ACS 3.2 (2) Build 5 replication problem

Hi all

There are two ACS servers, sits inside an ASA 5510 at Headquarters and the other is inside an ASA 5510 on the hot site.

These 5510 s ASA have been developed to replace two 515Es PIX and the claim is that since the ASAs went replication has stopped working. Of course, it makes no sense to me because there is communication between the ACS server and the firewall is down not anything whenever "replicate now" is issued.

Unfortunately, I dunno much about ACS then is there something I can look for to help troubelshoot it ACS newspapers say

WARNING cannot replicate to '4' Server - server does not

That doesn't help us much, this is a way to get more detailed info journal which could indicate a problem? Thank you.

Hello

ACS uses the port TCP/2000 for replication. This port is also used by the skinny Protocol, making the port used by the ACS replication process.

Fails replication of the ACS from the primary to the secondary, primary school reported that he cannot contact the secondary, and secondary shows any replication of the primary activity.

A firewall between the two servers, ACS is configured to inspect the skinny Protocol, which uses the same port (TCP/2000) that the ACS replication process.

If you do not have a call manager behind your firewall, please disable

Skinny inspect if it is enabled.

#Under overall policy, take the skinny inspection out of the inspection_default #class.

don't inspect skinny

You need to do this on both sides.

HTH

JK

Please evaluate the useful messages-

Tags: Cisco Security

Similar Questions

  • Tried to use iTunes to restore iPhone 5s, but the 17 error happens: "this device is not eligible for the requested build". No problem to enter the mode of recovery, apple server and the internet. Help?

    I tried to use iTunes to restore my iPhone 5s, but the 17 error happens: "this device is not eligible for the requested build". No problem to enter the recovery mode, connection to the apple Server (the software update download was complete) and internet connection. Help? I do an Apple store to restore?

    Error 17 refers to network problems. Take a look at these articles and try the suggestions:

    Solve the iOS update and restore error in iTunes - Apple Support

    Get help with iOS update or restore errors - Apple Support

  • Upgrade of Windows 2003 to 2012 r2 DC replication problem

    Hello

    I added R2 2012 Windows server to windows 2003 sp2 (primary DC) DC and promotes as DC. After the promotion, I run dcdiag and it shows errors.

    Each of the servers have three NICs connected to different networks.

    Please help me with your expertise since I have to raise this Monday.

    Thank you

    Kind regards

    Charaf-eddine

    Here the dcdiag output new DC

    Directory Server diagnosis

    Perform the initial configuration:

    Trying to find the server at home...

    Home Server = CADPDC1

    * Identified AD forest.
    Made the initial collection of information.

    Make the required initial tests

    Test server: Default-First-Site-Name\CADPDC1

    Commencement of the trial: connectivity

    CADPDC1.engineer.com host name resolution error by

    IPv6 stack.

    WARNING: could not confirm the identity of this server in the

    Directory and names returned by DNS servers. Host name

    fixed error 0x2af9 "host is known."

    ......................... CADPDC1 passed test connectivity

    Primary testing

    Test server: Default-First-Site-Name\CADPDC1

    Commencement of the trial: advertising

    WARNING: DsGetDcName returned information for

    \\cadpdc. Engineer.com, when we tried to reach CADPDC1.

    SERVER IS NO ANSWER or IS NOT considered AS APPROPRIATE.

    ......................... CADPDC1 was not able to test advertising

    Beginning of the test: FrsEvent

    There are warning or error events in the last 24 hours after the

    SYSVOL is shared.  Don't not SYSVOL replication problems can cause

    The Group of political problems.
    ......................... CADPDC1 test FrsEvent

    Commencement of the trial: DFSREvent

    ......................... CADPDC1 test DFSREvent

    Commencement of the trial: SysVolCheck

    ......................... CADPDC1 test SysVolCheck

    Beginning of the test: KccEvent

    ......................... CADPDC1 test KccEvent

    Beginning of the test: KnowsOfRoleHolders

    [CADPDC] DsBindWithSpnEx() failed with the error-2146893022,

    The name main target is incorrect...
    ATTENTION: CADPDC is the owner of the schema, but does not meet the DS RPC

    Bind.

    [CADPDC] LDAP bind failed with error 8341,

    A directory service error has occurred...
    ATTENTION: CADPDC is the owner of the schema, but does not respond to LDAP

    Bind.

    ATTENTION: CADPDC is the owner of the domain, but does not meet the DS RPC

    Bind.

    ATTENTION: CADPDC is the owner of the domain, but does not respond to LDAP

    Bind.

