<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72" style="word-wrap:break-word">
<div class="WordSection1">
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I have the following in my radiator.conf<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> # vSRX Clients<o:p></o:p></p>
<p class="MsoNormal"> AuthorizeGroup nes_vSRX_group permit service=junos-exec { local-user-name=tacplus-nes }<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">But I’m seeing this in a trace log:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">a824d200 Thu Aug 19 13:10:41 2021 280832: DEBUG: AuthBy GROUP result: ACCEPT,<o:p></o:p></p>
<p class="MsoNormal">a824d200 Thu Aug 19 13:10:41 2021 280910: DEBUG: Access accepted for nmjoo<o:p></o:p></p>
<p class="MsoNormal">Thu Aug 19 13:10:41 2021: AUTH: User nmjoo SUCCESSFULLY authenticated to device 128.255.97.28 ()<o:p></o:p></p>
<p class="MsoNormal">a824d200 Thu Aug 19 13:10:41 2021 281168: DEBUG: Packet dump:<o:p></o:p></p>
<p class="MsoNormal">a824d200 *** Reply to TACACSPLUS request:<o:p></o:p></p>
<p class="MsoNormal">a824d200 Code: Access-Accept<o:p></o:p></p>
<p class="MsoNormal">a824d200 Identifier: UNDEF<o:p></o:p></p>
<p class="MsoNormal">a824d200 Authentic: <26><131>0<175><129><6><1><132>'<225><175>]<200><248>l<175><o:p></o:p></p>
<p class="MsoNormal">a824d200 Attributes:<o:p></o:p></p>
<p class="MsoNormal">a824d200 tacacsgroup = nes_vSRX_group<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 281237: DEBUG: TacacsplusConnection result Access-Accept<o:p></o:p></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 281355: DEBUG: TacacsplusConnection Authentication REPLY 1, 0, ,<o:p></o:p></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 281473: DEBUG: Stream disconnected from 128.255.97.28 (128.255.97.28 port 60548)<o:p></o:p></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 283729: DEBUG: StreamServer: New connection from 128.255.97.28 port 60549<o:p></o:p></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 287277: DEBUG: Stream connected to 128.255.97.28 (128.255.97.28 port 60549)<o:p></o:p></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 287612: DEBUG: New StreamServer Connection created for 128.255.97.28 port 60549<o:p></o:p></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 287925: DEBUG: TacacsplusConnection request 192, 2, 1, 4, 3717832497, 49<o:p></o:p></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 288216: DEBUG: TacacsplusConnection Authorization REQUEST 1, 1, 1, 0, nmjoo@ui, , 128.255.204.18, 1, service=junos-exec<o:p></o:p></p>
<p class="MsoNormal"><b>00000000 Thu Aug 19 13:10:41 2021 288494: DEBUG: AuthorizeGroup rule match found: permit service=junos-exec { } { }<o:p></o:p></b></p>
<p class="MsoNormal"><b>00000000 Thu Aug 19 13:10:41 2021 288643: INFO: Authorization permitted for nmjoo@ui at 128.255.97.28, group nes_vSRX_group, args service=junos-exec<o:p></o:p></b></p>
<p class="MsoNormal"><b>00000000 Thu Aug 19 13:10:41 2021 288790: DEBUG: TacacsplusConnection Authorization RESPONSE 1, , ,<o:p></o:p></b></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 289506: ERR: Stream sysread for 128.255.97.28 (128.255.97.28 port 60549) failed: . Peer probably disconnected.<o:p></o:p></p>
<p class="MsoNormal">00000000 Thu Aug 19 13:10:41 2021 289710: DEBUG: Stream disconnected from 128.255.97.28 (128.255.97.28 port 60549)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">What am I doing wrong?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks!<o:p></o:p></p>
<p class="MsoNormal">-Neil<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>