ACS 5.1 user password expire does not work

Hi, I set up under policies of Administration password on the password length, the elements being rolled as number, letters and so on.

on the second tab is the password expire for users, and I configured to expire after 90 days.

I even tried to create a new user and change a password for a user existing Apache TOMCAT WAR

I checked the GBA unit's CLOCK and NTP high on our internal NTP servers

Likewise, I create a new user or change the password of Admin user interface, or I change the password for the user via Apache TOMCAT WAR, I the user being disabled in a few minutes, half an hour.

Last, with CISCO AnyConnect is possible to warn the user about the password is expireing and if yes, change could be led through AnyConnect or that it is absolutely necessary a hand of the user task on the portal from Apache TOMCAT upward with the application of GBA WAR?

Last last, I can't disable the logon on the ASA 5510 8.3 IOS AVOIDING user to connect through the AnyConnect application download (on the portal of the ASA)?. This is to avoid people to connect from Internet Cafe' and other facilities puglic not having the AnyConnect application installed from a USB device or local DISK?

I think you hit a known issue with ACS 5.1:

CSCtf06311: all internal users automatically disabled after you be connected to a single user

This is fixed in a hotfix for ACS 5.1.  Hotfix Rollup 5.1.0.44.3 which can be downloaded from CCO

If you decide to download a version of patch, it may be useful to take the latest cumulative hotfix for ACS 5.1: 5.1.0.44.6

Tags: Cisco Security

Similar Questions

  • I can't log in to my account to Mozilla, and Password Reset does not work.

    I have an account to create themes and Mozilla Add-ons, but now it seems inactive,
    and password reset does not work. Here is one of my themes:
    https://addons.Mozilla.org/en-us/Firefox/addon/Fox-December/
    my email: [email protected]

    Support for the site Add - ons are here:
    https://discourse.Mozilla-community.org/c/Add-ons

  • Information about password protection does not work in the IPhone 4S

    Hello

    Good evening. I use IPhone 4S for the past 2 years. March 9.3 IOS has released and even I've updated in my IPhone. But the Notes password protection does not work in my IPhone 4 s.

    Please let me know why this does not work in my IPhone.

    Thank you

    Maryse M.

    Post edited by: Maryse

    You can respond with more details on what you mean by "does not"-for example, no option to create a password, no option to lock a note, cannot open a note protected without password, etc..

    The following can also help. It has instructions on creating a password in the Notes app or in the settings App, keep your notes safe with password-protection - Apple Support

  • ACS 5.2 - accounts User File Update does not work as expected

    Hello, I have a serious problem with the import of the fixed IP addresses to user accounts in ACS 5.2.

    Because this attribute cannot be migrated directly I try via "file operations--> update". I created the file update model, but entered IP addresses aren't imported - all other attributes can be changed without problem.

    If I try to "Add file operations-->" it works well, but I can't use this option.

    IPv4 address attribute in 'System Administration--> Configuration--> dictionaries--> identity--> internal users' is added correctly and appropriate field is not in user accounts.

    Do you have any idea what can be wrong?

    Hi Michal,

    Yes I submitted this as a bug recently. Sometimes after a migration from ACS 4.

    CSCtk05027 : custom fields for users after migration - import/update does not work

    Try to change one of your user input. Just add an IP manually it for example. Then do the update. She will work for this user, and it will update the ip address.

    The solution is to export all users of your DCC 5. Then remove it from the database and then to make an import file 'Add' instead of update. A bit of a silly workaround but the bug should be fixed in future patches (no information on that yet).

    Kind regards

    Nicolas

    ===

    Remember responses of the rate that you find useful

  • Without password ssh does not work but the ACR is fine!

    Version: 11.2
    Operating system platform: AIX 6.1

    Background:
    For stand-alone installations DB, we use the oracle of the LDAP user as the owner of the Oracle software. This oracle user is not in/etc/passwd

    For the CAR, a local user of oracle is mandatory and we created and installed grid and DB several months ago. Everything worked. Today when I made a ssh of Node1 Node2, is asking for password oracle. IE Passwordless ssh does not work


    I have connected to the instance1 and ran
    select instance_name, host_name from gv$instance;
    This is the list of instance names and host names. How is the feature CAR is still intact without SSH without password?

    Hello

    So, what you are implying, is that, user equivalence is required for Installation, but not so required for the feature CARS. Right?

    RAC will work without problem and CARS not use SSH, but resource "ora.cvu" of Oracle Clusterware using SSH for healthcheck.
    When you run '. " "/ cluvfy" is mandatory you have ssh configured with equivalence of the user, the 'ora.cvu' resource is "cluvfy.

