[tac_plus] TACACS+ with Aruba Wireless Controller
Alan McKinnon
alan.mckinnon at gmail.com
Tue Nov 30 21:59:54 UTC 2010
Apparently, though unproven, at 21:21 on Monday 29 November 2010, john heasley
did opine thusly:
> Mon, Nov 29, 2010 at 08:32:12AM -1000, Steven Goto:
> > Hi tac_plus,
> >
> > I've been trying to get our Aruba wireless controller running ArubaOS
> > 3.4.2.5 to work with the Shrubbery Networks TACACS+ server for a number
> > of weeks now; I've been going back and forth with Aruba Support but I
> > think I've gone as far as I can go with them since they have no
> > solution. TACACS+ accounting works but the authentication doesn't;
> > Wireshark captures show the authentication failing and there are no
> > service names or role definitions (like for AirWave AMP from tacacs.org,
> > which we are successfully using) that Aruba is aware of. Are there any
> > tips you may have for getting TACACS+ authentication to work with the
> > Aruba wireless controller? Thanks!
>
> try with -d 16
>
> #define DEBUG_PARSE_FLAG 2
> #define DEBUG_FORK_FLAG 4
> #define DEBUG_AUTHOR_FLAG 8
> #define DEBUG_AUTHEN_FLAG 16
> #define DEBUG_PASSWD_FLAG 32
> #define DEBUG_ACCT_FLAG 64
> #define DEBUG_CONFIG_FLAG 128
> #define DEBUG_PACKET_FLAG 256
> #define DEBUG_HEX_FLAG 512
> #define DEBUG_MD5_HASH_FLAG 1024
> #define DEBUG_XOR_FLAG 2048
> #define DEBUG_CLEAN_FLAG 4096
> #define DEBUG_SUBST_FLAG 8192
> #define DEBUG_PROXY_FLAG 16384
> #define DEBUG_MAXSESS_FLAG 32768
> #define DEBUG_LOCK_FLAG 65536
This list is good info. Can it be added to the next man page in the next
release please? The current man page has only a subset, (or maybe it's the
subset of values that are actually useful, I'm not sure which)
--
alan dot mckinnon at gmail dot com
More information about the tac_plus
mailing list