Wireless Auth errors

I am trying to setup leap authentication on a 1100 AP, with local radius.
Getting the following debug errors:
*Mar 2 10:23:05.311: dot11_auth_dot1x_run_rfsm: Executing Action(CLIENT_WAIT,TIMEOUT) for 0023.6c85.32cd
*Mar 2 10:23:05.311: dot11_auth_dot1x_send_client_fail: Authentication failed for 0023.6c85.32cd
*Mar 2 10:23:05.311: %DOT11-7-AUTH_FAILED: Station 0023.6c85.32cd Authentication failed
*Mar 2 10:23:10.592: AAA/BIND(00000070): Bind i/f
*Mar 2 10:23:10.592: dot11_auth_dot1x_start: in the dot11_auth_dot1x_start
*Mar 2 10:23:10.592: dot11_auth_dot1x_send_id_req_to_client: Sending identity request to 0023.6c85.32cd
*Mar 2 10:23:10.592: dot11_auth_dot1x_send_id_req_to_client: Client 0023.6c85.32cd timer started for 30 se
Any ideas what could be wrong with my config:
aaa new-model
aaa group server radius rad_eap
server 172.16.1.35 auth-port 1812 acct-port 1813
aaa authentication login eap_methods group rad_eap
aaa session-id common
dot11 syslog
dot11 ssid XXX
   authentication open eap eap_methods
   authentication network-eap eap_methods
   guest-mode
interface Dot11Radio0
no ip address
no ip route-cache
encryption key 1 size 40bit 7 873B0AA56FCA transmit-key
encryption mode wep mandatory
broadcast-key change 300
ssid XXX
speed basic-1.0 basic-2.0 basic-5.5 6.0 9.0 basic-11.0 12.0 18.0 24.0 36.0 48.0 54.0
channel 2437
station-role root
rts threshold 2312
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface FastEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface BVI1
ip address 172.16.1.35 255.255.255.0
no ip route-cache
radius-server local
nas 172.16.1.35 key 7 14001305020B297D727E
user xxxx nthash 7 0027435225792D535F796A6B2A3852444A59285D78097D7B6A177B325144545374
radius-server attribute 32 include-in-access-req format %h
radius-server host 172.16.1.35 auth-port 1812 acct-port 1813 key 7 120E04191C040F527C7D
radius-server vsa send accounting
bridge 1 route ip

If you are not using any EAP authentication, then remove the below commands..
authentication open eap eap_methods
authentication network-eap eap_methods
and issue just "authentication open"
then try connecting the wireless using the WEP key that you have configured.
Regards
Surendra

Similar Messages

Auth Error in BW while executing a query with Company hierarchy

Hi All,
I have an issue in BW Reporting auth objects.. Hope to get resolved here.
We are using BI 7.0. However We are still using the Reporting auth objects for fiield level security. We are having a problem while executing a query with company code hierarchy ,which is built on a multiprovider.
The Background is as below
Multiprovider: ZM_CD01 with 5 infocubes
Query: Has 0COMP_CODE as free characteristics with display hierarchy for Japan (Node APSC_012 is fixed value)
Node APSC_012 has 4070,4076,407A,408A,9830 company code values under it.
Reporting Auth Objects:
Z0COMPCODE: (for flat values)
4070,4076,407A,408A,407M,407P,8236, :
ZHCOMPCODE: (For tree structure)
4070,4076,407A,408A,407M,407P,8080, :
APSC_MGMT_HIER (Nodes: APSC_012,APSC019)
Both the reporting authorization objects are checked for multi provider ZM_CD01 in RSSM
While executing the query the following Auth error is received.
You do not have authorization to read object "Z0COMPCODE" authorization on '0COMP_CODE'
When I change the values for Z0COMPCODE to * it works fine. No Auth error.
Please help me resolve this issue. It is very critical now as the user needs to execute some important reports.
Thanks in Advance.
Ramkumar C

Hi Chandra,
Try the following:
1. Go to tcode RSSM
2. Enter the cube ZM_CD01 (all the other cubes) then click change.
3. Afterwards, u201Cunchecku201D ALL Authorization Objects under this cube. (Repeate the same for all the cubes)
4. Click Save.
This will resolve the issue.
Rgds,
Raghu

