Posted this half a year ago but never got an answer. As the new ASAs I have show the same problem, I thought I'd ask again ...
When I log in via ssh to any of my PIXen or ASAs configured with
aaa authentication ssh console LOCAL aaa authorization command LOCAL username user password pass privilege 15
I don't get privilege level 15 as I should. I have to execute the "login" command explicitly (giving the same username and password I already used for the ssh connection). Then the prompt changes and privileged commands work.
On IOS routers this works as expected, ie. the ssh login directly gives me a privileged prompt.
Am I doing something wrong? Is that a known bug/feature?
Thanks, Tilman