Login over TACACS protocol to Cisco CatOS switches fails when using CutThru proxy

Products

• VMware Smart Assurance

Issue/Introduction

Network Configuration Manager (NCM) login over TACACS protocol to Cisco CatOS switches fails when using CutThru proxy and CutThru logs show the following:

Oct 04 15:13:03 163160/cutthru(2715)#4: DASL: termLogin: WARNING - Telnet No Login or Device Prompt detected
Oct 04 15:13:03 163160/cutthru(2715)#4: DASL: termLogin: Sending new line
Oct 04 15:13:03 163160/cutthru(2715)#4: DASL: termLogin: Waiting on device prompts
Oct 04 15:13:03 163160/cutthru(2715)#1: State match:[1007][[^%].*([Ii]ncorrect"[Ii]nvalid"[Bb]ad.*assord"[Ww]rong[^l]"Permission denied"Backup authentication"Authentication failed)] ROSECUTION~~~~~~~username:~~~~[

Environment

NCM - 10.1.x

Cause

The above problem symptoms occur because the driver does not detect the "username:" prompt and tries to send a newline. This behaves like entering a blank username, and error prompt is generated.  The prompts for CatOS are defined in the following location on the NCM server:

$VOYENCE_HOME/package/pkgxml/CiscoCatOSSwitch/CiscoCatOSSwitchPrompts.xml

<LoginPromptState>
<ID>1004</ID>
<Expr><![CDATA[ ?Username ?:"[Ii][Dd]:]]></Expr>
</LoginPromptState>

<PasswordPromptState>
<ID>1005</ID>
<Expr><![CDATA[assword:"Staff-Only]]></Expr>
</PasswordPromptState>

The pattern "?Username ?:"[Ii][Dd]:" is not able to match "username:".

Resolution

• In the NCM device server(s), copy the CiscoCatOSSwitchPrompts.xml file $VOYENCE_HOME/package/pkgxml/CiscoCatOSSwitch/ copy it to location:
  $VOYENCE_HOME/custompackage/pkgxml/CiscoCatOSSwitch/ if already does not exist.
  
  Note: If any of the above directory structure under $VOYENCE_HOMEcustompackage/ is missing, you must create it before pasting the CiscoCatOSSwitchPrompts.xml file.
• Edit the custompackage CiscoCatOSSwitchPrompts.xml file and change the LoginPromptState pattern so that it matches the following:
  
  

  LoginPromptState>
  <ID>1004</ID>
  <Expr><![CDATA[ ?[Uu]sername ?:"[Ii][Dd]:]]></Expr>
  </LoginPromptState>
  

  This creates a character class to match either `U or `u for that character position.
• Restart the vcmaster service.