Introduction This document describes the installation of self-signed and 3rd party signed certificates in CMX 10.2.x. Installing a self-signed certificate [cmxadmin@cmx]$ su - Password: [root@ cmx ]# cd /opt/haproxy/ssl/ [root@ cmx ]# mkdir newcert [root@ cmx ]# cd newcert [root@ cmx newcert]# openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /opt/haproxy/ssl/newcert/private.key -out /opt/haproxy/ssl/newcert/cert.crt Generating a 2048 bit RSA private key .................................................. ..................+++ .................................................. .....+++ writing new private key to '/opt/haproxy/ssl/newcert/private.key' ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter '.', the field will be left blank. ----- Country Name (2 letter code) [XX]:BE State or Province Name (full name) []:Brussels Locality Name (eg, city) [Default City]:Brussels Organization Name (eg, company) [Default Company Ltd]:Cisco Organizational Unit Name (eg, section) []:TAC Common Name (eg, your name or your server's hostname) []: cmx.example.com Email Address []: cmx@example.com   [root@cmx newcert_byserge]# ls cert.crt  private.key [root@cmx newcert_byserge]# cat cert.crt private.key | tee cert.pem -----BEGIN CERTIFICATE----- MIID8TCCAtmgAwIBAgIJAOWdn/1xqQKNMA0GCSqGSIb3DQEBBQ UAMIGOMQswCQYD VQQGEwJCRTERMA8GA1UECAwIQnJ1c3NlbHMxETAPBgNVBAcMCE JydXNzZWxzMQ4w DAYDVQQKDAVDaXNjbzEMMAoGA1UECwwDVEFDMRgwFgYDVQQDDA 9zZXJnZWNhc0B0 ay5jb20xITAfBgkqhkiG9w0BCQEWEnN5YXNtaW5lQGNpc2NvLm NvbTAeFw0xNTEx MjYxMDU0MzlaFw0xNjExMjUxMDU0MzlaMIGOMQswCQYDVQQGEw JCRTERMA8GA1UE CAwIQnJ1c3NlbHMxETAPBgNVBAcMCEJydXNzZWxzMQ4wDAYDVQ QKDAVDaXNjbzEM MAoGA1UECwwDVEFDMRgwFgYDVQQDDA9zZXJnZWNhc0B0ay5jb2 0xITAfBgkqhkiG 9w0BCQEWEnN5YXNtaW5lQGNpc2NvLmNvbTCCASIwDQYJKoZIhv cNAQEBBQADggEP ADCCAQoCggEBAKOwDC5Y/dRCTSp8mnL40M0QXvrLjzsb2U9++o UsB+e7g0pYlTqp PaPK9KEem17WhoYMqFJ4+AXvuRxsY8ElT/cEs0BfM38QDzDxc4 2X6TBe7eiFX+MH WODwk3p3sGLbdVWckWViz99b3eMnPoRdlXPQhQS/LVZcCiNdoH QdwwyPQ321O7gF x1FVHcjLpUE4FmqhvIttcPypwEMoq/3s1tOP3OiJkB9Doy7wrE F+bKHEi6b8N453 jwY7OQG7wLrKBRz7QFXxWWurxb3PBOtQohWJ16e2aABUDBq9At a02BVxPaw+dfrC XCq5Yc8mmDxqc+B7THOPdN9jLzhenMiRJrECAwEAAaNQME4wHQ YDVR0OBBYEFGQu ZDeZNoTENM4cO8NNzEdU421cMB8GA1UdIwQYMBaAFGQuZDeZNo TENM4cO8NNzEdU 421cMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADggEBAG L7U4Ls/3bj11dd 5O0IluEbxPF+SPId+C+dM7BWEf6deeby+b2KwjmsV0k9CFw9Hs 0lqOen5LbnqtzN 3rDWqpkAiaXxKUR34oUONgdnjuCQZwRaTpzQmB0CzwGqu5JuoN SHNtvfOtTErKRH oNt6ZlDt/poPTdoj2cUWFrPS7FTkre+lTmKXPORPYoq/vteYtj de5geW6dAV98CQ 3HL+FDeWGmQDSwnDQcnANUh88cR3HQge5hx5rLLof/xHExrkx/ e19Jmw+ft92AC1 sbPb6dR/svR7Gl7jRyzoO4AMaqlZloHgiXq3Su8OqcV9MP6k3A rOkUjHzhGX+fLw 8wIsYX8= -----END CERTIFICATE----- -----BEGIN PRIVATE KEY----- MIIEvAIBADANBgkqhkiG9w0BAQEFAASCBKYwggSiAgEAAoIBAQ CjsAwuWP3UQk0q fJpy+NDNEF76y487G9lPfvqFLAfnu4NKWJU6qT2jyvShHpte1o aGDKhSePgF77kc bGPBJU/3BLNAXzN/EA8w8XONl+kwXu3ohV/jB1jg8JN6d7Bi23 VVnJFlYs/fW93j Jz6EXZVz0IUEvy1WXAojXaB0HcMMj0N9tTu4BcdRVR3Iy6VBOB ZqobyLbXD8qcBD KKv97NbTj9zoiZAfQ6Mu8KxBfmyhxIum/DeOd48GOzkBu8C6yg Uc+0BV8Vlrq8W9 zwTrUKIVidentmgAVAwavQLWtNgVcT2sPnX6wlwquWHPJpg8an Pge0xzj3TfYy84 XpzIkSaxAgMBAAECggEAYlO2fYDnuUG6qPMAtF/Szdwvseflul QYTjCwvJ6egQ2a 6GYd/ob7iBC6sq54Fpg3Zv7jfec81hQS1oglxDhtuK0SIHEPth wng/cGut+uLGhZ 8XttBiu7sCPT85VCV6AM88iBbq3UwQ+mUnWYkFrHFDMGNLvCuE XBsUzkvdvC9x+C GvtXBLERJJmLbGh4kyEPFUiTYzXBOTsh+oRaZ5gh4YLicV6a5C jwu8wm/xZlLwbZ NKCD1RYxAZ7vxASU5Lagi72hIZM5r9kDlDj2zhzdPGo/+R5fIP N92UWjur9r5QM0 9+LU+qeTbjdNojOnYrckBStGySx2+r22FLkWBKcqIQKBgQDSib alRqpMxgZENBfo RsgHP532AB7cufaDkjEV+vmLupExZ9yRRIwIrqZ7XYkdFRCHTC Ft5zrzN8bz5nO5 OdigOZ1Ae7yACmwsSmyBACbNrcVpwE4gcckVzw/V2xT+c331rC Ed2tzDivIC7Dr0 7s8D3J4zq+KwGEguCYXiPCUh3wKBgQDHCIH7as1RGQzizVQkN+ rDvzo8+TjOHZSF 9BYXQqknCSYuT2d3bFqOdAhqxRL8zKn5qvUOSSr8TvLh4aowVR 4ZSO0HMVCbjs1W QZ9PLKKaVyz3Awqwv+UFF0SG7SROjJM8YSMI9qp1rgPY3jrotg ZZ02I/TJ8wn9m2 NBsx5s1pbwKBgGf0FVm/7YBg2mE8s309zbA+ihkX8CUeMQi/2z q2JBcI9H3HgZG8 ncP/sDYDdhsE9pdHUM46ONI0fSiaZhNT65EZQXrAXc9+1fB8gt yjHYW6wlm32RuN 8zKwfWojdVc54Ty3U9aw5QYsCdjFmUqsy0xl1zs+KHy4UJNiol eVSORTAoGAaA+5 rhLsID+hrh8+o+UceJXNxD1lhtaOZe71cdnniMJO1R2s8hKT0j E2iWRahhQXtrK8 h2iX8ezxLkqHadfG8d9gFkehZoOmNjf/LC0hIuL7XnaXq0vZWO 0OZiEsv2jePk5n O/ODsh12Y3flgvBQp7xOfNv5yzl4Ybwij9elhD8CgYAr1K7aM6 YZnlHaIL0my37Y cqYE5/EUaLSng33Rk65krS6k1xFKwRXbq0Nmzln7iWnWA5EMr5 WWDKASqJ35niYm 9PIqda0jCDcjTBIbJ9SVmQ8E0I6A7WRrqDc9CLY2JjY8KnB1RC 9sJ936AErcKiOj cudhWiCshs6n9Tmfsw6LJQ== -----END PRIVATE KEY----- [root@cmx newcert]# ls cert.crt  cert.pem  private.key [root@cmx newcert]# cmxctl node sslmode enable --pem /opt/haproxy/ssl/newcert/cert.pem enabling ssl ssl enabled [root@cmx newcert]#reboot Installing a 3rd party signed certificate Generate the certificate signing request. [cmxadmin@cmx]$ su - Password: [root@ cmx ]# cd /opt/haproxy/ssl/ [root@ cmx ]# mkdir newcert [root@ cmx ]# cd newcert [root@cmx newcert]# openssl req -nodes -days 365 -newkey rsa:2048 -keyout /opt/haproxy/ssl/newcert/private.key -out /opt/haproxy/ssl/newcert/cert.crt Get the certificate signed by the 3rd party CA. Create the certificate chain for import into CMX. Proper format for signed ssl Certificate: -----BEGIN RSA PRIVATE KEY----- < Your Private Key MIIEpAIBAAKCAQEA2gXgEo7ouyBfWwCktcYo8ABwFw3d0yG5rv ZRHvS2b3FwFRw5 ...snipped -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- < Your CMX server signed SSL certificate MIIFEzCCAvugAwIBAgIBFzANBgkqhkiG9w0BAQsFADCBlDELMA kGA1UEBhMCVVMx ...snipped -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- < Your intermediate CA certificates ...snipped -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- < The root CA certificate that signed your certificate above MIIGqjCCBJKgAwIBAgIJAPj9p1QMdTgoMA0GCSqGSIb3DQEBCw UAMIGUMQswCQYD ...snipped -----END CERTIFICATE----- Full example: -----BEGIN RSA PRIVATE KEY----- MIIEpAIBAAKCAQEAuRPbZqm6JlTR6FCvWF8PejHF+HpTTrwgypqty4mviw78gC2G TGrIYdA2eErpj1UCYVc/0rm5OU68Qr0X2DUm1lukopXgTF3dWtg8FZ77sj8+RN8L YAaHySHJc9tRF8QUDB8zyHryXSM/5aw1z1F+4DSMP5nVYoZroiM+WXhP3BYFvyHm nBbgOKZ8Zmln0idJMu8qI53/HfH3pNsuFjR9sCh+jbIEpUh9Jt54jifcFFUY+7Xt GJ7GVjyCsGKFHWx6EgrCOb4uqS1crEUjO9/vDlp6M559F1hMQRHkAY5sSFDq5qY+ XEPY7mopyQmNBRZxWgOogtQ2fsK1XFDZ4ZBW0QIDAQABAoIBAQCklWv+l+DaRYOF PHsx8xcoayrKFL4QvmvKwFLdNcvNtb4FnnZXbn5TvX0y7CtXMxmyxowTMOXueH4i O1YBBwNKjKSTkQSt5Kr8Jl8IOyFJGcSeKltLQYNu8YTcaqRqpgvN29GI7wyolrgz 