Re: Cisco 3650 tacacs+ with SSH works, not for http to use wirel

Erik Boss · ‎03-03-2014

Hi

Last week I installed a brand new Cisco 3650 switch and the wireless option.

Everything works fine.

I also configured tacacs+. Login through SSH works fine.

Now I want to manage the wireless part from the GUI bij entering https://ip-address/wireless

Local authentication with priv 15 works fine.

Now I configured tacacs. After entering username password I received a blank screen.

After debugging, I got a SSl failed.

Mar 4 07:35:53.675: eah: url=/wireless is for us with a secondary connection

Mar 4 07:35:53.675: eah: Secondary authentication required for realm priv_15_access

Mar 4 07:35:53.675: Tue, 04 Mar 2014 07:35:53 GMT <source address> /wireless auth_required

Protocol = HTTP/1.1 Method = GET

Mar 4 07:35:53.675:

Mar 4 07:35:53.799: %HTTPS: SSL read fail (-6992)

Mar 4 07:35:58.400: eah: url=/wireless is for us with a secondary connection

Mar 4 07:35:58.401: eah: Secondary authentication required for realm priv_15_access

Mar 4 07:35:58.401: HTTP AAA Login-Authentication List name: TACACS

Mar 4 07:35:58.401: TPLUS: Queuing AAA Authentication request 4673 for processing

Mar 4 07:35:58.401: TPLUS: processing authentication start request id 4673

Mar 4 07:35:58.401: TPLUS: Authentication start packet created for 4673(my username)

Mar 4 07:35:58.402: TPLUS: Using server <tacacs server IP>

Mar 4 07:35:58.407: TPLUS(00001241)/0/NB_WAIT/3AF752D4: Started 5 sec timeout

Mar 4 07:35:58.449: TPLUS(00001241)/0/NB_WAIT: socket event 2

Mar 4 07:35:58.450: TPLUS(00001241)/0/NB_WAIT: wrote entire 37 bytes request

Mar 4 07:35:58.450: TPLUS(00001241)/0/READ: socket event 1

Mar 4 07:35:58.450: TPLUS(00001241)/0/READ: Would block while reading

Mar 4 07:35:58.511: TPLUS(00001241)/0/READ: socket event 1

Mar 4 07:35:58.511: TPLUS(00001241)/0/READ: read entire 12 header bytes (expect 16 bytes data)

Mar 4 07:35:58.511: TPLUS(00001241)/0/READ: socket event 1

Mar 4 07:35:58.511: TPLUS(00001241)/0/READ: read entire 28 bytes response

Mar 4 07:35:58.511: TPLUS(00001241)/0/3AF752D4: Processing the reply packet

Mar 4 07:35:58.511: TPLUS: Received authen response status GET_PASSWORD (8)

Mar 4 07:35:58.512: TPLUS: Queuing AAA Authentication request 4673 for processing

Mar 4 07:35:58.512: TPLUS: processing authentication continue request id 4673

Mar 4 07:35:58.512: TPLUS: Authentication continue packet generated for 4673

Mar 4 07:35:58.512: TPLUS(00001241)/0/WRITE/3AFD3D3C: Started 5 sec timeout

Mar 4 07:35:58.512: TPLUS(00001241)/0/WRITE: wrote entire 26 bytes request

Mar 4 07:35:58.566: TPLUS(00001241)/0/READ: socket event 1

Mar 4 07:35:58.566: TPLUS(00001241)/0/READ: read entire 12 header bytes (expect 6 bytes data)

Mar 4 07:35:58.566: TPLUS(00001241)/0/READ: socket event 1

Mar 4 07:35:58.566: TPLUS(00001241)/0/READ: read entire 18 bytes response

Mar 4 07:35:58.567: TPLUS(00001241)/0/3AFD3D3C: Processing the reply packet

Mar 4 07:35:58.567: TPLUS: Received authen response status PASS (2)

Mar 4 07:35:58.656: HTTP: Priv level authorization success priv_level: 15

Mar 4 07:35:58.690: %HTTPS: SSL read fail (-6992)

Mar 4 07:35:59.096: eah: urlhook called for url=/favicon.ico

Mar 4 07:35:59.096: eah: Not for us

Mar 4 07:35:59.096: eah: urlhook called for url=/favicon.ico

Mar 4 07:35:59.096: eah: Not for us

Mar 4 07:35:59.096: eah: urlhook called for url=/favicon.ico

Mar 4 07:35:59.096: eah: Not for us