cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
451
Views
0
Helpful
4
Replies

2 ACS with 2 CRA

Hi All,

We have installed 2 ACS with two CRA installed in AD1 & AD2.

The problem is when the CRA1 which is installed in AD1 is active everything working fine with both the ACS.

But when the CRA1 is down & CRA2 is up which is installed in AD2 the authentication fails.

Can anyone help in this regard? I have the logs if required I can upload the same.

Thanks in advance

Sachi

4 Replies 4

Jagdeep Gambhir
Level 10
Level 10

Please post cswinagent logs from non working remote agent.

You need to go to server where remote agent is installed.

Here is the location of the logs

C:\Program Files\Cisco\CiscoSecure ACS Agent\CSWinAgent\Logs

Regards,

~JG

Dear JG,

I have already the logs that server where its not working. Pls find it in the attachment.

Thanks

Sachi

Pls look at the 06/08/2008 logs only

Thanks

Sachi

Most likely this is a permission issue.

CSWinAgent 08/06/2008 12:45:52 A 0048 3860 NTLIB: Attempting Windows authentication for user s.shetty

CSWinAgent 08/06/2008 12:45:52 A 0048 3860 NTLIB: Windows authentication FAILED (error 6L)

CSWinAgent 08/06/2008 12:45:52 A 0436 3860 RPC: NT_MSCHAPAuthenticateUser reply sent

CSWinAgent 08/06/2008 12:46:16 A 0371 3860 RPC: NT_MSCHAPAuthenticateUser received

CSWinAgent 08/06/2008 12:46:16 A 0048 3860 NTLIB: Attempting Windows authentication for user s.shetty

CSWinAgent 08/06/2008 12:46:16 A 0048 3860 NTLIB: Windows authentication FAILED (error 6L)

The accounting running remote agent service do not have admin rights . Make sure that account should have special priv like act as a part of OS and logon as service in ur sec policy.

If you are already using admin account to run it then try using local system.

Regards,

~JG

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: