Cannot see AAA banner, username and password prompts on IOS switch

Hi,
I have configured RADIUS authentication for VTY access to a Catalyst 2960S running 15.0(2)SE2.
The RADIUS server is a Microsoft server running the Network Policy and Access Service role (Microsoft's own RADIUS server).
Everything is ok apart from the login prompts. I want to customise these with a banner, username prompt and password prompt. I have added the lines below to my config:
aaa authentication banner ^Chello^C
aaa authentication password-prompt "Enter your password:"
aaa authentication username-prompt "Enter your username:"
However when I ssh to the switch I just see the output below:
login as: james.hawkins
Using keyboard-interactive authentication.
Password:
ASWTRE-BF01#
My config is shown below:
aaa authentication banner ^Chello^C
aaa authentication password-prompt "Enter your password:"
aaa authentication username-prompt "Enter your username:"
aaa authentication login default local-case
aaa authentication login SSH group radius local-case
aaa authentication enable default enable
aaa authorization exec default local
aaa authorization exec SSH group radius local
radius server TREREC-01
address ipv4 10.3.32.51 auth-port 1812 acct-port 1813
key 7 08171E61K281D08461C
line con 0
logging synchronous
line vty 0 4
exec-timeout 360 0
authorization exec SSH
logging synchronous
login authentication SSH
transport input ssh
line vty 5 15
exec-timeout 360 0
authorization exec SSH
logging synchronous
login authentication SSH
transport input ssh
Is there anything that I am missing?

James:
you use the line:
aaa authentication login SSH group radius local-case
are you sure that the RADIUS is reachable? if the radius is not reachable it will check the local DB for the username. I am not pretty sure if local DB auth displays the banner.
Rating useful replies is more useful than saying "Thank you"

Similar Messages

Annoyed by OTN username and password prompting

Sorry it's really starting to annoy me that I always have to enter my OTN username and password between every browser session. Why can it not use a cockie or whatever to keep me logged in at least for the day. Or better, let me save the password in my keychain so that I only have to press the "Sign In" button when the login appears.
Firefox has a built in "save password" option, which will supply username and password when accessing a particular web page. It works with sites like ebay and many other common sites, but for some reason it does not work with OTN. When accessing OTN it never prompts me if I want Firefox to remember the password. I'm not using private browsing and have no site in the save password exception list.
I found an add-on named "Saved Password Editor". It allows to manually add username and password entries associated with a web site. But since almost any software calls home today I rather not use any 3rd party tool to deal with security sensitive information. I checked the tool and it did not call home, but who knows what happens later.
Any other ideas?
FWIW: firefox - How does browser know when to prompt user to save password? - Stack Overflow
Maybe the problem is simply because the login uses "ossusername" instead of "username" in the login form.

So what is the message? I have no particular objection to any solution that fixes the issue, beside installing 3rd party browser extensions.
How about the following? Checking https://login.oracle.com/mysso/signon.jsp on http://web-sniffer.net shows:
Set-Cookie: ORA_UCM_VER=; domain=.oracle.com; expires=Thu, 01-Jan-1970 01:00:00 GMT; path=/
Unfortunately I cannot set my system date prior to 1970 to see what happens, but would the cookie allow me to login without the need to specify my username and password again until the cookie expires? Would that be a feasible option instead of enabling form autocomplete?
Speaking of which, the OTN forum defines "Cache-Control: private, no-cache, no-store, must-revalidate". This setting disables browser caching. I found the browser's back button very useful in the past to be able to get back the content of the forum editor, for instance, when some error occurred submitting the response or when I accidentally opened another web page. This used to work in the previous forum.
The editor's new recovery function so far has been rather confusing or completely useless for me. It does not help after being logged out without notice. It actually just happened and I received an "unexpected error" while posting this response, loosing all text. (Un)fortunately I'm used to either copy and paste the content before submitting or use my own text editor. But cutting and pasting has become a different story now after the forum upgrade with the buggy editor.
Meanwhile I understand that OTN cannot fix the problems with the forum software, but perhaps the login could be improved.

Reporting Services username and password prompting

We have several branch office locations and one reporting services server. All of the branch office locations can access the reporting services server, but we have one location for the passed week, each time they make a connection to this server, it prompts
them for a username and password and will not allow them to connect even if the correct username and password is correct.
I have tried adding the server to the IE intranet/trusted site list. Set IE security on all zones to automatically logon with current username and password.
What is strange is that this is the only branch office site that is having this issue. It is almost like kerberos is broken for this site location only.
DOes anyone has any suggestions what could be causing this problem for all computers in this one location. Nothing has changed on their local servers nor have we pushed any updates to the machines.

