I want to enable accounting in my ACS 4.1

Hi everyone:
I have a issue, at this moment i have my ACS 4.1 running with authentication and authorisation. Also in a Switch i have the next lines:
aaa accounting exec default start-stop group tacacs+
aaa accounting commands 1 default start-stop group tacacs+
aaa accounting commands 15 default start-stop group tacacs+
The ACS 4.1 is enabled to use accounting.
in the part of part of "Reports and activity/TACACS+ Accounting" the next information:
-Date
-Time
-User-Name
-Group-Name
-Caller-Id
-Acct-Flags
-elapsed_time
-service
-NAS-IP-Address
-Access Device
-Network Device
-Start Time
But i can not see the commands that the users have used. I will appreciate if anyone can help me
Best regards.

Command accounting logs are stored in tacacs
administration logs. Also there is a known bug on ver 4.1.1 in where we don't get the command accounting logs and to fix this issue we need to apply patch ACS 4.1.1.23.5.
Please see this link,
http://tinyurl.com/mja2eh
Regards,
~JG
Do rate helpful posts

Similar Messages

Odd situation with Safari after enabling account expiration and locking

Hi team,
i found the following puzzling situation today.
I enabled account expiration and locking in a workspace, thereafter all end users were requested to change their password as soon as they attempted to login to the application.
Some of these users went through this process smoothly and after changing the password they could log in. Others apparently succeeded in changing the password but the password change process is triggered again and again.
These users are receiving the following message after clicking on "apply changes" (p50 of app 4155).
ERR-1777: Page 50 provided no page to branch to. Please report this error to your application administrator.
When clicking on "restart application", they get the following additional screen:
You have successfully logged out. You have been redirected here after using a logout link provided by an authentication scheme. To redirect to a page in your flow instead, do something like this:
Create a page in your flow and give it an alias PUBLIC_PAGE.
On the Flow Builder page attributes page, select the "Yes - This page is public" Public Page attribute.
Change the logout URL in your authentication template to redirect to this new page after the logout procedure executes. For example, using the API, make your logout URL:
wwv_flow_custom_auth_std.logout?p_this_flow=&FLOW_ID&p_next_flow_page_sess=&FLOW_ID:PUBLIC_PAGE:&SESSION
Note that the suggested URL uses a somewhat outdated syntax lacking the period after the application items, so you might want to revise it for future releases.
After various tests it turned out that the problem is in the browser (don't ask me what).
Safari users do not succeed in changing their passwords through page 4155:50, while Firefox users do.
I have a password change page inside my application though and everybody can change their password from there successfully.
Also, after changing the password using Firefox, Safari users can log in without problems whatsoever.
So the final question is: what's wrong with page 50 of application 4155 when run from Safari on Mac?
It happened with Apex 3.1.2 and Safari Version 3.2.1 (5525.27.1)
Thanks!
Flavio
http://oraclequirks.blogspot.com/search/label/Apex

Scott,
that was exactly what i was about to do yesterday night, but at the post office i realized i didn't know the address :D
Then, fortunately for me, but regrettably for you (hehehe), i realized that Safari is not the culprit.
For some reason people using Safari were always submitting the page with enter, while Firefox users were submitting with the button.
I made a test and Safari is fine as long as you click on the button, the bug is in the submit through the enter key.
Thanks and sorry about the mac air, may be the next time!
Flavio
PS: aren't you coming to ODTUG Kaleidoscope?

Password Aging & Account Lockout in ACS 4.2

I have a requirement that in ACS the user accounts should get disabled after 1 day , so in the group setting under the Password Aging Field I configured the same as 1 day , the Grace & Warning Period is 0 days
I want that all these user accounts would be active for 30 days , and the moment the account is used (i.e the Start Message appears in the Radius Accounting ) then after 1 day from the usage then as per the Password Aging Rule the account should get expired.
Now my query is this password aging rule will start from the day I create the account in the ACS or from the day the user logs in.
I don’t want to use the Account Lockout Tab as I don’t know when the guest account would be used.
Request someone to help pls clarify my doubt.
Regards

Hi Yusuf,
Password Aging on ACS will just prompt to change the password. it will not disable the account.
The Account is present on the AD. So the Disabling and lockout features for an account will come from the AD.
I don't think a change in password for a guest account is what you would want to do.
Also according to me disabling the account should be a feature only for the AD admin and not open. A lockout can definately happen but that also has to be defined on the AD.
The link to password Aging on ACS is as follows:
http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/GrpMgt.html#wp525115
Hope this helps.
Regards,
Anisha
P.S.: please mark this string as answered if you feel the query is answered.

