With Cisco Secure ACS for Windows GANYMEDE +, authentication fails with AD
I'll put up a Cisco Secure ACS 4.2 server to act as a RADIUS server for switches and routers I use Windows 2003 server for the candidate countries.
and an Active Directory of Windows 2003 server. The ad server is very good, it is used for many other things.
I've implemented ACS as defined nit it installation guide, including all the steps in the "Member Server" section of the installation guide
When you use AD as an external database (e.g. setting up services to run with a domain administrator account, set up a machine called "CISCO"
on the field, etc.).
I've set the unknown user policy to use the database of Windows, if the internal database does not contain the details of the user.
If I add a user to the internal database, authentication goes through fine, with an entry in the journal "Authentication," spent
02-24-2010, 05:07:03, authentic failed, eXXXX, Network Administrators (NDG), X.X.X.X, (default), internal error, (get the internal error error message)
I scoured google etc and just cannot come up with any reason why this should be the case.
I followed all of the installation to the letter guides. I need to get this up and running as soon as possible,
so am eager to know if someone can help me with this one!
Thanks and greetings
Sharan
George,
Internal error is fairly generic, but a common situation, we see this error is when ACS is installed on a
64-bit computer. ACS would not work with the active Manager when it is installed on the 64-bit before machines
ACS 4.2.1.
-Jesse
Tags: Cisco Security
Similar Questions
-
Update security for Windows XP $KB2686509 failed to load since since August 2012. It does not load and I can't get rid of it. This update icon is still present in the State and still trying to load at the stop bar. I have to, I can remove it and how?
What did you do to try to install the update?
Thread in particular: http://answers.microsoft.com/en-us/windows/forum/windows_xp-windows_update/kb2686509-repeatedly-fails-with-error-code/0deeacb6-115c-419d-ac37-03ff8927b79c
-
The Go.Microsoft.com reference site for this security update does not exist and automatically takes me to a site that is irrelevant.
I tried checking the utility support Windows successfully and he stretched something but still no change on my attempts to update.
I attepted to change my boot through the msconfig utility, but it still does not work.
I cold booted my computer without modification.
I disabled Norton 360 during the download and update and still no change.
In automatic update mode, it tries every night and shows me the message that failed in the morning.
See the RESPONSE messages in this thread-online http://answers.microsoft.com/en-us/windows/forum/windows_xp-windows_update/kb2686509-repeatedly-fails-with-error-code/0deeacb6-115c-419d-ac37-03ff8927b79c
TIP: Start by Christian batch file (BAT).
-
Cisco Secure ACS 4.2 Windows authentication of different domain
Hello
I have a Cisco Secure ACS for Windows Server 4.2. The server belongs to a domain and the domain, the users belonging to a certain group are authenticated.
Now, I have to change the configuration of the server and reassign it to another area. There is no trust relationship between two domains and I would like to know if users can always be authenticated against the previous domain.
Hello
First of all, take backup (by measure of precaution in order to restore config if something goes wrong) then continue witht the following:
-Remove the configuration of the windows domain (group... mapping etc) from the server before changing the field.
-Change the domain membership, and then restart.
-follow the missions post-disiez for ACS (see this link): http://tiny.cc/zr6huw.
-Configure the external database again on GBA (group mapping, strategy unknown user... etc).
You should note that if the new domain controller is Windows Server 2008 R2, which is not supported by ACS 4.x.
HTH
Amjad
Rating of useful answers is more useful to say "thank you".
-
Cisco Secure ACS 4.2 on VMware ESX 4.0.
We must move from ESX 3.5 to ESX 4.0 a virtual machine running Cisco Secure ACS for Windows version 4.2.
This solution is compatible and supported by Cisco?
Thank you.
Andrea
ACS Windows 4.2 is not supported by Cisco, when installed on VMWare ESX 4.0 in accordance with the following documentation:
Only ACS 5.1 is supported on ESX 4.0:
-
Cisco Secure ACS vs IAS in Windows
Hi all
I need deploy an AAA for the following situations.
(1) remote access via Cisco VPN Clients.
(2) AAA for wireless windows PC in remote areas
(3) AAA for Cisco switches and routers in remote areas
(4) authentication with a windows domain
The the Windows IAS would be virtually free that we already have Windows 2003 domain controllers at each remote site. However, Cisco Secure ACS might also be an option. Not all have experience in these two?
What are the positives\negatives of each? and limits?
Does anyone have any information on case study etc. in comparing the two?
Your help is greatly appreciated.
Kind regards
Andy
PS: There is a limitation in Windows 2003 Standard edition, which limits the number of Radius clients to 50. Although we have more than 50 potential clients in society, no site has more than 50 altogether.
