[tac_plus] Odd issue with NXOS + do_auth

John Fraizer john at op-sec.us
Tue Oct 6 23:56:42 UTC 2015


I'm seeing strangeness with NXOS using tac_plus + doauth.

If a user connects via SSH, everything works perfectly.
If a user connects via the console, they can authenticate but, the NXOS
apparently isn't sending the username when it requests the shell and I get
this in the logs:

2015-10-06 16:54:23,901 [CRITICAL]: Username not provided. Argument
-u/--username is required!

When I do a show priv, I get level -1 and feature privilege: Disabled.
It shows the same when connected via SSH.

Does anyone have any ideas about what might be causing this and how I might
remedy the issue?


--
John Fraizer
LinkedIn profile: http://www.linkedin.com/in/johnfraizer/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20151006/ba1ff567/attachment.html>


More information about the tac_plus mailing list