3jjb7HUPnKs7w+lmfHMq9Hx1w/AAnm/Fb7/sXUww80cdfGFHlYfqBvC5FJKe3N/f sg5Npjhaqrvs9bsd7MUKu5LjcdUN9nVWU604NWaMJHUQPoHmf3vwNND4l1YDbGS7 Aj8exOW4+2WKYz9c9Ry1qivkIgnneGUvaI3mR4Z0Rc+lJckie+UhfttHxz4DmO4M pEw5wjIhAoGBAPEQfmDSme8Ur9V6zNaXtcaAL77JozNuSyEzpvSduUf4HLTJBY34 U4V6AWyQR2koSZON2tBbuC8s/D2cas2A1htoD8fflL/dWefoJmNzOTyyjQNKepf0 NfEOvGKQdOpI/DG62ngxbT5zkUspV/qSxdQw9xZoYV7FkPrst+7kv8gLAoGBAMSL XA7aVSkFmrBDsag6YNsmOaBp8geEAll/N3dazXulIHUCnpUpY//Cgeb+LBrKQmWA Fuf5gcb7GR4oFmu4jaTpXvKz8eqnsNeDmzVKMoB31wd9QTrYMc+SBuyX3nHldRFF CXU1UlAj/ujoMz+wYuyE/qtOISZ2FITkZQvjRjoTAoGBALa76QDeRB/uj4eFCeeV ow5wt0CputPOxJbLf8CoGv5KPwBv7Yz789wXayLvj6JQDs4SVw9gp5LjR+YwPum+ ww6NaID7o9d5JKDd4tO6UWYId0pKV/n9/jHYGMeid23tm3bbDKbV2NjhY/8UvQNN 5TZ/U54hy8W6f7cmYBtwPUyXAoGAC1bS79Ru11gIbaTqKf98OQiCiJu0J/TYwdsS EyO8+SY0sit9hLOHnmjVX8NIPh9vJzX1nFqLvzQbZd8ANCTInzwLi0sQaO5VyIlC OhfWxAyl7juuuLtiXExbc+jrH30SfPWTrxxtbEw3V66VzlXZzzV5D98JEJP9aRFY NxBcq9sCgYBSIZfEKW9DTuPAHfYLToQpDRLM/1sT2Kg9CcASHlj4jmV+7CfJggKY TQnshZuvArjlYlUCjrSubwt6FYmP+O6hbnHEBHo6RTCc2qnvS7J+GGk8C/CH/iTO PbXaW7rcUuX6hEFdZQQ8OOJBstnKjZn2sI+OIX+VBrqnDOYWlFwlEA== -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- MIIFEjCCAvqgAwIBAgIBGDANBgkqhkiG9w0BAQsFADCBlDELMAkGA1UEBhMCVVMx CzAJBgNVBAgTAk5DMQwwCgYDVQQHEwNSVFAxHDAaBgNVBAoTE0Npc2NvIFN5c3Rl bXMsIEluYy4xDDAKBgNVBAsTA1RBQzEbMBkGA1UEAxMSbGludXhsYWIuY2lzY28u Y29tMSEwHwYJKoZIhvcNAQkBFhJzc2NobWlkdEBjaXNjby5jb20wHhcNMTYwNTA1 MTQ0MDAxWhcNMTcwNTA1MTQ0MDAxWjCBhjELMAkGA1UEBhMCVVMxCzAJBgNVBAgM Ak5DMRwwGgYDVQQKDBNDaXNjbyBTeXN0ZW1zLCBJbmMuMQwwCgYDVQQLDANUQUMx GzAZBgNVBAMMEmxhdWdodGVyLmNpc2NvLmNvbTEhMB8GCSqGSIb3DQEJARYScmFt a3JpczJAY2lzY28uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA uRPbZqm6JlTR6FCvWF8PejHF+HpTTrwgypqty4mviw78gC2GTGrIYdA2eErpj1UC YVc/0rm5OU68Qr0X2DUm1lukopXgTF3dWtg8FZ77sj8+RN8LYAaHySHJc9tRF8QU DB8zyHryXSM/5aw1z1F+4DSMP5nVYoZroiM+WXhP3BYFvyHmnBbgOKZ8Zmln0idJ Mu8qI53/HfH3pNsuFjR9sCh+jbIEpUh9Jt54jifcFFUY+7XtGJ7GVjyCsGKFHWx6 EgrCOb4uqS1crEUjO9/vDlp6M559F1hMQRHkAY5sSFDq5qY+XEPY7mopyQmNBRZx WgOogtQ2fsK1XFDZ4ZBW0QIDAQABo3sweTAJBgNVHRMEAjAAMCwGCWCGSAGG+EIB DQQfFh1PcGVuU1NMIEdlbmVyYXRlZCBDZXJ0aWZpY2F0ZTAdBgNVHQ4EFgQUeKxp ACe19Jpz6QuXGALJik41DjcwHwYDVR0jBBgwFoAUUPGERegtBFb+1WJ+1ZLqRpWK G84wDQYJKoZIhvcNAQELBQADggIBAJzykVSWLvNuFk/Q1PRFU7pdX5z8g5KOaQjo 4erSl48m1WoM7vJNXjqqHD6JdcOMINGeuxElI1Vd7prpARhE+Qj7xSMfDMilzSFy mKVpTNQzT/9yHytAycVsvbGYJDh8R3jTpxJXWPBcvErE8OuaxkCbePNzQD56KqFC Sjibw2GgwLJa8GaHZdL0lGQ9djDfsQwriqvphBX9Dkd9qeMPnxYCXVsE4SsbLUWC n0tasfJ4pcrgRqEi6OBw8zh3twcy6vEBJvp0tA3/z3yPdvG0sZ5x5WCTCCOmLvUE BswbZusCMQFCHg14wbEoNo/I3GDoqRHzw1j0hA887r4AWnMOeXjkHjA7YxtrSzJ4 cQL5WEXj8di6UqwQA+dNBCLv488huLFEcEL8YjMLV4Z6nfaXzNF2FLJZByaD4/sP TcZ2BkKS53YKKE7LUaIbUH3ymdfejQuIVabtBnc/of5bw7WODlyBZIhd4MW3eFJK puoXXxp0xqmS3/VMnefyaVqBz3eV4KXkg0Z6w6KbCXst9aTP+NtSGEBeXgM36TvR 2SIVCwKH/RlDQp+vk1QykQdj6JSMJUrl6fdRAtpAZssMGIT2KsreRVnJ8ig7VAKp 17ES4FZ/7rg87GoUYfmAl+AhvZCCu2SjJBdW6/IO1rHHkB+1UkU+yswY85Ccq7Wj +9TmdHX8 -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIIGqjCCBJKgAwIBAgIJAPj9p1QMdTgoMA0GCSqGSIb3DQEBCwUAMIGUMQswCQYD VQQGEwJVUzELMAkGA1UECBMCTkMxDDAKBgNVBAcTA1JUUDEcMBoGA1UEChMTQ2lz Y28gU3lzdGVtcywgSW5jLjEMMAoGA1UECxMDVEFDMRswGQYDVQQDExJsaW51eGxh Yi5jaXNjby5jb20xITAfBgkqhkiG9w0BCQEWEnNzY2htaWR0QGNpc2NvLmNvbTAe Fw0xNjA1MDUxMzQ5MTlaFw0zNjA0MzAxMzQ5MTlaMIGUMQswCQYDVQQGEwJVUzEL MAkGA1UECBMCTkMxDDAKBgNVBAcTA1JUUDEcMBoGA1UEChMTQ2lzY28gU3lzdGVt cywgSW5jLjEMMAoGA1UECxMDVEFDMRswGQYDVQQDExJsaW51eGxhYi5jaXNjby5j b20xITAfBgkqhkiG9w0BCQEWEnNzY2htaWR0QGNpc2NvLmNvbTCCAiIwDQYJKoZI hvcNAQEBBQADggIPADCCAgoCggIBALDXzffE4YyvCakwDop2gKcfOAOgn96hzbVC OvVGDNwYE/070u9Rh8Tf4yCX8tknrkN2QnqZVarWgUPYvc0zSVqXiT6bxWkuvGYL nO+PiXFKAFMlF+BjF0L8Fdm0B+ZowSUlrFwLCX7yOsemn62NfwVHo0MUImJoglF0 JW+8pJrxrfoWG78AgRUsKFi5R4IuTPWV1PSWiD1nDEEkxn1JKNmwtnNC7iAUHWMs gKK64VBpoSTNWpiyHCD0B4Col2x+R9NNWOQ9X7NnMhtR16AYKm60ElkMYvP1Zjrl aZFfzkZXLmsxluxjbU9mv4lUhGzeJxbcBUPuvLbM6WoOYp6/lYoSdd5PtfX9Ixim 7zO/uL7w2vyI4+kJYm7HHtFVHuhEcWEhyEdW0JcvT61L68F/iB79WezJd0VbPCel gFSJFhx5F2jhyYlZq2bbjOdzf0RC+U053W+xfqQUTt17BDnb6n+UvPSDfwDpnKMH RbZlis0nC7YfqscDnrpBETRPNvNfRsQznoBgqqPWrfJ/RVU+CnjxZB+SiEWhV2ei Wla6P8iB+MmMBYoHXbk1pBf0BkZEXd2uGk74o7a3rj1MAlzdppoGYAW2hfvYYqNW kDGOgkHLf1KzawB9gaiWNHo6UujaHZNi/jKL6FQlor+HQ/EggWtflTLl1YBTz4cB iNlK3wQ7AgMBAAGjgfwwgfkwHQYDVR0OBBYEFFDxhEXoLQRW/tViftWS6kaVihvO MIHJBgNVHSMEgcEwgb6AFFDxhEXoLQRW/tViftWS6kaVihvOoYGapIGXMIGUMQsw CQYDVQQGEwJVUzELMAkGA1UECBMCTkMxDDAKBgNVBAcTA1JUUDEcMBoGA1UEChMT Q2lzY28gU3lzdGVtcywgSW5jLjEMMAoGA1UECxMDVEFDMRswGQYDVQQDExJsaW51 eGxhYi5jaXNjby5jb20xITAfBgkqhkiG9w0BCQEWEnNzY2htaWR0QGNpc2NvLmNv bYIJAPj9p1QMdTgoMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQELBQADggIBAD0R CmpKKygd3oRip8NaRssHYndwm6t3Add4+BM/wZ5TbNi5POg5JZIDgV2qT6elJIux dLTTCJcHaoeITWW/CTpYrve+Q3NAPTImmXTX2swN7zVX3GXNoBQWhIuZh4A9YMVb tAST3O7qCQq+6NU1LKBjTdnc6qw/VLe2WD9vvhDcq+i5HyHJWJqsTcO8iU8fyTGv Q1i8MFZ7VPgnr2RGaIki8yCsFG+bSKuiVQgylnQLMKSkqCtWww+eBj1bPr/MecgC 1bO5OJ+id08UalM6KhlRQYY9o5q7lkRIFVgUvHyhsNdvmwSa15kpWLeKqsNrFt5A jipNPJW4Cf2HLutZZZGGIDNc9kQlD7XyPXlV41n/4uoYuKjea6RgcJYR/lFh0rTo nUp3LbZkpRQksWrhKfO7BoFOif7s9Ko6YDuOu2o/dzU1XUf937ovNmGqvOPRPrV2 5cUrQKEXeTsGbuxvvxkEFv39BZsefc0tiSMRkpN84FOBoYUkc0zioiURQa8gs6Eo w5CuB/DH65uxQ2yowV4KVktHA5az5j0ZUoayLX0vOktr54g+z3+li+QN2yfTiOOS zvz4k6Ylu4ySosg4BdWVmPXbLLkTpb+AEHpK+IZF6I6qMVPU5wz6VMAVKhilaEkN o1d/c05RYSTy8/SlROa4ms68xqCpQIdaWg10VIDQ -----END CERTIFICATE----- Installation procedure: Step:1  Login to the CMX cli as cmxadmin and then root. [cmxadmin@cmx]$ su - Password: [root@cmx ~]# Step:2  Make a directory on CMX to hold the new certificate: [root@cmx ~]# mkdir /opt/haproxy/ssl/newcert/ Copy your properly formatted signed certificate to this directory. Example below is called localhost.pem. Step:3 On CMX use openssl verify to make sure that everything is properly built: [root@cmx newcert]# cd /opt/haproxy/ssl/newcert [root@cmx newcert]# openssl verify -CAfile /opt/haproxy/ssl/newcert/localhost.pem /opt/haproxy/ssl/newcert/localhost.pem /opt/haproxy/ssl/newcert/localhost.pem: OK <--- should get OK Instructions for CMX build 324: (10.2.2 beta) or 10.2.2 CCO and later: [root@cm x newcert]# cmxctl node s slmode enable --pem /opt/haproxy/ssl/newcert/localhost.pem enabling ssl ssl enabled   [root@cmx newcert]# reboot   Note: In CMX 10.2.1-219 there is a bug that will not allow the install to work properly. CSCux30499 Need exact steps in the config guide for certificates The issue will be fixed in CMX 10.2.2 which will be out May 2016.  If there is a business need to continue with CMX 10.2.1-219 please contact the TAC for the workaround. ... View more

The following procedure is not supported by TAC, the Wireless Networking Business Unit or any other entity at Cisco. The need to remove the .trc and .trm files and cdmp directories from Prime Infrastructure on a weekly basis is the focus of bug: PI 1.2 - Trace files need to be rolled over on a periodic (weekly) int.  The following script will remove the files older than 168 hours ( 7 days ). #!/bin/bash # Find and delete all .trc .trm and cdmp directories modified more than 168 hours ago ( 7 days ) find /opt/oracle/base/diag/rdbms/wcs/wcs/trace/*.trc -mtime +7 -exec rm -f {} \; find /opt/oracle/base/diag/rdbms/wcs/wcs/trace/*.trm -mtime +7 -exec rm -f {} \; find /opt/oracle/base/diag/rdbms/wcs/wcs/trace/cdmp* -mtime +7 -exec rm -rf {} \; # Change the script to executable # chmod +x <filename> # add to crontab to run once a day ( 15 3 is 3:15 am ) # 15 3 * * * /root/delete_trc_trm_cdmp.sh 2>&1         ... View more

  The following procedure is not supported by TAC, the Wireless Networking Business Unit or any other entity at Cisco.   The issue seems to be related to a problem identified by VMware:   http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=51306   Linux based file systems become read-only   VMware has identified a problem where file systems may become read-only after encountering busy I/O retry or SAN or iSCSI path failover errors.  NCS users have also encountered this issue after the  storage has been uncleanly removed, usually brought on by a power outage.   If you can get to the shell prior to a reboot you can try issuing the following.  If you don't have access  to a CLI becuase the vm is in a boot loop, proceed to the next section:   mount -o remount /   Recovering an NCS Virtual Machine stuck in a boot loop:   1. Download a live linux distro locally to your machine.  Users have reported success with Fedora. 2. In vSphere, left click the NCS VM -> Summary tab -> Storage -> right click the storage -> browse datastore ->  click the icon to upload a file -> browse to the ISO.  3. Exit out of the datastore browser. 4. Right click the NCS VM -> edit settings -> CD/DVD drive -> enable 'Connected' and 'Connect at power on' ->  select the radio button 'Datastore ISO File' -> browse to the ISO you just uploaded -> save 5. Reload the VM and boot to the ISO 6. Get to the CLI (the exact steps to do so will completely depend on the linux distro) 7. Determine which designation has been given to the volumes we need to repair.  In the output below, this  particular linux distro has given the volumes the 'sdb' designation. This can vary.  There will be three of them (sdb1, sdb2, sdb3)   # fdisk -l   Disk /dev/sdb: 209.7 GB,     209715200000 bytes 255 heads, 63 sectors/track,     25496 cylinders Units = cylinders of 16065 * 512     = 8225280 bytes   Device     Boot          Start            End     Blocks   Id  System /dev/sdb1       *               1              64       512000   83  Linux Partition 1 does not end on cylinder boundary. /dev/sdb2       64             77       102400   83  Linux Partition 2 does not end on cylinder boundary. /dev/sdb3                   77       25497       204184576   8e  Linux LVM   8. Scan for volume groups:   # lvm vgscan -v     Wiping cache of LVM-capable devices   Wiping internal VG cache   Reading all physical volumes.  This may take a while...   Finding all volume groups   Finding volume group "smosvg"   Found volume group "smosvg" using metadata type lvm2   Archiving volume group "smosvg" metadata (seqno 12).   Creating volume group backup "/etc/lvm/backup/smosvg" (seqno 12).   9. Activate all volume groups:   # lvm vgchange -a y     11 logical volume(s) in volume group "smosvg" now active   10. List logical volumes:   # lvm lvs –a         LV                   VG Attr LSize     altrootvol               smosvg -wi-a-  96.00M   home                   smosvg -wi-a-  96.00M   localdiskvol           smosvg -wi-a-  29.28G   optvol                   smosvg -wi-a- 123.22G   recvol                   smosvg -wi-a-  96.00M   rootvol                 smosvg -wi-a-   3.91G   storeddatavol       smosvg -wi-a-   9.75G   swapvol               smosvg -wi-a-  15.62G   tmpvol                 smosvg -wi-a-   1.94G   usrvol                   smosvg -wi-a-   6.81G   varvol                   smosvg -wi-a-   3.91G   11. Use fsck to check all the partitions on the drive.  It is ok if you receive errors for one of these.   # fsck -t ext3 –y /dev/sdb1 # fsck -t ext3 –y /dev/sdb2 # fsck -t ext3 -y /dev/sdb3   12. Perform the same steps for all of the logical volumes in the group identified with the lvscan command (remember to use the –y flag in all cases).   # fsck -t ext3 –y     /dev/smosvg/altrootvol # fsck -t ext3 –y     /dev/smosvg/home   # fsck (repeat for all the others     from step 10)   You are looking for similar output to this:   fsck 1.39 (29-May-2006) e2fsck 1.39 (29-May-2006) /home: clean, 34/128016 files, 33751/512000 blocks   13.  Cleanly shut down the vm, remove the ISO configurations, and restart the server.  It should now boot successfully   With this information, and the volumes activated, you should be able to mount the partitions and volumes:   a. mount /dev/sdb1 /media/boot ( not the Linux LVM ) b. mount /dev/sdb2 /media/storedconfig ( not the Linux LVM c. mount /dev/smosvg/localdiskvol /media/NCSbackup d. Move the most current backup file from the localdiskvol volume, as well as the startup config from the storedconfig volume, redeploy the VM using the OVA file, then restore from the backup archive:   http://www.cisco.com/en/US/customer/docs/wireless/ncs/1.1/configuration/guide/tasks.html#wp1201560       ... View more

