Windows Client and ldap

How can windows client use OSX leopard server open directory? How can windows client connect to osx server contact address directory? Ical server work ok with windows mozzila thunderbird(lightning) but cannot select name to invite form osx server.
pls help me.......
thx

Mathieu,
Take a look at the user guide for NAM -
http://www.cisco.com/en/US/docs/security/vpn_client/anyconnect/anyconnect30/administration/guide/ac04namconfig.html
You will see the protocols support like GTC that should allow you not to have to deploy certs.
Thanks.
Tarik Admani
*Please rate helpful posts*

Similar Messages

Cisco ASA 8.2(2) Lt2p windows client and OSX remote VPN

Having trouble getting windows 7 and OSX to authenticate via VPN to the ASA.
Something is missing or not configured correctly.
In the ASA logs I get this error
ipaa error freeing address
On the client side I get invalid username/password. I am trying to authenticate using our LDAP map to our Active Directory box. (it works with other the cisco VPN just fine)
group-policy DefaultRAGroup internal
group-policy DefaultRAGroup attributes
wins-server none
dns-server value 10.10.0.99 10.10.0.100
vpn-tunnel-protocol IPSec l2tp-ipsec
ipsec-udp enable
default-domain none
group-policy DfltGrpPolicy attributes
vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn
tunnel-group DefaultRAGroup general-attributes
address-pool IPpool
default-group-policy DefaultRAGroup
strip-group
tunnel-group DefaultRAGroup ipsec-attributes
pre-shared-key Ourprivatekey
tunnel-group DefaultRAGroup ppp-attributes
no authentication chap
authentication ms-chap-v2
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set samplevpn esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec transform-set Set_1 esp-3des esp-sha-hmac
crypto ipsec transform-set TRANS_ESP_3DES_SHA esp-3des esp-sha-hmac
crypto ipsec transform-set TRANS_ESP_3DES_SHA mode transport
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map samplevpn_map 1 set transform-set samplevpn
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5 TRANS_ESP_3DES_SHA
crypto map workmap 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map workmap interface outside
crypto map workmap interface backup
crypto isakmp policy 10
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 28800

Thanks for the response Javier, but I'm still getting the same error.
FRWALL# show run aaa-server
aaa-server ADLDAP protocol ldap
max-failed-attempts 5
aaa-server ADLDAP (inside) host 10.10.0.91
ldap-base-dn dc=*******, dc=com
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password *****
ldap-login-dn login@*********
server-type microsoft
aaa-server ADLDAP (inside) host 10.10.0.91
ldap-base-dn dc=n********, dc=com
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password *****
ldap-login-dn asaldap@*******.com
server-type microsoft
FRWALL# show running-config tunnel-group DefaultRAGroup
tunnel-group DefaultRAGroup general-attributes
address-pool VPNpool
authentication-server-group ADLDAP
default-group-policy DefaultRAGroup
strip-group
tunnel-group DefaultRAGroup ipsec-attributes
pre-shared-key *****
tunnel-group DefaultRAGroup ppp-attributes
no authentication chap
authentication ms-chap-v2

Trying to understand text encodings between windows clients and oracle DB

I am focusing on a "maybe bad configured" oracle windows xp client connecting into a well configured oracle db server (10g for example). Instead of just keep the correct client settings to make it work I would prefer to understand what is really doing the oracle client with all the posible bad configurations regarding encodings.
When the client executes something like "SELECT 'Col1', N'Col2' from dual" before sending the sql sentence into the server the sentence itself should be encoded.
But the way the sentence is encoded or the fact that some magic encoding transform occurs depends on the technology used (Java Thin, OCI, Oledb, etc..) and sometimes it depends on the windows setting "Languages for Non-unicode programs" and sometimes it depends on the client NLS_LANG setting on the registry. Or maybe thigs are simpler and I simply got confused... Here we could add that maybe some third party tool could do some other "helpfull" hidden magic encoding transformation to make it work and things become interesting
A second time when all this encoding stuff should be considered is when the results of the sentences are retrieved on the client.
At this point the client receives an byte stream from the server (that could be a VARCHAR column or a NVARCHAR column). Again depending on the technology used the client could be specting a utext, text (OCI) or a CHAR, NCHAR (in JAVA) or a SQL_C_WCHAR, SQL_C_CHAR (in OleDb), etc...
Well, I'm not sure at all about the first point. Is all the sentence encoded in the same way before sending it to the server (ie is sended as plain text) or before the client parses the sentence and it understand that is sending a SELECT statement that returns two cols (one varchar and the other nvarchar)? For example the N, the ' and the Col2 are sent using the same encoding?

