ACS 5.1 and 5.2 logs issue

Hi All,
I am having a lab set up with 2 ACS 5.1 and other with ACS 5.2. I am unable to see the logs for more than 2 days.The degault pathe is ... monitoring and reports > catalog AAA protocol > RADIUS Accounting. The problem is, if i need the logs for 7 days or more i can see only for last 2 days. Even on the CLI i tried to download, the format which i am getting is not readable and moreover i am able to see only for last 2 days. I raised a tac with cisco and their update to upgrade the s/w form 5.1 to 5.2.
Also the ACS which is having 5.1 is in production so i cant upgrade now . But i upgrade the other ACS from 5.1 to 5.2 and i ahve restored all the files from the production to lab ACS.
Now i am facing challenege in restoring the logs from 5.1 production to 5.2 lab setp.
Kindly help us to reslove the issue.
regards,
krishna

Hi Qobi,
In the RSA identity store properties you have the following option :
This Identity Store does not differentiate between 'authentication failed' and 'user not found' when an authentication attempt is rejected. From the options below, select how such an authentication reject from the Identity Store should be interpreted by ACS for Identity Policy processing and reporting .
Treat Rejects as 'authentication failed'
Treat Rejects as 'user not found'
And also, under your access service policy, if you click on "identity" you will be able to select "continue if user not found". Screenshot attached.
Hope this helps.
Nicolas
===
Don't forget to rate answers that you find useful

Similar Messages

Weblogic10.3 and Play2.10 logging issues

Hi
We are deploying play2.10 application as war inside ear under weblogic10.3 If i deploy my application without play app(deployed as war) logging will happen as expected. but if i deploy my .ear with play app(as play war) weblogic is throwing hell lot of trace and debug level logs. PF below log for reference. I don't want that loggers to be printed on the console when i start the weblogic server. can any one help me out here
[ESC[36mdebugESC[0m] ConfigurationFactory: Configuring ehcache from ehcache.xml found in the classpath: zip:/home/sigmauser/NET/CGM/CGMDomain/servers/CGMServer/tmp/_WL_user/CGM/s1nxgw/war/WEB-INF/lib/play.play_2.10-2.1.0.jar!/ehcache.xml
[ESC[36mdebugESC[0m] ConfigurationFactory: Configuring ehcache from URL: zip:/home/sigmauser/NET/CGM/CGMDomain/servers/CGMServer/tmp/_WL_user/CGM/s1nxgw/war/WEB-INF/lib/play.play_2.10-2.1.0.jar!/ehcache.xml
[ESC[36mdebugESC[0m] ConfigurationFactory: Configuring ehcache from InputStream
[ESC[36mdebugESC[0m] BeanHandler: Ignoring ehcache attribute xmlns:xsi
[ESC[36mdebugESC[0m] BeanHandler: Ignoring ehcache attribute xsi:noNamespaceSchemaLocation
[ESC[36mdebugESC[0m] CacheManager: Creating new CacheManager with default config
[ESC[36mdebugESC[0m] PropertyUtil: propertiesString is null.
[ESC[36mdebugESC[0m] ConfigurationHelper: No CacheManagerEventListenerFactory class specified. Skipping...
[ESC[36mdebugESC[0m] Cache: No BootstrapCacheLoaderFactory class specified. Skipping...
[ESC[36mdebugESC[0m] Cache: CacheWriter factory not configured. Skipping...
[ESC[36mdebugESC[0m] ConfigurationHelper: No CacheExceptionHandlerFactory class specified. Skipping...
[ESC[36mdebugESC[0m] MemoryStore: Initialized net.sf.ehcache.store.NotifyingMemoryStore for play
[ESC[36mdebugESC[0m] Cache: Initialised cache: play
[ESC[36mdebugESC[0m] ConfigurationHelper: CacheDecoratorFactory not configured for defaultCache. Skipping for 'play'.
[ESC[37minfoESC[0m] play: Application started (Prod)
CgmLifeCycleListener setState called
CgmLifeCycleListener start called
Initializing SqlSessionFactory with Domain Running : true
CgmLifeCycleListener setState called
[ESC[36mdebugESC[0m] mbeanserver: name=com.sigma.jcontainer:Name=JContainerMBean
[ESC[36mdebugESC[0m] mbeanserver: name=com.bea:ServerRuntime=CGMServer,Name=WLS_DIAGNOSTICS,Type=PersistentStoreRuntime
[ESC[36mdebugESC[0m] mbeanserver: ObjectName = com.bea:ServerRuntime=CGMServer,Name=WLS_DIAGNOSTICS,Type=PersistentStoreRuntime
[ESC[36mdebugESC[0m] mbeanserver: name=com.bea:ServerRuntime=CGMServer,Name=WLS_DIAGNOSTICS,Type=PersistentStoreRuntime
[ESC[36mdebugESC[0m] mbeanserver: Send create notification of object com.bea:Name=WLS_DIAGNOSTICS,ServerRuntime=CGMServer,Type=PersistentStoreRuntime
[ESC[36mdebugESC[0m] mbeanserver: JMX.mbean.registered com.bea:ServerRuntime=CGMServer,Name=WLS_DIAGNOSTICS,Type=PersistentStoreRuntime
[ESC[36mdebugESC[0m] mbeanserver: name=com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.archiveschemas,
Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: ObjectName = com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.archiveschemas,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: name=com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.archiveschemas,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: Send create notification of object com.bea:Name=weblogic.diagnostics.archiveschemas,PersistentStoreRuntime=WLS_DIAGNOSTICS,ServerRuntime=CGMServer,Type=PersistentStoreConnectionRuntime
[ESC[36mdebugESC[0m] mbeanserver: JMX.mbean.registered com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.archiveschemas,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: name=com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.data.HarvestedDataArchive,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: ObjectName = com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.data.HarvestedDataArchive,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: name=com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.data.HarvestedDataArchive,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: Send create notification of object com.bea:Name=weblogic.diagnostics.data.HarvestedDataArchive,PersistentStoreRuntime=WLS_DIAGNOSTICS,ServerRuntime=CGMServer,Type=PersistentStoreConnectionRuntime
[ESC[36mdebugESC[0m] mbeanserver: JMX.mbean.registered com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.data.HarvestedDataArchive,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: name=com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.object.HarvestedDataArchive,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: ObjectName = com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.object.HarvestedDataArchive,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: name=com.bea:ServerRuntime=CGMServer,Name=weblogic.diagnostics.object.HarvestedDataArchive,Type=PersistentStoreConnectionRuntime,PersistentStoreRuntime=WLS_DIAGNOSTICS
[ESC[36mdebugESC[0m] mbeanserver: Send create notification of object com.bea:Name=CGMServer,ServerRuntime=CGMSer
ver,Type=SNMPAgentRuntime
[ESC[36mdebugESC[0m] mbeanserver: JMX.mbean.registered com.bea:ServerRuntime=CGMServer,Name=CGMServer,Type=SNMPA
gentRuntime
[ESC[34mtraceESC[0m] modelmbean: Constructor
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'package' to 'weblogic.t3.srvr'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'interfaceclassname' to 'weblogic.management.runtime.ServerRunti
meMBean'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'com.bea.generatedByWLSInfoBinder' to 'true'.
[ESC[34mtraceESC[0m] modelmbean: Returns 'null'
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'Name' to 'ServerRuntime'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'descriptorType' to 'MBean'.
[ESC[34mtraceESC[0m] modelmbean: Constructor
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'com.bea.unharvestable' to 'true'.
[ESC[34mtraceESC[0m] modelmbean: Returns 'null'
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'Name' to 'DefaultURL'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'descriptorType' to 'Attribute'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'com.bea.unharvestable' to 'true'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'com.bea.description' to 'The URL that clients use to connect to this server's default network channel. The returned value indicates the default protocol, listen address and listen port: protocol://listen-address:listen-port <dl> <dt>Note:</dt> <dd> The default protocol, listen address and listen port are persisted in the domain's <code>config.xml</code> file, however when a server instance is started, command-line options can override these persisted values. This <code>getDefaultURL</code> method returns the URL values that are currently being used, not necessarily the values that are specified in <code>config.xml</code>. </dd> </dl> The returned URL will be consistent with dynamic channel updates. '.
[ESC[36mdebugESC[0m] modelmbean: d87b2deb Entry
[ESC[34mtraceESC[0m] modelmbean: Constructor
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'descriptorType' to 'attribute'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'name' to 'DefaultURL'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'displayName' to 'DefaultURL'.
[ESC[34mtraceESC[0m] modelmbean: Exit
[ESC[36mdebugESC[0m] modelmbean: d87b2deb Entry
[ESC[34mtraceESC[0m] modelmbean: Executed
[ESC[36mdebugESC[0m] modelmbean: d87b2deb Entry
[ESC[34mtraceESC[0m] modelmbean: Constructor
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'descriptorType' to 'attribute'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'name' to 'DefaultURL'.
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'displayName' to 'DefaultURL'.
[ESC[34mtraceESC[0m] modelmbean: Exit
[ESC[36mdebugESC[0m] modelmbean: d87b2deb Entry
[ESC[34mtraceESC[0m] modelmbean: Executed
[ESC[34mtraceESC[0m] modelmbean: Returns 'DefaultURL'
[ESC[34mtraceESC[0m] modelmbean: Returns 'Attribute'
[ESC[34mtraceESC[0m] modelmbean: returns true
[ESC[34mtraceESC[0m] modelmbean: Returns 'DefaultURL'
[ESC[34mtraceESC[0m] modelmbean: Returns 'Attribute'
[ESC[34mtraceESC[0m] modelmbean: Returns 'null'
[ESC[34mtraceESC[0m] modelmbean: Entry: setting 'displayName' to 'DefaultURL'.
[ESC[36mdebugESC[0m] modelmbean: d87b2deb Returning true: Invalid field is none
Thanks
Rajesh

I know this is a pain in the butt, but I had to use my Virt to get work done, and cant waste the time to reboot, reboot, etc, etc.
Heres a temp fix, possibly a full time one for you all, Download the Demo of VMWARE's Fusion (vmware has been around 10 times longer than Parallels), and you can test it for a month free (possibly Parallels will have a fix by then), they also have a Fusion Migrator tool, its also free, so I downloaded fusion with a test key, and the convertor, ran it, it converted my parallels to a fusion vert (leaving my parallels alone until they can release a fix) and made a duplicate of it (disk space is the only requirement) that loads in fusion.
Now I enjoy some of the features parallels uses, mostly the mapping of my windows My Documents to my Mac Documents, something fusion doesn't do, but can manually be done.
BUT to my surprise, fusion has 3d graphic support, as well as dual core emulation for the virt (which means you can turn it off, make it use 1 core) and get a better equal virt / OSX performance.
I hate to sound like a sales person, but if you need to work today, heres a free solution, I might just stay with fusion since I can play games I had to previously boot camp to use.
Lets hope a fix comes out, but its been nice to know about the graphics. I just created a small 5 gig xp install, for gaming only, running it on firewire 800 disk space, and I CANT BELIEVE the performance while being hosted from firewire, no lag that I thought the I/O would have running from a external disk.
Anyways, hope that helps. When I find a fix for parallels I will post it, I tried rolling back 1 update on Parallels and it didn't fix it, unfortunately they don't let you download old revisions, maybe someone might have something older than 5584 cause it still is affected as well, 5584 and 5600 both are crippled by 10.5.3.
Sad thing is what does apple care that it made XP break on it. I hope they do care and attempt to help.
SD

ACS 5.5 and disappearing logs

Hello
I'm having issues with logging on a Cisco ACS 5.5.0.46 cluster. Cluster has been upgraded from latest 5.3 ACS to 5.5.
After upgrading to 5.5 logging was working fine. Monitoring and Reports had historical logs and was logging live/current authentications.
A few weeks back there was an issue outlined in the post below:
https://supportforums.cisco.com/thread/2264123?tstart=30
logging on the log collector stopped working. After restarting the logging process in the cluster, logging on the log collector started working again and I restored the missing logs from backup.
A few days ago the log collector stopped workng again - no logs at all (nothing live or historic. I restarted the log collector ACS VM and it started logging again but logs prior to the restart are missing.
The ACS cluster is logging to syslog but I really need to have reliable logs on the ACS.
I'm aware of a recent patch for 5.5 but the release notes don't seem to mention the above issue.
Is it worth patching 5.5 or roll back to 5.4?
Thanks
andy

Andy,
Do you have log recovery option enabled under Monitoring and Report Viewer, select Monitoring Configuration > System Operations > Log Message Recovery.
For more information, go through the below listed link
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.5/user/guide/viewer_sys_ops.html#wp108302
~BR
Jatin Katyal
**Do rate helpful posts**

What is the current schedule for 6.1.2 and will it fix the Exchange transaction log issue in 6.1?

Just spent the entire night with virtually no sleep with our firm's group of IT engineers trying to keep our Exchange system online due to massive transaction log growth. Confirmed the issue related to 6.1 calendar bug with Activesync. The workarounds are not practical for large groups of users who depend on their mobile devices for work. Our users have no way of knowing that they are causing an issue so the Apple guidance isnt terribly useful to communicate to 1000 users. When can we expect a resolution? The problem is only going to get worse as more and more users hit the bug. Does anyone know if the issue will resolve as soon as someone installs the 6.1.2 update, assuming that has the fix. Im not trying to bash anyone but this is a very serious problem in enterprise deployments.

The update was released some time today. 6.1.2 appears to specifically fix the Exchange issue causing excess comms and logging issues. However, although the update is available i do not see the notification badge on the Settings icon. Is this controlled by Apple or is there a user setting i am missing somewhere? I would prefer that all users see the badge to expedite user action.

Config certificate and log issues

I config certificate and use it to connect ipsec vpn ， I just config
jinan-neusoft(config)#ip domain-name neusoft.com
jinan-neusoft(config)#crypto key generate rsa general-keys
The name for the keys will be: jinan-neusoft.neusoft.com
Choose the size of the key modulus in the range of 360 to 4096 for your
General Purpose Keys. Choosing a key modulus greater than 512 may take
a few minutes.
How many bits in the modulus [512]:
% Generating 512 bit RSA keys, keys will be non-exportable...
[OK] (elapsed time was 0 seconds)
jinan-neusoft(config)#
Nov 16 01:05:44.435: RSA key size needs to be atleast 768 bits for ssh version 2
jinan-neusoft(config)#
Nov 16 01:05:44.435: %SSH-5-ENABLED: SSH 1.5 has been enabled
jinan-neusoft(config)#crypto pki trustpoint CA1
jinan-neusoft(ca-trustpoint)# enrollment url http://59.44.43.217:80
jinan-neusoft(ca-trustpoint)# revocation-check crl
jinan-neusoft(ca-trustpoint)# rsakeypair DMVPN-SY-KEY
jinan-neusoft(ca-trustpoint)# auto-enrol
jinan-neusoft(config)#crypto pki authenticate CA1
Certificate has the following attributes:
 Fingerprint MD5: D5F9D56B 4D9A4260 43F21D39 811D7AD5
 Fingerprint SHA1: 1E49B228 DD57F4DB 43DD2C2F 03870C18 840DA12A
% Do you accept this certificate? [yes/no]: y
Trustpoint CA certificate accepted.
then I have log issues like below ，even I config auto-enroll , I don t get certificate pending information from my certificate server ，
my device is C3925 and ios is c3900-universalk9-mz.SPA.151-4.M4.bin ，how to deal with it ，top players ， THX~~~~
Nov 16 01:07:54.871: %PKI-6-CERTRENEWAUTO: Renewing the router certificate for trustpoint CA1
Nov 16 01:07:54.951: %CRYPTO-6-AUTOGEN: Generated new 512 bit key pair
Nov 16 01:07:55.115: CRYPTO_PKI: Certificate Request Fingerprint MD5: 939AF8C1 854DDA90 8FE03058 5635468F
Nov 16 01:07:55.115: CRYPTO_PKI: Certificate Request Fingerprint SHA1: 50F869D2 C0814317 7EB2ECC9 90461F3A 353E7089
Nov 16 01:07:55.119: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6
jinan-neusoft(config)#D05F70z 6D06B50z 6D07268z 6D43018z 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 4127784z
Nov 16 01:07:55.119: %SYS-2-MALLOCFAIL: Memory allocation of 40 bytes failed from 0x6D05DEC, alignment 0
Pool: Processor Free: 731143916 Cause: Interrupt level allocation
Alternate Pool: None Free: 0 Cause: Interrupt level allocation
-Process= "<interrupt level>", ipl= 3
-Traceback= 5564384z 6892328z 68B3064z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D43018z 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z
Nov 16 01:07:55.119: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D4308Cz 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 4127784z
jinan-neusoft(config)#
Nov 16 01:08:09.719: %PKI-6-CERTRENEWAUTO: Renewing the router certificate for trustpoint CA1
Nov 16 01:08:09.879: CRYPTO_PKI: Certificate Request Fingerprint MD5: 939AF8C1 854DDA90 8FE03058 5635468F
Nov 16 01:08:09.879: CRYPTO_PKI: Certificate Request Fingerprint SHA1: 50F869D2 C0814317 7EB2ECC9 90461F3A 353E7089
jinan-neusoft(config)#
Nov 16 01:08:09.883: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D43018z 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 4127784z
Nov 16 01:08:09.883: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D4308Cz 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 4127784z
jinan-neusoft(config)# Nov 16 01:07:54.871: %PKI-6-CERTRENEWAUTO: Renewing the router certificate for trustpoint CA1
Nov 16 01:07:54.951: %CRYPTO-6-AUTOGEN: Generated new 512 bit key pair
Nov 16 01:07:55.115: CRYPTO_PKI: Certificate Request Fingerprint MD5: 939AF8C1 854DDA90 8FE03058 5635468F
Nov 16 01:07:55.115: CRYPTO_PKI: Certificate Request Fingerprint SHA1: 50F869D2 C0814317 7EB2ECC9 90461F3A 353E7089
Nov 16 01:07:55.119: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6
jinan-neusoft(config)#D05F70z 6D06B50z 6D07268z 6D43018z 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 4127784z
Nov 16 01:07:55.119: %SYS-2-MALLOCFAIL: Memory allocation of 40 bytes failed from 0x6D05DEC, alignment 0
Pool: Processor Free: 731143916 Cause: Interrupt level allocation
Alternate Pool: None Free: 0 Cause: Interrupt level allocation
-Process= "<interrupt level>", ipl= 3
-Traceback= 5564384z 6892328z 68B3064z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D43018z 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z
Nov 16 01:07:55.119: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D4308Cz 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 4127784z
jinan-neusoft(config)#
Nov 16 01:08:09.719: %PKI-6-CERTRENEWAUTO: Renewing the router certificate for trustpoint CA1
Nov 16 01:08:09.879: CRYPTO_PKI: Certificate Request Fingerprint MD5: 939AF8C1 854DDA90 8FE03058 5635468F
Nov 16 01:08:09.879: CRYPTO_PKI: Certificate Request Fingerprint SHA1: 50F869D2 C0814317 7EB2ECC9 90461F3A 353E7089
jinan-neusoft(config)#
Nov 16 01:08:09.883: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D43018z 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 4127784z
Nov 16 01:08:09.883: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D4308Cz 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 4127784z
jinan-neusoft(config)#

I do not have the answer but have exactly the same issue, looks as if it is a bug of some kind :
Cisco CISCO3945-CHASSIS (revision 1.0) with C3900-SPE150/K9 with 980992K/67584K bytes of memory.
Processor board ID FCZ163371P3
6 FastEthernet interfaces
3 Gigabit Ethernet interfaces
1 terminal line
1 Virtual Private Network (VPN) Module
DRAM configuration is 72 bits wide with parity enabled.
255K bytes of non-volatile configuration memory.
250880K bytes of ATA System CompactFlash 0 (Read/Write)
System image file is "flash0:c3900-universalk9-mz.SPA.151-4.M4.bin"
Nov 16 07:37:16.611: CRYPTO_PKI: Signature Certificate Request Fingerprint MD5: 358FF778 7C2E66AE 895BF088 BF022442
.Nov 16 07:37:16.615: CRYPTO_PKI: Signature Certificate Request Fingerprint SHA1: 5F7A4300 20B62132 83D08C6E 2D315DF4 51EFE94D
.Nov 16 07:37:16.623: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D4308Cz 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 412
7784z
.Nov 16 07:37:16.623: %SYS-2-MALLOCFAIL: Memory allocation of 72 bytes failed from 0x6D05DEC, alignment 0
Pool: Processor Free: 704933204 Cause: Interrupt level allocation
Alternate Pool: None Free: 0 Cause: Interrupt level allocation
-Process= "", ipl= 3
-Traceback= 5564384z 6892328z 68B3064z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D4308Cz 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4AC
B9F4z Nov 16 07:37:16.611: CRYPTO_PKI: Signature Certificate Request Fingerprint MD5: 358FF778 7C2E66AE 895BF088 BF022442
.Nov 16 07:37:16.615: CRYPTO_PKI: Signature Certificate Request Fingerprint SHA1: 5F7A4300 20B62132 83D08C6E 2D315DF4 51EFE94D
.Nov 16 07:37:16.623: %SYS-3-INVMEMINT: Invalid memory action (malloc) at interrupt level
-Traceback= 5564384z 68B3034z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D4308Cz 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4ACB9F4z 412
7784z
.Nov 16 07:37:16.623: %SYS-2-MALLOCFAIL: Memory allocation of 72 bytes failed from 0x6D05DEC, alignment 0
Pool: Processor Free: 704933204 Cause: Interrupt level allocation
Alternate Pool: None Free: 0 Cause: Interrupt level allocation
-Process= "", ipl= 3
-Traceback= 5564384z 6892328z 68B3064z 945A8D0z 6D05DF0z 6D05F70z 6D06B50z 6D07268z 6D4308Cz 6D25044z 6D1988Cz 6D4CCE0z 91F0154z 91F0CC4z 91F0DA4z 4AC
B9F4z

I need to get the logs of my iPhone 5. I'm a registered as a developer and I have an issue with one of my app which is already in the market

I need to get the logs of my iPhone 5. I'm a registered as a developer and I have an issue with one of my app which is already in the market

The Firefox 3.5.x branch has reached end-of-life and is no longer maintained. 
You will no longer receive security updates. 
You can update Firefox via "Help > Check for Updates" or download and install the latest Firefox 3.6.x. 
Firefox 4 and later require at least OS X 10.5 and an Intel Mac.
* http://www.mozilla.com/firefox/4.0/system-requirements/
If you have problems with updating or with the permissions then easiest is to download the full version and trash the currently installed version to do a clean install of the new version.
Download a new copy of the Firefox program and save the DMG file to the desktop
* Firefox 3.6.x: http://www.mozilla.com/en-US/firefox/all-older.html
* Trash the current Firefox application to do a clean (re-)install
* Install the new version that you have downloaded
Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data.

HT1338 I have a new MacBook. Pro and never had any issues until yesterday. I can not get it to complete its cycle to. Turn on, where I can log in like normal. I read the reboot in the little manual, but nothing. Please help!!!!!

I have a new MacBook. Pro and never had any issues until yesterday. I can not get it to complete its cycle to. Turn on, where I can log in like normal. I read the reboot in the little manual, but nothing. Please help!!!!!

So what happens when you boot it up? What do you get?

