Re: What are you guys doing for tacacs+ in 2026?

[Jonathan Lassoff via NANOG <nanog () lists nanog org>]

tcp_ wrappers is pretty dated.

Maybe move to using iptables/netfilter?

In terms of newer software for TACACS+, Tacquito is decent:
https://github.com/facebookincubator/tacquito

Cheers,
jof

On Tue, Feb 10, 2026 at 07:08 Drew Weaver via NANOG <nanog () lists nanog org>
wrote:

> Howdy.
>
> I imagine that this is an issue that has come up before but I am having an
> issue finding how anyone else handled it. (Unless everyone is still running
> tac_plus on RHEL7)
>
> I'm trying to migrate some tac plus instances to a new Linux distro that
> apparently doesn't support tcp_wrappers and I'm having trouble both
> compiling it and making an RPM for it.
>
> I've tried both the original https://www.shrubbery.net/tac_plus/ and the
> now sadly abandoned Facebook version https://github.com/facebook/tac_plus
>
> If there is another tacacs+ solution everyone has moved to that I am
> unaware of please enlighten me.
>
> Thank you,
> -Drew
>
>
>
> _______________________________________________
> NANOG mailing list
>
> https://lists.nanog.org/archives/list/nanog () lists nanog org/message/REGURCJX4QAEZOEORGRO7TLFKTY36QPW/
_______________________________________________
NANOG mailing list 
https://lists.nanog.org/archives/list/nanog () lists nanog org/message/2LNQ3TIBWVPELN422GLWUYMUTDA6WHCF/