Configuring Freeradius2 for NCS: Note: According to RFC 2865 that details the RADIUS protocol, although the Radius packet length field is 2 octets long, the maximum packet size is restricted to 4096 bytes.  In later WCS/NCS versions the task list becomes very large and if you have many virtual domains you will go over this 4096 byte limit and will get errors that the user/pass is wrong with very little other logging. Installing freeradius: Prior to Freeradius2 the command Cleartext-Password does not seem to be supported. I used this site for installation and configuration: http://wiki.freeradius.org/ Users file ( /etc/raddb/users ): Added to the top of the file. user Cleartext-Password := "Nowires123"     cisco-avpair += "NCS:virtual-domain0=ROOT-DOMAIN",     cisco-avpair += "NCS:role0=Root",     cisco-avpair += "NCS:task0=View Alerts and Events",     cisco-avpair += "NCS:task1=Device Reports",     cisco-avpair += "NCS:task2=RADIUS Servers",     cisco-avpair += "NCS:task3=Network Summary Reports",     cisco-avpair += "NCS:task4=Configure ACS View Servers",     cisco-avpair += "NCS:task5=Run Reports List",     cisco-avpair += "NCS:task6=View CAS Notifications Only",     cisco-avpair += "NCS:task7=Administration Menu Access",     cisco-avpair += "NCS:task8=Monitor Clients",     cisco-avpair += "NCS:task9=Monitor Media Streams",     cisco-avpair += "NCS:task10=Configure Guest Users",     cisco-avpair += "NCS:task11=Configure Lightweight Access Point Templates",     cisco-avpair += "NCS:task12=Monitor Chokepoints",     cisco-avpair += "NCS:task13=Maps Read Write",     cisco-avpair += "NCS:task14=Configure Access Points",     cisco-avpair += "NCS:task15=Virtual Domains List",     cisco-avpair += "NCS:task16=All",     cisco-avpair += "NCS:task17=Users and Groups",     cisco-avpair += "NCS:task18=Saved Reports List",     cisco-avpair += "NCS:task19=Migration Templates",     cisco-avpair += "NCS:task20=Monitor Spectrum Experts",     cisco-avpair += "NCS:task21=Configure Autonomous Access Point Templates",     cisco-avpair += "NCS:task22=Audit Trails",     cisco-avpair += "NCS:task23=Monitor Handover Server",     cisco-avpair += "NCS:task24=Client Location",     cisco-avpair += "NCS:task25=Monitor Access Points",     cisco-avpair += "NCS:task26=CleanAir Reports",     cisco-avpair += "NCS:task27=Configure Ethernet Switches",     cisco-avpair += "NCS:task28=Configure Ethernet Switch Ports",     cisco-avpair += "NCS:task29=TACACS+ Servers",     cisco-avpair += "NCS:task30=Autonomous AP Reports",     cisco-avpair += "NCS:task31=Mobility Service Management",     cisco-avpair += "NCS:task32=Performance Reports",     cisco-avpair += "NCS:task33=Help Menu Access",     cisco-avpair += "NCS:task34=Configure Controllers",     cisco-avpair += "NCS:task35=MSAP Reports",     cisco-avpair += "NCS:task36=Scheduled Tasks and Data Collection",     cisco-avpair += "NCS:task37=Monitor Tags",     cisco-avpair += "NCS:task38=Search Access",     cisco-avpair += "NCS:task39=Scheduled Configuration Tasks",     cisco-avpair += "NCS:task40=Configure WIPS Profiles",     cisco-avpair += "NCS:task41=Client Reports",     cisco-avpair += "NCS:task42=Services Menu Access",     cisco-avpair += "NCS:task43=Configure Templates",     cisco-avpair += "NCS:task44=System Settings",     cisco-avpair += "NCS:task45=Report Launch Pad",     cisco-avpair += "NCS:task46=Remove Clients",     cisco-avpair += "NCS:task47=Configure Config Groups",     cisco-avpair += "NCS:task48=Mesh Reports",     cisco-avpair += "NCS:task49=High Availability Configuration",     cisco-avpair += "NCS:task50=License Center",     cisco-avpair += "NCS:task51=Lobby Ambassador Defaults Configuration",     cisco-avpair += "NCS:task52=Monitor Controllers",     cisco-avpair += "NCS:task53=Monitor Security",     cisco-avpair += "NCS:task54=Monitor Menu Access",     cisco-avpair += "NCS:task55=Track Clients",     cisco-avpair += "NCS:task56=Monitor Interferers",     cisco-avpair += "NCS:task57=Configure Switch Location Configuration Templates",     cisco-avpair += "NCS:task58=Configure WiFi TDOA Receivers",     cisco-avpair += "NCS:task59=TAC Case Attachment Tool",     cisco-avpair += "NCS:task60=Handover Server Management",     cisco-avpair += "NCS:task61=Voice Audit Report",     cisco-avpair += "NCS:task63=Report Run History",     cisco-avpair += "NCS:task64=Compliance Reports",     cisco-avpair += "NCS:task65=Maps Read Only",     cisco-avpair += "NCS:task66=Disable Clients",     cisco-avpair += "NCS:task67=WIPS Service",     cisco-avpair += "NCS:task68=Security Reports",     cisco-avpair += "NCS:task69=Configure Spectrum Experts",     cisco-avpair += "NCS:task70=Appliance",     cisco-avpair += "NCS:task71=View Security Index Issues",     cisco-avpair += "NCS:task72=Home Menu Access",     cisco-avpair += "NCS:task73=Monitor WiFi TDOA Receivers",     cisco-avpair += "NCS:task74=Health Monitor Details",     cisco-avpair += "NCS:task75=ContextAware Reports",     cisco-avpair += "NCS:task76=User Preferences",     cisco-avpair += "NCS:task77=Guest Reports",     cisco-avpair += "NCS:task78=Logging",     cisco-avpair += "NCS:task79=Automated Feedback",     cisco-avpair += "NCS:task80=Identity Search Engine",     cisco-avpair += "NCS:task81=Delete and Clear Alerts",     cisco-avpair += "NCS:task82=Email Notification",     cisco-avpair += "NCS:task83=License Check",     cisco-avpair += "NCS:task84=Rogue Location",     cisco-avpair += "NCS:task85=Identify Unknown Users",     cisco-avpair += "NCS:task86=Reports Menu Access",     cisco-avpair += "NCS:task87=Configure ISE Servers",     cisco-avpair += "NCS:task88=Tools Menu Access",     cisco-avpair += "NCS:task89=Config Audit Dashboard",     cisco-avpair += "NCS:task90=Virtual Domain Management",     cisco-avpair += "NCS:task91=Monitor Ethernet Switches",     cisco-avpair += "NCS:task92=Configure Choke Points",     cisco-avpair += "NCS:task93=RRM Dashboard",     cisco-avpair += "NCS:task94=Diagnostic Information",     cisco-avpair += "NCS:task95=Planning Mode",     cisco-avpair += "NCS:task96=Configure Menu Access",     cisco-avpair += "NCS:task97=Ack and Unack Security Index Issues",     cisco-avpair += "NCS:task98=Pick and Unpick Alerts",     cisco-avpair += "NCS:task99=Ack and Unack Alerts",     cisco-avpair += "NCS:task100=Auto Provisioning", Clients file ( /etc/raddb/clients.conf ): Added to the end of the file to allow NCS to talk to this radius server: client 172.18.123.180 {   secret = SECRET_KEY   shortname = nms-kate   nastype = cisco } To test the freeradius config: The radiusd -X command will allow testing of the config.  