Question about dot1x & Web Authentication

I'm not sure if what I want to do is possible so hopefully someone can set me straight.
Right now when a user doesn't have a 802.1x capable machine, they are assigned to the guest VLAN. Then using the dot1x fallback command we could force them to use authenticate using the web if we so choose. At least this is how I understand web-auth to work. Please correct me if I'm wrong.
But what about when someone is using an 802.1x capable machine but fails auth? Like say a user logging in locally on a domain machine or a vendor using his companies laptop. Currently those ports go into an unauthorized state and are not active. If I use the dot1x auth-fail-vlan command, it authorizes the ports for that vlan just fine.
What I'd like to do in those cases is to put them in a restricted vlan and then force them to use web authentication to gain access to the network.
Is that possible? I can't seem to find a way to use web authentication after a failed dot1x auth. Or is that it, a failure is a failure and there is no way to try and reauthenticate a different way?

Hi,
dot1x authentication and mac-authentication bypass are layer 2 authentication mechanism and webauth is a layer 3 authentication mechanism.
u can set multiple authentication profiles and set the priority as well.
like u can have dot1x authentication first and second webauth and third as mac-authentication bypass.
remember the other authentication mechanism will only come into place if the first authentication is not possible that is the client is not having a suplicant for dot1x.
if a user doesn;t have dot1x supplicant and u have configured guest vlan then the user will be put into the guest vlan otherwise the user will be in the access vlan in which the port is configured.
if u have configured auth-fail vlan and the user gives wrong credentials the user will be put into the auth-fail vlan.
if a user is a dot1x client and dot1x is configured then the user must pass the dot1x authentication .
the fallback mechanism is only when the dot1x authentication cannot be executed because the client is not having dot21x supplicant. then the next mode of authentication will be triggered that is either webauth or MAB.
if a user fails the dot1x authentication dues to wrong credentials then he cannot be prompted for a another authentication mechanism. this is to avoid security breaches.
hope this helps.
regards
Sushil

Similar Messages

Question about get web service result in actionscript and convert data format

Hi, All
I have question about how to get dataset from web services
and put it in tree structure. I have 2 questions about this:
1, How can I get data correctly in actionscript?
I have no problem to get data by
<mx:ArrayCollection id="acFolder"
source="{mx.utils.ArrayUtil.toArray(MyGServices.getFolder.lastResult)}"
/>
And display in datagrid.
But when I try to use
public function
handleFolderContents(event:mx.rpc.events.ResultEvent):void{
arData=mx.utils.ArrayUtil.toArray(event.result);
acData=new ArrayCollection(arData);
input.text=acData.getItemAt(0).id;
Seems I can’t get data, it always say:
TypeError: Error #1009: Cannot access a property or method of
a null object reference.
2, how to convert data format
I get data from web service and want to convert it to tree
structure, as mention below:
I get:
<Array>
<id>111</id>
<Name>Production1</Name>
</Array>
<Array>
<id>222</id>
<Name>Production2</Name>
</Array>
Convert to:
<mx:XMLList id="treeData">
<node>
<node label="Production1" data="111">
<node label="Production2" data="222"/>
</node>
</node>
</mx:XMLList>
Please help me.
Thanks.

First, don't specify the package path in the argument
declaration. Instead import the event object:
import mx.rpc.events.ResultEvent;
The docs state this emphatically.
Second, try "lastResult", in place of "result":
arData=mx.utils.ArrayUtil.toArray(event.lastResult); // I am
not positive about this. I maybe recall reading that result was ok
for the event object, but maybe not.
Finally, why do you want to convert the xml? You certainly
could, but it would be a manual process, recursively reading the
existing xml nodes and building the new structure, but again, why?
Just use a labelFunction if necessary to display the nodes as
you wish.
Tracy

