[rancid] Rancid - SSH and AD auth

[Marito ...]

Hi Andy,
 
We have several devices, and most of them are authenticating using TACACS (with AD integration). 
As you said in your post, you have to put the user/pass of the account created in AD.
You have to take into account (in case of using TACACS) the privilege given to the user, as it could be needed to enable, and also configured at .cloginrc.
 
 
Regards.
Mario
 



From: me at andytownsend.co.uk
Date: Thu, 8 Mar 2012 15:30:47 +0000
To: rancid-discuss at shrubbery.net
Subject: [rancid] Rancid - SSH and AD auth

Firstly thanks to the guys who helped me previously. I've now got a copy of Rancid up and running. 


Currently we just use telnet and local pwd's for accessing the switches but I'm looking at changing this to SSH and AD/Radius authentication. 


Now from what I can see, SSH should be fine and I'm presuming the AD auth will be ok as well. As long as rancid has a domain account it can use, the username/pwd are specified in .cloginrc then it should be all ok?


Just wondering if anyone has set it up like this in the past? I think it should be all ok, just wanted to double check and see if there were any major gotchas.


Cheers,
Andy
_______________________________________________ Rancid-discuss mailing list Rancid-discuss at shrubbery.net http://www.shrubbery.net/mailman/listinfo.cgi/rancid-discuss 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/rancid-discuss/attachments/20120308/c311479b/attachment.html>