From alan.mckinnon at gmail.com  Tue Sep  1 05:56:43 2015
From: alan.mckinnon at gmail.com (Alan McKinnon)
Date: Tue, 1 Sep 2015 07:56:43 +0200
Subject: [tac_plus] TACACS+ Client Support
In-Reply-To: <CAMm6ETLo0k+cXTf2uzVKKS6wLRE=fdEveFdFCRgF1Fp+1ZOa=g@mail.gmail.com>
References: <CAMm6ETLo0k+cXTf2uzVKKS6wLRE=fdEveFdFCRgF1Fp+1ZOa=g@mail.gmail.com>
Message-ID: <55E53E1B.1090708@gmail.com>

On 31/08/2015 22:49, Poonam Kumar wrote:
> Hi
> 
> I am totally a newbie to tacacs. I am searching for a Tacacs+ client.
> I was looking into the Gentoo portage and it uses your daemon.
> Do your code just supports the daemon (server)?
> 
> If it does support the client as well, are there any steps or user guide on
> how to set it up ?



That ebuild is the server only. There are no clients out there really.

For testing purposes I eventually went with quick and dirty perl scripts
that I wrote myself using a perl client library. I found the library
somewhere on the internet (it's not in portage, and no other distro
seemed to carry it either). I've since lost that library, but the google
may be able to find a download location for you


-- 
Alan McKinnon
alan.mckinnon at gmail.com


From allan316 at gmail.com  Sat Sep  5 12:11:08 2015
From: allan316 at gmail.com (Allan Pinto)
Date: Sat, 5 Sep 2015 17:41:08 +0530
Subject: [tac_plus] do_auth user and name question
Message-ID: <CADH6ZUSfxG3Udr5eyOV1+hOH0WFUtdT+viNk2RsA784-RsGWwA@mail.gmail.com>

Hi,
In the do_auth configuration line in tac_plus.conf, what the variable $user
and $name stand for.

-- 
Thanx and regd's.

Allan.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20150905/604d6af0/attachment.html>

From heas at shrubbery.net  Sat Sep  5 16:19:51 2015
From: heas at shrubbery.net (heasley)
Date: Sat, 5 Sep 2015 16:19:51 +0000
Subject: [tac_plus] do_auth user and name question
In-Reply-To: <CADH6ZUSfxG3Udr5eyOV1+hOH0WFUtdT+viNk2RsA784-RsGWwA@mail.gmail.com>
References: <CADH6ZUSfxG3Udr5eyOV1+hOH0WFUtdT+viNk2RsA784-RsGWwA@mail.gmail.com>
Message-ID: <20150905161951.GC18654@shrubbery.net>

Sat, Sep 05, 2015 at 05:41:08PM +0530, Allan Pinto:
> Hi,
> In the do_auth configuration line in tac_plus.conf, what the variable $user
> and $name stand for.

please see tac_plus.conf(5).

From allan316 at gmail.com  Sun Sep  6 05:09:14 2015
From: allan316 at gmail.com (Allan Pinto)
Date: Sun, 6 Sep 2015 10:39:14 +0530
Subject: [tac_plus] do_auth user and name question
In-Reply-To: <20150905161951.GC18654@shrubbery.net>
References: <CADH6ZUSfxG3Udr5eyOV1+hOH0WFUtdT+viNk2RsA784-RsGWwA@mail.gmail.com>
 <20150905161951.GC18654@shrubbery.net>
Message-ID: <CADH6ZUSdi1LaOu=hKW+2Ft0dS=tVm_qrZxAyP+p0kGEDhu4-WQ@mail.gmail.com>

thanks, got it.

On Sat, Sep 5, 2015 at 9:49 PM, heasley <heas at shrubbery.net> wrote:

> Sat, Sep 05, 2015 at 05:41:08PM +0530, Allan Pinto:
> > Hi,
> > In the do_auth configuration line in tac_plus.conf, what the variable
> $user
> > and $name stand for.
>
> please see tac_plus.conf(5).
>



-- 
Thanx and regd's.

