After TACACS configured, Authenticate successfully but not able to go in config mode.

Hi All,
I Have Cisco 4710 ACE, and configured TACACS on ACE for authentication and accounting. Configuration paste below.
I am able to authenticate with ACS server 5.1 but not able to go in config mode of ACE 4710.
Debug output attached.
Need help on this.
tacacs-server key 7 "wwxfeootjv"
tacacs-server timeout 60
tacacs-server host 128.9.31.70 key 7 "wwxfeootjv"
aaa group server tacacs+ TACACS_Group_Server
server 128.9.31.70
ntp server 128.9.24.58
aaa authentication login default group TACACS_Group_Server
aaa accounting default group TACACS_Group_Server
Below Logs are coming on Device.
Sep 19 2010 16:35:55 : %ACE-6-302022: Built TCP connection 0x3853a for vlan1000:172.24.24.70/16477 (172.24.24.70/16477) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:35:55 : %ACE-6-302023: Teardown TCP connection 0x3853a for vlan1000:172.24.24.70/16477 (172.24.24.70/16477) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 743 TCP FINs
Sep 19 2010 16:35:58 : %ACE-6-302022: Built TCP connection 0x38570 for vlan1000:172.24.24.70/16480 (172.24.24.70/16480) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:35:58 : %ACE-6-302023: Teardown TCP connection 0x38570 for vlan1000:172.24.24.70/16480 (172.24.24.70/16480) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 742 TCP FINs
Sep 19 2010 16:37:51 : %ACE-6-302022: Built TCP connection 0x38aff for vlan1000:172.24.24.70/16545 (172.24.24.70/16545) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:37:51 : %ACE-6-302023: Teardown TCP connection 0x38aff for vlan1000:172.24.24.70/16545 (172.24.24.70/16545) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 736 TCP FINs
Sep 19 2010 16:38:21 : %ACE-6-302022: Built TCP connection 0x38c9d for vlan1000:172.24.24.70/16559 (172.24.24.70/16559) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:38:21 : %ACE-6-302022: Built TCP connection 0x38c9f for vlan1000:172.24.24.70/16560 (172.24.24.70/16560) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:38:21 : %ACE-6-302023: Teardown TCP connection 0x38c9d for vlan1000:172.24.24.70/16559 (172.24.24.70/16559) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 722 TCP FINs
Sep 19 2010 16:38:21 : %ACE-6-302023: Teardown TCP connection 0x38c9f for vlan1000:172.24.24.70/16560 (172.24.24.70/16560) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 788 TCP FINs
Sep 19 2010 16:38:29 : %ACE-6-302022: Built TCP connection 0x38ce1 for vlan1000:172.24.24.70/16565 (172.24.24.70/16565) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:38:29 : %ACE-6-302022: Built TCP connection 0x38cff for vlan1000:172.24.24.70/16566 (172.24.24.70/16566) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:38:29 : %ACE-6-302023: Teardown TCP connection 0x38ce1 for vlan1000:172.24.24.70/16565 (172.24.24.70/16565) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 661 TCP FINs
Sep 19 2010 16:38:29 : %ACE-6-302023: Teardown TCP connection 0x38cff for vlan1000:172.24.24.70/16566 (172.24.24.70/16566) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 712 TCP FINs
Sep 19 2010 16:38:29 : %ACE-6-302022: Built TCP connection 0x38cf5 for vlan1000:172.24.24.70/16567 (172.24.24.70/16567) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:38:29 : %ACE-6-302023: Teardown TCP connection 0x38cf5 for vlan1000:172.24.24.70/16567 (172.24.24.70/16567) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 724 TCP FINs
Sep 19 2010 16:39:41 : %ACE-6-302022: Built TCP connection 0x390a1 for vlan1000:172.24.24.70/3883 (172.24.24.70/3883) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:39:41 : %ACE-6-302023: Teardown TCP connection 0x390a1 for vlan1000:172.24.24.70/3883 (172.24.24.70/3883) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0:0
0:00 bytes 737 TCP FINs
Sep 19 2010 16:40:20 : %ACE-6-302022: Built TCP connection 0x3929b for vlan1000:172.24.24.70/3902 (172.24.24.70/3902) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:40:20 : %ACE-6-302022: Built TCP connection 0x392ab for vlan1000:172.24.24.70/3903 (172.24.24.70/3903) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:40:20 : %ACE-6-302023: Teardown TCP connection 0x3929b for vlan1000:172.24.24.70/3902 (172.24.24.70/3902) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0:0
0:00 bytes 722 TCP FINs
Sep 19 2010 16:40:20 : %ACE-6-302023: Teardown TCP connection 0x392ab for vlan1000:172.24.24.70/3903 (172.24.24.70/3903) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0:0
0:00 bytes 791 TCP FINs
Sep 19 2010 16:45:17 : %ACE-6-302022: Built TCP connection 0x3a127 for vlan1000:172.24.24.70/53389 (172.24.24.70/53389) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:45:17 : %ACE-6-302023: Teardown TCP connection 0x3a127 for vlan1000:172.24.24.70/53389 (172.24.24.70/53389) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 723 TCP FINs
Sep 19 2010 16:46:11 : %ACE-6-302022: Built TCP connection 0x3a3b3 for vlan1000:172.24.24.70/53414 (172.24.24.70/53414) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:46:11 : %ACE-6-302022: Built TCP connection 0x3a3c3 for vlan1000:172.24.24.70/53415 (172.24.24.70/53415) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:46:11 : %ACE-6-302023: Teardown TCP connection 0x3a3b3 for vlan1000:172.24.24.70/53414 (172.24.24.70/53414) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 722 TCP FINs
Sep 19 2010 16:46:11 : %ACE-6-302023: Teardown TCP connection 0x3a3c3 for vlan1000:172.24.24.70/53415 (172.24.24.70/53415) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 788 TCP FINs
Sep 19 2010 16:46:23 : %ACE-6-302022: Built TCP connection 0x3a467 for vlan1000:172.24.24.70/53422 (172.24.24.70/53422) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:46:23 : %ACE-6-302022: Built TCP connection 0x3a469 for vlan1000:172.24.24.70/53423 (172.24.24.70/53423) to vlan1000:128.9.31.70/49 (128.9.31.70/49)
Sep 19 2010 16:46:23 : %ACE-6-302023: Teardown TCP connection 0x3a467 for vlan1000:172.24.24.70/53422 (172.24.24.70/53422) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 661 TCP FINs
Sep 19 2010 16:46:23 : %ACE-6-302023: Teardown TCP connection 0x3a469 for vlan1000:172.24.24.70/53423 (172.24.24.70/53423) to vlan1000:128.9.31.70/49 (128.9.31.70/49) duration 0
:00:00 bytes 712 TCP FINs
Regards
MS.

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA3_1_0/configuration/security/guide/aaa.html#wp1411787
To configure the TACACS+ role and domain settings on Cisco Secure ACS, perform the following steps:
Step 1 Go to the Interface Configuration section of the Cisco Secure ACS HTML interface and access the TACACS+ (Cisco IOS) page. Perform the following actions:
a. Under the TACACS+ Services section of the page, the User column or the Group column depending on your configuration, check the Shell (exec) check box.
b. Under the Advanced Configuration Options section of the page, check the Display a window for each service selected in which you can enter customized TACACS+ attributes check box.
c. Click Submit.
Step 2 Go to the Advanced Options page of the Interface Configuration section of the Cisco Secure ACS HTML interface. Perform the following actions:
a. Check the Per-user TACACS+/RADIUS Attributes check box.
b. Click Submit.
Step 3 Go to the User Setup section of the Cisco Secure ACS HTML interface and double-click the name of an existing user that you want to define a user profile attribute for virtualization. The User Setup page appears.
Step 4 Under the TACACS+ Settings section of the page, configure the following settings:
•Check the Shell (exec) check box.
•Check the Custom attributes check box.
•In the text box under the Custom attributes, enter the user role and associated domain for a specific context in the following format:
shell:= ...
For example, to assign the selected user to the C1 context with the role ROLE1 and the domain DOMAIN1, enter shell:C1=ROLE1 DOMAIN1.
You can also substitute an asterisk (*) for the equals sign (=) as follows:
shell:* ...
Use the above shell string if you are also using Cisco IOS command authorization.
Step 5 Under the Checking This option Will PERMIT all UNKNOWN Services section of the page, check the Default (Undefined) Services check box to permit unknown services.
Step 6 Click Submit when you finish configuring the TACACS+ role and domain settings.
For example, if USER1 is assigned the role ADMIN and the domain MYDOMAIN1 (where shell:Admin=ADMIN MYDOMAIN1), then one of the following can occur:
•If USER1 logs in through the Admin context, that user is automatically assigned the Admin role and the MyDomain1 domain.
•If USER1 logs in through a different context, that user is automatically assigned the default role (Network-Monitor) and the default domain (default-domain). In this case, the user profile attribute is not obtained from the TACACS+ server during authentication.
Gilles.

