ACS 5.1 VM tools

Similar Questions

• signed rights in URL parameter

  Adobe Content Server: 4.2

  Adobe Digital Editions: 4.0.98786

  Platform: Mac OSX 10.7.5

  Background:

  I have a tool that generates a digitally signed URL for a performance of the ACS. With this tool, you can include the parameter optional rights and its valid values.

  Behavior:

  I see inconsistent behavior with narrowing of the rights of a previously filled of book.  Panel "Info Point" of ADE poster only the initial rights to fill book even after remove the book from ADE, deleting all files .acsm and then creating a new URL with different rights.

  
  

  Steps to reproduce:

  
  

  1. Pack a book without restriction of rights (view all authorized printing, authorized copy)
  2. Create URLS with rights, rights for example = $cpy #15 #86400 #.
  3. Download book via the URL and it will open in ADE 4.0
  4. See "Info Point". It will report (they should)
     1. Display: on any device
     2. Copy: copy 15 with an extra copy accumulated each 1 hour 36 minutes, capped at 15 exemplary, on any device
     3. Printing: on any device
  5. Remove the book from ADE
  6. Delete the related filesystem .acsm file
  7. Delete the related filesystem .epub file
  8. Create a different URL for the same book, but with different rights, such rights = $prn #10 # $86400
  9. Download book via the URL and it will open in ADE 4.0
  10. See "Info Point" for the book to ADE. It will tell you the same rights as in step 4.

  After step 10, I checked the related .acsm file, and it does not print, but when launching new rights using this .acsm file ADE, the "Info point" reported rights step 4 which I wasn't expecting.

  I suspect what happens is that once a book is initially filled, his rights are immutable, regardless of the local associated XML .acsm file. Yes, I have considered what happens if the user changes the .acsm XML file to get the most favorable permissions.

  Finally, the behavior I see can not be a situation real but only related to our tests.

  Anyone with an overview of what I see would be greatly appreciated.

  Kind regards

  Mark Gaither- Senior software engineer
  Freedigital -RR Donnelley company

  Previous user license exists on the server ACS4, and since it is more permissive than the new licence application, it is used instead.

  Another way to think about it, is that ACS4 was not designed (and there are many situations that will not work) to retroactively remove the rights which have already been granted to the user.  (if the user has already completed and uploaded with a completely open license - they can always use that and not the new more restrictive license if they want to).

  But if you want to go this route, then you must watch in remove ACS4 of the original transaction and the license to the user.

• Cisco ACS to tool Migration of ISE

  Hi all.

  I am gtrying to migrate using the migration tool in our LABORATORY ACS 5.3 to ISE 1.2 and I take advantage of this error:

  D:\migTool>migration.bat
  log4j: WARN no such property [encoding] in com.cisco.acs.positron.migration.utils.Log4jTextAreaAppender.
  INFO [main] MigrationApplicationDriver.main:56: applies from the main method.
  Exception in thread "main" org.springframework.beans.factory.BeanDefinitionStoreException: cannot read the candidate class component: file [D:\migTool\bin\com\cisco\acs\positron\migra
  tion\gui\components\treetable\JTreeTable.class]; nested exception is java.lang.ArrayIndexOutOfBoundsException: 3145
  at org.springframework.context.annotation.ClassPathScanningCandidateComponentProvider.findCandidateComponents(ClassPathScanningCandidateComponentProvider.java:237)
  at com.cisco.acs.positron.migration.MigrationApplicationDriver.main(MigrationApplicationDriver.java:61)
  Caused by: java.lang.ArrayIndexOutOfBoundsException: 3145
  at org.springframework.asm.ClassReader.readClass (unknown Source)
  at org.springframework.asm.ClassReader.accept (unknown Source)
  at org.springframework.asm.ClassReader.accept (unknown Source)
  to org.springframework.core.type.classreading.SimpleMetadataReader. (SimpleMetadataReader.java:54)
  at org.springframework.core.type.classreading.SimpleMetadataReaderFactory.getMetadataReader(SimpleMetadataReaderFactory.java:80)
  at org.springframework.core.type.classreading.CachingMetadataReaderFactory.getMetadataReader(CachingMetadataReaderFactory.java:82)
  at org.springframework.core.type.classreading.SimpleMetadataReaderFactory.getMetadataReader(SimpleMetadataReaderFactory.java:76)
  at org.springframework.core.type.filter.AbstractTypeHierarchyTraversingFilter.match(AbstractTypeHierarchyTraversingFilter.java:105)
  at org.springframework.core.type.filter.AbstractTypeHierarchyTraversingFilter.match(AbstractTypeHierarchyTraversingFilter.java:76)
  at org.springframework.context.annotation.ClassPathScanningCandidateComponentProvider.isCandidateComponent(ClassPathScanningCandidateComponentProvider.java:280)
  at org.springframework.context.annotation.ClassPathScanningCandidateComponentProvider.findCandidateComponents(ClassPathScanningCandidateComponentProvider.java:214)

  Hello Juan Carlos.

