cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1012
Views
0
Helpful
1
Replies

ACS 5.3 RADIUS authentication failing - Active Directory Agent

calvincbehr
Level 1
Level 1

Hi, I'm somewhat new to ACS and am trying to complete a migration from 4 to 5.3

Currently, I've got ACS joined to my (2003) domain, and it shows status connected (although the test connect fails).

I have aaa working without issue for TACACS, but all RADIUS authentication is currently failing. Logs show the message below:

"24401 could not establish connection with acs active directory agent"

I'm not seeing anything telling in the logs on the domain controllers. Any idea would be greatly appreciated!

Thanks,

-cb

1 Reply 1

calvincbehr
Level 1
Level 1

Just a note in case anyone runs into this - there was no issue with ACS or the domain. The cause of the problem was an incorrect shared secret on several of the RADIUS devices. This was overlooked as ACS was only providing active directory and active directory agent related error messages (instead of a shared secret / key mismatch error which ACS did provide with TACACS+ devices).