VLAN depend on user credentials

Hi all
We have plan to implement Cisco WiFi controller 2504 with APs 1602.
In the network there is the ACS server.
The goal is to authenticate users, and depend on users credentials AP/WLC will deploy appropriate VLAN.
For example
Guest user will be pushed in the VLAN100, corporate users will get VLAN 10...
Does it possible with equipment we have/will have:
ACS server
WLC: AIR-CT2504-50-K9
AP: AIR-CAP1602E-EK910
If not, what we need to implement our request?
Thanks

You can look at dynamic vlan assignments using AAA override on the WLC. However, if your using WebAuth/captive portal for guest, you can't change their vlan. This is a layer 3 authentication so it requires the device to have an IP address prior to hitting the portal page. For other authentication methods, has to be 802.1, you can do that.
Sent from Cisco Technical Support iPhone App

Similar Messages

Vlan depend on user account

i`m asking, is possible to assign the vlan depend on user account
i have a lot of sub nets and i need to link between user account and vlan,
the current solution is to divide the vlan on switches

You can do this with Windows server and NPS server. Here are some attributes you can send over from NPS server to make this happen:
http://technet.microsoft.com/en-us/library/cc754422%28v=ws.10%29.aspx
Also, you will need the switches configured like this as well:
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configuration/guide/3750xscg/sw8021x.html#wp1207975
I hope that helps. Its certainly not a simple undertaking when using 802.1x but that is the best way to do it by user.
Be user to rate if this is helpful!

VLAN assignement per user group with WDS

I have configured an EAP-TLS wlan. I have configured the radius server to assign a vlan to the user depending of the user group.
In this way I avoid that an user with a valid certificate that discover another SSID can change the VLAN changing his SSID (so I control what vlan connects every user)
But when I have configured WDS in the wlan it stops to work. Because (I suppose) when the user reauthenticates (not the firt time) the WDS don't ask the radius server (it uses his cache) so it doesn't use the radius configuration and applies the vlan deppending of the user SSID.
How can I resolve this problem?
Thanks

I think that the WDS configuration is not working as intended. Thats the reason the WDS is not caching the credentials and authenticating the user. Under Wireless Services > WDS status tab do you see the the infrastructure devices as Registered. if not check the authentication server for authentication stats. The first thing is that the WDS AP should register the infrasrtructure devices. Only then things will work.

Setting proxy-user credentials

Hi!
I'm trying to make database reads through the proxy account ('main' proxy user)
and writes through 'normal' proxy user depending on what user is logged in application and make this writes. Proxy user is authenticated by name and password.
1) I've created accounts for proxy users in Oracle DB.
2) I've implemented session event handler for the preLogin event like in the reference:
http://www.oracle.com/technology/products/ias/toplink/doc/1013/main/_html/dblgcfg008.htm
3)Then I need to acquire all client sessions of any logged in application user
with their own proxy-user credentials, but
a) there is no such event as preAcquireClientSession;
b) when this is done in postAcquireClientSession it has no effect (all writes are performed by the 'main' proxy user).
How to solve 3)? Is there any class or event in TopLink where I can set proxy-user credentials?
Hints or ideas will be so helpfull.
By the way, I'm using TopLink 10.1.3, Spring 2.0.

Thanks for reply. I've already read that, very usefull thread. But before today I could not get where interaction with server is.
Now I think I should investigate in org.springframework.orm.toplink.TopLinkTransactionManager, the key to solve my problem not only in TopLink but in Spring also.

How to log in with user credentials from database table

Hello all.
I have a table named users_1 in my database. This table has columns named username, password, email and userid. On userid, I have put a sequence.
Now, I have manually made 1 row in this table, with in it the user credentials.
How can I edit my application so that I can use these credentials to log onto the application?
Please, a step-by-step text would make me rather happy, instead of getting a link with information that I should read. I've read most of it, and it just doesn't make any sense to me, so I prefer a guide-trough.
Thanks..

