topic Re: Problem with TACACS+ administration reports in Network Access Control

Problem with TACACS+ administration reports

sairamteju — Sun, 10 Mar 2019 23:52:03 GMT

Hi,

I am using ACS V 4.1 .

Under reports and activity when i try to check for TACACS+ administration report the report is getting generated but there is no data avaliable in the report.

In the router side the AAA configuration is proper,

Please help in this issue..let me know if any info is required.

Thanks,

Krishna.

Re: Problem with TACACS+ administration reports

Ganesh Hariharan — Wed, 06 Jan 2010 10:59:39 GMT

Hi,

Actually it is bug with ACS 4.1bug CSCsg97429

After upgrading to ACS 4.1, TACACS+ Command Accounting no longer works. No accounting records are visible in the TACACS+ Administration log (bug CSCsg97429).

Command accounting is configured on the Network Access Server (NAS). No records are visible in the TACACS+ Administration log file after entering commands on the NAS. Debugs on the NAS show the records being sent, and they do arrive at the ACS server; but, the appropriate log file is not updated.

The patch information resolves this issue.

Click this link if you are using ACS for Windows: http://www.cisco.com/pcgi-bin/tablebuild.pl/acs-win-3des?psrtdcat20e2 and download:

•ACS-4.1.1.23-CSTacacs-SW-CSCsg97429.zip

•ACS-4.1.1.23-CSTacacs-SW-CSCsg97429-Readme.txt

Click this link if you are using ACS Solution Engine: http://www.cisco.com/pcgi-bin/tablebuild.pl/acs-soleng-3des?psrtdcat20e2 and download:

applAcs_4.1.1.23_ACS-4.1-CSTacacs-CSCsg97429.zip

Hope this helps out your query !!

Regards

Ganesh.H

Re: Problem with TACACS+ administration reports

darpotter — Mon, 11 Jan 2010 11:40:53 GMT

Once you get the T+ command accounting working, be sure to take a look at extraxi aaa-reports! We've got the most advanced reports for TACACS+ plus much more:

ACS log collection client (csvsync) - supports mixed ACS versions (sw & appl) plus scheduled "bulk" download over http(s)
ACS database import feature for advanced T+ Device Admin audit reports (who can/did do what/where? style reports) for SOX/COB IT
Canned and custom reports via built in point 'n' click query builder incl calculated fields, grouping, filtering
Report generation in PDF, XLS, CSV etc
Automated log collection, import & report generation - report batches emailed directly to recipients
Standard and Enterprise versions availble
Prices from $2250 for 2 ACS server solution
No risk free trial version available from http://www.extraxi.com

Re: Problem with TACACS+ administration reports

Muhammad Zubair — Thu, 25 Nov 2010 07:09:15 GMT

Hi,

Provided link don't have that patch file. Do you know any alternative or have file?

Re: Problem with TACACS+ administration reports

Vinay Sharma — Thu, 25 Nov 2010 10:03:27 GMT

Hi,

These patch files has been moved out from the location. the other option will be upgrading (which is minor) to ACS 4.1.4 with latest patch will fix this Bug.

thanks,

Vinay

Re: Problem with TACACS+ administration reports

Tiago Antunes — Thu, 25 Nov 2010 10:59:16 GMT

Hi,

All the patches and sw releases are now under the download software section of the cisco web page.

http://www.cisco.com/cisco/software/navigator.html?a=a&i=rch.

Products > Security > Identity Management > Cisco Secure Access Control Server for ...

Select either Solution Engine or Windows and then the sw or patches you want o download.

HTH,
Tiago

If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.