Service-Type problem on WLC5508 + Freeradius

Hi all,
I'm trying to set up the Management Auth process on my WLC5508 using a Freeradius/Ldap Server.
Auth process through Web management console is working fine except the fact all users are affected in the "Monitor" role.
I have set up the Service-Type attribut to Administrative in my LDAP Server, but the radius server log me the following error :
Thu Oct 20 10:04:41 2011 : Error:   [ldap] Failed to create the pair: Unknown value Administrative for attribute Service-Type
Thu Oct 20 10:04:41 2011 : Auth: Login OK: [test/test] (from client IBL-WLC port 0)
In the ldap.attrs file on my radius server I have the following associations :
replyItem       Service-Type                    radiusServiceType
replyItem       Tunnel-Type                     radiusTunnelType
replyItem       Tunnel-Medium-Type         radiusTunnelMediumType
replyItem       Tunnel-Private-Group-Id     radiusTunnelPrivateGroupId
Note that Freeradius/Ldap configuration work fine for authenticating wireless clients.
If someone could help me, It would be great
Thanks

Extremely old ticket, but I had the same issue so here is the solution I found:
Service-Type needs to be "Administrative-User" (See RFC 2865 and check what your FreeRadius dictionary is using).
wolverine       Auth-Type := LDAP, Huntgroup-Name == "wifi"
                     Cisco-AVPair += "NCS:virtual-domain0=ROOT-DOMAIN",
                     Cisco-AVPair += "NCS:role0=Root",
                     Service-Type = Administrative-User,
                     Fall-Through = Yes
Service-Type = Administrative-User gives admin to WLC.
The 2 Cisco-AVPair grant admin privs to Prime.

Similar Messages

Generating Accruals from Service type Goods Receipt PO's

I have identified that Service type Goods Receipt PO's do not write to the G/L, but a.) I don't understand why they don't and b.) how does one create system generated accruals if not by Goods Receipt PO? I am sure this question has been asked before, but I couldn't find the thread.
Thanks in advance,
Donald

Invoices create an actual expense. Accrual expenses are normally captured as a result of work performed or items received but not invoiced. Once again, I understand what SAP Business One does in this scenario. I am being asked why and for that I don't have an answer. It doesn't seem to be in conflict with GAAP, so I am not sure why they don't allow G/L Account determination for Service Documents to Accrual accounts. It is a similar problem on the AR side, SAP B1 doesn't support money received, but not recognized to the liabilites bucket without manual intervention.
Thanks again,
Donald

Can't select service type in iManager - Firefox 3

I found another problem configuring filtering exceptions in iManager
with Firefox 3. When I click the "service type" button a window pops
up, but it's empty. Workarounds- use Internet Explorer or filtcfg.
Perhaps someone can pass along this bug, too.
Jim Wagner

Craig Johnson wrote:
> Is it there in BM39SP1?
>
> Craig Johnson
> Novell Support Connection SysOp
> *** For a current patch list, tips, handy files and books on
> BorderManager, go to http://www.craigjconsulting.com ***
>
>
We have BM39SP1 installed.
Jim Wagner

Service Catalogue and Service Type

Hi experts,
I am unable to assign service catalogue in service PO. I have created a service catalogue in ML01 with new Service Type and Edition.
Thanks in advance.
Regards,
Subhro
Edited by: Subhro.C on Dec 28, 2010 7:30 AM

Hi,
I am also having the same problem, please reply.
Regards

How to Get Service Type as deault value in India Localization

Hi Gurus
I have a problem with respect to Form personalization
I have attached the Tax Category to a Item Class wherein we assign Items to the template in Excise Regime, so that, when Sales Order is created, Tax get automatically calculated in India Localization Tax Form. But, I need to default Service Type value when specific Tax Category is Entered. Can any body suggest me...........
Regards,
Balaji

Have you looked into using Defaulting rules ?
OM > Setup > Rules > Defaulting rules
Sandeep Gandhi

Service-Type and 12.3 at AS5350

Hi!
After migrating from 12.2(XB15) to 12.3.13 Service-Type changed from Voice to Login in acct/auth requests in the TCL IVR script. This behaviour destroy my billing system.
I can't change billing system, and only can add second RADIUS for proxy/rewrite Service-Type. But this is not so good for me.
Please, help me solve this problem.
I can add additional info upon request.
thanks.

