Guest

Preview Tool

Cisco Bug: CSCvu28811 - ME :Invalid Admin User Authentication Syslog message

Last Modified

Aug 26, 2020

Products (1)

  • Cisco 5500 Series Wireless Controllers

Known Affected Releases

8.8(120.0)

Description (partial)

Symptom:
-Customer Symptoms:
When 3 users are logged into the WLC CLI (x.x.x.x, y.y.y.y, z.z.z.z)

(Cisco Controller) >show loginsession



ID  User Name      Login Type  Connection From                                Idle Time     Session Time

-- --------------- ----------  ---------------------------------------------  ------------  ------------

00 <admin_username>  Ssh         x.x.x.x                                  00:01:03      00:01:13

01 <admin_username>  Ssh         y.y.y.y                                  00:00:00      00:15:19

02 <admin_username>  Ssh         x.x.x.x                                  00:00:01      00:00:13


Syslogs when user with IP z.z.z.z logged into the WLC :

*emWeb: May 12 11:29:29.407: %AAA-5-AAA_AUTH_ADMIN_USER: aaa.c:3259 Authentication Succeeded for admin user '<admin_username>' on x.x.x.x

*emWeb: May 12 11:29:29.407: %AAA-5-AAA_AUTH_ADMIN_USER: aaa.c:3259 Authentication Succeeded for admin user '<admin_username>' on y.y.y.y

-Expected Behavior:

(Cisco Controller) >show loginsession



ID  User Name      Login Type  Connection From                                Idle Time     Session Time

-- --------------- ----------  ---------------------------------------------  ------------  ------------

00 <admin_username>  Ssh         x.x.x.x                                  00:01:03      00:01:13

01 <admin_username>  Ssh         y.y.y.y                                  00:00:00      00:15:19

02 <admin_username>  Ssh         z.z.z.z                                  00:00:01      00:00:13


Syslogs when user with IP z.z.z.z logged into the WLC :

*emWeb: May 12 11:29:29.407: %AAA-5-AAA_AUTH_ADMIN_USER: aaa.c:3259 Authentication Succeeded for admin user '<admin_username>' on z.z.z.z

Conditions:
-Cisco Aironet 1830 Series Mobility Express on code 8.8.120.0
-Logging severity set to Informational
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.