Web authentication different user same client

Hi,
We are currently building a guest WLAN. The authentication works with LDAP via web authentication. Users can log on via smartphones and Windows laptops. Now we have a little problem with the Windows laptops, discovered in the testing phase. When user A is successful logon to the laptop through web authentication and then log off the laptop. User B can simply work under the same credentials of user A, without problems. This is not desirable, another user must then log in to the laptop with own credentials.
The WLC 5508 remember the client MAC address, not the user.
Any tips?
Thank you!

When the user logs off the session remains active on the WLC.
We have the "User Idle Timeout" set on 100000 sec. Unchecked the "Enable Session Timeout". This to logout users after a certain time via a time trigger. Guests 24 hours, students half year, staff 1 year. (If the WLC not often need to restart).
For non domain devices this is not a problem, since users are not dependent on the Windows domain then.
How can we debug users, lets say user A en B on one laptop?

Similar Messages

  • I set up my new computer using the apple ID i always use, and then later migrated all my files from my old mac book to the same new one, but under a different user (same ID). how do i consolidate the two users on my new mac book?

    i set up my new computer using the apple ID i always use, and then later migrated all my files from my old mac book to the same new one, but under a different user (same apple ID). how do i consolidate the two users on my new mac book?

    Well if you use the Finder Go menu to Computer, a window opens up double click on your boot drive and then on Users folder, open the other user folder and open Public and drop your files into DropBox
    When you do this it will copy them and change the permissions and user assigned to it, so log into the other user and place them into your respective normal folders.
    Once you have all your files over and don't need the old user, use System Preferences > Accounts to delete it if you wish, however it's good two Admin accounts on the machine in case something bad happens in the other. Some people for security reasons on use a Standard account for most uses and a emergency Admin account.
    One can still do most Admin things in Standard user.

