This article describes how to fix login issues with root user, users with login privilege or super users. 

• You will observe an authentication error while trying to SSH to the device via local authentication.
• Radius and TACACS authentication will work. 
• Local authentication password type will be 'encrypted password'

You will be unable to login to SRX using local authentication where password type is set as encrypted-password

Consider the below configuration: 

set system login user root authentication encrypted-password "root@123"

As per SRX, the value which has to entered after encrypted-password is the encrypted string and not the actual password. 

Possible completions:

 <encrypted-password> Encrypted password string

It should be as below: 

srx@jtac# set system login user root authentication encrypted-password "$1$UqJVsoLz$/OWul.ScGD975hO0"

When you set it like:

srx@jtac# set system login user root authentication encrypted-password "root@123"

SRX will not recognise this and gives an authentication error. 

To fix this follow the below steps: 

• Enter the encrypted string after 'encrypted-password'
• Instead of encrypted password you can set it as plain-text-password. Junos will save this plan text password in an encrypted format. 

srx@jtac# set system login user root authentication plain-text-password "root@123"

srx@jtac# commit

Then when you check 'show configuration | display set | match root', this password will be encrypted

srx@jtac> set system login user root authentication plain-text-password "$1$UqJVsoLz$/OWul.Scgt340gaH"  ##SECRET-DATA