topic Re: TPLUS: Received authen response status PASS (2) in Network Access Control

TPLUS: Received authen response status PASS (2)

patrick.hurley — Mon, 11 Mar 2019 00:09:13 GMT

I am getting this response from my debug but am getting % authorization failed when trying to SSH. Why?

Re: TPLUS: Received authen response status PASS (2)

Jennifer Halim — Sat, 22 May 2010 02:04:47 GMT

Can you share your config?

Do you need authorization? If not, remove the "aaa authorization" command and test if authentication works.

Re: TPLUS: Received authen response status PASS (2)

Jatin Katyal — Sat, 22 May 2010 09:12:31 GMT

Looks like you have " aaa authorization exec default group tacacs local" in you configuration. This means that runs authorization to determine if the user is allowed to run an EXEC shell.

In order to fix this user should have privelege 15 on the tacacs server. If you are running Cisco ACS then I would suggest go to user/group setup >> tacacs shell (exec) >> Privilege 15 >> suubmit

This will fix the issue.

Regds

Do rate helpful posts

Re: TPLUS: Received authen response status PASS (2)

patrick.hurley — Sun, 23 May 2010 03:49:56 GMT

I am using the free windows Cisco software which is hard to figure out. Here is what I have in the tac.cfg file. I don't have something correct. I get the message at the bottom when I run the tac_plus.exe -C tac.cfg command.

# CONFIGURE ENCYPTION KEY
key = VerYs3cr3taqskey
# Configure User
user = pat {
default service = permit
login = cleartext "pat"
service = exec {
priv-lvl = 15
}
}
# End file

Warning, not running as uid 0
Tac_plus is usually run as root
for user on line 4 keyword