  • ISE 1.2 web authentication problem with wired clients

    Hello,
    i am having problems with centralized web authentication using a Catalyst 3650X with IOS 15.0.2 SE01 and ISE 1.2.
    Redirecting the client works fine, but as soon the client opens a web browser and ISE websites open to authenticate the client, the switch port resets, the authentication process restarts and the session ID changes. After the client enters the credentials a session expired messages appears on the client and i get an 86017 Session Missing message in ISE.
    here the output form the debug aaa coa log.
    Any ideas
    thanks in advanced
    Alex
    ! CLIENT CONNECT TO SWITCHPORT
    ISE-TEST-SWITCH#show authentication sessions interface gi0/3
                Interface:  GigabitEthernet0/3
              MAC Address:  001f.297b.bd82
               IP Address:  10.2.12.45
                User-Name:  00-1F-29-7B-BD-82
                   Status:  Authz Success
                   Domain:  DATA
          Security Policy:  Should Secure
          Security Status:  Unsecure
           Oper host mode:  multi-auth
         Oper control dir:  both
            Authorized By:  Authentication Server
              Vlan Policy:  N/A
                  ACS ACL:  xACSACLx-IP-PERMIT_ALL_TRAFFIC-537cb1d6
         URL Redirect ACL:  ACL-WEBAUTH-REDIRECT
             URL Redirect:  https://nos-ch-wbn-ise1.nosergroup.lan:8443/guestportal/gateway?sessionId=AC1484640000026B28C02CDC&action=cwa
          Session timeout:  N/A
             Idle timeout:  N/A
        Common Session ID:  AC1484640000026B28C02CDC
          Acct Session ID:  0x0000029C
                   Handle:  0x8C00026C
    Runnable methods list:
           Method   State
           dot1x    Failed over
           mab      Authc Success
    ! CLIENT OPENS INTERNETEXPLORER -> REDIRECTS TO ISE 
    ! SWITCHPORT GOES IN ADMINISTRATIVE DOWN STARTS AUTHENTICATION AGAIN
    ISE-TEST-SWITCH#
    191526: .Jun 24 10:42:24.340 UTC: COA: 10.0.128.38 request queued
    191527: .Jun 24 10:42:24.340 UTC: RADIUS:  authenticator 7F A9 85 AB F6 4A D0 F3 - B4 E6 F2 56 74 C6 2D 33
    191528: .Jun 24 10:42:24.340 UTC: RADIUS:  NAS-IP-Address      [4]   6   172.20.132.100
    191529: .Jun 24 10:42:24.340 UTC: RADIUS:  Calling-Station-Id  [31]  19  "00:1F:29:7B:BD:82"
    191530: .Jun 24 10:42:24.340 UTC: RADIUS:  Acct-Terminate-Cause[49]  6   admin-reset               [6]
    191531: .Jun 24 10:42:24.340 UTC: RADIUS:  Event-Timestamp     [55]  6   1403606529
    191532: .Jun 24 10:42:24.340 UTC: RADIUS:  Message-Authenticato[80]  18
    191533: .Jun 24 10:42:24.340 UTC: RADIUS:   E0 3C B2 8C 89 47 67 A8 69 F5 3D 08 61 FF 53 6E          [ <Ggi=aSn]
    191534: .Jun 24 10:42:24.340 UTC: RADIUS:  Vendor, Cisco       [26]  43
    191535: .Jun 24 10:42:24.340 UTC: RADIUS:   Cisco AVpair       [1]   37  "subscriber:command=bounce-host-port"
    191536: .Jun 24 10:42:24.340 UTC: COA: Message Authenticator decode passed
    191537: .Jun 24 10:42:24.340 UTC:  ++++++ CoA Attribute List ++++++
    191538: .Jun 24 10:42:24.340 UTC: 06D96C58 0 00000001 nas-ip-address(600) 4 172.20.132.100
    191539: .Jun 24 10:42:24.349 UTC: 06D9AC18 0 00000081 formatted-clid(37) 17 00:1F:29:7B:BD:82
    191540: .Jun 24 10:42:24.349 UTC: 06D9AC4C 0 00000001 disc-cause(434) 4 admin-reset
    191541: .Jun 24 10:42:24.349 UTC: 06D9AC80 0 00000001 Event-Timestamp(445) 4 1403606529(53A95601)
    191542: .Jun 24 10:42:24.349 UTC: 06D9ACB4 0 00000081 ssg-command-code(490) 1 33
    191543: .Jun 24 10:42:24.349 UTC:
    191544: .Jun 24 2014 10:42:24.365 UTC: %EPM-6-IPEVENT: IP 10.2.12.45| MAC 001f.297b.bd82| AuditSessionID AC1484640000026B28C02CDC| AUTHTYPE DOT1X| EVENT IP-RELEASE
    191545: .Jun 24 2014 10:42:24.382 UTC: %EPM-6-IPEVENT: IP 10.2.12.45| MAC 001f.297b.bd82| AuditSessionID AC1484640000026B28C02CDC| AUTHTYPE DOT1X| EVENT IP-WAIT
    191546: .Jun 24 2014 10:42:24.382 UTC: %EPM-6-POLICY_REQ: IP 0.0.0.0| MAC 001f.297b.bd82| AuditSessionID AC1484640000026B28C02CDC| AUTHTYPE DOT1X| EVENT REMOVE
    191547: .Jun 24 2014 10:42:24.390 UTC: %EPM-6-AUTH_ACL: POLICY Auth-Default-ACL-OPEN| EVENT DETACH-SUCCESS
    191548: .Jun 24 2014 10:42:26.353 UTC: %LINK-5-CHANGED: Interface GigabitEthernet0/3, changed state to administratively down
    191549: .Jun 24 2014 10:42:27.359 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/3, changed state to down
    ISE-TEST-SWITCH#
    191550: .Jun 24 2014 10:42:36.366 UTC: %LINK-3-UPDOWN: Interface GigabitEthernet0/3, changed state to down
    191551: .Jun 24 10:42:40.592 UTC: AAA/BIND(000002A7): Bind i/f
    191552: .Jun 24 2014 10:42:41.129 UTC: %AUTHMGR-5-START: Starting 'dot1x' for client (001f.297b.bd82) on Interface Gi0/3 AuditSessionID AC1484640000026C28C2FA05
    191553: .Jun 24 2014 10:42:42.580 UTC: %LINK-3-UPDOWN: Interface GigabitEthernet0/3, changed state to up
    191554: .Jun 24 2014 10:42:43.586 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/3, changed state to up
    ! SESSION ID CHANGES, USER ENTERS CREDENTIALS 
    ! ERROR MESSAGE AT CLIENT "YOUR SESSION HAS EXPIRED"
    ! ERROR MESSAGE IN ISE "86017 SESSION MISSING"
    ISE-TEST-SWITCH#show authentication sessions interface gi0/3
                Interface:  GigabitEthernet0/3
              MAC Address:  001f.297b.bd82
               IP Address:  10.2.12.45
                   Status:  Running
                   Domain:  UNKNOWN
          Security Policy:  Should Secure
          Security Status:  Unsecure
           Oper host mode:  multi-auth
         Oper control dir:  both
          Session timeout:  N/A
             Idle timeout:  N/A
        Common Session ID:  AC1484640000026C28C2FA05
          Acct Session ID:  0x0000029D
                   Handle:  0x2C00026D
    Runnable methods list:
           Method   State
           dot1x    Running
           mab      Not run

