When no Ganymede + available-> connection with enabel PW

Hello

When I try to telnet my switch and the Ganymede server + is not available, I get an "authorization failed" message after typing the password enable :-(

Here is some info:

config switch:

--------------

AAA new-model

AAA of default login authentication group Ganymede + activate

AAA authentication login vtyauth group Ganymede + activate

the AAA authentication enable default

AAA authorization exec default group Ganymede +.

Select the secret xxxxxxxx

!

radius-server ACS_SERVER_IP host

RADIUS-server key xxxxxxxx

!

line vty 0 4

password 7 xxxxxxxx

connection of authentication vtyauth

Debug aaa authentication:

-------------------------

1w0d: AAA: analyze name = tty2 BID type =-1 ATS = - 1

1w0d: AAA: name = tty2 flags = 0 x 11 type = 5 shelf = 0 = 0 = 0 = channel 2 = 0 port adapter slot

1w0d: AAA/MEMORY: create_user (0x524CC4) user = "ruser =" port = "tty2" rem_addr = "MY_IP_ADRESS" authen_type = ASCII = priv = 1 CONNECTION service

1w0d: AAA/AUTHENTIC/START (3157593126): port = list 'tty2' = "vtyauth" action = LOGIN = LOGIN service

1w0d: AAA/AUTHENTIC/START (3157593126): found the list vtyauth

1w0d: AAA/AUTHENTIC/START (3157593126): method = Ganymede + (Ganymede +)

1w0d: TAC +: send worm package AUTHENTIC/START = 192 id = 3157593126

1w0d: AAA/AUTHENTIC (3157593126): status = ERROR

1w0d: AAA/AUTHENTIC/START (3157593126): method = ENABLE

1w0d: AAA/AUTHENTIC (3157593126): status = GETPASS

1w0d: AAA/AUTHENTIC/CONT (3157593126): continue_login (user = '(undef)')

1w0d: AAA/AUTHENTIC (3157593126): status = GETPASS

1w0d: AAA/AUTHENTIC/CONT (3157593126): method = ENABLE

1w0d: AAA/AUTHENTIC (3157593126): status = PASS

1w0d: % LOGGER_FLUSHED-3-SYS: System was suspended from 00:00:00 for the console to debug output.

1w0d: AAA/DISC/EXT tty2: 1002 / 'unknown '.

1w0d: AAA/MEMORY: free_user (0x524CC4) user = "ruser =" port = "tty2" rem_addr = "MY_IP_ADDRESS" authen_type = ASCII = priv = 1 CONNECTION service

Thank you!

I would like to clarify a few permission options.

Activate the mode is priv 15.

Because of the line "exec authorization default aaa group Ganymede +" router wil request ACS to check that the user has private level 15, no matter it's the fallback solution. Your options are:

1 set the Group of users in ACS to access a shell and especially of level 15 privileges.

2. change your router config "default aaa authorization exec no" this is however less sure and not recommended.

You can take "enable default of enable aaa authentication ' out of the config because you use Ganymede +, because as I said, if you use the authorization Ganymede + it's going to always check with ACS for this level of 15 private.

See the attachment for a view where you enter at this level. By default, only the group can be configured like this, but there is a way to apply it to a user - this can be done by checking this attribute via the "interface Configuration" - then "Ganymede" options.

Hope this helps, let us know the results.

Tags: Cisco Security

Similar Questions

  • I had to have an iphone 4, but is unable to operate in Italy. It is supposed to be unlocked by Apple and O2, but when I try to connect with wind or Tim there is no service. What should I do?

    I had to have an iphone 4, but is unable to operate in Italy. It is supposed to be unlocked by Apple and O2, but when I try to connect with wind or Tim there is no service. What should I do?

    Maybe it is locked, Apple do not unlock phones, then call O2.

  • When I try to connect with my wireless laptop will connect only to Local access. If I connect the laptop to the router with the ethernet cable, it works very well.

    VIsta - Local access only

    HI -.
    I recently moved.   I use the same router from my old apartment and I had no problem connection in the past.   Since I moved I have a new Time Warner modem (Cisco) and the modem works fine.

    The router also works very well I'm able to connect with my iPhone and IPad without any problem.

    But when I try to connect with my wireless laptop, it will only connect to Local access.    If I connect the laptop to the router with the ethernet cable, it works very well.

    It's a Dell Studio 15 with Vista.

