Users with same configurations - one has access not the other

Hi all,
I have a real mysterious problem.
On the same computer, installed with "Cisco VPN Client v5.0.07.0410", one user can connect to the VPN and not the other. Both users uses the same Dynamic Access Policies on our ASA firewall. We are certain that the users entered the correct name and password. But one can enter in our network and the other gets an "Authentication failed" message directly in the "User Authentication" window.
Has someone an idea to help us solve this problem ?
I provide you here a log file of the problem (IKE.log level 3), if you think you need an other, please ask.
In this log, I have the feeling that the cause (and maybe the solution) is around event 293, but......not sure.
Thanks in advance

Hi Balthazer,
Please send us the following outputs from the ASA. Run a conditional debug for the specific user who is facing the issue.
debug crypto condition [username string]
debug cry isa sa 200
deb cry ips sa 200
Also, you have mentioned that you are using DAP policy. Can you share the DAP policy with us.
Regards,
Abhishek Purohit
CCIE-S- 35269

Similar Messages

Problem with WiFi on one netbook but not the other

I have a curious problem in that I am able to connect and browse via the wireless network on one netbook using the home hub no problem, but another netbook connects the wireless network but does not allow me to browse. Curiously it works no problem on ethernet. The netbook with the problem is running Windows 7 Home Pro with Microsoft Essentials as the AV protection. The netbook without the problem is running Windows XP Home Pro with AVG.
I have tried all sorts from rolling back Windows updates, reinstalling the wireless device drivers, refreshing/flushing dns and various command prompts but nothing seems to work.
I took the netbook away and tried connecting to another wireless network and it worked straight away no problem which leads me to believe it is a dns issue with the BT connection on my netbook.
I have enclosed the IPCONFIG for both the wireless and ethernet connection in case anyone can spot anything and make suggestions...
Microsoft Windows [Version 6.1.7600]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.
C:\Users\Samsung>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : Samsung-PC
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
Wireless LAN adapter Wireless Network Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8192E Wireless LAN
802.11n PCI
-E NIC
Physical Address. . . . . . . . . : 00-26-B6-86-AA-8C
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::d578:aa58:5b09:e6a5%16(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.64(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 03 November 2012 09:18:19
Lease Expires . . . . . . . . . . : 04 November 2012 09:18:19
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.254
DHCPv6 IAID . . . . . . . . . . . : 285222582
DHCPv6 Client DUID. . . . . . . . :
00-01-00-01-17-E0-DE-2A-00-24-54-3B-6C-E9
DNS Servers . . . . . . . . . . . : 192.168.1.254
192.168.1.254
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Bluetooth Network Connection:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Bluetooth Device (Personal Area
Network)
Physical Address. . . . . . . . . : 0C-60-76-FF-A0-3B
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek PCIe FE Family Controller
Physical Address. . . . . . . . . : 00-24-54-3B-6C-E9
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::5964:d9f5:c44:93d7%11(Preferred)
IPv4 Address. . . . . . . . . . . : 192.168.1.71(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Lease Obtained. . . . . . . . . . : 03 November 2012 09:19:31
Lease Expires . . . . . . . . . . : 04 November 2012 09:19:31
Default Gateway . . . . . . . . . : 192.168.1.254
DHCP Server . . . . . . . . . . . : 192.168.1.254
DHCPv6 IAID . . . . . . . . . . . : 234890324
DHCPv6 Client DUID. . . . . . . . :
00-01-00-01-17-E0-DE-2A-00-24-54-3B-6C-E9
DNS Servers . . . . . . . . . . . : 192.168.1.254
192.168.1.254
NetBIOS over Tcpip. . . . . . . . : Enabled
Tunnel adapter isatap.{7C28E484-E7CB-44B8-A9E7-1F985D74D99A}:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Microsoft ISATAP Adapter
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Teredo Tunneling Pseudo-Interface:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes

Wireless connections are classed as public by default, so file sharing and network discovery is disabled.
You have to change your wireless connection so that it is in the Private network classification.
I cannot remember how to do this, as its a while since I played around with a Win 7 or Vista laptop.
Any settings only affect the actual wireless connection you change, so if you access public wifi, then that will be classed as a public network, and file sharing will be disabled.
Ethernet connections are usually assumed private.
I am sure a Google search will tell you more, if its not in Windows help.
There are some useful help pages here, for BT Broadband customers only, on my personal website.
BT Broadband customers - help with broadband, WiFi, networking, e-mail and phones.

