Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Paul Jeffrey
Stats
Member since
07-04-2012
50
Posts
24
Helpful
8
Solutions
12-18-2017
12:48 AM
Hi Ashot Is this running the virtual appliance or on Windows? The newscale.properties file should be under RequestCenter.war\WEB-INF\classes\config\newscale.properties However, the backdoor should be enabled by default (unless this has been changed in the appliance) and should use the same parameters as older versions, I have confirmed this on my 12.1 Windows instance. Unfortunately I'd rather not share the backdoor URL directly on this post as it could pose a security risk, but you can message me directly if you need it. Regards, Paul
... View more
Created by
Paul Jeffrey
in Multicloud Management
in Multicloud Management
07-17-2017
07:18 AM
07-17-2017
07:18 AM
Hi Michael Thank you for the overview, will certainly need to look at the approach for application deployment/configuration if going the agent-less route based on your additional note. Regards, Paul
... View more
Created by
Paul Jeffrey
in Multicloud Management
in Multicloud Management
07-17-2017
12:54 AM
07-17-2017
12:54 AM
Hi Naveen Thanks, I was able to configure the service without an agent, I think more of what the customer was looking to understand is what the different capabilities are between the agent and agent-less service. We have however gotten a response on an internal mailer which seems to help out. Regards, Paul
... View more
Created by
Paul Jeffrey
in Multicloud Management
in Multicloud Management
07-04-2017
03:25 AM
07-04-2017
03:25 AM
Hi All Is one able to perform a CloudCenter deployment without making use of the agent? If so, what are the limitations of not using the agent? Reason for the question is that the customer we are deploying at has some very strict security requirements and has concerns on the agent being able to execute unwanted commands within the environment. Thanks in advance, Paul
... View more
Labels:
Created by
Paul Jeffrey
in Other Cloud Topics
in Other Cloud Topics
06-29-2017
02:49 AM
06-29-2017
02:49 AM
Hi Mike To this question: With this configuration ( MCHE\#LoginId#) I should login to PSC winth username "michal.rzepecki". Am I right? When I try to do this following loggs are collected: Only if you are using sAMAccountName as the LoginId mapping, I see you are currently using UPN, if you use UPN then you could try only use #LoginId#, if you leave the EUABindDN as is then try change your directory mapping to use sAMAccountName as the Login ID, also I'm not sure if this has an effect, but we generally make the Person Identification the same as the Login ID, so try update that to either the UPN or sAMAccountName depending on the approach you use. However, based on the logs it almost looks the authentication step is working but the import is failing, so you can try update the Person Identification as I mentioned above, if that fails then try go the sAMAccountName route instead of UPN and see if that works. Regards, Paul
... View more
Created by
Paul Jeffrey
in Other Cloud Topics
in Other Cloud Topics
06-28-2017
05:01 AM
06-28-2017
05:01 AM
Hi Mike So regarding the EUA Bind DN, since you are mapping to UPN you would only configure this as #LoginId# with no domain prefix, if you were using sAMAccountName then you would include the domain prefix - what username are you entering in PSC when logging in? Secondly, I would enable the directory debugging and then perform a search for the user under Directory Mappings to make sure all data is coming through successfully, if any of the top attributes were missing or not mapped correctly then the person import operation would fail. Lastly, the server.log would give you a lot more detail, you can find this under the Administration > Utilities section. NTP would probably need to be done on the OS level as root, I don't think PSC specifically has this option. Regard,s Paul
... View more
Created by
Paul Jeffrey
in Other Cloud Topics
in Other Cloud Topics
06-27-2017
05:15 AM
06-27-2017
05:15 AM
Hi Mike #LoginId# is a variable that is replaced with the login details of which ever user is logging in at the time, therefore in your EUA Bind DN you would simply just configure the value #LoginId#, this is then what's used to authenticate the user at login time. I can't see any obvious issues with the mappings at this point, but what you could do is enable directory integration debugging in administration (Administration > Debugging tab on the right) - this will then allow you to test your mappings and ensure they are returning data. Also ensure that the global setting under administration is enabled for directory integration as this is disabled by default. Lastly, if you are still facing issues I would refer to the server.log files (should be able to find this under Administration > Utilities). Could you also confirm what version of PSC you are using? Regards, Paul
... View more
Created by
Paul Jeffrey
in Other Cloud Topics
in Other Cloud Topics
06-27-2017
02:27 AM
06-27-2017
02:27 AM
Hi Mike The login event will require at least two steps: Step 1: Either SSO or External Authentication Step 2: Person Import - This is required to create the person object in PSC and the login event will not complete without this. Step 3 (OPTIONAL): Import Manager - This can be used to import the manager based on the person's supervisor field mapping. The BindDN for the External Authentication is slightly different, this is used to authenticate the user that is logging in, this is typically set to #AnyDomain#\#LoginId# where #LoginId# is substituted with the username entered on the login screen. However, I see you are using UPN for your Login ID, therefore you would only need to configure #LoginId# for your External Authentication event. If you are still experiencing issues after that please post some screenshots of your config for reference. Regards, Paul
... View more
Created by
Paul Jeffrey
