[c-nsp] ACE and AAA ACE Version A2(3.5)

selamat pagi ketimun at gmail.com
Fri Nov 23 04:43:08 EST 2012


Hi,

On our ACE-module we can login via ssh and tacacs to the Admin-context
without a problem.

But to a user-context only local login works. I get until the
password prompt:

*ssh -l john 192.168.70.13*

*Password:*

An attempt to login via tacacs-account gives this debug output

debug aaa aaa-requests

ACE-1/context1# 2012 Nov 22 13:15:31.720069 aaa: (ctx:1)aaa_req_process for
authentication. session no 0

2012 Nov 22 13:15:31.720143 aaa: (ctx:1)try_next_aaa_method

2012 Nov 22 13:15:31.720770 aaa: (ctx:1)total methods configured is 2,
current index to be tried is 0

2012 Nov 22 13:15:31.720817 aaa: (ctx:1)handle_req_using_method

2012 Nov 22 13:15:31.720842 aaa: (ctx:1)aaa_sg_method_handler group =
ACE_TACACS

2012 Nov 22 13:15:31.720868 aaa: (ctx:1)Using sg_protocol which is passed
to this function

2012 Nov 22 13:15:31.720905 aaa: (ctx:1)Sending request to TACACS service

2012 Nov 22 13:15:31.721028 aaa: (ctx:1)Configured method group Succeeded



2012 Nov 22 13:15:37.595909 aaa: (ctx:1)try_next_aaa_method

2012 Nov 22 13:15:37.596411 aaa: (ctx:1)total methods configured is 2,
current index to be tried is 1

2012 Nov 22 13:15:37.596456 aaa: (ctx:1)handle_req_using_method

2012 Nov 22 13:15:37.596489 aaa: (ctx:1)LOCAL Authentication req

2012 Nov 22 13:15:37.596513 aaa: (ctx:1)AAA_AUTHEN_TYPE_PAP

2012 Nov 22 13:15:37.596543 aaa: (ctx:1)Local database Authentication for
user john_1

2012 Nov 22 13:15:37.610031 aaa: (ctx:1)aaa_send_client_response for
authentication. session->flags=31

2012 Nov 22 13:15:37.610249 aaa: (ctx:1)Configured method local Succeeded



Config:

aaa authentication login default group ACE_TACACS local

aaa accounting default group ACE_TACACS local

aaa authentication login error-enable



Any advice or troubleshooting hint is highly appreciated
cheers, keti


More information about the cisco-nsp mailing list