    So, if someone deletes the directory .ssh mistakenly Oracle $HOME, RAC feature pourrait still work?

    Yes... CARS doesn't always work. SSH and Oracle Clusterware, Oracle Clusterware also still works without problem, have a low dependency.

    As RAC FAQ mentioned is mandatory present an equivalent user (ssh, etc.) set up after the installation of the PAP/GRID.

    Kind regards
    Levi Pereira

    Published by: Levi Pereira December 14, 2011 12:42

  • How can I download the new update on my Macbook pro when the password is not working? When I connect to the Adobe site with the same user name and password it DOES not work. I don't understand why.

    So I have a macbook pro - and she advised me that I had to update my Adobe flash player. So I go through all the steps and I'm stuck at the last stage, where he asks me my user name and password. I go in there correctly - several times and it does NOT connect. He shakes to show that there's an error. Double check my file AND I go to the Adobe site to connect with the same information. and it works very well.

    WHAT IS THE PROBLEM? Help please.

    Could you please try ComputerName administrator as username and the password as password.

    I hope this works.

    Concerning

    Hervé Khare

  • Remote user VPN IPSec does not work

    Hello

    I'm trying to configure a remote IPsec VPN on a Cisco router user 1921 but it doesn't work for some reason I don't understand. Does anyone have an idea? I forgot something?

    Thank you in advance for your help!

    This is part of my configuration:

    AAA new-model

    !

    local AuthentVPN AAA authentication login

    local AuthorizVPN AAA authorization network

    !

    AAA - the id of the joint session

    !

    username password xxxxxx xxxxx 0 0 encrypted

    !

    crypto ISAKMP policy 1

    BA aes 256

    preshared authentication

    Group 5

    life 3600

    !

    ISAKMP crypto client configuration group vpnclient

    key XXXXXXXXXXXXXXXXXXXXXXXX

    DNS 192.168.0.254

    GVA area. INTRA

    pool IPPoolVPN

    ACL 100

    !

    !

    Crypto ipsec transform-set esp - aes esp-sha-hmac T1

    tunnel mode

    !

    crypto dynamic-map 10 DynMap

    game of transformation-T1

    !

    list of authentication of crypto client myMap AuthentVPN map

    card crypto myMap AuthorizVPN isakmp authorization list

    client configuration address map myMap crypto answer

    card crypto myMap 100-isakmp dynamic ipsec DynMap

    !

    interface Dialer1

    MTU 1492

    the negotiated IP address

    IP access-group RESTRICT_ENTRY_INTERNET in

    NAT outside IP

    IP virtual-reassembly in

    encapsulation ppp

    Dialer pool 1

    Dialer-Group 1

    PPP authentication pap callin

    PPP chap hostname xxxxxxxxx

    PPP chap password 0 xxxxxxxxx

    PPP pap sent-name of user password 0 xxxxxxxxxxxx xxxxxxxxxxxxxx

    crypto myMap map

    !

    IP pool local 192.168.10.0 IPPoolVPN 192.168.10.253

    !

    overload of IP nat inside source list 110 interface Dialer1

    !

    access-list 100 permit ip 192.168.0.0 0.0.0.255 192.168.10.0 0.0.0.255

    access-list 110 deny ip 192.168.0.0 0.0.0.255 192.168.10.0 0.0.0.255

    The conflict will be terminated and should be avoided. It might work if you disable split-mining and road, all via the VPN client...

    Ideally business networks should not use 192.168.0.0/24; 1 or 2 either since they are common in home routers... you can also have them change their home network easily

    Patrick

  • Change password with the password token does not work

    My mother lost her password. So, we asked an e-mail with a password token and clicked on the link in the mail. Responses from the site sorry this token of password is not recognized, please try retyping or get password another token. Then we have copied and pasted the token giving the same result.

    We did this three days after another. So every day we ask you an email with a password token, and every day the site said us sorry this token of password is not recognized, please try retyping or get password another token.

    The system of resetting password with a token does not, at least not in the Netherlands. Does anyone have an idea how to solve this problem?

    Sorry, but the mentioned page asks you to connect with your name Skype and password, so that we cannot further. My mother has a balance of Skype credit that she doesn't use anymore.

    What is the problem with the password reset procedure?

    OK, after a very good conversation with Cherry B we discovered that the account is a Windows Live account, then we should change the password in Windows Live. The password reset procedure could mention this...