Another Question about Certificate-based Authentication

Hello,
I was successful in PDC-based authentication, but have the
requirement to further improve this.
For this, I have to use the "Match Certificate in LDAP"-feature.
I have modified a user to include a "userCertificate"-attribute,
and pointed the parameters to access to the directory server.
Until now, I had no success.
In the Logfile "amAuth"-Logfile I can see this message:
<------------------>8-------------------->8------------------------>
com.sun.identity.authentication.spi.AuthLoginException: Error in locating registered certificate
<------------------>8-------------------->8------------------------>
In the Directory Server log, I can only see a successful bind-request,
but, interestingly, no search:
<------------------>8-------------------->8------------------------>
[28/Sep/2004:10:47:17 +0200] conn=3352 op=-1 msgId=-1 - fd=109 slot=109 LDAP connection from 127.0.0.1 to 127.0.0.1
[28/Sep/2004:10:47:17 +0200] conn=3352 op=0 msgId=8782 - BIND dn="cn=Directory Manager" method=128 version=2
[28/Sep/2004:10:47:17 +0200] conn=3352 op=0 msgId=8782 - RESULT err=0 tag=97 nentries=0 etime=0 dn="cn=directory manager"
<------------------>8-------------------->8------------------------>
Anyone successful with this feature?
Regards,
Juergen Maihoefner

Hi there
I got a couple of doubts about the Certificate Authentication module, maybe you can help!
First, have you made any documentation on how you made this work ? Is it at all possible to get the source code of the module you have made? I think I'll need to create a costum module aswell because of very specific client requisits.
My problem ( and I'll be posting a new thread with this, but just in case you have this on your watch list ) is that I need to have both user/password and Cert Based authentication enabled. I'll create a chain with both modules as sufficient. My problem is : the documentation tells me that I need to have the containers (I suspect both the server and the agents ) with SSL enable and (and this is the tricky part) with Client Authentication Enabled . Now my problem is : when on the http listener, I configure it with security and enable that listener with Client Authentication, when I try to access the container on the secure listener I get an error (in firefox) or the browser asks me to select a certificate ( on IE ). When I dont provide a certifica it gives me the same error as firefox.
Basically, what I believe is happening is that with Client Authentication, the container will always request a certificate from the browser. Which isn't exactly what I want. I need to AM protected resources on this specific realm to allow authentication of a user based on a user/password OR a Certificate.
Basically what I want to know is : do I need to have Client Authentication Enabled on the http listener ? Did I miss read the documentation? Is there a really good how-to on how to do this ? Can you give me a hand?
Thanks loads for your help
Rp

General question about uploading web apps

i have my site completed and it works on the testing server
without a glitch. i've uploaded static sites before without a
hitch, but i'm not so certain about web apps. seems when you upload
the site with dw, it uploads the html and php . . . but then there
are the tables from the db. uploading them and getting them to hook
up all over again . . . how do you do that? can someone review the
steps please. thanks.

something like this:
1. check your remote server has phpMyAdmin installed and the
URL to
access it (phpMyAdmin is a web app written in PHP and you
access it
through a browser)
2. download and install phpMyAdmin locally
3. run phpMyAdmin, usually
http://localhost/phpMyAdmin,
but the url will
vary depending the installation and your development
platform.
export your local DB; phpMyAdmin will create a file named by
default
"localhost.sql". depending your browser configuratioon you
can change
the file name/choose where to save
4. run phpMyAdmin in the remote server and import your DB
just choosing
the file in step 3
later you can export/import tables instead the full DB. if
you're
reimporting the DB remember to check the "Add DROP DATABASE"
checkbox
when exporting
you can't see any files in the server with phpMyAdmin, it's
only a
visual interface to the MySQL server. keep using DW to
create/modify/upload html, js and php files
hconnorjr wrote:
> so the steps go something like this:
> 1. find db to upload from testing server
> 2. go to new server. find the directory that is used for
databases (presumably
> one that the admin has already set up for apache/php to
look for db tables.
> make a db of the same name as in your testing server.
> 3. use phpMyadmin on the testing server and make backup
of your db. since its
> new for the production server use the default values. in
this step the db can
> also be backed up by tables if its large and upload time
might be an issue.
> 4. go the the new server. with the phpMyadmin on that
server, name a database
> with the same name as the one on the testing server. use
IMPORT. go to the
> browse button and find the db on your testing server and
IMPORT it.
>
> small question: i can see the files on the remote server
from dw when its
> properly set up, but does phpMyadmin allow me to see
files on my testing server
> without some configuration?
>

Questions about SPML Web Service ( OIM 9.1 )

