Questions tagged [tacacs+]
The tacacs+ tag has no usage guidance.
20
questions
1
vote
0
answers
50
views
Can't authorise commands via tacacs+ server executed in shell by ssh
I've setup a tacacs+ server and a PAM tacacs client from here- https://github.com/kravietz/pam_tacplus/tree/main.
When user ssh into the tacacs client machine, I want authentication from tacacs+ ...
- 11
0
votes
1
answer
352
views
PAM in Linux: any way to skip local auth if remote/external auth DB returns a negative response?
Dear fellow system tinkerers,
an admin friend has asked me the following question:
On a number of network elements and servers, he's using remote authentication against a TACACS+ server. On some such ...
- 261
0
votes
1
answer
223
views
Server 2016 Tacacs.net install throwing "Error in Processing response" and need it to be up today.
I've been struggling a few days with this. I have a brand new server that I install tacacs.net on and I can't get it to work. I followed the quickstart guide and opened port 49.
I'm thinking either ...
1
vote
1
answer
3k
views
Tacacs+ with PAM two-factor Google authentication?
I'm working on a tacacs+ server for my campus network, and I have been wondering how I could set up a tacacs+ server to communicate to PAM running google's two-factor authentication. I've done quite a ...
- 13
0
votes
0
answers
615
views
Authenticating any Linux distro with Tacacs and Active Directory
I have a set-up in my organisation where in, login to all network devices (Cisco, Juniper & ....) are authenticated using Windows AD and Cisco tacacs server. User's are pushed into AD via separate ...
- 111
1
vote
1
answer
2k
views
TACACS+ configuration: how to receive priv-lvl value?
I need to configure TACACS+ server to know if the given user is authenticated* and what is his priv-lvl. As a client I'm using tactest (tacacs.net) and TACACS+ Client Java Library (AXL).
I tried with ...
- 21
0
votes
1
answer
859
views
Does "aaa accounting commands" not support radius?
When I issue this command:
aaa accounting commands 15 default start-stop group myradiusgroup
I get this error:
%AAAA-4-SERVNOTACPLUS: The server-group "myradiusgroup" is not a tacacs+ server group. ...
- 4,203
0
votes
1
answer
2k
views
tacacs+ for Linux authentication/authorization using pam_tacplus
I am using TACACS+ to authenticate Linux users using pam_tacplus.so PAM module and it works without issues.
I have modified the pam_tacplus module to meet some of my custom requirements.
I know by ...
- 867
0
votes
1
answer
2k
views
Linux TACACS+ authorization
I'd like to know to to authorize (only allow a set of commands) users on Linux console (bash). I'm so far able to authenticate ssh users over TACACS+ but authorization is not working.
This is my ...
- 141
0
votes
0
answers
61
views
Network device failing to access groups from Active Directory
Occurs only for only 1 user , when TACACS+ tries to authenticate and retreive groups it fails, according to logs authentication is a success but fails when retreiving groups with error, "24027 Groups ...
- 827
2
votes
0
answers
1k
views
Linux TACACS+ auth for SSH but allow users to use public key auth
we have running tacacs environment for centralised login to our routers, firewalls etc and even most of our linux boxes to ssh
what we would like to do is allow users to authenticate to SSH via ...
- 4,233
2
votes
2
answers
2k
views
How does Arista EOS and Cisco IOS encrypt tacacs+ encyption keys?
We're using tacacs for AAA on our network devices, and I'm interested/curious in how our devices are encrypting the passwords device side.
Following the Arista EOS manual, page 139, I'm running:
...
- 158
0
votes
1
answer
1k
views
TACACS+ ACS 5.3 Err 'ACS: Resource not found or internal server error No information'
Has anyone experienced this issue before?
Running: Cisco TACACS+ ACS 5.3
When I log in I see this displayed on the right pane. I still have the navigation links on the the left pane and able to ...
- 200
1
vote
4
answers
6k
views
TACACS+ - Cisco Router - Failover to local database not operating as it should
I have TACACS+ working and now I am trying to set it up so that it will failover locally if the TACACS+ server is unavailable.
My goal is for it to check the TACACS server first, then failover if it ...
- 281
0
votes
2
answers
940
views
F5 authentication using kerberos keytab
Our network gear use tacplus for authentication and authorization. tac itself authenticates using kerberos. For one of the projects we need automated login to a F5 device using a script. Does anyone ...
- 61
8
votes
1
answer
34k
views
Authenticate Linux sshd with TACACS+ (Cisco ACS)
Our network engineering team uses multiple linux servers for syslog collection, configuration backups, tftp, etc...
We want to use TACACS+ on a Cisco ACS machine as our central authentication server ...
- 8,315
0
votes
1
answer
876
views
Enabling command logging on a Cisco MDS Switch
We are able to send all commands entered by admins to syslog on our Pix and ASA devices but are having trouble finding the correct commands or log levels to do the same for our Cisco MDS 9xxx switches....
0
votes
1
answer
139
views
Does anybody have any good material on TacPlus?
Does anybody know, either good websites or books which can help us setup a Tacacs+ (tacplus) server?
Any help would be appreciated. Thanks
AB
2
votes
1
answer
1k
views
Passwordless Kerberos management of Cisco devices
Does anyone have any experience of using Kerberos as an authentication mechanism for managing a Cisco IOS based network? This article seems to indicate it's possible, but my Kerberos knowledge is ...
- 10.3k
0
votes
1
answer
3k
views
IOS: tie SNMP v3 credentials to TACACS or RADIUS?
On Cisco IOS, I'm looking at moving from SNMP v1/2 to v3, which means separate user/password credentials instead of just community strings.
Is it possible to have those user credentials pulled from, ...
- 238