AnyConnect authentication with RADIUS secure method

I was able to correctly configure Cisco AnyConnect VPN on ASA 5520 with code 8.4.  I put it to authenticate to the RADIUS (Microsoft Windows 2008 Server NPS server) server.  I noticed something on the server under "constraints and the method of authentication.  I chose MS-CHAP-v2, but it is considered less secure authentication methods.  I can click on Add and choose other methods of authentication such as smart card or other certificate, PEAP, EAP-MSCHAP VERSION 2.  I chose PEAP, but then the VPN does not work.

So first of all is it really important if I just leave it to MS-CHAP-v2?  Because from my understanding is that AnyConnect authenticate with the ASA and then ASA in the backend communicates with the RADIUS server to security point of this scenario should - not be enough as no UN encrypted or secure less information is available to the outside world?

Secondly there is a documentation on the use of PEAP with Cisco AnyConnect?

AnyConnect supports EAP-GTC, EAP-MD5 and EAP-MSCHAPV2.

From the safety point of view, it does not matter much what you use as IKE still will be encrypt traffic between the client and the head of the line.

Between the head and the RADIUS, the password is encrypted as well.

From a to z, you good to go.

See you soon,.

Olivier

Tags: Cisco Security

Similar Questions

  • 802. 1 x authentication with Radius and win7 Mab

    Good afternoon!

    I have a question about 802.1 x I've set up a laboratory in which I have configured authentication mab with 802. 1 x, but I have a weird behavior of my network controller. On the switch (4948e), I see that the user is authenticated and authorized, and I can see my switch these outputs:

    21 April 15:13:30.263: % AUTHMGR-5-START: start "mab" for the customer (a01d.48ac.b7f
    (5) on the Interface item in gi1/11 AuditSessionID C0A8DF9C0000002E002F3DAC
    * Apr 21 15:13:30.267: % MAB-5-SUCCESS: authentication successful for the client (a01d
    . 48AC.B7F5) on the Interface item in gi1/11 AuditSessionID C0A8DF9C0000002E002F3DAC
    * April 21 15:13:30.267: % AUTHMGR-7-RESULT: authentication result 'success' of me
    ab' for the client (a01d.48ac.b7f5) on the Interface item in gi1/11 AuditSessionID C0A8DF9C00000
    02E002F3DAC
    * Apr 21 15:13:31.299: % AUTHMGR-5-SUCCESS: authorization succeeds in for the customer (a0
    1d.48AC.B7F5) on the Interface item in gi1/11 AuditSessionID C0A8DF9C0000002E002F3DAC

    If I type "see the authentication session", the corresponding output.

    Switch #show authentication sessions

    Interface MAC address method ID of Session of field status
    Item in gi1/11 a01d.48ac.b7f5 mab DATA Authz success C0A8DF9C0000002E002F3DAC

    The thing is that when I check my network controller, it said "authentication failure". That's what I've done so far:

    1. I restarted my pc, the same behavior.

    2. I disabled and enabled my network controller, the same behavior.

    3. I rebooted the switch and re-configured. Same behavior.

    4. I tried with another PC configuration. Same behavior.

    5. I changed the configuration of "user authentication" using dot1x EAP authenticator and it worked.

    This is the configuration I have on my switch:

    AAA new-model
    Group AAA dot1x default authentication RADIUS
    Group AAA authorization network default RADIUS
    start-stop radius group AAA accounting dot1x default
    AAA - the id of the joint session

    !

    control-dot1x system-auth

    !

    Switch #show run gigabitEthernet int 1/11
    Building configuration...

    Current configuration: 128 bytes
    !
    interface GigabitEthernet1/11

    Cx-to-Host description
    switchport access vlan 223
    switchport mode access
    Auto control of the port of authentication
    MAB
    end

    This is the first time I'll put up a configuration 802. 1 x. I'm doing something wrong?

    I really hope that I am not the only one with this kind of behavior!

    Thank you for any assistance you can give me!

    Status: Authz success

    This means that the port is open. Is this permanent? Keep looking at the output of the show a few minutes see if it tries to dot1x too. Can you ping from the PC?

