Port/s used for Proxy requests between ACS SE

I am setting up a new ACS SE and will use this ACS to proxy TACACS requests to another ACS SE in another network tier. I know TACACS uses TCP 49 for authentication. What ports/protocol do the ACS SE use to communicate between one another for the proxy requests? I need to know in order to open the firewall policy to allow access.

I think the other commonly used ports are 1645 and 1812. If you select TACACS+ in the AAA Server Type field, this RADIUS Authentication Port field is dimmed.

Similar Messages

  • Destination disabled. []: [CrystalEnterprise.Ftp]. Please note the name of the job server used for your request and contact your system administrator to make sure the specified destination is enabled. (FWB 00031)

    Hi
    In BO 4.0 SP 9 when a administrator tries to schedule a report via CMC there is no error
    But when a user schedules a report and the destination is FTP location -> Use default settings he gets following error
    Destination disabled. []: [CrystalEnterprise.Ftp]. Please note the name of the job server used for your request and contact your system administrator to make sure the specified destination is enabled. (FWB 00031)
    There is only one Job Server and the destinations are enabled in it
    There is no Job server for Crystal Reports Job Server
    Do i need to create it and how.

    Please check if you have proper rights to schedule to FTP. You can create a new job server, whenever you schedule it, there are multiple job servers, it will handle based on the load. But it is not mandatory, depends on the load.

  • IllegalStateException:output stream is already being used for this request

    How to read binary data in JSP. I know, in servlets it can be done and JSP can handle only character data. When i try to open res.getOutputStream(), it is throwing the following exception:"IllegalStateException:output stream is already being used for this request". Is there any workaround in JSP?

    Can you save the file to a location in your server ? Even if you are creating a dynamic image, all you get is a byte array which can be stored in your server. If you can do so, you can set the content type and display the content as mentioned above.

  • Tomcat Error : OutPutstream is already being used for this request

    I'using Jdev3.2 to develop an application based on the dataweb
    beans.
    I'm using the EditCurrentRecord, and the function UseListOfValue
    to disply lovs.
    I deployed the application on tomcat, when the page is displayed
    an execption occur which is 'OutPutstream is already being used
    for this request'
    can someone help me please
    THX in advance
    Ghassen

    can someone help?
    Please

  • OutputStream is already being used for this request.

    I have been trying to get images fom Oracle Database and displaying from JSP but get an IllegalStateException:OutputStream is already being used for this request.
    My code is as follows:
    <%
    Connection con = cods.getConnection();
    Statement st = con.createStatement();
    String query="SELECT image FROM image_table WHERE id=1";
    ResultSet rs = st.executeQuery(query);
    if( rs.next() ){
    BLOB blob=((OracleResultSet)rs).getBLOB(1);
    byte []bl=new byte[1024*1024];
    bl=blob.getBytes(1,(int)blob.length());
    response.setContentType("image/jpeg");
    ServletOutputStream outs = response.getOutputStream ();
    outs.write(bl);
    outs.close();
    rs.close();
    st.close();
    con.close();
    %>

    Try a plain ol' out.write();

  • On Apple TV. Can the USB port be used for a keyboard and mouse interface

    On Apple TV. Can the USB port be used for a keyboard and mouse interface

    A bluetooth keyboard can be used with the Apple TV.
    There is no need for a mouse with an ATV.

  • Can ethernet ports be used for windows pc as a LAN so that i can share all documents through it?

    can ethernet ports be used for windows pc as a LAN so that i can share all documents through it?

    The current 27-inch iMac can. Other iMac models can't outside of a VNC setup or ScreenRecycler; all such solutions require a standalone monitor for setup and troubleshooting.
    (51433)

  • Which ports oracle use for replication..

    Hi All,
    I want to know which ports orcale use for replication.plz reply me quickly.
    Thanx in advance

    This is configurable. By default, listeners will run on port 1521, but sites can specify multiple and/or different ports. Depending on the OS of the database, connections made on that initial port may be redirected to a different port (Windows) or may do all the communication on the listener port (Unix). Windows databases can be configured to do all communication on the listener port, though there may be a performance impact to doing so.
    Justin

