NSO authentication issue: Hi Team,This is in continuation to the old Jsd According to Sahithi, NSO exhausts all methods of authentication before throwing connection refused error. In case of service play, if we remove the default map, the authentication error is being thrown for wrong credentials. But for config plays, for eg: configuring bundle ether, NSO throws authentication error even if the default map has the correct credentials present. We wanted to understand the difference between the two and if similar functionality can be applied to the service plays as well.For bundle ether config play logs, setup details are : NSO: 172.20.200.70admin/Cwork123!Devices: xrv9k-1 : 192.168.6.50 admin/cisco123xrv9k-2 : 192.168.6.51 admin/cisco123Thanks,Neha
Hi Neha,1. Right now, I saw your setup is using 'cwuser' for pushing services between CNC UI and CFP, but this user is not set a proper permission in nacmcwuser@ncs% show nacm read-default   permit;write-default  permit;exec-default   permit;groups {  group ncsadmin {    user-name [ private ];  }  group ncsoper {    user-name [ public ];  }Please correct it.2. This is the authgroups that you definedcwuser@ncs% show devices authgroups group nso105 default-map {  remote-name   admin;  remote-password $9$jntAig740DzMVR2e0uvVhvvNCt7iifraQiFP/ZNvn7A=;}umap cwuser {  callback-node /cw-creds-get;  action-name  get;}You could NOT use cwuser for connect to xrv9k-1 since this user is not defined on the device sideThanks,LinhYour setup is also not within the specificationroot@ubuntu:/var/opt/ncs/packages# lscpuArchitecture:          x86_64CPU op-mode(s):         32-bit, 64-bitByte Order:           Little EndianAddress sizes:          43 bits physical, 48 bits virtualCPU(s):             4     <--- minimum is 8 CPUroot@ubuntu:/var/opt/ncs/packages# lsmemMemory block size:    128MTotal online memory:   16G <--- should be 64GBTotal offline memory:   0Broot@ubuntu:/var/opt/ncs/packages# python3 --versionPython 3.7.5rc1   <-- should be 3.8.xHi Neha,Since there is no new update on this issue, I am going to close this tick in next few days.Thanks,Linh