01-02-2008 09:02 AM - edited 02-21-2020 10:20 AM
Hi
I am having problems making ACS 4.1 record user command information to the tacacs+ log file. I have set both the cmd and cmd-arg fields for the log but all I get is this:
Date Time User-Name Group-Name Caller-Id Acct-Flags elapsed_time service task_id addr NAS-Portname NAS-IP-Address cmd
01/02/2008 16:48:55 mark Group 1 10.11.128.82 start .. shell 269 .. tty1 10.11.2.42 ..
I have attached two files one csv with the log contents and the other showing the AAA config and the log configuration on the ACS server. Any thoughts would be appreciated.
Regards,
Mark
01-02-2008 04:45 PM
This is a known issue with ACS. You need
to upgrade the ACS 4.1 with a hotfix and
the accounting will be fixed.
CCIE Security
01-07-2008 03:14 AM
Hi
I have applied the patch Acs-4.1.1.23.4-SW and the version in the acs console is reported as Release 4.1(1) Build 23 Patch 4
Unfortunatly no detail is being written to tacacs+ for command accounting.
Any thoughts more than welcome.
Mark
01-07-2008 03:27 AM
Hi
Found the problem :-) Looking in the wrong log. You would have thought that the detail would be written to the accounting log !! But no it goes into the administration log.
Happy now, Thanks for all the help
Mark
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: