Best Radius or Tacacs+ program?

Morning everyone,
I would like to set up either a TACACS or RADIUS solution here. Wondering what other people have found to be the best server for either of these, preferably free if one exists.
Thanks

Ok I have freeRADIUS, it is installed and running. I can authenticate the test user. I set up the router with a few basic AAA commands. The router sends requests to the RADIUS server, however, I get a line saying:
Login incorrect: [testing/N!:\302\362}\204\307\214\337!\003\tc\302L] (from clien
t private-network-2 port 194 cli 172.16.101.202)
WARNING: Unprintable characters in the password. ? Double-check the shared se
cret on the server and the NAS!
Login incorrect: [testing/N!:\302\362}\204\307\214\337!\003\tc\302L] (from clien
t private-network-2 port 194 cli 172.16.101.202)
WARNING: Unprintable characters in the password. ? Double-check the shared se
cret on the server and the NAS!
The shared secret is just SECRET, password is password for testing purposes. Has anyone on here set up freeRADIUS correctly?

Similar Messages

Ucs radius versus tacacs

Greetings,
We are running UCS Manager 2.1(3c) and are currently using RADIUS authentication to an ACS4 server.
We are in the process of upgrading to ACS5.6 and my question is around the authentication and accounting protocols.
Q: Which is best, or suitable - RADIUS or TACACS?
I know in the past there have been limitations of both protocols for various functions. We have simple needs... 2 levels of RBAC - Full Read-Write access (Administrator as defined in local UCS parlance) and Read-Only (Operations as defined locally on UCS).
Given those parameters, would TACACS be suitable, and will that give sufficient accounting functionality?
Thanks in advance.
Reece...

I guess that is a case only with W2K3STD where number of radius/aaa clients are limited to 50 only.
NPS provides different functionality depending on the edition of Windows Server 2008 that you install:
Windows Server 2008 Enterprise and Windows Server 2008 Datacenter. These server editions include NPS. With NPS in Windows Server 2008 Enterprise and Windows Server 2008 Datacenter, you can configure an unlimited number of RADIUS clients and remote RADIUS server groups. In addition, you can configure a group of RADIUS clients by specifying an IP address range.
Windows Server 2008 Standard. This server edition includes NPS. With NPS in Windows Server 2008 Standard, you can configure a maximum of 50 RADIUS clients and a maximum of two remote RADIUS server groups. You can define a RADIUS client by using a fully qualified domain name or an IP address, but you cannot define groups of RADIUS clients by specifying an IP address range. If the fully qualified domain name of a RADIUS client resolves to multiple IP addresses, the NPS server uses the first IP address returned in the Domain Name System (DNS) query.
~BR
Jatin Katyal
**Do rate helpful posts**

What is the best IDE for database programming in java?

im just new to java, i have experience in powerbuilder and visual basic. Im looking for an IDE for JAVA Database Programming that have same ease of use of the GUI builder of visual basic and power of the Datawindow in Powerbuilder.
What is the best IDE for database programming in java?

hey sabre why not just help me? instead of posting
annoying replies. You want me to browse all the post
two weeks ago to find what im looking for. stoopsMost regulars to this forum find X-posting annoying. Since you are lazy and want me to search the posts of the last couple of week for you, I find you very annoying.

Purchasing new iMac (27 i5), what is best method to transfer programs/files/documents from 24" iMAC? What is the best method to remove personal data from OS?

Purchasing a new iMac (27 i5), what is the best method to transfer programs/files,documents from a 24" iMac?
What is the best method to remove personal data from the 24" iMac?

Use setup assistant which is offered when you setup your new Mac. It will transfer information from a Time Machine backup, Clone or another Mac.
It's best to do this during setup to avoid issues with duplicate IDs.
Regards

RADIUS or TACACS Server Recommendations

Can anyone point to a good, inexpensive RADIUS or TACACS server solution that runs on Windows? Cisco ACS is a bit more money than is wanted to part with at the moment.
Thanks in advance. All replies rated.

