Re: ACS 5.1 debug

From: Devendra Vishwakarma <dvishwak_at_cisco.com>
Date: Thu, 18 Nov 2010 17:45:48 +0530

Edouard,

You can run bump up the log level of specific log files using:

ssh to ACS 5.x
acs-config
<enter gui user password>
debug-adclient enable (this one is for ACS interactions with
Activedirectory)
debug-log ?
<this will give you list of all the log files that you want bump up the
logging file>
e.g.
debug-log runtime level debug
<runtime has all the tacacs and radius authentication requests that come
to ACS and how ACS processes them>

Now recreate your issue so that logs can be recorded at debug level.

Go to ACS GUI > Monitoring and Reporting > ACS Support Bundle > Select
Debug Logs (select the ALL Files or previous xx files depending on your
need) > Download the support bundle.

on ACS 5.0 and 5.1 it will be an encrypted bundle and you will have to
decrypt this bundle.

Decryption process:
Put this bundle on a local FTP server after download. Go to the CLI of
ACS again:
ssh to ACS 5.x
<create a repository using the repository command to refer to your local
FTP server>
config t
repository xxx
url xxx
username xxx password plain xxx

acs-config
<enter gui user password>
decrypt-support-bundle <support-bundle-filename> repository xxx

above process will put a decrypted bundle on the same FTP server.

Now you can unzip that bundle and look for a folder "Debug Logs"

There you will find all the logs that were put in the debug mode.

Regards,
Dev

On 11/18/2010 03:42 PM, Sadiq Yakasai wrote:
> Hi Edouard,
>
> Sorry but what debugs are you trying to collect?
>
> On Wed, Nov 17, 2010 at 8:24 PM, Edouard Zorrilla<ezorrilla_at_tsf.com.pe>wrote:
>
>> Guys,
>>
>> Do anyone of you have been able to run a debug under the new ACS appliance
>> 5.1
>> ?. I am able to go into the CLI and I got:
>>
>> ACS01/ez(config-acs)# debug-adclient enable
>>
>> But I donb t get any info on it.
>>
>> Any advice would be appreciated.,
>>
>> Regards.
>>
>>
>> Blogs and organic groups at http://www.ccie.net
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Thu Nov 18 2010 - 17:45:48 ART

This archive was generated by hypermail 2.2.0 : Sun Dec 05 2010 - 22:14:56 ART