I whole heartedly second that suggestion.
On May 10, 2011, at 5:50 PM, Duleep Pillai wrote: > > > Hi, > Are you using Radius for operator authentication? Have you tried TACACS+? > > Try the free TACACS+ for Windows (if you are a Windows user) from > www.tacacs.net. > > Regards > > > Date: Tue, 10 May 2011 06:20:25 -0700 (PDT) > From: teklay gebremichael <[email protected]> > To: cisco forum <[email protected]> > Subject: [c-nsp] authentication attempt using RADIUS server fails > Message-ID: <[email protected]> > Content-Type: text/plain; charset=utf-8 > > hello, > > I have installed free Radius server for authentication. i have also > configured > the Radius server to use a database for auth. from the localhost running > radrest > works fine. and for testing purpose i configured a Cisco 2950 switch to use > radius server for username and password to login. at the beginning it > authenticated successfully. but later the switch started to reject > authentication even when i try to reconfigure with the same commands. when i > run radiusd -X from the radius server the following error was found. > ................ > ++[pap] returns updated > Found Auth-Type = PAP > # Executing group from file /usr/local/etc/raddb/sites-enabled/default > +- entering group PAP {...} > [pap] login attempt with password "??eV???$N?E???" > [pap] Using CRYPT password "ju9ubTh7VCKmw" > [pap] Passwords don't match > ++[pap] returns reject > Failed to authenticate the user. > WARNING: Unprintable characters in the password. Double-check the > shared > secret on the server and the NAS! > Using Post-Auth-Type Reject > > ------------------------------ > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
