5.3 - command sets ACS does not

We installed Vmware-cent os 5.3 GBA and a cisco router is configured to authenticate to this server GANYMEDE +,.

I am able to connect to the router using the username specified of GANYMEDE. / password and able to see shots also like below in the policy,.

But the sets of commands work as defined, pls help me to find the problem...

Filter: StatusNameIdentity GroupNDG:LocationNDG:Device TypeTime and DateCommand SetsShell ProfileHit heads Match if: Equals EqualsNot EnabledDisabledMonitor only
Status Name Conditions Results Hit Count
Membership group NDG:Location Type of NDG:Device Time And Date Command Sets Shell Profile
1 ACCESS TO RO in all groups: READ ONLY ACCESS in all locations in all Types of devices -ANY- READ ONLY POLICY SHELL OF RO 10
2 RESTRICTED ACCESS in all groups: ACCESS SELECT in all locations in all Types of devices -ANY- RESTRICTED USER POLICY Allow access 1
3 SUPER ADMIN ACCESS in all groups: FULL ACCESS in all locations in all Types of devices -ANY- ALLOW ALL POLICIES Allow access 0

How you set up your sets of commands? Also make sure that we have orders for authorization on the router,

AAA authorization exec default group Ganymede + authenticated if

AAA authorization commands 1 default group Ganymede + authenticated if

AAA authorization commands 15 default group Ganymede + authenticated if

AAA authorization config-commands

Kind regards

~ JG

Note the useful messages

Tags: Cisco Security

Similar Questions

  • ACS 5.1 - command line filters does not not in Config Mode

    Hello

    I am trying to set up filters to deny command line sniffer commands being entered. I have set up a command set and applied to an authorization policy. The command filter works great for commands in privileged mode. However, the filter does not work for any order that is entered in configuration mode.

    I have a set of commands that will deny for a test installation:

    display the clock

    terminal length

    display monitor

    duration of the distance

    the monitor session

    The first three commands are entered from the initial mode of privilege and they are omitted by the AEC. The last two commands can be entered in config mode and the ACS does not stop their entry.

    I have attached two screenshots that show configuration commands on GBA game and a Terminal session which commands are filtered and which are rented by the intermediary.

    Has anyone encountered this problem? Is there something else I should be adding to the command Set? Is this a bug?

    There is a bug on the Cisco site that relates to the command filters:

    http://Tools.Cisco.com/support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtf08567

    I don't know if this bug applies to this question because there is so little information on this subject. In addition, if it does not I don't understand workaround to apply it to this situation.

    Any advice would be greatly appreciated. -(ACS Version 5.1.0.44.2)

    Dave was soon

    You have authorization for the configuration on the router mode?

    If this isn't the case, add:

    AAA authorization config-commands

  • I have created my version of Office Web site, but when I try to transfer them to the phone or Tablet setting it does not merge the info previously created on the desktop

    I have created my version of Office Web site, but when I try to transfer them to the phone or Tablet setting it does not merge the info previously created on the desktop

    Hello

    When you try to create a layout of desktop-based Tablet or phone you can get 3 options open to copy the layout of office. This do not understand the content placed in the pages.

    However, you can view each page individually and can copy the contact that you want to move the tablet or phone. then open the same presentation page of the Tablet/phone and use Edit > paste in Place then move and resize the elements according to the size of the layout.

    You can also take a look at the link below to better understand the available phone/tablet.

    Jam Muse: Designing for mobile devices in Muse - YouTube

    Please let me know if you need help for the same.

    Concerning

    Vivek

  • The 'resolution' (Muse CC) Set option does not appear in my Site Properties Panel.

    The 'resolution' (Muse CC) Set option does not appear in my Site Properties Panel.

    Hi Chris,

    The set option of the 'Resolution' is visible only when you click on the tab content in site properties and not in the page layout section. Please refer to this screenshot: http://prntscr.com/4blm1s

    See you soon,.

    Rohit Nair

  • ORA-13754: 'SQL Tuning Set' 'string' does not exist for the user "sysman."

    ORA-13754: 'SQL Tuning Set' 'string' does not exist for the user "sysman."

    Hello
    in 10g R2 when I run the following in isqlplus I error of the United Nations:
    SELECT * FROM TABLE(DBMS_SQLTUNE.SELECT_SQLSET(
    'my_sql_tuning_set',
    '(disk_reads/buffer_gets) >= 0.05'));
    
    ORA-13754: "SQL Tuning Set"'my_sql_tuning_set" does not exist for user "sysman". 
    No problem if I run it as sys to sqlplus.

    Thanks for the help.

    How to activate for sys isqlplus?

    You are logged in as sysman,

    Check the user from the sql prompt.

    show user
    
  • Set linesize does not work in sqlplus

    I am trying to use sqlplus to empty a few DOF for a stored procedure. I found a problem with my script where it isn't properly unload the lines in a file, and this seems to be caused by problems with the 'set linesize' command in sqlplus. Lines are getting truncated to 80 characters, no matter what I set the linesize variable to (currently I changed it to 500 as test - but it still doesn't work)!

    For example, I have a line in the procedure as follows:



    CREATE OR REPLACE PROCEDURE
    ...
    INSERT INTO SOME_TABLE_NAME_HERE (OWNER, ACTIVITY, ACTIVITY_COST, NUM_WORKERS, NULL)
    SELECT...


    I can see that the 80th character is the "NULL" and "ULL" is beyond the limit in SQL Developer. When I empty the DDL in sqlplus, it appears like this, no matter what I set linesize to:



    CREATE OR REPLACE PROCEDURE
    ...
    INSERT INTO SOME_TABLE_NAME_HERE (OWNER, ACTIVITY, ACTIVITY_COST, NUM_WORKERS, N
    ULL)
    SELECT...



    Here are the options I use in their entirety. This is an excerpt from a shell script that I'm trying, but you can see the options that echoes in the file that is ultimately read / performed by sqlplus:

    echo "set position off;" > > proc.sql
    echo "set echo off;" > > proc.sql
    echo "value 999 pages;" > > proc.sql
    echo "set off termout;" > > proc.sql
    echo 'long set 90000'; > > proc.sql
    echo ' set linesize 200; "> > proc.sql
    echo "${schema} .txt reel" > > proc.sql
    echo "select dbms_metadata.get_ddl ('PROCEDURE'," ${proc} ") from dual;" > > proc.sql


    No matter what I set linesize she always truncates to the 80th character and begins printing on the next line. Change the linesize option seems only right key to exit with spaces. So if the line is longer than 80 characters and I set linesize to 90, it truncates the 80th character, impression 10 places and then print 'LLD') and 86 seats on the next line. If I change to 100 then I get 20 seats on the first line, followed by "ULL") and 96 places on the next line. And so on...


    I tried to use trimspool ON but it does not help the issue. Set linesize seems to be useless - everything is truncated to 80 characters. What I'm doing wrong here? Thank you!

    Hi and welcome to the forum,

    Looks like you need the LONGCHUNKSIZE of the VALUE

    http://download.Oracle.com/docs/CD/B19306_01/server.102/b14357/ch12040.htm#SQPUG089

    Concerning
    Peter

  • 'ALTER SESSION SET CURRENT_SCHEMA' does not work

    Hello

    in my JAVA application, I need to change a user's session so that it gets access to the tables that are created by the user 'myUser' (see code below).

    The code below shows how I tried to implement with JAVA:

    ---------------------------------------------------------------------------------------------------------
    Statement stmtSchema = con.createStatement ();
    String sql = "ALTER SESSION SET CURRENT_SCHEMA = myUser;"
    check int = stmtSchema.executeUpdate (sql);
    ---------------------------------------------------------------------------------------------------------

    There is no exception later when running the program, but it seems that the SQL in JAVA command will have no effect because when the program tries a SELECT statement after the session I get an exception:

    Java.Sql.SqlException ora-00942: table or view does not exist

    This means that the current_schema has not yet changed.

    When I tried the same command with sqlplus, it works fine.

    Why it does not work with JDBC?

    We use 8.1.3 of Oracle and Oracle 10g Release 2.

    Hello
    just a validation test. You guarantee that the alter session command and the select statement is belonging to the same connection object?
    If the connection object is the same you can post a simple test cases for further investigation?
    Ciao,.
    Giovanni

  • Screenshot (command + shift + 4) does not work

    I use a Mac Mini running El Capitan. Command-shift-3 works great. What gives?

