27 Apr
2025
27 Apr
'25
7:59 p.m.
On Apr 27, 2025, at 11:21 AM, bryan xiang <bryanxiang82@gmail.com> wrote:
whatever the auth success or fail, seems the tacacs module always report ok, so back to caller side, seems radius can't decide the auth fail or not
Hmm,, yes. I'll take a look, but I can't promise anything quick.
*I also tried to get the tacacs attributes in the caller side, but not help because the connection was closed by remote side*
Huh? The attributes are available in the "reply" list, even if the connection was closed. But you have to look at the attributes in the "subrequest" block. And then from the debug output, even if you did that, the TACACS+ server isn't sending any attributes. Alan DeKok.