Hi bubba1984,
As per my understanding, I think this issue is caused by Kerberos authentication. Kerberos is an authentication protocol that allows clients that create authentication tokens to associate a specific destination to that token. In the failure case, there is
a mismatch between the destination specified in the token and the report server process configuration. Due to this mismatch, the underlying Kerberos authentication scheme supported by Windows prevents report server from authenticating the user.
To fix this issue, please try to remove RSWindowsNegotiate and ensure RSWindowsNTLM is specified in the rsreportserver.config file. For more details, please take the following article as reference:
http://blogs.msdn.com/b/lukaszp/archive/2008/03/26/solving-the-reporting-services-login-issue-in-the-february-ctp-of-sql-server-2008.aspx
Hope this helps.
Thanks,
Katherine Xiong
Katherine Xiong
TechNet Community Support

Username and Password Prompt

We just purchased Crystal Reports 2008 after using version 8.0. I've been creating reports form our ERP software's VFP datbase files using 8.0. With the 2008 version of Crystal I'm prompted for a username and password when trying to access the database when first trying to set up a new report. Specifically, I try to start a new report, choose ODBC, visual foxpro database, then get prompted for the username and password. I'm doing this on my station just to test out the report and have tried my username and password with no success. Any suggestions?

What I thought was solved has instead evolved. While the access to the localized testing version of my database still doesn't require a log in, attempting to access the production database from my station does stop me at the log in prompt.
There is no username and password set up for the connection on my older install of Crystal. And I'm being prompted for the same thing when I tried opening it using OLE DB as suggested by Sastry above.
Any ideas oh great and powerful collective Oz? Toto? Anybody?
Edited by: Michael Cool on Oct 23, 2008 10:50 AM

Username and Password Prompt Blocked Internet Explorer

I'm not sure that's IE behavior. I've never seen nor read about it before.

Hi All and thanks for your help!
I've wasted hours trying to find which of my (many many group policies) might be causing the IE to block the username / password prompt on this website.
What I've tried :
1. testing GPOs one by one on a VM to check which one is causing this
2. adding the site to trusted, local internet and what not
3. disabling credentials pass-through in IE
Can anyone please tell me which registry setting controls this behavior ?
This topic first appeared in the Spiceworks Community

Code for filling username and password prompted by other application

Hallo friends...
I am bit new to java..
I need to start few softwares like CAD applications thru java. Few applications prompt user name & password. Is it possible to get the prompt window and automaticall fillin the username, password and then activate the OK button. Appreciate any hints / sample codes...
Thanks and Regards
Arun

that would depend on the application.
Screen scraping APIs may exist that can help you with this, but that's an ugly and errorprone way to do things.
Better contact the company that created the application and see what kind of APIs they have to control the thing remotely.
I know that's possible with Autocad (though I don't know if it's possible directly from Java), I'd be surprised if their major competitors don't offer similar capabilities.

SharePoint 2010 Word, Excel Office Docs keep prompting for Username and Password

Users access SharePoint externally. They have the URL in their IE Intranet zone. They can login and browse OK but when they click a Word, Excel or Office document they get prompted for Windows Username and Password. This works but is never saved, so every
time they try to open a Word Document they get a blank Windows Username and Password prompt.
I have tried every suggestion I can find but nothing works

Hi BayTree,
Thanks for the sharing and have a nice day.
Regards,
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected] .
Rebecca Tu
TechNet Community Support

GetURL needs to incorporate username and password!!!!

Hi,
I need a Java program to go to a URL and then save the web page in a text file. I have successfully done this by finding the GetURL method (see bottom of page). But I need to do it for a URL where a standard username and password prompt appears. I know I need to use the following piece of code somewhere in the GetURL program to bypass this authorisation:
HTTPConnection con = new HTTPConnection(this);
con.addBasicAuthorization("protected-space", "goofy", "woof");
The problem is that I am a complete Java novice and am desperately trying to finish a project, therefore I just don�t have the time to learn the language.
Can someone PLEASEEEEEEE tell me how I can incorporate the above code into the following GetURL program (which I know works for URL�s without the authorisation needed):
[by the way, the URL is in the program below and the username = Bazza99 and the password = upge5w7u]
import java.io.*;
import java.net.*;
* This simple program uses the URL class and its openStream() method to
* download the contents of a URL and copy them to a file or to the console.
public class GetURL {
public static void main(String[] args) {
InputStream in = null;
OutputStream out = null;
try {
// Check the arguments
if ((args.length != 1) && (args.length != 2))
throw new IllegalArgumentException("Wrong number of arguments");
// Set up the streams
URL url = new URL("http://www.advfn.com/cmn/fun/advfnFun.php?epic=BAA"); // Create the URL
in = url.openStream(); // Open a stream to it
if (args.length == 2) // Get an appropriate output stream
out = new FileOutputStream("badata.txt");
else out = System.out;
// Now copy bytes from the URL to the output stream
byte[] buffer = new byte[4096];
int bytes_read;
while((bytes_read = in.read(buffer)) != -1)
out.write(buffer, 0, bytes_read);
// On exceptions, print error message and usage message.
catch (Exception e) {
System.err.println(e);
System.err.println("Usage: java GetURL <URL> [<filename>]");
finally { // Always close the streams, no matter what.
try { in.close(); out.close(); } catch (Exception e) {}

Hi,
I wasn't sure how to incorporate your code into the GetURL program (afriad I am a java novice). I tried to run the code at the bottom of the page but it came back with the following error:
java.io.FileNotFoundException: http://www.advfn.com/cmn/fun/advfnFun.php?epic=BAA
Usage: java GetURL <URL> [<filename>]
code run:
import java.io.*;
import java.net.*;
* This simple program uses the URL class and its openStream() method to
* download the contents of a URL and copy them to a file or to the console.
public class GetURL {
public static void main(String[] args) {
InputStream in = null;
OutputStream out = null;
try {
// Check the arguments
if ((args.length != 1) && (args.length != 2))
throw new IllegalArgumentException("Wrong number of arguments");
// Set up the streams
URL url = new
URL("http://www.advfn.com/cmn/fun/advfnFun.php?epic=BAA"); // Create the URL
URLConnection conn = url.openConnection();
conn.setRequestProperty("Authorization", "Basic " + new
sun.misc.BASE64Encoder().encode("(Bazza99):(upge5w7u)".getBytes()));
in = conn.getInputStream();
if (args.length == 2) // Get an appropriate output stream
out = new FileOutputStream("baadata.txt");
else out = System.out;
// Now copy bytes from the URL to the output stream
byte[] buffer = new byte[4096];
int bytes_read;
while((bytes_read = in.read(buffer)) != -1)
out.write(buffer, 0, bytes_read);
// On exceptions, print error message and usage message.
catch (Exception e) {
System.err.println(e);
System.err.println("Usage: java GetURL <URL> [<filename>]");
finally { // Always close the streams, no matter what.
try { in.close(); out.close(); } catch (Exception e) {}

Network printers prompting for username and password

With the more recent OS upgrades I can now see my printers on my home network. Very cool. When I select one to print, I am prompted for a username and password. I have tried my network keys with no luck and cannot set a password on my printers. Is this unusual and if not, what should I be using?

You can try to take a fiddler trace in both scenarios and then search for the differences. This issue seems to be related with your network configuration that with the product itself.
In fiddler you can identify what verb is requesting for credentials and from there you can go further with troubleshooting.
You can check also this article
http://blogs.technet.com/b/office_integration__sharepoint/archive/2014/02/24/users-are-prompted-for-username-and-password-when-opening-an-office-file-from-a-web-server.aspx
MCITP|MCTS SharePoint| SharePoint Performance blog

On my 1st visit to a certain website, Firefox _very briefly_ asked whether to remember my username and password. I was too slow: the dialog bar disappeared and now, I cannot find where to enter that logon info for my daily returns to that site.

On only the very first visit to a website, Firefox _very briefly_ shows a "Do you want Firefox to remember this password?" dialog bar at top right of screen.
The first time that I used Firefox to access this particular, and very often visited site, I missed that dialog bar. It disappeared before I had a chance to mark any one of the three boxes and now, I must enter my log-in information anew at every log-on to that site.
There _must_ be a way to get Firefox to give me a second chance for entering this info, but I cannot find how.
Can someone please help?

After first closing the site's browser window, I cleared the cookies with no problem.
Next, I opened up the page that is causing my problem. The Microsoft Security window opened up as it should and it was blank.
The option of whether I was using a public or a private
computer was blinking on 'public' as it should and I changed that to 'private'.
The lines for 'Domain/Username' and 'Password" were blank, as they should be at this time.
I entered whatever I had to on these two lines, then clicked on "log In". At no time, however, did the Firefox toolbar at top of screen (picture file attached) appear and ask whether to remember that password. Yes, the page now opened - and we are back to Square One.
I am aware that when entering the URL in the address box, a dropdown box opens and contains quite a few URLs identical to the one I am entering just now, or at least connected to pages of the same site.
I am wondering whether that is what's messing me up? But how can I clear these entries of "websites visited in the past from Firefox's memory?
In case you would want to see exactly what it is I am talking about, you might go to https://support.ataretail.com

Users prompted for username and password after sharing removed from servers

Hello Community
    On Sharepoint 2010 Server using the UI in a 2 server farm with an intranet running on it and everything functions as it should. However it was noticed that from a users computer when in "Windows Explorer" if "Network"
is clicked the 2 servers are visible.
    The problem is that when the server are clicked on in Windows Explorer the files and folders on the hard drive of the servers are visible too.
    Subsequently I logged onto the server and when into "Properties' - "Sharing" and
unchecked the checkbox to "Share this folder".
    That solved the problem of the users being able to see and access the files
and folders on servers hard drives but now when the users log onto the intranet
they are prompted for a user name and password and even when they provide the user
name and password and the page is returned the prompt appears on the screen again(then they cancel out).
    What can be done about the user being prompted for username and password without sharing the drives on the servers ?
    Thank you
    Shabeaut

What exactly was shared out from the SharePoint server's file system? There are certain things that are shared by default.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

MS OUTLOOK PROMPT USERNAME AND PASSWORD REPEATLY WHEN WE LOGIN WINDOWS 8.1 WITH DOMAIN USER ON WINDOWS SERVER 2008R2

Dear Sir
My name is sandeep and i have a technical issue with MS office Outlook 2007 standard. the problem is i have windows 8.1 pro. and i have installed office 2007 standard on it. i have also joined this windows 8.1 to Domain Network(I have
domain Server on Windows server 2008R2) now problem is that when i login with domain user on this windows 8.1 and configure my MS outlook the it prompts user name and password again and again showing error "
Server responded -ERR access denied" and if i login windows 8.1 with its local administrator user the all runs file then ms outlook does
not prompt for username and password. this problem with only windows 8.1 domain login.. please suggest what to do and how this problem will be resolved..
Regards
sandeep Kumar

Hi,
Did it work correctly before when logging in with domain user account? If so, please try opening Control Panel > Credential Manager and remove the cached credential entry of the Outlook account, and then restart Outlook to test the issue again.
See:
https://support.microsoft.com/en-us/kb/2762344/en-us
Please also try logging into your email account from webmail access to see if there is any error.
Please let me know the result.
Regards,
Steve Fan
TechNet Community Support
It's recommended to download and install
Configuration Analyzer Tool (OffCAT), which is developed by Microsoft Support teams. Once the tool is installed, you can run it at any time to scan for hundreds of known issues in Office
programs.
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

Using Proxy on Lion - Continually being prompted for username and password

I am looking at Lion in my studio setup at the moment and so far only a few things I am not happy with. One of these though is really annoying and in it's present form would stop me from using it in production.
I have setup the proxies in the Network tab as they are in 10.6.8 but I continually get prompted for my username and password. Not an issue if it was my machine and I would be using at home for instance but in the studio no. It could be anyone using the machine and some people do not have proxy access.
I do not want to store in the general network settings as a default username for the machine as there is not one. Is there a way of seeing what is trying to look out to the internet? Would little Snitch help here?
Dialogue box I would like to get rid of it the red ! one below, as the only way to avoid this is by typing in a user name and password into the Network Preferences settings
I do not mind this one below as it is usually only appears when you require it and not randomly during the day.

I have installed Little Snitch and left running for the day.
So far helpd is the main culprit, so is there a way of disabling this other than using little snitch?
If only Little Snitch, has anyone deployed to around 25 Macs so that the user doesn't really notice?

[Maybe solved] Repeated prompts for username and password on HTTP(S)

I'm new to IOS but I'm taking ICND 1 and ICND 2 to catch up. I've gone as far as configuring a 3560 switch from "scratch" in a test environment, and am in part one of ICND 2.
Setting this switch up for HTTP administration, I've been prompted repeatedly for my username and password both when using a browser directly and when using Cisco Network Assistant (currently 5.5). This is different from the production switches I'm working with, that will prompt me once only and let me work. At first I suspected this was because I'm trying to use SSL and an in-house certitficate authority to sign the switch's certificate, but this is happening in plain HTTP as well. If I'm persistent enough, I eventually get the pages or configuration screens I want.
The difference between the production 3560s and my testing one, is the test one uses IOS 12.2(53), the current version. The production ones use 12.2(25)SEE3 through 12.2(35)SE5 and probably everything in between. I'm also experimenting with the releases that includes the web-based device manager on my test switch, but the behaviour is similar whether the image has the web-based manager or not.

In an update to this problem, I've reverted the switch I've been testing back to 12.2(35)SE5, which is what the majority of my production 3560s use. It appears to behave in the same fashion: Repeatedly asking for credentials over HTTP(S).
While my non-production switch has a local user database set up, my production switches use two ACS servers. The relevant bits of the running config are:
aaa new-model
aaa group server tacacs+ mcbhtacacs
server 10.1.2.221
server 10.1.2.222
aaa group server radius mcbhradius
server 10.1.2.221 auth-port 1645 acct-port 1646
server 10.1.2.222 auth-port 1645 acct-port 1646
aaa authentication login default group mcbhtacacs local
aaa authentication login LOCALAUTH local
aaa authorization exec default group mcbhtacacs
aaa accounting send stop-record authentication failure
aaa accounting exec default start-stop group mcbhtacacs
aaa accounting commands 1 default start-stop group mcbhtacacs
aaa accounting commands 15 default start-stop group mcbhtacacs
aaa accounting system default start-stop group mcbhtacacs
aaa session-id common
tacacs-server host 10.1.2.221 key 7 [censored]
tacacs-server host 10.1.2.222 key 7 [censored]
tacacs-server directed-request
radius-server host 10.1.2.221 auth-port 1645 acct-port 1646 key 7 [censored]
radius-server host 10.1.2.222 auth-port 1645 acct-port 1646 key 7 [censored]
radius-server source-ports 1645-1646
Another switch that does work without repeated prompting has these relevant bits:
aaa new-model
aaa group server tacacs+ mcbhtacacs
server 10.1.2.221
server 10.1.2.222
aaa group server radius mcbhradius
server 10.1.2.221 auth-port 1645 acct-port 1646
server 10.1.2.222 auth-port 1645 acct-port 1646
aaa authentication login default group mcbhtacacs local
aaa authentication login LOCALAUTH local
aaa authorization exec default group mcbhtacacs local
aaa accounting send stop-record authentication failure
aaa accounting exec default start-stop group mcbhtacacs
aaa accounting commands 1 default start-stop group mcbhtacacs
aaa accounting commands 15 default start-stop group mcbhtacacs
aaa accounting system default start-stop group mcbhtacacs
aaa session-id common
tacacs-server host 10.1.2.221 key 7 [censored]
tacacs-server host 10.1.2.222 key 7 [censored[
tacacs-server directed-request
radius-server host 10.1.2.221 auth-port 1645 acct-port 1646 key 7 [censored]
radius-server host 10.1.2.222 auth-port 1645 acct-port 1646 key 7 [censored]
radius-server source-ports 1645-1646
10.1.2.221 and 10.1.2.222 are the ACS servers, running ACS 4.1 and are linked to a pair of Active Directory domain controllers.
Aside from host names, these two switches appear to have an identical AAA configuration. So why would the first switch repeatedly ask for credentials over HTTP when the second switch with the same software does not?

Can anyone help me? I cannot sign in my iChat. I've been using same username and password. But, I cannot sign in my iChat.

Can anyone help me? I cannot sign in my iChat. I've been using iChat with same username and password with my Gmail account. Now, I cannot sign in my iChat, but I can still sign in my Gmail with the same username and password. Can someone advise me what to do?

Hi,
I am beginning to see more threads that suggest that something may be up with the Google Servers.
In iChat Menu > Preferences > Accounts > Server settings tab try changing the port to 443 (With SSL still selected)
It may be that in a couple of days the Google Servers will get back in sync.
10:25 PM Wednesday; June 29, 2011
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb( 10.6.8)
 Mac OS X (10.6.7),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

Cannot see AAA banner, username and password prompts on IOS switch

Similar Messages

Maybe you are looking for