User authentication not done in OAM for 2nd instance users

Hi,
I have installed oracle access manager using sunone directory server. I have created one more instance of that directory server and added the directory profile in OAM for that instance... but the users in the 2nd instance are not able to login into the OAM console...pls.. help me in resolving this....

Hi,
The question needs a little more clarification. Specifically, is the OAM console (and are you talking about the access system or the identity system?) protected by an OAM webgate? Or are you using the default identity system authentication? If webgate is in the picture, I suspect something in the authentication schemes needs to be corrected (and you should find more clues by lowering the webgate diagnostic logging threshold). If not, there is an additional instance drop-down box which appears on the login page and you need to select the correct instance in that box before logging in.
A couple of other questions -
1) Are the users in the two instances mutually exclusive?
2) Which components can use the new directory server instance?
-Vinod

Similar Messages

  • After a travel abroad I have forgotten to activate wifi, and  I have got the message telling that I have not done any backups for 2 weeks on my iPad. It is impossible to get rid of this message and do the correcting actions. pls help

    The message stays on the iPad screen no matter how many times I push the OK-button.
    Any ideas how to get through this problem?

    Welcome to Apple Support Communities
    Hold Sleep and Home buttons for 10 seconds until your device restarts, so you will be able to use your device again. Finally, open Settings > iCloud > Storage & Backup, and make a backup. The device will be backed up when it's plugged to the charger and connected to your network

  • HT4623 my iPhone 4 has died, I have not done iCloud backup for ages so this might be the problem but i do not know how to do this without using dead phone!  any assistance is appreciated.

    How do you get your iphone connected to itunes as it is not there on the device menu

    Have you tried resetting your iPhone?
    Reset: Press the Home and On/Off buttons at the same time and hold them until the Apple logo appears (about 10 seconds).
    No data will be lost.

  • HT4759 how do i do a backup this computer said I have not done a backup for 19 weeks what am i backing up i really don't need a back up

    HOW DO I BACKUP THIS COMPUTER

    You can either backup your iPad by connecting it to your computer's iTunes and doing File > Devices > Back Up
    Or you backup to iCloud via Settings > iCloud > Storage & Backup > Back Up Now
    Backups and restores : http://support.apple.com/kb/HT4079
    Backing up takes a copy of your documents, files, photos etc - a full list is included in an iTunes backup is shown on this page : http://support.apple.com/kb/HT4946
    If your iPad goes into recovery mode or needs replacing then having a backup means that you can restore your content back onto it, or onto a replacement device

  • Not getting email notifications for some instances

    Hi,
    Recently we moved our production instance to new server. Now databse agent uses virtual name and host agent uses physical name. After move Instance generates alerts in OEM but doesn't send email notification. Rest of the instances sends email alerts. Any idea?
    Regards

    Go to Setup -> Notification Methods. Check to ensure that the new host see "Outgoing Mail (SMTP) Server"

  • Authenticating test applcation in OAM is not working

    Hello OAM experts, can you please help to figure out why my test application is not getting authenticated by OAM.
    I have installed IDM for fusion application and SSO login is working for all admin consoles such as WLS, EM, OAM, OIM. I have deployed test application to OAM server itself to test the authentication of protected resources.
    Host identifier is already there which was create while configuring my IDM for fusion applications. I created new application domain , created resource for /text/*, created authentication policy and used LDAPScheme for authentication, created authorization policy and defined constraints by adding a group OAMAdministrators ( just for testing purpose). I also added response in the authentication policy.
    Then I have configured admin.conf of OHS server to redirect http://webhost1:7777/test to oam server host and port. It is getting redicted but not to the SSO login page. The URL still shows http://webhost1:7777/test and executes the test page and displays test application. It should have been redirected to SSO login page though OAM.
    At this stage I have no clue what did I miss. As I said, when I login to wls console, it gets redicted to SSO login through OAM login page and then while accessing OIM, it directly takes me to OIM application since the user has privileges and also OAM page without logging in again.
    But why my test application is not redirected to OAM authentication page ?
    Any help is grately appreciated.
    thanks
    Edited by: Jyothi on May 3, 2012 3:25 AM

    Hi, I am having the same issue. I am new to all this OAM stuff. I am using OAM 11g with a 11g Webgate configured. When I try to access the OAM Console the SSO setup does work and kicks-in and redirects me to the OAM server's integrated login page. But my test application that lives on an app server installed on a separate machine is never challenged for their credentials. As the documentation says I have CLIENT-CERT defined as the auth-method in my login-config inside my applications web.xml file.
    I think I am not using the right providers. What I want is Identity Assertion and also OAM authentication (if Identity Assertion fails Authentication should kick-in and redirect to challenge login page). So I have an OAMIdentityAsserter and an OAMAUthenticator set-up in addition to the Default Weblogic Identity Asserter and Default Weblogic Authenticator.
    I have tried everything but, the login redirect never happens. If I use the DefaultAuthenticator along with OAMAuthenticator (no OAMIdentityAsserter) and define BASIC in my login-config in web.xml then the Default Weblogic Authenticator pops up a dialog box which does let me enter credentials and when I do it does make the trip to the OAM server and works flawlessly. But I don't want basic authentication and I don't want a dialogue box to pop-up. I want the OAM server to redirect me to it's built-in login page just like it does for the OAMConsole itself which is being protected by the out of the box 10g IAMSuiteAgent Webgate. Which, as you know, comes pre-installed.
    Please let me know your configuration and the providers you have set up and how you were able to make the OAM server challenge you for credentials when trying to access a protected resource/application.
    Thank You.

