How do you set up tacacs+ for exec authentication when using WDS???

I set up tacacs+ authorization on the WDS and it works great. When I tried to set it up on the infrastructure ap1200 I am unable to login unless it is as a locally defined user. I have attached some config info from the infrastructure AP Version 12.2(15)JA. I am using ACS 3.3
aaa new-model
aaa group server tacacs+ tac_admin
server 10.2.57.82
aaa group server tacacs+ tac_acct
server 10.2.57.82
aaa authorization exec default local group tac_admin
aaa authorization exec ap_exec group tac_admin local
aaa accounting exec default start-stop group tacacs+ group tac_admin
aaa session-id common
dot11 aaa csid unformatted
dot11 network-map
dot11 arp-cache optional
tacacs-server host 10.2.57.82 single-connection port 49 key a-!kGB9qr0H
tacacs-server directed-request
wlccp ap username SetrusAdrU password 7 150B3508162B6605176A662303
line con 0
line vty 5 15
authorization exec ap_exec
I am not receiving any passed or failed logs on the ACS or in the TACACS administration log. Any help would be appreciated.

Tacacs is working. I added the following lines to the configuration attached to the first post:
============================
aaa authentication login ap_exec_login group tac_admin local
============================
line vty 0 4
authorization exec ap_exec
login authentication ap_exec_login
line vty 5 15
authorization exec ap_exec
login authentication ap_exec_login
=============================
The TACACS+ Accounting, Authorization and Authentication works great.

Similar Messages

  • How do you set default programs for all users when deploying Windows 8.1?

    I have my Windows 8.1 image set up the way I want including the start screen, theme, etc. But how can I set the default programs for all users. Most of out computers are non-touch and I want the desktop apps (e.g. Windows Photo Viewer), not the store apps
    to be the default for opening pictures, videos, etc. Can that be done?

    Great question, this has been bugging me too!
    So, I did some research by using "Set Default Programs" app in Windows 8. Then I ran the super ProcMon.exe tool from Sysinternals.com <Thanks Mark!>
    After filtering out the junk, I could see some *interesting* writes to the registry:
    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.jpg\UserChoice]
    "Hash"="57y87/ogggU="
    "ProgId"="PhotoViewer.FileAssoc.Jpeg"
    But the "Hash" part had me concerned. I did some internet searching for the hash, and came across a post and a pointer to a blog with some answers.  This is both good news and bad.
    Background:
    One of the problems with Windows XP is that any program can come in and party on the entire system. No, I don't want you to put a shortcut on the desktop, install a crappy IE Toolbar, and change the default file association for *.jpg files to your app, I
    just wanted to play a stupid game. Since Windows 7, Microsoft has been attempting to block that functionality from the stupid applications, and give them back to the user. Take note of the last line in the ITaskbarList3 interface:
       Applications cannot programmatically pin themselves to the taskbar. That functionality is reserved strictly for the user.
    Of course that sucks for us IT Pros who may wish to create *default* working environments for corporate images, but there are some tricks we can do.
    Solution:
    This blog appears to have the answer:
    http://blogs.technet.com/b/mrmlcgn/archive/2013/02/26/windows-8-associate-a-file-type-or-protocol-with-a-specific-app-using-a-gpo-e-g-default-mail-client-for-mailto-protocol.aspx
    New for Windows 8 is a dism command: /Get-DefaultAppAssociations that allows you to export a control case from a known good computer. Microsoft the supports importing the exported xml file via GPO. For example, before I changed the file association, .AVI
    was pointing to the Modern App, after the change the /export-DefaultAppAssociations shows change to the new app:
    From:
    <Association Identifier=".avi" ProgId="AppXhjhjmgrfm2d7rd026az898dy2p1pcsyt" ApplicationName="Video" />
    To:
    <Association Identifier=".avi" ProgId="VLC.avi" ApplicationName="VLC media player" />
    I am still doing some investigation to see if a GPO is required, or if you can inject the association into a local user account. Also, if you do have some Modern Windows 8 Touch Tablets, it would recomend keeping most of the Modern App defaults in place,
    perhaps seperate GPO's for Desktops/Laptops vs Tablets?
    -k
    Keith Garner - keithga.wordpress.com

  • How do you set the duration for multiple stills in iMovie 2013?

    How do you set the duration for multiple stills in iMovie 2013?
    Before upgrading to the latest version of iMovie last month, I was able to set the duation of all of the stills included in an iMovie project at one time by clicking the apply to all still box in the adjustment pop up. That option is no longer apparent. If it is available I cannot find it, and I have tried several different ways to accomplish it. I have tried the iMovie help section and can find nothing to help.
    Apple, do I really have to adjust close to 500 pictures to a 5 second duration individually???
    REALLY??!!

    ...why wouldnt people want that level of accuracy when animating, especially when working to music at a specific duration?
    Because often people are animating to words or beats in the music.  Music is rarely performed with a computer-precise beat and tempo.  Musicians aren't robots: they swing the beat sometimes.  They use rubato.  They change tempo.  They change time signatures.  As a result, you have to FIND those words and beats.  It's not a situation where you can say, "There!  I've found the duration of one beat!  Now it's easy to find the rest of them!" 
    If you try it, you will be very disappointed.
    Try finding the precise end of a piece of music that fades or ends on a big chord with a ring-out.  You'll see that it's trial-and-error: what's the point where it becomes inaudible?  It depends on how high your speakers are turned up.  You might have them way up, you set an end point for the layer, and then you do a RAM Preview at a more reasonable volume.  You might say, "Hey!  The music ends before the layer ends!"...  but you KNOW you set the layer's out point when the audio file goes silent.
    AE has layer markers that can be used on an audio layer to mark beats, words, etc. They come in very handy.
    I guess it comes down to this: because AE can do so much different stuff, there are very few automated procedures.  Oh, Adobe tries with effects that convert audio levels to keyframes, but they're not 100% reliable... especially on something like a capella choral works.  For true accuracy, you need  find the timings yourself. 
    If you want something simpler, try a different application. But be prepared for lower level of accuracy.

  • How do you set the time for this forum??? Not in nerd pleas

    how do you set the time for this forum?

    There were problems with the correct time display for postings, and based on another recent post this doesn't seem to have been fixed. My advice... don't worry about it.

  • How can you set a ringtone for unknown numbers

    How can you set a ringtone for unknown numbers?

    You can set up each one of your contacts with a ringtone and use the default for all other unknown numbers. There is no way to set up a ringtone for unknown numbers.

  • HT4970 How do you set a reminder for only you when you are also sharing?

    How do you set a reminder for only you when you are also sharing? I want to share the grocery list with my wife but she don't want to be reminded for me taking my medicine.

    Hey Gin-from-SC!
    Here is an article that can show you how to set a time and date alert for your reminders when you create them:
    iCloud: Create, edit, and delete reminders
    http://support.apple.com/kb/PH12088
    Take care, and thanks for visiting the Apple Support Communities.
    Cheers,
    Braden

  • Pse 11: How do you transfer a picture into a puzzle when using PSE 11?

    How do you transfer a picture into a puzzle when using PSE 11?

    Hello,
    because I work with PS CC I will give you some links, the first program is expressly made for PSE 11:
    PSE11: http://www.panosfx.com/commercial-free-photoshop-actions/puzzle-effects
    Here a Adobe Plugin:
    Adobe - Photoshop : For Windows : Photoshop CS5 Optional Plugins
    These links here may act as examples and maybe you cane use them too
    Create Jigsaw Puzzle Effect for Photos - Photoshop Tutorials - CSSCreme.com
    http://www.avbros.com/puzzlepro/index.html
    https://creative.adobe.com/addons/products/1069#.U_dkQ2NQQs0
    http://www.photoshopessentials.com/photo-effects/photoshop-puzzle/
    http://www.obsidiandawn.com/jigsaw-puzzle-pieces-photoshop-gimp-brushes
    Good luck!
    Hans-Günter

  • How do you stop needing to verify email password when using yahoo.att with Mac Mail

    How do you stop needing to verify email password when using yahoo.att with Mac Mail?

    Nevermind, I fixed it (I think).  I went into Settings | Accounts & Sync and found Yahoo at the bottom of the list (alphabetically).  I selected it and it had an optiion to delete the account, which I did.

