Tacacs authentication fails for one user account for only one switch

[prasey]

Hi,

I am having an scenario, where as Tacacs authentication fails for one user account for only one switch.

The same user account works well for other devices.

The AAA configs are same on every devices in the network.

Heres the show tacacs output from the switch where only one user account fails;

              Socket opens:        157
             Socket closes:        156
             Socket aborts:        303
             Socket errors:          1
           Socket Timeouts:          2
   Failed Connect Attempts:          0
        Total Packets Sent:       1703
        Total Packets Recv:       1243
          Expected Replies:          0

What could be the reason ?

No errors on ACS server; same rights had been given to the user account.

Thanks to advise.

Prasey

[Nicolas Darchis]

Lol. hard to say without more info.

Can you take a sniffer trace ? debug tacacs ?

[bmcginn]

Hi there,

Does the user get authenticated in the ACS logs?

reports and activity----> failed attempts

ro

reports and activity----->  passed authentications

That will help narrow it down.

Brad