Video chat with audio on one end but not the other!!!

Hey Everyone,
My friend and I have been video chatting lately and have encountered a kind of peculiar problem. We can both see eachother without a problem, and I can hear her just fine, but for some reason she cannnot hear me! The really strange thing is that when we initiate just an audio chat we can both hear eachother fine, which seems to eliminate the possibility of some preference setting somewhere being the problem. We're both using MacBooks, her ISP is Comcast cable, and my ISP is Hughes Net Satellite (formerly known as Direcway). Here's what we've both tried so far:
1. Setting our QT streaming speed to 1.5 Mbps
2. Setting our iChat Video Bandwidth limit to NONE
3. Making sure volume was up, no headphones plugged in, and that everything was as it should be in System Preferences>Audio
4. Making sure Microphone is enabled under iChat>Video
Any thoughts on why this is happening or how to fix it would be greatly appreciated!
Thanks,
David

Hi,
It may well be the Comcast end.
Try rebooting the modem.
6:46 PM Sunday; August 19, 2007

"No connectivity with the server" error for one document but not the other, in the same document library

We have a number of users all of a sudden getting "No connectivity with the server. The file 'xxx' can't be opened because the server couldn't be contacted." errors trying to open MS Office docs (Word, Excel, etc.) in SharePoint with IE,
just by clicking the link and selecting the "Read Only" option. If they select the "Check Out and Edit" option, they can open the document no problem. One of my customers gets the error on one document but not the other, in
the same document library! The older document (a weekly report) was copied and renamed as per standard procedure. She can read the older document, but not the new one.
It is definitely a profile issue, as other people have logged onto the machines of the users with problems and do not get the error. We have also renamed people's c:\user profile folders and the corresponding Profilelist registry entry and the newly
created profile does not experience the error for these people. Renaming the profile back restores all their personal settings but the error reappears. When we copied the old profile's folder structure into the new profile, many of the user settings
were restored (but not all, like Dreamweaver settings) but the error did not appear. We think that the system folders files (like AppData) weren't totally copied over so we're going to run another test using xcopy. We are rebooting between
logons to make sure all files are unlocked.
The laptops and computers are mainly 32bit, Win7 Enterprise running IE9 and Office 2010 Professional Plus, but there's a few 64bit machines as well. The SharePoint farm has 1 WFE, 1 App Server running search and CA, and a shared database server running SQL
2005 SP4. SharePoint is 64bit MOSS 2007 with the latest CU.
We've checked the logs on the client as well as on the server and there aren't any helpful entries. We've also run Process Monitor, also with no helpful entries. We're planning to run something like Fiddler next.
It's not everyone, because there are many people are accessing the SharePoint system and the same files. It is also not a permission thing, as we've tested by giving the users elevated permissions with no changes. One person experiencing
the errors is a Site Collection Admin. That same person ran a test where I coped a simple Excel file into a Document Library which contained a problem file. They were able to open it Read Only no problems that day, but the next day, the same
file gave them an error. In their case, they usually get a "xxx is not checked out" error and only occasionally get the "No connectivity with the server" error.
We've tried lots of things including:
Deleting IE cache
Deleting SharePoint Drafts and webcache folder contents
Running IE without add-ons
Upgrading and Downgrading IE
Uninstalling and re-installing IE
Reinstalling our SSL certs
Repairing Office
Removing and then adding back in the Microsoft Office "Microsoft SharePoint Foundation Support" Office Tool
Deleting all HKLM and HKLU Office registry settings
Toggling IE Compatibility Settings
Toggling the IE Automatic Logon option
Toggling the location of checked out files
Adding the site in the trusted sites list
Adding the site to the WebClient\Parameters registry locations
Making sure the WebClient service is started
Rebooting the machine (lol :)
This is becoming a serious issue, not just because of the inconvenience for the users having to check out every document they want to read, but we have some files with macros that open up other documents to run which are now failing. There aren't
"check out" workarounds for some of those macros.
We're planning to open a ticket with Microsoft, but I'm throwing it out here first in case someone has run into this before, or may have some suggestions on what to try next. Thanks!
-Richard.
PS I think this needs to be in the "General" forum instead?

