Context Directory Agent and ACS 5.4 DST issue

[andrewswanson]

Hello

I'm using CDA 1.0 (patch 3) with ACS 5.4 (patch 6) to map IP-Identity. I was getting the following log message in CDA:

"Creation time of mapping record is in the future"

Both CDA and ACS VMs are configured for ntp (using the same servers) and have the same timezone set (GB).

I seen the following post which suggested this was an issue with DST timezones:

https://supportforums.cisco.com/discussion/12164296/ise-cda-ip-mappings

Is there a similar bug with DST that affects ACS 5 (the above link mentions CSCun74460 which according to Bug Search only affects ISE). Has anyone tried the ISE workaround "Not to use a Timezone with DayLight Savings" with ACS?

The "workaround" I'm using at the moment is to have the CDA an hour ahead of the ACS - CDA logs are obviously out but the IP-Identity mapping timestamps are fine (the CDA is not currently in production).

Cheers
Andy

[andrewswanson]

There is a similar bug which affects ACS 5 - bug id is CSCuo45648 and is resolved in ACS 5.6 according to the release notes. ACS 5.6 isn't listed as a supported ACS version for CDA 1 patch 3 though - in the meantime the workaround is the same for the ISE bug - use a non DST timezone on ACS.

Cheers

Andy