    The computer is able to connect to wifi to other places without any problem, but for some reason that I can't connect home.   I tried to reset the modem and the router several times, but that did not help.   I tried the option repair & diagnose several times but it doesn't work.

    I tried to look for other solutions online and tried to disable IPv6, and while it helped some and I was able to connect wireless, the computer ran so slowly that it didn't seem like a good solution.

    This has been very frustrating.   Thanks in advance for any help or suggestion.
    Staci

    Hello Staciusa,

    Have you tried to change the wireless channel that your router is running at? There may be interference that could prevent the internet connection:

    Take a look at step 6 in this article that give more details about it:

    http://www.Microsoft.com/athome/Setup/wirelesstips.aspx

    If you need assistance to change the settings of the specific router, you will need to contact your router manufacturer or your internet service provider.

  • I just bought the app for photographers creative cloud when I try finally connect with PS CC, I received an error message that says "no detected subscription. I don't really know how to solve this problem, I used my Adobe ID to connect several times

    I just bought the app for photographers creative cloud when I try finally connect with PS CC, I received an error message that says "no detected subscription. I don't really know how to solve this problem, I used my Adobe ID to connect several times and it just still the same message.

    Your subscription to cloud shows correctly on your account page?

    If you have more than one email, you will be sure that you use the right Adobe ID?

    https://www.adobe.com/account.html for subscriptions on your page from Adobe

    .

    If Yes

    Some general information for a subscription of cloud

    Cloud programs don't use serial... numbers you, connect you to your cloud account paying to download & install & activate... you may need to sign out of the cloud and restart your computer and log into the cloud for things to work

    Sign out of your account of cloud... Restart your computer... Connect to your paid account of cloud

    -Connect using http://helpx.adobe.com/x-productkb/policy-pricing/account-password-sign-faq.html

    -http://helpx.adobe.com/creative-cloud/kb/sign-in-out-creative-cloud-desktop-app.html

    -http://helpx.adobe.com/x-productkb/policy-pricing/activation-network-issues.html

    -http://helpx.adobe.com/creative-suite/kb/trial--1-launch.html

    -ID help https://helpx.adobe.com/contact.html?step=ZNA_id-signing_stillNeedHelp

    -http://helpx.adobe.com/creative-cloud/kb/license-this-software.html

    .

    If no

    This is an open forum, Adobe support... you need Adobe personnel to help

    Adobe contact information - http://helpx.adobe.com/contact.html

    Chat/phone: Mon - Fri 05:00-19:00 (US Pacific Time)<=== note="" days="" and="">

    -Select your product and what you need help with

    -Click on the blue box "still need help? Contact us. "

  • I had to change my password online gmail accnt and now I get a msg "configuration could not be verified" when I try to connect with the new password.

    I had to change my password for the gmail online account. I can access my account with the new password through my browser and my cell phone. But when I try to connect to my gmail account in Thunderbird
    by using the new password, I get a "Configuration could not be verified" error message.
    Any help would be appreciated.
    Thank you
    Brendan

    It looks like you are trying to create a new account. What are you doing exactly?

  • Kuler Klash error when you try to connect with Kuler

    I tried for two days to connect with Kuler and I get the error 'Kuler Klash', so I'm not able to connect and download themes.

    Hi, we have solved many of the issues with a workaround: users create a different Adobe ID, that works.

    If you are ever able to connect or to perform certain functions, such as Save, troubleshoot it please in:
    1. create a different Adobe ID and see if you can you sign up/register, etc..
    2. If the second ID work and you want to use your Adobe ID original instead, please send me a private message. We will need to have your Adobe ID and password to check on our end. You can change your password after we do our troubleshooting.
    3. If the second ID does not work, send me a private message and we'll put up an online conference to solve the problems.

    Saami

  • When I try to connect with my broadband prepaid, tk_scandr error keeps popping up. How can I get rid of him.

    When I connect to the net with my broadband prepaid, (error tk_scandr) keeps popping up. How can I get rid of him.

    Hi StevoD1,

    (1) if it works well before?

    (2) remember to make changes?

    (3) what version of Windows you are running on the computer?

    (4) what is the complete error message you receive?

    Put the computer to boot and then check if the problem persists

    Follow step 1 in the link below,

    How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

    If everything works well after a clean boot, you can deduce that some third-party services are at the origin of the problem.

    Continue with the remaining steps to pin-point on the third party service.
    After find you the program that is causing the problem, you will have to perhaps to update or install a newer version of the program, if you rarely use that you should consider uninstalling the software.

