ACS 4.1 fails to record command to log file

Unanswered Question
Jan 2nd, 2008

Hi

I am having problems making ACS 4.1 record user command information to the tacacs+ log file. I have set both the cmd and cmd-arg fields for the log but all I get is this:

Date Time User-Name Group-Name Caller-Id Acct-Flags elapsed_time service task_id addr NAS-Portname NAS-IP-Address cmd

01/02/2008 16:48:55 mark Group 1 10.11.128.82 start .. shell 269 .. tty1 10.11.2.42 ..

I have attached two files one csv with the log contents and the other showing the AAA config and the log configuration on the ACS server. Any thoughts would be appreciated.

Regards,

Mark

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
cisco24x7 Wed, 01/02/2008 - 16:45

This is a known issue with ACS. You need

to upgrade the ACS 4.1 with a hotfix and

the accounting will be fixed.

CCIE Security

mark.armstrong@... Mon, 01/07/2008 - 03:14

Hi

I have applied the patch Acs-4.1.1.23.4-SW and the version in the acs console is reported as Release 4.1(1) Build 23 Patch 4

Unfortunatly no detail is being written to tacacs+ for command accounting.

Any thoughts more than welcome.

Mark

mark.armstrong@... Mon, 01/07/2008 - 03:27

Hi

Found the problem :-) Looking in the wrong log. You would have thought that the detail would be written to the accounting log !! But no it goes into the administration log.

Happy now, Thanks for all the help

Mark

Actions

This Discussion