ASA public 8.4 + key RSA for the SSH user authentication

I saw in another post and the configuration guide in the community of support this key public RSA authentication is in favor of the SSH sessions at 8.4 and after.  I tried this implementation on an ASA 8.4 and a 9.1 ASA and I get the same error on both.  I tried specifying SSH version 2 to see if that is the question, but I still get the error.  Y at - there a step I'm missing?

Here is the result of the configuration commands:

ciscoasa (config) #username test nopassword privilege 15

attributes of test #username ciscoasa (config)

ciscoasa(config-username) # ssh publickey authentication

^

ERROR: % name host not valid

The above links:

https://supportforums.Cisco.com/thread/2150480

http://www.Cisco.com/en/us/docs/security/ASA/asa84/configuration/guide/access_aaa.html#wp1053558

http://www.Cisco.com/en/us/docs/security/ASA/asa91/configuration/General/aaa_servers.html#wp1176050

Thank you!

My version is 8.4 (4).

Tried to do it on another vith asa 9.1 and no luck.

Fact a little research, and it turns out that this feature was launched in 8.4 (4) and not available for later versions.

So, probably, your 8.4 is meadow (4) output and it was not available at the time and in your 9.1 is not available either)))

Here is the document:

http://www.Cisco.com/en/us/docs/security/ASA/roadmap/asa_new_features.html

Take a look at the table 10.

Tags: Cisco Security

Similar Questions

  • ACS 5.4 ASA 8.2.5 disable AAA for the particular user

    Hello!

    I want to disable journaling Ganymede + for the particular user. This user is used only for automated (python script) pooling of vpn tunnel ASA (limited command set - permission on ACS) group to verify the number of users authenticated via VPN. The problem is that this user generate a bunch of logs according to authentication authorization and accounting on ACS. Is there a solution, disable Ganymede + newspapers on ACS for this particular user? Maybe it is possible to modify the AAA on ASA to not connect this particular user?

    Thanks in advance.

    Hi Pawel,

    You can create filters collection for that specific user. When you configure monitoring filters & Report Viewer does not record these events in the database.

    Navigate to: Configuration of the analysis > System Configuration > filters Collection > add a filter

    What follows is the attributes that can be used. You must use the user.

    -Access service

    -User

    -Mac-add

    -Nas - IP

    Example: We get several hits of ASA by 'user' and we want ACS to ignore it. Create a filter by using the user. ACS must now ignore any attempt from the IP Address of the NAS.

    Jatin kone
    -Does the rate of useful messages-

  • Need a code product key for a change of hard drives. I need key product for the motherboard too?

    computer, I took the hard drive was an emachine with Windows XP home. I had another computer in a place away from giving old IBM computers with no working or deleted hard drives. I put the hard drive of the computer and now its wanting a product key code. I don't know where the original XP product key is for the moment. I do not know what is the product key for the motherboard because it was a used computer. If this does not work, what are my options for access to the info on my hard drive another way?

    The license for installing XP on an eMachines computer will be an OEM is restricted to use on this computer. It cannot be moved to an another computer/motherboard.

    If you want to make true on the new computer, first check and see if this computer has a COA OEM sticker on the case.

    If so, then you have use the product key update tool to change the key and then probably activate by phone.

    If this isn't the case, then your only hope is to see if you can find a reputable provider with stock of XP Home and purchase who then use the tool to update product key with the new key.

    http://www.Microsoft.com/genuine/selfhelp/PKUInstructions.aspx

  • Permission of files and folders for the same user on multiple computers

    Is it possible to set permissions files and folders different for the same user when he connect on different computers in the same domain?

    Example:

    There is a folder named "Folder1".
    When "User1" enter this folder by "Computer1" must have "Read & Execute" permission
    When "User1" enter this folder in "Computer2" must have permission 'change '.

    Thank you

    Hello

    Your question is beyond the scope of this community.

    Please post your question on the TechNet forums:

    https://social.technet.Microsoft.com/forums/Windows/en-us/home

    Kind regards

  • How to make the updates of operating system for the limited user account?

    original title: how to make the updates of operating system for the limited user account?  Limited user account cannot access the Windows Update page, see instead cautioned against MS the most recent must be installed.

    XP Pro SP3 slipstreamed.  New a DBAN nuked HDD installation

    All the OS updates installed from Admin acct before creating the LUA

    AV installed AVAST

    all dot net uninstalled and then reinstalled to resolve a problem installing Quicken

    Updates to auto lit

    Active Windows Firewall

    Three solutions of workaround for Windows XP running as a limited user

    http://blogs.Computerworld.com/16502/three_workarounds_for_running_windows_xp_as_a_limited_user

    Survive a Windows XP Limited user account

    http://techknack.NET/surviving-a-Windows-XP-limited-user-account/

    See the response from Michael Kuntz - re: HAL files

    http://social.technet.Microsoft.com/forums/en-us/itproxpsp/thread/e8612ac4-b881-4FB3-85e7-32004932fb5f

    There is an available for installation of SP3 Cd

    Manually installing SP3 using the Microsoft Download Center or a CD

    If you have problems to receive the service pack from Windows Update, you can download SP3 as a standalone package from the Microsoft Download Center Web site, and then install SP3 manually. The installation package is intended for it professionals and developers, but you can always download and install this file.

    You can also order a CD from Microsoft containing SP3. For more information, go to the Microsoft site.

    To manually install SP3 using the standalone package installation or CD

    1. Do one of the following:

      • If you downloaded SP3 from the Web site, to install it immediately, click Open or run and follow the instructions on the screen. To install the program later, click on save and download the file to install it on your computer. When you are ready to install the service pack, double-click the file.

      • If you install SP3 from the Service Pack 3 CD, insert the disc into your computer with your current version of Windows XP running, and Software Update Installation Wizard should appear automatically. If this wizard does not appear, click Start, double-click my computer, click on your CD or DVD drive and then click AutoPlay.

    2. In Windows XP Service Pack 3 page, click Next.

    3. Follow the instructions that appear on your screen.

    4. Once the installation is complete, click Finish to restart your computer.

    5. If you disabled your antivirus software, turn it back on.

  • WMIC command fails for the domain user

    Hi all

    I use windows 7 and testing commands wmic as below

    WMIC/node: "Computer1" / User: "domain\username" / Password: "password" PROCESS CALL Create "calc.exe"

    Most of the time control fails with RPC server unavailable to users in the domain (default of 75%). Working sometimes and mostly failing to time.

    Error code

    0x800706BA-online the RPC server is unavailable.

    If I use the local user, she is successful, command below still works (100% success)

    WMIC/node: "Computer1" / User: 'Nom_ordinateur\Nom_utilisateur' / Password: 'password' PROCESS CALL Create "calc.exe"

    I have two computers running windows 7, the firewall is disabled

    Executing command from computer2 as below

    WMIC/node: "Computer1" / User: "domain\username" / Password: "password" PROCESS CALL Create "calc.exe"

    1 computer settings

    1. Adds the domain under group administrator user
    2. Configure dcom through DCOMCNFG.exe and got all rights to domain user

    (DCOM remote launch and activation permissions for a user, the remote DCOM access permissions)

    1. Rights granted to wmi namespace (root, cimv2) of domain user using wmimgmt.msc (all rights to the namespace namespace and sub)
    2. Firewall settins according to the - http://msdn.microsoft.com/en-us/library/aa822854%28v=vs.85%29.aspx

    Note: The firewall is disabled

    1. UAC disabled
    2. Check rpcss and associated to the computer and all services are running

    What could be the reason of failure for the domain user (work awhile and is Server Unavailable RPC over time). Tried to restart that wmic user system and field control did not exist, after awhile like 30-45 minutes user field the wmic commands work and default again. How to solve this problem (such as checking the logs)?

    Thank you

    Mani

    Hello

    I suggest you according to the question in this forum and check if that helps:

    http://social.technet.Microsoft.com/forums/en/winserverDS

    It will be useful.

  • The message I get is Microsoft word has not been installed for the current user. Please run set up to install the application. I reinstalled the software, but get the same message.

    The message I get is Microsoft word has not been installed for the current user.   Please run set up to install the application.   I reinstalled the software, but get the same message.

    Hello

    See the methods listed in the articles below and check.
    You receive an error "Microsoft has not been installed for the current user" message when you try to start an Office 2003 program or an Office XP program for the first time
    http://support.Microsoft.com/kb/898512
     
    You receive a message "Microsoft has not been installed for the current user" when you start an Office XP program or start of Microsoft Office Maintenance mode
    http://support.Microsoft.com/kb/298022

    I hope this helps.

    Thank you, and in what concerns:
    Shekhar S - Microsoft technical support.

    Visit our Microsoft answers feedback Forum and let us know what you think.
    If this post can help solve your problem, please click the 'Mark as answer' or 'Useful' at the top of this message. Marking a post as answer, or relatively useful, you help others find the answer more quickly.

  • I forgot the password for the authorized user account. How am I able to get on the authorized user account

    If I forgot the password for the authorized user account. How am I able to get on the authorized user account? I am the authorized user btw.

    Hello

    1. What do you mean exactly when you say 'authorized user account password'?

    2. who are you referring?

    Are you a person referring Windows user name and password, refer to the article that you give

    In addition, technical support engineers Microsoft cannot help you recover passwords files and Microsoft who are lost or forgotten product features.

    Microsoft's strategy concerning lost or forgotten passwords

  • How to give administrative rights for the domain users (user is outside organization).

    Hello

    How to give administrative rights for the domain users (user is outside organization).

    If the employee works in the company of xxxx but it supports the client project and is located on the place of the customer, but it does not use the client computer and not on the client domain as well, but the employee is in the company of xxxx must be given administrative rights to the computer. can someone help me on this ASAP.

    Thank you

    MURUGESAN Rudy,

    This issue is beyond the scope of this site and to make sure, you get the best (and fastest) reply, we have to ask either on Technet (for IT Pro) or MSDN (for developers)
  • I installed DirectX Runtime for the end user, but I have DirectX 11, there will be a problem?

