topic ACS 5.4 Active Directory join issue in Network Access Control

ACS 5.4 Active Directory join issue

lswan — Mon, 11 Mar 2019 04:39:12 GMT

Receiving the following error in the ASCADAgent.log when attempting to join a large active directory deployment:

adjoin[9687]: DEBUG base.osutil Module=LDAP : ldap search : Size limit exceeded (reference base/ldapsearch.cpp:144 rc: 4)

adjoin[9687]: DEBUG base.bind.ad Destroying binding to xxx.xxx.com

Cisco provided a bug fix for

lswan — Wed, 21 May 2014 20:18:58 GMT

Cisco provided a bug fix for this in version 5.5

ACS 5.4 Patch 2 fails to

mohanak — Tue, 03 Jun 2014 14:03:51 GMT

ACS 5.4 Patch 2 fails to join AD Domain

CSCuh14898

Symptom:
ACS Can not join the domain

Conditions:
ACS 5.4 Patch 2

Workaround:
The workaround suggested to manually remove /var/centrifydc/previous folder completely (rm -rf /var/centrifydc/previous) before trying to adjoin.
Don't have the chance to try because customer reimage the box, it works.