Realm authentication not working for usergroups

Hi...
I have a server running 10.4.3 (8F46). I'm running one web site, and also some AFP shares. This server is bound to our corporate Active Directory server.
I'm positive the AD integration works because my AFP shares use AD users and groups for their permissions. All but one AFP share uses an AD group for permissions. AD users are in an AD group, and they can log in to the share. It works.
Anyways.... I want my one web site to be protected, and I'd like only one AD group to be able to access it. I am familiar with Apache from FreeBSd and OpenBSD. In ServerAdmin, I created a web site, and it works. I then created a realm, and added one AD user to the users pane. From the browser, I can connect to the web site after I authenticate as the AD user (annoyingly, I have to prepend my AD domain and a backslash to my username). My AD user can connect and view the web page.
When I add an AD group to the groups pane, none of the member users can authenticate properly. If I remove the above user from the user pane, and add a group (containing said user) to the group pane, that user can no longer log in.
I've consulted the 10.4 server documentation; the WebServices pdf does not get into details with realm authentication, and covers it mostly in conjunction with WebDAV.
I find it odd that an AD user can connect when specified as a user entry, but not from within a group. It's almost as if authenticating to AD groups is broken in Apple's implementation of Apache.
Has anyone else set up authentication with websites? Ever done it with Active Directory?
Thanks
/eric

This is not limited to Active Directory as I have been unable to use groups for realm authentication with OpenLDAP either (on 10.3.9).
I assumed it would be fixed in 10.4 but I see it has not.

Similar Messages

Negotiate Authentication Not working for Outlook

This is a very odd situation so bear with me when explaining this.
I have several users scattered out in different remote offices that are haveing authentication issues in outlook 2007 when trying to connect to our exchange 2010 public folder servers (CAS). When the users open outlook it constantly sits at trying
to connect and eventually locks the machine up until you use the task manager to close outlook. I have only determined this is a public folder issue because if you hold down the cntrl key and right click on the outlook icon in the taskbar (next to clock) you
get and option to see connection status. This shows the server name (one of the CAS) and the type as public folder and the connection status is empty.
We opened a microsoft ticket on this and they said it was a client side issue because we have 1700 users connection to the same set of servers with out issues. Well we have reimaged the users desktop, replaced all cableing from the user to the switch,
and confirmed the IOS on the routers matches other offices that are working. Still the same problem.
Heres the kicker! This problem does not effect other users in the same office and if this paticular user logs into another machine the same problem happens. But if she accesses her mailbox from Web Access she has no problems and if I log this
user on here at our home office on the same LAN as the Exchange system she has no issues.
But wait theres more. We have deleted the user's mailbox and LAN account. Created a new mailbox and LAN account with a similar name not the same one and when I log on to her machine exacte same issue. I have removed all antivirus software
from the machine and still have the same problem.
Not until we ran wireshark on her machine did I start seeing some ntlm authentication issues to the exchange system. We manually changed outlook from Negotiate Authentication to Password Authenticatoin (NTLM) and viola her email started syncing???
When i change this setting on the other users they connect also. But why are we not haveing to change this on the other 1700 users?
Can anyone please offer some insite in to what the hell is causing this and why it seem to follow the user around. I have been troubleshooting this for weeks and am so frustrated because it just doesnt make any sense.
Thankyou to anyone willing to provide any ideas into what could be causing this. When we opened a Microsoft ticket they were convinced that its client side but I have replaced everything.

Hello,
if you using OAW (Outlook AnyWhere) check the authentication method
get-OutlookAnywhere -Identity "<Servername>xpv00645\RPC (Default Web Site)" | fl *AuthenticationMethod*
I think it is set of NTLM or Negotiate.
Outlook 2007 has negotiate
problems at an OAW connection
authentication.
Change the authentication to NTLM for
the internal and Basic for the extenal method.
You need to reconfigure the Outlook Exhange settings to anonymous authentication and in the proxy settings to default authentication

Ldap authentication not working for Solaris 8 host - Help!

