External DB user invalid or bad password

Unanswered Question
Apr 19th, 2011

Hi,

I have problem with Cisco ACS 4.0 "Windows" with core 4500 switch "cat4500-ENTSERVICESK9-M 12.2"  the problem shows only on one device  "x.x.x.x" the problem is " Authen failed-------badcred------External DB user invalid or bad password" i can see it in failed attempt. on the same side i can see in Passed Authentications for same record "Authen OK", i can login to the mentioned switch using my ACS credentials and not local database credentials

What is the problem with it ?? and can debug this from ACS if not how can view the authentication records from core switch?

thanks

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)
Tiago Antunes Wed, 04/20/2011 - 01:15

Hi,

Can you share with us those csv files showing both the passed and failed authentication?

If you want to debug yourself, you can set the lo level to Full on the ACS and then check the file C:\Program Files\CiscoSecure ACS v4.1\CSAuth\Logs\auth.log . It contains the low level debugs of the acs authentications.

HTH,

Tiago

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

alkabeer80 Wed, 04/20/2011 - 03:37

Hi, this is the csv file for failed auth, for passed auth it will show the same with AUTH OK message

Bitmap
Date
TimeMessage-TypeUser-NameGroup-NameCaller-IDNetwork Access Profile NameAuthen-Failure-CodeAuthor-Failure-CodeAuthor-DataNAS-PortNAS-IP-AddressFilter InformationPEAP/EAP-FAST-Clear-NameEAP TypeEAP Type NameReasonAccess DeviceNetwork Device Group
########11:23:22Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:22:44Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:22:04Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:21:27Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:20:18Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:19:56Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:19:13Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:18:40Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:17:33Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:16:55Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:15:55Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:15:44Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:14:26Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:12:51Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:12:37Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:11:19Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:10:41Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:09:10Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:08:28Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:07:25Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:07:01Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:05:49Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:05:15Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:04:34Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:04:21Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:03:53Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:03:15Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:02:33Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:01:28Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:00:51Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########11:00:05Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:59:35Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:58:35Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:57:57Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:57:29Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:56:51Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:56:06Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:55:42Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:54:35Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:53:18Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:51:59Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:50:31Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:48:18Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:47:49Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:47:37Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:46:09Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:46:05Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:45:20Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:44:55Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW
########10:44:12Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x..........testNEW


i hope this will help, thanks for your help

Tiago Antunes Wed, 04/20/2011 - 03:51

Hi,

It would be great if you could post the real csv files here, both of them to verify the timestamps.

BR,
Tiago

alkabeer80 Wed, 04/20/2011 - 04:27

hi, this is the Auth OK output

Bitmap
Date
TimeMessage-TypeUser-NameGroup-NameNAS-PortNAS-IP-AddressNetwork Access Profile NameShared RACDownloadable ACLAccess DeviceNetwork Device GroupAAA ServerExtDB InfoSource-NASReal NameDescription
########8:15:14Authen OKxyzNetwork Grouptty1x.x.x.x(Default)....DeviceNameNEWAAA Serverx.x.x.x ..
########7:36:41Authen OKxyzNetwork Grouptty1x.x.x.x(Default)....DeviceNameNEWAAA Serverx.x.x.x ..
########7:04:55Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########7:04:43Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########7:02:57Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########7:02:44Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########7:00:27Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########7:00:16Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########6:58:41Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########6:58:28Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########6:41:40Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########6:41:28Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########6:39:57Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########6:39:44Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########6:38:58Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....
########6:38:46Authen OKciscowNetwork Grouptty2x.x.x.x(Default)....DeviceNameNEWAAA Server..x.x.x.x....


thanks

alkabeer80 Wed, 04/20/2011 - 04:32

failed attempt during same timming

TimeMessage-TypeUser-NameGroup-NameCaller-IDNetwork Access Profile NameAuthen-Failure-CodeAuthor-Failure-CodeAuthor-DataNAS-PortNAS-IP-Address
8:42:49Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:42:08Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:41:37Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:41:16Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:40:10Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:39:37Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:38:26Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:37:54Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:36:55Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:36:17Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:36:01Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:35:22Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:33:51Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:33:20Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:31:46Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:31:21Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:31:03Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:30:25Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:29:27Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:29:23Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:28:21Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:27:43Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:27:05Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:26:22Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:25:17Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:24:55Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:23:51Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:23:17Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:22:06Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:20:26Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:19:52Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:19:14Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:17:47Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:17:12Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:16:29Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:15:52Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:14:06Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:13:28Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:12:48Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:12:35Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:10:26Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:10:00Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:09:23Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:08:49Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:07:15Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:07:09Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:05:42Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:05:05Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:04:42Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:04:04Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
alkabeer80 Wed, 04/20/2011 - 04:33

failed attempt in the same timming

TimeMessage-TypeUser-NameGroup-NameCaller-IDNetwork Access Profile NameAuthen-Failure-CodeAuthor-Failure-CodeAuthor-DataNAS-PortNAS-IP-Address
8:42:49Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:42:08Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:41:37Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:41:16Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:40:10Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:39:37Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:38:26Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:37:54Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:36:55Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:36:17Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:36:01Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:35:22Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:33:51Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:33:20Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:31:46Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:31:21Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:31:03Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:30:25Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:29:27Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:29:23Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:28:21Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:27:43Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:27:05Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:26:22Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:25:17Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:24:55Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:23:51Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:23:17Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:22:06Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:20:26Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:19:52Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:19:14Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:17:47Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:17:12Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:16:29Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:15:52Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:14:06Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:13:28Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:12:48Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:12:35Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:10:26Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:10:00Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:09:23Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:08:49Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:07:15Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:07:09Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:05:42Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:05:05Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:04:42Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
8:04:04Authen failedbadcredDefault Group..(Default)External DB user invalid or bad password......x.x.x.x
Tiago Antunes Wed, 04/20/2011 - 04:46

Hi,

Well, the failed attempts and auth ok are for different users...

So I am not sure what is the relation between these different users, but one thing for sure is that the "badcrew" either does not exist in the External DB or you are entering the worng password...

HTH,

Tiago

alkabeer80 Wed, 04/20/2011 - 21:21

Hi, i dont think password is wrong bcoz i am able to authenticate to switch using the credentials on ACS, anyway i am checking the failed attempt today and tell now i could not find any record for this switch, i hope it will continue like this.

can you please tell me how to enable the full level debug?

thanks for all your help

Actions

Login or Register to take actions

This Discussion

Posted April 19, 2011 at 10:05 PM
Stats:
Replies:8 Avg. Rating:
Views:858 Votes:0
Shares:0
Tags: No tags.

Discussions Leaderboard