Role-base CLI Problem

Hello dear
My problem with Role Base CLI
I just want to an access to configure router OSPF
I created view OSPF-TUNE
parser view OSPF-TUNE
R1(config-view)#commands exec include configure terminal
R1(config-view)#commands configure include router ospf
But when I entered the OSPF-TUNE
R1#?
Exec commands:
configure Enter configuration mode
enable     Turn on privileged commands
exit       Exit from the EXEC
show       Show running system information
R1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R1(config)#?
Configure commands:
do      To run exec commands in config mode
exit    Exit from configure mode
router Enable a routing process
I just want to an access to configure router OSPF But...
R1(config)#router ?
bgp       Border Gateway Protocol (BGP)
isis      ISO IS-IS
iso-igrp IGRP for OSI networks
mobile    Mobile routes
odr       On Demand stub Routes
ospf      Open Shortest Path First (OSPF)
rip       Routing Information Protocol (RIP)
Please Help Me...

Similar Messages

Role-Based CLI Views with AAA method

Hi,
I'm configuring Role-Based CLI Views on a router for limiting access to users.
My criteria:
- There should be a local user account on the router that has the view 'service' attached to it
- If the router is online and can reach the radius server, people in the correct group are assigned the view 'service'
My configuration:
aaa new-model
enable secret 1234
username service view service secret 1234
aaa group server radius my_radius
server-private 10.1.1.1 auth-port 1645 acct-port 1646 timeout 3 retransmit 2 key 0 1234
server-private 10.1.1.2 auth-port 1645 acct-port 1646 timeout 2 retransmit 1 key 0 1234
aaa authorization console
aaa authentication login mgmt group my_radius local
aaa authorization exec mgmt group my_radius local
line con 0
authorization exec mgmt
logging synchronous
login authentication mgmt
line vty 0 4
authorization exec mgmt
logging synchronous
login authentication mgmt
transport input ssh
The ERROR
Now I want to go configure the cli view 'service'...
# enable view
Password: 1234
*Jun 1 08:00:02.991: AAA/AUTHEN/VIEW (0000000D): Pick method list 'mgmt'
*Jun 1 08:00:02.991: RADIUS/ENCODE(0000000D): ask "Password: "
*Jun 1 08:00:02.991: RADIUS/ENCODE(0000000D): send packet; GET_PASSWORD
*Jun 1 08:00:21.011: RADIUS: Received from id 1645/13 10.1.1.1:1645, Access-Reject, len 20
The Questions
Why does the 'enable view' try to pick a method list when you have to supply the enable secret to access the root view?
Can you change this behaviour to always use the enable secret?
The TEMP Solution
If you're logged on to the router via telnet or SSH, the solution or workaround to this issue is:
aaa authentication login VIEW_CONFG local
line vty 0 4
login authentication VIEW_CONFG
Do your configuration of the view and re-configure the line to use the correct (wanted) method of authentication.
Thanks so much for the suggestions
/JZN

hi,
You have the following configured:
aaa authentication login mgmt group my_radius local
aaa authorization exec mgmt group my_radius local
line con 0
authorization exec mgmt
logging synchronous
login authentication mgmt
line vty 0 4
authorization exec mgmt
logging synchronous
login authentication mgmt
transport input ssh
Hence every time you try to login to the console or try the ssh the authentication will head to the radius server because of the following command "login authentication mgmt".
You cannot make it locally. Whatever defined on the method list mgmt first will be taking the precedence.
enable seceret will be locally defined. but you have the following configured:
aaa authorization exec mgmt group my_radius local
line con 0
authorization exec mgmt
line vty 0 4
authorization exec mgmt
Hence exec mode will also be done via radius server.
when you configure:
aaa authentication login VIEW_CONFG local
line vty 0 4
login authentication VIEW_CONFG
You are making the authentication local, hence it is working the way you want.
In short, whatever authentication is defined 1st on the method list will take precendence. the fallback will be checked only if the 1st aaa server is not reachable.
Hope this helps.
Regards,
Anisha
P.S.: please mark this thread as answered if you feel your query is resolved. Do rate helpful posts.