    Guest authentication failed: 86017: Session cache entry missing
    try adjusting the UTC timezone during the guest creation in the sponsor portal.
    86017
    Guest
    Session Missing
    Session ID missing. Please contact your System Administrator.
    Info

  • Custom authentication - different user - no edit links

    Hi
    In my apex 3 application I use a custom authentication scheme, in which I validate users against our backoffice tables. However, I don’t have in those tables the database user that I use to develop apex applications.
    When I run my application for the first time in the session (from the application builder tool) I am redirected to the login page and need to login. As I have to login using a different user, I don’t see at the bottom of the pages the edit links and I need to go back a number of times to get back to the app builder page.
    What is the best practice in this case? Is it possible to tell apex not to use the login page if the app is being run from the app builder tool? (or something like that)
    Thanks
    Luis

    Hi Scott
    Thanks for the reply. I understand why this happens, but I was wondering if there was a way to circumvent this limitation, as I can't login as the database user I am using to build the application (because I don't have that user in my custom authentication scheme).
    Of course I could add that user, but as it is maintained by another department (it is a live system and I would have to justify well why I need a new user just for development purposes), I was looking for another quicker, simpler solution.
    Thanks
    Luis

  • Sharing Photos: Different Users, Same Computer

    So far, I've tried some suggestions found in other postings, but I still can't share some photo libraries between different users on the same computer. I started an account for my son. Sharing was enabled in both iPhoto Apps. I've tried locating the libraries in a Shared folder and putting them in a folder not associated with a user. Opening a port 8770 in the Sharing/Firewall window didn't change anything either. No matter what, when I open my son's iPhoto and try to Add To Library, some libraries will import and others have a circle with a red line next to them. Those will not import and I can't figure out what the difference is between them. Any thoughts?
    g4 ibook   Mac OS X (10.3.9)  

    Hi chris,
    these are the links I have for sharing. You might want to try the ACL way.
    SHARING IPHOTO LIBRARIES
    Sharing libraries between users on the same local network
    You can also share a library on the same machine between users the same way.
    Sharing libraries between users on the same machine...
    -both users must have sharing enabled in their iPhoto Preferences
    -both users must be logged in and have iPhoto running
    -Remember that you can only view the other library. You can't edit the photos or play the saved slideshows or view the made books or burn them to CD or DVD. The books and slideshows will show up as an album. You can play that album as an "on the fly" slideshow. You can drag images from the sharing library to your library in the source column to import them to your library. You can then edit, add to albums, books, slideshow, etc.
    Sharing links from Apple....
    Sharing your photos between computers
    About shared photos
    Turning off photo sharing
    Looking for shared photos
    SHARING ONE IPHOTO LIBRARY BETWEEN USERS ON SAME MACHINE
    You can try one of these three methods:
    1- Use iPhoto Library Manager-the paid version
    The documentation page will give instructions on how it is done.
    2- Sharing one iPhoto library between several users on one machine
    3- Share an iPhoto Library in tiger Using ACL's
    4- I have also read about ShareAlike
    There is no other info on the site about how it works.
    I strongly urge anyone wanting to try any of the methods for sharing one iPhoto Library folder among more than one user to backup all iPhoto Library folders before attemptin anything.
    Lori

