03-20-2012 03:48 PM - edited 03-10-2019 06:55 PM
Anyone know how I can determine what attribute is coming up as 'invalid' ?
Tried full debug and looked at all the logs - nothing.
03-22-2012 05:11 AM
Garrey,
You can generate a support bundle from ACS using:
https://supportforums.cisco.com/docs/DOC-23316
After unzipping the bundle, go to/logs/localLogs and grep for your username, that will show you the ACSsession ID there. Copy that session ID and grep for that in /logs/debugLogs/ACSRuntime.log. This will show all the internal processing of the ACS 5.3 along with all the RADIUS packets received from the NAS in details.
Regards,
Dev
05-14-2015 03:21 AM
glearmon,
I'm curious, which NAS was this occurring with? Did you ever get it resolved?
A packet capture and analysis against the RADIUS RFCs is a good way of determining which attribute is at fault. It's always far more likely that the NAS has an issue than the RADIUS server.
Cheers,
Nick
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: