Hi folks,
I am working to setup 4.1.1 in a system-install mode. The installation completes successfully and throws some information out towards the end regarding PAM-based authentication (vs. Local Auth in pre-4.1 NSO versions).
Issues I’m running into:
Audit.log with PAM enabled
Initially, when I connected to the NSO CLI (ncs_cli –u admin), all I saw was just one command ‘exit’. Eventually, after a reboot, I was able to see the normal set of options I would expect to see. CLI is working as expected.
Is there any documentation that explains the optimum set of user / group configuration one must use to get NSO installed seamlessly ??
Thanks & Regards,
Nick Khemani
Solved! Go to Solution.
The main thing that helped me was the correctly assign Linux users to ‘ncsadmin’ and ‘ncsoper’ groups and leave PAM enabled. In terms of authentication, IF all methods are enabled, NSO will try (1) PAM (2) external auth and lastly (3) local-authenticaion mechanisms.