I need to launch a provisioning process on a target by using a generic connector (Web Service).
Scenario:
==========
Host A is where the OIM server is installed. A generic connector is defined here.
Host B is the target where users must be created. A webservice (axis) is installed here.
Requirements:
===========
OIM server (Host A) sends a request to WebService (Host B). The Web service receives, process and sends a response with the result to the OIM server.
Version 9.0.3
==============
On Version 9.0.3 I got the expected results but a problem appeared: there wasn't feedback error control because the web service response could'nt be processed.
I followed the next steps:
1º deploy axis on application server
2º write SendWSResponse.jws including public method "doProvisioning". Copy this file to ..\server\default\deploy\axis.war\
3º compile SendWSResponse.jws (from a browser)
4º Create generic connector (for reconciliation and provisioning). Definition of parameters and mappings.
Note: In 9.0.3 version only three parameters were required for Web Service Definition:
Web Service URL=http://host:8080/axis/SendWSResponse.jws
Operation Name = doProvisioning
SPML-->Target ID=4201
Version 9.1
==============
On the new version, the connector definition is more complicated. Also they have added an ear-application or web service (OIMSpmlWS) related to this connector .
The first question is:
Is this ear-application addressed to process the reponses that are sent by the target?
The second question is:
Must I install the OIMSpmlWS on Host B? and if the answer is affirmative, how can I include the logic to my provisioning process.
And the most important?
How might the connector be configured and the webServices in this usual scenario?
Many thanks in advance

There is no "sample" WSDL file, there is THE WSDL file. It is located in the OIMSpmlWS.ear EAR file, in spmlws.war WAR file in the directory WEB-INF/wsdl.

Some questions about creating web animations with lighter data and exporting to vector Flash format.

Hi, I will be creating animations in After Effects mostly using Illustrator vector files and will be exporting to SWF or XFL for using the animations on the web.
One of the priorities is light data as possible to provide viewers with slower connections with better experience. However the animation should also impress and I need to find a balance between performance and possible imagery. The animations may have sound and voice narrative.
I need help with understanding which type of non-vector data is heavier than others. Non-vector image data or sound and voice? And from non-vector image data is some of it lighter or heavier than other - for example motion blur vs smooth gradient vs many colors?
I would greatly appreciate any suggestions, tips, pointers, etc.,

Hi, I will be creating animations in After Effects mostly using Illustrator vector files and will be exporting to SWF or XFL for using the animations on the web.
One of the priorities is light data as possible to provide viewers with slower connections with better experience. However the animation should also impress and I need to find a balance between performance and possible imagery. The animations may have sound and voice narrative.
I need help with understanding which type of non-vector data is heavier than others. Non-vector image data or sound and voice? And from non-vector image data is some of it lighter or heavier than other - for example motion blur vs smooth gradient vs many colors?
Let's do a little "Myth Busters" on that one, shall we?
Vector data is per se not "lighter" than pixel data. You could have complex paths for which storing the information of the individual nodes takes up more space than a pixel image of the object.
Dynamic rasterization of vector data costs CPU performance and may in effect make things more slow than just playing a series of pixel images. That would apply to anything from path strokes to gradients.
All your pretty AI vectors don't mean anything if they are constructed in such a way that either AE or Flash need to rasterize them on import. Anything from converting Bezier paths to paths consisting of dense linear segments to converting fills, patterns, gradient meshes and so on to pixel data
Pixels are pixels. It does not matter whether they are gradients, mothionblur or just non-antialiased shapes. Flash doesn't care and neither image format that may be used in Flash stores any more or less info. They only differ in their methods, but in the end it's for you to decide whether you use JPEG, PNG8 or PNG24. They all have their pros and cons.
It makes a difference, if data is embedded in an SWF or if it is externally linked just as it makes a difference whether you enforce audio sync or not, playing every frame or not.
So for all intends and purposes, it's still up to you to make up your own mind and find the best solution. And Rick has a point - if you're really that concerned about efficiency, then do it in Flash or Flash Catalyst and consider the options there that may help like GPU accelerated layer styles for drop shadows etc., dynamic text or your vector data remaining vector in teh first place.
Mylenium

A question about SAP Web Dispatcher

Following paragraph is copied from TADM10_2 book, Page 39 (Participant Handbok, 2005Q4, 50074912). My question is why there are two same items - ABAP-only scenario? I might be print issue.
The SAP Web Dispatcher can be used for load balancing in the following scenarios:
* Java-only scenario, as described here.
* ABAP-only scenario (see SAP customer training course ADM102, SAP Web AS Administration II)
* ABAP-only scenario (see SAP customer training course ADM102, SAP Web AS Administration II)
Please advise. Thanks so much.
James

HI,
Yes, I think its a print mistake. It should be ABAP Only and Both ABAP and Java Instance.
Rgds
Radhakrishna D S

Please answer the simple question about publishing Web Services!

