topic Re: 2 ACS with 2 CRA in Network Access Control https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134002#M395990 <HTML><HEAD></HEAD><BODY><P>Dear JG,</P><P></P><P>I have already the logs that server where its not working. Pls find it in the attachment.</P><P></P><P>Thanks</P><P>Sachi</P><P></P><P> </P><P></P></BODY></HTML> Wed, 06 Aug 2008 17:56:41 GMT sachidananda panda 2008-08-06T17:56:41Z 2 ACS with 2 CRA https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134000#M395988 <P>Hi All,</P><P></P><P>We have installed 2 ACS with two CRA installed in AD1 &amp; AD2.</P><P></P><P>The problem is when the CRA1 which is installed in AD1 is active everything working fine with both the ACS.</P><P>But when the CRA1 is down &amp; CRA2 is up which is installed in AD2 the authentication fails.</P><P></P><P>Can anyone help in this regard? I have the logs if required I can upload the same.</P><P></P><P>Thanks in advance</P><P>Sachi</P> Sun, 10 Mar 2019 23:01:07 GMT https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134000#M395988 sachidananda panda 2019-03-10T23:01:07Z Re: 2 ACS with 2 CRA https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134001#M395989 <HTML><HEAD></HEAD><BODY><P>Please post cswinagent logs from non working remote agent.</P><P></P><P>You need to go to server where remote agent is installed.</P><P> </P><P>Here is the location of the logs</P><P>C:\Program Files\Cisco\CiscoSecure ACS Agent\CSWinAgent\Logs</P><P></P><P></P><P>Regards,</P><P>~JG</P></BODY></HTML> Wed, 06 Aug 2008 17:28:41 GMT https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134001#M395989 Jagdeep Gambhir 2008-08-06T17:28:41Z Re: 2 ACS with 2 CRA https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134002#M395990 <HTML><HEAD></HEAD><BODY><P>Dear JG,</P><P></P><P>I have already the logs that server where its not working. Pls find it in the attachment.</P><P></P><P>Thanks</P><P>Sachi</P><P></P><P> </P><P></P></BODY></HTML> Wed, 06 Aug 2008 17:56:41 GMT https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134002#M395990 sachidananda panda 2008-08-06T17:56:41Z Re: 2 ACS with 2 CRA https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134003#M395991 <HTML><HEAD></HEAD><BODY><P>Pls look at the 06/08/2008 logs only</P><P></P><P>Thanks</P><P>Sachi</P></BODY></HTML> Wed, 06 Aug 2008 17:58:20 GMT https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134003#M395991 sachidananda panda 2008-08-06T17:58:20Z Re: 2 ACS with 2 CRA https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134004#M395992 <HTML><HEAD></HEAD><BODY><P>Most likely this is a permission issue. </P><P></P><P></P><P>CSWinAgent 08/06/2008 12:45:52 A 0048 3860 NTLIB: Attempting Windows authentication for user s.shetty</P><P>CSWinAgent 08/06/2008 12:45:52 A 0048 3860 NTLIB: Windows authentication FAILED (error 6L)</P><P>CSWinAgent 08/06/2008 12:45:52 A 0436 3860 RPC: NT_MSCHAPAuthenticateUser reply sent</P><P>CSWinAgent 08/06/2008 12:46:16 A 0371 3860 RPC: NT_MSCHAPAuthenticateUser received</P><P>CSWinAgent 08/06/2008 12:46:16 A 0048 3860 NTLIB: Attempting Windows authentication for user s.shetty</P><P>CSWinAgent 08/06/2008 12:46:16 A 0048 3860 NTLIB: Windows authentication FAILED (error 6L)</P><P></P><P></P><P>The accounting running remote agent service do not have admin rights . Make sure that account should have special priv like act as a part of OS and logon as service in ur sec policy.</P><P></P><P>If you are already using admin account to run it then try using local system.</P><P></P><P>Regards,</P><P>~JG</P></BODY></HTML> Wed, 06 Aug 2008 19:52:33 GMT https://community.cisco.com/t5/network-access-control/2-acs-with-2-cra/m-p/1134004#M395992 Jagdeep Gambhir 2008-08-06T19:52:33Z