in Other Cloud Topics
in Other Cloud Topics
06-27-2017
12:15 AM
06-27-2017
12:15 AM
Hi Mike The backdoor login is something that is generally kept private and only admins or support teams should know about, in addition you can change what the backdoor URL is and also only limit it to the admin account thereby prevent any of the users to log in. This 'New Password' would only ever be used if for some reason you disabled you login events and external authentication/sso - not something one would typically do if they had AD integration enabled - If integration with the AD does go down (for networking or other reasons) then users would be able to log into the system at all, it would not fall back to the local password - in the this scenario only the admin who knows about this backdoor URL would be able to login. In short, we've been using the sAMAccountName mapping for this attribute for several years on our implementations and not had any issues, it is just a case of ensuring only the correct users can access the backdoor URL. Regards, Paul
... View more
Created by
Paul Jeffrey
in Other Cloud Topics
in Other Cloud Topics
06-26-2017
10:59 PM
06-26-2017
10:59 PM
Hi Michal This sets the default internal password for the user (we normally just map this to sAMAccountName). However ,you could make this any mapping or default value via an expression as one would generally use External Authentication or SSO for user sign in so this password would not be relevant unless using backdoor login. Regards, Paul
... View more
Created by
Paul Jeffrey
in Intelligent Automation
in Intelligent Automation
08-19-2015
05:19 AM
08-19-2015
05:19 AM
Hi Vignesh Are you performing GET or POST requests to the above URL? The 405 error indicates that you are not using the expected HTTP method. - Paul
... View more
08-19-2015
05:16 AM
Hi Bryan You could look at using PSSession and Invoke-Command within your powershell script as per this article: https://technet.microsoft.com/en-us/library/dd819505.aspx - Paul
... View more
07-15-2015
04:33 AM
Thanks for the info, it was however a brand new install of both applications on a new server 2012 instance using new databases, the issue only seems to be related to the AMQP connectivity between the applications, NSAPI and other interfaces all work correctly. Will see what the outcome of the TAC call is.
... View more
07-15-2015
12:22 AM
Hi Thanks for the response, this is a vanilla install of both PSC and PO so don't think it's related to that. The main thing that is unclear is how to go about doing the AMQP configuration from the beginning and how the Modulus and Exponent are calculated, I have also opened a TAC case to see if they can assist.
... View more
07-07-2015
08:57 AM
Hi All I have seen the new capabilities listed to use AMQP to route requests from PSC to CPO instead of using the ServiceLink and WebService methods in the last few releases but have not been able to get this working. I have seen that in the PSC 11 appliance the AMQP configuration is pre-configured to work with the internal orchestration components but I have not been successful in connecting a new PSC 11 install with a CPO instance. A new public key was created in Administration, however it's not clear to me how to calculate the modulus and exponent as well as how they relate to the GUID, when trying to connect CPO using the GUID for this key I get a error 400. I then tried using pre-existing modulus and exponent from the virtual appliance and got a slightly different error while trying to connect CPO: Error while decoding OAEP padding (full error attached). Is there anyone who has gotten this working or has step by step instructions to set this up? I have been through the guides but unfortunately there is just a very brief mention on where this configured and not how to go about it. Thanks in advance, Paul
... View more
Labels:
12-18-2017
Hi AshotIs this running the virtual appliance or on Windows? The
newscale.properties file should be ...
Created by
Paul Jeffrey
in Multicloud Management
07-17-2017
07-17-2017
Hi MichaelThank you for the overview, will certainly need to look at the
approach for application de...
Created by
Paul Jeffrey
in Multicloud Management
07-17-2017
07-17-2017
Hi NaveenThanks, I was able to configure the service without an agent, I
think more of what the cust...
Created by
Paul Jeffrey
in Multicloud Management
07-04-2017
07-04-2017
Hi AllIs one able to perform a CloudCenter deployment without making use
of the agent? If so, what a...
06-29-2017
Hi MikeTo this question:With this configuration (MCHE\#LoginId#) I
should login to PSC winth usernam...
06-28-2017
Hi MikeSo regarding the EUA Bind DN, since you are mapping to UPN you
would only configure this as #...
06-27-2017
Hi Mike#LoginId# is a variable that is replaced with the login details
of which ever user is logging...
06-27-2017
Hi MikeThe login event will require at least two steps:Step 1:Either SSO
or External AuthenticationS...
06-27-2017
Hi MikeThe backdoor login is something that is generally kept private
and only admins or support tea...
06-26-2017
Hi MichalThis sets the default internal password for the user (we
normally just map this to sAMAccou...
08-19-2015
Hi Vignesh Are you performing GET or POST requests to the above URL? The
405 error indicates that yo...
08-19-2015
Hi BryanYou could look at using PSSession and Invoke-Command within your
powershell script as per th...
07-15-2015
Thanks for the info, it was however a brand new install of both
applications on a new server 2012 in...
07-15-2015
HiThanks for the response, this is a vanilla install of both PSC and PO
so don't think it's related ...
Public Statistics
| Date Registered | 07-04-2012 10:33 PM |
| Date Last Visited | 09-07-2018 08:58 AM |
| Total Messages Posted | 50 |
| Total Helpful Votes Received | 24 |
Helpful Votes From
| User | Helpful Count |
|---|---|
| 1 | |
Anonymous
| 1 |
| 1 | |
| 1 | |
| 6 |
