cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Announcements
Choose one of the topics below to view our ISE Resources to help you on your journey with ISE

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

715
Views
0
Helpful
7
Replies
Highlighted
Beginner

ACS - Failed to import file

Hi!

 

I do some tests on the ACS through the CLI.

I'd like to import files from a remote repository to test the "import-data" command.

 

I created a repository from the CLI and when I do a "show repository", I can see the content of the directory.

When I execute the command "import-data", I have the error "Unable to import file "<filename>" from remote repository "repository_name"

 

What could be the cause?

 

I use a linux sftp server.

 

Regards,

 

Angélique

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Participant

Hey, You are missing this

Hey,

 

You are missing this:

host-key sync

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/command/reference/cli/cli_app_a.html#pgfId-2187776


Regards

Ed

**Share your knowledge. It’s a way to achieve immortality. --Dalai Lama** Please Rate if helpful. Regards Ed

View solution in original post

7 REPLIES 7
Highlighted
Participant

Hi Angelique,ACS uses SCP for

Hi Angelique,

ACS uses SCP for file transfer and SFTP for "show repository".

Does your Linux SFTP support SCP?

Run:

debug transfer 7

debug copy 7

and share that please.

Regards

Ed

**Share your knowledge. It’s a way to achieve immortality. --Dalai Lama** Please Rate if helpful. Regards Ed
Highlighted
Beginner

Hi Ed, Thanks for your reply.

Hi Ed,

 

Thanks for your reply. The SFTP server supports SCP, indeed.

I did your debug command and saw that there is a "host-key" issue :

3 [6256]: transfer: sftp_copy.c[188] [daemon]: sftp_copy ERROR: host-key option is not configured
3 [6256]: transfer: sftp_copy.c[258] [daemon]: sftp_copy ERROR: command execution failed

 

Seems to be the initialization of the connection....

 

Highlighted
Participant

Hey, You are missing this

Hey,

 

You are missing this:

host-key sync

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_system/5-4/command/reference/cli/cli_app_a.html#pgfId-2187776


Regards

Ed

**Share your knowledge. It’s a way to achieve immortality. --Dalai Lama** Please Rate if helpful. Regards Ed

View solution in original post

Highlighted
Contributor

HiJust to add Edward post,

Hi

Just to add Edward post, can you please confirm that all the following services are in running state.

•CSAdmin
•CSAuth
•CSDbSync
•CSLog
•CSMon
•CSRadius
•CSTacacs

For more information, please visit the following link:

http://www.cisco.com/c/en/us/td/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4-2/trouble/guide/ACSTrbG42.pdf

 

Highlighted
Beginner

Hi, I use a linux based

Hi,

 

I use a linux based system with version 5.4 of ACS.

 

 

Highlighted
Enthusiast

Please check the user

Please check the user permission:

Only users who have CRUD permissions to a specific configuration object in the GUI can import that particular configuration data to an ACS local store.

Highlighted
Beginner

Hi Ed, Thanks a lot for your

Hi Ed,

 

Thanks a lot for your reply!

I didn't know this command. It works fine now!

 

Regards

 

Angelique