I have implemented my first web service GetDate, using JDeveloper.
Could anybody tell me please how can I place now this web service on the web, on my web page?

Dear Shay, thank you a lot!
But it seems to me that you didn't understand my question or may be I have explained it not in the best way.
I have done every step from this tutorial, I have deployed me web service to OC4J Server, and it works.
What I need now, is to make this service available on my home page, which doesn't have Oracle Application Server, so that every person on the internet (even if he also doesn't have this application server installed on his computer) can use it.
Is it possible to do so or not?

Question about FlyNet Web service generator

I downloaded the 30 day free trial of Xcelsius Engage Server so I could check out the FlyNet product. Can you not just take the compiled asmx and supporting files and drop them to a .Net Web server? When I do this my Web service returns this error in Xcelsius:
Error accessing CAL management service. Please check that the service is running.
If something needs to be configured on the .Net Web server then it will never work here since I will never be able to convince the server support area to install and maintain it.
thanks

Hello Jeremy,
Web Services generated with our Web service Generator have the connection string encrypted and must be used on the machine they were generated on. You cannot just take the .asmx object etc. and place on another server.
The Engage Server version of our product also uses CAL Licensing and checks that the Flynet CAL Licence Manager is running on the machine that the Web Service is generated on, it also requires a valid Engage Server key (the Xcelsius Engage Server key) to run.
Hope that answers your questions. If you need any further information on Flynet Web service Generator then please contact us here at Flynet.
E.Mail support AT Flynetviewer.com or you can e.mail me direct.
[http://www.flynetviewer.com/Default.aspx]
Edited by: Ian Learmonth on Mar 24, 2009 6:49 PM

Question about "Get Web Drawing URL and Page Name From" for Visio Web Access

I am trying to get both the web drawing URL and the page name from a list through Share Point Designer 2013, but it doesn´t work.
It looks fine when a do the web part connection wizard. I select from which columns to get the URL and the page name. But on the final web part page nothing happens. It just shows the URL that is selected in the Visio Web Access Web part. I had hoped that
that value should be overrided by the SPD-settings.
I have googled for hours..

Hello,
I have now saved the Visio-file in .vdw-format, but it says Visio 2010 Web Drawing (*.vdw). Is there a .vdw-format for 2013? Isn´t that the .vsdx-format?
Still doesn´t work with the .vdw-format, but maybe I am doing something wrong.
Any ideas?

Question about private web browsing and Spotlight

I was browsing personal webpages on a work computer using Safari's 'Private Web Browsing', but although Safari doesn't remember the pages, Spotlight does which is a little concerning!
I have excluded webpages from Spotlight searches but that doesn't mean the pages have gone. I have tried clearing my history in Safari and Resetting it, to no avail. Can someone tell me how to delete the webpages from Spotlight?
Thanks and regards

Hi Rapidness,
I checked on my computer and do not have this issue. And I have no website located somewhere on my machine, after cleaning / or resetting the browser.
In the "Safari" - Menu > below the "Private Surfing" > is "Safari Reset"
Maybe you should try this...
You can also use "Onyx" to reset the browser. See the link below:
http://www.titanium.free.fr/pgs2/english/download.html

