User status showing "Expired",But user authentication happening.

Dears,
Some users in ACS (Windows - 2003 Standard Edition) showing status "Expired",Mean while their authentication is getting successful.is there any provision to enable or reset the account to get it enable state ?
Kinldy help me out to clear this please.....!!
Regards,
Rajesh

Hi Jenniffer...thanks for the reply...
This is helpful to reset the user account which in the state of "Account Disabled" State..But the issue what I am facing is "Expired"state.And in error codes of ACS document by CISCO i can see te solution for that is "Create new user".But for my case I can not go for that... because more than 1000 users manually not that much simple.
ACS in Windows - 2003 server platform.Is there any problem with DB or services in server because after resetting the same user account users can do the login and authentication is happening but only issue,status is showing "Expired".
pls go to this link and check 13 entry:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.1.3/troubleshooting/guide/ecodes.html
Regards,
Rajesh

Similar Messages

The invitation status shows 'pending' but no email has been received by the team member.

I have invited a team member to our creative cloud. The invitation status shows 'pending' but no email has been received by the team member. I've canceled the invite and tried a few times. Is there another route?

Please check with another Email ID that if the Email invite is being send.
Check the domain of the person whom you are inviting, it might have some securities attached.
Let us know the status.
Regards
Rajshree

ISE Guest account expired but user still authenticated

I am testing the CWA and noticed that even though the guest account has expired the connection is still up and the switchport shows:
ISEtest3560#show authentication sessions interface fastEthernet 0/2
            Interface: FastEthernet0/2
          MAC Address: 001d.09cb.78bd
           IP Address: 10.2.8.31
            User-Name: [email protected]
               Status: Authz Success
               Domain: DATA
      Security Policy: Should Secure
      Security Status: Unsecure
       Oper host mode: multi-auth
     Oper control dir: both
        Authorized By: Authentication Server
           Vlan Group: N/A
              ACS ACL: xACSACLx-IP-GUEST-524448ff
      Session timeout: N/A
         Idle timeout: N/A
    Common Session ID: 0A0003E60000004009EEE336
      Acct Session ID: 0x00000380
               Handle: 0xC2000040
Runnable methods list:
       Method   State
       dot1x    Failed over
       mab      Authc Success
I would have thought that when the account was no longer valid the switch would have gone back to its default state. Also on the legacy NAC you could see the guest accounts as a local account, when we create a guest account throught the sponsor portal we don't see it in the Guest Identity group. We are looking @ that group for within one of our authorizational profiles.
Thanks,
Joe

I put the command authentication timer reauthenticate 60 on interface fa0/2, setup a guest account that was restricted to 1 hour. The guest account has now expired but the interface still shows authenticated:
ISEtest3560#show authentication sessions interface fastEthernet 0/2
            Interface: FastEthernet0/2
          MAC Address: 001d.09cb.78bd
           IP Address: 10.2.8.31
            User-Name: [email protected]
               Status: Authz Success
               Domain: DATA
      Security Policy: Should Secure
      Security Status: Unsecure
       Oper host mode: multi-auth
     Oper control dir: both
        Authorized By: Authentication Server
           Vlan Group: N/A
              ACS ACL: xACSACLx-IP-GUEST-524448ff
      Session timeout: N/A
         Idle timeout: N/A
    Common Session ID: 0A0003E60000004F1EAC0F55
      Acct Session ID: 0x000004B4
               Handle: 0x0D00004F
Runnable methods list:
       Method   State
       dot1x    Failed over
       mab      Authc Success
I assume that the value for the command is in seconds, correct?
Thanks,
Joe

User status shows active in portal for inactive LDAP users

Hi all,
Users listed in the LDAP as deleted or inactive are still listed in EP
User Management as valid active users.
1) is there any process or OSS note which can help us to get users
inactive in portal user management to the corresponding LDAP inactive
users?
2) is there any chance that any inactive or deleted entries in LDAP
should not be searchable from User admin Portal search?
Any solution for the above problem?
Please reply.
Regards,
haroon

Hello there,
i have the same problem: We have several domains that sometimes contain users with the same user-id. This happens, if a user is "moved" from one domain to another: A new user with the same user-id is created in the new domain and the user-status of the user in the old domain is set to "inactive".
But SAP NetWeaver Portal (7.0 EHP 1) ignores this user-status flag and thus login (with SPNego / Integrated Windows Authentication, which does not send the domain of an identified user to the portal) fails.
Is there a possibility to get the portal to "ignore" LDAP users (meaning no longer list them in the UME) that have their user-status flag set to "inactive"?
Thanks for a reply in advance!
Regards,
René

Schema status shows expired & locked

Hi Pros,
I want to know if the status of schema user shows "EXPIRED & LOCKED" does it mean that the is schema used for a particular feature used in a Enterprise or standard edtion is Disabled?
Example
Schema(MDSYS,MSDATA) show EXPIRED & LOCKED- Is Feature is disabled?
The above schema is for Oracle spatial which we dont use.
The status in DBA_registry shows valid for Oracle spatial
How to check a feature is been used in oracle?
Thanks for your responce in advance.
Regards
Anto.