Allan.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20150906/49a714fb/attachment.html>

From venkatesha.bhat at dimensiondata.com  Fri Sep 11 14:07:00 2015
From: venkatesha.bhat at dimensiondata.com (Venkatesha Bhat (CBU))
Date: Fri, 11 Sep 2015 14:07:00 +0000
Subject: [tac_plus] Dual Stack Support
Message-ID: <D22FA903-89B7-4194-81D9-10ED2BFDB623@itaas.dimensiondata.com>

Hi,

We are in process of testing IPv6 / V4 Dual stack for TACACS+. Could you please let us know if tacplus supports this?  We have installed in LAB but It listens only on IPV4 address. We have  tacacs+-F4.0.4.19 in LAB.


Thank you and Regards,


Venkatesha Bhat

Senior Network Engineer

Dimension Data

Customer Care Center: 1-800-664-9974

Cloud support: 1-866-637-6697

Mobile:  + 91 99800 15494

venkatesha.bhat at d<http://s.wisestamp.com/links?url=mailto%3Avinay.rangappa%40dimensiondata.com>imensiondata.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20150911/15bc609c/attachment.html>

From heas at shrubbery.net  Fri Sep 11 16:45:35 2015
From: heas at shrubbery.net (heasley)
Date: Fri, 11 Sep 2015 16:45:35 +0000
Subject: [tac_plus] Dual Stack Support
In-Reply-To: <D22FA903-89B7-4194-81D9-10ED2BFDB623@itaas.dimensiondata.com>
References: <D22FA903-89B7-4194-81D9-10ED2BFDB623@itaas.dimensiondata.com>
Message-ID: <20150911164535.GG62645@shrubbery.net>

Fri, Sep 11, 2015 at 02:07:00PM +0000, Venkatesha Bhat (CBU):
> Hi,
> 
> We are in process of testing IPv6 / V4 Dual stack for TACACS+. Could you please let us know if tacplus supports this?  We have installed in LAB but It listens only on IPV4 address. We have  tacacs+-F4.0.4.19 in LAB.

it should support it in areas besides connections from clients.  I do have
a patch from a user to add this support, but I have yet to find the time
to examine and test it.

also, please use F4.0.4.27a, not F4.0.4.19.

> 
> Thank you and Regards,
> 
> 
> Venkatesha Bhat
> 
> Senior Network Engineer
> 
> Dimension Data
> 
> Customer Care Center: 1-800-664-9974
> 
> Cloud support: 1-866-637-6697
> 
> Mobile:  + 91 99800 15494
> 
> venkatesha.bhat at d<http://s.wisestamp.com/links?url=mailto%3Avinay.rangappa%40dimensiondata.com>imensiondata.com
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20150911/15bc609c/attachment.html>
> _______________________________________________
> tac_plus mailing list
> tac_plus at shrubbery.net
> http://www.shrubbery.net/mailman/listinfo/tac_plus

From venkatesha.bhat at dimensiondata.com  Fri Sep 11 18:06:47 2015
From: venkatesha.bhat at dimensiondata.com (Venkatesha Bhat (CBU))
Date: Fri, 11 Sep 2015 18:06:47 +0000
Subject: [tac_plus] Dual Stack Support
In-Reply-To: <20150911164535.GG62645@shrubbery.net>
References: <D22FA903-89B7-4194-81D9-10ED2BFDB623@itaas.dimensiondata.com>
 <20150911164535.GG62645@shrubbery.net>
Message-ID: <BF49AC2B-9CEA-47CD-998C-FA8C86B943BA@itaas.dimensiondata.com>

Thank you . Upgrade to F4.0.4.27a from F4.0.4.19  will work with existing TACPLUS_config file we have now?



Venkatesha Bhat

Senior Network Engineer

Dimension Data

Customer Care Center: 1-800-664-9974

Cloud support: 1-866-637-6697

Mobile:  + 91 99800 15494

venkatesha.bhat at d<http://s.wisestamp.com/links?url=mailto%3Avinay.rangappa%40dimensiondata.com>imensiondata.com

From: heasley
Date: Friday, 11 September 2015 10:15 pm
To: Venktesha Bhat
Cc: "tac_plus at shrubbery.net<mailto:tac_plus at shrubbery.net>"
Subject: Re: [tac_plus] Dual Stack Support

F4.0.4.27a,
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.shrubbery.net/pipermail/tac_plus/attachments/20150911/743fb9b5/attachment.html>

