User knows radius key

hello,
I wanted to know what are the hazards of an end-user knowing the key with which a switch authenticates with the ACS?

Jonathan
I would not regard this as very much of a hazzard. The switch uses a key to authenticate with the radius server as it gets ready to authenticate user sessions, and (depending on how you have configured your devices) possibly to prepare to do authorization requests, or possibly to prepare to send accounting records to the server.
Since the remote devices do not create user records on the radius server or alter records on the server it does not pose much threat to the integrity of the radius server. Probably worst case, if an end user knew the key it might allow the user to spoof communications to the server and appear to be a device requesting authentication. Perhaps it might be part of doing a dictionary attack to find passwords for known user IDs. But since the radius server associates particular keys with particular device addresses the spoofing would have to send the transaction to the server and have a way to get the server response sent to it and not to the real device. And the dictionary attach could just as well be mounted by attempting access to real network devices.
So I do not see a lot of threat if an end user did happen to know the key used between the device and the server.
HTH
Rick

Similar Messages

  • How can I control the windows behavior when the user hits "Windows key +d"?

    Hi,
    I have an application with 2 top-level windows. Both windows may be open at the same time. One window is a win32 window, and the other is a wpf window. When both windows are open, the wpf window should always be before the win32 window. When the user hits
    "Windows key +d" twice (show desktop and restore all windows), the windows are occasionally restored in a different order.
    How can I force the wpf window to always be before the win32 window?
    Which Windows messages/events are sent when the desktop is restored?
    Yoel

    Hi,
    I tried set the Topmost property on the Wpf window. It didn't help - for some reason, the win32 window still get in front of the Wpf window.
    I was able to get some win32 messages that change the win32 window position. I tried then to bring the Wpf window to the front (using SetActiveWindow, SetForegroundWindow, SetWindowPos) but i does not work as expected.
    Yoel
    Hi Yoelp,
    >> tried set the Topmost property on the Wpf window. It didn't help - for some reason, the win32 window still get in front of the Wpf window.
    It worked well on my side, could you please tell us more details about these two window? What have you done on the WIn32 Window? We need to know the reason
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • How can i know which key i pressed?

    i defined F9,F10 as previous Item using Oracle Terminal.after the programme is executed,the user can use the function of Previous item,how can i know the key user pressed is F2 or F3?

    What's the big deal having more than one key to perform the same task? I don't believe I understood you properly....
    For instance, if you don't want end-users to press Ctrl+K to invoke LOV, one option is to "disable" this key combination using Oracle Terminal.
    Other option is the Keybidding API may help you. Look for it in Forms Builder Help. I don't think so, but maybe it could be usefull help...

  • How to build a tabular form with a by the user insertable primary key

    I have build a build a tabular form with the wizzard. Wat should I do to make the primary key insertable by the user.
    When I change the PK from 'hidden' to 'text field', I get a checksum error when i am trying to insert.

    Fred: When you use the tabular form wizard, notice the help text on the right hand side of each page. The help page where you define the type of primary key (Existing trigger, PL/SQL function, existing sequence) clearly states
    Tabular forms do not support user entered primary key values
    Makes sense when you think about it. The MRU process needs to determine whether to update a record or insert a new record. It does that by comparing the checksums (and/or) pk values from when the page was first rendered and then when you make changes and submit it. Newly inserted rows will have a blank PK/checksum.
    If you allow user to change the PK, how will the system know which rows are new and which ones are old?
    For example, lets say you have
    create table t
    pk int primary key,
    data varchar2(10)
    )You have 2 rows
    1 red
    2 yellow
    If the PK were to be editable, user could go in and change the above to
    2 red
    1 yellow
    Now what? Would you like the system to create a new row with 1/yellow or change the existing pk=1 row to yellow? Same with the other row.
    Bottom line: The built-in processes dont support this. You can always write your own manual tabular form and implement whatever you logic you wish in your After Submit processes.
    Hope this helps.

  • My G4 powerbook starts up but with a black screen. The reset button does not work. Does anyone know the keys to press on restart please ?

    My G4 powerbook running OSX 10.3.9 starts up with  a black screen. The reset button is not working. Does anyone know which keys to press on restart please.?

    Try holding the shift key while booting to get Safe mode if possible.
    See links for more info.
    http://support.apple.com/kb/ht1564
    http://support.apple.com/kb/ht1455

  • I work for the County and we purchased a copy of Adobe Photoshop CS2 long ago.  The person that did the order is no longer here.  All I have is the CD Disk that is new but i did not know the key code is.  Is there a way to get the keycode for this?

    I work for the County and we purchased a copy of Adobe Photoshop CS2 long ago.  The person that did the order is no longer here.  All I have is the CD Disk that is new but i did not know the key code is.  Is there a way to get the keycode for this?

    It would not work anyway. The activation servers have been retired and Adobe has provided a new CS2 download along with a new serial number for CS2 owners.
    Download Acrobat 7 and CS2 products
    Gene

  • How to get first item of hashMap w/out knowing the key

    Hi
    can someone tell me if there is a way to get first item from a hashMap when you dont know what the key is. as the get method expects a defined 'key'
    reason I am asking this:
    I am using struts 2 UI <s:radio> tag. this tag takes a hashmap and creates radio maps. it has a 'value' attribute and if something is passed to this attribute then that radio button is checked by default. the list that contains radio buttons is created dynamically so i dont know what is actually in the hashMap key's. but i do know that key's are string.
    so just wondering if there is a way to get first item from a hashmap without knowing the key...

    thanks for the quick reply.
    posted in java forums because thought it was a java API/workaround question. gave a little history because i didnt want people to start questioning my use of HashMap for this purpose..
    anywhose..i've found a workaround.
    If someone has a similar problem:
    as the hashmap is being populated dynamically....set a String member of class to contain the first key thats being put in the hashmap. then have struts tag pick up that value.
    also, through your post and reading hashMap api...its usefull to know that hasMaps do not gurantee the order of elements in it. So now I am using a TreeMap.
    Thanks

  • Upgrade ACS V3.2 - V4.0 Tacacs/Radius Key Query

    Hi All
    I am in the process of upgrading my ACS server from V3.2 to V4.0
    I have a Production Server which will be replaced by the New Production Server and A Test Server for upgrading the ACS Database.
    I have successfully upgraded from V3.2 to V3.3 then to V4.0 on my test server.
    My original plan was to upgrade the database with my Test Server and Restore it to my New Production Server.
    just copy the new V4.0 database to the New Production Server and change the ip address to the old servers address.
    However looking through the database there are sections which are hardcode with the test servers hostname.
    This has forced me to rethink my original plan and to use the original servers hostname.
    This also got me thinking what else is hardcoded in the database.
    My question is - When I installed V3.2 on my test server
    Under the Tacacs+ or Radius Key section - do I need to put the same key as the original V3.2 database or will this key change when I come to restore the original database on the test server ?
    I am just concerned that my radius/tacacs clients will not authenticate with the new server when it is put in to production with the new V4.0 database.
    Thanks in Advanced

    Hi,
    The "hard-coded" things will change automatically once the database is restored on the new server.
    The only thing which you woul dneed to take care of is the change in Ip address such that the clients send the request to the right ACS.
    Regards,
    Vivek

  • SEARCH function in Adobe Captivate 8 so that the user can search key words within a project?

    Hi, I am wondering if there is a way to implement a SEARCH function in Adobe Captivate 8 so that the user can search key words within a project?

    Hello again
    Click the slide in the film strip, then examine the properties. You name the slide in the properties. And once you name it, the name should appear below the slide in the film strip, Then when you choose to enable the TOC, what you have there pulls in as shown below:
    If you have already constructed your TOC and wish to change this later, repeat the steps of naming the slides. Then click the Reset TOC icon just above the Settings button in the TOC section of the Skin editor to pull in the new names.
    Cheers... Rick

