On 6 Feb 2017, at 13:58, A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
What hit me in a former project integrating an LDAP user management with another TACACS+ server implementation was that IIRC TACACS+ cannot handle users with multiple group membership. It was one of the reasons to I wanted to be able to limit user group visibility in Æ-DIR for server groups.
we use parent/child group membership - ie users are members of groups, but groups can be members of other groups. thats with shrubbery tacacs+ daemon
will be interesting to try this 4.x FR as a TACACS+ server (and using unlang with AD policies) - but it would certainly be ++++ if it could read TACACS+ config files - or convert...
What do they look like? -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2