ACS server: unknown user enable password

shibindong · ‎09-21-2008

we are using external user DB to log into the Network devices to authenetication.

I want set enable password on the ACS, I found from ACS server configuration page:

"Configure Enable Password Behaviour:

For newly created dynamic users, the TACACS+ enable password is authenticated against:

The internal database.

/or The database in which the user profile is held.

"

which one i should choose and how to set the enable password for user? thanks

smalkeric · ‎09-29-2008

A separate enable password for TACACS+ works well in CiscoSecure ACS version 3.3.3 and earlier. This problem occurs with CiscoSecure ACS version 4.0(1.27).

An enable password will allow a user to carry out expanded system administrator-level EXEC operations in CiscoSecure ACS 2.3

The following URL helps to specify an enable password for a given user:

http://www.cisco.com/en/US/products/sw/secursw/ps4911/products_user_guide_chapter09186a00803deb43.html#wp1016447