ACS 4.2 with RSA

[davidcruise]

we have the vpn users authenticate using RSA token , & ACS configured with RADIUS token server as the in the selected databases for unknown user policy ,

the problem is when we updraded from ACS 4 to Release 4.2(0) Build 124 a problem happened , sometimes authentication works & sometimes don't , & give this error in the authentication failure code : External DB reports error condition.

[Yudong Wu]

it looks like hit this bug CSCsu86529.

[davidcruise]

Thanks for your reply , in the bug description the action is to set

"fail back retry timeout" to 0

is this option in the acs ?

[Yudong Wu]

Yes, it should be in ACS.

There are two options under the RADIUS Token Server Configuration

1. Timeout - in seconds

2. Fallback Retry Delay - in minutes

Change item 2 to 0.