Greetings folks,
I just recently migrated a host to use LDAP authentication. The only difference between this host and the rest of the hosts in the environment that I've converted to use LDAP is that this one is running Solaris 8.
Here's the steps I took to migrate it (though, I used the same steps for another Sol8 host in another environment and it works fine):
ldapclient -P stg -d mydomain.com -D cn=proxyagent,ou=profile,dc=mydomain,dc=com -w secret 192.168.1.69
My /etc/nsswitch.conf looks like this:
passwd: files ldap
group: files ldap
My /etc/pam.conf looks like this:
login auth requisite pam_authtok_get.so.1
login auth required pam_dhkeys.so.1
login auth sufficient pam_unix_auth.so.1
login auth required pam_ldap.so.1
sshd auth requisite pam_authtok_get.so.1
sshd auth sufficient pam_unix_auth.so.1
sshd auth required pam_ldap.so.1
other auth requisite pam_authtok_get.so.1
other auth required pam_dhkeys.so.1
other auth sufficient pam_unix_auth.so.1
other auth required pam_ldap.so.1
passwd auth sufficient pam_passwd_auth.so.1
passwd auth required pam_ldap.so.1
I've also cleared out the local user accounts for my human users, so there aren't any more passwd or shadow entries (yes, I ran pwconv). I also cleaned out the /etc/group entries for the same users. The machine appears to be configured properly, because I can run various DS commands that indicate this:
hostname# getent passwd user1
user1::1001:1001:User 1:/opt/home/user1:/bin/bash
hostname# ldaplist -l passwd user1
dn: uid=user1,ou=people,dc=mydomain,dc=com
shadowFlag: 0
userPassword: {crypt}(removed)
uid: user1
objectClass: posixAccount
objectClass: shadowAccount
objectClass: account
objectClass: top
cn: user1
uidNumber: 1001
gidNumber: 1001
gecos: User 1
homeDirectory: /opt/home/user1
loginShell: /bin/bash
However, in the end, actual logins to this host fail via ssh. Snooping the traffic reveals that all the right info is being handed back to the client, including the crypt'ed password hash, uid, etc. just like I see with other hosts that work.
Any ideas?
Thanks!
Patrick

I assume you have applied lastest kernel patch and 108993 to this Solaris8 machine, and its nss_ldap.so.1 and pam_ldap.so.1 are the same as the other Solaris8 LDAP clients that are working for ssh via LDAP auth.
1) Please replace "objectClass: account" with "objectClass: person", I know SUN ONE DS5.2 likes "person".
2) Did you test and verify telnet/ftp/su working? but SSH not working?
3) If telnet/ftp/su all worked, and SSH (SUN-SSH or OpenSSH), make sure you have "UsePAM yes" in sshd_config and restart sshd.
4) It is not a must I think but normally I will add "shadow: files ldap" to /etc/nsswitch.conf, restart nscd after that.
5) Whenever ldapclient command is run and ldap_cachemgr is restarted, I usually also restart nscd and sshd after that, if not testing result may not be accurate as nscd is still remembering OLD stuffs cached which could be very misleading.
6) You may use "ssh -v userid@localhost" to watch the SSH communications, on top of your usual "snoop"ing of network packets.
7) Use the sample pam.conf that is meant for pam_ldap from Solaris 10 system admin guide with all the pam_unix_cred.so.1 lines commented out. This works for me, there is no sshd defintions as it will follow "other".
http://docs.sun.com/app/docs/doc/816-4556/6maort2te?a=view
Gary

Integrated Authentication not working for firefox 31 and above for NTLMv2

Users browsing from a Citrix session are being asked to authenticate using Firefox on newer versions (31-35) as they used to pass authentication transparently via NTLMv2 in earlier versions. This does not happen on IE so wondering what to do to get this working again for Firefox users.
Did release 31 also remove by accident ntlmv2 capability? If so, when and where is a fix to correct it. Fine to remove pre-ntlmv2 versions but dont break ntlmv2

I would like to bump this and I am wondering if this was ever solved. My only difference is at one point I had it working with http but ended up reinstalling using https. I get access denied but when I type in my username and password and it goes in fine.
There is a cert on the website
I have changed NTFS permissions
Made sure NTLM was on top
Website is in the local intranet zone
On the server itself that hosts the webconsole I can get in fine.

Basic authentication not working for portal application

HI All,
i have a portal application where I have a servlet. i want to use basic authentication for this servlet.
to archive this i have followed http://docs.oracle.com/cd/E14571_01/web.1111/b31974/adding_security.htm
and configured basic authentication, also add web-resource in web.xml for the url to access the servlet.
my web.xml look like (copied is only security section from web.xml)
<security-constraint>
    <web-resource-collection>
      <web-resource-name>adfAuthentication</web-resource-name>
      <url-pattern>/adfAuthentication</url-pattern>
    </web-resource-collection>
    <web-resource-collection>
      <web-resource-name>All</web-resource-name>
      <url-pattern>/faces/Auto-connect</url-pattern>
    </web-resource-collection>
    <auth-constraint>
      <role-name>valid-users</role-name>
    </auth-constraint>
</security-constraint>
<login-config>
    <auth-method>BASIC</auth-method>
</login-config>
<security-role>
    <role-name>valid-users</role-name>
</security-role>
this works when in run the application in JDeveloper i.e. when i try to access http://localhost:7101/MyApp/faces/Auto-connect it ask for basic authentication (the popup) and when i access http://localhost:7101/MyApp/ it takes me to home page for login , but doesn't work when i deploy the application in weblogic 11g.(deployment done using Enterprise Manager console (EM console) (for both URL no popup).
i tried Google around it but didn't get any solution please provide your input and guide me.
thanks
-somesh

Hi,
Before deploying, have you changed:
Application properties -> Deployment
Remove the selection from "Auto Generate and Syncronize weblogic-jdc.xml ....."
Kind Regards

Form Based Authentication not working for my sharepoint site.

