Tacacs user authentication not working

Question

I am trying to setup my AP to use tacacs+ running on Cisco ACS to authenticate users logging into the AP with no success.
Here is the AP config.  At the end of the config you can see the debugs that are running and the output of those when I try to login to the unit with the web browser.
version 12.4
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
hostname ap1250
aaa new-model
aaa group server radius rad_eap
aaa group server radius rad_mac
aaa group server radius rad_acct
aaa group server radius rad_admin
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
aaa group server tacacs+ tac_admin
server 192.168.1.25
cache expiry 1
cache authorization profile admin_cache
cache authentication profile admin_cache
aaa group server radius rad_pmip
aaa group server radius dummy
aaa authentication login default local cache tac_admin group tac_admin
aaa authentication login eap_methods group rad_eap
aaa authentication login mac_methods local
aaa authorization exec default local cache tac_admin group tac_admin
aaa accounting network acct_methods start-stop group rad_acct
aaa cache profile admin_cache
all
aaa session-id common
power inline negotiation prestandard source
username seth privilege 15 password 7 02050D480809
username Cisco privilege 15 password 7 072C285F4D06
bridge irb
interface Dot11Radio0
no ip address
no ip route-cache
shutdown
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface Dot11Radio1
no ip address
no ip route-cache
shutdown
dfs band 3 block
channel dfs
station-role root
bridge-group 1
bridge-group 1 subscriber-loop-control
bridge-group 1 block-unknown-source
no bridge-group 1 source-learning
no bridge-group 1 unicast-flooding
bridge-group 1 spanning-disabled
interface GigabitEthernet0
no ip address
no ip route-cache
duplex auto
speed auto
bridge-group 1
no bridge-group 1 source-learning
bridge-group 1 spanning-disabled
interface BVI1
ip address 192.168.1.60 255.255.255.0
no ip route-cache
ip http server
ip http authentication aaa
no ip http secure-server
ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
ip radius source-interface BVI1
tacacs-server host 192.168.1.25 port 49 key 7 00071A150754
radius-server attribute 32 include-in-access-req format %h
radius-server vsa send accounting
bridge 1 route ip
line con 0
line vty 0 4
end
ap1250#  sho debug
General OS:
  TACACS+ authentication debugging is on
  TACACS+ authorization debugging is on
  AAA Authentication debugging is on
ap1250#
*Mar  1 00:25:56.239: AAA/BIND(00000024): Bind i/f
*Mar  1 00:25:56.243: AAA/AUTHEN/LOGIN (00000024): Pick method list 'default'

Answer 1

The radio's are shut down as I do not have an SSID configured on the unit either at this time.  I was merely trying to get the setup for login authentication.
I did also have a local user name and password defined but was unable to use that login either.
I tried the config on another AP and got it to work by changing the statement to read
aaa authentication login default local group tac_admin
This was done by not checking the box for caching.
Seth