RMAN BACKUPS AND ARCHIVED LOG ISSUES

제품 : RMAN
작성날짜 : 2004-02-17
RMAN BACKUPS AND ARCHIVED LOG ISSUES
=====================================
Scenario #1:
1)RMAN이 모든 archived log들을 삭제할 때 실패하는 경우.
database는 두 개의 archive destination에 archive file을 생성한다.
다음과 같은 스크립트를 수행하여 백업후에 archived redo logfile을 삭제한다.
run {
allocate channel c1 type 'sbt_tape';
backup database;
backup archivelog all delete input;
Archived redo logfile 삭제 유무를 확인하기 위해 CROSSCHECK 수행시 다음과
같은 메시지가 발생함.
RMAN> change archivelog all crosscheck;
RMAN-03022: compiling command: change
RMAN-06158: validation succeeded for archived log
RMAN-08514: archivelog filename=
/oracle/arch/dest2/arcr_1_964.arc recid=19 stamp=368726072
2) 원인분석
이 문제는 에러가 아니다. RMAN은 여러 개의 arhive directory중 하나의
directoy안에 있는 archived file들만 삭제한다. 그래서 나머지 directory안의
archived log file들은 삭제되지 않고 남게 되는 것이다.
3) 해결책
RMAN이 강제로 모든 directory안의 archived log file들을 삭제하게 하기 위해서는
여러 개의 채널을 할당하여 각 채널이 각 archive destination안의 archived file을
백업하고 삭제하도록 해야 한다.
이것은 아래와 같이 구현될 수 있다.
run {
allocate channel t1 type 'sbt_tape';
allocate channel t2 type 'sbt_tape';
backup
archivelog like '/oracle/arch/dest1/%' channel t1 delete input
archivelog like '/oracle/arch/dest2/%' channel t2 delete input;
Scenario #2:
1)RMAN이 archived log를 찾을 수 없어 백업이 실패하는 경우.
이 시나리오에서 database를 incremental backup한다고 가정한다.
이 경우 RMAN은 recover시 archived redo log대신에 incremental backup을 사용할
수 있기 때문에 백업 후 모든 archived redo log를 삭제하기 위해 OS utility를 사용한다.
그러나 다음 번 backup시 다음과 같은 Error를 만나게 된다.
RMAN-6089: archive log NAME not found or out of sync with catalog
2) 원인분석
이 문제는 OS 명령을 사용하여 archived log를 삭제하였을 경우 발생한다. 이때 RMAN은
archived log가 삭제되었다는 것을 알지 못한다. RMAN-6089는 RMAN이 OS 명령에 의해
삭제된 archived log가 여전히 존재하다고 생각하고 백업하려고 시도하였을 때 발생하게 된다.
3) 해결책
가장 쉬운 해결책은 archived log를 백업할 때 DELETE INPUT option을 사용하는 것이다.
예를 들면
run {
allocate channel c1 type 'sbt_tape';
backup archivelog all delete input;
두 번째로 가장 쉬운 해결책은 OS utility를 사용하여 archived log를 삭제한 후에
다음과 같은 명령어를 RMAN prompt상에서 수행하는 것이다.
RMAN>allocate channel for maintenance type disk;
RMAN>change archivelog all crosscheck;
Oracle 8.0:
RMAN> change archivelog '/disk/path/archivelog_name' validate;
Oracle 8i:
RMAN> change archivelog all crosscheck ;
Oracle 9i:
RMAN> crosscheck archivelog all ;
catalog의 COMPATIBLE 파라미터가 8.1.5이하로 설정되어 있으면 RMAN은 찾을 수 없는
모든 archived log의 status를 "DELETED" 로 셋팅한다. 만약에 COMPATIBLE이 8.1.6이상으로
설정되어 있으면 RMAN은 Repository에서 record를 삭제한다.

Very strange, I issue following command in RMAN on both primary and standby machine, but it they don't delete the 1_55_758646076.dbf, I find in v$archived_log, this "/home/oracle/app/oracle/dataguard/1_55_758646076.dbf" had already been applied.
RMAN> connect target /
RMAN> CONFIGURE ARCHIVELOG DELETION POLICY TO APPLIED ON ALL STANDBY;
old RMAN configuration parameters:
CONFIGURE ARCHIVELOG DELETION POLICY TO APPLIED ON ALL STANDBY;
new RMAN configuration parameters:
CONFIGURE ARCHIVELOG DELETION POLICY TO APPLIED ON ALL STANDBY;
new RMAN configuration parameters are successfully stored
RMAN>
----------------------------------------------------------------------------------

WebAnalyticsServiceApplication_ReportingDB log file and secondary DB files issue

Hello everyone,
So we have a problem, a customer has a SP2010 farm, SP on one server and SQL 2008r2 on another. Little (read none by the looks of things) maintenance has been applied to the server (both SQL and SP other than patching and windows backups) over nearly a year
and we are here now to upgrade to SQL 2012, found the current state and the situation is as follows (up-to now):
The SP install was done from the search server binaries to give better search options (thought this may be prudent to disclose)
The WebAnalyticsServiceApplication_ReportingDB log file is HUGE and will not truncate, Ive done the following:
backed up (full) the DB for web analytics
backed up log files for same DB (with truncate selected) (both through gui in SQL MS)
Tried to shrink log file (this told me through the gui that 99% was free in the log file, but it freed up only 1%, even after trying again and selecting 'reorganise pages before releasing unused space' and selecting 0MB for the 'shrink to' size)
Also, there are over 30 secondary DB files for this database, Ive seen other threads about these files but am stuck as how to do the following...
no one uses the web analytics
the data is not needed
I understand it maybe needed in the future
we do not need the data
how should I get rid and stop future log file and secondary DB file growth?
Anyone's help would be greatly appreciated.

For reference, you can control how long SP keeps the Web analytics data (which does generate one extra .ndf per week).
To set the limit on the data retention period:
On the Central Administration Web site, in the Application Management section, click
Manage service applications.
Click the Web Analytics Service Application row to select it and in the
Operations group of the ribbon click Properties.
In the dialog box, in the Data Retention Period section, set the data retention period, which can range from 1 month to 25 months.
See
https://technet.microsoft.com/en-us/library/ee620541.aspx#section1 for more info

Dacl on ACS 5.1 and Catalyst switch 3560

Dear all
I have ACS 5.1 and Catalyst switch 3560 with version 12.2(53)SE. I configure a dacl on the ACS and I use it on authorization profile.
This authrization profile is used on access policy.
I tried the authentication but it doesn't work. I checked the ACS logs and I found that the user is authenicated successfuly but the dacl gives this error (The Access-Request for the requested dACL is missing a cisco-av-pair attribute with the value aaa:event=acl-download. The request is rejected)
Steps:
11001 Received RADIUS Access-Request
11017 RADIUS created a new session
11025 The Access-Request for the requested dACL is missing a cisco-av-pair attribute with the value aaa:event=acl-download. The request is rejected
11003 Returned RADIUS Access-Reject
DACL:
deny ip host 1.2.3.4 1.2.3.0 0.0.0.255 log
permit ip any any log
Thanks on advance,

Dear Tiago
I applied the command "radius-server vsa send". Now I can see the dacl is applied but I can't see it on the switch and even the authentication is succueeded ont the ACS logs but it give me unauthoized on the switchport. You can see the logs( started with the username acstest and the access-list is applied but it doesn't work and you can see theat it goes for mab after eap timed out). I hope you can help on this issue.
Dec 13,10 10:29:00.513 AM
00-23-AE-7A-58-A6
00-23-AE-7A-58-A6
Default Network Access
Lookup
Dot1x-3560-Switch
1.2.3.4
FastEthernet0/5
TESTACS
22056 Subject not found in the applicable identity store(s).
Dec 13,10 10:28:29.186 AM
#ACSACL#-IP-Guest-4cfcc14d
Dot1x-3560-Switch
1.2.3.4
TESTACS
Dec 13,10 10:28:28.726 AM
acstest
00-23-AE-7A-58-A6
Default Network Access
PEAP (EAP-MSCHAPv2)
Dot1x-3560-Switch
1.2.3.4
FastEthernet0/5
TESTACS
Thanks,

When I open itunes and try to log out it freezes

when I open itunes and try to log out it freezes.

Close your iTunes,
Go to command Prompt -
(Win 7/Vista) - START/ALL PROGRAMS/ACCESSORIES, right mouse click "Command Prompt", choose "Run as Administrator".
(Win XP SP2 & above) - START/ALL PROGRAMS/ACCESSORIES/Command Prompt
In the "Command Prompt" screen, type in
netsh winsock reset
Hit "ENTER" key
Restart your computer.
If you do get a prompt after restart windows to remap LSP, just click NO.
Now launch your iTunes and see if it is working now.
If you are still having these type of problems after trying the winsock reset, refer to this article to identify which software in your system is inserting LSP:
iTunes 10.5 for Windows: May see performance issues and blank iTunes Store
http://support.apple.com/kb/TS4123?viewlocale=en_US

(Cisco Historical Reporting / HRC ) All available connections to database server are in use by other client machines. Please try again later and check the log file for error 5054

Hi All,
I am getting an error message "All available connections to database server are in use by other client machines. Please try again later and check the log file for error 5054" when trying to log into HRC (This user has the reporting capabilities) . I checked the log files this is what i found out
The log file stated that there were ongoing connections of HRC with the CCX (I am sure there isn't any active login to HRC)
|| When you tried to login the following error was being displayed because the maximum number of connections were reached for the server . We can see that a total number of 5 connections have been configured . ||
1: 6/20/2014 9:13:49 AM %CHC-LOG_SUBFAC-3-UNK:Current number of connections (5) from historical Clients/Scheduler to 'CRA_DATABASE' database exceeded the maximum number of possible connections (5).Check with your administrator about changing this limit on server (wfengine.properties), however this might impact server performance.
|| Below we can see all 5 connections being used up . ||
2: 6/20/2014 9:13:49 AM %CHC-LOG_SUBFAC-3-UNK:[DB Connections From Clients (count=5)]|[(#1) 'username'='uccxhrc','hostname'='3SK5FS1.ucsfmedicalcenter.org']|[(#2) 'username'='uccxhrc','hostname'='PFS-HHXDGX1.ucsfmedicalcenter.org']|[(#3) 'username'='uccxhrc','hostname'='PFS-HHXDGX1.ucsfmedicalcenter.org']|[(#4) 'username'='uccxhrc','hostname'='PFS-HHXDGX1.ucsfmedicalcenter.org']|[(#5) 'username'='uccxhrc','hostname'='47BMMM1.ucsfmedicalcenter.org']
|| Once the maximum number of connection was reached it threw an error . ||
3: 6/20/2014 9:13:49 AM %CHC-LOG_SUBFAC-3-UNK:Number of max connection to 'CRA_DATABASE' database was reached! Connection could not be established.
4: 6/20/2014 9:13:49 AM %CHC-LOG_SUBFAC-3-UNK:Database connection to 'CRA_DATABASE' failed due to (All available connections to database server are in use by other client machines. Please try again later and check the log file for error 5054.)
Current exact UCCX Version 9.0.2.11001-24
Current CUCM Version 8.6.2.23900-10
Business impact Not Critical
Exact error message All available connections to database server are in use by other client machines. Please try again later and check the log file for error 5054
What is the OS version of the PC you are running and is it physical machine or virtual machine that is running the HRC client ..
OS Version Windows 7 Home Premium 64 bit and it’s a physical machine.
. The Max DB Connections for Report Client Sessions is set to 5 for each servers (There are two servers). The no of HR Sessions is set to 10.
I wanted to know if there is a way to find the HRC sessions active now and terminate the one or more or all of that sessions from the server end ?

We have had this "PRX5" problem with Exchange 2013 since the RTM version. We recently applied CU3, and it did not correct the problem. We have seen this problem on every Exchange 2013 we manage. They are all installations where all roles
are installed on the same Windows server, and in our case, they are all Windows virtual machines using Windows 2012 Hyper-V.
We have tried all the "this fixed it for me" solutions regarding DNS, network cards, host file entries and so forth. None of those "solutions" made any difference whatsoever. The occurrence of the temporary error PRX5 seems totally random.
About 2 out of 20 incoming mail test by Microsoft Connectivity Analyzer fail with this PRX5 error.
Most people don't ever notice the issue because remote mail servers retry the connection later. However, telephone voice mail systems that forward voice message files to email, or other such applications such as your scanner, often don't retry and
simply fail. Our phone system actually disables all further attempts to send voice mail to a particular user if the PRX5 error is returned when the email is sent by the phone system.
Is Microsoft totally oblivious to this problem?
PRX5 is a serious issue that needs an Exchange team resolution, or at least an acknowledgement that the problem actually does exist and has negative consequences for proper mail flow.
JSB

Recently I logout from App Store and immediately I logged .after that I clicked the FaceTime and it is asking for signin.so I entered the credentials and clicked on signin .at that I got one pop up like rupees 5 deducted from your carrier account

Recently I logout from App Store and immediately I logged into the App Store .After that I clicked the FaceTime and it is asking for signin.so I entered the credentials and clicked on signin .at that moment I got one pop up like rupees 5/- deducted from your carrier account
from that moment onwards its keep on deducting the amount from mobile money account.its nothing but when I am enable the feature like FaceTime and imessage you are keep on deducting the amount from the carrier account
actually I can use the FaceTime and iMessage through internet right
then how can you deduct the amount from carrier even if the Internet is on in my mobile
can you please resolve this issue asap
iam facing this issue from so many days
but today very frequently the amount got deducted
if you need any information regarding this please let me know
i facing so many problem in my iPhone after installing iOS 7.0
from that time onwards repeadtly facing the performance issues
can you please check it with high priority
actualy now I'm not even switch on the Internet because of money deduction every time of rupees 5/-
one more issue was if iam trying to on the cellular data ,when i on the cellular data I.e., 2Giam not getting the internet
if enable the 3G and off it immediatly then I am getting Internet for that day
one that day if I off and on the cellular data,then it works correctly

Recently I logout from App Store and immediately I logged into the App Store .After that I clicked the FaceTime and it is asking for signin.so I entered the credentials and clicked on signin .at that moment I got one pop up like rupees 5/- deducted from your carrier account
from that moment onwards its keep on deducting the amount from mobile money account.its nothing but when I am enable the feature like FaceTime and imessage you are keep on deducting the amount from the carrier account
actually I can use the FaceTime and iMessage through internet right
then how can you deduct the amount from carrier even if the Internet is on in my mobile
can you please resolve this issue asap
iam facing this issue from so many days
but today very frequently the amount got deducted
if you need any information regarding this please let me know
i facing so many problem in my iPhone after installing iOS 7.0
from that time onwards repeadtly facing the performance issues
can you please check it with high priority
actualy now I'm not even switch on the Internet because of money deduction every time of rupees 5/-
one more issue was if iam trying to on the cellular data ,when i on the cellular data I.e., 2Giam not getting the internet
if enable the 3G and off it immediatly then I am getting Internet for that day
one that day if I off and on the cellular data,then it works correctly

I purchased a season of a TV show from itunes and it won't go onto my ipad, i've purchased several seasons in the past and never had this issue, how can i fix this?

I purchased a season of a TV show from itunes and it won't go onto my ipad, i've purchased several seasons in the past and never had this issue, how can i fix this?

Drew how is that even possible? I use gift cards all the time, any time I've had insufficient funds iTunes will not allow the purchase, sights Insufficient funds and rejects the purchase. Any time I log into my account the money in that account appears in the upper left corner. If you're not seeing that then you have other issues. Anyway... Kneil is right you should be able to rip CDs you own to your iTunes library (regardless of your money matters with iTunes), then depending on how you set up the music you need to add it to your playlist and then sync it to your iPod. Did imported music ever work? How are you ripping or importing the music to iTunes? Are you using a compatible format?
Something else to look at-- It's possible your cable is defective, have you tried a new or different cable? Some of what your describing is a bad cable issue. Good luck, Cheers.

Looking for successful auth debug between cisco 1113 acs 4.2 and Active Directory

