无法从ONTAP中排除Cisco Duo的本地管理员用户
适用场景
- ONTAP 9
- Cisco Duo
问题描述
使用ONTAP管理员帐户登录时、系统会提示进行Duo身份验证、即使该帐户在ONTAP中已被排除
Cluster::*> duo group show
(security login duo group show)
Vserver: Duckie
Group Name: Duckie\Duousers
Excluded Users: admin
Comment: -
[root@ggcentos ~]# ssh admin@10.216.xx.yy
(admin@10.216.xx.yy) Password:
(admin@10.216.xx.yy) Password:
Success. Logging you in...
>>(从命令行界面看不到、但 尽管管理员是排除用户、但收到了此登录尝试的Duo身份验证请求)
Last login time: 2/13/2025 09:13:57
Unsuccessful login attempts since last login: 2
Duckie::> exit