Ask about role base authentication

I want create login with role base authentication, but i still confuse with some tutorial that i found in google
can somebody give me good reference, because i don't understand with how is the step setting in the xml like login-config.xml etc
thx

I want create login with role base authentication, but i still confuse with some tutorial that i found in google
can somebody give me good reference, because i don't understand with how is the step setting in the xml like login-config.xml etc
thx

Hide/Display free Text in Shop page on role basis

Hi All,
In SRM 7, I want to hide/display the shop-free text on role basis. Any suggestion welcome.
Thanks,
Sruti

Hi,
You can implement BBP_SC_MODIFY_UI BADI where you can set whether "Describe Requirement" link should be visible or not. Here you could check if user has a particular role and set the value.
Rgds,
Prasanna

App+IIS server role, WCF data problems with Shrepoint Foundation 2013 install on 2012 R2

Hi
I am having tremendous trouble installing Sharepoint Foundation on a Windows 2012 R2 domain controller.
The server has just been added to our domain, promoted and this is the first piece of software I am trying to install. I had run Windows Update after joining it to the domain and before making it a member server before it was promoted.
I had real problems getting AppFabric to install but that is now done. However when I run the Sharepoint prerequisite installer (As Administrator) a results screen is displayed stating there was a configuration error during the installation of the Application
Server Role, Web Server (IIS) Role. It also says that the installation of Microsoft WCF Data Services 5 was skipped.
I manually added the Application Server Role.
I have manually installed WCF Data Services, which was successful.
I have used this page
http://support.microsoft.com/kb/2765260/en-gb to try and get around the Application Server and IIS Roles error. The hotfix quoted on that page is not applicable to this system. I had to run a DISM command to create an image from the OS installation media
before the Powershell commands would work.
Next, I rebooted the server and ran the prerequisite installer again as recommended. However, exactly the same problems are reported.
Can anyone help me with this, please?
Thanks.
Prerequisiteinstaller log:
2014-07-08 15:31:20 - Processor architecture is (9)
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 - Common Startup
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
2014-07-08 15:31:20 - Trying to remove the startup task if there is any.
2014-07-08 15:31:20 - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SharePointServerPreparationToolStartup_0FF1CE14-0000-0000-0000-000000000000.cmd
2014-07-08 15:31:20 - Error: Startup task doesn't exist. This is not a continuation after a restart.
2014-07-08 15:31:20 - Locating the following command line arguments file:
2014-07-08 15:31:20 - C:\Program Files (x86)\MSECache\SharePoint2010\PrerequisiteInstaller.Arguments.txt
2014-07-08 15:31:20 - Error: This file does not exist
2014-07-08 15:31:20 - Details of the current operating system:
2014-07-08 15:31:20 - Major version number of the operating system: (6)
2014-07-08 15:31:20 - Minor version number of the operating system: (2)
2014-07-08 15:31:20 - Build number of the operating system: (0X23F0=9200)
2014-07-08 15:31:20 - Major version number of the latest Service Pack: (0)
2014-07-08 15:31:20 - Minor version number of the latest Service Pack: (0)
2014-07-08 15:31:20 - Platform ID of the operating system: (2)
2014-07-08 15:31:20 - Product suites available on the operating system: (0X110=272)
2014-07-08 15:31:20 - Product type of the operating system: VER_NT_DOMAIN_CONROLLER
2014-07-08 15:31:20 - Product type: (7)
2014-07-08 15:31:20 - OS type: (0)
2014-07-08 15:31:20 - Configuring the application's property sheet...
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Windows Management Framework 3.0
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 - PowerShellVersion
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\PowerShell\3\PowerShellEngine
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - 4.0
2014-07-08 15:31:20 - A higher version of the prerequisite above is already installed
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Microsoft .NET Framework 4.5
2014-07-08 15:31:20 - Reading the following DWORD value/name...
2014-07-08 15:31:20 - Install
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\Net Framework Setup\NDP\V4\full
2014-07-08 15:31:20 - The value is (1)
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 - Version
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\Net Framework Setup\NDP\V4\full
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - 4.5.51641
2014-07-08 15:31:20 - A post release .NET 4.5 is installed
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Windows Identity Foundation (KB974405)
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 -
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\Windows Identity Foundation\Setup\v3.5
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - 6.1.7600.0
2014-07-08 15:31:20 - The prerequisite above is already installed
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Microsoft Sync Framework Runtime v1.0 SP1 (x64)
2014-07-08 15:31:20 - Reading version of the following file...
