Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Problem with authorization in catalyst 3020 blade

Tervicko!

Does anybody had any problems getting blade-switch authorized correctly?

I've made basic tacacs-config in ACS 5.2 (patch 7) and I've got ASA and ASR working correctly. Even Nexus worked when I added attributes found from this forum.

But blade-switches won't go to enable-mode with ad-password. If I use my local secret-password then it works. And yes, ACS is joined with AD.

Does 3020 need any addional custom attributes also?

rgds. Pasi R

5 REPLIES
Cisco Employee

Problem with authorization in catalyst 3020 blade

Please post the switch configuration here (just the AAA relevant bits) so we can review it.

Also, try enabling some debugs:

debug aaa authen

debug aaa author

And post the output as well.

New Member

Problem with authorization in catalyst 3020 blade

Tervicko!

here comes the config:

sh run | sec aaa

aaa new-model

aaa group server tacacs+ turvattuna-acs

server-private 172.29.228.158 key 0 secret-keyword

ip tacacs source-interface FastEthernet0

aaa authentication login default local group turvattuna-acs

aaa authorization console

aaa authorization config-commands

aaa authorization exec default local group turvattuna-acs

aaa session-id common

Blade switch software: Cisco IOS Software, CBS30X0 Software (CBS30X0-IPBASEK9-M), Version 12.2(58)SE1

New Member

Re: Problem with authorization in catalyst 3020 blade

debug aaa authentication

TAP2_D_09_K1_SW3#

Nov 15 09:48:07: AAA/BIND(00000053): Bind i/f

Nov 15 09:48:07: AAA/AUTHEN/LOGIN (00000053): Pick method list 'default'

Nov 15 09:48:07: AAA SRV(00000053): process authen req

Nov 15 09:48:07: AAA SRV(00000053): Authen method=LOCAL

Nov 15 09:48:07: AAA SRV(00000053): protocol reply FAIL for Authentication

Nov 15 09:48:07: AAA SRV(00000053): Authen method=SERVER_GROUP turvattuna-acs

Nov 15 09:48:07: AAA SRV(00000053): protocol reply GET_PASSWORD for Authentication

Nov 15 09:48:07: AAA SRV(00000053): Return Authentication status=GET_PASSWORD

Nov 15 09:48:07: AAA SRV(00000053): process authen req

Nov 15 09:48:07: AAA SRV(00000053): Authen method=SERVER_GROUP turvattuna-acs

Nov 15 09:48:07: AAA SRV(00000053): protocol reply PASS for Authentication

Nov 15 09:48:07: AAA SRV(00000053): Return Authentication status=PASS

Nov 15 2011 09:48:07.851: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: ] [Source: 172.29.227.6] [localport: 22] at 09:48:

07 EET Tue Nov 15 2011

TAP2_D_09_K1_SW3#

Nov 15 09:48:08: AAA/AUTHOR (0x53): Pick method list 'default'

Nov 15 09:48:08: AAA SRV(00000053): process author req

Nov 15 09:48:08: AAA SRV(00000053): Author method=LOCAL

Nov 15 09:48:08: AAA SRV(00000053): protocol reply FAIL for Authorization

Nov 15 09:48:08: AAA SRV(00000053): Author method=SERVER_GROUP turvattuna-acs

Nov 15 09:48:08: AAA SRV(00000053): protocol reply PASS for Authorization

Nov 15 09:48:08: AAA SRV(00000053): Return Authorization status=PASS

Nov 15 09:48:08: AAA/AUTHOR/EXEC(00000053): processing AV cmd=

Nov 15 09:48:08: AAA/AUTHOR/EXEC(00000053): Authorization successful

TAP2_D_09_K1_SW3#

New Member

Problem with authorization in catalyst 3020 blade

here's comment from switch guys before the next debug:

"and the user priviledge after succefull login = 1, and the the exec –state is not set for user, so the user should enter ENABLE (with enable secret password) in order to archive the enable/priviledged mode….

So –from my point of view. the definition aaa authorization exec default local group turvattuna-acs even with or without optional parameter if-authenticated – looks like it doesn’t work for Tacacs users, but works for Local users (i.e. with users defined in switch by username-command).

