AS with GANYMEDE + question

Try to get the module ACE and IOS devices to work with GANYMEDE. I have GBA v3.2.

The "optional" syntax does not work. No idea if the argument is valid for the version of the CSA?

Service = exec

Optional shell: Admin = domain Admin

I tried it with quotes, but which didn't work either.

Hello

This is a doc of reference for the configuration of the ACE for authentication Ganymede +,.

http://www.Cisco.com/en/us/docs/interfaces_modules/services_modules/ACE/v3.0

0_A1/configuration/Security/Guide/AAA.html#wp1321891

Under the custom for attribute Ganymede + we need to specify the attribute in the form,

Shell: Admin * ADMIN MYDOMAIN1

= means mandatory attribute

* Optional means

Information on the context/role/domain (virtualization on ACE):

http://www.Cisco.com/en/us/docs/interfaces_modules/services_modules/ACE/v3.0

0_A1/configuration/virtualization/guide/ovrview.html

Default 'role' on ACE:

http://www.Cisco.com/en/us/docs/interfaces_modules/services_modules/ACE/v3.0

0_A1/configuration/virtualization/guide/ovrview.html#wp1051297

HTH

JK

Please evaluate the useful messages-

Tags: Cisco Security

Similar Questions

  • Blue square with a question mark instead of a picture

    I'm on Messages to use with your Mac - Apple Support.

    Instead of pictures (or), I get a blue square with a question mark in it.

    This does not happen with all Web sites, but I wonder why it's happening with an Apple site, and how I can see the photos.

    It sounds like a broken image link.

    Post a screenshot if you can, so that we can confirm. The page seems OK after a glance. Command + shift + 4 then do slide on the affected area, add the image to the desktop to this site via the camera icon.

    If you have browser extensions, disable them and repeat the test. Also try a different web browser if possible to see if it is the scale of the system or only Safari. Is - this Safari you use?

  • What is the yellow square with a question mark on the page OPTIONS of FireFox? Have a peak.

    There is a yellow square with a question mark on the FireFox OPTIONS / settings page.
    If the mouse enters it, it reacts like it is something to click, but no indication that it is.
    Is it supposed to be there and if so, why?
    He has a POINT of MARK BLACK inside the small SQUARE of YELLOW.
    Any help is appreciated.

    This is the help screen. Press the key.

  • In support, forum, signed in, where can I associate with the questions I ask myself? Years back, could get the RSS feed for the question. Always available?

    Where can I associate with my questions about my account? The search for user name does not work. A few years back, you could subscribe to an RSS feed for a question, yours or others. Is - this past, if so, why? How can you save the question, without saving your question text in a document and copy and paste into search? Version of FF 19.0.2.

    Thank you.

    Your messages will now appear in your profile: https://support.mozilla.org/en-US/user/225440

    You can also use the old method of "My Contributions" link: https://support.mozilla.org/questions?filter=my-contributions

    Is that it?

  • Mac Pro does not.  It has a box with a question mark?

    My Mac Pro has stopped working all of a sudden.  We stop for the night and the next day, we got a box with a question mark?  Any ideas?

    Hope this helps.

    OS X: on OS X Recovery - Apple Support

  • I get a folder with a question mark symbol when I turn on

    I'm giving my daughter my MacBook Pro retina (2013) so I'll try to get it to the factory settings.  I tried reloading ElCapitan and downloaded for half an hour and then says that the download failed.  This happened twice, and now all I get is a folder with a question mark symbol.  What should I do?

    Hey! Take a look at these articles Support from Apple and try basic troubleshooting steps.

    If a flashing question mark appears when you start your Mac - Apple Support

    On the screens, you see when you start your Mac - Apple Support

  • Safari on my MacBook Pro retina 9.0.3 15-inch Version 10.11.3 do not show images on some Internet sites. They appear for a fraction of a second then disappear with a question mark in the Center. The same sites work fine on Chrome and Firefox.

    Safari on my MacBook Pro retina 9.0.3 15-inch Version 10.11.3 do not show images on some Internet sites. They appear for a fraction of a second then disappear with a question mark in the Center. The same sites work fine on Chrome and Firefox.