  • TFS Webpage opening in Google Chrome and not opening in IE for one single user

    We are getting below error in Event log , could you please let us know if there is any browser setting issue
    TF53010: The following error has occurred in a Team Foundation component or extension:
    Date (UTC): 1/26/2015 6:08:47 AM
    Machine: xxxxxxxxxxxxxxxx
    Application Domain: /LM/W3SVC/2/ROOT/tfs-1-130667155749607117
    Assembly: Microsoft.TeamFoundation.Framework.Server, Version=12.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a; v4.0.30319
    Service Host: 81bf162c-2fcd-4c08-8e7e-22f7977316b9 (TEAM FOUNDATION)
    Process Details:
      Process Name: w3wp
      Process Id: 1692
      Thread Id: 3820
      Account name: NOE\xxxxxxxx
    Detailed Message: TF30065: An unhandled exception occurred.
    Web Request Details
        Url: http://xxxxxxxxxxxx:8080/tfs/ [method: GET]
        User Agent: Mozilla/5.0 (Windows NT 6.1; rv:35.0) Gecko/20100101 Firefox/35.0
        Headers: Connection=keep-alive&Accept=text%2fhtml%2capplication%2fxhtml%2bxml%2capplication%2fxml%3bq%3d0.9%2c*%2f*%3bq%3d0.8&Accept-Encoding=gzip%2c+deflate&Accept-Language=en-US%2cen%3bq%3d0.5&Cookie=s_vi%3d%5bCS%5dv1%7c290B6B5D850138E7-6000010160002380%5bCE%5d%3b+s_nr%3d1382418672936%3b+uuid230%3d21c96674-364e-440c-ab53-0c7a2212c461%3b+SMART_NEWSITEM_3D6588FC388A1435C2257703004461DC%3dTRUE%3b+SMART_NEWSITEM_4F0EB7B4FA0624A6C2257723004E9DDF%3dTRUE%3b+SMART_NEWSITEM_5DBB74A471265869C22576E400521557%3dTRUE%3b+SMART_NEWSITEM_71A3D0A3A52AA1B7C22576D6003E607E%3dTRUE%3b+SMART_NEWSITEM_805F1897405F037DC2257864003FDED9%3dTRUE%3b+SMART_NEWSITEM_E9DFA2D4C03A8F49C22578140050DA3D%3dTRUE%3b+s_sv_112_p1%3d1%4011%40s%2f12987%26e%2f2%3b+SMART_NEWSITEM_64F333C64D4D1041C22579D0002DD0FE%3dTRUE%3b+utag_main%3d_st%3a1392976750254%24ses_id%3a1392975739554%253Bexp-session%3b+usersettingsSR16%3d%257B%2522data%2522%253A%2522%255B%257B%255C%2522language%255C%2522%253A%255C%2522zh-CN%255C%2522%252C%255C%2522lhp_settings_saved%255C%2522%253A%255C%25221%255C%2522%257D%255D%2522%257D%3b+PDSESSIONID%3dbdf406cb-810c-4808-a196-5c5c6a87ae30%3b+__v%3d1.1464839180912144600.1377832946.1377832946.1380098378.2%3b+optimizelySegments%3d%257B%2522296197008%2522%253A%2522direct%2522%252C%2522296074949%2522%253A%2522false%2522%252C%2522296100815%2522%253A%2522ff%2522%257D%3b+optimizelyEndUserId%3doeu1392974949217r0.6519441354915236%3b+optimizelyBuckets%3d%257B%257D%3b+ts%3d1392974951305%3b+s_fid%3d481182D594B13307-273441BDD80F38DF%3b+__RequestVerificationToken_L3Rmcw2%3dYh-4crvpe1896PE-dZ5kgemQvHCkkhQxBDSUCMhb_vRr6sIkcBfEvJGABqUEMKpdmiMilJh-92bm8lcokJXj3U39O681%3b+__RequestVerificationToken2c73c17c7-d5b5-4eee-aea6-0ee8b45ab6bb%3dYh-4crvpe1896PE-dZ5kgemQvHCkkhQxBDSUCMhb_vRr6sIkcBfEvJGABqUEMKpdmiMilJh-92bm8lcokJXj3U39O681&Host=xxxxxxxxxx&Referer=https%3a%2f%2ftfs.xxxxx.com%2ftfs%2f_signout%3fmode%3dSignInAsDifferentUser%26redirectUrl%3d%252Ftfs%252F&User-Agent=Mozilla%2f5.0+(Windows+NT+6.1%3b+rv%3a35.0)+Gecko%2f20100101+Firefox%2f35.0
        Path: /tfs/
        Local Request: False
        Host Address: xx.xx.xx.xx
        User: NOE\xxxxxxxx [authentication type: NTLM]
    Exception Message: Input string was not in a correct format. (type FormatException)
    Exception Stack Trace:    at System.Number.StringToNumber(String str, NumberStyles options, NumberBuffer& number, NumberFormatInfo info, Boolean parseDecimal)
       at System.Number.ParseInt32(String s, NumberStyles style, NumberFormatInfo info)
       at Microsoft.TeamFoundation.Server.WebAccess.ConfigurationExtensions.IdentityImage(TfsWebContext webContext, Guid identityId, Object routeValues)
       at Microsoft.TeamFoundation.Server.WebAccess.Html.CommonHtmlExtensions.IdentityImageTag(HtmlHelper htmlHelper, Guid identityId, Object htmlAttributes, Object routeValues)
       at Microsoft.TeamFoundation.Server.WebAccess.Html.NavigationExtensions.UserImage(HtmlHelper htmlHelper, TeamFoundationIdentity identity)
       at Microsoft.TeamFoundation.Server.WebAccess.Html.NavigationExtensions.<>c__DisplayClass23.<GenerateProfileMenu>b__22(MenuItem menuItem)
       at Microsoft.TeamFoundation.Server.WebAccess.Html.NavigationExtensions.GenerateProfileMenu(HtmlHelper htmlHelper, Boolean includeUserManagementItems)
       at Microsoft.TeamFoundation.Server.WebAccess.Html.NavigationExtensions.UserMenu(HtmlHelper htmlHelper, Boolean includeUserManagementItems, Boolean isUpdatedStyle)
       at ASP._views_shared_header_ascx.__Render__control1(HtmlTextWriter __w, Control parameterContainer)
       at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
       at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
       at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
       at System.Web.UI.Page.Render(HtmlTextWriter writer)
       at System.Web.Mvc.ViewPage.Render(HtmlTextWriter writer)
       at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
       at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)

