ACS 4.1.(1.23)5 ver. authentication services stopped automatically and need restart

[sdmumbai rrc]

Hi All,

we have one cisco ACS appliance 4.1.1.23, User authentication unexpected stopped and if we see the AAA reports its blank when the authentication service stopped.

from the log files i found:

The auth.log file may have output similar to this during an authentication failure:

AUTH 22/07/2011 23:25:01 E 0107 371768 Timeout waiting for CSLog connection availability
AUTH 22/07/2011 23:25:05 E 0433 375532 Timeout waiting for ack from CSlog localCSLog
AUTH 22/07/2011 23:25:10 E 0107 465968 Timeout waiting for CSLog connection availability
AUTH 22/07/2011 23:25:10 E 0433 375532 Timeout waiting for ack from CSlog localCSLog
AUTH 22/07/2011 23:25:11 E 0107 371200 Timeout waiting for CSLog connection availability

Tcs.log
TCS 23/07/2011 01:26:23 E 0706 0328 AccountAuthenticateOK: failed to write log entry for ciscoworks(0)

TCS 23/07/2011 01:26:31 E 0706 2136 AccountAuthenticateOK: failed to write log entry for ciscoworks(0)

Cslog.log
CSLog 23/07/2011 01:28:27 E 0351 1416 Failed to log accounting packet to logger ciscoworks

Its showing when the authentication services stopped my remote logging server nit reachable or ACS not able to write the logs in remote logging server.

I found one bug ID CSCeg40355 for the same issue in ACS 4.0 and it fixed in ACS 4.1, it means this bug fixed in my current version then i am facing same issue.

Please find the logs and also check if any other cause for this issue.

Thanks in advance.

:)

[Tarik Admani]

Hi,

Seems as if you are hitting this bug and should be resolved if you apply the workaround or upgrade to 4.2,

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCsi43436

Thanks,

Tarik

[sdmumbai rrc]

Hi Tarik,

Thanks for solution,

i disabled the remote logging server which was no longer exist in network.

After that everything working fine..

[Tarik Admani]

Thanks,

Please mark this question as solved so the other users that ever have these symptoms will know to look here.

Thanks,

Tarik