An ACS Internal DB user cannot ssh to a 3750 switch but telnet works fine.
Authentication method is TACACS+
Other users in the same ACS user group as the problem user can both ssh and telnet to this switch OK.
Debug on the switch shows:
TPLUS: Received authen response status FAIL (3)
The ACS Failed Attempts log shows
ACS password invalid
The ACS Auth.log shows
E 3306 4384 0x27e2 Plain DB pass check for <username> failed"
for the failed username.
The 3750 switch is running 12.2(44)SE6
ACS is 220.127.116.11p11
Really puzzling that telnet using exact same user/password works fine.
Does anyone have any clues/pointers?