password by default when the server is inaccessible

Hi, I recently configured AAA. When the server is running everything is fine, but when the server is inaccessible, I'm locked up. How can I put on a default user name and password when the server is inaccessible

Thank you

James

There are several ways to configure AAA so that you are not locked if the server is not available. You can use a username that is configured locally, as you suggest here, or you can use the configured line passwords.

To use a locally configured user your configuration might look like this:

rick user password Cisco

AAA authentication login default group Ganymede + local

Or, to use the online passwords as a backup of your config might look like this:

AAA authentication login default group Ganymede + line

You also probably need a backup to access the privilege mode. This is done usually by using the configured locally enable secret. To do this configuration might look like this:

the AAA authentication enable default group Ganymede + activate

HTH

Rick

Tags: Cisco Security

Similar Questions

  • I sync my passwords with sync and now I have disabled this feature, passwords are removed from the server?

    I used sync to synchronize passwords between two laptops, but I want to know if was to disable this feature will be the passwords are kept on the server? If this is not the case, how to remove them.

    No they are not deleted from the synchronization server when you disconnect the sync, but if you change your password for your Firefox account all your data will be erased of the synchronization server.

  • I finished the installation of Sharepoint 2010 and he is told to use the username and password you loged on the server with does not work. What should I do to access the sharepoint URL?

    I finished the installation of Sharepoint 2010 and went through the Setup Wizard. It is said to use the username and password you loged on the server with does not work. What should I do to access the sharepoint URL?

    Hello

    Your question of Windows is more complex than what is generally answered in the Microsoft Answers forums. It is better suited for the IT Pro TechNet public. Please post your question in the TechNet Forum. You can follow the link to your question:
    http://social.technet.Microsoft.com/forums/en-us/sharepoint2010general/threads

  • Is it possible to have windows to automatically select a spare printer by default when the selected default printer is off line?

    I use a laptop and move between two locations each with its own printer.  Whenever I move, I have to change the default printer by opening printers & faxes from the control panel.  Is it possible to have windows to automatically select a spare printer by default when the selected default printer is off line?

    Hi Tom,

    If the default printer is not in offline mode, it will detect the different printer but it will not be a default one.

  • Hit to the broad area when the server is connected to the internet

    We have a new server running windows standard server 2008R2. When the server is connected to the internet, the computers on the domain are faced with offshore and they receive the error message saying "Unable to connect to the database". How we solve this problem?

    Hello

    I suggest you according to the question in this forum and check if that helps:

    http://social.technet.Microsoft.com/forums/en-us/category/WindowsServer

    It will be useful.

  • How to set up the database restarts automatically when the server starts?

    Hello

    What is involved if I configure Oracle database starts automatically when the server is started/restarted?

    I guess that change the following entry in/etc/oratab
    DEVDB:/u01/app/oracle/product/10.2.0/db_1:N
    TO
    DEVDB:/u01/app/oracle/product/10.2.0/db_1:Y
    is not sufficient - there is more than that. But what is it?

    We can also configure the listener to automatically re / start?

    I guess that everything what is the solution, it will also apply to Oracle 11 GR 2 databases/ASM - right?

    The platform is Redhat Linux 64 bit (version 4.7 & v5.9).

    Thanks in advance!

    Best regards

    Hello

    Below is one example of autostart services database and the listener.

    1 > make/etc/oratab file entry Y as:
    ORCL:/U01/app/Oracle/product/10.2.0/Db_1:Y

    2 > create a file called "/ etc/rc.d/init.d/oracle" as root, containing the following.
    --------------------------------------
    #! / bin/sh
    # chkconfig: 345 99 10
    Description #: Oracle automatic start-stop script.
    #
    # Define ORA_HOME as equivalent to the $ORACLE_HOME
    # from which you want to run dbstart and dbshut;
    #
    # Define ORA_OWNER to the userid of the owner of the
    # Oracle in ORA_HOME server.

