cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1407
Views
0
Helpful
2
Replies

CiscoSecure ACS 4.1(1) Build 23 Patch 5 :database replication fails; possibly short timeout or dead

Hi,

Since some time we are struggling to get database replication working.

On the primary server it is reporting the following on "Database Replication active.csv""

07/21/201014:22:58SZ0910WARNINGACS 'SZ0920' not replied to replication request - possibly short timeout or dead
07/21/201014:12:08SZ0910INFOOutbound replication cycle starting...

In CSMon.log following is logged:

----------------------------------------------------------------------------------------------------------------------

CSMon 07/21/2010 14:12:11 A 1544 13760 Pausing the monitoring of CSAuth for duration 600
CSMon 07/21/2010 14:12:11 A 1544 11640 Pausing the monitoring of CSLog for duration -1
CSMon 07/21/2010 14:12:14 A 1544 13788 Pausing the monitoring of CSRadius for duration -1
CSMon 07/21/2010 14:12:18 A 0641 3248 CSAuth: Paused State 0 6 Event Detected Level:2 Message:Service CSAuth has been suspended for a configured function to proceed. Monitoring will suspend until the service is restarted
CSMon 07/21/2010 14:12:18 A 0641 3248 CSLog: Stopped State 0 6 Event Detected Level:2 Message:Service CSLog has been stopped or paused by the system. Monitoring will suspend until the service is restarted
CSMon 07/21/2010 14:12:18 A 0641 3248 CSRadius: Stopped State 0 3 Event Detected Level:2 Message:Service CSRadius has been stopped or paused by the system. Monitoring will suspend until the service is restarted
CSMon 07/21/2010 14:12:18 A 1544 7716 Pausing the monitoring of CSTacacs for duration -1
CSMon 07/21/2010 14:12:28 A 0904 3248 Analysis: Level 2 'Service CSAuth has been suspended for a configured function to proceed. Monitoring will suspend until the service is restarted. Service CSLog has been stopped or paused by the system. Monitoring will suspend until the service is restarted. Service CSRadius has been stopped or paused by the system. Monitoring will suspend until the service is restarted. '
CSMon 07/21/2010 14:12:33 E 0351 3248 Failed to log accounting packet to logger localCSLog
CSMon 07/21/2010 14:12:33 A 0641 3248 CSTacacs: Stopped State 0 2 Event Detected Level:2 Message:Service CSTacacs has been stopped or paused by the system. Monitoring will suspend until the service is restarted
CSMon 07/21/2010 14:12:43 A 0904 3248 Analysis: Level 2 'Service CSTacacs has been stopped or paused by the system. Monitoring will suspend until the service is restarted. '
CSMon 07/21/2010 14:12:48 E 0351 3248 Failed to log accounting packet to logger localCSLog
CSMon 07/21/2010 14:22:18 A 0641 3248 CSAuth: State 0 6 Event Detected Level:4 Message:Service pause timed out. Please check the timeout settings for Replication and Backup

-------------------------------------------------------------------------------------------------------------------------------

I have followed this checklist: https://supportforums.cisco.com/docs/DOC-8795 to make sure configs are ok.

But still replication fails.

There is no firewall in between.

Both ACS servers running on MS Windows Server  2003, SP2.

Can anybody help me in the right direction what could be possible cause of this or where else I can look for logging for further troubleshooting?

Thanks in advance for your help.

2 Replies 2

Ganesh Hariharan
VIP Alumni
VIP Alumni

Hi,

Since some time we are struggling to get database replication working.

On the primary server it is reporting the following on "Database Replication active.csv""

07/21/201014:22:58SZ0910WARNINGACS 'SZ0920' not replied to replication request - possibly short timeout or dead
07/21/201014:12:08SZ0910INFOOutbound replication cycle starting...

