IPS error: setEnableAuthenticationTokenStatus

Hi people, I am faced with an error when I try to create an account in IPS, that is to say

Error: setEnableAuthenticationTokenStatus: failed to set the account password: it is based on the entry of your password

Error: setEnableAuthenticationTokenStatus: failed to set the account password: is too simple

So please I need your help in changing the password policy to set my password. Is there a policy so that we can change the other then authentication service, given that I've already changed it and tried it, but I still have this error, is there a way to change the password policy in IPS?

Kind regards

Santosh Atnur

Hi Santosh,

You see the error messages are expected due to the choice of password and the behavior cannot be changed.

1 John123

Have you tried this by changing the value of size range (minimum default is 8)? If you change to 6/7, you will see the following error message "error: setEnableAuthenticationTokenStatus: failed to set the account password: it is based on a dictionary word.

2. while setting Cisco123 - I think that you see the following message because of another account with the same password.

Tags: Cisco Security

Similar Questions

  • Error when you try to move the SSM to IPS 6.1

    I am running 4,0000 E1 and when I try to upgrade, it says "can't upgrade the software on the sensor. This package cannot be installed on the platform of the SSM-IPS10. »

    I tried upgrading via IDM, FTP, SCP, and I get the same error.

    I'm trying to upgrade using the package IPS-AIM-K9-6.1-1-E1.

    Simple problem to use the file of E1 6.1 (1) bad.

    The IPS-AIM-K9-6.1-1-E1.pkg file is specific to the AIM - IPS module for ISR routers.

    AIM - IPS module for ISR routers must not to be confused with the ASA-AIP-SSM modules for devices of the SAA.

    All other platforms (including the SSMs) should use the standard 6.1 (1) E1 file upgrade:

    IPS - K9 - 6.1 - 1 - E1.pkg

  • 4215 Java error: when connecting the IPS Event Viewer

    Hello-

    I got a java error trying to connect to my 4215 with Cisco IPS event viewer. It's as follows:

    IOException in Subscription() open: java.security.cert.CertificateExpiredException: NotAfter: Sunday 29 March

    The web server is running on 10.x.x.x:443? Please check the settings of the device communication.

    I can set the date on my pc to last week and everything works very much like b4. I tried to update my java to the latest version and created a new certificate of IPS.

    Any help would be greatly appreciated:

    Thank you

    Hello

    The problem can be solved by following the steps below

    1. connect the sensor.

    2. run the tls - generate the command key.

    3. make sure that the certificate is generated.

    4 Add the device again. It should work now.

    Ref: http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/products_qanda_item09186a008025c533.shtml

    Whether she helped.

    Concerning

    Sridhar

  • IPS recovery procedure - error

    Hello guys...

    I forgot the password for module AIP-SSM-10 and try to recover break it. It works 5.x and so I have to make a recovery. on the recovery procedure, the image copy to tftp server system and throws the below error message...

    Slot-1 772 > Bad magic number (0 x-47cd60cf)

    Slot-1 773 > restart Autoboot error...

    Slot-1 774 > reboot...

    any suggestion on wht could be the reason and how to on this subject?

    Thank you

    AJ

    the file being attempted to install isn't what they expected the ROMMON of the MSS.

    The Image file of the system was damaged during the download.

    OR the attempt of the procedure of the System Image with one file other than a System Image.

    There are several types of files for IPS and their use is often confused.

    For example:

    For version 2.0000 E3, there were 3 different files for the AIP-SSM-10:

    The system image:

    IPS-SSM_10-K9-sys-1.1-a-6.1-2-E3.img

    -For installation through ROMMON or more technically the "module hw-module 1 recover...» "order of the SAA. Install a complete Image of the system on the MSS and erases all previous data from the SSM.

    NOTE: This is the type of file to be used in the method you follow.

    Update:

    IPS - K9 - 6.1 - 2 - E3.pkg

    -To upgrade from an earlier version of the sensor to this new version. It converts the previous configuration to work with the new version.

    Recovery partition:

    IPS-K9-r-1.1-a-6.1-2-E3.pkg

    -For the upgrade JUST the SSM recovery partition. The recovery partition can be used for recovery with the "application-recovery partition" command in the sensor CLI.

    There may be some confusion here, because this file is the 'Recovery' image, BUT is NOT used with the command "recover the hw-module module 1" of the SAA.

    Instead, the Image of the 'system' is what is used with the command "recover the hw-module module 1.

    If you find that you do not use the correct file type (unkowingly used a upgrade or recovery file), then download the System Image file and try again.

