cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
673
Views
0
Helpful
2
Replies

Issue with changing Access Service in ACS 5.2

akshay.dm
Level 1
Level 1

Hi,

I am working on lab setup where I installed ACS 5.2 I created new access service and used it in existing service selection rule (Rule-2) earlier but it didn't work. Later I created new service selection rule and applied new service access rule. However even after this change it keeps applying predefined default access access service. Please refer attached picture for better understanding.

As shown, I want Aks-Rule to work and apply service 'Lab-Policy' however it keeps referring Rule-2 and applies 'Default Device Admin' access service even after I disable it. 

I have to restart ACS service from CLI console to make it work. Is this a bug or am I missing anything. Please advise guys.

 

Regards,

Akshay

 

2 Replies 2

Jatin Katyal
Cisco Employee
Cisco Employee

Since the policy AKS is top in sequence under service selection rule so it should hit for sure. As you wrote that even after disabling the default device admin, then also request is hitting the same and restarting the ACS services resolved the issue. The symptoms of your issue are exactly same as stated in this defect.

CSCuo93378    Certain browsers cause ACS database corruption

Due to this issue we have seen cases where request hits the disable and default policies without any reason. Actually accessing ACS via chrome mess around with all the operators in conditions.

The only workaround is to access all the rules and conditions in supported browser. Ensure all the operators are correct, save the changes and restart the ACS services.

The issue seems to be fixed in ACS 5.5 patch 5

Regards,

Jatin

~Jatin

Thanks a lot Jatin. You were absolutely right!!!

Appreciate it !!