Comments on: Cisco TACACS server for Windows

By: Using TACACS with Dynagen-Dynamips | xpresslearn.com

Using TACACS with Dynagen-Dynamips | xpresslearn.com — Wed, 30 Jun 2010 18:04:44 +0000

[...] The TACACS+ Windows executable can be downloaded from here. [...]

By: Xpresslearn Administrator

Xpresslearn Administrator — Mon, 07 Jun 2010 03:42:35 +0000

Yes, you can test this without a Cisco router. The router is the TACACS client, so all you would need is a client that will run on your Ubuntu machine.

By: andrew

andrew — Fri, 04 Jun 2010 20:53:07 +0000

Hello. I just installed a tacacs+ server on Ubuntu and I would like to test it without using the configuration of a Cisco router. Do you think that’s possible? I followed the steps from http://www.debian-administration.org/article/Network_Administration__Installation_of_Tacacs_Rancid_Cvsweb. I’m also interested on testing it on windows too if it’s possible without the routers config. Thank you.

By: kiansim

kiansim — Wed, 02 Jun 2010 11:32:21 +0000

great software!

I use notepad++ to edit the tac.cfg file.
http://notepad-plus.sourceforge.net/uk/download.php

encountered issue if not using default aaa authentication list. Unable to let user to vty login with priv 15 (without key in enable password) if use customized name. Below is my Cisco router config and the tac.cfg config.

=============
== tac.cfg ==
=============
# CONFIGURE ENCYPTION KEY
key = mykey!

# Configure User
user = kiansim {
login = cleartext “testing1234″
service = exec {
priv-lvl = 15
}
}
# End file

================================================
== ROUTER CONFIG UNABLE TO LOGIN WITH PRIV 15 ==
================================================
aaa authentication login VTY_0-4 group tacacs+ local enable
aaa authorization exec VTY_0-4 group tacacs+ local if-authenticated

line vty 0 4
authorization exec VTY_0-4
login authentication VTY_0-4
================================================

==============================================
== ROUTER CONFIG ABLE TO LOGIN WITH PRIV 15 ==
==============================================
aaa authentication login default group tacacs+ local enable
aaa authorization exec default group tacacs+ local if-authenticated

line vty 0 4
login authentication default
authorization exec default
================================================

By: Patrick

Patrick — Sat, 22 May 2010 20:53:41 +0000

I want each user to be in privilege 15 and at the # prompt. What does the file need to look like?

By: Moshe

Moshe — Wed, 24 Mar 2010 14:44:37 +0000

How Can I configure in the tac.cfg file that user X can perform all commands ( not specific command).

By: Joe

Joe — Sat, 02 Jan 2010 01:18:48 +0000

Hello,

Does anyone know of any good TACACS+ server configuration guides / cookbooks etc? I haven’t been able to find much configuration support anywhere online. There must be an extensive command / option list somewhere. One of the very few references I’ve been able to find is http://www.stben.net/tacacs/users_guide.html, which I believe was referenced on this webpage.

Thanks,
Joe

By: DanM

DanM — Thu, 01 Oct 2009 15:10:03 +0000

When using accounting, there needs to be an entry in the tac.cfg file with:

accounting file =

is this simply a file name, or a full path? Does the file need to exist prior? Thanks!

By: ian

ian — Fri, 04 Sep 2009 04:53:18 +0000

Hi,i’m telcomunication student in Asia. i’m interest with your software.i have some problems to use it.
I am running tac_plus.exe in Windows XP machine, after modifying the tac.cfg file with notepad and this is the output
C:\tacacs>tac_plus -C tac.cfg
Warning, not running as uid 0
Tac_plus is usually run as root

best regrad.

By: GK

GK — Wed, 27 May 2009 16:13:10 +0000

Dear Author,
I am using your tacacs tool with one of my switch which is not cisco.

I have given permission for the user to execute all show commands.
But after authentication I am unable to run any show commands.

user = lily {
login = cleartext lily
cmd = show {
permit .*
}
}
Kindly advise.