Hi Magali,
You want only user from database can access your application.
follow the steps given below.
Step1 : create function to authenticate users
create or replace FUNCTION "CUSTOM_AUTHENTICATE" (p_username in VARCHAR2, p_password in VARCHAR2)
return BOOLEAN
is
l_password varchar2(4000);
l_stored_password varchar2(4000);
l_count number;
begin
select count(*) into l_count from users_1 where upper(username) = upper(p_username);
if l_count > 0 then
   select upper(password) into l_stored_password from users_1 where upper(username) = upper(p_username);
   l_password := upper(p_password);
    if l_password = l_stored_password then
      return true;
    else
      return false;
    end if;
else
return false;
end if;
end;
Step2 : create authentication scheme for your application
Go to Application Builder->select your application->shared component->security->authentication scheme->create
a) custom scheme : Based on a pre-configured scheme from the gallery
b) give some name to your scheme like custom_scheme or something
c)scheme type : database account
d) verify function name = return CUSTOM_AUTHENTICATE
e) go to = Login Page
f) Logout url = f?p=&APP_ID.:101 // here 101 is login page no..so you can set your login page no.
step3 : make this scheme as current scheme
select your scheme and click make current
now try to login into your application from your database users..
Hope this will helps you,
Thanks,
Jitendra

SAP PI problem: User credentials are invalid or user is denied access

Hi!
I am about to configure SAP PI.
Therefore I have run post installation wizard step PI_00 and get the following errors:
Error: Not able to load Function SWF_XI_BPM_AUTO_CUSTOMIZE
(cause:Name or password is incorrect (repeat logon)).
Step: Execute SWF_XI_BPM_AUTO_CUSTOMIZE
Error: User credentials are invalid or user is denied access
Step: Add Installed Product2
Questions:
How can I identify which user/password makes problems here?
P.S.
My further problems are:
2) It is not possible to work with XI tools, such as:
Integration Directory, Integration Repository, Runtime Workbench
When I try to execute some action in these tools I get the following error:
Cannot connect to Repository
Error during communication with System Landscape Directory: User credentials are invalid or user is denied access.
2) When I try to access the NetWeaver configuration wizard (http://localhost:50000/nwa)
I get the followign warnig:
System Landscape Directory is not available
Only local systems can be maintened
Thank you very much
Thom

Hi,
Check the similar discussion Error in PI postinstallation wizard
Wrong password PISUPER in PI_00 wizard
Thanks!
Edited by: Sudhir Tiwari on Nov 26, 2008 10:29 AM

Unable to open a report and asking for user credentials

Hi,
when i am trying to open a crystal report, i am asking for user credentials and my URL is directed to the below URL
http://hostname/PlatformServices/service/app/logon.do?appKind=InfoView&service=%2FOpenDocument%2FappService.do&backContext=%2FOpenDocument&backUrl=%2Fopendoc%2FopenDocument.jsp%3FSERVICE%3D%252FOpenDocument%252FappService.do%26OBJIDS%3D20016421%26backUrl%3D%252Fcontent%252Fview.do%26PREF%3DmaxOpageUt%253D200%253BmaxOpageC%253D10%253Btz%253DUS%252FPacific%253BmUnit%253Dinch%253BshowFilters%253Dtrue%253BsmtpFrom%253Dtrue%253BpromptForUnsavedData%253Dtrue%253B%26CONTAINERID%3D6424083%26backContext%3D%252FPlatformServices%26LOC%3Den%26APPKIND%3DInfoView%26PVL%3Den%26ACTID%3D280%26service%3Dtimeout&backUrlParents=1&appName=OpenDocument&prodName=BusinessObjects+Enterprise&cmsVisible=false&cms=servername%3A6600&authenticationVisible=false&authType=secEnterprise&sso=false&sm=true&smAuth=secLDAP&persistCookies=true&sessionCookie=true&useLogonToken=true
Please help me on this

Hi,
This is happening to all of the users. And this kind of behaviour is happening frequently to most of the users but as for me and some of us this is not happening frequently.
And we are using Crystal Reports 2008 ie. CR12.
-VinodC

How do you stop BSPs on WebSEAL for asking for user-credentials?

Hi
We are currently having an issue with BSP Pages. When we test the BSP pages on the R/3 system they work OK. When we test them directly on the Portal then they too also work. The problem is that they are not working properly on our Intranet.
The intranet that we use is an IBM Tivoli product (also known as WebSEAL). We currently have WebSEAL SSO to our SAP Portal. This is working OK. When we use WebSEAL to access the portal we are prompted to enter our user-id and password so that the BSP page can be displayed. This should not be happening and it defeats the purpose of SSO. I have attached a screen shot document to demonstate this.
Some time ago we had a similar issue where the transactions on the portal (when executed from WebSEAL) were giving us a Webdynpro time-out error. I later determined that the cookie information was not being passed to WebSEAL. To fix this, I went to the Visual Administrator and went to server >> services >> web container and for the web container "sap.com/irj" I went to the cookie configuration to add a session cookie. By doing this I fixed my previous problem.
Coming back to my problem, I had a junction created in WebSEAL to point to the bsp directory (sap/bc/sap/bsp/*) on the host concerned. I had both a SSL and TCP junction created both resulted in error messages - stating that the client (SAP) is asking for user credentials.
Hoping that I have provided enough information above my question is as follows:
(1) How can I get the BSP messages to work on WebSEAL such that it will not ask for user credentials to be entered? Would this involve making a further change to a Web Container? If so - which container also needs a session cookie to be generated?
Thanks
Kind Regards
Rajdeep Kumar

Hi Peter
I am having an issue with the re-direct and am hoping you might be able to provide a little assistance. If not then not to worry.
My security department have logged a call with IBM 2 days ago yet have not received any response.
In your document you mention that you need to have a junction to AS-JAVA and a junction to AS-ABAP.
We have created the junctions "/sapep" (for AS-JAVA) and "saphr1" (for AS-ABAP).
The junction /sapep" also contains the junction mapping entries "/irj/" and "/SSOTicket/".
The direct URL to the hidden image is : https://uadsfi01.auiag.corp:53001/SSOTicket/1x1.gif. I have tested this (using my user id and password) and it works OK.
When testing the image through TAM (https://test.insideiaghome.iaglimited.net/sapep/SSOTicket/1x1.gif) we get an "unexpected authentication challenge"
I have reviewed the log below and it seems that we are having an authentication issue with the image:
==(START OF LOG)==
2008-06-16-19:59:58.365+10:00I----- thread(136) trace.pdweb.debug:2 /sand/cholt/laura_amweb510_11LA/src/pdweb/wand/wand/log.c:309: -
PD ===> BackEnd -
Thread_ID:52943
GET /SSOTicket/1x1.gif HTTP/1.1
via: HTTP/1.1 uattam01:443
host: uadsfi01.auiag.corp:53001
user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; MS-RTC LM 8; .NET CLR 2.0.50727)
iv_server_name: uatin1-webseald-uattam01
accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, /
iagsapid: 52975
accept-language: en-au
referer: https://test.insideiaghome.iaglimited.net/sapabap.html
connection: close
iv-user: s52975
2008-06-16-19:59:58.373+10:00I----- thread(136) trace.pdweb.debug:2 /sand/cholt/laura_amweb510_11LA/src/pdweb/wand/wand/log.c:309: -
PD <=== BackEnd -
Thread_ID:52943
HTTP/1.1 401 Unauthorized
content-type: text/html
date: Mon, 16 Jun 2008 09:59:58 GMT
cache-control: no-cache
content-length: 1787
www-authenticate: Basic realm="Upload Protected Area"
server: SAP J2EE Engine/7.00
expires: 0
pragma: no-cache
connection: close
==(END OF LOG)==
When logging into the SAP Portal directly general user ids have no problem accessing this (Non-Administrator portal users), however through Tivoli it is causing an issue.
Do you know what may be causing this issue?
Thanks in advance for any assistance you can offer.
Kind Regards
Rajdeep Kumar

Not able to pass user credentials in a full trust proxy to call web service in Sandbox solution

Hello,
I am trying to build a sandbox webpart that calls a windows authenticated webservice to fetch some data. I tried to pass the DefaultCredentials to the webservice proxy but The credentials passed are that of the
usercodeserviceproxy process ( in my case it is network service) . I see that the user account trying to authenticate is Domain\machinname$ which is the network service.
My question is - is there a way to pass the logged in user credentials to the web service from sandbox proxy ?

' in Host Names is not allowed. Our hosname has '_'.
http://help.sap.com/saphelp_nw70ehp1/helpdata/en/67/be9442572e1231e10000000a1550b0/frameset.htm

Dynamic user credentials for XI receiver communication channel

Hi Experts,
I am working on File(XML ) to ABAP proxy scenario. I want to know if I get the user-id and password information to login to R/3 system as part of the XML payload, can I use this information to connect to R/3 system in my XI Receiver communication channel?
Using a generic user credentials either in RFC destination or specifying it in communication channel configuration will not work. This is because the requirement is that the objects that will be created in inbound ABAP proxy (for ex Material Master) should be created with the user information that is coming from payload rather than a generic user.
Any pointers how to acheive this?
Thanks and regards,
Prasad
Edited by: Prasad MLN on Nov 16, 2009 4:00 PM

Hi,
You might want to learn more about Principal Propagation in sap XI:
http://www.sdn.sap.com/irj/scn/weblogs;jsessionid=(J2EE3417300)ID2039785750DB21057082877817322485End?blog=/pub/wlg/7068%3Fpage%3Dlast%26x-order%3Ddate
http://help.sap.com/saphelp_nwpi71/helpdata/en/45/0f16bef65c7249e10000000a155369/content.htm
Regards,
Ravi Kanth Talagana

MDT user credentials error: Invalid credentials: The network path was not found

I have DELL E5400 and DELL Optiplex 760 pc. In the before, DELL630 is working with my MDT service, but now, DELL E5400 and DELL Optiplex 760 not working with my MDT.
When PE loaded and go to User Credentials interface, I input the user name and password(I confirm the user name and password is correct), it will display error message "Invalid credentials: The network path was not found". I checked that the network driver is correct.
After search some information in the website, someone said that maybe the network initializing timeout issue, so I according to Tim Quan guide to add following to startnet.cmd
wpeutil InitializeNetwork
ping localhost
wpeinit
Then I update the deploy location in MDT and then re-loaded it again, but unlucky, I still meet the same issue. I tried to use ipconfig /all command to check the network status, I couldn't find out local network connection. I click "Cancel" to check the error message, it will display"A connection to the deployment share could not be made. The deployment will not proceed. DHCP lease was not obtained for any networking device!Possible cause: check physical connection".
It seems that PE not loaded network driver successfully, but it is very strange that the network driver is correct.
Have someone can help me?
Thanks a lot

Hi,
Are you deploying Windows Vista 32bit or 64bit? Please obtain he latest network card drivers from the following sites:
Dell Latitude E5400:
http://support.dell.com/support/downloads/driverslist.aspx?c=us&cs=19&l=en&s=dhs&ServiceTag=&SystemID=LAT_E5400&os=WLH&osl=en&catid=&impid=
Dell OptiPlex 760:
http://support.dell.com/support/downloads/driverslist.aspx?c=us&cs=19&l=en&s=dhs&ServiceTag=&SystemID=PLX_760&os=WLH&osl=en&catid=&impid=
Please make sure you add the correct network driver to deployment point.
Additional Information:
http://www.techtalkz.com/windows-deployment/501217-deployment-share-connection-issue-since-mdt-2008-waik-1-1-a.html
http://www.deploymentforum.com/Community/Forums/tabid/124/forumid/16/postid/737/view/topic/Default.aspx
Hope it helps.
Tim Quan - MSFT

Show report in different currency depending on user parameter

hi all,
i'm trying to show my report in different currency, depending on users given parameter.
i hold my account balance in USD based. User should select one parameter, in which currency they want to see their account balance. (e.g. EURO, GBP ...) and depending on their selection, i want to convert USD based info into chosen currency, by fetching field from currency table and making some calculation.
also i want to include in report currency($, Â£ ...) accordingly ().
how can i achieve this, has somebody any suggestion to me?
thanks in advance.
bogi.

hi,
i think i need to explain my problem more detailed. anyone who has suggestion, please help me.
i have 3 tables account, times and currency.
- times table has time_key, date, day_of_week fields.
- account table has - account_balance and time_key_FK fields.
- currency table has currency_type, amount, time_key_FK fields.
1. i have function decode(:Currency,'USD',account_balance,'EURO',--here i want to replace my calculation CALC1---)
CALC1- this calculation need to some calculation like this: account_balance * (fetched field from this sql)(select amount from currency, account where currency.currency_type='EURO' and account.time_key_FK=currency.time_key_FK)
i tried to do this, but discoverer plus doesn't let me make condition and calc. i'm very confused.
2. after i achieve this query, somehow i want to display on worksheet on which currency is it based. can i get parameter value, and show this value as in column heading?
tnx!!!

I'd like to select print paper size with using AxAcroPDFLib method depend on user

I'd like to select print paper size with using AxAcroPDFLib method depend on user
request. Is it possible? in AxAcroPDFLib?
Is there any method to select print paper size in the C# programming.
Or if you know another method, please introduce how to use.
Thank you for your cooperation always.

I am pretty sure that you can only do this from JavaScript or from C/C++ APIs.

Windows keeps on asking for my user credentials

Hi.
As per subject, I keep on getting prompted to enter my user credentials whenever I open a mapped drive (which has been mapped before with the same credentials) or when I open the SharePoint site and also when
I check out and edit a document from SharePoint.
This is becoming debilitating.
I have a very lengthy password as per our policy so I'm really despondent to have to enter this password every single time I access SharePoint.
In the past, I only got prompted once during every session. Now, I get prompted multiple times a day. I will be prompted when I access SharePoint and then 10 seconds later, be prompted AGAIN when I check out and edit a document....WHAT?!
I keep on selecting the checkbox "remember credentials" but this is to no avail. I've deleted all the credentials in Credential Manager numerous times and added them manually and then again automatically, all to no avail. I've even tried multiple
entries for example "192.168.1.1" and also "http://192.168.1.1" as well as the FQDN for example "server01". So the same network resource has 3-4 different entries and none work!!
Whenever I enter my credentials and select that checkbox to remember them, I can see in Credential Manager that the respective entries gets updated but what's the point if they are never utilized?
I've also checked the services and changed the Credential Manager to start automatically without delay.
I have appealed for help elsewhere (WindowsForums, SpiceWorks, TechRepublic) but no one seems to have any definitive answers or solutions. I've been having this issue for YEARS now but want to do something about it now as it's becoming debilitating.
Please help!
Setup:
Windows 7, 64bit
Office 2010 (I'm testing Office 2013 as well)
SharePoint 2010
Service Pack 1

Hi,
"Multiple logon prompt issue" can be caused by many factors, please take a look of this blog:
Multiple Logon while open office Document from SharePoint
http://blogs.technet.com/b/steve_chen/archive/2010/06/25/multiple-logon-while-open-office-document-from-sharepoint.aspx
You can bypassing your proxy server for local addresses or adding a team Web site to the list of trusted intranet sites for a test, steps are listed in this link
Troubleshooting: I Keep Getting Prompted for a User Name and Password
http://technet.microsoft.com/en-us/library/cc750194.aspx
Sometimes, when a Intranet site is identified as an Internet site, it will cause Internet Explorer to prompt you for credentials when you access the intranet Web sites that require authentication
Intranet site is identified as an Internet site when you use an FQDN or an IP address
http://support.microsoft.com/kb/303650/en-us
Yolanda Zhu
TechNet Community Support

CR prompts for user credentials after refresh even though I'm using SSO

Hello Experts,
We have a problem with a customeru2019s project concerning Crystal Reportu2019s Single Sign On feature:
Even though weu2019re using SSO, Crystal Reports prompts for user credentials every time a refresh is performed manually in the browser.
We already checked SAP note [1214594 - How to avoid database login prompts when refreshing reports in Crystal Reports|http://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/oss_notes_boj/sdn_oss_boj_bi/sap%28bd1lbizjptawmq==%29/bc/bsp/spn/scn_bosap/notes%7B6163636573733d36393736354636443646363436353344333933393338323636393736354637333631373036453646373436353733354636453735364436323635373233443330333033303331333233313334333533393334%7D.do]. The note suggests using Microsoft Windows authentication (trusted connection or operating system authentication) u2013 unfortunately we cannot use this kind of authentication in our project.
Do you have any hint, idea or suggestions?
Thank you in advance!

Hello,
What kind of Project are you developing? Search for Post Back in the SDK forum and Kbase system so you can keep the log on token active. Likely what is happening is the Token or connection times out after 20 minutes, which is IIS's default timeout. Using the postback method is one way of keeping the SSO connection active.
Thank you
Don

VLAN depend on user credentials

Similar Messages

Maybe you are looking for