Cisco as always are full of suprises (most of them - unpleasant).
Go to config mode and then:
radius attribute 6
(6 is the service type). Try to change the value of Service-Type.
And as a last chance, I think you could manipulate the radius "variables" in the TCL script.
hth

How to create approval for service type document

Hello,
I am trying to create a Approval Query wherein if a Patricular User creates a SERVICE Type AP Invoice then it should go for approval.
I used the query :
SELECT distinct 'TRUE' FROM OPCH T0 INNER JOIN PCH1 T1 ON T0.[DocEntry] = T1.[DocEntry] WHERE T0.[DocType] ='S'
But the problem is that when the above user is making ITEM Type AP Invoice then also its going for approval.
Please advise.
Kind Regards,
Ravi

Hi,
Please find below the query :
SELECT distinct' true' FROM OPCH T0 INNER JOIN OUSR T1 ON T0.UserSign = T1.USERID WHERE $[$3.0.0] = 'S' and $[user] = '9'
This user 9 was taken from OUSR table.
Regards,
Ravi

User does not have access to the Cloud Service Type

Where do it edit the access the the user? How do i fix this problem?
"messages" :
"hint" : "User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance' and content type 'text/plain'" ,
"stack_trace" : "oracle.sysman.emInternalSDK.ssa.cloudapi.CloudSecurityException: User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance' and content type 'text/plain'\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.routeToServiceType(EMCloudServlet.java:180)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.perform(EMCloudServlet.java:235)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.performPost(EMCloudServlet.java:385)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.rest.AbstractRestServlet.doPost(AbstractRestServlet.java:137)\n\tat javax.servlet.http.HttpServlet.service(HttpServlet.java:727)\n\tat javax.servlet.http.HttpServlet.service(HttpServlet.java:820)\n\tat weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)\n\tat weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)" ,
"text" : "Could not route to the Cloud Service Type 'dbaas'. The exception stack trace should provide some information about the reason of the failure" ,
"date" : "2012-12-04T12:27:11+0000"
}

I'm trying to create a new DbPlatformInstance using the EM12c Cloud API but i keep getting an error "User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance'
Below are the request and response.
REQUEST:
POST /em/cloud/dbzone/D7EEE339C1249F83FC4587C722EB20B5
Authorization: Basic xxxxxxxxxx
Content-Type: application/oracle.com.cloud.common.DbPlatformInstance+json
Accept: application/oracle.com.cloud.common.DbPlatformInstance +json
     "name" : "Database 11.2.0.3.0 Instance for SSA_USER_1",
     "description" : "Instance 2 of Oracle Database 11.2.0.1.0" ,
     "based_on" : "/em/cloud/dbplatformtemplate/B59EDC65951039E8E040E50A8F5B0435",
     "params" : { "username": "xxx", "password" : "yyy" }
RESPONSE:
Response Headers:
Status Code: 403 Forbidden
Connection: Keep-Alive
Content-Language: en,en-us
Content-Type: application/oracle.com.cloud.common.Messages+json; charset=ISO-8859-1
Date: Tue, 04 Dec 2012 14:38:08 GMT
Keep-Alive: timeout=5, max=100
Server: Oracle-Application-Server-11g
Set-Cookie: ORA_SMP_EM_AUTH_-4568676491231894381=52W7Q2KQ5w5FTn8MQYrZ3Hqp5QnqBLkNwVKvHSS728pMzyQpxJpd!352643837; path=/em; secure; H ttpOnly
Transfer-Encoding: chunked
X-ORCL-EMOA: true
X-Oracle-DMS-ECID: 004o0VGXIE08XrqpKK4Eye0001P_00009q
X-Powered-By: Servlet/2.5 JSP/2.1
x-specification-version
Response Body:
"messages" :
"hint" : "User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance' and content type 'text/plain'" ,
"stack_trace" : "oracle.sysman.emInternalSDK.ssa.cloudapi.CloudSecurityException: User 'DBAAS' does not have access to the Cloud Service Type 'dbaas' resource interaction with method 'POST' on accept type 'application/oracle.com.cloud.common.DbPlatformInstance' and content type 'text/plain'\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.routeToServiceType(EMCloudServlet.java:180)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.perform(EMCloudServlet.java:235)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.EMCloudServlet.performPost(EMCloudServlet.java:385)\n\tat oracle.sysman.emInternalSDK.ssa.cloudapi.rest.AbstractRestServlet.doPost(AbstractRestServlet.java:137)\n\tat javax.servlet.http.HttpServlet.service(HttpServlet.java:727)\n\tat javax.servlet.http.HttpServlet.service(HttpServlet.java:820)\n\tat weblogic.servlet.internal.StubSecurityHelper$ServletServiceAction.run(StubSecurityHelper.java:227)\n\tat weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)" ,
"text" : "Could not route to the Cloud Service Type 'dbaas'. The exception stack trace should provide some information about the reason of the failure" ,
"date" : "2012-12-04T14:38:09+0000"
}

ACS 5.3 - 11033 Selected Service type is not Network Access

I have some older devices on the network that only support RADIUS (not TACACS) for authentication and would like to have them use SecureACS 5.3
I understand that by default, ACS only supports TACACS for device administration. So I'll get this error when trying RADIUS:
11033 Selected Service type is not Network Access
Description:
RADIUS requests can only be processed by Access Services that are of type Network Access
Resolution Text:
Verify that the Service Selection Policy rules are correct
However, even after adjusting the Service Selection rules and seeing hits, I still see the same message in the logs, as if it has no affect. Any Ideas?