I am using FIM 2010 r2 on Sharepoint -80 . I tried to use forms based authentication instead of default windows based auth. But the site is not even redirecting to the custom login page i am trying to connect .
Any suggestions ?

Issue has been resolved. There was no interesting work-a-round or fix involved.

11G Modplsql Basic Authentication not working for globally identified database users

I have a modplsql dad that uses Basic authentication. When I supply a username and password where the database user is locally defined in the database using the "identified by" syntax the authentication works perfectly and the modplsql app works. When I try to authenticate a database user that is defined in the database using the "identified globally" syntax authentication fails. Any idea on how to get modplsql app to work with users identified via OID?
Thanks,
Phil

Hi,
Before deploying, have you changed:
Application properties -> Deployment
Remove the selection from "Auto Generate and Syncronize weblogic-jdc.xml ....."
Kind Regards

People picker is not working for ie11 but working fine for other lower version

i am using sharepoint 2010 and windows authentication
recently i have updated my ie to ie11 and problem goes here.
when i try to select from people picker, there are an unexpected error happened
however when i use other ie version, people picker work fine, what goes wrong?
i have already added my system as trusted site
if there any others thing i miss out?

Hi,
According to your post, my understanding is that People picker is not working for ie11 but working fine for other lower version.
IE 11 is known to have compatibility issues on SharePoint 2010, please make sure to:
first of all, try installing latest update for IE 11 (several compatibility issues were fixed since the first release)
add the site to compatibility view (in IE> Tools> Compatibility view settings> type site name> add)
add the site to trusted sites and set the zone security level to low (in IE> Internet Options> Security> trusted sites> sites>add your site there> ok> custom level> select low> reset> ok)
You can use developer tools (f12) and set browser mode to the version that is most compatible with your environment.
Best Regards,
Linda Li
Linda Li
TechNet Community Support

Tacacs not working for 5508

Tacacs not working for 3 new 5508 WLC's...working fine for 6 old 4400 WLC's.
before 7.116 code upgrade...I remember 5508 was working on and off and now they are not.
Same configs on SW, WLC and ACS.
Debug on WLC gives..below message when Tacacs is attempted..
*aaaQueueReader: Oct 25 09:20:41.700: tplus_processAuthRequest: memory alloc failed for tplus
Any pointers for troubleshooting? Not sure why statistics show zero...?? Radius is working for users.
(wlc03) >show tacacs auth statistics
Authentication Servers:
Server Index..................................... 1
Server Address................................... 10.3.121.21
Msg Round Trip Time.............................. 0 (msec)
First Requests................................... 0
Retry Requests................................... 0
Accept Responses................................. 0
Reject Responses................................. 0
Error Responses.................................. 0
Restart Responses................................ 0
Follow Responses................................. 0
GetData Responses................................ 0
Encrypt no secret Responses...................... 0
Challenge Responses.............................. 0
Malformed Msgs................................... 0
Bad Authenticator Msgs........................... 0
Timeout Requests................................. 0
Unknowntype Msgs................................. 0
Other Drops...................................... 0
Server Index..................................... 2
--More-- or (q)uit
Server Address................................... 10.3.121.22
Msg Round Trip Time.............................. 0 (msec)
First Requests................................... 0
Retry Requests................................... 0
Accept Responses................................. 0
Reject Responses................................. 0
Error Responses.................................. 0
Restart Responses................................ 0
Follow Responses................................. 0
GetData Responses................................ 0
Encrypt no secret Responses...................... 0
Challenge Responses.............................. 0
Malformed Msgs................................... 0
Bad Authenticator Msgs........................... 0
Timeout Requests................................. 0
Unknowntype Msgs................................. 0
Other Drops...................................... 0
(wlc03) >show tacacs summary
Authentication Servers
Idx Server Address    Port    State     Tout
1    10.3.121.21     49      Enabled   5
2    10.3.121.22      49      Enabled   5
Authorization Servers
Idx Server Address    Port    State     Tout
1    10.3.121.21      49      Enabled   30
2    10.3.121.22     49      Enabled   5
Accounting Servers
Idx Server Address    Port    State     Tout
1    10.3.121.21      49      Enabled   5
We can ping the TACACS servers...

