topic Re: ASA local AAA database in Network Security https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234379#M348486 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>Provide</P><P></P><P>debug aaa authentication</P><P>debug aaa authorization</P><P></P><P>Regards,</P><P></P><P></P><P><STRONG style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">Hey remember to rate all of the helpful posts, as important as a thanks (keep us motivated)</STRONG></P></BODY></HTML> Fri, 07 Jun 2013 19:06:18 GMT Julio Carvajal 2013-06-07T19:06:18Z ASA local AAA database https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234376#M348483 <P>I have several users in a local aaa setup.&nbsp; Logging in works, but i have to enter ENABLE to get into enable mode, and then just reenter my login password.</P><P></P><P>Using the local database is there a way to log right into Enable mode from the command line?</P> Tue, 12 Mar 2019 01:54:25 GMT https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234376#M348483 WStoffel1 2019-03-12T01:54:25Z ASA local AAA database https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234377#M348484 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>For this you will need to use exec authorization and make sure the user has an Execution privilege and enable privilege of 15 so the ASA sees the user as a Super User and access to enable mode (Priv 15) will be granted,</P><P></P><P>Julio Carvajal</P><P></P><P><STRONG>Hey remember to rate all of the helpful posts, as important as a thanks (keep us motivated)</STRONG></P></BODY></HTML> Fri, 07 Jun 2013 16:49:30 GMT https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234377#M348484 Julio Carvajal 2013-06-07T16:49:30Z Re: ASA local AAA database https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234378#M348485 <HTML><HEAD></HEAD><BODY><P><SPAN style="font-size: 10pt;">FW# sh run aaa</SPAN></P><P>aaa authentication ssh console LOCAL</P><P>aaa authentication enable console LOCAL</P><P>aaa local authentication attempts max-fail 5</P><P>aaa authorization exec authentication-server</P><P></P><P>FW# sh run username</P><P>username wstoffel password W4Ii8sjkdRzfAci encrypted privilege 15</P><P>username wstoffel attributes</P><P> service-type admin</P><P></P><P>Which part am i missing then?&nbsp; Service type admin isn't even really needed as it's the default.</P><P></P><P>Thanks a bunch!</P></BODY></HTML> Fri, 07 Jun 2013 17:30:13 GMT https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234378#M348485 WStoffel1 2013-06-07T17:30:13Z Re: ASA local AAA database https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234379#M348486 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P>Provide</P><P></P><P>debug aaa authentication</P><P>debug aaa authorization</P><P></P><P>Regards,</P><P></P><P></P><P><STRONG style="background-color: #f7fafb; border-collapse: collapse; font-size: 12px; list-style: none; font-family: Arial, verdana, sans-serif;">Hey remember to rate all of the helpful posts, as important as a thanks (keep us motivated)</STRONG></P></BODY></HTML> Fri, 07 Jun 2013 19:06:18 GMT https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234379#M348486 Julio Carvajal 2013-06-07T19:06:18Z Re: ASA local AAA database https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234380#M348487 <HTML><HEAD></HEAD><BODY><P>Logged into the command line and in enable mode i enter those commands.</P><P></P><P>Then on another console I log in with the same creds, and also with another account, and there's no debug output on that original console screen.</P><P></P><P>Apparently I'm missing something <SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/happy.gif"></SPAN></P></BODY></HTML> Fri, 07 Jun 2013 20:48:36 GMT https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234380#M348487 WStoffel1 2013-06-07T20:48:36Z Re: ASA local AAA database https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234381#M348488 <HTML><HEAD></HEAD><BODY><P>add</P><P></P><P>terminal monitor</P><P></P><P></P><P>do it again</P><P></P><P>regards</P></BODY></HTML> Fri, 07 Jun 2013 21:29:14 GMT https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234381#M348488 Julio Carvajal 2013-06-07T21:29:14Z Re: ASA local AAA database https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234382#M348489 <HTML><HEAD></HEAD><BODY><P>Unfortunately, this can not be done even with local database, this is by design.</P><P></P><P>This may provide you more info:</P><P><A class="jive-link-external-small" href="https://community.cisco.com/thread/2201512">https://supportforums.cisco.com/thread/2201512#3888667</A></P><P></P><P></P><P>Jatin Katyal <BR /> - Do rate helpful posts -</P></BODY></HTML> Sun, 09 Jun 2013 18:57:54 GMT https://community.cisco.com/t5/network-security/asa-local-aaa-database/m-p/2234382#M348489 Jatin Katyal 2013-06-09T18:57:54Z