Privilege command: the show run does not show the running-config

Hi,
Whenever I login using "user1" I can successfully authenticate however when I ussue the show run for user1. The only thing that I can see are the following:
R4#show run
Building configuration...
Current configuration : 13 bytes
end
R4#
I have put the command on the router as follows:
~~~~~~~~~~~~~~~~~~~~~
aaa new-model
aaa authentication login ACS group tacacs+ local
aaa authentication login NO-AUTH none
aaa authorization exec ACS group tacacs+ local
aaa authorization exec NO-AUTH none
aaa authorization commands 1 ACS-1 group tacacs+ local
aaa authorization commands 1 NO-AUTH none
aaa authorization commands 10 ACS-10 group tacacs+ local
aaa authorization commands 10 NO-AUTH none
aaa authorization commands 15 ACS-15 group tacacs+ local
aaa authorization commands 15 NO-AUTH none
username user2 privilege 15 password xxx
username user1 privilege 10 password xxx
tacacs-server host 10.50.31.6
tacacs-server directed-request
tacacs-server key xxx
privilege exec level 15 show
privilege exec level 10 show running-config
line con 0
exec-timeout 1000 0
authorization commands 1 NO-AUTH
authorization commands 10 NO-AUTH
authorization commands 15 NO-AUTH
authorization exec NO-AUTH
login authentication NO-AUTH
line aux 0
authorization commands 1 NO-AUTH
authorization commands 10 NO-AUTH
authorization commands 15 NO-AUTH
authorization exec NO-AUTH
login authentication NO-AUTH
line vty 0 4
authorization commands 1 ACS-1
authorization commands 10 ACS-10
authorization commands 15 ACS-15
authorization exec ACS
login authentication ACS
end
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Regards,
Lorenz

Lorenz
I believe that the answer is that in implementing privilege levels Cisco designed the show run command so that if you do not have capability to change something that it will not show up in the show run. I believe the logic is that from a security standpoint if you are not authorized to change it you should not be able to see it in the config. So in your case if user1 is not able to change anything then they will not be able to see anything in show run.
HTH
Rick

Similar Messages

Command click in Yosemite does not open a new window

Command click in Yosemite does not open a new window. ??

Is the checkbox in this screenshot checked for your Finder preferences. If so uncheck it and try again.

I can no longer burn a disc. The command to do so does not appear in my Files menu. All my recordings are 100% legal. I have installed a new version (it still looks the same), but that hasn't helped. I have done so before.

All my music is from legal sources (albums owned by me, others from iTunes), but the Burn Disc command does not appear in the File menu, and nothing I do helps. I downloaded a new version of iTunes, but it still loks the same and may just be the same. But the problem started long before I did that.

Meqmac wrote:
This did nothing. Where do I click on the playlist? As far as I have experienced, the playlist is a list of songs with ticks against them on the left. I can use the control key, but where do I point my cursor to select the playlist?
You don't even need to show the general Sidebar as suggested by others.
Select Playlists in the top buttons:
then control-click on the playlist you wish to burn in left column, e.g.:
Regards.

Command-clicking a layer does not select it in the Layer panel

In earler version of PS, command clicking a layer in the artboard would select the layer in the layer pallet so it could be manipulated. This does not seem to be the case in CS6 (I'm getting the highest level group selected)

Command key brings up the move tool. And you have different settings for auto-select in CS6 than in your previous version.
Go check the settings for the move tool.

ORA-01031: insufficient privileges and shared memory realm does not exist

Hi all,
I came to a dead end to start oracle 10.2 database. I have searched on google and this forum, none of these solutions work for me. PS, I have installed 11g on my machine too.
I have set up ORACLE_SID,ORACLE_HOME to 10.2 database based on the tnsnames.ora.
follow is error message：
sqlplus sys as sysdba
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Apr 3 02:09:54 2013
Copyright (c) 1982, 2005, Oracle. All rights reserved.
Enter password:
ERROR:
ORA-01031: insufficient privileges
sqlplus /nolog
SQL*Plus: Release 10.2.0.1.0 - Production on Wed Apr 3 02:10:55 2013
Copyright (c) 1982, 2005, Oracle. All rights reserved.
