Using tacacs

[InDenial]

Hi all,

We ran into a little problem. This is the situation:

In the past (untill now) we never used tacacs on our switches. We have a main system who creates seed files for different network management systems. The input file for rme contained a telnet password. Because this was in the file it errored on it and did not go on checking the other passwords and usernames.

I created a file myself where I put !{[NOVALUE]}! in the colums that needed to be empty and only left the ip-address, community strings and the tacacs information.

The result after importing the file was that it gave an INCORRECT on the tacacs login. Weird since I am able to do a login using that tacacs account from the same machine. I checked if the right information was in the right column and it is right..

After searching the internet I found some info on checking the TacacsPrompt.ini file. This file was ok too.

Did anyone experience this problem too and would you like to share this solution with us?

Thanks

InDenial

InDenial

 

[paynenet]

Have you tried changing one of the devices through the RME GUI and see if entering the info there works!

If it does you can export the RME info and use that as a template for future uploads.

 

[InDenial]

payenet,

I tried that a million times. But the exporting is a good idea. I can check if the export is what I expect it to be. Using it as a template does not work cause the file gets created automaticly by another server and I have no control over that server.

Will post a reply later today.


InDenial

 

[InDenial]

Update:

I did an export and the file looks good. No problems there... I just did an update inventory to see if that works....

The exported devices list contains !{[NOVALUE]}! is this right?

Another thing is that I do not see failed login attempts in the log on the ACS server. Seems as if CW does not do anything.. it just says it does not work. Might this be a bug in CW?

Another thing wich I did not thing would influence it, is that the packages for these components are not installed yet. They are cisco AIR-AP1230B-E-K9 devices.

Anyone have any ideas? Cause I am out of them...

InDenial