Cisco → Re: Challenge with TACACS+ and accounting

There is an old bug in 4.1 ACS - you need to upgrade it for accounting to work.

»supportforums.cisco.com/ ··· -5425686

Interesting.

That sounds like a fun undertaking for the new year.

Thanks

So I did the suggested patch in that thread but accounting info beyond logons is still not showing.

It went from 4.1.1.23 to 4.1.1.23.5.

Did you have to deal with this?

I see there's a version 4.1.1.24. The field and security notices attached to that version make no mention of addressing this particular bug, nor does there appear to be any documentation about the release.

EDIT: Actually scratch that... ACS SE appears to be the Windows version of ACS.. It looks like I'm probably SOL.

Let's see what the TAC says..

I had this issue a while ago and just upgraded the code to fix it, I did not try the patch. The documentation says that issue is resolved with that patch so maybe it is another issue?

There is a 4.2.1.15 out.

Above I agree that the switch is sending the data which made me think it was that bug with 4.1.1 since it was just not showing it in ACS. So it still sounds like the ACS. I don't know, perhaps time for TAC - maybe someone else at DSLR has dealt with this issue too?

Can one upgrade 4.1 to 4.2? I do have access to 4.2 downloads.

Ok.... So it looks like the bug I need squashed goes away with 4.1.1.24:

Readme File for Cisco Secure Access Control Server (ACS)
 
Release: ACS 4.1.1 Build 24
Version number: 4.1.1.24
==========================================================
 
This is a full build that includes the accumulative patch for ACS 4.1.1.23 and the follwing bug fixes:
 
CSCsd20149 - After initial config from Recovery CD, no GUI access.
CSCsh32888 - Seperate enable password does not work after ACS upgrade to 4.1
CSCsg97429 - TACACS+ Command Accounting does not work in ACS 4.1(1) Build 23.
 
 

Good and bad news I guess.
At least you know the issue is resolved, just kind of odd that the patch did not fix it.

Ok so this release did the trick... Finally.... Now I have myself accounting....

Sweet... Thanks