CSA MC locked out after LDAP

james.pedersen · ‎07-07-2007

I just tried to enable the LDAP authentication for my CSA MC 5.1 and selected fall back authentication for the local admin account but now neither LDAP or local admin authentication works. How can I do password recovery on CSA MC?

tsteger1 · ‎07-10-2007

You already had a local administrator account matching the LDAP account, correct?

You should be able to change the authentication back to local and login using the local credentials.

I don't know of any password recovery methods if that doesn't work ... maybe time to TAC?

Tom

james.pedersen · ‎07-10-2007

Thanks for the reply and I have opened a TAC case in the mean time. Unfortunatly, there is a bug (CSCse89346) in CSAMC 5.1 prior to build 95, I think, that doesn't allow failover to local authentication. The fix was to upgrade to 5.1.100. After the upgrade and reboot, I was able to login again.

tsteger1 · ‎07-10-2007

Cool, glad to hear it.

TradeSecrets · ‎07-11-2007

Don't use LDAP auth,

There is a bug that allows you to circumvent LDAP and log onto the system.

Cisco has release a patch.