    This is not a Windows Store development issue.
    Matt Small - Microsoft Escalation Engineer - Forum Moderator
    If my reply answers your question, please mark this post as answered.
    NOTE: If I ask for code, please provide something that I can drop directly into a project and run (including XAML), or an actual application project. I'm trying to help a lot of people, so I don't have time to figure out weird snippets with undefined
    objects and unknown namespaces.

  • Tacacs user authentication not working

    I am trying to setup my AP to use tacacs+ running on Cisco ACS to authenticate users logging into the AP with no success.
    Here is the AP config.  At the end of the config you can see the debugs that are running and the output of those when I try to login to the unit with the web browser.
    version 12.4
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname ap1250
    aaa new-model
    aaa group server radius rad_eap
    aaa group server radius rad_mac
    aaa group server radius rad_acct
    aaa group server radius rad_admin
    cache expiry 1
    cache authorization profile admin_cache
    cache authentication profile admin_cache
    aaa group server tacacs+ tac_admin
    server 192.168.1.25
    cache expiry 1
    cache authorization profile admin_cache
    cache authentication profile admin_cache
    aaa group server radius rad_pmip
    aaa group server radius dummy
    aaa authentication login default local cache tac_admin group tac_admin
    aaa authentication login eap_methods group rad_eap
    aaa authentication login mac_methods local
    aaa authorization exec default local cache tac_admin group tac_admin
    aaa accounting network acct_methods start-stop group rad_acct
    aaa cache profile admin_cache
    all
    aaa session-id common
    power inline negotiation prestandard source
    username seth privilege 15 password 7 02050D480809
    username Cisco privilege 15 password 7 072C285F4D06
    bridge irb
    interface Dot11Radio0
    no ip address
    no ip route-cache
    shutdown
    station-role root
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface Dot11Radio1
    no ip address
    no ip route-cache
    shutdown
    dfs band 3 block
    channel dfs
    station-role root
    bridge-group 1
    bridge-group 1 subscriber-loop-control
    bridge-group 1 block-unknown-source
    no bridge-group 1 source-learning
    no bridge-group 1 unicast-flooding
    bridge-group 1 spanning-disabled
    interface GigabitEthernet0
    no ip address
    no ip route-cache
    duplex auto
    speed auto
    bridge-group 1
    no bridge-group 1 source-learning
    bridge-group 1 spanning-disabled
    interface BVI1
    ip address 192.168.1.60 255.255.255.0
    no ip route-cache
    ip http server
    ip http authentication aaa
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    ip radius source-interface BVI1
    tacacs-server host 192.168.1.25 port 49 key 7 00071A150754
    radius-server attribute 32 include-in-access-req format %h
    radius-server vsa send accounting
    bridge 1 route ip
    line con 0
    line vty 0 4
    end
    ap1250#  sho debug
    General OS:
      TACACS+ authentication debugging is on
      TACACS+ authorization debugging is on
      AAA Authentication debugging is on
    ap1250#
    *Mar  1 00:25:56.239: AAA/BIND(00000024): Bind i/f
    *Mar  1 00:25:56.243: AAA/AUTHEN/LOGIN (00000024): Pick method list 'default'

    The radio's are shut down as I do not have an SSID configured on the unit either at this time.  I was merely trying to get the setup for login authentication.
    I did also have a local user name and password defined but was unable to use that login either.
    I tried the config on another AP and got it to work by changing the statement to read
    aaa authentication login default local group tac_admin
    This was done by not checking the box for caching.
    Seth