I guess that is a case only with W2K3STD where number of radius/aaa clients are limited to 50 only.
NPS provides different functionality depending on the edition of Windows Server 2008 that you install:
Windows Server 2008 Enterprise and Windows Server 2008 Datacenter. These server editions include NPS. With NPS in Windows Server 2008 Enterprise and Windows Server 2008 Datacenter, you can configure an unlimited number of RADIUS clients and remote RADIUS server groups. In addition, you can configure a group of RADIUS clients by specifying an IP address range.
Windows Server 2008 Standard. This server edition includes NPS. With NPS in Windows Server 2008 Standard, you can configure a maximum of 50 RADIUS clients and a maximum of two remote RADIUS server groups. You can define a RADIUS client by using a fully qualified domain name or an IP address, but you cannot define groups of RADIUS clients by specifying an IP address range. If the fully qualified domain name of a RADIUS client resolves to multiple IP addresses, the NPS server uses the first IP address returned in the Domain Name System (DNS) query.
~BR
Jatin Katyal
**Do rate helpful posts**

What is the best All in One program for picture and video editing?

Hello i am new to photoshop and would like to really make some fantastic photos and video for my family and friends. I want to add effects to video and Edit photos to the 10th degree. Can someone please recommend an Adobe program. Should i get CS4 extended should i get master suite? Also where can i watch Video Tutorials that start from the basic and lead to the complex. Thanks in advance

What is the best All in One program for picture and video editing?
There is no such thing. If there were, nobody would bother writing different applications. If you are primarily focused on still image editing and video, Adobe Production Premium is the way to go. You can find any number of tutorials just by searching Google and many good ones are linked from the Adobe help systems as well.
Mylenium

What is the best free video chat program is for my mac osx

I'm new to mac and need to find the best free video chat program.

You might want to take a look at Skype. "Best" chat I think is in the eye of the beholder in these cases.

What is the best money making java program?

what is the best money making java program?
any of them are in fact very "simple"? - say in fact can be develop by a middle- level programmer.

public class MoneyMaker {
   public static void main(String[] args) {
      while (true) {
         System.out.println("+-----------------------------------------------+");
         System.out.println("| 10        RESERVE BANK OF INDIA \"93T 872468\" |");
         System.out.println("|                                               |");
         System.out.println("|   ______                                   10 |");
         System.out.println("| /      \\             __          ____        |");
         System.out.println("| |      |        /| / \\        / __\\       |");
         System.out.println("| |      |         | |    |       0_o \\\\      |");
         System.out.println("| |      |         | |    |      /      ||     |");
         System.out.println("| |      |         | \\ /       `==    ||     |");
         System.out.println("| |      |        === **         \\    /       |");
         System.out.println("| |      |                        /\\--/        |");
         System.out.println("| \\______/                       /______   /\\ |");
         System.out.println("|                                           \\/ |");
         System.out.println("| \"93T 872468\"                                  |");
         System.out.println("+-----------------------------------------------+");
         System.out.println("");
}

Best Practice for Storing Program Config Data on Vista?

Hi Everyone,
I'm looking for recommendations as to where (and how) to best store program configuration data for a LV executable running under Vista. I need to store a number of things like window location, values of controls, etc. Under XP I just stored it right in the VIs own execution path. But under Vista, certain directories (such as C:\Program Files) are now restricted without administrator rights, so if my program is running from there, I dont think it'll be able to write its config file.
Also right now I'm just using the Write to Spreadsheet File block to store my variables. Does this sound alright or are these better suggestions?
Thanks!
Solved!
Go to Solution.

I fopund some stuff on microsoft page. Here the link and a short past from taht document:
http://www.microsoft.com/downloads/details.aspx?FamilyID=BA73B169-A648-49AF-BC5E-A2EEBB74C16B&displa...
Application settings that need to be
changed at run time should be stored in one of the following
locations:
 CSIDL_APPDATA
 CSIDL_LOCAL_APPDATA
 CSIDL_COMMON_APPDATA
Documents saved by the user should be
stored in the CSIDL_MYDOCUMENTS folder.
Can't tell you more as I have no Vista around to look for the CSILD stuff.
Felix
www.aescusoft.de
My latest community nugget on producer/consumer design
My current blog: A journey through uml

Best blu-ray authoring program?

Just got a project to produce a video and deliver a blu-ray replication master. This master will be used to replicate discs for retail, so I assume it will need AACS. Thanks ahead of time... Several questions:
What is the best program (mac or pc) to author a blu-ray disc with menus, multiple audio tracks, subtitles, 5.1 and stereo audio, the whole shebang?
Can the same program output it as a cmf file structure?
How exactly does AACS encryption work? (not the whole licensing fees thing, what I mean is - is it a program you run the final master through? Or is it a special file within the blu-ray master? I have no idea)

Just take a look at all the horror stories:
http://forums.support.roxio.com/index.php?showforum=120
I played with it for a day and was disgusted. I really feel bad for the chap who delivered an image for replcation without knowing what "encyrption keys" were. Now the guy looks like a jerk. Thats why I urge you to do some research and know about the technology and the tools indepth before you go out selling this kind of work. Since People beleive they have years of HD video and DVD experience, that they are immediately ready to offer BD authoring.
Not that its hard! Things like glass blowing, puppetry and brain surgery are HARD and take years to master! It just take a little time to get yourself familar with the technology, its caveats and the tools involved. Verification is also very important. Just because a disc passes an Eclipse test doesn't mean its a spec legal disc and you will have returns if enough discs are sent out.
Start with the free trial of Do Studio (no! Im begging you)...read their Wikis and the books I told you about. Thier support is the best and you will learn alot...i assure you!
Message was edited by: Eric Pautsch1
Message was edited by: Eric Pautsch1

Where is the best place to put programs to start on X/Openbox startup?

Hi,
There are several places to put programs to startup when you start X or a WM. I'm using Openbox and presently have placed these into my .xinitrc file, but I'm not sure this really the best place. Openbox has a autostart file, which sorta looks like a better bet.
Any suggestions would be great.
Thanks,
Jon

Hadn't heard of consolekit; it's not clear to me from looking at their website what it's supposed to be offering? Maybe after it matures more, the documentation will improve, and all will become clear.
When I used Openbox, I just launched everything such as conky from the Openbox autostart file. I guess if you had a weird set up such as some of your Openbox configs sitting on unmounted partitions, their mount commands would go in .xinitrc, otherwise autostart.sh seems better.
Just IMO of course, do what you want on your own machine :-)
Last edited by /dev/zero (2011-10-27 21:04:37)

Best free photoshop-like program?

Hi, I need to produce slides for a slideshow that will fill the 1024x768 screen resolution of a set of older G4 Macs (eMac, iMac flat-panel). What is the best freeware application to do this? I need to be able to save the slides as .jpeg’s.
I’ve tried wrestling with some of the programs that came installed on this Macbook, like Pages and that doesn’t really do the job. When I had my old Mac I would use Adobe Photoshop Elements 2.0 or Graphic Converter (for tracing the edges of an image in order to remove the background).
Any ideas? I’ve gone to the App Store but there are so many I don’t know where to start when I’ve got a limited time to do this.
Many thanks.

Does it have to be free? Photoshop Elements and Graphics Converter are both still around. Graphics Converter can even be tried out for free ("with few restrictions* and at your leisure until you decide to purchase").
If it has to be free, I understand that some users like Gimp.

[Solved] 'Best' way to install programs?

I was wondering what the arch Linux community thought the best way to install things is.
I was wondering if compiling things from source would be better in some cases then using Pacman, I'm sure I read that you prefer people to install from source, when I was reading the tex live wiki. Now I could have been wrong, read something wrong or just not understood.
I'm sure this makes the program faster, and makes me be able to install them to my every need, but then is updating and keeping them up to date problematic? Should I install OpenGL and mesa from source, and leave the rest like Firefox to Pacman?
I am new to Linux, and haven't compiled anything from source, and would like to know how to.
Last edited by Peilonrayz (2014-06-21 12:03:57)

