Hi Mynu,
Well no, that isn't the case. We are not trying to authenticate users with the domain accounts. Actually we don't have domain accounts at all. :-)
We use ACS only for our NOC people for strictly telnet purposes, for some custom scripts and for some VoIP testing. But the main reason of the existence of ACS is for telnet reasons.
The case is the second example that you are giving.
I stop all the services from the primary ACS (even unpluged the network cable) and then try to login in the router with the backup ACS, and that doesn't work.
The thing with the replication cross my mind so what I did is to delete ALL the entries in the backup ACS and do a manual replication and all worked well.
As for the IOS bug, I read about the one (CSCdx41454) for the problem with routers that have loopbacks but the router which I experiment with don't have a loopback and has only one FastEthernet active with a default-gateway.
As for the version, well to tell you the truth we have many routers from GSR12000, 7200, 3640, AS5300, in different PoPs so it's kind difficult to get the IOS versions from all of them. In a statistically experiment, I tried to check the redudancy in various boxes in various PoPs (after stoping the active ACS) but none of them worked so I thought that couldn't be an IOS bug. Nevertheless if you think that there is a bug problem I can sent you a full list of the various IOS versions plus the package.cab files as I did with Yatin. Just for the records I will c/p the sh ver output of the router I am experiment.
Finally, the strange situation is that when the backup ACS take the place of the active ACS and the active ACS becomes backup everything seems to work well. At least in a couple of routers that I've tested it.
Thanks in advance,
/kostas
----------------------------------------------------------------------------------------------------
#sh ver
Cisco Internetwork Operating System Software
IOS (tm) 5300 Software (C5300-JK8S-M), Version 12.2(11)T, RELEASE SOFTWARE (fc1)
TAC Support: http://www.cisco.com/tac
Copyright (c) 1986-2002 by cisco Systems, Inc.
Compiled Wed 31-Jul-02 20:11 by ccai
Image text-base: 0x60008938, data-base: 0x61730000
ROM: System Bootstrap, Version 12.0(2)XD1, EARLY DEPLOYMENT RELEASE SOFTWARE (fc1)
BOOTLDR: 5300 Software (C5300-BOOT-M), Version 12.0(4)T1, RELEASE SOFTWARE (fc1)
uptime is 6 weeks, 6 days, 2 hours, 20 minutes
System returned to ROM by reload at 11:20:41 EDT Tue Apr 22 2003
System restarted at 11:21:31 EDT Tue Apr 22 2003
System image file is "flash:c5300-jk8s-mz.122-11.T.bin"
cisco AS5300 (R4K) processor (revision A.32) with 131072K/16384K bytes of memory.
Processor board ID 24710123
R4700 CPU at 150Mhz, Implementation 33, Rev 1.0, 512KB L2 Cache
Channelized E1, Version 1.0.
Bridging software.
X.25 software, Version 3.0.0.
SuperLAT software (copyright 1990 by Meridian Technology Corp).
TN3270 Emulation software.
Primary Rate ISDN software, Version 1.1.
Backplane revision 2
Manufacture Cookie Info:
EEPROM Type 0x0001, EEPROM Version 0x01, Board ID 0x30,
Board Hardware Version 3.2, Item Number 800-2544-04,
Board Revision B0, Serial Number 24710123,
PLD/ISP Version 0.0, Manufacture Date 25-Feb-2001.
1 Ethernet/IEEE 802.3 interface(s)
1 FastEthernet/IEEE 802.3 interface(s)
128 Serial network interface(s)
4 Channelized E1/PRI port(s)
60 DSP(s), 120 Voice resource(s)
128K bytes of non-volatile configuration memory.
32768K bytes of processor board System flash (Read/Write)
8192K bytes of processor board Boot flash (Read/Write)
-----------------------------------------------------------------------------------------------------------
