Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

ACS ver 3.3:TACACS+,Authentication failure with Telnet logins

Our application uses Cisco RHEL ((i386) 2.6.9-5.ELsmp) as OS.

It relies on RHEL for tacacplus and radius capablities. (pam_tacplus.so & pam_tacplus.so are present in /lib/security on the RHEL box)

Cisco ACS ver 3.3 is used to authenticate the users in product

ACS server has the following configuration :

1.Network Device Groups

2.AAA clients – IPs along with the shared key/secret.These clients are associated with the Network Device groups.

3.user groups –The network device groups are linked with user groups.

4.User profiles-user credentials. User profiles are linked with the user groups

I am able to successfully login into the product using ssh with tacacplus.

Please see the log entries for successful logins using ssh:

###

Oct 24 01:25:14 localhost sshd(pam_unix)[27400]: session opened for user scott by (uid=0)

###

When I try to telnet using the same user credentials the authentication fails,i get the below error message:

###

Oct 24 01:08:06 localhost remote(pam_unix)[26968]: authentication failure; logname= uid=0 euid=0 tty=pts/4 ruser= rhost=A.B.C.D user=scott

Oct 24 01:08:08 localhost login[26968]: FAILED LOGIN 1 FROM A.B.C.D FOR scott, Authentication failure

###

(A.B.C.D is the ip address in the log message,it is the ip of m/c from which I telnet to the application)

The user credentials used with ssh/telnet is defined in ACS.

Am i missing some configuration here ? Why telnet logins are not going through ?

Please advice.

Thanks

3 REPLIES
New Member

Re: ACS ver 3.3:TACACS+,Authentication failure with Telnet login

It would really help,if someone can reply and give advice on the problem mentioned in the original post.

T

hanks

New Member

Re: ACS ver 3.3:TACACS+,Authentication failure with Telnet login

What do the failed attempts logs in ACS say?

New Member

Re: ACS ver 3.3:TACACS+,Authentication failure with Telnet login

Or the passed attempts logs (if turned on)

309
Views
0
Helpful
3
Replies
CreatePlease to create content