>show memory statistics
System Memory Statistics:
Total System Memory............: 1028820992 bytes
Used System Memory.............: 458424320 bytes
Free System Memory.............: 570396672 bytes
Bytes allocated from RTOS......: 21939008 bytes
Chunks Free....................: 29 bytes
Number of mmapped regions......: 45
Total space in mmapped regions.: 212779008 bytes
Total allocated space..........: 12015112 bytes
Total non-inuse space..........: 9923896 bytes
Top-most releasable space......: 133800 bytes
Total allocated (incl mmap)....: 234718016 bytes
Total used (incl mmap).........: 224794120 bytes
Total free (incl mmap).........: 9923896 bytes
show buffers
Pool[00]: 16 byte chunks
    chunks in pool:    50000
    chunks in use:     19030
    bytes in use:      304480
    bytes requested:   90479 (214001 overhead bytes)
Pool[01]: 64 byte chunks
    chunks in pool:    40000
    chunks in use:     14519
    bytes in use:      929216
    bytes requested:   566395 (362821 overhead bytes)
Pool[02]: 128 byte chunks
    chunks in pool:    20000
    chunks in use:     7726
    bytes in use:      988928
    bytes requested:   672853 (316075 overhead bytes)
Pool[03]: 256 byte chunks
    chunks in pool:    4000
    chunks in use:     808
    bytes in use:      206848
    bytes requested:   154777 (52071 overhead bytes)
Pool[04]: 1024 byte chunks
--More-- or (q)uit
    chunks in pool:    15300
    chunks in use:     11645
    bytes in use:      11924480
    bytes requested:   4945714 (6978766 overhead bytes)
Pool[05]: 2048 byte chunks
    chunks in pool:    1000
    chunks in use:     189
    bytes in use:      387072
    bytes requested:   355272 (31800 overhead bytes)
Pool[06]: 4096 byte chunks
    chunks in pool:    1000
    chunks in use:     36
    bytes in use:      147456
    bytes requested:   102479 (44977 overhead bytes)
Raw Pool:
    chunks in use:     186
    bytes requested:   156052303
show process memory
Name               Priority       BytesInUse BlocksInUse    Reaper
cslStoreManager    (240/ 7)              0            0      ( 0/ 0)%
System Reset Task (240/ 7)              0            0      ( 0/ 0)%
reaperWatcher      ( 3/ 96)              0            0      ( 0/ 0)%   I
osapiReaper        ( 10/ 94)              0            0      ( 0/ 0)%   I
TempStatus         (240/ 7)            424            1      ( 0/ 0)%   I
pktDebugSocketTask (255/ 1)              0            0      ( 0/ 0)%
LICENSE AGENT      (240/ 7)           2228           85      ( 0/ 0)%   I
emWeb              ( 7/ 95)        1235795        20743      ( 0/ 0)%   T 300
webJavaTask        (240/ 7)              0            0      ( 0/ 0)%
fmcHsTask          (100/ 60)              0            0      ( 0/ 0)%
apstatEngineTask   (240/ 7)              0            0      ( 0/ 0)%
rrcEngineTask      (240/ 7)              0            0      ( 0/ 0)%
spectrumDataTask   (255/ 1)        1614480           12      ( 0/ 0)%
spectrumNMSPTask   (255/ 1)          28808            3      ( 0/ 0)%
wipsTask           (240/ 7)              0            0      ( 0/ 0)%
tsmTask            (255/ 1)              0            0      ( 0/ 0)%
cids-cl Task       (240/ 7)              0            0      ( 0/ 0)%
ethoipSocketTask   ( 7/ 95)              0            0      ( 0/ 0)%
ethoipOsapiMsgRcv (240/ 7)              0            0      ( 0/ 0)%
--More-- or (q)uit
envCtrollerStatus (240/ 7)              0            0      ( 0/ 0)%
rfidTask           (240/ 7)              0            0      ( 0/ 0)%
idsTrackEventTask (239/ 8)              0            0      ( 0/ 0)%
DHCP Server        (240/ 7)              0            0      ( 0/ 0)%
bcastReceiveTask   (240/ 7)              0            0      ( 0/ 0)%
ProcessLoggingTask (240/ 7)              0            0      ( 0/ 0)%
CDP Main           (240/ 7)           3100           13      ( 0/ 0)%
sntpMainTask       (240/ 7)              0            0      ( 0/ 0)%
