Sorry, I forgot to post the log, I just did the comparison again:<br><br>Successful login tac_plus log:<br><br>Thu Feb 18 13:33:30 2010 [26189]: Reading config<br>Thu Feb 18 13:33:30 2010 [26189]: Version F4.0.4.19 Initialized 1<br>
Thu Feb 18 13:33:30 2010 [26189]: tac_plus server F4.0.4.19 starting<br>Thu Feb 18 13:33:30 2010 [26189]: uid=505 euid=505 gid=505 egid=505 s=4<br>Thu Feb 18 13:33:37 2010 [26189]: session request from 10.1.2.1 sock=5<br>
Thu Feb 18 13:33:37 2010 [26189]: connect from 10.1.2.1 [10.1.2.1]<br>Thu Feb 18 13:33:37 2010 [26189]: Waiting for packet<br>Thu Feb 18 13:33:37 2010 [26189]: Read AUTHEN/START size=35<br>Thu Feb 18 13:33:37 2010 [26189]: validation request from 10.1.2.1<br>
Thu Feb 18 13:33:37 2010 [26189]: PACKET: key=mykey<br>Thu Feb 18 13:33:37 2010 [26189]: version 192 (0xc0), type 1, seq no 1, flags 0x1<br>Thu Feb 18 13:33:37 2010 [26189]: session_id 1034326774 (0x3da692f6), Data length 23 (0x17)<br>
Thu Feb 18 13:33:37 2010 [26189]: End header<br>Thu Feb 18 13:33:37 2010 [26189]: type=AUTHEN/START, priv_lvl = 1<br>Thu Feb 18 13:33:37 2010 [26189]: action=login<br>Thu Feb 18 13:33:37 2010 [26189]: authen_type=ascii<br>
Thu Feb 18 13:33:37 2010 [26189]: service=login<br>Thu Feb 18 13:33:37 2010 [26189]: user_len=0 port_len=4 (0x4), rem_addr_len=11 (0xb)<br>Thu Feb 18 13:33:37 2010 [26189]: data_len=0<br>Thu Feb 18 13:33:37 2010 [26189]: User:<br>
Thu Feb 18 13:33:37 2010 [26189]: port:<br>Thu Feb 18 13:33:37 2010 [26189]: tty1<br>Thu Feb 18 13:33:37 2010 [26189]: rem_addr:<br>Thu Feb 18 13:33:37 2010 [26189]: 10.1.10.1<br>Thu Feb 18 13:33:37 2010 [26189]: data:<br>
Thu Feb 18 13:33:37 2010 [26189]: End packet<br>Thu Feb 18 13:33:37 2010 [26189]: Authen Start request<br>Thu Feb 18 13:33:37 2010 [26189]: choose_authen returns 1<br>Thu Feb 18 13:33:37 2010 [26189]: Writing AUTHEN/GETUSER size=55<br>
Thu Feb 18 13:33:37 2010 [26189]: PACKET: key=mykey<br>Thu Feb 18 13:33:37 2010 [26189]: version 192 (0xc0), type 1, seq no 2, flags 0x1<br>Thu Feb 18 13:33:37 2010 [26189]: session_id 1034326774 (0x3da692f6), Data length 43 (0x2b)<br>
Thu Feb 18 13:33:37 2010 [26189]: End header<br>Thu Feb 18 13:33:37 2010 [26189]: type=AUTHEN status=4 (AUTHEN/GETUSER) flags=0x0<br>Thu Feb 18 13:33:37 2010 [26189]: msg_len=37, data_len=0<br>Thu Feb 18 13:33:37 2010 [26189]: msg:<br>
Thu Feb 18 13:33:37 2010 [26189]: 0xa User Access Verification 0xa<br>Thu Feb 18 13:33:37 2010 [26189]: data:<br>Thu Feb 18 13:33:37 2010 [26189]: End packet<br>Thu Feb 18 13:33:37 2010 [26189]: Waiting for packet<br>Thu Feb 18 13:33:39 2010 [26189]: Read AUTHEN/CONT size=23<br>
Thu Feb 18 13:33:39 2010 [26189]: PACKET: key=mykey<br>Thu Feb 18 13:33:39 2010 [26189]: version 192 (0xc0), type 1, seq no 3, flags 0x1<br>Thu Feb 18 13:33:39 2010 [26189]: session_id 1034326774 (0x3da692f6), Data length 11 (0xb)<br>
Thu Feb 18 13:33:39 2010 [26189]: End header<br>Thu Feb 18 13:33:39 2010 [26189]: type=AUTHEN/CONT<br>Thu Feb 18 13:33:39 2010 [26189]: user_msg_len 6 (0x6), user_data_len 0 (0x0)<br>Thu Feb 18 13:33:39 2010 [26189]: flags=0x0<br>
Thu Feb 18 13:33:39 2010 [26189]: User msg:<br>Thu Feb 18 13:33:39 2010 [26189]: <b style="color: rgb(255, 0, 0);">testuser</b> <b><span style="color: rgb(255, 0, 0);"><-- Input my username</span></b><br>Thu Feb 18 13:33:39 2010 [26189]: User data:<br>
Thu Feb 18 13:33:39 2010 [26189]: End packet<br>Thu Feb 18 13:33:39 2010 [26189]: choose_authen chose default_fn<br>Thu Feb 18 13:33:39 2010 [26189]: Calling authentication function<br>Thu Feb 18 13:33:40 2010 [26189]: Writing AUTHEN/GETPASS size=28<br>
Thu Feb 18 13:33:40 2010 [26189]: PACKET: key=mykey<br>Thu Feb 18 13:33:40 2010 [26189]: version 192 (0xc0), type 1, seq no 4, flags 0x1<br>Thu Feb 18 13:33:40 2010 [26189]: session_id 1034326774 (0x3da692f6), Data length 16 (0x10)<br>
Thu Feb 18 13:33:40 2010 [26189]: End header<br>Thu Feb 18 13:33:40 2010 [26189]: type=AUTHEN status=5 (AUTHEN/GETPASS) flags=0x1<br>Thu Feb 18 13:33:40 2010 [26189]: msg_len=10, data_len=0<br>Thu Feb 18 13:33:40 2010 [26189]: msg:<br>
Thu Feb 18 13:33:40 2010 [26189]: Password:<br>Thu Feb 18 13:33:40 2010 [26189]: data:<br>Thu Feb 18 13:33:40 2010 [26189]: End packet<br>Thu Feb 18 13:33:40 2010 [26189]: Waiting for packet<br>Thu Feb 18 13:33:46 2010 [26189]: Read AUTHEN/CONT size=28<br>
Thu Feb 18 13:33:46 2010 [26189]: PACKET: key=mykey<br>Thu Feb 18 13:33:46 2010 [26189]: version 192 (0xc0), type 1, seq no 5, flags 0x1<br>Thu Feb 18 13:33:46 2010 [26189]: session_id 1034326774 (0x3da692f6), Data length 16 (0x10)<br>
Thu Feb 18 13:33:46 2010 [26189]: End header<br>Thu Feb 18 13:33:46 2010 [26189]: type=AUTHEN/CONT<br>Thu Feb 18 13:33:46 2010 [26189]: user_msg_len 11 (0xb), user_data_len 0 (0x0)<br>Thu Feb 18 13:33:46 2010 [26189]: flags=0x0<br>
Thu Feb 18 13:33:46 2010 [26189]: User msg:<br>Thu Feb 18 13:33:46 2010 [26189]: <b style="color: rgb(255, 0, 0);">mypassword</b><span style="color: rgb(255, 0, 0);"> </span><b><span style="color: rgb(255, 0, 0);"><-- Input my password</span></b><br>
Thu Feb 18 13:33:46 2010 [26189]: User data:<br>Thu Feb 18 13:33:46 2010 [26189]: End packet<br>Thu Feb 18 13:33:46 2010 [26189]: <b style="color: rgb(255, 0, 0);">login query for 'testuser' tty1 from 10.1.69.89 accepted</b> <b><span style="color: rgb(255, 0, 0);"><-- Succeeded</span></b><br>
Thu Feb 18 13:33:46 2010 [26189]: Writing AUTHEN/SUCCEED size=18<br>Thu Feb 18 13:33:46 2010 [26189]: PACKET: key=mykey<br>Thu Feb 18 13:33:46 2010 [26189]: version 192 (0xc0), type 1, seq no 6, flags 0x1<br>Thu Feb 18 13:33:46 2010 [26189]: session_id 1034326774 (0x3da692f6), Data length 6 (0x6)<br>
Thu Feb 18 13:33:46 2010 [26189]: End header<br>Thu Feb 18 13:33:46 2010 [26189]: type=AUTHEN status=1 (AUTHEN/SUCCEED) flags=0x0<br>Thu Feb 18 13:33:46 2010 [26189]: msg_len=0, data_len=0<br>Thu Feb 18 13:33:46 2010 [26189]: msg:<br>
Thu Feb 18 13:33:46 2010 [26189]: data:<br>Thu Feb 18 13:33:46 2010 [26189]: End packet<br>Thu Feb 18 13:33:46 2010 [26189]: <a href="http://10.1.2.1">10.1.2.1</a>: disconnect<br><br><br>Unsuccessful login:<br>Thu Feb 18 13:42:14 2010 [27114]: Reading config<br>
Thu Feb 18 13:42:14 2010 [27114]: Version F4.0.4.19 Initialized 1<br>Thu Feb 18 13:42:14 2010 [27114]: tac_plus server F4.0.4.19 starting<br>Thu Feb 18 13:42:14 2010 [27115]: <b style="color: rgb(255, 0, 0);">Backgrounded</b><br>
Thu Feb 18 13:42:14 2010 [27116]: uid=505 euid=505 gid=505 egid=505 s=0<br>Thu Feb 18 13:42:17 2010 [27116]: session request from 10.1.2.1 sock=2<br>Thu Feb 18 13:42:17 2010 [27117]: connect from 10.1.2.1 [10.1.2.1]<br>Thu Feb 18 13:42:17 2010 [27117]: Waiting for packet<br>
Thu Feb 18 13:42:17 2010 [27117]: Read AUTHEN/START size=35<br>Thu Feb 18 13:42:17 2010 [27117]: validation request from 10.1.2.1<br>Thu Feb 18 13:42:17 2010 [27117]: PACKET: key=mykey<br>Thu Feb 18 13:42:17 2010 [27117]: version 192 (0xc0), type 1, seq no 1, flags 0x1<br>
Thu Feb 18 13:42:17 2010 [27117]: session_id 3918696952 (0xe99291f8), Data length 23 (0x17)<br>Thu Feb 18 13:42:17 2010 [27117]: End header<br>Thu Feb 18 13:42:17 2010 [27117]: type=AUTHEN/START, priv_lvl = 1<br>Thu Feb 18 13:42:17 2010 [27117]: action=login<br>
Thu Feb 18 13:42:17 2010 [27117]: authen_type=ascii<br>Thu Feb 18 13:42:17 2010 [27117]: service=login<br>Thu Feb 18 13:42:17 2010 [27117]: user_len=0 port_len=4 (0x4), rem_addr_len=11 (0xb)<br>Thu Feb 18 13:42:17 2010 [27117]: data_len=0<br>
Thu Feb 18 13:42:17 2010 [27117]: User:<br>Thu Feb 18 13:42:17 2010 [27117]: port:<br>Thu Feb 18 13:42:17 2010 [27117]: tty1<br>Thu Feb 18 13:42:17 2010 [27117]: rem_addr:<br>Thu Feb 18 13:42:17 2010 [27117]: 10.1.10.1<br>
Thu Feb 18 13:42:17 2010 [27117]: data:<br>Thu Feb 18 13:42:17 2010 [27117]: End packet<br>Thu Feb 18 13:42:17 2010 [27117]: Authen Start request<br>Thu Feb 18 13:42:17 2010 [27117]: choose_authen returns 1<br>Thu Feb 18 13:42:17 2010 [27117]: Writing AUTHEN/GETUSER size=55<br>
Thu Feb 18 13:42:17 2010 [27117]: PACKET: key=mykey<br>Thu Feb 18 13:42:17 2010 [27117]: version 192 (0xc0), type 1, seq no 2, flags 0x1<br>Thu Feb 18 13:42:17 2010 [27117]: session_id 3918696952 (0xe99291f8), Data length 43 (0x2b)<br>
Thu Feb 18 13:42:17 2010 [27117]: End header<br>Thu Feb 18 13:42:17 2010 [27117]: type=AUTHEN status=4 (AUTHEN/GETUSER) flags=0x0<br>Thu Feb 18 13:42:17 2010 [27117]: msg_len=37, data_len=0<br>Thu Feb 18 13:42:17 2010 [27117]: msg:<br>
Thu Feb 18 13:42:17 2010 [27117]: 0xa User Access Verification 0xa<br>Thu Feb 18 13:42:17 2010 [27117]: data:<br>Thu Feb 18 13:42:17 2010 [27117]: End packet<br>Thu Feb 18 13:42:17 2010 [27117]: Waiting for packet<br>Thu Feb 18 13:42:18 2010 [27117]: Read AUTHEN/CONT size=23<br>
Thu Feb 18 13:42:18 2010 [27117]: PACKET: key=mykey<br>Thu Feb 18 13:42:18 2010 [27117]: version 192 (0xc0), type 1, seq no 3, flags 0x1<br>Thu Feb 18 13:42:18 2010 [27117]: session_id 3918696952 (0xe99291f8), Data length 11 (0xb)<br>
Thu Feb 18 13:42:18 2010 [27117]: End header<br>Thu Feb 18 13:42:18 2010 [27117]: type=AUTHEN/CONT<br>Thu Feb 18 13:42:18 2010 [27117]: user_msg_len 6 (0x6), user_data_len 0 (0x0)<br>Thu Feb 18 13:42:18 2010 [27117]: flags=0x0<br>
Thu Feb 18 13:42:18 2010 [27117]: User msg:<br>Thu Feb 18 13:42:18 2010 [27117]: <b><span style="color: rgb(255, 0, 0);">testuser</span></b> <b><span style="color: rgb(255, 0, 0);"><-- Input my username</span></b><br>
Thu Feb 18 13:42:18 2010 [27117]: User data:<br>Thu Feb 18 13:42:18 2010 [27117]: End packet<br>Thu Feb 18 13:42:18 2010 [27117]: choose_authen chose default_fn<br>Thu Feb 18 13:42:18 2010 [27117]: Calling authentication function<br>
Thu Feb 18 13:42:18 2010 [27117]: Writing AUTHEN/GETPASS size=28<br>Thu Feb 18 13:42:18 2010 [27117]: PACKET: key=mykey<br>Thu Feb 18 13:42:18 2010 [27117]: version 192 (0xc0), type 1, seq no 4, flags 0x1<br>Thu Feb 18 13:42:18 2010 [27117]: session_id 3918696952 (0xe99291f8), Data length 16 (0x10)<br>
Thu Feb 18 13:42:18 2010 [27117]: End header<br>Thu Feb 18 13:42:18 2010 [27117]: type=AUTHEN status=5 (AUTHEN/GETPASS) flags=0x1<br>Thu Feb 18 13:42:18 2010 [27117]: msg_len=10, data_len=0<br>Thu Feb 18 13:42:18 2010 [27117]: msg:<br>
Thu Feb 18 13:42:18 2010 [27117]: Password:<br>Thu Feb 18 13:42:18 2010 [27117]: data:<br>Thu Feb 18 13:42:18 2010 [27117]: End packet<br>Thu Feb 18 13:42:18 2010 [27117]: Waiting for packet<br>Thu Feb 18 13:42:22 2010 [27117]: Read AUTHEN/CONT size=28<br>
Thu Feb 18 13:42:22 2010 [27117]: PACKET: key=mykey<br>Thu Feb 18 13:42:22 2010 [27117]: version 192 (0xc0), type 1, seq no 5, flags 0x1<br>Thu Feb 18 13:42:22 2010 [27117]: session_id 3918696952 (0xe99291f8), Data length 16 (0x10)<br>
Thu Feb 18 13:42:22 2010 [27117]: End header<br>Thu Feb 18 13:42:22 2010 [27117]: type=AUTHEN/CONT<br>Thu Feb 18 13:42:22 2010 [27117]: user_msg_len 11 (0xb), user_data_len 0 (0x0)<br>Thu Feb 18 13:42:22 2010 [27117]: flags=0x0<br>
Thu Feb 18 13:42:22 2010 [27117]: User msg:<br>Thu Feb 18 13:42:22 2010 [27117]: <b style="color: rgb(255, 0, 0);">mypassword</b><span style="color: rgb(255, 0, 0);"> </span><b><span style="color: rgb(255, 0, 0);"><-- Input my password</span></b><br>
Thu Feb 18 13:42:22 2010 [27117]: User data:<br>Thu Feb 18 13:42:22 2010 [27117]: End packet<br>Thu Feb 18 13:42:22 2010 [27117]: <b style="color: rgb(255, 0, 0);">login query for 'hxmeng' tty1 from 10.1.2.1 accepted</b> <b><span style="color: rgb(255, 0, 0);"><-- Succeeded</span></b><br>
Thu Feb 18 13:42:22 2010 [27117]: Writing AUTHEN/SUCCEED size=18<br>Thu Feb 18 13:42:22 2010 [27117]: PACKET: key=mykey<br>Thu Feb 18 13:42:22 2010 [27117]: version 192 (0xc0), type 1, seq no 6, flags 0x1<br>Thu Feb 18 13:42:22 2010 [27117]: session_id 3918696952 (0xe99291f8), Data length 6 (0x6)<br>
Thu Feb 18 13:42:22 2010 [27117]: End header<br>Thu Feb 18 13:42:22 2010 [27117]: type=AUTHEN status=1 (AUTHEN/SUCCEED) flags=0x0<br>Thu Feb 18 13:42:22 2010 [27117]: msg_len=0, data_len=0<br>Thu Feb 18 13:42:22 2010 [27117]: msg:<br>
Thu Feb 18 13:42:22 2010 [27117]: data:<br>Thu Feb 18 13:42:22 2010 [27117]: End packet<br>Thu Feb 18 13:42:22 2010 [27117]: <a href="http://10.1.2.1">10.1.2.1</a>: disconnect<br><b style="color: rgb(255, 0, 0);"><------ This above is the same as successful one, from here, I got another "Password" Prompt asking for password</b>. <b style="color: rgb(255, 0, 0);">Even I input my correct password for the 2nd time, it just doesn't allow me in</b>.<b style="color: rgb(255, 0, 0);"> I also tried wrong password for the first time password input on purpose, I did get rejected message like "login query for 'testuser' tty1 from 10.1.2.1 rejected"</b><br>
Thu Feb 18 13:42:28 2010 [27116]: session request from 10.1.2.1 sock=2<br>Thu Feb 18 13:42:28 2010 [27135]: connect from 10.1.2.1 [10.1.2.1]<br>Thu Feb 18 13:42:28 2010 [27135]: Waiting for packet<br>Thu Feb 18 13:42:28 2010 [27135]: Read AUTHEN/START size=35<br>
Thu Feb 18 13:42:28 2010 [27135]: validation request from 10.1.2.1<br>Thu Feb 18 13:42:28 2010 [27135]: PACKET: key=mykey<br>Thu Feb 18 13:42:28 2010 [27135]: version 192 (0xc0), type 1, seq no 1, flags 0x1<br>Thu Feb 18 13:42:28 2010 [27135]: session_id 3154815253 (0xbc0aa915), Data length 23 (0x17)<br>
Thu Feb 18 13:42:28 2010 [27135]: End header<br>Thu Feb 18 13:42:28 2010 [27135]: type=AUTHEN/START, priv_lvl = 1<br>Thu Feb 18 13:42:28 2010 [27135]: action=login<br>Thu Feb 18 13:42:28 2010 [27135]: authen_type=ascii<br>
Thu Feb 18 13:42:28 2010 [27135]: service=login<br>Thu Feb 18 13:42:28 2010 [27135]: user_len=0 port_len=4 (0x4), rem_addr_len=11 (0xb)<br>Thu Feb 18 13:42:28 2010 [27135]: data_len=0<br>Thu Feb 18 13:42:28 2010 [27135]: User:<br>
Thu Feb 18 13:42:28 2010 [27135]: port:<br>Thu Feb 18 13:42:28 2010 [27135]: tty1<br>Thu Feb 18 13:42:28 2010 [27135]: rem_addr:<br>Thu Feb 18 13:42:28 2010 [27135]: 10.1.10.1<br>Thu Feb 18 13:42:28 2010 [27135]: data:<br>
Thu Feb 18 13:42:28 2010 [27135]: End packet<br>Thu Feb 18 13:42:28 2010 [27135]: Authen Start request<br>Thu Feb 18 13:42:28 2010 [27135]: choose_authen returns 1<br>Thu Feb 18 13:42:28 2010 [27135]: Writing AUTHEN/GETUSER size=55<br>
Thu Feb 18 13:42:28 2010 [27135]: PACKET: key=mykey<br>Thu Feb 18 13:42:28 2010 [27135]: version 192 (0xc0), type 1, seq no 2, flags 0x1<br>Thu Feb 18 13:42:28 2010 [27135]: session_id 3154815253 (0xbc0aa915), Data length 43 (0x2b)<br>
Thu Feb 18 13:42:28 2010 [27135]: End header<br>Thu Feb 18 13:42:28 2010 [27135]: type=AUTHEN status=4 (AUTHEN/GETUSER) flags=0x0<br>Thu Feb 18 13:42:28 2010 [27135]: msg_len=37, data_len=0<br>Thu Feb 18 13:42:28 2010 [27135]: msg:<br>
Thu Feb 18 13:42:28 2010 [27135]: 0xa User Access Verification 0xa<br>Thu Feb 18 13:42:28 2010 [27135]: data:<br>Thu Feb 18 13:42:28 2010 [27135]: End packet<br>Thu Feb 18 13:42:28 2010 [27135]: Waiting for packet<br><br>
So weird thing is why it accepted my login but ask for password again. Background and foreground can give this difference. It's really weird. <br><br>Thanks John for the help.<br><br>Lou<br><br><br><br><div class="gmail_quote">
On Thu, Feb 18, 2010 at 1:21 PM, john heasley <span dir="ltr"><<a href="mailto:heas@shrubbery.net">heas@shrubbery.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Thu, Feb 18, 2010 at 12:02:20PM -0600, Hailu Meng:<br>
<div><div></div><div class="h5">> Thanks John. I tried to debug aaa information in my switch. I deleted the<br>
> authorization and accounting setup in my switch trying to make thing simple.<br>
> Here is my current setup in swtich:<br>
> aaa new-model<br>
> aaa authentication login default group tacacs+ line<br>
> aaa authentication enable default group tacacs+ enable<br>
><br>
> Very simple one.<br>
><br>
> And I compared the successful and unsuccessful login debug here. I also<br>
> checked my Active Directory server, the events there are totally same for<br>
> successful and unsuccessful login.<br>
><br>
> Successful login:<br>
> Feb 18 11:21:30.813 CST: tty1 AAA/DISC: 1/"User Request"<br>
> Feb 18 11:21:30.817 CST: tty1 AAA/DISC/EXT: 1020/"User Request"<br>
> Feb 18 11:21:30.817 CST: tty1 AAA/DISC: 9/"NAS Error"<br>
> Feb 18 11:21:30.817 CST: tty1 AAA/DISC/EXT: 1002/"Unknown"<br>
> Feb 18 11:21:30.817 CST: AAA/MEMORY: free_user (0x80CF5BDC) user='' ruser=''<br>
> port='tty1' rem_addr='10.1.10.1' authen_type=ASCII service=LOGIN priv=1<br>
><br>
> Unsuccessful login:<br>
> Feb 18 11:47:45.392 CST: tty1 AAA/DISC: 1/"User Request"<br>
> Feb 18 11:47:45.392 CST: tty1 AAA/DISC/EXT: 1020/"User Request"<br>
> Feb 18 11:47:45.392 CST: tty1 AAA/DISC: 9/"NAS Error"<br>
> Feb 18 11:47:45.396 CST: tty1 AAA/DISC/EXT: 1002/"Unknown"<br>
> Feb 18 11:47:45.396 CST: AAA/MEMORY: free_user (0x80CEAC74) user='testuser'<br>
> ruser='' port='tty1' rem_addr='10.1.10.1' authen_type=ASCII service=LOGIN<br>
> priv=1<br>
> Feb 18 11:48:00.248 CST: AAA: parse name=tty1 idb type=-1 tty=-1<br>
> Feb 18 11:48:00.248 CST: AAA: name=tty1 flags=0x11 type=5 shelf=0 slot=0<br>
> adapter=0 port=1 channel=0<br>
> Feb 18 11:48:00.248 CST: AAA/MEMORY: create_user (0x80D7FC00) user=''<br>
> ruser='' port='tty1' rem_addr='10.1.10.1' authen_type=ASCII service=LOGIN<br>
> priv=1<br>
><br>
><br>
> The difference here is when the successful login happens, the "user" name is<br>
> empty but unsuccessful login has real user name "testuser" value. This<br>
> sounds weird to me. Total opposite to my thinking. I did several<br>
> comparisons. All same log.<br>
<br>
</div></div>what was in the tac_plus packet log (-d 256) ?<br>
<div><div></div><div class="h5"><br>
> I just wonder why background and foreground has this difference. In<br>
> addition, not sure "NAS error" is a problem or not. It exists in successful<br>
> login too.<br>
><br>
> Thanks for your help. Really appreciated.<br>
><br>
> Lou<br>
><br>
> On Thu, Feb 18, 2010 at 12:16 AM, john heasley <<a href="mailto:heas@shrubbery.net">heas@shrubbery.net</a>> wrote:<br>
><br>
> > Wed, Feb 17, 2010 at 04:16:04PM -0600, Hailu Meng:<br>
> > > Hi All,<br>
> > ><br>
> > > I have been running tac_plus in my redhat for couple of months. And I<br>
> > always<br>
> > > run it as "tac_plus -C /etc/tac_plus.conf -t -d 120 -g" at frontground.<br>
> > > Right now I try to setup a service for tac_plus and run as a daemon. But<br>
> > > when I tried to run<br>
> > > "tac_plus -C /etc/tac_plus.conf -t -d 120", I can't login my cisco<br>
> > switch.<br>
> > > It still ask me for username. but it won't accept my password. The log<br>
> > > shows:<br>
> > ><br>
> > > Wed Feb 17 15:44:44 2010 [25229]: Reading config<br>
> > > Wed Feb 17 15:44:44 2010 [25229]: Version F4.0.4.19 Initialized 1<br>
> > > Wed Feb 17 15:44:44 2010 [25229]: tac_plus server F4.0.4.19 starting<br>
> > > Wed Feb 17 15:44:44 2010 [25230]: Backgrounded<br>
> > > Wed Feb 17 15:44:44 2010 [25231]: uid=505 euid=505 gid=505 egid=505 s=0<br>
> > > Wed Feb 17 15:44:54 2010 [25231]: session.peerip is 10.1.1.10<br>
> > > Wed Feb 17 15:44:54 2010 [25234]: connect from 10.1.1.10 [10.1.1.10]<br>
> > > Wed Feb 17 15:44:55 2010 [25234]: pam_verify username<br>
> > > Wed Feb 17 15:44:55 2010 [25234]: pam_tacacs received 1 pam_messages<br>
> > > Wed Feb 17 15:44:55 2010 [25234]: Error 10.1.1.10 tty1:<br>
> > PAM_PROMPT_ECHO_OFF<br>
> > > Wed Feb 17 15:44:59 2010 [25234]: pam_verify returns 1<br>
> > > Wed Feb 17 15:44:59 2010 [25234]: Password has not expired <no expiry<br>
> > date<br>
> > > set><br>
> > > Wed Feb 17 15:44:59 2010 [25234]: login query for 'username' tty1 from<br>
> > > 10.1.1.10 accepted<br>
> > > Wed Feb 17 15:45:05 2010 [25231]: session.peerip is 10.1.1.10<br>
> > > Wed Feb 17 15:45:05 2010 [25238]: connect from 10.1.1.10 [10.1.1.10]<br>
> > ><br>
> > > After the above log, the switch pop up "Password" again asking me for the<br>
> > > password. I compared the normal log. It is same with the above. Wondering<br>
> > > why it already accepted but still keep asking me the password.<br>
> > ><br>
> > > Does anyone have idea about this?<br>
> ><br>
> > you might try -d 256 and verify that the config on the device is correct.<br>
> > also inspect the syslog for messages from the device.<br>
> ><br>
</div></div></blockquote></div><br>