Windows Remote Agent Failover timeout (ACS 4.2)

mmshg1234 — Mon, 11 Mar 2019 00:13:18 GMT

Hey everybody,

I'm using two Windows 2003 Servers with local users as External User Databases (so they're both usind the \LOCAL domain) for my ACS 4.2 appliance. I've added the machines as Windows Remote Agents and configured them as Primary and Secondary Remote Agents. In general, all this works great including the failover. However, if the primay machine actually fails, it takes about 10 - 15 minutes until the ACS uses the secondary server for authentication. Is there any way to adjust the failover timers? As far as I understand, the Remote Agent response timeout setting on the Remote Agent selection page is only for retrieving the Windows groups for group mapping. I've lowered this setting but it didn't have an effect on my problem.

Can anybody tell me more about the failover mechanism here? Does the ACS simply wait for the Primary Remote Agent for a while and then proceed to the Secondary? How long is failover supposed to take? Can any adjustments be made?

Any hints will be much appreciated!

Matt

Re: Windows Remote Agent Failover timeout (ACS 4.2)

Jagdeep Gambhir — Mon, 28 Jun 2010 10:04:09 GMT

Hi,

How many groups do we have in AD? Currently the SE will wait 60 seconds for the RA to return group information when browsing to the group mapping page in the windows database group mappings.

We need to check cslog from appliance and cslogagent from remote agent as that will give us a clear sequence of events happening.

Regards,

~JG

Do rate helpful posts

Re: Windows Remote Agent Failover timeout (ACS 4.2)

mmshg1234 — Mon, 28 Jun 2010 14:07:47 GMT

Hi,

thanks for the quick reply. I'll have to get admin access for the Windows machines and try out the failover scenario at a late hour to keep the impact low. I'll get the info asap.

We only have about 5 local groups in addition to the Windows default groups. This makes a total of less than 20. The group mapping page with the mapping config works just fine (I'll also try this out right after a primary controller failure).

Thanks a lot for you help, I'll get back with some more info soon.

Matt

Re: Windows Remote Agent Failover timeout (ACS 4.2)

mmshg1234 — Fri, 16 Jul 2010 12:55:01 GMT

Hi,

sorry for the long delay, it took a while to collect the necessary data.

A few comments on the logs. I've abbreviated them to the relevant parts (in my opinion) to make things a little easier to find.
Also, I had to change IP addresses and hostnames (but kept them consistent to represent our actual IP settings).

This is our set-up:

Hostname	IP Adress
ACS	10.10.10.10
CSWinAgent_1	10.11.11.16
CSWinAgent_2	10.10.10.16

Please note that the system clocks are not in sync. I've tried to help with some comments in the logs (marked with ***)

I tested the following:

1. Only CSWinAgent_2 is running, everything working fine.
2. Also started CSWinAgent_1 (see log at 21:47:14)
-> authentication still working (not in the logs)
2. Shut down the service on CSWinAgent_2 (21:52:37)
3. 5 unsuccessful authentication attempts for 15 minutes (see ACS log)
4. First successful attempt (ACS log, 22:06:33)
5. Another fail (strange) and successful login from another client (ACS log, 22:08:01)
6. Shut down the service on CSWinAgent_1 (22:04:47)
7. Started the service on CSWinAgent_2 (22:09:48)
8. Failed attempt (ACS log, 22:09:03)
9. Successful attempt after < 1min (ACS log, 22:09:11)

I would appreciate any ideas and information on how and in which timeframe the switchover process is supposed to work.

Thank you very much for your help.