  • Project Server 2010 - Different Schedule Dates for Different Users -- Same File

    We have an issue regarding users viewing the same schedule, different machines.
    The PMs have a schedule that was built in 2007 by the offshore team.  We are running Project Server 2010 corporate, and they the PMs here on site have Project Professional 2010.  Within the last couple of weeks, the PMs have noticed changes in
    the dates.
    When I open the schedule, I see the expected dates rendered in both PWA and Project Professional.  Both draft and published versions are the same regardless of where the schedule is opened for editing.  There are two PMs managing the schedules. 
    One sees what I see--the expected dates.  The other sees differences in dates--months, in fact.  Scheduled end date is 10/22/2013.   When the second PM opens the schedule, he sees a scheduled end date of 2/17/2014.
    I advised them that the offshore team needed to upgrade to 2010 due to the differences between 2007 and 2010.  Additionally, and I could be wrong, having the server run in compability mode for so long (the upgrade was done in May 2013), is not ideal. 
    (Offshore team has since updated to 2010.)
    Any thoughts on what could be causing this issue?  Corrupt version of Professional?  Settings askew?
    Thank you,
    L.D.

    My bad, I didn't know that you were not using Project Server.
    Then the file might be corrupted.
    Try the
    XML export and the
    save for sharing method to repair it.
    Hope this helps,
    Guillaume Rouyre, MBA, MCP, MCTS |

  • Flash player not installing correctly as different user, same computer

    I can view videos as one user on the same computer running IE9 windows 7, user is admin, but as another admin user, it keeps asking to install Adobe flash player, which I've done a million times, and it's still not working. It will not let me view any videos. Just a blank screen with "install adobe flash player"  I've checked the IE security settings, they are the exact same. I have unchecked active x filter, nothing changed. I have reset IE settings to default, still no change.  Firefox asked for adobe flash install, it went right through and works fine.  I can find the adobe flash program under control panel, remove programs, but not under the normal  start, programs, section.  Wierd! Any ideas would be helpful, I'm about top pull my hair out because it makes no sense.  This is a BRAND new computer, so all graphics drivers should be fine!

    Perhaps the Shockwave Flash Object add-on is disabled on the other user's account?
    nevrenufdogs wrote:
    This is a BRAND new computer, so all graphics drivers should be fine!
    Since it works fine on one account, this is probably not a driver issue.  But (just F.Y.I.) when I bought my new Dell computer three months ago, almost all device drivers on it were outdated.

  • Two different users, same contacts, calendar, etc.

    Howdy everyone!  I need some help.  First, I consider myself fairly smart when it comes to iOS products, etc. so I've tried to mess with this on my own before reaching out to those that are smarter than me.
    First, I upgraded my wife's phone and my phone to iOS 8 last night, seamless process.
    We share the same contacts and calendar so we've always have used the same icloud account.
    Main reason is so that we can share contacts, calendar, etc.  We also share the same itunes account so that when we purchase an app or a song, etc. it's on all our devices without having to purchase it twice.
    Now, with the new family sharing this isn't an issue.
    My question is, well many questions are, now it's giving me troubles.  It thinks my phone is my wife's phone and "find my friends" aren't working.  It says "can't share location with yourself".
    Also, I'm not opposed to using two different iclouds because we have family sharing now, but it's imperative that we see each others location for safety concerns, contacts and calendar.
    I can't figure the best way to set this up to fit our needs.
    Recap...
    Want to share calendar, contacts.
    Want to take advantage of family sharing
    Want to us

    figured out how to share the calendar so this issue is fixed.  Figured out how to do family sharing, so this too is fixed.  I'd like to figure out a way to share contacts so we pool from the same address book.  Any help with this would be appreciated!

