Problem with authorization in catalyst 3020 blade

[paruuth]

Tervicko!

Does anybody had any problems getting blade-switch authorized correctly?

I've made basic tacacs-config in ACS 5.2 (patch 7) and I've got ASA and ASR working correctly. Even Nexus worked when I added attributes found from this forum.

But blade-switches won't go to enable-mode with ad-password. If I use my local secret-password then it works. And yes, ACS is joined with AD.

Does 3020 need any addional custom attributes also?

rgds. Pasi R

[Javier Henderson]

Please post the switch configuration here (just the AAA relevant bits) so we can review it.

Also, try enabling some debugs:

debug aaa authen

debug aaa author

And post the output as well.

[paruuth]

Tervicko!

here comes the config:

sh run | sec aaa

aaa new-model

aaa group server tacacs+ turvattuna-acs

server-private 172.29.228.158 key 0 secret-keyword

ip tacacs source-interface FastEthernet0

aaa authentication login default local group turvattuna-acs

aaa authorization console

aaa authorization config-commands

aaa authorization exec default local group turvattuna-acs

aaa session-id common

Blade switch software: Cisco IOS Software, CBS30X0 Software (CBS30X0-IPBASEK9-M), Version 12.2(58)SE1

[paruuth]

debug aaa authentication

TAP2_D_09_K1_SW3#

Nov 15 09:48:07: AAA/BIND(00000053): Bind i/f

Nov 15 09:48:07: AAA/AUTHEN/LOGIN (00000053): Pick method list 'default'

Nov 15 09:48:07: AAA SRV(00000053): process authen req

Nov 15 09:48:07: AAA SRV(00000053): Authen method=LOCAL

Nov 15 09:48:07: AAA SRV(00000053): protocol reply FAIL for Authentication

Nov 15 09:48:07: AAA SRV(00000053): Authen method=SERVER_GROUP turvattuna-acs

Nov 15 09:48:07: AAA SRV(00000053): protocol reply GET_PASSWORD for Authentication

Nov 15 09:48:07: AAA SRV(00000053): Return Authentication status=GET_PASSWORD

Nov 15 09:48:07: AAA SRV(00000053): process authen req

Nov 15 09:48:07: AAA SRV(00000053): Authen method=SERVER_GROUP turvattuna-acs

Nov 15 09:48:07: AAA SRV(00000053): protocol reply PASS for Authentication

Nov 15 09:48:07: AAA SRV(00000053): Return Authentication status=PASS

Nov 15 2011 09:48:07.851: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: ] [Source: 172.29.227.6] [localport: 22] at 09:48:

07 EET Tue Nov 15 2011

TAP2_D_09_K1_SW3#

Nov 15 09:48:08: AAA/AUTHOR (0x53): Pick method list 'default'

Nov 15 09:48:08: AAA SRV(00000053): process author req

Nov 15 09:48:08: AAA SRV(00000053): Author method=LOCAL

Nov 15 09:48:08: AAA SRV(00000053): protocol reply FAIL for Authorization

Nov 15 09:48:08: AAA SRV(00000053): Author method=SERVER_GROUP turvattuna-acs

Nov 15 09:48:08: AAA SRV(00000053): protocol reply PASS for Authorization

Nov 15 09:48:08: AAA SRV(00000053): Return Authorization status=PASS

Nov 15 09:48:08: AAA/AUTHOR/EXEC(00000053): processing AV cmd=

Nov 15 09:48:08: AAA/AUTHOR/EXEC(00000053): Authorization successful

TAP2_D_09_K1_SW3#

[paruuth]

here's comment from switch guys before the next debug:

"and the user priviledge after succefull login = 1, and the the exec –state is not set for user, so the user should enter ENABLE (with enable secret password) in order to archive the enable/priviledged mode….

So –from my point of view. the definition aaa authorization exec default local group turvattuna-acs even with or without optional parameter if-authenticated – looks like it doesn’t work for Tacacs users, but works for Local users (i.e. with users defined in switch by username-command).

As far as I understand, the debug didn’t so any failure so I desired to insert some more debug aaa –parameter, to get more deeply the situation traced.

[paruuth]

...and here's the rest. Sorry for spamming!

