ACS Engine - remote agent, too many groups ??

[yabilteryst]

Good morning all,

I try to configure remote agent with my ACS Engine (3.3.1) in order to browse AD. I'm able to list all domains but each time I try to define a mapping, I have an error message.

I check on my remote Agent, and the logfile reports this information:

....

CSWinAgent 12/14/2005 15:02:04 A 0048 1764 NTLIB: group 26439 [ZAJOG-ZAJO-SA]

CSWinAgent 12/14/2005 15:02:04 A 0048 1764 NTLIB: group 26440 [ZAJOG-ZAJO-SOA]

CSWinAgent 12/14/2005 15:02:04 A 0048 1764 NTLIB: group 26441 [ZAJOL-Clients-Client Administrators]

CSWinAgent 12/14/2005 15:02:04 E 0030 1764 EndPoint Library: Failed to send message (20 bytes input, encode buffer 1048576 bytes)

CSWinAgent 12/14/2005 15:02:04 E 0323 1764 EndPoint_SendMessage failed

I tried 2 different versions of Remote Agent (3.3.3.11 & 3.3.2.2) with the same result.

I think it's because there is too many group defined in AD and Remote Agent is not able to send all.

Does anyone have an idea? a solution?

Many Thanks for your help,

Regards,

Yves-Alain

[bbaley]

Check the connectivity between the remote CiscoSecure ACS and the replicating ACS. Verify that the IP address of the AAA server is correct under AAA entry.