NOT ABLE TO RESTORE Cisco ACS BACKUP in 5.3

Sakthi vel · ‎09-28-2013

Dear All,

I created Repository in ACS and trying to restore the backup file of 40 MB from FTP Server

Getting the error "% Failure occurred during request "

But I'm able to restore the file size of 12 MB

Note : The file which is failing is taken from the another production server 5.3.40.8 and trying to restore the same in my testing environment 5.3

Is there any file size restriction is there.... Please help on this.

Jatin Katyal · ‎09-28-2013

What command are you running to restore the acs backup? Have you tried restoring som other file with same in size? This seems to be an issue with db corruption however we're still yet not sure. Do you have any previous backup file with the same size. If yes, please try to restore that file.

~BR
Jatin Katyal

**Do rate helpful posts**

~Jatin

Sakthi vel · ‎09-29-2013

Dear Jatin,

I Tried to restore the Older backup (38 MB) (last month) also, still the same problem

below is the command which i'm using

restore XXXXXXXX-acs-130806-2200.tar.gpg repository SAKTHI

the same error

% Failure occurred during request

I'm getting

Please help on this on urgent basis.

Thanks & Regards,

Sakthivel M

Jatin Katyal · ‎09-29-2013

You need to try this command

acs restore backup-file-name repository repository-name

This command will restore the ACS configuration (not including the ADE OS data) from one ACS node to another, use the acs restore command in the EXEC mode. The command you're using will also try to restore the ADE OS data and I guess that backup doesn't have that config.

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.3/command/reference/cli_app_a.html#wp1887805

~BR
Jatin Katyal

**Do rate helpful posts**

~Jatin

Jatin Katyal · ‎09-30-2013

Hi Sakthi,

Did you get a chance to try the above suggested command to restore the configuration backup?

~BR
Jatin Katyal

**Do rate helpful posts**

~Jatin

Sakthi vel · ‎09-30-2013

Jatin,

Still not working.... Please help

Same error while trying with acs-restore command

Jatin Katyal · ‎10-01-2013

can you run the following debugs and attach the debugs

debug backup-restore restore 7

debug transfer 7

Also check what error are you getting on FTP server?

~BR
Jatin Katyal

**Do rate helpful posts**

~Jatin

Jatin Katyal · ‎10-08-2013

Have you had an oppurtunity to fetch the requested debugs and look inside for a possible cause?

~BR
Jatin Katyal

**Do rate helpful posts**

~Jatin

Sakthi vel · ‎10-15-2013

Dear Jatin,

Please find the debug output below, since i'm not able to give

debug backup-restore restore 7

i given "

debug backup-restore all "

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2013.10.15 13:43:45 =~=~=~=~=~=~=~=~=~=~=~=

[17D [J

secondary/admin# debug backup-restore all [42D [J

secondary/admin# debug transfer 7

secondary/admin# [17D [J

secondary/admin# debug transfer 7 [33D [J

secondary/admin# debug backup-restore all

secondary/admin# bac [J [J [Jre

reload restore

[J

secondary/admin# restore ?

Backup filename to restore (Max Size - 120)

[25D [J

secondary/admin# restore MMKNDACS-acs-130806-2200.tar.gpg ?

repository Repository to get backup from

[58D [J

secondary/admin# restore MMKNDACS-acs-130806-2200.tar.gpg re [Jpository SA [J [JTEST ?

application Application-only restore, excludes OS system data

Carriage return.

[74D [J

secondary/admin# restore MMKNDACS-acs-130806-2200.tar.gpg repository TEST ap [Jplication ?

