http://blogs.sackheads.org/tacacsplus Casting Light on the Dark Art of TACACS+ Wed, 05 Nov 2008 12:52:45 +0000 http://backend.userland.com/rss092 en Yet another new service definition (in a group or user stanza). role should be set to the role definition name you created on the AMP. service = AMP { role = "AMP Administration" } http://blogs.sackheads.org/tacacsplus/2008/11/05/aruba-airwave-management-platform/ Guy Morrell at the University of Oxford provides this snippet for Cisco WCS   service = ciscowlc { role1 = ALL } http://blogs.sackheads.org/tacacsplus/2008/11/04/cisco-wireless-control-system/ This snippet is tested against “recent” Shrubbery tac_plus daemons as of the date of the post. Searching for ACE and TACACS or similar gets confusing because of the RSA ACE server.  Good job Cisco Cisco Application Control Engine modules are really separate devices from the “mother” switch, only suckling power ... http://blogs.sackheads.org/tacacsplus/2008/10/16/managing-cisco-ace-application-control-engine-modules-with-tacacs/ This snippet is tested against “recent” Shrubbery tac_plus daemons as of the date of the post.   ScreenOS 6.0+ users may have noticed that you can now configure TACACS+ servers to authenticate admin users. I’ll skip over the details, except to say that as of 6.1.0r3, failover isn’t working to either ... http://blogs.sackheads.org/tacacsplus/2008/10/16/managing-screenos-firewalls-with-tacacs/