  • Migration of Items for which IR done and GR not done

    Hi,
    We are migrating from legacy to SAP. On FI we are migration following items
    - Migration of Trial Balance as of a cut off date
    - Migration of AR,AP and GL Open Items
    We will have some IRs for which GRs are not done, what should be strategy for migrating the same. Kindly note that we are not migrating POs from legacy.
    Thanks
    Balla

    If you don't migrate the PO from legacy to SAP then you will not be able to do the 3-way match automatically on SAP. I suggest you convert IR over as open item in AP but populate the payment block to prevent them from being paid by the payment run. Whenever GR is done in legacy system or manually by paper tracking or otherwise the user should release the payment block on the AP invoice. If SAP is the inventory system I would assume the user also need to perform the GR as a 501 movement type (goods receipt without order). The account used when doing the 501 movement type should be the provision account used in legacy system (provision account for 'invoiced, not yet received').

  • I've just opened iTunes on my Mac with an error "The iTunes Library.itl file is locked, on a locked disk, or you do not have write permission for this file.". I created a shirred library so that all users on my Mac can access the same library. Help?

    I have just opened ITunes on my Mac and the following error occurred "The iTunes Library.itl file is locked, on a locked disk, or you do not have write permission for this file.". When I setup my Mac I created a shared user area to contain my ITunes library so that I could share it with another user logged onto my Mac. However the error above gives me the impression that the library file is locked... I've checked and it does not seem to be locked under the "get info" fie information. Has anyone come across this before and found a solution?

    You also need to make sure you have both read and write permission for the file, or for the whole iTunes folder for that matter.  That's also done in Get Info for the file or folder concerned.
    Read the part about changing permissions on the iTunes folder in: https://discussions.apple.com/message/11583914

  • User Profile created to block the UD, if RR is not done.

    Hi Gurus,
    For Inspection Type Z10,the UD to be blocked,if Result Recording is not carried out.
    ie if open charac. exist, System should block the UD.
    I have created a user status coping SAP Std. STATUS PROFILE - QM_L_003 AND
    NAMED AS "QM_UD_BK".
    System Status Profile - QM_L_003 is used to block the UD
    (No Stock Posting Before UD)
    I have assigned this Status Profile to the INSP. TYPE - Z10.
    I have defined two status namely (1) INIT AND (2) QFIN.
    STATUS    --     POSITION    --      PRIORITY
    INIT            --           1           --         1
    QFIN          --           2           --         1
    (1) For Status - INIT - Business transaction
                         - Access Usage Decision - FORBIDDEN 
    (2) For Status - QFIN - Business Transaction
                        - Make Usage Decision - ALLOWED.
    I have done the GR.
    System created the Inspection Lot.
    The insp.lot has user status as "INIT"
    Now the UD is blocked.
    I am able to do Result Recording.
    After completing the  the Result Recording, The Status must change to QFIN.
    It is not changing.
    Hence I am unable to do UD.
                             MY REQUIREMENT
    After entering the Results in Result Recording Screen, the user status must change to QFIN  automatically.
    Once the QFIN status exists, UD can be done.
    Please do the needful.
    With Regards,
    Raghu Sharma

    Dear Shyamal Ji,
    Thanks for your prompt reply.
    I have created a new profile and copied your statuses only.
    For RRCL,When we assign the "Make usage decision" as FORBIDDEN AND  I have selected "NO ACTION" COMBINATION.
    You have stated that RRCL and NSBU  - SET AS INITIAL STATUS.
    BUT IT IS ACCEPTING FOR ONE OF THE STATUSES ONLY INITIAL STATUS.
    *WHEN I ACTIVATE THE INITIAL STATUS BOX FOR THE STATUS - NSBU, I GET THE FOLLOWING ERROR.
    THE ERROR IS GIVEN BELOW
    Statuses RRCL and NSBU are initial statuses
    Message no. BS246
    Diagnosis
    In each status profile only an initial status may have a reference number.  However, status RRCL and NSBU are
    both initial status and for both a reference number is specified.
    Procedure
    Mark one of the two status as initial status or delete the reference number of one of these status.
    With out selecting the "INITIAL STATUS" FOR NSBU, I have checked.
    The status changes as soon as I select the code.
    But for both the cases the status is changing.
    I could not stop the UD, when RR is not done.
    How you are able to check the box " INITIAL STATUS".
    I am able to copy your setting completely except the checking of the INITIAL STATUS BOXES FOR BOTH THE STATUSED - RRCL AND NSBU.
    Please guide me.
    Thanks for your concern.
    With Best Regards,
    Raghu Sharma.

  • OATS Load test is not able to scale for more than 10 users

    Hi,
    I am using OATS load test runner for performance testing Fusion based application on webcenter portal.I am not able to run OATS load tester sucessfully for more than 10 VU's.After that it gives a component not found issue or loop error.Please let me know if anybody faced similar issue and was able to resolve it.Is there some setting to be done?
    Thanks,
    Ritesh
    Edited by: user766882 on Aug 20, 2012 9:07 AM

    Hi Jean,
    Our application contains customised retail webcenter portal on which retail application is hosted.This portal application is not able to scale up more than 10 users.I had created portal application without the customised framework and then for a similar usecase it is able to scale upto more than 50 users but once it hits 100 VU mark it starts giving errors.If it were an issue with client tokens or login,I would have been able to have more than 1 user at a time.It seems to be an issue with custom framework developed on top of webcenter portal.I have faced a similar issue while testing for this app with jmeter also.I was able to test for the webcenter portal app without any customisation for more than 100 concurrent users. But I was not able to test for more than 1 user for customised retail webcenter portal
    Thanks,
    Ritesh
    Edited by: user766882 on Aug 21, 2012 8:25 AM
    Edited by: user766882 on Aug 21, 2012 8:33 AM

  • Restriction for Migo if import custom miro is not done.