Matt

Here are the logs:

ACS (10.10.10.10):

*** 5 failed login attempts over 15 minutes (CSWinAgent_1 is available during this time):
Jul 13 21:51:55 10.10.10.10 CisACS_02_FailedAuth 1oz5bgsae 1 0 Message-Type=Authen failed,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Authen-Failure-Code=External DB is not operational,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,
Jul 13 21:52:01 10.10.10.10 CisACS_02_FailedAuth 1qn2vrgaf 1 0 Message-Type=Authen failed,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Authen-Failure-Code=External DB is not operational,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,
Jul 13 21:52:53 10.10.10.10 CisACS_02_FailedAuth 61f498ag 1 0 Message-Type=Authen failed,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Authen-Failure-Code=External DB is not operational,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,
Jul 13 21:56:41 10.10.10.10 CisACS_02_FailedAuth 1xaujikah 1 0 Message-Type=Authen failed,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Authen-Failure-Code=External DB is not operational,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,
Jul 13 22:06:32 10.10.10.10 CisACS_02_FailedAuth k6ymh8aj 1 0 Message-Type=Authen failed,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Authen-Failure-Code=External DB is not operational,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,

*** 2 successful, 1 fail (See 22:02:53 & 22:04:20 on CSWinAgent_1):
Jul 13 22:06:33 10.10.10.10 CisACS_01_PassedAuth kgy7v0ak 1 0 User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,Filter Information=Access Filter Deny_RZ-SAN from USER_GROUP did not fail any criteria. This is sufficient to satisfy an 'Any Selected' SPC NAR config.,
Jul 13 22:06:34 10.10.10.10 CisACS_04_TACACSAcc kqxt8sal 1 0 Group-Name=USER_GROUP,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,NAS-Portname=tty1,Caller-Id=192.168.1.6,Acct-Flags=start,service=shell,task_id=196,
Jul 13 22:06:40 10.10.10.10 CisACS_02_FailedAuth mevdjgam 1 0 Message-Type=Authen failed,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Authen-Failure-Code=External DB is not operational,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,
Jul 13 22:08:01 10.10.10.10 CisACS_01_PassedAuth 18vyhjgan 1 0 User-Name=USER_ID,NAS-IP-Address=172.16.1.139,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,Filter Information=Access Filter Deny_RZ-SAN from USER_GROUP did not fail any criteria. This is sufficient to satisfy an 'Any Selected' SPC NAR config.,
Jul 13 22:08:01 10.10.10.10 CisACS_04_TACACSAcc 18vyhjgao 1 0 Group-Name=USER_GROUP,User-Name=USER_ID,NAS-IP-Address=172.16.1.139,NAS-Portname=tty1,Caller-Id=192.168.1.6,Acct-Flags=start,service=shell,task_id=134,
Jul 13 22:08:03 10.10.10.10 CisACS_04_TACACSAcc 19fxob0ap 1 0 Group-Name=USER_GROUP,User-Name=USER_ID,NAS-IP-Address=172.16.1.139,NAS-Portname=tty1,Caller-Id=192.168.1.6,Acct-Flags=stop,service=shell,elapsed_time=1,task_id=134,
Jul 13 22:08:35 10.10.10.10 CisACS_04_TACACSAcc 1ibkojwaq 1 0 Group-Name=USER_GROUP,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,NAS-Portname=tty1,Caller-Id=192.168.1.6,Acct-Flags=stop,service=shell,elapsed_time=121,task_id=196,

