Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ACS 4.2 strange behaviour

· After fresh install, all appears to be working, usernames work without domain qualification (domain\username), can log in with all accounts

· After an attempt to login with a pre-existing AD username, authentication fails, correct password or not

· Authentication continues to fail (fail code: Internal Error), even after restarting the tacacs service, with all usernames, except for those that have been used to log into the ACS server with domain qualification!?!

· No amount of restarts / configuration tweaks can return to “fresh install” operation

1 ACCEPTED SOLUTION

Accepted Solutions
Silver

Re: ACS 4.2 strange behaviour

This definitely sounds like a bug - anytime you see "internal error" or "unknown error" in failed attempts its an un-handled error.

You'll prob need to set logging detail level to max then do so testing and then open a tac case. The csauth log (auth.log) will be key as there will be diagnostic data from the windows external authenticator dll.

Its is an appliance you'll need to run the support option to generate a package.cab to get the log - s/w you can copy right off.

2 REPLIES
Silver

Re: ACS 4.2 strange behaviour

This definitely sounds like a bug - anytime you see "internal error" or "unknown error" in failed attempts its an un-handled error.

You'll prob need to set logging detail level to max then do so testing and then open a tac case. The csauth log (auth.log) will be key as there will be diagnostic data from the windows external authenticator dll.

Its is an appliance you'll need to run the support option to generate a package.cab to get the log - s/w you can copy right off.

New Member

Re: ACS 4.2 strange behaviour

You are right - it was a bug. After hunting down the latest patch (not easy!) this problem has been resolved. Thanks!

135
Views
0
Helpful
2
Replies