3015 stops working with ACS, when updated to 3.1

Hello

We´ve uses the 3015 with 3.5.2 for a few months.

It s been using ACS 3.0 with Radius set up exactedly as described in "using Cisco Secure ACS for Windows with the.

3000 Concentrator VPN - IPSec.

Now, we have improved the ACS to 3.1 and it stops working.

When you try to TEST the communication between the 3015 and ACS we get "rejected authentication: password group is."

not configured", and if looking in the logg you can see what follows.

09:01:43.990 02/28/2003 191, SEV = 8 AUTHDBG/58 RPT = 2

AUTH_Callback (514afe4, 0, 0)

192 09:01:43.990 02/28/2003 SEV = 6 RPT AUTH/4 = 2

Successful authentication: manage 12, server = 192.168.244.48 =, user = borta

193 09:01:43.990 02/28/2003 SEV = 3 RPT AUTH/5 = 10

Authentication was rejected: reason = group of password is not configured

manage 12, server = 192.168.244.48 =, user = borta, area =

09:01:43.990 195 02/28/2003 SEV = 8 RPT AUTHDBG/2 = 2

AUTH_Close (12)

Any ideas?

ACS 3.1 is slightly changed it returns the class attribute in its packages to respond when a user authenticates, this was done for session management purposes. Normally, this has no effect on everything that you are authenticating against, but the 3000 uses this class attribute to force VPn users in a specific group. For example, you can force the VPN users in specific groups of 3000 by returning the class attribute so that the user with a specific group VPN3000 name, so any group they have actually configured in the VPN client, they find themselves in this other group and inherit all settings in this group.

The error "password of group is not configured" comes from the fact that ACS3.1 returns a string in the format "dfhsdfjsdfshhhhghgkgekjfkjguwywe" (or something like that anyway :-)) in the Class attribute. The 3,000 who interprets as you want to force this user in this group. Of course this group name does not exist on the 3000, and you get rejected.

There are two ways around this:

-Move the hub to what anyone higher than what you're running. From v3.5.3 ignored 3000 this format of the attribute and access connections works very well even if ACS always sends the return attribute.

-Change the user or group ACS and actually return the appropriate form the class attribute:

UO = groupname;

where groupname is the name of group VPN3000 you want this user to be placed in (it may or may be not the same as the one they set up in their client). Make sure that UO is in capital letters and do not forget the semicolon. The attribute Class is so just check 25, RADIUS (IETF) attribute cela and off you go, you may need to activate under Interface Config - RADIUS (IETF) Firstly if you see under the ACS user/group.

Tags: Cisco Security

Similar Questions

  • My bi-ecrans Setup has stopped working with the latest update of Windows

    My bi-ecrans Setup has stopped working since the last windows update.  The second screen is relegated to never turn on and in the part 'View' of the Control Panel, I can't change the 2nd monitor resolution of anything in addition to 480 x 640.  I installed the latest drivers for the video card and two monitors.  I have everything down, powered, entretienavec left for a few minutes and fed up, nothing.  It has been like that for a few days now.  Any advice would be very useful,

    Thank you

    Tyler

    Details:

    PC: HP Compaq 8200 Elite

    Graphics card: AMD Radeon HD 6500 Series

    First monitor: ViewSonic 2030

    Second monitor: Dell 1908FP

    All pilots are underway according to Dell, ViewSonic, AMD and Microsoft.

    Latest patches from Windows Update killed my dual Setup monitor:

    Update of security for Microsoft Office PowerPoint 2007 (KB2596764)

    A security update cumulative for the stop bits ActiveX for Windows 7 for x 64-based systems (KB2618451)

    X 64-December Windows malicious software removal tool (KB890830) 2011

    Update security for Windows 7 for x 64-based systems (KB2620712)

    Update of security for Microsoft Office PowerPoint 2007 (KB2596912)

    Update for Microsoft Office Excel 2007 (KB2596596)

    Update of security for Microsoft Office Publisher 2007 (KB2596705)

    Update of security suites for Microsoft Office 2007 (KB2596785)

    Cumulative Security Update for Internet Explorer 9 for Windows 7 for x 64-based systems (KB2618444)

    Updated for suites Microsoft Office 2007 (KB2596651)

    Update security for Windows 7 for x 64-based systems (KB2639417)

    Updated for suites Microsoft Office 2007 (KB2596789)

    Update security for Windows 7 for x 64-based systems (KB2619339)

    Update for Windows 7 for x 64-based systems (KB2633952)

    There is no update stated in your post which could have implications on your graphics card, or its driver.