MS IAS allows you to implement the solution using only the RADIUS protocol
ACS offers the feature to use RADIUS as well as GANYMEDE.
Looking 4 solutions you want to implement, only 3rd solution will be a little easier with GANYMEDE, but even once it not something you can not implement using RADIUS.
On the limitation of Radius client, ACS offers a large database that you can use for customers, so limiting to 50 customers. In addition many many features, you'll love to integrate into your network as the NAP/NAC implementation, made it easier.
So you need to check if you have the budget, you can go to ACS, IAS on the other can work well for all solutions (except limitation of radius client, I m sure that MS can provide a workaround solution).
the following link can help you with information on sales of ACS:
http://wwwIn-nmbu.Cisco.com/thevault/files/1027/5/ACS4.1-Sales-guide%20April%204%202007.htm
-
Cisco Secure ACS Solution Engine ping
1. I installed Cisco Secure ACS Solution Engine with V3.3 and I can access via the http port 2002 but I can't it ping from anywhere in the network, but the server can ping every thing, is this normal.
2. If I can't ping haw I can define the service keeplaive to load balance 2 ACS engine using CSS
By the way, I forgot that ACS 3.3 device has a CSA integrated. This agent is enabled by default. He explains why you can't ping it.
For enable/disable it, go to "System Setup Configuration - device. Toggle the checkbox enabled the CSA according to needs.
Rgds,
AK
-
Migration of ACS for Windows 4.1 to ACS SE 4.2?
Hello
We currently have GANYMEDE + running on ACS 4.1 for Windows. We want to replace this unit by ACS SE 4.2 (device). Is it possible to backup/restore the database of the ACS for Windows 4.1 directly to the ACS SE 4.2? Or requrie level of ACS software version? Please notify.
Thank you.
Yes, it's quite valid; This new feature has been integrated in 4.2 ACS. You can not, however, restore 4.1 ACS in the last ACS 4.2.1.
Once you have updated 4.2 ACS, ACS 4.2.1 can restore from ACS 4.2...
For ACS 4.2:
For ACS 4.2.1:
4.2.1 CSCsz96936 to remove the option restore 4.1 db. To support the restoration of 4.2 db
HTH,
Please note the useful messages!
-
Cisco Secure ACS 5.3 SNMP agent does not
Hello
I have problems with the SNMP on Cisco Secure ACS 5.3 agent (patch level 5) stop, is there a quick way to restart the SNMP daemon via the command line?
Robert,
I understand where you come, I encountered the following bug:
The process of the SNMP agent in demon device ACS stops.
and reboot the box will bring him back to the top and after about 3 days, he'd stop. I just want to see if it's the same bug that could be back in patch 5. The best thing to do at this stage is to plan a quick down and restart the box to see if the snmp process starts again. If this then gives IT a week to see if the snmp Protocol falls down. If it does then make reference to this bug and open a new case of tac for repair. If not, then you should be in the clear.
Thank you
Tarik Admani
-
When you do the automatic updates of Windows Vista, I get the code below.
'A security update for Windows Media Format Runtime 11 for Windows Vista (KB968816)' = failure
- What should I do to fix this?
- And what does this update actually?
Thanks for any help provided.
scrubie,
If you go to programs and features, and then on the left side you should see a link for "Daily display installed." Which would then show the list of updates with the State which will show you if it failed or not.Hope that helps. Mike - Engineer Support Microsoft Answers
Visit our Microsoft answers feedback Forum and let us know what you think. -
error code 0x8007f0f4 on security update for windows XP
I get an error code: 0x8007f0f4 on a security update for windows XP (KB2481109) can someone help me with this?
I need emergency assistance.
Thank you
Ok. I am back.
Have you tried the manual steps in the bulletin after the correction, it did not work? Please answer.
Start > run > type chkdsk/r > press on enter or OK > enter Y at the prompt > Reboot
When she returns to the top, click on start > run > eventvwr.msc > press on enter or OK > go to Application, Type: Information, Source: Winlogon. Paste and copy in a txt file and then try to download and install the manual update of http://www.microsoft.com/downloads/details.aspx?FamilyID=D67E4D8C-AEB9-45E6-9555-7456C5540475
If it fails, paste the contents of the file txt on your next reply. Also download the KB2481109.log on your SkyDrive (if you have an account here, you automatically have a SkyDrive account) public folders and add the URL of it to the next reply.
I fear that we will have to do a replacement of manual file in the end, but let's try this first.
-
Security update for Windows XP downloads but fails during installation that gives 0x8007F0F04 error code
FixIt, reboot, try again not useful
How can I get the security properly installed? or what happens if I don't?
Original title: 0x8007F0F04
Hello
1. what day you're talking about?
2. what Microsoft fixit you talking?
3. don't you make changes to the computer before the show?
Please follow the steps from the link below.
Important: This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base:
http://support.Microsoft.com/kb/322756
How to back up and restore the registry in Windows
-
Date security upward for Windows Vista (KB2644615)
Date of security upward for Windows Vista (KB2644615) has my computer in a loop of the installation, how to fix this?
Hello
Method 1:
You can run the fix - it from the following link.
The problem with Microsoft Windows Update is not working
http://support.Microsoft.com/mats/windows_update/Method 2:
I suggest to temporarily disable the antivirus installed on your computer program and then try to install the updates. Check out the following link.
Disable the anti-virus software
http://Windows.Microsoft.com/en-us/Windows-Vista/disable-antivirus-software
NOTE: Antivirus software can help protect your computer against viruses and other security threats. In most cases, you should not disable your antivirus software. If you need to disable temporarily to install other software, you must reactivate as soon as you are finished. If you are connected to the Internet or a network, while your antivirus software is disabled, your computer is vulnerable to attacks.Method 3:
Step 1:
Try to put your computer in a clean boot state, and then try to install Windows vista service pack 1 manually.
By setting your boot system minimum state helps determine if third-party applications or startup items are causing the problem. Read the following article.
How to troubleshoot a problem by performing a clean boot in Windows Vista or Windows 7:
http://support.Microsoft.com/kb/929135
Note: once you are done with the boot, please follow step 7 of article to reset your computer to normal startup.Step 2:
Try to install the updates manually. Check out the following link.
http://www.Microsoft.com/en-US/Download/details.aspx?ID=28656 -
A security update for windows vista (KB2665364) cumulative hotfix for Kiibits (KB2647518) Activex and update Windows vista ((KB2679255) I get the error codes 800736B 3 and B 8007371) I can't find answers and I'm not tech saavy. Every day for a month updates failed to install
Hello
I would suggest trying the following methods and check if it helps.
Method 1:
In the following article from Microsoft Fixit to reset Windows Update components and check if the problem persists, run the fixit.
How to reset the Windows Update components?
http://support.Microsoft.com/kb/971058
Warning: Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems can occur if you modify the registry incorrectly. Therefore, make sure that you proceed with caution. For added protection, back up the registry before you edit it. Then you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click on the number below to view the article in the Microsoft Knowledge Base: http://windows.microsoft.com/en-US/windows-vista/Back-up-the-registry
Method 2:
Put the computer in a clean boot state, and then try to install the updates and check if it works.
How to troubleshoot a problem by performing a boot in Windows Vista or Windows 7:
http://support.Microsoft.com/kb/929135
Note: once you have completed troubleshooting, try the procedure described in step 7 to reset the computer to start as usual.
Method 3:
Try to download updates from the Microsoft Downloads Web site and check.
http://www.Microsoft.com/download/en/default.aspx
Hope the information is useful.
-
Microsoft will release a disc of a security update for Windows Vista Home Premium 32-bit?
A lot of my family security updates for Windows Vista Edition Premium did not install correctly. WillI have the opportunity to purchase these updates from Microsoft?
I am a senior with limited funds.
Visit the Microsoft Solution Center and antivirus security for resources and tools to keep your PC safe and healthy. If you have problems with the installation of the update itself, visit the Microsoft Update Support for resources and tools to keep your PC updated with the latest updates.
Maybe you are looking for
-
I have a new laptop preloaded with Win8.1. Have set Chrome as default browser. Installed Thunderbird and everything seems to work fine until I click on a hyperlink in a message body... nothing happens. It was above all modules have been added. I read
-
F2110 all-in-one: print Issos
I can't print from a program for example word, the printer goes through the motions but the page is empty. I have download the toolkit and ran this program all prints/scan very well.
-
Hi I have a HP Probook 6470 b. After installation of the latest series of Windows updates my laptop fails to open the common programs such as Word 2010, Adobe Acrobat Pro and Internet Explorer 11. Other programs such as Excel 2010 and Chrome are not
-
Microphones do not work on my Dell Vostro running Windows 7. None of the programs trouble shooter detects a problem. Would appreciate any suggestions. Have you tried several MICS to several ports without success.
-
HP TouchSmart Ultrabook 4 ENVY: power on password
I have a HP Envy that I can't get past the power on password, it gives me disable code of 85903248. Could someone make me a password that will get me past this? Thanks Robert