SSL for Web interface of Aironet 1200

IS there a way to enable SSL or any security for the web interface of the Aironet APs?

I found the answer was to use a more specific "ip http authentication" statement. Specifically,it required the following:
CiscoSecure ACS:
Group Settings
Shell (exec)
Priv Level = 15
On the AP:
had to enable:
ip http authentication aaa login-authentication AP_Web (Named Method List)

Similar Messages

TACACS Authorization of Web Interface on Aironet 1200 AP

I have the Aironet 1200 AP setup to authenticate and perform authorization for the CLI via TACACS. That is working fine.
However, the web interface is failing "ip http authentication". (Slight caveat - it works for a local user in the local AP DB - it does not work when it goes to CiscoSecure ACS to authenticate/authorize).
I can get to some pages (prompt and pass authentication), but certain pages (e.g. Services>>SNMP) where configuration steps are taken cause a second prompt is presented, username and password is provided, and it fails.
This is only evident from the output of a "debug ip http authentication"
What do I need to configure in ACS to make this work?
Relevant portion of config:
aaa authentication login default group tacacs+ local
aaa authentication enable default group tacacs+ enable
aaa authorization exec default group tacacs+ local
no ip http server
ip http authentication aaa
ip http secure-server
Sep 7 13:40:59.885: HTTP AAA picking up console Login-Authentication List name: default
Sep 7 13:40:59.885: HTTP AAA picking up console Exec-Authorization List name: default
Sep 7 13:40:59.909: HTTP: Authentication failed for level 15
Sep 7 13:41:06.757: HTTP AAA picking up console Login-Authentication List name: default
Sep 7 13:41:06.757: HTTP AAA picking up console Exec-Authorization List name: default
Sep 7 13:41:06.780: HTTP: Authentication failed for level 15
This document appears to describe a scenario similar to mine, but is for http - not HTTPS:
Local Authentication for HTTP Server Users
http://www.cisco.com/en/US/customer/tech/tk59/technologies_configuration_example09186a0080178a51.shtml#tac-win
Any ideas what I may be missing here?
Thanks,
Jeff

I found the answer was to use a more specific "ip http authentication" statement. Specifically,it required the following:
CiscoSecure ACS:
Group Settings
Shell (exec)
Priv Level = 15
On the AP:
had to enable:
ip http authentication aaa login-authentication AP_Web (Named Method List)

Distortion in Save For Web interface

I am still having problems with my Save For Web interface. Attached is a screen where you can see that with just the Optimized view showing (in this case 72%), the picture looks as expected. But if I go to 2-up or 4-up views, the 2nd image (which was the 72% Optimized) is now all pixelated as if it were a GIF.

OMG! How many years have I been using this program and I have never noticed this until now?!?
Sorry for the brain fart and thanks for pointing that out!!!
I am really having a good laugh at myself about this one!
Jules

Any documents for web interface builder?

any documents for web interface builder?

Hi Saida,
You can refer the following link for the web interface builder wrt SEM BPS:
http://help.sap.com/saphelp_sem60ep1/helpdata/en/0a/242537cedf2056e10000009b38f936/frameset.htm
Hope this helps.
Please revert incase of any clarifications and reciprocate points if helpful.
Regards,
Poonam

SPA303 password only for web interface

Is there a way to ask for user password when connecting to web interface of the phone, but not to ask when accessing directory (and other phone features secured by user password) from the keypad?
I want to secure phone on the local network, meanwhile allowing user to access directory without any kind of password/code.

Hi Nilesh,
did you check whether reentrence tickets are enabled? Usually WD transactions can eb called form within the SAPGUI without the pronpt, if this is configured correctly,
For more info, please check the docs. You can also check this thread, where this has been already discussed.
Kind regards,
Patrick

WLC 5508 And Third Party SSL for Web Authenticaiton

Hello,
We are using WLC 5508 and currently the authentication process is via Customized WebAuth. As you know that with the WebAuth the authentication process won't work unless you launch Web Browser and you will be redirected to the Authentication Page where you type your username and password. This is a bit fuzzy for most of the users and what I'm thinking is to use different authentication mechanism where the user will automatically be prompted upon connecting to any SSID. I have read that Public/Thrid Party certificate will do this and any client can accept the public certificate.
Anyone can elaborate on this approach?
Regards,

