topic Hi Josef, the system that you in Network Access Control

Cisco ACS 5.6.0.22.3 - Runtime Process Fails to Start

Doug Briden — Mon, 11 Mar 2019 05:43:09 GMT

Looks like the Bug CSCum28910 - Runtime fails due to an empty AD Group is back !

Just update some of or ACS platforms - 2 updated no problem but the 3rd refused to start.

When issuing the "show application status acs" command the Runtime process was in "restarting" state and never came up.

Had to back off the 5.6.0.22.3 Patch.

Heads up !

Doug.

Hi Doug,Do you have this

ceracaza08 — Mon, 11 May 2015 14:30:00 GMT

Hi Doug,

Do you have this issue with 5.6.0.22.2 patch?

Regards,

Chris

No, had no issues with the 5

Doug Briden — Mon, 11 May 2015 14:55:57 GMT

No, had no issues with the 5.6.0.22.2 Patch the problem only showed up when moving from Patch 2 to Patch 3 (5.6.0.22.3) and again only one of three deployments.

Two deployments are identical in server structure - Primary ACS (Log Collector) is a VM host and the Secondary is an 1121 appliance. Both have Active Directory configured. One system upgraded to 5.6.0.22.3 fine and the other failed ?

Doug.

I can confirm same issue. In

Moon1998 — Mon, 18 May 2015 10:44:12 GMT

I can confirm same issue. In my case runtime process got stucked "not monitored" state.

Service and whole appliance restart didn't helped. Solved by returning to 5.6.0.22.2.

Cheers,
Martin

Upgraded my Installation from

Josef Blesky — Mon, 18 May 2015 10:48:26 GMT

Upgraded my Installation from Patch 2 to Version 5.7 without a Problem after the Upgrade from Patch 2 to Patch 3 endend in a non working state.

Thanks for the feedback!. We

ceracaza08 — Tue, 19 May 2015 08:35:40 GMT

Thanks for the feedback!. We supposed to patch 3 from 2.

Thanks Josef, good to know. I

Doug Briden — Tue, 19 May 2015 12:32:39 GMT

Thanks Josef, good to know. I've downloaded 5.7 but not yet installed. That was my same plan.

Cheers.

Hi Josef, the system that you

Doug Briden — Mon, 25 May 2015 13:46:21 GMT

Hi Josef, the system that you tried to update from Patch 2 to Patch 3 (5.6.0.22.3) were you running the Large Deployment License ??

That is the only difference between our 3 deployments.

Thanks,

Doug.

300 Devices License on a

Josef Blesky — Tue, 26 May 2015 05:05:13 GMT

300 Devices License on a vSpehere 5.5

Wow, I didn't get away with

Doug Briden — Fri, 05 Jun 2015 17:51:48 GMT

Wow, I didn't get away with that easy an upgrade !

Tried to upgrade to 5.7 from 5.6.0.22.2 upgrade progressed up until reboot and then hit the dread Grub - unable to mount volume .....

Had to back off and recover from 5.6 iso

Was able to get the system back and running, full replication but my cli is clobbered ! I am unable to SSH into the cli.

Could not chdir to home directory /home/ACSadmin: permission denied

unable to launch ADE-OS shell. Disk Full.

I'm thinking it is related to the recovery during setup when it requests the cli administration account(admin) but we change this to ACSadmin due to some issues we discovered during Nessus vulnerability testing that can render the admin account useless.

What a PAIN !