  • AE Crash trying to get the user 'language' registry key

    This is a strange crash I get just opening all sorts of different AE projects.
    <140735243008352> <ASL.ResourceUtils.GetLanguageIDFromRegistry> <0> Unable to obtain the User 'Language' registry key at: Software\Adobe\After Effects\10.5.1\ Defaulting to 'en_US'.
    It happens on a wide variety of projects just on opening them. Almost all are 720p. but some have footage, others are just PSD or other image files (PNG, JPG). Many of them have trapcode particular 2.1/form 2, but some don't. 
    I have to find another project, open it, and then hope it doesn't cause a crash. If not, then I can go back and open the project that crashed upon opening and it works fine. It may open a few times without problems, and then upon opening it another time, it will crash with the same warning.
    I have a MacPro 2.66 GHz quad-core with 16GB RAM running 10.7.1 with an ATI Radeon HD 4870 card with 512MB of memory.
    Seems rather bizarre to crash on trying to get a language registry setting, so any ideas for correcting this would be most helpful.  Thanks.
    Pete

    I'm having a similar issue with After Effects.  I have Adobe After Effects CS5.5 (v.10.5.1) and it keeps crashing when switching between AE and other programs.  Here's a video of what's happening with mine.
    I don't have any special plug-ins loaded except for what came with the program.  OpenGL rendering is turned on and have tried turning it off to see if it make the problem go away and it doesn't make a difference. 
    Greatly appreciate any assistance I can get on this.
    Computer System
    Dell Precision M6600 Laptop
    Intel(R) Core(TM) i7-2920XM CPU @ 2.50GHz
    16GB RAM
    2GB NVIDIA Quadro 4000M
    Driver Version 285.62
    Optimus is turned off so it's just the Quadro 4000M Card - no Intel HD Graphics in the background
    413GB Free (687GB Total) Primary HD
    200GB Free (250GB Total) D Drive
    Windows 7 64-bit SP1 Professional
    Adobe Master Collection CS5.5 (Website Download)
    After Effects v.10.5.1 Update (Website Download version)

  • How to Unload the form when the user presses Escape Key

    Hi all
    I have tried several triggers for unloading the form when the user presses escape key,but none of them worked. Could any body give the trigger name and the code that unloads or closes the form when the user presses escape key.

    Hello,
    Change the EXIT entry of you ressource file:
    27   : 0 : "F4"             : 32 : "Exit"Francois

  • Just bought an iMac put in password do not know which key to press to get started

    Just bought an iMac, it is setup asked to put in password which I have done now do not know which key to press to get started.

    Mac 101:  Get Started Using A Mac 

  • SCCM 2012 Recover "User State Recovery Key" after Deletion Policy has removed the key

    I have a computer that was upgraded from Windows XP to 7 using SCCM 2012.  The user's info was captured and restored, but found out a month later that some Outlook Archives are corrupt. 
    I had this happen before on a different user, but found out right away and was able to recover the User State Recovery Key and restore the files. 
    I have looked under Assets and Compliance, User State Migration, but the computer is not listed anymore.
    I have done a file restore of the USMT.MIG file from three weeks ago, but can not extract the users files without the User State Recovery Key.
    I have looked through the SQL tables and have only found the StateEncryptDecryptKey in the StateMigration table which will not work. 
    Environment:
    Windows 2008 R2 SP1 SCCM 2012 Server
    Windows 2008 R2 SP1 SQL 2012 Server
    Any help would be appreciated.
    Thanks,
    Wendell

    It worked! Thank you Jason!
    I restored the server's Storage Folder from "State Migration Point" (USMT Folder) from the same date as the SQL database was restored from.  Shut the SCCM server down while doing the SQL restore.  Turned on the Server and was able
    to pull out the User State Recovery Key. 
    Then reverted back by shutting down the SCCM server and restoring SQL database back to previous backup taken before starting.
    Only issue I'm getting now is that SMS_EN_ADSERVICE_MONITOR has a warning
    8400 Enrollment Point AD Service Control failed to read and configure the registry keys necessary for this component.
    With checking everything out to make sure no issues have arised. I looked through the log adctrl.log and found some more errors about Failed to create instance of ADService Managed Component. error = -2147024809
    Any help would be appreciated.
    Thanks,
    Wendell