Running this command should get a lot of output and then at the end this: Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnel Listening on proxy address * port 1814 Ready to process requests. To test the configured user from the users file: linuxlabciscocom:~# radtest user Nowires123 127.0.0.1 0 testing123 Sending Access-Request of id 250 to 127.0.0.1 port 1812         User-Name = "user"         User-Password = "Nowires123"         NAS-IP-Address = 127.0.0.1         NAS-Port = 0         Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=250, length=3998         Cisco-AVPair = "NCS:virtual-domain0=ROOT-DOMAIN"         Cisco-AVPair = "NCS:role0=Root"         Cisco-AVPair = "NCS:task0=View Alerts and Events"         Cisco-AVPair = "NCS:task1=Device Reports"         Cisco-AVPair = "NCS:task2=RADIUS Servers"         .... snipped the other tasks. The server you started with radiusd -X will show: rad_recv: Access-Request packet from host 127.0.0.1 port 56556, id=250, length=74         User-Name = "user"         User-Password = "Nowires123"         NAS-IP-Address = 127.0.0.1         NAS-Port = 0         Message-Authenticator = 0xfbc6150fdaf7893c43fa1e364f118aba Sending Access-Accept of id 250 to 127.0.0.1 port 56556         Cisco-AVPair += "NCS:virtual-domain0=ROOT-DOMAIN"         Cisco-AVPair += "NCS:role0=Root"         Cisco-AVPair += "NCS:task0=View Alerts and Events"         Cisco-AVPair += "NCS:task1=Device Reports"         Cisco-AVPair += "NCS:task2=RADIUS Servers"         .... snipped the other tasks. Finished request 0. Going to the next request Successful login for root from NCS logs:     Line 72218: 07/05/12 10:37:47.668 TRACE [aaa] [http-443-14] [RADIUS AAAModule] Creating datagram socket   - To Server:  172.18.123.248  - For User:  user     Line 72219: 07/05/12 10:37:47.669 TRACE [aaa] [http-443-14] [RADIUS AAAModule] Building Access Request Packet  - To Server:  172.18.123.248  - For User:  user     Line 72220: 07/05/12 10:37:47.669 TRACE [aaa] [http-443-14] [RADIUS AAAModule] Building and sending Access Request Datagram  - To Server:  172.18.123.248  - For User:  user     Line 72221: 07/05/12 10:37:47.670 TRACE [aaa] [http-443-14] [RADIUS AAAModule] Receiving Access Response Datagram  - From Server:  172.18.123.248  - For User:  user     Line 72222: 07/05/12 10:37:47.671 TRACE [aaa] [http-443-14] [RADIUS AAAModule] Validating Access Response Authenticator field  - From Server:  172.18.123.248  - For User:  user     Line 72223: 07/05/12 10:37:47.671 TRACE [aaa] [http-443-14] [RADIUS AAAModule]  user  successfully authenticated for server 172.18.123.248     Line 72224: 07/05/12 10:37:47.672 TRACE [aaa] [http-443-14] [RADIUS+ AAAModule] Disconnecting from datagram socket  - From Server:  172.18.123.248  - For User:  user     Line 72225: 07/05/12 10:37:47.672 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding virtual domain: virtual-domain0 = ROOT-DOMAIN     Line 72226: 07/05/12 10:37:47.672 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding role: role0 = Root     Line 72227: 07/05/12 10:37:47.673 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task0 = View Alerts and Events     Line 72228: 07/05/12 10:37:47.673 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task1 = Device Reports     Line 72229: 07/05/12 10:37:47.673 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task2 = RADIUS Servers     Line 72230: 07/05/12 10:37:47.674 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task3 = Network Summary Reports     Line 72231: 07/05/12 10:37:47.674 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task4 = Configure ACS View Servers     Line 72232: 07/05/12 10:37:47.674 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task5 = Run Reports List     Line 72233: 07/05/12 10:37:47.674 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task6 = View CAS Notifications Only     Line 72234: 07/05/12 10:37:47.675 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task7 = Administration Menu Access     Line 72235: 07/05/12 10:37:47.675 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task8 = Monitor Clients     Line 72236: 07/05/12 10:37:47.675 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task9 = Monitor Media Streams     Line 72237: 07/05/12 10:37:47.676 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task10 = Configure Guest Users     Line 72238: 07/05/12 10:37:47.676 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task11 = Configure Lightweight Access Point Templates     Line 72239: 07/05/12 10:37:47.676 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task12 = Monitor Chokepoints     Line 72240: 07/05/12 10:37:47.677 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task13 = Maps Read Write     Line 72241: 07/05/12 10:37:47.677 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task14 = Configure Access Points     Line 72242: 07/05/12 10:37:47.677 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task15 = Virtual Domains List     Line 72243: 07/05/12 10:37:47.677 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task16 = All     Line 72244: 07/05/12 10:37:47.678 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task17 = Users and Groups     Line 72245: 07/05/12 10:37:47.678 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task18 = Saved Reports List     Line 72246: 07/05/12 10:37:47.678 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task19 = Migration Templates     Line 72247: 07/05/12 10:37:47.679 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task20 = Monitor Spectrum Experts     Line 72248: 07/05/12 10:37:47.679 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task21 = Configure Autonomous Access Point Templates     Line 72249: 07/05/12 10:37:47.679 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task22 = Audit Trails     Line 72250: 07/05/12 10:37:47.680 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task23 = Monitor Handover Server     Line 72251: 07/05/12 10:37:47.680 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task24 = Client Location     Line 72252: 07/05/12 10:37:47.680 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task25 = Monitor Access Points     Line 72253: 07/05/12 10:37:47.680 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task26 = CleanAir Reports     Line 72254: 07/05/12 10:37:47.681 