  If your query is resolved, then mark them as response.

  Thank you

• Failure of the ACS migration tool

  Hi, I am running the migration tool, the following request:

  Make sure that the database is running.

  ACS DB 4.x is unavailable, enter ACS 4.x database password (encrypted)

  :[******]

  With the password of database simple, used during the installation of the ACS, I get a fatal error at the end of the procedure like this: "Fatal Error! -Unable to connect to ACS 4.x DB! »

  Where can I find the password for the encrypted database ACS?

  After the migration log:

  07/10/2011-11:41:31 MigrationApplicationCLI.getUserInformation (MigrationApplicationCLI.java:953) ERROR - not read invoke ACS 4 password system. Error on line C:\Work\ACS5x\ccweb_views\dgash_acs5_0_lenovo\vob\nm_acs\acs\mgmt\migration\DbPassword\Password.c 1265, calle API

  07/10/2011-11:46:52 MigrationApplicationCLI.getUserInformation (MigrationApplicationCLI.java:953) ERROR - not read invoke ACS 4 password system. Error on line C:\Work\ACS5x\ccweb_views\dgash_acs5_0_lenovo\vob\nm_acs\acs\mgmt\migration\DbPassword\Password.c 1265, calle API

  07/10/2011-11:58:08 JavaUtils.isAttachmentSupported(JavaUtils.java:1308) WARN - cannot find the required classes (javax.activation.DataHandler and javax.mail.internet.MimeMultipart). Attachment support is disabled.

  07/10/2011-11:58:28 ACS4Connector.checkDBConnectivity (ACS4Connector.java:137) FATAL - Fatal Error! -Unable to connect to ACS 4.x DB!

  java.sql.SQLException: [Sybase] [ODBC driver] [Adaptive Server Anywhere] ID invalid user or password

  at ianywhere.ml.jdbcodbc.IDriver.makeODBCConnection (Native Method)

  at ianywhere.ml.jdbcodbc.IDriver.connect(IDriver.java:354)

  at java.sql.DriverManager.getConnection (unknown Source)

  at java.sql.DriverManager.getConnection (unknown Source)

  at com.cisco.nm.acs.mgmt.migration.ACS4Connector.getConnecter(ACS4Connector.java:66)

  at com.cisco.nm.acs.mgmt.migration.ACS4Connector.checkDBConnectivity(ACS4Connector.java:133)

  at com.cisco.nm.acs.mgmt.migration.MigrationApplicationCLI.runExport(MigrationApplicationCLI.java:605)

  at com.cisco.nm.acs.mgmt.migration.MigrationApplicationCLI.main(MigrationApplicationCLI.java:266)

  I use the migration on a VMware machine clone tool, from the console.

  Thanks in advance

  Creation date: November 8, 2011 14:47 created by: James, Edward C(EDWJAMES,338460) migrating the 4.x to 5.x database

• Essential tool for ACS 4.1

  Hey guys,.

  could you tell me if there is an essential tool for ACS 4.1? I need to create hundreds of customers AAA!

  Thanks in advance!

  You can try some RDBMS with action codes to add clients through an excel spreadsheet.

  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.0/user/guide/AG.html

• Installation of the VMware Tools on the device of 5.2 VM ACS

  A quick glance reveals no instruction on how to do this, anyone know of documentation out there about how to insall VMware tools on the VM?

  Hi Chris,

  Unfortunately, VMware tools can be installed on ACS 5.x. developers are already aware of the situation and there is a request for feature improvement.

  CSCtg50048    Integrate VMWare tools at ACS 5

  Symptom:

  Support for VMWare Tools is not present on 5 ACS.

  Conditions:

  This affects 5 ACS.

  Workaround solution:

  None.

  No ETA for the development. The next version of the ACS will be ready in summer of this year, please search around that time.

  Rgds, jousset

  The rate of useful messages-

• ISE Migration tool: Unable to connect to the ACS

  Hello

  I try starting the Cisco migration tool to migrate data to ACS 5.2 to ISE 1.1.

