Troubleshooting Rbac; Local Users Have More Access Permissions Than Intended; Login Attempts By Radius Users Always Fail - HP 5130 EI series Configuration Manual

2. Verify that you can obtain the network-admin user role:
# Use the super password to obtain the network-admin user role. When the system prompts for a
username and password, enter the username test@bbb and password 123456.
<Switch> super network-admin
Username: test@bbb
Password:
The following output shows that you have obtained the network-admin user role.
User privilege role is network-admin, and only those commands that authorized to the
role can be used.
# If the ACS server does not respond, enter the local authentication password abcdef654321 at
the prompt.
Invalid configuration or no response from the authentication server.
Change authentication mode to local.
Password:
User privilege role is network-admin, and only those commands that authorized to the
role can be used.
The output shows that you have obtained the network-admin user role.

Troubleshooting RBAC

This section describes several typical RBAC problems and their solutions.

Local users have more access permissions than intended

Symptom
A local user can use more commands than should be permitted by the assigned user roles.
Analysis
The local user might have been assigned to user roles without your knowledge. For example, the local
user is automatically assigned a default user role when you create the local user.
Solution
To resolve the problem:
Use the display local-user command to examine the local user accounts for undesirable user roles,
1.
and delete them.
2. If the problem persists, contact HP Support.

Login attempts by RADIUS users always fail

Symptom
Attempts by a RADIUS user to log in to the network access device always fail, even though the following
conditions exist:
The network access device and the RADIUS server can communicate with one another.
•
All AAA settings are correct.
•
71