*** much faster switchover the other way (one failed attempt, failover in < 1min):
Jul 13 22:09:03 10.10.10.10 CisACS_02_FailedAuth 1q39b9oar 1 0 Message-Type=Authen failed,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Authen-Failure-Code=External DB is not operational,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,
Jul 13 22:09:11 10.10.10.10 CisACS_01_PassedAuth 1sb62bwas 1 0 User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,Filter Information=Access Filter Deny_RZ-SAN from USER_GROUP did not fail any criteria. This is sufficient to satisfy an 'Any Selected' SPC NAR config.,
Jul 13 22:09:17 10.10.10.10 CisACS_01_PassedAuth 1tz3mmkat 1 0 User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,Filter Information=Access Filter Deny_RZ-SAN from USER_GROUP did not fail any criteria. This is sufficient to satisfy an 'Any Selected' SPC NAR config.,
Jul 13 22:09:23 10.10.10.10 CisACS_01_PassedAuth 1vn16x8au 1 0 User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Caller-ID=192.168.1.6,NAS-Port=tty1,Group-Name=USER_GROUP,Filter Information=Access Filter Deny_RZ-SAN from USER_GROUP did not fail any criteria. This is sufficient to satisfy an 'Any Selected' SPC NAR config.,
Jul 13 22:09:42 10.10.10.10 CisACS_01_PassedAuth 1vqtscav 1 0 User-Name=USER_ID,NAS-IP-Address=172.16.1.138,Caller-ID=192.168.1.6,NAS-Port=tty2,Group-Name=USER_GROUP,Filter Information=Access Filter Deny_RZ-SAN from USER_GROUP did not fail any criteria. This is sufficient to satisfy an 'Any Selected' SPC NAR config.,
Jul 13 22:09:42 10.10.10.10 CisACS_04_TACACSAcc 1vqtscaw 1 0 Group-Name=USER_GROUP,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,NAS-Portname=tty2,Caller-Id=192.168.1.6,Acct-Flags=start,service=shell,task_id=3782,
Jul 13 22:10:21 10.10.10.10 CisACS_04_TACACSAcc cpazpoax 1 0 Group-Name=USER_GROUP,User-Name=USER_ID,NAS-IP-Address=172.16.1.138,NAS-Portname=tty2,Caller-Id=192.168.1.6,Acct-Flags=stop,service=shell,elapsed_time=39,task_id=3782,

CSWinAgent_1 (10.11.11.16):

*** service started manually:
CSWinAgent 07/13/2010 21:47:14 A 0528 14340 0x0 Logging mode: LOW
CSWinAgent 07/13/2010 21:47:14 A 0228 14340 0x0 CSWinAgent server starting ==============================
CSWinAgent 07/13/2010 21:47:14 A 0233 14340 0x0 Running as console application.
CSWinAgent 07/13/2010 21:47:14 A 0059 15332 0x0 Will listen on port 2005
CSWinAgent 07/13/2010 21:47:14 A 0064 15332 0x0 Permitted CSWinAgent Clients: *.*.*.*
CSWinAgent 07/13/2010 21:47:14 A 0116 15332 0x0 NTLIB: Library behaviour mode 2
CSWinAgent 07/13/2010 21:47:14 A 0136 15332 0x0 NTLIB: Initialising locally
CSWinAgent 07/13/2010 21:47:14 A 0139 15332 0x0 NTLIB: The local computer name is CSWinAgent_1
CSWinAgent 07/13/2010 21:47:14 A 0171 15332 0x0 NTLIB: The insist on domain is disabled
CSWinAgent 07/13/2010 21:47:14 A 0281 15332 0x0 NTLIB: We are NOT a domain controller
CSWinAgent 07/13/2010 21:47:14 A 0423 15332 0x0 NTLIB: We are NOT a member of a domain => we cannot authenticate accounts on other trusted domains
CSWinAgent 07/13/2010 21:47:14 A 0112 15332 0x0 Listener activated

*** first incoming connection:
CSWinAgent 07/13/2010 22:02:53 A 0140 15332 0x0 Client connecting from 10.10.10.10:2732
CSWinAgent 07/13/2010 22:02:53 A 0390 15480 0x0 RPC: NT_MSCHAPAuthenticateUser received
CSWinAgent 07/13/2010 22:02:53 A 1807 15480 0x0 NTLIB: Got WorkStation ACS
CSWinAgent 07/13/2010 22:02:53 A 1808 15480 0x0 NTLIB: Attempting Windows authentication for user USER_ID
CSWinAgent 07/13/2010 22:02:53 A 1866 15480 0x0 NTLIB: Windows authentication SUCCESSFUL (by CSWinAgent_1)
CSWinAgent 07/13/2010 22:02:53 A 1947 15480 0x0 NTLIB: Domain name in MSCHAPAuthenticateUser is \LOCAL
CSWinAgent 07/13/2010 22:02:53 A 1952 15480 0x0 NTLIB: Group Mapping Flag in MSCHAPAuthenticateUser is enabled
CSWinAgent 07/13/2010 22:02:53 A 1968 15480 0x0 NTLIB: Group Map Count in MSCHAPAuthenticateUser is -1
CSWinAgent 07/13/2010 22:02:53 A 0190 15480 0x0 NTLIB: User has 10 groups
CSWinAgent 07/13/2010 22:02:53 A 0431 15480 0x0 RPC: NT_MSCHAPAuthenticateUser groups: None,LAN_Admins,Users,Administrators
CSWinAgent 07/13/2010 22:02:53 A 0436 15480 0x0 RPC: NT_MSCHAPAuthenticateUser Domain Name is: CSWinAgent_1
CSWinAgent 07/13/2010 22:02:53 A 0452 15480 0x0 RPC: Success
CSWinAgent 07/13/2010 22:02:53 A 0465 15480 0x0 RPC: NT_MSCHAPAuthenticateUser reply sent