    ATTENTION: CADPDC is the owner of PDC, but does not meet the DS RPC

    Bind.

    ATTENTION: CADPDC is the owner of PDC, but does not respond to the LDAP bind.

    ATTENTION: CADPDC is the owner of RID, but does not meet the DS RPC

    Bind.

    ATTENTION: CADPDC is the owner of RID, but does not respond to the LDAP bind.

    ATTENTION: CADPDC is the owner of Infrastructure Update, but is not

    meet DS RPC Bind.

    ATTENTION: CADPDC is the owner of Infrastructure Update, but is not

    respond to LDAP Bind.

    ......................... CADPDC1 failed test KnowsOfRoleHolders

    Beginning of the test: MachineAccount

    ......................... CADPDC1 test MachineAccount

    Beginning of the test: NCSecDesc

    ......................... CADPDC1 passed test NCSecDesc

    Beginning of the test: NetLogons

    Cannot connect in the NETLOGON share. (\\CADPDC1\netlogon)

    [CADPDC1] An net use or LsaPolicy operation failed with error 67.

    The network name was not found...

    ......................... CADPDC1 failed test NetLogons

    Commencement of the trial: ObjectsReplicated

    ......................... CADPDC1 test ObjectsReplicated

    From test: Replications

    [Check the replications, CADPDC1] A recent replication attempt failed:

    From CADPDC to CADPDC1

    Naming context: DC = ForestDnsZones, DC = engineering, DC = com

    The replication generated an error (-2146893022):

    The name main target is invalid.

    The failure occurred at 2014-06-27 17:05:59.

    The last success occurred at 2014-06-27 17:01:21.

    1 failures have occurred since the last success.

    [Check the replications, CADPDC1] A recent replication attempt failed:

    From CADPDC to CADPDC1

    Naming context: DC = DomainDnsZones, DC = engineering, DC = com

    The replication generated an error (-2146893022):

    The name main target is invalid.

    The failure occurred at 2014-06-27 17:05:59.

    The last success occurred at 2014-06-27 17:01:21.

    1 failures have occurred since the last success.

    [Check the replications, CADPDC1] A recent replication attempt failed:

    From CADPDC to CADPDC1

    Naming context: CN = Schema, CN = Configuration, DC = engineering, DC = com

    The replication generated an error (1727):

    The remote procedure call failed and did not execute.

    The failure occurred at 2014-06-27 17:05:59.

    The last success occurred at 2014-06-27 17:01:06.

    1 failures have occurred since the last success.

    [Check the replications, CADPDC1] A recent replication attempt failed:

    From CADPDC to CADPDC1

    Naming context: CN = Configuration, DC = engineering, DC = com

    The replication generated an error (-2146893022):

    The name main target is invalid.

    The failure occurred at 2014-06-27 17:05:59.

    The last success occurred at 2014-06-27 17:01:07.

    1 failures have occurred since the last success.

    [Check the replications, CADPDC1] A recent replication attempt failed:

    From CADPDC to CADPDC1

    Naming context: DC = engineering, DC = com

    The replication generated an error (-2146893022):

    The name main target is invalid.

    The failure occurred at 2014-06-27 17:05:59.

    The last success occurred at 2014-06-27 17:01:21.

    1 failures have occurred since the last success.

    ......................... CADPDC1 failure test replications

    Beginning of the test: RidManager

    ......................... CADPDC1 failed test RidManager

    Commencement of the trial: Services

    ......................... CADPDC1 test passed Services

    Beginning of the test: SystemLog

    A warning event occurred.  Event ID: 0x000727A5

    Generated time: 27/06/2014-17:01:38

    The event string:

    The WinRM service is not listening to the WS-Management requests.

    A warning event occurred.  Event ID: 0 x 80050004

    Generated time: 27/06/2014-17:05:03

    The event string:

    HP 1 GB 2 332T adapter ports Ethernet: the network link is down.  Check that the network cable is connected correctly.

    A warning event occurred.  Event ID: 0xA004001B

    Generated time: 27/06/2014-17:05:06

    The event string: HP NC112T PCIe Gigabit Server Adapter

    An error event occurred.  Event ID: 0 x 40000004

    Generated time: 27/06/2014-17:05:39

    The event string:

    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server of cadpdc1$. The target name was LDAP/cadpdc.engineer.com/*** Email address is removed from the privacy *. This indicates that the target server could not decrypt the ticket provided by the customer. This can occur when target server principal name (SPN) is registered on one different account that the target service uses. Ensure that the target THAT SPN is registered only on the account used by the server. This error can also occur if the password service target account is different from what is set up on the Kerberos key for this service target Distribution Center. Make sure that the service on the server and the KDC are configured to use the same password. If the server name is not complete, and the target domain (ENGINEER.COM) is different from the customer area (ENGINEER.COM), check if it is the same name of server accounts in these two areas, or use the fully qualified name to identify the server.