2014-07-08 15:31:20 - C:\Windows\assembly\GAC_MSIL\Microsoft.Synchronization\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.dll
2014-07-08 15:31:20 - The version is...
2014-07-08 15:31:20 - 1.0.3010.0
2014-07-08 15:31:20 - The prerequisite above is already installed
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Microsoft SQL Server 2008 R2 SP1 Native Client
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 - Version
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\Microsoft SQL Server\SQLNCLI10\CurrentVersion
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - 10.51.2500.0
2014-07-08 15:31:20 - A higher version of the prerequisite above is already installed
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Windows Server AppFabric
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 - ProductVersion
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\AppFabric\V1.0
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - 1.1.2106.32
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 - ProductVersion
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\AppFabric\V1.0
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - 1.1.2106.32
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 - ProductVersion
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\AppFabric\V1.0
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - 1.1.2106.32
2014-07-08 15:31:20 - Reading the following DWORD value/name...
2014-07-08 15:31:20 - DCC
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\AppFabric\V1.0\Features
2014-07-08 15:31:20 - The value is (1)
2014-07-08 15:31:20 - CacheClient is Installed.
2014-07-08 15:31:20 - Reading the following DWORD value/name...
2014-07-08 15:31:20 - DCS
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\AppFabric\V1.0\Features
2014-07-08 15:31:20 - The value is (1)
2014-07-08 15:31:20 - CacheService is Installed.
2014-07-08 15:31:20 - Reading the following DWORD value/name...
2014-07-08 15:31:20 - DCA
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\AppFabric\V1.0\Features
2014-07-08 15:31:20 - The value is (1)
2014-07-08 15:31:20 - CacheAdmin is Installed.
2014-07-08 15:31:20 - The prerequisite above is already installed
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Windows Identity Foundation (KB974405)
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 -
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\Microsoft Identity Extensions\Setup\1.0
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - 2.0.1459.0
2014-07-08 15:31:20 - A higher version of the prerequisite above is already installed
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Microsoft Information Protection and Control Client
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 -
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Microsoft\MSIPC\CurrentVersion
2014-07-08 15:31:20 - The value is...
2014-07-08 15:31:20 - 1.0.621.117
2014-07-08 15:31:20 - A higher version of the prerequisite above is already installed
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Microsoft WCF Data Services 5.0
2014-07-08 15:31:20 - Reading the following string value/name...
2014-07-08 15:31:20 - Version
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Wow6432Node\Microsoft\Microsoft WCF Data Services\5.0
2014-07-08 15:31:20 - Check whether the following prerequisite is installed:
2014-07-08 15:31:20 - Cumulative Update Package 1 for Microsoft AppFabric 1.1 for Windows Server (KB2671763)
2014-07-08 15:31:20 - Reading the following DWORD value/name...
2014-07-08 15:31:20 - IsInstalled
2014-07-08 15:31:20 - from the following registry location...
2014-07-08 15:31:20 - SOFTWARE\Wow6432Node\Microsoft\Updates\AppFabric 1.1 for Windows Server\KB2671763
2014-07-08 15:31:20 - The value is (1)
2014-07-08 15:31:20 - The prerequisite above is already installed
2014-07-08 15:31:23 - Beginning download/installation
2014-07-08 15:31:23 - Created thread for installer
2014-07-08 15:31:23 - "C:\Windows\system32\ServerManagerCmd.exe" -inputpath "C:\Users\ADMINI~1.HTL\AppData\Local\Temp\2\Pre1B5C.tmp.XML"
2014-07-08 15:31:23 - Error: Unable to install (2)
2014-07-08 15:31:23 - Error: [In HRESULT format] (-2147024894)
2014-07-08 15:31:23 - Last return code (2)
2014-07-08 15:31:23 - Reading the following DWORD value/name...
2014-07-08 15:31:23 - Flags
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\Updates\UpdateExeVolatile
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 - PendingFileRenameOperations
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SYSTEM\CurrentControlSet\Control\Session Manager
2014-07-08 15:31:23 - Reading the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\RebootRequired
2014-07-08 15:31:23 - Error: The tool was unable to install Application Server Role, Web Server (IIS) Role.
2014-07-08 15:31:23 - Last return code (2)
2014-07-08 15:31:23 - Options for further diagnostics: 1. Look up the return code value 2. Download the prerequisite manually and verify size downloaded by the prerequisite installer. 3. Install the prerequisite manually from the given location without any
command line options.
2014-07-08 15:31:23 - Cannot retry
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Windows Management Framework 3.0
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 - PowerShellVersion