First Thanks for your quick response.
Secoundly I just want to sum it up,
For example MDSYS shows up in the dba_users list showing "EXPIRED & LOCKED" it means the feature is installed and using "dba_feature_usage_statistics" view check if it is currently in uses and it shows "expired and locked" for security purposes- THATS GOOD info
So to uninstall the feature can i just drop the schema or use the help from Doc ID:472937.1 to uninstall the feature.
AM I RIGHT?
Thanks Everyone.Everyone combined and gave a really good response.Really appreciate it.I need this info for a big problem i am posting for DOWNGRADE EDITION from EE to SE. Try to help me on that too.
Regards
Anto.

Dirsynced user not showing as mail user in Office 365

Hello,
We have an environment that has a on premise Exchange 2010 SP3 server. We have created the hybrid configuration with Office 365. Directory Synchronization is enabled.
At this point we have some on premise users that are showing "Synced with Active Directory" in the O365 portal, but do not have a mail user.
We are in the midst of performing mailbox migrations to Office 365, and the only way to perform the move to Exchange online is for the user to have a Mail user setup in Contacts on the O365 portal.
Ive seen other forums with the option of Remove-MsolUser and removing from recycle bin then allowing another synchronization from on premise.
Ive also read that Microsoft has helped this situation by doing something to the AD Attributes which they do not go into detail about.
Could someone shed on some light to what could be done to add these users as Mail Users to Office 365 without removing them from Office 365 completely?

Hi B Penney,
I helped a customer some time ago with the same problem and in their case, mailboxes had been created because they gave the synced users an Exchange Online License before they had a working Hybrid configuration setup.
Just deleting licenses did not solve the problem and what I did to solve the problem was:
Get-MsolUser -UserPrincipalName [email protected] | Remove-MsolUser
Get-MsolUser -ReturnDeletedUsers -SearchString
[email protected] | select UserPrincipalName, ObjectId
Remove-MsolUser -RemoveFromRecycleBin -ObjectId 41856197-e306-46c5-9cab-41dddbdafec7
Modified an attribute on the user On-Premises and ran Start-OnlineCoexistenceSync
Martina Miskovic

WCS Alarm Status shows green but LAP is unplugged ?! Oper Staus shows Down

Hello,
we are operating a Cisco WLAN environment with 1242 and 1131 LAP. Some of them have been converted from AP to LAP.
Now we took some LAP off the wall.
They are now packed in a box in our storage room.
But the WCS is showing a green Alarm Status for these LAP and as Oper Status Down.
How can that be ?
Is there a way to fix this problem, because we want to see the Alarm Status in Red.
Thx for all your input.
Best Regards
Christian

This is very interesting. If I try to put myself in the WCS developer's shoes, I think:
- if you get an alarm for missing AP, then acknowledge the alarm, WCS has no reason to re-display the same alarm. This is precisely what Acknowledge is for, to say "don't bother me with this issue anymore".
- Even if you manually remove the AP from WCS, it clearly keeps some memory of it, at least for a while. This is something you can clearly see if you run a report of any kind, WCS has to keep track of objects even if you remove them.
My suggestion would be:
- Unacknowledge the alarm, then delete it... acknowledging an alarm is probably not the best way to deal with removing an AP. You would use Aknowledge for alarms such as "your neighbour AP keep being detected as rogue, you can't remove your neighbour AP but don't want to hear about this warning anymore." You acknowledge the alarm, WCS keeps it in its database and remembers NOT to bother you with it anymore (exactly what happens in your case).
For an AP you remove, I would not acknowledge the alarm, but simply delete it after having removed the AP. This removes the alarm from the WCS database.
If you ever re-plug this AP to the network, WCS may remember it, but any new alarm about it will display.
Hope it helps
Jerome

Ichat user details showing as "another" user

I have a MacMiniServer 10.8 that is running the Address Book for my company
I have a shared AddressBook that all users access for all Company data
Several of my users have been complaining that their iChat "User" name was being displayed as another member of staff.
I have had them set their own "My Card" details to themselves.
This then changes their own display name shown in iChat.
However this then affects another member of staff.
Then changing that member of staffs "My Card" changes either the original user or someone else.
It does not seem to affect all users.
I have tried getting users to create a "Local" Vcard in AddressBook and set "My Card" to that, but it is still affecting other users.
Sometimes the users have a Local and a Networked address book entry both showing as "Their" card at the same time.
Has anyone any experience of this and advice of how to stop this behaviour
I asked this question under ichat "discussions" and was advised to ask it here also
Regards Tony

Hi
enter their details (including
credit card details) directly without logging in (is
this bad practice?).I would not say this was "bad practice" as most sites where people pay for items by credit card are public. They do however use Secure connections to ensure that the data being sent to the server is protected.
I will need to look into this further to try and figure out a way to kill the session, or at least mark it as old. However as a work around you can always clear the cache for items on the page. This will reset the values of the items. Create a Process to clear the cache after you have done all your other processing. This way at least if someone else visits the site using the same session id, there will be no data visible to them.
PS. I would disable the ability for users to enter financial details in your app until this is fixed, as I personally would not be too happy that my card details could potentially be visible to anyone with the correct knowledge!!
Chris

My status is expired, but my payments is ok, every month....

hello, good morning
I'd like know why my sign Creative cloud is expired.
I payed every month and I don't stopped to pay, but I can't use the creative cloud....

Does your Cloud subscription properly show on your account page?
If you have more than one email, are you sure you are using the correct Adobe ID?
https://www.adobe.com/account.html for subscriptions on your Adobe page
If yes
Some general information for a Cloud subscription
Cloud programs do not use serial numbers... you log in to your paid Cloud account to download & install & activate... you MAY need to log out of the Cloud and restart your computer and log back in to the Cloud for things to work
Log out of your Cloud account... Restart your computer... Log in to your paid Cloud account
-Sign in help http://helpx.adobe.com/x-productkb/policy-pricing/account-password-sign-faq.html
-http://helpx.adobe.com/creative-cloud/kb/sign-in-out-creative-cloud-desktop-app.html
-http://helpx.adobe.com/x-productkb/policy-pricing/activation-network-issues.html
-http://helpx.adobe.com/creative-suite/kb/trial--1-launch.html
-ID help https://helpx.adobe.com/contact.html?step=ZNA_id-signing_stillNeedHelp
-http://helpx.adobe.com/creative-cloud/kb/license-this-software.html
If no
This is an open forum, not Adobe support... you need Adobe staff to help
Adobe contact information - http://helpx.adobe.com/contact.html
-Select your product and what you need help with
-Click on the blue box "Still need help? Contact us"

2010 a1286 will not turn on. Magsafe will show charge but nothing else happens

I have a Macbook Pro 15” from September/October 2010.
On Saturday when I opened it up (it had just been on sleep for the last week) it showed a dulled screen and the big wheel as it normally would to load everything up again.
Then the screen went black and there was no sign of anything. I tried switching it on again but nothing.
Left it charging over night and still nothing.
When I press the battery indicator light on the side there is one flashing green and then nothing else.
I have an appointment with Milton Keynes Apple store on Saturday morning for it to be diagnosed.
I am hoping it is just the battery needing replacing (but when I have it plugged in the green light shows on the magsafe connector).

A lot of MacBook Pro's from mid-2010 have an issue with the graphics card: http://support.apple.com/kb/ts4088
So there's a real chance that repair won't be as easy as replacing the battery...

USER STATUS at Activity Level

I do have user status defined for Activity and it doesn't show up when i set the status. All i see is SYSTEM STATUS and not user status. To see user status i need to click the blue button (with I symbol) and then see it. Why is this happening like this?
But at Network Header level & WBS level i see both USER STATUS & SYSTEM STATUS.
Any info will be a great help

Hi,
I think WBS and Network are controlling objects in SAP. Activty is related to execution. This may be the reason why SAP has provide detailed ie user statuses at WBS and network level only.
In my opinion you cant achieve this in standard SAP, you may have to for devlopment of customised screen. User exit CNEX0008 will help you.
Regards

Lobby Ambassador Managment of Users that have expired.