    As authentication of 802. 1 X is enabled in the properties of the map NETWORK PC that you can expect dot1x method runs on the switch and eventually respond to the computer with auth fail. Authentication in the PC box is not necessary for MAB.

    What type of RADIUS server you use and there 802.1 policy X in addition to MAB policy?

    IP address: unknown

    This means that the switch did not recognize the IP address of the host, probably due to the lack of

    analysis of IP device

    command. But it is not necessary for the plain MAB or dot1x.

  • WLC with RADIUS authentication servers

    I WLC user authentication with Cisco ISE which is linked with LDAP, now ISE is not accessible. Will be wireless users could always connect and use the Services of WLC?

    Hello Irshad-

    All customers who have already been authenticated will continue to work and to be allowed on the network until they leave the network and/or re-auth, idle, etc type timers expire. At that point, customers will not be able to join the SSID and won't have access to the network.

    To avoid that from happening, you can:

    1. create a redundancy by having more than one node of ISE

    2. create a secondary authentication via another RADIUS or LDAP server

    I hope this helps!

    Thank you for evaluating useful messages!

  • WiFi WPA2 Enterprise with RADIUS - connection problem

    Hello

    I have here a new ISA 570w with the latest firmware (1.2.17).

    Anyway, I can't get wifi to work in mode WPA2 Enterprise with RADIUS authentication.

    Mode WPA2 PSK are not a problem.

    I have configured the BEAM properly and I can connect directly to him via NTRadPing without any problem. Also the test in the web interface works without any problem (see Figure 2, 3).

    The RADIUS server is a server Synology RADIUS on a Synology NAS, which is a FreeRADIUS server under the hood.

    In the settings of the ISA wireless, I put this RADIUS server for authentication (see screenshot 1, 4).

    However, I can not connect to connect to the network:

    On the iPhone (iOS 6.1.3) I get a prompt for a user name and password, but when I click on connect, it says 'connect to 'cisco3'... ". "and stays there.

    In ISA 570w newspaper, he said:

    Information

    Wireless

    MSG = add MAC station in the list of the ATU. VID = 5; MAC = 5 C: 59:48:02:78:3E;

    Information

    Wireless

    MSG = Wireless mode is a 802.11 mixed b_g_n

    When I cancel the connection attempt, he said:

    Information

    Wireless

    MSG = the Client has dissociated;

    On my Thinkpad with Windows 7 Professional I have everything configured as usual (see screenshots 5,6,7,8) but when I try to connect I do not get a command prompt where I wonder username and password, and finally the connection cannot be established (see Figure 9). Also tried with the same configuration on an another Windows 7 Pro installed costs for laptop with the same problem.

    I can't see any attempt of 570w ISA to authenticate anything in the logs of the RADIUS.

    Also the capture of network traffic on the LAN to the Synology NAS port does not show the RADIUS datagrams.

    I already disabled COP because I read that it can cause problems, but it did not help.

    Can you please suggest something else I can try?

    Thanks in advance!

    Kind regards

    Dominik

    I saw these screenshots, but that screen settings just select the button set up next to the authentication method in the section user authentication, under users.  In each of your screenshots, the RADIUS server identification number is 1, so I would also ensure that I configured the server ID RADIUS 1 that can be configured by going to users-> RADIUS servers.

    All that said, I have seen that your tests have passed and I also do not understand the point of having the RADIUS settings on other screens and then to have info ID RADIUS.  My thought is that you'd be able to pre-set RADIUS users of-> screen RADIUS servers and then select the RADIUS server ID in all other screens without having to enter the RADIUS news over and over again.  He also thinks that you could ignore the users-> screen RADIUS server and enter RADIUS information over and over again and it should work... as you set up initially.  However, based on the past experience of programming errors, I recommend configuring the ID from RADIUS server 1 under user-> RADIUS servers if you have not already... just in case where.

    Shawn Eftink
    CCNA/CCDA

    Please note all useful messages and mark the correct answers to help others looking for solutions in the community.

  • double authentication with Cisco's VPN IPSEC client

    Cisco VPN client (the legacy IPSEC client) does support dual authentication with RSA token AND ActiveDirectory credentials?