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\PowerShell\3\PowerShellEngine
2014-07-08 15:31:23 - The value is...
2014-07-08 15:31:23 - 4.0
2014-07-08 15:31:23 - A higher version of the prerequisite above is already installed
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Microsoft .NET Framework 4.5
2014-07-08 15:31:23 - Reading the following DWORD value/name...
2014-07-08 15:31:23 - Install
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\Net Framework Setup\NDP\V4\full
2014-07-08 15:31:23 - The value is (1)
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 - Version
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\Net Framework Setup\NDP\V4\full
2014-07-08 15:31:23 - The value is...
2014-07-08 15:31:23 - 4.5.51641
2014-07-08 15:31:23 - A post release .NET 4.5 is installed
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Windows Identity Foundation (KB974405)
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 -
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\Windows Identity Foundation\Setup\v3.5
2014-07-08 15:31:23 - The value is...
2014-07-08 15:31:23 - 6.1.7600.0
2014-07-08 15:31:23 - The prerequisite above is already installed
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Microsoft Sync Framework Runtime v1.0 SP1 (x64)
2014-07-08 15:31:23 - Reading version of the following file...
2014-07-08 15:31:23 - C:\Windows\assembly\GAC_MSIL\Microsoft.Synchronization\1.0.0.0__89845dcd8080cc91\Microsoft.Synchronization.dll
2014-07-08 15:31:23 - The version is...
2014-07-08 15:31:23 - 1.0.3010.0
2014-07-08 15:31:23 - The prerequisite above is already installed
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Microsoft SQL Server 2008 R2 SP1 Native Client
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 - Version
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\Microsoft SQL Server\SQLNCLI10\CurrentVersion
2014-07-08 15:31:23 - The value is...
2014-07-08 15:31:23 - 10.51.2500.0
2014-07-08 15:31:23 - A higher version of the prerequisite above is already installed
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Windows Server AppFabric
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 - ProductVersion
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\AppFabric\V1.0
2014-07-08 15:31:23 - The value is...
2014-07-08 15:31:23 - 1.1.2106.32
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 - ProductVersion
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\AppFabric\V1.0
2014-07-08 15:31:23 - The value is...
2014-07-08 15:31:23 - 1.1.2106.32
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 - ProductVersion
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\AppFabric\V1.0
2014-07-08 15:31:23 - The value is...
2014-07-08 15:31:23 - 1.1.2106.32
2014-07-08 15:31:23 - Reading the following DWORD value/name...
2014-07-08 15:31:23 - DCC
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\AppFabric\V1.0\Features
2014-07-08 15:31:23 - The value is (1)
2014-07-08 15:31:23 - CacheClient is Installed.
2014-07-08 15:31:23 - Reading the following DWORD value/name...
2014-07-08 15:31:23 - DCS
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\AppFabric\V1.0\Features
2014-07-08 15:31:23 - The value is (1)
2014-07-08 15:31:23 - CacheService is Installed.
2014-07-08 15:31:23 - Reading the following DWORD value/name...
2014-07-08 15:31:23 - DCA
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\AppFabric\V1.0\Features
2014-07-08 15:31:23 - The value is (1)
2014-07-08 15:31:23 - CacheAdmin is Installed.
2014-07-08 15:31:23 - The prerequisite above is already installed
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Windows Identity Foundation (KB974405)
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 -
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\Microsoft Identity Extensions\Setup\1.0
2014-07-08 15:31:23 - The value is...
2014-07-08 15:31:23 - 2.0.1459.0
2014-07-08 15:31:23 - A higher version of the prerequisite above is already installed
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Microsoft Information Protection and Control Client
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 -
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Microsoft\MSIPC\CurrentVersion
2014-07-08 15:31:23 - The value is...
2014-07-08 15:31:23 - 1.0.621.117
2014-07-08 15:31:23 - A higher version of the prerequisite above is already installed
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Microsoft WCF Data Services 5.0
2014-07-08 15:31:23 - Reading the following string value/name...
2014-07-08 15:31:23 - Version
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Wow6432Node\Microsoft\Microsoft WCF Data Services\5.0
2014-07-08 15:31:23 - Check whether the following prerequisite is installed:
2014-07-08 15:31:23 - Cumulative Update Package 1 for Microsoft AppFabric 1.1 for Windows Server (KB2671763)
2014-07-08 15:31:23 - Reading the following DWORD value/name...
2014-07-08 15:31:23 - IsInstalled
2014-07-08 15:31:23 - from the following registry location...
2014-07-08 15:31:23 - SOFTWARE\Wow6432Node\Microsoft\Updates\AppFabric 1.1 for Windows Server\KB2671763
2014-07-08 15:31:23 - The value is (1)
2014-07-08 15:31:23 - The prerequisite above is already installed
2014-07-08 15:31:26 - Opening log file
2014-07-08 15:31:26 - Opened action for user
2014-07-08 15:31:26 - C:\Users\ADMINI~1.HTL\AppData\Local\Temp\2\prerequisiteinstaller.2014.07.08-15.31.20.log

