Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
1467
Views
0
Helpful
10
Replies

TACACS Replication Issue

rice.randy
Level 1
Level 1

‎07-14-2008 05:54 AM - edited ‎03-10-2019 03:58 PM

Trying to replicate from Master TACACS server to TACACS3 and started gettin this error:

07/14/2008 09:39:52 s0adcciscosec1 WARNING ACS 's0adcciscosec3' not replied to replication request - possibly short timeout or dead ....

Time out is set for 10 mins on AISCISCOSEC3. We have two other servers in replication with the Master and they are working fine.

Labels:
0 Helpful
10 Replies 10

Jagdeep Gambhir
Level 10
Level 10

‎07-14-2008 07:14 AM

Randy,

Please make sure that replication is setup correctly.

1) Make sure that you are not replicating over NAT. Replication over NAT does not work because the IP is used as part of the server authentication

2) Next, check to make sure that you are not sending or receiving the distribution table. On the primary server, the distribution table should not be checked in the send list, and on the secondary, the distribution table should not be checked for receive.

3) Then I would like you to check in the secondary server's partner list, to make sure that the primary is not listed. You should not enter the primary server into the partner list on the secondary server. However, the primary server should have all secondary servers listed in its partner list.

4) Ensure that the secondary server has it's replication scheduling set to "manual".

5) Please verify that your servers are all running exactly the same ACS version and build.

6) Also let me know if we have any firewall in between two acs servers.

Regards,

~JG

Do rate helpful posts

0 Helpful

rice.randy
Level 1
Level 1

‎07-14-2008 09:18 AM

Additional info: from Master (s0adcciscosec1)

07/14/2008 12:57:31 s0adcciscosec1 INFO Replication to ACS 's0adcciscosec2' was successful

07/14/2008 12:56:43 s0adcciscosec1 INFO Replication to ACS 'n0brtciscosec1' was successful

07/14/2008 12:55:59 s0adcciscosec1 INFO Outbound replication cycle starting...

07/14/2008 12:42:15 s0adcciscosec1 INFO Replication to ACS 's0adcciscosec2' was successful

07/14/2008 12:41:19 s0adcciscosec1 INFO Replication to ACS 'n0brtciscosec1' was successful

07/14/2008 12:39:39 s0adcciscosec1 INFO Outbound replication cycle starting...

07/14/2008 11:40:50 s0adcciscosec1 INFO Outbound EAP-FAST Master Key replication cycle completed

07/14/2008 11:40:50 s0adcciscosec1 WARNING Cannot replicate to 's0adcciscosec3' - server not responding

07/14/2008 11:40:35 s0adcciscosec1 INFO Replication to ACS 's0adcciscosec2' was successful

07/14/2008 11:40:12 s0adcciscosec1 INFO Replication to ACS 'n0brtciscosec1' was successful

07/14/2008 11:39:45 s0adcciscosec1 INFO Outbound EAP-FAST Master Key replication cycle starting...

07/14/2008 11:25:05 s0adcciscosec1 INFO Replication to ACS 's0adcciscosec2' was successful

07/14/2008 11:24:19 s0adcciscosec1 INFO Replication to ACS 'n0brtciscosec1' was successful

07/14/2008 11:23:38 s0adcciscosec1 WARNING ACS 's0adcciscosec3' not replied to replication request - possibly short timeout or dead

07/14/2008 11:23:27 s0adcciscosec1 INFO Outbound replication cycle starting...

AdditionalInfo from Secondary (s0adcciscosec3)

07/14/2008 12:57:30 s0adcciscosec3 INFO Inbound database replication from ACS 's0adcciscosec1' started

07/14/2008 12:42:16 s0adcciscosec3 INFO Inbound database replication from ACS 's0adcciscosec1' started

In response to you prev post:

1. No NAT being used.

2. Unchecked the Distribution List boxes on both servers(Primary and Secondary), still failed.

3.Running same versions:

Master: Release 4.1(1) Build 23 Patch 4

Secondary :Release 4.1(1) Build 23 Patch 4

4. No firewalls

0 Helpful

rice.randy
Level 1
Level 1

‎07-15-2008 05:39 AM

4) Ensure that the secondary server has it's replication scheduling set to "manual".

The secondary is set to manual replication

6) Also let me know if we have any firewall in between two acs servers.

No firewalls between servers

0 Helpful

Jagdeep Gambhir
Level 10
Level 10
In response to rice.randy

‎07-15-2008 06:05 AM

Is it acs appliance or acs windows ?

0 Helpful

rice.randy
Level 1
Level 1

‎07-15-2008 06:12 AM

ACS Windows 2003 Server Service Pak 2

0 Helpful

Jagdeep Gambhir
Level 10
Level 10
In response to rice.randy

‎07-15-2008 06:37 AM

Rice,

Okay, then that must be running on multiple processors.

Please note that replication will not work incase your server is running on more then two processors.

Please check this bug id CSCsk12033

Regards,

~JG

Do rate helpful posts

0 Helpful

rice.randy
Level 1
Level 1

‎07-16-2008 09:11 AM

s0adcciscosec1 (Primary Server) Release 4.1(1) Build 23 Patch 4

s0adcciscosec3 (Secondary) Release 4.1(1) Build 23 Patch 4

Primary Server

Windows 2003 Server SP1

Secondary Server

Windows 2003 Server SP2

No changes or modifications that I know of.

0 Helpful

rice.randy
Level 1
Level 1

‎07-16-2008 09:17 AM

We have two other Secondary Servers that are replicating fine and They are Windows 2003 Server SP1

0 Helpful

Jagdeep Gambhir
Level 10
Level 10
In response to rice.randy

‎07-16-2008 10:36 AM

Randy,

SP is not a issue. How many processors we have on non working acs. You can check it by Start--->Run--->msinfo32 ..

This file will show the no. of processors. If this is more then two, then we are hitting that bug.

Regards,

~JG

0 Helpful

siva_mps
Level 1
Level 1
In response to Jagdeep Gambhir

‎01-21-2009 01:44 AM

I have the same problem but i am using ACS V3.3. There is site to site VPN tunnel configured using ASA between the ACS.

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents