Upgrade of the ACS

Similar Questions

• The upgrade to Cisco ACS

  Hello.

  I would like to upgrade our current ACS NT Terminalserver edition server to a Win2000 server. Since this upgrade requires a fresh installation (since a direct upgrade from NT 4 TS to w2k is not the best thing to do). My question is, do I have to do to ensure that I can keep my user database active? Is replication the answer? And replication will make a copy of all the different users/groups/routers etc etc. In other words, I'll be able to do this upgrade without too much trouble?

  I speak here of a replication of the database, do not configure replication between servers ACS.

  Here is the doc that will help you to do this

  http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/csnt30/user/AE.htm

• The ACS upgrade to 3.2

  Greetings,

  By opting for the ACS 3.2, all my settings and the securities will remain the same? If this isn't the case, I have a router connected to the server and I will get locked. I heard there is a specific order for the removal of the lines to avoid of locking me. Is this true?

  Thank you

  You will need to select the option "Yes, import the existing configuration", while improving the ACS software. Information on the upgrade of Cisco ACS software Preserving Configuration found in the documentation to

  http://www.Cisco.com/univercd/CC/TD/doc/product/access/acs_soft/csacs4nt/ACS32/win32sig.htm#9934

• ACS 3.2 on Win2k - upgrade from the replicated SACRED path

  Hi all

  I have 2 servers ACS 3.2 I want to upgrade to 4.2.1 the latest version before 5, as I understand.

  My question is about replication. Should I stop the replication of database and upgrade servers separately or not? Can I put the servers as replication of database is configured? If so, is there a specific order of upgrade?

  Thank you

  Jose

  Here the user guide.

  "All of the SACRED that is involved in replication must run the same version of the ACS software. For example, if the primary ACS is running ACS version 3.2, all secondary ACSS should run ACS version 3.2. Because patches can introduce significant changes to the internal database of GBA, we strongly recommend that ACSS involved in replication use the same patch level. »

  So, I suggest to turn off replication before upgrade. After all of the ACS are upgraded to the same version, you can enable replication again.

• The upgrade to Cisco ACS SE and Remote Agent

  Hello

  Currently we are upgrading the PDC to Windows Server 2008, Standard Edition R2.

  I am little confused with information available for upgrade scenarios. Appearing on the current working versions.

  Cisco ACS SE - version 4.1 Build 23 5 Patch 1

  Cisco ACS Remote Agent version 4.2 (0.124)

  The new operating system will work on 64-bit, I think that the current ACE SE and the remote agent can / must be upgraded.

  My existing versions, give the possible scenarios of upgrade available for me. After that upgraded SE and Remote Agent should work for the 64 bit OS.

  Thanks in advance!

  Yes, it is not possible to upgrade the ACS ACS 5.2 existing to level 4.1. They are two different boxes run on a different platform.

  Unfortunately ACS 4.x does not support windows 2008 r2.

  5.2 ACS is the only option left, and you will need to buy a new box of seprate with the new licnese for this.

  Concerning

  Bellefroid

  Note the useful messages

• Issue of operability of the ACS as RADIUS with ASA 5.0?

  Hello

  I'm trying my VPN to get authenticated user with RADIUS (ACS 5.0). and VPN users database is created in AD. Now when I am trying to connect through the Cisco VPN client, I am unable to do so. Infact, I get an error message (through debugging at the level of the SAA for aaa and isakmp) my RADIUS server is DOWN.

  Please let me know is there any compatibility issue with ACS 5.0 on it because everything was working fine on my version 4.2 of the ACS.

  Concerning

  Ritesh

  Ritesh,

  Yes, there is a lack of ACS 5.0 with vpn authentication.

  When you try to connect with the VPN client. you will not see any hits in the follow-up and the views.
  The ASDM logs: you'll see radius server is not accessible.
  Debugs you show RADIUS period.
  This will work with Ganymede.

  Access policy rule was does not. Also, could not use RADIUS as hit CSCsy17858

  http://cdetsweb-PRD.Cisco.com/apps/goto?identifier=CSCsy17858>; Used Ganymede + instead of RADIUS.

  If you want to use the RADIUS then you need to upgrade your version of acs to 5.1

  You can down load patch 9 (5-0-0-21 - 9.tar.gpg) and ADE-OS (ACS_5.0.0.21_ADE_OS_1.2_upgrade.tar.gpg) from the below path:

  Go to Cisco.com > support > download software > Security > Cisco Secure Access Control System 5.0 > Secure Access Control System Software 5.0.0.21 >

  Reference: update of the CSA since version 5.0 to 5.1:
  http://www.Cisco.com/en/us/docs/net_mgmt/cisco_secure_access_control_system/5.1/installation/guide/csacs_upg.html

  HTH

  Kind regards

  JK

  The rate of useful messages-

• Upgraded 3.3 ACS 2 Build 2 ACS v 4.1.1 build 24

  Hi all

  I'm getting a problem while improving the ACS Windows based CS. Can any body help me in this area,

  My current 3.3 CS ACS 2 Build 2 is install on Windows 2000 Advanced Server.

  I want to upgrade to point 4.1.1 Build 24 & 4.1.4 other build 13...

  I installed a Windows 2003 Server SP2 on a separate computer & 4.1.1 installed Build 24 on it. Insllation became a success, but while that restore the backup file of the previous version. I got an error "is not compatible for this version.

  It is also to mention that my old version is in a failover on both machines fastion.

  Can someone help me with this?

  Waiting for a quick response.

  Thank you

  Mubasher

  You need to upgrade your 3.3. (2) W2K Server, make a backup of 4.1.1 (24) of the W2K and restore it in the W2K3 server.

• Join the ACS 5.4 AD strange question

  Hello

  We have two ACS boxes with the same version of software (5.4.0.46.0a), we have been able to join the domain a that only ACS and other ACS are given the error attached.

  When we checked "main-acs-01 / admin # acs troubleshooting adcheck , he gave the same error for the two candidate countries, however an ACS successfully joined the domain and still others we failed."

  principal-acs-01 / admin # acs troubleshooting adcheck<>

  This command is only for advanced troubleshooting and could suffer a lot of network traffic

  Do you want to continue?  (yes/no) Yes

  OSCHK: Check that it is operating system: pass

  PATCH: Patch Linux check: pass

  PERL: Check that perl is present and is a good version: pass

  SAMBA: Inspection of the installation of Samba: pass

  SPACECHK: Check if there is enough space in/var/usr/tmp: pass

  HOSTNAME: Check the hostname parameter: pass

  NSHOSTS: Check the hosts line in /etc/nsswitch.conf: pass

  DNSPROBE: Probe Server DNS 172.24.1.1: pass

  DNSPROBE: Probe Server DNS 172.24.1.2: pass

  DNSCHECK: Analyze the health of DNS servers database: pass

  WHATSSH: Is it a SSH DirectControl works perfectly with: pass

  SSH: SSHD version and configuration: Note

  : You are running OpenSSH_5.3p1, CiscoSSL 0.9.8r.1.3.

  DOMNAME: Check that the domain name is reasonable: pass

  ADDC: Search for domain controllers in the DNS: pass

  ADDNS: Search DNS DC xxxx.                      : Pass

  ADPORT: Scan of Port DC xxxx.                       : Pass

  ADDNS: Search DNS DC xxxx.                     : Pass

  ADPORT: Scan of Port DC xxxx.                      : Pass

  ADDNS: Search DNS DC xxxx.                      : Failed

  : Could not resolve the IP address of xxxx.hmc.org.qa.

  ADDNS: Search DNS DC xxxx.                      : Pass

  ADPORT: Scan of Port DC xxxx.                       : Pass

  ADDNS: Search DNS DC xxxx.                   : Pass

  ADPORT: Scan of Port DC xxxx.                    : Pass

  ADDNS: Search DNS DC xxxx.                     : Pass

  ADPORT: Scan of Port DC xxxx.                      : Warning

  : One or several ports did not respond correctly. Either:

  (: a) the domain controller is offline

  (: b) a firewall prevents access to a port

  : The following is a list of ports has failed:

  : ldap 389/udp - timeout

  : 445/tcp smb - denied

  : ldap 389/tcp - denied

  ADDNS: Search DNS DC xxxx.                        : Pass

  ADPORT: Scan of Port DC xxxx.                         : Pass

  ADDNS: Search DNS DC xxxx.                        : Pass

  ADPORT: Scan of Port DC xxxx.                         : Pass

  ADDNS: Search DNS DC xxxx.                           : Pass

  ADPORT: Scan of Port DC xxxx.                            : Pass

  ADDNS: Search DNS DC xxxx.                    : Pass

  ADPORT: Scan of Port DC xxxx.                     : Pass

  ADDNS: Search DNS DC xxxx.                      : Pass

  GCPORT: Port scan of GC xxxx.                       : Pass

  ADDNS: Search DNS DC xxxx.                     : Pass

  GCPORT: Port scan of GC xxxx.                      : Pass

  ADDNS: Search DNS DC xxxx.                      : Failed

  : Could not resolve the IP address of airportdc1. .

  ADDNS: Search DNS DC xxxx.                      : Pass

  GCPORT: Port scan of GC xxxx.                       : Pass

  ADDNS: Search DNS DC xxxx.                   : Pass

  GCPORT: Port scan of GC xxxx.                    : Pass

  ADDNS: Search DNS DC xxxx.                     : Pass

  GCPORT: Port scan of GC xxxx. : WARNING

  : One or several ports did not respond correctly. Either:

  (: a) the GC is offline now

  (: b) a firewall prevents access to a port

  : The following is a list of ports has failed:

  : gc 3268/tcp - denied

  ADDNS: Search DNS DC xxxx.                        : Pass

  GCPORT: Port scan of GC xxxx.                         : Pass

  ADDNS: Search DNS DC xxxx.                        : Pass

  GCPORT: Port scan of GC xxxx.                         : Pass

  ADDNS: Search DNS DC xxxx.                           : Pass

  GCPORT: Scan of Port GC xxxx : pass

  ADDNS: Search DNS DC xxxx.                    : Pass

  GCPORT: Port scan of GC xxxx.                     : Pass

  ADGC: Check Global catalog servers: spend

  DCUP: Search for operational controllers : pass

  SITEUP: Check DCs for in our site: go

  DNSSYM: Check the symmetry of DNS server: pass

  ADSITE: Verify that the subnet of this machine is in a site known as AD: pass

  GSITE: See if we think it is the correct site: pass

  TIME: Synchronization of clocks Check: pass

  2 serious issues have been encountered during the audit. These must be fixed before proceeding

  2 warnings were encountered during the audit. We recommend that you check these before proceeding

  principal-acs-01 / admin #.

  The one facing this problem before and grateful if someone can tell how to solve this problem.

  It is a known issue with ACS 5.3 However, we had this problem in ACS 5.3 patch 7 and 5.4 of the ACS

  Since you're under 5.4 ACS, it should not trigger.

  CSCtx53223    After update 5.3 ACS fail to join the domain AD - lack of license Centrify

  Symptom:

  After the upgrade from 5.2 to 5.3, ACS is unable to join the domain. AD connection worked for several days, until the services have been restarted. After this, ACS is unable to join AD with the following in ACSADAgent.log error message:

  Jan 20 02:36:32 CBR1BACS01 Bordes [6814]: DEBUGGING cli.adjoin Join to area is permitted only with a licensed copy of DirectControl. Obtain a license or learn more about Centrify following http://www.centrify.com/express

  Jan 20 02:36:32 CBR1BACS01 Bordes [6814]: DEBUGGING cli.adjoin without a permit, you can connect to a domain via Auto Zone by specifying Bordes w Test.Test

  Conditions:

  Move from 5.2 to 5.3. Restart the services thereafter.

  Workaround solution:

  Save the ACS db and recreate the picture on the box to 5.3

  How upgrade to 5.4 ACS

  1.] updated to 5.3 to 5.4 using the upgrade package.

  2.] reianged with ACS 5.4 ISO and restored the database ACS 5.3.

  I suggest you to prosecute on this TAC. [Most likely you must reimage the server and restore the database if you had crossed with option 1.]

  ~ BR
  Jatin kone

  * Does the rate of useful messages *.

• Windows domain account to view reports / manage the ACS server.

  All,

  We have a Cisco ACS 5.2 deployment (device).  It has existing integration with Active Directory.  We use it with RADIUS to authenticate our users wireless and GANYMEDE to manage our network equipment.

  RAY reports are useful for other teams (except my own) in order to resolve account lockouts and password (everyone forgets to change the password on his phone).

  I would like to allow this team and other access to the report of RADIUS authentications.

  I want them to be able to use their domain account to do this.<-------  this="" is="" mandatory,="" based="" on="" our="" security="">

  We tried using an account local and which works very well.

  My system tells me that domain accounts cannot access the administrative parts of ACS.

  Is this true?

  We have the support to allow us to upgrade to the latest version of the ACS.

  5.4 of the ACS, it is possible to authenticate and authorize the directors of external stores, including AD accounts

• Upgrade of the Sierra: where are my pictures!