SharePoint is not supported to be installed on a Domain Controller (see http://support.microsoft.com/kb/2764086). You'll need to find another server.
But regardless, with SharePoint 2013, you need SharePoint 2013 with SP1 in order to install on Server 2012 R2.
http://www.microsoft.com/en-us/download/details.aspx?id=42039
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

Branch office Exchange 2010 Role base administration control for branch site administrator

Dear sir,
   Customer has a Exchange 2010 Main and Branch office environment:
- Main office Exchange 2010 CAS x2 +HTS & Mailbox x2 (Server1,2 & Server 3,4)
  (Main office administrator:domain1\administrator) - DAG1
- Branch office Exchange 2010 CAS+HTS x2 & Mailbox with DAG x2 (Server5,6 & Server7,8
   (Branch Administrator: domain1\badmin) - DAG2
   Customer would like to know what is the role which permission should grant / delegate for ID: badmin in order to manage Exchange server 5,6,7,8 ? (with manage user account and performance in DAG2 failover & branch exchange server)
Regards,
Joe Tam

Dear Brian,
   I have try in my lab to scale down into 2 x Server in 1 AD Single Domain And Single Forest. It still have many unexpected behaviour, can you please suggest whether it is a design or bug of Exchagne 2010 SP1?
Procedure:
============================================================================
Exchange 2010 Role Delegation Problem: (Single AD, Single Site)
Environment:
Server: Windows 2008 R2 AD x1 + (CAS+HTS+Mailbox) Server x1
AD Server: AD1
Exchange2010 Server : EX2010 (with SP1) – Member Server Joined to testdomain1.net
Domain Name: testdomain1.net (NETBIOS: TESTDOMAIN1)
In AD,
Login as domain administrator: Testdomain1\administrator
1. Create an Organization Unit OU1.
2. Create User User1 under OU1
3. Delegate User1 to allow create user in OU1
Select all item in “Delegate the following common tasks:
In Exchange 2010 Server,
Login as domain administrator: Testdomain1\administrator
1. Rename existing database name to HKDB1
2. Create a new database AUDB1 in EX2010 Server:
AUDB1 Create Done.
Assign testdomain1\User1 as Exchange 2010 local administrators group.
Logoff Testdomain1\administrator and Login Testdomain1\User1
Open Exchange EMC: (Failed, because no user management roles is grant).
Logoff Testdomain1\User1, Login Testdomain1\Administrator
Open Exchange 2010 PowerShell:
Delegate User1 to allow perform recipient management in HKDB1 only:
====================================================================
New-ManagementScope "HKDBSCOPE" -DatabaseRestrictionFilter {Name -Eq 'HKDB*' }
$RoleGroup = Get-RoleGroup "Recipient Management"
New-RoleGroup "HKDBRecipientManagement" -Roles $RoleGroup.Roles -CustomConfigWriteScope "HKDBSCOPE"
Add-RoleGroupMember “HKDBRecipientMANAGEMENT” -Member User1
====================================================================
Result:
In Exchange 2010 Server, logon as domain user: Testdomain1\User1
Open Exchange Management Console: (User1 able to open EMC now)
Perform Create User User2 in OU1 with Mailbox located in HKDB1
Mailbox Creation Failed because it cannot match the Database name = HKDB*
Logoff Testdomain1\User1, Login Testdomain1\Administrator
In Exchange Management Shell, enter:
Set-ManagementScope "HKDBSCOPE" -DatabaseRestrictionFilter {Name -Like 'HKDB*' }
Logoff Testdomain1\administrator, Login Testdomain1\User1
Open Exchange Mangement Shell and Create User2 again.
Create user successfully.
Perform create User User3 in OU1 with Mailbox located in AUDB1
User3 Creation Failed because it is not meet the Database restriction of User1 – Like HKDB*
Logoff Testdomain1\User1, Login Testdomain1\Administrator
Open Exchange Management Console, create User3 in AUDB1
Create User3 in Users Container, by administrator ID.
Logoff Testdomain1\administrator, Login Testdomain1\User1
Perform mailbox remove of User2
User2 mailbox remove successfully.
Perform deletion of User3
Mailbox User3 Remove Successfully.
Why User3 is allowed to deleted mailbox which is located in by using delegated of User1?
Moreover, it found that User3 properties can also be changed by using User1. Why?
Does it mean delegation cannot handle delete operation?
In Active Directory User and Computer: User2 is deleted successfully by using User1 ID.
In Active Directory User and Computer: User3 is also deleted successfully by using User1 ID.