    If you use the System Image file, then check the size and md5 checksum of the file and compare it to what is on cisco.com. It was damaged during the download from cisco.com and you may need a new download of the file.

    If the checksum md5 and size of the file is the file on cisco.com, check your TFTP server. Using a 3rd attempt of machine for the file from the tftp server tftp. Once the tftp would check the size and md5 checksum to verify that your TFTP server is able to serve the entire file. You want to make sure your TFTP server is not truncate your file for download.

  • IPS V6.06E4 error

    Hi all

    An error appeared on the log of the IPS stating the following:

    "SignatureDB: TcpRootNode no no refcount (1 pass)"-out destructive ".

    Knowing that the IPS might not reload, it is dropped from over 3 months.

    Is this an indication for something serious?

    Any recommendation?

    Kind regards

    It could be on the platform of the 4215 IDS as well. The bug has been reported the module NME, where the bug notes seem to imply it's only affected on the NME module.

    In all cases, you might want to look at replacing the IDS-4215, as is already EOL:

    http://www.Cisco.com/en/us/prod/collateral/vpndevc/ps5729/ps5713/PS4077/ps5367/end_of_life_notice_for_cisco_ids_4215_sensor.html

    and the latest technology on ID - 4215 July 29, 2009.

  • HP Pavilion 22xw 21.5 inch IPS: HP Pavilion 22xw 21.5 "IPS LED backlit monitor products: error message driver J7Y67AA #ABA

    I got a message from my assistant HP that there are two updates that need to be downloaded. The first was for AMD GFX Driver UMA Win10 64-bit YANICK

    I downloaded and installed, but now when I go into the settings, it is said "Screen backlight HP Pavilion driver error 22xw"

    However, my monitor seems to work very well? Don't know what to do with this message

    Thank you for any input!
    Susan untechie computer user

    Thank you very much for your answer, I'll put this link!
    However, that night that my computer has made an update of windows 10 and apparently solved the problem, this error message has disappeared... Now, that's service, lol.

  • My friend used my pc then that he did and cheked her Facebook account, now my pc remembers his log in information, including password. I'm trying to register with Facebook, but my pc says its info. I'm trying to remove this error. Can you help me?

    A friend used my pc to view his Facebook account and used my account. Now, my pc thinks it's me whenever I try to register with Facebook. I didn't get the error until recently and tried to delete the info but cannot. I tried to access all my security settings and even tried to erase history, but I don't seem to be getting anywhere. According to me, he ordered by mistake my pc to remember his user name and password. I'm not currently registered on Facebook, but I would like to be, but I'm having this problem. Is it important or not? I don't want his crossing of information with mine, because my numbers of ips or something like that. He also, without my knowledge, access to his e-mail, too. His user name seems to appear even if I try to 'Like' something on Facebook. That's when I noticed the problem. Then, when I tried to register with Facebook, I was mistaken for him. Check boxes are done already filled with information. I don't want to invade his privacy. His whole profile comes with friends, photos, etc... Help, please! I can't make a record to 'save' since I don't know exactly when this happened and I loaded new programs, including safety and associated files.

    • Click on the (empty) input field on the web page to open the drop-down list
    • Select an entry in the drop-down list
    • Press the DELETE key (on a Mac: shift + delete) to remove it.
    • Tools > Options > Security: passwords: "saved passwords" > "show passwords".
  • XP will not acquire an IP address. Start tcp/ip and obtain the dependency service error. Public static IP and the system still does not work.

    This system was given to me the difficulty.  It is clean of viruses and spyware, it was at a time given some.  Now unable to connect to any type of network, IPs as 0.0.0.0, will not be renewed.  Get dependency errors when I try and start TCP/IP.  I reset the winsock stack.  Any suggestion at this point would be useful.

    Hi MarkReeves,

    1. What is the accurate and complete error message?

    I suggest you try the steps from the following links in the article and see if it helps:

    The network status icon may display a message 'Acquiring network address' after an address is already acquired in Windows XP Starter Edition

    How to reset the Protocol Internet (TCP/IP)

    How to determine and to recover from Winsock2 corruption in Windows Server 2003, Windows XP and Windows Vista

    I hope this helps.

  • Error FTP WRT54GH 425

    I've been running a FTP FileZilla Server for more than 2 years now. When I arrived in FTPs was actually the first time I had to port forwarding. External router forward 21 TCP 21 on the LAN, everything was good, FTP works. A few days ago the old router died, and to get a new one, I went for a WRT54GH. When I put in place I have also made sure to forward port 21 to the machine. Now, I try to access the FTP and after a long wait, I get an error 425 unable to open data connection.

