Connectrix Brocade: TACACS Authentication Failure "RBAC permission denied" When Running Commands on the Switch
Summary: TACACS authentication failure with error "RBAC permission denied" when running commands on the switch.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
The TACACS server was successfully configured on the switch.
The command execution with the AAA user was failing on the switch.
Error Message received:
Switch:AAA_User> chassisshow RBAC permission denied. Switch:AAA_User> psshow RBAC permission denied.
As per Roles that have access to the RBAC Class 'authentication' are:
Switch:> classconfig --showroles authentication Role name Permission --------- ---------- Admin OM Root OM Security Admin OM
Cause
Observed that the brcd-role is mapped to "zoneAdmin" in the shell profile on TACACS Server:
Screenshot for reference:
Resolution
The attributes in the "tac_plus.cfg file" was modified with correct roles on the TACACS+ server which resolved the issue:
Attributes set:
- brcd-role=admin
- Brcd-AV-Pair1=homeLF=128;LFRoleList=admin:1-128
- Brcd-AV-Pair2=chassisRole=admin
Affected Products
Connectrix B-Series HardwareProducts
Connectrix B-SeriesArticle Properties
Article Number: 000224122
Article Type: Solution
Last Modified: 15 Apr 2025
Version: 2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.