    Have you installed the latest graphic driver AMD in the AMD site?

    http://sites.AMD.com/us/game/downloads/pages/radeon_win7-32.aspx

    NB this link is the 32-bit win7 driver.

  • Why can't firefox do things until they upgrade to a DOWNGRADE? Videos stop working with the last update and no available answer.

    Since the last update of Firefox I get no video because of errors in plugins Java that I can't find a fix for. I can diagnose the same problems every day, but could not find a way to fix them.

    The fix for this issue has been addressed:

    https://support.Mozilla.org/en-us/questions/1036172

    You are right. Now, I have to solve other problems of this update the so-called.

  • Since the Adobe Acrobat update in may on my Samsung GalaxyTab S android version 5.0.2 calculations (add, subtract and multiply) stopped working with pdf forms.  Same shape works well on laptop.

    Since updating Adobe Acrobat app in may on my Samsung GalaxyTab S android version 5.0.2 calculations (add, subtract and multiply) stopped working with pdf forms.  Same shape works well on laptop. Form calculations are still working fine on the laptop using the same forms.  Also worked fine on Samsung Tablet before can update the app.

    Hi herb,

    The calculations do not work as they use Javascript to perform the operation and version 5.0.x Lollipop has problem with Javascript that is fixed in the version 5.1.x.

    Thank you

    Abhishek

  • Text properties DC stopped working with 2015.017.20050 updated

    My bar of text properties simply ceased to work with this new update. Should I just restore to a previous date and forget this update (for now)? Or, others have this problem with possibly a patch? (windows 7)

    Hello

    We have released an update today which solves the problem of the properties toolbar and now you can continue to use it outside of the app commenting as well. Please open Acrobat or Reader DC and visit help > check for updates to ensure that you are on the latest patch.

    Details on the release: https://helpx.adobe.com/acrobat/release-note/acrobat-dc-august-02-2016.html

    Please let us know how it goes.

    Thank you

    -ashu

  • FDM has stopped working with firefox

    Free Download Manager has stopped working with firefox after I speedup firefox opening. (not after restart or update of firefox) Before that, I used FDM on firefox. I already try with restart firefox and follow-up of the implementation under the quiz "Windows Media or other plugins stopped working after Firefox update | Firefox Help", but none of them worked.

    When you say after you speed up Firefox, do you mean you used the reset feature? You can tell because Firefox will create a new 'Old Firefox Data' folder on your desktop when you reset.

    The Reset function deletes your extensions as part of the cleaning process. You probably need to reinstall FDM from its original source. Maybe the Addons site? https://addons.Mozilla.org/Firefox/

  • RealDownloader has stopped working with the upgrade to FireFox 22

    RealDownloader V 1.3.2.28 stopped working with my 'security' was last updated to FireFox. FireFox is now V22

    I have tried to reinstalled realplayer, realdownloader, deactivation / activation addons / plugins

    Can't seem to work - when I smile on a YouTube video for example, the 'Download this video' button of RealDownloader does not appear. Works fine in Internet Explorer

    Hello dmcentee, real is aware of the problem and working on a solution - please refer to https://realnetworks.zendesk.com/entries/23689856-Download-This-Video-option-does-not-appear.

  • A Xbox controller stopped working with the PC

    I have a windows pc 8. I used my xbox controller for games there a few months. Randomly stopped working. Before when I plugged it in, it vibrated, lit and then it was connected. Now when I plug it does not vibrate, and it does not turn on the controller. He says only: "unrecognized usb device". I went to Device Manager and nothing comes for a controller xbox either. When I used the controller on my pc I have installed all the drivers. Just plugged in, and it worked. I have no idea why it stopped working. I have not installed anything new recently. Any ideas?

    Hi Jaysiff,

    I imagine the inconvenience that you are experiencing and will certainly help you in the right direction to solve the problem. However, I would be grateful if you could answer a few questions to refine the question in order to provide you with better assistance.

    1. Have you tried to connect any other USB device to this new computer laptop? If so, was the same result?
    2. Are all the device drivers and updates of Windows updated?

