I seem to have a problem with Ciscoworks LMS 3.0 after I ran the december 2007 update on it.
I used to have a working connection with my TACACS server for authentication. But after the december 2007 update, the ACS configuration screen is red and says:
CiscoWorks System Identity User Configuation in ACS --> Not all privileges assigned.
Everything seems to be ok, except for the
Campus manager 5.0.2 module.
When I click on Campus manager in the portal, I get:
You do not have the roles required to access this portlet
And in TACACS (which is version 3.2 by the way) I get a log entry in Failed Attempts:
06/02/2008 15:09:52 Author failed jeroenz Administrators -->
Service denied service=CM authorize-device=[xxx.xxx.xxx.xxx]
When I look at the TACACS group settings for Administrators, every Ciscoworks module has his own shared profile component, on which you can select Super Admin as a role for Ciscoview, cwhp, DFM, IPM and the Portal. However, Campus manager is not one of the components on this page, so I can't assign rights to it.
The odd thing is that during the installation of the december 2007 update, I don't think i got the question about something like: The application that you are installing requires new tasks to be registered with ACS (as it says in the manual)
I tried rebooting the TACACS server, reinstalling the december 2007 update, and reintegrating Ciscoworks with ACS, but nothing helps.
Any ideas would be greatly appreciated.
Run NMSROOT/bin/perl NMSROOT/bin/AcsRegCli.pl -listNotRegApp. That will list the applications not registered. Then, for each app, run NMSROOT/bin/perl NMSROOT/bin/AcsRegCli.pl -register APP. Once all the apps are registered, update your Administrators group so that Super Admin is assigned to the new apps, then restart dmgtd and ACS.