 4.822986    10.NPS_Server         10.switch             RADIUS   189    0.005644000       Access-Challenge(11) (id=4, l=143)
     44 4.828973    JuniperN_xx:xx:xx     Universa_xx:xx:xx     TLSv1    77                       Application Data
     45 4.833318    Universa_xx:xx:xx     Nearest               TLSv1    829                      Application Data
     46 4.840610    10.switch             10.NPS_Server         RADIUS   1073                     Access-Request(1) (id=5, l=1027)
     47 4.845946    10.NPS_Server         10.switch             RADIUS   189    0.005336000       Access-Challenge(11) (id=5, l=143)
     48 4.850938    JuniperN_xx:xx:xx     Universa_xx:xx:xx     TLSv1    77                       Application Data
     49 4.907924    Universa_xx:xx:xx     Nearest               TLSv1    141                      Application Data
     50 4.913390    10.switch             10.NPS_Server         RADIUS   379                      Access-Request(1) (id=6, l=333)
     51 4.917535    10.NPS_Server         10.switch             RADIUS   221    0.004145000       Access-Challenge(11) (id=6, l=175)
     52 4.922877    JuniperN_xx:xx:xx     Universa_xx:xx:xx     TLSv1    109                      Application Data
     53 4.923472    Universa_xx:xx:xx     Nearest               TLSv1    61                       Application Data
     54 4.930319    10.switch             10.NPS_Server         RADIUS   299                      Access-Request(1) (id=7, l=253)
     55 4.937348    10.NPS_Server         10.switch             RADIUS   381    0.007029000       Access-Challenge(11) (id=7, l=335)
     56 4.942543    JuniperN_xx:xx:xx     Universa_xx:xx:xx     TLSv1    269                      Application Data
     57 4.944791    Universa_xx:xx:xx     Nearest               TLSv1    125                      Application Data
     58 4.951408    10.switch             10.NPS_Server         RADIUS   363                      Access-Request(1) (id=8, l=317)
     59 4.954022    10.NPS_Server         10.switch             RADIUS   355    0.002614000       Access-Accept(2) (id=8, l=309)
     60 4.981482    JuniperN_xx:xx:xx     Universa_xx:xx:xx     EAP      60                       Success
     61 32.590347   10.switch             10.NPS_Server         RADIUS   361                      Access-Request(1) (id=251, l=315)
     62 62.592420   10.switch             10.NPS_Server         RADIUS   361                      Access-Request(1) (id=251, l=315)
     63 92.595043   10.switch             10.NPS_Backup_Server RADIUS   361                      Access-Request(1) (id=9, l=315)
     64 122.597856 10.switch             10.NPS_Backup_Server RADIUS   361                      Access-Request(1) (id=9, l=315)
     65 152.600618 10.switch             10.NPS_Backup_Server RADIUS   361                      Access-Request(1) (id=9, l=315)

A belated thanks for your reply.
Our environment doesn't have NPS accounting configured so that was easy to rule out.
The mid-day drop outs have stopped after I added "set protocols dot1x authenticator no-mac-table-binding" to our Juniper switches (which prevents mac address aging from clearing the active dot1x client session).
I believe the above error message occurs because the RADIUS session ID is rejected / ignored because of some quirks in the RADIUS standard. At the start of a dot1x authentication request a RADIUS session ID is created. For whatever reason the
RADIUS/NAP server stops responding and the Juniper switch fails over to the backup RADIUS/NAP server configured. The session ID is kept (per RADIUS standard) but the backup RADIUS/NAP server doesn't know about the session, so this event: "Network
Policy Server discarded the request for a user." occurs.
It would be nice to see a clearer error message "Invalid RADIUS session" or similar.
There is a Microsoft guide on how to set up RADIUS/NAP servers in a highly available configuration - something to do with RADIUS proxy servers.
It would be even nicer to see some kind of RADIUS session synchronisation between NAP servers... if it doesn't already exist?
I am having the same exact issue you posted on here except I have Extreme Network switches. Some of my computers, various hardware, will randomly not authenticate during re-authentication. The switch says that it failed to contact the NPS server so then it
switches to my backup server. The client has a random time on how long it waits to authenticate so sometimes I end up having the disable/re-enable the port they are connected to so that the session is started again. I see that you basically removed the option
to force clients to re-authenticate Any downfall disabling that?. Any idea why the NPS server is no longer responding? Are you using Windows Server 2012?

Renamed Domain - Clients Still "joined" to old domain, can't open Group Policy Management on Server

Performed a Domain Rename as per the following instructions:
http://www.bauer-power.net/2011/05/renaming-windows-domain-with-rendom.html#.U4OZRPmSyTM
and then after these issues I have gone through the related technet articles starting here:
http://technet.microsoft.com/en-us/library/cc794793(v=ws.10).aspx
specifically the Fix Group Policy Objects and Links.
But still I have the following issues:
At least for group policy clients believe they are on the old domain - despite even having renamed the computers with the new domain name.
When I perform a gpresult the output file shows as being connected to the old Domain - despite manually going into computer properties and renaming the computer with the new domain name...
CN=Allister Wade,OU=Users,OU=Home,DC=NEWDOMAIN,DC=local
Last time Group Policy was applied: 27/05/2014 at 5:36:31 AM
Group Policy was applied from: finch.newdomain.local
Group Policy slow link threshold: 500 kbps
Domain Name: OLDDOMAIN
Domain Type: WindowsNT 4
On the server I cannot open Group Policy Management on the single Domain Controller as it is looking for a DC on the old Domain:
Even though it has listed the new domain in the root of the management console when I attempt to expand it out I am prompted:
"The specified domain controller could not be contacted. This affects the following domain in the console.
Domain: olddomain.local
The error was:
The specified domain either does not exist or could not be contacted."
I can select to remove the domain from the console but this does nothing - as said it already shows the new domain in the console.
Far as I am aware the clients should not even of needing renaming or changing the domain, but were having authentication issues before I did this. Not sure what I have done wrong here..?

Client's NSLookup shows "UnKnown" as DNS Server so thought to check DNS out.
This is result of dcdiag /test:DNS.
Directory Server Diagnosis
Performing initial setup:
Trying to find home server...
Home Server = finch
* Identified AD Forest.
Done gathering initial info.
Doing initial required tests
Testing server: Default-First-Site-Name\FINCH
Starting test: Connectivity
......................... FINCH passed test Connectivity
Doing primary tests
Testing server: Default-First-Site-Name\FINCH
Starting test: DNS
DNS Tests are running and not hung. Please wait a few minutes...
......................... FINCH passed test DNS
Running partition tests on : ForestDnsZones
Running partition tests on : DomainDnsZones
Running partition tests on : Schema
Running partition tests on : Configuration
Running partition tests on : NEWDOMAIN
Running enterprise tests on : NEWDOMAIN.local
Starting test: DNS
Test results for domain controllers:
DC: finch.NEWDOMAIN.local
Domain: NEWDOMAIN.local
TEST: Delegations (Del)
Error: DNS server: finch.olddomain.local. IP:<Unavailable>
[Missing glue A record]
Summary of test results for DNS servers used by the above domain
controllers:
DNS server: 203.12.160.35 (<name unavailable>)
1 test failure on this DNS server
PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 203.12.160.35
Summary of DNS test results:
Auth Basc Forw Del Dyn RReg Ext
Domain: NEWDOMAIN.local
finch PASS PASS PASS FAIL PASS PASS n/a
......................... NEWDOMAIN.local failed test DNS

Oracle Policy Manage

Hello forum,
How can I start the application named Oracle Policy Manager?, thanks

on the server
go to programs ->Integreted Management Tools ---> select Policy manager .
give the username pwd and service for the datbase u want to connect
hope this helps

Policy Manager API - The AccessGate is unable to contact any Access Servers

Similar Messages

Maybe you are looking for