<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><meta http-equiv=Content-Type content="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
        {font-family:Calibri;
        panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
        {margin:0in;
        margin-bottom:.0001pt;
        font-size:11.0pt;
        font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
        {mso-style-priority:99;
        color:blue;
        text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
        {mso-style-priority:99;
        color:purple;
        text-decoration:underline;}
span.EmailStyle17
        {mso-style-type:personal-compose;
        font-family:"Calibri","sans-serif";
        color:windowtext;}
.MsoChpDefault
        {mso-style-type:export-only;
        font-family:"Calibri","sans-serif";}
@page WordSection1
        {size:8.5in 11.0in;
        margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
        {page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal>I’m running into some interesting behavior regarding my Cisco ASA 5520. The device is talking to my TACACS server for authentication just fine. Clogin doesn’t want to finish all the way though. It’s hanging at the enable prompt where all my other devices do not. Here’s the output from the clogin:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>rancid@kc-tacacs:~$ clogin kansascityASA5520<o:p></o:p></p><p class=MsoNormal>kansascityasa5520<o:p></o:p></p><p class=MsoNormal>spawn telnet kansascityasa5520<o:p></o:p></p><p class=MsoNormal>Trying 10.103.9.250...<o:p></o:p></p><p class=MsoNormal>telnet: Unable to connect to remote host: Connection refused<o:p></o:p></p><p class=MsoNormal>spawn ssh -c 3des -x -l rancid kansascityasa5520<o:p></o:p></p><p class=MsoNormal>rancid@kansascityasa5520's password: <o:p></o:p></p><p class=MsoNormal>You are connected to: kansascityASA5520.pop.local <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Type help or '?' for a list of available commands.<o:p></o:p></p><p class=MsoNormal>kansascityASA5520> enable<o:p></o:p></p><p class=MsoNormal>Password: ********<o:p></o:p></p><p class=MsoNormal>Invalid password<o:p></o:p></p><p class=MsoNormal>Password: ********<o:p></o:p></p><p class=MsoNormal>Invalid password<o:p></o:p></p><p class=MsoNormal>Password: ********<o:p></o:p></p><p class=MsoNormal>Invalid password<o:p></o:p></p><p class=MsoNormal>Access denied.<o:p></o:p></p><p class=MsoNormal>kansascityASA5520> <o:p></o:p></p><p class=MsoNormal>Error: Check your Enable passwd<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>kansascityASA5520><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I gets connected just fine then drops to the unprivileged account. <o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>I have tried to add a specific username and password for this device like this:<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>#add user kansascityASA5520* {user}<o:p></o:p></p><p class=MsoNormal>#add password kansascityASA5520* {password} {password}<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>But, that didn’t work either.<o:p></o:p></p><p class=MsoNormal>Any help would be greatly appreciated,<o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>thanks<o:p></o:p></p><p class=MsoNormal style='mso-margin-top-alt:auto'><b><span style='font-size:9.0pt;font-family:"Arial","sans-serif";color:#464540'>Ian Murphy<o:p></o:p></span></b></p><p class=MsoNormal style='mso-margin-top-alt:auto'><b><span style='font-size:12.0pt;font-family:"Arial","sans-serif"'><br><br></span></b><o:p></o:p></p><p class=MsoNormal><o:p> </o:p></p></div><font face="monospace"><br>
<br>
The information contained in this electronic communication, as well as in any attachments, may contain confidential or privileged information and may constitute non-public information, and is intended solely for use by the addressee(s). Any other use, disclosure, dissemination, distribution or copying of this electronic communication is strictly prohibited, may constitute an interference with Populous confidential business relationships and may be unlawful. If you received this communication in error, please notify me immediately and permanently delete the original and any electronic or printed copies of this electronic communication (including any attachments). Populous makes no representation regarding the absence of any virus in any attachment and expressly disclaims any responsibility for any damage suffered from the presence of a virus.</font></body></html>