    An error event occurred.  Event ID: 0 x 40000004

    Generated time: 27/06/2014-17:05:39

    The event string:

    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server of cadpdc1$. The target name was ldap/cadpdc.engineer.com/*** address email is removed from the privacy *. This indicates that the target server could not decrypt the ticket provided by the customer. This can occur when target server principal name (SPN) is registered on one different account that the target service uses. Ensure that the target THAT SPN is registered only on the account used by the server. This error can also occur if the password service target account is different from what is set up on the Kerberos key for this service target Distribution Center. Make sure that the service on the server and the KDC are configured to use the same password. If the server name is not complete, and the target domain (ENGINEER.COM) is different from the customer area (ENGINEER.COM), check if it is the same name of server accounts in these two areas, or use the fully qualified name to identify the server.

    An error event occurred.  Event ID: 0 x 40000004

    Generated time: 27/06/2014-17:05:41

    The event string:

    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server of cadpdc1$. The target name was of cadpdc$. This indicates that the target server could not decrypt the ticket provided by the customer. This can occur when target server principal name (SPN) is registered on one different account that the target service uses. Ensure that the target THAT SPN is registered only on the account used by the server. This error can also occur if the password service target account is different from what is set up on the Kerberos key for this service target Distribution Center. Make sure that the service on the server and the KDC are configured to use the same password. If the server name is not complete, and the target domain (ENGINEER.COM) is different from the customer area (ENGINEER.COM), check if it is the same name of server accounts in these two areas, or use the fully qualified name to identify the server.

    An error event occurred.  Event ID: 0 x 40000004

    Generated time: 27/06/2014-17:05:43

    The event string:

    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server of cadpdc1$. The target name used was GC/cadpdc.engineer.com/engineer.com. This indicates that the target server could not decrypt the ticket provided by the customer. This can occur when target server principal name (SPN) is registered on one different account that the target service uses. Ensure that the target THAT SPN is registered only on the account used by the server. This error can also occur if the password service target account is different from what is set up on the Kerberos key for this service target Distribution Center. Make sure that the service on the server and the KDC are configured to use the same password. If the server name is not complete, and the target domain (ENGINEER.COM) is different from the customer area (ENGINEER.COM), check if it is the same name of server accounts in these two areas, or use the fully qualified name to identify the server.

    A warning event occurred.  Event ID: 0x000727AA

    Generated time: 27/06/2014-17:05:43

    The event string:

    The WinRM service could not create the following SPNS: WSMAN/CADPDC1.engineer.com; WSMAN/CADPDC1.

    An error event occurred.  Event ID: 0 x 40000004

    Generated time: 27/06/2014-17:05:55

    The event string:

    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server of cadpdc1$. The target name used was cifs/cadpdc.engineer.com. This indicates that the target server could not decrypt the ticket provided by the customer. This can occur when target server principal name (SPN) is registered on one different account that the target service uses. Ensure that the target THAT SPN is registered only on the account used by the server. This error can also occur if the password service target account is different from what is set up on the Kerberos key for this service target Distribution Center. Make sure that the service on the server and the KDC are configured to use the same password. If the server name is not complete, and the target domain (ENGINEER.COM) is different from the customer area (ENGINEER.COM), check if it is the same name of server accounts in these two areas, or use the fully qualified name to identify the server.

    A warning event occurred.  Event ID: 0 x 84350444

    Generated time: 27/06/2014-17:05:58

    The event string:

    Information System Officer: health: Post errors have been detected.  One or more errors of Power-On-Self-Test were detected when the server starts.

    An error event occurred.  Event ID: 0 x 40000004

    Generated time: 27/06/2014-17:05:59

    The event string:

    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server of cadpdc1$. The target name was E3514235-4B06-11D1-AB04-00C04FC2DCD2/5122bd13-c8ac-4265-a879-3a6831224994/*** Email address is removed from the privacy *. This indicates that the target server could not decrypt the ticket provided by the customer. This can occur when target server principal name (SPN) is registered on one different account that the target service uses. Ensure that the target THAT SPN is registered only on the account used by the server. This error can also occur if the password service target account is different from what is set up on the Kerberos key for this service target Distribution Center. Make sure that the service on the server and the KDC are configured to use the same password. If the server name is not complete, and the target domain (ENGINEER.COM) is different from the customer area (ENGINEER.COM), check if it is the same name of server accounts in these two areas, or use the fully qualified name to identify the server.