Similar Messages

Installed successfully, But not able to open any website, says connection timed out.

I have installed firefox successfully. When i enter any website its status shows connecting, For eg. Connecting to gmail.com, but after some time it says connection timed out.
No problem with internet, i can open the same website with other browsers.
Please look at this. I faced the same with the 2 versions FireFox5.0 and 3.5
OS - Windows7 64 bit operating system.

Thank you for your help Steve! Unfortunately it is still not working. I have tried all day long ... please see attached the two error messages that I'm getting from InDesign alone. Do you have any further advise?
Thank you!

After new weblogic domain configuration with oim 11g, not able to login

After new weblogic domain configuration with oim 11g, not able to login for the frist time as xelsysadm.
it says invalid sign in. and in logs it says password is invalid.
Please help me in asap...

Thanks Pallavi for the effort. I tried commenting out, its still the same. It do not throw exception this time. However, It tells me that the recon event is completed and linked to user. When I go to user's profile, I dont see the resource provisioned.
Also,
The Account ID in recon manager of Web Console and the Account ID that is stored in the tables, doesn't match.
I wrote a custom code to fetch account and user details and here is the output,
User Key : 13 -- has Login Id : USER_CS
Account with account key : 49 is with user key : [USER_CS]
Getting Account Data......
{UD_TEST_1P_EMPLOYEENUMBER=1567, UD_TEST_1P_NAME=Kim1}
However the Account Id in recon manager is : 91
This seems fine.
Doesn't this mean, the account is reconciled successfully?
The problem is that, I am not able to see this resource in User's resource profile.
Edited by: Shashi kiran on Apr 18, 2013 3:56 PM

Hi,earlier i was able to download free games on my ipad2,but now every timr i am trying it is asking for billing information?and even after selecting "NONE" option i am not able to download free games on my ipad?please help me if u have solution.thanx

Hi ,Earlier i was able to download free games on my ipad2,but now everytime i am trying it is asking for billing information?
even after selecting "none" option i am not able to download free games on my ipad ?
please help me if u have solution for this

khalid08 wrote:
Hi ,Earlier i was able to download free games on my ipad2,but now everytime i am trying it is asking for billing information?
Earlier when - today? Some time in the past? When did this start?

TS1398 After update iOS7, my iphone 4s not able to connect any Wi-Fi. I tried all the possible ways, but faild.

After update iOS7, my iphone 4s not able to connect any Wi-Fi. I tried all the possible ways, but faild.

Settings > General > Reset > Reset Network Settings

We are facing issue to open a static form PDF in Chrome Browser , which is loaded using Adobe FormService.Able to open in other browsers but not able to open the static forms in chrome with LC 11.0 version

We are facing issue to open a static form PDF in Chrome Browser
, which is loaded using Adobe FormService.
Able to open in other browsers but not able to open the static
forms in chrome with LC 11.0 version
Below error message:
The document you are trying to load
requires Adobe Reader 8 or higher. You may not have the Adobe Reader installed
or your viewing environment may not be properly configured to use Adobe Reader.
For information on how to install Adobe Reader and configure your viewing
environment please see http://www.adobe.com/go/pdf_forms_configure.
Please let us know do we have any option for disabling
<NoXFA/> tag by calling formService. RenderPDF() method on adobe service
For dynamic forms its working by adding <NOXFA/> in
DDX xml . only for static forms its not working because we are not using
assembler service for this forms.
Please let us know how we can disable XFA in static forms??????????????????

If anyone is reading this still looking for what caused the issue and how to fix it here is what I discovered.
The antivirus program our company uses, Bitdefender Antivirus Plus, was causing some of the PDF files not to open. After troubleshooting the different modules and settings the culprit was..
Scan SSL in Privacy Control Settings. Turning it OFF solved the problem and all the PDF files that previously would not open now open just fine. This issue has been sent to Bitdefender for them to review. If you use a different antivirus program and are having this issue try locating the Scan SSL setting and see if turning it off solves the problem.