R/3 Basis security Problem

Hi,
i am posting my problem below. Pls its urgent.
<b>Problem Description.</b>
Currently the project manager/ Business Analyst in the IT department downloads the output from the PMF jobs. The ultimate aim is to pass this job to the business but currently the role that is used to grant access to these reports is via SM37/SP01 using the BUSINESS_ANALYST role. But due to sensitivity of both SM37 and SP01 this role can't be assigned to the end user. There is currently no way of giving the endusers access to view the output without them being able to view too much.
Required Change :
<b>Required Change</b>
Enable the end users access to view the output from the PMF jobs , BUT restricting access to just view this output / job NOT everything in SP01 or SM37. The preference would be to add SP01 but in such a way that the user will only see output from this job and anything theyve requested themselves.
reward points are guaranteed.
Regards,
Ravi G
Message was edited by:
        Ravi Kumar Gunda
Message was edited by:
        Ravi Kumar Gunda
Message was edited by:
        Ravi Kumar Gunda

Hi Ravi,
As long as you are giving only display access to Sm37 there is no need to restrict users to view only a specific job. We have assigned SM37 without selective display restrictions to end users and we are SOX compliant.
The point is that you have to ensure users are not able to change or repeat schedule the jobs through SM37.
S_BTCH_JOB is not very helpful. In S_BTCH_JOB if you give JOBACTION as SHOW then the user is able to see all the jobs including his own ones. JOBGROUP always must have value * for the object. Now in your case not only user should be able to see his own jobs but also a specific job whose owner will be somebody else. if you dont give show then he also wont be able to see the spool requests for jobs other than his own and neither be able to display jobdetails for other users job through SM37. Check OSS note 101146.Check the documentation of this object in SU21 transaction under object class BC_A.
Now I dont think that there is any danger in giving users the display access to all the jobs as long as they can not tamper with it. SHOW/LIST values in job action will ensure that the user is not able to change jobs other than his own.
Now coming to SP01. Ensure no user has SP01 and SP0R in auth object S_ADMI_FCD. This will ensure that he is able to view only his own spools. In case you want to give him access to view spools for even a single spool other than the one beloging to him you need to give access to SP0R or SP01.So this still doesnot solve the issue for you. Check OSS note 119147.
We had a similar requirement as yours. In order to solve the spool related issue we removed SP01 and SP0R from S_ADMI_FCD and then assigned it to select few users in end user department who were made responsible for spool display and download.
As of now SAP doesnot really help with this requirement. May be you can make use of user exits or create a custom based report that will lead to Sm37 and SP01.
Not sure if this was too helpful to you.
Regards.
Ruchit.
Message was edited by:
        Ruchit Khushu
Message was edited by:
        Ruchit Khushu

Role Based Access problem in forms

This would be a long reading.
I'm having a problem with forms Role Based Access.
We have two databases, one in London and one in Zurich. We have installed
application server and oracle forms on London database. We have implemented
Role Based Access to forms. For this we have created a database role (say ZUR_USER)
in both databases. The view FRM50_ENABLED_ROLES which is used by forms role based access control
is also created in both databases with a 'grant select to public'.
Our form system has a menu and forms under that menu. Both menu and the underlying forms have been
assigned Menu Security/Item Roles to the above mentioned ZUR_USER role and the role is assigned
to various users.
Now a Zurich user is trying to login to Zurich database using the URL for forms installation
in London server. He can login successfully and can see the menu heading in the main screen but
when he clicks the menu he doesn't see the underlying forms list.
When we try the same user id and database from London (using the same URL) we see all the forms.
Any idea what are we missing. The Menu Security is setup at menu level as well as the form level under
that menu. User can see the menu but not the form under that menu from Zurich. No such problem while
login from London.

I'm using the Forms 10g
and yes the only difference is between login from Zurich and London.
Problem definitely is due to Role Based Access setup.
The user in Zurich can see the Menu but not the items under that menu.
I have set the security set up at both menu and menu item(i.e. form name) level.

