ACs For Windows 4.1.(1) build 23

Hi.
We´ve got two Windows 2003 Server R2 machines, with installed Cisco ACS For Windows 4.1.(1) Build 23 used for RADIUS users authentication and now days we´re trying to deploy now a TACACS+ configuration to the network device manage now from those ACSs, TACACS+ Accounting tab works fine, but the Accounting administration records or logs are updated but when I click on the TACACS+ Administration Tab the showed log files are empty, I knew about a bug in the 4.1 versión, the question is?
Can I fix the issue if I upgrade or install only the 4.1.1.23-5 patch?
It´ll be enough?
Many thanks.

Similar Messages

Replication issues with ACS for Windows 3.3.3 build 11

I have built two ACS for Windows servers on Windows 2003 SP1. The AD environment is Windows 2003 SP1 as well. I have configured the two ACS servers on each box. However, when I go to replicate from box A to box B, the following error appears:
Inbound database replication from ACS 'acsradius.asu.edu' denied - shared secret mismatch
I have double checked the shared secret keys on both servers in the Network Configuration AAA servers section. Any idea what the issue is?
Thanks.

Do not run replication to a server installed on Windows 2003. Due to changes in the way Win2003 handles registry changes, each change can take up to 100 times longer and replication can fail and the server hang.

Password History Validation - ACS for Windows 4.2.x

Hello,
I'm evaluating the Secure ACS for Windows v4.2 platform against PCI DSS v2.0, specifically the "Implement Strong Access Control Measures" section.
We currently run version 4.0(1) Build 27 and use local user and password management.
For a variety of reasons I'd prefer to maintain this approach rather than pursue integration with an external identity store such as AD, but I need to know whether or not the in-bult password validation options are stringent enough to meet all of the relevant requirements.
I believe from the research I've done so far that version 4.2.x should meet the majority, but there is one in partiuclar about validation of previously used passwords that I'm still unclear on.
In the "Local Password Management" section of the ACS 4.2.1 User Guide (Text Part Number: OL-20208-01) it states that the password validation options include "Password is different from the previous value".
The PCI standard states: "Do not allow an individual to submit a new password that is the same as any of the last four passwords he or she has used."
Q) How many previous passwords is the newly submitted password validated against? Is it just the last one or will it check against more? Is there any way to configure how many it checks against?
Any help or guidance very much appreciated.
Cheers,
Nick

Hi Lomon,
After login in to ACS application. You can click on the Cisco logo on top left... You can find the patch version.please refer the below screen shot.
Please do rate if the given information helps.
By
Karthik

Can Appliance 1113/1120 running ACS 4.1 replicate to ACS for Windows 4.2.1.15.2

Anyone tested/tried to replication from ACS 4.1 (running on Appliance) to ACS for Windows 4.2(1)?

Hi ,
For replication to work between the two acs they should be on same version and patch level.
Thanks
Waris Hussain.

Identify Patch Version in ACS for Windows 4.2

Hi guys,
I need to identify the correct patch Version in a Customer ACS for Windows 4.2
How can I do this task ?
In the about page I cannot find any reference to patch
My Best Regards,
Andre Lomonaco

Hi Lomon,
After login in to ACS application. You can click on the Cisco logo on top left... You can find the patch version.please refer the below screen shot.
Please do rate if the given information helps.
By
Karthik

ACS for Windows 4.01 question

Easy question, how do you see the serial number for ACS for windows? is there a command line, is it just the pak # licenses ?
Thanks.

Hi,
No serial number for ACS for windows. No license required for ACS for windows.
Hope this helps.
Regards,
Anisha
P.S.: please mark this post as answered if you feel your query is resolved. Do rate helpful posts.

ACS for Windows vs ACS Appliance?