    I know that AnyConnect supports it and the commandsecondary- authentication -Server- group' is only for ssl connections, but must be confirmed.

    Kind regards

    Mohammad

    Hi Mohammad,.

    What is double authentication support for Cisco VPN Client?

    A. No. Double authentication only is not supported on the Cisco VPN Client.

    You can find more information on the customer Cisco VPN here.

    As you said the only client that supports dual authentication is the Cisco AnyConnect secure mobility Client.

    Please note and mark it as correct this Post!

    Let me know if there are still questions about it!

    David Castro,

  • I don't want ' t this spyware but it keeps coming up when I turn on my PC. I can't uninstall it. They keep saying that I have to buy and do away with the security I have which I don't want to pay or get rid of what I already have.

    Cyber protection. Security Essintals

    Hello

    Fang here are the methods to check, delete and then be totally sure that the malware is gone. One question
    with these two are that sometimes they bring along real malware that should be deleted.

    WinDefender and Cyber-Protection/security are fake antivirus scams to get you to pay for them
    While they have no advantage.

    Remove cyber security (uninstall Guide)
    http://www.bleepingcomputer.com/virus-removal/remove-cyber-security

    How to remove WinDefender 2009 (Uninstall Instructions)
    http://www.bleepingcomputer.com/virus-removal/remove-WinDefender-2009

    Download malwarebytes and scan with it, run MRT and add Prevx to be sure that he is gone. (If Rootkits run UnHackMe)

    Malwarebytes - free
    http://www.Malwarebytes.org/

    Run the malware removal tool from Microsoft

    Start - type in the search box-> find MRT top - right on - click RUN AS ADMIN.

    You should get this tool and its updates via Windows updates - if necessary, you can download it here.

    Download - SAVE - go where go out you there - top - right click RUN AS ADMIN
    (Then run MRT as shown above.)

    Malicious removal tool from Microsoft
    http://www.Microsoft.com/downloads/details.aspx?FamilyId=AD724AE0-E72D-4F54-9AB3-75B8EB148356&displaylang=en

    -----------------------------

    also install Prevx to be sure that it is all gone.

    Prevx - Home - free - small, fast, exceptional CLOUD protection, working with other security programs. It comes
    a scan only, VERY EFFICIENT, if it finds something to come back here or use Google to see how to remove.
    http://www.prevx.com/

    Choice of PCmag editor - Prevx-
    http://www.PCMag.com/Article2/0, 2817,2346862,00.asp
    --------------------------------------------
    Here are some free scanners online help if needed:

    http://www.eset.com/onlinescan/

    http://www.Kaspersky.com/virusscanner

    Other tests free online
    http://www.Google.com/search?hl=en&source=HP&q=antivirus+free+online+scan&AQ=f&OQ=&AQI=G1

    --------------------------------------------

    Also do to the General corruption of cleaning.

    Run DiskCleanup - start - all programs - Accessories - System Tools - Disk Cleanup

    Start - type this in the search box-> find COMMAND at the top and RIGHT CLICK – RUN AS ADMIN

    Enter this at the command prompt - sfc/scannow

    How to analyze the log file entries that the Microsoft Windows Resource Checker (SFC.exe) program
    generates in Windows Vista cbs.log
    http://support.Microsoft.com/kb/928228

    Run checkdisk - schedule it to run at the next startup, then apply OK then restart your way.

    How to run the check disk at startup in Vista
    http://www.Vistax64.com/tutorials/67612-check-disk-Chkdsk.html

    -----------------------------------------------------------------------

    If we find Rootkits use this thread and other suggestions. (Run UnHackMe)

    http://social.answers.Microsoft.com/forums/en-us/InternetExplorer/thread/a8f665f0-C793-441A-a5b9-54b7e1e7a5a4/

    I hope this helps.

    Rob - bicycle - Mark Twain said it is good.

  • Error code80070666 with Microsft Security Essentals

    After System Restore tried to update THAT MSE has failed repeatedly update

    Hello

    1 did you change on your computer before this problem?

    2 what is this problem only occurs with Microsoft Security Essentials?

