The tag has no wiki summary.

learn more… | top users | synonyms

0
votes
1answer
40 views

Linux TACACS+ authorization

I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working. This is my ...
0
votes
0answers
27 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
1
vote
0answers
206 views

Linux TACACS+ auth for SSH but allow users to use public key auth

we have running tacacs environment for centralised login to our routers, firewalls etc and even most of our linux boxes to ssh what we would like to do is allow users to authenticate to SSH via ...
0
votes
0answers
117 views

Tacacs plus user activity analyzer

I am using FreeBSD 8, and setup tac_plus-F4.0.4.19. I want to analyse user activity to see what command they have run on a specific NAS or what command they run on a specific date. My purpose is ...
2
votes
2answers
309 views

How does Arista EOS and Cisco IOS encrypt tacacs+ encyption keys?

We're using tacacs for AAA on our network devices, and I'm interested/curious in how our devices are encrypting the passwords device side. Following the Arista EOS manual, page 139, I'm running: ...
0
votes
0answers
34 views

How to configure AccessPoints/Switches for PAP,CHAP and other methods of Authentication?

Hope some one could shed some light here. TACACS+ Server gives option of User Authentication by following methods: 1. ASCII 2. PAP 3. CHAP 4. MSCHAP 5. ARAP But how does the server know which one to ...
0
votes
1answer
304 views

TACACS+ ACS 5.3 Err 'ACS: Resource not found or internal server error No information'

Has anyone experienced this issue before? Running: Cisco TACACS+ ACS 5.3 When I log in I see this displayed on the right pane. I still have the navigation links on the the left pane and able to ...
0
votes
3answers
870 views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
0
votes
1answer
169 views

F5 authentication using kerberos keytab

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
8
votes
1answer
6k views

Authenticate Linux sshd with TACACS+ (Cisco ACS)

Our network engineering team uses multiple linux servers for syslog collection, configuration backups, tftp, etc... We want to use TACACS+ on a Cisco ACS machine as our central authentication server ...
0
votes
1answer
235 views

Enabling command logging on a Cisco MDS Switch

We are able to send all commands entered by admins to syslog on our Pix and ASA devices but are having trouble finding the correct commands or log levels to do the same for our Cisco MDS 9xxx ...
0
votes
1answer
112 views

Does anybody have any good material on TacPlus?

Does anybody know, either good websites or books which can help us setup a Tacacs+ (tacplus) server? Any help would be appreciated. Thanks AB
2
votes
1answer
641 views

Passwordless Kerberos management of Cisco devices

Does anyone have any experience of using Kerberos as an authentication mechanism for managing a Cisco IOS based network? This article seems to indicate it's possible, but my Kerberos knowledge is ...
0
votes
1answer
1k views

IOS: tie SNMP v3 credentials to TACACS or RADIUS?

On Cisco IOS, I'm looking at moving from SNMP v1/2 to v3, which means separate user/password credentials instead of just community strings. Is it possible to have those user credentials pulled from, ...