Tacacs+ and Linux

[davex316]

Does anyone know if there is a tacacs+, cisco supported or not that will run on any flavor of Linux.

TIA

[sumeerbhat]

You can use tacacs+ on any flavour of linux.We are using tacacs+ for authenitication which is running on red hat linux(version 6.2).

[kbillings]

I have TACACS+ running on a Linux box as well, but I am having problems with the authorization for just telnet access into our routers. Do you have example config of the AAA and the tacacs+ server that you could share.

Thanks

[sumeer]

aaa new-model

aaa authentication login default local group tacacs+

aaa authentication login 1 group tacacs+

aaa authentication login console none

aaa authentication login j line local group tacacs+

aaa authorization exec default local group tacacs+

aaa authorization commands 0 default local group tacacs+ none

aaa authorization commands 1 default local group tacacs+ none

aaa authorization commands 7 default local group tacacs+ none

aaa authorization commands 15 default local group tacacs+ none

aaa accounting exec default start-stop group tacacs+

aaa accounting network default stop-only group tacacs+

user = cisco { login = cleartext cisco

service = exec {

priv-lvl = 15

}

cmd = show {

permit config

permit interface

}

cmd = logout {

permit .*

}

}

user = test { default service = permit login = cleartext qazwsx

service = exec {

priv-lvl = 15

}

}