With machines that are not part of the domain, typicall if you still want to secure them usin 802.1x, you would leverage a radius server and users would be told of the SSID to connect to and enter their AD credentials. Of course, if you use AD credentials, users will now join all their other devices to that SSID. This is where ISE comes in and you can profile devices. Even though the WLC with v7.6 can profile, it's not a full fledge profiler. Depending on how well you know radius, you can leverage a portal page also and depending on the AD group a user is a member of, you can out them is a specific Vlan or if you leverage interface groups. You can do many things, but you need to really know radius and client types to figure out what can and work well in your environment. Radius alone to someone who hasn't played with it, can take days to setup without help.
Every client I setup radius for is different and it comes down to how their users are setup in AD, what devices they have and the requirements.
Scott

Installing SSL for web service

Hi,
I am configuring SSL on Axis2 1.3 and using Tomcat 5.5.26 as a server.
I followed these steps.
1) I generated server keystore.
2) Exported certificate.
3) Imported this certificate in "cacerts".
4) In my web service client I set the properties as
System.setProperty("javax.net.ssl.trustStore", "$JAVA_HOME/../cacerts");
System.setProperty("javax.net.ssl.trustStorePassword", "secretPwd");
After calling web service I am getting this error at client.
Can any one suggest if I am missing something
Exception in thread "main" java.lang.NoClassDefFoundError
 at javax.crypto.Cipher.getInstance(DashoA12275)
 at com.sun.net.ssl.internal.ssl.JsseJce.getCipher(Unknown Source)
 at com.sun.net.ssl.internal.ssl.RSACipher.<init>(Unknown Source)
 at com.sun.net.ssl.internal.ssl.RSACipher.getInstance(Unknown Source)
 at com.sun.net.ssl.internal.ssl.PreMasterSecret.<init>(Unknown Source)
 at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(Unknown Source)
 at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(Unknown Source)
 at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Unknown Source)
 at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(Unknown Source)
 at com.sun.net.ssl.internal.ssl.AppOutputStream.write(Unknown Source)
 at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
 at java.io.BufferedOutputStream.flush(Unknown Source)
 at java.io.FilterOutputStream.flush(Unknown Source)
 at org.apache.commons.httpclient.ChunkedOutputStream.flush(ChunkedOutputStream.java:190)
 at com.ctc.wstx.io.UTF8Writer.flush(UTF8Writer.java:99)
 at com.ctc.wstx.sw.BufferingXmlWriter.flush(BufferingXmlWriter.java:214)
 at com.ctc.wstx.sw.BaseStreamWriter.flush(BaseStreamWriter.java:311)
 at org.apache.axiom.om.impl.MTOMXMLStreamWriter.flush(MTOMXMLStreamWriter.java:118)
 at org.apache.axiom.om.impl.llom.OMNodeImpl.serializeAndConsume(OMNodeImpl.java:422)
 at org.apache.axis2.transport.http.SOAPMessageFormatter.writeTo(SOAPMessageFormatter.java:68)
 at org.apache.axis2.transport.http.AxisRequestEntity.writeRequest(AxisRequestEntity.java:84)
 at org.apache.commons.httpclient.methods.EntityEnclosingMethod.writeRequestBody(EntityEnclosingMethod.java:495)
 at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1973)
 at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:993)
 at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:397)
 at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
 at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)
 at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:346)
 at org.apache.axis2.transport.http.AbstractHTTPSender.executeMethod(AbstractHTTPSender.java:520)
 at org.apache.axis2.transport.http.HTTPSender.sendViaPost(HTTPSender.java:191)
 at org.apache.axis2.transport.http.HTTPSender.send(HTTPSender.java:77)
 at org.apache.axis2.transport.http.CommonsHTTPTransportSender.writeMessageWithCommons(CommonsHTTPTransportSender.java:327)
 at org.apache.axis2.transport.http.CommonsHTTPTransportSender.invoke(CommonsHTTPTransportSender.java:206)
 at org.apache.axis2.engine.AxisEngine.send(AxisEngine.java:396)
 at org.apache.axis2.description.OutInAxisOperationClient.send(OutInAxisOperation.java:374)
 at org.apache.axis2.description.OutInAxisOperationClient.executeImpl(OutInAxisOperation.java:211)
 at org.apache.axis2.client.OperationClient.execute(OperationClient.java:163
Thanks in advance
--Prash

Hi,
Start with this good guide for next steps:
[http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b04408cc-f10e-2c10-b5b7-af11026b2393?quicklink=index&overridelayout=true]
Regards, Trevor

Using SSL for Web Service Access

Hi,
I'm not sure if this the best forum, but this is technically a J2EE question.
I'm using JDeveloper and OC4J. I have a java class that I'm publishing as a stateful webservice; however, the only clients will be other java routines. (I generated a WSDL file and then stubs.) This webservice has to run on a Windows 2000 box inside of OC4J. I have this done and can call it from across the network from a Linux box. This all works fine. However, I need to add security preferably by going to SSL. I can't find out how to do this. Does anyone know? Do I manually edit the generated stub files? Any chance there is some sample code somewhere?
thanks,
Joe Gamache

Please look at Appendix A of the "Web Services Developer's Guide" from iAS v9.0.2 covers Oracle SOAP. The section, "Working With Oracle9 iAS SOAP
Transport Security", covers using SSL.
Here is a simple example with steps:
Prerequisites
1 . Suppose you have configured Apache to use SSL , that is
-     Apache has a valid server certificate
-     Apache requires the client certificate
-     Apache has a bundle of root certificates of CA with wich it can trust client certificates
-     Apache is in front of OC4J with mod_oc4j (9.0.2) or mod_proxy ( 1.0.2.2)
For more information on this please refer to Oracle9i Application Server Security Guide
2. Have a working knowledge of Oracle Wallet Manager
Steps
The following steps let you use an https web services client
1.     First you need a certificate store in order to store the private key , the client X509 certificate and some trusted authorities. This store in our case is a wallet exported by Oracle Wallet Manager.
2.     In order to generate a correct wallet you need :
a.     Start the Oracle Wallet Manager ( OWM )
b.     Create a new empty wallet
c.     Generate a Certificate Signing Request (CSR )
d.     Import the X509 certificate that the CA generated from the CSR
e.     Import the root certificate of the CA that trusts the server certificate you would like to connect to ( that of Apache )
f.     Export the wallet
3.     Let's call exported_wallet the wallet that we exported from OWM , and lets put it under c:\temp . Suppose that the wallet password is camarda.
4.     The JDK you plan to use for your client , in the extension directory ( that is $JDK_HOME/jre/lib/ext ) , must contains the following library
a.     jcert.jar
b.     jsse.jar
c.     jssl-1_1.jar
5.     Oracle SSL library use JNI in order to implement some low level encryption API , so you need a shared library usually located in $ORACLE_HOME/bin . For NT platform this library is njssl9.dll . Be sure to have this library in your path
6.     Now given a WDSL , use the Jdeveloper wizard to generate a proxy
7.     Modify the URL end-point from http to https
8.     Add to the proxy the following lines of code
System.setProperty("ssl.SocketFactory.provider","oracle.security.ssl.OracleSSLSocketFactoryImpl");
System.setProperty("ssl.ServerSocketFactory.provider","oracle.security.ssl.OracleSSLServerSocketFactoryImpl");
System.setProperty("java.protocol.handler.pkgs","HTTPClient");
System.setProperty("oracle.wallet.location","C:\\temp\\exported_wallet");
System.setProperty("oracle.wallet.password","camarda");
Example
In red : modified
In blue : added
import oracle.soap.transport.http.OracleSOAPHTTPConnection;
import java.net.URL;
import org.apache.soap.Constants;
import org.apache.soap.Fault;
import org.apache.soap.SOAPException;
import org.apache.soap.rpc.Call;
import org.apache.soap.rpc.Parameter;
import org.apache.soap.rpc.Response;
import org.w3c.dom.Element;
import java.util.Vector;
import java.util.Properties;
import oracle.xml.parser.v2.*;
* Generated by the Oracle9i JDeveloper Web Services Stub/Skeleton Generator.
* Date Created: Mon May 20 14:24:48 CEST 2002
* WSDL URL: http://26.2.197.119:8888/InterOp/Services.wsdl
public class AnagInquireServicesEJBStub {
public String endpoint = "https://26.2.197.119/InterOp/AnagInquireServices";
private OracleSOAPHTTPConnection m_httpConnection = null;
public AnagInquireServicesEJBStub() {
m_httpConnection = new OracleSOAPHTTPConnection();
public Element ricercaPF(String istat1, String istat2, String codiceFiscale) throws Exception {
System.setProperty("ssl.SocketFactory.provider","oracle.security.ssl.OracleSSLSocketFactoryImpl");
System.setProperty("ssl.ServerSocketFactory.provider","oracle.security.ssl.OracleSSLServerSocketFactoryImpl");
System.setProperty("java.protocol.handler.pkgs","HTTPClient");
System.setProperty("oracle.wallet.location","C:\\temp\\exported_wallet");
System.setProperty("oracle.wallet.password","camarda");
Element returnVal = null;
URL endpointURL = new URL(endpoint);
Call call = new Call();
call.setSOAPTransport(m_httpConnection);
call.setTargetObjectURI("AnagInquireServices");
call.setMethodName("ricercaPF");
call.setEncodingStyleURI(Constants.NS_URI_LITERAL_XML);
Vector params = new Vector();
params.addElement(new Parameter("istat1", String.class, istat1, Constants.NS_URI_SOAP_ENC));
params.addElement(new Parameter("istat2", String.class, istat2, Constants.NS_URI_SOAP_ENC));
params.addElement(new Parameter("codiceFiscale", String.class, codiceFiscale, Constants.NS_URI_SOAP_ENC));
call.setParams(params);
Response response = call.invoke(endpointURL, "");
if (!response.generatedFault()) {
Parameter result = response.getReturnValue();
returnVal = (Element)result.getValue();
else {
Fault fault = response.getFault();
throw new SOAPException(fault.getFaultCode(), fault.getFaultString());
return returnVal;
public void setMaintainSession(boolean maintainSession) {
m_httpConnection.setMaintainSession(maintainSession);
public boolean getMaintainSession() {
return m_httpConnection.getMaintainSession();
public void setTransportProperties(Properties props) {
m_httpConnection.setProperties(props);
public Properties getTransportProperties() {
return m_httpConnection.getProperties();
public static void main( String args[] ) {
AnagInquireServicesEJBStub a = new AnagInquireServicesEJBStub();
try {
XMLElement e = (XMLElement) a.ricercaPF("102030","102030","CMRGPP69M29D761K");
e.print(System.out);
} catch (Exception ex) {
ex.printStackTrace();
} finally {

Gif files not displayed in external browser for Web interface builder

Hello all,
I have generated a bsp application and when i open it in my external broswer some of the gifs are not opening. icon_open.gif for variables, navigation buttons up.gif, down.gif, s_b_delr.gif in excel based layout. I think its accessing the correct url. in my case http://........sapbD1lbiZjPTEwMCZkPW1pbiZ3PTEzOTM3ODAr)/bc/bsp/sap/PUBLIC/BC/BSP/Icons/icon_open.gif. Has any one come across this problem. We are on netweaver 04 and SEM 4.0 addon. Any feedback is appreciated.
Thanks
Sathya
Message was edited by: sathya gnanavelu
Message was edited by: sathya gnanavelu

Hi Sathya,
It may be that your services are not active.
Go to transaction code SICF and look (do a search) for the following:
Services UR and SEM_UPWB. They should be bold. If not, right-click and select activate in order to activate them.
Regards,
Rael

Setting up a password for a switch web interface?

Hi,
I am trying to figure out how to set up a username/password for this switch I have.
it is a: Cisco WS-C2924M-XL
It seems to be easy but I couldn't find out how to do it so far.
Any help would be appreciated.. i just started working with this. thanks!

Hi!
Are you trying to enable and set username/password for accessing switch through the web-interface? I hope I understood you correctly.
Firstly you need to enable the switch for web-interface.
Enter this command --> ip http-server
Then you can login using the username [admin] and the enable password.
If you want to set some other username for this purpose, then enter this command --> username
Then you can login using the username and the enable password. By default only level 15 access is enabled for the web-interface.
For a lil more have a look at the following URL --> http://www.cisco.com/en/US/tech/tk59/technologies_configuration_example09186a0080178a51.shtml#local
Hope this helps...
Regards,
AbhisheK
Please rate all helpful posts!!!

To retreive the data based on input in a variable in web interface.