  • Mount network volume: different users same credentials, see different shares

    A set of network volumes on a NAS need to periodically be backed up to a local USB disk. Manually, I can mount most shares (from a Finder window). In a shell script I can list all files due (find) and use that list for backing up to a local USB volume (cpio). So far so good. However, I need to mount these network volumes first. The mount command doesn't seem to work for me.
    How do I mount a network volume in a shell script?
    Also I noticed that if under fast user switching user A logs in with credentials uName and uPassword, the NAS shows 6 shares to choose from. When user B on the same machine logs in with the same credentials uName and uPassword, only 5 shares are visible and one is not shown. It looks as if the credentials do not uniquely determine the volumes offered for mounting. Also, when user B mounts a share, it appears to be owned by user A (who is logged in but has not mounted any share on the NAS) rather than owned by B or by uName...
    How do I mount this volume as user uName rather than A or B?
    How can one uniquely determine the identity of the volume? Network volumes don't show UUIDs and the name given in the /Volume/ folder can change, as is discussed in message 11871367.

    eljonco wrote:
    I just checked: after a reboot, user A logs in (automatic login enabled), user A logs out, user B logs in, ls -a /Volumes only shows local HD and a USB HD. No network mounts there.
    In the finder window, the NAS shows up on the left. Clicking it and entering credentials uName, uPassword, a list of five, not 6, items is offered for mounting. So your options 1 and 4 are then ruled out, unless an alias made by user A and copied to user B's home folder would still link to user A's mounting options.
    Actually, only option 1 is ruled out. That Finder list is simply not reliable. It is likely cached somewhere and could be restored by deleting some hidden preference file. It regularly causes people to freak out when they see some sharepoint listed on a network that they have long since left.
    If you did Go > Connect to Server in the Finder and typed in the location, you could still create an alias.
    Once mounted one of 5 shares as uName with uPassword, an ls -al /Volumes shows the local drives and
    drwx------@ 11 B staff <date> sharename
    and all folders in sharename also show B:staff as user:group. I find that strange, as I did not log in to the share with credentials B, but with credentials uName. Anyhow.
    The uName user is for the network share. When MacOS X mounts that, it gives it permissions appropriate for the user who did the mounting. If you did an NFS mount as root, the server would handle permissions via UNIX uid and gid. I'm really not familiar with the details of AFP.
    As I read in a post about autoFS that 'cd /Volume/theHiddenShare' should magically mount that share, I gave it a shot. Alas, '/Volumes/theHiddenShare: No such file or directory'. Same long shot in the dark in the 'Go/Connect to' dialog gave 'The folder cannot be found'. Not surprisingly, I suppose.
    Yes. That has to be setup
    Here is what I've done to my /etc/auto_home:
    # Automounter map for /home
    #+auto_home     # Use directory service
    # Get /home records synthesized from user records
    #+/usr/libexec/od_user_homes
    myserver.org -allow_other,reconnect,fstype=sshfs [email protected]:/home/me_remote
    I'm not on a big network, so I've disabled the system functionality by commenting out "+auto_home" and "+/usr/libexec/od_user_homes". Now, the system doesn't manage /home and I am free to do with it what I want. This will mount the path "/home/myserver.org" connected to the "me_remote" user on "myserver.org". I'm using the funky MacFUSE sshfs filesystem. Your AFP file system should work much better. Your line would look something like this:
    drive5 -fstype=afp uUser@MyLocalServer:/theHiddenShare
    Run "automount -vc" to reset your automount system.
    Next use Finder Go > Connect to Server and type in "afp://uUser@MyLocalServer:/theHiddenShare".
    You want to mount the drive once so that you can store uPassword in your keychain.
    Now unmount the drive.
    The Finder mounts all go into /Volumes and, as you have discovered, can get themselves confused. This automount will be at "/home/drive5". All you have to do is enter that folder in the Finder and it will be automatically mounted. If you haven't used it for a while, it will be unmounted automatically.
    You may have to play around with this a little. I don't have any network AFP share that I need to mount on a regular basis, so those parameters may need to be adjusted somewhat.