SQL> conn / as sysdba
ERROR:
ORA-01031: insufficient privileges
SQL> conn scott/tiger
ERROR:
ORA-01034: ORACLE not available
ORA-27101: shared memory realm does not exist
Linux-x86_64 Error: 2: No such file or directory
First I thought the instance has been start yet, but since I can't login with sysdba. I don't know what other options.
For 10.2, the tnsnames.ora
ORA102 =
+(DESCRIPTION =+
+(ADDRESS = (PROTOCOL = TCP)(HOST =XXX)(PORT = 1523))+
+(CONNECT_DATA =+
+(SERVER = DEDICATED)+
+(SERVICE_NAME = ora102)+
+)+
+)+
LISTENER_ORA102 =
+(ADDRESS = (PROTOCOL = TCP)(HOST =XXX)(PORT = 1523))+
EXTPROC_CONNECTION_DATA =
+(DESCRIPTION =+
+(ADDRESS_LIST =+
+(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC2))+
+)+
+(CONNECT_DATA =+
+(SID = PLSExtProc)+
+(PRESENTATION = RO)+
+)+
+)+
listener.ora:
SID_LIST_LISTENER =
(SID_LIST =
(SID_DESC =
(SID_NAME = PLSExtProc)
(ORACLE_HOME = /data/oracle/ora102)
(PROGRAM = extproc)
LISTENER =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC2))
(ADDRESS = (PROTOCOL = TCP)(HOST =XXXXX)(PORT = 1523))
EXTPROC_CONNECTION_DATA =
(DESCRIPTION =
(ADDRESS_LIST =
(ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC))
(CONNECT_DATA =
(SID = PLSExtProc)
(PRESENTATION = RO)
)

try do this steps on server side:
1) sqlplus sys as sysdba
2) select open_mode from v$database;
show result 2 step

Executing Command within Pkg.procedure does not work-but command line does

[Version 10.2.0.2
[Scenario] Let's say my Username is Jack. My goal is to grant two roles to a user. From the command line, I have no problem.
PROMPT-> Grant role1,role2 to TESTUSER
However, when I create a package and procedure (owned by Jack); I receive an ORA-01919 error saying that role2 does not exist.
There is no question the role exists and I am able to grant it to the TESTUSER on the command line as Jack.
Any ideas what is going on?

I can't post it as the database is on another system. However, I found my the fix. My Jack user had grant any role; therefore, I thought it should work both from command line and package.proc; however I granted role2 to Jack with admin privs and it works now both from the command line and the pkg.proc.
Thanks for the response.

Clock Timezone command missing in running-config

Dear All,
I have a Cisco 2911 router and recently upgraded with IOS : c2900-universalk9-mz.SPA.153-3.M4.bin. The issue is now when every time when I apply "clock timezone xx 8" cli in my router, the command does not reflect. So that my router clock always stays at UTC 0 timezone.
Other CLI is working without problem, only this clock timezone CLI giving weird trouble. and because of this, all the logs timestamps are follow UTC timezone, which will give me problem when doing tracing.
Is there any alternative way to re-activate this command, instead of go back to old IOS.
Thank you.
Regards,
Reeyon

hi, it is not the timestamp problem. the problem is that whenever I input the command "clock timezone xx 8", is doesn't show in my running-config.
Thank you.

FlexConfig - How to execute "TFTP" command to save running config via Flex

Hi
I want to save the running config from all our firewall via flexconfig.
The problem is the carriage return after the command "copy running tftp://ip-address"
I have to confirm the tftp server and the file manually
I have no idea - how to do this via flexconfig -
I found a flexconfig script to load a image to the asa called : ASA_copy_image
Any Idea how to modify this script ?
THX for help

You can try Flexconfig with
copy /noconfirm running tftp://ip-address
I hope it helps.
PK

Shrink option in -toPostScript command line options still does not work

shrink and expand options in -toPostScript command line options do not work, it was posted that this issue was fixed in V 8.1.2, but apparently, it is still not working, when printing .out files, the body of the output is pushed to the left and up by about half an inch.
What was it that was supposed to be fixed? Can someone please assist?

Please forgive my ignorance, but it's called Adobe Reader 8.1.2. How do I tell that it's for Unix?
We are using Linux, and just to explain a little more like I should have in the first place, I'm trying to run reports from an Oracle environment which is saving the .out file on the Linux box, then this is sent to a Windows printer for printing...

