Set-up Radius Server to ACS 4.2 and AD server

Hi Guys,
I would like to ask help from you on how to set-up Radius server in ACS 4.2 (step-by-step guide or link), wireless client will be authenticated via Active Directory when connecting to our Wireless AP so it means that our Wireless AP is added as client to Radius server.
Thanks in advance!
regards,
Gagamboy

Hi Colin
thanks for your answer, we had the this setting correct. I was able to solve the problem yesterday, we had some faults in the AD mapping.
I didn't know that when I select more AD groups for one ACS group in one step, that the user / host has to be in every of these AD groups (AND conjunction).
Now I only added one AD group for my ACS group and it works. The error message "AD user restriction" was not very helpful for finding this fault ;-)
Regards
Dominic

Similar Messages

Unable to connect to report server - on Win 8.1 and SQL Server 2014

unable to connect to report server on Win 8.1 and SQL Server 2014 version
Microsoft SQL Server 2014 - 12.0.2000.8 (Intel X86)
   Feb 20 2014 19:20:46
   Copyright (c) Microsoft Corporation
   Express Edition on Windows NT 6.3 <X64> (Build 9600: ) (WOW64)
Thanks

Hi,
I suggest you check out the following article for the steps of installing
Database Engine Services and SQL Server Reporting Service.
http://msdn.microsoft.com/en-us/library/ms143711.aspx
Best Regards,
Tracy
Tracy Cai
TechNet Community Support

Upgrade DTSX packages from VS 2010 with SQL Server 2008 to VS 2013 and SQL Server 2014

Hello everyone,
I’m very new to SSIS world. I’ve been assigned a task to upgrade the existing packages running in VS 2010 with SQL Server 2008 to VS 2013 and SQL Server 2014. And then submit the migration report to my client.
On very quick search at Google, I've found the following link. It seems like I just need to open the existing SSIS project in VS 2013 and follow the wizard.
https://msdn.microsoft.com/en-us/library/cc280547.aspx
Can anybody please advise, are there any other things need to be taken care while doing this up gradation process?
Please share your experience.
Any help would be much appreciated.
Thanks, <b>Ankit Shah</b> <hr> Inkey Solutions, India. <hr> Microsoft Certified Business Management Solutions Professionals <hr> http://ankit.inkeysolutions.com

Hello Arthur,
Thank you for the response.
I just got an access of the packages. They are of VS 2008 and not 2010.
Do you know how to upgrade VS 2008 packaged to VS 2013?
When I tried to open the solution file in VS 2013, it says "incompatible".
Any help would be much appreciated.
Thanks,
Ankit
Thanks, <b>Ankit Shah</b> <hr> Inkey Solutions, India. <hr> Microsoft Certified Business Management Solutions Professionals <hr> http://ankit.inkeysolutions.com

Is it possible to create a two node cluster with SQL server 2012 STD on node1 and SQL Server 2008 ENT on node2 on a Windows server 2012?

Hi All,
Is it possible to create a two node cluster with SQL server 2012 STD on node1 and SQL Server 2008 ENT on node2 on a Windows server 2012?
aa

I think you are confused with the way cluster is installed. Installing SQL on cluster is a two step process. On first node you create a new SQL cluster and on second node you need "AddNode" action.
Same edition media has to be used in above two operation.
you can install two separate instances with one enterprise and one standard.
Balmukund Lakhani
Please mark solved if I've answered your question, vote for it as helpful to help other users find a solution quicker
This posting is provided "AS IS" with no warranties, and confers no rights.
My Blog |
Team Blog | @Twitter
| Facebook
Author: SQL Server 2012 AlwaysOn -
Paperback, Kindle

Windows server 2012 as primary DC and DNS server and windows server 2003 as secondary DC and DNS

Migration from windows server 2003 AD DC and DNS server to windows server 2012 R2,
Cannot I set up Windows server 2012 R2 as primary DC and DNS , windows server 2003 as secondary DC and DNS ? (for backup server when server 2012 fail, user can continue to login and access internet services)