  • Apache configuration for proxying requests to Weblogic SSL port

    Hello Everyone,
    I want to proxy requests from Apache to Weblogic server on its SSL Port 7002. I am using the default SSL demo version provided by Oracle/BEA.
    Both my Apache and Weblogic instances are running on same machine.
    This is the procedure I followed. I enabled SSL port on Weblogic. Added below configuration to Apache conf file. I am passing trusted.crt file inside WL_HOME/server/lib as parameter to TrustedCAFile .
    <Location "/">
    SetHandler weblogic-handler
    </Location>
    <IfModule mod_weblogic.c>
    SetHandler weblogic-handler
    WebLogicHost ServerHostMame
    WebLogicPort WLInstanceSSLPort
    SecureProxy ON
    TrustedCAFile "C:/trusted.crt"
    RequireSSLHostMatch false
    Debug ALL
    WLLogFile "C:/wl_proxy.log"
    </IfModule>
    When I start the Apache instance and try to access the webpage I see below exception in proxy log.
    Thu Apr 09 10:38:05 2009 <735212392878852> Hdrs to WLS:[WL-Proxy-Client-IP]=[10.149.181.55]
    Thu Apr 09 10:38:05 2009 <735212392878852> Hdrs to WLS:[Proxy-Client-IP]=[10.149.181.55]
    Thu Apr 09 10:38:05 2009 <735212392878852> Hdrs to WLS:[X-Forwarded-For]=[10.149.181.55]
    Thu Apr 09 10:38:05 2009 <735212392878852> Hdrs to WLS:[X-WebLogic-KeepAliveSecs]=[30]
    Thu Apr 09 10:38:05 2009 <735212392878852> Hdrs to WLS:[X-WebLogic-Force-JVMID]=[unset]
    Thu Apr 09 10:38:05 2009 <735212392878761> INFO: No session match found
    Thu Apr 09 10:38:05 2009 <735212392878852> INFO: SSL certificate chain validation failed: 3015
    Thu Apr 09 10:38:05 2009 <735212392878852> trusted certs = 0
    Thu Apr 09 10:38:05 2009 <735212392878852> dumping cert chain
    Thu Apr 09 10:38:05 2009 <735212392878852> commonName is testmachine-us
    Thu Apr 09 10:38:05 2009 <735212392878761> INFO: DeleteSessionCallback
    Thu Apr 09 10:38:05 2009 <735212392878852> ERROR: SSLWrite failed
    Thu Apr 09 10:38:05 2009 <735212392878852> SEND failed (ret=-1) at 789 of file ../nsapi/URL.cpp
    Thu Apr 09 10:38:05 2009 <735212392878852> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 790 of ../nsapi/URL.cpp
    Thu Apr 09 10:38:05 2009 <735212392878852> Marking 10.149.181.55:40011 as bad
    Thu Apr 09 10:38:05 2009 <735212392878852> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0,  line 790 of ../nsapi/URL.cpp]: at line 2994
    Thu Apr 09 10:38:05 2009 <735212392878852> INFO: Closing SSL context
    Thu Apr 09 10:38:05 2009 <735212392878852> INFO: Error after SSLClose, socket may already have been closed by peer
    Thu Apr 09 10:38:05 2009 <735212392878852> Failing over after WRITE_ERROR_TO_SERVER exception in sendRequest()
    Thu Apr 09 10:38:05 2009 <735212392878852> attempt #1 out of a max of 5
    Thu Apr 09 10:38:05 2009 <735212392878852> general list: trying connect to '10.149.181.55'/40011/40011 at line 2619 for '/'
    Thu Apr 09 10:38:05 2009 <735212392878852> New SSL URL: match = 0 oid = 22
    Thu Apr 09 10:38:05 2009 <735212392878852> Connect returns -1, and error no set to 10035, msg 'Unknown error'
    Thu Apr 09 10:38:05 2009 <735212392878852> EINPROGRESS in connect() - selecting
    Thu Apr 09 10:38:05 2009 <735212392878852> Setting peerID for new SSL connection
    Please advice if I am missing anything here?
    - - Tarun

    I'm using WL9 and Apache2.2
    I had exact same issue as above (which I solved with these directions) in additiion to another issue, that only showed once I enabled full logging, since it shows as warning/info, not as error
    First to enable full logging, add this
    Debug ALL
    WLLogFile "C:/wl_proxy.log"
    Then after a failure (even after fixing the above), look at the log, and if you see this INFO/WARN:
    Thu Apr 23 00:48:27 2009 <235612404369072> INFO: Host (comp1) doesn't match (192.168.0.229), validation failed
    Thu Apr 23 00:48:27 2009 <235612404368911> WARN: DeleteSessionCallback: No match found!!
    Thu Apr 23 00:48:27 2009 <235612404369072> ERROR: SSLWrite failed
    Thu Apr 23 00:48:27 2009 <235612404369072> SEND failed (ret=-1) at 795 of file ../nsapi/URL.cpp
    Thu Apr 23 00:48:27 2009 <235612404369072> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 796 of ../nsapi/URL.cpp
    Thu Apr 23 00:48:27 2009 <235612404369072> Marking 192.168.0.229:7002 as bad
    that means you have same problem as I do. The WeblogicHost inside the Location descriptor should match the actual host name for the machine. I believe it's easer because the certificate created by weblogic during its installation will encapsulate the machine host name, or because the SSL validation mechanism expects the machine host name, nothing else.
    Here's how the config would like (my hostname is comp1)
    <IfModule mod_weblogic.c>
    SecureProxy on
    TrustedCAFile "C:/tools/bea9/weblogic92/server/lib/CertGenCA.pem"
    Debug ALL
    WLLogFile "C:/wl_proxy.log"
    EnforceBasicConstraints off
    </IfModule>
    <Location /EnterpriseCMP>
    SetHandler     weblogic-handler
    WebLogicHost      comp1
    WebLogicPort     7002
    ConnectTimeoutSecs     1000
    ConnectRetrySecs     1000
    </Location>
    I believe the