    ORA_HOME=/U01/app/Oracle/product/10.2.0/Db_1
    ORA_OWNER = oracle

    If [! f $ORA_HOME/bin/dbstart]
    then
    echo "Oracle startup: cannot start.
    output
    FI

    case '$1' in
    'Start')
    # Run Oracle databases:
    # The following command assumes that the oracle connection
    # will not prompt the user for all values
    known - $ORA_OWNER - c "start ORA_HOME/bin/lsnrctl $".
    known - $ORA_OWNER - c $ORA_HOME/bin/dbstart
    ;;
    'stop')
    # Stop the Oracle databases:
    # The following command assumes that the oracle connection
    # will not prompt the user for all values
    known - $ORA_OWNER - c $ORA_HOME/bin/dbshut
    known - $ORA_OWNER - c "ORA_HOME/bin/lsnrctl stop $.
    ;;
    ESAC
    -------------------------------------------------

    3 > use the chmod command to set privileges to 755.
    chmod 755 /etc/rc.d/init.d/oracle

    4 > associate the appropriate oracle service run levels and set it to auto-start by using the following command.
    chkconfig--level 345 oracle on

    Note:-back, I've done this for a long time... Please check the dbstart use pfile or spfile to start the database instance.
    Thank you

  • Restart the scheduled task when the server is restarted

    Hi all

    I have a work planned and executed through Service Center control. Then, the server has a regular job of system which restarts every week.

    I would like to know what is happening with this scheduled task when the server is restarted. I understand that I must again manually lunch at work.

    Anyone know what is the easiest way to automate a task that starts the task OWB?

    Thank you very much in advance for your help.

    Concerning
    Victor.

    Hi Victor,

    I understand that I must again manually lunch at work.

    you don't need lunch again job - OWB.
    Employment in the Oracle database still in State SCHEDULED after restart of the database.
    It is a problem of OWB, she had lost the synchronization status of a task planned with Oracle database

    Kind regards
    Oleg

  • How to kill an Open Directory - password be reset when the first user login

    Hi all

    I've been running on this issue for some time now, however, I finally got tired of it. I want to set a password policy, but the option 'Reset password on the first login of the user' completely kills OpenDirectory.

    Running OS X Server 10.11.3 and 5.0.15, although this has happened also in versions of Yosemite. This case is a new and clean installation in a virtual machine. Only OpenDirectory and appropriate DNS are enabled. DNS was fully configured by the Server app when you set the hostname and checks in the Terminal.

    I created a few test users OpenDirectory and confirms that I can not connect with them. Can I put another option in the strategy of password very well, however, the minute I turn on 'reset the password on the first login of the user', my OpenDirectory is ruined.

    I'm unable to add new users, I am unable to change passwords, policies of previous password, I had set is no longer working. That is, the user cannot change password when you sign in for the first time. Correct password is entered, but shakes the login window when you try to configure the new password.

    Error returned once the OpenDirectory gets watered is "Mode is not supported by the node directory. Not only is the directory watered, but it becomes difficult to even remove or disable the hella service.

    Someone at - it ideas? I really want to enable this feature so that I'm not creating a temporary password for users, then relying on them to change themselves.

    Thank you

    It always seems to be the case - the diradmin account gets completely borked. Have you already found a way to define this strategy successfully?

    This command will unlock the overall strategy and restore the account, so you can use OD once again, but it's just a solution, not a solution.

    sudo pwpolicy - n /LDAPv3/ldapi://%2Fvar%2Frun%2Fldapi clearaccountpolicies

    See Doc Apple here...

    OS X Server (Yosemite): Global policies can lock the accounts of administrators - Apple Support

    I can't believe that there is a document like that but still no fix from Apple? Really? I must have missed something. I really need this password policy to work...

  • Deployment error archive .jar < proj > partition 'default' on the server

    Hello

    When I am trying to deploy a BPEL process to soa 11.1.1.3 Server I get the following error

    Problem in sending HTTP request on the server. Check the standard HTTP response code for 407
    + Deployment error archives sca_HT_Wi_rev1.0.jar to partition 'default' server soa_server1 [localhost:8001] +.
    HTTP error code returned [407]
    No error message is returned by the server.
    + Deployment error archives sca_HT_Wi_rev1.0.jar to partition 'default' server soa_server1 [localhost:8001] +.
    + # Incomplete deployment. ####+
    Deployment error archive file:/C:/JDeveloper/mywork/TestHT/HT_Wi/deploy/sca_HT_Wi_rev1.0.jar
    + (oracle.tip.tools.ide.fabric.deploy.common.SOARemoteDeployer) +.


    my server is listening to port 7001...

