topic Re: Domain Authentication for console in Network Access Control

Domain Authentication for console

CiscogeekIND — Sun, 10 Mar 2019 23:52:34 GMT

we have software basec cisco ACS 4.1 and we have integrated with ADS server, here the problem is for telnet ssh domain credentials are working but where as for console it is not working it is not even taking the local login credetilas (If local logins username is same as Domain username then we are able to login to switch using local password).

I observed below log is creating when i try to login through console. (failed attempts log)

"Windows domain controller not found"

Your comments & suggestions will be appreciated.

Re: Domain Authentication for console

Erick Delgado — Sat, 09 Jan 2010 02:24:23 GMT

Hi,

Could you please attach the lines configuration and the aaa configuration?

I would like to check your configuration before making any suggestion

Regards,

Re: Domain Authentication for console

Jatin Katyal — Sun, 10 Jan 2010 08:28:16 GMT

Did you try logging to console using the same username/password the one you tried for telnet/ssh?

Also help me with the following outputs:

sh run | in user

sh run | in aaa

debug aaa common 255

debug radius/tacacs

Latest hits from the ACS > failed attempts (Just wanted to double check that we are getting the same hit).

As you said if the local user name is created same as domain user name then it works. This indicates that even you try with local username password, the request is going to radius server proxied to external DB.

HTH

Regards,

Plz rate helpful posts-

Re: Domain Authentication for console

CiscogeekIND — Mon, 11 Jan 2010 10:15:57 GMT

Hi Erik/JK

I got the solution, there was Network access restrictions. resloved the same

Thanks _ Suresh

Re: Domain Authentication for console

CiscogeekIND — Mon, 11 Jan 2010 10:16:54 GMT

provided the requested information.

Thanks - Suresh