About Wyle_

Wyle_ · ‎02-05-2009

I'm looking to upgrademy SA-4000 from 6.0R5 to 6.3R2 but my lab unit (SA3000) won't support the upgrade. How do I get a copy of the Juniper Installer Service to deploy to my users before hand? I can't just upgrade since I have about 400 clients connected almost all the time.

Wyle_ · ‎01-14-2009

When adding SAM resources there are two places to enter server names/IP's. You can add them in the role itself where it says: For client applications not listed above, specify what servers (if any) should be allowed. These servers will be accessible to any client application. And you can add them in Users>Resource Policies>SAM Policies>Access. My question is, do you have to add them to both or will either/or suffice?

Wyle_ · ‎01-14-2009

This is solved. I had to add the following services to the SAM role in the Bypass Applications area. sqlsrvr.exe jrunsvc.exe jrun.exe.

Wyle_ · ‎01-13-2009

I don't know if that is possible. I know you can do it the opposite way. You can have them login to the IVE with AD credentials and then pass those through to an intranet site.

Wyle_ · ‎01-13-2009

I have a web developer who recently went from Network Connect back to SAM (Don't ask why please ). Now, here is the message she sent me explaining the situation: After I VPN in, I open a browser window and try to hit the local instance of my website and I canÕt get through. I then logged in to my Cold Fusion Administrator to verify my data source and the connection fails. If I disconnect from VPN my CF data source connects successfully and I can hit the local instance of my website. If I stay logged in to my website and log back in to the VPN my local instance stays connected. I even had her just exit the SAM and leave the IVE page signed in. It didn't change anything. Our NC used split tunneling...does SAM have a feature like that?

Wyle_ · ‎01-13-2009

@haas wrote: Is this over network connect or SAM? I am trying to get SAM to work and having a hell of a time. What is this netapp document you are mentioning? Haas, make sure when specify the file server in the SAM policy, you use the NetBIOS name instead of IP address. You can also specify the ports (139 & 445). Make sure it is specified in the role and the SAM policies page both.

Wyle_ · ‎11-19-2008

I started getting numerous errors yesterday on my IVE. Nothing had changed recently and I confirmed it wasn't due to heavy traffic and the firewall is fine. Minor NET24467 2008-11-18 16:54:17 - ive - [127.0.0.1] System()[] - internal gateway 'x.x.x.x' up. Minor NET24467 2008-11-18 14:45:13 - ive - [127.0.0.1] System()[] - internal gateway 'x.x.x.x' up. Minor NET24467 2008-11-18 09:26:18 - ive - [127.0.0.1] System()[] - internal gateway 'x.x.x.x' up. Minor NET24467 2008-11-18 09:07:51 - ive - [127.0.0.1] System()[] - internal gateway 'x.x.x.x' up. Minor NET24467 2008-11-18 07:42:03 - ive - [127.0.0.1] System()[] - internal gateway 'x.x.x.x' up. Everytime this happens all traffice slows down to a crawl for about 5-10 minutes and the IVE doesn't log user/usage stats for that period. I did notice the User Access log was full, but emptied it and it still happened last night once. I also noticed this event from yesterday: Critical 2008/11/18 09:19:01 - [127.0.0.1] - System()[] - Trace Info : * assertion in assert.cc:281, void DSLogSignalHandler(int), SIGSEGV, 13 frames [0xffffe420] /home/bin/web [0x807384e] [0xffffe420] /home/bin/web [0x8068e5f] /home/bin/web [0x8069228] /home/bin/web [0x8069439] /home/builds/bld13073/install/lib/libdsplibs.so [0xb77e69d6] /home/builds/bld13073/install/lib/libdsplibs.so(_ZN9DSEvntFds13runDispatcherEv+0x65) [0xb77e6c8d] /home/bin/web [0x8073df9] /lib/libc.so.6(__libc_start_main+0xa1) [0xb7c452d1] /home/bin/web [0x8060885] 0012a000-0013f000 r-xp 00000000 07:08 112742 /lib/ld-linux.so.2 0013f000-00140000 r--p 00015000 07:08 112742 /lib/ld-linux.so.2 00140000-00141000 rw-p 00016000 07:08 112742 /lib/ld-linux.so.2 0026f000-00271000 r-xp 00000000 07:08 112736 /lib/libuuid.so.1 00271000-00272000 rw-p 00001000 07:08 112736 /lib/libuuid.so.1 00294000-00296000 r-xp 00000000 07:08 ......(its very long, I won't post it all :) ) Critical 2008/11/18 09:19:01 - [127.0.0.1] - System()[] - Caught signal 11 (SIGSEGV) Critical 2008/11/18 09:18:37 - System()[] - Watchdog restarting services (ws). What does that mean?