  • Satellite A210-1AP: supervisor password utility does not work for Win 7

    I have the utility supervisor password v2.00.05 for Win 7, but it is not working on Win 7 I can't change my password!

    http://www.CSD.Toshiba.com/cgi-bin/TAIS/support/JSP/modelContent.jsp?CT=DL&OS=&category=&MOID=1871687& rpn = PSAFGU & modelFilter = A210-ST1616 & SelCategorie = 3 & selFamily = 1073768663

    I used this link.

    Model short is psaele
    Where I can find all the drivers and all the utility for Win 7.

    Your laptop is not model portable American and you must use drivers of European support page.
    For now, Toshiba has not begun support Win7, but I hope it will happen soon. The question is if your laptop model will be supported Win7.

    In any case, I think you can use touchpad driver designed for A300, but it takes that Toshiba offers all drivers.

  • for three days, I am unable to log on my user account who is the administrator. I tried my usual password and does not work. However, the other two users accounts are still functional.

    Remember - this is a public forum so never post private information such as numbers of mail or telephone!

    Ideas:

    • You have problems with programs
    • Error messages
    • Recent changes to your computer
    • What you have already tried to solve the problem

    http://support.Microsoft.com/default.aspx/KB/940765/en-us

    How to use system restore to log on Windows 7 or Windows Vista when you lose access to an account

    Try the information above for this problem, as you know the password.

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    http://support.Microsoft.com/default.aspx/KB/189126

    "Microsoft's strategy concerning lost or forgotten passwords"

    Microsoft cannot help you recover the passwords of the files and Microsoft who are lost or forgotten product features.

    http://social.answers.Microsoft.com/forums/en-us/vistasecurity/thread/3eba3150-8742-4264-be9f-0daaad2282cd

    Read theBANNING of cracking of passwords information tools information provided in these forums in the thread above posted byBill fill MSFT, moderator

    See you soon.

    Mick Murphy - Microsoft partner

  • Account compromised Hotmail - password reset does not work!

    A few days ago my account Hotmail "sent" emails to all my contacts, even if the emails are not in my sent items folder.  To prevent this from happening again, I installed antivirus software and also deleted all my contacts from Hotmail.  I could access the account for a day or two, but now, without warning, I can not access my TI at all.  When I try to log on I get a screen "your account has been blocked.  I have a second email address, to which I ask a verification code sent to unlock my Hotmail.  When I enter the code, I get a screen "Reset your password".  I have reset a strong password and save, then resubmit my secondary e-mail address, then continue.  I wonder for a phone number as another option of password recovery, but I ignore this screen and click on continue.  I get then tell screen ' authorized error 401 - no server: access denied due to credentials not valid.  You are not authorized to view this directory or page using the credentials you provided "."

    Makes no sense to me!

    I installed Avast antivirus and Microsoft Security Essentials but neither picked up a virus on my system.

    Help, please!  I really need to access my account!

    Hello

    First of all you must have a significant anti-virus program on the computer at one time much
    less running. Even if disabled they will always load parts of themselves into a memory that
    can cause strange issues while actually reduce safety. Even the remains of a
    uninstalled antivirus may cause problems.

    Uninstall Avast or MSE (both are excellent)

    Avast uninstall tool http://www.avast.com/eng/avast-uninstall-utility.html

    MSE clean uinstalls without a removal tool

    ---------------------------------------------------------------------------------------------------------------

    Answers is a peer group supported and unfortunately has no real influence on Hotmail.

    HotMail has its own Forums, so you can ask your questions there.

    Windows Live Solution Center - HotMail - HotMail Forums Solutions
    http://windowslivehelp.com/
    Hotmail - Forums
    http://windowslivehelp.com/forums.aspx?ProductID=1

    Hotmail - Solutions
    http://windowslivehelp.com/solutions.aspx?ProductID=1

    How to contact Windows Live Hotmail Support
    http://email.about.com/od/hotmailtips/Qt/et_hotmail_supp.htm

    Windows Live Hotmail Top issues and Support information
    http://support.Microsoft.com/kb/316659/en-us

    Error message "your account has been locked" when trying to connect
    http://windowslivehelp.com/thread.aspx?ThreadId=77be7d82-a0e9-49c7-b46d-040ec654a9e2

    Compromised account - access unauthorized account - how to recover your account
    http://windowslivehelp.com/solution.aspx?SolutionID=6ea0c7b3-1473-4176-b03f-145b951dcb41

    Hotmail hacked? Take these steps
    http://blogs.msdn.com/b/securitytipstalk/archive/2010/07/07/Hotmail-hacked-take-these-steps.aspx

    If we had the same problem that we would have to use the links above and these methods.