If I click on an e-mail address link in a web page instead of a blank message opening I always get a pop up screen with a log-in for googlemail. I do not have and do not want a googlemail account. I just want to be able to send e-mails using Outlook.

If I click on an e-mail address link in a web page instead of a blank message opening I always get a pop up screen with a log-in for googlemail. I do not have and do not want a googlemail account. I just want to be able to send e-mails using Outlook.

OUtlook was already set as the mail client for FF, and is my operating system (XP)'s default mail programme. therefore problem not solved at all. what I get whenever I follow a link in a webpage to send an e-mail is a little pop up window asking me to sign in to gmail or open an account. any other suggestions?

I do not use and do not want an iCloud account and I keep getting requests to sign in....how do I stop the request?

I do not use and do not want an iCloud account and I keep getting requests to sign in....how do I stop the request?

If you bought the machine new yourself, and did not enter a password when configuring it, leave the field blank.
If you bought it used, then you need to reset the password, as described here:
Apple Article to reset the password

HT201269 Hi. I have shared an Apple ID with my children for some time. As they are getting older they do not wnat me seeing all their messages, photos etc so want their own accounts. How can they access their purchased music and apps on the new account

Hi. I have shared an Apple ID with my children for some time. As they are getting older they do not wnat me seeing all their messages, photos etc so want their own accounts. How can they access their purchased music and apps on the new account please?

Yes.
On their iOS devices, under Settings>iTunes & App Store, they should use your Apple ID. When they log into iCloud, iMessage and Facetime, they should use their personal Apple IDs.

I have a IPod and IPad on my iTunes account. My wife now has a iPhone. We share a computer. She wants an iTunes account. Can I add a second iTunes account to her half of the PC?

I have an iPod and iPad. My wifr just go an iPhone and wants an iTune account. Can I have 2 separate accounts on one PC, and if so how do I do that? Can she share my music files? Thanks.

"Can I have 2 separate accounts on one PC,"
Yes. not sure why you would want two accounts, but you can if you like.
" Can she share my music files? "
Yes. Not sure why you wouldn't just use one account and library, but you can if you like.
How to use multiple iPods, iPads, or iPhones with one computer

I brought a macbook pro, but i can not use my apple id.because its already register onther account.i couldnt found that person.i want reset that account,can tell me how can i do this?

i brought a macbook pro, but i can not use my apple id.because its already register onther account.i couldnt found that person.i want reset that account,can tell me how can i do this?

maxsurovi wrote:
i brought a macbook pro, but i can not use my apple id.because its already register onther account.i couldnt found that person.i want reset that account,can tell me how can i do this?
Restore the Mac to Factorty settings to make it Truly Yours.
Note:
This should have been done before you took possession...
Apple What to do before selling or giving away your Mac
http://support.apple.com/kb/HT5189?viewlocale=en_US&locale=en_US
Also See Thomas Reed's How to Prepare your Mac for sale

HT201274 I have my brothers icloud account on my ipad and i want my icloud account back I have all my games from my acount but I can see his massages notes etc how can I get my icloud account back I tried so many things please help .???

I have my brothers icloud account on my ipad and i want my icloud account back I have all my games from my acount but I can see his massages notes etc how can I get my icloud account back I tried so many things please help .???

go to settings and sign out his apple id in the sections i tell you:
1.game center
2.itunes and appstore
3.messages
4.icloud(delete acount;it wont realy delete it will only remove from your ipad)
5.facetime
and then enter your icloud in each and every section

HT1212 My iPod touch is disabled after too many attempts and I want to enable it without getting it clear so can you please help me out in this....

My iPod touch is disabled after too many attempts and I want to enable it without getting it clear so can you please help me out in this....

A data recovery company MAY be able to do it for a price. The Disabled is a very good security feature.
JWhy not just restore from the last backup you have?
Place the iOS device in Recovery Mode and then connect to your computer and restore via iTunes. The iPod will be erased.
iOS: Wrong passcode results in red disabled screen
If recovery mode does not work try DFU mode.
How to put iPod touch / iPhone into DFU mode « Karthik's scribblings
For how to restore:
iTunes: Restoring iOS software
To restore from backup see:
iOS: How to back up
If you restore from iCloud backup the apps will be automatically downloaded. If you restore from iTunes backup the apps and music have to be in the iTunes library since synced media like apps and music are not included in the backup of the iOS device that iTunes makes.
You can redownload most iTunes purchases by:
Downloading past purchases from the App Store, iBookstore, and iTunes Store

I want to enable a PK in a tables with more than 1680 subpartitions

Hi All
i want to enable a PK in a tables with more than 1680 subpartitions
SQL> ALTER SESSION ENABLE PARALLEL DDL ;
Session altered.
SQL> alter table FDW.GL_JE_LINES_BASE_1 enable constraint GL_JE_LINES_BASE_1_PK parallel 8;
alter table FDW.GL_JE_LINES_BASE_1 enable constraint GL_JE_LINES_BASE_1_PK parallel 8
ERROR at line 1:
ORA-00933: SQL command not properly ended
SQL> alter table FDW.GL_JE_LINES_BASE_1 enable constraint GL_JE_LINES_BASE_1_PK parallel 8 nologging;
alter table FDW.GL_JE_LINES_BASE_1 enable constraint GL_JE_LINES_BASE_1_PK parallel 8 nologging
ERROR at line 1:
ORA-00933: SQL command not properly ended
SQL> alter table FDW.GL_JE_LINES_BASE_1 parallel 8;
Table altered.
SQL> alter table FDW.GL_JE_LINES_BASE_1 enable constraint GL_JE_LINES_BASE_1_PK;
alter table FDW.GL_JE_LINES_BASE_1 enable constraint GL_JE_LINES_BASE_1_PK
ERROR at line 1:
ORA-01652: unable to extend temp segment by 128 in tablespace TS_FDW_DATA
Please advice or tell how it would be the best way to do this
Regards
Jesus

When you try to create a PK you automaticaly created an index. If you want to put this index in different tablespace you should use 'using index..' option when you create this primary key.

ALL I WANT IS MY ACCOUNT NUMBER!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

I have been calling I cant reach a ******* human, Ive been all over this website. All i want is my ******* account number!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

First off knock off the all caps.
Secondly we don't work for verizon wireless so we have no idea what your account number is.
I told you to read your invoice, let me guess you don't have paper billing ?
In that case you either log into http://www.verizonwireless.com (this site) you need to know your phone number, and your My Verizon password or you have to register.
Then click on My Bill and your account number is there. Or as Tiki said if prepaid its your telephone number.
Good Luck

Now I had to restart my Ipod all over again and when I want to get apps I can't because of a billing information problems. What security code do they want on my account settings information?

Now I had to restart my Ipod all over again which because of that i lost all my data. When I want to get apps I can't install them because of a billing information problems. What security code do they want on my account settings information? And how do you delete purchased apps that you install, but didn't want?

Maybe the three or four digit security code on your credit card card
http://www.creditcards.com/credit-card-news/credit-card-verification-numbers-sec urity-code-1282.php
or maybe the answers to your security questions. If you do not remember them:
From a Kappy post
The Best Alternatives for Security Questions and Rescue Mail
1. Send Apple an email request at: Apple - Support - iTunes Store - Contact Us.
2. Call Apple Support in your country: Customer Service: Contact Apple support.
3. Rescue email address and how to reset Apple ID security questions.
An alternative to using the security questions is to use 2-step verification:
Two-step verification FAQ Get answers to frequently asked questions about two-step verification for Apple ID.

HT204411 i want a itunes account to Release my songs plz help me how ?

i want a itunes account to Release my songs plz help me how

A possible cause on this is that you have an outstanding balance. Might be an unpaid purchase, Credit Card issue or what not. Contact them via expresslane.apple.com

HT4098 When I click on "Your Account" to manage my subscriptions, I get a survey, I win an they want my bank Account or it is H Block. I believe your site is hacked.

When I click on " Your Account" to manage my subscriptions on my pc, I get a survey which says I won and want my bank account ot ii is HR Block. Is the site hacked

This is a user forum, you are not addressing Apple.
Are you doing this within iTunes? It's working fine for me. Perhaps it is something within your system.
You may want to contact iTunes directly
http://www.apple.com/support/itunes/contact/

I want to enable accounting in my ACS 4.1

Similar Messages

Maybe you are looking for