access to user-exec mode

[Kevin Smith]

Hello I have a question on TACACS+ using ACS server….I have SSH setup using Active Directory login….I can login fine but i have to use an enable password to get into user exec mode….i want to bypass this step and have my AD login go right into user exec mode. What commands I need to add in the configuration or ACS server?

[edwjames]

Kevin,

You require "aaa authorization exec default group tacacs+ local" on the device.

What is the ACS server version?

You have to set the default privilege to 15 under the shell profile.

**Share your knowledge. It’s a way to achieve immortality.
--Dalai Lama**

Please Rate if helpful.
Regards
Ed

[edwjames]

http://www.cisco.com/en/US/products/ps9911/products_configuration_example09186a0080bc8514.shtml#ade

**Share your knowledge. It’s a way to achieve immortality.
--Dalai Lama**

Please Rate if helpful.
Regards
Ed