adosztal / gns3-containers

Dockerfiles of some containers used in GNS3
GNU General Public License v3.0
10 stars 12 forks source link

Issue when using aaa authorization #2

Closed ghost closed 5 years ago

ghost commented 5 years ago

when authorization configure on cisco router, cannot enable device:

root@AAA-1:~# telnet 10.0.0.1
Trying 10.0.0.1...
Connected to 10.0.0.1.
Escape character is '^]'.

User Access Verification

Username: gns3
Password: 

R1>en
% Error in authentication.

R1>

Debug from device:

*Apr 20 21:31:36.305: TPLUS: Failed to decode unknown AV priv_lvl=15 - FAIL

Looks like an issue in /etc/tacacs+/tac_plus.conf:

root@AAA-1:~# grep priv /etc/tacacs+/tac_plus.conf 
        priv_lvl = 15
        priv-lvl = 15
root@AAA-1:~#

Change priv_lvl to priv-lvl in etc/tacacs+/tac_plus.conf:

root@AAA-1:~# sed -i s/priv_lvl/priv-lvl/g /etc/tacacs+/tac_plus.conf 
root@AAA-1:~# /etc/init.d/tacacs_plus restart
 * Restarting TACACS+ authentication daemon tacacs+                                             [ OK ] 
root@AAA-1:~# telnet 10.0.0.1
Trying 10.0.0.1...
Connected to 10.0.0.1.
Escape character is '^]'.

User Access Verification

Username: gns3
Password: 

R1#
adosztal commented 5 years ago

Thank you! I pushed the fix, the container will be built soon.

adosztal commented 5 years ago

New image is available on Docker Hub. Could you test it?

ghost commented 5 years ago

I tried to install it from gns3 from available and same (private_lvl) Downloaded from gns3 marketplace, same thing.

Maybe they have to sync…or there is another way for me to get it in there (gns3) that I didn’t think about.

On May 27, 2019, at 2:32 PM, Andras Dosztal notifications@github.com wrote:

New image is available on Docker Hub. Could you test it?

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/adosztal/gns3-containers/issues/2?email_source=notifications&email_token=AKQYWVOFCOCI2F7KRZ36ZTDPXQSMZA5CNFSM4HPWUZK2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODWKKSUI#issuecomment-496281937, or mute the thread https://github.com/notifications/unsubscribe-auth/AKQYWVMLS2JYOR3FUINHIGTPXQSMZANCNFSM4HPWUZKQ.

adosztal commented 5 years ago

Container image update is a missing feature in GNS3 (but the guys are working on it). You should remove the image by entering docker rmi adosztal/aaa:latest where you run the containers (GNS3 VM, your local box, or a remote GNS3 server), then import the appliance again.

ghost commented 5 years ago

Works like a charm.

Thanks.

On May 28, 2019, at 3:59 AM, Andras Dosztal notifications@github.com wrote:

Container image update is a missing feature in GNS3 (but the guys are working on it). You should remove the image by entering docker rmi adosztal/aaa:latest where you run the containers (GNS3 VM, your local box, or a remote GNS3 server), then import the appliance again.

— You are receiving this because you authored the thread. Reply to this email directly, view it on GitHub https://github.com/adosztal/gns3-containers/issues/2?email_source=notifications&email_token=AKQYWVOBNMFW6Z34LLIQAS3PXTQ7PA5CNFSM4HPWUZK2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGODWLJLZQ#issuecomment-496408038, or mute the thread https://github.com/notifications/unsubscribe-auth/AKQYWVPGLA7AYQTMJVBQEV3PXTQ7PANCNFSM4HPWUZKQ.