First, the only thing I saw on the Appliance was that it was a 'hardened OS'. So I'm assuming like many of their other appliances that this is Windows 2003 locked down? Regardless if it is or not, are there any issues with the appliance being in a mixed environment with ACS for Windows and replication between the two?
Thanks,
Raun

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/remote_agent/rawo.html
When you use ACS for Windows, you install it on a member server, which can "relay" the auth requests to the domain controllers.
ACS SE's are not a member in the domain, therefore you need to install the remote agent on a member/DC, so that it would act as a "relay agent" for the auth requests.
You'll also need to manually create a workstation account in AD to allow auth requests from the ACS SE's.
The default name used is "CISCO", but it can be defined differently.
For this part, see
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/remote_agent/rawi.html#wp311476

Remote Agent for ACS for Windows 2008 R2 64-bit

Hi,
We having difficulties with installing remote agent on windows 2008 R2 64-bit server and got the attached error.
Our ACS is 4.2.0.124 and remote agents we tried are :Remote-Agent-ACSse-win-v4.2.1.15-K9.zip and Acs-4.2.1.15.9-RA.zip.
I see following urls says it does not support Windows 2008 R2 and also 64-bit Windows,
https://supportforums.cisco.com/message/3135061#3135061
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/remote_agent/rawi.html#wp289019
However following url says its support 2008 R2 with 64-bit version
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2.1/Release_Notes/acs421_rn.html
Appreciate if someone can adivse us what vesion (file name) of Remote Agent can support (or working) for Windows 2008 R2 64-bit.
thanks in advance

Hi Tarik,
What I wanted to say that the below url says that ACS 4.2 does not support on 64-bit OS:
ACS Requirements
You must use ACS Remote Agent for Windows, version 4.2, with ACS SE, version 4.2. We do not support other Cisco Secure ACS releases.
Note ACS Remote Agent 4.2 for Windows does not support 64-bit operating systems.
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_solution_engine/4.2/installation/guide/remote_agent/rawi.html#wp289019
However could you please let me know what exact Remote Agent file you recommend to use for windwos 2008 R2 64-bit Server. The ACS SE version that I have is 4.2.0.124.
Thanks

Just installed DPS for windows cs6 and Folio Builder isn't working

I've just installed the DPS for windows CS6, but there are no options in the Folio Builder, yet i can create new Articles. How do i get the Folio Builder working?
Does it need to be connected to the internet? I work for a large organisation and have firewall restrictions limiting internet access from In Design, but thought i could work offline.
Any clues to what i might be doing wrong?
Thanks

Yes, CS6 Creative Cloud on Windows 7. I also am running this on my old Mac Pro which is working fine. (I only run one at a time to avoid license problems).
Anything related to the "folio" is empty or functionless. I can see the Folio Builder and Folio Overlay panels, but nothing is in the windows. I installed the CS6 DPS tools as well.

ACS for windows first login

Hi while installing ACS 4.1 for windows, there was no option for setting admin username and password. how can i login into it? in the installation guide there is no default username and password. help

After you finish the install, you can access ACS from the web browser on the server that you installed ACS on without credentials. Then you can setup you admin accounts.

Kinect for Windows v1 with 3D Builder isn't recognized

I have a Kinect for Windows v1 that I am trying to use with 3D Builder. The success of using the v1 will determine whether I will bother with the v2.
I regularly use the v1 with the Skanect software on the same machine I have installed 3D Builder onto, so I know the Kinect is functional.
Any insight into how I can get 3D Builder to recognize the v1 would be appreciated.

3D builder only works with v2, since v1 is not supported in Windows Store environments. You can use the SDK samples as alternatives to scan in desktop apps and import the meshes into 3D Builder.
Carmine Sirignano - MSFT

Support phone number or chat for Kinect for Windows v2? 3D Builder won't work

I have a Dell Inspiron 5000, Xbox One Kinect and adapter for use of the Kinect sensor with a Windows PC. The sensor works fine or as well as can be expected on the Xbox One. I've tried using it with 3D Builder which is the first app that Microsoft
offers for the Kinect with PC after connecting it and downloading the drivers. Unfortunately, it says that my rate is too slow so I was looking for support to see if this is an Inspiron issue or not. The USB 3.0 ports may or may not support the
bandwidth but I can't really tell.
Does anyone know if there is a support number or chat area for Kinect for Windows as I keep getting transferred to the Xbox group and no one there seems to know anything about Kinect for Windows? I'll also settle for if anyone can tell me if there
is a problem with that application or the Dell Inspiron 5000.
Thanks,
Reinaldo

The technology 3D builder is using requires a very specialized graphics card to be able to work at full speed. Laptop systems typically only can achieve the very minimal amount of processing which will work but very slowly.
If you have a desktop system with an NVidia GeForce GT 670 or other in the same processing class of GPU's you should be able to achieve 30fps. Otherwise with lower end or laptop based systems even the highest end Alienware we have seen ~27fps. My experiences
have been typically anywhere from ~1-8fps with Intel Based on-board gpu's(4000 series), ~15-22fps with mobile NVidia GT 750M chipsets and 23-30fps with GeForce GT 760 desktop system.
Carmine Sirignano - MSFT

AsRock Extreme9 X79 + Kinect for Windows V.2 + 3D Builder App: USB 3.0 Issue !

