Description

After upgrade user cannot switch to user root any more.

Symptoms

After software upgrade to Junos 9.6 or higher, it is not possible to log into the shell and change to user root any more, as shown in below example:

geo@fan-re0> run start shell user root
Password:
su: Sorry

geo@fan-re0>

The authentication order is configured as follows:
[edit]
geo@fan-re0# show system authentication-order
authentication-order radius;

Solution

This is expected behavior due to authentication changes introduced in Junos 9.6R1 via internal PR/424382 .

As a workaround, configure systems authentication-order [radius password]. After issuing a commit, drop into the shell and change to user root again.

Example:

[edit]
geo@fan-re0# set system authentication-order [radius password]

[edit]
geo@fan-re0# commit and-quit
commit complete
Exiting configuration mode

geo@fan-re0> start shell user root
Password:
root@fan-re0%

Note:
The original pre-9.6R1 default behavior was restored via PR/550805 in the following Junos releases: 11.1R1 11.2R1 10.4R2 10.3R3 10.2R4