sntpReceiveTask    (240/ 7)              0            0      ( 0/ 0)%
cdpSocketTask      (240/ 7)              0            0      ( 0/ 0)%
grouping Task      (255/ 1)              0            0      ( 0/ 0)%
dot11a             (255/ 1)             63            3      ( 0/ 0)%
rrm Socket Task    ( 1/ 97)          35024            1      ( 0/ 0)%
rrm Socket Task    (255/ 1)          35024            1      ( 0/ 0)%
dot11a             (255/ 1)              0            0      ( 0/ 0)%
grouping Task      (255/ 1)              0            0      ( 0/ 0)%
dot11b             (255/ 1)            105            5      ( 0/ 0)%
rrm Socket Task    (255/ 1)          35024            1      ( 0/ 0)%
dot11b             (255/ 1)              0            0      ( 0/ 0)%
rrm Socket Task    (255/ 1)          35024            1      ( 0/ 0)%
apfPmkCacheTimer   (240/ 7)              0            0      ( 0/ 0)%
Apf Guest          (240/ 7)              0            0      ( 0/ 0)%
RLDP Schedule Task (240/ 7)              0            0      ( 0/ 0)%
--More-- or (q)uit
apfMsConnTask_5    (175/ 32)              0            0      ( 0/ 0)%
apfMsConnTask_4    (175/ 32)              0            0      ( 0/ 0)%
apfMsConnTask_6    (175/ 32)              0            0      ( 0/ 0)%
apfMsConnTask_7    (175/ 32)              0            0      ( 0/ 0)%
apfMsConnTask_3    (175/ 32)              0            0      ( 0/ 0)%
apfMsConnTask_2    (175/ 32)              0            0      ( 0/ 0)%
apfLbsTask         (240/ 7)              0            0      ( 0/ 0)%
apfMsConnTask_0    (175/ 32)              0            0      ( 0/ 0)%
apfMsConnTask_1    (175/ 32)              0            0      ( 0/ 0)%
apfProbeThread     (200/ 22)              0            0      ( 0/ 0)%
apfOrphanSocketTas (240/ 7)              0            0      ( 0/ 0)%
apfRogueDetectorTh (175/ 32)              0            0      ( 0/ 0)%
apfRogueTask       (240/ 7)              0            0      ( 0/ 0)%
apfOpenDtlSocket   (175/ 32)              0            0      ( 0/ 0)%
apfRLDP            (175/ 32)            424            1      ( 0/ 0)%
apfRLDPRecv        (175/ 32)              0            0      ( 0/ 0)%
apfReceiveTask     (175/ 32)              0            0      ( 0/ 0)%
mmMfpTask          (175/ 32)              0            0      ( 0/ 0)%
mmMobility         (240/ 7)           1272            3      ( 0/ 0)%
mmSSHPeerRegister (240/ 7)              0            0      ( 0/ 0)%
mmListen           (180/ 30)          99920          227      ( 0/ 0)%
tplusTransportThre (201/ 22)              0            0      ( 0/ 0)%
radiusCoASupportTr (201/ 22)              0            0      ( 0/ 0)%
--More-- or (q)uit
EAP Framework      (240/ 7)              0            0      ( 0/ 0)%
aaaQueueReader     (225/ 13)           3518           12      ( 0/ 0)%
radiusRFC3576Trans (201/ 22)              0            0      ( 0/ 0)%
radiusTransportThr (201/ 22)              0            0      ( 0/ 0)%
pemReceiveTask     (240/ 7)              0            0      ( 0/ 0)%
iappSocketTask     (240/ 7)              0            0      ( 0/ 0)%
ccxRmTask          (230/ 11)              0            0      ( 0/ 0)%
ccxS69Task         (240/ 7)            424            1      ( 0/ 0)%
ccxDiagTask        (240/ 7)              0            0      ( 0/ 0)%
ccxL2RoamTask      (240/ 7)         240424            3      ( 0/ 0)%
dot1xSocketTask    (240/ 7)              0            0      ( 0/ 0)%
Dot1x_NW_MsgTask_7 (240/ 7)              0            0      ( 0/ 0)%
Dot1x_NW_MsgTask_6 (240/ 7)              0            0      ( 0/ 0)%
Dot1x_NW_MsgTask_2 (240/ 7)              0            0      ( 0/ 0)%
Dot1x_NW_MsgTask_3 (240/ 7)              0            0      ( 0/ 0)%
Dot1x_NW_MsgTask_4 (240/ 7)              0            0      ( 0/ 0)%
Dot1x_NW_MsgTask_5 (240/ 7)              0            0      ( 0/ 0)%
Dot1x_NW_MsgTask_1 (240/ 7)              0            0      ( 0/ 0)%
