ACS 5.3 RADIUS authentication failing - Active Directory Agent

calvincbehr — Mon, 11 Mar 2019 01:52:20 GMT

Hi, I'm somewhat new to ACS and am trying to complete a migration from 4 to 5.3

Currently, I've got ACS joined to my (2003) domain, and it shows status connected (although the test connect fails).

I have aaa working without issue for TACACS, but all RADIUS authentication is currently failing. Logs show the message below:

"24401 could not establish connection with acs active directory agent"

I'm not seeing anything telling in the logs on the domain controllers. Any idea would be greatly appreciated!

Thanks,

-cb

ACS 5.3 RADIUS authentication failing - Active Directory Agent

calvincbehr — Mon, 02 Apr 2012 20:38:59 GMT

Just a note in case anyone runs into this - there was no issue with ACS or the domain. The cause of the problem was an incorrect shared secret on several of the RADIUS devices. This was overlooked as ACS was only providing active directory and active directory agent related error messages (instead of a shared secret / key mismatch error which ACS did provide with TACACS+ devices).

topic ACS 5.3 RADIUS authentication failing - Active Directory Agent in Network Access Control

ACS 5.3 RADIUS authentication failing - Active Directory Agent

ACS 5.3 RADIUS authentication failing - Active Directory Agent