Is anyone interested in TACACS+ support in FreeRADIUS? We're looking at development priorities for the next year. We'd like to know whether or not TACACS+ is of interest. i.e. Are you using it now? If so, would you consider switching to FreeRADIUS for TACACS+? Alan DeKok.
Am 14.04.2014 um 17:27 schrieb Alan DeKok <aland@deployingradius.com>:
Is anyone interested in TACACS+ support in FreeRADIUS?
We're looking at development priorities for the next year. We'd like to know whether or not TACACS+ is of interest.
i.e. Are you using it now? If so, would you consider switching to FreeRADIUS for TACACS+?
Yes to both. We're currently using tac_plus, but would prefer to consolidate services. Sebastian Hagedorn
Absolutely! On 04/14/2014 08:27 AM, Alan DeKok wrote:
Is anyone interested in TACACS+ support in FreeRADIUS?
We're looking at development priorities for the next year. We'd like to know whether or not TACACS+ is of interest.
i.e. Are you using it now? If so, would you consider switching to FreeRADIUS for TACACS+?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Mon, Apr 14, 2014 at 11:27:20AM -0400, Alan DeKok wrote:
Is anyone interested in TACACS+ support in FreeRADIUS?
Interested, yes, but probably not enough that other things should be pushed out of the way. I can live without it, but it would be a nice to have. Mainly because Cisco don't support checking shell commands against RADIUS for some annoying reason. Cheers, Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
Having this in freeRADIUS would be great. It would be nice to have an alternative to radiator. We need tacacs+ for per command authorization so RADIUS won't cut it for switches --- Andrew — Sent from Mailbox for iPhone On Mon, Apr 14, 2014 at 7:02 PM, Matthew Newton <mcn4@leicester.ac.uk> wrote:
Is anyone interested in TACACS+ support in FreeRADIUS? Interested, yes, but probably not enough that other things should be pushed out of the way. I can live without it, but it would be a nice to have. Mainly because Cisco don't support checking shell commands against RADIUS for some annoying reason. Cheers, Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
On Mon, Apr 14, 2014 at 11:27:20AM -0400, Alan DeKok wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello We would switch for sure. That would allow us to maintain one software instead of two. Thomas
Le 15 avr. 2014 à 01:10, "Andrew Kee" <adkee@oakland.edu> a écrit :
Having this in freeRADIUS would be great. It would be nice to have an alternative to radiator. We need tacacs+ for per command authorization so RADIUS won't cut it for switches
--- Andrew — Sent from Mailbox for iPhone
On Mon, Apr 14, 2014 at 7:02 PM, Matthew Newton <mcn4@leicester.ac.uk> wrote: On Mon, Apr 14, 2014 at 11:27:20AM -0400, Alan DeKok wrote:
Is anyone interested in TACACS+ support in FreeRADIUS?
Interested, yes, but probably not enough that other things should be pushed out of the way. I can live without it, but it would be a nice to have.
Mainly because Cisco don't support checking shell commands against RADIUS for some annoying reason.
Cheers,
Matthew
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk>
Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hello, yes, tacacs+ would be great. Miroslav Dne 15.4.2014 05:10, Thomas Fagart napsal(a):
Hello
We would switch for sure. That would allow us to maintain one software instead of two.
Thomas
Le 15 avr. 2014 à 01:10, "Andrew Kee" <adkee@oakland.edu <mailto:adkee@oakland.edu>> a écrit :
Having this in freeRADIUS would be great. It would be nice to have an alternative to radiator. We need tacacs+ for per command authorization so RADIUS won't cut it for switches
--- Andrew — Sent from Mailbox <https://www.dropbox.com/mailbox> for iPhone
On Mon, Apr 14, 2014 at 7:02 PM, Matthew Newton <mcn4@leicester.ac.uk <mailto:mcn4@leicester.ac.uk>> wrote:
On Mon, Apr 14, 2014 at 11:27:20AM -0400, Alan DeKok wrote: > Is anyone interested in TACACS+ support in FreeRADIUS?
Interested, yes, but probably not enough that other things should be pushed out of the way. I can live without it, but it would be a nice to have.
Mainly because Cisco don't support checking shell commands against RADIUS for some annoying reason.
Cheers,
Matthew
-- Matthew Newton, Ph.D. <mcn4@le.ac.uk <mailto:mcn4@le.ac.uk>>
Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom
For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk <mailto:ithelp@le.ac.uk>> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Mgr. Miroslav Lednický Vedoucí odboru správy datové sítě a hlasových služeb Úsek Informatiky Fakultní nemocnice u sv. Anny v Brně Pekařská 664/53, 656 91, Brno
Another yes for tacacs+ support. It would be really great to have this consolidated within freeradius, as others have said. On 14 April 2014 17:27, Alan DeKok <aland@deployingradius.com> wrote:
Is anyone interested in TACACS+ support in FreeRADIUS?