As far as I understand, the debug didn’t so any failure so I desired to insert some more debug aaa –parameter, to get more deeply the situation traced.

New Member

Re: Problem with authorization in catalyst 3020 blade

...and here's the rest. Sorry for spamming!

TAP2_D_09_K1_SW3#

Nov 15 10:03:28: AAA/API(00000000): aaa_util_unique_id_alloc(), pc 0x1EBF898, enter {

Nov 15 10:03:28: AAA/ID(NA): Exec allocating

Nov 15 10:03:28: AAA/ID(NA): propagate tty:/0x4FB0764 #2 port:0 slot:0 shelf:0 hw:nil

Nov 15 10:03:28: aaa_uid_propogate grabbed_id = 0

Nov 15 10:03:28: aaa_uid_propogate allocating new id

Nov 15 10:03:28: AAA/ID(00000056): Call started 10:03:28 EET Nov 15 2011

Nov 15 10:03:28: AAA/ID(00000056): Setting ID in TTY 2(4FB0764).

Nov 15 10:03:28: AAA/ATTR(00000056): new list: 0x5057070 handle: 0xBE0003A5

Nov 15 10:03:28: AAA/ATTR(00000056): new sublist: 0x5066AE0

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066AE0) index(0): 05066AE8 0 00000009 interface(210) 4 tty2

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066AE0) index(1): 05066AF8 0 00000001 port-type(214) 4 Virtual Terminal

Nov 15 10:03:28: AAA/BIND(00000056): Bind i/f

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05070378 05057070 none none

Nov 15 10:03:28: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000001) handle(0xBE0003A5)

Nov 15 10:03:28: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(1): 05066AE8 0 00000009 interface(210) 4 tty2

Nov 15 10:03:28: AAA/ATTR(00000056):  interface ok

Nov 15 10:03:28: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000001) handle(0xBE0003A5)

Nov 15 10:03:28: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(1): 05066AF8 0 00000001 port-type(214) 4 Virtual Terminal

Nov 15 10:03:28: AAA/ATTR(00000056):  port-type ok

Nov 15 10:03:28: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000001) handle(0xBE0003A5)

Nov 15 10:03:28: AAA/ATTR(00000056): not found

Nov 15 10:03:28: AAA/ID(00000056): CLID 172.29.227.6

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066AE0) index(2): 05066B08 0 00000009 clid(37) 12 172.29.227.6

Nov 15 10:03:28: AAA/API(00000000):  aaa_event_alloc(), pc 0x1E7BC98 {

Nov 15 10:03:28: AAA/API(00000000):  } aaa_event_alloc()

Nov 15 10:03:28: AAA/API(00000056):  aaa_event_send_and_free(), pc 0x1E7BCDC {

Nov 15 10:03:28: AAA/ATTR(00000056): new list: 0x5057034 handle: 0x820003A6

Nov 15 10:03:28: AAA/ATTR(00000056): new sublist: 0x5066F8C

Nov 15 10:03:28: AAA/ID(00000056): Could not find interface type to notify session id = 76

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066F8C) index(0): 05066F94 0 00000001 session-id(397) 4 76(4C)

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066F8C) index(1): 05066FA4 0 00000001 start_time(406) 4 Nov 15 2011 10:03

:28

Nov 15 10:03:28: AAA/API(00000056):  } aaa_event_send_and_free()

Nov 15 10:03:28: AAA/ID(00000056): Could not find interface type to notify session id = 76

Nov 15 10:03:28: AAA/ID(00000056): Exec allocated

Nov 15 10:03:28: AAA/API(00000056): } aaa_util_unique_id_alloc()

Nov 15 10:03:28: AAA/API(00000000): aaa_req_alloc(), pc 0x1D2AD5C, enter {

Nov 15 10:03:28: AAA/API(00000000): } aaa_req_alloc()

Nov 15 10:03:28: AAA/API(00000000): aaa_attr_list_alloc_max(), pc 0x1E812E8, enter {