Todd:
Ref:
http://docs.oracle.com/cd/E35855_01/tuxedo/docs12c/ads/adecid.html#wp1075436
Section: Generating ECID by Native/WS/Jolt clients and Domain Gateway
We are using Jolt Clients, via JSL for executing Tuxedo Services. The problem, we always face while debugging is cross relation. It would be extremely useful for us if we could get the ECID printed in webserver and tuxedo server process. Can we get ECID using any programming API in jolt client and in Tuxedo server process ? It would help us to correlate web, Tux and server logs
Thanks,
Biju

Oracle 8i Windows Client and 9i Unix Database server

Is it recommended to use Oracle Windows 8i client against Oracle 9i Database server?
Does anyone have an official Oracle link about this?
Thanks
Dipak

Only by putting an Oracle 8 database between them... You can set up an Oracle 8 database with a dblink to the Oracle 7 database and connect to that via an Oracle 9 client. Not pretty and not particularly efficient, but it'll work in a pinch.
Justin
Distributed Database Consulting, Inc.
http://www.ddbcinc.com/askDDBC

ISE device differentiated access and windows clients

Hi guys,
Pretty new to ISE and looking for some help wrapping my head around a couple of things.
First, I have a beta wireless network setup, called VIP for for employees to connect their mobile devices too, it's PEAP based. i'm also tagging into it the ability to create guest accounts through a portal and redirecting to different vlans (and thereby different internet providers). That's all working pretty well. However, one of the issues I have with it of course is with PEAP, a windows client doesn't correctly configure for it as it defaults to using the username/password logged into it. Is it possible to attach a policy to that network to determine if it's a windows client and require them to do web-auth user/password? Whats the best approach for that? I didn't want to do web-auth for everyone (smartphones/tablets) as it's not accepted by the user base very well (healthcare) and they have to buy-in.
Secondly, we have a situation where corporate ipads may be used by the same individuals (employees) who have their own devices and have access to the VIP network via their AD username/password. What I don't want to do, is use PEAP for the corporate network (ipads) and give the user the ability to connect to the corporate network with their personal device as well. So I'm trying to figure out how I can limit this. I would go off of the certificate based on the device, but I'm deploying certificates from my MobileIron MDM Server via it's scep proxy that runs off my MS PKI NDES installation. As far as I know, I can't make NDES give different type of certificates for authentication to different networks... All sounds very confusing, so if you have ideas or scenarios on how to approach this, I would really appreciate it.
Thank you,
Raun

You can enable ISE profiling and profile endpoints and assign auth policy based on their profile.
http://www.cisco.com/c/en/us/td/docs/security/ise/1-2/user_guide/ise_user_guide/ise_prof_pol.html
http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/howto_30_ise_profiling.pdf

Windows 8 and IE10 and 11 not accepting Proxy Settings via Group Policy from windows server 2003

Hi
We are still running Windows Server 2003 with a Win7 and Win8 desktop environment. I can control Win7 IE9 settings,
But Win8 systems are running IE10. We have an internal proxy server.
Is there any way to force the proxy settings to the Win8/IE10 or 11 systems .
i have tried with The IE 10 .adm template and applied gpo,but does not have any proxy settings for ie10 and no changes were applies
please can anyone help me regarding this
i want to apply GPO from windows server 2003 to windows 8 ie10/11
Thanks
KNC