We're looking at development priorities for the next year. We'd like to know whether or not TACACS+ is of interest.
i.e. Are you using it now? If so, would you consider switching to FreeRADIUS for TACACS+?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Dušan Dragić
Alan DeKok wrote:
Is anyone interested in TACACS+ support in FreeRADIUS?
Absolutely
We're looking at development priorities for the next year. We'd like to know whether or not TACACS+ is of interest.
i.e. Are you using it now? If so, would you consider switching to FreeRADIUS for TACACS+?
Depends on the feature set, of course, but if we could have the power of freeRADIUS behind TACACS+, that would be wonderful. Would consolidate and simplify greatly. What else needs to happen to make this a priority?
Alan DeKok.
-- --------------------------- Jason 'XenoPhage' Frisvold xenophage@godshell.com --------------------------- "Any sufficiently advanced magic is indistinguishable from technology.\" - Niven's Inverse of Clarke's Third Law
Yes, it is very important feature.. Or tacacs to radius proxy.. 15.4.2014 1.33 kirjoitti "Alan DeKok" <aland@deployingradius.com>:
Is anyone interested in TACACS+ support in FreeRADIUS?
We're looking at development priorities for the next year. We'd like to know whether or not TACACS+ is of interest.
i.e. Are you using it now? If so, would you consider switching to FreeRADIUS for TACACS+?
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Absolutely! We have an old ACS SE appliance which is now semi-unmanageable because it uses unsigned Java applets, and I'd rather use FreeRADIUS than buy a new ISE Max -----Original Message----- From: freeradius-users-bounces+max.caines=wlv.ac.uk@lists.freeradius.org [mailto:freeradius-users-bounces+max.caines=wlv.ac.uk@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 14 April 2014 16:27 To: FreeRadius users mailing list Subject: TACACS+ question Is anyone interested in TACACS+ support in FreeRADIUS? We're looking at development priorities for the next year. We'd like to know whether or not TACACS+ is of interest. i.e. Are you using it now? If so, would you consider switching to FreeRADIUS for TACACS+? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Scanned by iCritical.
On Mon, Apr 14, 2014 at 10:27 AM, Alan DeKok <aland@deployingradius.com> wrote:
Is anyone interested in TACACS+ support in FreeRADIUS?
We're looking at development priorities for the next year. We'd like to know whether or not TACACS+ is of interest.
i.e. Are you using it now?
Yep. If so, would you consider switching to
FreeRADIUS for TACACS+?
We are using tac_plus, as others are. tac_plus has PAM hooks (which tie into FR via pam_radius_auth module), command restrictions, AAA, and other things. What would be the upside of FR providing TACACS+? Thanks, -mz
Would love to have the option of using FR in place of Tacacs+ , We are deploying a tac plus for our network and if FR had a hook or a solution we would use that . thanks greg ________________________________________ From: freeradius-users-bounces+gjetter=gci.com@lists.freeradius.org [freeradius-users-bounces+gjetter=gci.com@lists.freeradius.org] On Behalf Of Alan DeKok [aland@deployingradius.com] Sent: Monday, April 14, 2014 7:27 AM To: FreeRadius users mailing list Subject: TACACS+ question Is anyone interested in TACACS+ support in FreeRADIUS? We're looking at development priorities for the next year. We'd like to know whether or not TACACS+ is of interest. i.e. Are you using it now? If so, would you consider switching to FreeRADIUS for TACACS+? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Thanks to everyone for the responses. I'll talk to some people off-line, and see how we can prioritize this. Alan DeKok.
You don't need the +1 from me then.... Though the list archives reveal that this is something I've always been keen on ;) alan
On 4/15/14, 2:25 PM, Alan DeKok wrote:
Thanks to everyone for the responses. I'll talk to some people off-line, and see how we can prioritize this.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Hi Alan.
If you want I can help to create the user guides or translating to spanish, just let me know how can I help, I will be glad to have tacacs features on the FR. Regards. Alfonso.
participants (15)
-
Alan Buxey -
Alan DeKok -
Alfonso Alejandro Reyes Jiménez -
Andrew Kee -
Caines, Max -
Dušan Dragić -
Eero Volotinen -
Greg Jetter -
Jason Frisvold -
Matt Zagrabelny -
Matthew Newton -
Miroslav Lednicky -
Sebastian Hagedorn -
Thomas Fagart -
Tony DeMatteis