    An error event occurred.  Event ID: 0 x 40000004

    Generated time: 27/06/2014-17:05:59

    The event string:

    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server of cadpdc1$. The target name used was ldap/cadpdc.engineer.com. This indicates that the target server could not decrypt the ticket provided by the customer. This can occur when target server principal name (SPN) is registered on one different account that the target service uses. Ensure that the target THAT SPN is registered only on the account used by the server. This error can also occur if the password service target account is different from what is set up on the Kerberos key for this service target Distribution Center. Make sure that the service on the server and the KDC are configured to use the same password. If the server name is not complete, and the target domain (ENGINEER.COM) is different from the customer area (ENGINEER.COM), check if it is the same name of server accounts in these two areas, or use the fully qualified name to identify the server.

    An error event occurred.  Event ID: 0x0000410B

    Generated time: 27/06/2014-17:05:59

    The event string:

    The request for a new account identifier pool failed. The operation will be retried until the request succeeds. The error is

    An error event occurred.  Event ID: 0 x 40000004

    Generated time: 27/06/2014-17:06:07

    The event string:

    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server of cadpdc1$. The target name used was LDAP/cadpdc.engineer.com. This indicates that the target server could not decrypt the ticket provided by the customer. This can occur when target server principal name (SPN) is registered on one different account that the target service uses. Ensure that the target THAT SPN is registered only on the account used by the server. This error can also occur if the password service target account is different from what is set up on the Kerberos key for this service target Distribution Center. Make sure that the service on the server and the KDC are configured to use the same password. If the server name is not complete, and the target domain (ENGINEER.COM) is different from the customer area (ENGINEER.COM), check if it is the same name of server accounts in these two areas, or use the fully qualified name to identify the server.

    An error event occurred.  Event ID: 0x0000041F

    Generated time: 27/06/2014-17:06:30

    The event string:

    The processing of Group Policy failed. Windows could not resolve the computer name. This can be caused by one or more of the following:

    An error event occurred.  Event ID: 0x0000041D

    Generated time: 2014/06/27 17:07:07

    The event string:

    The processing of Group Policy failed. Windows could not resolve the user name. This can be caused by one or more of the following:

    An error event occurred.  Event ID: 0x0000041F

    Generated time: 2014/06/27 17:11:32

    The event string:

    The processing of Group Policy failed. Windows could not resolve the computer name. This can be caused by one or more of the following:

    An error event occurred.  Event ID: 0x0000041F

    Generated time: 27/06/2014-17:16:33

    The event string:

    The processing of Group Policy failed. Windows could not resolve the computer name. This can be caused by one or more of the following:

    An error event occurred.  Event ID: 0 x 40000004

    Generated time: 27/06/2014-17:16:38

    The event string:

    The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server of cadpdc1$. The target name used was LDAP/5122bd13-c8ac-4265-a879-3a6831224994._msdcs.engineer.com. This indicates that the target server could not decrypt the ticket provided by the customer. This can occur when target server principal name (SPN) is registered on one different account that the target service uses. Ensure that the target THAT SPN is registered only on the account used by the server. This error can also occur if the password service target account is different from what is set up on the Kerberos key for this service target Distribution Center. Make sure that the service on the server and the KDC are configured to use the same password. If the server name is not complete, and the target domain (ENGINEER.COM) is different from the customer area (ENGINEER.COM), check if it is the same name of server accounts in these two areas, or use the fully qualified name to identify the server.

    An error event occurred.  Event ID: 0x0000041F

    Generated time: 2014/06/27 17:21:35

    The event string:

    The processing of Group Policy failed. Windows could not resolve the computer name. This can be caused by one or more of the following:

    ......................... CADPDC1 failed test SystemLog

    Commencement of the trial: VerifyReferences

    ......................... CADPDC1 test VerifyReferences

    Running partition tests: ForestDnsZones

    Beginning of the test: CheckSDRefDom

    ......................... ForestDnsZones passed test CheckSDRefDom

    Beginning of the test: CrossRefValidation

    ......................... ForestDnsZones passed test

    CrossRefValidation

    Running partition tests: DomainDnsZones

    Beginning of the test: CheckSDRefDom

    ......................... DomainDnsZones passed test CheckSDRefDom

    Beginning of the test: CrossRefValidation

    ......................... DomainDnsZones passed test

    CrossRefValidation

    Running partition tests: schema

    Beginning of the test: CheckSDRefDom

    ......................... Schema passed test CheckSDRefDom

    Beginning of the test: CrossRefValidation

    ......................... Schema passed test CrossRefValidation

    Running partition tests: Configuration

    Beginning of the test: CheckSDRefDom

    ......................... Configuration test past CheckSDRefDom

    Beginning of the test: CrossRefValidation

    ......................... Configuration test past CrossRefValidation

    Running partition tests: engineer

    Beginning of the test: CheckSDRefDom

    ... engineer passed test CheckSDRefDom

    Beginning of the test: CrossRefValidation

    ... engineer passed test CrossRefValidation

    Running tests of the company: engineer.com

    Commencement of the trial: LocatorCheck

    ... engineer.com passed test LocatorCheck

    Commencement of the trial: cross-site

    ... engineer.com passed test intersite

    Hi Chamarasi,

    I suggest that you post the application on Microsoft TechNet forum because we have experts working on these issues. You can check the link to post the same query on TechNet:

    http://social.technet.Microsoft.com/forums/WindowsServer/en-us/home?category=WindowsServer

    Please do not hesitate to contact us if you have other questions related to Windows.

  • Cannot save the ACS 5.4 as secondary for replication

    Dear all,

    I am not able to regisrter my ACS in DR 5.4 as secondary to my primary ACS in DC 5.4 for replication.

    Attached is the error I get

    Kind regards

    Ranjit

    Hello

    Enter the IP address of the primary server, not the host name.

    It seems that your DNS has no name, so you have to add the ip address and try.

    HTH

    Amjad

    Rating of useful answers is more useful to say "thank you".

  • ACS replication problem

    I have two ACS with replication configured. Manual replication works fine, but when setting up scheduled replication, server said "preliminary checks indicate a unnecessary outgoing replication - completed cycle. Even if the new features have been added to the main server, replication is irrelevant.

    Any thoughts?

    Please check this bug,

    CSCsd02854 : automatic replication has not triggered after changing the config

    components

    Symptom: When it is configured for automatic replication, only the changes to the users/groups/SPC are replicated automatically. Changes to the configuration of NAS, Admin, PAN, external databases

    components do not replication trigger.

    Conditions: This is seen when the automatic replication (intermittently or at a specific time) is configured.

    Solution: Start the replication manually after configuration changes for the affected

    components have been made.

    http://Tools.Cisco.com/support/BugToolKit/action.do?hdnAction=searchBugs

    Please make sure that the secondary ACS server, we have all the replicated network devices

    from the primary ACS server successfully. If they are not, and we have configured replication scheduled to take place, then we are hitting this bug.

    Kind regards

    ~ JG

    Note the useful messages

  • ACS 3.3 to 4.0 upgrade problems

    Guys,

    I have a Cisco ACS 3.3 running on a win2k platform server and I need to upgrade to ACS4.0 on win2k.

    -3.3 backup and restoring files on web interface 4.0 does not work;

    -the same operation using csutils.exe works not (csutil b [...], then csutil - r [...])

    -J' installed the new machine with ACS3.3, I imported the data/group/user with csutil, then I installed ACS 4.0 using setup.exe. The result is that the ACS services will not start

    Anyone know what I need to do?

    Thank you

    Rob

    Hi Antonio,.

    -3.3 backup and restoring files on web interface 4.0 do not work.

    * It won't work, because in ACS we can back up and restore the database among same versions only of the ACS, also applies to replication.

    -the same operation using csutils.exe works not (csutil b [...], then csutil - r [...])

    * Answer will be the same as above.

    -J' installed the new machine with ACS3.3, I imported the data/group/user with csutil, then I installed ACS 4.0 using setup.exe. The result is that the ACS services do not start.

    * Normal this is if you hit a bug, that when we try to upgrade a database of ACS 3.3 (x) xx of ACS 4.0 build we have leak customer spaces AAA and/or servers writing AAA in databaae, and that can cause a problem. But we cannot not be hitting this bug.

    How to upgrade:

    [1] make sure we follow the path correct upgradation and supported:

    http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/ACS40/rnwin401.htm#wp37488

    [2] then follow following steps upgrade:

    http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/ACS40/install/install.htm#wp1041858

    Summarizing link above, just run installation of ACS 4.0 on an existing installation of ACS 3.3, and the installation program will ask itself, to save the previous configuration, select Yes at this time.

