DNA Local Accounts No Longer Working After MAGLEV Password Reset

AntDPre — Fri, 01 Sep 2023 14:44:37 GMT

Hello Community,

I had to mount the Ubuntu Desktop image via the CIMC vKVM to do a Maglev password reset. This is all I did. Nothing else. After resetting the Maglev password and warm restarting the system I am no longer able to log into the DNA Center Web UI with any of my local accounts. Everything was working fine previously. I have cleared my browser cache, used a different browser, attempted to SSH into DNA via Maglev and Powershell using the credentials for my local accounts but nothing is working. I am getting the "Invalid Login Credentials" error when trying to log in via the Web UI or Maglev and "Permission denied. Please try again." when SSHing via Powershell. I know the credentials are correct.

sudo maglev-config certs info shows me that my certificates are valid.

magctl rbac external_auth_fallback display shows me "false" which tells me that it its not an issue with AAA services not falling back to local accounts for authentication.

I am at a loss. As I said, all I did was mount the Ubuntu Desktop image, change the Maglev password, and then warm reset the system.

Does anyone have any suggestions as to what may be causing this issue? I was just about to finish deploying the device for a production environment and now I am stuck.

Any help would be greatly appreciated.

Re: DNA Local Accounts No Longer Working After MAGLEV Password Reset

AntDPre — Sat, 02 Sep 2023 11:58:20 GMT

Okay so I still do not know what caused the issue but here is the solution:
using the Maglev shell, check to see if external authentication fallback is enabled:

magctl rbac external_auth_fallback display

{
"response": {
"enabled": false
}
}

If enabled = false , enable with:

magctl rbac external_auth_fallback enable

This allowed me to be able to log in via the Web UI.

topic DNA Local Accounts No Longer Working After MAGLEV Password Reset in Cisco Catalyst Center

DNA Local Accounts No Longer Working After MAGLEV Password Reset

Re: DNA Local Accounts No Longer Working After MAGLEV Password Reset