NXOS: version 9.3(10)
I have enabled RAIDUS in aaa using the following commands:
aaa authentication login default group radius
radius-server host server key 6 "JDYkU/B21nItOWiCoy2IayAdad3214123TUmfsdfas31290-OPLASDasdfasdf32130BUEPv8k/atg0PfwQsX6+jyqv1pDM123098DjkdsaZ0T5/JYoNVjdpB+DeCt8A" authentication accounting
The 9K successfully reaches out to my FreeRADIUS server but is giving all users network-operator regardless of the Cisco-AVPair attributes I pass. If I create a random user in LDAP and login with no groups it logs the user in and provides network-operator, for example:
user:test
roles:network-operator
account created through REMOTE authentication
Credentials such as ssh server key will be cached temporarily only for this user account
Local login not possible
I have tested the same FreeRADIUS servers and configuration on IOS based Cisco devices and authorization works fine.
Anyone know what's going on here?