Radius and multiple trees

We have a hardware apliance that does RAS for us, it points to our BM3.8
Radius box for authentication. It can have at most 3 authetication
radius server addresses. If it gets a radius response from one server,
(whether approved or not) it stops looking. BM3.8 makes good fail over
that way (if one server is not responding to radius request, the Ras box
will go to the next server) but it does not help me when the user I need
to authenticate is in another tree.
Is there a way to have a radius serve support multiple trees...maybe
with running on the servers where those other trees reside or something?
So far the only answer I have is to define users in both trees...a fact
that gets me odd looks at audit time when I have many more users than I
should.....

Identity Manager (aka DirXML) is one way to solve this problem, and some
customers have done this. However, this is not the only solution. You can
also configure RADIUS proxy using a "Search Domain" or a "Generic Proxy
Domain." These can be configured on your DAS object in ConsoleOne.
If you set up a search domain, then RADIUS will forward the request to
another RADIUS server if it cannot find the user. This should do exactly
what you want, but may slow your authentication times a bit. This solution
is appropriate if you're satisfied with your current authentication times
and do not have many lookup contexts configured.
If you use a generic proxy domain then the RADIUS server will proxy requests
based on the user name. Users must login using names in the form of
"userCommonName@proxyDomainName."
>>> Steve Aitken<[email protected]> 3/19/2005 10:01 AM >>>
Hi,
Most effective way round this is to use dirxml or idm2 to
automatically duplicate users into an authentication tree, or
authentication OU. You can then define your radius servers to look
exclusivly at that tree / ou and authenticate all your users
sucessfully.
In terms of your audit, your license with novell will stipulate that
administrative users are excluded from the user count. As these
duplicated users are there only for admin purposes, these can safely
be excluded from the license count.
Cheers,
Steve
On Thu, 17 Mar 2005 21:41:22 GMT, buzz <[email protected]> wrote:
>We have a hardware apliance that does RAS for us, it points to our BM3.8
>Radius box for authentication. It can have at most 3 authetication
>radius server addresses. If it gets a radius response from one server,
>(whether approved or not) it stops looking. BM3.8 makes good fail over
>that way (if one server is not responding to radius request, the Ras box
>will go to the next server) but it does not help me when the user I need
>to authenticate is in another tree.
>
>Is there a way to have a radius serve support multiple trees...maybe
>with running on the servers where those other trees reside or something?
>
>So far the only answer I have is to define users in both trees...a fact
>that gets me odd looks at audit time when I have many more users than I
>should.....

Similar Messages

WLC 4400 and multiple authentication servers e.g. RADIUS, ACS

WLC 4400 and multiple authentication servers e.g. RADIUS, ACS
Can the WCL 4400 be set up to use multiple RADIUS servers? The user accounts for accessing wireless would use a RADIUS server. The administrative accounts for the WLC would reside on an ACS server.

Yes, that is correct. You can set acs to use both radius and tacacs.
For this you need to add WLC twice in acs-->network configuration. But you need to keep host name different.
eg 1) Host name WLC --->IP x.x.x.x -->Auth using -->radius
2) Host name WLC1--->IP x.x.x.x --->Auth using -->Tacacs.
You need to set up tacacs commands on WLC along with radius commands.
Regards,
~JG
Please rate helpful posts

Display of relationships between nodes of multiple trees

Hello,
I am trying to develop a gui to display the relationship between multiple trees.
Tree1:------|---------------Tree2:----------------|--------Tree3:
------------|-------------------------------------|--------------
Root -------|----------------Root-----------------|--------Root
---Leaf1----|--------------------Node1------------|-----------LeafA
---Leaf2----|-----------------------Leaf11--------|-----------LeafB
---Leaf3----|-----------------------Leaf12--------|-----------LeafC
---Leaf4----|--------------------Node2
------------|-----------------------Leaf21
------------|-----------------------Leaf22
(The hyphens do not signifiy relationships, they are put there because the
preview takes away the blanks. The | characters are intended to act as separators
between adjacent trees.)
All the trees are scrollable and have been added to three different scrollpanes
and are displayed on a window. The relationships can only be between leaves
of the trees.
The only way I can figure out to show such relationships is by drawing lines
e.g. a line from Tree1.Leaf1 to Tree2.Leaf21 etc. Users may define relationships
by drawing lines from one tree node to another by dragging the mouse.
The lines may criss cross and there might be a lot of lines etc.
I would like to know about alternative ways to show such relationships on the
screen in a neater way.
I would also like a way to make lines "full fledged objects" e.g. they will get mouse
events such that actions can be triggered by double clicking or right clicking on a
line.
I would appreciate your help in this very much.
Best Regards,
Sandeepan