You can mix both as long as your Forest and Domain Functional level are Windows Server 2003. However, I would like to bring your attention to this blog about known problems when mixing DCs with Windows Server 2003 and 2012 R2 OS:
http://blogs.technet.com/b/askds/archive/2014/07/23/it-turns-out-that-weird-things-can-happen-when-you-mix-windows-server-2003-and-windows-server-2012-r2-domain-controllers.aspx
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Web Server 7.0 update 8 and Web Server 6.1 SP12 have been released

We are delighted to announce that Web Server 7.0 Update 8 has been released.
It can be publicly downloaded at: [http://tiny.cc/9Qx1N]
The Release Notes is here: [http://docs.sun.com/app/docs/doc/821-1403]
This release mainly addresses critical security vulnerabilities:
o Digest authentication buffer overflow [1]
o TRACE heap overflow [1]
o WebDav Stack Overflow [1]
o Format string vulnerability in WebDav extension [1]
All users of Web Server 7.0 through Web Server 7.0 Update 7 are encourage to upgrade.
Thank you to the entire product team for another great efforts!
On Behalf of WS Team!
[1]: Refer Latest Alert @ [http://sunsolve.sun.com/search/document.do?assetkey=1-66-275850-1]
We are delighted to announce that Web Server 6.1 SP12 has been released.
It can be publicly downloaded at: [http://tiny.cc/i4Ryn]
The Release Notes is here: [http://docs.sun.com/app/docs/doc/821-0988]
In addition to customer escalation & this release also contains fixes for some critical security vulnerability.
o Web Server 6.1 SP12 bundled with JDK 6. We still support JDK#5, to maintain backward compatibility for existing customers.
o Addressing SSL/TLS renegotiation vulnerability (CVE-2009-3555)
o Addressing "::$DATA" (Source Viewing) vulnerability on windows
o Digest authentication buffer overflow [1]
o TRACE heap overflow [1]
o Format string vulnerability in WebDav extension [1]
All users of Web Server 6.1 through Web Server 6.1 SP11 are encourage to upgrade.
Thank you to the entire product team for another great release!
On Behalf of WS Team!
[1]: Refer Latest Alert @ [http://sunsolve.sun.com/search/document.do?assetkey=1-66-275850-1]

JES#5, compatible native-patches are also available for download from sunsolve.
Patches:
Solaris-Sparc: 125437-19
Solaris-x86: 125438-19
Linux: 125439-17
Hpux: 125440-17
Windows: 125441-19

SQL Server Replication: Sybase as publisher and SQL Server as Subscriber possible or not?

Hi,
Using SQL Server Replication, data pulling from Sybase to SQL Server is possible or not?
--sybase has publisher and sql has subscriber
Thanks

Hello,
Just as Hilary post, you should backup the following database and restore to the new server:
1.The publication database at the Publisher
2.The distribution database at the Distributor
3.The subscription database at each Subscriber
4.The master and msdb system databases at the Publisher, Distributor and all Subscribers
After restoring the publication database from a backup, you reinitialize all subscriptions to the publications.
Reference: Strategies for Backing Up and Restoring Merge Replication
Regards,
Fanny Liu
If you have any feedback on our support, please click here.
Fanny Liu
TechNet Community Support

Forms and reports server characterset aix

My database is in UTF8 mode and is displaying all characters correctly.
However when I run a report using the forms and reports server it uses Western European Character Set.
I have tried re-installing forms and reports server in order to fix this characterset issue, however I am not prompted for a characterset at installation time, so the forms and reports server is still set to the Western European Character Set, thus, some characters are not being displayed (inverse ?).
I have tried specifying UTF8 for NLS_LANG in reports.sh but I only get garbage displayed.
Can someone point me in the right direction please