    According to the description of the problem you found error message "unrecognized usb device". The question may arise if the currently loaded USB driver has become unstable or damaged or if your PC requires an update for problems that could conflict with a device USB and Windows. This can also occur if your USB controllers may have become unstable or corrupt. So, I would suggest trying the following steps and check if the problem persists.

    Method 1:

    Please try the fixit (s) provided below which will help you solve common problems associated with devices and USB ports.

    If method 1 does not work, try Method 2.

    Method 2:

    Remove and reinstall all USB controllers.

    1. Open Device Manager by pressing the Windows key + X and select Device Manager from the list. If you are prompted for an administrator password or a confirmation, type the password or provide confirmation.
    2. In the list of the categories of equipment, locate and expand Bus USB controllers.
    3. Right-click every device under the Bus USB controllers node and then click Uninstall to remove them one at a time.
    4. Restart the computer and let the USB controllers get reinstalled.
    5. Plug in the removable USB device and test to make sure that the problem is solved.

    Method 3

    If the problem persists, I suggest to update the drivers and follow the steps in the article mentioned below to connect and see if it helps you to solve the problem.

    How to connect a controller to wireless an Xbox to a PC

    Xbox 1 controller drivers

    Hope it would help. If problem persists always post back with the current state of your computer and the result of the proposed suggestion, we will be happy to help you.

    Kind regards

  • Error message: "logon user interface host windows stopped working. & configuration of updates fail

    Several days ago I started having the application error "windows logon UI host has stopped working".  This happens when I connect. and also on the update of windows, when they tried to configure windows update it says "failure configuration update of windows. Returning from the changes. and it restart the whole system again.

    For your information, I use windows 8. so help me solve this problem. TQ

    Hi ZakwanSalleh,

    Thank you for choosing Windows 8 and join us on our community.

    From your description, I understand that you get an error message during newspaper saying "logon user interface host windows stopped working" and after the update of Windows as "failure of windows update." Returning from the changes.

    We get the Windows log on error message if the computer is running out of memory. Then I suggest you perform these methods and check.

    Method 1:

    I suggest you perform a clean boot and remove all unnecessary programs installed on your computer.

    Clean boot: To help resolve the error and other messages, you can start Windows by using a minimal set of drivers and startup programs. This type of boot is known as a "clean boot". A clean boot helps eliminate software conflicts. Here is the link for your reference perform the clean boot.

    http://support.Microsoft.com/kb/929135

    Note: Please go through step 3 KB to maintain the computer to a normal startup after you resolve the issue.

    Method 2:

    I also suggest you to run a sfcscan and check.

    The sfc/scannow command. analyzes all protected system files and replaces incorrect versions with appropriate Microsoft versions. When the analysis is complete, the System File Checker tool indicates whether integrity violations were found. If integrity violations are detected, the System File Checker tool allows to challenge violations of integrity

    Follow these steps to run sfcscan.

    a. press Windows + X keys and click / tap on (Admin) command prompt.

    b. in the elevated command prompt, type sfc/scannow, and then press ENTER.

    NOTE: It can take some time to finish the race.

    For the error "failed windows update Setup. Revenant changes"I suggest you follow the steps in the article and check. Here is the link for your reference.

    Error: Failed to setup of the Windows updates. Restoration of the changes. Do not turn off your computer when you try to install Windows updates

    http://support.Microsoft.com/kb/949358#method3

    It will be useful. For other related issues in Windows area it always welcome in our community.

  • Photoshop Extended CS 04:32 bit & 64 bit stopped working with a 131:4 error

    Dell XPS 720 Quod processor 8 GB of memory running Windows 7

    Two Photoshop Extended CS 04:32 bit & 64 bit stopped working with a 131:4 error. who said to restart to solve the problem. After several attempts to restart the computer, I got the same error message.

    I was updating all of my Adobe software in order to tackle a problem with Adobe Media Encoder: when I sent a stream of time line to be converted into an AVI of Premiere Pro CS4 to encode the window appeared & hung.

    I want to first address the problem of Photoshop. How should I proceed?

    Use own writing unified CS3/CS4/CS5, reinstall from scratch. Sorry, but obviously an update failed missed your licensing system and there is no other way to get it back.

    Mylenium

  • My Clickfree automatic backup drive has stopped working, with my iMac, what is the best replacement to use with Time machine

    My Clickfree automatic backup drive I had for many years stopped working with my iMac, what is the best replacement to use with Time Machine.