It took three days of dedicated troubleshooting, but I have found the cause of the errors, and a couple of fixes. It helped tremendously that my own machine was throwing the error. I have scheduled a couple of users to work with me to test the
various fixes, to see which one works best, so the story isn't over yet.
I had backed up my c:\users profile folder and HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList registry key so I could restore my profile after I was done. I made a copy of the profile folder and was using that for awhile,
but then made another copy where I had deleted a lot of content out of it so that the copies would go faster. Since a newly created profile did not have errors, I was trying to copy back as much of the profile as possible to make it easier for our users
to get back to work. Instead of blowing away their profile and starting from scratch (which we know worked) I wanted to narrow down what was causing the error and just skip that from the restore. The concept was to keep as much as the users profile
in tact (application settings, etc.) not just restoring their desktop and My Documents folders.
When we first tested a few weeks ago, simply copying the folder contents didn't reproduce the error. I then tried xcopy, but got the "can't read file" error. Then I tried robocopy, and ran into the "junction" problem.
I went back to xcopy, and found that placing the excludes.txt file in the windows/system32 folder eliminated the error.
So the process went as follows:
Reboot and log into the machine as another user
Delete the profile and associated registry key
Reboot and log into the machine as the affected user, creating a new profile, and there is no error
Reboot and log in as the other user
xcopy the contents of the skinned-down backed-up profile to the newly created profile
Reboot and log in as the affected user, and the error occurs
Repeat the above, but add items in the excludes.txt file to see what, when eliminated, causes the error not to appear in the last step
I eventually found that skipping the c:\users\<profile folder>\appdata\local\Microsoft\office\14.0 folder allowed the entire profile to be copied over without the error occurring. That was strange, because we've cleaned out the cache folders
before which didn't fix the issue.
So I went about it the opposite way, and tried to delete the 14.0 folder from the restored profile, and after reboot, the error still occurred.
What eventually worked was deleting the 14.0 folder and copying over a 14.0 folder from a newly created profile!
One way to do this was to:
Reboot and log in as another user
Rename the c:\users profile folder
Rename the appropriate [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList] registry key
Reboot and log in as the affected user, confirm that there is no error
Reboot and log in as the other user
Copy the C:\Users\<profile folder>\AppData\Local\microsoft\Office\14.0 folder to the other user's desktop
Delete new profile folder, and rename the backup to be the production folder
Delete the C:\Users\<profile folder>\AppData\Local\microsoft\Office\14.0 folder and then paste the 14.0 copy from the desktop
Reboot and log in as the affected user, confirm that there is no error
We've tried this on a couple machines and it works. I had to run Windows Explorer as Administrator to access the other profile's folders.
We've also successfully copied a 14.0 folder created by one profile on one affected computer over another profile's folder on another computer, eliminating the error, so we're trying that first, as that is fewer steps.
We may attempt to script this, but the self-help instructions are only 5 lines long:
Reboot and log into the affected computer with another account
Go to <link to location of 14.0 folder on network> and copy the 14.0 folder
Run Windows Explorer as Administrator
Go to c:\users\<profile folder>\appdata\local\microsoft\office and delete the 14.0 folder, and paste the copied 14.0 folder (trying to overwrite it makes Win7 want to merge the folders)
Reboot and log into your normal account, and confirm the error is gone
I'll come back and report after we go into the field with this fix, but after the few tests, I am cautiously optimistic that this is it.

Encrypted message on one Mac, but not the other, from same server

I run Mail.app on two Macs, both getting mail off the same Exchange server. Multiple times in the last few weeks, a message will download to one Mac and be fine, and then the other Mac will retrieve the message, and it will suddenly be encrypted. Before a bunch of garbled text, something like the following always appears:
--000_25539419161D7744ABC322B480ED5DA507650F7Acmhprdexc04netj
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
If you go to Webmail on the server, the message reads fine. And it is readable on the other Mac. I tried going to View/Message and choosing "next best alternative" but those options are grayed out. Could there be anything else set locally that is making the email unreadable on one machine but not the other? The unreadable version is always on this Mac (a Mac Mini) and not the other one (a MacBook), even though both are running the same OS version and Mail.app version.

Navigate to your Applications folder.
Right Click on iTunes and select Show Package Contents.
Navigate to Contents/MacOS/
Double-click on iTunes Helper(to get it running). This allows iTunes to start when you plug in your iPhone.
Open System Preferences and go to Users & Groups.
Select the Login Items tab to view the list.
Drag iTunes Helper from the Finder into the Login Items to get it to run at login.
Delete it from Login Items on the Mac you don't want it to start iTunes on.

When printing from aperture my margins are unequal, even if i set my margins they come out bigger one side and not the other. i am using a macbook pro running osx lion and printing with a canon pro 9000

when printing from aperture my margins are unequal, even if i set my margins they come out bigger one side and not the other. i am using a macbook pro running osx lion and printing with a canon pro 9000.
please can anbody help or advise?

You didn't mention any color calibration being done on your monitor. This is an essential part of any color-correct workflow. What are you using to calibrate your monitor (and your printer)?
Print profiles (for soft-proofing as well as printing) are for specific combinations of paper & printer. The nine you have are each, most likely, for a common paper (perhaps mfr'd by Canon) to be used with your printer.
I don't know what you mean when you say "I choose a high standard print option".
Have you read the User Manual chapter on printing?
Printing Your Images
There is also a good appendix on calibration:
Calibrating Your Aperture System

"printer is offline" appears on one computer but not the other (both windows 7)

printer is offline" appears on one computer but not the other (both windows 7)

This is pretty common to see when your firewall kicks in and blocks certain communication paths the printer takes.
Here's a list of ports and programs that when allowed through the firewall, will restore communiction.
Ports to open:
UDP ports: 427, 161, 139
TCP ports: 9200, 9220, 9290, 9500
Programs to allow:
hpiscnapp.exe
hpoews01.exe
hpofxm08.exe
hposfx08.exe
hposid01.exe
hpqkygrp.exe
hpqste08.exe
hpqtra08.exe
hpznui01.exe
hpzwiz01.exe
SLP_Service (also known as UDP 427)
Have your security software provider walk you through allowing these items through your firewall.
If this does not fix your issue, it is most likely an issue with the driver configuration. Your router may have assisgned the printer a new IP address and this can be changed in the properties of the existing driver.

Why is home sharing showing up on one computer but not the other?

My homesharing is showing up on one computer but not the other! They are both under the same account and both iTunes are up to date. Unfortunatally, of course its showing up on the computer that I dont need it on. Please help me! Thanks!

It could be a firewall issue. Try disabling the firewall and see if that helps.

My ipad screen won't turn one way when I turn/bump my ipad (will do one side but not the other)

My ipad screen won’t turn one way when I turn/bump my ipad (will do one side but not the other)

Yes there is a rotation lock setting.
First try the switch above the volume rocker. If that doesnt work then double click the home button. It should display a multitasking bar at the bottom of the screen. Slide that to the right and it should display a few settings including screen lock. Make sure that it is unchecked.

Why does wireless work for one laptop and not the other?

I have two laptops:
1) MacBook: 10.4.8, Airport Exteme (Firmware 1.0.46)
2) G4: 10.3.9, Airport Extreme (405.1 (3.90.0.p18)
I have the two machines sitting right next to each other in my apartment. Machine #1 has full wireless signal strength. Machine #2 barely has any wireless signal. Neither is running Interference Robustness. Any ideas why one would work and the other would not, or suggestions as to how to debug this problem?
I have tried stopping and restarting the Airport Extreme card on machine #2. I have also tried power cycling machine #2. This does not fix the problem.
A little more history: for a long time I was having problems with machine #2 dropping the wireless connection. As part of trying to work around these problems I turned on Interference Robustness on machine #2. This fixed the dropping signal problem, but left me with weak signal strength. I shut off Interference Robustnes but ever since then the signal has still been weak on machine #2.
Mac Mini Duo 1.66 GHz, 2 GB Mac OS X (10.4.6)

The base station uses a single channel which all clients must use to connect.
Have you checked the antenna connection into the card? Many people are surprised about how far the wire is actually supposed to be pushed into the card. Compare the connection with the photos in KB 108039, Properly attaching the antenna on an AirPort Extreme Card.

IPhone 5 wifi works in one room but not the other.

I have an iPhone 5 and the wifi is unreliable. It works in the room with the router but when I walk down the hall it doesn't work. I'm talking 20 feet away. So frustrating because the phone is almost worthless. Why would it connect but only in such close range? No other devices have this problem. Yes, I've turned the wifi on and off. Yes, I've restarted the router. Yes, I've checked the WEP. It just makes no sense that it would work in one room but not the next room. Help!