Improper message coming on console " ftpd[16809]: [ID 487707 auth.error] load_modules: can not open module /usr/lib/security/pam_unix_session.so.1"

Hi All,
I am using solaris 10u10 on Sun Fire platform. I am getting below message on cosole.
ftpd[16809]: [ID 776383 auth.error] open_module: stat(/usr/lib/security/pam_unix_session.so.1) failed: No such file or directory
ftpd[16809]: [ID 487707 auth.error] load_modules: can not open module /usr/lib/security/pam_unix_session.so.1
ftpd[16810]: [ID 776383 auth.error] open_module: stat(/usr/lib/security/pam_unix_session.so.1) failed: No such file or directory
ftpd[16810]: [ID 487707 auth.error] load_modules: can not open module /usr/lib/security/pam_unix_session.so.1
ftpd[16815]: [ID 776383 auth.error] open_module: stat(/usr/lib/security/pam_unix_session.so.1) failed: No such file or directory
ftpd[16815]: [ID 487707 auth.error] load_modules: can not open module /usr/lib/security/pam_unix_session.so.1
ftpd[16816]: [ID 776383 auth.error] open_module: stat(/usr/lib/security/pam_unix_session.so.1) failed: No such file or directory
ftpd[16816]: [ID 487707 auth.error] load_modules: can not open module /usr/lib/security/pam_unix_session.so.1
ftpd[16817]: [ID 776383 auth.error] open_module: stat(/usr/lib/security/pam_unix_session.so.1) failed: No such file or directory
ftpd[16817]: [ID 487707 auth.error] load_modules: can not open module /usr/lib/security/pam_unix_session.so.1
Also the file is present on the server
root@atrcx1454/var/adm> ls -lrt /usr/lib/security/pam_unix_session.so.1
-rwxr-xr-x 1 root bin 20652 Mar 19 2008 /usr/lib/security/pam_unix_session.so.1
Can anyone help why above message is coming on console

Is the ftp daemon that you use provided by the Solaris media ? If this is not the case, then would recommend to contact the software maintainer for more help.
And regarding chroot, please check this URL to know what it is : Sandbox (computer security) - Wikipedia, the free encyclopedia
Depending how this environment is configured, the library is maybe not present in this one.

I keep getting error 3322 suberror 1000136 DRM auth. error using Firefox

I keep getting error 3322 suberror 1000136 DRM auth. error using Firefox but have no problem playing same content in Chrome. I uninstalled and reinstalled Firefox but kept personal settings, which did not fix the problem. Can you help?

You may have had a change in hardware since the last time you accessed protected content with Firefox. To reset the protected content licenses, go to the settings manager, and click on Reset Content Licenses. Here is a link to the settings manager: http://www.macromedia.com/support/documentation/en/flashplayer/help/settings_manager08.htm l
See also this forum post: http://forums.adobe.com/message/3051713
We are working on automatic recovery from this error condition.

Mail Server Error - 21055: auth: Error: od?

Hi,
Just upgraded to OSX 10.8 Mountain Lion, now my email services have gone AWOL.
The server logs are telling me [DateTime domain.com] log[21055]:auth: Error: od (username, ip address): authentication failed for user=me, method=DIGEST-MD5
From a client (MS offlook) point of view I'm getting :
Your message did not reach some or all of the intended recipients.
Subject:    test
      Sent: 06/08/2012 19:09
The following recipient(s) cannot be reached:
      '[email protected]' on 06/08/2012 19:10
            451 4.3.5 <unknown[ip address]>: Client host rejected: Server configuration error
This used to work quite well with Lion and the Server Admin Tools.
Is there anything I can try?
Thanks in advance,
Jeff.

Thanks for getting back to me red shift, everything is now up and working again.
I think it was somthing to do with some folder permissions and some mail settings. The mail server GUI supplied with Mountain Lion is all but useless and didn't help in any way in tracking down or resolving the problem. So, I've taken the plunge and set up MailServ for Mountain lion, its a much better mail server GUI client, and seemed to correct some of my postfix settings.
I've tinkered a bit with command line mail stuff, but not quite at a level where I can fully administer it.
Are there any good command line resources out there? This is somthing I need to improve on.
Cheers.