This issue has now been resolved. Changing the NLS_LANG setting in reports.sh to POLISH_POLAND.UTF8 was correct. The issue then was that greek symbols were displayed. This was a font issue and was resolved by amending a file
$ORACLE_HOME/guicommon/tk/admin/AFM/fontname (where fontname is the characterset you are using,eg in my case Courier ).
the Change was to amend the line:
EncodingSchemeProperty AdobeStandardEncoding
to read
EncodingSchemeProperty FontSpecific
This fixed the problem for me , but Oracle also advise to amend the file $ORACLE_HOME/guicommon/tk/admin/Tk2Motif.rgb:
eg change the below line from:
!Tk2Motif*fontMapCs: iso8859-2=EE8ISO8859P2
to:
Tk2Motif*fontMapCs: iso8859-2=UTF8 (or whatever charcterset you are using).
Note that the exclamation mark has been removed.
Read Oracle Note 300416.1

OAS and Context server

I've set up OAS and Oracle 8 with Context option successfully.
I've set up a Context server with DML, DDL, Query and Load Server
personality, which works fine when combined with queries from my
Web application, but when I then enter data, I get a GPF in the
WRKS.EXE program, which then goes on to give the OAS an internal
error.
Anyone have any ideas?
thanks
David Godfrey
null

Just to highlight to anyone else, that I upgraded the DB to
8.0.5 (from 8.0.4), and upgraded the OAS to 4.0.7 (from 4.0.5),
and it fixed the problem.
hth
David
David Godfrey (guest) wrote:
: I've set up OAS and Oracle 8 with Context option successfully.
: I've set up a Context server with DML, DDL, Query and Load
Server
: personality, which works fine when combined with queries from
my
: Web application, but when I then enter data, I get a GPF in
the
: WRKS.EXE program, which then goes on to give the OAS an
internal
: error.
: Anyone have any ideas?
: thanks
: David Godfrey
null

Issues with Cox Cable and mail server?

I need an accurate port to send mail. I have never been able to use my mac mail (send or receive) and my cox mail (worked for both at one point) on entourage (cox) my outgoing mail does not work, however, it will receive mail? I am using the latest version of Leopard and I disabled my firewall? Cox wouldn't help me they said to just contact apple? I have the correct pop server (pop.east.cox.net) and SMTP server (smtp.east.cox.net). This is really bothering me so if someone could help I would appreciate it. I currently have my mail set on port 110 for both outgoing and incoming.

strawberrydress wrote:
I currently have my mail set on port 110 for both outgoing and incoming.
And you changed the SMTP port from the default of 25 because...?

Messaging Server and mix of local and remote server mailboxes?

Admittedly I am a messaging server noob. Sun came in and installed our Sun JES Server for us.
That server is our LDAP, mail, and IM server.
We would like to start using gmail for domains for some of our users, but not all of them.
We use Postini for spam filtering. Right now if someone from the Internet sends an email to our domain, the mail is filtered by postini and then proceeds onward to our mail server and then local delivery to the correct mailbox.
With Postini we believe we can set it so after filtering, some email accounts can proceed to our server while others proceed onto the gmail servers.
The problem I foresee though is when sending mail internally. When we send email in house, email doesn't go through Postini and just gets delivered locally.
Is there a way in the messaging server to make it so some address continue to be delivered locally while others continue on to a remote server (i.e. either to Postini or gmail servers directly) ?

slo_chewie wrote:
Does the email recipient address change when the email is sent to gmail i.e. does an email sent to [email protected] become [email protected]?
We've got google for domains setup, so users would retain a @domain.com address regardless if there mailbox was hosted on the internal server or hosted at google.You can make use of the mailRoutingAddress: user attribute and source routing to get the desired behaviour e.g.
=> Set the following value to the LDAP entry of the user who is hosted on the gmail server. The "[email protected]" address should match the users mail: address:
mailRoutingAddress: @gmail.com:[email protected]=> Ensure the following option has been tcp_local channel in your imta.cnf file. This option strips off the "@gmail.com" value of the recipient address before sending the email to the gmail.com servers.
dequeue_removerouteMake sure you run "./imsimta cnbuild;./imsimta restart" after modifying the imta.cnf file.
Regards,
Shane.

Server File Sharing unstable on mac and windows network on Mavericks and OSX Server 3.0

Since I've updated our mac mini server from Mountain Lion and OSX Server 2.X to Mavericks and OSX Server 3.0 we are having sharing issues with Windows (7 and 8) and OSX Mavericks users, not being able to access files on the mac mini server.
What I've notice is that OSX Serer 3.0 stop working and I have to restart the Mac Mini Server to make things start working again.
This was not happening with Mountain Lion and OSX Server 2.X.
On the Windows and OSX users what happen is the computers keep trying to connect to the server and are not being able to open or copy files. Again this is intermittent, and I suspect it might be a OSX Server bug.
Any one having the same problem or can give us and advice would be great help.
Thanks.
Andre Tenenbaum

I too am having this exact problem as well as a few of my network administrator contacts that have gone through the Mavericks / Server 3 upgrade.
It may be worth noting that before the upgrade I had run a mac mini server (core 2 duo) that never had any unintentional downtime, and the current mac server had never gone down or lost connection so I know it has nothing to do with user or network configuration.
NAS server hardware:
- Mac Mini core i5
- 16 GiB ram
- Promise Pegasus Raid5 external drive (thunderbolt)
I am NOT running time machine as the backup.
Everyting posted above is occuring although the rate at which my users lose acces is sporadic. Sometimes the server will stay up 24-36 hours and sometimes it will only stay up for around 4. Every user, every group loses acces AT THE EXACT SAME TIME EVERYTIME to EVERY SHAREPOINT...all of my local users as well as my remote users. All of my users are on Windows machines (mostly win7, but a couple of XP and 8 users as well). The share is accessed via a mapped drive using the format x.x.x.x/share and I have had 0 issues with getting users connected. The problem is 100% keeping them connected. When the users lose access the get the "drive cannot be accessed" error on their end, however when I check the server 3 app, it still shows all users connected and I have let it run for a few minutes and the idle times do change.
I also cannot see any spikes in the Activity monitor that might indicate a memory strain issue on the server side, but I assume that is because I am not watching the Activity Monitor at the moment everyone loses access.
Let me say that the SMB2 protocol does work much better when it actually works, much faster, but intermitent connectivity is a VERY SERIOUS ISSUE and has resulted in several corrupt files for my workers already. Also, because I was one of the unfortunate people that had the upgrade lock up on me and I had to restart it, I lost my 10.8.x recover backup and so I would have to do a clean install in order to restore my server back to its original state. I am also hesitant to do this because I would most likely only be able to download the Server3 app from the app store and I have not heard from apple or any other power user group on whether the bug is with the app or the OS.

How to set two radius servers one is window NPS another is cisco radius server

how to set two radius servers one is window NPS another is cisco radius server
when i try the following command, once window priority is first , i type cisco radius user name, it authenticated fail
i can not use both at the same time
radius-server host 192.168.1.3 is window NPS
radius-server host 192.168.1.1 is cisco radius
http://blog.skufel.net/2012/06/how-to-integrating-cisco-devices-access-with-microsoft-npsradius/
conf t
no aaa authentication login default line
no aaa authentication login local group radius
no aaa authorization exec default group radius if-authenticated
no aaa authorization network default group radius
no aaa accounting connection default start-stop group radius
aaa new-model
aaa group server radius IAS
server 192.168.1.1 auth-port 1812 acct-port 1813
server 192.168.1.3 auth-port 1812 acct-port 1813
aaa authentication login userAuthentication local group IAS
aaa authorization exec userAuthorization local group IAS if-authenticated
aaa authorization network userAuthorization local group IAS
aaa accounting exec default start-stop group IAS
aaa accounting system default start-stop group IAS
aaa session-id common
radius-server host 192.168.1.1 auth-port 1812 acct-port 1813
radius-server host 192.168.1.2 auth-port 1812 acct-port 1813
radius-server host 192.168.1.3 auth-port 1645 acct-port 1646
radius-server host 192.168.1.3 auth-port 1812 acct-port 1813
privilege exec level 1 show config
ip radius source-interface Gi0/1
line vty 0 4
authorization exec userAuthorization
login authentication userAuthentication
transport input telnet
line vty 5 15
authorization exec userAuthorization
login authentication userAuthentication
transport input telnet
end
conf t
aaa group server radius IAS
server 192.168.1.3 auth-port 1812 acct-port 1813
server 192.168.1.1 auth-port 1812 acct-port 1813
end

The first AAA server listed in your config will always be used unless/until it becomes unavailable. At that point the NAD would move down to the next AAA server defined on the list and use that one until it becomes unavailable and then move to third one, and so on.
If you want to use two AAA servers at the same time then you will need to put a load balancer in front of them. Then the virtual IP (vip) will be listed in the NADs vs the individual AAA servers' IPs.
I hope this helps!
Thank you for rating helpful posts!

