.How can we migrate tacacs support for other software into acs5.1? This is supported in ACS4.x in the New Services section of the Interface Configuration tab and appears in the User Group attributes at the bottom of the tacacs section. We actual...
we got it to work..... mixed up super_admin with the more popular super_user. once corrected it all works fine. thx for your input it was very reassuring.
config system admin edit "cbadmin" set remote-auth enable set accprofile "super_admin" set vdom "root" set remote-group "RadAdmin" set password ENC AK1sRSaM12nMCQq1q3pKtYvepgsbJEDF0AuEWsxFw4eXSE= next edit ...
I believe I have it set up as you explained. I can see in ACS logs that the autho parms are now being sent.---------------------------{Type=Authorization; Author-Reply-Status=PassRepl; AVPair=memberof=TacAdmin; AVPair=admin_prof=super_user; AVPair=s...
I am experiencing issues with this also. I have my attributes set up same as above example but I get full admin access no matter what I put in the admin_prof value. When I look in the ACS TACACS logs I see no evidence of any authorization packets b...