    O [pen Keyboard Viewer, it does not show CMD + SHIFT + 4 to work when you try that?

    Mine shows that CMD + Shift & when I type 4 rice arrive before 4 highlights.

    In the utility to capture, don't Capture > selection work?

  • Firefox-new-window command line option does not as it should.

    When using
    Firefox-new-window "http://www.ebay.com/" "http://store.steampowered.com/'"https://mail.google.com/mail/u/0/#inbox".

    command-line or batch file, it does not open 3 windows with each of the links, it opens 2 and in one of them, I'll take 2 tablets!

    Is this normal behavior? How can I open 3 individual windows?

    Hello, use this:

    firefox.exe -new-window "http://www.ebay.com/" -new-window "http://store.steampowered.com/" -new-window "https://mail.google.com/mail/u/0/#inbox"
    
  • Firefox is very slow to respond when you open and almost always no longer meets the total even refusing to respond to the Task Manager "end program command @.» The ' does not not @ error also happens during navigation online.»

    Firefox is very slow to respond when you open and almost always unresponsive altogether, refusing even to respond to Manager task "End program" command. The "not responding" error message is also over browsing online. Several attempts must be made to get online. A loss of stability seems to be endemic at the present time.

    Try to follow the instructions here: Firefox crashes or does not - how to fix

  • Gmail - compose E-mail - shortcut command-left/right does not

    Firefox 3.6.12
    Mac OS X 10.5.8

    In the window "Compose mail" Gmail command or shortcut command-left arrow + right arrow to move to respectively the beginning or end of a line, does not work. Command-up/down (going up/down) and option-left/right (jump by Word) are all working well.
    I tried to run Firefox in safe mode, but always the same question. Also tried to clear the cache and history, but nothing helped.
    In Safari, the shortcut works fine but I would stick to Firefox.

    Thanks for your suggestions.

    Despite being marked as "resolved" I'm on Firefox 10.0.1 and it's always a problem. I also wanted to mention a similar key combination command + DELETE. In another application, this removes everything between the cursor and the beginning of the current line.

  • Despite my spell checker set, it does not in Hotmail and some other sites.

    I have the setting for spell check set up, but it does not work on some sites like hotmail. I'll spell check button in hotmail and it tells me that my browser automatically checks as I type, but it's not. I tried to replace it or to get spelling checked independently, but without a bit of luck, any suggestions?

    Not all locales have a dictionary installed for licensing reasons.
    If you do not have the locale en-US then check that you have an installed dictionary (Tools > Modules > Extensions).

    You can see which dictionary is selected if you right-click in a text box and open the submenu language .
    Also make sure that [[X] "Check spelling" in the right click menu context has a tick.]
    Alternatively, you can try to move on the items 'Check spelling' and the new.

    See http://kb.mozillazine.org/Spell_checking and How to use the spellchecker of Firefox?
    See also http://kb.mozillazine.org/Dictionaries

    You can look here for more dictionaries:
    https://addons.Mozilla.org/Firefox/browse/type:3
    https://addons.Mozilla.org/en-us/Firefox/addon/3366 (The English (British))

  • Original image has disappeared I think off the hard drive and the BIOS password set up does not work?

    Someone please help me with this!