Wyle_ · ‎10-24-2008

Yep. I was dealing with these errors for a while until I reduced the MTU size on my external port of my SA-4000 to 1400. That lasted about 4 months. Now everybody who installs SP3 for WinXP is getting NC errors of various types including that one. Its especially bad after a reboot. Some have to continually re-install the components to just be able to connect via NC at all.

Wyle_ · ‎07-14-2008

Create an Auth Server with: LDAP Server IP and Port 389. LDAP Server Type = Active Directory. Fill in the rest of the info it asks for. Authentication: Admin DN: the FQDN of your service account used to query LDAP. User Entries: Base DN: dc=domainname,dc=com Filter: samAccountname=<USERNAME> Group membership: Base DN: dc=domainname,dc=com Filter: cn=<GROUPNAME> Etc. Etc. Message Edited by Wyle on 07-14-2008 10:59 AM

Wyle_ · ‎07-14-2008

In the past, I have rolled out the Installer Service package as a Group Policy via Active Directory to all my laptop clients. But we still get errors with NC. Completely random type stuff too. Mostly 2379x errors.

Wyle_ · ‎07-07-2008

This has been fixed. Basically in the auth server it had SamAccountname=<USERNAME> for authentication and 6.0R5 doesn't like that. JTAC had me change it to SamAccountname=<USER> and voila! Problem fixed.

Wyle_ · ‎06-06-2008

You can open a case with JTAC. Message Edited by Wyle on 07-07-2008 04:32 PM

Wyle_ · ‎06-06-2008

Gentlemen, thanks for the info. I've always used the Administrator for the domain. It was set up like that by my predecessor. I even tried other accounts, domain admins, users etc. No joy. It worked in 5.5. Config didn't change between upgrades.

Wyle_ · ‎05-22-2008

Have you enabled Persistent Session in Roles>Default Options>Session Options? That might help.

Wyle_ · ‎05-22-2008

Seems that the IVE OS's are full of bugs. Everytime I have one, the solution from Juniper is always to upgrade to another version. Then, it might fix it (most of the time it doesn't), and it breaks something else. I've had a case open with JTAC over Network Connect issues for almost a year and have upgraded and rolled back over 5 times to try and fix it. Started when I went to 5.3 and hasn't been right since. Currently I am at 6.0R5. Message Edited by Wyle on 07-07-2008 04:33 PM

Wyle_ · ‎05-19-2008

Originally my SA-4000 was running 5.3 code and password management worked. Upgraded to 5.5 OS and the login banner for password expiration stopped working (among other things ) but users could still change their password under preferences. In order to fix a network connect issue with 5.5, I upgraded to 6.1R2-1 (latest version). It seems to have restored my Password Expiration warning (still hasn't fixed my NC issue), but now it refuses to let the users change their password. So now when a user logs in and it says "Password Expired, you must change it" it won't let them. It just tells them "Could not change password". I'm using LDAPS, the certs on my Auth servers are valid, and my CA is trusted by the IVE. I'm not sure what else to do at this point.

How do I get a copy of the Installer Service

Adding SAM resources

Re: Local instance of website inaccessible when SA...

Re: Pass Username/Password from another page

Local instance of website inaccessible when SAM is...

Re: Drive mapping problem

Network Error on SA4000

Re: NC Error Message 23712

Re: Integrated IVE with AD

Re: How do you deploy new versions of NetConnect ?

Re: Users cannot change password in IVE

Re: Juniper Net Connect can't connect

Re: Users cannot change password in IVE

Re: Network Connect issues with DNS and Sharepoint

Re: Users cannot change password in IVE

Users cannot change password in IVE