    I suggest you only begin by taking the measures recommended in this support article.

  • IDS with Ganymede

    Are IDS 4215 compatable sensors with Ganymede? I see nothing in the csm, guides the user ID itself which would lead me to believe it was, but I wanted to just make sure with the group.

    Thank you.

    IDS/IPS from now devices do not support external authentication using AAA servers. The only way that users can be authenticated so is using the local database on the IDS/IPS device.

    I hope this helps.

    Kind regards

    Maryse.

  • GANYMEDE + question: Please help

    Dear all,

    It is with regard to Ganymede +. I have configured Ganymede + on switch cisco, but it is local user name and password

    for authentication.

    With below configuration on the other switch, works very well with Ganymede + username and password, but not with

    This switch.

    AAA new-model

    AAA authentication login default group Ganymede + local

    AAA authentication login no_login local

    AAA accounting send stop-record an authentication failure

    AAA accounting exec default start-stop Ganymede group.

    orders accounting AAA 15 by default start-stop Ganymede group.

    Default connection accounting AAA power Ganymede group.

    AAA - the id of the joint session

    RADIUS-server host 10.0.2.193 touches 110A101614425A5E57 7

    RADIUS-server application made

    username admin privilege 15 password *.

    line vty 0 4

    transport input telnet ssh

    by default the authentication of connection

    Also, this switch is configured for intervlan routing, with the following configuration and I added 10.0.6.1 address IP Cisco ACS.

    interface Vlan5

    the IP 10.0.0.1 255.255.255.0

    !

    interface Vlan20

    IP 10.0.2.1 255.255.255.0

    IP helper 10.0.0.7

    !

    interface Vlan60

    IP 10.0.6.1 255.255.255.0

    REFLXIS_PUNCORE #show Ganymede

    GANYMEDE + server: 10.0.2.193/49

    Opening of socket: 33

    Firm grip: 33

    Write-offs of socket: 0

    Socket errors: 0

    Socket timeouts: 0

    Failed connection attempts: 0

    Total packets sent: 33

    Recv packets total: 0

    So please help on the same.

    Hello Eve,.

    the IP address of the server 10.0.2.193 is accessible in 20 Vlan.

    Therefore, the switch will try to connect to the server using the address IP of Vlan20, 10.0.2.1.

    You can fix this in two ways:

    1. change the configuration on the radius server to have an entry with 10.0.2.1 instead of 10.0.6.1.

    or

    2. change the configuration of the switch, adding "ip radius-server source interface vlan 60.

    Please indicate the so useful post

    Marco

  • Cisco 2950 GANYMEDE + question

    I have several switches 2950 that I can't go to work with GANYMEDE.  I use the same configuration for what I use for other cisco switches.

    Cisco Internetwork Operating System software

    IOS (TM) C2950 Software (C2950-C3H2S-M), Version 12.0 (5.3) WC (1), TEMPORARY SOFTWARE MAINTENANCE

    System image file is "flash: c2950-c3h2s - mz.120 - 5.3.WC.1.bin.

    password username privilege 15 7 XXXXXX XXX

    activate the password XXXXXX

    AAA new-model

    !

    AAA authentication login default group Ganymede + local

    AAA authentication login conmethod activate Group Ganymede +.

    the AAA authentication enable default group Ganymede + activate

    AAA authorization exec default group Ganymede + authenticated if

    AAA accounting exec default start-stop Ganymede group.

    !

    GANYMEDE-server host XXX.XXX.XXX.XXX touches 7-XXXXXXX

    GANYMEDE-server host XXX.XXX.XXX.XXX touches 7-XXXXXXX

    Any help would be greatly appreciated.

    Thank you.

    Hello

    How does your configuration of vty lines look like?

    Have you tried the command in aaa-server test? If you have, what are you?

  • Nexus, authorization to order with GANYMEDE.

    Hello.

    Can anyone provide an example of configuration to use Cisco Secure ACS 4.2 to enable permission to order with GANYMEDE.

    Thank you.

    Kind regards.