Dot1x_NW_MsgTask_0 (240/ 7)            424            1      ( 0/ 0)%
dot1xMsgTask       (240/ 7)              0            0      ( 0/ 0)%
locpTxServerTask   (220/ 15)            408            2      ( 0/ 0)%
locpRxServerTask   (200/ 22)         428043         1961      ( 0/ 0)%
capwapSocketTask   ( 72/ 70)         303104          148      ( 0/ 0)%
--More-- or (q)uit
spamApTask6        (118/ 53)          25929           63      ( 0/ 0)%
spamApTask7        ( 53/ 78)          24233           59      ( 0/ 0)%
spamApTask5        (118/ 53)          23445           61      ( 0/ 0)%
spamApTask4        (118/ 53)          23513           58      ( 0/ 0)%
spamApTask3        (118/ 53)          19569           48      ( 0/ 0)%
spamApTask2        ( 53/ 78)          23809           58      ( 0/ 0)%
spamApTask1        ( 53/ 78)          22961           56      ( 0/ 0)%
spamApTask0        ( 78/ 68)          39189          106      ( 0/ 0)%
spamReceiveTask    (120/ 52)        2204024          252      ( 0/ 0)%
spamSocketTask     ( 32/ 85)              0            0      ( 0/ 0)%
Image License brok (240/ 7)              0            0      ( 0/ 0)%   I
Image License brok (240/ 7)             28            1      ( 0/ 0)%   I
IPC Main Thread    (240/ 7)              0            0      ( 0/ 0)%   I
License Client Lib (240/ 7)             96            1      ( 0/ 0)%   I
sshpmLscScepTask   (100/ 60)              0            0      ( 0/ 0)%
License Client Lib (240/ 7)             96            1      ( 0/ 0)%   I
sshpmLscTask       (100/ 60)          25783         1739      ( 0/ 0)%
sshpmReceiveTask   (175/ 32)           6697           66      ( 0/ 0)%
sshpmMainTask      (100/ 60)         208440          358      ( 0/ 0)%
mfpKeyRefreshTask (255/ 1)              0            0      ( 0/ 0)%
mfpEventTask       (255/ 1)              0            0      ( 0/ 0)%
mfpTrapForwardTask (255/ 1)              0            0      ( 0/ 0)%
clientTroubleShoot (100/ 60)        2841248            4      ( 0/ 0)%
--More-- or (q)uit
loggerMainTask     (200/ 22)              0            0      ( 0/ 0)%
debugMainTask      (200/ 22)              0            0      ( 0/ 0)%
dot3ad_lac_task    (240/ 7)          32901            3      ( 0/ 0)%
gccp_t             (240/ 7)           5864            5      ( 0/ 0)%
dot1dTimer         (240/ 7)              0            0      ( 0/ 0)%   T 300
dot1dRecv          (250/ 3)              0            0      ( 0/ 0)%
uart_session       (240/ 7)              0            0      ( 0/ 0)%
StatsTask          (240/ 7)              0            0      ( 0/ 0)%
fdbTask            (240/ 7)              0            0      ( 0/ 0)%
broffu_SocketRecei (100/ 60)             13            1      ( 0/ 0)%
SNMPProcMon        (240/ 7)              0            0      ( 0/ 0)%   T 300
RMONTask           ( 71/ 71)              0            0      ( 0/ 0)%   I
SNMPTask           (240/ 7)          61089         1064      ( 0/ 0)%
DHCP Socket Task   (240/ 7)              0            0      ( 0/ 0)%
DHCP Proxy Task    (240/ 7)              0            0      ( 0/ 0)%
dhcpClientTimerTas (240/ 7)              0            0      ( 0/ 0)%
DHCP Client Task   (240/ 7)              0            0      ( 0/ 0)%   T 600
BootP              (240/ 7)              0            0      ( 0/ 0)%   T 300
TransferTask       (240/ 7)            848            2      ( 0/ 0)%   I
osapiTimer         (100/ 60)          13024            2      ( 0/ 0)%   T 300
nim_t              (100/ 60)           2447            3      ( 0/ 0)%
dtlArpTask         ( 7/ 95)          98436            3      ( 0/ 0)%
dtlTask            (100/ 60)          41089           20      ( 0/ 0)%
--More-- or (q)uit
dtlDataLowTask     ( 7/ 95)              0            0      ( 0/ 0)%
sysapiprintf       (240/ 7)          22657            3      ( 0/ 0)%
osapiBsnTimer      ( 95/ 62)              0            0      ( 0/ 0)%
fp_main_task       (240/ 7)       153068796        26868      ( 0/ 0)%

