User Cannot Create Roles; User Cannot Create Other Users With Fabric Manager Or Device Manager - Cisco 9134 - MDS Multilayer Fabric Switch Troubleshooting Manual

Chapter 18 Troubleshooting Users and Roles
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m
After a login attempt, use the show logging logfile | last command to view the most recent messages.
Step 3
You should see messages such as:
2006 Mar
::ffff:161.44.67.125
2006 Mar
2006 Mar
2006 Mar
M for user testUser
2006 Mar
alue (null)
2006 Mar
M success for user testUser
2006 Mar
estFoo by (uid=0)
2006 Mar
4.67.125:testUser:

User Cannot Create Roles

Symptom
Table 18-2 User Cannot Create Roles
Symptom Possible Cause
User cannot create User not assigned network-admin role. Assign network-admin role to the user. See the
roles.

User Cannot Create Other Users With Fabric Manager or Device Manager

Symptom
Table 18-3 User Cannot Create Other Users with Fabric Manager or Device Manager
Symptom Possible Cause
User cannot create User is not logged into Fabric Manager
other users. or Device Manager with a privacy
password.
OL-9285-05
2 22:08:44 v_190 %AUTHPRIV-6-SYSTEM_MSG: START: telnet pid=10654 from=
3 03:08:49 v_190 %AUTHPRIV-7-SYSTEM_MSG: Got user name <testUser>
3 03:08:53 v_190 %AUTHPRIV-7-SYSTEM_MSG: user testUser authenticated
3 03:08:53 v_190 %AUTHPRIV-7-SYSTEM_MSG: PAM login: updating snmpv3 US
3 03:08:53 v_190 %AUTHPRIV-7-SYSTEM_MSG: PAM login: snmpv3 attribute v
3 03:08:53 v_190 %AUTHPRIV-7-SYSTEM_MSG: PAM login: updating snmpv3 US
3 03:08:53 v_190 %AUTH-6-SYSTEM_MSG: (login) session opened for user t
3 03:08:53 v_190 %AAA-6-AAA_ACCOUNTING_MESSAGE: start:/dev/pts/1_161.4
User cannot create roles.
User cannot create other users with Fabric Manager or Device Manager.
Solution
Roles Using Device Manager" section on page 18-8
"Verifying Roles Using the CLI" section on page
Solution
Log into Fabric Manager or Device Manager with a
password and a privacy password. A privacy password is
required to manage users via the GUI.
If you have logged in as a network-admin using
Note
MDS authentication, Device Manager and Fabric
Manager automatically provide the appropriate
encryption for this task, even if you did not specify
a specific privacy password.
Cisco MDS 9000 Family Troubleshooting Guide, Release 3.x
User and Role Issues
"Verifying
or the
18-9.
18-7