  • How to create a Web Authentication Meathod using Server 2008 r2 ?

    HI, i am a NewBee in Server Managment. am using windows server 2008 R2 Enterprise Edition, with 2 NiC One is Connected to modem other one connected to Lan , using ICS for internet . i have 80 client computers , all clients have access to unlimited internet,
    i want to control them without 3rd part application, or  Create a Web authentication username and Password for users , is there any possible way to create a web authentication server in server 2008 r2 ? plz give me a proper guideline.....

    Hi,
    According to your description, my understanding is that you want to configure web authentication that allow the client to connect to Internet by password and user name.
    I am afraid that no function within Windows Server 2008 R2 may fulfill your requirement. 
    For better control of your clients, I would recommend you to configure the Windows Server 2008 R2 as an RRAS (dial-up) router(use NAT to assign private IP address for the internal network), and connect to the clients with intermediate device, such as hub,
    switch. Cooperate with NPS to provide authentication for network connection.
    3rd party software/device should be needed for configuring web authentication. Here is a deployment scenario just for your reference:
    Web Authentication Using LDAP on Wireless LAN Controllers (WLCs) Configuration Example
    http://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/108008-ldap-web-auth-wlc.html
    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
    Best Regards,           
    Eve Wang                                                                                            

  • When streaming video from a web site my audio is attenuated differently with different users on the same computer.  withe either user, the sound is very muffled.  all the volumes are set to maximum.

    How can I adjust the safari sound volume other than the usual settings in the system preferences?
    I am using an apple mac air, updated with OS X Yosemite.   Looking at the same web site video from two different users accounts on the same computer,  the sound is drastically attenuated on one user account relative to the other. 
    Sound settings in system preferences are maxed out.

    It seems that the difference between the sites that will open and the one that won't is the Default Authentication provider is set to NTLM on those that open, and Negotiate (Kerberos) on the one that won't. The Authentication Provider for the Default zone
    is Claims Based Authentication on all the sites, just site B (which won't open) is set to Negotiate (Kerberos), the others are set to NTLM.
    Short term: can I change the provider to NTLM without destroying the site?
    Long term: point me in the direction for setting up Kerberos correctly on my server/farm, as from what I can tell Kerberos is the recommended path forward. I'll setup a non-production test site and get it figured out.
    Thanks much.
    Steven

  • WE HAVE A CLIENT COMPUTER IN THE SHOP (EXPANION UNIT). WE CAN'T RUN FIREFOX ON IT AND OFFICE COMPUTER AT SAME TIME. I HAVE CHECKED THE BOX THAT ALLOWS US TO RUN AS DIFFERENT USERS, BUT IT STILL IS NOT ALOWING ME TO LOG ON. SUGGESTIONS?

    The box is under properties, 2nd tab, then advanced. We are currently using the same log on for both computers. Do we need to create a separate log on for the expanion unit or?

    I would suggest trying it as different users.
    '''If my reply solves your problem, please click "Solved It" next to this reply when signed-in to the forum.'''

  • Broad casting Webi report in excel format to different users email ids

    Hello,
    Seriously looking for the help, please help with the solution for below scenario.
    We have a requirement to schedule broadcasting of Webi reports to users email in excel format from infoview. But our concern is how the system takes care of authorizations of users when we broadcast the report to their mail id as excel file.
    For example we have one webi report for Finance and there are thousands of users for each department, cost centre etcu2026so how to broadcast the same webi report in excel to different users with only data they have authorized to see. We have committed to client that we can do this with out much massive overhead, please advise what is the easiest way to achieve this. I read something like this can be done using authorization profiles in CMS but creating those many profiles and mapping them to relevant authorizations is not possible as there are thousands of users with different authorization levels. And Client is expecting this broadcasting need to be done automatically with out every time manual intervention. 
    Looking forward for the prompt reply.
    Thanks,
    Gani.