In CSMon.log following is logged:

----------------------------------------------------------------------------------------------------------------------

CSMon 07/21/2010 14:12:11 A 1544 13760 Pausing the monitoring of CSAuth for duration 600
CSMon 07/21/2010 14:12:11 A 1544 11640 Pausing the monitoring of CSLog for duration -1
CSMon 07/21/2010 14:12:14 A 1544 13788 Pausing the monitoring of CSRadius for duration -1
CSMon 07/21/2010 14:12:18 A 0641 3248 CSAuth: Paused State 0 6 Event Detected Level:2 Message:Service CSAuth has been suspended for a configured function to proceed. Monitoring will suspend until the service is restarted
CSMon 07/21/2010 14:12:18 A 0641 3248 CSLog: Stopped State 0 6 Event Detected Level:2 Message:Service CSLog has been stopped or paused by the system. Monitoring will suspend until the service is restarted
CSMon 07/21/2010 14:12:18 A 0641 3248 CSRadius: Stopped State 0 3 Event Detected Level:2 Message:Service CSRadius has been stopped or paused by the system. Monitoring will suspend until the service is restarted
CSMon 07/21/2010 14:12:18 A 1544 7716 Pausing the monitoring of CSTacacs for duration -1
CSMon 07/21/2010 14:12:28 A 0904 3248 Analysis: Level 2 'Service CSAuth has been suspended for a configured function to proceed. Monitoring will suspend until the service is restarted. Service CSLog has been stopped or paused by the system. Monitoring will suspend until the service is restarted. Service CSRadius has been stopped or paused by the system. Monitoring will suspend until the service is restarted. '
CSMon 07/21/2010 14:12:33 E 0351 3248 Failed to log accounting packet to logger localCSLog
CSMon 07/21/2010 14:12:33 A 0641 3248 CSTacacs: Stopped State 0 2 Event Detected Level:2 Message:Service CSTacacs has been stopped or paused by the system. Monitoring will suspend until the service is restarted
CSMon 07/21/2010 14:12:43 A 0904 3248 Analysis: Level 2 'Service CSTacacs has been stopped or paused by the system. Monitoring will suspend until the service is restarted. '
CSMon 07/21/2010 14:12:48 E 0351 3248 Failed to log accounting packet to logger localCSLog
CSMon 07/21/2010 14:22:18 A 0641 3248 CSAuth: State 0 6 Event Detected Level:4 Message:Service pause timed out. Please check the timeout settings for Replication and Backup

-------------------------------------------------------------------------------------------------------------------------------

I have followed this checklist: https://supportforums.cisco.com/docs/DOC-8795 to make sure configs are ok.

But still replication fails.

There is no firewall in between.

Both ACS servers running on MS Windows Server  2003, SP2.

Can anybody help me in the right direction what could be possible cause of this or where else I can look for logging for further troubleshooting?

Thanks in advance for your help.

Hi,

Also check the port number TCP 2000 this is the replication port which needs to be opened between the primary and secondary ACS.

Hope to Help !!

Ganesh.H

Both ACS servers are listening to TCP port 2000:

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    SZ0910:49              SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:epmap           SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:microsoft-ds    SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:1039            SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:1200            SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:1311            SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:2000            SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:2001            SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:2002            SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:2868            SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:ms-wbt-server   SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:3999            SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:47001           SZ0910.szdelta.intern:0  LISTENING
  TCP    SZ0910:netbios-ssn     SZ0910.szdelta.intern:0  LISTENING

Active Connections

  Proto  Local Address          Foreign Address        State
  TCP    sz0920:49              sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:epmap           sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:microsoft-ds    sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:1049            sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:1311            sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:2000            sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:2001            sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:2002            sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:2868            sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:ms-wbt-server   sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:3483            sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:3999            sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:47001           sz0920.szdelta.intern:0  LISTENING
  TCP    sz0920:netbios-ssn     sz0920.szdelta.intern:0  LISTENING

The server with name sz0920 is secondary and sz0910 is the primary which starts the replication.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: