Strange authentication event message on Nexus 5k

[m.junghage]

We're seeing syslog messages generated from a couple of Nexus 5ks that we can't relate to anything. All the devices authenticates using TACACS and the syslog messages appear randomly. Can someone explain this behavior?

"AUTHPRIV     2     SYSTEM_MSG     pam_unix(login:auth): auth could not identify password for [] - login"

[Rajagopal Sivaramakrishnan]

Check the system clock, NTP settings etc.. If the system clock is not synchronized with what it is in the TACACS server, you might see this.. I had the same problem, and had to reconfigure my timezones on my switches..

Raj

[m.junghage]

Rajagopal: Thank you, I will give this a try and get back to you with the results.

[Prashanth Krishnappa]

Check to see if there are a flood of failed logins into the switch. If there is such a condition there is defect for the message

http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtq86379