    Please use the Dynmanic Recipients functionality of the Publication.
    For this we need to do follow steps.
    1) Create the WebI Report that needs to be published(Broadcasted)
    2) create Deski/webi report which contains the user details and email id's for publishing main report.
    3) Map the properties of souce report with Dynamic Recipient report.
    Please refer the user guide for more inforamtion.This helps you in avoiding manual creation of profiles in CMC.
    Regards,
    Siva
    Edited by: Nallamala siva on Jun 13, 2011 8:17 AM

  • Share the same files to different users over the network

    Hi,
    I have a server running in my home network and want to share my photos accross the network. The photos have to be accessable from linux and windows clients and from different user accounts. The filesystem to share is btrfs right now. I would like to stick to it, but if this should turn out to be an issue, I will change it to s.th. else. I could use samba with a dedicated samba user or ftp, but both solutions feel hacky to me. Is there a better approach to the problem?
    Thanks,
    Wolfgang
    Last edited by ReedWood (2013-09-13 08:32:26)

    Personally I'd go with an ftp server since I got that to work in the past but samba might do a decent job, too (don't know, never used it). But you can also just set up a web server to share your pics (maybe with a nice gallery web app?). The technology used itself does not matter that much.
    Now, on to the important question: What about security? Do you need some kind of authentication or can you get away without any login stuff (since no bad guys can connect to your network anyway)?
    FYI I used vsftp and pam as described at http://www.cyberciti.biz/tips/centos-re … users.html to get my ftp server running. You might be able to expand this to other solutions as well. I had to password protect my ftp server since I wanted to have write permission, too. For read only I might have been fine with anonymous ftp back then.

  • No Web Authentication - but excluded client with reason code 4

    Hello,
    we are using a WLC 4400 with Software Version 5.0.148.0 and WCS Version 5.0.56.2.
    Access Points are AIR-LAP1131AG-E-K9.
    We have problems with one client (Windows XP SP3). The computer loses the wireless connection all the time, but we don't know why. Duration of the connections are different.
    So there are a lot of minor alarms saying “Client which was associated with AP, interface '0' is excluded. The reason code is '4(Web Authentication failed 3 times.)'.”
    But the wireless lan which is used by the client is not configured with Web Authentication!! It is only using MACFilter. That's very strange! (There is another wireless lan configured with Web Authentication.)
    The minor alarms are created by different Access Points, amongst others by the Access Point where the client is connected to! (All Access Points radiate all wireless lans.)
    Regarding to this client the SyslogServer often says:
    Sep 17 16:01:57.187 1x_ptsm.c:404 DOT1X-3-MAX_EAPOL_KEY_RETRANS: Max EAPOL-key M1 retransmissions exceeded for client LOCAL USE 0 ERROR CONDITION
    Sep 17 16:02:07.885 1x_ptsm.c:511 DOT1X-3-PSK_CONFIG_ERR: Client may be using an incorrect PSK LOCAL USE 0 ERROR CONDITION
    Last week I tried the trouble shooting of the WCS with the following effect:
    Time :09/18/2009 19:01:39 Message :Controller association request message received.
    Time :09/18/2009 19:01:39 Message :Association request received from a client has an invalid RSN IE.(One reason could be mismatch in WPA2 algorithm).
    Time :09/18/2009 19:01:39 Message :Received reassociation request from client.
    Time :09/18/2009 19:01:39 Message :The wlan to which client is connecting requires 802 1x authentication.
    Time :09/18/2009 19:01:39 Message :Client moved to associated state successfully.
    Time :09/18/2009 19:01:39 Message :802.1x authentication message received, static dynamic wep supported.
    Time :09/18/2009 19:01:39 Message :802.1x authentication was completed successfully.
    Time :09/18/2009 19:01:39 Message :Client has got IP address, no L3 authentication required.
    I think the problem is hidden at the client but I don't know what it could be. The PSK can not be incorrect because the client is able to connect to the wireless lan but later loses the connection.
    Does somebody has an idea or knows the error messages?!
    Greetings lydia

    Hi,
    I'm exactly with the same problem! Can you please tell me if you were able to solve this?
    Thank you!
    Best regards,

Maybe you are looking for