The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
8 views

Associate user-id and group-id with TACACS+ user?

With TACACS+, on user authentication does the server only reply with success/failure, or can the server send more information about the user? I am trying tac_plus and I don't see any option there to ...
0
votes
0answers
13 views

tacacs+ windows based server Authorization failed, dropping priv-lvl to 0

i'm having a problem with tacacs authorization. I have configured tacacs server as per this blog :tacacsConfig As specified in the blog i made changes exactly, tacacs test/verify works as expected ...
0
votes
0answers
55 views

Authenticating any Linux distro with Tacacs and Active Directory

I have a set-up in my organisation where in, login to all network devices (Cisco, Juniper & ....) are authenticated using Windows AD and Cisco tacacs server. User's are pushed into AD via separate ...
0
votes
0answers
22 views

tac_plus suddenly says user doesn't exist

I am using the tac_plus daemon from http://www.pro-bono-publico.de/projects/ with Brocade ICX switches. Every so often on authorization requests the daemon starts saying that the user doesn't exist ...
0
votes
0answers
44 views

Configuring tacacs privilege levels and permissions on RHEL 6 server

I am setting up tac_plus on RHEL 6 and I would like some feedback on what I have configured so far, as I am still a bit confused on whether or not assigning privilege levels still means that I need to ...
0
votes
1answer
233 views

TACACS+ configuration: how to receive priv-lvl value?

I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL). I tried with ...
0
votes
1answer
229 views

Does “aaa accounting commands” not support radius?

When I issue this command: aaa accounting commands 15 default start-stop group myradiusgroup I get this error: %AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
0
votes
1answer
495 views

tacacs+ for Linux authentication/authorization using pam_tacplus

I am using TACACS+ to authenticate Linux users using pam_tacplus.so PAM module and it works without issues. I have modified the pam_tacplus module to meet some of my custom requirements. I know by ...
0
votes
0answers
1k views

Cisco tacacs+ commands accounting

I've installed a tac_plus server to log commands executed on my Cisco catalyst 2960-s switch, with the following config key = "tackey" user = root { default service = permit member = admingroup login ...
0
votes
1answer
389 views

Linux TACACS+ authorization

I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working. This is my ...
0
votes
0answers
36 views

Network device failing to access groups from Active Directory

Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
1
vote
0answers
452 views

Linux TACACS+ auth for SSH but allow users to use public key auth

we have running tacacs environment for centralised login to our routers, firewalls etc and even most of our linux boxes to ssh what we would like to do is allow users to authenticate to SSH via ...
2
votes
2answers
751 views

How does Arista EOS and Cisco IOS encrypt tacacs+ encyption keys?

We're using tacacs for AAA on our network devices, and I'm interested/curious in how our devices are encrypting the passwords device side. Following the Arista EOS manual, page 139, I'm running: ...
0
votes
1answer
737 views

TACACS+ ACS 5.3 Err 'ACS: Resource not found or internal server error No information'

Has anyone experienced this issue before? Running: Cisco TACACS+ ACS 5.3 When I log in I see this displayed on the right pane. I still have the navigation links on the the left pane and able to ...
0
votes
3answers
2k views

TACACS+ - Cisco Router - Failover to local database not operating as it should

I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable. My goal is for it to check the TACACS server first, then failover if it ...
0
votes
2answers
352 views

F5 authentication using kerberos keytab

Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
8
votes
1answer
15k views

Authenticate Linux sshd with TACACS+ (Cisco ACS)

Our network engineering team uses multiple linux servers for syslog collection, configuration backups, tftp, etc... We want to use TACACS+ on a Cisco ACS machine as our central authentication server ...
0
votes
1answer
376 views

Enabling command logging on a Cisco MDS Switch

We are able to send all commands entered by admins to syslog on our Pix and ASA devices but are having trouble finding the correct commands or log levels to do the same for our Cisco MDS 9xxx switches....
0
votes
1answer
125 views

Does anybody have any good material on TacPlus?

Does anybody know, either good websites or books which can help us setup a Tacacs+ (tacplus) server? Any help would be appreciated. Thanks AB
2
votes
1answer
827 views

Passwordless Kerberos management of Cisco devices

Does anyone have any experience of using Kerberos as an authentication mechanism for managing a Cisco IOS based network? This article seems to indicate it's possible, but my Kerberos knowledge is ...
0
votes
1answer
1k views

IOS: tie SNMP v3 credentials to TACACS or RADIUS?

On Cisco IOS, I'm looking at moving from SNMP v1/2 to v3, which means separate user/password credentials instead of just community strings. Is it possible to have those user credentials pulled from, ...