    Important: n ' forget not to put the computer to a normal startup follow step 7 in the link.

    You might want to know

    What version of the operating system Windows am I running?
    http://Windows.Microsoft.com/en-us/Windows7/help/which-version-of-the-Windows-operating-system-am-i-running

  • 'Local only' and 'Limited connectivity' is displayed when I try to connect with my laptop and I can't get online!

    Almost every day for the last 5 months or so, I try to get online and a "local only" or "limited connectivity" appears when trying to connect to my wireless internet.  It seems to do this whenever I try to get when another computer is also about that.  By example, if my mother found on the internet on his computer and I try to get on the internet too it does this thing 'local only' and I can't connect and it launches my mother of the internet too (she also has windows vista).  This seems to be a common problem with vista.  I don't understand all this technique _ so if you know how to fix it please don't try "computer talk" with me-keep simple or explain in detail.

    Hello
     
    Troubleshooting connection problems can be a challenge because there are so many possible causes. First of all, try the following steps:
    Step 1: Diagnose and repair the connection.
    1. open Network Diagnostics by right-clicking the network icon in the notification area, then click on diagnose and repair.
    2. check the result.
     
    Step 2: Uninstall and reinstall the wireless card driver.
    Consult the manufacturer of the wireless device or the system manufacturer's Web site to download the driver of wireless network card.
    1. click on start, type devmgmt.msc and press to enter.
    2. expand network adapters.
    3. right click the network point sup wireless driver and click on uninstall.
    4 restart the computer for changes to take effect.
    5. install the driver for the wireless card and restart the computer.
    6. check connectivity.
     
    The other possible solution for this problem is to install the latest service pack on the computer. Visit this link for more information: http://support.microsoft.com/kb/932063
     
    Try the steps and post back with the results, so that we can help you better.
     
    Kind regards
    Syed
    Answers from Microsoft supports the engineer.
  • crash when I try to connect with the widget browser

    I have a problem with the connection in the browser widget can someone help me with this

    Widget browser is no longer available and has not been for some time.

    You should use this link...

    https://creative.Adobe.com/addons

  • My MS Office Communicator opens when I click on 'Connect with instrument' on Measurement &amp; Automation Explorer.

    Hello

    Recently I am having problems using the option "contact instrument" on measurement and Automation Explorer.  When I tried to click on 'communicate with instrument' button, my MS Office Communicator starts to open, then an error message appears indicating that "specified address is not recognized or does not exist. With this, I can't use MAX Explorer

    for the purpose of debugging. Apart from this problem, communication between my PC and my instruments are okay during the VI run. Hope you could help me with that. Thank you!

    I see this on two machines in my group too. Bringing this back to the top to see if we can get an answer. What do you think of gurus OR?

  • Re: Windows Update KB kb961371 causes blue screen when you try to connect with BT

    Just thought I'd share what he had me flumoxed for awhile.

    I found that Windows Update has published around July 16, 2009 cause BT crash and Wlindows to go back to a blue screen.

    KB961371 is installed automatically by Windows Update If you have set it to do.

    Unistalling it end the Bluescreens.

    BT Stack Version 6.40.00 (T)

    Windows Vista, but can affect other operating systems

    Update details

    http://support.Microsoft.com/kb/961371

    Ian

    Hey Ian, thanks a lot for this info.
    I'll test it on my machine.

  • My default browser is Firefox, but when I try to connect to Twitter on Firefox, I can't. I can only do it on Chrome. Help?

    Exactly what is said. I have a twitter account and when I tried to connect with Mozilla I couldn't... but when I tried to connect with Chrome as I could. I don't know what the problem... can someone help me? I use Mozilla for everything (and I know it's somewhat a global problem of the 1st) but this isn't it convenient open Chrome just to check my twitter account...

    Can you give more details on the problem? What link are you using?
    You get an error message? The page loads?

    Many issues of the site can be caused by corrupted cookies or cache.

    • Clear the Cache

    How to clear the cache of Firefox {web link}

    and

    • Delete Cookies

    This will be you disconnect all the sites to which you are connected.
    Press Alt or F10 to bring up the toolbar.
    Followed;

    Windows; Tools > Options
    Linux; Edit > Preferences
    Mac; name of the application > Preferences

    Then confidentiality.
    Under historical, select Firefox will use the custom settings.
    There is a button on the right side, called View the Cookies.

