Description

User is not able to login into SRX with TACACS+ authentication. The login prompt is shown, but when username and password is entered, login is not happening:

jumphost:~ noc$ ssh [email protected]
([email protected]) Password: 
([email protected]) Password: 

Symptoms

In syslog messages file, the following error is shown:

Apr 2 15:02:51 2025 srx-1 sshd: PAM_TACPLUS_SEND_AUTHOR_FAIL: Function for sending authorization failed

Solution

After troubleshooting the issue it was found that the configuration line in TACACS+ server starting with "allow-commands=..." was too long and after making it shorter, the login was successful.

 

Modification History

2025-04-17 : Article Created