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task27 = Configure Ethernet Switches     Line 72255: 07/05/12 10:37:47.681 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task28 = Configure Ethernet Switch Ports     Line 72256: 07/05/12 10:37:47.681 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task29 = TACACS+ Servers     Line 72257: 07/05/12 10:37:47.682 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task30 = Autonomous AP Reports     Line 72258: 07/05/12 10:37:47.682 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task31 = Mobility Service Management     Line 72259: 07/05/12 10:37:47.682 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task32 = Performance Reports     Line 72260: 07/05/12 10:37:47.683 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task33 = Help Menu Access     Line 72261: 07/05/12 10:37:47.683 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task34 = Configure Controllers     Line 72262: 07/05/12 10:37:47.683 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task35 = MSAP Reports     Line 72263: 07/05/12 10:37:47.683 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task36 = Scheduled Tasks and Data Collection     Line 72264: 07/05/12 10:37:47.684 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task37 = Monitor Tags     Line 72265: 07/05/12 10:37:47.684 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task38 = Search Access     Line 72266: 07/05/12 10:37:47.684 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task39 = Scheduled Configuration Tasks     Line 72267: 07/05/12 10:37:47.685 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task40 = Configure WIPS Profiles     Line 72268: 07/05/12 10:37:47.685 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task41 = Client Reports     Line 72269: 07/05/12 10:37:47.685 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task42 = Services Menu Access     Line 72270: 07/05/12 10:37:47.686 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task43 = Configure Templates     Line 72271: 07/05/12 10:37:47.686 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task44 = System Settings     Line 72272: 07/05/12 10:37:47.686 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task45 = Report Launch Pad     Line 72273: 07/05/12 10:37:47.686 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task46 = Remove Clients     Line 72274: 07/05/12 10:37:47.687 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task47 = Configure Config Groups     Line 72275: 07/05/12 10:37:47.687 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task48 = Mesh Reports     Line 72276: 07/05/12 10:37:47.687 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task49 = High Availability Configuration     Line 72277: 07/05/12 10:37:47.688 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task50 = License Center     Line 72278: 07/05/12 10:37:47.688 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task51 = Lobby Ambassador Defaults Configuration     Line 72279: 07/05/12 10:37:47.688 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task52 = Monitor Controllers     Line 72280: 07/05/12 10:37:47.689 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task53 = Monitor Security     Line 72281: 07/05/12 10:37:47.689 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task54 = Monitor Menu Access     Line 72282: 07/05/12 10:37:47.689 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task55 = Track Clients     Line 72283: 07/05/12 10:37:47.690 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task56 = Monitor Interferers     Line 72284: 07/05/12 10:37:47.690 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task57 = Configure Switch Location Configuration Templates     Line 72285: 07/05/12 10:37:47.690 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task58 = Configure WiFi TDOA Receivers     Line 72286: 07/05/12 10:37:47.690 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task59 = TAC Case Attachment Tool     Line 72287: 07/05/12 10:37:47.691 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task60 = Handover Server Management     Line 72288: 07/05/12 10:37:47.691 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task61 = Voice Audit Report     Line 72289: 07/05/12 10:37:47.691 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task63 = Report Run History     Line 72290: 07/05/12 10:37:47.692 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task64 = Compliance Reports     Line 72291: 07/05/12 10:37:47.692 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task65 = Maps Read Only     Line 72292: 07/05/12 10:37:47.692 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task66 = Disable Clients     Line 72293: 07/05/12 10:37:47.693 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task67 = WIPS Service     Line 72294: 07/05/12 10:37:47.693 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task68 = Security Reports     Line 72295: 07/05/12 10:37:47.693 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task69 = Configure Spectrum Experts     Line 72296: 07/05/12 10:37:47.693 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task70 = Appliance     Line 72297: 07/05/12 10:37:47.694 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task71 = View Security Index Issues     Line 72298: 07/05/12 10:37:47.694 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task72 = Home Menu Access     Line 72299: 07/05/12 10:37:47.694 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task73 = Monitor WiFi TDOA Receivers     Line 72300: 07/05/12 10:37:47.695 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task74 = Health Monitor Details     Line 72301: 07/05/12 10:37:47.695 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task75 = ContextAware Reports     Line 72302: 07/05/12 10:37:47.695 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task76 = User Preferences     Line 72303: 07/05/12 10:37:47.696 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task77 = Guest Reports     Line 72304: 07/05/12 10:37:47.696 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task78 = Logging     Line 72305: 07/05/12 10:37:47.696 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task79 = Automated Feedback     Line 72306: 07/05/12 10:37:47.696 