    You can follow the suggestions and check out them.

    Method 1

    You can run the fix of the article.

    The problem with Microsoft Windows Update is not working

    http://support.Microsoft.com/mats/windows_update/

    Method 2

    You can run reset Windows Update components.

    How to reset the Windows Update components?

    http://support.Microsoft.com/kb/971058

    Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following windows Help article.
    Back up the registry
    http://Windows.Microsoft.com/en-us/Windows-Vista/back-up-the-registry

    Method 3

    You can follow the procedure in the article.

    Cannot install updates in Windows Vista, Windows 7, Windows Server 2008 and Windows Server 2008 R2

    http://support.Microsoft.com/kb/2509997

    Note: You may lose a small amount of data during execution of check disk on your computer, because it is trying to fix bad sectors on your hard drive.

    Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following windows Help article.
    Back up the registry
    http://Windows.Microsoft.com/en-us/Windows-Vista/back-up-the-registry

    See also:

    Problems with installing updates

    http://Windows.Microsoft.com/en-us/Windows-Vista/troubleshoot-problems-with-installing-updates

  • BlackBerry smartphones anyone using VIP access with Paypal payment method in the world of BlackBerry?

    I'm in trouble. I suspect either BlackBerry World does not support two-factor authentication, or I'm doing something wrong. If you use with Paypal VIP access into the world of BlackBerry and to do with success, please tell me how you do it.

    Background...

    Today I received the error described at http://support.blackberry.com/kb/articleDetail?ArticleNumber=000036300

    I had created Paypal in BlackBerry World before I had activated two-factor authentication in Paypal, but I made purchases since then without problem, until today.

    I deleted Paypal but could not add it back.

    I found this old thread which shows the BlackBerry World does not have authentication to two factors, but this is an old thread and maybe things have changed.

    http://supportforums.BlackBerry.com/T5/downloaded-applications/problem-using-PayPal-in-app-world/TD-...

    I tried with just: password right and I tried with password and code added at the end of the password.

    Follow-up...

    Finally, it worked.

    Think about the possibility that BlackBerry World supports authentication two factor and that maybe I have do the procedure correctly, but maybe there is a temporary break in the system somewhere, I kept trying periodically.

    Finally, it worked. Even after moments before getting the same error, it finally worked.

    So, to confirm: If you configure paypal as method of payment in the world of BlackBerry, and you use two-factor authentication with paypal in conjunction with VIP access, enter your PayPal username and password and then add the authentication code on the end of your password.

    Suggestions if you get an error saying message try again later: wait a minute. Look for the code update and use this code immediately. Do not use a code that is subject to maturity; wait for a charge code and use it immediately. If you still get an error message, try again several times, with a charge code every time. If you still get an error message, wait a few moments and try again.

  • AAA with RADIUS of ASA

    Hey everybody,

    I'm with RADIUS AAA configuration on our Firewall remote ASA.  It's pretty simple, but I have some firewall that does not work on.  I upgraded the IOS image on the ASA 5510 to ASA804-K8. BIN on each of them.  The weird part is some of them work and some of them do not work.

    I was wondering if anyone else has encountered this before and what information do you need to give me a reference to help.

    Thanks in advance,

    Kimberly

    Hi Kimberly,

    just curious: why 8.0.4 and not 8.0.5?

    What you use radius for? What is the radius server? You have configured all the ASAs of the radius servers? Did you use the right shared secret?

    Is there something different between the ASAs working and does lack those? Configuration, location in the network, etc.?

    If the above does not help, please post the config of ASA failure (or at least the relevant items and be sure to remove all sensitive data) and the output of:

    Debug RADIUS

    Debug aaa authentic

    Debug aaa 254 Commons

    You can test only the part of RADIUS with the command «test aaa-server authentication cli...» »

    HTH

    Herbert

  • When I try to play a game online a page appears saying certifcate theres a problem with the security of websites and it will not connect to yahoo messenger

    Im trying to sign on a MSN chat game when I do a page appears saying that there is a problem with the security certificate from the Web site.

