Prime Infrastructure to CSACS 5.3, TACACS AV Values?

[nellson]

I am scanning the documentation for CPI 1.2, trying to get it to use CSACS 5.3 for my authentication/Authorization. The docs say to create a TACACS Shell Profile, and add the TACACS A/V Pairs as needed... um... nowhere could I find a listing of AV Pairs I can use to grant authorization. I did see that what ever pairs I did use, I must keep the menu chain in tact.. that makes sense.

Anyone got a list somewhere of how they are formatted? Or a document I can use?

Nick

[Serg S.]

When i used root group attributes, i always got error. Then i tried copy-paste admin group attributes, add "virtual-domain0=ROOT-DOMAIN" and  logged in successfully. Works on prime 3.1 and ISE.

[Timothy Metallo]

Hello group.  Complete newby managing Prime and ACS but this port and threads helped to tremendously.  I found out once I was able to log back on to Prime with Admin access I also need to change the Admin Group Task Permissions to match the access I have before I updated the code on Prime.  Again I can tell you how much this tread helped and thanks a ton for posting it. :)