cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1023
Views
5
Helpful
1
Replies

ACS 3.2, ODBC logging and Error Code Explanation

bgh.vd.hout
Level 1
Level 1

Hi,

I'm using Cisco ACS logging to MsSQL dBase.

For example I'm logging all Failed Attempts to a MsSQL dBase.

But I noticed that the Failed Attempts log, is logging error codes instead of human readible text (as it's done in csv logging). I've searched high and low for a explanation of the various error codes, but failed to find anything.

Do you have a suggestion ?

I'm using Cisco Secure ACS v3.1 - v3.2.

Csv logs reads :

06/07/2004,08:14:45,Authen failed,INI\WJM.Copier,Default Group,000d.bd0d.4fea,External DB user invalid or bad password,,,482,172.23.232.43

While the ODBC logging feature turns this into :

06/07/2004,08:14:45,1,INI\WJM.Copier,Default Group,000d.bd0d.4fea,10,,,482,172.23.232.43

Since there are a lot more error-codes, I'm looking for a complete listing of these codes.

Cheers,

Bram van den Hout

1 Reply 1

gfullage
Cisco Employee
Cisco Employee

They're all listed in the registry on the ACS server here:

Authentication codes:

[HKEY_LOCAL_MACHINE\SOFTWARE\Cisco\CiscoAAAv3.x\Dictionaries\000\007\Enumerations]

Authorization codes:

[HKEY_LOCAL_MACHINE\SOFTWARE\Cisco\CiscoAAAv3.x\Dictionaries\000\008\Enumerations]