Hello everyone!
I have a tremendous problem!
I recently bought a "Kinect for Windows V.2".
I suspected it was broken, so, I sent it to the Microsoft XBOX
replacement
Support Centre in Germany and they have replaced it with a new one.
Therefore, the problem persists!
The Problem:
- I connect the Kinect 2 to my PC with Motherboard AsRock X79 Extreme9, and the USB 3.0 controller Texas Instruments
crash with Error 43! (Not supported)
So, now I have bought on Amazon a "Targus TS-DPU3" external USB 3.0 Hub, that was confirmed that run with Kinect 2.
I hope it will work correctly, with sufficient bandwidth by connecting it to the onboard USB 3.0 port !
(USB 3.0 Texas Instruments + USB 3.0 Targus External Hub (compatible with Kinect 2)= 5Gb/s)
-Somebody have another suggestion for the compatibility between my "AsRock
Extreme9
X79" + "USB 3.0" + "Kinect 2" ???
Please help me!
Thank you very much!

As you are aware, TI USB3 host controllers/chipset is not supported. Only Intel and Renesas are supported given the testing that was done at time of release. Plugging the hub into that is not going to work, since you have not corrected the
internal issue.
You need to purchase a PCI Express Gen 2.0 USB3 expansion card that will plug into a PCI Express slot that is Gen 2.0 enabled.
Carmine Sirignano - MSFT

With Cisco Secure ACS For Windows TACACS+, authentication fails with AD

I am setting up a Cisco Secure ACS 4.2 server to act as a TACACS server for Switches and Routers I am using Windows 2003 server for the ACS,
and a Windows 2003 Active Directory server. The AD server is fine, as it is used for many other things.
I have set up ACS as defined nit he installation guide, including all the steps in the 'Member Server' section of the install guide
when using AD as an external database (i.e. setting up the services to run with a domain admin account, setting up a machine called 'CISCO'
on the domain etc).
I've set the unknown user policy to use the Windows database if the internal database doesn;t contain the user details.
If I add a user to the internal database, the authentication goes through fine, with an entry in the 'Passed Authentications' log,
02/24/2010,05:07:03,Authen failed,eXXXX,Network Administrators(NDG) ,X.X.X.X,(Default),Internal error,,(geting error message as INternal Error)
I've scoured google etc, and just cannot come up with any reason why this should be happening.
I've followed all the install guides to the letter. I need to get this up and running as soon as possible,
so am looking forward to finding out if anyone can help me with this one!
THanks and regards
Sharan

Hi Jesse,
Thasts a great answer and Soution.
My previous version was 4.2 and it was installed on 64 bit machine hence getting internal Error.
After this answer i have upgraded it to ACS4.2.1 and its started working fine
Thanks very much for the help
Dipu

ACS for Windows 4.1 - two issues

Hi,
Now that I have my ACS 4.1 server running on Windows 2003, I'm having two issues:
1) I can't view the admin interface with Internet Explorer 7. It just tells me that "Some content or files on this webpage require a program that you don't have installed." It seems to work fine with Firefox 3, and I can connect to our old ACS 3.2 server with IE7 with no problem.
2) We're set up to use Active Directory. I've got the external database set up fine, and have a specific AD security group mapped to a group on the ACS server for myself and one other engineer to have access. That seems to work fine - we can both get into the equipment in enabled mode. I added a third user to the AD group, but that user can't log into the same equipment the other two users can.
I've been searching for solutions to both problems, both in google and on Cisco's site to no avail. Can anyone point me in the right direction?

1) brain fart - I had been putting in the server name and port number and it wouldn't work, but once I started typing the full http://servername:port, it worked. I did have the latest java installed.
2) The group has the correct settings to log in the enabled mode. The other two users in the same group work just fine. I don't seem to have any passed authentication logs - I may need to turn something on for that, but it got me thinking. I checked the failed attempts log, and it seems I don't have windows dialin permissions set on the third account.
Thanks - seems I just needed to have someone point out my n00bishness. ;-)

ACs For Windows 4.1.(1) build 23

Similar Messages

Maybe you are looking for