[tac_plus] Re: Access directly to enable mode

[john heasley]

Mon, Apr 13, 2009 at 08:07:28AM +0200, Kiss Gabor (Bitman):
> > do you have a line for exec authorization, something like this:
> > 
> > aaa authorization exec default group tacacs+
> > 
> > I believe you need this otherwise your priv level will not take effect.
> 
> Yes we have:
> aaa authorization exec default group tacacs+ if-authenticated 
> 
> Sorry for late answer. Your mail was delivered today.
> 
> Gabor
> _______________________________________________
> tac_plus mailing list
> tac_plus at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo.cgi/tac_plus

start by using tac_plus authorization debugging to ensure that your device
really is attempting authorization.  you can also use that to debug any
authorization failures.