Withholding tax base amount problem

Hi experts,
I have WT configured like this:
Base amount: Gross
No accumulation
Minimum/maximum: Type level (both)
Central inv. prop. + Check min. base amnt at pmnt doc level
In minimum/maximum per Withholding tax type: Minimum base amount "$500"
The problem occurs when i try to pay an $250 invoice , the system calculates withholding tax for this case but it shouldnu2019t (because the invoice amount is less than $500). This vendor has only one invoice to pay.
The weird thing is this problem happen only for a few vendors, i´ve created a test vendor, exact the same as the "problem vendor" and for the new one, the system is not calculating the withholding tax (its working fine)... I donu2019t know what else should i see...
Thanks in advance
Jorge

Steve,
My problem is when i try to pay an invoice smaller than the minimum base amount, the system calculates the WHT. This problem is only with a few vendors, but others, with same master data are working fine. I never did changes in those vendor master data, so the program its no necesary in this case.
Thanks for answering.
Regards,
Jorge

CRM BP-R/3 ROLES SYNC ,REPLICATION PROBLEM

You create a business partner in the role 'general business partner' in the
R/3. The BP is synchronized correctly with the CRM.
Afterwards, you add the role 'media customer', 'sales customer' or
'retailer' to the R/3
. The corresponding BP is not updated in the CRM,
that is, the BP is not created in the role 'customer', 'interested party',
'consumer' or 'competitor' and the sales data is not synchronized to the
CRM.
DOES ANY ONE HAVE SOLUTION TO THIS PROBLEM.

Hi Prathiba,
The Issue is because of the note :1163979
The Note : 1243180 will provide you a right fix for your problem.
Best Regards,
Vignesh Ravikumar

BP Role TR0150 (ISSUER) Problem

Hi Experts,
I faced problem with BP role TR0150,when i enter BP T.code ...in that screen i.e PERSON,ORGANIZATION,GROUP .
1. When i click on Person ---> beneath Create in BP role ISSUER is not available. I want BP role ( ISSUER) in Person also.What are settings can i do for that one
2. When i click on organization and group -
>beneath Create in BP role ISSUER available .
3. when i click on settings (SHIFT+F8) in Authorization Overview Tab ISSUER is available.
Could you please guide me.
Thanks and Regards,
Magna.

Hi,
In the config under Business Partner -- Basic settings -- Business Partner roles -- define BP roles.
In this for the BP role category TR0150 issuer, you can specify the categories under which you can create a BP with this role.
But practically, a person cannot be an issuer of a security? We require at least an organization.
Regards,
Ravi

Airport Extreme Gigabit Base Station problem

Today when I tried to get on the internet, my MacBook Pro would not recognize my AEBS. It cannot find it in the AirPort Utility or when I type the name of my network and password into Airport from the Menu Bar. My PowerBook is running fine on the same network. It recognizes and joins the network when it wakes from sleep and it sees the AEBS in Airport Utility.
Last week my MacBook Pro experienced a kernel panic while using Safari over a different wireless network. My best guess is that I may have a bad Airport Express card... is there any way to run a test on it to find out?
Also, my MBP never remembers my networks that I visit requently.... all of them are hidden networks and I have to retype the network and password every time I visit that same network. This is not the case with my PowerBook... and I have no clue why.
Any help is appreciated.
Computer Stats:
PowerBook G4, 1.67 GHz, 512 MB RAM, 10.4.10
MacBook Pro, 2.4 GHz, 2 GB RAM, 10.4.9
Just ask if you need any more info about my computers or about my AEBS.

Hi K,
I'm glad I'm not the only one experiencing this problem. I was beginning to think that I made a mistake in purchasing the Airport Extreme BS (Gig). Since our jobs are printing perfectly when the printer is directly attached to our macs running Leopard, I have to assume this is a wireless issue. Currently, my Extreme Station is configured to run at 5 GHz and backward compatible with the other devices. Unfortunately, because my Powerbook is the only one that can take advantage of the 5GHz range, the base station has to allow for 2.4 GHz as well, and I'm beginning to think this is the culprit but I guess we have no choice. Because the 2.4 range is quite crowded (my cordless phone runs at that frequency), I imagine this might be what's causing the computer and base station to be confused. I hope Apple can fix this and make it more rubust. Incidentally, there is a toggle option in the Airport Utility where it does allow for more "robustness" but warns that this could slow down the overall performance of the network. I tried, but I'm still having the same sort of printer issue as you described. What do you think?