802.1x Auth Error After Installing AirPort Update 2007-002 and 10.4.9

After installing the AirPort Extreme Update 2007-002 (and 10.4.9, but I doubt that update did it), I am unable to log into my campus's wireless network. I get the message "802.1x Authentication has failed. (Error: 1001 on port en1)"
I've double-checked the settings, and all looks good. Other Macs are able to log in fine but they do not have this update applied.
Other wireless connections from this computer work fine, including using another SSID on this wireless network using WPA/TKIP. Only the 802.1x auth is failing.
I'm a systems admin for the college, and I can see in the radius logs that an error is generated:
"Unexpected error. Possible error in server or client configuration."
I'm the only one getting this error. Anyone have any ideas about this?
Thanks in advance.
truk

I finally discovered what was going on. When doing either the 10.4.9 update or the Airport update, my /System/Library/Keychains/X509Anchors file was either corrupted or completely emptied. The file did remain with 0K size.
I started noticing that all SSL connections from the computer were failing (Safari, iChat, whatever) that depended on the Mac OS X components to do the SSL validation. (Firefox continued to work fine, as it has its own SSL stack.) I then ran the Keychain file check in Keychain, which alerted me to the exact file problem.
My wife also has a MacBook with the same version of Mac OS X, so I was able to copy her X509Anchors file to my computer and everything worked perfectly after that. SSL came back, iChat works, Safari works with SSL, and 802.1x works again.
Hope that helps someone else...

PSC 2510 - Wireless setup - "Error while saving the settings to the device."

While trying to setup my PSC 2510 to be wireless I get an error message "Error while saving the settings to the device.". This comes after selecting connecting Through Network, selecting printer device, selecting WEP, entering key, and clicking next.
PSC 2510
Windows Vista
Using latest sfotware from HP to install
Thanks
Dennis
This question was solved.
View Solution.

ISSUE RESOLVED .. based on responce from PrintDoc to penn (refrence topic "C4385 Printer - Netgear DGN2000 - wireless setup".
PrintDoc responce helped me find my problem (to reset network settings on the printer to factory) even though diffrent printer.
Thanks

Client auth error

I am using iPlanet Web Server 6.0 SP4 on Solaris 2.8 that is enabled for SSL and Client-auth.
In order to validate the client certificate, I configured this server to use my own Plug-in by adding authTrans line in "obj.conf":
<Object name=default>
AuthTrans fn="vsCheckClientCert"
</Object>
During startup, web server fails with following error.
Thanks in advance!!!
[20/Sep/2002:11:50:58] info ( 1984): successful server startup
[20/Sep/2002:11:50:58] info ( 1984): iPlanet-WebServer-Enterprise/6.0SP4 B07/17/2002 14:04
[20/Sep/2002:11:51:00] info ( 1985): Installing a new configuration
[20/Sep/2002:11:51:00] info ( 1985): [LS ls1] https://xx-sun.yy.com, port 444 ready to accept requests
[20/Sep/2002:11:51:00] info ( 1985): A new configuration was successfully installed
[20/Sep/2002:11:51:01] info ( 1985): Using the Solaris VM v1.2.2 from Sun Microsystems Inc.
[20/Sep/2002:11:51:01] info ( 1985): Java VM classpath: /usr/netscape/servers/plugins/servlets/examples/legacy/beans.10/SDKBeans10.jar:/usr/n
etscape/servers/bin/https/jar/NSServletLayer.jar:/usr/netscape/servers/bin/https/jar/NSJavaUtil.jar:/usr/netscape/servers/bin/https/jar/Admin
NativeUtil.jar:/usr/netscape/servers/bin/https/jar/NSJavaMiscUtil.jar:/usr/netscape/servers/bin/https/jar/servlet.jar:/usr/netscape/servers/b
in/https/jar/servlet-2.3-filters-api.jar:/usr/netscape/servers/bin/https/jar/jsp092.jar:/usr/netscape/servers/bin/https/jar/jaxp.jar:/usr/net
scape/servers/bin/https/jar/crimson.jar:/usr/netscape/servers/bin/https/jar/xalan.jar:/usr/netscape/servers/bin/https/jar/jspengine.jar:
[20/Sep/2002:11:51:01] info ( 1985): Loading IWSSessionManager by default.
[20/Sep/2002:11:51:01] info ( 1985): IWSSessionManager: Maximum number of sessions is 1000
[20/Sep/2002:11:51:01] config ( 1985): for host 0.0.0.0 trying to GET /, Client-Auth reports: get-client-cert requires that security and SSL3
be enabled.
[20/Sep/2002:11:51:01] failure ( 1985): for host 0.0.0.0 trying to GET /, vsCheckClientCert reports: Couldn't get a client authentication cer
tificate
[20/Sep/2002:11:51:02] config ( 1985): for host 0.0.0.0 trying to GET /, Client-Auth reports: get-client-cert requires that security and SSL3
be enabled.
[20/Sep/2002:11:51:02] failure ( 1985): for host 0.0.0.0 trying to GET /, vsCheckClientCert reports: Couldn't get a client authentication cer
tificate
[20/Sep/2002:11:51:02] failure ( 1985): vs(https-cvm-test-444)Error getting document-root for this virtual server; please check your server c
onfiguration.
[20/Sep/2002:11:51:02] failure ( 1985): vs(https-cvm-test-444)Cannot create web applications virtual server environment.
[20/Sep/2002:11:51:02] failure ( 1985): Internal Error: Failed to initialize web application environment (web-apps.xml) for virtual server (h
ttps-cvm-test-444)
[20/Sep/2002:11:51:02] info ( 1985): Internal Error: Failed to initialize web application environment (web-apps.xml) for virtual server (http
s-cvm-test-444)
[20/Sep/2002:11:51:02] failure ( 1985): The new configuration was rejected, rolling back

Thanks for the reply!!
My SAF (vsCheckClientCert) works fine if I disable the servlets. It also works by disabling the Web Application State in server.xml
<VSCLASS id="defaultclass" objectfile="obj.conf" rootobject="default" acceptlanguage="off">
<VS id="https-cvm-test-444" state="on" urlhosts="psingal-sun.verisign.com" mime="mime1" aclids="acl1" connections="group1">
===> <VARS webapps_file="web-apps.xml" webapps_enable="off"/>
</VS>
</VSCLASS>
I am facing the problem only with iPlanet 6.0, the SAF worked fine with "Servlet Enabled" in the previous releases of iPlanet 4.x. Is there any way by which my SAF works with default server settings i.e. Servlet Enabled and Web Application State On?

Wireless sample error

UP.simulater's error code is like this
=> HTML or Plain text,
can't compile this..
phone's information's output is like this
=>
Content-Type: text/html. Content follows:
<?xml version = '1.0' encoding = 'UTF-8'?>
<html xmlns="http://www.w3.org/TR/REC-html40">
End Content-Type: text/html.
index.xsql code is like this
=>
<?xml version="1.0"?>
<?xml-stylesheet type="text/xsl" media="Palm" href="indexPP.xsl"?>
<?xml-stylesheet type="text/xsl" media="Mozilla" href="DeptIndexHTML.xsl"?>
<?xml-stylesheet type="text/xsl" media="UP" href="DeptIndexWML.xsl"?>
what's the problem?

i install ndiswrapper again and now the situation like that:
#ndiswrapper -l
installed drivers:
netrtlx driver installed, hardware (10EC:8169) present (alternate driver: r8169)
#/etc/rc.d/network restart
:: Stopping Network [BUSY] SIOCDELRT: No such process
broadbast: Host name lookup failure
ifconfig: `--help' gives usage information.
[FAIL]
:: Starting network profile: host [DONE]
:: Starting Network [BUSY] SIOCADDRT: File exists
[FAIL]
#iwconfig
lo no wireless extensions.
sit0 no wireless extensions.
wlan0 no wireless extensions.
#nano /etc/rc.conf
lo="lo 127.0.0.1"
wlan0="dhcp"
wlan0="wlan0 192.168.2.145 netmask 255.255.255.0 broadbast 192.168.2.225"
wlan_wlan0="wlan0 host host"
wlan_wlan0="wlan0 host host key $MYPASSWORD"
wlan_wlan0="wlan0 host host key s:wirelesspassword"
WLAN_INTERFACES=(wlan0)
INTERFACES=(lo wlan0)
gateway="default gw 192.168.2.1"
ROUTES=(gateway)
NET_PROFILES=(host)

