Strategy Advice

[Stefan Winter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alan DeKok schrieb:
| Stefan Winter wrote:
|> Don't know if this is an issue for you, but: Cisco equipment does not
|> support command authorization via RADIUS (*any* RADIUS...) [for pure
|> business greed reasons]. So if you really need per-command
|> authorization, you'll have to stick with TACACS+ which, sadly, is well
|> catered by ACS.
|
|   There's a tacp2rad program which hasn't been maintained... but it works.
|
|   Adding that to the FreeRADIUS portfolio wouldn't be hard, if there was
| a demand for it.


demand++ :-)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4-svn0 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org

iD8DBQFIGBMD+jm90f8eFWYRApP1AJkBia5nE6wa/xu5eQL3k9uqQWNEzgCghJLO
uFhl2X7ms0zfCNmdiNpTDrY=
=Iw6w
-----END PGP SIGNATURE-----