Switch is added in tacacs server but still are authenticated through local username and password and AAA server password also. AAAConfiguration on the switch as follows
#
hwtacacs-server template XYZ
hwtacacs-server authentication 10.0.0.1
hwtacacs-server authorization 10.0.0.1
hwtacacs-server accounting 10.0.0.1
hwtacacs-server shared-key cipher ***
#
hwtacacs-server template tacacs
hwtacacs-server authentication 192.168.1.1
hwtacacs-server authorization 192.168.1.1
hwtacacs-server accounting 192.168.1.1
#
aaa
authentication-scheme default
authentication-mode hwtacacs local
authentication-scheme acs1
authentication-mode hwtacacs local
authorization-scheme default
authorization-mode hwtacacs local
authorization-cmd 15 hwtacacs local
authorization-scheme acs1
authorization-mode hwtacacs local
authorization-cmd 15 hwtacacs local
accounting-scheme default
accounting-scheme acs1
accounting-mode hwtacacs
accounting realtime 1
accounting start-fail online
domain default
hwtacacs-server xyz
domain default_admin
authentication-scheme acs1
accounting-scheme acs1
authorization-scheme acs1
hwtacacs-server xyz
domain abc
authentication-scheme acs1
authorization-scheme acs1
authorization-scheme acs1
hwtacacs-server xyz
local-user admin password cipher ***
local-user admin privilege level 15
local-user admin ftp-directory flash:/
local-user admin service-type telnet ssh ftp http
#