Hi,
I agree with Zanderol24, we can install RSAT on a windows8 client, and then we can use Group Policy Management to manage group policy from the client.
For more information about RSAT, we can refer to the following link:
Remote Server Administration Tools (RSAT) for Windows Client and Windows Server (dsforum2wiki)
http://social.technet.microsoft.com/wiki/contents/articles/2202.remote-server-administration-tools-rsat-for-windows-client-and-windows-server-dsforum2wiki.aspx
For more detailed information about how to use GPP to configure the proxy setting for ie10 and ie11, we can refer to the following link:
How to configure Group Policy Preference settings for Internet Explorer 11 in Windows 8.1 or Windows Server 2012 R2
http://support.microsoft.com/kb/2898604
When we use GPPs you need to be aware of the F5-F8 keys:
Red / Green: GP Preferences doesn’t work even though the policy applied and after gpupdate \force
http://blogs.technet.com/b/grouppolicy/archive/2008/10/13/red-green-gp-preferences-doesn-t-work-even-though-the-policy-applied-and-after-gpupdate-force.aspx
Besides, aside from using group policy to manage IE, IEAK can also be used to do this.
For IEAK, the following article can be referred to for more information.
Internet Explorer Administration Kit (IEAK) Information and Downloads
http://technet.microsoft.com/en-in/ie/bb219517.aspx
Best Regards,
Erin

Oracle 10g EE Windows Client on different machine than Pracle 10g EE server

I downloaded the Oracle 10g EE Windows Client and installed it on a WinXP (SP3) machine that had no Oracle components installed. The idea was to use it to connect to an Oracle 10g EE database running on another machine on the network.
After installing the software, what I find in the start menu is:
Oracle Client 10g Express Edition
- Go To Online Forum
- Read Documentation
- Register For Online Forum
- Run SQL Command Line
When I "Read Documentation" and go to the "Getting Started" link it talks about other menu options which I can't find ("Go To Database Home Page").
Clearly something isn't working here, but what?
Pete

This option is available on server. Not on client.
Use following link instead:
http://<server_ip_address>:8080/apex/

Agentry - Field alignment errors in Windows client

I'm running WM6.1 on the 7.03.605 Windows client and I've been unable to find any solution to field values aligning on top while their labels are aligned to the base of the line. This is somewhat noticeable at the default window size and glaringly obvious if the window is maximized on a larger screen such as 1920x1080.
Is there any option other than rebuilding these screens so they have separate label entries floating above the field values?
The screenshot shows how bad this is. I've drawn a red box around two of the fields to show just how much higher they are than their corresponding label.
Tags edited by: Michael Appleby

Hi Chris,
if I remember correctly, the alignment is "correct" for object properties that do not have the "Word Wrap" option checked. A workaround for object properties with "Word Wrap" enabled is the following:
- change the fields object property to :>Main Object>"DummyNoWrap" Property where the DummyNoWrap Property is a String Property that has no "Word Wrap" enabled.
- add an update rule that updates the field with the property you want to display on that field
I do not think this will work on transaction screens, but maybe it covers your problem.
Regards, Daniel

How to access oracle R12 applications from windows client

Hi All,
I installed R12 oracle applications on Linux through VMWare and every thing was fine now. My database listener, database and applications are up and running. I installed Java and Mozillla and established a soft link on LInux but was not able to access oracle applicaitons from Uniix box. I was seeing if i can do it from windows client. Mine is windows vista and i pinged the ipaddress and its connecting but was not able to access applications from windows client and also from linux.
Can any one help me accessing applications from windows client and unix box

Hi;
I installed R12 oracle applications on Linux through VMWare and every thing was fine now. My database listener, database and applications are up and running. I installed Java and Mozillla and established a soft link on LInux but was not able to access oracle applicaitons from Uniix box. I was seeing if i can do it from windows client. Mine is windows vista and i pinged the ipaddress and its connecting but was not able to access applications from windows client and also from linux.
Can any one help me accessing applications from windows client and unix box1. Be sure you can ping your linux from your client
2. Be sure your selinux and firewal disable on linux machine
3. Add your IP and hostaname to your windows C:\WINDOWS\system32\drivers\etc\hosts file
4. Add your url to your trusted site on windows
5. Use IE7 or check below note to can use certified browswer and access EBS
Recommended Browsers for Oracle E-Business Suite Release 12 [ID 389422.1]
Regard
Helios

