topic Re: SDM through aaa authentication using rsa secureid in Network Access Control

SDM through aaa authentication using rsa secureid

dkrijgsman — Sun, 10 Mar 2019 21:20:49 GMT

Hi,

I'm currently testing with Cisco's SDM interface combined with Cisco ACS authentication using rsa secureid. Tests without the rsa securid, just a username/pass combination all works well, however combining the securid, sdm keeps popping back up. CLI access using acs with the secureid works fine.

Attached: debug output from a sdm https securid session

http authentication keeps getting a failure

Any suggestions?

Re: SDM through aaa authentication using rsa secureid

vkapoor5 — Tue, 25 Oct 2005 18:52:12 GMT

http authentication will need a user at privilege level 15. This is also seen in your output

"HTTP: Authentication failed for level 15"

Give the user the privilege level of 15 and see if it works.

Re: SDM through aaa authentication using rsa secureid

dkrijgsman — Thu, 27 Oct 2005 06:18:57 GMT

Hi vkapoor5,

I've already done that. When i'm not using the RSA secureid just plain login / passw everything works fine. Both methods, using priv15 or passing a cli-view work except when i'm using a secureid.

I think it has something to do with caching of the token en passing it multiple times in the SDM login procedure although this obviously works only one time.