Solved: Integration of LMS 2.6 with Cisco ACS 4.1.3

yusuf.ujjainwala · ‎12-14-2009

I am trying to integrate our Ciscoworks LMS 2.6 with the Cisco ACS 4.1.3 and am following the proceedure as mentioned in the URL below.

However after completing the steps as mentioned , I am not able to login into the Ciscoworks server with the System User ID .

After entering the credentials the authentication screen just stays blank and after sometime I get a message that the Authentication Failed.

I checked the ACS logs but i don;t see any thing in the Failed Attempts logs

I have attached some of the screen shot from my ACS Server.

Can anyone guide what could be the issue.

Regards

luijimen · ‎12-14-2009

Hi Yusuf,

The problem should be the Role you are using for the CiscoWorks applications. The link you posted is for LMS 3.0, in which a "Super Admin" account role is created automatically in ACS upon registration.

However, in LMS 2.6, this is not the case. Try the following:

1) Go to ACS > Shared Profile Components, and repeat the following steps for each CiscoWorks application (Common Services, DFM, Campus, etc.)

2-a) Click 'Add' to create a new Role called "SuperAdmin". Make sure to select the main checkbox in each application, so that ALL OPTIONS are checked.

2-b) Click 'Submit' to apply the changes.

3) Next, under Group Setup, select SuperAdmin as the role for all the LMS applications. Submit+Restart if necessary.

4) Make sure that your system identity user is part of the user group modified in the previous step.

This should allow you to login correctly hopefully.

Regards,

Luis.

View solution in original post

Lucien Avramov · ‎12-14-2009

Double check that you followed exactly:

http://www.ciscosystems.co.nz/en/US/prod/collateral/netmgtsw/ps6504/ps6528/ps2425/prod_white_paper0900aecd80613f62.html

yusuf.ujjainwala · ‎12-14-2009

The only difference I see that in the SHared Profile Components if I go to any of the Cisco works module I am not able to see the Super Admin (in my case it is the ciscoworks_admin) role.

May be that is what is causing the problem I think.

I have attached the screen shot of my implementation

luijimen · ‎12-14-2009