    Dear Consultant ,
    I want to put restriction over migo for import PO.
    If the custom duty miro is not done , it should not allow /restrict user for migo.
    Kidnly suggest user exit or badi or any other solution for the same.
    Thanx
    Pradeep

    The only problem with these notes is that it will not validate if custom duty invoice is passed? In case freight invoice is passed it considers that also as a valid document .
    As suggested in the note you can use BADI:  J_1IEXGM_BADI_LINE_MODIFY in that enhancement spot ( around line 996-997)  and add the validation of in EKBZ for that PO, KSCHL= " custom duty condition"  and it should give error message if invoice does not exist.
    This logic will work if  invoice is posted for the full qty.
    Other wise you can use user exit and badi as suggested by   Ajit , MB_MIGO_BADI, exit mbcf0002. in that logic if custom duty invocie is posted ( check in EKBZ- kschl= " what ever you custom duty conditions are for that EBELN and EBELP). If no then throw error message.
    Regards
    Sangeeta

  • 802.1X authentication not happening in Voice Domain for IP Phone

    I am trying to lab as many scenarios as I can for 802.1x.  I seem to have hit a problem with IP Phones running EAP-MD5 authentication.  The phone sare always being authenticated in the Data Domain.  This is regardless of whether or no the port configuration is in: host-mode multi-auth  ,or, host-mode multi-domain.  After a while of both ports appearing to authenticate in the data VLAN, neither the PC or Phone will work
    I have checked that my ACS5.1 server is sending the appropriate AV pair of "device-traffic-class=voice" as I can see it in a wireshark trace.
    What other aspects might i need to check to get the phone to authenticate itself properly?
    The problem shows itself as:
    C3750G#sh authentication sessions int gi 1/0/16
                Interface:  GigabitEthernet1/0/16
              MAC Address:  001d.452d.53e0
               IP Address:  Unknown
                User-Name:  CP-7942G-SEP001D452D53E0
                   Status:  Authz Success
                   Domain:  DATA
          Security Policy:  Should Secure
          Security Status:  Unsecure
           Oper host mode:  multi-domain
         Oper control dir:  both
            Authorized By:  Authentication Server
               Vlan Group:  N/A
          Session timeout:  N/A
             Idle timeout:  N/A
        Common Session ID:  C0A8FE2500000014000F6B8F
          Acct Session ID:  0x00000036
                   Handle:  0xC8000014
    Runnable methods list:
           Method   State
           dot1x    Authc Success
                Interface:  GigabitEthernet1/0/16
              MAC Address:  0014.c209.896f
               IP Address:  192.168.10.2
                User-Name:  TEST\TestAdmin
                   Status:  Running
                   Domain:  UNKNOWN
          Security Policy:  Should Secure
          Security Status:  Unsecure
           Oper host mode:  multi-domain
         Oper control dir:  both
          Session timeout:  N/A
             Idle timeout:  N/A
        Common Session ID:  C0A8FE2500000013000F5A42
          Acct Session ID:  0x00000034
                   Handle:  0x27000013
    Runnable methods list:
           Method   State
           dot1x    Running
    My port config is:
    interface GigabitEthernet1/0/16
    description * 802.1x Multi Domain (1Phone + 1PC) *
    switchport access vlan 10
    switchport mode access
    switchport voice vlan 11
    priority-queue out
    authentication host-mode multi-domain
    authentication port-control auto
    udld port aggressive
    mls qos trust dscp
    dot1x pae authenticator
    spanning-tree portfast
    end