Hello Gnpco,
Thanks for using Apple Support Communities.
For more information on this, take a look at:
Wi-Fi and Bluetooth: Potential sources of wireless interference
http://support.apple.com/kb/HT1365
iOS: Troubleshooting Wi-Fi networks and connections
http://support.apple.com/kb/TS1398
Be sure you're in range of your Wi-Fi router (access point).
Tap Settings > Wi-Fi and turn Wi-Fi off and on. If your W-Fi setting is dimmed, follow these steps.
Restart your iOS device.
Tap Settings > Wi-Fi and locate the Wi-Fi network to which you're connected.
Tap and Forget this Network.
Try to connect to your desired Wi-Fi network.
Note: You may need to enter your Wi-Fi password again if your network requires one.
Turn your Wi-Fi router off and on2. If your ISP also provides cable or phone service, check with them before attempting this step to avoid interruption of service.
Update your device to the latest version of software.
Update your Wi-Fi router to the latest firmware2. For AirPort Base Stations, install updates using the AirPort Utility.
Best of luck,
Mario

Airdrop works one way but not the other?

There are two Macbook Airs in my house, both new models (one 13" the other 11"). Airdrop appears to work from the 13" to the 11" but not the other way around. The error message in the console is:
29/07/11 11:09:49.684 PM Finder: WormholeClient::didFail(kCFErrorDomainCFNetwork, -1200, "An SSL error has occurred and a secure connection to the server cannot be made.")
I've tried logging in to another (new, clean) user profile to see if there was some kind of conflict going on, but that didn't make a difference.

It's the firewall settings. It seems like a bug, because in the firewall I had Finder set to allow all incoming connections.
Do the following:
- System Preferences, Security, Firewall, Advanced settings
- Remove the entry for Finder by selecting it and press the minus button
- Check allow signed software
- Uncheck block all
It's working for me now.

Home sharing library loads on one computer but not the other

I have turned on Home Sharing (using the same account for both) on two computers. One of them loads the other's library, but the other either continually says it is attempting to load, or immediately reverts back to the normal Music library screen.
I have spent several hours searching the Internet to find suggestions but nothing seems to be working:
I have downloaded the newest version of iTunes
I have tried setting up a new account, de-authorising the computer on all accounts except the new one
I have turned off the sharing located under the Preferences tab
I have made sure that iTunes is not blocked by a firewall
I have checked that the Bonjour service is running
I have tried turning everything off and starting all over again
I would welcome a new solution! Thank you!

It could be a firewall issue. Try disabling the firewall and see if that helps.

Iphoto shows two photo libraries with the same name, one in small letters the other in all capital letters. they both open the same library and the only one in my computer. How do delete the capital letrs one as the one in the pictures folder is in

In my iPhoto application when I select switch libraries It shows 2 libraries with the same name, but one has the name is in Capital letters.
They both open the same library which is in the Pictures folder. This is the only library I can see and the name is not in capital letters?
How do I get rid of the one in capital letters

What is your iPhoto version?
when I select switch libraries It shows 2 libraries with the same name, but one has the name is in Capital letters.
In the Library Chooser Panel look for the pathes to the two duplicate libraries. You will see the location of the libraries in the path bar at the bottom of the window when you select one of the libraries. Does it show both libraries in the same folder?

File sharing works with one xp machine, not the other

Hi folks, I just switched over to Mac! So far so good with my new macbook. I have two identical gateway xp machines. Strange thing is, the macbook connects perfectly to one of the gateways for file and print sharing, but cannot connect to the other. In finder the name of the computer appears under "shared", but when I click on it, after attempting to connect, it says "connection" failed. For the xp machine in question, I have run the home networking "wizard" and have used trouble shooter. The computer has a unique name on the network, and the directories have been set for sharing. I've tried removing the firewall--though the firewall is instructed to permit networking. So, what can I do? Thanks everybody.

Interesting.
On the troublesome XP box, set the permissions for your shares are set that "everyone" can read the share. (No need to give write access).
I am assuming that you are using XP Pro and staying away from "Simple File Sharing".

Users with same configurations - one has access not the other

Similar Messages

Maybe you are looking for