    Let me know if it helps. Please rate if this helps.

    Kind regards

    Rafael Lanna

  • V3.3.4 replication problems

    I just upgraded to 3.3.4, and I see a problem with replication. I have two ACS servers and they are authenticating with a server CrytoCard. So I configured the external DB on both servers to point to it. I created the users and they are underlined as external DB. Everything works perfectly, even failover if I close the services on the main server.

    However when I replicate the failover doesn't work anymore. What I see is if I look at a user on the server to backup the password for all users authentication section is 'unknown Radius server. I choose the CryptoCard server and everything works fine again.

    Any ideas how I can fix/fix this?

    Any help would be appreciated. TAC also works on this subject, but I wanted to see if someone else has experianced this problem.

    BTW this forum works on a windows server...

    I think we can delete the old entry from the database that ACS will not re-index numbers but am not very sure about this one.

    Kind regards

    Vivek

  • Don't Flash Builder 4.7 problem - no platform BB

    Hi, I installed the FB 4.7 on my PC.

    I downloaded the SDK of AIR in BB Site and installed.

    I tried to create a project, but there are only two platforms listed, it's to say, iOS and Android and no BB it.

    Anyone faced the same problem before? 0o0o

    I use Adobe Flash Builder 4.7 for my Blackberry 10 development, although I use Macbook would highlight, but I also had FB4.7 installed on the PC. It is quiet easy to install BB Developer tools on PC.

    1. first of all, you must run FB4.7 with administrative control.

    2. in your IDE FB4.7 Menu, click help-> install BB 10 publication support or install new software-> type "Blackberry" next to work with, now, you will see the option of ' Blackberry plugin for Flash Builder 4.7... '-> option-> check on BB OS Support checkbox statement select 10, press 'Next' then finished once installed.

    3. restart your Flash Builder and try to create the new project Mobile AS3 or Flex Mobile, you will see Blackberry option along with two others.

    Note: BB 10.1 and before, support Adobe AIR version 3.1 only so make sure that you have not superimposed latest version of Adobe AIR in your Flash Builder.

    Ghislaine

  • Cisco Secure ACS 3.3 (1)-> 4.0 upgrade problems (1)

    Hi all!

    I have problems updating my primary ACS since version 3.3-> 4.0

    I always get the following error message, then it does the upgrade:

    "The record of the CiscoSecure ACS seems to be blocked by another application: C:\Program Files\CiscoSecure ACS v3.3.

    Please close all applications... blabla... »

    The thing is, I have improved my ACS backup first, and this upgrade worked like a charm.

    In both cases, both for the primary and backup I do a takeover with Dameware remote, copied the ACS 4 folder on the hard disk of the server and make the upgrade of this folder.

    As I said, the upgrade of backup server worked without a hitch.

    That's what I tried:

    1. I checked that NO application use the 3.3 ACS file and no Explorer window is open on this folder or subfolders.

    I checked using a small program called Filemon.exe from Sysinternals. According to this program, anything accessed said folder.

    I also checked it again by renaming actually ACS 3.3 file once I stop all services of the ACS. I could not rename the folder if the services have been started.

    2. I tried to stop the ACS services first and then make the configuration, got the same error.

    3. I have disabled the antivirus software, got the same error.

    Basically I am at my wits end now...

    However, I have two options:

    1. uninstall ACS 3.3, do a clean install of ACS 4.0 and import the data of all the GBA backup.

    Who would not raise by the primary association with the ACS configuration backup? So I think I will need to go on it later and make changes, if necessary?

    2 make a backup of the ACS 3.3 with csutil b

    Uninstall ACS 3.3, do a clean install of ACS 4.0 and import all the data with csutil - r

    Would this work? I've seen conflicting information here in this forum, some say that it works, the other say it's not.

    I'm a little confused why it worked so well the GBA backup but fails on the primary ACS.

    Any help would be greatly appreciated!

    Thank you!

    Ivar Thorolfsson

    Hello

    Folder lock message often appears if newspapers located in the directory of the ACS are too big.

    Move the logs of the following directories: -.

    CSAdmin\Logs

    CSAuth\Logs

    CSDBSync\Logs

    CSLog\Logs

    CSMon\Logs

    CSRadius\Logs

    CSTacacs\Logs

    Newspapers

    Then try to upgrade.

    Kind regards

    Vivek

  • build the CAP problem - how do you do an automated build?

