Getting TACACS to work with GSS

[michael.e.reid]

Hello, I am having an issue getting TACACS to work for the GSS CLI, the Web GUI works fine.

Looking at the TACACS stats there seems to be an authorisation error. There isn't actually much to configure on the GSS with regards to TACACS. Is there a known issue.

We recently upgraded to 1.2(2) as 1.2(1) had soem TACACS bugs.

[Gilles Dufour]

enhancement request :

CSCee29158

Shouldnt need to configure users both on Tacacs server and GSS

Right now, CLI users (console,telnet,ftp,ssh) need to be configured on both the Tacacs servers and GSS. This is contrary to Tacacs idea of central user

management.

Users accessing the GUI or Web-based authentication do not need to perform this

step.

Conditions:

The CLI limitation is based on our use of the native Linux password file to perform user authentication in order to provide an environment (shell, etc.) to the user upon login.

LEt me know if this helps.

Gilles.

Thanks for rating.

[michael.e.reid]

Gilles, I checked the bug and now I know I can configure TACACS if I also configure the usernames and passwords on the GSS too. But unfortunately this doesn't really help us.

Any plans to change this in later versions of SW so that the GSS just takes the username/passwords from the TACACS server.

Cheers.

[Gilles Dufour]

that's the purpose of the bug.

Once this bug will be fixed, there will be no need to configure users manually on the GSS.

Thanks,

Gilles.