Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:




firewall-wizards logo Firewall Wizards mailing list archives

need help using AAA server
From: "shadow floating" <nadengine () googlemail com>
Date: Fri, 29 Feb 2008 14:11:46 +0200

Hi all,
i really need help in this,
i'm trying to authenticate and authorize a user account into a cisco
router via cisco ACS server
the authentication is fine but i can not make the user land directly
to enable level 10 without typing the enable password for that level

on the router:
aaa authorization exec commands 10 Level10 group tacacs+
line vty 0 4
      authorization exec commands 10 Level10

on the acs server
Advanced TACACS+ Settings
 TACACS+ Enable Control:
   Max Privilege for any AAA Client  10
 Tacacs+ settings :
    Shell exec
    privilege level=10
Shell Command Authorization Set:
    Assign a Shell Command Authorization Set for any network device (MyCommands)
TACACS+ Enable Password :
    Use CiscoSecure PAP password

i really don't know where is the problem and every time the user logs
in...he lands in level 1
appreciating any help or hint

thanks alot
Nad
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards


  By Date           By Thread  

Current thread:
  • need help using AAA server shadow floating (Feb 29)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]