  • How to show list of items when the user pressed tab key in an empty field

    Hi all
    i would like to know if there is a way to open a form with items list which will be shown to the user when he pressed the tab key within a field for instance "item code" field will present a search form with a table filled with item codes and their description.
    i'm currently working in 2004 version. i know how to catch the event.
    i'm creating a form with a matrix object binded to a datasource which is connected to the data base table which contains all the items.
    what would like to know if there is a better way to this. maybe using buisness partner objects. and if so how
    appriciate the help
    Yoav

    You Should use Formatted Search in this case.
    You must create and associate a query for your field.
    click on the field you want items to be listed and press Shift + F2
    catch the keydown event of this field  and check pval.charpressed = 9 (tab key press)
    then execute
    SBO_Application.SendKeys("+")

  • Cisco 1602i + Authenticating users via RADIUS?

                   Hello,
    Our company recently purchased a Cisco 1602i standalone WAP to replace the WAP4410Ns that we were having issues with.  I am now attempting to configure the RADIUS authentication, as we have a User network and a Guest connection.  The Guest connection works fine, using WPA PSK.  However, I can't seem to get the RADIUS authentication to work.  Reading the documentation has got me a little confused, and I have tried turning on debugging (debug radius authentication, debug aaa) but those show nothing.  Also, in the RADIUS server itself (Windows 2008 R2 NPS), I see nothing in the logs when I try to connect using a device or the "test aaa" command.  Can someone guide me on what I'm doing wrong?  I followed someone's advice on another forum and removed "authentication network-eap" from the SSID (phoenix_2), and now when I attempt to connect with a device it just asks me for a password, it doesn't prompt for a username anymore.  I am very stumped.  Here's the relevant config:
    aaa new-model
    aaa group server radius rad_eap
    server 10.200.5.24
    aaa group server radius rad_mac
    aaa group server radius rad_acct
    aaa group server radius rad_admin
    aaa group server tacacs+ tac_admin
    aaa group server radius rad_pmip
    aaa group server radius dummy
    aaa authentication login eap_methods group rad_eap
    aaa authentication login mac_methods local
    aaa authorization exec default local
    aaa accounting network acct_methods start-stop group rad_acct
    aaa session-id common
    clock timezone EST -5 0
    ip cef
    ip domain name gst
    dot11 syslog
    dot11 vlan-name guest vlan 255
    dot11 vlan-name user vlan 140
    dot11 ssid phoenix_2
       vlan 140
       band-select
       authentication open eap eap_methods
       mbssid guest-mode
    dot11 ssid walker_2
       vlan 255
       band-select
       authentication open
       authentication key-management wpa version 2
       mbssid guest-mode
       wpa-psk ascii 7 0353035E535879191B
    interface BVI1
    ip address 10.200.5.70 255.255.255.0
    ip default-gateway 10.200.5.1
    ip forward-protocol nd
    no ip http server
    ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    ip route 0.0.0.0 0.0.0.0 10.200.140.1
    ip route 0.0.0.0 0.0.0.0 10.200.5.1
    ip radius source-interface BVI1
    access-list 111 permit tcp any any neq telnet
    snmp-server community G!0bal RO
    radius-server attribute 32 include-in-access-req format %h
    radius-server host 10.200.5.24 key 7 01445E510E1C07032A495C0D0B0C011718190D3E2E767863
    radius-server vsa send accounting
    The NPS worked just fine with the WAP4410Ns, not sure why we're having so much trouble with the 1602i. 

    Thanks Rasika, your link worked.  I had the authentication key before, but i removed it while I was trying different things.  My main issue was not applying the list name to the ssid, the documentation did not make it clear that when the radius server is specified using the "radius-server ...." command, that the radius group refers to that command when you configure the group.  Once that clicked, it made sense that the method list name was specifed by the radius group, and that the authentication methods then referred to the radius group.  It was a big question mark in my head how the radius server was applied to the SSID prior to reading your post.
    I haven't tried the "erase startup-config" command yet, I will try that next. 
    Quick question, why are both authentication open and authentication network-eap needed?  I would assume authentication network-eap would suffice, unless the authentication open command refers to the allowed devices and not just authentication via RADIUS?

Maybe you are looking for