Hello,
Does anyone have a successful authentication debug using cisco 1113 acs 4.2 and Active Directory? I'm not having success in setting this up and would like to see what a successful authentication debug looks. Below is my current situation:
Oct 6 13:52:23: TPLUS: Queuing AAA Authentication request 444 for processing
Oct 6 13:52:23: TPLUS: processing authentication start request id 444
Oct 6 13:52:23: TPLUS: Authentication start packet created for 444()
Oct 6 13:52:23: TPLUS: Using server 110.34.5.143
Oct 6 13:52:23: TPLUS(000001BC)/0/NB_WAIT/46130160: Started 5 sec timeout
Oct 6 13:52:23: TPLUS(000001BC)/0/NB_WAIT: socket event 2
Oct 6 13:52:23: T+: Version 192 (0xC0), type 1, seq 1, encryption 1
Oct 6 13:52:23: T+: session_id 763084134 (0x2D7BBD66), dlen 26 (0x1A)
Oct 6 13:52:23: T+: type:AUTHEN/START, priv_lvl:15 action:LOGIN ascii
Oct 6 13:52:23: T+: svc:LOGIN user_len:0 port_len:6 (0x6) raddr_len:12 (0xC) data_len:0
Oct 6 13:52:23: T+: user:
Oct 6 13:52:23: T+: port: tty515
Oct 6 13:52:23: T+: rem_addr: 10.10.10.10
Oct 6 13:52:23: T+: data:
Oct 6 13:52:23: T+: End Packet
Oct 6 13:52:23: TPLUS(000001BC)/0/NB_WAIT: wrote entire 38 bytes request
Oct 6 13:52:23: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:23: TPLUS(000001BC)/0/READ: Would block while reading
Oct 6 13:52:23: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:23: TPLUS(000001BC)/0/READ: read entire 12 header bytes (expect 16bytes data)
Oct 6 13:52:23: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:23: TPLUS(000001BC)/0/READ: read entire 28 bytes response
Oct 6 13:52:23: T+: Version 192 (0xC0), type 1, seq 2, encryption 1
Oct 6 13:52:23: T+: session_id 763084134 (0x2D7BBD66), dlen 16 (0x10)
Oct 6 13:52:23: T+: AUTHEN/REPLY status:4 flags:0x0 msg_len:10, data_len:0
Oct 6 13:52:23: T+: msg: Username:
Oct 6 13:52:23: T+: data:
Oct 6 13:52:23: T+: End Packet
Oct 6 13:52:23: TPLUS(000001BC)/0/46130160: Processing the reply packet
Oct 6 13:52:23: TPLUS: Received authen response status GET_USER (7)
Oct 6 13:52:30: TPLUS: Queuing AAA Authentication request 444 for processing
Oct 6 13:52:30: TPLUS: processing authentication continue request id 444
Oct 6 13:52:30: TPLUS: Authentication continue packet generated for 444
Oct 6 13:52:30: TPLUS(000001BC)/0/WRITE/46130160: Started 5 sec timeout
Oct 6 13:52:30: T+: Version 192 (0xC0), type 1, seq 3, encryption 1
Oct 6 13:52:30: T+: session_id 763084134 (0x2D7BBD66), dlen 15 (0xF)
Oct 6 13:52:30: T+: AUTHEN/CONT msg_len:10 (0xA), data_len:0 (0x0) flags:0x0
Oct 6 13:52:30: T+: User msg: <elided>
Oct 6 13:52:30: T+: User data:
Oct 6 13:52:30: T+: End Packet
Oct 6 13:52:30: TPLUS(000001BC)/0/WRITE: wrote entire 27 bytes request
Oct 6 13:52:30: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:30: TPLUS(000001BC)/0/READ: read entire 12 header bytes (expect 16bytes data)
Oct 6 13:52:30: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:30: TPLUS(000001BC)/0/READ: read entire 28 bytes response
Oct 6 13:52:30: T+: Version 192 (0xC0), type 1, seq 4, encryption 1
Oct 6 13:52:30: T+: session_id 763084134 (0x2D7BBD66), dlen 16 (0x10)
Oct 6 13:52:30: T+: AUTHEN/REPLY status:5 flags:0x1 msg_len:10, data_len:0
Oct 6 13:52:30: T+: msg: Password:
Oct 6 13:52:30: T+: data:
Oct 6 13:52:30: T+: End Packet
Oct 6 13:52:30: TPLUS(000001BC)/0/46130160: Processing the reply packet
Oct 6 13:52:30: TPLUS: Received authen response status GET_PASSWORD (8)
Oct 6 13:52:37: TPLUS: Queuing AAA Authentication request 444 for processing
Oct 6 13:52:37: TPLUS: processing authentication continue request id 444
Oct 6 13:52:37: TPLUS: Authentication continue packet generated for 444
Oct 6 13:52:37: TPLUS(000001BC)/0/WRITE/46130160: Started 5 sec timeout
Oct 6 13:52:37: T+: Version 192 (0xC0), type 1, seq 5, encryption 1
Oct 6 13:52:37: T+: session_id 763084134 (0x2D7BBD66), dlen 16 (0x10)
Oct 6 13:52:37: T+: AUTHEN/CONT msg_len:11 (0xB), data_len:0 (0x0) flags:0x0
Oct 6 13:52:37: T+: User msg: <elided>
Oct 6 13:52:37: T+: User data:
Oct 6 13:52:37: T+: End Packet
Oct 6 13:52:37: TPLUS(000001BC)/0/WRITE: wrote entire 28 bytes request
Oct 6 13:52:37: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:37: TPLUS(000001BC)/0/READ: read entire 12 header bytes (expect 33bytes data)
Oct 6 13:52:37: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:37: TPLUS(000001BC)/0/READ: read entire 45 bytes response
Oct 6 13:52:37: T+: Version 192 (0xC0), type 1, seq 6, encryption 1
Oct 6 13:52:37: T+: session_id 763084134 (0x2D7BBD66), dlen 33 (0x21)
Oct 6 13:52:37: T+: AUTHEN/REPLY status:7 flags:0x0 msg_len:27, data_len:0
Oct 6 13:52:37: T+: msg: Error during authentication
Oct 6 13:52:37: T+: data:
Oct 6 13:52:37: T+: End Packet
Oct 6 13:52:37: TPLUS(000001BC)/0/46130160: Processing the reply packet
Oct 6 13:52:37: TPLUS: Received Authen status error
Oct 6 13:52:37: TPLUS(000001BC)/0/REQ_WAIT/46130160: timed out
Oct 6 13:52:37: TPLUS(000001BC)/0/REQ_WAIT/46130160: No sock_ctx found while handling request timeout
Oct 6 13:52:37: TPLUS: Choosing next server 101.34.5.143
Oct 6 13:52:37: TPLUS(000001BC)/1/NB_WAIT/46130160: Started 5 sec timeout
Oct 6 13:52:37: TPLUS(000001BC)/46130160: releasing old socket 0
Oct 6 13:52:37: TPLUS(000001BC)/1/46130160: Processing the reply packet
Oct 6 13:52:49: TPLUS: Queuing AAA Authentication request 444 for processing
Oct 6 13:52:49: TPLUS: processing authentication start request id 444
Oct 6 13:52:49: TPLUS: Authentication start packet created for 444()
Oct 6 13:52:49: TPLUS: Using server 172.24.5.143
Oct 6 13:52:49: TPLUS(000001BC)/0/NB_WAIT/46130160: Started 5 sec timeout
Oct 6 13:52:49: TPLUS(000001BC)/0/NB_WAIT: socket event 2
Oct 6 13:52:49: T+: Version 192 (0xC0), type 1, seq 1, encryption 1
Oct 6 13:52:49: T+: session_id 1523308383 (0x5ACBD75F), dlen 26 (0x1A)
Oct 6 13:52:49: T+: type:AUTHEN/START, priv_lvl:15 action:LOGIN ascii
Oct 6 13:52:49: T+: svc:LOGIN user_len:0 port_len:6 (0x6) raddr_len:12 (0xC) data_len:0
Oct 6 13:52:49: T+: user:
Oct 6 13:52:49: T+: port: tty515
Oct 6 13:52:49: T+: rem_addr: 10.10.10.10
Oct 6 13:52:49: T+: data:
Oct 6 13:52:49: T+: End Packet
Oct 6 13:52:49: TPLUS(000001BC)/0/NB_WAIT: wrote entire 38 bytes request
Oct 6 13:52:49: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:49: TPLUS(000001BC)/0/READ: Would block while reading
Oct 6 13:52:49: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:49: TPLUS(000001BC)/0/READ: read entire 12 header bytes (expect 43bytes data)
Oct 6 13:52:49: TPLUS(000001BC)/0/READ: socket event 1
Oct 6 13:52:49: TPLUS(000001BC)/0/READ: read entire 55 bytes response
Oct 6 13:52:49: T+: Version 192 (0xC0), type 1, seq 2, encryption 1
Oct 6 13:52:49: T+: session_id 1523308383 (0x5ACBD75F), dlen 43 (0x2B)
Oct 6 13:52:49: T+: AUTHEN/REPLY status:4 flags:0x0 msg_len:37, data_len:0
Oct 6 13:52:49: T+: msg: 0x0A User Access Verification 0x0A 0x0A Username:
Oct 6 13:52:49: T+: data:
Oct 6 13:52:49: T+: End Packet
Oct 6 13:52:49: TPLUS(000001BC)/0/46130160: Processing the reply packet
Oct 6 13:52:49: TPLUS: Received authen response status GET_USER (7)
The 1113 acs failed reports shows:
External DB is not operational
thanks,
james

Hi James,
We get External DB is not operational. Could you confirm if under External Databases > Unknown User Policy, and verify you have the AD/ Windows database at the top?
this error means the external server might not correctly configured on ACS external database section.
Another point is to make sure we have remote agent installed on supported windows server.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/remote_agent/rawi.html#wp289013
Also provide the Auth logs from the server running remote agent, e.g.:-
AUTH 10/25/2007 15:21:31 I 0376 1276 External DB [NTAuthenDLL.dll]:
Attempting Windows authentication for user v-michal
AUTH 10/25/2007 15:21:31 E 0376 1276 External DB [NTAuthenDLL.dll]: Windows
authentication FAILED (error 1783L)
thanks,
Vinay

ACS 5.1 and 5.2 logs issue

Similar Messages

Maybe you are looking for