*** second authentication:
CSWinAgent 07/13/2010 22:04:20 A 0390 15480 0x0 RPC: NT_MSCHAPAuthenticateUser received
CSWinAgent 07/13/2010 22:04:20 A 1807 15480 0x0 NTLIB: Got WorkStation ACS
CSWinAgent 07/13/2010 22:04:20 A 1808 15480 0x0 NTLIB: Attempting Windows authentication for user USER_ID
CSWinAgent 07/13/2010 22:04:20 A 1866 15480 0x0 NTLIB: Windows authentication SUCCESSFUL (by CSWinAgent_1)
CSWinAgent 07/13/2010 22:04:20 A 1947 15480 0x0 NTLIB: Domain name in MSCHAPAuthenticateUser is \LOCAL
CSWinAgent 07/13/2010 22:04:20 A 1952 15480 0x0 NTLIB: Group Mapping Flag in MSCHAPAuthenticateUser is enabled
CSWinAgent 07/13/2010 22:04:20 A 1968 15480 0x0 NTLIB: Group Map Count in MSCHAPAuthenticateUser is -1
CSWinAgent 07/13/2010 22:04:20 A 0190 15480 0x0 NTLIB: User has 10 groups
CSWinAgent 07/13/2010 22:04:20 A 0431 15480 0x0 RPC: NT_MSCHAPAuthenticateUser groups: None,LAN_Admins,Users,Administrators
CSWinAgent 07/13/2010 22:04:20 A 0436 15480 0x0 RPC: NT_MSCHAPAuthenticateUser Domain Name is: CSWinAgent_1
CSWinAgent 07/13/2010 22:04:20 A 0452 15480 0x0 RPC: Success
CSWinAgent 07/13/2010 22:04:20 A 0465 15480 0x0 RPC: NT_MSCHAPAuthenticateUser reply sent

*** service stopped manually:
CSWinAgent 07/13/2010 22:04:47 A 0046 14340 0x0 Service stopping
CSWinAgent 07/13/2010 22:04:47 A 0049 14340 0x0 Shutting down NT library
CSWinAgent 07/13/2010 22:04:47 A 0192 14340 0x0 NTLIB: Finalising locally
CSWinAgent 07/13/2010 22:04:47 A 0053 14340 0x0 Shutting down EndPoint library
CSWinAgent 07/13/2010 22:04:47 A 0609 15480 0x0 Client disconnected, thread 15480 terminating
CSWinAgent 07/13/2010 22:04:47 A 0153 15332 0x0 Listener terminating

CSWinAgent_2 (10.10.10.16):

*** manual shutdown:
CSWinAgent 07/13/2010 21:52:37 A 0046 1388 0x0 Service stopping
CSWinAgent 07/13/2010 21:52:37 A 0049 1388 0x0 Shutting down NT library
CSWinAgent 07/13/2010 21:52:37 A 0192 1388 0x0 NTLIB: Finalising locally
CSWinAgent 07/13/2010 21:52:37 A 0053 1388 0x0 Shutting down EndPoint library
CSWinAgent 07/13/2010 21:52:37 A 0609 3676 0x0 Client disconnected, thread 3676 terminating
CSWinAgent 07/13/2010 21:52:37 A 0609 0340 0x0 Client disconnected, thread 340 terminating
CSWinAgent 07/13/2010 21:52:37 A 0609 2900 0x0 Client disconnected, thread 2900 terminating
CSWinAgent 07/13/2010 21:52:37 A 0609 3404 0x0 Client disconnected, thread 3404 terminating
CSWinAgent 07/13/2010 21:52:37 A 0153 1944 0x0 Listener terminating
CSWinAgent 07/13/2010 21:52:37 A 0609 2072 0x0 Client disconnected, thread 2072 terminating
CSWinAgent 07/13/2010 21:52:37 A 0609 3576 0x0 Client disconnected, thread 3576 terminating