    For information, the debugs you request are:
    Jan 29 10:58:46.317: %ILPOWER-7-DETECT: Interface Gi1/0/16: Power Device detected: IEEE PD
    Jan 29 10:58:46.770: %ILPOWER-5-POWER_GRANTED: Interface Gi1/0/16: Power granted
    Jan 29 10:58:50.377: AAA/BIND(0000001D): Bind i/f
    Jan 29 10:58:52.373: %LINK-3-UPDOWN: Interface GigabitEthernet1/0/16, changed state to up
    Jan 29 10:58:53.380: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet1/0/16, changed state to up
    Jan 29 10:58:54.789: %AUTHMGR-5-START: Starting 'dot1x' for client (001d.452d.53e0) on Interface Gi1/0/16 AuditSessionID C0A                                                     8FE2500000018002FB1D0
    Jan 29 10:58:56.920: AAA/AUTHEN/8021X (0000001D): Pick method list 'default'
    Jan 29 10:58:56.920: RADIUS/ENCODE(0000001D):Orig. component type = DOT1X
    Jan 29 10:58:56.920: RADIUS(0000001D): Config NAS IP: 192.168.254.37
    Jan 29 10:58:56.920: RADIUS/ENCODE(0000001D): acct_session_id: 54
    Jan 29 10:58:56.920: RADIUS(0000001D): sending
    Jan 29 10:58:56.920: RADIUS(0000001D): Send Access-Request to 192.168.254.51:1645 id 1645/52, len 237
    Jan 29 10:58:56.920: RADIUS:  authenticator 89 81 92 2C AA 6B E6 E6 - CA 2C 3A 0D E1 C5 28 ED
    Jan 29 10:58:56.928: RADIUS:  User-Name           [1]   26  "CP-7942G-SEP001D452D53E0"
    Jan 29 10:58:56.928: RADIUS:  Service-Type        [6]   6   Framed                    [2]
    Jan 29 10:58:56.928: RADIUS:  Framed-MTU          [12]  6   1500
    Jan 29 10:58:56.928: RADIUS:  Called-Station-Id   [30]  19  "30-37-A6-AB-8E-90"
    Jan 29 10:58:56.928: RADIUS:  Calling-Station-Id  [31]  19  "00-1D-45-2D-53-E0"
    Jan 29 10:58:56.928: RADIUS:  EAP-Message         [79]  31
    Jan 29 10:58:56.928: RADIUS:   02 01 00 1D 01 43 50 2D 37 39 34 32 47 2D 53 45 50 30 30 31 44  [CP-7942G-SEP001D]
    Jan 29 10:58:56.928: RADIUS:   34 35 32 44 35 33 45 30          [ 452D53E0]
    Jan 29 10:58:56.928: RADIUS:  Message-Authenticato[80]  18
    Jan 29 10:58:56.928: RADIUS:   83 AF F8 DB 44 0D 0A 46 70 2F 1E 8D 67 CE BC DD             [ DFp/g]
    Jan 29 10:58:56.928: RADIUS:  EAP-Key-Name        [102] 2   *
    Jan 29 10:58:56.928: RADIUS:  Vendor, Cisco       [26]  49
    Jan 29 10:58:56.928: RADIUS:   Cisco AVpair       [1]   43  "audit-session-id=C0A8FE2500000018002FB1D0"
    Jan 29 10:58:56.928: RADIUS:  NAS-Port-Type       [61]  6   Ethernet                  [15]
    Jan 29 10:58:56.928: RADIUS:  NAS-Port            [5]   6   50116
    Jan 29 10:58:56.928: RADIUS:  NAS-Port-Id         [87]  23  "GigabitEthernet1/0/16"
    Jan 29 10:58:56.928: RADIUS:  NAS-IP-Address      [4]   6   192.168.254.37
    Jan 29 10:58:56.928: RADIUS(0000001D): Started 4 sec timeout
    Jan 29 10:58:56.928: RADIUS: Received from id 1645/52 192.168.254.51:1645, Access-Challenge, len 76
    Jan 29 10:58:56.928: RADIUS:  authenticator DA 45 B9 F8 80 48 A0 4B - F7 99 9B 1F DE 4F B2 9E
    Jan 29 10:58:56.928: RADIUS:  State               [24]  30
    Jan 29 10:58:56.937: RADIUS:   32 35 53 65 73 73 69 6F 6E 49 44 3D 41 43 53 2F  [25SessionID=ACS/]
    Jan 29 10:58:56.937: RADIUS:   38 35 36 37 30 35 31 38 2F 33 33 3B      [ 85670518/33;]
    Jan 29 10:58:56.937: RADIUS:  EAP-Message         [79]  8
    Jan 29 10:58:56.937: RADIUS:   01 51 00 06 0D 20                [ Q ]
    Jan 29 10:58:56.937: RADIUS:  Message-Authenticato[80]  18
    Jan 29 10:58:56.937: RADIUS:   3C F4 D9 93 82 EA FB 25 A7 9D C4 8F 14 3F 33 4F             [ <??3O]
    Jan 29 10:58:56.937: RADIUS(0000001D): Received from id 1645/52
    Jan 29 10:58:56.937: RADIUS/DECODE: EAP-Message fragments, 6, total 6 bytes
    Jan 29 10:58:57.046: AAA/AUTHEN/8021X (0000001D): Pick method list 'default'
    Jan 29 10:58:57.046: RADIUS/ENCODE(0000001D):Orig. component type = DOT1X
    Jan 29 10:58:57.046: RADIUS(0000001D): Config NAS IP: 192.168.254.37
    Jan 29 10:58:57.046: RADIUS/ENCODE(0000001D): acct_session_id: 54