  • How do you set repeat events for a given day of the week

    How do you set a repeat event in calender for a given day of the month.  Expample 3rd Wednesday each month?

    Have you read the app store guidelines yet?
    App Store Review Guidelines:
    http://developer.apple.com/appstore/resources/approval/guidelines.html
    Don't go on what you've seen in the store - for every example you spot, there are hundreds that didn't make it in.
    As well, Apple is tightening up on reviews, etc.
    Loads of discussion on this in the iOS Dev Forums, BTW

  • How do you set up your Configuration Manager client when Imaging?

    OK everyone we got an issue that we need to take care of sorry if this seems like a dumb question but we cant seem to make this work.  How do you set your configuration manager client when you deploy your image(s)?  I created package and pointed
    it right to the config manager install directory just like the recommended one for USMT but it does not seem to work.  I also tried to leave it blank but it appears to be mandatory.. So my question how do YOU get it to work for your areas?
    Thanks

    that might be the problem I dont see a "Microsoft Configuration Manager Client 5.0 All" anywhere. We threw something together that points to:
    \\Server.Domain.com\SCCM_Install\SMSSETUP\CLIENT
    What is happening is this.
    Have a task to deploy Windows natively to the workstation
    Drop applications to the workstation
    do updates
    capture back to server
    All it does is 
    Drop the OS down
    copy the Agent files
    join to the domain
    reboot
    sit
    sit 
    and sit

  • How do you set a password for a text document

    I was wondering, does anyone know how to set a password for a text document for example, if you have your passwords saved on a text document, how can you get a password to retreive them.

    How about Dashcrypt?
    http://www.dashboardwidgets.com/showcase/details.php?wid=588

  • How do you set the priority for active windows?

    When I open a download file for an application from Safari, it opens behind the active window.  How do I set the priority so that the download file window opens on top of the active window so I don't have to move a window to find it?

    How are you opening it?  From the "download" list?

  • How do you set up tempo for compound time signatures? ie if I have a song that starts in 4/4 then goes to 12/8 but I want the same tempo

    Logic doesn't let you set a bpm based on a compound time signature
    So for 12/8 it gives the tempo for the 8s not for the dotted 4s
    In order to get Logic to deal with this, I had to manually increase the tempo from say 90 for 4/4 to 135 for 12/8
    Am I missing something?
    Thank you
    David

    Hi
    Yep... Logic's tempo display in the Transport etc. is always based on 1/4 notes (crochets), regardless of time signature.
    You can get the "correct" tempo to display in the Score by using "dotted crochet=" or "quaver=" symbols, which may help with the necessary tempo calculations.
    HTH
    CCT

  • How do you set up spell check on an imac using google chrome so it gives you the suggested spelling

    I am on an imac using Yosemite 10.10.2 and using Google Chrome mail. How can I set spell check to show wrong spelling and suggest correct spelling?

    If no one here knows then please check on Google's website, even better why not Google it?

  • How can you provide datalevel security on perticular user when using

    hi all
    how can we proved data level security for the single user when using external table authentication,
    again we have crated one more group in rpd and we have assigned user to that group,
    so ,is there any other way to do it????
    Thanks
    sreedhar

    Hi,
    If its is to restrict that user to view some data,then no need to place him in a separate group.Can achieve this...
    High priority is for restriction.
    Lets take group-Test with two users-test1,test2.These two users are under Test group.
    I applied data level security for only one user test1(restricted him to view market not equal to Central Region) but didn't apply data level security for test2.
    Now i added the group to presentation catalog and gave permission to dashboard showing Market report.
    When test1 logs in he can see all markets except Central Region,where as test2 logs in he can view all regions including Central Region.
    Here Test group is having full access so,test2 can view all regions but test1 user is restricted for some value and its working fine.
    If you want apply data level security to user to not view some data,then you can maintain that user in a group with many other users and achieve it.Above example shows it.
    If its is to restrict the whole group to view dashboard and make a single user in the group to view some data in the dashboard then its not possible(priority is for restriction) in this way,in this case its better to create that a new group to that user and assign him.
    Regards,
    Srikanth

Maybe you are looking for