Kron cli problem

Hi All,
Im trying tu use kron funcionality, but I got problem.
My config (just testing one):
kron policy-list test
cli configure terminal
cli interface Loopback 50
cli exit
kron occurrence test in 1 oneshot
policy-list test
and I get this result from debugging, command "conf t" works, but "interface loopback 50" doesnt,
it gives Kron CLI return 2
Dont somebody know, what do I do wrong?
Thanks a lot.
*Aug 17 16:57:47.423: Major 1, Minor 0
*Aug 17 16:57:47.423: Timer Event test
*Aug 17 16:57:47.423: Call parse_cmd 'configure terminal'
*Aug 17 16:57:47.423: Kron CLI return 0
**CLI 'configure terminal':
Enter configuration commands, one per line. End with CNTL/Z.'
*Aug 17 16:57:47.423: Major 4, Minor 7
*Aug 17 16:57:47.423: Respond to end of CLI Process
*Aug 17 16:57:47.427: Call parse_cmd 'interface Loopback 50'
*Aug 17 16:57:47.427: Kron CLI return 2
*Aug 17 16:57:47.431: Major 4, Minor 7
*Aug 17 16:57:47.431: Respond to end of CLI Process
*Aug 17 16:57:47.431: Call parse_cmd 'exit'
*Aug 17 16:57:47.431: Kron CLI return 0
**CLI 'exit':
1861_Test_VoiceGW_1 con0 is now availablePress RETURN to get started.'
*Aug 17 16:57:47.435: Major 4, Minor 7
*Aug 17 16:57:47.435: Respond to end of CLI Process
*Aug 17 16:57:47.435: Forcing Removing Occur test
*Aug 17 16:57:47.435: Removing Occur test
*Aug 17 16:57:47.435: Removing Policy Name 'test'
*Aug 17 16:57:47.435: Finished Removing Occurrence test

Hi, thanks but my tacacs somehow doesnt want to accept authorization requests (it gives invalid tacacs packet...) even if command "event manager session cli username" is there. But it works because of "if-authenticated" rule in aaa policy, which is second rule after tacacs authentication.
To be honest, I dont understand how router can perform these commands, even if it doesnt ask for any authentication (at least no authentication request is visible in ACS log) It probably uses authentication of user who originaly set timer for action... and because of "if-authenticated" rule it executes commands.

Rescan base station problem

I have a new Airport Extreme Base Station (802.11n) and it works great. I also have an Airport Express which I configured earlier when my computer "found it."
Both the Extreme Base Station and the Airport Express have green lights and I'm connected to the Internet (through the Extreme) but when I scan for base stations my computer cannot seem to find my Airport Express even though the light's on and it's solid green.
I can't understand why my system doesn't find the Express - I'm only a few feet away from the thing and my base station is two floors down in the basement and my computer has no trouble finding that.
My Internet is fast and working well, but it's driving me nuts trying to figure out why Rescan doesn't find my Express. I'd like to set up the Express to use AirTunes. Any suggestions?
Thanks,
Rachel.

Hi Rachel!
That certainly sounds like the problem that the factory default reset is meant to solve. A factory default reset erases the "profiles" - all memory of contacts with computers and other base stations. That'll give you a completely fresh start, just as if it were new. While "factory default reset" may sound dramatic, it's actually quite simple, since it won't change the firmware of the Express, or the AirPort software on your computers. You should be back to normal in a few minutes:)
Refer to the last section "How to perform a factory default reset" on this page:
http://docs.info.apple.com/article.html?artnum=108044
You'll know that a factory default reset has successfully occurred when, without even connecting it to anything, other than plugging into an electrical receptacle to perform the reset, the default name of the Express (Apple Network ____ ) then shows in your menu bar's AirPort icon.

BT6500 and CLI problem.

Hi, new here so apologies if this subject has been covered.
I have just bought a BT6500 set of phones, they sounded just what I needed to stop nuisance calls. The problem is that my CLI doesn't work with this phone.
My CLI works with an old corded handset and the new BT6500 works ok on a friends phone line so both the CLI and phone works thus there seems to be a compatibility problem with my line and this phone.
I have tested the BT6500 at the test socket to eliminate any noise on internal wiring and tried several different filters and it still doesn't work.
Unfortunately I live miles from the telephone exchange and suspect this may be the route of my problem i.e. The BT6500 may be more sensitive to noise than my cheap corded phone.
Any suggestions? Can BT boost the cli signal at the local exchange or can they reduce line attenuation at all?

This link should help
http://bt.custhelp.com/app/answers/detail/a_id/9050/~/how-do-i-enable%2Fdisable-the-voice-text-featu...
and
http://bt.custhelp.com/app/answers/detail/a_id/9057/related/1
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Role-base CLI Problem

Similar Messages

Maybe you are looking for