ACS authorization fail

[anandkumar.cisco]

dear all,

When i am accessing one of my aaa client ,
which is getting authenticated from ACS Server 4.2

it is showinng as Authorization failure , what could be the issue

configuration on device &server side is proper

[Panos Kampanakis]

Check if the client device is doing aaa authorization or command authorization and if the user logging in does not have the privileges.

I hope it helps.

PK

[kush.sri86]

Hi,

Could you provide the aaa config part from the device? Along with this, please mention the protocol which you are using (Radius/Tacacs)?

If you are using Tacacs, make sure under the group setup, you have checked "shell" and under the privilege level, entered the privilege level which the user should be assigned.

Hope this helps

Kush

[Kent Heide]

When you are saying you are accessing one of your AAA clients I am assuming you are trying to login to a device via either TACACS+ or radius. Authorization fail most likely means that the user you are trying to log in with failed to start the exec shell. Check your AAA logs for clarification as to why.