Adding RADIUS VSAs on ACS 3.2 SE

I have tried to add a VSA to enable a Packeteer to authenticate using RADIUS on the ACS.
Using RDBMS synchronization to import the csv file below.
SequenceId,Priority,GroupName,Action,ValueName ,Value1,Value2,Value3
1,1,External,163,26,access=look,2334,1
The group name is 'External', Action is 163 which corresponds to ADD_RADIUS_ATTR.
From RDBMS Sychronization Import Definitions (http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/acs32/user/ag.htm#wp35130)
To add a vendor-specific attribute (VSA), set VN = "26" and use V2 and V3 as follows:
V2 = IETF vendor ID (which in this case is 2334)
V3 = VSA attribute ID (1)
V1 = In this case 'access=look'
After a couple of attempts I got the format correct but when I try and import the file I don't get an "INFO" message in the "Reports" section of the ACS indicating that the process was successful. I don't get any message at all, WARNING, ERROR or INFO.
From the FTP server I can confirm that the file was transferred.
What I should get is an INFO message similar to:
08/30/2004 16:27:50 INFO Sync complete: 1 transaction(s) 0 parse error(s) 0 process error(s)
Any ideas as to what is wrong would be much appreciated.
Cheers,
Aylmer.

HI you need to import the RADIUS VSA for PAcketeer from their site.
The link to the steps as shown below is ( might require u to subscribe & login)
https://packeteer.custhelp.com/cgi-bin/packeteer.cfg/php/enduser/std_adp.php?p_faqid=399&p_created=1046793530&p_sid=gszcDFBh&p_lva=&p_sp=cF9zcmNoPTEmcF9zb3J0X2J5PWRmbHQmcF9ncmlkc29ydD0mcF9yb3dfY250PTImcF9wcm9kcz0wJnBfY2F0cz0wJnBfcHY9JnBfY3Y9JnBfc2VhcmNoX3R5cGU9YW5zd2Vycy5zZWFyY2hfZm5sJnBfcGFnZT0xJnBfc2VhcmNoX3RleHQ9YWNz&p_li=&p_topview=1
IN any case the same content is copied below:-
Also the stpes on how to do them is listed here
Create a User Defined Vendor
First, you need to create a User Defined Vendor.
1. Create a text file (packet.ini) and enter the following:
[User Defined Vendor]
Name=Packeteer
IETF Code=2334
VSA 1=Packeteer-AVPair
[Packeteer-AVPair]
Type=STRING
Profile=OUT
2. Name the file packet.ini.
Add the Vendor to the Database
Next, you need to add the above vendor to the database.
1. Go to the command prompt, and change the directory to the Cisco Secure utils directory (typically C:\Program Files\CiscoSecure ACS v3.0\Utils).
2. The instructions below install the vendor into User Defined slot 0. If you have other vendors, you need to change this number to a free slot. To see a list of slots and their assignments, use the csutil -listudv command. For example:
C:\Program Files\CiscoSecure ACS v3.0\Utils>csutil -listudv
CSUtil v3.0(2.5), Copyright 1997-2002, Cisco Systems Inc
UDV 0 - Unassigned
UDV 1 - Unassigned
UDV 2 - Unassigned
UDV 3 - Unassigned
UDV 4 - Unassigned
UDV 5 - Unassigned
UDV 6 - Unassigned
UDV 7 - Unassigned
UDV 8 - Unassigned
UDV 9 - Unassigned
3. Run csutil -addudv to and add Packeteer to UDV (User Defined Vendor) slot 0 or the next
open slot.
C:\Program Files\CiscoSecure ACS v3.0\Utils>csutil -addudv 0 c:\temp\packet.ini
CSUtil v3.0(2.5), Copyright 1997-2002, Cisco Systems Inc
Adding or removing vendors requires ACS services to be re-started.
Please make sure regedit is not running as it can prevent registry
backup/restore operations
Are you sure you want to proceed? (y/n)y
Parsing [c:\temp\packet.ini] for addition at UDV slot [0]
Stopping any running services
Creating backup of current config
Adding Vendor [Packeteer] added as [RADIUS (Packeteer)]
Adding VSA [Packeteer-AVPair]
Done
Checking new configuration...
New configuration OK
Re-starting stopped services
Verify that Packeteer was added.
C:\Program Files\CiscoSecure ACS v3.0\Utils>
C:\Program Files\CiscoSecure ACS v3.0\Utils>csutil -listudv
CSUtil v3.0(2.5), Copyright 1997-2002, Cisco Systems Inc
UDV 0 - RADIUS (Packeteer)
UDV 1 - Unassigned
UDV 2 - Unassigned
UDV 3 - Unassigned
UDV 4 - Unassigned
UDV 5 - Unassigned
UDV 6 - Unassigned
UDV 7 - Unassigned
UDV 8 - Unassigned
UDV 9 - Unassigned
4. Return to ACS Admin and select Network Configuration.
From the main screen select Network Configurtion and add the PacketShaper by supplying the AAA client Hostname, IP address: , Key. Scroll through the Authenticate Using choices and select RADIUS (Packeteer).
5. From the main screen select User Setup and enter a user name for a Touch or Look access user to the Packet Shaper. Supply the PAP/CHAP password. Leave other fields at defaults and scroll to the bottom
of the form. Be sure the Packeteer-AVPair box is selected and supply either
"access=touch" or "access=look" in the available entry space.

