cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

236
Views
5
Helpful
1
Replies
Highlighted
Beginner

ACS 5.4 Domain Controller Connection

I have a pair of test ACS appliances running 5.4.  We are using AD for our external authentication, the ACS has a proper domain account and has pulled down the AD group list.

Recently, I noticed that the domain controllers that the ACS is associated to has changed.  I'm not sure how this happened as I'm not a Windows admin.

My question:  Can the domain controllers be "hard set" on the ACS so that it doesn't move to another DC?  I know there is a down side to this if the DC goes down, but that's OK for now.

Ray

1 REPLY 1
Highlighted
Enthusiast

Ray,

While it's possible to hard-code the list of DCs used by ACS, it's not recommended, as it requires manual editing of a configuration file, which in turn requires installing a patch that allows access to the filesystem. The configuration file would have to be edited again in the future as you upgrade ACS, as it's likely to be replaced at that time.

ACS will pick a DC from the list of DCs returned when it resolves the name of the domain to which it's joined, and if/when that DC becomes unreachable it will pick another one from the list.

Content for Community-Ad