If you use the protocol as radius you can not use a device admin service. You can only use network access. That will allow you for authentication to the devices.
Regards,
Amjad
Rating useful replies is more useful than saying "Thank you"

About DTW - A/P Credit Memo for Service Type A/P Invoice

Dear all,
I would like to upload A/P Credit Memo with A/P Invoice Base Entry. The A/P Invoice is a "Service" Type.
I am using oPurchaseCreditNotes object by providing:
Documents (w/ cardcode, docdate, docduedate and taxdate)
Documens_Line (w/ BaseEntry, BaseLine and BaseType)
There is an error "Item No. is missing".
any ideas.
Thanks

Have you add DocType as dDocument_Service on the Document template?
Thanks,
Gordon

Goods Receipt PO (Service Type) for generate accruals

Hi,
Just wonder that Service type of Goods Receipt PO possible write to the G/L or not? for item type of Goods Receipt PO, it can generated accruals.
I want to generate accruals by Goods Receipt PO., else how am i going to generate accruals?
Thanks.
Regards,
Danny

Subject is discussed in this link with no answer
Generating Accruals from Service type Goods Receipt PO's

OSB Service Type

HI,
I want to know the best practices (scenarios) of using "Service Types" while creating proxy/business services in OSB. Could you plese help me in the same .
Thanks and Regards
Guru...

it depends on what service interfaces you want to expose on your osb layer.
when using wsdl/xsd you define a structured interface, client who invokes this service can generate artifcats against it and 'know' what payload is needed for a valid invocation.
when you use anysoap/anyxml you allow the client to any any payload, even payloads which aren't valid at all.
use for example anyxml if you just want to transfer xml payloads, if you also need for example some soap header settings, use any soap

I updated to ios 5.1.1 and added icloud services. the problem is now whenever i connect my iphone to my PC, itunes does not recognize my phone. i need it to but it just does not connect..

i updated to ios 5.1.1 and added icloud services. the problem is now whenever i connect my iphone to my PC, itunes does not recognize my phone. i need it to but it just does not connect..

Try the standard fixes to rule out a software problem:
- Reset. Nothing is lost
Reset iPod touch: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Restore from backup
- Restore to factory defaults/new iPod.
If you still have the problem that points to a hardware problem. Yu can make an appointment at the the Genius Bar of an Apple store or try:
fix for Home button

Quantity for service type invoice

hello
i am trying to create a service type purchase order. i have created row level udfs for unit price and quantity. price should be multiplied by unit price and the total should be displayed as the total for the invoice. how can i do this?
secondly, when i create an invoice based on this purchase order, if i get a short delivery, the customer wants the system to automatically be able to compute the total amount when we enter the quantity. is this possible?
any help will be greatly appreciated. thanks!

Have you tried formatted searches. I am sure it will do the trick.
For the first one: Use a formatted search in the Row Total field that selects your UDF's qty*price.
second one: I am not too sure about all the requirements, but I think something similar will work.
Hope it helps!
Regards

Web service invocation problem on host hostname and port 8000 protocol : http logical port name : LP_WS_SMDAGENT_MONITORING

hello colleagues,
In the phase Connect Diagnostics dont show the Agent available in SLD, but when go to SLD i have the agents,
Error,
Connect Diagnostics Agent
The table does not contain any data
Agent availables in all SLD
SOAP:1.007 SRT: Unupported xstream found: ("HTTP Code 401 : Unauthorized")
Web service invocation problem on host hostname and port 8000 protocol : http logical port name : LP_WS_SMDAGENT_MONITORING
Thanks

OK, then pls follow below steps;
- Go to step 'Create Users' in solman_setup System Preparation scenario and make sure the user SM_INTERN_WS has a green status. Use the 'Test Login' button to make sure the user is not locked and has correct credentials maintained in solman_setup
- Immediately after checking the user status, navigate to Configure Connectivity->Enable Web Services and execute again the 'Create Logical Ports' automatic activity, in order to propagate the correct credentials to the Logical Port definitions.
- If the above operation is not successful, repeat the two steps above, providing a different user Id in 'Create Users' step, eg SM_INTERN_W1. This will prevent situations where the user gets locked by Logical Ports using an obsolete password.
Let me know the results.
Regards,
Vivek

Service-Type problem on WLC5508 + Freeradius

Similar Messages

Maybe you are looking for