    Andrea

    Hello Andrea,

    We moved to GBA 5.3 now - but we had our 5520 Nexus running against our old 4.2 ACS before this - so I chose the relevant bits of the config below:

    username admin password network-admin role; user local administrator

    feature Ganymede +; turn on Ganymede

    radius-server host key; set the key for RADIUS server
    AAA server Ganymede group + Ganymede; create the group called "Ganymede".
    Server; set the IP address of the RADIUS server
    the vrf use management; tell him to use the default 'management' vrf to send queries for Ganymede
    source-interface mgmt0;... .and send mgmt interface

    AAA authentication login default group Ganymede; Use Ganymede for auth login
    AAA authentication login console Group Ganymede; Use Ganymede for auth login console
    AAA authorization config-commands by default local group Ganymede; use Ganymede for permission to config command
    AAA authorization by default Ganymede local group orders; use Ganymede for normal control authorization
    Default accounting AAA group Ganymede; Send documents to Ganymede

    I hope that works for you!

    (This may change a bit, when you move to ACS 5.x - that we chose not to do complex auth command (using only shell profiles) to remedy this you go back as a nexus for the 5 k - and it makes the command auth (operator network vs network-admin) based on the one - if you just do not configure authorization to order aaa on the 5 k)

    Rob...

  • Problem with challenge Questions/Force Password reset

    Problem with challenge Questions/Force Password reset

    We have integrated the IOM - OAM 11g R2 PS1. When a new user is created through the console of the IOM and tried to login for the first time in the console of the IOM.

    -Accessible via Direct / url of the Web server on port 7777 (by OAM), framework for change of password is visible and challenging questions setting frame is not visible. In this case, I'm not able to reset the password due to errors (popup appears with "Houston-29000 unexpected exception caught:" error). Paste the contents of the log below:

    NOTE: ANY CUSTOMIZATIONS PERFORMED ON ISSUES CHALLENGE *.

    oracle.iam.ui.platform.exception.OIMRuntimeException: Houston-29000: Unexpected exception caught: java.lang.NullPointerException, msg = null

    at oracle.iam.ui.authenticated.firstlogin.model.am.FirstLoginAMImpl.changePassword(FirstLoginAMImpl.java:261)

    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)

    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

    at java.lang.reflect.Method.invoke(Method.java:597)

    at oracle.adf.model.binding.DCInvokeMethod.invokeMethod(DCInvokeMethod.java:657)

    at oracle.adf.model.binding.DCDataControl.invokeMethod(DCDataControl.java:2143)

    at oracle.adf.model.bc4j.DCJboDataControl.invokeMethod(DCJboDataControl.java:3114)

    at oracle.adf.model.binding.DCInvokeMethod.callMethod(DCInvokeMethod.java:261)

    at oracle.jbo.uicli.binding.JUCtrlActionBinding.doIt(JUCtrlActionBinding.java:1635)

    at oracle.adf.model.binding.DCDataControl.invokeOperation(DCDataControl.java:2150)

    at oracle.jbo.uicli.binding.JUCtrlActionBinding.invoke(JUCtrlActionBinding.java:740)

    at oracle.adf.controller.v2.lifecycle.PageLifecycleImpl.executeEvent(PageLifecycleImpl.java:402)

    at oracle.adfinternal.view.faces.model.binding.FacesCtrlActionBinding._execute(FacesCtrlActionBinding.java:252)

    at oracle.adfinternal.view.faces.model.binding.FacesCtrlActionBinding.execute(FacesCtrlActionBinding.java:210)

    at oracle.iam.ui.platform.utils.FacesUtils.executeOperationBinding(FacesUtils.java:176)

    at oracle.iam.ui.platform.utils.FacesUtils.executeOperationBindingFromActionListener(FacesUtils.java:123)

    at oracle.iam.ui.authenticated.firstlogin.bean.FirstLoginValidatorBean.setPassword(FirstLoginValidatorBean.java:376)

    at sun.reflect.NativeMethodAccessorImpl.invoke0 (Native Method)

    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)