Command-clicking layer name does not load layer as a selection (Photoshop CS2)

Q: Why does Cmd-clicking a layer name not load the layer as a selection in Photoshop CS2?
A: You must Cmd-click the layer thumbnail, not the layer name, to load the the layer as a selection.
In Photoshop CS2 Cmd-clicking the layer name in the Layers Palette selects the layer. To select multiple layers use the following keystrokes:
1. Multiple contiguous layers = Shift+click layer name
2. Multiple non-contiguous layers = Cmd+click layer name
See also Adobe Knowledgebase
Document 329005

It works for me and doesn't seem to care what tool i have selected or anything like that to make a difference. Maybe you should reset your preferences as it may be a glitch.
Hold Ctrl+Alt+Shift as soon as you tell photoshop to startup, and it will ask you if you want to delete the preferences, just click yes. (If you have a custom UI that you want to save, goto Windows>Workspace>Save Workspace, and then just reload it after resetting prefs.)

I have Acrobat XI and am trying to add pages to a pdf. Tutorials instruct to use Tools, Options or Page Thumbnail to get to a drop down command of Insert Page, does not appear as my choices.

I have Acrobat XI and am trying to add pages to a pdf. Tutorials instruct me to use Tools, Options or Page Thumbnail to get to a drop down command of Insert Page, but I have few choices in any of those places and Insert Page is not any of them.

What do you see, then?
On Thu, Feb 26, 2015 at 4:14 PM, lindab5415 <[email protected]>

Print.print_printer does not appear in about:config

Everytime I try to print from Firefox the printer hangs up. I read your HELP on resetting the print.print_printer in about:config. When I went to about:config there was no such entry. How do I add an entry and set it to the default settings?

I also find there is no entry in the list for print.print_printer and that there are probably 60 configuration entries for my printer. When I try to print from FireFox the printer acts like it is receiving data, and then feeds a sheet of paper, but prints nothing at all. Printing of the same output from IE-8 works fine.
My problem with the printer showed up about 2 days ago. To my knowledge, nobody changed any printer settings.

Access Connections does not accept Windows Wireless Config

Hi All,
We are rolling out RADIUS/802.1x wireless lan in our enterprise. The wireless settings are deplyed via AD grouo policy - no problems there.
I have an issue when i configure my access connections (ver 5.21) on my T61 machine. I configure AC to use Windows wireless security settings whcih are picked up correctly. The issues occur when i switch from this profile to another profile for exampls and vice versa. AC seems to think that i need to configure my wlan security settings each time i switch to that profile and wont connect. I get an error message:
The SSID 'WM2009' selected for this profile must be configured in windows. Click OK to configure the wireless settings in Windows'.
I know that the wireless settings are fine, as i can connect with the window wireless client fine - its just AC that has the issue.
Any ideas appreciated!

Domain policy wireless profiles are not compatible with Access Connections.
The problem stems that Domain profiles are stored in a different part of the registry than a locally created WZC profile. Since these are part of the domain policy, they cannot be altered locally. Microsoft wouldn't provide Lenovothe encryption used (for obvious security reasons), so the domain policy based profiles can't be manipulated by Access Connections.
But we do provide an ADM template that can be used to do much the same things.
http://www-307.ibm.com/pc/support/site.wss/document.do?lndocid=ACON-DEPLOY

Download list in FF does not show source of download or deleted downloads

I can see a list of downloaded files but no information on the source for the download (from where it was downloaded). I can right click and copy the link, but cant see it unless I actually paste it somehwere.
When I click on the file in the list - nothing happens. That is because the file has been deleted but you cant see this information either. What is that download list good for ?

Manager Tweak is OK but has one big drawback: it is very easy to delete the list and there is no undo command. So it does not solve my problem.
Same problem with Chrome

I need to use the "apple key" which is, I presume the command key, but I do not have an apple keyboard; is there a key on a logitech keyboard which will serve the purpose?

I need to use the "Apple key" which I presume is the command key; my computer does not have an apple keyboard; is there a key on a logitech keyboard which will serve the same purpose?

The "Windows flag" key on PC keyaboard in Commans, "Alt" is option.
Go to Logitech website to see if they have Mac compatibility software (Logictech Control Center) to make mappings a bit more complex).

Privilege command: the show run does not show the running-config

Similar Messages

Maybe you are looking for