[tac_plus] TACACS+ with Aruba Wireless Controller

Alan McKinnon alan.mckinnon at gmail.com
Tue Nov 30 21:59:54 UTC 2010


Apparently, though unproven, at 21:21 on Monday 29 November 2010, john heasley 
did opine thusly:

> Mon, Nov 29, 2010 at 08:32:12AM -1000, Steven Goto:
> > Hi tac_plus,
> > 
> > I've been trying to get our Aruba wireless controller running ArubaOS
> > 3.4.2.5 to work with the Shrubbery Networks TACACS+ server for a number
> > of weeks now;  I've been going back and forth with Aruba Support but I
> > think I've gone as far as I can go with them since they have no
> > solution.  TACACS+ accounting works but the authentication doesn't;
> > Wireshark captures show the authentication failing and there are no
> > service names or role definitions (like for AirWave AMP from tacacs.org,
> > which we are successfully using) that Aruba is aware of.  Are there any
> > tips you may have for getting TACACS+ authentication to work with the
> > Aruba wireless controller?  Thanks!
> 
> try with -d 16
> 
> #define DEBUG_PARSE_FLAG     2
> #define DEBUG_FORK_FLAG      4
> #define DEBUG_AUTHOR_FLAG    8
> #define DEBUG_AUTHEN_FLAG    16
> #define DEBUG_PASSWD_FLAG    32
> #define DEBUG_ACCT_FLAG      64
> #define DEBUG_CONFIG_FLAG    128
> #define DEBUG_PACKET_FLAG    256
> #define DEBUG_HEX_FLAG       512
> #define DEBUG_MD5_HASH_FLAG  1024
> #define DEBUG_XOR_FLAG       2048
> #define DEBUG_CLEAN_FLAG     4096
> #define DEBUG_SUBST_FLAG     8192
> #define DEBUG_PROXY_FLAG     16384
> #define DEBUG_MAXSESS_FLAG   32768
> #define DEBUG_LOCK_FLAG      65536


This list is good info. Can it be added to the next man page in the next 
release please? The current man page has only a subset, (or maybe it's the 
subset of values that are actually useful, I'm not sure which)

-- 
alan dot mckinnon at gmail dot com


More information about the tac_plus mailing list