  When I run the migration.bat file, I get:

  C:\migTool>migration.bat
  log4j: WARN no such property [encoding] in com.cisco.acs.positron.migration.utils.Log4jTextAreaAppender.
  INFO [main] MigrationApplicationDriver.main:56: applies from the main method.
  Org.springframework.context.support.ClassPathXmlApplicat updating of INFORMATION [hand][email protected] / * /: start date [Thu Jul 11 16:46:09 CEST 2013]; root of context hierarchy
  INFO [hand] loading XML bean definitions of resource path of class [conf/META-INF/beans.xml]
  INFO [hand] instancing of the singletons in org.springframework.beans.factory.s[email protected] / * /: defining beans [exportAuthorizationProfileCache, exportConditionRightOperandCache, exportDevicesCache, exportEnumAttributeIdCache, exportEnumerationCache, exportGenericAttributesCache, exportIdentityAttr
  ibuteCache, exportIdentityDictionaryCache, exportIdentitySourceCache, exportPredefinedDataCache, exportRADIUSDictionaryCache, exportServicesCache, exportManagerImpl, m
  igrationApplicationManager, migrationPhaseStatefulComponent, stateManager, migrationProcedureModel, migrationApplicationGUI, defaultImportObjectHandlerFactory, import
  AllowedProtocolCaching, importAuthZProfileCaching, importDateTimeCaching, importDevicesCaching, importEndPointCaching, importExternalIdentityStoresCache, importIdenti
  tySourcesCaching, importPolicyElementsCache, importRadiusProxyCaching, importUsersCaching, importManagerImp, org.springframework.context.annotation.internalConfigura
  tionAnnotationProcessor, org.springframework.context.annotation.internalAutowiredAnnotationProcessor, org.springframework.context.annotation.internalRequiredAnnot
  ationProcessor, org.springframework.context.annotation.internalCommonAnnotationProcessor]; root of the hierarchy of the factory
  [Main] INFO start parsing of the XML query...
  [Main] INFO start the process XML analysis...
  INFO [Thread-5] Start ACS5 IP connection
  WARN [Thread-5] could not find the required classes (javax.activation.DataHandler and javax.mail.internet.MimeMultipart). Attachment support is disabled.
  ERROR [Thread-5] error occurred during communication with ACS 5.x. (404) not found
  ERROR [Thread-5] error occurred during communication with ACS 5.x. (404) not found
  ERROR [Thread-5] failed to connect to the DCC 5 to start exporting. Make sure that:

  1 migration interface is enabled on the ACS 5 server.
  2 ACS 5 services run.
  3 ACS 5 IP and username and password are correct.
  4 ACS 5 has a compatible license installed.
  INFO [Thread-6] Start ACS5 IP connection
  ERROR [Thread-6] error occurred during communication with ACS 5.x. (404) not found
  ERROR [Thread-6] error occurred during communication with ACS 5.x. (404) not found
  ERROR [Thread-6] failed to connect to the DCC 5 to start exporting. Make sure that:

  1 migration interface is enabled on the ACS 5 server.
  2 ACS 5 services run.
  3 ACS 5 IP and username and password are correct.
  4 ACS 5 has a compatible license installed.

  Then, I click on the export of ACS, and when I put my name to the ACS server and the password, I get:

  "

  ERROR [Thread-9] failed to connect to the DCC 5 to start exporting. Please ensure that: INFO [Thread-9] Start ACS5 IP connection
  ERROR [Thread-9] error occurred during communication with ACS 5.x. (404) not found
  ERROR [Thread-9] error occurred during communication with ACS 5.x. (404) not found
  ERROR [Thread-9] failed to connect to the DCC 5 to start exporting. Make sure that:

  1 migration interface is enabled on the server ACS5

  2 ACS 5 services run

  3 ACS 5 IP and username and password are correct

  4 ACS 5 has a compatible license installed.

  Can someone help me?

  Best regards

  David

  You have activated the web interface of migration? Check that you have configured the computer source of Cisco Secure ACS 5.1/5.2 with a unique IP address. The migration tool may fail during the migration if each interface has multiple IP address aliases.

  Document taken in charge:

  http://www.Cisco.com/en/us/docs/security/ISE/1.0.4/migration_guide/ise10_mig_install.html

  ~ BR
  Jatin kone

  * Does the rate of useful messages *.

• License of ACS problem please help me

  Hi all

  I have download ACS v5.6.0.22 and I install in ESXI, but when I search evaluation site license

  'tools.cisco.com/SWIFT/LicensingUI/Quickstart '.

  I have download this license, but does not work is for 4 CiscoACS I can't find ACS v5 license. 6 in the Web site. Please can someone

  Help me

  Hello

  Could you please try install the attached license file and let me know.

  Concerning

  Gagan

• Configuration/ACS database consolidation

  Hello

  I have two ACS servers.

