03-09-2022 04:07 AM
Hi *,
i would like to know how can i delete the First User (or if it possible or not) on ASR 99910, eXR 6.5.x, &.6.3.x?
I configured e more users on root-system but on finall i would like to delete the First User created during Router Startup, here is the sequence:
FIRST: Create a New User
P/0/RSP0/CPU0:A99-LAB01#admin
Wed Mar 9 11:43:20.837 WET
sysadmin-vm:0_RSP0# conf
Wed Mar 9 11:43:45.236 UTC+00:00
Entering configuration mode terminal
sysadmin-vm:0_RSP0(config)# aaa authentication users user B2B_Test
Wed Mar 9 11:43:56.842 UTC+00:00
sysadmin-vm:0_RSP0(config-user-B2B_Test)# uid 8999
Wed Mar 9 11:44:02.913 UTC+00:00
sysadmin-vm:0_RSP0(config-user-B2B_Test)# gid 100
Wed Mar 9 11:44:08.512 UTC+00:00
sysadmin-vm:0_RSP0(config-user-B2B_Test)# ssh_keydir /home/sshdir
Wed Mar 9 11:44:11.836 UTC+00:00
sysadmin-vm:0_RSP0(config-user-B2B_Test)# homedir /home/homedir
Wed Mar 9 11:44:11.839 UTC+00:00
sysadmin-vm:0_RSP0(config-user-B2B_Test)# password b2b
Wed Mar 9 11:44:33.364 UTC+00:00
sysadmin-vm:0_RSP0(config-user-B2B_Test)# commit
Wed Mar 9 11:44:39.599 UTC+00:00
Commit complete.
sysadmin-vm:0_RSP0(config-user-B2B_Test)# end
Second: Configure the New User inside root system
sysadmin-vm:0_RSP0# config
Wed Mar 9 11:45:00.485 UTC+00:00
Entering configuration mode terminal
sysadmin-vm:0_RSP0(config)# aaa authentication groups group root-system
Wed Mar 9 11:45:15.171 UTC+00:00
sysadmin-vm:0_RSP0(config-group-root-system)# users "%%__system_user__%% cisco test B2B_Test"
Wed Mar 9 11:45:44.913 UTC+00:00
sysadmin-vm:0_RSP0(config-group-root-system)#
sysadmin-vm:0_RSP0(config-group-root-system)# commit
Wed Mar 9 11:45:47.957 UTC+00:00
Commit complete.
sysadmin-vm:0_RSP0(config-group-root-system)# end
Third: Try to delete the First User
Wed Mar 9 11:46:03.430 UTC+00:00
Entering configuration mode terminal
sysadmin-vm:0_RSP0(config)# no aaa authentication users user cisco
Wed Mar 9 11:46:35.995 UTC+00:00
sysadmin-vm:0_RSP0(config)# aaa authentication groups group root-system
Wed Mar 9 11:46:45.520 UTC+00:00
sysadmin-vm:0_RSP0(config-group-root-system)# no users cisco
Wed Mar 9 11:46:45.523 UTC+00:00
sysadmin-vm:0_RSP0(config-group-root-system)# commit
Wed Mar 9 11:46:58.164 UTC+00:00
Aborted: 'aaa authentication users user cisco': Can't remove cisco first created user,should be last one to remove
sysadmin-vm:0_RSP0(config-group-root-system)
Thanls in advance
Maria
03-09-2022 04:59 AM
do you see any aaa faults in "show alarms" ?
03-09-2022 05:18 AM
Hi,
unfortunately the alarms that we have are relative to power:
sysadmin-vm:0_RSP0# sh alarms
Wed Mar 9 13:12:54.154 UTC+00:00
-------------------------------------------------------------------------------
Active Alarms
-------------------------------------------------------------------------------
Location Severity Group Set time Description
-------------------------------------------------------------------------------
0/PT1-PM1 major environ 12/22/20 10:38:20 Power Module Error (PM_VIN_B_VOLT_OOR).
0/PT1-PM1 major environ 12/22/20 10:38:20 Power Module Error (PM_NO_INPUT_B_DETECTED).
0/PT1-PM0 major environ 12/22/20 10:38:20 Power Module Error (PM_VIN_B_VOLT_OOR).
0/PT1-PM0 major environ 12/22/20 10:38:20 Power Module Error (PM_NO_INPUT_B_DETECTED).
0/PT0-PM1 major environ 12/22/20 10:38:20 Power Module Error (PM_VIN_B_VOLT_OOR).
0/PT0-PM1 major environ 12/22/20 10:38:20 Power Module Error (PM_NO_INPUT_B_DETECTED).
sysadmin-vm:0_RSP0#
And here are the Logging messages:
sysadmin-vm:0_RSP0# show logging | in Mar
Wed Mar 9 13:08:43.114 UTC+00:00
0/RSP0/ADMIN0:Mar 9 11:44:39.652 : confd_helper[3977]: %MGBL-CONFD_HELPER-5-SYSADMIN_COMMIT : A sysadmin configuration change has been committed. Use 'show configuration commit list' in admin mode for more details
0/0/ADMIN0:Mar 9 11:44:39.684 : aaad[3540]: %MGBL-AAAD-7-DEBUG : AAA subscription number of users 3
0/7/ADMIN0:Mar 9 11:44:39.684 : aaad[3543]: %MGBL-AAAD-7-DEBUG : AAA subscription number of users 3
0/RSP1/ADMIN0:Mar 9 11:44:39.684 : aaad[3985]: %MGBL-AAAD-7-DEBUG : AAA subscription number of users 3
0/1/ADMIN0:Mar 9 11:44:39.693 : aaad[3927]: %MGBL-AAAD-7-DEBUG : AAA subscription number of users 3
0/RSP0/ADMIN0:Mar 9 11:45:09.652 : confd_helper[3977]: %MGBL-CONFD_HELPER-7-DEBUG : Backing up running configuration
0/RSP0/ADMIN0:Mar 9 11:45:48.003 : confd_helper[3977]: %MGBL-CONFD_HELPER-5-SYSADMIN_COMMIT : A sysadmin configuration change has been committed. Use 'show configuration commit list' in admin mode for more details
0/RSP0/ADMIN0:Mar 9 11:46:18.004 : confd_helper[3977]: %MGBL-CONFD_HELPER-7-DEBUG : Backing up running configuration
0/RSP1/ADMIN0:Mar 9 11:46:58.170 : aaad[3985]: %MGBL-AAAD-7-DEBUG : Can't remove cisco first created user,should be last one to remove
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide