Hi, Are you using Radius for operator authentication? Have you tried TACACS+?
Try the free TACACS+ for Windows (if you are a Windows user) from www.tacacs.net. Regards Date: Tue, 10 May 2011 06:20:25 -0700 (PDT) From: teklay gebremichael <[email protected]> To: cisco forum <[email protected]> Subject: [c-nsp] authentication attempt using RADIUS server fails Message-ID: <[email protected]> Content-Type: text/plain; charset=utf-8 hello, I have installed free Radius server for authentication. i have also configured the Radius server to use a database for auth. from the localhost running radrest works fine. and for testing purpose i configured a Cisco 2950 switch to use radius server for username and password to login. at the beginning it authenticated successfully. but later the switch started to reject authentication even when i try to reconfigure with the same commands. when i run radiusd -X from the radius server the following error was found. ................ ++[pap] returns updated Found Auth-Type = PAP # Executing group from file /usr/local/etc/raddb/sites-enabled/default +- entering group PAP {...} [pap] login attempt with password "??eV???$N?E???" [pap] Using CRYPT password "ju9ubTh7VCKmw" [pap] Passwords don't match ++[pap] returns reject Failed to authenticate the user. WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS! Using Post-Auth-Type Reject ------------------------------ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