TAP2_D_09_K1_SW3#

Nov 15 10:03:28: AAA/API(00000000): aaa_util_unique_id_alloc(), pc 0x1EBF898, enter {

Nov 15 10:03:28: AAA/ID(NA): Exec allocating

Nov 15 10:03:28: AAA/ID(NA): propagate tty:/0x4FB0764 #2 port:0 slot:0 shelf:0 hw:nil

Nov 15 10:03:28: aaa_uid_propogate grabbed_id = 0

Nov 15 10:03:28: aaa_uid_propogate allocating new id

Nov 15 10:03:28: AAA/ID(00000056): Call started 10:03:28 EET Nov 15 2011

Nov 15 10:03:28: AAA/ID(00000056): Setting ID in TTY 2(4FB0764).

Nov 15 10:03:28: AAA/ATTR(00000056): new list: 0x5057070 handle: 0xBE0003A5

Nov 15 10:03:28: AAA/ATTR(00000056): new sublist: 0x5066AE0

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066AE0) index(0): 05066AE8 0 00000009 interface(210) 4 tty2

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066AE0) index(1): 05066AF8 0 00000001 port-type(214) 4 Virtual Terminal

Nov 15 10:03:28: AAA/BIND(00000056): Bind i/f

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05070378 05057070 none none

Nov 15 10:03:28: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000001) handle(0xBE0003A5)

Nov 15 10:03:28: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(1): 05066AE8 0 00000009 interface(210) 4 tty2

Nov 15 10:03:28: AAA/ATTR(00000056):  interface ok

Nov 15 10:03:28: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000001) handle(0xBE0003A5)

Nov 15 10:03:28: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(1): 05066AF8 0 00000001 port-type(214) 4 Virtual Terminal

Nov 15 10:03:28: AAA/ATTR(00000056):  port-type ok

Nov 15 10:03:28: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000001) handle(0xBE0003A5)

Nov 15 10:03:28: AAA/ATTR(00000056): not found

Nov 15 10:03:28: AAA/ID(00000056): CLID 172.29.227.6

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066AE0) index(2): 05066B08 0 00000009 clid(37) 12 172.29.227.6

Nov 15 10:03:28: AAA/API(00000000):  aaa_event_alloc(), pc 0x1E7BC98 {

Nov 15 10:03:28: AAA/API(00000000):  } aaa_event_alloc()

Nov 15 10:03:28: AAA/API(00000056):  aaa_event_send_and_free(), pc 0x1E7BCDC {

Nov 15 10:03:28: AAA/ATTR(00000056): new list: 0x5057034 handle: 0x820003A6

Nov 15 10:03:28: AAA/ATTR(00000056): new sublist: 0x5066F8C

Nov 15 10:03:28: AAA/ID(00000056): Could not find interface type to notify session id = 76

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066F8C) index(0): 05066F94 0 00000001 session-id(397) 4 76(4C)

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066F8C) index(1): 05066FA4 0 00000001 start_time(406) 4 Nov 15 2011 10:03

:28

Nov 15 10:03:28: AAA/API(00000056):  } aaa_event_send_and_free()

Nov 15 10:03:28: AAA/ID(00000056): Could not find interface type to notify session id = 76

Nov 15 10:03:28: AAA/ID(00000056): Exec allocated

Nov 15 10:03:28: AAA/API(00000056): } aaa_util_unique_id_alloc()

Nov 15 10:03:28: AAA/API(00000000): aaa_req_alloc(), pc 0x1D2AD5C, enter {

Nov 15 10:03:28: AAA/API(00000000): } aaa_req_alloc()

Nov 15 10:03:28: AAA/API(00000000): aaa_attr_list_alloc_max(), pc 0x1E812E8, enter {

Nov 15 10:03:28: AAA/ATTR(00000000): new list: 0x50570D4 handle: 0x180003A7

Nov 15 10:03:28: AAA/ATTR(00000000): new sublist: 0x5066D08

Nov 15 10:03:28: AAA/API(00000000): } aaa_attr_list_alloc_max()

Nov 15 10:03:28: AAA/AUTHEN/LOGIN (00000056): Pick method list 'default'

Nov 15 10:03:28: AAA/ATTR(00000056): copy lists

Nov 15 10:03:28: AAA/ATTR(00000056): new list: 0x505700C handle: 0x4E0003A8

Nov 15 10:03:28: AAA/ATTR(00000056): new sublist: 0x5066CAC new sublist: 05066CAC

Nov 15 10:03:28: copy lists: src sublist(0x05066AE0) index(2)