Hi there all :)
When you set users up on LA and you set a user to a "controller list", the entry on the listing always shows the account as active from the front menu even if the time has expired.
You then go into the account and you can see the date has expired, and if you test the account, yes, you cant login.
Is this a bug?
I am running WCS version 4.2.62.11.
Also, I would like a function on LA to allow me to delete all expired users in one go. Is this possible?
As the above indicates that the users is not expired but active, at the moment, you have to go into every account, check the expiry date and then delete the account one by one.
Painful?
Many thx indeed,
Ken

Hey Ken,
Is it time for a beer yet??
In answer to your first question, I think you are seeing this bug;
CSCsk17497 Bug Details
D3WCS:lobby ambassador-guest user account expiry not shown clearly
Symptom:
After successful scheduling the Guest account, the detail page for the created account doesn't show the expiry time details.
Conditions:
This condition arrives only when the browsed account is the scheduled account.
Workaround:
The detail page has the 'start' and 'end' time selection, which can be used for the expiry detail.
Further Problem Description:
Status
Fixed
Severity
3 - moderate
Last Modified
Any Time
Product
Cisco Wireless Control System
Technology
1st Found-In
4.2(47.0)
Fixed-In
5.0(28.0)
Hope this helps bud!
Rob

Purchase Order has approved but Status show as Unapproved

Dear All Experts,
I have a Purchase Order need to go throught approval procedure. The Purchase Order has approved by user and add into system and printed out. When second time, open the same Purchase Order, the status show "Unapproved" but the Purchase Order windows header name show Purchase Order [Approved], this make user unable to copy to GRPO. I have try to restore stored procedures in SAP B1, it does not make any changes. The user is using SAP B1 2007A SP0 PL49. Please Advise.

Hi Angie
the purchase order once approved has to be added on to the system after approval if u say that u have added the purchase order after it got approved then that seems to be a concern for that u need to contact ur sap partner or if u are a partner then u need to get in touch with sap to resolve the isssue as it could be because of problem with ur database
but before that please be sure off that u are using the correct way and have sucessfully added the documnt apon approval.
Regards,
Manish

Use of user status and business actions

Hi all,
I'm new at status profiles, user status and business actions.
Currently we are using status profiles and user status for orders - but business actions aren't assigned to the user status. In a project I should evaluate whether we can use those business actions.
After reading a lot of documentations there is still one question left. What are the business-actions for and how can I use them?
Let's say I've a status profile with following user status with according business actions:
- status: new;   business action: to progress
- status: in progress;   business action: to confirm
- status: confirmed;   business action: decline or close
- status: closed;   business action: close
What happens when a user sets the status of an order to "confirmed"? Will be done additional checks for my order? - If yes: Wich checks will be done and exists there an API to effect these checks or to implement additional checks?
Regards,
Christian

Christian;
If you´re wanting to speak about Status Profile in OP. You can execute whole theses steps in T-code BS02, when in this IMG:
1. Enter a Status Profile.
2. Assign the status profile to an Object Type.
3. Define the User Status.
4. Assign Business Transactions to user statuses.
5. Translate the status profile and user statuses.
You can also to use this function to simulate the status development for a particular object.
To do this, select a status profile and branch to the screen "Allowed Object Types". Then place the cursor on one of the object types.
Using the function Extras -> Status simulation, you can simulate the status changes that could be caused by performing various business transactions, or by changing the staus manually, during the lifetime of the object concerned.
You can also branch directly from simulation to status maintenance for the object concerned, to display information on which transactions are allowed or disallowed in the current situation.
The log function records all the changes you simulate and allows you to navigate freely to see what effects these are having.
Status profile info
Using the function Extras -> Status profile info, you can display a list of all the entries you have made for a particular status profile. The list is structured as follows:
The first block contains the permitted object types.
The second block contains the user statuses.
The third block contains the following information for each user status:
which transactions it allows
which transactions it allows with a warning
which transactions it disallows.
I hope help to you
Regards
Luciano Nobrega

Relation between user status & system status in maintenance notification

Hi experts,
I have maintained some user status in notification.My requirement is to block NOCO for notification until & unless user status "accepted by production" is set ,I have tried by putting "complete notification" as forbidden against the same user status"accepted by production" & check "set" button. Still system is allowing me to set "NOCO" even though I have not set user status as accepted by production, but after NOCO , user status is coming as accepted by production.
How can I block to do NOCO if user status is not set as "accepted by production"?
thanks in advance.
rgds
rajib

Hi
I have 4 user status prior to this user status "accepted by production"& in all these 4 user status I have put "forbidden", "set" & in "accepted by production" user status I have put "allowed" for "complete notification" business functionality .System is not allowing me to do NOCO for the 4 user status, but when I am manually keeping the user status "accepted by production", system should allow me to do NOCO which is not happening.It is throughing error message no-IM259,as mentioned below-
Diagnosis
This refers to an error in central status management.
Procedure
Please refer to your system administrator
Pl suggest how to resolve this issue
rgds
rajib

User status showing "Expired",But user authentication happening.

Similar Messages

Maybe you are looking for