  • How do you configure the set of port to use for FTP passive data connection

    I was able to start the ftp server xml db and connect to it locally. When I tried to connect to it from home, I was able to log in but when i do a "get" command the sessions hangs. I also tried passive mode and do a "get" command and it gives me a connection refused error. I am using the default port 2100. I think this might be a firewall issue with the data connection port. I am not sure which range of ports to open for the passive ftp connection on the server side or where to go and set them for for the ftp server to use? Or this issue might not be firewall related??? Any thoughts. Thanks.

    This is a typical problem with VPN/Firewall software and FTP on ports other than 21.
    When you open the FTP data connection the FTP Server identifies which port the data will be sent on using the PORT command which is sent on the command port (typically 21 with a normal FTP server, 2100 by default with XDB). THe client then opens that PORT to accept the data (file, output of an ls etc).
    As I understand it most VPN/Firewall are configured to monitor 21 for 'PORT' requests. They then understand to allow connection on the PORT number passed on the command PORT. Hence with Port 21 firewall / VPN software is not a problem. However since the XDB command PORT is something other than 21 they do not see / honour the PORT commands from the server and hence the client cannot open the data connection on the specified PORT
    As to how to solve it, I wish I knew (After 5 years I still can't use XDB FTP from home to a machine in the office once the VPN tunnel is open :( ). I'm sure it's going to be firewall / VPN software specific and may need the VPN servers to be configured.
    The best bet would be to run the FTP server on 21...
    Add the following line to your listener.ora file
    (DESCRIPTION =
    (ADDRESS = (PROTOCOL = TCP) (HOST = hostname) (PORT = 21))
    (PROTOCOL_STACK = (PRESENTATION = FTP) (SESSION = RAW)))
    and then restart the listener as root
    Start the listener as root.
    At the operating system prompt, enter tnslsnr with optional command line arguments. The usage is as follows:
    tnslsnr [listener_name] [-user user] [-group group]
    where:
    Table 4-3 tnslsnr Utility Options
    Option Description
    listener_name
    Specify the name of the listener. If omitted, the default name LISTENER will be used.
    -user user
    Specify the user whose privileges the listener will use when super user (root) privileges are not needed. After performing the privileged operations, the listener will give up root privileges irreversibly.
    -group group
    Specify the group whose privileges the listener will use when super user (root) group privileges are not needed. After performing the privileged operations, the listener will give up root group privileges irreversibly.
    The listener will temporarily switch to the provided user and group immediately after startup. All subsequent operations will be done with the specified user and group privileges, except the system calls necessary to listen on configured endpoints. The listener will revert to super user (root) for a short period of time to listen on reserved addresses, such as TCP ports less than 1024. After the listener starts listening on all of its endpoints configured in listener.ora, it will switch to the specified user and group irreversibly. Therefore, the listener will give up the root privilege that it initially had. In the current release, -user and -group command line arguments only accept user and group identifiers specified in numeric form.
    For example, to execute a root listener called mylsnr and have it use privileges of a user identified

  • What IP Ports are used for continuity?

    In my company WLAN the IP Adresses are seperated. With IP/UDP Ports are used to communicate within the continuity functions?
    Thanks

    Great, actually, I found this information, and would like to re state my question. Now that I know what ports I should be using (this is described in detail in the hardware manual for the E series), I would like to see some definite information about what I must do in my external device to make use of these signals.
    I'm a little confused by some comments in the documentation that some of the facilities of Port C (on the 8255) are only avialable if I use register level commands (as if using the parallel port). If I use the DIG_Prt_Config and set to handshaking (input) on a port, then I assume I set up my external hardware as if Port C was in Mode 1(input), and then follow the timing described in the E Series manual.
    It's just a shame that everything o
    n the PC side is well described, but there are no application notes that I can find about building an external device that can use the handshaking signals.
    If 'you' (anyone) can confirm what my assumptions, or point me in the right direction, I would appreciate it greatly.
    Thank you.
    Joshua