Nov 15 10:03:28: AAA/ATTR(00000000): new list: 0x50570D4 handle: 0x180003A7

Nov 15 10:03:28: AAA/ATTR(00000000): new sublist: 0x5066D08

Nov 15 10:03:28: AAA/API(00000000): } aaa_attr_list_alloc_max()

Nov 15 10:03:28: AAA/AUTHEN/LOGIN (00000056): Pick method list 'default'

Nov 15 10:03:28: AAA/ATTR(00000056): copy lists

Nov 15 10:03:28: AAA/ATTR(00000056): new list: 0x505700C handle: 0x4E0003A8

Nov 15 10:03:28: AAA/ATTR(00000056): new sublist: 0x5066CAC new sublist: 05066CAC

Nov 15 10:03:28: copy lists: src sublist(0x05066AE0) index(2)

Nov 15 10:03:28: copy lists: dst sublist(0x05066CAC) index(2)

Nov 15 10:03:28: copy lists: attr type: 210

Nov 15 10:03:28: copy lists: attr type: 214

Nov 15 10:03:28: copy lists: attr type: 37

Nov 15 10:03:28: AAA/ATTR(00000000): add attr: sublist(0x05066D08) index(0): 05066D10 0 00000009 username(435) 7

Nov 15 10:03:28: AAA/ATTR(00000000): cursor init: 050704B8 050570D4 none none

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)password(309): not found

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 050704A0 050570D4 none none

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)password(309): not found

Nov 15 10:03:28: AAA SRV(00000056): process authen req

Nov 15 10:03:28: AAA SRV(00000056): Authen method=LOCAL

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 059B6168 05057070 none none

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)dnis(83): not found

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)05066B08 0 00000009 clid(37) 12 172.29

.227.6

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 04EA65D8 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)05066D10 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:28: AAA SRV(00000056): protocol reply FAIL for Authentication

Nov 15 10:03:28: AAA SRV(00000056): Authen method=SERVER_GROUP turvattuna-acs

Nov 15 10:03:28: AAA/SG: Server group ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:28: AAA/SG: Server group wrapper ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEE58 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)05066D10 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEE58 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)password(309): not found

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDC0 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)05066D10 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDD0 0505700C none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066CAC)->index(0x00000002) handle(0x4E0003A8)05066CB4 0 00000009 interface(210) 4 t

ty2

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDC0 0505700C none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066CAC)->index(0x00000002) handle(0x4E0003A8)05066CD4 0 00000009 clid(37) 12 172.29

.227.6

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDC0 0505700C none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066CAC)->index(0x00000002) handle(0x4E0003A8)dnis(83): not found

Nov 15 10:03:28: AAA/SG/REF_COUNT refcount of server B400000D increased to 65

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066D08) index(1): 05066D20 0 00000009 reply-message(262) 10 password:

Nov 15 10:03:28: AAA/SG: Server group wrapper ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:28: AAA/SG: Server group ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:28: AAA SRV(00000056): protocol reply GET_PASSWORD for Authentication

Nov 15 10:03:28: AAA SRV(00000056): Return Authentication status=GET_PASSWORD

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000001) handle(0x180003A7)05066D20 0 00000009 reply-message(262)

10 password:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000001) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000001) handle(0x180003A7)password(309): not found

Nov 15 10:03:28: AAA/ATTR(00000000): add attr: sublist(0x05066D08) index(2): 05066D30 0 00000009 password(309) 14

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D20 0 00000009 reply-message(262)

10 password:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000000): delete attr: 05066D08 1

Nov 15 10:03:28: AAA/ATTR(00000000): del attr: 05066D20 0 00000009 reply-message(262) 10 password:

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 050704A0 050570D4 none none

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D30 0 00000009 password(309) 14 <

opaque value>

Nov 15 10:03:28: AAA SRV(00000056): process authen req

Nov 15 10:03:28: AAA SRV(00000056): Authen method=SERVER_GROUP turvattuna-acs

Nov 15 10:03:28: AAA/SG: Server group ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:28: AAA/SG: Server group wrapper ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDD8 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D10 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDD8 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D30 0 00000009 password(309) 14 <

opaque value>

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEED60 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D30 0 00000009 password(309) 14 <

opaque value>

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDD8 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D30 0 00000009 password(309) 14 <

opaque value>

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000056): delete attr: 05066D08 2

Nov 15 10:03:28: AAA/ATTR(00000056): del attr: 05066D30 0 00000009 password(309) 14

Nov 15 10:03:28: AAA/SG: Server group wrapper ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:28: AAA/SG: Server group ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:28: AAA SRV(00000056): protocol reply PASS for Authentication

Nov 15 10:03:28: AAA SRV(00000056): Return Authentication status=PASS

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)reply-message(262): not found

TAP2_D_09_K1_SW3#

Nov 15 2011 10:03:28.791: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: ] [Source: 172.29.227.6] [localport: 22] at 10:03:

28 EET Tue Nov 15 2011

Nov 15 10:03:29: AAA/API(00000000): aaa_util_unique_id_alloc(), pc 0x1EBF898, enter {

Nov 15 10:03:29: AAA/ID(NA): Exec allocating

Nov 15 10:03:29: AAA/ID(NA): propagate tty:/0x4FB0764 #2 port:0 slot:0 shelf:0 hw:nil

Nov 15 10:03:29: aaa_uid_propogate grabbed_id = 86

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 050703E8 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)05066AE8 0 00000009 interface(210) 4 t

ty2

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 050703E8 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)05066AF8 0 00000001 port-type(214) 4 V

irtual Terminal

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 050703E8 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)parent-interface(212): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 050703E8 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)parent-interface-type(213): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05070378 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(2): 05066AE8 0 00000009 interface(210) 4 tty2

Nov 15 10:03:29: AAA/ATTR(00000056):  interface ok

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(2): 05066AF8 0 00000001 port-type(214) 4 Virtual Terminal

Nov 15 10:03:29: AAA/ATTR(00000056):  port-type ok

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(2): 05066B08 0 00000009 clid(37) 12 172.29.227.6

Nov 15 10:03:29: AAA/ATTR(00000056):  clid ok

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)

Nov 15 10:03:29: AAA/ATTR(00000056): not found

Nov 15 10:03:29: AAA/ID(00000056): Exec allocated

Nov 15 10:03:29: AAA/API(00000056): } aaa_util_unique_id_alloc()

Nov 15 10:03:29: AAA/API(00000000): aaa_req_alloc(), pc 0x1EC9318, enter {

Nov 15 10:03:29: AAA/API(00000000): } aaa_req_alloc()

Nov 15 10:03:29: AAA/AUTHOR (0x56): Pick method list 'default'

Nov 15 10:03:29: AAA/ATTR(00000056): copy lists

Nov 15 10:03:29: AAA/ATTR(00000056): new list: 0x5057020 handle: 0x650003A9

Nov 15 10:03:29: AAA/ATTR(00000056): new sublist: 0x5066D64 new sublist: 05066D64

Nov 15 10:03:29: copy lists: src sublist(0x05066AE0) index(2)

Nov 15 10:03:29: copy lists: dst sublist(0x05066D64) index(2)

Nov 15 10:03:29: copy lists: attr type: 210

Nov 15 10:03:29: copy lists: attr type: 214

Nov 15 10:03:29: copy lists: attr type: 37

Nov 15 10:03:29: AAA/API(00000056): aaa_attr_req_add(), pc 0x1EC93B0, enter {

Nov 15 10:03:29: AAA/ATTR(00000056): new list: 0x5057048 handle: 0x5A0003AA

Nov 15 10:03:29: AAA/ATTR(00000056): new sublist: 0x50670A0

Nov 15 10:03:29: AAA/ATTR(00000056): add attr: sublist(0x050670A0) index(0): 050670A8 0 00000009 username(435) 7

Nov 15 10:03:29: AAA/API(00000056): } aaa_attr_req_add()

Nov 15 10:03:29: AAA/API(00000056): aaa_attr_req_add(), pc 0x1EC93D8, enter {

Nov 15 10:03:29: AAA/ATTR(00000056): add attr: sublist(0x050670A0) index(1): 050670B8 0 0000000A cmd(74) 0

Nov 15 10:03:29: AAA/API(00000056): } aaa_attr_req_add()

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05070318 05057048 shell none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)password(309): not found

Nov 15 10:03:29: AAA SRV(00000056): process author req

Nov 15 10:03:29: AAA SRV(00000056): Author method=LOCAL

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 04EA65C8 05057048 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)050670A8 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:29: AAA SRV(00000056): protocol reply FAIL for Authorization

Nov 15 10:03:29: AAA SRV(00000056): Author method=SERVER_GROUP turvattuna-acs

Nov 15 10:03:29: AAA/SG: Server group ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:29: AAA/SG: Server group wrapper ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEEE70 05057048 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)050670A8 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECC0 05057048 shell none

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=shell, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x050670A0) index(1): 050670A8 0 00000009 username(435) 7

Nov 15 10:03:29: AAA/ATTR(00000056):  username service:shell skip

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x050670A0) index(1): 050670B8 0 0000000A cmd(74) 0

Nov 15 10:03:29: AAA/ATTR(00000056):  cmd service:shell ok

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=shell, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECC0 05057048 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)050670A8 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECD0 05057020 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066D64)->index(0x00000002) handle(0x650003A9)05066D6C 0 00000009 interface(210) 4 t

ty2

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECC0 05057020 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066D64)->index(0x00000002) handle(0x650003A9)05066D8C 0 00000009 clid(37) 12 172.29

.227.6

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECC0 05057020 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066D64)->index(0x00000002) handle(0x650003A9)dnis(83): not found

Nov 15 10:03:29: AAA/SG: Server group wrapper ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:29: AAA/SG: Server group ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:29: AAA/SG: Server group ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:29: AAA/SG: Server group wrapper ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:29: AAA/SG/REF_COUNT refcount of server B400000D increased to 66

Nov 15 10:03:29: AAA/ATTR(00000056): new list: 0x50570AC handle: 0x160003AB

Nov 15 10:03:29: AAA/ATTR(00000056): new sublist: 0x5066BF4

Nov 15 10:03:29: AAA/ATTR(00000000): free list: 0x50570AC handle: 0x160003AB

Nov 15 10:03:29: AAA/SG: Server group wrapper ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:29: AAA/SG: Server group ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:29: AAA SRV(00000056): protocol reply PASS for Authorization

Nov 15 10:03:29: AAA SRV(00000056): Return Authorization status=PASS

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 0502ED4C 05057048 shell unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=shell, protocol=unknown

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x050670A0) index(1): 050670A8 0 00000009 username(435) 7

Nov 15 10:03:29: AAA/ATTR(00000056):  username service:shell skip

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x050670A0) index(1): 050670B8 0 0000000A cmd(74) 0

Nov 15 10:03:29: AAA/ATTR(00000056):  cmd service:shell ok

Nov 15 10:03:29: AAA/AUTHOR/EXEC(00000056): processing AV cmd=

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=shell, protocol=unknown

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 0502ED4C 05057048 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)service-type(333): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 0502ED4C 05057048 shell unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)reply-message(262): not found

Nov 15 10:03:29: AAA/AUTHOR/EXEC(00000056): Authorization successful

Nov 15 10:03:29: AAA/ATTR(00000056): free list: 0x50570D4 handle: 0x180003A7

Nov 15 10:03:29: AAA/ATTR(00000056): del attr: sublist(0x05066D08) index(0): 05066D10 0 00000009 username(435) 7

Nov 15 10:03:29: AAA/ATTR(00000056): free list: 0x505700C handle: 0x4E0003A8

Nov 15 10:03:29: AAA/ATTR(00000056): del attr: sublist(0x05066CAC) index(0): 05066CB4 0 00000009 interface(210) 4 tty2

Nov 15 10:03:29: AAA/ATTR(00000056): del attr: sublist(0x05066CAC) index(1): 05066CC4 0 00000001 port-type(214) 4 Virtual Terminal

Nov 15 10:03:29: AAA/ATTR(00000056): del attr: sublist(0x05066CAC) index(2):

TAP2_D_09_K1_SW3#05066CD4 0 00000009 clid(37) 12 172.29.227.6

TAP2_D_09_K1_SW3#

808
Views
0
Helpful
5
Replies
CreatePlease login to create content