aaa accounting under acs

Unanswered Question
Jul 20th, 2007

Hi

I use acs 4.1 under "Reports and Activity" -> "TACACS+ Accounting" I can see some start/stop reportings.

But under "Reports and Activity" -> "TACACS+ Administration" I can't see anything...

What do I have to configure at least???

Thanx

bb

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (3 ratings)
Loading.
somishra Fri, 07/20/2007 - 02:10

Hi,

I believe you are hitting a bug. The bug ID is CSCsg97429: TACACS+ Command Accounting does not work in ACS 4.1(1) Build 23.

The patch for bug

CSCsg97429 is ready and files are available on cisco.com.

Hope this helps,

Soumya

elliott.fougman Fri, 07/20/2007 - 06:48

Ensure you have the relevant config on you routers switches. It should look omething like this

aaa new-model

aaa authentication login default group tacacs+ enable

aaa authentication enable default group tacacs+ enable

aaa authorization exec default group tacacs+ none

aaa authorization commands 1 default group tacacs+ if-authenticated

aaa authorization commands 15 default group tacacs+ if-authenticated

aaa accounting exec default start-stop group tacacs+

aaa accounting commands 1 default start-stop group tacacs+

aaa accounting commands 15 default start-stop group tacacs+

Hope this helps.

Elliott

j-mccarthy Tue, 10/02/2007 - 22:28

Hi,

You guys rock !! This is my first time using this forum and you have solved a problem that had me tearing my hair out and questioning my sanity.

A BIG thank you to Somishra and Jghambir for your responses to this topic.

You are bang on with both the diagnosis and resolution.

Jagdeep Gambhir Fri, 07/20/2007 - 07:32

BB,

This is a known issue, you need to apply patch ACS 4.1.1.23.5 to fix the issue.

Patch for appliance is available on

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-soleng-3des

Patch name : ACS SE 4.1.1.23.5 accumulative patch

Patch for acs windows is availble on

http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-3des')">http://www.cisco.com/cgi-bin/tablebuild.pl/acs-win-3des&lt

Patch Name : ACS 4.1.1.23.5 accumulative patch

That should fix the issue,

Regards,

Jagdeep

Note: If that answers your question, then please mark this thread as resolved, so that others can benefit from it.

Jagdeep Gambhir Fri, 07/20/2007 - 07:34

Also make sure that you apply patch on remote agent else communication between acs and RA will break.

Regards,

~JG

darpotter Sun, 07/22/2007 - 22:57

If you encounter problems with the remote agent take a look at extraxi csvsync. This uses http to collect CSVs in bulk via CSAdmin and as such requires no agents or dedicated servers.

www.extraxi.com/csvsync.htm

Actions

This Discussion