Import / Load Compliance Baseline Settings into a Windows Client

Hi all, I am using a Baseline with a set of CI´s deployed to CM 2012 collection of Windows 7 and Windows 8 machines.
Everything is working property, on the other hand I am checking a way to export somehow the baseline + ci´s settings and load / import those settings into a client machine that is not included on the collection where the baseline is deployed.
In other words, is there anyway to have a XML / MOF / CAB, with all the baseline definition and import it to a windows client and evaluate that baseline.
I will like to include this procedure (import a BL + evaluate) at the last step of my OSD Task Sequence, so that way I could qualify the installation based on this baseline at the right moment the task sequence finish.
Thanks in advance
Jesus Belinchon

Hi all, I am using a Baseline with a set of CI´s deployed to CM 2012 collection of Windows 7 and Windows 8 machines.
Everything is working property, on the other hand I am checking a way to export somehow the baseline + ci´s settings and load / import those settings into a client machine that is not included on the collection where the baseline is deployed.
In other words, is there anyway to export a XML / MOF / CAB, with all the baseline definition and import it to a windows client and evaluate that baseline.
I will like to include this procedure (import a BL + evaluate) at the last step of my OSD Task Sequence, so that way I could qualify the installation based on this baseline at the right moment the task sequence finish.
Thanks in advance
Jesus Belinchon

Oracle client 8.1.7 and ldap naming method

Hello!
I have forms 6 and oracle net 8.0.5 but this version does not support ldap naming method.... so anyone know version of oracle client for windows support which ldap? Maybe 8.1.7? I need to find 8.1.7 client instalation maybe some links?
regards - mj

The minimum version for LDAP naming is 8.1.6, but I don't think it will be possible to direct Forms 6 to use it, I think you'll find that it's tied into the 8.0 stack.
If you want a centralised naming method for use with the 8.0 stack then it would have to be the old Oracle Names service, which was removed after version 9.2.
http://download.oracle.com/docs/cd/B10501_01/network.920/a96580/config_c.htm#485521

Problem with Cisco VPN client and HP elitebook 2530p windows 7 64-bit

Hi there
I have a HP Elitebook 2530p which i upgraded to windows 7 64-bit. I installed the Cisco VPN client application (ver. 5.0.07.0290 and also 64-bit) and the HP connection manager to connect to the internet through a modem Qualcomm gobi 1000 (that is inside the laptop). When I connect to the VPN, it connects (I write the username and password) but there is no traffic inside de virtual adapter for my servers. When I connect to the internet through wire or wireless internet, I connect de VPN client and there is no problem to establish communication to my servers.
I tried everything, also change the driver and an earlier version of the HP connection manager application. I also talked to HP and they told me that there was a report with this kind of problem and it was delivered to Cisco. I don’t know where is the problem.
Could anyone help me?
Thanks to all.

You can try to update Deterministic Network Enhancer to the below listed release which supports
WWAN Drivers.
http://www.citrix.com/lang/English/lp/lp_1680845.asp.
DNE now supports WWAN devices in Win7. Before downloading the latest version of DNEUpdate from the links below, be sure you have the latest
drivers for your network adapters by downloading them from the vendors websites.
For 64-bit: ftp://files.citrix.com/dneupdate64.msi
Hope that helps.

Have Windows XP and Adobe 9 Reader and need to send a series of large documents to clients as a matter of urgency When I convert 10 pages a MS-Word file to Pdf this results in file of 6.7 MB which can't be emailed. Do I combine them and then copy

I have Windows XP and Adobe 9 Reader and need to send a series of large documents to clients as a matter of urgency When I convert 10 pages a MS-Word file to Pdf this results in file of 6.7 MB which can't be emailed. Do I combine them and then copy to JPEG 2000 or do I have to save each page separately which is very time consuming Please advise me how to reduce the size and send 10 pages plus quickly by Adobe without the huge hassles I am enduring

What kind of software do you use for the conversion to pdf? Adobe Reader can't create pdf files.

PKI SCCM Client Certificate Template not viewable by Windows 7 and Server 2008 workgroup machines.