SSRS 2008 R2 auth error

Hi Everyone,
I'm migrating from one server to another. SSRS works on the old setup just fine, and I've managed to get it working for me (as admin) on the new server just fine (both by browsing locally and from my laptop remotely). FYI, the new Sql Server is on a hosted
server which is not part of our domain - but the same users are created on both.
However, a user I'm testing the new server with (who isn't an admin) cannot get SSRS to work. I've added her in SSRS under Site Settings as a user, and also given access in the root folder settings.
RDPing on the new server and running IE (http://localhost/Reports), she gets the error: "User <domain\username> does not have the required permissions. Verify that sufficient permissions have been granted and Windows User Account Control
(UAC) restrictions have been addressed). This doesn't happen in Chrome locally - that's a whole other set of errors!
Trying remotely (from her laptop on our LAN), she gets the main Report Manager page, with the list of all reports on it. However, when she selects a report, she gets:
-And error has occurred during report processing. (rsProcessingAborted)
- Cannot create a connection to data source 'DataSource1'. (rsErrorOpeningConnection)
- Login failed for user '<DB machine/username>'
"DataSource1" is the default data connection within the report definition and is just setup for Windows Auth. Looking on the existing setup, I cannot see her with a username on sql server, and yet it still works!
As you can see, very different behaviours. Ideally, I'm after getting the remote connection from the laptop working - but I would like to understand both issues ideally.
I've got the old infrastructure and compared permissions for various things but I cannot see any differences. Any help would be appreciated!

Hi Tifosi256,
According to your description, you have issue when migrating your SQL server to another server. A user with granted permission can’t access Report Manager on IE/Firefox locally. And when connecting server remotely, this user can’t open a connection to data
source. Right?
In Reporting Service, we can use Windows User Account to access Report in browser. In different browsers, they have different security level for different system roles. In this scenario, the user is not system admin, when she access the Report Manager, the
site of Report Manager might be denied by IE/Firefox. And when the user back to her laptop, I think she might be system admin in her own system. So the Report Manager site can be accepted by browser. For this reason, we can go to IE/Firefox, add the Report
Manager URL as Trusted site.
For the data source connecting issue, the reason why the user can’t open a connection to data source because when we connect to data source, we act as a Windows User. If this user has no authority to access database, it will be unable to open a connection
to data source. However, we have two options to solve this problem. One is go to Database Engine in SQL Server Management Studio. Add the user in Security.
The other is go to the Report properties in Report Manager. In Data Sources, Select Credentials stored securely in the report server. Put in a Window User Account which has authority to access the database. Select Use as Windows credentials when connecting
to the data source. So we can act as the user with granted authority when connecting data source.
If you have any question, please feel free to ask.
Best Regards,
Simon Hou

Best Wireless Auth. methods ACS 3.2(3) and AD

I am new with ACS and wirless authentication. Have just deployed my ACS 3.2 for Windows, and am trying to select the best methods of authentication for my invironment. I have determined my risk level to be low to medium. I would consider MAC based Auth. to be sufficient for users that don't support LEAP or similar Proto. I have a mixed OS base from Win98, 2000 and XP and MacOS 9.2 to MacOSX, I have AD setup for the external database, and it is working with ACS to allow Radius Auth. on my AP1100G Access Points. My questions are these.
1- What is the best practice for setting up the MAC address auth.? Do I creat a text list, ACS records, SQL database, or can it be done in AD in some way?
2- Is Leap the best Auth. Protocol considering my needs? Is there one that would be less difficult to set up but offer low to medium security I need.
3- I am a little confussed by the config that needs to exhist on the Aironet 1100 series AP. What would be a good document/s for the configuration of these devices?
Eric Bodily
Idaho Falls School District 91
Network Administrator

