Appendix D Cisco Secure ACS Command-Line Database Utility
Decoding Error Numbers
D-26
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Step 2
Type:
CSUtil.exe -y
and press Enter.
Result: CSUtil.exe exports Windows Registry information for Cisco Secure ACS
to a file named
setup.txt
.
Decoding Error Numbers
You can use the -e option to decode error numbers found in Cisco Secure ACS
service logs. These are error codes internal to Cisco Secure ACS. For example,
the CSRadius log could contain a message similar to the following:
CSRadius/Logs/RDS.log:RDS 05/22/2001 10:09:02 E 2152 4756 Error -1087
authenticating geddy - no NAS response sent
In this example, the error code number that you could use CSUtil.exe to decode
is “-1087”:
C:\Program Files\CiscoSecure ACS v
x
.
x
\Utils: CSUtil.exe -e -1087
CSUtil v3.0(1.14), Copyright 1997-2001, Cisco Systems Inc
Code -1087 : External database reported error during authentication
Note
The -e option applies to Cisco Secure ACS internal error codes only, not to
Windows error codes sometimes captured in Cisco Secure ACS logs, such as
when Windows NT/2000 authentication fails.
For more information about Cisco Secure ACS service logs, see
Service Logs,
page 9-28
.
To decode an error number from a Cisco Secure ACS service log, follow these
steps:
Step 1
On the Cisco Secure ACS server, open an MS DOS command prompt and change
directories to the directory containing CSUtil.exe. For more information about the
location of CSUtil.exe, see
Location of CSUtil.exe and Related Files, page D-2
.