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task80 = Identity Search Engine     Line 72307: 07/05/12 10:37:47.697 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task81 = Delete and Clear Alerts     Line 72308: 07/05/12 10:37:47.697 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task82 = Email Notification     Line 72309: 07/05/12 10:37:47.697 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task83 = License Check     Line 72310: 07/05/12 10:37:47.698 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task84 = Rogue Location     Line 72311: 07/05/12 10:37:47.698 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task85 = Identify Unknown Users     Line 72312: 07/05/12 10:37:47.698 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task86 = Reports Menu Access     Line 72313: 07/05/12 10:37:47.699 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task87 = Configure ISE Servers     Line 72314: 07/05/12 10:37:47.699 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task88 = Tools Menu Access     Line 72315: 07/05/12 10:37:47.699 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task89 = Config Audit Dashboard     Line 72316: 07/05/12 10:37:47.700 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task90 = Virtual Domain Management     Line 72317: 07/05/12 10:37:47.700 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task91 = Monitor Ethernet Switches     Line 72318: 07/05/12 10:37:47.700 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task92 = Configure Choke Points     Line 72319: 07/05/12 10:37:47.700 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task93 = RRM Dashboard     Line 72320: 07/05/12 10:37:47.701 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task94 = Diagnostic Information     Line 72321: 07/05/12 10:37:47.701 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task95 = Planning Mode     Line 72322: 07/05/12 10:37:47.701 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task96 = Configure Menu Access     Line 72323: 07/05/12 10:37:47.702 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task97 = Ack and Unack Security Index Issues     Line 72324: 07/05/12 10:37:47.702 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task98 = Pick and Unpick Alerts     Line 72325: 07/05/12 10:37:47.702 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task99 = Ack and Unack Alerts     Line 72326: 07/05/12 10:37:47.703 TRACE [aaa] [http-443-14] [RADIUS AAAModule] adding task: task100 = Auto Provisioning     Line 72327: 07/05/12 10:37:47.703 TRACE [aaa] [http-443-14] [RADIUS AAAModule] Adding Basic and GLOBAL permissions for user     Line 72328: 07/05/12 10:37:47.703 TRACE [aaa] [http-443-14] [RADIUS AAAModule] Total permissions for user user : tasks -->>  102 : roles -->> 1 : virtual-domains -->> 1     Line 72329: 07/05/12 10:37:47.706 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72330: 07/05/12 10:37:47.707 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72331: 07/05/12 10:37:47.708 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72332: 07/05/12 10:37:47.710 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72333: 07/05/12 10:37:47.711 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72334: 07/05/12 10:37:47.712 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72335: 07/05/12 10:37:47.714 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72336: 07/05/12 10:37:47.715 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72337: 07/05/12 10:37:47.717 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72338: 07/05/12 10:37:47.719 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72339: 07/05/12 10:37:47.720 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72340: 07/05/12 10:37:47.722 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72341: 07/05/12 10:37:47.723 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72342: 07/05/12 10:37:47.728 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72343: 07/05/12 10:37:47.730 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72344: 07/05/12 10:37:47.731 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72345: 07/05/12 10:37:47.732 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72346: 07/05/12 10:37:47.734 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72347: 07/05/12 10:37:47.735 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72348: 07/05/12 10:37:47.737 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72349: 07/05/12 10:37:47.738 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72350: 07/05/12 10:37:47.739 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72351: 07/05/12 10:37:47.742 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72354: 07/05/12 10:37:47.744 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72355: 07/05/12 10:37:47.745 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72356: 07/05/12 10:37:47.747 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72357: 07/05/12 10:37:47.748 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72358: 07/05/12 10:37:47.750 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72359: 07/05/12 10:37:47.751 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72360: 07/05/12 10:37:47.752 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72361: 07/05/12 10:37:47.754 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72362: 07/05/12 10:37:47.758 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72363: 07/05/12 10:37:47.759 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72364: 07/05/12 10:37:47.760 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72365: 07/05/12 10:37:47.773 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72366: 07/05/12 10:37:47.774 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72367: 07/05/12 10:37:47.775 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72368: 07/05/12 10:37:47.777 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72369: 07/05/12 10:37:47.778 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72370: 07/05/12 10:37:47.779 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72371: 07/05/12 10:37:47.781 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72372: 07/05/12 10:37:47.782 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72373: 07/05/12 10:37:47.783 