    It gives you three choices

    leave the Web site

    continue to this website (not recommended)

    more imformation

    When I click on continue he don't go to the game it won't let me play and a page comes up saying (open ports)

    also when I try to log in to yahoo Messenger, a message pops up saying

    We cannot connect to yahoo messenger

    then he gives me a choice of output or troubleshooting

    When I use troubleshooting, it is said that there could be a problem with your internet connection

    I have listed these two items because they were both working at the same time now their not.

    Any site, I try to get shows this message cerificate

    I did a scan on my computer and it says (fichier-\device\mfeavfk01.sys) (masked driver infection)

    so im collecting it is all related to the same problem

    Hello

    1. what browser you use to play games online?

    2. If you are using Internet explorer, version of Internet explore you use?

    Method 1:

    If you use Internet Explorer, I also suggest you to see link and check.

    "There is a problem with the security certificate from the website" when you try to visit a secure in Internet Explorer Web site

    http://support.Microsoft.com/kb/931850

    Method 2:

    How to reset Internet Explorer settings

    http://support.Microsoft.com/kb/923737

    WARNING: Reset Internet Explorer settings can reset security settings or privacy settings that you have added to the list of Trusted Sites. Reset the Internet Explorer settings can also reset parental control settings. We recommend that you note these sites before you use the reset Internet Explorer settings.

    If you are facing any issue links to the yahoo Messenger, I suggest you to contact yahoo messenger support forums and check.

    http://help.Yahoo.com/communities/index?page=forums

  • remove the default security method

    I used Acrobat X Pro to add a password to a PDF file that I created last week when saving to Microsoft Excel.  It worked well, and the required PDF password to open after that.

    Now, the same password is applied to every PDF I create, which is not what I wanted.   I can save the PDF, I create, open (with password) and change the 'default security method' to 'None' and re - register as a temporary workaround, but really, I just want to change method of security by default for each document so that it ceases to occur.  I don't know how I got this way and do not seem to be able to cancel it anywhere where I can find.

    Can someone tell me how to reset my security method by default to "none" for all future documents?

    Thank you!

    Capture.JPG

    Update to anyone reading this. I realized what happened.

    The problem came in Excel / Office and not in Adobe Acrobat directly, where I was looking for.

    The password was preserved in the complement Acrobat PDFMaker for Excel (probably any office document) so whenever I save a new file, the password parameter is applied.

    To replicate this, go to the Acrobat tab > Preferences > Security tab and check the box for "Require a password to open the document" and enter a password.

    This preference is sticky and will apply to * all * documents coming into this office product, until you go and turn off the password requirement by unchecking the checkbox.

    Thank you!

  • Im having a problem with your security software.  Your data bass must be bad, now I can't have spent my address question.  Ive answered all questions to the best of my knowledge and software has always said that my answers are incorrect

    Im having a problem with your security software.  Your data bass must be bad, now I can't have spent my address question.  Ive answered all questions to the best of my knowledge and software has always said that my answers are incorrect

    Hello Bernard,.

    You sign a document that has authentication based on knowledge, applied in it? If so, and if you can't go to questions, then you will need to contact the sender of the document because they can remove it and return you the document. You can respond directly to the e-mail received esign and happens directly from the sender.

    Kind regards

    -Usman

  • HTTP Session with module GemFire-CS does not work if the session stickiness is not enabled and with spring security

    Hi I have a configured tcServer 2 (Server4, Server5 jvmRoute names) with module gemfire http session, listening to the same gemfire Locator service both with the same name in the region - gemfire_modules_sessions and region attribute id

    I also configured vFabric Web server with Http balancer as a front-end for the HTTP request without activating the rigidity of the session as shown below: I couldn't realize the no session affinity

    <Proxy balancer://tpa-balancer>
         BalancerMember http://localhost:8087 route=Server4 loadfactor=1
         BalancerMember http://localhost:8088 route=Server5 loadfactor=1
         ProxySet lbmethod=bybusyness scolonpathdelim=On
    </Proxy>
    ProxyPass /insurance balancer://tpa-balancer/insurance
    ProxyPassReverse /insurance http://localhost:8087/insurance
    ProxyPassReverse /insurance http://localhost:8088/insurance
    
    

    and I'm using spring security 3.0 for authentication and the flow of the web page is as shown below:

    page connection - "login.htm" and once submitted, it uses ' / j_spring_security_check ' and after successful authentication app redirects to ' / http://www.sigling.is/IMO/imofishing/home.htm '.