    Jan 29 10:58:57.046: RADIUS(0000001D): sending
    Jan 29 10:58:57.046: RADIUS(0000001D): Send Access-Request to 192.168.254.51:1645 id 1645/53, len 244
    Jan 29 10:58:57.046: RADIUS:  authenticator BE 9B 32 59 45 BF 15 45 - E4 43 02 B5 B5 D7 ED 83
    Jan 29 10:58:57.046: RADIUS:  User-Name           [1]   26  "CP-7942G-SEP001D452D53E0"
    Jan 29 10:58:57.046: RADIUS:  Service-Type        [6]   6   Framed                    [2]
    Jan 29 10:58:57.046: RADIUS:  Framed-MTU          [12]  6   1500
    Jan 29 10:58:57.054: RADIUS:  Called-Station-Id   [30]  19  "30-37-A6-AB-8E-90"
    Jan 29 10:58:57.054: RADIUS:  Calling-Station-Id  [31]  19  "00-1D-45-2D-53-E0"
    Jan 29 10:58:57.054: RADIUS:  EAP-Message         [79]  8
    Jan 29 10:58:57.054: RADIUS:   02 51 00 06 03 04                 [ Q]
    Jan 29 10:58:57.054: RADIUS:  Message-Authenticato[80]  18
    Jan 29 10:58:57.054: RADIUS:   E0 B5 99 82 7E 9E 35 0F 78 D9 BD 4B 96 97 34 47            [ ~5xK4G]
    Jan 29 10:58:57.054: RADIUS:  EAP-Key-Name        [102] 2   *
    Jan 29 10:58:57.054: RADIUS:  Vendor, Cisco       [26]  49
    Jan 29 10:58:57.054: RADIUS:   Cisco AVpair       [1]   43  "audit-session-id=C0A8FE2500000018002FB1D0"
    Jan 29 10:58:57.054: RADIUS:  NAS-Port-Type       [61]  6   Ethernet                  [15]
    Jan 29 10:58:57.054: RADIUS:  NAS-Port            [5]   6   50116
    Jan 29 10:58:57.054: RADIUS:  NAS-Port-Id         [87]  23  "GigabitEthernet1/0/16"
    Jan 29 10:58:57.054: RADIUS:  State               [24]  30
    Jan 29 10:58:57.054: RADIUS:   32 35 53 65 73 73 69 6F 6E 49 44 3D 41 43 53 2F  [25SessionID=ACS/]
    Jan 29 10:58:57.054: RADIUS:   38 35 36 37 30 35 31 38 2F 33 33 3B      [ 85670518/33;]
    Jan 29 10:58:57.054: RADIUS:  NAS-IP-Address      [4]   6   192.168.254.37
    Jan 29 10:58:57.054: RADIUS(0000001D): Started 4 sec timeout
    Jan 29 10:58:57.054: RADIUS: Received from id 1645/53 192.168.254.51:1645, Access-Challenge, len 95
    Jan 29 10:58:57.054: RADIUS:  authenticator D9 62 B7 27 8F 55 E9 88 - 41 01 D0 83 52 DF 36 29
    Jan 29 10:58:57.054: RADIUS:  State               [24]  30
    Jan 29 10:58:57.054: RADIUS:   32 35 53 65 73 73 69 6F 6E 49 44 3D 41 43 53 2F  [25SessionID=ACS/]
    Jan 29 10:58:57.063: RADIUS:   38 35 36 37 30 35 31 38 2F 33 33 3B      [ 85670518/33;]
    Jan 29 10:58:57.063: RADIUS:  EAP-Message         [79]  27
    Jan 29 10:58:57.063: RADIUS:   01 52 00 19 04 10 AA 6A A2 BC 63 1A C0 93 B8 58 67 F7 1A A5 FD 45 41 43 53         [ RjcXgEAC                                                     S]
    Jan 29 10:58:57.063: RADIUS:  Message-Authenticato[80]  18
    Jan 29 10:58:57.063: RADIUS:   29 D2 66 87 4A 2F B3 9E B5 EC F9 4E 9F 62 82 5E           [ )fJ/Nb^]
    Jan 29 10:58:57.063: RADIUS(0000001D): Received from id 1645/53
    Jan 29 10:58:57.063: RADIUS/DECODE: EAP-Message fragments, 25, total 25 bytes
    Jan 29 10:58:57.079: AAA/AUTHEN/8021X (0000001D): Pick method list 'default'
    Jan 29 10:58:57.079: RADIUS/ENCODE(0000001D):Orig. component type = DOT1X
    Jan 29 10:58:57.079: RADIUS(0000001D): Config NAS IP: 192.168.254.37
    Jan 29 10:58:57.079: RADIUS/ENCODE(0000001D): acct_session_id: 54
    Jan 29 10:58:57.079: RADIUS(0000001D): sending
    Jan 29 10:58:57.079: RADIUS(0000001D): Send Access-Request to 192.168.254.51:1645 id 1645/54, len 284
    Jan 29 10:58:57.079: RADIUS:  authenticator 91 F4 7C C1 4E 79 27 AB - 2F 36 20 A8 9C 3F A9 76
    Jan 29 10:58:57.079: RADIUS:  User-Name           [1]   26  "CP-7942G-SEP001D452D53E0"
    Jan 29 10:58:57.088: RADIUS:  Service-Type        [6]   6   Framed                    [2]
    Jan 29 10:58:57.088: RADIUS:  Framed-MTU          [12]  6   1500
    Jan 29 10:58:57.088: RADIUS:  Called-Station-Id   [30]  19  "30-37-A6-AB-8E-90"
    Jan 29 10:58:57.088: RADIUS:  Calling-Station-Id  [31]  19  "00-1D-45-2D-53-E0"
    Jan 29 10:58:57.088: RADIUS:  EAP-Message         [79]  48
