2 ACS with 2 CRA

Unanswered Question
Aug 6th, 2008
User Badges:

Hi All,


We have installed 2 ACS with two CRA installed in AD1 & AD2.


The problem is when the CRA1 which is installed in AD1 is active everything working fine with both the ACS.

But when the CRA1 is down & CRA2 is up which is installed in AD2 the authentication fails.


Can anyone help in this regard? I have the logs if required I can upload the same.


Thanks in advance

Sachi

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Jagdeep Gambhir Wed, 08/06/2008 - 10:28
User Badges:
  • Red, 2250 points or more

Please post cswinagent logs from non working remote agent.


You need to go to server where remote agent is installed.

Here is the location of the logs

C:\Program Files\Cisco\CiscoSecure ACS Agent\CSWinAgent\Logs



Regards,

~JG

Jagdeep Gambhir Wed, 08/06/2008 - 12:52
User Badges:
  • Red, 2250 points or more

Most likely this is a permission issue.



CSWinAgent 08/06/2008 12:45:52 A 0048 3860 NTLIB: Attempting Windows authentication for user s.shetty

CSWinAgent 08/06/2008 12:45:52 A 0048 3860 NTLIB: Windows authentication FAILED (error 6L)

CSWinAgent 08/06/2008 12:45:52 A 0436 3860 RPC: NT_MSCHAPAuthenticateUser reply sent

CSWinAgent 08/06/2008 12:46:16 A 0371 3860 RPC: NT_MSCHAPAuthenticateUser received

CSWinAgent 08/06/2008 12:46:16 A 0048 3860 NTLIB: Attempting Windows authentication for user s.shetty

CSWinAgent 08/06/2008 12:46:16 A 0048 3860 NTLIB: Windows authentication FAILED (error 6L)



The accounting running remote agent service do not have admin rights . Make sure that account should have special priv like act as a part of OS and logon as service in ur sec policy.


If you are already using admin account to run it then try using local system.


Regards,

~JG

Actions

This Discussion