  One is the 2.4 version and the other is the 3.0.2 version.

  My wish is to install a third ACS 4.0 server which will replace the other two.

  I had planned the following steps:

  1 - upgrade versions 2.4 (srv1) and 3.0.2 (srv2) for 3.0.4.

  2 - export using tool CSUtil configuration of these two servers data;

  3. manually consolidate all data;

  4. install the new server with the version 3.0.4.

  5 - import using CSUtil data consolidated on the new server.

  6 - update the new server after version 4.0 recommended upgrade path.

  All comments on these steps?

  Y at - it no special mechanism/tool to consolidate the configuration from two separate servers for GBA?

  Thanks in advance.

  Kind regards

  Ricardo

  Ricardo,

  We cannot export devices with csutil. What we can do is to search for devices on GUI and download a CSV of the search result.

  DBSync does not database between ACS servers synchronize. DBSync uses a csv file to add devices/users in bulk. So if we create a CSV of users and devices we can import in ACS. More info about dbsync to: -.

  http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/acs33/user/sad.htm#wp756877

  Kind regards

  Vivek

• ACS

  Hello

  Nessus scan shows our ACS is vulnerable to the CVE-2015-5600. (OpenSSH MaxAuthTries derivation.) I spent a few hours searching and cannot understand what GBA version, you have to go to in order to resolve this vulnerability. Can anyone help?

  Hi Leroy,

  Here is the link to bug for this vulnerability:

  https://Tools.Cisco.com/bugsearch/bug/CSCuw09481

  The fix because it's in 5.6.0.22.4 (5.6 cumulative patch), please see the below for your reference.

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_contro...

  Link to download this version of the ACS:

  https://software.Cisco.com/download/release.html?mdfid=286281502&flowid=...

  Let me know if you have any additional questions.

  Kind regards

  Aditya

  Please evaluate the useful messages.

• Name of user and password for ACS?

  I installed ACS 4.0 on one of our servers. The problem I have is when I open the browser to administer the server, I get several errors when I click on some links. I am unable to actually do anything on this server for any reason any (maybe a problem of java).

  I thought it makes sense to open the administration tool of my laptop to see if I could handle it from here, however, I don't know what name to username/password should I enter (if applicable)

  Microsofts (most come with IE) or Suns JVM will work with ACS.

  There is no default logon for remote administration sessions. The only default connection comes from the same ip address and without credentials are required.

  To create an admin account use the pages under "control of the Administration."

  Mounira

• ACS 4.2 to 5.8 migration

  Team - I have a client who wants to migrate its ACS of 4.2 to 5.8.  They currently have a primary and a backup server.

  (1) can anyone offer a migration plan to avoid any downtime during the migration.

  (2) would not, it requires a change of configuration in all network devices, is it possible to centre?

  I have no experience in doing so. Any help on this is appreciated.

  Bijbalak

  You should not need a plan B, I got in some work environments. But if you decide not to use the migration tool, you can use CSUtil and analyze the image to a CSV file that ACS 5.x can import

  http://www.Cisco.com/c/en/us/TD/docs/net_mgmt/cisco_secure_access_contro...

  I have not encountered any problems with the migration on a Windows server 4.2 ACS work tool.

• ACS 3.2 to 3.3 - restore config update

  Hello

  I've updated our server ACS 3.2 in version 3.3. I wanted to restore the config, but I got this message bellow:

  "This backup file is not for this version of CiscoSecure v3.3.

  Is it a 3.2 to 3.3 conversion tool to solve this problem?

  Can I manually edit the config file to match the 3.3 requirements?

  Thank you

  The following document may give you an idea,

  http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/acs33/install/inst02.htm#wp998991

• Browse the ACS through proxy

  Hello

  I have to configure a proxy for navigation of ACS.

  I would like to know all the tcp ports used by ESA.

  Anyone know it?

  TIA

  Massimiliano

  Hello

  Which is not supported.

  A. have a proxy set up on the browser.

  Solution: Check that there is no proxy on the browser IE tools > Internet Options

  > Connections > LAN settings > Server Proxy Edition or Netscape > preferences > advanced > Proxies.

  Kind regards

  ~ JG

  Please evaluate the useful messages

• ACS - the configuration list

  Hello

  How can I list the configuration applied to all users and group on ACS (in a single file)? There are about 300 users.

  Basically, I need information on the maximum sessions per user (may be on a .txt or .csv file).

  I think that this information is available on the files generated by the backup. But I don't know if it is readable.

  Thank you

  Marcelo

  As such, there is no GBA tools with which you can get this information from the report.

  But you can contact Extraxi (www.extraxi.com) and see if they can help you with what you are trying to reach.