(RADIATOR) enable privilege levels for TACACS+ server

Hugh Irvine hugh at open.com.au
Tue Jan 29 16:40:11 CST 2008


Hello Markus -

Could you please send me a copy of your configuration file together  
with a trace 4 debug from Radiator showing what is happening?

regards

Hugh


On 30 Jan 2008, at 09:17, Markus Moeller wrote:

> I try to run in addition to the Radius server the TACACS+ server.   
> On cisco router you can get into different privilege leves by using  
> enable # where # is a number between 1 and 15.  On a normal TACACS+  
> server this corresponds to users enable#  e.g. 15 different users  
> and passwords.
>
> The Tacacs+ client sends among others the following AV pairs
>
> Service = ENABLE
> Privilege Level = #
> User-name = fred
> User-password = fred
>
> In the Radiator log  I can only see among others the following  
> attributes:
>
> Service-Type = Administrative-Login
> User-name = fred
> User-password = fred
>
> The Service Type changes from User-Login to Administrative-Login  
> but I can't identify the privilege level attribute ?
>
> How can I get access to the privilege level attribute from TACACS+ ?
>
> Thank you
> Markus
>



NB:

Have you read the reference manual ("doc/ref.html")?
Have you searched the mailing list archive (www.open.com.au/archives/ 
radiator)?
Have you had a quick look on Google (www.google.com)?
Have you included a copy of your configuration file (no secrets),
together with a trace 4 debug showing what is happening?
Have you checked the RadiusExpert wiki:
http://www.open.com.au/wiki/index.php/Main_Page

-- 
Radiator: the most portable, flexible and configurable RADIUS server
anywhere. Available on *NIX, *BSD, Windows, MacOS X.
Includes support for reliable RADIUS transport (RadSec),
and DIAMETER translation agent.
-
Nets: internetwork inventory and management - graphical, extensible,
flexible with hardware, software, platform and database independence.
-
CATool: Private Certificate Authority for Unix and Unix-like systems.


--
Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.


More information about the radiator mailing list