• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 921
  • Last Modified:

Radius Authorization Error

Hi,

 we want to use a RSA/Radius Server to send commands to the router. Now we have an old one and on this router we get the error message RADIUS: no appropriate authorization type for user.
Knows somebody what this error message mean ?

Debug Radius

00:25:41: RADIUS: ustruct sharecount=1
00:25:41: RADIUS: Initial Transmit tty10 id 13 10.9.15.164:1645, Access-Request, len 78
00:25:41:         Attribute 4 6 0A090FFA
00:25:41:         Attribute 5 6 0000000A
00:25:41:         Attribute 61 6 00000005
00:25:41:         Attribute 1 11 32313034
00:25:41:         Attribute 31 11 31302E39
00:25:41:         Attribute 2 18 BE011A6F
00:25:43: RADIUS: Received from id 13 10.9.15.164:1645, Access-Accept, len 132
00:25:43:         Attribute 25 61 53425232
00:25:43:         Attribute 26 51 00000009012D7368
00:25:43: RADIUS: saved authorization data for user A803C at 26860C
00:25:43: RADIUS: cisco AVPair "shell:autocmd=access-enable host timeout 5"
00:25:43: RADIUS: no appropriate authorization type for user

The same configuration on different Cisco Routers 2800,2900 works fine.

Thanks for help.

Tom
0
bergertb
Asked:
bergertb
1 Solution
 
arnoldCommented:
Does this router have the same IOS version and related components as the ones that work?
Double check the configuration on the working and this one dealing whether the user loging through radius would have the right to exec the access-enable.

http://www.cisco.com/en/US/tech/tk583/tk822/technologies_tech_note09186a0080094524.shtml

0
 
bergertbAuthor Commented:
The router has a old IOS, but with your tipp i found the solution.

We send a command to the router and there the attribute Service-Type: Administrative was missing.
After adding the attribute the command yould be executed on the router.
0
 
Ernie BeekCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Rewarding opportunities for women in IT

Across the nation, technology jobs are vacant because there aren’t enough qualified professionals to fill them. With a degree from WGU, you can get the credentials it takes to become an in-demand IT professional. Plus, WGU’s IT programs include industry certifications.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now