    I bought this laptop from a friend (have receipt) who sell it to me because the screen was cracked and spidered all out when you the activated. And everywhere he went to ask to get the screen fixed it is very expensive ($250 - $350) and he said that it would be just a newer laptop. So he sold me this which is a model Probook of HP4420s XT940UT #ABA. About a week after I bought this Probook friend who sold it to died me suddenly. It was sudden and terrible. Some time later, I had the time of the purchase of the LCD for this model, replace it myself (was very easy actually) and booted up the laptop with a new installation of Windows 7 Professional 64-bit Edition. After installing all my software and using the laptop for a while now, I wanted to get into the Bios that I've never done. So when I started the laptop, click ESC, then F10 to enter the BIOS, there were two places to enter a password is different then all Dell I've ever owned. One was mine I guees I put in place using HP protect tools and the other says BIOS/administrator. Well I can do most of the changes with the one I put in place with my password but my password does not work, nor can I get in some very significant changes that I wanted to do using Bios/administrator, as kindling the LoJack, namely the blocking of the hard drive etc. , turning on turbo boost, fan, etc. Well, since the person I bought is no longer with us, there is no one to turn to the answer to this question of administrator/BIOS password / problem.  I tried to take battery Rtype and restore that way, didn't work. Several times, I called HP and they sent me to a BIOS page to download the same BIOS, I have already, would not let me install it. When I bring up the command prompt and do not put anything in BiosConfigureUtility.exe happens, said just a wrong command. When I try to enter the BIOS through the C: file in the files of the SSM, I reach the BiosConfigUtility.exe file, click on it to open it and it just flashes a way small order page to fast to read what it says. I would like to have complete control over my laptop thinking I have a lot of time and money invested in it now. The problem would have something to do with installing the 64 bit version of Windows 7 instead of the 32 bits guess what it initially provided with?  Where can I find the UUID and what tech Department I would ask because if I have to call HP again and what other information should I have ready for them if you know? I have all the manuals and they say that this laptop is compatible with Windows 7 Ultimate 64 bit Pro is what I installed. I'm mixed responses from many different people on this and would like an answer from HP someone who has experience in dealing with the BIOS in the Probooks business models if possible please. I really like this Probook and have since become a big fan of most HP, Dell and Lenovo.  I intend to buy two probooks, one for my wife and one for my daughter because this one is like a MacBook, but better.  Thank you for reading this and I hope someone can help with more than one answer then GET AHOLD OF HP TECHNICAL TEAM. As I said, I did it.

    Model: HP Probook 4420 s

    Type: XT940UT #ABA

    Operating system: Windows 7 Ultimate

    BIOS version: 68AHHH Ver.F.20

    SM BIOS Version: 2.6

    Hardware Extraction layer: Version 6.1.7601.17514

    Jason,

    Sorry to hear about your friend and your problem.  The BIOS password cannot be reset without the help of HP.  They will need some information from your PC and increase your case.  I recommend you give them a call.

    -wes

  • command Simulator "StringInjection" does not work with SureType keyboard

    Hello

    I use the Simulator command 'StringInjection' to simulate keyboard input. However, it does not work with SureType keyboard.  Still, it appears a list of suggested words, which make the string injection stops. Is anyway to avoid this?

    It is the expected behavior.  StringInjection simulates typing on the keyboard, what might trigger a prompt SureType.

  • Secondary ACS does not authenticate

    I install an ACS secondary, database replication works correctly.

    But when I try to use the ACS secondary server to authenticate the user, I can't authenticate successfully.

    In reports and activities (ACS secondary), it does not appear anything.

    In primary school, ACS, he failed attempts, I see an "unknown SIN" the ip address of the secondary ACS, it seems only secondary try to use elementary to authenticate...

    Where I'm wrong?

    Thank you

    Daniele

    Hi Daniele,

    It is because the parameter on the acs secondary proxy. On secondary acs visit acs--> configuration network--> table tell proxy---> bring your secondary acs under the front walk to the box.

    That should fix it.

    Kind regards

    ~ JG

    Note the useful messages

Maybe you are looking for

  • locale by default

    I am currently in a country outside the United States and when I try to watch netflix videos, I get an error indicating that the service is not offered in my current position. Even when I type the URL that I use at home to the United States, it redir

  • Toshiba Satellite 5100 603

    Instruction for Satellite 5100 503 says max. capacity of RAM this laptop can work is 512 MB. It is strange to me. Why I can't upgrade memory in my book, it's efficency, but 512 MB is too little for me. I use Windows XP Prof. with many programs, that'

  • I can extract all the information related to any account to outlook

    I can extract all the information related to any outlook account on the windows machine windows registry. As incoming and outgoing, username, encrypted to account type and password (POP or IMAP). All the information I can gather from the windows regi

  • Clocked at .exe and switch commands

    I built out of the measure of the power of vi executables that I do and it seems that the executable runs immediately after I click on it. I was hoping to allow the user to have control of enforcement it because they need to all the controls in the P

  • 57 E error code

    I have 13 updates to windows that do not install successfully and still receive the 57F error code. I am running Vista version 6.0 (build 6002: service Pack2) when I checked my history of update, I noticed that updates have failed since February 2009