    I double checked and checked - is not only the port properly transmitted, but FileZilla actually gets the request and the two negotiate a bit. Since I change anything in the FTP and FTP still works fine on the LAN IPs I will of course blame the router!

    What should I do and how can I solve this problem?

    I do usually not reproduced but I fixed it and I leave this info here for future reference to others:

    It seems that - at least with the first version of the firmware - router alters network packets if she sees they are sent on port 21. He changes IPs their LAN PASV commands, which connecting clients cannot work with. In addition it seems that some other obscure port opening the issue once the connection is established.

    In order to circumvent the arbitrary conversion of NAT on the router, you must forward external port 21 to some other internal ports, for example 12345. The FTP server on the computer must be configured to listen on this port. This will get around the NAT issue.

    For the second question, the server PASV mode must be given a range of fixed ports, for example 65000 to 65100, and in turn these ports should be sent to the FTP hosting machine in the settings of the router.

    -Important set of notes on one or more ports forward!

    Ports passed before changing the address LAN IP (e.g. 192.168.1.x to 192.168.0.x) range MUST be disabled, saved and re-checked, otherwise the rules no longer works! In addition, if the SPI Firewall settings are changed in any way, all ports beaches (beaches, ports not only) MUST be disabled, saved and checked in order to work! Yet another note, DMZ seems to have similar problems. Not knowing this topic can lead to unexpected with the implementation results not only the FTP, but also other applications that rely on shipping, because the router will claim a set of settings, but do not use it.

  • Windows Vista ICS question - error 765

    I already shared my internet connection, I have access through a USB Vodafone stick, with success, with my PS3 using the ICS feature.  It has been configured through the properties box to connect to the vodafone network.

    Now, I tried to set up a wireless ad-hoc connection to connect my itouch to internet.  But I hit a brick wall.

    1. firstly set up a new account administrator user so thinking I would not affect the settings I had already put in place for my PS3.

    2. I then tried to set up a wireless ad hoc network using the name "ITouch".  Has been through the usual Wizard to set up this connection, and then press the button at the end to ICS.

    3. Although my ITouch could see the network could not connect, which I discovered that I had used the wrong type of security encriptación.  So when I tried to look for the ad hoc server, 'ITouch' it wasn't in the list of wireless connections, hance could do nothing to change the settings.

    4. I then tried to set up another ad hoc Server ("ad hoc") with the correct settings, but when I arrived at the end of the wizard there is no ICS button.  However my ITouch could now see the new network and conect, although it still would not connect to internet.  Review of the network and page sharing the adhoc network said he had local access.

    5. that's why I have is in the properties of the vodafone network and checked the ICS box and define the fall to the bottom of the wireless connection box.  At this point, I received the error 765.

    My thoughts are that the first ad-hoc server, I set up has become corrupted, so he listed is not in the list of connections wireless and is always connected to the fixed IP address vista allocates for ICS.  My main problem is that it didn't just change the parameters of the new user account, but it applied across all accounts on my laptop.  Now, I can't even reconnect my PS3.

    I tried to uninstall the device vodafone with all entries in the system registry and device associated with this internet connection manager already.

    Does anyone know how to clear all the IPS fixed without being able to see them anywhere.

    At soon, Brett.

    EU back up and functional.  As suggested:

    1. I uninstalled the software for the vodafone mobile internet

    2 deleted all wireless and network card (via Device Manager) drivers

    3. removed all the connections wireless through the network and sharing Center

    4 restarted the laptop that has reinstalled all devices

    5 load the software for the mobile internet connection

  • VSS volume control Config Wizzar error

    Hello

    I get an error when I validate the configuration of the VSS feature on my server with the DELL auto 4.5 Snapshot Manager

    Do you have an idea of the problem?

    Thank you very much for your help

    Error:

    Started at 22:01:57

    Waiting for the ASM on the hyper-rd12 host Agent service.
    Preparation 1 host (s) to save the setting changes
    Apply the settings
    Saving settings of PS Group on the "hyper-rd12 host access.

    An error has occurred:

    Error saving access to the PS grpadmin group: 1. specified group WKAddress is not accessible.

    The well-known group address is the IP address of the iSCSI Group.

    Thus, your group has an iSCSI IP address and then each port on the controller has an IP address (eth0, eth1, eth2, eth3 (depending on the model, you can have 1, 2 or 4 iSCSI ports (older models may also have 3 iSCSI ports)).)

    Always use IP iSCSI of the group in the connectivity section in ASM and not the IP address of one of the eth ports.