Problems with 802.1x,ACS and Windows Server 2000

Hi,
My components: ACS 3.3 running on a Server with Windows 2000 Server SP4 , 2950 Catalyst (AAA-Client) ,
Laptop with Windows XP SP2 (802.1x Client)
I have everything configured according to Cisco documentation, but I am getting one error in the ACS's log.( Failed Attempts active.csv)
Authen-Failure-Code : EAP-TLS or PEAP authentication failed during SSL handshake
I have a valide certificate on my Radius(ACS) server and about machine authentication I have a valide certificate on my laptop. (I have installed this certificate before i started to login at the 802.1x port of the switch)
Does anyone have any idea what the problem is?
Here is the Config of the Catalyst 2950 if that will help:
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
hostname ACS-Client1
aaa new-model
aaa authentication dot1x default group radius
enable secret xxxx
username xxxx privilege xxx password xxx
ip subnet-zero
ip ssh time-out 120
ip ssh authentication-retries 3
spanning-tree mode pvst
no spanning-tree optimize bpdu transmission
spanning-tree extend system-id
dot1x system-auth-control
interface FastEthernet0/13
switchport mode access
dot1x port-control auto
dot1x timeout quiet-period 3
dot1x timeout reauth-period 1
dot1x reauthentication
interface GigabitEthernet0/2
interface Vlan1
ip address 10.10.3.253 255.255.255.0
no ip route-cache
ip default-gateway 10.10.3.254
ip http server
radius-server host 10.10.3.1 auth-port 1812 acct-port 1813
radius-server retransmit 3
radius-server key radius
line con 0
password xxx
line vty 0 4
password xxx
line vty 5 15
password xxx
end

Yes we get to solve this problem. Because it is a only a test senario, we installed everything new, win2000 server SP4,the certificate service and the winXP on the client.
The config of the switch is ok, we set the reauth-period and quiet-period to default.
Then we test the whole configuration with the IAS-Radius (MS). After this we install the ACS, following this document:(Certificates were already installed)
http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00801df0ea.shtml
Attention, we used the AEGIS Client not the XP Client!

Set-up Radius Server to ACS 4.2 and AD server

Similar Messages

Maybe you are looking for