    ===========================================================

    More information:

    If someone is Spoofing emails that appear to come from you then they probably never
    had access to your e-mail account. Instead, they have either a copy of your contacts
    list or just an email from you or one of you where you were one of the recipients. Those
    could be gleaned either your computer, the computer of a friend, or hacking
    any site or intercept an email on your behalf or to you (you may not be the main)
    (beneficiary).

    Once they have this information there is nothing you can do to avoid that they don't
    send usurped messages. Warn your friends that is happening and they
    can be entitled to install rules such as parodies are treated as SPAM or JUNK
    mail.

    I've even seen usurped by email that appears to be from a valid user name however
    This name doesn't have an e-mail account on the mail system used in parody.
    As SpiritX - AT - realmail.com may be a valid account, however, parody used
    SpiritX - AT - wrongmail.com. The latter could still be considered an email address valid
    SpiritX if it was allowed through JUNK and JUNK e-mail filtering. (The - AT - has been used
    instead of so that those addresses would not be filtered by auto responses.
    as if by magic.)

    ============================================================

    Proceed to a very thorough check for malware and then change your password by e-mail.

    The reason why you want to do this is to make sure no more hacking your computer is
    still in effect (if it has been hacked). You have changed the password once but I would
    Change it again after these checks.

    It is possible for a person to send the email that 'seems' to be of your
    account but that is not really - called "Spoofing." That means its 'Possible' emails
    were not really you, although they may have your contact list. Have someone
    who receives the e-mails to check the header to see where he is actually sent by and
    NOT only the answer to the address.

    How to read the message headers
    http://www.emailaddressmanager.com/tips/header.html

    What Email Headers can tell you about the origin of Spam
    http://email.about.com/cs/spamgeneral/a/spam_headers.htm

    E-mail spoofing
    http://en.Wikipedia.org/wiki/E-mail_spoofing

    E-mail spoofing and Phishing
    http://www.mailsbroadcast.com/email.broadcast.FAQ/46.email.spoofing.htm

    Understanding E-mail Spoofing
    http://www.windowsecurity.com/articles/email-spoofing.html

    Fraudulent emails (false)
    http://pages.eBay.com/education/spooftutorial/

    Google search - email Spoofing
    http://www.Google.com/search?hl=en&EI=FB1nS9DiNo7CsQPNhKGdAw&SA=X&Oi=spell&resnum=0&CT=result&CD=1&ved=0CAgQBSgA&q=email+spoofing&spell=1

    =============================================

    If you need search malware here's my recommendations - they will allow you to
    scrutiny and the withdrawal without ending up with a load of spyware programs running
    resident who can cause as many questions as the malware and may be more difficult to detect as the
    cause.

    No one program cannot be used to detect and remove any malware. Added that often easy
    to detect malicious software often comes with a much harder to detect and remove the payload. Then
    its best to be thorough than paying the high price later now too. Check with them to one
    extreme overkill point and then run the cleaning only when you are sure that the system is clean.

    It can be made repeatedly in Mode safe - F8 tap that you start, however, you must also run
    the regular windows when you can.

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone.
    (If Rootkits run UnHackMe)

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Malwarebytes - free
    http://www.Malwarebytes.org/products/malwarebytes_free

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can
    Download it here.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN
    (Then run MRT as shown above.)

    Microsoft Malicious - 32-bit removal tool
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    Microsoft Malicious removal tool - 64 bit
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=585D2BDE-367F-495e-94E7-6349F4EFFC74&displaylang=en

    also install Prevx to be sure that it is all gone.

    Download - SAVE - go to where you put it-right on - click RUN AS ADMIN

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with others
    security programs. It is a single scanner, VERY EFFICIENT, if it finds something to come back
    here or use Google to see how to remove.
    http://www.prevx.com/   <-->
    http://info.prevx.com/downloadcsi.asp  <-->

    Choice of PCmag editor - Prevx-
    http://www.PCMag.com/Article2/0, 2817,2346862,00.asp

    Try the demo version of Hitman Pro:

    Hitman Pro is a second scanner reviews, designed to save your computer from malicious software
    (viruses, Trojans, rootkits, etc.). who infected your computer despite safe
    what you have done (such as antivirus, firewall, etc.).
    http://www.SurfRight.nl/en/hitmanpro

    --------------------------------------------------------

    If necessary here are some free online scanners to help the

    http://www.eset.com/onlinescan/

    -----------------------------------

    Original version is now replaced by the Microsoft Safety Scanner
    http://OneCare.live.com/site/en-us/default.htm

    Microsoft safety scanner
    http://www.Microsoft.com/security/scanner/en-us/default.aspx

    ----------------------------------

    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------------------

    Also follow these steps for the General corruption of cleaning and repair/replace damaged/missing
    system files.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    Start - type this into the search-> find COMMAND to top box and RIGHT CLICK-
    RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker
    (SFC.exe) program generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.

    How to run the check disk at startup in Vista
    http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    I hope this helps and happy holidays!

    Rob Brown - Microsoft MVP<- profile="" -="" windows="" expert="" -="" consumer="" :="" bicycle="" -="" mark="" twain="" said="" it="">

  • Cannot connect to hotmail. Reset password link does not work

    I tried to connect to my Hotmail account on my phone, but it said that "the user name or password Hotmail.co.uk is incorrect". I tried several times. Then, I decided to ask the password reset and followed all the steps and asked the password to pass to another e-mail account. I received an email saying that information have been verified and click on a link below. I did it and it opens a page that says:

    This link is no longer valid

    The link you received by email has expired, or you may have already used it. To reset your password, click on the button below.

    I tried connecting via laptop and a PC but get all the same problems

    Please help as I can't live without my emails

    Microsoft forum account has been deleted and all associated accounts must now wonder online ici  


    Select the error you must help with and fill in the information requested on the next page.  You must be connected to a Microsoft account to access the form.

    If you are unable to access your main account, you can use another account (if you have one) or create a new one at https://signup.live.com


    You can read commitsr information on codes & accounts blocked here

  • Password recovery does not work

    I just tested sends password recovery in a customer record subscribed to a secured (on a test site) area. The email goes very well with the link to the customer set the new password... all fine, the only problem is when you set the new password from the symbolic link always comes the same error...

    ERROR: Your password reset token has expired. Please request a new using the form below.

    I tried several times, so there is no way, it might be time? What happens here?

    Hi all

    I don't know how you open links received via the password reset email, but in the case where you use copy/paste please make sure that you do not select the period (.) at the link. In the case where you do this you will indeed receive the error mentioned in the message from this same thread so when you paste the address of the download page will contain two fields (new and confirm) to set the password.

    See you soon,.

    Cristian

  • password reset does not work here

    OK, I use OPERA browser because Firefox will not get past the password on this site!
    Tried twice and still no SOAP, he seems to accept the change of password and asks even if I want to remember, but won't let me sign in!

    What is the problem?
    Firefox 24.0 Windows 7, 64 bit version, all of this to date.

    OK, cancel that. I had to clear the cache and restart Firefox.
    It seems that for now I can connect.

  • WE HAVE AN EXPANION UNIT. WE CANNOT TURN FIREFOX ON IT AND HOST OF THE COMPUTER AT THE SAME TIME. I CHECKED THE BOX THAT ALLOWS HIM TO RUN AS DIFFERENT USERS, BUT STILL DOES NOT WORK ON BOTH. DO WE NEED TO BE CONNECTED TO EACH COMPUTER WITH A DIFFERENT NA

    We use Windows XP and have not had a problem with Internet Explorer.

    I suggest you try as different users.

    If my answer has solved your problem, please click 'Solved It' next to this response when logged in on the forum.

Maybe you are looking for

  • Registration of Push Notifications

    I bought a web certificate thus created my own. How to re - register these so that they don't expire? APNs:com. Apple.alerts APNs:com. Apple.Calendar APNs:com. Apple.contact APNs:com. Apple.mail APNs:com. Apple.Mgmt

  • iMessage: "an error has occurred during authentication.

    iMessage on my Mac began acting yesterday and is not synchronized with my phone and then stopped working completely.  I disconnected and tried to reconnect, but got this error message: Can not connect to iMessage. An error occurred during activation.

  • IPOD Touch - not all songs play without WIFI?

    Synchronize all my songs to our new IPOD touch by connecting IPOD to computer/ITunes, try to understand why some songs will play without WIFI and some (those who play will not have the little icon of the Ipod).  I thought he had to do if the song was

  • Satellite A300D. If it is off

    My laptop died, and to try to turn it on at the same time, it would prove nothing, however in a minute if start easily. It can happen the day 3 - 4 times and can and happen week. It happens more often to view films and scans a computer by an antiviru

  • How to organize books in ibooks (9 IOS)

    Upgrade my Ipad IOS 7 directely. ? 9?, all my collectios ibooks have disappeared. All books are mixed up and I do not even know what the last added. How to organize my books, let's say by topics? Thanks in advance. Concerning