Application name to be restored (Max Size - 255)

[86D [J

secondary/admin# restore MMKNDACS-acs-130806-2200.tar.gpg repository TEST application [J [J [J [J [J [J [J [J [J [J [J [J

Restore requires a reboot to successfully complete. Continue? (yes/no) [yes] ? yes

7 [6858]: backup-restore:restore: br_restore.c[59] [admin]: initiating restore MMKNDACS-acs-130806-2200.tar.gpg from repos TEST

7 [6858]: backup-restore:restore: br_restore.c[82] [admin]: no staging url defined, using local space

7 [6858]: backup-restore:backup: br_backup.c[41] [admin]: flushing the staging area

7 [6858]: backup-restore:restore: br_restore.c[102] [admin]: creating /opt/backup/restore-MMKNDACS-acs-130806-2200.tar.gpg-1381844696

6 [6858]: transfer: cars_xfer.c[54] [admin]: ftp copy in of MMKNDACS-acs-130806-2200.tar.gpg requested

7 [6858]: transfer: cars_xfer_util.c[89] [admin]: ftp get source - MMKNDACS-acs-130806-2200.tar.gpg

7 [6858]: transfer: cars_xfer_util.c[90] [admin]: ftp get destination - /opt/backup/restore-MMKNDACS-acs-130806-2200.tar.gpg-1381844696/MMKNDACS-acs-130806-2200.tar.gpg

7 [6858]: transfer: cars_xfer_util.c[109] [admin]: initializing curl

7 [6858]: transfer: cars_xfer_util.c[122] [admin]: full url is ftp://10.2.156.11/MMKNDACS-acs-130806-2200.tar.gpg

3 [6858]: backup-restore:restore: br_restore.c[128] [admin]: restore unpack script failed, name - MMKNDACS-acs-130806-2200

7 [6858]: backup-restore:history: br_history.c[252] [admin]: running date

7 [6858]: backup-restore:history: br_history.c[76] [admin]: obtained backup history lock

7 [6858]: backup-restore:history: br_history.c[137] [admin]: backup history is empty

7 [6858]: backup-restore:history: br_history.c[118] [admin]: stored backup history file

7 [6858]: backup-restore:history: br_history.c[90] [admin]: released backup history lock

% Failure occurred during request

7 [6858]: backup-restore:history: br_history.c[310] [admin]: added record to history

6 [6858]: backup-restore:restore: br_cli.c[59] [admin]: error message: Failure occurred during request

secondary/admin#

[J [J

secondary/admin#

######################################################################################################################

FTP LOGS

######################################################################################################################

10-15-2013 13:44:46 IP 10.2.156.100 FTP connection attempt

10-15-2013 13:44:46 IP 10.2.156.100 FTP admin connected

10-15-2013 13:44:46 IP 10.2.156.100 FTP admin is listing / (K:\\admin\MMKNDACS-acs-130806-2200.tar.gpg)

10-15-2013 13:44:46 IP 10.2.156.100 FTP admin is downloading /MMKNDACS-acs-130806-2200.tar.gpg (K:\\admin\MMKNDACS-acs-130806-2200.tar.gpg)

10-15-2013 13:44:47 IP 10.2.156.100 FTP admin transfer complete

10-15-2013 13:44:47 IP 10.2.156.100 FTP admin disconnected

Sakthi vel · ‎10-15-2013

#### DEBUG OUTPUT USING ACS-RESTORE COMMAND ####

secondary/admin# acs restore MMKNDACS-acs-130806-2200.tar.gpg repository TEST

Restore requires a restart of ACS services. Continue? (yes/no) yes

7 [7217]: backup-restore:restore: br_restore.c[300] [admin]: initiating restore MMKNDACS-acs-130806-2200.tar.gpg from repos TEST

7 [7217]: backup-restore:restore: br_restore.c[323] [admin]: no staging url defined, using local space

7 [7217]: backup-restore:backup: br_backup.c[41] [admin]: flushing the staging area

7 [7217]: backup-restore:restore: br_restore.c[343] [admin]: creating /opt/backup/restore-MMKNDACS-acs-130806-2200.tar.gpg-1381845972

6 [7217]: transfer: cars_xfer.c[54] [admin]: ftp copy in of MMKNDACS-acs-130806-2200.tar.gpg requested

7 [7217]: transfer: cars_xfer_util.c[89] [admin]: ftp get source - MMKNDACS-acs-130806-2200.tar.gpg