    If there is still a problem,
    Start Firefox in Safe Mode {web link}
    While you are in safe mode;
    Press Alt or F10 to bring up the toolbar.
    Followed;

    Windows; Tools > Options
    Linux; Edit > Preferences
    Mac; name of the application > Preferences

    Then Advanced > General.
    Find and stop using hardware acceleration.

    Dig safe web sites and see if there is still a problem. Then restart.

  • Unable to connect with PCoIP Protocol

    Hello world.

    Since a few days, I was unable to connect to a virtual machine with PCoIP Protocol. It works perfectly with RDP

    When I try to connect with PCoIP. I get a blank screen for 2-3 seconds and return to the desktop of the local computer.

    That's what I do in the case of the admin View Manager:

    12: DISCONNECTED: server: cn = 21360ff1-5281-44f1-b037-b702163fc5e9, OU = servers, dc = vdi, dc = vmware, dc = int; Pool: cn = pc-stapo-5, or = server, dc = vdi groups, dc = vmware, dc
    11: Domain\username the user disconnected from the PC-StApo-5 computer for desktop pc-stapo-5 - session allocated to August 26, 2010 11:26:48 EDT, connected to 0 mins 7 dry
    10: end of session (A23420BEF09AB83712BF5519B19BBD33) User user_name Secure Gateway Server - session ID: A23420BEF09AB83712BF5519B19BBD33
    9: (SESSION: 578FCAB8AE3D3B805CFA7FCF595F5EF6;) A23420BEF09AB83712BF5519B19BBD33) user USER: domain\username. USERSID:S-1-5-21-2880851246-1959087848-718793500-2167; USERDN:CN=S-1-5-21-2880851246-1959087848-718793500-2167,CN=ForeignSecurityPrincipals,DC=VDI,DC=VMware,DC=int; has disconnected from VDM
    8: (SESSION: 578FCAB8AE3D3B805CFA7FCF595F5EF6;) BROKER_LOGOFF: USER: DOMAIN\USERNAME OF A23420BEF09AB83712BF5519B19BBD33); USERSID:S-1-5-21-2880851246-1959087848-718793500-2167; USERDN:CN=S-1-5-21-2880851246-1959087848-718793500-2167,CN=ForeignSecurityPrincipals,DC=VDI,DC=VMware,DC=int;
    7: RECONNECTED: server: cn = 21360ff1-5281-44f1-b037-b702163fc5e9, OU = servers, dc = vdi, dc = vmware, dc = int; Pool: cn = pc-stapo-5, or = dc = vdi, dc = vmware server, groups, dc = int; DNS:PC - StApo - 5.DOMAIN.richerboulet.com; IP:192.168.0.116; USER: DOMAIN\USERNAME; USERDN:CN=s-1-5-21-2880851246-1959087848-718793500-2167,CN=ForeignSecurityPrincipals,DC=VDI,DC=VMware,DC=int; BROKERUSERSID:S-1-5-21-2880851246-1959087848-718793500-2167;
    6: user DOMAIN\USERNAME reconnected to the PC-StApo-5 machine for office pc-stapo-5 - session allocated to August 26, 2010 11:26:48 EDT, disconnected for 140...
    5: pending: server: cn = 21360ff1-5281-44f1-b037-b702163fc5e9, OU = servers, dc = vdi, dc = vmware, dc = int; Pool: cn = pc-stapo-5, or = dc = vdi, dc = vmware server, groups, dc = int; DNS:PC - StApo - 5.DOMAIN.richerboulet.com; IP:192.168.0.116; USER: DOMAIN\USERNAME; USERDN:CN=s-1-5-21-2880851246-1959087848-718793500-2167,CN=ForeignSecurityPrincipals,DC=VDI,DC=VMware,DC=int; BROKERUSERSID:S-1-5-21-2880851246-1959087848-718793500-2167;
    4: (SESSION: 578FCAB8AE3D3B805CFA7FCF595F5EF6;) A23420BEF09AB83712BF5519B19BBD33) ALLOCATED: Desktop: CN = PC-StApo-5, OR = Applications, DC = vdi, DC = vmware, DC = int; Server: cn = 21360ff1-5281-44f1-b037-b702163fc5e9, OU = servers, dc = vdi, dc = vmware, dc = int; USER: DOMAIN\USERNAME; USERDN:CN=S-1-5-21-2880851246-1959087848-718793500-2167,CN=ForeignSecurityPrincipals,DC=VDI,DC=VMware,DC=int; Pool: cn = pc-stapo-5, or = dc = vdi, dc = vmware server, groups, dc = int;
    3: (Request139) User USER name connected to the Secure Gateway - session ID server: A23420BEF09AB83712BF5519B19BBD33...
    2: (SESSION: 578FCAB8AE3D3B805CFA7FCF595F5EF6) BROKER_LOGON: USER: DOMAIN\USERNAME. USERSID:S-1-5-21-2880851246-1959087848-718793500-2167; USERDN:CN=S-1-5-21-2880851246-1959087848-718793500-2167,CN=ForeignSecurityPrincipals,DC=VDI,DC=VMware,DC=int;
    1: User user domain\username (the SESSION USER name: 578FCAB8AE3D3B805CFA7FCF595F5EF6) has authenticated successfully to the VDM...