    Initially when hits 'login.htm' and anonymousUser user logon is id: 6B21CB15838B2AC1E46F66C0CC7272BE. Server5 and when the form is sent to /j_spring_security_check that the same session id is used and after authentication httpsessionsecuritycontextrepository stores SecurityContext in HttpSession as shown below:

    [09/12/2012-02:00:14][DEBUG][HttpSessionSecurityContextRepository]SecurityContext stored to HttpSession: 
    'org.springframework.security.core.context.SecurityContextImpl@b70b1ef5: 
    Authentication: org.springframework.security.authentication.UsernamePasswordAuthenticationToken@b70b1ef5: 
    Principal: com.csc.ace.insurance.security.vo.UserProfile@e26fa325: Username: [email protected]; P
    assword: [PROTECTED]; Enabled: true; AccountNonExpired: true; credentialsNonExpired: true; AccountNonLocked: 
    true; 
    Granted Authorities: ADMINISTRATOR,CREATE_CUSTOMER,CREATE_USER_ACCT,DELETE_CUSTOMER,DELETE_USER_ACCT,
    MODIFY_CUSTOMER, MODIFY_USER_ACCT,VIEW_CLAIMS,VIEW_CUSTOMER,VIEW_PAYMENTS,VIEW_POLICIES; 
    Credentials: [PROTECTED]; 
    Authenticated: true; Details: org.springframework.security.web.authentication.WebAuthenticationDetails@255f8: 
    RemoteIpAddress: 127.0.0.1; SessionId: 6B21CB15838B2AC1E46F66C0CC7272BE.Server5; 
    Granted Authorities: ADMINISTRATOR, CREATE_CUSTOMER, CREATE_USER_ACCT, DELETE_CUSTOMER, DELETE_USER_ACCT, 
    MODIFY_CUSTOMER, MODIFY_USER_ACCT, VIEW_CLAIMS, VIEW_CUSTOMER, VIEW_PAYMENTS, VIEW_POLICIES'
    

    and when the redirect to http://www.sigling.is/IMO/imofishing/home.htm, it shows HttpSessionSecurityContextRepository: HttpSession returned null for SPRING_SECURITY_CONTEXT object

    com.gemstone.gemfire.modules.session.catalina.DeltaSessionFacade creates a new session with the session id: 6B21CB15838B2AC1E46F66C0CC7272BE. Server4, ideally redirect to the home page go to another server. I have attached the full log file

    I believed that session affinity is not needed when the GemFire Session module is used without local cache and I could see B21CB15838B2AC1E46F66C0CC7272BE. Server5 entry is created in the gemfire_modules_sessions region.

    So why is - this HttpSessionSecurityContextRepository could not get the gemfire session the region object using the id: 6B21CB15838B2AC1E46F66C0CC7272BE. Server5 and directs gemfire DeltaSessionFacade to create a new session

    [09/12/2012-02:00:14][DEBUG][FilterChainProxy]Converted URL to lowercase, from: '/home.htm'; to: '/home.htm'
    [09/12/2012-02:00:14][DEBUG][FilterChainProxy]Candidate is: '/home.htm'; pattern is /**; matched=true
    [09/12/2012-02:00:14][DEBUG][FilterChainProxy]/home.htm at position 1 of 7 in additional filter chain; 
    firing Filter: 'SecurityContextPersistenceFilter'
    [09/12/2012-02:00:14][DEBUG][HttpSessionSecurityContextRepository]No SecurityContext was available from the 
    HttpSession: com.gemstone.gemfire.modules.session.catalina.DeltaSessionFacade@5cca548b. 
    A new one will be created.
    [09/12/2012-02:00:14][DEBUG][FilterChainProxy]/home.htm at position 2 of 7 in additional filter chain; 
    firing Filter: 'UsernamePasswordAuthenticationFilter'
    [09/12/2012-02:00:14][DEBUG][FilterChainProxy]/home.htm at position 3 of 7 in additional filter chain; 
    firing Filter: 'AnonymousAuthenticationFilter'
    [09/12/2012-02:00:14][DEBUG][AnonymousAuthenticationFilter]
    Populated SecurityContextHolder with anonymous token: 
    'org.springframework.security.authentication.AnonymousAuthenticationToken@9054b1a2: 
    Principal: anonymousUser; Credentials: [PROTECTED]; Authenticated: true; 
    Details: org.springframework.security.web.authentication.WebAuthenticationDetails@1c07a: 
    RemoteIpAddress: 127.0.0.1; SessionId: 6B21CB15838B2AC1E46F66C0CC7272BE.Server4; 
    Granted Authorities: ROLE_ANONYMOUS'
    