From heas at shrubbery.net  Fri Sep 11 18:11:17 2015
From: heas at shrubbery.net (heasley)
Date: Fri, 11 Sep 2015 18:11:17 +0000
Subject: [tac_plus] Dual Stack Support
In-Reply-To: <BF49AC2B-9CEA-47CD-998C-FA8C86B943BA@itaas.dimensiondata.com>
References: <D22FA903-89B7-4194-81D9-10ED2BFDB623@itaas.dimensiondata.com>
 <20150911164535.GG62645@shrubbery.net>
 <BF49AC2B-9CEA-47CD-998C-FA8C86B943BA@itaas.dimensiondata.com>
Message-ID: <20150911181117.GK62645@shrubbery.net>

Fri, Sep 11, 2015 at 06:06:47PM +0000, Venkatesha Bhat (CBU):
> Thank you . Upgrade to F4.0.4.27a from F4.0.4.19  will work with existing TACPLUS_config file we have now?

yes; there are no backward-incompatible changes in the configuration format
that I recall.

From acruhl at gmail.com  Sat Sep 19 23:10:08 2015
From: acruhl at gmail.com (Andy Ruhl)
Date: Sat, 19 Sep 2015 16:10:08 -0700
Subject: [tac_plus] Dual Stack Support
In-Reply-To: <20150911181117.GK62645@shrubbery.net>
References: <D22FA903-89B7-4194-81D9-10ED2BFDB623@itaas.dimensiondata.com>
 <20150911164535.GG62645@shrubbery.net>
 <BF49AC2B-9CEA-47CD-998C-FA8C86B943BA@itaas.dimensiondata.com>
 <20150911181117.GK62645@shrubbery.net>
Message-ID: <CAJcb3fqkGpoVq9gYC0oNLYNbaxyjgVJAXY4Yxs+SQr3B-PsM1A@mail.gmail.com>

On Fri, Sep 11, 2015 at 11:11 AM, heasley <heas at shrubbery.net> wrote:
> Fri, Sep 11, 2015 at 06:06:47PM +0000, Venkatesha Bhat (CBU):
>> Thank you . Upgrade to F4.0.4.27a from F4.0.4.19  will work with existing TACPLUS_config file we have now?
>
> yes; there are no backward-incompatible changes in the configuration format
> that I recall.

2 things:

Why use F4.0.4.27a and not .28? We're using .28. I see that it's
called tacacs instead of tacacs+, what is the significance of that?

I would be willing to try the IPv6 patch. We're trying to reduce the
barriers to using IPv6 within our organization.

Andy

From heas at shrubbery.net  Mon Sep 21 15:55:05 2015
From: heas at shrubbery.net (heasley)
Date: Mon, 21 Sep 2015 15:55:05 +0000
Subject: [tac_plus] Dual Stack Support
In-Reply-To: <CAJcb3fqkGpoVq9gYC0oNLYNbaxyjgVJAXY4Yxs+SQr3B-PsM1A@mail.gmail.com>
References: <D22FA903-89B7-4194-81D9-10ED2BFDB623@itaas.dimensiondata.com>
 <20150911164535.GG62645@shrubbery.net>
 <BF49AC2B-9CEA-47CD-998C-FA8C86B943BA@itaas.dimensiondata.com>
 <20150911181117.GK62645@shrubbery.net>
 <CAJcb3fqkGpoVq9gYC0oNLYNbaxyjgVJAXY4Yxs+SQr3B-PsM1A@mail.gmail.com>
Message-ID: <20150921155505.GA32324@shrubbery.net>

Sat, Sep 19, 2015 at 04:10:08PM -0700, Andy Ruhl:
> On Fri, Sep 11, 2015 at 11:11 AM, heasley <heas at shrubbery.net> wrote:
> > Fri, Sep 11, 2015 at 06:06:47PM +0000, Venkatesha Bhat (CBU):
> >> Thank you . Upgrade to F4.0.4.27a from F4.0.4.19  will work with existing TACPLUS_config file we have now?
> >
> > yes; there are no backward-incompatible changes in the configuration format
> > that I recall.
> 
> 2 things:
> 
> Why use F4.0.4.27a and not .28? We're using .28. I see that it's
> called tacacs instead of tacacs+, what is the significance of that?

my error; 28 is better.

> I would be willing to try the IPv6 patch. We're trying to reduce the
> barriers to using IPv6 within our organization.

great; i'll get it together for trial.