    If you have used this, disable all but 1 of your iSCSI network cards and try to ping the IP of the Group and all the IPs port. If you can not achieve one or more of them, you need to check your network because it would be a separate iSCSI configuration, which will not work with an Equallogic implementation.

  • The field for local network IPs access permissions

    Is an error or a restriction of the service if I have added ' * ' to avoid restrictions on access area on my app it works only on public IP addresses and is not with local network IPs?

    (ie. my phone WiFi 192.16.1.116 and trying to access information on a pc with 192.16.1.119, result: timeout)

    If the same request is made to a public IP (pc) IE. 200.31.90.37, then it works as expected.

    NOTE:

    -This request for access is made by a webworks installed on the phone app. the answer is in JSONP format.

    -PC firewall disabled.

    Tests failed

    -Tests on wifi, access to a local IP network with the phone on and off data service

    Successful trial

    -Tests on Internet, access a public IP, same phone, same app.

    As indicated in the following link, there is no indication that this behavior is expected:

    http://docs.BlackBerry.com/en/developers/deliverables/27280/Allowing_access_to_external_resources_an...

    If anyone knows an example where "*" works for LAN IPs please let me know.

    Kind regards

    OK... sit tight for this possible explanation

    A BlackBerry has two different designs to consider:

    (1) physical network connection

    (2) selection of transport

    The physical network connection is pretty self explainatory (wifi, bluetooth, GPRS, CDMA).  The selection of Transport can better be seen as a VPN Tunnel/connection.  Such transport may be BES, BIS, direct TCP, WAP etc gateway.

    Even if you're on WiFi, you can still have your transport (VPN) connected through BIS.  This is configured through your application settings.

    The browser from on the BB6 uses special transportation (no available applications) who did essentially the equivalent of a DNS lookup and follows a logic to see how endpoint can be accessed.  It will then forward through the transport that's going to happen to its endpoint.

    So in the browser, it detects your IP address isn't public and a rebooking via the TCP/IP connection direct to go directly to your local server.

    In a BlackBerry application, you must declare your list of transport order which I will try and failover to the other if it is not reachable on the first transport.

    Stopped default transport is in an application of WebWorks BES, BIS - B, TCP_WIFI, TCP_CELLULAR, WAP2, WAP

    More information on transport in WebWorks here:

    http://docs.BlackBerry.com/en/developers/deliverables/27261/Widget_element_834671_11.jsp#RIM_connect...

    In your case, you would have to change the order of the TCP_WIFI put everything first.  WARNING: Different transport have different failover times.  B BIS and BES are instantly switched if they are not enabled with this service. TCP_WIFI will actually make a connection delay before switching.  So if you don't have a WiFi connection, it will timeout on each request for a resource before it tries then BIS - B.

    So, it boils down to what you want your app to be able to do.  If she wants to access the public IP addresses, then you want to keep the default transport order.  If you want it to be able to discover the local and public IP addresses, then you will have a little more work to do.

  • 4.1 > IPS failed 5.0 upgrade

    4235 ID meets all requirements.

    Repeatedly, the upgrade fails with the following error message:

    #BEGIN # SNIP #.

    Root broadcast message (Thu May 26 17:39:20 2005):

    The application update IPS-K9-maj-5.0-1-S149.

    Close all processes of the CIDS. All connections will end.

    The system will be rebooted at the end of the update.

    Root broadcast message (Thu May 26 17:39:29 2005):

    Conversion in config error. Abandoned facility.

    Error: CIDS 5.0 Validation error: "service host" Config point: summerTimeZoneNam «»

    e' reason: the string, *, does not match the required pattern

    Error was: - to validate the current config -: validate the error for the 'host' component and

    the Forum «»

    / Summertime-option/recurring/Summertime-zone-Name /-the value is empty and has

    no default value

    # #END SNIP #.

    > Sh worm out >

    Application partition:

    The Cisco Systems Version 4,0000 S138 Intrusion detection sensor

    2.4.18 OS version - 5smpbigphys

    Platform: IDS-4235

    With the help of 841523200 of 921522176 memory available bytes (91% of use)