Nov 15 10:03:28: copy lists: dst sublist(0x05066CAC) index(2)

Nov 15 10:03:28: copy lists: attr type: 210

Nov 15 10:03:28: copy lists: attr type: 214

Nov 15 10:03:28: copy lists: attr type: 37

Nov 15 10:03:28: AAA/ATTR(00000000): add attr: sublist(0x05066D08) index(0): 05066D10 0 00000009 username(435) 7

Nov 15 10:03:28: AAA/ATTR(00000000): cursor init: 050704B8 050570D4 none none

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)password(309): not found

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 050704A0 050570D4 none none

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)password(309): not found

Nov 15 10:03:28: AAA SRV(00000056): process authen req

Nov 15 10:03:28: AAA SRV(00000056): Authen method=LOCAL

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 059B6168 05057070 none none

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)dnis(83): not found

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)05066B08 0 00000009 clid(37) 12 172.29

.227.6

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 04EA65D8 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)05066D10 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:28: AAA SRV(00000056): protocol reply FAIL for Authentication

Nov 15 10:03:28: AAA SRV(00000056): Authen method=SERVER_GROUP turvattuna-acs

Nov 15 10:03:28: AAA/SG: Server group ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:28: AAA/SG: Server group wrapper ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEE58 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)05066D10 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEE58 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)password(309): not found

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDC0 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000000) handle(0x180003A7)05066D10 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDD0 0505700C none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066CAC)->index(0x00000002) handle(0x4E0003A8)05066CB4 0 00000009 interface(210) 4 t

ty2

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDC0 0505700C none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066CAC)->index(0x00000002) handle(0x4E0003A8)05066CD4 0 00000009 clid(37) 12 172.29

.227.6

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDC0 0505700C none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066CAC)->index(0x00000002) handle(0x4E0003A8)dnis(83): not found

Nov 15 10:03:28: AAA/SG/REF_COUNT refcount of server B400000D increased to 65

Nov 15 10:03:28: AAA/ATTR(00000056): add attr: sublist(0x05066D08) index(1): 05066D20 0 00000009 reply-message(262) 10 password:

Nov 15 10:03:28: AAA/SG: Server group wrapper ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:28: AAA/SG: Server group ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:28: AAA SRV(00000056): protocol reply GET_PASSWORD for Authentication

Nov 15 10:03:28: AAA SRV(00000056): Return Authentication status=GET_PASSWORD

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000001) handle(0x180003A7)05066D20 0 00000009 reply-message(262)

10 password:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000001) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000001) handle(0x180003A7)password(309): not found

Nov 15 10:03:28: AAA/ATTR(00000000): add attr: sublist(0x05066D08) index(2): 05066D30 0 00000009 password(309) 14

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D20 0 00000009 reply-message(262)

10 password:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000000): delete attr: 05066D08 1

Nov 15 10:03:28: AAA/ATTR(00000000): del attr: 05066D20 0 00000009 reply-message(262) 10 password:

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 050704A0 050570D4 none none

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D30 0 00000009 password(309) 14 <

opaque value>

Nov 15 10:03:28: AAA SRV(00000056): process authen req

Nov 15 10:03:28: AAA SRV(00000056): Authen method=SERVER_GROUP turvattuna-acs

Nov 15 10:03:28: AAA/SG: Server group ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:28: AAA/SG: Server group wrapper ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDD8 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D10 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDD8 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D30 0 00000009 password(309) 14 <

opaque value>

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEED60 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D30 0 00000009 password(309) 14 <

opaque value>

Nov 15 10:03:28: AAA/ATTR(00000056): cursor init: 05BEEDD8 050570D4 none unknown

Nov 15 10:03:28: AAA/ATTR(00000056): find:

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)05066D30 0 00000009 password(309) 14 <

opaque value>

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000056): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)

Nov 15 10:03:28: AAA/ATTR(00000056): delete attr: 05066D08 2

Nov 15 10:03:28: AAA/ATTR(00000056): del attr: 05066D30 0 00000009 password(309) 14

Nov 15 10:03:28: AAA/SG: Server group wrapper ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:28: AAA/SG: Server group ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:28: AAA SRV(00000056): protocol reply PASS for Authentication

Nov 15 10:03:28: AAA SRV(00000056): Return Authentication status=PASS

Nov 15 10:03:28: AAA/ATTR(00000000): find:

Nov 15 10:03:28: AAA/ATTR(00000000): sublist(0x05066D08)->index(0x00000002) handle(0x180003A7)reply-message(262): not found

TAP2_D_09_K1_SW3#

Nov 15 2011 10:03:28.791: %SEC_LOGIN-5-LOGIN_SUCCESS: Login Success [user: ] [Source: 172.29.227.6] [localport: 22] at 10:03:

28 EET Tue Nov 15 2011

Nov 15 10:03:29: AAA/API(00000000): aaa_util_unique_id_alloc(), pc 0x1EBF898, enter {

Nov 15 10:03:29: AAA/ID(NA): Exec allocating

Nov 15 10:03:29: AAA/ID(NA): propagate tty:/0x4FB0764 #2 port:0 slot:0 shelf:0 hw:nil

Nov 15 10:03:29: aaa_uid_propogate grabbed_id = 86

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 050703E8 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)05066AE8 0 00000009 interface(210) 4 t

ty2

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 050703E8 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)05066AF8 0 00000001 port-type(214) 4 V

irtual Terminal

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 050703E8 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)parent-interface(212): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 050703E8 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)parent-interface-type(213): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05070378 05057070 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(2): 05066AE8 0 00000009 interface(210) 4 tty2

Nov 15 10:03:29: AAA/ATTR(00000056):  interface ok

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(2): 05066AF8 0 00000001 port-type(214) 4 Virtual Terminal

Nov 15 10:03:29: AAA/ATTR(00000056):  port-type ok

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x05066AE0) index(2): 05066B08 0 00000009 clid(37) 12 172.29.227.6

Nov 15 10:03:29: AAA/ATTR(00000056):  clid ok

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=none, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066AE0)->index(0x00000002) handle(0xBE0003A5)

Nov 15 10:03:29: AAA/ATTR(00000056): not found

Nov 15 10:03:29: AAA/ID(00000056): Exec allocated

Nov 15 10:03:29: AAA/API(00000056): } aaa_util_unique_id_alloc()

Nov 15 10:03:29: AAA/API(00000000): aaa_req_alloc(), pc 0x1EC9318, enter {

Nov 15 10:03:29: AAA/API(00000000): } aaa_req_alloc()

Nov 15 10:03:29: AAA/AUTHOR (0x56): Pick method list 'default'

Nov 15 10:03:29: AAA/ATTR(00000056): copy lists

Nov 15 10:03:29: AAA/ATTR(00000056): new list: 0x5057020 handle: 0x650003A9

Nov 15 10:03:29: AAA/ATTR(00000056): new sublist: 0x5066D64 new sublist: 05066D64

Nov 15 10:03:29: copy lists: src sublist(0x05066AE0) index(2)

Nov 15 10:03:29: copy lists: dst sublist(0x05066D64) index(2)

Nov 15 10:03:29: copy lists: attr type: 210

Nov 15 10:03:29: copy lists: attr type: 214

Nov 15 10:03:29: copy lists: attr type: 37

Nov 15 10:03:29: AAA/API(00000056): aaa_attr_req_add(), pc 0x1EC93B0, enter {

Nov 15 10:03:29: AAA/ATTR(00000056): new list: 0x5057048 handle: 0x5A0003AA

Nov 15 10:03:29: AAA/ATTR(00000056): new sublist: 0x50670A0

Nov 15 10:03:29: AAA/ATTR(00000056): add attr: sublist(0x050670A0) index(0): 050670A8 0 00000009 username(435) 7

Nov 15 10:03:29: AAA/API(00000056): } aaa_attr_req_add()

Nov 15 10:03:29: AAA/API(00000056): aaa_attr_req_add(), pc 0x1EC93D8, enter {

Nov 15 10:03:29: AAA/ATTR(00000056): add attr: sublist(0x050670A0) index(1): 050670B8 0 0000000A cmd(74) 0

Nov 15 10:03:29: AAA/API(00000056): } aaa_attr_req_add()

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05070318 05057048 shell none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)password(309): not found

Nov 15 10:03:29: AAA SRV(00000056): process author req

Nov 15 10:03:29: AAA SRV(00000056): Author method=LOCAL

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 04EA65C8 05057048 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)050670A8 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:29: AAA SRV(00000056): protocol reply FAIL for Authorization

