Another problem with auth-proxy/ACS/Tacacs+

[e-alvarez]

Hi,

I´m trying to use auth-proxy to authenticate user to access the internet. I´m using a C877/Adsl (C870-ADVSECURITYK9-M), Version 12.3(8)YI2 and ACS (CiscoSecure ACS Trial,Release 4.0(1) Build 27).

The problem I´m having is that apparently the ACS is authenticating and authorising user 'tacacs', but the authorisation pop-up windows says Authorisation Failed and the user cannot get past that point.

This is the first time I use ACS, so I´m sure the problem is on the server side since auth-proxy works ok locally on the router. In the attachement you will find the router config,as well as some debugs.

Any help will be much appreciated.

Thanks,

Eduardo

[liamkennedy]

try upgrading to 12.4 - i've found several different versions of 12.3 which have had tacacs related bugs in them (admittedly this was for VPN authentication)

[e-alvarez]

Thanks, Liam.

Actually, my problem was that I had not configured the necessary attributes under the New Services->autht-proxy. Didn`t have priv-lvl=15 :-)

Thank again for your help.