On 9 Nov 2013, at 23:26, Matthew Newton <mcn4@LEICESTER.AC.UK> wrote:
On Sat, Nov 09, 2013 at 08:36:35AM -0800, Alan DeKok wrote:
A.L.M.Buxey@lboro.ac.uk wrote:
PS any update on when TACACS+ comes into the tale? :-)
TACACS+ is annoying. It's only 2K LoC, but there's minimal demand for it.
Weirdly enough, just two days ago I looked at switch authentication again, and (as often is the case) got annoyed at Cisco for not allowing RADIUS to do command authorization. I had a very brief look to see how hard it would be do do TACACS+ in FreeRADIUS, but couldn't easily find any documentation on it.
I'm semi-interested in this, but I guess that's what you call "minimal demand". I would look at writing some code for it, but in all honesty I likely haven't got time at present (my wife is not going to appreciate it if I spend paternity leave coding...)
It's not that minimal. I've come across three or four cases of people using it as justification to keep ACS. Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team