    Please help me solve this problem

    Kind regards
    Sundar

    Code of State HTTP 407: Proxy authentication required.

    Make sure that you disable the proxy settings in JDEV if not deployment on a remote server via the proxy.

  • OAM: password policy coherence between the Server LDAP and OAM

    Customer has an OAM installed using an LDAP server, say MS - AD 2003, as users, policies, and the configuration data store.

    The customer has configured their LDAP server, password policies claiming for example that the users passwords expire 60 days after they have been fixed and this departure 5 days before they expire, users, at the opening of the session, should be warned that their passwords are about to expire.

    Customer has configured identical policies inside the OAM.

    (A) consider the following sequence:

    Day X: user connects to the 'User Manager' component of OAM in the identity and, through 'My profile' admin console, changes his password.

    Day X + Y (1 < = Y < 55): the user connects to the MS - AD domain and sets its password interfacing directly the LDAP server, outside of OAM (for example: by pressing CTRL-ALT-DEL and invoking 'Change Password' in a field of MS-Windows, MS - AD-controlled).

    Question A.1) day X + 56: user tries to access a web resource protected by OAM: OAM made realize that the user has changed the password recently (through the LDAP server), and that should NOT be notified?

    Question A.2) day X + 61: user tries to access a web resource protected by OAM: OAM made realize that the user changed the password recently (through the LDAP server), and that should NOT be asked to change his or her password again?

    (B) consider the following sequence:

    Day X: user connects to the MS - AD domain and sets its password interfacing directly the LDAP server, outside of OAM (for example: by pressing CTRL-ALT-DEL and invoking 'Change Password' in a field of MS-Windows, MS - AD-controlled).

    Day X + Y (1 < = Y < 55): the user connects to the 'User Manager' component of OAM in the Administration of identity and through 'My profile' console, changes his password.

    Question B.1) day X + 56: the user is trying to connect to the MS - AD domain: MS - AD made realize that the user has changed his password to recently (OAM), and as it should NOT be notified?

    Question B.2) day X + 61: the user is trying to connect to the MS - AD domain: MS - AD made realize that the user has changed his password to recently (OAM), and that should NOT be asked to change his or her password again?



    Kind regards


    Angelo Carugati

    (A) you're done. OAM is not aware of changes in password performed at the entrance to the user if the change does not take place through OAM. There is no good solution because you have two different versions of the truth, even if they are logically equivalent policies with us will tell the expiry of 60 days, apply to the same person. A possible solution is to be synchronized with the attributes that store things password policies in AD (as when the user has changed the password) to the attributes of the political equivalents of associated storage stuff in OAM password (as when the user has changed the password - oblastsomething). I don't know if this synchronization is still possible, but it's an idea. AD and OAM attributes can both live in AD, but they are distinct attributes in separate containers.

    (B) you are ok. AD is aware of the change, and is aware of the change.

  • [BUG] [OS: 6.0.1] [Model: Z5/C] No keyboard by default when the default keyboard is uninstalled

    Hello

    I've been playing with the keyboard and other keyboards for compact and have encountered a small bug.

    Probably not this joint because I doubt anyone would have done what I'm doing, but it's quite possible to happen for other users and easily replicated.

    If the default keyboard is currently not the Xperia keyboard, and the keyboard is uninstalled through the app store application to play Google,

    any application that requires the entry of key numbers / does not display a current keyboard, and the user will not be able to move forward.

    The current solution is to reinstall another keyboard through the Google game shop, to be able to toggle the switches that allow you to change the keyboard by default to something other than what you want to uninstall.

    Address bar is selected with the cursor of type, but does not display a keyboard.

    When the "keyboard input methods &" display 'Current keyboard' and tap or attempt to select this option is ignored

    It's the screen that should appear if you select the current keyboard: the only way to get back to that made by the work around I mentioned above, Xperia keyboard is the current keyboard, but all keyboards were set to OFF. The uninstalled keyboard for the test was Swype.

    That's what should display the menu "language and seizure" when it is not working properly

    A keyboard is now enabled again.

    Here is that the address bar selected once again, with the Cursor Type... just to show that it was not a mistake, because you can hide the keyboard by pressing on the button previous... the last screencap is for comparison. Note the orange box is no longer around the address bar.

    Note: If other users want to disable other Xperia keyboards for other regions, it is safe to do so and has no adverse effects on the International keyboard function.
    (I've been running it without the Japanese and Chinese keyboards for about a month now)

    I noticed something new on the forums for solutions resolved to threads... etc.

    I can't mark my own post as solved. It's sort of resolved.

    EDIT: OHMYGOD. This second post active the solved button. Points!

  • Works well in the preview of Flash, but not when the server!

    OK my Flash animation tests and works well on I publish Preview in Flash, but when I upload it to the server it does not work as it is supposed to. is there a way to debug or trace what happens while it is running?

    Details:

    I have 113 tcname_1 of dynamic text-> tcname_113 field names

    I have 113 buttons named button_1-> button_113

    The dynamic text boxes get their data to a file named trees1.txt

    I tried to change three of the text boxes to use device fonts, but has not made a difference

    Here is my code AC3:

    Links button: all the buttons to open in iframe "tdes.

    link en button number

    I have 113 buttons.

    for (var i: int = 1; i < = 130; i ++) {}

    {if (this ["button_" + i])}

    This ["button_" + i] .addEventListener (MouseEvent.Click, f);

    }

    }

    function f(e:MouseEvent):void {}

    var n: String = e.currentTarget.name.split ("_") [1];

    navigateToURL (new URLRequest("ranch.php?id="+n), "tdes");

    }

    end of the links button

    Create the instance of URLLOader

    var myLoader:URLLoader = new URLLoader()

    the data will come as URL-encoded variables

    myLoader.dataFormat = pouvez

    Load using a URLRequest, same local beeing

    myLoader.load (new URLRequest ("trees1.txt"))

    listener onLoad handler

    myLoader.addEventListener (Event.COMPLETE, onDataLoad)

    Error handling

    myLoader.addEventListener (IOErrorEvent.IO_ERROR, onIOError)

    myLoader.addEventListener (SecurityErrorEvent.SECURITY_ERROR, onSecurityError)

    Could be an error or a message

    myLoader.addEventListener (HTTPStatusEvent.HTTP_STATUS, onHTTPStatus)

    Add a listener for the complete event

    function onDataLoad(evt:Event) {}

    trace (evt. Target.Data.cant);

    for (var i: uint = 1; i < evt.target.data.cant; i ++) {}

    This ["tcname_" + i] .text = evt.target.data ["tcname_" + i]

    This ["tcname_" + i] .visible = false;

    This ["button_" + i] .addEventListener (MouseEvent.ROLL_OVER, buttonover);

    This ["button_" + i] .addEventListener (MouseEvent.ROLL_OUT, buttonout);

    trace (i);

    }

    }

    ON working CAPITAL make the visible text field and change color

    function buttonover(e:Event) {}

    var tf:TextField = TextField (this ["tcname_" + e.currentTarget.name.split ("_") [1]]);

    trace (tf.name);

    TF. Visible = true;

    tf.textColor = 0xff0000;

    }

    MAKE working capital change color and make invisible

    function buttonout(e:Event) {}

    var tf:TextField = TextField (this ["tcname_" + e.currentTarget.name.split ("_") [1]]);

    tf.textColor = 0 x 000000;

    TF. Visible = false;

    }

    reminders of the error

    function onIOError(evt:IOErrorEvent) {}

    trace ("IOError:" + evt.text)

    }

    function onHTTPStatus(evt:HTTPStatusEvent) {}

    trace ("HTTPStatus:" + evt.status)

    }

    function onSecurityError(evt:SecurityErrorEvent) {}

    trace ("SecurityError:" + evt.text)

    }

    again is it works fine when publish Preview in Flash, but not on the server. the text does not show the server when I hover over the buttons!

