Now we've gone completely insane

[Arran Cudbard-Bell]

On 9 Nov 2013, at 23:26, Matthew Newton <mcn4 at LEICESTER.AC.UK> wrote:

> On Sat, Nov 09, 2013 at 08:36:35AM -0800, Alan DeKok wrote:
>> A.L.M.Buxey at lboro.ac.uk wrote:
>>> PS any update on when TACACS+ comes into the tale? :-)
>> 
>>  TACACS+ is annoying.  It's only 2K LoC, but there's minimal demand for it.
> 
> Weirdly enough, just two days ago I looked at switch
> authentication again, and (as often is the case) got annoyed at
> Cisco for not allowing RADIUS to do command authorization. I had a
> very brief look to see how hard it would be do do TACACS+ in
> FreeRADIUS, but couldn't easily find any documentation on it.
> 
> I'm semi-interested in this, but I guess that's what you call
> "minimal demand". I would look at writing some code for it, but in
> all honesty I likely haven't got time at present (my wife is not
> going to appreciate it if I spend paternity leave coding...)

It's not that minimal. I've come across three or four cases of people using it as justification to keep ACS.

Arran Cudbard-Bell <a.cudbardb at freeradius.org>
FreeRADIUS Development Team