    2.4 G using out-of-bytes of 15 G of disk space available (17% of use)

    MainApp to 2004_Apr_15_15.03 (liberation) 2004-04-15 T 15: 11:59 - 0500

    Unning

    AnalysisEngine 2004_Apr_15_15.03 (liberation) 2004-04-15 T 15: 11:59 - 0500

    Unning

    Authentication 2004_Apr_15_15.03 (liberation) 2004-04-15 T 15: 11:59 - 0500

    Unning

    Recorder 2004_Apr_15_15.03 (liberation) 2004-04-15 T 15: 11:59 - 0500

    Unning

    NetworkAccess 2004_Apr_15_15.03 (liberation) 2004-04-15 T 15: 11:59 - 0500

    Unning

    TransactionSource 2004_Apr_15_15.03 (liberation) 2004-04-15 T 15: 11:59 - 0500

    Unning

    Webserver 2004_Apr_15_15.03 (liberation) 2004-04-15 T 15: 11:59 - 0500

    Unning

    2004_Apr_15_15.03 CLI (release) 2004-04-15 T 15: 11:59 - 0500

    Upgrade history:

    * ID - sig - 4.1 - 4-S114 14:48:53 UTC Tuesday, March 1, 2005

    ID - sig - 4.1 - 4 - S138.rpm.pkg 15:14:30 UTC on Tuesday, 1 March 2005

    Version 1.2 - 1, 0000 S47 recovery partition

    any ideas?

    V5 is a lot more about correct configurations that v4 was, which is why some things than v4 that slide will produce an error during upgrade to v5. Obviously there is something in your time zone settings that he allowed to v4, but like v5.

    A conf "sho" on your sensor v4 and near the top of the page (just after the IP addresses), check all do in the section "timeParams". My guess is you have some parts here, but at the very least, you have not defined a DST zone name. You can set everthing correctly under here by running "setup" in the CLI, and when it asks you if you want to "Change the system clock settings" answer Yes and work your way through the guests. Then try the upgrade again and let us know how you go.

    If the error persists, please cut and paste your timeParams section and we'll see what happens.

  • How can I reboot a sensor IPS.

    Hello

    We have our ASA Ciso IPS ASA-SSM-10 module. It seems that sto are in a State and the Cisco IPS Manager Express said it is no longer connected. If I have SSH/Telnet to it and then I get the message:

    Error: Unable to communicate with mainApp (getVersion). Please contact your system administrator.

    You want to run cidDump? [None]:

    You can log in to the ASA CLI (the firewall part) and enter

    reload the module HW - module 1

  • New IOS IPS definitions

    Hello

    When I try to install on a router definitions the new IPS cisco 1721 with the command "copy flash: virtualSensor.xml ips - homeless" I encounter the following error

    TI - RV - ipnetworks.it - gw1 #sh flash

    Directory of flash system:

    Filename length/status

    1 12332180 c1700-advsecurityk9 - mz.123 - 11.T2.bin

    2 attack 93095 - drop.sdf

    3 3883008 sdm.tar

    4 270848 home.tar

    5-1463 home.html

    6 1187840 ips.tar

    [17768820 bytes used, 15523464 available, 33292284 total]

    32768 K bytes of processor onboard flash system (read/write)

    TI - RV - ipnetworks.it - gw1 #copy tftp:virtualSensor.xml flash: virtualSensor.xml

    Address or name of the host remote []? 172.16.0.1

    Destination file name [virtualSensor.xml]?

    Access tftp://172.16.0.1/virtualSensor.xml...

    Erase the flash: before copying? [confirm] n

    VirtualSensor.xml of loading of 172.16.0.1 (via FastEthernet0):!

    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

    !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

    !!!

    [OK - 1917467 bytes]

    Checksum checking... OK (0x63A9)

    1917467 bytes copied in 55,368 seconds (34631 bytes/s)

    TI - vr - ipnetworks.it - gw1 #conf t

    Enter configuration commands, one per line. End with CNTL/Z.

    It-vr - ipnetworks.it-(config) #no ip ips homeless lightning location: attack - drop.sdf

    It-vr - ipnetworks.it-(config) #ip ips fail closed

    It-vr - ipnetworks.it-(config) #exit

    TI - RV - ipnetworks.it - gw1 #copy flash: virtualSensor.xml ips - homeless

    % Could not allocate the table of State of regular expressions: 7575360

    % Could not allocate the table of State of regular expressions: 3450200

    How can install and active the new IPS IOS definitions?

    I checked all internal investigations of Cisco TAC and the error messages and I couldn't identify the problem. It does not seem you have a memory problem, you have available 15meg. I try three things and then maybe contact TAC to see if they can help.

    1. download the file again just in case it is damaged.

    2. give your file extension .sdf just in case the name of the file ips_sdf into a problem (shouldn't be).

    3 download the homeless, just in case there is an invalid content in the file that you currently have.

    4. it seems that you have installed to SDM. Try the SDM to install signatures.

    I hope this helps, if not repost or give a TAC guys.

Maybe you are looking for