    I'm starting my first BB development industrial project.  I have a prototype that works in the Eclipse IDE plugin and in the Simulator.

    I am using: BB JDE Eclipse Plug - in component Pack 4.5.0 and java 1.6.0_11.

    The problem is I am putting in place a system of incremental generation and automatic using bb-ant-tools, and in this environment, I get the following error of Cap:

    [Cap] java.lang.Object: WARNING! No definition not found for the method: clone

    I also tried with the BB JDE environment 4.5.0, after noticing that the net_rim_api.jar files are different between the JDE and the plug-in.  But it has not made a difference.

    I then confirmed that the object in net_rim_api.jar class ISN'T the clone() method.  Clone() is part of J2SE 1.5 specification and would therefore be in libraries that are part of the java JDK 1.6.

    Then, I confirmed, looking at the newspapers of generation, that all the files have been loaded the BB net_rim_api.jar or from one of my source files.

    Then.  2 questions:

    1. a reflection as to why clone() is not found?

    2. What is the way to recommend to set up an automated build system?

    Thanks in advance!

    I solved the problem.

    Buried down in one of my source files was a call to clone(), who is not in the class of object included in net_rim_api.jar.

    After the removal of these calls the application compiles, loads and works on a phone very well.

    I highly recommend bb-and-tools, available on source forge, automated builds!

  • Build a path problem in Eclipse

    I'm having a problem with Eclipse find Java interface that is generated from a resource file. I created the .rrc and .rrh files in my source tree. The interface file, however, is placed in a .tmp file that isn't on the build path Java, Eclipse complains that it cannot resolve the references to the interface and that you do not to import it. I can add the .tmp folder to the path to build in the project properties, which makes Eclipse happy, but he does not 'stick' - the next time I start Eclipse, .tmp is out of the way of construction. It also disappears each time that I add or remove a project class. What I am doing wrong?

    the jde creates the StringsResource.java file dynamically (in your tmp folder).
    You must add this file (or one that you created manually, depending on your workflow) in eclipse. No tmp of course folder, copy it into your project folder.
    do NOT add this file to the jde project.

  • TimesTen replication problem

    I'm currently implementing replication between two data stores timesten (11.2.1.8.0) created on two servers (asdbsl01poc and asdbsl02poc). Both servers have the same hardware and software configuration.

    TimesTen@asdbsl01poc/opt/TimesTen/linux/bin $. / ttVersion
    TimesTen release 11.2.1.8.0 (64-bit, Linux/x86_64) (linux:53388) 2011-02 - 02 T 02: 20:46Z
    Admin of the Forum: timesten
    Instance home directory: / opt/TimesTen/linux
    Group owner: timesten
    Demon base directory: / opt/TimesTen/linux/info
    PL/SQL active.
    TimesTen@asdbsl01poc/opt/TimesTen/linux/bin $

    TimesTen@asdbsl02poc/opt/TimesTen/linux/bin $. / ttVersion
    TimesTen release 11.2.1.8.0 (64-bit, Linux/x86_64) (linux:53388) 2011-02 - 02 T 02: 20:46Z
    Admin of the Forum: timesten
    Instance home directory: / opt/TimesTen/linux
    Group owner: timesten
    Demon base directory: / opt/TimesTen/linux/info
    PL/SQL active.
    TimesTen@asdbsl02poc/opt/TimesTen/linux/bin $

    The/etc/hosts on each of the systems have entries on the other. I created a replication system using the link according to [http://download.oracle.com/otn_hosted_doc/timesten/1121/aspair.html]:

    Command > repschemes

    Active replication system standby:

    Master store: TT20110620 on ASDBSL01POC
    Master store: TT20110625 on ASDBSL02POC


    Excluded arrays:
    None

    Excluded groups Cache:
    None

    Excluded sequences:
    None

    Store: TT20110620 on ASDBSL01POC
    Port: (self)
    Newspaper Fail threshold: (none)
    Retry timeout: 120 seconds
    Compress traffic: disabled

    Store: TT20110625 on ASDBSL02POC
    Port: (self)
    Newspaper Fail threshold: (none)
    Retry timeout: 120 seconds
    Compress traffic: disabled

    + 1 replication schema found. +
    Command >

    After you create the replication on asdbsl01poc (Master DB) system, I spent asdbsl02poc duplicate DB and follow this link [http://download.oracle.com/otn_hosted_doc/timesten/1121/aspair.html]:


    When I ran, ttRepAdmin-duplicate - tt20110620-asdbsl01poc - uid host *-pwd * - keepCG - cacheuid *-cacheuid * "DSN = tt20110625; UID =; PWD = "*, the link above to create a database of duplicate, I came across problems and got this error message:"

    TT12080: Any subscriber found to swap with
    TT12080: subscribed DSN: TT20110625; Host: ASDBSL02POC. FMR.COM. file: repSelf.c, line: 923

    Please let me know what the problem is. The pointers will be greatly appreciated!