Peilonrayz wrote:
There are two good ways to install TeX Live. One is to use pacman. The other is to use the upstream installer.
Can you please show me what you are referring to?
I didn't know about the TeX having it's own installer, it's just as I read this when I was installing it last time: `Installing TeX Live manually honors the Arch Way in that it gives you much more control and lets you understand the process.`
After being told about PKGBUILD, this makes much more sense as I read it as compile from source, rather then alternate ways like this.
The 'install manually' is referring to using upstream's installer. It is not talking about compiling the binaries from source.
For details of the options offered by upstream, see http://www.tug.org/texlive/. If you have a reasonable network connection and are not planning to install on more than a couple of machines, the network installer is probably the best option. The 'quick installation' instructions are useful but you will want to refer to parts of the full installation documentation as well if doing this for the first time.
I recommend accepting upstream's defaults for the most part. In particular, I recommend using the 'full' installation scheme unless you are short of disk space.
I also recommend *not* installing as root. This is also in line with upstream's recommendation. What I did was create a new user and group (texlive:texlive). As root, I also created the directory /usr/local/texlive and made sure it was owned by the texlive user. Then I logged in as that user to install. This works well. Neither the installer nor later use of the utilities can touch your home directory or system files. There is no downside to this - it is no less convenient than having the installation owned by root. So you gain a security benefit for no cost. (Or minimal cost: you have to create a single user and group, make one new directory and chmod that directory appropriately.)
# adjust options as desired
useradd -d /usr/local/texlive -m -g texlive -r -s /bin/sh texlive
Set a password for the new account, and check ownership and permissions on the new directory:
drwxr-xr-x 7 texlive texlive 4.0K Meh 26 02:14 .
Then log in as texlive and install.

Authenticating against RADIUS *AND* TACACS

G'day...
Toys:
Cisco Secure ACS 3.2
Cisco 1242 Access Points
I want to authenticate spectralink phones via LEAP (Radius Aironet) and IT staff logging onto the CLI via TACACS+, all off the same ACS Server.
The only way I have gotten this to work is to setup TWO Network Device Groups, and add the access point in TWICE (with different unique hostnames). One authenticating RADIUS, and the other profile authenticating TACACS.
Is this the right way to go about it? Why can't I pick two authentication methods under the one AAA Client profile?
Cheers,
Andrew.

Hi,
The AAA client hostname configured in Cisco Secure ACS is not required to match the hostname configured on a network device, you can assign any name. What is important is the IP Address to allow the device and ACS to communicate via each AAA protocol.
If your device need to use both TACACS+ and RADIUS to authenticate 2 different users, then your method is right. This is because a device with same name cannot use both AAA methods to authenticate users - different operation. You have to use 2 different names, but running on the same IP on both TACACS+ and RADIUS.
I am using the same approach to authenticate remote access clients and network admin in my Access Server.
Rgds,
AK

Best hard drive maintenance program for Leopard

Hello,
What software program (Prosoft's Drive Genius, Micromat's Techtool Pro or other)
available best maintains a healthy hard drive throughout its lifetime? I have read many good and bad things about each listed.
Frighteningly, I have read that hard drives, with data on it, that sit idle for longer than a year could have its data evaporate unless surface scans or other maintenance tasks are performed quarterly or so to maintain the drive's effectiveness. This is why I'm looking for a program that does this.
Thanks,
Jordan

Thanks for the Techtool Pro advice. Now here is the excerpt from the an engineering manager of a hard disk drive company:
"Magnetic signals recorded on a hard disk are designed to be refreshed periodically. If your hard disk stay on this happens automatically. However, if you store your projects to a removable hard disk drive, then store that hard drive on a shelf, unattached to a computer, those magnetic signals will fade over time...essentially, evaporating.
So.. in the interest of checking things out, simply reading every sector on a disk actually is preventative . If the controllerwithin the hard disk detects any marginal data in either the servo tracks or the data bits recorded on the surface, the controller will automatically rewrite the data to the sector. If it cannot, this block is mapped out, again, automatically, and a substitute data block will be mapped in. All modern disks to this for you today. A simple read cycle of every sector or data block is all that is neccessary.
So, the scanning is simply reading every sector of the disk surface. The act of copying all the files from one disk to another disk would almost accomplish the same thing. With this latter method, unused parts of the disk would not be read again.
As for duration, I would say that the disks could lose data if not used for a long period of time. Doing this surface scan every year or two is preventative. It is hard to define a point in time when a failure due to degraded media occurs. I do have drives here that have not been spun up for several years, and they are fine, but I have heard from many who do have issues after leaving the drive in storage for several years. Sometimes it is actual fade, sometimes it is power supply related, sometimes it is due to extremes in temperature or humidity.
Bottom line, revisiting your storage archives periodically is some assurance that what you have saved away is really still there."
What do you think about this one man's opinion about this issue?
Jordan

Best Radius or Tacacs+ program?

Similar Messages

Maybe you are looking for