    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)

    at java.lang.reflect.Method.invoke(Method.java:597)

    at com.sun.el.parser.AstValue.invoke(AstValue.java:187)

    at com.sun.el.MethodExpressionImpl.invoke(MethodExpressionImpl.java:297)

    at org.apache.myfaces.trinidadinternal.taglib.util.MethodExpressionMethodBinding.invoke(MethodExpressionMethodBinding.java:53)

    at org.apache.myfaces.trinidad.component.UIXComponentBase.broadcastToMethodBinding(UIXComponentBase.java:1256)

    at org.apache.myfaces.trinidad.component.UIXCommand.broadcast(UIXCommand.java:183)

    at oracle.adf.view.rich.component.fragment.UIXRegion.broadcast(UIXRegion.java:148)

    at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:102)

    to oracle.adf.view.rich.component.fragment.ContextSwitchingComponent$ 1.run(ContextSwitchingComponent.java:92)

    at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent._processPhase(ContextSwitchingComponent.java:361)

    at oracle.adf.view.rich.component.fragment.ContextSwitchingComponent.broadcast(ContextSwitchingComponent.java:96)

    at oracle.adf.view.rich.component.fragment.UIXInclude.broadcast(UIXInclude.java:96)

    at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.broadcastEvents(LifecycleImpl.java:1018)

    at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl._executePhase(LifecycleImpl.java:386)

    at oracle.adfinternal.view.faces.lifecycle.LifecycleImpl.execute(LifecycleImpl.java:194)

    at javax.faces.webapp.FacesServlet.service(FacesServlet.java:265)

    to weblogic.servlet.internal.StubSecurityHelper$ ServletServiceAction.run (StubSecurityHelper.java:227)

    at weblogic.servlet.internal.StubSecurityHelper.invokeServlet(StubSecurityHelper.java:125)

    at weblogic.servlet.internal.ServletStubImpl.execute(ServletStubImpl.java:301)

    at weblogic.servlet.internal.TailFilter.doFilter(TailFilter.java:26)

    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

    at oracle.adf.model.servlet.ADFBindingFilter.doFilter(ADFBindingFilter.java:205)

    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

    at oracle.adf.view.page.editor.webapp.WebCenterComposerFilter.doFilter(WebCenterComposerFilter.java:117)

    at weblogic.servlet.internal.FilterChainImpl.doFilter(FilterChainImpl.java:56)

    at oracle.adfinternal.view.faces.webapp.rich.RegistrationFilter.doFilter(RegistrationFilter.java:106)

    to org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$ FilterListChain.doFilter (TrinidadFilterImpl.java:446)

    at oracle.adfinternal.view.faces.activedata.AdsFilter.doFilter(AdsFilter.java:60)

    to org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl$ FilterListChain.doFilter (TrinidadFilterImpl.java:446)

    at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl._doFilterImpl(TrinidadFilterImpl.java:271)

    at org.apache.myfaces.trinidadinternal.webapp.TrinidadFilterImpl.doFilter(TrinidadFilterImpl.java:177)

    Any help.

    Thank you.

    I solved this problem, the problem is due to Bug ID # 17008132.

    Thank you.

  • First, I'm joining the forum with a question CS4 and CS5 Suite for Mac. Can someone tell me why it is NOT a place to submit a question as it is here?

    First, I'm joining the forum with a question CS4 and CS5 Suite for Mac. Can someone tell me why it is NOT a place to submit a question as it is here?

    Creative Suites Mac forum seems to be closed, so moved that Creative Suites Windows the Forum of Creative Suites "base".

    Then... Post your question and someone may be able to help... is your question about the installation of the old software on a new Mac?

    IF El Capitan Mac read below

    CS6 and previous programs have not been tested and will not be updated to run on Mac El Capitan

    -which means you are trying to use CS6 and earlier at YOUR risk of having problems

    -You can get CS6 and previous programs to install and run, or you can not (some do, some don't)

    -IF not, Details of the message from the error messages and a person may be able to help (just not Adobe)

    This information is a MUST to install old programs on Mac El Capitan

    -You can't get the same error message, but here are some links that CAN help with old programs

    -Java https://helpx.adobe.com/dreamweaver/kb/dreamweaver-java-se-6-runtime.html can help

    Install CS5 on Mac 10.11 https://forums.adobe.com/thread/2003455 can help (also for others than CS5)

