topic RE: Enabled LDAP authentication and now I'm locked out in ExtremeSwitching (EXOS/Switch Engine)

Enabled LDAP authentication and now I'm locked out

Tom_Taylor — Fri, 17 Jul 2015 20:17:00 GMT

I thought I was being smart by enabling LDAP authentication, which works, however I don't have enough privileges to do anything on the switch and now for some reason I can't auth locally either.

Is there an equivalent of SU that I'm missing ?

ex.x450.chi.a.1 > unconfigure switch

This user does not have permissions for this command.

RE: Enabled LDAP authentication and now I'm locked out

Patrick_Voss — Fri, 17 Jul 2015 20:33:00 GMT

If the switch loses connectivity to the LDAP server it should revert back to the local users. This is assuming the LDAP authentication is being done on the server.

RE: Enabled LDAP authentication and now I'm locked out

Drew_C — Fri, 17 Jul 2015 20:52:00 GMT

Hi Tom,
When you configured your RADIUS server, did you build a profile to allow Admin access?
Take a look at this thread for some more information.

Also this GTAC Knowledge article may have some useful pointers, namely this:

On the radius server a normal user is needed for User access. If the user needs admin rights on the switch the following needs to be added to the radius user. Service-Type = Administrative-User

RE: Enabled LDAP authentication and now I'm locked out

Tom_Taylor — Fri, 17 Jul 2015 20:52:00 GMT

Aha, that did the trick. Thank you!

RE: Enabled LDAP authentication and now I'm locked out

Drew_C — Fri, 17 Jul 2015 20:52:00 GMT

Great! Glad to help!

RE: Enabled LDAP authentication and now I'm locked out

Alexandr_P — Mon, 20 Jul 2015 10:56:00 GMT

Hi, all!

Also had an issue with some old RADIUS servers, that have to tipe commands (in RADIUS-server) accepted to perform in EXOS.

Thank you!