    Thanks for the additional info.

    Although, in theory, by using sessions not may work for some applications, you will have less sessions unexpected behavior. Any page you visit will result in 10 seconds of additional applications, go to the server. If they are not sticky and bounce between servers, the session will constantly be failed back between the servers. A 'problem' with modern browsers is that they appear simultaneous requests, so you can have the same session failover, at the same time on different servers, that wouldn't be good.

    I'd be curious to know why you choose to have sessions in the first place.

    Nevertheless, it still seems like there is a problem when you have enabled, sessions, so I'll continue to watch it.

    -Jens

  • Running Application Module tester with ADF security

    Hi, I use JDeveloper 11.1.1.6 and recently activated ADF security on my request. Now when I try to run the Application Module Tester by right click on the request form and say run I get the following error. I get the JAAS prompt to enter my credentials, but no matter what I put, I get the following.

    oracle.jbo.JboException: Houston-29000: Unexpected exception caught: oracle.adf.share.security.ADFSecurityAuthenticationException, msg = EXC_NO_AUTHENTICATION_SERVICE
    at oracle.jbo.pool.ResourcePool.createResource(ResourcePool.java:599)
    at oracle.jbo.common.ampool.ApplicationPoolImpl.prepareApplicationModule(ApplicationPoolImpl.java:2473)
    at oracle.jbo.common.ampool.ApplicationPoolImpl.doCheckout(ApplicationPoolImpl.java:2347)
    at oracle.jbo.common.ampool.ApplicationPoolImpl.useApplicationModule(ApplicationPoolImpl.java:3246)
    at oracle.jbo.common.ampool.SessionCookieImpl.useApplicationModule(SessionCookieImpl.java:572)
    at oracle.jbo.common.ampool.SessionCookieImpl.useApplicationModule(SessionCookieImpl.java:505)
    at oracle.jbo.common.ampool.SessionCookieImpl.useApplicationModule(SessionCookieImpl.java:500)
    at oracle.adf.model.bc4j.DCJboDataControl.initializeApplicationModule(DCJboDataControl.java:523)
    at oracle.adf.model.bc4j.DCJboDataControl.getApplicationModule(DCJboDataControl.java:869)
    at oracle.jbo.jbotester.binding.TesterBinding.getConnectionInfo(TesterBinding.java:214)
    at oracle.jbo.jbotester.MainFrame.initializeDataControl(MainFrame.java:906)
    at oracle.jbo.jbotester.MainFrame.loadConfiguration(MainFrame.java:632)
    at oracle.jbo.jbotester.MainFrame.processArgs(MainFrame.java:597)
    at oracle.jbo.jbotester.MainFrame.main(MainFrame.java:428)
    Caused by: oracle.adf.share.security.ADFSecurityAuthenticationException: EXC_NO_AUTHENTICATION_SERVICE
    at oracle.adf.share.security.authentication.AuthenticationServiceUtil.getAuthenticationService(AuthenticationServiceUtil.java:68)
    at oracle.jbo.common.UserAznUtil.authenticate(UserAznUtil.java:64)
    at oracle.jbo.common.UserAznUtil.authenticateUser(UserAznUtil.java:32)
    at oracle.jbo.jbotester.TesterEnvInfoProvider.getInfo(TesterEnvInfoProvider.java:344)
    at oracle.jbo.common.ampool.DefaultConnectionStrategy.createApplicationModule(DefaultConnectionStrategy.java:65)
    at oracle.jbo.common.ampool.ApplicationPoolImpl.instantiateResource(ApplicationPoolImpl.java:2913)
    at oracle.jbo.pool.ResourcePool.createResource(ResourcePool.java:580)
    ... 13 more
    # # 0 in detail
    oracle.adf.share.security.ADFSecurityAuthenticationException: EXC_NO_AUTHENTICATION_SERVICE