    You can see that to:

    www.myblueranch.com/index2.html

    Do you notice something that I did wrong? is it possible to debug while on the server?

    Thank you very much.

    Layth

    When I see her in IE8 and Firefox 3.6.8 I see text, although in Firefox the text sometimes does not appear.  But I attribute not this program does not, but even more to what appears to be insufficiently size textfields.  What you need to do is set the property to autoSize to the textfields.

    I created a movieclip that contains the button and the textfield and use that instead of 113 separate instances of both.

    In all cases, you should be able to get the Flash debug player so that you can see this error occur during playback in the browser (http://www.adobe.com/support/flashplayer/downloads.html).  Although you won't find may not be any errors, fair textfields that are not the big enugh to display their text.

  • 11G with ASM and RDBMS problem when the server reboot (dependencies)

    Hello

    I just install the new version 11G with ASM for the first time. When I restart my server, RDBMS start before the ASM service isn't over to start. It's like when the care services, CSS and EVM have been replaced by the OH dependencies have been lost. The OH service is started but it's as if he is not optional and others start immediately (ASM and RDBMS).

    Early restart, I see the OHservice started and the DSO after that (on the road), but when the RDBMS starts the instance handle of stay (inactive and not mount) because unit number logic for the catalog of service is not available yet. I see in the alert.log to RDBMS catalog segment is not found or not existing (/ catalog not nfound).

    If I wait about 3 to 5 minutes and restart only the RDMBS all start without problem.

    Is there a way I can adjust the stop with the 11g version service or use the crsctl to indicate to the RDBMS service start only when all the ASM service (MON) segment are mount?

    Thank you

    Normally the database is started by the clusterware and not by the windows service.

    Thus, there could be 2 ways to do this:
    (a.), try to assign the Windows of the database service to manual. It must be started by clusterware.

    If that doesn't work, try this:

    (b) leaving the service to automatic startup (Windows), but disable the automatic start of the database. This you can normally change in the registry
    -Online-online Oracle-online key HKLM => ORACLE__AUTOSTART
    (not 100% sure on the key, but I'm sure that you'll be able to find it.)

    Unfortunately do not have atm WindowsCluster to try it myself.

    Additional please check if your db instance has the correct dependencies defined in the clusterware.
    Make one

    stat ora res crsctl. .db Pei

    and paste it here.

    So good luck...
    Sebastian

  • How to restore or at least analyze emails from account deleted when the server no longer exists

    I have emails from an email address @domain.com that are saved in my Local folder. I would like to follow the instructions to restore this account here: _ http://kb.mozillazine.org/Thunderbird: _FAQs_:_Recover_Deleted_Account

    The problem is that the server that hosted email no longer exists, so I can't add it back again. Is it possible to import in Thunderbird yet, so I can always analyze them? Or someone has a suggestion on how I can access these emails in a simple way? I need to be able to search through them, as I already do in Thunderbird.

    In general, in IMAP, all your messages are stored on the server and Thunderbird downloads the temporary copies in order to accelerate the search and navigation. Since there are parameters for the amount of content in the message to download, or only the headers, there is no guarantee that you will have messages in their entirety.

    For future use, if you have an IMAP account that is connected and the desire to preserve the independent messages from the server, you must copy them to a place outside of the IMAP account folders connected, such as local folders.

  • Direct connection on the desktop - clients still losing access when the server goes down or rebooted service

    I set up the connection to the server with a link Direct is TICKING, I did that once the initial connection has been made for the broker and an assigned desktop computer, connect directly to the desktop and so not care about the State of the connection to the server. After restart or just restart the VMware View Server service all customers lost access until it is facing up.

    Is it right, that we use View 3.1.

    Thank you

    It's strange that I can restart my server connection without worrying about all the users.   How brokers connection you have and do you have activated all at direct connection?

    If you have found this device or any other useful post please consider the use of buttons useful/correct to award points

Maybe you are looking for