    Jan 29 10:58:57.088: RADIUS:   02 52 00 2E 04 10 45 2F B1 FC 60 CF 09 08 7B C4 F9 56 74 AF 44 E9 43 50 2D 37 39 34 32  [R.E/                                                     `{VtDCP-7942]
    Jan 29 10:58:57.088: RADIUS:   47 2D 53 45 50 30 30 31 44 34 35 32 44 35 33 45  [G-SEP001D452D53E]
    Jan 29 10:58:57.088: RADIUS:   30                 [ 0]
    Jan 29 10:58:57.088: RADIUS:  Message-Authenticato[80]  18
    Jan 29 10:58:57.088: RADIUS:   45 42 58 9F 75 14 09 A1 FC DD CD 26 B4 88 42 CF            [ EBXu&B]
    Jan 29 10:58:57.088: RADIUS:  EAP-Key-Name        [102] 2   *
    Jan 29 10:58:57.088: RADIUS:  Vendor, Cisco       [26]  49
    Jan 29 10:58:57.088: RADIUS:   Cisco AVpair       [1]   43  "audit-session-id=C0A8FE2500000018002FB1D0"
    Jan 29 10:58:57.088: RADIUS:  NAS-Port-Type       [61]  6   Ethernet                  [15]
    Jan 29 10:58:57.088: RADIUS:  NAS-Port            [5]   6   50116
    Jan 29 10:58:57.088: RADIUS:  NAS-Port-Id         [87]  23  "GigabitEthernet1/0/16"
    Jan 29 10:58:57.088: RADIUS:  State               [24]  30
    Jan 29 10:58:57.088: RADIUS:   32 35 53 65 73 73 69 6F 6E 49 44 3D 41 43 53 2F  [25SessionID=ACS/]
    Jan 29 10:58:57.088: RADIUS:   38 35 36 37 30 35 31 38 2F 33 33 3B      [ 85670518/33;]
    Jan 29 10:58:57.088: RADIUS:  NAS-IP-Address      [4]   6   192.168.254.37
    Jan 29 10:58:57.088: RADIUS(0000001D): Started 4 sec timeout
    Jan 29 10:58:57.222: RADIUS: Received from id 1645/54 192.168.254.51:1645, Access-Accept, len 126
    Jan 29 10:58:57.222: RADIUS:  authenticator 7B A5 E0 B2 D6 15 90 26 - 8F 8F 64 B0 E6 94 D8 C7
    Jan 29 10:58:57.222: RADIUS:  User-Name           [1]   26  "CP-7942G-SEP001D452D53E0"
    Jan 29 10:58:57.222: RADIUS:  Class               [25]  22
    Jan 29 10:58:57.222: RADIUS:   43 41 43 53 3A 41 43 53 2F 38 35 36 37 30 35 31  [CACS:ACS/8567051]
    Jan 29 10:58:57.222: RADIUS:   38 2F 33 33              [ 8/33]
    Jan 29 10:58:57.222: RADIUS:  EAP-Message         [79]  6
    Jan 29 10:58:57.222: RADIUS:   03 52 00 04                 [ R]
    Jan 29 10:58:57.222: RADIUS:  Message-Authenticato[80]  18
    Jan 29 10:58:57.222: RADIUS:   E8 2E 9B FD C2 A8 D7 5E 86 DD 3C 67 FF 37 75 02            [ .^Jan 29 10:58:57.222: RADIUS:  Vendor, Cisco       [26]  34
    Jan 29 10:58:57.222: RADIUS:   Cisco AVpair       [1]   28  "device-traffic-class=voice"
    Jan 29 10:58:57.222: RADIUS(0000001D): Received from id 1645/54
    Jan 29 10:58:57.222: RADIUS/DECODE: EAP-Message fragments, 4, total 4 bytes
    Jan 29 10:58:57.222: AAA/AUTHOR (0000001D): Method list id=0 not configured. Skip author
    Jan 29 10:58:57.222: %DOT1X-5-SUCCESS: Authentication successful for client (001d.452d.53e0) on Interface Gi1/0/16 AuditSess                                                     ionID
    Jan 29 10:58:57.222: %AUTHMGR-7-RESULT: Authentication result 'success' from 'dot1x' for client (001d.452d.53e0) on Interfac                                                     e Gi1/0/16 AuditSessionID C0A8FE2500000018002FB1D0
    Jan 29 10:58:57.239: %LINEPROTO-5-UPDOWN: Line protocol on Interface Vlan10, changed state to up
    Jan 29 10:58:58.262: %AUTHMGR-5-SUCCESS: Authorization succeeded for client (001d.452d.53e0) on Interface Gi1/0/16 AuditSess                                                     ionID C0A8FE2500000018002FB1D0

  • HT6147 Why haven't they done a patch for those of us who have not updated and prefer to use iOS 6?

    Why haven't they done a patch for those of us who have not updated and prefer to use iOS 6?

    Totally agree with Andy. Apple needs to support its users whether or not they decide to update to iOS 7.
    The reviews from i Pad 3 owners (like me) is that when they've updated to iOS 7 they've experienced latency and sluggishness. Why would I ruin a perfectly good iPad by updating to iOS 7?
    Please let me know where I can find a patch for iOS 6.
    Thanks!

Maybe you are looking for