Wireless with PEAP Authentication not working using new NPS server

All,
We are planning to migrate from our old IAS server to new NPS server. We are testing the new NPS server with our wireless infrastructure using WISM. We are using PEAP with server Cert for authentication. For testing purpose we are doing user authentication but our goal is to do machine authentication. On client side we are using Windows XP, Windows 7 & iPAD’s
I believe I have configured the NPS & CA server as per the documents I found on Cisco support forum & Microsoft’s site.
But it is not working for me. I am getting the following error message on the NPS server.
Error # 1
=======
Cryptographic operation.
Subject:
            Security ID:                 SYSTEM
            Account Name:                       MADXXX
            Account Domain:                    AD
            Logon ID:                    0x3e7
Cryptographic Parameters:
            Provider Name:          Microsoft Software Key Storage Provider
            Algorithm Name:         RSA
            Key Name:      XXX-Wireless-NPS
            Key Type:       Machine key.
Cryptographic Operation:
            Operation:       Decrypt.
            Return Code: 0x80090010
Error # 2
======
An error occurred during the Network Policy Server use of the Extensible Authentication Protocol (EAP). Check EAP log files for EAP errors.
I was wondering if anyone has any insight on what is going on.
Thanks, Ds

Scott,
I have disabled MS-CHAP v1 & only MS-CHAP v2 is enabled on Network Policies > Constraints.
I disabled validate Certificate on Windows 7 and tried to authenticate, it is still failing. Here is the output from the event viewer:
Cryptographic operation.
Subject:
Security ID: SYSTEM
Account Name: MADHFSVNPSPI01$
Account Domain: AD
Logon ID: 0x3e7
Cryptographic Parameters:
Provider Name: Microsoft Software Key Storage Provider
Algorithm Name: RSA
Key Name: DOT-Wireless-NPS
Key Type: Machine key.
Cryptographic Operation:
Operation: Decrypt.
Return Code: 0x80090010
Network Policy Server denied access to a user.
Contact the Network Policy Server administrator for more information.
User:
Security ID: AD\mscdzs
Account Name: AD\mscdzs
Account Domain: AD
Fully Qualified Account Name: AD\mscdzs
Client Machine:
Security ID: NULL SID
Account Name: -
Fully Qualified Account Name: -
OS-Version: -
Called Station Identifier: 64-ae-0c-00-de-f0:DOT
Calling Station Identifier: a0-88-b4-e2-79-cc
NAS:
NAS IPv4 Address: 130.47.128.7
NAS IPv6 Address: -
NAS Identifier: WISM2B
NAS Port-Type: Wireless - IEEE 802.11
NAS Port: 29
RADIUS Client:
Client Friendly Name: WISM2B
Client IP Address: 130.47.128.7
Authentication Details:
Connection Request Policy Name: Secure Wireless Connections
Network Policy Name: Secure Wireless Connections
Authentication Provider: Windows
Authentication Server: MADHFSVNPSPI01.AD.DOT.STATE.WI.US
Authentication Type: PEAP
EAP Type: -
Account Session Identifier: -
Logging Results: Accounting information was written to the local log file.
Reason Code: 23
Reason: An error occurred during the Network Policy Server use of the Extensible Authentication Protocol (EAP). Check EAP log files for EAP errors.
Attached are EAP logs & debug logs from the controller.
Thanks for all the help. I really appreciate.

I have an event in my calendar that was sent by someone who does not work for the company anymore and I am reminded 2 times a week. How can I remove it?

I have an event in my calendar that was sent by someone that does not work for the company anymore and I am reminded 2 times a week. How do I delete it?

Tap on the event to open the event. Click the 'Edit' button in the event bubble, then press the 'Delete Event' button at the bottom of the Edit pop-up. It's a little different for events that come through Microsoft Exchange, you tap the event to bring up bubble and click the 'Details' button, and then press 'Decline' to remove the event.

IPhone 6 External Mic not working for Siri/Dictation

I am finding that the external mic on my iPhone 6 works for phone calls and voice memos, but does not work for Siri/Dictation. When I plug in the earbuds, they work for everything (including Siri/Dictation).
Was chatting to Apple support who had me reset all settings. I thought that worked, but realized that after a reset, Siri is off and I was talking to "Voice control" (which works). When I turned Siri back on, it does not work.
I have two questions for the community to see if you can help:
1- I have been assuming this must be a software problem since the mic does work for non-Siri access. But is that true? Is there a hardware component that Siri depends on which could be faulty here?
2- If it is software, what action should I try to address it? I have done a reset all settings already and that did not help.
Doug

Hi, everyone. I talked to Apple Genius at Apple Store last week, she said it should be a software issue and I needed to reset my iphone 6 plus as a new device and I can not use the backup restore from my iCloud, it was because the microphone bug or glitch can be in the backup also. Ok, followed her advice, erased all contents and set my iphone as a new device , the microphone worked for an hour, but went bad again. I used "voice memo" app from Apple to test the microphone. It is the best tool since it doesn't involve any provider's network and it doesn't need another person's phone to listen and test. If you can hear your voice recording clearly, then the mic works. I tested it 3-4 times a day for a few days now, half of the time the mic doesn't work. So, set as a new device isn't working. The issue is intermittent and it comes and goes as it likes, so very annoying. I carry my Apple EarPods with me in these past few days ust in case I need to make important phone calls. Will need to go back to Apple Genius this weekend for sure. Will give update after the weekend.

CALLER ID not working for International incoming calls

Hi,
I've a strange issue where CALLER ID not working for International incoming calls, it shows INTERNATIONAL UNKNOWN NUMBER in the phone display, but the number shows correclty in Verizon Call assistant !!!
Any clue?

yashshankar wrote:
Hi
I recently purschased an Online number but the caller id does not work for incoming calls.How do we resolve this problem?.
Regards
Yash
You didn't mention what country your Online Number is in. Not all of Skype's Online Numbers are eligible for use as Caller ID when calling telephones or sending SMS messages. If your number is from one of these countries (Chile, Denmark, Estonia, Hong Kong, Poland, Sweden, the UK and the US), then it can be used this way. Otherwise, you can use a mobile number from countries other than Japan or Mexico as Caller ID with Skype, after the number goes through a verification process where Skype sends SMS messages with codes to that number.
To get to these settings, log into your Skype account here on the Skype web site using the "Account" link at the top of this page. You'll see a screen that would include your current Caller ID settings, and a link to change that. If your Online Number is from one of those countries I referenced above, just select it and you're done.
Hope that helps!
Patrick
Location/Ubicacion: Arizona USA
Time Zone/Hora Local: UTC/GMT -7
If this message has adequately addressed your issue, please click on the “Accept as Solution” button. If you found a post useful then please "Give Kudos" at the bottom of my post, so that this information can benefit others.
Si esto mensaje le ha ayudado, por favor haga clic en "Aceptar como solución". Si encuentra un mensaje útil, por favor "Da Kudos" al final del mensaje, por lo que esta información puede beneficiar a otros.
I am not a Skype employee. No soy un empleado de Skype.

