(RADIATOR) enable privilege levels for TACACS+ server

Hugh Irvine hugh at open.com.au
Tue Jan 29 16:40:11 CST 2008

Hello Markus -

Could you please send me a copy of your configuration file together  
with a trace 4 debug from Radiator showing what is happening?



On 30 Jan 2008, at 09:17, Markus Moeller wrote:

> I try to run in addition to the Radius server the TACACS+ server.   
> On cisco router you can get into different privilege leves by using  
> enable # where # is a number between 1 and 15.  On a normal TACACS+  
> server this corresponds to users enable#  e.g. 15 different users  
> and passwords.
> The Tacacs+ client sends among others the following AV pairs
> Service = ENABLE
> Privilege Level = #
> User-name = fred
> User-password = fred
> In the Radiator log  I can only see among others the following  
> attributes:
> Service-Type = Administrative-Login
> User-name = fred
> User-password = fred
> The Service Type changes from User-Login to Administrative-Login  
> but I can't identify the privilege level attribute ?
> How can I get access to the privilege level attribute from TACACS+ ?
> Thank you
> Markus


Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:

Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
CATool: Private Certificate Authority for Unix and Unix-like systems.

Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.

More information about the radiator mailing list