CLI access to PA

[jdprovine]

@reaper, @BPry @Mick_Ball

What could cause a superuser to not be able to ssh to the CLI of the PA?

[Mick_Ball]

oops,,, sorry all, just realised there are 2 pages to this , only read the first one, until now, my bad...

[RobinClayton]

He is selecting "SSH" in his client I hope............. and nto a defalut telnet..

[jdprovine]

@Mick_Ball

no problemoooo

[Mick_Ball]

Windoze firewall..... ?

[jdprovine]

@Mick_Ball

Nope its a mac

[jdprovine]

@reaper @Mick_Ball @RobinClayton @RobinClayton @BPry

Could it be another issue if he can get a login prompt. He has a lesser role before and I think they just changed the profile to superuser. I wonder if deleting and recreated the user might fix it, may somehow its holding the old settings

[RobinClayton]

perhaps the SSH authorized_keys needs removing from the user on the MAC, perhaps it changed?

[RobinClayton]

can he telnet IPADDRESS:22  and get a response??

[jdprovine]

@RobinClayton

telnet is not enabled on the management port for security reasons

[RobinClayton]

telnet to port "22" ,  it's not telent, should respond with SSH server banner for open SSH.

[jdprovine]

@reaper @BPry @Mick_Ball

I got some more information and apparently he gets the login prompt, it allows him to put in his usename and password, and then it appears to kick him out. I suggested deleted and recreating his account but he does not want to do that yet

[reaper]

is he a real superuser or a role based admin with the CLI set to 'none'

[jdprovine]

@reaper

He is a real superuser from what I can tell

[jdprovine]

@reaper @BPry

I checked the logs and it looks like it is authenticating his user and then doing nothing

[jdprovine · Accepted solution]

@reaper @BPry @RobinClayton @Mick_Ball

The deletion and re-add of the user fixed the issue