Having a little trouble creating an admin user in the Nexus9k (nx-os 9.2). When I type the following: username newadminname password 0 <unencrypted string> role network-admin
I end up with two different problems:
The first problem is that the password doesn't actually get set. When I do a 'sh run |grep username' it shows the new admin user but the password is just a "!". If I use an encrypted password string (password 5 <encrypted string>) it accepts/sets the password. If I then login as that new user and do a 'change-password' it prompts me to set the new PW and seems to work but actually doesn't change the pw. I still have to login using the original password I specified in the first command (with the encrypted version, clear-text entry never works)
The second problem is that it always assigns the user to the network-operators role. Nothing I do changes it to network-admin role. If I type: sh user-account newadminname it shows only the network-operator role. If I create a new role that has all privileges: role name test; rule 1 permit read-write and then assign the user to the role, it works and show user-account shows both netop and test roles. However, if I try to add the new user to the network-admin role it accepts the command but never shows that the user is a member of the role.
Anyone? It's so desperate that I've actually resorted to <gasp> reading the manuals. Will the madness never end?
I end up with two different problems:
The first problem is that the password doesn't actually get set. When I do a 'sh run |grep username' it shows the new admin user but the password is just a "!". If I use an encrypted password string (password 5 <encrypted string>) it accepts/sets the password. If I then login as that new user and do a 'change-password' it prompts me to set the new PW and seems to work but actually doesn't change the pw. I still have to login using the original password I specified in the first command (with the encrypted version, clear-text entry never works)
The second problem is that it always assigns the user to the network-operators role. Nothing I do changes it to network-admin role. If I type: sh user-account newadminname it shows only the network-operator role. If I create a new role that has all privileges: role name test; rule 1 permit read-write and then assign the user to the role, it works and show user-account shows both netop and test roles. However, if I try to add the new user to the network-admin role it accepts the command but never shows that the user is a member of the role.
Anyone? It's so desperate that I've actually resorted to <gasp> reading the manuals. Will the madness never end?