    I have Windows 7 and so I always got DirectX 11, but someone on this forum recommended update DirectX and I didn't know how to so I just downloaded this thing official Web sites, called for the final user DirectX Runtime Web install which is apparently for version 9.29.1974. I want to know if this will become a problem for my computer.

    Hi WiccanxHulkling,

    No it will not become a problem you already have Direct X 11 on the computer.
     
    Some games or software may require an earlier version of DirectX so you can install the earlier version and it wouldn't effect the version of DirectX that is installed on the computer.
     
    However, in accordance with the following article x 11 Direct include Direct X 10 and 10.1
    How to download and install DirectX
    Note this includes all components of the DirectX 10.0 and 10.1 runtimes
     
    I hope this helps.
  • is it possible to restrict access to a particular application for the particular user?

    is it possible to restrict access to a particular application for the particular user

    for example, if an application will not be editable for user mode

    or it will be only editable for a user

    We gave access as a developer of a workspace to a single user

    but we don't want him to change a single application.

    Oracle Application Express 5.0

    Your terminology is mixed - looks like you're talking about limiting applications, a developer can edit in the application builder in a workspace.

    No, you can't.

  • Order is created for the anonymous user without persistence of profile

    Hi all

    Could you please specify o how to implement below scenario

    Order is created for the anonymous user without persistence of the profile using cookies. So that when the user visits the site next time we can load

    order/cart previous from browser cookies.

    Yes, you can do that, the orders can be persisted without persistence of profile, but persistence of anonymous orders will increase the number of orders in the table quickly and can have an impact on performance, so if you plan to do it this way then make sure that your AbandonOrderScheduler job is running to clean up orders.

  • Mismatch in number of index n/b dba_segments and dba_indexes for the same user in the database.

    Hi all

    I had incompatibility number n/b dba_indexes and dba_segments index. Please find the details below.

    SQL > select SEGMENT_TYPE, count (*) from dba_segments where owner = group 'VIM_SCH01' of SEGMENT_TYPE.

    LOBINDEX 11

    LOBSEGMENT 11

    TABLE 68

    INDEX 52-> I see 52 index are here

    SQL > select count (*) from dba_indexes where owner = 'VIM_SCH01 ';  --> See 63 index here for the same user in dba_indexes

    63

    SQL > select count (*) from dba_tables where owner = "VIM_SCH01"; -> showing the same number of tables from dba_segments

    68

    Why it's showing the different number for the index.

    Thank you

    Bhavani.

    No doubt, because your LOBINDEX 11 segments are has index in DBA_INDEXES.  You have 52 index and 11 LOB for a total of 63.  Corresponds to DBA_INDEXES entries.

    You can validate the fact that.  Run something like

    SELECT index_name FROM dba_indexes WHERE owner = 'VIM_SCH01'
    MINUS
    SELECT segment_name FROM dba_segments WHERE  owner = 'VIM_SCH01' and segment_type = 'INDEX'
    

    Which will return 11 index names in DBA_INDEXES but not in DBA_SEGMENTS with a segment_type of the INDEX.  If you compare these indices against the 11 sectors LOBINDEX, I expect you to see them at the height.

    Justin

  • Hello, I changed my plan of photographer for the individual user, but apps to say that I did not at all of any subscription and I should buy another subscription. What should I do

    Hello, I changed my plan of photographer for the individual user, but apps to say that I did not at all of any subscription and I should buy another subscription. What should I do

    Please visit:https://helpx.adobe.com/creative-suite/kb/trial--1-launch.html

    Check the host on your computer files.

    I hope this helps.

    Concerning

    Megha Rawat

  • Universal English or International English that is good for the UK user

    Universal English or International English that is good for the UK user

    English universal is a North American English.  International English is British English.

Maybe you are looking for

  • Where did my up and arrows gone?

    Updated my MacBook to Firefox 26.0 and scroll arrows on the top right side and down disappeared. If I just use my touchpad it jumps and is very frustrating. I want that my return arrows! Could not find anything in the preferences to change. Mac is ru

  • I get ads when even I open or change a window. It's recent. Any cure?

    When I open a new or change windows I get local, IE Portuguese advertising which is fairly new. I can cancel, but it's annoying. Any suggestions please?Barry

  • How to move the Bookmarks button?

    I would like to move the button bookmark on the upper left side of the page in firefox. I don't want toolbars as they occupy only screen space. neilvmcc

  • can I use Siri while Apple Watch is in mode of bedside table?

    Currently I have a led clock that projects the time on the Ceiling so that I don't have to look around to see what time it is, if I wake up early by mistake.  now that I have a Apple Watch mode night next to my bed stand, it would be cool to number '

  • Pavilion Slimline s3100n: BIOS PW help

    My HD crashed after a complete upgrade to Win10 by a Win8 OSvpurchase. I'm coming back. I reformatted a hard drive and CD recovery, but when I start and go to the BIOS it requires a PW. Don't know who. How do I move forward again? Thank you.