Hello everyone,
I’m having issues with workgroup computers, not domain systems when I request a certificate.
It’s extremely weird. It has something to do with Windows 7 and Windows 2008 machines. In 2003 server I can request a certificate manually with certutil and it see the certificate template. I copy over the exact command
on windows 7 and it can’t see the certificate template.
I have the following configuration:
CA Enterprise
I have created the SCCM Client Certificate
I have created the SCCM Web Server Certificate
I have created the SCCM Distribution Point Certificate
GPO is configured
SCCM 2012 R2 CU2 configured to do HTTP and HTTPS
Installed SCCM Client Certificate
Installed SCCM Web Server Certificate
Installed Distribution Point Certificate
Deployed to a domain computer good on PKI
Workgroup Computers:
I’m having issues with deploying certificates
Windows 7 –
(ERROR) not successful
Windows Server 2008 R2 –
(ERROR) not successful
Windows Server 2003 - successful
Windows XP – successful
How I’m getting the certs for the clients is by utilizing the following scripts from this URL.
http://www.ithierarchy.com/ITH/node/48
I did find a couple of errors in the code, but if it’s working on my Server 2003, then it should work on the others. Windows 7 and Windows 2008 R2 seem to have the same issue. The error I’m getting is the following:
Command line requesting the cert ---- CertReq –new –f testcomputer.home.pvt.inf c:\client\testcomputer.home.pvt.req
Error --- Template not found.
SCCMClientCertificate (this is my template)

Just to give an update on what’s happening with this. I found out this format is unsupported by MS with Windows Vista and newer OS’s.
Instead you must utilize two other additional roles on the CA to have this work. The caviate is, I’m down to the testing and it’s not working as in the document. I have MS Support
working with me to resolve this issue since it was written by MSFT.
http://blogs.technet.com/b/askds/archive/2010/05/25/enabling-cep-and-ces-for-enrolling-non-domain-joined-computers-for-certificates.aspx
and use this doc for similar workgroup computers for rolling out certs. This was written for RT devices, however, it should work once I get to that point.
http://blogs.technet.com/b/pki/archive/2012/12/11/certificate-for-winrt-devices-and-non-domain-member-devices.aspx

PKI Client Certificate Template not viewable by Windows 7 and Server 2008 workgroup machines.

Hello everyone,
I’m having issues with workgroup computers, not domain systems when I request a certificate.
It’s extremely weird. It has something to do with Windows 7 and Windows 2008 machines. In 2003 server I can request a certificate manually with certutil and it see the certificate template. I copy over the exact command
on windows 7 and it can’t see the certificate template.
I have the following configuration:
CA Enterprise
I have created the SCCM Client Certificate
I have created the SCCM Web Server Certificate
I have created the SCCM Distribution Point Certificate
GPO is configured
SCCM 2012 R2 CU2 configured to do HTTP and HTTPS
Installed SCCM Client Certificate
Installed SCCM Web Server Certificate
Installed Distribution Point Certificate
Deployed to a domain computer good on PKI
Workgroup Computers:
I’m having issues with deploying certificates
Windows 7 –
(ERROR) not successful
Windows Server 2008 R2 –
(ERROR) not successful
Windows Server 2003 - successful
Windows XP – successful
How I’m getting the certs for the clients is by utilizing the following scripts from this URL.
http://www.ithierarchy.com/ITH/node/48
I did find a couple of errors in the code, but if it’s working on my Server 2003, then it should work on the others. Windows 7 and Windows 2008 R2 seem to have the same issue. The error I’m getting is the following:
Command line requesting the cert ---- CertReq –new –f testcomputer.home.pvt.inf c:\client\testcomputer.home.pvt.req
Error --- Template not found.
SCCMClientCertificate (this is my template)

Just to give an update on what’s happening with this. I found out this format is unsupported by MS with Windows Vista and newer OS’s.
Instead you must utilize two other additional roles on the CA to have this work. The caviate is, I’m down to the testing and it’s not working as in the document. I have MS
Support working with me to resolve this issue since it was written by MSFT.
http://blogs.technet.com/b/askds/archive/2010/05/25/enabling-cep-and-ces-for-enrolling-non-domain-joined-computers-for-certificates.aspx
and use this doc for similar workgroup computers for rolling out certs. This was written for RT devices, however, it should work once I get to that point.
http://blogs.technet.com/b/pki/archive/2012/12/11/certificate-for-winrt-devices-and-non-domain-member-devices.aspx

Windows Client and ldap

Similar Messages

Maybe you are looking for