*** service started manually:
CSWinAgent 07/13/2010 22:09:48 A 0528 3504 0x0 Logging mode: LOW
CSWinAgent 07/13/2010 22:09:48 A 0228 3504 0x0 CSWinAgent server starting ==============================
CSWinAgent 07/13/2010 22:09:48 A 0233 3504 0x0 Running as console application.
CSWinAgent 07/13/2010 22:09:48 A 0059 3480 0x0 Will listen on port 2005
CSWinAgent 07/13/2010 22:09:48 A 0064 3480 0x0 Permitted CSWinAgent Clients: *.*.*.*
CSWinAgent 07/13/2010 22:09:48 A 0116 3480 0x0 NTLIB: Library behaviour mode 2
CSWinAgent 07/13/2010 22:09:48 A 0136 3480 0x0 NTLIB: Initialising locally
CSWinAgent 07/13/2010 22:09:48 A 0139 3480 0x0 NTLIB: The local computer name is CSWinAgent_2
CSWinAgent 07/13/2010 22:09:48 A 0171 3480 0x0 NTLIB: The insist on domain is disabled
CSWinAgent 07/13/2010 22:09:48 A 0281 3480 0x0 NTLIB: We are NOT a domain controller
CSWinAgent 07/13/2010 22:09:48 A 0423 3480 0x0 NTLIB: We are NOT a member of a domain => we cannot authenticate accounts on other trusted domains
CSWinAgent 07/13/2010 22:09:48 A 0112 3480 0x0 Listener activated

*** first authentication:
CSWinAgent 07/13/2010 22:10:42 A 0140 3480 0x0 Client connecting from 10.10.10.10:2782
CSWinAgent 07/13/2010 22:10:43 A 0390 2800 0x0 RPC: NT_MSCHAPAuthenticateUser received
CSWinAgent 07/13/2010 22:10:43 A 1807 2800 0x0 NTLIB: Got WorkStation ACS
CSWinAgent 07/13/2010 22:10:43 A 1808 2800 0x0 NTLIB: Attempting Windows authentication for user USER_ID
CSWinAgent 07/13/2010 22:10:43 A 1866 2800 0x0 NTLIB: Windows authentication SUCCESSFUL (by CSWinAgent_2)
CSWinAgent 07/13/2010 22:10:43 A 1947 2800 0x0 NTLIB: Domain name in MSCHAPAuthenticateUser is \LOCAL
CSWinAgent 07/13/2010 22:10:43 A 1952 2800 0x0 NTLIB: Group Mapping Flag in MSCHAPAuthenticateUser is enabled
CSWinAgent 07/13/2010 22:10:43 A 1968 2800 0x0 NTLIB: Group Map Count in MSCHAPAuthenticateUser is -1
CSWinAgent 07/13/2010 22:10:43 A 0190 2800 0x0 NTLIB: User has 10 groups
CSWinAgent 07/13/2010 22:10:43 A 0431 2800 0x0 RPC: NT_MSCHAPAuthenticateUser groups: None,LAN_Admins,Administrators,Users
CSWinAgent 07/13/2010 22:10:43 A 0436 2800 0x0 RPC: NT_MSCHAPAuthenticateUser Domain Name is: CSWinAgent_2
CSWinAgent 07/13/2010 22:10:43 A 0452 2800 0x0 RPC: Success
CSWinAgent 07/13/2010 22:10:43 A 0465 2800 0x0 RPC: NT_MSCHAPAuthenticateUser reply sent

*** some more logins:
CSWinAgent 07/13/2010 22:10:49 A 0140 3480 0x0 Client connecting from 10.10.10.10:2784
CSWinAgent 07/13/2010 22:10:49 A 0390 2296 0x0 RPC: NT_MSCHAPAuthenticateUser received
CSWinAgent 07/13/2010 22:10:49 A 1807 2296 0x0 NTLIB: Got WorkStation ACS
CSWinAgent 07/13/2010 22:10:49 A 1808 2296 0x0 NTLIB: Attempting Windows authentication for user USER_ID
CSWinAgent 07/13/2010 22:10:49 A 1866 2296 0x0 NTLIB: Windows authentication SUCCESSFUL (by CSWinAgent_2)
CSWinAgent 07/13/2010 22:10:49 A 1947 2296 0x0 NTLIB: Domain name in MSCHAPAuthenticateUser is \LOCAL
CSWinAgent 07/13/2010 22:10:49 A 1952 2296 0x0 NTLIB: Group Mapping Flag in MSCHAPAuthenticateUser is enabled
CSWinAgent 07/13/2010 22:10:49 A 1968 2296 0x0 NTLIB: Group Map Count in MSCHAPAuthenticateUser is -1
CSWinAgent 07/13/2010 22:10:49 A 0190 2296 0x0 NTLIB: User has 10 groups
CSWinAgent 07/13/2010 22:10:49 A 0431 2296 0x0 RPC: NT_MSCHAPAuthenticateUser groups: None,LAN_Admins,Administrators,Users
CSWinAgent 07/13/2010 22:10:49 A 0436 2296 0x0 RPC: NT_MSCHAPAuthenticateUser Domain Name is: CSWinAgent_2
CSWinAgent 07/13/2010 22:10:49 A 0452 2296 0x0 RPC: Success
CSWinAgent 07/13/2010 22:10:49 A 0465 2296 0x0 RPC: NT_MSCHAPAuthenticateUser reply sent

CSWinAgent 07/13/2010 22:10:52 A 0140 3480 0x0 Client connecting from 10.10.10.10:2786
CSWinAgent 07/13/2010 22:10:52 A 0390 1768 0x0 RPC: NT_MSCHAPAuthenticateUser received
CSWinAgent 07/13/2010 22:10:52 A 1807 1768 0x0 NTLIB: Got WorkStation ACS
CSWinAgent 07/13/2010 22:10:52 A 1808 1768 0x0 NTLIB: Attempting Windows authentication for user USER_ID
CSWinAgent 07/13/2010 22:10:52 A 1866 1768 0x0 NTLIB: Windows authentication SUCCESSFUL (by CSWinAgent_2)
CSWinAgent 07/13/2010 22:10:52 A 1947 1768 0x0 NTLIB: Domain name in MSCHAPAuthenticateUser is \LOCAL
CSWinAgent 07/13/2010 22:10:52 A 1952 1768 0x0 NTLIB: Group Mapping Flag in MSCHAPAuthenticateUser is enabled
CSWinAgent 07/13/2010 22:10:52 A 1968 1768 0x0 NTLIB: Group Map Count in MSCHAPAuthenticateUser is -1
CSWinAgent 07/13/2010 22:10:52 A 0190 1768 0x0 NTLIB: User has 10 groups
CSWinAgent 07/13/2010 22:10:52 A 0431 1768 0x0 RPC: NT_MSCHAPAuthenticateUser groups: None,LAN_Admins,Administrators,Users
CSWinAgent 07/13/2010 22:10:52 A 0436 1768 0x0 RPC: NT_MSCHAPAuthenticateUser Domain Name is: CSWinAgent_2
CSWinAgent 07/13/2010 22:10:52 A 0452 1768 0x0 RPC: Success
CSWinAgent 07/13/2010 22:10:52 A 0465 1768 0x0 RPC: NT_MSCHAPAuthenticateUser reply sent

...

topic Windows Remote Agent Failover timeout (ACS 4.2) in Network Access Control

Windows Remote Agent Failover timeout (ACS 4.2)

Re: Windows Remote Agent Failover timeout (ACS 4.2)

Re: Windows Remote Agent Failover timeout (ACS 4.2)

Re: Windows Remote Agent Failover timeout (ACS 4.2)