9800-CL webgui login issue

[Dimban]

Hi guys!

Recently i have deployed 9800-CL from OVA version C9800-CL-universalk9.16.12.04a. Everything is great except one thing. When i login to web gui with day0 admin account evertyhing works well. When login to web gui with created (via CLI or WebGUI) another user i can see only blank page with backward button on top.

SSH access works great with any user.

I tried to use ACS as tacacs AAA server as well.And again SSH access works well, but only day0 user allowed to access to WebGUI, although debug tacacs authentication tells me authentication PASSED not only for day0 user (for created via CLI or WebGUI as well) but then there is a message l"Login un-seccessfull from host ...."

Is there any limitation of how many users can access webgui?

BTW i have updated system up to Cisco IOS Software [Amsterdam], C9800-CL Software (C9800-CL-K9_IOSXE), Version 17.3.1, RELEASE SOFTWARE (fc5)  still no luck

[Rasika Nayanajith]

Did that new user get privilege 15 access? If not try that

HTH

Rasika

[Dimban]

Sure, all users have 15th privilege level

[Rich R · Accepted solution]

Are you trying to use aaa authorization?

See https://community.cisco.com/t5/wireless/how-to-setup-aaa-to-define-gui-role-in-cisco-wireless-controller/m-p/4292546#M226417

[Dimban]

Thank you very much. It was the thing. When i removed those strings everything starts to work well.

aaa authorization commands 1 default group ACS if-authenticated
aaa authorization commands 15 default group ACS if-authenticated
aaa accounting send stop-record authentication failure

[Rich R]

Good