2 ACS with 2 CRA

Unanswered Question
Aug 6th, 2008

Hi All,

We have installed 2 ACS with two CRA installed in AD1 & AD2.

The problem is when the CRA1 which is installed in AD1 is active everything working fine with both the ACS.

But when the CRA1 is down & CRA2 is up which is installed in AD2 the authentication fails.

Can anyone help in this regard? I have the logs if required I can upload the same.

Thanks in advance

Sachi

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jagdeep Gambhir Wed, 08/06/2008 - 10:28

Please post cswinagent logs from non working remote agent.

You need to go to server where remote agent is installed.

Here is the location of the logs

C:\Program Files\Cisco\CiscoSecure ACS Agent\CSWinAgent\Logs

Regards,

~JG

Jagdeep Gambhir Wed, 08/06/2008 - 12:52

Most likely this is a permission issue.

CSWinAgent 08/06/2008 12:45:52 A 0048 3860 NTLIB: Attempting Windows authentication for user s.shetty

CSWinAgent 08/06/2008 12:45:52 A 0048 3860 NTLIB: Windows authentication FAILED (error 6L)

CSWinAgent 08/06/2008 12:45:52 A 0436 3860 RPC: NT_MSCHAPAuthenticateUser reply sent

CSWinAgent 08/06/2008 12:46:16 A 0371 3860 RPC: NT_MSCHAPAuthenticateUser received

CSWinAgent 08/06/2008 12:46:16 A 0048 3860 NTLIB: Attempting Windows authentication for user s.shetty

CSWinAgent 08/06/2008 12:46:16 A 0048 3860 NTLIB: Windows authentication FAILED (error 6L)

The accounting running remote agent service do not have admin rights . Make sure that account should have special priv like act as a part of OS and logon as service in ur sec policy.

If you are already using admin account to run it then try using local system.

Regards,

~JG

Actions

This Discussion