Joop Eggen and deriderj, thank you for your replies.
However, the JGraph framework is available only on Jsdk 1.4 and not on Jsdk 1.3.
I saw an item in the FAQ about the possibility of porting JGraph to 1.3 but there were
no links on the site for this.
I need to use Jsdk 1.3 as Jsdk1.4 is unsuported by the vendor of one of the tools that I need
to use and they do not have any plans to support 1.4 in the near future.
I would appreciate the forum's help in pointing out JGraph like functionality in Jsdk1.3 via some other API or maybe knowledge about whether someone has ported JGraph to Jsdk 1.3
Regards,
Sandeepan

Multiple tree structured rows in output header

Hi All,
I have a requirement to create an output layout in which there are 3 dynamic rows in header and each row is having its own sub devision (like a tree structure). The number of columns will depend upon the data.
I am able to create N number of dynamic columns according to data fetched at run time but dont know how to create multiple tree structures rows in header.
Can any one please suggest how can I achieve this in SAP?
Regards,
Nilanjana

Hi All,
I have a requirement to create an output layout in which there are 3 dynamic rows in header and each row is having its own sub devision (like a tree structure). The number of columns will depend upon the data.
I am able to create N number of dynamic columns according to data fetched at run time but dont know how to create multiple tree structures rows in header.
Can any one please suggest how can I achieve this in SAP?
Regards,
Nilanjana

Radius and Billing

Dear NetPros,
I have configured the Radius & Billing Servers on my Cisco AS5350 which is terminating VoIP Traffic as given below. The First two are Mind Billing Primary and Secondary Billing Servers. The Third one is a billing server from another vendor. I want to send CDR information to all the three billing servers simultaneously. Currently the gateway is only sending the Radius and Billing information to the first available server. Is there any way for the gateway to send radius and billing information to all these three servers simultaneously???? Would appreciate any help or suggestion in this area. Thanx
aaa group server radius mind
server AAA.BBB.CCC.DDD auth-port 1645 acct-port 1646
server EEE.FFF.GGG.HHH auth-port 1645 acct-port 1646
server III.JJJ.KKK.LLL auth-port 1812 acct-port 1813
radius-server host AAA.BBB.CCC.DDD auth-port 1645 acct-port 1646 key 7 XXXXXXXXXXXXXXXXXXXX
radius-server host EEE.FFF.GGG.HHH auth-port 1645 acct-port 1646 key 7 YYYYYYYYYYYYYYYYYYYY
radius-server host III.JJJ.KKK.LLL auth-port 1812 acct-port 1813 key 7 ZZZZZZZZZZZZZZZZZZZZ
Cheers
Rushabh
Senior Project Researcher
PP-Ontime Co., Ltd.
Cellular ~ 669-2047331
www.pp-ontime.co.th

The AAA "Broadcast Accounting" feature allows accounting information to be sent to multiple AAA servers at the same time; that is, accounting information can be broadcast to one or more AAA servers simultaneously. This feature allows broadcasting among "groups of servers". And each server group can define its backup servers for fail over independently of other groups.
However, the restriction is that Accounting information can be sent simultaneously to a maximum of four AAA servers.
For the scenario mentioned, in order to send billing info to all the 3 servers simultaneously, the aaa accounting command can be configured globally, as in:
aaa accounting network default start-stop broadcast group mind1 group mind2 group mind3
The individual servers in the server group 'mind' may be split across different server groups.
aaa group server radius mind1
server AAA.BBB.CCC.DDD auth-port 1645 acct-port 1646
aaa group server radius mind2
server EEE.FFF.GGG.HHH auth-port 1645 acct-port 1646
aaa group server radius mind3
server III.JJJ.KKK.LLL auth-port 1812 acct-port 1813
(Backup servers within each server-group may be defined)
Simultaneously accounting records are sent to the first server in each group. If the first server is unavailable, fail over occurs using the backup servers defined within that group.

I have one apple ID and multiple family members share this with their devices. How do we keep pics and messages separate?

I have one apple ID and multiple family members share this with their individual devices. How do we keep pics and messages separate for each device?

For messages
MacMost Now 653: Setting Up Multiple iOS Devices For Messages and FaceTime
For other issue:
How to use multiple iPods, iPads, or iPhones with one computer
What is the best way to manage multiple...: Apple Support Communities

New 13" Macbook Pro trying to connect to a Panasonic VIERA TC-L42U30 as second monitor. I've used multiple hdmi-thunderbolt/mini displayport adapters and multiple hdmi cables and still no success. The Macbook does not sense the second monitor (TV). Help?!

I've been a Mac since 2008, so I know my way around the system pretty well. This issue, however, has me stumped. I had an iMac until now and only now am I experiencing some difficulty with my new MacBook Pro. The model I have is the newest 13" Macbook Pro model and I'm trying to connect a Panasonic VIERA TC-L42U30 42" HDTV as a second monitor via the Thunderbolt port.
It worked the first two times and hasn't worked since, after 10-15 attempts with different configurations, turning things on n off, restarting the mac, unplugging the cables, adapters, TV, resetting the P RAM, etc... I've used multiple hdmi-thunderbolt/mini displayport adapters and multiple hdmi cables and still no success. No matter what I do, the Macbook does not sense the TV as a second monitor anymore.
I took the MacBook Pro to the Apple Store, and their "genius" there had it working fine with a DVI connection to a regular monitor. The Panasonic TV I have has HDMI connections and one VGA connection which does not support HD, but no DVI option. I want an HD connection to mirror or extend my MacBook Pro screen. At the Apple Store, they didn't have a Thunderbolt/Mini DisplayPort to HDMI adapter, so he could not try that out for me.
Anyone else have this configuration or another similar one with a Panasonic HDTV?
Ideas? Suggestions? Anything?! Help!!
P.S. I'm running Mountain Lion, if that wasn't already obvious. Everything is up to date in my App Store as well.
Thanks!

Hi There,
I have had the exact same issue but with a projector.
The issue lies with Mountian Lion 10.8.2.
I tried many a combination with no luck to get HDMI working.
Took my mac into the apple store and came to the conclusion it was the software, so I asked them to install 10.8 onto it (this is destructive so a backup is a must)
Bought my macbook home and voila, now displaying through my projector.
There is a small graphics update after 10.8.1 which seems to be the cause.
Hope this helps.
Thanks.

Hello, I have iMac from Oct, 2010 and have OS 10.6.7 and multiple users. Mail icon was accidently removed along with program. Mail 4.4 is on other users but when I reloaded software my user got Mail 4.3. Mail 4.3 did not work with latest OS. Ideas?Matt

Hello, I have iMac Itel i3, from Oct, 2010 and have OS 10.6.7 and multiple users.
About 3-4 days ago the Mail icon in dock had question mark and was accidently removed, along with program on my user. Oops.
1. Mail 4.4 is on other users and works fine, but for me it does not work and tells me V4.3 does not work with latest OS X.
2. I reloaded software from my user with original disks (Oct, 2010) and got Mail 4.3 again. Mail 4.3 did not work with latest OS. I am unable to load Mail. Gives Yellow error message.
" You have Mail version 4.3 (1081/1084). It can’t be used on Mac OS X Version 10.6.7 (Build 10J869). For more information, click the Help button."
3. Tried to update software and look for update for mail 4.3 on Apple site to no success.
Hate to go to MS-Entorage ( I may need to learn something new and alien) mail program since contracts are in Mail/Address Book.
Ideas?
MattDeeds

Matt,
I would download and run the 10.6.7 combo update.
http://support.apple.com/kb/DL1361
Regards,
Captfred

Can I use one itunes account for multiple users and multiple devices

Can I use one itunes account for multiple users and multiple devices?

The iTunes EULA, as I understand it (I'm not an attorney )for Apps is basically that one person can use an App multiple devices, or multiple people can use an App one device..so one to many or many to one, but not many to many....

How to bundle a .FLA and multiple .SWF files in one .EXE?

Hi,
I have a .FLA file which uses loadMovieNum() to load various
.SWF files when each one is called by the user clicking on a
button. Each .SWF file also uses loadMovieNum() to call a second
.SWF file. When I publish the .FLA file as a .SWF file it all works
beautifully.
Now I need to package the entire project into a Windows
projector .EXE file for offline use on a computer without the Flash
Player. When I publish the main .FLA file as a .EXE file, the .SWF
files still load, although they blink before fully loading and
displaying steadily.
What I would really like to do is to bundle all the .SWF
files into the .EXE file so when I send the finished project to the
end user, they only have to deal with one file, rather than a
folder with the .EXE file and multiple .SWF files.
Is there a way to do this?
I am using Flash 8 Professional.
Thanks,
Cam

Since this isn't going to be web-based, why not include all
the external swf files into the same Flash file and then use
attachMovie?
This will allow you to create one .exe file that would
contain EVERYTHING. Since you aren't worried about loading speeds,
you don't have to load the movie clips, but can simply create one
large Flash file.

One premium account and multiple Skype HD devices

Will one Premium account and multiple non premium HD accounts work for video calling? Basically the idea is 10 HD skype devices, the set top boxes connected to tvs will dial into one Premium Mac or PC account for multiple video conferencing.

Yes, one user needs to have a Group Video Calling subscription.
Unfortunately, not all devices support Group Video calling (TV's for example, do not).
Please see our website for more information: http://www.skype.com/en/features/group-video-chat/.

HT4137 iCloud setup with one Apple ID and multiple devices

iCloud setup with one Apple ID and multiple devices

What, exactly, are you trying to do? You can use the same iCloud account on as many devices as you want, as long as you don't turn on iTunes Match. Once you turn on Match, you're limited to 10 devices total.
Is this what you want to do...same iCloud account, but different iTunes/App store accounts on each device? If so, you can do that also.

I have two macs at my house, and multiple iPhones. I want to keep the same apple id as everyone else, but i want to put my own music only on my iPhone. I want to do this with my laptop which is not the family's main iTune's computer.

I have two macs at my house, and multiple iPhones. I want to keep the same apple id as everyone else, but i want to put my own music only on my iPhone. I want to do this with my laptop which is not the family's main iTune's computer.

If you use the same Apple ID for iCloud on each device, yes. However, you can use the same Apple ID for iTunes content on each device, but different Apple ID's for iCloud, iMessage, FaceTime, etc., on each device. That way, you can have whatever iTunes content you want on each phone, but keep all of the other data separate. You can create another Apple ID here:
https://appleid.apple.com/cgi-bin/WebObjects/MyAppleId.woa/wa/createAppleId?loca lang=en_US
Must be a verified email address.

Totally confused with iCloud and multiple devices

Ok, So we have two each of the iPods, iPads and now iPhones. Do we all share the same iCloud? Can we share apps through the cloud? How do I switch my iPad to the new one I got to give this one to my son. I am so new to all this apple stuff. Only been a few months and I'm still really confused. What all goes to the iCloud? How do we see what's in the iCloud? I really the the idiots instructions I think to figure this all out? Can anyone help me? How can I print from the iPad? Everything I see says iOS 10 something? I believe I only have 6 something?

Do we all share the same iCloud?
icloud is designed so that only one user uses it to keep his/her devices in sync. When multiple users use the same icloud account, they will then be sharing the same email address, contacts, calendars, notes, etc. Usually that is not what two people want to do.
Can we share apps through the cloud?
You buy apps from the itunes store, that's different than icloud, and multiple users can use the same itunes account so that they can share apps, music, etc. For a family, everyone usually uses the same Apple ID for an itunes account and individual Apple IDs for their icloud accounts.
How do I switch my iPad to the new one I got to give this one to my son.
What do you mean by "switch.. ipad to the new one"?
What all goes to the iCloud?
Backups of iOS devices, Apple services that you turn on to share data (settings>icloud; on an iOS device), third party apps that use icloud to sync their data between devices, email, photo stream, and more.
How do we see what's in the iCloud?
Icloud is designed primarily for syncing data between the devices of the user - like getting all computers and devices to have the same contacts or calendars. When you set up syncing (settings>icloud, turn on the services you want synced between your devices), some of that data will also be available to a computer's browser when you log into icloud.com. Otherwise you view the data using the associated app, like the Calendar app to see events. Other things that may be on icloud, like backups cannot be seen. Also iCloud does not provide a photo gallary that others can view in a browser.
How can I print from the iPad?
For that you need an "airprint" compatible printer. See,
http://support.apple.com/kb/ht4356
You can also print to a printer that's connected to a computer, but that computer needs special software, like Printopia for macs.
Everything I see says iOS 10 something? I believe I only have 6 something?
There is no "10", version 6 is the current one. You are probably thinking of OSX, whose versions are 10.x.y. That's for macs, not iOS devices.

Having issues viewing interactive parameters and group tree in Visual Studio 2013 design view.

Hey Guys,
I'm a web developer (front end and back end, kind of a one man army sort of deal) and my current employer wishes to use crystal reports to display the results of the online survey apps/tools I have been working on for the last few months. However, I have been having trouble getting the reports to render in browser, and a lot of the ui components of the browser based report viewer (the interactive parameters and group tree) will not render properly in the design view of visual studio (ive attached a screen cap of what I'm talking about) or in the browser itself.
I am new to crystal reports and its community and if I am leaving out any critical details or have posted in the incorrect section please inform me and I will make changes as necessary.
Additional info:
Visual studio version: 2013 professional (trial)
Plugin version (exe file name): CRforVS_13_0_9.exe (I also installed the 64 bit run-time from this)
Server and OS versions: IIS 7.5 on Microsoft Windows Server 2008 R2
Any help you guys could provide would be greatly appreciated.
Cheers,
-Mike

Hi Mike
First thing you want to do is uninstall CRVS SP 9 and install CRVS SP 10. SP 10 is the first SP to support VS 2013.
Once that is done, let us know if that helped any.
- Ludek
Senior Support Engineer AGS Product Support, Global Support Center Canada
Follow us on Twitter

Radius and multiple trees

Similar Messages

Maybe you are looking for