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72374: 07/05/12 10:37:47.793 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72375: 07/05/12 10:37:47.795 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72376: 07/05/12 10:37:47.796 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72377: 07/05/12 10:37:47.797 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72378: 07/05/12 10:37:47.799 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72379: 07/05/12 10:37:47.800 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72380: 07/05/12 10:37:47.801 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72381: 07/05/12 10:37:47.803 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72382: 07/05/12 10:37:47.804 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72383: 07/05/12 10:37:47.806 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72384: 07/05/12 10:37:47.808 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72385: 07/05/12 10:37:47.809 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72386: 07/05/12 10:37:47.810 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72387: 07/05/12 10:37:47.811 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72388: 07/05/12 10:37:47.813 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72389: 07/05/12 10:37:47.814 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72390: 07/05/12 10:37:47.815 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72391: 07/05/12 10:37:47.816 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72392: 07/05/12 10:37:47.818 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72393: 07/05/12 10:37:47.819 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72394: 07/05/12 10:37:47.820 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72395: 07/05/12 10:37:47.822 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72396: 07/05/12 10:37:47.824 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72397: 07/05/12 10:37:47.825 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72398: 07/05/12 10:37:47.826 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72399: 07/05/12 10:37:47.828 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72400: 07/05/12 10:37:47.829 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72401: 07/05/12 10:37:47.830 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72402: 07/05/12 10:37:47.831 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72403: 07/05/12 10:37:47.833 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72404: 07/05/12 10:37:47.834 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72405: 07/05/12 10:37:47.835 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72406: 07/05/12 10:37:47.836 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72407: 07/05/12 10:37:47.838 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72408: 07/05/12 10:37:47.839 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72409: 07/05/12 10:37:47.840 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72410: 07/05/12 10:37:47.842 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72411: 07/05/12 10:37:47.843 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72412: 07/05/12 10:37:47.844 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72413: 07/05/12 10:37:47.846 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72414: 07/05/12 10:37:47.847 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72415: 07/05/12 10:37:47.848 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72416: 07/05/12 10:37:47.849 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72417: 07/05/12 10:37:47.851 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72418: 07/05/12 10:37:47.852 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72419: 07/05/12 10:37:47.853 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72420: 07/05/12 10:37:47.854 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72421: 07/05/12 10:37:47.856 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72422: 07/05/12 10:37:47.857 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72423: 07/05/12 10:37:47.858 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72424: 07/05/12 10:37:47.860 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72425: 07/05/12 10:37:47.862 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72426: 07/05/12 10:37:47.863 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72427: 07/05/12 10:37:47.865 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72428: 07/05/12 10:37:47.866 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72429: 07/05/12 10:37:47.867 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72430: 07/05/12 10:37:47.868 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72431: 07/05/12 10:37:47.870 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72432: 07/05/12 10:37:47.873 INFO  [config] [http-443-14] readPrivilegeByName() successful     Line 72433: 07/05/12 10:37:47.932 INFO  [system] [http-443-14] The Logout Session ID is: BB1C9FA8DA1F62E6FAA5881FB956F677     Line 72434: 07/05/12 10:37:47.932 INFO  [system] [http-443-14] Exiting WebuiSessionListener:sessionDestroyed     Line 72435: 07/05/12 10:37:48.163 INFO  [system] [http-443-14] Entering updateUserContainer     Line 72436: 07/05/12 10:37:48.164 INFO  [system] [http-443-14] User:  user  has logged in successfully from IP:  64.102.157.21  on  Thu Jul 05 10:37:48 EDT 2012     Line 72437: 07/05/12 10:37:48.164 INFO  [system] [http-443-14] The Login Session ID is:  516B0D91539D72AC85A7AD577EAF2AA7     Line 72438: 07/05/12 10:37:48.165 INFO  [system] [http-443-14] Setting privileges and tasks.     Line 72439: 07/05/12 10:37:48.168 INFO  [system] [http-443-14] Getting the defaultPartition     Line 72461: 07/05/12 10:37:55.412 INFO  [system] [http-443-14] Entering updateUserContainer     Line 72462: 07/05/12 10:37:55.413 INFO  [system] [http-443-14] User:  user  has logged in successfully from IP:  64.102.157.21  on  Thu Jul 05 10:37:55 EDT 2012     Line 72463: 07/05/12 10:37:55.413 INFO  [system] [http-443-14] The Login Session ID is:  516B0D91539D72AC85A7AD577EAF2AA7     Line 72464: 07/05/12 10:37:55.413 INFO  [system] [http-443-14] Setting privileges and tasks.     Line 72465: 07/05/12 10:37:55.416 INFO  [system] [http-443-14] Getting the defaultPartition ... View more