Question about calling Web Services with SJSC

I am trying to call the web serivces with SJSC, I read this article Accessing WebServices(http://developers.sun.com/prodtech/javatools/jscreator/learning/tutorials/2/webservices.html
Following the article, I successed add TravelWS.wsdl to the IDE Servers window, and I also tested getPersons method and got the result.
After that, I did the same way to add another WSDL to the IDE Servers Window, but I got the InvocationTargetException error message when I tested the methods of this web services. I am sure the Deployment Server and Bundled Database Server are running.
The following is the error messages I got:
InvocationTargetException com.sun.rave.websvc.ui.ReflectionHelper.callMethodWithParams(ReflectionHelper.java:459) com.sun.rave.websvc.ui.TestWebServiceMethodDlg$MethodTask.run(TestWebServiceMethodDlg.java:1031) java.lang.Thread.run(Thread.java:595) null sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) java.lang.reflect.Method.invoke(Method.java:585) com.sun.rave.websvc.ui.ReflectionHelper.callMethodWithParams(ReflectionHelper.java:450) com.sun.rave.websvc.ui.TestWebServiceMethodDlg$MethodTask.run(TestWebServiceMethodDlg.java:1031) java.lang.Thread.run(Thread.java:595) java.lang.NullPointerException com.sun.xml.rpc.client.StreamingSender._raiseFault(StreamingSender.java:478) com.sun.xml.rpc.client.StreamingSender._send(StreamingSender.java:294) webservice.neuronwebservice.NeuronWebServiceSoap_Stub.getAvailableProjectNames(NeuronWebServiceSoap_Stub.java:609) webservice.neuronwebservice.neuronwebservice.NeuronWebServiceClient.getAvailableProjectNames(NeuronWebServiceClient.java:36) sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) java.lang.reflect.Method.invoke(Method.java:585) com.sun.rave.websvc.ui.ReflectionHelper.callMethodWithParams(ReflectionHelper.java:450) com.sun.rave.websvc.ui.TestWebServiceMethodDlg$MethodTask.run(TestWebServiceMethodDlg.java:1031) java.lang.Thread.run(Thread.java:595)
Any helps?
Thanks
Message was edited by:
King666

I also tested the webservice from PDB. (its WSDL url is http://www.rcsb.org/pdbws/rcsbWebService?wsdl). Only method getIDStatus works. and others such as getAtomSite do not work. And I got the same error message (invocationTargetException).
The insteresting thing is that I wrote a standalone java program and I could sucessfully call all web services method from there. It looks like something wrong with my JSC configuration.
Can anyone give me some help?
Thanks in advance,

A question about axis web service

Does "AdminClient" command creates stubs and skeletons for my web service or do i have to do it manually by "WSDL2JAVA" command?

Having a look into the Axis' AdminClient spec tells me AdminClient is more like a Web service console and no kind of a generic web service client.
I would say "WSDL2JAVA" is the right thing.
Edited by: JBStonehenge on Mar 4, 2010 3:11 PM

Question about creating Web service for Xcelsius

Has anyone successfully written a Web service in .Net C# that Xcelsius can use? I was just trying to create something simple and it will not work. I get data in my Xcelsius report, but it is all lumped into one 'cell' and the XML tags are still in there. If anyone has some sample code that does work it would be much appreciated.
Here is what I have:
public string getTableInfo()
SqlDataAdapter dbadapter = null;
DataSet returnDS = new DataSet();
using (SqlConnection dbconn = new SqlConnection(
"Server=SERVER;"
+ "Database=DB_NAME;"
+ "User ID=ACCOUNT;"
+ "Password=PW123;"
+ "Trusted_Connection=False;"))
SqlCommand cmd = new SqlCommand();
string sqlQuery = "select FIELD1, FIELD2 from TABLE";
cmd.CommandText = sqlQuery;
cmd.Connection = dbconn;
dbadapter = new SqlDataAdapter(cmd);
dbadapter.Fill(returnDS);
return returnDS.GetXml();
thanks!!!

Hi Jeremy,
This might get you closer (VB.net): VB.net code to create XML
Regards,
Matt

Question about XI Web Service

Hi all
Use soap sender adapter, we are able to expose the XI interface as web service. But we cannot find these xi web services via http://server:port/wsnavigator. And they are also not listed in http://server:port/inspection.wsil.
Does anyone know hot to make xi web services a "normal" web services?
Regards,
Hui

hi
Check the following links. May be they can solve your problem
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/336365d3-0401-0010-9884-a651295aeaa9
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/5f3ee9d7-0901-0010-1096-f5b548ac1555
Thanks & Regards
Harsimran

Question about dot1x & Web Authentication

Similar Messages

Maybe you are looking for