Select All in a table does not work for Drag and Drop

Hi. I am using Jdeveloper 11.1.1.2 but have also reproduced in 11.1.1.3.
I am trying to implement drag and drop rows from one table to another. Everything works fine except when I do a Select All (ctrl-A) in a table, the table visually looks like all rows are selected, but when I try to click on one of the selected rows to drag to the other table, only the row I click on is dragged.
I tried setting Range Size -1, fetch mode to FETCH_ALL, content delivery to "immediate" but nothing works.
I even have reproduced not using a view object but just a List of beans with only 5 or 10 beans showing in the table.
Does anyone know how to get Select All to work for a Drag Source?
Thanks.
-Ed

Frank-
OK, thanks for looking into that. I also submitted this service request, which includes a simple sample app to demonstrate the problem:
SR #3-2387481211: ADF Drag and Drop does not work for rows in table using Select All
Thanks again for the reply.
-Ed

Form Designed in LiveCycle will not work for End User

Please Help!
I am a newbie to Adobe LiveCycle but recognized the utility in the program, so decided to give it a while to try and streamline some of my employer's forms. After spending too much time learning how to design a form (much to the dislike of my boss), I am finally going to have to ask for some help. So here's the deal:
I've designed a dynamic pdf in LiveCycle with two master pages and two repeating flowed subforms. The first repeating subform is basically an expanding table intended to be used as a photographer's log where they can log each photo taken with the camera. The expanding table has some code with a button at the top for the end user to enter the number of photos on the photo roll, click submit, and table expands to however many instances of rows are needed for each photo that was taken. The second subform is basically an image field and text fields used as photo captions/photo compilation pages. When the end user clicks submit on the first subform to expand the table, I also have javascript in that click event to also create same amouint of instances of the second subform (the photo compilation page(s)). Each text field for the photo caption on the second subform is populated by the data entered into the photo log table cells. I was able to find a script to correctly populate those fields for each instance of the table. Wish I had the form here, but it's at work at the moment.
My problem is this: I've scratched and clawed to get all of the forms expanding correctly and the scripts populating each instance of the fields correctly and everything works great in LiveCycle preview. I then saved the form as PDF for use by my field crew personnel (whom all use, at the very least, Adobe Pro 9, but most Pro X). I sent the new form to them and they move it to their desktop, open it with Adobe Pro, and populate all of the fields and everything works swimmingly. However, once they save it, it gets all jumbled and they can't even print it. We even thought we found a workaround by entering all data and printing to PDF, but even that has turned out to not work. I checked to make sure that I designed and saved the form in LiveCycle for use with the Adobe Pro versions, but still not working for my end users.
Anyone have any thoughts on my long explanation?? Please HELLLLPPPP!

The error(s) occur when trying to save the document. I want each user to tell the first page how many rows they will need in the photo log table, so they would enter however many photos were taken in the box: "Number of Photos on Roll:" ---> Then click the "Submit" cmd button. That should expand the table. Once it expands, it should also add the same amount of instances of the photo compilation page (2nd Page) as there are rows in 1st page table. Then the user will populate each cell of the table on page 1 with data. The data entered into the page 1 table cells will populate the text fields (photo caption) in Page 2 once the user clicks on the "Populate Captions!" cmd button in the lower left corner of the table on Page 1.
The problem is in the distributing of the form to the user so they can save the form after populating the data. I did a test run this morning and for some reason it did do the "print to PDF" correctly for 5 photos on the roll (though this has not been happening every time and especially for a large number of pages, ie. 80 photos). However, after entering the data for 5 rows on page 1 and then populating the 5 photo compilation pages, I saved a copy as "Save As PDF" and closed the document. Then re-opened the copy in Acrobat Pro X. The new copy:
-had 5 additional rows added to Page 1
-Duplicates of some of the fields
-Only retained the 1st instance of the Second Page (Photo w/ Caption) and not all fields were populated
Again, this all works fine in the LiveCycle Preview but not anywhere else. I do not have this set up to be linked to an external data source (YET) but there is javascript in the cmd buttons. I also do not want to distribute this form to end users and then collect the data back from them. I want them to be able to save a copy of my LiveCycle designed form, open in Adobe Pro, populate the data and save as many copies as needed for form production.

Realm authentication not working for usergroups

Similar Messages

Maybe you are looking for