cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
315
Views
0
Helpful
0
Replies

Cisco ISE 3.0 issues logging into new secondary CLI admin account

LaurenCoulcher
Level 1
Level 1

Hi

I'm facing a strange issue with the creation of a secondary admin user in ISE CLI.

The main admin account is working fine, no issues with that but when I create a new admin user using the syntax-

username <USERNAME> password plain <PASSWORD> role admin

or

username <USERNAME> password hash <PASSWORD> role admin

I find each option creates a user but I'm unable to login to the CLI with either of them.

I've ensured any existing CLI sessions are logged out, started a new session in Putty but get 'access denied' when trying to login with the new admin user.

I'm running ISE 3.0 patch 6, I've checked for known bugs and couldn't see anything.

[EDIT]

I've noticed that this issue is isolated to only the Primary Admin node, all other nodes are unaffected by the issue.

Upon checking the output of 'show users status' on the affected node, I notice that whenever I create a new admin account it is locked out before any login has been attempted.

 

Any help appreciated, thanks in advance.

0 Replies 0