    at oracle.adf.share.security.authentication.AuthenticationServiceUtil.getAuthenticationService(AuthenticationServiceUtil.java:68)
    at oracle.jbo.common.UserAznUtil.authenticate(UserAznUtil.java:64)
    at oracle.jbo.common.UserAznUtil.authenticateUser(UserAznUtil.java:32)
    at oracle.jbo.jbotester.TesterEnvInfoProvider.getInfo(TesterEnvInfoProvider.java:344)
    at oracle.jbo.common.ampool.DefaultConnectionStrategy.createApplicationModule(DefaultConnectionStrategy.java:65)
    at oracle.jbo.common.ampool.ApplicationPoolImpl.instantiateResource(ApplicationPoolImpl.java:2913)
    at oracle.jbo.pool.ResourcePool.createResource(ResourcePool.java:580)
    at oracle.jbo.common.ampool.ApplicationPoolImpl.prepareApplicationModule(ApplicationPoolImpl.java:2473)
    at oracle.jbo.common.ampool.ApplicationPoolImpl.doCheckout(ApplicationPoolImpl.java:2347)
    at oracle.jbo.common.ampool.ApplicationPoolImpl.useApplicationModule(ApplicationPoolImpl.java:3246)
    at oracle.jbo.common.ampool.SessionCookieImpl.useApplicationModule(SessionCookieImpl.java:572)
    at oracle.jbo.common.ampool.SessionCookieImpl.useApplicationModule(SessionCookieImpl.java:505)
    at oracle.jbo.common.ampool.SessionCookieImpl.useApplicationModule(SessionCookieImpl.java:500)
    at oracle.adf.model.bc4j.DCJboDataControl.initializeApplicationModule(DCJboDataControl.java:523)
    at oracle.adf.model.bc4j.DCJboDataControl.getApplicationModule(DCJboDataControl.java:869)
    at oracle.jbo.jbotester.binding.TesterBinding.getConnectionInfo(TesterBinding.java:214)
    at oracle.jbo.jbotester.MainFrame.initializeDataControl(MainFrame.java:906)
    at oracle.jbo.jbotester.MainFrame.loadConfiguration(MainFrame.java:632)
    at oracle.jbo.jbotester.MainFrame.processArgs(MainFrame.java:597)
    at oracle.jbo.jbotester.MainFrame.main(MainFrame.java:428)

    Also, I have tried to disable the security of the ADF and the request module Tester then works fine but I need to run it with security ADF is turned on. Someone knows how to fix this?

    Thank you.

    I understood the question. It seems that I had to remove the library "ADF generic Runtime ' libraries and Classpath of the project of my model parameters. Does anyone know why having this library referenced in your project settings would cause this issue? I also had to delete this reference from the library to a project to generate a web service proxy in the past, it seems to cause a few problems when they are associated with libraries and Classpath for a project or even associated with a library that depends on another library. Can anyone provide any indication regarding the library and why it causes so many problems? You can recreate this issue on demand by adding the library "ADF generic Runtime ' to your template with ADF security project and then activated by running the module of the application by clicking on it and say run.

  • Rendering of the elements in a JSP page only to users authenticated on adf-security

    Greetings

    This is a simple question?

    I need to display a link only if I'm with a user authenticated on adf security. could someone provide me with the EL that I have to set the RENDER in my JSP

    Thank you

    Try something like:
    ADFContext.getCurrent () .getSecurityContext () .isAuthenticated)

    Therefore, EL must be:

    adfContext.securityContext.authenticated

    You should be able to use the EL generator.

    Vincent

Maybe you are looking for