    -also a TEMPORARY security change https://forums.adobe.com/thread/2039319

    -http://mac-how-to.wonderhowto.com/how-to/open-third-party-apps-from-unidentified-developer s-mac-os-x-0158095 /

    -the guardian https://support.apple.com/en-au/HT202491

  • CC Desktop App for the Government concerning: the end user administrator came back with 2 questions. Since the Bank has its workstations (computers) in a network segments separated physically (Internet and Intranet), are they correctly assuming that:

    Desktop adobe Creative Cloud for government applications :end user administrator came back with 2 questions. Since the Bank has its workstations (computers) in a network segments separated physically (Internet and Intranet), are they correctly assuming that:

    1. They will be able to download and activate the installation package through CC e package on Internet workstation and transfer with a USB flash drive on a workstation Intranet , hence they can deploy desktop applications to end-user desktops CC?
    2. The deployment of renewal process will work the same as above?

    Government accounts https://forums.adobe.com/thread/1483694 can help

    or

    Since this is an open forum, not Adobe support... you must contact Adobe personnel to help

    Chat/phone: Mon - Fri 05:00-19:00 (US Pacific Time)<=== note="" days="" and="">

    Don't forget to stay signed with your Adobe ID before accessing the link below

    Creative cloud support (all creative cloud customer service problems)

    http://helpx.Adobe.com/x-productkb/global/service-CCM.html

    or

    http://forums.Adobe.com/community/download_install_setup/creative_suite_enterprise_deploym ent

    Creator of Enterprise Cloud https://forums.adobe.com/thread/1489872 License Restrictions

  • OBIEE 11 g: fun with gauges Question 1

    Hello world

    I play with the caliber of the bulb and more I learn about this, more I get confused. I came up with several questions, however, because I want to give people full credit for each individual response, I'll post several threads.

    Question 1
    When you hover over with the mouse the bulb, certain information is displayed. Where does all this information and how can I change the hover in the effect?

    Currently, it displays the value of the column in the lines section, then a colon, then the value of the metric then in parenthisis some percentages that have absolutely nothing to do with my data set. It's not terrible, but it's pretty boring. I really wish I could control what is happening out there.


    Thank you.

    -Joe

    Joe,

    When you look at the other types of graphs (Bar/Line), "Mouse Over" parameters can be disabled by:

    1. click on "Edit View" on your results pane
    2. click on "change the properties of the graph.
    3 tab 'Titles and Labels' Goto
    4. under the "Labels" section, you will see an option "data markers.
    5. Once you click the icon (it looks like an 'A') it will open window "Format: data labels.
    6. and you can choose from on tread/always/None

    Unfortunately, this (change of data markers) option is not available for the gauge so that bulb and you can't turn off the setting of rolliver for these types of graphics.

    PS: Am really eager to learn why this setting was not expected to gauge or bulb :) Oracle
    Can you think of something that would be the reason?

    Kind regards
    Jitendra

Maybe you are looking for

  • Windows 10 on MacBook Pro 2010 13 mi

    Hello! I am trying to install the Nvidia drivers, but does not have all I have a MacBook Pro 2010 2.4 6 GB Ram Nvidia 320 M (only compatibility issue) When I install the driver: (15,56 327, 23 - 296.72-) Notebook-WIN8-Win7-64bit-327.23-WHQL-Driver.ht

  • Cannot set control schedule relative time

    Hi all I'm pretty new to LabVIEW, and I'm trying to set a time stamp time related. I put the control on the form, and then right-click and choose the display format. I have chosen Date unused, advanced editing. The control has a box with this in it:

  • What is the level of the HP Jet 7 Tablet DirectX?

    Hello world!!! Anyone know what is the level of DirectX (or function) of the HP Jet 7 Tablet? I've looked everywhere and there is no information about it. The fact that I found is that the HP Jet 7 Tablet has an Intel HD graphics card, and that I sho

  • KB2760574 and KB2760754 moved

    Updates fail to install, give 57F error code.  Tired on the line of the file repair and Mr Fixit.  Always the same failure.

  • Login admin

    I have an Admin account and 2 other ordinary accounts on my PC for the family. If I try to Log with the message of windows password Admin said that the logon service cannot recognize this user what should I do now?