I bought new i phone 5 3 days back, after that asked for new update which is 6.1.4, after updating my iphone i am not able to use cellular data services. I called up data provider, they says its the problem with new software update. There is no option add

I bought new i phone 5 3 days back, after that asked for new update which is 6.1.4, after updating my iphone i am not able to use cellular data services. I called up data provider, they says its the problem with new software update. There is no option add APN. Now when i switch to safari its showing you are not subscribed for cellular data. But I am able to use data on other phone.
Will you please help me in this regard?
Another issue, since i bought my new iphone there is dust inside back main camera.
Your advises are highly appreciated.

Hey Shaiju isac,
I'd take a look at the following article, it'll guide you though steps to you troubleshoot cellular data issues on your iPhone:
iPhone: Troubleshooting a cellular data connection
http://support.apple.com/kb/ts3780
Cheers,
David

I am experiencing difficulties opening some web-based PDF files on my iPad. I was having the same difficulty opening the same PDFs on my iMac (after I upgrade to Yosemite) but was able to overcome it by adjusting the Adobe Reader plug-in settings.

I am experiencing difficulty opening some web-based PDF documents on my iPad. I had exactly the same difficulty on my iMac (after I upgraded to Yosemite) but was able to overcome it by adjusting the Adobe Reader plug-in security settings in Safari (in OSX).
Unfortunately there does not seem to be a way to similarity adjust the security settings in Safari in iOS 8.
The message I get when I attempt to open the PDF (on my iPad) is as follows:
            "To view the full contents of this document you need a later version of PDF viewer. You can upgrade to the latest version of Adobe Reader from ..."
Needless to say this is unhelpful for two reasons:
- I have the very latest version of Adobe Reader; and
- in iOS Adobe Reader is not a plug-in and plays absolutely no role in opening web-based PDF documents.
If anyone has experienced this difficulty and has been able to overcome it I would be most appreciative to hear of you solution.
Cheers
AlbertaRic

Did you check what I would consider the first place to look:
* http://kb.mozillazine.org/Problematic_extensions
If the site is still down (at least 12 hours) when you read this try [http://webcache.googleusercontent.com/search?q=cache:http%3A//kb.mozillazine.org/Problematic_extensions Google's cache]
Link or url would make it easier to see which page you tried rather than "your online solution for ...".
* http://kb.mozillazine.org/Firefox_hangs ([http://webcache.googleusercontent.com/search?q=cache:http%3A//kb.mozillazine.org/Firefox_hangs cached version])
* http://kb.mozillazine.org/Firefox_crashes ([http://webcache.googleusercontent.com/search?q=cache:http%3A//kb.mozillazine.org/Firefox_crashes cached version])
* [https://support.mozilla.com/kb/Firefox%20hangs#os=mac&browser=fx4 Firefox hangs | Troubleshooting | Firefox Help]

The message cannot be seen on incoming emails. I can only view the message if I click on reply. Also any links attached to email will not open. I have tried everything to solve the problem but not able to.

A message cannot be seen on my incoming emails. I can only view the message if I click on reply. Also any links attached to email will not open. I have tried everything to solve the problem but not able to.

Try closing the Mail app completely and see if it works properly when you re-open the app : from the home screen (i.e. not with the Mail app 'open' on-screen) double-click the home button to bring up the taskbar, then press and hold any of the apps on the taskbar for a couple of seconds or so until they start shaking, then press the '-' in the top left of the Mail app to close it, and touch any part of the screen above the taskbar so as to stop the shaking and close the taskbar.
If that doesn't work also do a reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.

I bought a cd with Lightroom 5. After installation and registration I am not able to use 'help' function and I cannot update the software. I anyone able to give me a hint how to handle it? Thank you ind advance Karl

I bought a cd with Lightroom 5. After installation and registration I am not able to use 'help' function and I cannot update the software. Is anyone able to give me a hint how to handle it?
Thank you in advance
arl

Hi Keith, sorry for my late reply.
Surely I am able to connect to the help function when Icontact the website
of AdobeLR5.The problem is as follows,
When I open LR5 on my computer and work with it and try to open the help
function in the software, I don't get it.
When I bought the CD I was naiv enough to believe that I get an independent
working software. I learned in the meantime, that the seller does not allow
to work with, without being connected to them.
I don't believe that I am paranoid, but I like to buy something and use it
without to inform the supplier that I do it. Otherwise I could have bought
the license fpr LR5 via internet.
Best regards
Karl
2015-01-02 13:42 GMT+01:00 kglad <[email protected]>:
I bought a cd with Lightroom 5. After installation and registration I
am not able to use 'help' function and I cannot update the software. I
anyone able to give me a hint how to handle it? Thank you ind advance Karl
kglad <https://forums.adobe.com/people/kglad?et=watches.email.outcome>
marked Keith_Reeder
<https://forums.adobe.com/people/Keith_Reeder?et=watches.email.outcome>'s
reply on I bought a cd with Lightroom 5. After installation and
registration I am not able to use 'help' function and I cannot update the
software. I anyone able to give me a hint how to handle it? Thank you ind
advance Karl
<https://forums.adobe.com/thread/1669640?et=watches.email.outcome> as
helpful. View the full reply
<https://forums.adobe.com/message/7059196?et=watches.email.outcome#7059196>

I am not able to hear any sounds of games on the speaker. Though the sounds function on the head fones. The speaker works perfect in other applications except games.Have checked all the settings but not able to fix it.

i am not able to hear any sounds of games on the speaker. Though the sounds function on the head fones. The speaker works perfect in other applications except games.Have checked all the settings but not able to fix it.

Have you got notifications muted ? Only notifications (including games) get muted, so the iPod and Videos apps, and headphones, still get sound. Depending on what you've got Settings > General > Use Side Switch To set to (mute or rotation lock), then you can mute notifications by the switch on the right hand side of the iPad, or via the taskbar : double-click the home button; slide from the left; and its the icon; press home again to exit the taskbar. The function that isn't on the side switch is set via the taskbar instead : http://support.apple.com/kb/HT4085
If that doesn't solve it then try a reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.

Master Data Loaded but not able to see.

Loaded master data successfully. Able to see it in P and M table, but not able to see when going thru Manage - Contents at InfoProvider level.
Many requests are available showing number of records Transferred and Updated.
What could be the possible reason?

Hi Sarabjit,
Welcome to SDN!!
You need to load the transaction data into the Info-provider to see the contents and not just the master data.
In case you have done the transaction load then you need to do the "apply hier/attr change" for the master data loaded. Goto RSA1 -> Tools(menu) -> apply hier/attr change -> Seelect your info-object and execute.
Bye
Dinesh

TS1702 I had deleted my Apps Icon from the phone as I was trying to update the new version iOS4.3. However, after deleteing the Icon, I am not able to install the Apps Messenger again because I am not able to use the IOS.4.3 diagnostic password sent via e

I had deleted my Apps Icon from the phone as I was trying to update the new version iOS4.3.
However, after deleteing the Icon, I am not able to install the Apps Messenger again because I am not able to use the IOS.4.3 diagnostic password sent via email.
Installation was rejected because I need the iOS.4.3
Thanks for your help
Michael

That situation went from inconvenient to complicated quickly. Wait for any pending orders to drop off, wait for things to clear up, wait till your upgrade comes up and then upgrade when your contract is fulfilled. I would have suggested a replacement phone, I know, with only a month left why couldn't you just upgrade early, but these situations where people try to upgrade early always end horribly and once a phone order starts, it almost cannot finish until something winds up shipped received and returned. Sorry this happened the way it did. Definitely not efficient.

HT5787 i have logged in my account but not able to verify email

i have logged in my account but not able to verify email

Do you mean that (a) you do not receive the the verifcation email, (b) the verifcation email does not have a working link in it, (c) the webpage at the address of the link in the verification email is not responding, (d) after typing in your Apple ID and password to verify your email address, the webpage does not respond, or (e) the Apple ID and password combination you are using to verify your email address does not match what Apple has on records.
(1) If (a), check your junk folder for the email. If it is not there, see 2..
(2) If (b, c, or d), then you might simply try later. The webpage could be have a temporary issue.
(3) If (e) use the expresslane to resolve password issue: https://expresslane.apple.com/GetCountriesDetails.do
All the best!

I just upgraded the 3GS to ios 6.1, but not able to register it. itunes fails to register

i just upgraded the 3GS to ios 6.1, but not able to register it. itunes fails to register

There are hundreds (and still counting) problems with 3gs activation after upgrading to iOS 6.1.
No one fixed it yet. The possible reason is that jailbroken 3gs' unable to be updated to 6.1 operation system.

After TACACS configured, Authenticate successfully but not able to go in config mode.

Similar Messages

Maybe you are looking for