Default user/pass not working on NSO

[oscardenizjensen]

Hej
I have performed a local install, but I can not login to the GUI using admin/admin.

I can login to CLI with "ncs_cli -C -u admin" , but when I do "show run", all I see is snmp configuration on the device. I can not see AAA or configure it.

cisco@Ubuntu-2:~$ ncs --status | grep status
status: started
module: Cisco-IOS-XR-sysadmin-show-diskenc-status revision: 2021-02-26
namespace: http://www.cisco.com/ns/yang/Cisco-IOS-XR-sysadmin-show-diskenc-status
prefix: Cisco-IOS-XR-sysadmin-show-diskenc-status
db=running id=34 priority=1 path=/ncs:devices/device/live-status-protocol/device-type

admin@ncs# show running-config aaa
-------------------------------^
syntax error: element does not exist


admin@ncs# config
Entering configuration mode terminal
admin@ncs(config)# ?
Possible completions:
alarms Alarm management
cluster Cluster configuration
compliance Compliance reporting
devices The managed devices and device communication settings
high-availability Configuration, status and actions concerning NCS Built-in HA
java-vm Control of the NCS Java VM
ncs-state NCS status information
packages Installed packages
python-vm Control of the NCS Python VM
scheduler Time-based job scheduler suitable for scheduling periodic background work.
services The services managed by NCS
side-effect-queue
smart-license
software Software management
zombies Container for deleted Nano Services that still perform staged deletes.
---
abort Abort configuration session
activate Activate a statement
annotate Add a comment to a statement
clear Remove all configuration changes
commit Commit current set of changes
compare Compare configuration
copy Copy a list entry
deactivate Deactivate a statement
describe Display transparent command information
do Run an operational-mode command
end Terminate configuration session
exit Exit from current mode
help Provide help information
insert Insert a parameter
load Load configuration from an ASCII file or from terminal
move Move a parameter
no Negate a command or set its defaults
pwd Display current mode path
rename Rename an identifier
resolved Conflicts have been resolved
revert Copy configuration from running
rload Load configuration from an ASCII file or from terminal, relative to current location
rollback Roll back database to last committed version
save Save configuration to an ASCII file
save-device-cfg save device settings
service Modify use of network based services
show Show a parameter
switch Change CLI style
tag Manipulate statement tags
top Exit to top level and optionally run command
validate Validate current configuration

[jvikman]

You're not supplying a group, so the default is whatever the `groups` command defaults to.

Try:

ncs_cli -C -u admin -g admin

[oscardenizjensen]

I have tried that command, but I am getting the same result. Nothing in config other than snmp, and can not login to GUI

[Jesus Illescas]

I have the impression you are having some permissions issues, what happens when you login using the --noaaa option?

ncs_cli -C -u admin -g admin --noaa

l recommend you to take a look at this Learning Lab https://developer.cisco.com/learning/tracks/get_started_with_nso/nso-labs/learn-nso-with-netsim/setting-up-nso/ where you can find a local install of NSO, it can help you to compare defaults and can help you to get started.

[oscardenizjensen]

I can still login.

cisco@Ubuntu-2:~$ ncs_cli -C -u admin -g admin --noaa

User admin failed to log in 1 times!
admin connected from 10.255.0.96 using ssh on Ubuntu-2
admin@ncs#

[jvikman]

But you should be able to see aaa and configure it. Can you do that?

[oscardenizjensen]

No, that is the main problem. When I say "show run" on ncs_cli, I only get snmp, nothing else. If I try to config and put aaa I get the below error

admin@ncs(config)# aaa ?
^
% Invalid input detected at '^' marker.

[cohult]

1. In the default ncs.conf, the /ncs-config/cdb/init-path is set to ${NCS_DIR}/var/ncs/cdb, where the default aaa_init.xml file is located. If the configuration from the aaa_init.xml file is not loaded and the aaa and nacm config is not configured, there will be no config under aaa or nacm,  so unless you use the --noaaa flag with ncs_cli, the user will not be allowed to access the nodes.
2. Note that --noaa should be --noaaa

[u.avsec]

Depending on what you did on setup it is hard to say what is going on.

If you want to recover access so to speak, search for aaa_init.xml somewhere in install dir then use ncs_load to load it in. That file should have enough config to allow admin to work properly.