Tacaacs on WLC4404

[darennixon]

Hi,

We are setting up Tacaacs to a WLC 4404 , but we are getting the following message on the WLC when we try and go through the management IP using tacaacs. Anyone seen this b4.

Jan 29 13:23:28.012 ews_auth.c:2107 EMWEB-1-LOGIN_FAILED: Login failed. User:''. Service-Type is not present or it doesn't allow READ/WRITE permission..

[sschmidt]

What is the version of ACS?

What is the version of WLC code?

[darennixon]

4.2.176 for WLC, haven't got the version of ACS.

[Scott Fella]

Daren,

One thing I know is that you can't have TACACS setup if you have Radius setup for the wireless clients. You would need a seperate TACACS server or use Radius to authenticate management access.

[sschmidt]

Well as a guess you could try this.

Under the group settings try giving your user in the ciscowlc common box role1=ALL which should give him access to everything.

It looks like it may be an authorization config issue.

http://www.cisco.com/en/US/docs/wireless/controller/4.2/configuration/guide/c42sol.html#wp1208657