    I can't even reformat the drive to try to start over, then think its time I invested in a high today but don't know where start looking so any advise would be a great help.

    Thank you guys

    A lot of users on these forums recommend OWC (www.macsales.com) Mercury Elite Pro series JEP due to their durability, affordability and quality of construction. I have about 6 of them connected to my iMac and have never had a speaker to fail. When a hard drive fails, substitute is a 5-minute process to re - use the box. To help you get started, you can find the line to: https://eshop.macsales.com/shop/firewire/1394/USB/EliteAL/eSATA_FW800_FW400_USB

    You can find them in various ways and with a variety of configurations of connection so you can find the one that best fits your needs.

    Good luck!

  • my selection talking has stopped working with text messaging

    my selection talking has stopped working with text messaging

    Hi, plumberboy58.

    Please visit Apple support communities.

    I understand that you have a problem with the selection of talk.  Let's start by making sure that talk of selection is always enabled in settings > general > accessibility > speech.

    Talk about selection

    If talk about selection doesn't always show when you select a text message, forces all applications to close and restart your iPhone.

    Force an app to close the iOS

    See you soon

  • HP Photosmart Plus B209a-m stopped working with a Macbook, still works with others

    We had this printer wireless printing of 2 Macbooks a running OS X 10.8.2 and another OS x 10.6.8 without any problem for some time when it suddenly stopped working with the old Macbook running 10.6.8.

    When we tried to print anything in that nothing happened, when we open the print queue, there's an exclamation point to the left of the print job and to say an error message something about the levels ink (ink levels were very well as it print to the other Macbook without problem).  We tried the buttons pausing and resuming.  I can't provide exact errors that we had because now that we have tried to reinstall the drivers we get a new series of errors.

    We redownloaded the drivers for OS X 10.6 on HP website and tried to go through the HP setup assistant.  When we arrive at step 'Select printer' and he takes us into the preferences system to add a printer - our printer shows up, but when selected, we get the following error message: some of the software of the printer is missing.  You may not be able to print to "HP Photosmart Plus B209a-m" Please reinstall the printer. software - and of course, we are not able to print.

    We uninstalled and reinstalled the drivers several times without any effect.  The only way that we were able to print off the computer is if printer sharing is enabled on the other Macbook (with OS X 10.8.2).)  Then, it presents itself as a separate printer and can be used by the old Macbook only if the other is on.  This isn't how it was put in place when we had the two work before.

    Any advice would be appreciated.

    Margorie

    What router are you using?  I guess that the 10.8 machine can print correctly?

    Let's start with that on the 10.6 machine: download and install this: http://support.apple.com/kb/DL907

    Restart your Mac.

    Reset the printing system:

    -Go to System Preferences > print & Scan
    -Right (or control) click in the rectangle listing your printers and select Reset Printing System.
    WARNING - This will remove ALL your printers!
    -Select the sign more to add a printer. Select the default tab on the top of the window. Search for the printer, select it, and then beside the dropdown 'Use', select the model of the printer (not AirPrint). Wait for the 'Add' button becomes available. Until it clicks.

  • Elements 7 has stopped working with Win. 8.1.

    My 7 elements purchased 5 or 6 years it has just stopped working with Win. 8.1. it opens when I click the icon. Help!

    Thank you, Mohit. I had to use my installation CD to reinstall and it went smoothly including the addition of a patch. Thanks, Frank

  • Firefox extension: 'TrueSuite 5.2.500.16' stopped working after the last update of firefox (30.0), although subject: said plugin activated. No difficulty to make it work?

    Firefox extension: 'TrueSuite 5.2.500.16' stopped working after the last update of firefox (30.0), although subject: said plugin activated.

    I tried to reset firefox and search for similar problems, unfortunately found nothing.

    It is also weird empty space before the address in the address bar

    other extensions and addons seems to work very well.

    Firefox 30 spent some less commonly used "Always turned on" plugins "asking to activate. To check and change this to TrueSuite, you can use the page modules. Either:

    • CTRL + SHIFT + a
    • "3-bar" menu button (or tools) > Add-ons

    In the left column, click on Plugins. Then on the right, check the setting on the right side of TrueSuite.

    Any difference?

    Note to other readers: the original poster had to leave Firefox and start it again until it is actually entered into force.

Maybe you are looking for