I have no issues running Cisco ACS version 3.2 on Windows
Server 2003 with SP2:
1) create user test1 in MS Active Directory and put test1
in users group with dial-in access granted,
3) Create a group called "LDAP". Actually I renamed
group name "group 1" to "LDAP".
3) in ACS external user database configuration, I specified
domain "CCIE" as for this. unknow user policy is to use
Windows Database configuration,
4) Configure the database configuration in ACS to point
to "CCIE" windows domain,
5) setup the ACS to authenticate one of your Cisco devices
and log in using the MS windows account,
By the way, mgurwara, you are wrong. I run Cisco
ACS 3.2 on windows 2003 Enterprise Edition with Service
Pack 2. I am running it on a Dell Optiplex Gx240
(1.7 GHz with 512MB of RAM) and it is running fine.
I use it to manage about 20 cisco devices and
about 200 Wireless LEAP user(s). Furthermore, I am also
running ACS 4.1 on another identical hardware. It has
nothing to do with the hardware. I don't know where
you get that information from.

Password file auth - error ORA-01990: error opening password file '/p00/ora

Hi, Im setting up password file auth on our existing database.
Ive run this
orapwd file=orapwdt04.pwd password=secret entries=5
then set this in the .ora file
remote_login_passwordfile=exclusive
But when I restart the dabase im getting this error
ORA-01990: error opening password file '/p00/oraprod/9.2.0/dbs/orapw'
How / where do I tell the database to look for the password file.
Im running on AIX and Oracle 9.2.0.6
thanks for looking.

password filename must be in the format of orapw<sid> and location of the file $ORACLE_HOME/dbs

After wireless update error 500/404 on Accept link

after doing the wireless update I'm trying to connect to the internet via the explorer browser... have to click on the "i accept" button getting a HTTP Error 500 Internal Server Error....
I can connect using my facebook app or my other apps just not the browser app.
help
Solved!
Go to Solution.

Hi there!
I suggest the following steps:
1) Register HRT
Homescreen > Options > Advanced Options > Host Routing Table > BBKey (it does not matter which line is current) > Register Now
2) Resend Service Books
KB02830 Send the service books for the BlackBerry Internet Service
3) Batt Pull Reboot
Anytime random strange behavior or sluggishness creeps in, the first thing to do is a battery pop reboot. With power ON, remove the back cover and pull out the battery. Wait about a minute then replace the battery and cover. Power up and wait patiently through the long reboot -- ~5 minutes. See if things have returned to good operation. Like all computing devices, BB's suffer from memory leaks and such...with a hard reboot being the best cure.
Hopefully that will get things going again for you!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Client-Auth errors

Hi all,
I have a SOWS 6.1 and I am getting the following error eache time a user try to get the page:
Client-Auth reports: Unexpected error receiving data: -5938
Do you know what it should be?
Thanks in advance

Can you tell us the exact configuration you have.
Send a request to the server to capture the details of initial handshake which performs the client authentication through ssltap. Save the output. Also, when the
certificates are exchanged ssltap will save them to a file (see the output of
ssltap for the filenames it used). Get those cert files as well.

LDAP Auth Error ccmuser web access

Hi,
I have a CUCM v9.1 with an issue for access to the ccmuser web page using the AD Credentials, I've configured the LDAP Auth in the CUCM with no error messages and also the web access for my users like this:
When I access the site http://cucm_ip_add/ccmuser first I get this message:
After that I try to log into to the web page but I get this error:
I have no issues importing the users, the problem is with the authentication.
I've checked the ldap port and I'm not using global catalog so the correct one is 389 (tried 3268 and I got an error message from the cucm ldap authentication config page).
Any ideas guys??
Thanks in advance.

One commone one is that CUCM treats the username field as case sensitive. Does it have any upper case characters? You can see this within /ccmadmin under End User Configuration.
If that's not it, either a Wireshark of the LDAP bind or a stare/compare between your sync agreement and the auth config to see why one can get the user object but the other cannot bind as that person.
Please remember to rate helpful responses and identify helpful or correct answers.

Wireless Auth errors

Similar Messages

Maybe you are looking for