Hello all,
I am working on BW-BPS.
I have a web interface which has many variables.One of them is Version.
I fill in the values in the variables(including the version) and save the data.
This saves the plan data in the Infocube.
Now next time the user opens the web interface.when he enters the version which is existing in the cube,then
all the variables should get filled in with the values in the cube for that particular version.
how do i achieve this??I mean how do i code this in the BSP page of my web interface.
I have read about methods for redefinition in the class CL_UPWB_BSP_APPL.but do not know much about this.
Regards,
Dhanya.

hi,
you have to create a sub class of CL_UPWB_BSP_APPL i.e(create a class whose super class is CL_UPWB_BSP_APPL).
since the BSP Event Handlers are implemented in it
you can change accordingly.
check this for enhancement for web interface:
http://help.sap.com/saphelp_nw2004s/helpdata/en/62/e5a562753511d5b3d70050dadfb23f/frameset.htm
regards,

How to create web interface whose name includes _ (underscore)

Hi Experts,
In my project we are creating web interface. The steps are as below:
1) Run transaction code upspm and copy the planning folder
2) Save the planning folder as web enabled planning folder
3) Generate web interface for step 2. Here I have to provide following details:
Name of planning folder
Web Application
Package
I have to create Web Application whose name should include _ like ztest_test
The system is not allowing me to create web application whose name includes _
Can you please how I can create web application whose name includes _
I am not allowed to use the wizard or manual method to create web interface.
Regards,

Hi
U can use the transaction BPS_WB to create u r web interface builder and for execute check another transaction BPS_wef (check once).
UPSPM for planning folder not for web interface builder.
Thanks,
Debasish

About CS6 save for web quality.Always aliasing.

I used to save JPEG or PNG by save for web before(CS5).
I found out beside the "save for web" interface changes and the quality become very low in CS6.
No matter setting high quality 100%. it is sill aliasing.
I know if use "export" it colud be better. BUT I can't set the image size.
I have to edit artboards or resize in photoshop.
I want to make sure what worng with my cs6 save for web. it's my computer problem or does anyone else have the same problem??
Thanks.
mac pro os x 10.8.3 / cs6

save for web setting
I tried optimized and matte...same result.
save-for-web-seeting-300%forview
result_save-for-web

Pshop CS3 Save for Web Increases Width/Height

Hi, I've been using Photoshop for 15 years and used the Save for Web at CS2 without problem. In CS3, it is downsampling the res from 300 ppi to 72 correctly but at the same time increasing the width and height, as though I'd gone into Image Size to do the resize and had the Resample Image field unchecked. This worked fine in CS2, so what gives? I can't find any setting that needs to be changed in the Save for Web interface.

Buko, I respectfully submit that your comment makes no sense. In CS2, using Save for Web automatically cut down the ppi to 72, and it removed web-unnecessary things like previews and paths so that the file could become smaller. It did NOT change the width or height of the image.
The CS3 version is cuts down the res to 72ppi. This is fine. The problem we're experiencing (on more than one machine) is that it's growing the width and height as though it's not downsampling when it changes the res. IF that's what you mean by "strictly pixel based," then OK, but it's problematic.
This is exactly the opposite result that you get if you take a digital camera photo that has a large dimension but low res, and increase the res to 300 while not allowing it to resample: you get a high-res image with smaller width/height image, as all pixels get smaller but maintain their exact colors.
If the CS3 version of Save for Web changes the diensions of the image, which is frequently created based on the final dimensions needed in the web page, then it's freakin' useless, and I might as well create an Action using Image/Image Size to reduce the res but maintain dimensions.

Web Interface Builder+BPS+BSP

Hi All
I need some online study material for Web Interface builder(BPS_WB transaction).
I have to design a interface for the Planning .can any one send me some link
or PDF's for the same .
I need documents for web Interface Tool(Builder) BPS and BSP
If any step by step discription is there then i will be thankful
My mail id is [email protected]
Regards'
Saurabh


Hi
 
Please check out the following URL: 
http://help.sap.com/saphelp_sem40bw/helpdata/EN/c4/b2af6569e64418a21bd0ab4d83be83/frameset.htm
 Hope it helps.
 
Cheers
Abhijit * It's a good habit to reward someone with points in SDN if you think his/her
response was helpful to you

SSL for Web interface of Aironet 1200

Similar Messages

Maybe you are looking for