%TAC+: no address for get_server

[skluge]

Hi,

first: the above msg is not found anywhere on cisco.com, not even on the error message decoder.

We have routers configured to use aaa and tacacs+ to give administrators access to the exec. Tacacs+ server is CSACS (two servers). The servers are reachable without any problem and authenticate the user within seconds. Debugs are off. The router (IOS 12.2(13)ZH4) displays the login prompt, then after giving the username (the router displays 'Sent username "jdoe"') the log/console says:

%TAC+: no address for get_server

After giving the password the console displays this msg 2 more times. The User is authenticated without any problem. The CSACS logs indicate no error.

The default tacacs timeout is 5s, I increased it to 10s, but it didn't help (the login is done within 2-3 s, so there never was a tacacs network timeout above 5s).

As I want to rollout aaa with tacacs+ on several hundred routers and switches I want to make my config clean, so is there any help?

Thank you!

cu - Reinhart

[Richard Burts]

Since you say that users do get authenticated, this would appear to be a cosmetic bug. I understand your desire to get it resolved. Is there a reason to run this particular version of IOS? Have you tried a different version of IOS to see if the bug is fixed there?

HTH

Rick

[skluge]

Hi Rick,

> Is there a reason to run this particular version of IOS?

regarding our hardware configuration (memory etc) and several features we cannot change IOS on these devices.

> Have you tried a different version of IOS to see if the bug is fixed there?

Well, until now this error only occurs on our 836 Routers (image c836-k9o3s8y6-mz.122-13.ZH4.bin) which are connected via dsl/vpn to the CSACS. A test router (image c4500-is-mz_113-11a.bin) doesn't show these error messages.

cu - Reinhart

[Richard Burts]

The 12.2(13)ZH4 is listed as a short lived release to get fixes or features out before they were integrated into a more stable release. If there are reasons that you can not upgrade to a different release, which may not have this cosmetic bug, then I guess that you are stuck with this error message.

HTH

Rick

[skluge]

Hi Rick,

> The 12.2(13)ZH4 is listed as a short lived release to get fixes or features out before they were integrated into a more stable release. If there are reasons that you can not upgrade to a different release, which may not have this cosmetic bug, then I guess that you are stuck with this error message.

unfortunately there is no GD release on this platform with this feature set (IP/FW/PLUS ISDN DIAL BKUP 3DES VPN). 12.2(13)ZH4 is the last release which works with our memory configuration (32/12).

Thank you for your help anyway!

cu - Reinhart