  Well, I see that a lot of people have this problem but have yet to find an answer to the problem anywhere.  My patience is lost, I despise the fact that I have * money on shit Apple but I need to find my photos.  Stupidly, I'm fallen for Apple BS again and "upgraded" in the Sierra.  Now all my photos and the Organization, that I spent a year are no longer accessible by something else as well as the new 'Photos '.  I never had iPhoto first, never used.  Each thread simple discussion I can find guard speaks of iPhoto and animated for the Photos news images.  I can see the picture files, but all my organization has disappeared; and I can't access my photos of any other application EXCEPT Photos!  If I could find an Apple exec I would slam their face until they cried!

  Someone has a REAL solution to get my photos and the Organization in the way it was before this stupid OS Sierra update?

  < re-titled by host >

  I think you should be able to find your photos here ~/Pictures/Photos Library.photoslibrary.

  Presumably, you could also restore your library and its organization of your backup so that you can continue to use any photo library program you usually use.

• Can't change language after OS upgrade of the Sierra

  Hello world

  After the upgrade of the Sierra, my MacBook Pro has decided to return to the French.

  Now, I am unable to change the language on the menus and dialog boxes.

  I tried to put the English in language and text preferences, same problem.

  I also tried to run sudo languagesetup, same problem.

  Thanks for any help you can provide.

  See you soon!

  Language changes are not applied immediately to the running applications, but they should be applied to the applications that you start after the change is made. Changes to the Finder will apply if you raise, or to do it easily, just log out and back in.

  Log out and back in? Or restart your mac? If you didn't do it and let us know.

• Difficulties with all versions of html files since the upgrade of the Sierra

  I have problems opening and dealing with htm, html, html5 files since the upgrade of the Sierra.  Someone else?

  Please provide details. What problems are you having? HTML files open in a web browser, the browser you are using?

• I have macBook build 10K 549 and I want to upgrade to the new OS system available while one will work on my device

  I have macBook build 10K 549 and I want to upgrade to the new OS system available while one will work on my device

  It is impossible to tell from this information. Choose about this Mac from the Apple menu, click more information and search the model identifier.

  If it's MacBook1, 1, 10.6.8.

  If it is MacBook2, 1-MacBook4, 1, 10.7.5.

  If it's MacBook5, 1 or MacBook5, 2, 10.11.6.

  If it's MacBook6, 1 or greater, 10.12.

  (144865)

• should I remove imovie9 before upgrading to the latest version

  I need to upgrade to the latest version of iMovie as 9 does not respond with El Capitan.

  I completely remove 9B before doing this?

  Hello

  No, you don't need to delete iM9 before moving on to iMovie 10.1.2 (latest version).   Both versions may remain on your computer.   iM10.1.2 allows you to update your projects iM9 and events so that they will play on the new version.   So that's why you would leave iM9 on your computer, so that you can make the update.

  Best,

  Rich

• I have Firefox installed 42.0 and works correctly. Yahoo on Firefox indicates this, but Yahoo on Chrome keeps asking me to upgrade to the latest Firefox

  I use mainly Firefox and Chrome only as an emergency backup. I still have backup third IE and Yahoo by default, thus opening 'IE' takes me directly to Yahoo.com. In Chrome and this 'fake IE', Yahoo says to upgrade to the latest Firefox. I even updated a second time to 42.0 Firefox but Chrome and 'fake IE' Yahoo wants the latest update me of Firefox. In Firefox, there is none that question. If so, can or should be done?

  airider said

  And I don't know how Firefox/Yahoo and non Yahoo/Chrome or IE/Auto-Yahoo acknowledges what version I am running.

  Browsers generally identify themselves to Web sites. If you want to see what your browsers send, you can use my test page - the "user agent" string is displayed in red:

  https://jeffersonscher.com/RES/jstest.php

  It is a little confusing: browsers may raise on behalf of other browsers to inform Web sites that they can deal with the pages designed for other browsers.

  But browsers do not send a list of ALL of your software on your computer - thank God - so if you visit a site with chrome, it cannot know which version of Firefox, you have, or even if you have Firefox at all.

  There is an exception to this absolute statement, called Flash Local Storage Objects, sometimes called super-cookies. If you visit a site in the browser F and allow the site to use Flash and store data on your computer, then when you visit the same site in the browser to C, if you allow the site to use the Flash, it can read these data and know that you have already visited and connect your two browsers.