Nov 15 10:03:29: AAA SRV(00000056): Author method=SERVER_GROUP turvattuna-acs

Nov 15 10:03:29: AAA/SG: Server group ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:29: AAA/SG: Server group wrapper ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEEE70 05057048 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)050670A8 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECC0 05057048 shell none

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=shell, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x050670A0) index(1): 050670A8 0 00000009 username(435) 7

Nov 15 10:03:29: AAA/ATTR(00000056):  username service:shell skip

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x050670A0) index(1): 050670B8 0 0000000A cmd(74) 0

Nov 15 10:03:29: AAA/ATTR(00000056):  cmd service:shell ok

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=shell, protocol=none

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECC0 05057048 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)050670A8 0 00000009 username(435) 7 ma

jurip

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECD0 05057020 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066D64)->index(0x00000002) handle(0x650003A9)05066D6C 0 00000009 interface(210) 4 t

ty2

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECC0 05057020 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066D64)->index(0x00000002) handle(0x650003A9)05066D8C 0 00000009 clid(37) 12 172.29

.227.6

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 05BEECC0 05057020 none unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x05066D64)->index(0x00000002) handle(0x650003A9)dnis(83): not found

Nov 15 10:03:29: AAA/SG: Server group wrapper ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:29: AAA/SG: Server group ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:29: AAA/SG: Server group ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:29: AAA/SG: Server group wrapper ref count for public group turvattuna-acs raised to 4

Nov 15 10:03:29: AAA/SG/REF_COUNT refcount of server B400000D increased to 66

Nov 15 10:03:29: AAA/ATTR(00000056): new list: 0x50570AC handle: 0x160003AB

Nov 15 10:03:29: AAA/ATTR(00000056): new sublist: 0x5066BF4

Nov 15 10:03:29: AAA/ATTR(00000000): free list: 0x50570AC handle: 0x160003AB

Nov 15 10:03:29: AAA/SG: Server group wrapper ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:29: AAA/SG: Server group ref count for public group turvattuna-acs decreased to 3

Nov 15 10:03:29: AAA SRV(00000056): protocol reply PASS for Authorization

Nov 15 10:03:29: AAA SRV(00000056): Return Authorization status=PASS

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 0502ED4C 05057048 shell unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=shell, protocol=unknown

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x050670A0) index(1): 050670A8 0 00000009 username(435) 7

Nov 15 10:03:29: AAA/ATTR(00000056):  username service:shell skip

Nov 15 10:03:29: AAA/ATTR(00000056): next attr: sublist(0x050670A0) index(1): 050670B8 0 0000000A cmd(74) 0

Nov 15 10:03:29: AAA/ATTR(00000056):  cmd service:shell ok

Nov 15 10:03:29: AAA/AUTHOR/EXEC(00000056): processing AV cmd=

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): find next matching service=shell, protocol=unknown

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)

Nov 15 10:03:29: AAA/ATTR(00000056): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 0502ED4C 05057048 none none

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)service-type(333): not found

Nov 15 10:03:29: AAA/ATTR(00000056): cursor init: 0502ED4C 05057048 shell unknown

Nov 15 10:03:29: AAA/ATTR(00000056): find:

Nov 15 10:03:29: AAA/ATTR(00000056): sublist(0x050670A0)->index(0x00000001) handle(0x5A0003AA)reply-message(262): not found

Nov 15 10:03:29: AAA/AUTHOR/EXEC(00000056): Authorization successful

Nov 15 10:03:29: AAA/ATTR(00000056): free list: 0x50570D4 handle: 0x180003A7

Nov 15 10:03:29: AAA/ATTR(00000056): del attr: sublist(0x05066D08) index(0): 05066D10 0 00000009 username(435) 7

Nov 15 10:03:29: AAA/ATTR(00000056): free list: 0x505700C handle: 0x4E0003A8

Nov 15 10:03:29: AAA/ATTR(00000056): del attr: sublist(0x05066CAC) index(0): 05066CB4 0 00000009 interface(210) 4 tty2

Nov 15 10:03:29: AAA/ATTR(00000056): del attr: sublist(0x05066CAC) index(1): 05066CC4 0 00000001 port-type(214) 4 Virtual Terminal

Nov 15 10:03:29: AAA/ATTR(00000056): del attr: sublist(0x05066CAC) index(2):

TAP2_D_09_K1_SW3#05066CD4 0 00000009 clid(37) 12 172.29.227.6

TAP2_D_09_K1_SW3#