MA5608T TACACS SSH Authentication Not Working

Hello everyone.

I can't find the correct configuration to verify ssh/telnet login on Huawei SmartAX MA5608T.

According to the manual I have to authenticate against the tacacs server. it is not possible against the radius.

When you log in to an account that is not locally based, it is not even sent any packet if you authenticate to the tacacs server. 

Tested on different chassis with versions R015 and R018. the behavior is the same.

I am attaching the configuration settings.

VERSION : MA5600V800R018C10

PATCH   : SPC209

PRODUCT :MA5608T 

hwtacacs-server template "ma56t-login"

 hwtacacs-server authentication x.x.x.x (ip od tacacs server)

 hwtacacs-server authorization x.x.x.x (ip od tacacs server)

 hwtacacs-server accounting x.x.x.x (ip od tacacs server)

 hwtacacs-server source-ip y.y.y.y (ip of meth interface)

 hwtacacs-server shared-key "secret password"

 hwtacacs-server timer response-timeout 2

 undo hwtacacs-server user-name domain-included

#

[aaa]

  <aaa>

aaa

 authentication-scheme "default"

 authentication-scheme "login-auth"

  authentication-mode hwtacacs local

 #

 authorization-scheme "default"

 authorization-scheme "login-auth"

  authorization-mode hwtacacs local if-authenticated

  authorization-cmd 0 hwtacacs local

  authorization-cmd 1 hwtacacs local

  authorization-cmd 2 hwtacacs local

 #

 accounting-scheme "default"

 accounting-scheme "login-auth"

  accounting-mode hwtacacs

 #

 domain "default"

  authentication-scheme "login-auth"

  authorization-scheme "login-auth"

  accounting-scheme "login-auth"

  hwtacacs-server "ma56t-login"

 #

 user privilege level 2

 #

 recording-scheme "login-auth"

  recording-mode hwtacacs "ma56t-login"

 #

 cmd recording-scheme "login-auth"

 #

So is there a configuration error?

I did not find the answer in the manual or on other forums.

Thanks.