Cisco Secure ACS 3.0

[josephn]

Hi,

I'm having a problem with Cisco Secure ACS 3.0, it is failing to authenticate users to log into the routers.

We are using LDAP database to do authentication for the network devices. One of the ACS failed and I'm getting the followin error message :

"External DB Auth Failed"

Upon further checking, the LDAP service is running normal.

Do anyone has an idea to the above problem ?

Thanks.

Joseph

[m-pickford]

Hi, Seen something similar when trying to pass off authentication to Microsoft AD. Would check to see if you can authenticate with a username and password you have set up with the actual ACS database. If that works then you know its the hand off to the LDAP thats the problem.

The problem we encountered was the router was used for dial up into the network and used CHAP was negotiated. We could authenticate against the ACS database but got the "External DB Auth Failed" when passing off to AD.

The fix was to set the router to use MS-CHAP or PAP.

Not sure if this will help as you haven't specified the access method to the routers, but hopefully may give you some pointers.

regards

Martin