SDM through aaa authentication using rsa secureid

[dkrijgsman]

Hi,

I'm currently testing with Cisco's SDM interface combined with Cisco ACS authentication using rsa secureid. Tests without the rsa securid, just a username/pass combination all works well, however combining the securid, sdm keeps popping back up. CLI access using acs with the secureid works fine.

Attached: debug output from a sdm https securid session

http authentication keeps getting a failure

Any suggestions?

[vkapoor5]

http authentication will need a user at privilege level 15. This is also seen in your output

"HTTP: Authentication failed for level 15"

Give the user the privilege level of 15 and see if it works.

[dkrijgsman]

Hi vkapoor5,

I've already done that. When i'm not using the RSA secureid just plain login / passw everything works fine. Both methods, using priv15 or passing a cli-view work except when i'm using a secureid.

I think it has something to do with caching of the token en passing it multiple times in the SDM login procedure although this obviously works only one time.