7 [7217]: transfer: cars_xfer_util.c[90] [admin]: ftp get destination - /opt/backup/restore-MMKNDACS-acs-130806-2200.tar.gpg-1381845972/MMKNDACS-acs-130806-2200.tar.gpg

7 [7217]: transfer: cars_xfer_util.c[109] [admin]: initializing curl

7 [7217]: transfer: cars_xfer_util.c[122] [admin]: full url is ftp://10.2.156.11/MMKNDACS-acs-130806-2200.tar.gpg

3 [7217]: backup-restore:restore: br_restore.c[369] [admin]: restore unpack script failed, name - MMKNDACS-acs-130806-2200

7 [7217]: backup-restore:history: br_history.c[252] [admin]: running date

7 [7217]: backup-restore:history: br_history.c[76] [admin]: obtained backup history lock

7 [7217]: backup-restore:history: br_history.c[160] [admin]: loaded history file /var/log/restore.log

7 [7217]: backup-restore:history: br_history.c[118] [admin]: stored backup history file

7 [7217]: backup-restore:history: br_history.c[90] [admin]: released backup history lock

7 [7217]: backup-restore:history: br_history.c[310] [admin]: added record to history

% Error: Failed to perform ACS restore: Failure occurred during request

####################################################################################################

FTP LOGS

####################################################################################################

10-15-2013 14:06:02 IP 10.2.156.100 FTP connection attempt

10-15-2013 14:06:02 IP 10.2.156.100 FTP admin connected

10-15-2013 14:06:02 IP 10.2.156.100 FTP admin is listing / (K:\\admin\MMKNDACS-acs-130806-2200.tar.gpg)

10-15-2013 14:06:02 IP 10.2.156.100 FTP admin is downloading /MMKNDACS-acs-130806-2200.tar.gpg (K:\\admin\MMKNDACS-acs-130806-2200.tar.gpg)

10-15-2013 14:06:03 IP 10.2.156.100 FTP admin transfer complete

10-15-2013 14:06:03 IP 10.2.156.100 FTP admin disconnected

Sakthi vel · ‎10-15-2013

My Testing instace runs on 5.3.0.40

Production on 5.3.0.40.8

Is this will create any problem

Jatin Katyal · ‎10-15-2013

Were you using TFTP before to backup and restore ACS database?

can you try and share outputs of:

show run

show repository

~BR
Jatin Katyal

**Do rate helpful posts**

~Jatin

Sakthi vel · ‎10-15-2013

Dear Jatin,

I'm using free ftpd software to do this.

secondary/admin# sho run

Generating configuration...

!

hostname secondary

!

ip domain-name corp.mahindra.com

!

interface GigabitEthernet 0

ip address 10.2.156.100 255.255.254.0

!

ip name-server 4.2.2.2

!

ip default-gateway 10.2.156.10

!

clock timezone UTC

!

username admin password hash $1$/zresIig$tzZtvxYteAl0c5WkRhnfX1 role admin

!

service sshd

!

repository TEST

url ftp://10.2.156.11/

user admin password hash faad4531111043044b701276ab65a7b658e93fe3

!

logging localhost

logging loglevel 6

!

icmp echo on

!

secondary/admin# sho repository ?

Repository name (Max Size - 80)

secondary/admin# sho repository TEST

MMKNDACS-acs-130806-2200.tar.gpg

SAKTHI-131015-1341.tar.gpg

TEST-130928-1959.tar.gpg

TEST-130928-2009.tar.gpg

TEST-130928-2010.tar.gpg

secondary/admin#

Jatin Katyal · ‎10-16-2013

what do you see in show restore history?

It seems ACS is unable to decrypt the backup file, there could be a possibility that it has been corrupted.

Do you have some other file with same size that we can try to restore on ACS?

~BR
Jatin Katyal

**Do rate helpful posts**

~Jatin

Sakthi vel · ‎10-17-2013

Dear Jatin,

I tried that option. already...

I tried with multiple backups that is 30 day difference.

Still the same error.