    It is the newspaper of the events of the virtual machine:

    1: program 'pcoip_server_win32 - Server PCoIP' started, version = 3, 1, 0, 3178:soft_pcoip_rc_3_1, pid = 2656, buildtype = output
    2: channel customer/agent pending wssm to start


    3: session RECONNECTED with credentials CHANGED: expected user domain\username, DOMAIN\username
    4: session RECONNECTED: id = 0, DOMAIN\username, customer = (null), user login ID = A23420BEF09AB83712BF5519B19BBD33, userDn=cn=s-1-5-21-2880851246-1959087848-718793500-2167,cn=foreignsecurityprincipals,dc=vdi,dc=vmware,dc=int
    5: agent/customer channel connected for session = 0
    6: DISCONNECTED session: id = 0, DOMAIN\username, customer = (null), user login ID = A23420BEF09AB83712BF5519B19BBD33, userDn=cn=s-1-5-21-2880851246-1959087848-718793500-2167,cn=foreignsecurityprincipals,dc=vdi,dc=vmware,dc=int
    7: "winlogon" program started, version =, pid = 2992, buildtype = output
    8: authentication Manager installed successfully.

    I try to uninstall/install VMWare View Agent on the virtual machine.

    Delete and create the virtual machine in the view manager.

    Restart the virtual machine and the server of the display manager

    Nothing changes.

    You have an idea?

    Thank you.

    You have recently upgraded your ESX hosts to the U2 version? If so, that breaks PCoIP. There is an article with a link to d/l a package of updated tools that solves this problem.

  • After the password reset. Able to connect with the old and the new OAM password.

    Hi all

    I have it here's the installation program.

    OAM - 10.1.4.2.0 (BP08)
    OVD - User store
    Advertising - Store configuration and policy.

    Here's the scenario.

    I have a user (spokuri) OAM with the password (Oracle123) and im able to connect with these credentials.

    But it's when I reset the password for Oracle1234 for spokuri using the administrator credentials.

    Next time, when I try to connect with these credentials(spokuri/Oracle123) should not allow me to open a session to the User Manager since I changed the password to Oracle1234. Am I rite?

    But, it allows to connect to the User Manager with the old password and the new password.

    Please let me know your comments.

    Thank you and best regards,

    Siva NAKI.

    Hi Siva,

    If the announcement is you user store (even through OVD) then this could be a function of Microsoft:

    http://support.Microsoft.com/kb/906305/en-us

    Kind regards
    Colin

  • Hai, my ipod shuffle when it is connected with the computer, it flashes organge light.  If I don't take no light

    Hai, my ipod shuffle when it is connected with the computer, it flashes orange light.  If I remove without light and music.  Even I kept connected all day with my laptop for charging.  But without success.  Is it possible to change the battery?

    If the shuffle still appears in iTunes when you connect, you can try to do a restore using iTunes, where the cause is a software problem.

    Use iTunes on your Mac or PC to restore your iPhone, iPad or iPod settings - Apple Support

    If the problem reoccurs after the restoration, it's probably a battery worn.  Need soldering skills to replace yourself, and iPod shuffle (with the exception of the 1st generation) is very small.  Not easy to work on.  This web site has repair guides

    https://www.iFixit.com/device/iPod_Shuffle

    and parts are available from sources like eBay.

    Apple 'serve' the shuffle, if it's the 4th gen (current type).  Rather than change the battery of your device, you get a replacement unit.  According to this document, out-of-warranty fees are $39

    Pricing of the Service - The Apple iPod Support

    NOTE: If your shuffle is less than one year of the date of purchase, it is under warranty.

    The retail price of a brand new 4th gen iPod shuffle, with new headphones, docking cable and warranty of one year is $ 49.

Maybe you are looking for