    Thank you
    Vikram

    So that both copies (and indeed replciation) work corretcly, several criteria must be met:

    1 host names used in the names of data store in the REPLICAZTION CREATE or CREATE instructions ACTIVE standby must exactly match the names of local host returned by the command "hoistname".

    2. the host names must be able to be resolved on all the systems involved in the replication system.

    3. on each local system, the host name must be resolvable to an IP address that we can unequivocally identify an assigned to an interface on the local system.

    Most of the problems with double giving this error are because one or more of these criteria have not been met.

    My suspicion is that you used the Plains hostnames in your replication scheme, but the system host names are defined (wrongly) to include the domain name (i.e. the "hostname" command returns "asdbsl02poc.fmr.com" instead of just "asdbsl02poc". Best practice dictates that system hostnames does not include the domain information.

    Chris

  • Folio Builder cs5.5 problem

    OK, we have a new iMac and CS5.5 is installed. Now we have problems to install Folio Builder, he said to download the most recent update and install. We did this (1.1.4), but we still got this error

    Screen Shot 2011-08-31 at 12.09.29 PM.png

    I saw on a past post, and he said that you need to install 1.1.1 producer tools first, then the new 1.1.4. so we InDesign uninstalled and reinstalled, we have tried to install 1.1.1 but got this error:

    Screen Shot 2011-08-31 at 12.11.16 PM.png

    any help or suggestion?

    After you have uninstalled InDesign, it probably left some data still in there:

    / Applications/Adobe InDesign CS5.5/Plug-ins/Graphics/

    Uninstall again, claire out who settle 1.1.1 data, then re - install, install the 1.1.4 FB Panel.

    Matthew.

  • RecordNow version 7.32.1 build 08F update problem - internal error 03f2.8007007b

    Hi all!

    The machine is T30 with Windows XP Professional SP2
    (RecordNow preinstalled 4.10 ver)

    There are accessible RecordNow 7.32.1 update leave ThinkVantage System Update (classified as an option).

    When I try to install it, I get the installer internal error 03f2.8007007b. Update is interrupted at this stage.

    I know that it is subject of RecordNow, not TVSU. Because the update downloads OK and integrity is verified. Anyway, I couldn't have this resolved using the Roxio support forums:

    http://forums.support.Roxio.com/lofiversion/index.php/t17819.html

    I have the current version of Windows install and I have disabled the personal firewall
    There is no Windows Defender and there is nothing in the event log.
    Plase help!

    -karabass

    Did you ever get an answer to your message?

    Reinstalling this software on a formatted drive itself was really a nightmare. I had to search for days to find a copy of the RecordNow program for my CD-RW/DVD drive on my T30 2366FBU system. After finding on the Lenovo site, it (rn732108f.exe)

    http://www-307.IBM.com/PC/support/site.WSS/document.do?sitestyle=Lenovo&lndocid=MIGR-57007

    Blithely, I downloaded and it chose auto install for me. The process went well thanks to complete until the installation when a pop up stating

    "This program can be used only on hardware IBM or Lenovo" ?????

    Then stopped dead without having to install.

    The directory and the installed files are protected by Word and I am at square one.

    Never seen this problem?

    Sparky

  • ACS 5.3.40.1 bulk edit problem with certain attributes of WCS

    Hello

    I just wanted to import the attributes WCS GANYMEDE + superusers on ACS 5.3.40.1 via the new feature of change in bulk. If I have attributes of trye what follows and click on submit, my admin user is disconnected from the web GUI and the changes are not saved:

    task13 = view alerts and events

    task15 = delete and clear alerts

    task16 = Pick and collect no alerts

    task17 = Ack and alerts Unack

    Seems to be a bug. Anyone confirm this?

    Best regards

    Dominic

    This issue is not specific to the new feature of change in bulk and can occur when you add entries to the GUI

    Question relates to the use of "alert" in custom attributes GANYMEDE +.

    There is an open CDETS which is rated for an ACS 5.3 stamp

    CSCtx18638 Failed to add attribute to shell custom with keyword alert

Maybe you are looking for