  • Get the WSDL-File used for proxy generation

    Hello everybody!
    I created a Web Service Proxy:
    SE80 -> Select Package -> Enterprise Services -> Client Proxies -> New -> WSDL Source: Local File.
    Everything worked out fine. I was able to create that Proxy.
    Now I would like to look at the WSDL-File that has been used:
    If I take a look at that Proxy by SE80 -> Select Package -> Enterprise Services -> Client Proxies -> [Select Proxy] -> Display in new Window -> Goto: The Menue Entry "Display WSDL Document" unfortunately is disabled.
    I have not configured the integration builder.
    Is there a possibility to get the WSDL-file that has been used for the generated proxy? Does anybody know, if the WSDL-file, that has been used for the proxy generation is archived somewhere in the system?
    Thanks,
    Andreas

    Hello,
    Thanks for your reply.
    I am using SAP ECC 6.0:
    SAP_BASIS     700     0010     SAPKB70010     SAP Basis Component
    SAP_ABA     700     0010     SAPKA70010     Cross-Application Component
    Unfortunately the tab "Proxy Generation" at Utilities -> Settings is not available with my release.
    Any other idea?
    Greetings,
    Andreas

  • What ports are used for handshaking signals?

    I want to use Handshaking Digital I/O on an AT-MIO-16DE-10, and I want to know if there are extra digital I/O lines used for this, or if there are independant handshaking connections. I can't seem to find any documentation which warns that you can only get 7 bits out of a port if you use handshaking. Or you can only use ports 2,3,4 because port 0 is used for the handshaking signals.
    Any hints would be appreciated.

    Great, actually, I found this information, and would like to re state my question. Now that I know what ports I should be using (this is described in detail in the hardware manual for the E series), I would like to see some definite information about what I must do in my external device to make use of these signals.
    I'm a little confused by some comments in the documentation that some of the facilities of Port C (on the 8255) are only avialable if I use register level commands (as if using the parallel port). If I use the DIG_Prt_Config and set to handshaking (input) on a port, then I assume I set up my external hardware as if Port C was in Mode 1(input), and then follow the timing described in the E Series manual.
    It's just a shame that everything o
    n the PC side is well described, but there are no application notes that I can find about building an external device that can use the handshaking signals.
    If 'you' (anyone) can confirm what my assumptions, or point me in the right direction, I would appreciate it greatly.
    Thank you.
    Joshua

  • Port Number Used For Downloading

    I'm having a problem downloading from certain sites.
    My broadband provider wants me to find out what port number I use for downloading.
    How do I find out?

    Do you have a link to a site that won't download? It's really dependent on what they use.
    If it's http generally port 80, if ftp then many ports, Active FTP vs. Passive FTP, a Definitive Explanation...
    http://slacksite.com/other/ftp.html

  • What accounts are used for video iChat between two Macs?

    I need to set up video iChat between a 10.6.8 Snow Leopard laptop and a 10.5.8 iMac.  The machines are not on the same network.  I have read all the posts and the help for iChat but the explanations of accounts are confusing.  What accounts can be used for Mac-to-Mac video chat and how do we set them up?

    Hi,
    AIM or Jabber.
    AIM valid accounts include any @mac.com ID (Lapsed, paid for (originally) or a Trial account) Any @me.com account that was linked to iCloud at the change to iCloud from MobileMe. And of course any @icloud.com ID.
    If you have an Apple ID that started as one of these and "Migrated" to the other services other the years and is linked for Email they will work as separate IDs/Valid Screen Names with the AIM servers.
    Effectively this then works Mac to Mac in Messages or iChat.
    Jabber IDs.
    Many servers http://www.jabberes.org/servers/ (this is only some and the site also list many that are Off line)
    Also Google run what was called the GoogleTalk server which means Google Mail IDs can be used as Jabber IDs
    Facebook run a separate Chat ID/Server which you have to sign up for at Facebook.
    AS most server are what is called "Federated" you can add Jabber Buddies form one server to a Buddy List of another.
    Therefore you may have a Google Buddy list as such but you can add Facebook Buddies  or other Buddies on other Jabber servers.
    Audio and Video Chat are Mac to Mac.  You cannot Video or Audio chat to Web Browser login even if the Browser has the video plugin for that service  (Basically web browser to web browser chat require the Video plugin for that service/server).
    FaceTime will not work.
    You can download FaceTime for the Snow Leopard Computer as it is an Intel only app.
    However it cannot be downloaded for the Leopard computer.
    Summary.
    You may have IDs that will work in iChat 4 and 5 already (Apple IDs as AIM Names or Googlemail or Facebook IDs)
    Chats are then Mac to Mac (and also AIM to AIM or Jabber to Jabber but not AIM to Jabber).
    iChat will allow you also to do Screen Sharing as well as Audio Only chats
    10:05 pm      Saturday; August 9, 2014
    ​  iMac 2.5Ghz i5 2011 (Mavericks 10.9)
     G4/1GhzDual MDD (Leopard 10.5.8)
     MacBookPro 2Gb (Snow Leopard 10.6.8)
     Mac OS X (10.6.8),
     Couple of iPhones and an iPad

Maybe you are looking for